{"type":"bundle","id":"bundle--52115a80-74b9-5aa6-85cb-9ddfb6e17a48","objects":[{"type":"intrusion-set","id":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"APT31","aliases":["Zirconium","Red keres","JUDGMENT PANDA","Violet Typhoon","G0128","TA412","BRONZE VINEWOOD"],"first_seen":"2013-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt31"},{"source_name":"mitre-attack","external_id":"G0128","url":"https://attack.mitre.org/groups/G0128/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Bidirectional Communication","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102.002","url":"https://attack.mitre.org/techniques/T1102/002"}]},{"type":"relationship","id":"relationship--2845e3fc-100d-518e-801f-903a2c6c174e","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--54df49f1-527d-56ab-b837-e35ba7de521b"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--a5d938ef-dce5-53b2-a514-ca34528b1605","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Exfiltration Over C2 Channel","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1041","url":"https://attack.mitre.org/techniques/T1041"}]},{"type":"relationship","id":"relationship--dbcb5a87-5685-5e82-9677-5b5b650a1f44","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--1ba07102-97a3-5123-afeb-4a6b98b42d7d"},{"type":"attack-pattern","id":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Spearphishing Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.002","url":"https://attack.mitre.org/techniques/T1566/002"}]},{"type":"relationship","id":"relationship--7b245ad8-4ed3-5eab-bd0f-68b2ae2e241b","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd"},{"type":"attack-pattern","id":"attack-pattern--decd079b-4b2c-56de-91c8-975f7ab7393c","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Msiexec","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.007","url":"https://attack.mitre.org/techniques/T1218/007"}]},{"type":"relationship","id":"relationship--299b92ec-4591-51b5-80a1-6550da301a00","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--decd079b-4b2c-56de-91c8-975f7ab7393c"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--1fd3968a-9529-587f-ab27-55437c7800df","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--1b59a8f2-784a-5c11-9754-599f71f2dbe8","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Python","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.006","url":"https://attack.mitre.org/techniques/T1059/006"}]},{"type":"relationship","id":"relationship--ea7c2cd9-05e1-50f5-bbc7-8b8fd8b23114","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--1b59a8f2-784a-5c11-9754-599f71f2dbe8"},{"type":"attack-pattern","id":"attack-pattern--e52e2304-f280-5d73-9850-2a7a5b37727a","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Masquerading","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036","url":"https://attack.mitre.org/techniques/T1036"}]},{"type":"relationship","id":"relationship--a7e7a10c-f5d0-5ca5-a639-d9376c5dc5b1","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--e52e2304-f280-5d73-9850-2a7a5b37727a"},{"type":"attack-pattern","id":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Credentials from Web Browsers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.003","url":"https://attack.mitre.org/techniques/T1555/003"}]},{"type":"relationship","id":"relationship--9498085d-1f9f-514e-9b5e-b4e11afc99c9","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--8c1b4f1a-19a4-568f-bfed-99053af4de2e","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Exfiltration to Cloud Storage","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Exfiltration"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1567.002","url":"https://attack.mitre.org/techniques/T1567/002"}]},{"type":"relationship","id":"relationship--14d6c01c-d917-52bd-a99d-b1e117f5080c","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--49d7248e-1d9a-57f2-9fd0-72c06ad01221"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--e0950a59-e282-561a-b625-09a67ad66960","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--8c626bca-7d35-5166-bdd7-a35b89cd973d","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Exploitation for Privilege Escalation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Privilege Escalation"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1068","url":"https://attack.mitre.org/techniques/T1068"}]},{"type":"relationship","id":"relationship--dfbef7ff-4a95-5f35-988d-ec50bd32cd45","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--8c626bca-7d35-5166-bdd7-a35b89cd973d"},{"type":"attack-pattern","id":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Phishing for Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1598","url":"https://attack.mitre.org/techniques/T1598"}]},{"type":"relationship","id":"relationship--3d044f1d-3b56-5472-b9b0-d83f3151aec7","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f"},{"type":"attack-pattern","id":"attack-pattern--173d4a21-d769-5268-ab41-8e1ab73cfa19","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Hide Infrastructure","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1665","url":"https://attack.mitre.org/techniques/T1665"}]},{"type":"relationship","id":"relationship--b1967665-d18b-57a3-8d36-e5cb9fd9f389","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--173d4a21-d769-5268-ab41-8e1ab73cfa19"},{"type":"attack-pattern","id":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Masquerade Task or Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.004","url":"https://attack.mitre.org/techniques/T1036/004"}]},{"type":"relationship","id":"relationship--2718b69a-1fec-5f2a-8c49-d506c02df27a","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--9fd9986d-f7fe-50c9-aa92-2465c0988b70"},{"type":"attack-pattern","id":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Malicious Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.001","url":"https://attack.mitre.org/techniques/T1204/001"}]},{"type":"relationship","id":"relationship--d97b304c-75fc-534c-a5de-3109652dc40d","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc"},{"type":"attack-pattern","id":"attack-pattern--ea08d1dc-9cbf-5a71-b1d6-79749217bb8e","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"System Time Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1124","url":"https://attack.mitre.org/techniques/T1124"}]},{"type":"relationship","id":"relationship--4f9798ba-943c-5e6e-89f9-9f10f3078458","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--ea08d1dc-9cbf-5a71-b1d6-79749217bb8e"},{"type":"attack-pattern","id":"attack-pattern--9f7c0857-0baa-5755-b5ec-486a7e742002","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Multi-hop Proxy","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1090.003","url":"https://attack.mitre.org/techniques/T1090/003"}]},{"type":"relationship","id":"relationship--48eb09d2-5433-5ddc-a9e9-b425f93ab289","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--9f7c0857-0baa-5755-b5ec-486a7e742002"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--97b337f7-7516-546c-baa2-008a618e1f5e","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--1d523d04-c887-53e2-9090-24cd5c2641dd","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Web Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.006","url":"https://attack.mitre.org/techniques/T1583/006"}]},{"type":"relationship","id":"relationship--c3f9734f-6641-5b71-a6a3-1456c597e399","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--1d523d04-c887-53e2-9090-24cd5c2641dd"},{"type":"attack-pattern","id":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Query Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1012","url":"https://attack.mitre.org/techniques/T1012"}]},{"type":"relationship","id":"relationship--e20adc65-b067-5ae1-9fd9-cc0727861bf4","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--7e7f2426-c693-5d79-ba21-1e42372901bb"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--ceaab433-e770-5de0-94e2-b2ac1c0215a1","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Software Packing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.002","url":"https://attack.mitre.org/techniques/T1027/002"}]},{"type":"relationship","id":"relationship--7098d34d-884f-53e3-a14b-f61e994de4b1","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"uses","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--4bf43308-4741-5b14-baf7-4763cc233f74","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"targets","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--6a017eaa-7df9-5500-bb19-8e0c05be5439","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"targets","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--61a56adf-7f12-5e96-b6c9-0cabef6c6315","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Myanmar","country":"MM","region":"asia"},{"type":"relationship","id":"relationship--54944cde-d314-5a83-8254-6d385cd803e1","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"targets","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"location--61a56adf-7f12-5e96-b6c9-0cabef6c6315"},{"type":"location","id":"location--e6a15e3d-a6f4-57b1-8ecb-a2a326fbe2f4","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Mongolia","country":"MN","region":"asia"},{"type":"relationship","id":"relationship--9d993e57-3c74-54ea-ad85-32f0a040e9c5","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"targets","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"location--e6a15e3d-a6f4-57b1-8ecb-a2a326fbe2f4"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--b39acd96-cfd3-556d-9c8f-1a01752815e3","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"targets","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--9f80b2df-f948-518c-a45a-ab4fd4584690","spec_version":"2.1","created":"2026-05-20T09:50:15.029595+00:00","modified":"2026-07-29T07:05:25.88+00:00","relationship_type":"targets","source_ref":"intrusion-set--16de3930-a349-5edb-a3d1-c124560ba02c","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}