{"type":"bundle","id":"bundle--3c71dc74-5e87-5f28-abe5-e4dccf71f6bb","objects":[{"type":"intrusion-set","id":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"APT38","description":"DPRK financial-heist cluster attributed to the Reconnaissance General Bureau.","aliases":["CageyChameleon","Bluenoroff","Sapphire Sleet","BeagleBoyz","COPERNICIUM","STARDUST CHOLLIMA","G0082","TA444","NICKEL GLADSTONE"],"first_seen":"2014-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt38"},{"source_name":"mitre-attack","external_id":"G0082","url":"https://attack.mitre.org/groups/G0082/"}],"labels":["nation-state","esp","fin"]},{"type":"attack-pattern","id":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Data from Local System","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1005","url":"https://attack.mitre.org/techniques/T1005"}]},{"type":"relationship","id":"relationship--63eb7040-8c29-586f-b199-5331eb454586","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--83208c41-e2b1-5fb5-927e-0a1ec6b2510e"},{"type":"attack-pattern","id":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Software Packing","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027.002","url":"https://attack.mitre.org/techniques/T1027/002"}]},{"type":"relationship","id":"relationship--5b3319a5-fd3d-5954-af33-611a1fb2b06e","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--8f3df416-3850-5534-9c3d-6a8f7343c92d"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--bc4898d6-b1c4-516d-bc8d-7c9735947418","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--28cfd681-fb93-581c-b94c-7fd82528d106","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Rename Legitimate Utilities","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.003","url":"https://attack.mitre.org/techniques/T1036/003"}]},{"type":"relationship","id":"relationship--c2dd0a2d-ba49-58fa-a1b7-b3cadd1fe59e","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--28cfd681-fb93-581c-b94c-7fd82528d106"},{"type":"attack-pattern","id":"attack-pattern--a0af9c09-229a-508c-92db-2fa8de694d6d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Space after Filename","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.006","url":"https://attack.mitre.org/techniques/T1036/006"}]},{"type":"relationship","id":"relationship--353a22f3-06f4-5ca3-bf8c-37d53a33c7d8","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--a0af9c09-229a-508c-92db-2fa8de694d6d"},{"type":"attack-pattern","id":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"System Network Connections Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1049","url":"https://attack.mitre.org/techniques/T1049"}]},{"type":"relationship","id":"relationship--e47dc221-62cc-51c4-8f6d-be77d1984cfb","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--b730e53d-ffa0-5fdf-8e96-aa28fed05612"},{"type":"attack-pattern","id":"attack-pattern--f0f4c9ce-d9cd-5c14-a44a-97f7fbf1f010","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Cron","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.003","url":"https://attack.mitre.org/techniques/T1053/003"}]},{"type":"relationship","id":"relationship--97ded6a9-2140-5c70-93a4-9419199d69c0","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--f0f4c9ce-d9cd-5c14-a44a-97f7fbf1f010"},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--94de59b2-9725-5676-b64a-1dc70603a0c7","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--0728d173-d841-5e1a-9bc7-74797f2e9d73","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Process Injection","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1055","url":"https://attack.mitre.org/techniques/T1055"}]},{"type":"relationship","id":"relationship--c501720b-735e-530c-bb72-f7e0946f6593","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--0728d173-d841-5e1a-9bc7-74797f2e9d73"},{"type":"attack-pattern","id":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Process Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1057","url":"https://attack.mitre.org/techniques/T1057"}]},{"type":"relationship","id":"relationship--377c0fb4-1d19-55fa-9a8a-da9ff8ee0907","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--066a6ad0-0ff2-5b7e-8067-db3caf20a2f4"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--3d038922-8c75-5f24-912b-ccfdd2e3be43","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Windows Command Shell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.003","url":"https://attack.mitre.org/techniques/T1059/003"}]},{"type":"relationship","id":"relationship--1ebf2230-6220-515f-a5e5-afa7673dbece","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--cf456289-7638-5e20-8316-3599b0c6019b"},{"type":"attack-pattern","id":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Visual Basic","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.005","url":"https://attack.mitre.org/techniques/T1059/005"}]},{"type":"relationship","id":"relationship--5fdbcbc6-79f5-547d-a660-f50f8cd0e5d4","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e"},{"type":"attack-pattern","id":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"File Deletion","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070.004","url":"https://attack.mitre.org/techniques/T1070/004"}]},{"type":"relationship","id":"relationship--ad6702b5-2ed3-5187-b459-355be11dc674","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--56e9c681-1ca0-518d-b40f-cf7807b49d05"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--74caf5ae-2cd6-5850-bb26-ceb1d17b237c","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"File and Directory Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1083","url":"https://attack.mitre.org/techniques/T1083"}]},{"type":"relationship","id":"relationship--f88d2dd1-8ea0-5089-98e2-bc0f8387c59b","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--01d3636c-1049-59e7-9568-b125d31158dd"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--ed59982e-0de8-5a57-adfe-3ad4fbe3855a","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Native API","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1106","url":"https://attack.mitre.org/techniques/T1106"}]},{"type":"relationship","id":"relationship--af25a583-f094-5879-b80b-da787e1ef345","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8"},{"type":"attack-pattern","id":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Brute Force","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1110","url":"https://attack.mitre.org/techniques/T1110"}]},{"type":"relationship","id":"relationship--8c1f393f-9cdb-5ee1-8d51-a8e300d036d8","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--2e398f9d-3934-5391-b478-4c6b76173429"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--55e11857-360c-5ede-ade7-55f166eb787b","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--418ea7e5-19e7-573d-a868-31349e7cd91c","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Clipboard Data","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1115","url":"https://attack.mitre.org/techniques/T1115"}]},{"type":"relationship","id":"relationship--02ce431d-d94e-5bb5-b8ef-5f0daa87f144","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--418ea7e5-19e7-573d-a868-31349e7cd91c"},{"type":"attack-pattern","id":"attack-pattern--ef38b7e3-123c-503b-97ec-7915e8882375","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Network Share Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1135","url":"https://attack.mitre.org/techniques/T1135"}]},{"type":"relationship","id":"relationship--f938105e-f2c4-576d-baf8-411e3240dbea","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--ef38b7e3-123c-503b-97ec-7915e8882375"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--f5c1d856-f978-59b3-bac1-e565a4c2bb57","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--512d8208-66a2-5f60-8683-ce6555aa98fd","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Drive-by Compromise","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1189","url":"https://attack.mitre.org/techniques/T1189"}]},{"type":"relationship","id":"relationship--28ee2106-1c13-5dd7-aedf-3501b3acbc2c","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--512d8208-66a2-5f60-8683-ce6555aa98fd"},{"type":"attack-pattern","id":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Malicious Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1204.001","url":"https://attack.mitre.org/techniques/T1204/001"}]},{"type":"relationship","id":"relationship--3a2b6d08-143c-526a-a3a1-c0328fb2a1d7","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--750af5f9-b87c-54e9-8254-be340a29a8cc"},{"type":"attack-pattern","id":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Browser Information Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1217","url":"https://attack.mitre.org/techniques/T1217"}]},{"type":"relationship","id":"relationship--c1906f07-7972-5837-844c-ce3f3d64da74","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a"},{"type":"attack-pattern","id":"attack-pattern--f41ad386-478f-53cd-bf6b-451466549360","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Compiled HTML File","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.001","url":"https://attack.mitre.org/techniques/T1218/001"}]},{"type":"relationship","id":"relationship--188c495f-91cd-5bf8-ab78-0c2a4f9c3cd6","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--f41ad386-478f-53cd-bf6b-451466549360"},{"type":"attack-pattern","id":"attack-pattern--d30b4fa1-3c5c-5b6b-9cec-484e7de5ccda","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Mshta","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.005","url":"https://attack.mitre.org/techniques/T1218/005"}]},{"type":"relationship","id":"relationship--744b8e0d-70db-58d6-9cac-724a41981c8d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--d30b4fa1-3c5c-5b6b-9cec-484e7de5ccda"},{"type":"attack-pattern","id":"attack-pattern--decd079b-4b2c-56de-91c8-975f7ab7393c","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Msiexec","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.007","url":"https://attack.mitre.org/techniques/T1218/007"}]},{"type":"relationship","id":"relationship--e07a4a15-7e00-55a6-b446-ed4ee49d2dd0","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--decd079b-4b2c-56de-91c8-975f7ab7393c"},{"type":"attack-pattern","id":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Rundll32","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.011","url":"https://attack.mitre.org/techniques/T1218/011"}]},{"type":"relationship","id":"relationship--75209108-dd0b-58e7-b3d2-0d2a73af6844","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--ad5c8bbd-7aa6-54eb-a215-813f0e62fe44"},{"type":"attack-pattern","id":"attack-pattern--238682fd-85c9-5e3d-a68b-e3c26eb57381","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Data Destruction","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1485","url":"https://attack.mitre.org/techniques/T1485"}]},{"type":"relationship","id":"relationship--8210ee69-ee2c-5ba9-a4b3-ad4f3a6ef152","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--238682fd-85c9-5e3d-a68b-e3c26eb57381"},{"type":"attack-pattern","id":"attack-pattern--ee27794c-21a1-5207-b7b4-b281d3de11d2","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Data Encrypted for Impact","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1486","url":"https://attack.mitre.org/techniques/T1486"}]},{"type":"relationship","id":"relationship--9488fe17-3fd8-5a38-9d13-b033e4ac8f11","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--ee27794c-21a1-5207-b7b4-b281d3de11d2"},{"type":"attack-pattern","id":"attack-pattern--8f1d05d6-7cf5-5858-a1e5-4e0e5db87250","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"System Shutdown/Reboot","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1529","url":"https://attack.mitre.org/techniques/T1529"}]},{"type":"relationship","id":"relationship--1c8474c3-cb8f-51e0-ada5-5bd827715d07","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--8f1d05d6-7cf5-5858-a1e5-4e0e5db87250"},{"type":"attack-pattern","id":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Windows Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1543.003","url":"https://attack.mitre.org/techniques/T1543/003"}]},{"type":"relationship","id":"relationship--0d121161-54ab-58db-95c3-0471cc0c1b86","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--96d5f4f4-cc05-5750-bc7b-cbed22084b9d"},{"type":"attack-pattern","id":"attack-pattern--f59d7eb7-48ba-5568-a6b4-1e19ec2e8223","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Disk Structure Wipe","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1561.002","url":"https://attack.mitre.org/techniques/T1561/002"}]},{"type":"relationship","id":"relationship--60e8d458-f875-546f-a1c3-bdb1323b0a06","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--f59d7eb7-48ba-5568-a6b4-1e19ec2e8223"},{"type":"attack-pattern","id":"attack-pattern--d960d2b1-b331-5323-8ff1-bae6e6626ae5","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Transmitted Data Manipulation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1565.002","url":"https://attack.mitre.org/techniques/T1565/002"}]},{"type":"relationship","id":"relationship--3c996b68-63c1-5292-b5a9-483f41184fd0","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--d960d2b1-b331-5323-8ff1-bae6e6626ae5"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--09ad3216-13e0-56bc-8f94-97651fb88a1a","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Disable or Modify Tools","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1685","url":"https://attack.mitre.org/techniques/T1685"}]},{"type":"relationship","id":"relationship--182803d4-ccf1-5cdb-bf4f-f0ea23b455f2","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--60160beb-ac1a-5d8b-8ed6-16753d57de3f"},{"type":"attack-pattern","id":"attack-pattern--ef0a62d7-89c9-55f5-96aa-755d77e7e7ee","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Disable or Modify System Firewall","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1686","url":"https://attack.mitre.org/techniques/T1686"}]},{"type":"relationship","id":"relationship--82978a5a-0d4a-5106-ab57-e4ae68c4ed3d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--ef0a62d7-89c9-55f5-96aa-755d77e7e7ee"},{"type":"attack-pattern","id":"attack-pattern--b49439f5-182d-5296-a0aa-d0dc186e366f","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Prevent Command History Logging","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1690","url":"https://attack.mitre.org/techniques/T1690"}]},{"type":"relationship","id":"relationship--5fe66b30-a5eb-5623-986d-33b05b61b3f7","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"uses","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"attack-pattern--b49439f5-182d-5296-a0aa-d0dc186e366f"},{"type":"location","id":"location--a162b21a-e4f9-56d7-9d2c-b77b4154e783","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Bangladesh","country":"BD","region":"asia"},{"type":"relationship","id":"relationship--e84b52a7-265a-5691-a70d-718851d8748e","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--a162b21a-e4f9-56d7-9d2c-b77b4154e783"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--9b1695e4-9baa-57e2-9a27-8c9594df423f","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--1bdd5b06-6a7b-5f78-85be-da8f79982d69","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Belarus","country":"BY","region":"europe"},{"type":"relationship","id":"relationship--19f3690d-829d-5224-83b2-684da4b73d09","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--1bdd5b06-6a7b-5f78-85be-da8f79982d69"},{"type":"location","id":"location--7446f5d8-6188-5abc-bf87-34a1f04bed24","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Chile","country":"CL","region":"americas"},{"type":"relationship","id":"relationship--54859706-de6f-5644-bb9c-397c3f305d24","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--7446f5d8-6188-5abc-bf87-34a1f04bed24"},{"type":"location","id":"location--d8f97962-e60f-580e-80c7-bb324614e41b","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Colombia","country":"CO","region":"americas"},{"type":"relationship","id":"relationship--6151aacf-c515-53e4-8613-bf5f093f69ff","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--d8f97962-e60f-580e-80c7-bb324614e41b"},{"type":"location","id":"location--4a5069fe-25e6-586d-834e-c4723e81277a","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Czechia","country":"CZ","region":"europe"},{"type":"relationship","id":"relationship--007abca0-81a0-52c7-8e9e-d239500a9ef5","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--4a5069fe-25e6-586d-834e-c4723e81277a"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--9b3662fb-b3a5-50af-a287-b18e70ac1dd2","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--549bcd45-a7e0-5fe7-9032-448edae150eb","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Ecuador","country":"EC","region":"americas"},{"type":"relationship","id":"relationship--db797aa2-6997-5b08-86fa-81ba8f97e935","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--549bcd45-a7e0-5fe7-9032-448edae150eb"},{"type":"location","id":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Spain","country":"ES","region":"europe"},{"type":"relationship","id":"relationship--0f1e648b-8e3d-5713-b941-6d665b7f638d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--e0e7bbdd-557f-5e02-8c98-dc45f9868131","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--f0b0e35f-3b78-5c45-bb02-617dafa9b19d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Guatemala","country":"GT","region":"americas"},{"type":"relationship","id":"relationship--31498757-8eaf-5bd5-8280-7012624ac5a3","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--f0b0e35f-3b78-5c45-bb02-617dafa9b19d"},{"type":"location","id":"location--8030edcd-9ba7-51a8-ace6-6cfff266d6ff","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Hong Kong","country":"HK","region":"asia"},{"type":"relationship","id":"relationship--44ff6b4a-144a-5e33-bf8a-bd8ca95d5162","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--8030edcd-9ba7-51a8-ace6-6cfff266d6ff"},{"type":"location","id":"location--28697960-8769-586b-b87b-b9c4e8e68b1d","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Indonesia","country":"ID","region":"asia"},{"type":"relationship","id":"relationship--0753c1ef-06a6-5e23-927f-8b9a2ecb6098","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--28697960-8769-586b-b87b-b9c4e8e68b1d"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--db435ea0-676a-5e9d-aafc-929fbeff61dc","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--671536e6-945a-50d2-812e-660a03c3dd58","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Lebanon","country":"LB","region":"asia"},{"type":"relationship","id":"relationship--673efd9a-c1b6-5834-96a9-2717a5522ce7","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--671536e6-945a-50d2-812e-660a03c3dd58"},{"type":"location","id":"location--4b5da789-7ef3-52c4-a852-3377ba238cb4","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Liberia","country":"LR","region":"africa"},{"type":"relationship","id":"relationship--1e51ab5e-0a27-5637-a05f-655cfd1e1a20","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--4b5da789-7ef3-52c4-a852-3377ba238cb4"},{"type":"location","id":"location--65f9d1ed-f890-5422-9b80-26fc28964f39","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Mexico","country":"MX","region":"americas"},{"type":"relationship","id":"relationship--696df259-29fe-5c19-86b6-15097da75842","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--65f9d1ed-f890-5422-9b80-26fc28964f39"},{"type":"location","id":"location--28af571d-efb5-5547-b4c0-f5be348ac20a","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Poland","country":"PL","region":"europe"},{"type":"relationship","id":"relationship--34fa181a-ad30-5619-8716-affa4c002149","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--28af571d-efb5-5547-b4c0-f5be348ac20a"},{"type":"location","id":"location--657f368a-bd77-5f31-84cf-340236190da3","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Russia","country":"RU","region":"europe"},{"type":"relationship","id":"relationship--96a69872-0db2-5136-ba0a-ab4c04c0c1a5","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--657f368a-bd77-5f31-84cf-340236190da3"},{"type":"location","id":"location--d2b5c59b-8465-529f-8f9c-77d033ed8186","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Thailand","country":"TH","region":"asia"},{"type":"relationship","id":"relationship--f5d76504-999e-53df-88ec-4d0002b0cf12","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--d2b5c59b-8465-529f-8f9c-77d033ed8186"},{"type":"location","id":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Tunisia","country":"TN","region":"africa"},{"type":"relationship","id":"relationship--bc750dfa-9381-57d1-af00-1b16cd2c2969","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--8ed8256a-aa56-5d8e-987a-d6411af504b8"},{"type":"location","id":"location--8f34f33b-92b3-51fa-baaa-707cc2d2e440","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Uruguay","country":"UY","region":"americas"},{"type":"relationship","id":"relationship--b737381b-8351-57de-bd7d-9ac0e3ee3e52","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--8f34f33b-92b3-51fa-baaa-707cc2d2e440"},{"type":"location","id":"location--a293772c-40a3-5fb8-81f0-095e6ea6d938","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Venezuela","country":"VE","region":"americas"},{"type":"relationship","id":"relationship--57d41df4-55de-5f92-8a2b-9100780f0e22","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--a293772c-40a3-5fb8-81f0-095e6ea6d938"},{"type":"location","id":"location--cc3c6f54-8845-5e18-9950-33f68b9666c9","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"Vietnam","country":"VN","region":"asia"},{"type":"relationship","id":"relationship--6633a5e3-4aa1-5a6b-8c43-02fa2a8292ec","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--cc3c6f54-8845-5e18-9950-33f68b9666c9"},{"type":"location","id":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","name":"South Africa","country":"ZA","region":"africa"},{"type":"relationship","id":"relationship--eed07102-d012-5210-9e77-1fe269e21a57","spec_version":"2.1","created":"2026-05-20T09:50:16.826298+00:00","modified":"2026-07-29T07:05:35.677+00:00","relationship_type":"targets","source_ref":"intrusion-set--cf5d88ba-3d38-517d-a2e4-a6f786f433a0","target_ref":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285"}]}