{"type":"bundle","id":"bundle--a5d3280a-252b-5e06-beca-80abbaa17d9e","objects":[{"type":"intrusion-set","id":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"APT42","aliases":["UNC788","CALANQUE","ITG18","Yellow Garuda","Damselfly","Charming Kitten","Mint Sandstorm","G1044","TA453","IRON RITUAL"],"first_seen":"2015-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/apt42"},{"source_name":"mitre-attack","external_id":"G1044","url":"https://attack.mitre.org/groups/G1044/"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--63d59c82-423d-5fca-800c-08ae06155fb5","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--caf2c625-16b2-5780-8272-363ff4fff389","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Windows Management Instrumentation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1047","url":"https://attack.mitre.org/techniques/T1047"}]},{"type":"relationship","id":"relationship--2961263d-3bb4-5892-a632-1a2d2668425e","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--ae5783c5-87fc-555d-81e8-cdd25470d85e"},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--16a6572a-7c28-56c9-a072-a2d20f6f10db","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--35909444-08fc-544d-8336-75309b7e3884","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Input Capture","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1056","url":"https://attack.mitre.org/techniques/T1056"}]},{"type":"relationship","id":"relationship--988c6beb-75b6-5043-afed-8c6e6c177b20","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--35909444-08fc-544d-8336-75309b7e3884"},{"type":"attack-pattern","id":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"PowerShell","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.001","url":"https://attack.mitre.org/techniques/T1059/001"}]},{"type":"relationship","id":"relationship--0425e20e-bd90-5163-bc68-d391dc088110","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--a9d34107-5cdd-5c05-809d-436ff6f7509d"},{"type":"attack-pattern","id":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Visual Basic","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.005","url":"https://attack.mitre.org/techniques/T1059/005"}]},{"type":"relationship","id":"relationship--f5209818-897e-52a3-91e1-d5d7854831eb","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e"},{"type":"attack-pattern","id":"attack-pattern--fa09ca33-6c9b-5e18-b561-a4a583e84fe5","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Indicator Removal","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1070","url":"https://attack.mitre.org/techniques/T1070"}]},{"type":"relationship","id":"relationship--89c61256-fc48-56d7-b0b0-42ff1aa08bd7","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--fa09ca33-6c9b-5e18-b561-a4a583e84fe5"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--cb18c906-6424-5af1-8b88-a606a626dc7e","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--3cce4469-d3b2-5b83-8e3d-53e78f7e9c6d","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Web Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1102","url":"https://attack.mitre.org/techniques/T1102"}]},{"type":"relationship","id":"relationship--ebda65d8-e3d5-5818-af89-ad31feed1ccc","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--3cce4469-d3b2-5b83-8e3d-53e78f7e9c6d"},{"type":"attack-pattern","id":"attack-pattern--d963ab27-bbcf-5733-9b3e-d42f9f7895d2","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Multi-Factor Authentication Interception","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1111","url":"https://attack.mitre.org/techniques/T1111"}]},{"type":"relationship","id":"relationship--3eabab2c-ae71-55ff-9fa9-289313a6f634","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--d963ab27-bbcf-5733-9b3e-d42f9f7895d2"},{"type":"attack-pattern","id":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Modify Registry","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Defense Impairment"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1112","url":"https://attack.mitre.org/techniques/T1112"}]},{"type":"relationship","id":"relationship--d351bc0b-8c76-5b41-b336-0c7c146d9aa4","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--212d2cd2-bb7f-5ca8-a89f-aa66dec93e51"},{"type":"attack-pattern","id":"attack-pattern--b23af926-ff12-565c-bc7a-1e3018ceb544","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Screen Capture","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Collection"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1113","url":"https://attack.mitre.org/techniques/T1113"}]},{"type":"relationship","id":"relationship--6b3da2a3-08e1-5a1d-9215-86c0b8b4c186","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--b23af926-ff12-565c-bc7a-1e3018ceb544"},{"type":"attack-pattern","id":"attack-pattern--afc32c17-ef0e-54c3-87ea-a45a04363e95","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Boot or Logon Autostart Execution","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547","url":"https://attack.mitre.org/techniques/T1547"}]},{"type":"relationship","id":"relationship--7808441b-1400-59b6-a5d7-d6fcd91bdc78","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--afc32c17-ef0e-54c3-87ea-a45a04363e95"},{"type":"attack-pattern","id":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Credentials from Web Browsers","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1555.003","url":"https://attack.mitre.org/techniques/T1555/003"}]},{"type":"relationship","id":"relationship--623042b8-bab1-54de-ba4a-3902e4b70191","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--717b894d-8b75-5238-843c-4fcbef706070"},{"type":"attack-pattern","id":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Spearphishing Link","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.002","url":"https://attack.mitre.org/techniques/T1566/002"}]},{"type":"relationship","id":"relationship--afa57a10-9660-5a3f-a51e-e2649232789c","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--c2e3df13-b71e-5873-beb1-5d621be45acd"},{"type":"attack-pattern","id":"attack-pattern--b435b427-55ef-5941-9f2a-40db66a08276","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Asymmetric Cryptography","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1573.002","url":"https://attack.mitre.org/techniques/T1573/002"}]},{"type":"relationship","id":"relationship--2a91af7b-7fe4-592b-a71d-3fa76181add4","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--b435b427-55ef-5941-9f2a-40db66a08276"},{"type":"attack-pattern","id":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Virtual Private Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.003","url":"https://attack.mitre.org/techniques/T1583/003"}]},{"type":"relationship","id":"relationship--a3428ca1-e99f-52eb-abb0-d0245d47f840","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71"},{"type":"attack-pattern","id":"attack-pattern--27ac6d34-8688-55d9-be98-732e8325ffd7","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Query Public AI Services","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1682","url":"https://attack.mitre.org/techniques/T1682"}]},{"type":"relationship","id":"relationship--54462665-f9b4-5f9f-8f3e-20054e29c43c","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--27ac6d34-8688-55d9-be98-732e8325ffd7"},{"type":"attack-pattern","id":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Impersonation","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1684.001","url":"https://attack.mitre.org/techniques/T1684/001"}]},{"type":"relationship","id":"relationship--62c4fa59-fa57-5f68-9159-6556dcaf63fd","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"uses","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"attack-pattern--abc6446a-b100-5237-80e0-21c49b39bf62"},{"type":"location","id":"location--1375b154-0a19-561b-b92a-50fd99cbdd99","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"United Arab Emirates","country":"AE","region":"asia"},{"type":"relationship","id":"relationship--daf7dd15-c311-5ad7-b472-0981bbf63577","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--1375b154-0a19-561b-b92a-50fd99cbdd99"},{"type":"location","id":"location--04cd9956-7847-535f-b3f8-2c15fc015ff1","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Albania","country":"AL","region":"europe"},{"type":"relationship","id":"relationship--43e3236e-1d3e-50ae-8271-135bdbf57cc1","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--04cd9956-7847-535f-b3f8-2c15fc015ff1"},{"type":"location","id":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Austria","country":"AT","region":"europe"},{"type":"relationship","id":"relationship--0cacf31e-c388-5698-99f1-d51cde57dc71","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--8c2bc2e0-62b9-53f4-aaa8-b8b8b4bcfb25"},{"type":"location","id":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Australia","country":"AU","region":"oceania"},{"type":"relationship","id":"relationship--be4c5c48-1a1b-5756-8ed6-96de19c8a7ce","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--0375fcf1-94fe-5ba0-b36d-c031719c346a"},{"type":"location","id":"location--2da3bb22-42f9-50db-8059-c3a0023f7317","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Azerbaijan","country":"AZ","region":"asia"},{"type":"relationship","id":"relationship--b88ffb48-6208-50d3-b418-fd1de06a112a","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--2da3bb22-42f9-50db-8059-c3a0023f7317"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--8c07f04e-73ea-5fde-ad15-b0a13e39027d","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--8c176808-7b2f-5f84-8da7-afd784257bed","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Bulgaria","country":"BG","region":"europe"},{"type":"relationship","id":"relationship--2f0ffd8c-8eb8-596a-8a89-c0224d1afd8d","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--8c176808-7b2f-5f84-8da7-afd784257bed"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--d09ce1e6-7855-59b9-adbd-7e6ab75e112b","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Egypt","country":"EG","region":"africa"},{"type":"relationship","id":"relationship--7a7b330c-3aa6-525c-b499-0eb818a90ace","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--fe5915e8-c6cf-5230-9d81-da8132a006fa"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--443e72f7-974f-5a42-ac19-26fa55b99016","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--57686db6-7e07-5a3d-8164-cb318ab8c471","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--9e28a5f4-2866-5976-9e35-5b8180d7aa80","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Iraq","country":"IQ","region":"asia"},{"type":"relationship","id":"relationship--5d068a2b-5c65-5f0a-a2aa-c8060c256f44","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--9e28a5f4-2866-5976-9e35-5b8180d7aa80"},{"type":"location","id":"location--ad0e2a15-cb2b-5914-9739-1fecfc18450f","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Iran","country":"IR","region":"asia"},{"type":"relationship","id":"relationship--fcdd75db-2450-58c5-bc68-6d073ded2f93","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--ad0e2a15-cb2b-5914-9739-1fecfc18450f"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--f1997ed7-15e0-5bd6-8fc7-f156db30cfde","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--671536e6-945a-50d2-812e-660a03c3dd58","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Lebanon","country":"LB","region":"asia"},{"type":"relationship","id":"relationship--72122ecf-0f1e-53e3-b0ca-4d7d18fffb5e","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--671536e6-945a-50d2-812e-660a03c3dd58"},{"type":"location","id":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Malaysia","country":"MY","region":"asia"},{"type":"relationship","id":"relationship--fe524c57-ca0c-52f2-a2a4-678b3ccab3f6","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--51edd19f-4bd7-545d-9666-eb05f15cda9d"},{"type":"location","id":"location--88c9fb6c-f398-559f-b18e-422cbb386901","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Norway","country":"NO","region":"europe"},{"type":"relationship","id":"relationship--bad258db-d1ed-5a36-b076-990432d20aeb","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--88c9fb6c-f398-559f-b18e-422cbb386901"},{"type":"location","id":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Saudi Arabia","country":"SA","region":"asia"},{"type":"relationship","id":"relationship--d4b520c4-36a4-5d3e-9c0f-5a6b41cddbc8","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--4ea5f174-f6ea-5fe4-acc4-765448fbce0a"},{"type":"location","id":"location--45a794f0-2f7e-56ca-84fe-cc3888e36fbe","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Türkiye","country":"TR","region":"asia"},{"type":"relationship","id":"relationship--9a242760-41e1-541d-acf3-d8a44b1fcb8e","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--45a794f0-2f7e-56ca-84fe-cc3888e36fbe"},{"type":"location","id":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"Ukraine","country":"UA","region":"europe"},{"type":"relationship","id":"relationship--67f7ec7f-7700-56ad-8edb-9e08be6ca2c1","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f"},{"type":"location","id":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","name":"United States","country":"US","region":"americas"},{"type":"relationship","id":"relationship--902b836f-cc78-575a-89e8-38a34338155d","spec_version":"2.1","created":"2026-05-20T09:50:17.867344+00:00","modified":"2026-07-29T07:05:40.592+00:00","relationship_type":"targets","source_ref":"intrusion-set--6ab4df94-6f9e-50b3-86ae-622c3777ad09","target_ref":"location--ea514d88-d8fb-51d8-9162-c666a0ebd505"}]}