{"type":"bundle","id":"bundle--c3abedbc-7232-54bb-bf97-5c47e16299ce","objects":[{"type":"intrusion-set","id":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Moonstone Sleet","description":"DPRK cluster engaged in IT-worker fraud and ransomware development.","aliases":["Storm-1789","UNC4899"],"first_seen":"2023-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/moonstone-sleet"}],"labels":["nation-state","fin","ran"]},{"type":"attack-pattern","id":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Scheduled Task","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1053.005","url":"https://attack.mitre.org/techniques/T1053/005"}]},{"type":"relationship","id":"relationship--e2efcfa1-c199-5e2c-9e06-0d331eaaca45","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--5b9c404b-c207-54da-8f40-97b17eeae7d8"},{"type":"attack-pattern","id":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"System Owner/User Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1033","url":"https://attack.mitre.org/techniques/T1033"}]},{"type":"relationship","id":"relationship--6c7deac3-1389-5d52-b176-37b637d9522d","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--5794f196-c4b1-5178-9a87-bbd5351bdeae"},{"type":"attack-pattern","id":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Browser Information Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1217","url":"https://attack.mitre.org/techniques/T1217"}]},{"type":"relationship","id":"relationship--6a3059c9-f27b-5ba0-b5ee-67ba4c877693","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--376255f7-e416-581c-9c36-feed19b5174a"},{"type":"attack-pattern","id":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"LSASS Memory","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Credential Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1003.001","url":"https://attack.mitre.org/techniques/T1003/001"}]},{"type":"relationship","id":"relationship--12c527ba-c86d-5f86-b10b-22204269c2d1","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--ff67c6e7-4b63-5760-9243-37b5fa26fab0"},{"type":"attack-pattern","id":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Email Addresses","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1589.002","url":"https://attack.mitre.org/techniques/T1589/002"}]},{"type":"relationship","id":"relationship--4b2b9f5d-c181-567f-84e1-0c05f9dc0a0b","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--89d3ed48-b2fd-53f5-b426-32a2fd501bd9"},{"type":"attack-pattern","id":"attack-pattern--bf65956a-96f7-5514-9bf2-b18865da3e15","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Gather Victim Org Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1591","url":"https://attack.mitre.org/techniques/T1591"}]},{"type":"relationship","id":"relationship--defd9be5-a662-55d6-a33f-755308d90e2e","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--bf65956a-96f7-5514-9bf2-b18865da3e15"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--8b50f7e3-ab90-5c67-9021-bf23fd72a99f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Deobfuscate/Decode Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1140","url":"https://attack.mitre.org/techniques/T1140"}]},{"type":"relationship","id":"relationship--328bacaf-0589-5433-957b-8096bbcef3c2","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--8ffaad6b-1a62-541e-bcc5-c2a263f5d9e5"},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--549d1c90-e7a4-5773-a5db-b6b8c0eda3b4","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Registry Run Keys / Startup Folder","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Persistence"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1547.001","url":"https://attack.mitre.org/techniques/T1547/001"}]},{"type":"relationship","id":"relationship--acde4f5e-8bd2-592d-98ad-7416023d3d1a","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--7b2d19e4-bdbd-51ea-a2fb-e189fbdc5cd4"},{"type":"attack-pattern","id":"attack-pattern--ee27794c-21a1-5207-b7b4-b281d3de11d2","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Data Encrypted for Impact","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Impact"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1486","url":"https://attack.mitre.org/techniques/T1486"}]},{"type":"relationship","id":"relationship--5aa2babd-75ae-5e9e-8a24-d39f70b22810","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--ee27794c-21a1-5207-b7b4-b281d3de11d2"},{"type":"attack-pattern","id":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Phishing for Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Reconnaissance"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1598","url":"https://attack.mitre.org/techniques/T1598"}]},{"type":"relationship","id":"relationship--2c845f99-ae6c-5489-98e6-3322039242b8","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--840e1a27-be04-5d9b-863f-8b073b470b0f"},{"type":"attack-pattern","id":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Obfuscated Files or Information","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1027","url":"https://attack.mitre.org/techniques/T1027"}]},{"type":"relationship","id":"relationship--c4141d55-5c3d-50f2-862e-7d11db71867d","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--83bf6bd6-5ec5-5d2a-9ded-a83895020e8f"},{"type":"attack-pattern","id":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Web Protocols","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001"}]},{"type":"relationship","id":"relationship--ff4bf215-177a-5e82-a6af-03cc0e7eb08d","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--2b08bace-70a9-534c-861e-76d7dd8ea0e9"},{"type":"attack-pattern","id":"attack-pattern--71223944-8294-53c8-b3d3-106d6c5aac70","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Compromise Software Supply Chain","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1195.002","url":"https://attack.mitre.org/techniques/T1195/002"}]},{"type":"relationship","id":"relationship--c4cc80e5-c1ba-5963-abd5-6eba5e52e09f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--71223944-8294-53c8-b3d3-106d6c5aac70"},{"type":"attack-pattern","id":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Virtual Private Server","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1583.003","url":"https://attack.mitre.org/techniques/T1583/003"}]},{"type":"relationship","id":"relationship--c94697da-6bbc-5693-8608-173b249499eb","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--5c5d6856-aa2e-5c7c-a7d6-1d924aed5e71"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--b80ba4c5-1124-5395-94fd-19394017d558","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--8280d116-0e73-550e-9fcc-8a82387581d6","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Develop Capabilities","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Resource Development"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1587","url":"https://attack.mitre.org/techniques/T1587"}]},{"type":"relationship","id":"relationship--7b96b60f-1c53-5bb2-8ba0-d8f894298339","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--8280d116-0e73-550e-9fcc-8a82387581d6"},{"type":"attack-pattern","id":"attack-pattern--9eb184f4-55af-53a7-97c4-5f226ca51dd7","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Spearphishing via Service","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.003","url":"https://attack.mitre.org/techniques/T1566/003"}]},{"type":"relationship","id":"relationship--1c5abd0d-8a72-5ebb-887f-6e10b62e9f5f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"uses","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"attack-pattern--9eb184f4-55af-53a7-97c4-5f226ca51dd7"},{"type":"location","id":"location--c3b339e1-0c64-5686-aade-0841bebd1798","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Argentina","country":"AR","region":"americas"},{"type":"relationship","id":"relationship--16e98b5f-f075-55c1-b8db-0f9504d5b380","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--c3b339e1-0c64-5686-aade-0841bebd1798"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--d68608e8-6965-5aff-85bb-c8895e4aeaac","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--0b52720f-a42f-5bec-bac1-5784de12282c","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Brazil","country":"BR","region":"americas"},{"type":"relationship","id":"relationship--ea4e20e7-ab4a-5d61-8255-d84f301fd247","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--0b52720f-a42f-5bec-bac1-5784de12282c"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--f7eebd51-bc02-5f24-8ad5-2c49e3b74317","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--9c570473-3c64-58c3-9fa2-a26702930836","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--bb45582d-2e27-5828-aa2f-343b24630f35","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Denmark","country":"DK","region":"europe"},{"type":"relationship","id":"relationship--ea00a2a2-06fa-527b-9f61-d275c26e9887","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--bb45582d-2e27-5828-aa2f-343b24630f35"},{"type":"location","id":"location--52de829e-b12e-5fb1-98a4-0863af08b935","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Estonia","country":"EE","region":"europe"},{"type":"relationship","id":"relationship--45c16501-093b-562d-9f7a-19c6dd12a288","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--52de829e-b12e-5fb1-98a4-0863af08b935"},{"type":"location","id":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Spain","country":"ES","region":"europe"},{"type":"relationship","id":"relationship--b5cb00b9-2935-5ac1-aa40-0f55e8649521","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--6ee49119-9c76-57b4-b10a-de8f817f7ad5"},{"type":"location","id":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"United Kingdom","country":"GB","region":"europe"},{"type":"relationship","id":"relationship--56b3afa8-27cb-56d0-a0f4-47a6dc471ef3","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--8b47490b-4c54-523d-a7bf-f8a265db7aa6"},{"type":"location","id":"location--382d5ccf-5b08-5a14-b75e-b8f55bfacbae","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Hungary","country":"HU","region":"europe"},{"type":"relationship","id":"relationship--112a7211-04f1-5a93-8331-bd488a99e037","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--382d5ccf-5b08-5a14-b75e-b8f55bfacbae"},{"type":"location","id":"location--a010f9b5-f121-5125-a684-6dd58c48d368","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Israel","country":"IL","region":"asia"},{"type":"relationship","id":"relationship--31e95d85-baf3-5039-9e89-8dee23bfdb6a","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--a010f9b5-f121-5125-a684-6dd58c48d368"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--ef324113-604d-5d82-a410-a21134a2eb5e","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--2088083e-8e80-5805-b6b6-40a2eac15f96","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--168ae1d8-d8eb-5440-9d21-d02292700adf","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Japan","country":"JP","region":"asia"},{"type":"relationship","id":"relationship--1bde31da-1760-5127-bf44-720f8d2c119f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--168ae1d8-d8eb-5440-9d21-d02292700adf"},{"type":"location","id":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"South Korea","country":"KR","region":"asia"},{"type":"relationship","id":"relationship--8f724380-6cd1-5330-84cf-f34eb41dec5f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--e65fe67e-b17f-5bb9-b32c-402d6a5aa451"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--41e32c3e-bfcc-547f-8115-666df3add463","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--74c4c4a2-e626-5e3e-adcf-be8b651868c4","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"New Zealand","country":"NZ","region":"oceania"},{"type":"relationship","id":"relationship--733cb0d0-d948-539a-bfac-aecfe1b0fa24","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--74c4c4a2-e626-5e3e-adcf-be8b651868c4"},{"type":"location","id":"location--28af571d-efb5-5547-b4c0-f5be348ac20a","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Poland","country":"PL","region":"europe"},{"type":"relationship","id":"relationship--2936d0ca-4857-5da7-9011-39301b3f48c2","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--28af571d-efb5-5547-b4c0-f5be348ac20a"},{"type":"location","id":"location--657f368a-bd77-5f31-84cf-340236190da3","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Russia","country":"RU","region":"europe"},{"type":"relationship","id":"relationship--88615648-2119-52eb-b538-135f287cc148","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--657f368a-bd77-5f31-84cf-340236190da3"},{"type":"location","id":"location--64282129-6afb-5607-8988-27d394389a0e","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Sweden","country":"SE","region":"europe"},{"type":"relationship","id":"relationship--b807a341-c14f-5a57-a914-1dc3167091ae","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--64282129-6afb-5607-8988-27d394389a0e"},{"type":"location","id":"location--65957256-06fc-5b5b-8d99-4ea15b827c30","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Slovenia","country":"SI","region":"europe"},{"type":"relationship","id":"relationship--9809c179-4bd1-5bd7-9d6b-52de28fba350","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--65957256-06fc-5b5b-8d99-4ea15b827c30"},{"type":"location","id":"location--45a794f0-2f7e-56ca-84fe-cc3888e36fbe","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Türkiye","country":"TR","region":"asia"},{"type":"relationship","id":"relationship--ae2b0edd-111d-56ee-8de7-a07fbcbaa4c2","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--45a794f0-2f7e-56ca-84fe-cc3888e36fbe"},{"type":"location","id":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Ukraine","country":"UA","region":"europe"},{"type":"relationship","id":"relationship--90aa43cb-440a-553f-aa38-636bb2c06c86","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f"},{"type":"location","id":"location--cc3c6f54-8845-5e18-9950-33f68b9666c9","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"Vietnam","country":"VN","region":"asia"},{"type":"relationship","id":"relationship--9dada377-e6d5-5e36-8dfa-ad080bd31acf","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--cc3c6f54-8845-5e18-9950-33f68b9666c9"},{"type":"location","id":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","name":"South Africa","country":"ZA","region":"africa"},{"type":"relationship","id":"relationship--082758f2-366b-5069-8494-36b4ef23d310","spec_version":"2.1","created":"2026-05-20T09:52:23.821144+00:00","modified":"2026-07-29T07:58:32.853+00:00","relationship_type":"targets","source_ref":"intrusion-set--a55c4b69-d280-5d02-9113-d1d8c4a1af69","target_ref":"location--6a5fb4e5-83ad-5007-b5fc-c682a5a9c285"}]}