{"type":"bundle","id":"bundle--793cfbf8-b69d-5a26-94d2-184b6446af80","objects":[{"type":"intrusion-set","id":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"SideCopy","aliases":["SideCopy","APT-C-56","Transparent Tribe Sub-group"],"first_seen":"2019-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/sidecopy"}],"labels":["nation-state","esp"]},{"type":"attack-pattern","id":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"System Network Configuration Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1016","url":"https://attack.mitre.org/techniques/T1016"}]},{"type":"relationship","id":"relationship--18078cbc-9e54-5902-8852-d68d21045123","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--85b2a630-ee19-59eb-bb09-8da636eb4c2c"},{"type":"attack-pattern","id":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Match Legitimate Resource Name or Location","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1036.005","url":"https://attack.mitre.org/techniques/T1036/005"}]},{"type":"relationship","id":"relationship--f7a87a9b-4f87-5ace-8bbd-bcb0336d92b9","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--5d84feda-5716-51fa-87e4-3a24359fe7c1"},{"type":"attack-pattern","id":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Visual Basic","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1059.005","url":"https://attack.mitre.org/techniques/T1059/005"}]},{"type":"relationship","id":"relationship--a5be82c6-49bb-5a42-a739-0e169856cabc","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--80bbe2ac-55f9-5670-9b81-183194d9ba8e"},{"type":"attack-pattern","id":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Ingress Tool Transfer","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Command And Control"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1105","url":"https://attack.mitre.org/techniques/T1105"}]},{"type":"relationship","id":"relationship--91b6e59b-5e0e-54d4-b422-7928d10bdfa4","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--34c30c2c-82c9-5065-a995-6cab07ee655a"},{"type":"attack-pattern","id":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Native API","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Execution"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1106","url":"https://attack.mitre.org/techniques/T1106"}]},{"type":"relationship","id":"relationship--85b72c7a-245d-52f9-b098-3b949a28d3eb","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--97f03df4-8d90-5c9d-baf3-f1d6dbf82dc8"},{"type":"attack-pattern","id":"attack-pattern--d30b4fa1-3c5c-5b6b-9cec-484e7de5ccda","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Mshta","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Stealth"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1218.005","url":"https://attack.mitre.org/techniques/T1218/005"}]},{"type":"relationship","id":"relationship--42adda2f-93e8-5e31-9d92-2aed2b58601b","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--d30b4fa1-3c5c-5b6b-9cec-484e7de5ccda"},{"type":"attack-pattern","id":"attack-pattern--6bc23961-1631-5f3d-8eac-6d2d27bed39d","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Software Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1518","url":"https://attack.mitre.org/techniques/T1518"}]},{"type":"relationship","id":"relationship--b2922283-3c06-5e38-a376-3260aaadb512","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--6bc23961-1631-5f3d-8eac-6d2d27bed39d"},{"type":"attack-pattern","id":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Spearphishing Attachment","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Initial Access"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1566.001","url":"https://attack.mitre.org/techniques/T1566/001"}]},{"type":"relationship","id":"relationship--750a1589-b095-51c5-b6b9-770c1094f53b","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--3ed779c7-a3d4-5af5-8cf5-ab0c7e9900ed"},{"type":"attack-pattern","id":"attack-pattern--7b249cb9-2608-5d8f-ba60-60a50bbf7e4a","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"System Location Discovery","kill_chain_phases":[{"kill_chain_name":"mitre-attack","phase_name":"Discovery"}],"external_references":[{"source_name":"mitre-attack","external_id":"T1614","url":"https://attack.mitre.org/techniques/T1614"}]},{"type":"relationship","id":"relationship--04f1ce30-c28d-556c-aab5-071a243e3ec4","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"uses","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"attack-pattern--7b249cb9-2608-5d8f-ba60-60a50bbf7e4a"},{"type":"location","id":"location--ae85030d-69cb-536c-8f14-e4336359104d","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"Afghanistan","country":"AF","region":"asia"},{"type":"relationship","id":"relationship--0e351f92-a14f-5999-9ac5-db555c539af9","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"targets","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"location--ae85030d-69cb-536c-8f14-e4336359104d"},{"type":"location","id":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","name":"India","country":"IN","region":"asia"},{"type":"relationship","id":"relationship--50600d05-3340-554b-b439-79b98650d0b7","spec_version":"2.1","created":"2026-05-20T09:52:26.592869+00:00","modified":"2026-07-29T08:59:20.257+00:00","relationship_type":"targets","source_ref":"intrusion-set--255d9930-cd72-59e6-b4b2-e57aa6f66360","target_ref":"location--6e5b4c5e-7bd4-57d1-b1ea-657b1891ea82"}]}