{
  "namespace": "maec-malware-capabilities",
  "description": "Malware Capabilities based on MAEC 5.0",
  "version": 2,
  "predicates": [
    {
      "value": "maec-malware-capability",
      "expanded": "MAEC Malware capability",
      "uuid": "c99eeb22-6ed2-503c-82be-3708b1503bcd"
    }
  ],
  "values": [
    {
      "predicate": "maec-malware-capability",
      "entry": [
        {
          "value": "anti-behavioral-analysis",
          "expanded": "anti-behavioral-analysis",
          "uuid": "2bfbe018-fe5e-58c7-a66d-4f2bf1fb906a"
        },
        {
          "value": "anti-code-analysis",
          "expanded": "anti-code-analysis",
          "uuid": "e4d35b66-72ea-5460-991e-e3a3cd379a0d"
        },
        {
          "value": "anti-detection",
          "expanded": "anti-detection",
          "uuid": "16b0c4ce-6e91-5f86-b6c6-5bab0decc071"
        },
        {
          "value": "anti-removal",
          "expanded": "anti-removal",
          "uuid": "8cd8505e-524b-5bad-9dce-4d7f5c48d956"
        },
        {
          "value": "availability-violation",
          "expanded": "availability-violation",
          "uuid": "ea40cf25-a77f-5fc9-aec8-83122d8b0d61"
        },
        {
          "value": "collection",
          "expanded": "collection",
          "uuid": "7cc5cd98-0f52-5f1a-9b23-5c7a52863cd2"
        },
        {
          "value": "command-and-control",
          "expanded": "command-and-control",
          "uuid": "9d29d779-8508-5bc5-a1b4-851d869e2641"
        },
        {
          "value": "data-theft",
          "expanded": "data-theft",
          "uuid": "a5cea206-25de-5cd5-99ab-f86b7b01d2b6"
        },
        {
          "value": "destruction",
          "expanded": "destruction",
          "uuid": "e054b84f-3f7e-53e3-9857-e4aeb0b60c15"
        },
        {
          "value": "discovery",
          "expanded": "discovery",
          "uuid": "fb498a80-bf6e-5f6c-8fd6-4785b2157423"
        },
        {
          "value": "exfiltration",
          "expanded": "exfiltration",
          "uuid": "d7e83512-4cdf-5826-90fe-bf678203b403"
        },
        {
          "value": "fraud",
          "expanded": "fraud",
          "uuid": "07c8daa3-931c-5ab6-957c-1fd263c2346e"
        },
        {
          "value": "infection-propagation",
          "expanded": "infection-propagation",
          "uuid": "cc206fef-74e4-5e02-a04b-501a03c9f81e"
        },
        {
          "value": "integrity-violation",
          "expanded": "integrity-violation",
          "uuid": "e6baf40f-f66c-5e02-a3a1-7e5968f09a32"
        },
        {
          "value": "machine-access-control",
          "expanded": "machine-access-control",
          "uuid": "c3b0b00a-4a14-51fa-a149-d51506798851"
        },
        {
          "value": "persistence",
          "expanded": "persistence",
          "uuid": "21acfdd1-cab2-5f4f-9be5-bf1fe726b21f"
        },
        {
          "value": "privilege-escalation",
          "expanded": "privilege-escalation",
          "uuid": "a8517653-b915-5a23-aa13-d7ad4c42aa00"
        },
        {
          "value": "secondary-operation",
          "expanded": "secondary-operation",
          "uuid": "9454a4be-9145-56f6-a358-59f99027bad1"
        },
        {
          "value": "security-degradation",
          "expanded": "security-degradation",
          "uuid": "a7aea5e3-1e04-54fc-b88c-990dfb362f07"
        },
        {
          "value": "access-control-degradation",
          "expanded": "access-control-degradation",
          "uuid": "cc40bbb8-7cb1-5336-bd5f-2513004db14a"
        },
        {
          "value": "anti-debugging",
          "expanded": "anti-debugging",
          "uuid": "ff47236f-792b-5ea6-9d21-b9e6c3a3e085"
        },
        {
          "value": "anti-disassembly",
          "expanded": "anti-disassembly",
          "uuid": "a9d77520-0a44-5f4f-aea6-4e4d0bc347b5"
        },
        {
          "value": "anti-emulation",
          "expanded": "anti-emulation",
          "uuid": "37aecb07-dbd6-5507-ad5e-68ba3e13a043"
        },
        {
          "value": "anti-memory-forensics",
          "expanded": "anti-memory-forensics",
          "uuid": "a431ebd8-0d20-5875-b7ff-17064d4aefb7"
        },
        {
          "value": "anti-sandbox",
          "expanded": "anti-sandbox",
          "uuid": "dea2a98c-19dc-5510-87be-8cb6326e620e"
        },
        {
          "value": "anti-virus-evasion",
          "expanded": "anti-virus-evasion",
          "uuid": "b516021d-8ac6-5062-b7d0-6384c6489bbd"
        },
        {
          "value": "anti-vm",
          "expanded": "anti-vm",
          "uuid": "dc838139-60c1-543a-bf4a-295ef4ab5269"
        },
        {
          "value": "authentication-credentials-theft",
          "expanded": "authentication-credentials-theft",
          "uuid": "42a96f08-fcaa-5f80-9ce7-e32eae24f41b"
        },
        {
          "value": "clean-traces-of-infection",
          "expanded": "clean-traces-of-infection",
          "uuid": "12fead78-ccaf-5c1b-8c2a-63c8f48eb534"
        },
        {
          "value": "communicate-with-c2-server",
          "expanded": "communicate-with-c2-server",
          "uuid": "a55d1e85-6830-58e7-a0f6-8cca0c618492"
        },
        {
          "value": "compromise-data-availability",
          "expanded": "compromise-data-availability",
          "uuid": "cd444098-443e-5748-8cc5-7ad41e1687df"
        },
        {
          "value": "compromise-system-availability",
          "expanded": "compromise-system-availability",
          "uuid": "2e4656d2-2d1a-56e5-a1de-8f2a3e59cdeb"
        },
        {
          "value": "consume-system-resources",
          "expanded": "consume-system-resources",
          "uuid": "490115d4-90ee-55ac-9e46-d721b398cfdc"
        },
        {
          "value": "continuous-execution",
          "expanded": "continuous-execution",
          "uuid": "4425cfd2-ef0d-5339-b3a5-d184cbc833c3"
        },
        {
          "value": "data-integrity-violation",
          "expanded": "data-integrity-violation",
          "uuid": "adad2dbe-c760-5781-a5dc-248bbeae81f6"
        },
        {
          "value": "data-obfuscation",
          "expanded": "data-obfuscation",
          "uuid": "7815c8ce-5a19-5001-a06e-abbf34def8c3"
        },
        {
          "value": "data-staging",
          "expanded": "data-staging",
          "uuid": "18295dc7-ef32-5402-ac16-fb0a34c9d9d3"
        },
        {
          "value": "determine-c2-server",
          "expanded": "determine-c2-server",
          "uuid": "674548cc-8910-5ea2-b633-037a917b1f5d"
        },
        {
          "value": "email-spam",
          "expanded": "email-spam",
          "uuid": "921b635b-fc9a-519b-ad16-603a05061792"
        },
        {
          "value": "ensure-compatibility",
          "expanded": "ensure-compatibility",
          "uuid": "674aa1ad-6c4c-5237-8a88-c346fafe6b48"
        },
        {
          "value": "environment-awareness",
          "expanded": "environment-awareness",
          "uuid": "2f83bb15-cabe-55c8-aaae-3422a9192673"
        },
        {
          "value": "file-infection",
          "expanded": "file-infection",
          "uuid": "b2356cc4-cbc0-5daf-b7d5-692abefd9827"
        },
        {
          "value": "hide-artifacts",
          "expanded": "hide-artifacts",
          "uuid": "51165ff4-2c68-5022-87a9-45e8a39aa298"
        },
        {
          "value": "hide-executing-code",
          "expanded": "hide-executing-code",
          "uuid": "2f092c6f-2d3f-55d9-ac95-2f0e662f1e5c"
        },
        {
          "value": "hide-non-executing-code",
          "expanded": "hide-non-executing-code",
          "uuid": "8110e93e-8e66-5555-8e9c-660b1b58b281"
        },
        {
          "value": "host-configuration-probing",
          "expanded": "host-configuration-probing",
          "uuid": "52302bea-9018-5190-96af-3289fdcc3d2c"
        },
        {
          "value": "information-gathering-for-improvement",
          "expanded": "information-gathering-for-improvement",
          "uuid": "ceb18401-7018-5f63-868e-ddd12649a5f4"
        },
        {
          "value": "input-peripheral-capture",
          "expanded": "input-peripheral-capture",
          "uuid": "c5ec9b3f-06fe-59ba-ab7b-72c7d5deb306"
        },
        {
          "value": "install-other-components",
          "expanded": "install-other-components",
          "uuid": "f36f99f2-10c1-54d2-80bb-22507c50988f"
        },
        {
          "value": "local-machine-control",
          "expanded": "local-machine-control",
          "uuid": "f3ea924e-dc92-5084-86ce-d2bfe311629a"
        },
        {
          "value": "network-environment-probing",
          "expanded": "network-environment-probing",
          "uuid": "de9a816b-1598-5149-a0bc-a951c434e0c3"
        },
        {
          "value": "os-security-feature-degradation",
          "expanded": "os-security-feature-degradation",
          "uuid": "c4f5f0e2-828a-5874-af2d-3754ec70f051"
        },
        {
          "value": "output-peripheral-capture",
          "expanded": "output-peripheral-capture",
          "uuid": "7ff75ba2-c2fa-5306-a6b7-77f5142fe081"
        },
        {
          "value": "physical-entity-destruction",
          "expanded": "physical-entity-destruction",
          "uuid": "33514b3f-3775-57a0-b4a5-f270f125717d"
        },
        {
          "value": "prevent-artifact-access",
          "expanded": "prevent-artifact-access",
          "uuid": "a00a7645-b2ae-5f2b-aaca-d9c304b185bd"
        },
        {
          "value": "prevent-artifact-deletion",
          "expanded": "prevent-artifact-deletion",
          "uuid": "782dfda2-4d1c-54ef-93d2-b6e3d419d433"
        },
        {
          "value": "remote-machine-access",
          "expanded": "remote-machine-access",
          "uuid": "42bc8a98-939b-5dc1-b780-c32f25062d8e"
        },
        {
          "value": "security-software-degradation",
          "expanded": "security-software-degradation",
          "uuid": "051c5fd7-c9f9-5c80-a297-3ee0cb28c245"
        },
        {
          "value": "security-software-evasion",
          "expanded": "security-software-evasion",
          "uuid": "5b54485b-1bc0-50bb-bd98-8eb8dc577735"
        },
        {
          "value": "self-modification",
          "expanded": "self-modification",
          "uuid": "a4a92046-7d9a-5cdf-a32a-a0793ceda065"
        },
        {
          "value": "service-provider-security-feature-degradation",
          "expanded": "service-provider-security-feature-degradation",
          "uuid": "44136690-d922-5aaa-890e-13743a7167de"
        },
        {
          "value": "stored-information-theft",
          "expanded": "stored-information-theft",
          "uuid": "59d3d3bb-d1f6-5a54-9111-3438ae19bac7"
        },
        {
          "value": "system-interface-data-capture",
          "expanded": "system-interface-data-capture",
          "uuid": "b67f495a-2d0f-5dca-a176-16b798a93023"
        },
        {
          "value": "system-operational-integrity-violation",
          "expanded": "system-operational-integrity-violation",
          "uuid": "c35d8c4e-de7e-5b7f-b193-56a875479104"
        },
        {
          "value": "system-re-infection",
          "expanded": "system-re-infection",
          "uuid": "a9216f41-6de1-528a-9d0d-587debe0676c"
        },
        {
          "value": "system-state-data-capture",
          "expanded": "system-state-data-capture",
          "uuid": "9b10c0e3-e5a7-5543-92ce-74cdce7d818f"
        },
        {
          "value": "system-update-degradation",
          "expanded": "system-update-degradation",
          "uuid": "4126619e-462d-5073-84b2-a4c1dd10a6ac"
        },
        {
          "value": "user-data-theft",
          "expanded": "user-data-theft",
          "uuid": "cd5ce58b-39ac-5b12-9254-ff6b4e82385d"
        },
        {
          "value": "virtual-entity-destruction",
          "expanded": "virtual-entity-destruction",
          "uuid": "79b60eaa-b35f-5f21-ab6c-483715b7bb54"
        }
      ]
    }
  ],
  "uuid": "3cbd62f9-3361-58bd-9bca-140de7ecc1be"
}