{"type": "bundle", "id": "bundle--48251060-1184-4ce6-ab24-cf4fc285b7be", "objects": [{"type": "malware", "spec_version": "2.1", "id": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13", "created": "2026-10-09T15:13:08.136443Z", "modified": "2026-10-09T15:13:08.136443Z", "name": "TheTruthSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47921e14-2c13-4c73-bb3e-5e5014ca2b90", "created": "2026-10-09T15:13:08.136715Z", "modified": "2026-10-09T15:13:08.136715Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='1ca43.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.136715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c1a8444-b9de-4687-a08d-3b9e1c5796c0", "created": "2026-10-09T15:13:08.142148Z", "modified": "2026-10-09T15:13:08.142148Z", "relationship_type": "indicates", "source_ref": "indicator--47921e14-2c13-4c73-bb3e-5e5014ca2b90", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d4af0f-77e0-45d3-8d67-5d5782d6a35b", "created": "2026-10-09T15:13:08.142708Z", "modified": "2026-10-09T15:13:08.142708Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.142708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7ebebdb-5413-48f7-9af7-4f9bfe9c77cf", "created": "2026-10-09T15:13:08.143425Z", "modified": "2026-10-09T15:13:08.143425Z", "relationship_type": "indicates", "source_ref": "indicator--76d4af0f-77e0-45d3-8d67-5d5782d6a35b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e04852-1002-4960-95a2-47f68b699366", "created": "2026-10-09T15:13:08.143564Z", "modified": "2026-10-09T15:13:08.143564Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.143564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e5b454e-b6f4-42cc-ab09-516f668dfd9a", "created": "2026-10-09T15:13:08.144209Z", "modified": "2026-10-09T15:13:08.144209Z", "relationship_type": "indicates", "source_ref": "indicator--36e04852-1002-4960-95a2-47f68b699366", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b7af73-4f7a-42e3-8cbb-fa2a8198ee92", "created": "2026-10-09T15:13:08.144358Z", "modified": "2026-10-09T15:13:08.144358Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.144358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa1a3c6c-6293-4772-a876-bd48329f5f6d", "created": "2026-10-09T15:13:08.144993Z", "modified": "2026-10-09T15:13:08.144993Z", "relationship_type": "indicates", "source_ref": "indicator--87b7af73-4f7a-42e3-8cbb-fa2a8198ee92", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f34517-e233-4fab-83a4-259eda882572", "created": "2026-10-09T15:13:08.145119Z", "modified": "2026-10-09T15:13:08.145119Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.145119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5ea9f3c-6e24-4060-aff4-371a13d94a19", "created": "2026-10-09T15:13:08.145801Z", "modified": "2026-10-09T15:13:08.145801Z", "relationship_type": "indicates", "source_ref": "indicator--a3f34517-e233-4fab-83a4-259eda882572", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b75fa9-8da1-43cf-a4c9-68aabfae8fe9", "created": "2026-10-09T15:13:08.145927Z", "modified": "2026-10-09T15:13:08.145927Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.145927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3da81805-6d2b-4b6a-9df3-cabe12e91e24", "created": "2026-10-09T15:13:08.146504Z", "modified": "2026-10-09T15:13:08.146504Z", "relationship_type": "indicates", "source_ref": "indicator--42b75fa9-8da1-43cf-a4c9-68aabfae8fe9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381a0243-458b-480b-be82-1b307a9218e7", "created": "2026-10-09T15:13:08.146634Z", "modified": "2026-10-09T15:13:08.146634Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.146634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4702858e-c5d3-478b-8847-92da8c917c00", "created": "2026-10-09T15:13:08.147287Z", "modified": "2026-10-09T15:13:08.147287Z", "relationship_type": "indicates", "source_ref": "indicator--381a0243-458b-480b-be82-1b307a9218e7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ea9f0f-c8ba-445d-8dea-574c112fd48f", "created": "2026-10-09T15:13:08.147416Z", "modified": "2026-10-09T15:13:08.147416Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.147416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5681325d-9a4b-40a7-99e4-c67579e6cece", "created": "2026-10-09T15:13:08.14798Z", "modified": "2026-10-09T15:13:08.14798Z", "relationship_type": "indicates", "source_ref": "indicator--73ea9f0f-c8ba-445d-8dea-574c112fd48f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f702682-ec43-4a0d-ac67-b1f2e913e3c9", "created": "2026-10-09T15:13:08.148112Z", "modified": "2026-10-09T15:13:08.148112Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.148112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2e9bbcf-425b-415a-870c-33dbb9fae8be", "created": "2026-10-09T15:13:08.148682Z", "modified": "2026-10-09T15:13:08.148682Z", "relationship_type": "indicates", "source_ref": "indicator--9f702682-ec43-4a0d-ac67-b1f2e913e3c9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753c510c-6d12-4056-8889-157ecbc7d6e2", "created": "2026-10-09T15:13:08.14881Z", "modified": "2026-10-09T15:13:08.14881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a100.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.14881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62189e62-16a2-4b36-89dd-24afb106fd59", "created": "2026-10-09T15:13:08.149432Z", "modified": "2026-10-09T15:13:08.149432Z", "relationship_type": "indicates", "source_ref": "indicator--753c510c-6d12-4056-8889-157ecbc7d6e2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9aa3b3-e884-4a2a-be10-e52e47f69fbb", "created": "2026-10-09T15:13:08.149565Z", "modified": "2026-10-09T15:13:08.149565Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a100.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.149565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09292575-33d1-4473-be68-18ce763e96c1", "created": "2026-10-09T15:13:08.15007Z", "modified": "2026-10-09T15:13:08.15007Z", "relationship_type": "indicates", "source_ref": "indicator--8b9aa3b3-e884-4a2a-be10-e52e47f69fbb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd489b2-e8e2-4d4d-96b1-61261ac4ccd9", "created": "2026-10-09T15:13:08.150194Z", "modified": "2026-10-09T15:13:08.150194Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a600.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.150194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19c6476e-e024-49dc-bc97-c3ab253896be", "created": "2026-10-09T15:13:08.150759Z", "modified": "2026-10-09T15:13:08.150759Z", "relationship_type": "indicates", "source_ref": "indicator--5bd489b2-e8e2-4d4d-96b1-61261ac4ccd9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1275219f-71cb-4fc4-b506-e676fe37e1ed", "created": "2026-10-09T15:13:08.150883Z", "modified": "2026-10-09T15:13:08.150883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a621.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.150883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e19f43bc-5b9b-46d0-8363-533b46539b17", "created": "2026-10-09T15:13:08.15145Z", "modified": "2026-10-09T15:13:08.15145Z", "relationship_type": "indicates", "source_ref": "indicator--1275219f-71cb-4fc4-b506-e676fe37e1ed", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e555a9-a632-472f-8fc6-fae156215634", "created": "2026-10-09T15:13:08.151576Z", "modified": "2026-10-09T15:13:08.151576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a696.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.151576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15d0b94b-39d8-4e80-b9a6-511d7d274309", "created": "2026-10-09T15:13:08.152069Z", "modified": "2026-10-09T15:13:08.152069Z", "relationship_type": "indicates", "source_ref": "indicator--87e555a9-a632-472f-8fc6-fae156215634", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95597e34-3c12-4116-a38e-3ca1a4cbcf78", "created": "2026-10-09T15:13:08.152192Z", "modified": "2026-10-09T15:13:08.152192Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a710.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.152192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fd68ddf-4440-47ef-abf7-5e227f13bb7b", "created": "2026-10-09T15:13:08.152771Z", "modified": "2026-10-09T15:13:08.152771Z", "relationship_type": "indicates", "source_ref": "indicator--95597e34-3c12-4116-a38e-3ca1a4cbcf78", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79abee9b-83a4-4f6b-97ab-31aaff998449", "created": "2026-10-09T15:13:08.152898Z", "modified": "2026-10-09T15:13:08.152898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a740.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.152898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89e37874-0424-402c-8be7-3c0d68875bbc", "created": "2026-10-09T15:13:08.153399Z", "modified": "2026-10-09T15:13:08.153399Z", "relationship_type": "indicates", "source_ref": "indicator--79abee9b-83a4-4f6b-97ab-31aaff998449", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3925b7fd-50e9-4963-bd1b-85b1b5953652", "created": "2026-10-09T15:13:08.153522Z", "modified": "2026-10-09T15:13:08.153522Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a743.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.153522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3daf65f0-25f5-4591-8ef1-e232bc436ecb", "created": "2026-10-09T15:13:08.154127Z", "modified": "2026-10-09T15:13:08.154127Z", "relationship_type": "indicates", "source_ref": "indicator--3925b7fd-50e9-4963-bd1b-85b1b5953652", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513c998f-0782-4bc6-965a-899c00f9b1ce", "created": "2026-10-09T15:13:08.154256Z", "modified": "2026-10-09T15:13:08.154256Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a746.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.154256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b32bf3c9-27a6-4425-beca-5e2ae6079104", "created": "2026-10-09T15:13:08.154767Z", "modified": "2026-10-09T15:13:08.154767Z", "relationship_type": "indicates", "source_ref": "indicator--513c998f-0782-4bc6-965a-899c00f9b1ce", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f03ae2-7451-4ba8-a5d5-aa634fad2dde", "created": "2026-10-09T15:13:08.154893Z", "modified": "2026-10-09T15:13:08.154893Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a747.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.154893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cc6f904-cd34-49a9-a1d3-df392aacbcc9", "created": "2026-10-09T15:13:08.155398Z", "modified": "2026-10-09T15:13:08.155398Z", "relationship_type": "indicates", "source_ref": "indicator--72f03ae2-7451-4ba8-a5d5-aa634fad2dde", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110d89da-8781-4749-9505-237fe3247859", "created": "2026-10-09T15:13:08.155524Z", "modified": "2026-10-09T15:13:08.155524Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a748.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.155524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cdae27f-2d52-4712-863a-ca82d0d7edbb", "created": "2026-10-09T15:13:08.156075Z", "modified": "2026-10-09T15:13:08.156075Z", "relationship_type": "indicates", "source_ref": "indicator--110d89da-8781-4749-9505-237fe3247859", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e85f31-f9ee-4543-848a-8c8455803c8a", "created": "2026-10-09T15:13:08.156198Z", "modified": "2026-10-09T15:13:08.156198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a749.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.156198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc23ef7c-b8e6-4660-86c8-00f36579ace4", "created": "2026-10-09T15:13:08.156733Z", "modified": "2026-10-09T15:13:08.156733Z", "relationship_type": "indicates", "source_ref": "indicator--37e85f31-f9ee-4543-848a-8c8455803c8a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8405a64a-1a32-464e-815c-1a2df1dbe862", "created": "2026-10-09T15:13:08.15686Z", "modified": "2026-10-09T15:13:08.15686Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a780.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.15686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21c6f948-f400-4ac2-9393-faa43fc5a3d1", "created": "2026-10-09T15:13:08.157374Z", "modified": "2026-10-09T15:13:08.157374Z", "relationship_type": "indicates", "source_ref": "indicator--8405a64a-1a32-464e-815c-1a2df1dbe862", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7457775d-d611-45e7-bb28-707823454ff4", "created": "2026-10-09T15:13:08.157497Z", "modified": "2026-10-09T15:13:08.157497Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a785.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.157497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62c99f81-2c62-458a-8958-7412836b5db4", "created": "2026-10-09T15:13:08.158058Z", "modified": "2026-10-09T15:13:08.158058Z", "relationship_type": "indicates", "source_ref": "indicator--7457775d-d611-45e7-bb28-707823454ff4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3da2f72-cd56-4c55-8487-8b0d888da708", "created": "2026-10-09T15:13:08.158184Z", "modified": "2026-10-09T15:13:08.158184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a7xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.158184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4579eeda-5dda-4b97-be8e-91ca27b1db9f", "created": "2026-10-09T15:13:08.158685Z", "modified": "2026-10-09T15:13:08.158685Z", "relationship_type": "indicates", "source_ref": "indicator--d3da2f72-cd56-4c55-8487-8b0d888da708", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd70e83-d37f-4835-9ee0-4e25140ac83e", "created": "2026-10-09T15:13:08.158805Z", "modified": "2026-10-09T15:13:08.158805Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a810.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.158805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b0c210a-602b-4b9b-9fc4-20099be09165", "created": "2026-10-09T15:13:08.159299Z", "modified": "2026-10-09T15:13:08.159299Z", "relationship_type": "indicates", "source_ref": "indicator--fcd70e83-d37f-4835-9ee0-4e25140ac83e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e2825f-1f0e-4b43-93d7-d047121c2e3e", "created": "2026-10-09T15:13:08.159422Z", "modified": "2026-10-09T15:13:08.159422Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a820.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.159422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b303913-ff07-4fb9-935c-bd0bbbf02f65", "created": "2026-10-09T15:13:08.15991Z", "modified": "2026-10-09T15:13:08.15991Z", "relationship_type": "indicates", "source_ref": "indicator--88e2825f-1f0e-4b43-93d7-d047121c2e3e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385524a4-acef-4de1-96e6-0479bbed1e03", "created": "2026-10-09T15:13:08.160032Z", "modified": "2026-10-09T15:13:08.160032Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a825.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.160032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--918c7e77-c980-4c6e-822e-fce7b46240de", "created": "2026-10-09T15:13:08.160624Z", "modified": "2026-10-09T15:13:08.160624Z", "relationship_type": "indicates", "source_ref": "indicator--385524a4-acef-4de1-96e6-0479bbed1e03", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d032655-2dd6-461f-9a7d-1627b0f125c7", "created": "2026-10-09T15:13:08.160747Z", "modified": "2026-10-09T15:13:08.160747Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a830.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.160747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1433e7b8-40fc-465a-8061-71c51ec05fc0", "created": "2026-10-09T15:13:08.161229Z", "modified": "2026-10-09T15:13:08.161229Z", "relationship_type": "indicates", "source_ref": "indicator--0d032655-2dd6-461f-9a7d-1627b0f125c7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d2ea6-5770-4050-9230-df6f6c5272f7", "created": "2026-10-09T15:13:08.161362Z", "modified": "2026-10-09T15:13:08.161362Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a835.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.161362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10ef7abb-6477-4608-bdc2-f7cf99315caa", "created": "2026-10-09T15:13:08.161851Z", "modified": "2026-10-09T15:13:08.161851Z", "relationship_type": "indicates", "source_ref": "indicator--b37d2ea6-5770-4050-9230-df6f6c5272f7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86943a44-e8eb-4c97-9ab6-a3c0dc4b15a5", "created": "2026-10-09T15:13:08.16197Z", "modified": "2026-10-09T15:13:08.16197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a895.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.16197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a00a5a0e-ffb8-4574-a285-8625fa803377", "created": "2026-10-09T15:13:08.162462Z", "modified": "2026-10-09T15:13:08.162462Z", "relationship_type": "indicates", "source_ref": "indicator--86943a44-e8eb-4c97-9ab6-a3c0dc4b15a5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cec954-aae1-4f1f-a44f-c591e0d31ccd", "created": "2026-10-09T15:13:08.162582Z", "modified": "2026-10-09T15:13:08.162582Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a8xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.162582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--409401cd-6b35-45a0-bef1-95b4b25964ec", "created": "2026-10-09T15:13:08.163062Z", "modified": "2026-10-09T15:13:08.163062Z", "relationship_type": "indicates", "source_ref": "indicator--98cec954-aae1-4f1f-a44f-c591e0d31ccd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d8be7e-2009-468b-a0b1-aee4bba94008", "created": "2026-10-09T15:13:08.163181Z", "modified": "2026-10-09T15:13:08.163181Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a910.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.163181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f07ded50-a6ed-4981-b0fb-32592dbc02fa", "created": "2026-10-09T15:13:08.16369Z", "modified": "2026-10-09T15:13:08.16369Z", "relationship_type": "indicates", "source_ref": "indicator--51d8be7e-2009-468b-a0b1-aee4bba94008", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a8d2ee-0b95-4739-8ffd-493b65787e42", "created": "2026-10-09T15:13:08.163813Z", "modified": "2026-10-09T15:13:08.163813Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a915.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.163813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3238eb4-a696-4b95-8753-b2b465875474", "created": "2026-10-09T15:13:08.164324Z", "modified": "2026-10-09T15:13:08.164324Z", "relationship_type": "indicates", "source_ref": "indicator--88a8d2ee-0b95-4739-8ffd-493b65787e42", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f54a69-da90-4a3d-aea7-aa412a9d4746", "created": "2026-10-09T15:13:08.164452Z", "modified": "2026-10-09T15:13:08.164452Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a920.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.164452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c16f48d-0f1d-48a3-b480-0327148eb60e", "created": "2026-10-09T15:13:08.16495Z", "modified": "2026-10-09T15:13:08.16495Z", "relationship_type": "indicates", "source_ref": "indicator--e9f54a69-da90-4a3d-aea7-aa412a9d4746", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea08d1b1-1869-41e6-96bd-c91a99135335", "created": "2026-10-09T15:13:08.165072Z", "modified": "2026-10-09T15:13:08.165072Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a925.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.165072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f30c280b-f505-4ba2-9e5e-e86ccfd3872c", "created": "2026-10-09T15:13:08.165569Z", "modified": "2026-10-09T15:13:08.165569Z", "relationship_type": "indicates", "source_ref": "indicator--ea08d1b1-1869-41e6-96bd-c91a99135335", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a655e1d-8865-4161-8582-d8a4836bdc58", "created": "2026-10-09T15:13:08.165693Z", "modified": "2026-10-09T15:13:08.165693Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a930.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.165693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c702033-cc84-4eeb-9d0b-183eb99f5dcd", "created": "2026-10-09T15:13:08.166296Z", "modified": "2026-10-09T15:13:08.166296Z", "relationship_type": "indicates", "source_ref": "indicator--0a655e1d-8865-4161-8582-d8a4836bdc58", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86f0253-9e9a-4bfe-9bba-4715893c700c", "created": "2026-10-09T15:13:08.166424Z", "modified": "2026-10-09T15:13:08.166424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a935.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.166424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5a2b177-2076-4eaf-b785-2dd4c87bc5f2", "created": "2026-10-09T15:13:08.166914Z", "modified": "2026-10-09T15:13:08.166914Z", "relationship_type": "indicates", "source_ref": "indicator--b86f0253-9e9a-4bfe-9bba-4715893c700c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1119c574-697c-44ea-a678-48cdc15efb3a", "created": "2026-10-09T15:13:08.167035Z", "modified": "2026-10-09T15:13:08.167035Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a940.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.167035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b354576f-392b-43bf-910f-88acef0268f0", "created": "2026-10-09T15:13:08.167531Z", "modified": "2026-10-09T15:13:08.167531Z", "relationship_type": "indicates", "source_ref": "indicator--1119c574-697c-44ea-a678-48cdc15efb3a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b7939f-8c2e-43ad-bbf4-0f1d49a824da", "created": "2026-10-09T15:13:08.167654Z", "modified": "2026-10-09T15:13:08.167654Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a941.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.167654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e28bd55-aaa5-45c3-b620-4335e74f940a", "created": "2026-10-09T15:13:08.168137Z", "modified": "2026-10-09T15:13:08.168137Z", "relationship_type": "indicates", "source_ref": "indicator--e0b7939f-8c2e-43ad-bbf4-0f1d49a824da", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c750b9f-0555-4221-b8cc-343ef3b5d784", "created": "2026-10-09T15:13:08.168256Z", "modified": "2026-10-09T15:13:08.168256Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a942.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.168256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76ed9f16-8428-4c35-afc6-916cd39bac23", "created": "2026-10-09T15:13:08.168756Z", "modified": "2026-10-09T15:13:08.168756Z", "relationship_type": "indicates", "source_ref": "indicator--1c750b9f-0555-4221-b8cc-343ef3b5d784", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6880564-5c24-47a9-8e03-8320efbfdcd2", "created": "2026-10-09T15:13:08.168874Z", "modified": "2026-10-09T15:13:08.168874Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a943.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.168874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b02be169-d7d7-4165-a89d-d04ed50f7c3d", "created": "2026-10-09T15:13:08.169369Z", "modified": "2026-10-09T15:13:08.169369Z", "relationship_type": "indicates", "source_ref": "indicator--e6880564-5c24-47a9-8e03-8320efbfdcd2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f990ab55-57d1-458b-819a-f31010c5e6dc", "created": "2026-10-09T15:13:08.169489Z", "modified": "2026-10-09T15:13:08.169489Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a944.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.169489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72f086af-b1ee-42a8-878c-c1913285861d", "created": "2026-10-09T15:13:08.169978Z", "modified": "2026-10-09T15:13:08.169978Z", "relationship_type": "indicates", "source_ref": "indicator--f990ab55-57d1-458b-819a-f31010c5e6dc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e08cec4-e49c-458d-89c5-c58486653a78", "created": "2026-10-09T15:13:08.1701Z", "modified": "2026-10-09T15:13:08.1701Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a945.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.1701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22433f4c-2ce9-4448-a472-2f2b230aa366", "created": "2026-10-09T15:13:08.170602Z", "modified": "2026-10-09T15:13:08.170602Z", "relationship_type": "indicates", "source_ref": "indicator--0e08cec4-e49c-458d-89c5-c58486653a78", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0439e18-ba0b-4ebf-a400-4b506ae9e846", "created": "2026-10-09T15:13:08.170723Z", "modified": "2026-10-09T15:13:08.170723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a946.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.170723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a89e842-55b3-48fb-8982-df8e6f717bef", "created": "2026-10-09T15:13:08.171205Z", "modified": "2026-10-09T15:13:08.171205Z", "relationship_type": "indicates", "source_ref": "indicator--c0439e18-ba0b-4ebf-a400-4b506ae9e846", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b03dd2f-1cda-48bd-9fb0-42534c382887", "created": "2026-10-09T15:13:08.171335Z", "modified": "2026-10-09T15:13:08.171335Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a947.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.171335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b0ba993-bab3-40fc-b384-ebf8688d3212", "created": "2026-10-09T15:13:08.171929Z", "modified": "2026-10-09T15:13:08.171929Z", "relationship_type": "indicates", "source_ref": "indicator--3b03dd2f-1cda-48bd-9fb0-42534c382887", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabed019-7438-4a4e-8dc0-92316500405d", "created": "2026-10-09T15:13:08.172049Z", "modified": "2026-10-09T15:13:08.172049Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync.systemserviceprovider.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.172049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03c5b7f6-7200-4893-ae62-b0d98353ddab", "created": "2026-10-09T15:13:08.172647Z", "modified": "2026-10-09T15:13:08.172647Z", "relationship_type": "indicates", "source_ref": "indicator--cabed019-7438-4a4e-8dc0-92316500405d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa46969-7d0c-4bf8-b044-522ccdbf8288", "created": "2026-10-09T15:13:08.172781Z", "modified": "2026-10-09T15:13:08.172781Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.172781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21e02086-dc95-4fb8-90b3-2d68eef15abd", "created": "2026-10-09T15:13:08.17326Z", "modified": "2026-10-09T15:13:08.17326Z", "relationship_type": "indicates", "source_ref": "indicator--1fa46969-7d0c-4bf8-b044-522ccdbf8288", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7deb3d7b-3fa3-41ad-bb25-8aef9d874a51", "created": "2026-10-09T15:13:08.173397Z", "modified": "2026-10-09T15:13:08.173397Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='microtracker-1ca43.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.173397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b31402c6-62f2-4717-ab7b-29d3bb411c12", "created": "2026-10-09T15:13:08.173959Z", "modified": "2026-10-09T15:13:08.173959Z", "relationship_type": "indicates", "source_ref": "indicator--7deb3d7b-3fa3-41ad-bb25-8aef9d874a51", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cc5771-98ec-423e-bd22-7c340047ff5a", "created": "2026-10-09T15:13:08.174083Z", "modified": "2026-10-09T15:13:08.174083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.174083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5993239d-e9c2-4ea4-a2ce-bd80612ec80d", "created": "2026-10-09T15:13:08.174556Z", "modified": "2026-10-09T15:13:08.174556Z", "relationship_type": "indicates", "source_ref": "indicator--77cc5771-98ec-423e-bd22-7c340047ff5a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5d0a7d-655b-43b2-901a-b8b565e42386", "created": "2026-10-09T15:13:08.174681Z", "modified": "2026-10-09T15:13:08.174681Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.174681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d52a976a-9631-4a21-9d5b-c8c52cdc7e7e", "created": "2026-10-09T15:13:08.17514Z", "modified": "2026-10-09T15:13:08.17514Z", "relationship_type": "indicates", "source_ref": "indicator--7c5d0a7d-655b-43b2-901a-b8b565e42386", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bdba25-3a69-4bbb-bc1b-77fc46978cb2", "created": "2026-10-09T15:13:08.175258Z", "modified": "2026-10-09T15:13:08.175258Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.175258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62b89b0c-bec0-4082-8d4e-b035cbb9fc3b", "created": "2026-10-09T15:13:08.175742Z", "modified": "2026-10-09T15:13:08.175742Z", "relationship_type": "indicates", "source_ref": "indicator--38bdba25-3a69-4bbb-bc1b-77fc46978cb2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4ff830-1d0d-4b2d-8781-c6fee4d0ac68", "created": "2026-10-09T15:13:08.175867Z", "modified": "2026-10-09T15:13:08.175867Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.175867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94d783c1-a49a-4341-938e-e570c24d9c4c", "created": "2026-10-09T15:13:08.17635Z", "modified": "2026-10-09T15:13:08.17635Z", "relationship_type": "indicates", "source_ref": "indicator--6a4ff830-1d0d-4b2d-8781-c6fee4d0ac68", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b7ed9e-b66c-47b0-a805-29561e9788ef", "created": "2026-10-09T15:13:08.176471Z", "modified": "2026-10-09T15:13:08.176471Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.thespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.176471Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5a2d6be-518d-46c6-9678-0149030f1f80", "created": "2026-10-09T15:13:08.176938Z", "modified": "2026-10-09T15:13:08.176938Z", "relationship_type": "indicates", "source_ref": "indicator--56b7ed9e-b66c-47b0-a805-29561e9788ef", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0779cb0-53c9-4fe0-bc35-5012ff411c1f", "created": "2026-10-09T15:13:08.177056Z", "modified": "2026-10-09T15:13:08.177056Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.177056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27a4ffe2-dda4-4005-9159-0b29440813b6", "created": "2026-10-09T15:13:08.177748Z", "modified": "2026-10-09T15:13:08.177748Z", "relationship_type": "indicates", "source_ref": "indicator--b0779cb0-53c9-4fe0-bc35-5012ff411c1f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fe83c4-638f-47b3-b1bf-d5f5bed0bcd0", "created": "2026-10-09T15:13:08.177881Z", "modified": "2026-10-09T15:13:08.177881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracking.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.177881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80c36a76-7b3d-4510-bf44-8906d5bf23a5", "created": "2026-10-09T15:13:08.178378Z", "modified": "2026-10-09T15:13:08.178378Z", "relationship_type": "indicates", "source_ref": "indicator--85fe83c4-638f-47b3-b1bf-d5f5bed0bcd0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74bfa24-5353-4350-b5ce-fea5480c3b2e", "created": "2026-10-09T15:13:08.178504Z", "modified": "2026-10-09T15:13:08.178504Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.inospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.178504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a5ca2c1-1ecd-4bc5-bd99-43e1d9027250", "created": "2026-10-09T15:13:08.178978Z", "modified": "2026-10-09T15:13:08.178978Z", "relationship_type": "indicates", "source_ref": "indicator--b74bfa24-5353-4350-b5ce-fea5480c3b2e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34ab535-86b5-443f-b749-7c973edf9563", "created": "2026-10-09T15:13:08.179101Z", "modified": "2026-10-09T15:13:08.179101Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.179101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b84e6d45-2ce2-49bd-bc9d-3612364d2b29", "created": "2026-10-09T15:13:08.179591Z", "modified": "2026-10-09T15:13:08.179591Z", "relationship_type": "indicates", "source_ref": "indicator--d34ab535-86b5-443f-b749-7c973edf9563", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8e19e6-6dcf-4ee7-a997-c9ea2cc75436", "created": "2026-10-09T15:13:08.179718Z", "modified": "2026-10-09T15:13:08.179718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.179718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf48c636-3394-4f87-a98f-4c04a990a7b8", "created": "2026-10-09T15:13:08.180203Z", "modified": "2026-10-09T15:13:08.180203Z", "relationship_type": "indicates", "source_ref": "indicator--bc8e19e6-6dcf-4ee7-a997-c9ea2cc75436", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38fe17a-829f-4bb8-bafb-a09c8c8d7bdf", "created": "2026-10-09T15:13:08.180333Z", "modified": "2026-10-09T15:13:08.180333Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.180333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee4c363c-e540-4b65-9f76-c78fdf7a8ea0", "created": "2026-10-09T15:13:08.180819Z", "modified": "2026-10-09T15:13:08.180819Z", "relationship_type": "indicates", "source_ref": "indicator--f38fe17a-829f-4bb8-bafb-a09c8c8d7bdf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46dde9b-bcd6-4c66-8408-2b7632e04b0a", "created": "2026-10-09T15:13:08.180941Z", "modified": "2026-10-09T15:13:08.180941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.180941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35f03b2b-4035-40a5-b31d-49fa32ff7f4c", "created": "2026-10-09T15:13:08.181429Z", "modified": "2026-10-09T15:13:08.181429Z", "relationship_type": "indicates", "source_ref": "indicator--d46dde9b-bcd6-4c66-8408-2b7632e04b0a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cc4660-c745-4361-844c-c13f6c1019f7", "created": "2026-10-09T15:13:08.181552Z", "modified": "2026-10-09T15:13:08.181552Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.181552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12f0fe2a-d686-4bef-bbc2-7f52cbd48e5a", "created": "2026-10-09T15:13:08.182029Z", "modified": "2026-10-09T15:13:08.182029Z", "relationship_type": "indicates", "source_ref": "indicator--53cc4660-c745-4361-844c-c13f6c1019f7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30f01cb-75da-40ad-bcc6-3c318c58429b", "created": "2026-10-09T15:13:08.182147Z", "modified": "2026-10-09T15:13:08.182147Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.182147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efbe8245-78c8-4e29-9877-a4c9de7b837e", "created": "2026-10-09T15:13:08.182628Z", "modified": "2026-10-09T15:13:08.182628Z", "relationship_type": "indicates", "source_ref": "indicator--c30f01cb-75da-40ad-bcc6-3c318c58429b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0827bf-1518-488a-8c40-a294c8397a03", "created": "2026-10-09T15:13:08.182749Z", "modified": "2026-10-09T15:13:08.182749Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.182749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6de4eb2-8c85-400d-af07-a1dc56dd4425", "created": "2026-10-09T15:13:08.183338Z", "modified": "2026-10-09T15:13:08.183338Z", "relationship_type": "indicates", "source_ref": "indicator--ae0827bf-1518-488a-8c40-a294c8397a03", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bf5f36-05b6-4a3a-8b2c-10d1e21b7859", "created": "2026-10-09T15:13:08.183469Z", "modified": "2026-10-09T15:13:08.183469Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a100.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.183469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f88710f-1f25-4b87-b299-bfbb63a6381a", "created": "2026-10-09T15:13:08.183973Z", "modified": "2026-10-09T15:13:08.183973Z", "relationship_type": "indicates", "source_ref": "indicator--00bf5f36-05b6-4a3a-8b2c-10d1e21b7859", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a5d628-98d0-4273-9dc1-2e246beb7284", "created": "2026-10-09T15:13:08.184098Z", "modified": "2026-10-09T15:13:08.184098Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a100.phoneparental.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.184098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--854c7ec5-7181-42f7-afcf-633fe832b8b2", "created": "2026-10-09T15:13:08.184601Z", "modified": "2026-10-09T15:13:08.184601Z", "relationship_type": "indicates", "source_ref": "indicator--11a5d628-98d0-4273-9dc1-2e246beb7284", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b4438-1acf-4dc2-845b-0d78a65a8f57", "created": "2026-10-09T15:13:08.184727Z", "modified": "2026-10-09T15:13:08.184727Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a100.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.184727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42284ca7-3f47-49e2-9d1e-a0d4bbe57638", "created": "2026-10-09T15:13:08.185211Z", "modified": "2026-10-09T15:13:08.185211Z", "relationship_type": "indicates", "source_ref": "indicator--ab5b4438-1acf-4dc2-845b-0d78a65a8f57", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ca3ae6-827e-48cc-9434-b80b8e369ed9", "created": "2026-10-09T15:13:08.185345Z", "modified": "2026-10-09T15:13:08.185345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a5.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.185345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c819212-9320-43a6-96ff-e02c4f8fda4c", "created": "2026-10-09T15:13:08.185826Z", "modified": "2026-10-09T15:13:08.185826Z", "relationship_type": "indicates", "source_ref": "indicator--80ca3ae6-827e-48cc-9434-b80b8e369ed9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab44af6-b046-4d05-924c-eeb6527f3689", "created": "2026-10-09T15:13:08.185945Z", "modified": "2026-10-09T15:13:08.185945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a58.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.185945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b20c03c5-dc84-42de-8fe2-a9318929cee5", "created": "2026-10-09T15:13:08.186447Z", "modified": "2026-10-09T15:13:08.186447Z", "relationship_type": "indicates", "source_ref": "indicator--eab44af6-b046-4d05-924c-eeb6527f3689", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94191d4-dcaf-42e4-af3e-bb86e1ec1482", "created": "2026-10-09T15:13:08.186573Z", "modified": "2026-10-09T15:13:08.186573Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a59.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.186573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d65ce5d-c49a-4185-8dfc-552bb2c79356", "created": "2026-10-09T15:13:08.187063Z", "modified": "2026-10-09T15:13:08.187063Z", "relationship_type": "indicates", "source_ref": "indicator--d94191d4-dcaf-42e4-af3e-bb86e1ec1482", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba486ba6-f394-4a3a-83e6-44981a2443c9", "created": "2026-10-09T15:13:08.187185Z", "modified": "2026-10-09T15:13:08.187185Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a6.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.187185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--616bc59c-585c-4fae-8f21-c2597cc19081", "created": "2026-10-09T15:13:08.187685Z", "modified": "2026-10-09T15:13:08.187685Z", "relationship_type": "indicates", "source_ref": "indicator--ba486ba6-f394-4a3a-83e6-44981a2443c9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f68cbf-e30a-4762-98f2-eaa4344c6fd8", "created": "2026-10-09T15:13:08.187807Z", "modified": "2026-10-09T15:13:08.187807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a60.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.187807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce7db0c6-5726-4830-b5ef-12ce1fbf5e91", "created": "2026-10-09T15:13:08.188295Z", "modified": "2026-10-09T15:13:08.188295Z", "relationship_type": "indicates", "source_ref": "indicator--10f68cbf-e30a-4762-98f2-eaa4344c6fd8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0cedf1-bdfc-4906-b088-2237b6ed5aff", "created": "2026-10-09T15:13:08.188416Z", "modified": "2026-10-09T15:13:08.188416Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a600.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.188416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2498cd9-255d-4983-ad6e-fade2661df0d", "created": "2026-10-09T15:13:08.189343Z", "modified": "2026-10-09T15:13:08.189343Z", "relationship_type": "indicates", "source_ref": "indicator--1e0cedf1-bdfc-4906-b088-2237b6ed5aff", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a56ec2-4b33-4368-b61a-8be3c31dd14e", "created": "2026-10-09T15:13:08.189475Z", "modified": "2026-10-09T15:13:08.189475Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a610.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.189475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad66a92a-66a8-4d03-a989-c93d2eb1b0f8", "created": "2026-10-09T15:13:08.189963Z", "modified": "2026-10-09T15:13:08.189963Z", "relationship_type": "indicates", "source_ref": "indicator--d4a56ec2-4b33-4368-b61a-8be3c31dd14e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954d83ec-a2be-4bcd-9dd9-0e45a5743b8f", "created": "2026-10-09T15:13:08.190087Z", "modified": "2026-10-09T15:13:08.190087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a610.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.190087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--556c8505-72c9-42c8-ad0e-80f0fad9b49b", "created": "2026-10-09T15:13:08.190584Z", "modified": "2026-10-09T15:13:08.190584Z", "relationship_type": "indicates", "source_ref": "indicator--954d83ec-a2be-4bcd-9dd9-0e45a5743b8f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cd7f82-d50a-4200-b783-3ce83efb2de8", "created": "2026-10-09T15:13:08.190705Z", "modified": "2026-10-09T15:13:08.190705Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a611.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.190705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--407710ef-a085-41e4-b309-54cabf50a335", "created": "2026-10-09T15:13:08.191188Z", "modified": "2026-10-09T15:13:08.191188Z", "relationship_type": "indicates", "source_ref": "indicator--83cd7f82-d50a-4200-b783-3ce83efb2de8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7263b82a-4bea-4734-8f47-789c6d2d379d", "created": "2026-10-09T15:13:08.191334Z", "modified": "2026-10-09T15:13:08.191334Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a611.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.191334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--251937de-b94c-4589-b0ef-60c5d5be0999", "created": "2026-10-09T15:13:08.191838Z", "modified": "2026-10-09T15:13:08.191838Z", "relationship_type": "indicates", "source_ref": "indicator--7263b82a-4bea-4734-8f47-789c6d2d379d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cb5c7a-2591-49c0-81b8-92e1b5e4d4a7", "created": "2026-10-09T15:13:08.191961Z", "modified": "2026-10-09T15:13:08.191961Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a612.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.191961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc08abac-2c1d-4da2-8c4c-5e5b728cb2c6", "created": "2026-10-09T15:13:08.19246Z", "modified": "2026-10-09T15:13:08.19246Z", "relationship_type": "indicates", "source_ref": "indicator--e9cb5c7a-2591-49c0-81b8-92e1b5e4d4a7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a65ae1-53b6-4ab0-94f1-270f6c962715", "created": "2026-10-09T15:13:08.192588Z", "modified": "2026-10-09T15:13:08.192588Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a614.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.192588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4de7346-194b-4157-aca7-c96d45dab4a2", "created": "2026-10-09T15:13:08.193067Z", "modified": "2026-10-09T15:13:08.193067Z", "relationship_type": "indicates", "source_ref": "indicator--f1a65ae1-53b6-4ab0-94f1-270f6c962715", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedb94de-8d46-4eef-a432-a8fbfd668b58", "created": "2026-10-09T15:13:08.193187Z", "modified": "2026-10-09T15:13:08.193187Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a615.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.193187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80fe8f95-e0d3-47d3-a0b1-66c8b4bb773d", "created": "2026-10-09T15:13:08.193684Z", "modified": "2026-10-09T15:13:08.193684Z", "relationship_type": "indicates", "source_ref": "indicator--aedb94de-8d46-4eef-a432-a8fbfd668b58", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9523a75c-f00c-493c-8dab-cade47bd5c19", "created": "2026-10-09T15:13:08.193804Z", "modified": "2026-10-09T15:13:08.193804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a616.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.193804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d734f84e-e432-4cb3-bc49-2b093edb0bcf", "created": "2026-10-09T15:13:08.1943Z", "modified": "2026-10-09T15:13:08.1943Z", "relationship_type": "indicates", "source_ref": "indicator--9523a75c-f00c-493c-8dab-cade47bd5c19", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f675e520-c937-4fef-a6d2-b3dca931b438", "created": "2026-10-09T15:13:08.194425Z", "modified": "2026-10-09T15:13:08.194425Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a617.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.194425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17ca7418-7e56-4769-96dc-fc16d688c919", "created": "2026-10-09T15:13:08.194912Z", "modified": "2026-10-09T15:13:08.194912Z", "relationship_type": "indicates", "source_ref": "indicator--f675e520-c937-4fef-a6d2-b3dca931b438", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58dddbc-4666-4da8-8b43-55d02041a4c9", "created": "2026-10-09T15:13:08.195042Z", "modified": "2026-10-09T15:13:08.195042Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a618.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.195042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c64048d-c49c-43ca-b28c-74ac3bb0b7a5", "created": "2026-10-09T15:13:08.195654Z", "modified": "2026-10-09T15:13:08.195654Z", "relationship_type": "indicates", "source_ref": "indicator--e58dddbc-4666-4da8-8b43-55d02041a4c9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb157ea-1290-420d-8de2-d70df795a066", "created": "2026-10-09T15:13:08.195781Z", "modified": "2026-10-09T15:13:08.195781Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a620.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.195781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0df430d-9ce2-4a05-8b7d-183a8926368c", "created": "2026-10-09T15:13:08.196278Z", "modified": "2026-10-09T15:13:08.196278Z", "relationship_type": "indicates", "source_ref": "indicator--6cb157ea-1290-420d-8de2-d70df795a066", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cce023-4923-40db-8429-96ca0d9dd8c2", "created": "2026-10-09T15:13:08.196406Z", "modified": "2026-10-09T15:13:08.196406Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a621.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.196406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--068bdead-c0b2-4b1a-b710-62b8c90629cb", "created": "2026-10-09T15:13:08.196892Z", "modified": "2026-10-09T15:13:08.196892Z", "relationship_type": "indicates", "source_ref": "indicator--e0cce023-4923-40db-8429-96ca0d9dd8c2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bc51be-5e9d-4277-80df-b1aa1b50657e", "created": "2026-10-09T15:13:08.197017Z", "modified": "2026-10-09T15:13:08.197017Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a65.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.197017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b89bee4f-e9ea-4f70-b492-d2384d99002c", "created": "2026-10-09T15:13:08.197523Z", "modified": "2026-10-09T15:13:08.197523Z", "relationship_type": "indicates", "source_ref": "indicator--24bc51be-5e9d-4277-80df-b1aa1b50657e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e830d8d2-387e-48bc-9332-4b2d2a8f9dfc", "created": "2026-10-09T15:13:08.197649Z", "modified": "2026-10-09T15:13:08.197649Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a69.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.197649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6608b47-6518-4298-9f2a-9b5f25ce362b", "created": "2026-10-09T15:13:08.198131Z", "modified": "2026-10-09T15:13:08.198131Z", "relationship_type": "indicates", "source_ref": "indicator--e830d8d2-387e-48bc-9332-4b2d2a8f9dfc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930b5854-49fb-4510-8011-c362b0325a57", "created": "2026-10-09T15:13:08.198253Z", "modified": "2026-10-09T15:13:08.198253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a696.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.198253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--190c6bdc-20bf-4df2-b71f-51bef1c3694d", "created": "2026-10-09T15:13:08.198758Z", "modified": "2026-10-09T15:13:08.198758Z", "relationship_type": "indicates", "source_ref": "indicator--930b5854-49fb-4510-8011-c362b0325a57", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5df269b-89de-4023-9586-53991ad2193a", "created": "2026-10-09T15:13:08.19888Z", "modified": "2026-10-09T15:13:08.19888Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a70.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.19888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef99290-b2b3-484e-a5b0-dafc93777de0", "created": "2026-10-09T15:13:08.199379Z", "modified": "2026-10-09T15:13:08.199379Z", "relationship_type": "indicates", "source_ref": "indicator--f5df269b-89de-4023-9586-53991ad2193a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc3b386-c08e-475e-b149-4cb16fa519da", "created": "2026-10-09T15:13:08.199502Z", "modified": "2026-10-09T15:13:08.199502Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a710.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.199502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99c7697d-39b9-401a-86fc-fa424fe3c850", "created": "2026-10-09T15:13:08.199981Z", "modified": "2026-10-09T15:13:08.199981Z", "relationship_type": "indicates", "source_ref": "indicator--bdc3b386-c08e-475e-b149-4cb16fa519da", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64964135-96b3-41df-80e2-15f343d9e5cd", "created": "2026-10-09T15:13:08.2001Z", "modified": "2026-10-09T15:13:08.2001Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a712.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.2001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e6fe451-6785-4786-9176-cce339e8644b", "created": "2026-10-09T15:13:08.200602Z", "modified": "2026-10-09T15:13:08.200602Z", "relationship_type": "indicates", "source_ref": "indicator--64964135-96b3-41df-80e2-15f343d9e5cd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53739809-8050-4af0-9559-b3a9573c6ab4", "created": "2026-10-09T15:13:08.200728Z", "modified": "2026-10-09T15:13:08.200728Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a72.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.200728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b0b8e8e-dcc4-484d-9fa5-64d279634ac9", "created": "2026-10-09T15:13:08.201332Z", "modified": "2026-10-09T15:13:08.201332Z", "relationship_type": "indicates", "source_ref": "indicator--53739809-8050-4af0-9559-b3a9573c6ab4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efba620f-f892-4acb-b1be-66da2ed519ab", "created": "2026-10-09T15:13:08.201461Z", "modified": "2026-10-09T15:13:08.201461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a720.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.201461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f21b8bfa-79d7-406b-93cb-e15407274bca", "created": "2026-10-09T15:13:08.201962Z", "modified": "2026-10-09T15:13:08.201962Z", "relationship_type": "indicates", "source_ref": "indicator--efba620f-f892-4acb-b1be-66da2ed519ab", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64de9a1-7461-40bf-83cb-8e10300d1507", "created": "2026-10-09T15:13:08.202084Z", "modified": "2026-10-09T15:13:08.202084Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a721.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.202084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac24be66-d806-4553-858a-968df3a59d83", "created": "2026-10-09T15:13:08.202588Z", "modified": "2026-10-09T15:13:08.202588Z", "relationship_type": "indicates", "source_ref": "indicator--d64de9a1-7461-40bf-83cb-8e10300d1507", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22ba675-161d-4e2b-8707-d878a3a67ad7", "created": "2026-10-09T15:13:08.202717Z", "modified": "2026-10-09T15:13:08.202717Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a722.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.202717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc97cbbb-dc68-4ea2-89ab-4b2ab2fdaefc", "created": "2026-10-09T15:13:08.203208Z", "modified": "2026-10-09T15:13:08.203208Z", "relationship_type": "indicates", "source_ref": "indicator--a22ba675-161d-4e2b-8707-d878a3a67ad7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75343c3c-8dad-4bde-aac0-b8325e3bdb8a", "created": "2026-10-09T15:13:08.203339Z", "modified": "2026-10-09T15:13:08.203339Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a723.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.203339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c6db347-a118-4297-85bc-c35b8f787919", "created": "2026-10-09T15:13:08.203829Z", "modified": "2026-10-09T15:13:08.203829Z", "relationship_type": "indicates", "source_ref": "indicator--75343c3c-8dad-4bde-aac0-b8325e3bdb8a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1ddb6c-ecb4-4ba0-89e3-418d1afbef91", "created": "2026-10-09T15:13:08.203948Z", "modified": "2026-10-09T15:13:08.203948Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a724.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.203948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--062a65a9-727c-4274-977d-151b7df54453", "created": "2026-10-09T15:13:08.204448Z", "modified": "2026-10-09T15:13:08.204448Z", "relationship_type": "indicates", "source_ref": "indicator--df1ddb6c-ecb4-4ba0-89e3-418d1afbef91", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd53b04-4d23-4cdd-81ef-7db5a87849f7", "created": "2026-10-09T15:13:08.204572Z", "modified": "2026-10-09T15:13:08.204572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a725.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.204572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c79e4747-013c-4ffa-a713-e96e2b084a07", "created": "2026-10-09T15:13:08.205065Z", "modified": "2026-10-09T15:13:08.205065Z", "relationship_type": "indicates", "source_ref": "indicator--5cd53b04-4d23-4cdd-81ef-7db5a87849f7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907789ba-95b6-4f97-81c2-40e4f30955af", "created": "2026-10-09T15:13:08.205187Z", "modified": "2026-10-09T15:13:08.205187Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a726.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.205187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a8d6595-e30c-45dc-9471-ab7aaf2a6ace", "created": "2026-10-09T15:13:08.205692Z", "modified": "2026-10-09T15:13:08.205692Z", "relationship_type": "indicates", "source_ref": "indicator--907789ba-95b6-4f97-81c2-40e4f30955af", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e71764-76e4-4c65-a3ac-83f95a57deaf", "created": "2026-10-09T15:13:08.205823Z", "modified": "2026-10-09T15:13:08.205823Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a727.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.205823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69d31d43-e2ec-4566-a6fd-8818a6770051", "created": "2026-10-09T15:13:08.206324Z", "modified": "2026-10-09T15:13:08.206324Z", "relationship_type": "indicates", "source_ref": "indicator--b8e71764-76e4-4c65-a3ac-83f95a57deaf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d4ee9a-d466-4d7e-8ccf-a87a6bc6664c", "created": "2026-10-09T15:13:08.20645Z", "modified": "2026-10-09T15:13:08.20645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a728.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.20645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d32dcf7-fc36-4d42-8b89-1cb3660a6896", "created": "2026-10-09T15:13:08.207037Z", "modified": "2026-10-09T15:13:08.207037Z", "relationship_type": "indicates", "source_ref": "indicator--f5d4ee9a-d466-4d7e-8ccf-a87a6bc6664c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e23fc7d-4deb-49e1-a538-f1be6d5f06bf", "created": "2026-10-09T15:13:08.207161Z", "modified": "2026-10-09T15:13:08.207161Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a729.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.207161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3dc77bd-ecb1-474c-954e-46b46b8f67a9", "created": "2026-10-09T15:13:08.207664Z", "modified": "2026-10-09T15:13:08.207664Z", "relationship_type": "indicates", "source_ref": "indicator--6e23fc7d-4deb-49e1-a538-f1be6d5f06bf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f76078-8583-46af-bb50-88be2feaf62b", "created": "2026-10-09T15:13:08.207787Z", "modified": "2026-10-09T15:13:08.207787Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a730.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.207787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed0de9cb-80e8-42f4-8106-9c5fb6cbc042", "created": "2026-10-09T15:13:08.208297Z", "modified": "2026-10-09T15:13:08.208297Z", "relationship_type": "indicates", "source_ref": "indicator--22f76078-8583-46af-bb50-88be2feaf62b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f19259-3e82-4aa2-8844-1d63b77c08d1", "created": "2026-10-09T15:13:08.208427Z", "modified": "2026-10-09T15:13:08.208427Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a731.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.208427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9322473e-be38-4298-b2e3-366416db3e2b", "created": "2026-10-09T15:13:08.208916Z", "modified": "2026-10-09T15:13:08.208916Z", "relationship_type": "indicates", "source_ref": "indicator--91f19259-3e82-4aa2-8844-1d63b77c08d1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80cc06c-4f68-470d-abbd-d7cdc8cffa3b", "created": "2026-10-09T15:13:08.209036Z", "modified": "2026-10-09T15:13:08.209036Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a732.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.209036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c17c6b38-6b11-4394-8852-02f5a6e0e14e", "created": "2026-10-09T15:13:08.209536Z", "modified": "2026-10-09T15:13:08.209536Z", "relationship_type": "indicates", "source_ref": "indicator--d80cc06c-4f68-470d-abbd-d7cdc8cffa3b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1c46d9-3664-4c4c-bba0-448a35ed767b", "created": "2026-10-09T15:13:08.209659Z", "modified": "2026-10-09T15:13:08.209659Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a733.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.209659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ccfd484-0ec3-4717-9427-e237297ea376", "created": "2026-10-09T15:13:08.210152Z", "modified": "2026-10-09T15:13:08.210152Z", "relationship_type": "indicates", "source_ref": "indicator--0a1c46d9-3664-4c4c-bba0-448a35ed767b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08748d86-efa6-4af7-b029-73b492486580", "created": "2026-10-09T15:13:08.210288Z", "modified": "2026-10-09T15:13:08.210288Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a734.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.210288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b028539-26ee-4cb5-a96e-9510bafd7baf", "created": "2026-10-09T15:13:08.210792Z", "modified": "2026-10-09T15:13:08.210792Z", "relationship_type": "indicates", "source_ref": "indicator--08748d86-efa6-4af7-b029-73b492486580", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09543a4-adab-4f1e-aa90-b54ca4a9040a", "created": "2026-10-09T15:13:08.210913Z", "modified": "2026-10-09T15:13:08.210913Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a735.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.210913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19d5bbad-8430-4efb-a3db-aeff058c7cbf", "created": "2026-10-09T15:13:08.211408Z", "modified": "2026-10-09T15:13:08.211408Z", "relationship_type": "indicates", "source_ref": "indicator--f09543a4-adab-4f1e-aa90-b54ca4a9040a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b95cfc8-8ae2-433e-9c28-648fd663a43f", "created": "2026-10-09T15:13:08.211534Z", "modified": "2026-10-09T15:13:08.211534Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a736.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.211534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cc2bf3f-4be1-4eee-861e-0d2b12c93673", "created": "2026-10-09T15:13:08.212021Z", "modified": "2026-10-09T15:13:08.212021Z", "relationship_type": "indicates", "source_ref": "indicator--4b95cfc8-8ae2-433e-9c28-648fd663a43f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4564d878-324c-4299-8e3f-c957346e30dc", "created": "2026-10-09T15:13:08.21214Z", "modified": "2026-10-09T15:13:08.21214Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a737.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.21214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2fa7c46-d4e0-4a55-a787-f77cbf40257b", "created": "2026-10-09T15:13:08.212726Z", "modified": "2026-10-09T15:13:08.212726Z", "relationship_type": "indicates", "source_ref": "indicator--4564d878-324c-4299-8e3f-c957346e30dc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c7b45e-407e-41f5-8109-92a3bd7f506d", "created": "2026-10-09T15:13:08.212852Z", "modified": "2026-10-09T15:13:08.212852Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a738.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.212852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae0a6134-86e6-4ccb-8751-d2de1b00cecf", "created": "2026-10-09T15:13:08.213351Z", "modified": "2026-10-09T15:13:08.213351Z", "relationship_type": "indicates", "source_ref": "indicator--e6c7b45e-407e-41f5-8109-92a3bd7f506d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be588ae-5f36-46a0-a838-26f776340fe2", "created": "2026-10-09T15:13:08.213476Z", "modified": "2026-10-09T15:13:08.213476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a739.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.213476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28165072-27ec-4313-a838-7299d244d36d", "created": "2026-10-09T15:13:08.21397Z", "modified": "2026-10-09T15:13:08.21397Z", "relationship_type": "indicates", "source_ref": "indicator--5be588ae-5f36-46a0-a838-26f776340fe2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15111890-f6f5-4781-bc8e-d62bcf14a17b", "created": "2026-10-09T15:13:08.214094Z", "modified": "2026-10-09T15:13:08.214094Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a740.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.214094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2c79529-3b55-462f-9cd9-55facbfdb737", "created": "2026-10-09T15:13:08.214596Z", "modified": "2026-10-09T15:13:08.214596Z", "relationship_type": "indicates", "source_ref": "indicator--15111890-f6f5-4781-bc8e-d62bcf14a17b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf5381b-30ff-475f-a380-adac6d41fb0e", "created": "2026-10-09T15:13:08.214719Z", "modified": "2026-10-09T15:13:08.214719Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a741.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.214719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1eec660-806e-4b59-a6f1-d25d6c3163a5", "created": "2026-10-09T15:13:08.215289Z", "modified": "2026-10-09T15:13:08.215289Z", "relationship_type": "indicates", "source_ref": "indicator--9cf5381b-30ff-475f-a380-adac6d41fb0e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5629dc-49e4-4464-95b3-764fca51562d", "created": "2026-10-09T15:13:08.215431Z", "modified": "2026-10-09T15:13:08.215431Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a742.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.215431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0705de8-beb8-4501-92aa-1a75e5830008", "created": "2026-10-09T15:13:08.215933Z", "modified": "2026-10-09T15:13:08.215933Z", "relationship_type": "indicates", "source_ref": "indicator--dd5629dc-49e4-4464-95b3-764fca51562d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233204d4-a9b5-458f-8bed-5d2ffaf9da8b", "created": "2026-10-09T15:13:08.216055Z", "modified": "2026-10-09T15:13:08.216055Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a743.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.216055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9120b59a-59ec-4a1d-b156-0bba858e55bd", "created": "2026-10-09T15:13:08.216558Z", "modified": "2026-10-09T15:13:08.216558Z", "relationship_type": "indicates", "source_ref": "indicator--233204d4-a9b5-458f-8bed-5d2ffaf9da8b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d0f260-8ca1-4b66-9b2a-5020a41965ea", "created": "2026-10-09T15:13:08.21668Z", "modified": "2026-10-09T15:13:08.21668Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a744.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.21668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--304ff782-064a-4b8e-b4cd-a312a7e24271", "created": "2026-10-09T15:13:08.217163Z", "modified": "2026-10-09T15:13:08.217163Z", "relationship_type": "indicates", "source_ref": "indicator--57d0f260-8ca1-4b66-9b2a-5020a41965ea", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ac147e-fce9-4236-ba48-0ce3289e5f2c", "created": "2026-10-09T15:13:08.217292Z", "modified": "2026-10-09T15:13:08.217292Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a745.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.217292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4ec565e-22ed-468c-b6cc-002f74f50b52", "created": "2026-10-09T15:13:08.217773Z", "modified": "2026-10-09T15:13:08.217773Z", "relationship_type": "indicates", "source_ref": "indicator--67ac147e-fce9-4236-ba48-0ce3289e5f2c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f068b30e-587a-4a3a-b746-2ee6546d20da", "created": "2026-10-09T15:13:08.217893Z", "modified": "2026-10-09T15:13:08.217893Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a745.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.217893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f057e26d-292c-407b-9360-8758fc20293d", "created": "2026-10-09T15:13:08.21848Z", "modified": "2026-10-09T15:13:08.21848Z", "relationship_type": "indicates", "source_ref": "indicator--f068b30e-587a-4a3a-b746-2ee6546d20da", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd945948-e391-491c-88e5-0cfd666cca4c", "created": "2026-10-09T15:13:08.218606Z", "modified": "2026-10-09T15:13:08.218606Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a746.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.218606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b503d3a-cbdb-4f67-88fa-cf7ea6f8c797", "created": "2026-10-09T15:13:08.219098Z", "modified": "2026-10-09T15:13:08.219098Z", "relationship_type": "indicates", "source_ref": "indicator--fd945948-e391-491c-88e5-0cfd666cca4c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7137f316-7361-4e2e-a77d-f7abf65952f2", "created": "2026-10-09T15:13:08.21922Z", "modified": "2026-10-09T15:13:08.21922Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a747.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.21922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f28605a-0f10-485d-b5a0-252fddd24364", "created": "2026-10-09T15:13:08.219724Z", "modified": "2026-10-09T15:13:08.219724Z", "relationship_type": "indicates", "source_ref": "indicator--7137f316-7361-4e2e-a77d-f7abf65952f2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5630eb0-c78a-44ae-b5cf-d26853c8556b", "created": "2026-10-09T15:13:08.219846Z", "modified": "2026-10-09T15:13:08.219846Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a748.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.219846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02be9829-1739-4050-83db-c4a1f22f2cef", "created": "2026-10-09T15:13:08.220341Z", "modified": "2026-10-09T15:13:08.220341Z", "relationship_type": "indicates", "source_ref": "indicator--e5630eb0-c78a-44ae-b5cf-d26853c8556b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9b3882-9b0c-4450-bdc8-797df0035e8a", "created": "2026-10-09T15:13:08.220467Z", "modified": "2026-10-09T15:13:08.220467Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a749.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.220467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5f3c4a5-3df9-4cb6-8166-7c3fc7e095c9", "created": "2026-10-09T15:13:08.220954Z", "modified": "2026-10-09T15:13:08.220954Z", "relationship_type": "indicates", "source_ref": "indicator--6f9b3882-9b0c-4450-bdc8-797df0035e8a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab4a941-eda3-43da-84b6-d68d24b57cf0", "created": "2026-10-09T15:13:08.221074Z", "modified": "2026-10-09T15:13:08.221074Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.221074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0df30bdf-be0a-4351-b4c0-012fc8e7651d", "created": "2026-10-09T15:13:08.221561Z", "modified": "2026-10-09T15:13:08.221561Z", "relationship_type": "indicates", "source_ref": "indicator--8ab4a941-eda3-43da-84b6-d68d24b57cf0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785d66ce-b596-4181-a9df-295ad2da8651", "created": "2026-10-09T15:13:08.221684Z", "modified": "2026-10-09T15:13:08.221684Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.221684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b92c54aa-4b2d-47b3-ad90-45f947ea7d74", "created": "2026-10-09T15:13:08.22217Z", "modified": "2026-10-09T15:13:08.22217Z", "relationship_type": "indicates", "source_ref": "indicator--785d66ce-b596-4181-a9df-295ad2da8651", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6b3bed-c79b-44f2-a687-9a41ac53aac4", "created": "2026-10-09T15:13:08.222299Z", "modified": "2026-10-09T15:13:08.222299Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.222299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14f8865a-672c-4203-a3c1-f74aaeccdf7d", "created": "2026-10-09T15:13:08.22278Z", "modified": "2026-10-09T15:13:08.22278Z", "relationship_type": "indicates", "source_ref": "indicator--5a6b3bed-c79b-44f2-a687-9a41ac53aac4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a7d727-dd32-4622-8cb2-76e960bf5cac", "created": "2026-10-09T15:13:08.222896Z", "modified": "2026-10-09T15:13:08.222896Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.222896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff40a669-9730-4296-b006-15ea66fcaeaf", "created": "2026-10-09T15:13:08.223388Z", "modified": "2026-10-09T15:13:08.223388Z", "relationship_type": "indicates", "source_ref": "indicator--92a7d727-dd32-4622-8cb2-76e960bf5cac", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bfa218-88d5-4014-ab28-48f9ec0ae70d", "created": "2026-10-09T15:13:08.22351Z", "modified": "2026-10-09T15:13:08.22351Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a785.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.22351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ecfbcc3-d231-4101-acd7-1de67a46b9e0", "created": "2026-10-09T15:13:08.224088Z", "modified": "2026-10-09T15:13:08.224088Z", "relationship_type": "indicates", "source_ref": "indicator--e8bfa218-88d5-4014-ab28-48f9ec0ae70d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0523dd8a-a6c8-48e8-ae8e-8f3f434173de", "created": "2026-10-09T15:13:08.224211Z", "modified": "2026-10-09T15:13:08.224211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a785.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.224211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20678e7a-532d-490c-9112-723e775664b6", "created": "2026-10-09T15:13:08.224726Z", "modified": "2026-10-09T15:13:08.224726Z", "relationship_type": "indicates", "source_ref": "indicator--0523dd8a-a6c8-48e8-ae8e-8f3f434173de", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e78b05e-b1f4-41cb-a9c2-416be6917586", "created": "2026-10-09T15:13:08.224849Z", "modified": "2026-10-09T15:13:08.224849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a810.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.224849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--581bb66b-931b-477b-ba3d-0a22b1fc6512", "created": "2026-10-09T15:13:08.225345Z", "modified": "2026-10-09T15:13:08.225345Z", "relationship_type": "indicates", "source_ref": "indicator--6e78b05e-b1f4-41cb-a9c2-416be6917586", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d845a33-ca52-4ecf-84bd-bc7cb528ff35", "created": "2026-10-09T15:13:08.225469Z", "modified": "2026-10-09T15:13:08.225469Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a810.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.225469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e81a78d-c385-4c20-8f5b-fa79fa9c1dd8", "created": "2026-10-09T15:13:08.225949Z", "modified": "2026-10-09T15:13:08.225949Z", "relationship_type": "indicates", "source_ref": "indicator--0d845a33-ca52-4ecf-84bd-bc7cb528ff35", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015db1cf-e3e6-4b07-b088-148cd7aaf2de", "created": "2026-10-09T15:13:08.226072Z", "modified": "2026-10-09T15:13:08.226072Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a810.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.226072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--173e28a9-a886-4005-84d0-e1f4cc34613c", "created": "2026-10-09T15:13:08.226577Z", "modified": "2026-10-09T15:13:08.226577Z", "relationship_type": "indicates", "source_ref": "indicator--015db1cf-e3e6-4b07-b088-148cd7aaf2de", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75564722-7c90-4dc7-b19d-842c4e044106", "created": "2026-10-09T15:13:08.2267Z", "modified": "2026-10-09T15:13:08.2267Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a811.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.2267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9472934-7e7f-4844-8f79-29384128fc88", "created": "2026-10-09T15:13:08.227178Z", "modified": "2026-10-09T15:13:08.227178Z", "relationship_type": "indicates", "source_ref": "indicator--75564722-7c90-4dc7-b19d-842c4e044106", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd535f3-afef-4729-83be-c2e8caf59ef9", "created": "2026-10-09T15:13:08.22731Z", "modified": "2026-10-09T15:13:08.22731Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a811.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.22731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b5d7f04-aee1-442a-ac08-91e2c64ebdee", "created": "2026-10-09T15:13:08.22779Z", "modified": "2026-10-09T15:13:08.22779Z", "relationship_type": "indicates", "source_ref": "indicator--4fd535f3-afef-4729-83be-c2e8caf59ef9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f220e9fa-7563-4b5b-8978-f438ef8b2052", "created": "2026-10-09T15:13:08.227908Z", "modified": "2026-10-09T15:13:08.227908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a880.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.227908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf259f27-d264-4f64-87bc-3e559fb8db75", "created": "2026-10-09T15:13:08.228397Z", "modified": "2026-10-09T15:13:08.228397Z", "relationship_type": "indicates", "source_ref": "indicator--f220e9fa-7563-4b5b-8978-f438ef8b2052", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d69973-6acf-4d50-af01-ceac4157ab31", "created": "2026-10-09T15:13:08.228516Z", "modified": "2026-10-09T15:13:08.228516Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a89.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.228516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2907f9b9-d2c7-40c9-bb58-102f70ad1134", "created": "2026-10-09T15:13:08.228987Z", "modified": "2026-10-09T15:13:08.228987Z", "relationship_type": "indicates", "source_ref": "indicator--d8d69973-6acf-4d50-af01-ceac4157ab31", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e190e8-bd38-472e-9072-e35325ee54c8", "created": "2026-10-09T15:13:08.229105Z", "modified": "2026-10-09T15:13:08.229105Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a89.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.229105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6335ba6-e539-419e-a565-f4d652bbaff2", "created": "2026-10-09T15:13:08.229689Z", "modified": "2026-10-09T15:13:08.229689Z", "relationship_type": "indicates", "source_ref": "indicator--61e190e8-bd38-472e-9072-e35325ee54c8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a37e41f-d8cc-4614-bdab-21a4e12fa9d5", "created": "2026-10-09T15:13:08.229817Z", "modified": "2026-10-09T15:13:08.229817Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a910.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.229817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b468309-7e9d-4a6c-97b3-73ea365e91d7", "created": "2026-10-09T15:13:08.230326Z", "modified": "2026-10-09T15:13:08.230326Z", "relationship_type": "indicates", "source_ref": "indicator--7a37e41f-d8cc-4614-bdab-21a4e12fa9d5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c61a998-3efe-48f7-a56e-f34032a5b857", "created": "2026-10-09T15:13:08.230453Z", "modified": "2026-10-09T15:13:08.230453Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a915.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.230453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7493247b-1c17-4b22-ad6e-402ba83f06bf", "created": "2026-10-09T15:13:08.230941Z", "modified": "2026-10-09T15:13:08.230941Z", "relationship_type": "indicates", "source_ref": "indicator--9c61a998-3efe-48f7-a56e-f34032a5b857", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bc8733-7e04-4a86-adf5-755fd41030ba", "created": "2026-10-09T15:13:08.231064Z", "modified": "2026-10-09T15:13:08.231064Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a920.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.231064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca2c8b68-a60f-4a5a-9ff9-2073c563ce1c", "created": "2026-10-09T15:13:08.231567Z", "modified": "2026-10-09T15:13:08.231567Z", "relationship_type": "indicates", "source_ref": "indicator--17bc8733-7e04-4a86-adf5-755fd41030ba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ff52c9-9bde-407e-bc8a-396b7043cd90", "created": "2026-10-09T15:13:08.231702Z", "modified": "2026-10-09T15:13:08.231702Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a925.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.231702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba2daa13-5390-42f7-9c62-9d30855b97d0", "created": "2026-10-09T15:13:08.232194Z", "modified": "2026-10-09T15:13:08.232194Z", "relationship_type": "indicates", "source_ref": "indicator--21ff52c9-9bde-407e-bc8a-396b7043cd90", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9273a56e-5e38-4b5f-9e17-eba83b24a299", "created": "2026-10-09T15:13:08.232326Z", "modified": "2026-10-09T15:13:08.232326Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a930.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.232326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f694a7d9-c787-4dcb-968a-e243a6346ad7", "created": "2026-10-09T15:13:08.232817Z", "modified": "2026-10-09T15:13:08.232817Z", "relationship_type": "indicates", "source_ref": "indicator--9273a56e-5e38-4b5f-9e17-eba83b24a299", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fecfb5d-df6f-4599-9577-d4128871a5c0", "created": "2026-10-09T15:13:08.232941Z", "modified": "2026-10-09T15:13:08.232941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a935.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.232941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e447f4d-2193-41c8-a42b-d0e3d7bd2188", "created": "2026-10-09T15:13:08.233449Z", "modified": "2026-10-09T15:13:08.233449Z", "relationship_type": "indicates", "source_ref": "indicator--1fecfb5d-df6f-4599-9577-d4128871a5c0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2820bb94-5aaf-46b0-957a-1b0fabdc3f96", "created": "2026-10-09T15:13:08.233575Z", "modified": "2026-10-09T15:13:08.233575Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a940.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.233575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--483461f7-9d04-4560-99d9-359ea0b97e92", "created": "2026-10-09T15:13:08.234062Z", "modified": "2026-10-09T15:13:08.234062Z", "relationship_type": "indicates", "source_ref": "indicator--2820bb94-5aaf-46b0-957a-1b0fabdc3f96", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8375b494-04ea-4b44-b20b-aba5d7310850", "created": "2026-10-09T15:13:08.234181Z", "modified": "2026-10-09T15:13:08.234181Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a941.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.234181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f48940a-56b0-448f-85d6-0ce421633707", "created": "2026-10-09T15:13:08.234673Z", "modified": "2026-10-09T15:13:08.234673Z", "relationship_type": "indicates", "source_ref": "indicator--8375b494-04ea-4b44-b20b-aba5d7310850", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058627d4-e3fb-4678-afaa-7c5e777af5eb", "created": "2026-10-09T15:13:08.234794Z", "modified": "2026-10-09T15:13:08.234794Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a942.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.234794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a38e86b3-bfc7-4150-9ba1-10e6257800f1", "created": "2026-10-09T15:13:08.235402Z", "modified": "2026-10-09T15:13:08.235402Z", "relationship_type": "indicates", "source_ref": "indicator--058627d4-e3fb-4678-afaa-7c5e777af5eb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbd9b35-5b4a-4595-bbd3-7260fd1f6fba", "created": "2026-10-09T15:13:08.23553Z", "modified": "2026-10-09T15:13:08.23553Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a943.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.23553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6384c915-5b44-4dae-8526-cf6215567d99", "created": "2026-10-09T15:13:08.23603Z", "modified": "2026-10-09T15:13:08.23603Z", "relationship_type": "indicates", "source_ref": "indicator--3bbd9b35-5b4a-4595-bbd3-7260fd1f6fba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45695f5a-e1a6-4b76-8fa8-592aea9c31b3", "created": "2026-10-09T15:13:08.236155Z", "modified": "2026-10-09T15:13:08.236155Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a944.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.236155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--519efb31-c82c-4ef3-b8a7-5eba03880788", "created": "2026-10-09T15:13:08.236697Z", "modified": "2026-10-09T15:13:08.236697Z", "relationship_type": "indicates", "source_ref": "indicator--45695f5a-e1a6-4b76-8fa8-592aea9c31b3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bd5e67-01ec-4635-984c-ee1f842c266b", "created": "2026-10-09T15:13:08.236821Z", "modified": "2026-10-09T15:13:08.236821Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a945.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.236821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9c0aadc-b787-42cb-a51c-bab390646ed8", "created": "2026-10-09T15:13:08.237315Z", "modified": "2026-10-09T15:13:08.237315Z", "relationship_type": "indicates", "source_ref": "indicator--97bd5e67-01ec-4635-984c-ee1f842c266b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fa5168-e1f1-4f15-a82f-9a9aa1562b55", "created": "2026-10-09T15:13:08.237441Z", "modified": "2026-10-09T15:13:08.237441Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a946.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.237441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4895a7f-3b0a-4bbe-af65-7272836f66fc", "created": "2026-10-09T15:13:08.23793Z", "modified": "2026-10-09T15:13:08.23793Z", "relationship_type": "indicates", "source_ref": "indicator--00fa5168-e1f1-4f15-a82f-9a9aa1562b55", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bea7838-03e6-446c-9802-f6a4279de0e2", "created": "2026-10-09T15:13:08.238052Z", "modified": "2026-10-09T15:13:08.238052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a947.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.238052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6869c2c0-970e-4df5-8680-099e1c07467d", "created": "2026-10-09T15:13:08.238549Z", "modified": "2026-10-09T15:13:08.238549Z", "relationship_type": "indicates", "source_ref": "indicator--2bea7838-03e6-446c-9802-f6a4279de0e2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7a3421-b6b4-406f-9885-8680a58990cd", "created": "2026-10-09T15:13:08.238672Z", "modified": "2026-10-09T15:13:08.238672Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-monitor.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.238672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a81659f0-1bd8-4422-9098-f6aa02bdafa0", "created": "2026-10-09T15:13:08.239162Z", "modified": "2026-10-09T15:13:08.239162Z", "relationship_type": "indicates", "source_ref": "indicator--ff7a3421-b6b4-406f-9885-8680a58990cd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f5a1a2-599e-44e9-a662-a41c55be1ddc", "created": "2026-10-09T15:13:08.239291Z", "modified": "2026-10-09T15:13:08.239291Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-viewer-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.239291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54907437-9d57-4b40-a7a5-c393dfabb4e8", "created": "2026-10-09T15:13:08.239879Z", "modified": "2026-10-09T15:13:08.239879Z", "relationship_type": "indicates", "source_ref": "indicator--99f5a1a2-599e-44e9-a662-a41c55be1ddc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3154dc5d-9708-40f2-9c64-96d98155ec95", "created": "2026-10-09T15:13:08.240003Z", "modified": "2026-10-09T15:13:08.240003Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.240003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--368ed62b-b990-4824-bcd4-13f9d19359cb", "created": "2026-10-09T15:13:08.240488Z", "modified": "2026-10-09T15:13:08.240488Z", "relationship_type": "indicates", "source_ref": "indicator--3154dc5d-9708-40f2-9c64-96d98155ec95", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4096bd5e-9532-4808-8ced-a92537de8778", "created": "2026-10-09T15:13:08.240617Z", "modified": "2026-10-09T15:13:08.240617Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.240617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4e1324b-b33d-40c5-a623-d70839b32621", "created": "2026-10-09T15:13:08.241197Z", "modified": "2026-10-09T15:13:08.241197Z", "relationship_type": "indicates", "source_ref": "indicator--4096bd5e-9532-4808-8ced-a92537de8778", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb821d2-8fd6-45ba-89bb-d7a7ca7e048d", "created": "2026-10-09T15:13:08.241339Z", "modified": "2026-10-09T15:13:08.241339Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.241339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ee5c781-ffa8-4be9-b54e-1a7b22d9d619", "created": "2026-10-09T15:13:08.24182Z", "modified": "2026-10-09T15:13:08.24182Z", "relationship_type": "indicates", "source_ref": "indicator--ebb821d2-8fd6-45ba-89bb-d7a7ca7e048d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed92d5e3-cbd9-4e60-9fc2-8bb78e40a53f", "created": "2026-10-09T15:13:08.241952Z", "modified": "2026-10-09T15:13:08.241952Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.241952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13fcfe14-a220-472f-b598-adb03bd8c478", "created": "2026-10-09T15:13:08.242433Z", "modified": "2026-10-09T15:13:08.242433Z", "relationship_type": "indicates", "source_ref": "indicator--ed92d5e3-cbd9-4e60-9fc2-8bb78e40a53f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c77442-e0f8-45d7-9781-08d02d710469", "created": "2026-10-09T15:13:08.242554Z", "modified": "2026-10-09T15:13:08.242554Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.systemserviceprovider.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.242554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69a18945-3134-47fe-aebf-008582fe5661", "created": "2026-10-09T15:13:08.243046Z", "modified": "2026-10-09T15:13:08.243046Z", "relationship_type": "indicates", "source_ref": "indicator--14c77442-e0f8-45d7-9781-08d02d710469", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f673bcc8-800f-4e18-9afa-b30dc30f765d", "created": "2026-10-09T15:13:08.243169Z", "modified": "2026-10-09T15:13:08.243169Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.243169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d5f7cb1-830d-41ab-b07e-fbc40226d1c2", "created": "2026-10-09T15:13:08.243664Z", "modified": "2026-10-09T15:13:08.243664Z", "relationship_type": "indicates", "source_ref": "indicator--f673bcc8-800f-4e18-9afa-b30dc30f765d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458bc6a9-0b69-49ad-81fa-6c762f50af3d", "created": "2026-10-09T15:13:08.243787Z", "modified": "2026-10-09T15:13:08.243787Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='secondclone-2d312.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.243787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8158db6-948a-4036-aa3d-7e467c911224", "created": "2026-10-09T15:13:08.244367Z", "modified": "2026-10-09T15:13:08.244367Z", "relationship_type": "indicates", "source_ref": "indicator--458bc6a9-0b69-49ad-81fa-6c762f50af3d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86df7dc5-b2c6-4ffc-ab60-a6588bc7b197", "created": "2026-10-09T15:13:08.2445Z", "modified": "2026-10-09T15:13:08.2445Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.2445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17d6085f-92a3-4c70-9380-7eee1f296b45", "created": "2026-10-09T15:13:08.244981Z", "modified": "2026-10-09T15:13:08.244981Z", "relationship_type": "indicates", "source_ref": "indicator--86df7dc5-b2c6-4ffc-ab60-a6588bc7b197", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04c3c7a-3629-46b9-bd21-13f21ffb591d", "created": "2026-10-09T15:13:08.245103Z", "modified": "2026-10-09T15:13:08.245103Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a720.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.245103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa0e9c94-1689-4a7a-a7c3-e9721999a214", "created": "2026-10-09T15:13:08.245604Z", "modified": "2026-10-09T15:13:08.245604Z", "relationship_type": "indicates", "source_ref": "indicator--d04c3c7a-3629-46b9-bd21-13f21ffb591d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7363e393-afe4-48d5-97ed-9f5e72cddc5e", "created": "2026-10-09T15:13:08.24573Z", "modified": "2026-10-09T15:13:08.24573Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a722.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.24573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b37f9860-8787-4f01-82a4-1ced52afaced", "created": "2026-10-09T15:13:08.246215Z", "modified": "2026-10-09T15:13:08.246215Z", "relationship_type": "indicates", "source_ref": "indicator--7363e393-afe4-48d5-97ed-9f5e72cddc5e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1f485f-5127-48d0-bbbc-9be5eb531537", "created": "2026-10-09T15:13:08.246347Z", "modified": "2026-10-09T15:13:08.246347Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a724.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.246347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb84b2ee-a7c6-4644-b19f-814eedbcb317", "created": "2026-10-09T15:13:08.246936Z", "modified": "2026-10-09T15:13:08.246936Z", "relationship_type": "indicates", "source_ref": "indicator--9f1f485f-5127-48d0-bbbc-9be5eb531537", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b239bc-19f6-4ae3-a1b5-7154bebcade4", "created": "2026-10-09T15:13:08.24706Z", "modified": "2026-10-09T15:13:08.24706Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a725.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.24706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c6395a1-3914-4602-b85d-335b91d86712", "created": "2026-10-09T15:13:08.247563Z", "modified": "2026-10-09T15:13:08.247563Z", "relationship_type": "indicates", "source_ref": "indicator--b8b239bc-19f6-4ae3-a1b5-7154bebcade4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a15ada9-c1ac-4121-9fdf-3e0de27cd63e", "created": "2026-10-09T15:13:08.247686Z", "modified": "2026-10-09T15:13:08.247686Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a726.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.247686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b88f6f5-1b91-4996-8304-17f17826e0d7", "created": "2026-10-09T15:13:08.248171Z", "modified": "2026-10-09T15:13:08.248171Z", "relationship_type": "indicates", "source_ref": "indicator--8a15ada9-c1ac-4121-9fdf-3e0de27cd63e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557489e0-fe1c-410d-9b35-38c973ddb116", "created": "2026-10-09T15:13:08.248304Z", "modified": "2026-10-09T15:13:08.248304Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a727.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.248304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3ae2490-8c1a-4327-9141-eea2a9ef88f7", "created": "2026-10-09T15:13:08.2488Z", "modified": "2026-10-09T15:13:08.2488Z", "relationship_type": "indicates", "source_ref": "indicator--557489e0-fe1c-410d-9b35-38c973ddb116", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356132d7-9cd2-413c-8e59-0244058353b2", "created": "2026-10-09T15:13:08.248921Z", "modified": "2026-10-09T15:13:08.248921Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a729.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.248921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ee45c64-8f0a-4f20-a12f-7b8fbdb64c39", "created": "2026-10-09T15:13:08.249414Z", "modified": "2026-10-09T15:13:08.249414Z", "relationship_type": "indicates", "source_ref": "indicator--356132d7-9cd2-413c-8e59-0244058353b2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56260c73-046d-4bc3-98e9-81c3bdd0accd", "created": "2026-10-09T15:13:08.249538Z", "modified": "2026-10-09T15:13:08.249538Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a732.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.249538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c76359d-7eb7-4879-a48b-19241b0d17b5", "created": "2026-10-09T15:13:08.250023Z", "modified": "2026-10-09T15:13:08.250023Z", "relationship_type": "indicates", "source_ref": "indicator--56260c73-046d-4bc3-98e9-81c3bdd0accd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46410150-0e32-481a-80a9-832ec1fa0755", "created": "2026-10-09T15:13:08.250143Z", "modified": "2026-10-09T15:13:08.250143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a733.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.250143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe2e23f5-4739-438c-8df8-af16d50f5993", "created": "2026-10-09T15:13:08.250639Z", "modified": "2026-10-09T15:13:08.250639Z", "relationship_type": "indicates", "source_ref": "indicator--46410150-0e32-481a-80a9-832ec1fa0755", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec7c571-0f3b-44aa-a5f5-32a242ec6b60", "created": "2026-10-09T15:13:08.250761Z", "modified": "2026-10-09T15:13:08.250761Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a734.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.250761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--013c16e4-2e6e-4b1f-8485-7914b63ac4ad", "created": "2026-10-09T15:13:08.251243Z", "modified": "2026-10-09T15:13:08.251243Z", "relationship_type": "indicates", "source_ref": "indicator--8ec7c571-0f3b-44aa-a5f5-32a242ec6b60", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9832d1-f7ee-4927-8a16-cfbdd185df0f", "created": "2026-10-09T15:13:08.251376Z", "modified": "2026-10-09T15:13:08.251376Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a735.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.251376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ccc2f86-01cf-4283-a19d-07992d226b43", "created": "2026-10-09T15:13:08.25186Z", "modified": "2026-10-09T15:13:08.25186Z", "relationship_type": "indicates", "source_ref": "indicator--0a9832d1-f7ee-4927-8a16-cfbdd185df0f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131699d5-d773-4562-91f6-e7ed2820a778", "created": "2026-10-09T15:13:08.251979Z", "modified": "2026-10-09T15:13:08.251979Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a737.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.251979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc5fc415-df32-4bed-8680-a6e8141deb15", "created": "2026-10-09T15:13:08.252568Z", "modified": "2026-10-09T15:13:08.252568Z", "relationship_type": "indicates", "source_ref": "indicator--131699d5-d773-4562-91f6-e7ed2820a778", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433e85f1-c5e2-4829-be7e-a1cb4a376d2f", "created": "2026-10-09T15:13:08.252695Z", "modified": "2026-10-09T15:13:08.252695Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a738.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.252695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c1ffd81-9884-4da9-918d-29ae29bf560f", "created": "2026-10-09T15:13:08.253181Z", "modified": "2026-10-09T15:13:08.253181Z", "relationship_type": "indicates", "source_ref": "indicator--433e85f1-c5e2-4829-be7e-a1cb4a376d2f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3372839c-7fb6-4bae-b392-4228f0f2537c", "created": "2026-10-09T15:13:08.253313Z", "modified": "2026-10-09T15:13:08.253313Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a740.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.253313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b082687-e82e-4f41-890e-a1ce6a5a89fc", "created": "2026-10-09T15:13:08.253801Z", "modified": "2026-10-09T15:13:08.253801Z", "relationship_type": "indicates", "source_ref": "indicator--3372839c-7fb6-4bae-b392-4228f0f2537c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51efef85-20f3-4457-9bd9-13f09e0942f7", "created": "2026-10-09T15:13:08.253924Z", "modified": "2026-10-09T15:13:08.253924Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a741.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.253924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--259478fc-06b2-4d4b-953d-4623354db1df", "created": "2026-10-09T15:13:08.254423Z", "modified": "2026-10-09T15:13:08.254423Z", "relationship_type": "indicates", "source_ref": "indicator--51efef85-20f3-4457-9bd9-13f09e0942f7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d9c20d-5be7-4700-843e-8b28c800fc30", "created": "2026-10-09T15:13:08.254549Z", "modified": "2026-10-09T15:13:08.254549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a742.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.254549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--961014e7-7344-4d5a-86cb-5199b04347ea", "created": "2026-10-09T15:13:08.25503Z", "modified": "2026-10-09T15:13:08.25503Z", "relationship_type": "indicates", "source_ref": "indicator--35d9c20d-5be7-4700-843e-8b28c800fc30", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47af746-f783-4edf-a844-099383ce9760", "created": "2026-10-09T15:13:08.255147Z", "modified": "2026-10-09T15:13:08.255147Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a743.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.255147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--790e0063-1cd0-4331-9240-5997c433a478", "created": "2026-10-09T15:13:08.255637Z", "modified": "2026-10-09T15:13:08.255637Z", "relationship_type": "indicates", "source_ref": "indicator--c47af746-f783-4edf-a844-099383ce9760", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67eea331-eb62-4b5f-8308-19990fa99766", "created": "2026-10-09T15:13:08.255758Z", "modified": "2026-10-09T15:13:08.255758Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a744.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.255758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d6c2ccb-5f53-4215-ba3a-607510d381e1", "created": "2026-10-09T15:13:08.256241Z", "modified": "2026-10-09T15:13:08.256241Z", "relationship_type": "indicates", "source_ref": "indicator--67eea331-eb62-4b5f-8308-19990fa99766", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d6f6e4-ef26-4b99-ae13-acacbcd8d114", "created": "2026-10-09T15:13:08.256375Z", "modified": "2026-10-09T15:13:08.256375Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a745.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.256375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1688e329-6974-4609-947f-93395c663d1c", "created": "2026-10-09T15:13:08.256862Z", "modified": "2026-10-09T15:13:08.256862Z", "relationship_type": "indicates", "source_ref": "indicator--22d6f6e4-ef26-4b99-ae13-acacbcd8d114", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e66052-50c3-4a10-b99d-21ffed228145", "created": "2026-10-09T15:13:08.256981Z", "modified": "2026-10-09T15:13:08.256981Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a746.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.256981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59d6070d-f5e2-422e-9863-473c372ee9ad", "created": "2026-10-09T15:13:08.257472Z", "modified": "2026-10-09T15:13:08.257472Z", "relationship_type": "indicates", "source_ref": "indicator--a5e66052-50c3-4a10-b99d-21ffed228145", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8af6ac3-be1f-4ac9-a284-76843c532299", "created": "2026-10-09T15:13:08.257594Z", "modified": "2026-10-09T15:13:08.257594Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a747.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.257594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eff06e6e-94af-4998-82a3-d3f026b03727", "created": "2026-10-09T15:13:08.25846Z", "modified": "2026-10-09T15:13:08.25846Z", "relationship_type": "indicates", "source_ref": "indicator--d8af6ac3-be1f-4ac9-a284-76843c532299", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b5c1da-76da-44e7-92d2-9298f7d0ed28", "created": "2026-10-09T15:13:08.25859Z", "modified": "2026-10-09T15:13:08.25859Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a748.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.25859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17bef835-7b60-498b-8f60-d800811edb14", "created": "2026-10-09T15:13:08.259079Z", "modified": "2026-10-09T15:13:08.259079Z", "relationship_type": "indicates", "source_ref": "indicator--f5b5c1da-76da-44e7-92d2-9298f7d0ed28", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac9f89d-849c-4fda-a884-fcc5f3b9b962", "created": "2026-10-09T15:13:08.259199Z", "modified": "2026-10-09T15:13:08.259199Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a910.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.259199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e43d09b7-4032-4a95-9a25-73eca707c0ae", "created": "2026-10-09T15:13:08.259695Z", "modified": "2026-10-09T15:13:08.259695Z", "relationship_type": "indicates", "source_ref": "indicator--fac9f89d-849c-4fda-a884-fcc5f3b9b962", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e5de48-fad9-4394-a386-d8c2f20853e3", "created": "2026-10-09T15:13:08.259816Z", "modified": "2026-10-09T15:13:08.259816Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a915.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.259816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88a529c3-ec17-49f5-a0f1-057ff4369e1d", "created": "2026-10-09T15:13:08.260308Z", "modified": "2026-10-09T15:13:08.260308Z", "relationship_type": "indicates", "source_ref": "indicator--75e5de48-fad9-4394-a386-d8c2f20853e3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69712ba7-491b-474a-a5b7-762a31fcaa43", "created": "2026-10-09T15:13:08.260432Z", "modified": "2026-10-09T15:13:08.260432Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a920.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.260432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--658a48f5-abc3-4351-8328-28e34030ac8c", "created": "2026-10-09T15:13:08.260919Z", "modified": "2026-10-09T15:13:08.260919Z", "relationship_type": "indicates", "source_ref": "indicator--69712ba7-491b-474a-a5b7-762a31fcaa43", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de315564-c380-403f-a768-4693f32bf3a5", "created": "2026-10-09T15:13:08.261041Z", "modified": "2026-10-09T15:13:08.261041Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.261041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be3c53b7-c7d4-4ddf-8e0e-fc6918c9afb2", "created": "2026-10-09T15:13:08.26153Z", "modified": "2026-10-09T15:13:08.26153Z", "relationship_type": "indicates", "source_ref": "indicator--de315564-c380-403f-a768-4693f32bf3a5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52edb07b-8087-4224-b053-0aa4a18933c8", "created": "2026-10-09T15:13:08.261654Z", "modified": "2026-10-09T15:13:08.261654Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.phoneparental.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.261654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a69a4ac-080e-4ba0-84db-0a911608357a", "created": "2026-10-09T15:13:08.262137Z", "modified": "2026-10-09T15:13:08.262137Z", "relationship_type": "indicates", "source_ref": "indicator--52edb07b-8087-4224-b053-0aa4a18933c8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfc7445-6242-4073-9a62-bec5727d368f", "created": "2026-10-09T15:13:08.262256Z", "modified": "2026-10-09T15:13:08.262256Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.262256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd1a8f5d-7df4-48e4-ad7b-b3d0deffc84d", "created": "2026-10-09T15:13:08.262804Z", "modified": "2026-10-09T15:13:08.262804Z", "relationship_type": "indicates", "source_ref": "indicator--4cfc7445-6242-4073-9a62-bec5727d368f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87381fe5-a389-43c0-a59f-41fcfedfb6aa", "created": "2026-10-09T15:13:08.262931Z", "modified": "2026-10-09T15:13:08.262931Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.262931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c72d8d1-b71a-4643-b894-66805eff4de7", "created": "2026-10-09T15:13:08.263417Z", "modified": "2026-10-09T15:13:08.263417Z", "relationship_type": "indicates", "source_ref": "indicator--87381fe5-a389-43c0-a59f-41fcfedfb6aa", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27b5418-9190-4f66-ae7e-e20844ad50b4", "created": "2026-10-09T15:13:08.263547Z", "modified": "2026-10-09T15:13:08.263547Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.263547Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ab747e8-755c-4713-bd54-b45f546ec1d9", "created": "2026-10-09T15:13:08.264024Z", "modified": "2026-10-09T15:13:08.264024Z", "relationship_type": "indicates", "source_ref": "indicator--d27b5418-9190-4f66-ae7e-e20844ad50b4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37094d25-ebe8-4686-9867-89d45833c22a", "created": "2026-10-09T15:13:08.264142Z", "modified": "2026-10-09T15:13:08.264142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.264142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fd0557c-292a-4460-b237-d201404634b7", "created": "2026-10-09T15:13:08.264731Z", "modified": "2026-10-09T15:13:08.264731Z", "relationship_type": "indicates", "source_ref": "indicator--37094d25-ebe8-4686-9867-89d45833c22a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e221d5-f327-424b-b2fa-e8b5a88a96d3", "created": "2026-10-09T15:13:08.264857Z", "modified": "2026-10-09T15:13:08.264857Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.264857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d71051c-66d1-4a8e-9290-5fa3216aad72", "created": "2026-10-09T15:13:08.265339Z", "modified": "2026-10-09T15:13:08.265339Z", "relationship_type": "indicates", "source_ref": "indicator--e8e221d5-f327-424b-b2fa-e8b5a88a96d3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69789843-7625-49ba-a49b-ce7380588591", "created": "2026-10-09T15:13:08.265463Z", "modified": "2026-10-09T15:13:08.265463Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.265463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67ee1a55-826c-4da6-bc71-c075f40780e5", "created": "2026-10-09T15:13:08.26593Z", "modified": "2026-10-09T15:13:08.26593Z", "relationship_type": "indicates", "source_ref": "indicator--69789843-7625-49ba-a49b-ce7380588591", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a62df94-d3d9-476b-be17-4e03a0b44896", "created": "2026-10-09T15:13:08.26605Z", "modified": "2026-10-09T15:13:08.26605Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.26605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c31936be-8350-4b10-b12c-032d9b81a65f", "created": "2026-10-09T15:13:08.266536Z", "modified": "2026-10-09T15:13:08.266536Z", "relationship_type": "indicates", "source_ref": "indicator--7a62df94-d3d9-476b-be17-4e03a0b44896", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c60b90-7ed5-4183-a77e-1ee532058c7a", "created": "2026-10-09T15:13:08.266659Z", "modified": "2026-10-09T15:13:08.266659Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a100.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.266659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0766dc35-388c-49f0-ad45-2b536a2d1fc1", "created": "2026-10-09T15:13:08.26714Z", "modified": "2026-10-09T15:13:08.26714Z", "relationship_type": "indicates", "source_ref": "indicator--b2c60b90-7ed5-4183-a77e-1ee532058c7a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de18f47-f292-4baf-830f-e3e4f9239e4c", "created": "2026-10-09T15:13:08.267259Z", "modified": "2026-10-09T15:13:08.267259Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a600.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.267259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39c8807f-3677-4ca1-8830-eb646a5d8c1d", "created": "2026-10-09T15:13:08.267751Z", "modified": "2026-10-09T15:13:08.267751Z", "relationship_type": "indicates", "source_ref": "indicator--0de18f47-f292-4baf-830f-e3e4f9239e4c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de65316-cce5-40e3-b062-7ad35a1b9a37", "created": "2026-10-09T15:13:08.267868Z", "modified": "2026-10-09T15:13:08.267868Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a712.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.267868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95f5ab73-da0a-4752-b32f-9a3c488876f4", "created": "2026-10-09T15:13:08.268358Z", "modified": "2026-10-09T15:13:08.268358Z", "relationship_type": "indicates", "source_ref": "indicator--1de65316-cce5-40e3-b062-7ad35a1b9a37", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25c43d6-1705-4f90-80d3-a4b4cab47710", "created": "2026-10-09T15:13:08.268482Z", "modified": "2026-10-09T15:13:08.268482Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a780.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.268482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44002ffb-da12-4299-a379-22bb5d4b29d0", "created": "2026-10-09T15:13:08.26895Z", "modified": "2026-10-09T15:13:08.26895Z", "relationship_type": "indicates", "source_ref": "indicator--d25c43d6-1705-4f90-80d3-a4b4cab47710", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77be1cf8-3c36-4c36-8850-cc59f5dbd507", "created": "2026-10-09T15:13:08.269069Z", "modified": "2026-10-09T15:13:08.269069Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a7xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.269069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb9d2cff-77fa-426e-a59a-084d0f586a2b", "created": "2026-10-09T15:13:08.269551Z", "modified": "2026-10-09T15:13:08.269551Z", "relationship_type": "indicates", "source_ref": "indicator--77be1cf8-3c36-4c36-8850-cc59f5dbd507", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df76368-e340-489d-8027-ddecd8d72056", "created": "2026-10-09T15:13:08.269673Z", "modified": "2026-10-09T15:13:08.269673Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a8xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.269673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c6187a7-7d19-4176-910b-4130cda13e35", "created": "2026-10-09T15:13:08.270243Z", "modified": "2026-10-09T15:13:08.270243Z", "relationship_type": "indicates", "source_ref": "indicator--1df76368-e340-489d-8027-ddecd8d72056", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355a1abd-decc-435f-b7d0-48ea2f758a94", "created": "2026-10-09T15:13:08.27038Z", "modified": "2026-10-09T15:13:08.27038Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a925.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.27038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9fb47ec-2976-4e66-9d81-90ada4b28b83", "created": "2026-10-09T15:13:08.270869Z", "modified": "2026-10-09T15:13:08.270869Z", "relationship_type": "indicates", "source_ref": "indicator--355a1abd-decc-435f-b7d0-48ea2f758a94", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079d21de-78c0-480d-8de2-a70da64ee264", "created": "2026-10-09T15:13:08.270994Z", "modified": "2026-10-09T15:13:08.270994Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a930.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.270994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--059c5cf2-3ee5-4474-a0b2-5d361f172cf2", "created": "2026-10-09T15:13:08.271486Z", "modified": "2026-10-09T15:13:08.271486Z", "relationship_type": "indicates", "source_ref": "indicator--079d21de-78c0-480d-8de2-a70da64ee264", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a95dc80-8543-448a-bdce-a994ab8965e5", "created": "2026-10-09T15:13:08.271611Z", "modified": "2026-10-09T15:13:08.271611Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a935.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.271611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cc228ff-dd20-4706-ba85-820850291d22", "created": "2026-10-09T15:13:08.272088Z", "modified": "2026-10-09T15:13:08.272088Z", "relationship_type": "indicates", "source_ref": "indicator--5a95dc80-8543-448a-bdce-a994ab8965e5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21abfac-569c-496f-9c9e-5039ff7750c1", "created": "2026-10-09T15:13:08.272209Z", "modified": "2026-10-09T15:13:08.272209Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a940.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.272209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94ac2987-9bad-46e3-bfff-e08d18fe74ed", "created": "2026-10-09T15:13:08.272697Z", "modified": "2026-10-09T15:13:08.272697Z", "relationship_type": "indicates", "source_ref": "indicator--a21abfac-569c-496f-9c9e-5039ff7750c1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973e1f83-5045-4418-ab4d-06ff057bc79b", "created": "2026-10-09T15:13:08.272817Z", "modified": "2026-10-09T15:13:08.272817Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a941.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.272817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f875ab4-eafb-4604-9e4f-c61a9fa0d40a", "created": "2026-10-09T15:13:08.273303Z", "modified": "2026-10-09T15:13:08.273303Z", "relationship_type": "indicates", "source_ref": "indicator--973e1f83-5045-4418-ab4d-06ff057bc79b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704ba676-7a53-4854-a843-bd2441783010", "created": "2026-10-09T15:13:08.273426Z", "modified": "2026-10-09T15:13:08.273426Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a942.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.273426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c85f60d-35f2-4256-8856-ce4ffd299a7f", "created": "2026-10-09T15:13:08.273903Z", "modified": "2026-10-09T15:13:08.273903Z", "relationship_type": "indicates", "source_ref": "indicator--704ba676-7a53-4854-a843-bd2441783010", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df077e23-0326-4389-b2e5-adc99018fe09", "created": "2026-10-09T15:13:08.274022Z", "modified": "2026-10-09T15:13:08.274022Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thetruth-db94a.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.274022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3242f7c1-62ec-435f-809b-2bcbed6df882", "created": "2026-10-09T15:13:08.274594Z", "modified": "2026-10-09T15:13:08.274594Z", "relationship_type": "indicates", "source_ref": "indicator--df077e23-0326-4389-b2e5-adc99018fe09", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6af9db-1796-4531-b516-69270ce41100", "created": "2026-10-09T15:13:08.274721Z", "modified": "2026-10-09T15:13:08.274721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.xyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.274721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e46b1f8c-c654-488b-a317-5218085dff76", "created": "2026-10-09T15:13:08.275249Z", "modified": "2026-10-09T15:13:08.275249Z", "relationship_type": "indicates", "source_ref": "indicator--4e6af9db-1796-4531-b516-69270ce41100", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5b3d03-34a7-4a76-9d26-3bdd50bdb1a7", "created": "2026-10-09T15:13:08.275391Z", "modified": "2026-10-09T15:13:08.275391Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.275391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85bc43eb-a9e5-4352-a169-85bdcc444ef4", "created": "2026-10-09T15:13:08.275967Z", "modified": "2026-10-09T15:13:08.275967Z", "relationship_type": "indicates", "source_ref": "indicator--2a5b3d03-34a7-4a76-9d26-3bdd50bdb1a7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c249f7a-0fa0-4d07-8c74-a1b6e9f51c6f", "created": "2026-10-09T15:13:08.276094Z", "modified": "2026-10-09T15:13:08.276094Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.276094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7194c51c-ed09-43a9-b2b3-32557f9a5738", "created": "2026-10-09T15:13:08.276578Z", "modified": "2026-10-09T15:13:08.276578Z", "relationship_type": "indicates", "source_ref": "indicator--2c249f7a-0fa0-4d07-8c74-a1b6e9f51c6f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5270a75-a319-495e-8278-5c36dc3e8064", "created": "2026-10-09T15:13:08.276704Z", "modified": "2026-10-09T15:13:08.276704Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.276704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b4de3b7-ab65-407a-b3df-7a3ffb02b503", "created": "2026-10-09T15:13:08.277232Z", "modified": "2026-10-09T15:13:08.277232Z", "relationship_type": "indicates", "source_ref": "indicator--c5270a75-a319-495e-8278-5c36dc3e8064", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35182629-3b8e-4937-944d-d8f69ae4f346", "created": "2026-10-09T15:13:08.277371Z", "modified": "2026-10-09T15:13:08.277371Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.277371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e2d495f-0eac-46b6-9ab8-70d1e9608d6c", "created": "2026-10-09T15:13:08.277906Z", "modified": "2026-10-09T15:13:08.277906Z", "relationship_type": "indicates", "source_ref": "indicator--35182629-3b8e-4937-944d-d8f69ae4f346", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5d1d9e-aefa-401c-ad78-e418c682cad8", "created": "2026-10-09T15:13:08.278033Z", "modified": "2026-10-09T15:13:08.278033Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='free.spycell.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.278033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16f8102e-edd4-43b3-88d9-d4be1c1891ca", "created": "2026-10-09T15:13:08.278524Z", "modified": "2026-10-09T15:13:08.278524Z", "relationship_type": "indicates", "source_ref": "indicator--ab5d1d9e-aefa-401c-ad78-e418c682cad8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b891ed-9055-433d-af56-6e6a42d5e915", "created": "2026-10-09T15:13:08.278651Z", "modified": "2026-10-09T15:13:08.278651Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.278651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51218836-ca0a-460e-a56f-e13b296d5fce", "created": "2026-10-09T15:13:08.279129Z", "modified": "2026-10-09T15:13:08.279129Z", "relationship_type": "indicates", "source_ref": "indicator--76b891ed-9055-433d-af56-6e6a42d5e915", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ce007f-6bbe-4de8-a475-93b610955803", "created": "2026-10-09T15:13:08.279253Z", "modified": "2026-10-09T15:13:08.279253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.279253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--707b4d2c-e908-400e-badc-673a0d3e09da", "created": "2026-10-09T15:13:08.279791Z", "modified": "2026-10-09T15:13:08.279791Z", "relationship_type": "indicates", "source_ref": "indicator--17ce007f-6bbe-4de8-a475-93b610955803", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ee227c-2d9d-414d-bea7-da2467b6e025", "created": "2026-10-09T15:13:08.279918Z", "modified": "2026-10-09T15:13:08.279918Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='innoaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.279918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--022c0edc-fe4d-4db2-b27f-e20398a5aca1", "created": "2026-10-09T15:13:08.280399Z", "modified": "2026-10-09T15:13:08.280399Z", "relationship_type": "indicates", "source_ref": "indicator--42ee227c-2d9d-414d-bea7-da2467b6e025", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe71b594-0376-4c2b-9eab-3accb96ec8f2", "created": "2026-10-09T15:13:08.280523Z", "modified": "2026-10-09T15:13:08.280523Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.280523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a643806-ea7d-4f57-89c1-2def22d423a3", "created": "2026-10-09T15:13:08.280983Z", "modified": "2026-10-09T15:13:08.280983Z", "relationship_type": "indicates", "source_ref": "indicator--fe71b594-0376-4c2b-9eab-3accb96ec8f2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3a7f08-521f-496c-8382-d84527fca227", "created": "2026-10-09T15:13:08.281106Z", "modified": "2026-10-09T15:13:08.281106Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobidad.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.281106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5d6189b-0ca5-4572-b1ca-88f6c0b36989", "created": "2026-10-09T15:13:08.281677Z", "modified": "2026-10-09T15:13:08.281677Z", "relationship_type": "indicates", "source_ref": "indicator--6b3a7f08-521f-496c-8382-d84527fca227", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5686dac8-c1d5-436d-a016-287ce640bd03", "created": "2026-10-09T15:13:08.281802Z", "modified": "2026-10-09T15:13:08.281802Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.281802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--698d9c1f-07f1-4c2f-8252-907c567eb68b", "created": "2026-10-09T15:13:08.282282Z", "modified": "2026-10-09T15:13:08.282282Z", "relationship_type": "indicates", "source_ref": "indicator--5686dac8-c1d5-436d-a016-287ce640bd03", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ae7e0a-58bf-4c59-99d5-b1a2f351a3fc", "created": "2026-10-09T15:13:08.282403Z", "modified": "2026-10-09T15:13:08.282403Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.282403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19f8f523-0635-4c45-98c4-da0ac999a625", "created": "2026-10-09T15:13:08.282867Z", "modified": "2026-10-09T15:13:08.282867Z", "relationship_type": "indicates", "source_ref": "indicator--f5ae7e0a-58bf-4c59-99d5-b1a2f351a3fc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1771b52d-e938-4f18-a102-8ee3707225b2", "created": "2026-10-09T15:13:08.282985Z", "modified": "2026-10-09T15:13:08.282985Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phoneparental.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.282985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fd670e4-cbe2-4ec1-8e6b-5a535f4bbb71", "created": "2026-10-09T15:13:08.283471Z", "modified": "2026-10-09T15:13:08.283471Z", "relationship_type": "indicates", "source_ref": "indicator--1771b52d-e938-4f18-a102-8ee3707225b2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a25bf1-c3d7-4405-aebb-3426aa4e1fa5", "created": "2026-10-09T15:13:08.283595Z", "modified": "2026-10-09T15:13:08.283595Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.283595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffbd4fb5-6399-4068-a298-80340b189730", "created": "2026-10-09T15:13:08.284062Z", "modified": "2026-10-09T15:13:08.284062Z", "relationship_type": "indicates", "source_ref": "indicator--55a25bf1-c3d7-4405-aebb-3426aa4e1fa5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6281e07-ae8e-4a61-b1eb-be0f1c17afed", "created": "2026-10-09T15:13:08.284183Z", "modified": "2026-10-09T15:13:08.284183Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracking.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.284183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e92fb05-7de0-44fc-9acf-58f19a8218e7", "created": "2026-10-09T15:13:08.284668Z", "modified": "2026-10-09T15:13:08.284668Z", "relationship_type": "indicates", "source_ref": "indicator--c6281e07-ae8e-4a61-b1eb-be0f1c17afed", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38aebfee-dc2c-41db-8188-956ebb4d5517", "created": "2026-10-09T15:13:08.284788Z", "modified": "2026-10-09T15:13:08.284788Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='secondclone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.284788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ea2c40d-221f-4376-a1e2-15986d1d4bbc", "created": "2026-10-09T15:13:08.285257Z", "modified": "2026-10-09T15:13:08.285257Z", "relationship_type": "indicates", "source_ref": "indicator--38aebfee-dc2c-41db-8188-956ebb4d5517", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25f4f56-0949-457f-8161-91e6d30b1f8e", "created": "2026-10-09T15:13:08.285388Z", "modified": "2026-10-09T15:13:08.285388Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapps.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.285388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9aaad1f-d59b-430e-a806-e7540e4fc659", "created": "2026-10-09T15:13:08.28585Z", "modified": "2026-10-09T15:13:08.28585Z", "relationship_type": "indicates", "source_ref": "indicator--d25f4f56-0949-457f-8161-91e6d30b1f8e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f7ced3-8db9-423d-9aa5-9ac5dda1fcf9", "created": "2026-10-09T15:13:08.285975Z", "modified": "2026-10-09T15:13:08.285975Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spycell.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.285975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d7dab5e-7734-4e68-a085-456e4595f64b", "created": "2026-10-09T15:13:08.286452Z", "modified": "2026-10-09T15:13:08.286452Z", "relationship_type": "indicates", "source_ref": "indicator--78f7ced3-8db9-423d-9aa5-9ac5dda1fcf9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec43543c-b49d-4a78-be3a-7724f074446e", "created": "2026-10-09T15:13:08.286577Z", "modified": "2026-10-09T15:13:08.286577Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.286577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be2058d2-aeab-4538-8639-10eb0f8007f9", "created": "2026-10-09T15:13:08.287139Z", "modified": "2026-10-09T15:13:08.287139Z", "relationship_type": "indicates", "source_ref": "indicator--ec43543c-b49d-4a78-be3a-7724f074446e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdce6468-ab50-464c-b274-952bdbb6dc8c", "created": "2026-10-09T15:13:08.287274Z", "modified": "2026-10-09T15:13:08.287274Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.287274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b7b0cc0-b366-4800-96be-3e61c9b53072", "created": "2026-10-09T15:13:08.287751Z", "modified": "2026-10-09T15:13:08.287751Z", "relationship_type": "indicates", "source_ref": "indicator--bdce6468-ab50-464c-b274-952bdbb6dc8c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7764528c-2516-4f53-926e-e02470d7a768", "created": "2026-10-09T15:13:08.287874Z", "modified": "2026-10-09T15:13:08.287874Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thetruthspys.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.287874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eaae0af4-3328-4d3d-ba11-113358c54a45", "created": "2026-10-09T15:13:08.288353Z", "modified": "2026-10-09T15:13:08.288353Z", "relationship_type": "indicates", "source_ref": "indicator--7764528c-2516-4f53-926e-e02470d7a768", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454342fe-1217-408c-b073-3b81f089c8d1", "created": "2026-10-09T15:13:08.288477Z", "modified": "2026-10-09T15:13:08.288477Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us.xnspy.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.288477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92291529-a924-4560-b167-80c736638596", "created": "2026-10-09T15:13:08.28902Z", "modified": "2026-10-09T15:13:08.28902Z", "relationship_type": "indicates", "source_ref": "indicator--454342fe-1217-408c-b073-3b81f089c8d1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4f2520-701a-49e3-bd75-d2defdf12d79", "created": "2026-10-09T15:13:08.289145Z", "modified": "2026-10-09T15:13:08.289145Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='weysys.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.289145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b61958ab-079f-4741-b594-08cc5246b987", "created": "2026-10-09T15:13:08.289686Z", "modified": "2026-10-09T15:13:08.289686Z", "relationship_type": "indicates", "source_ref": "indicator--0c4f2520-701a-49e3-bd75-d2defdf12d79", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebbfece-579c-479f-a7c9-ee2e41f23700", "created": "2026-10-09T15:13:08.28982Z", "modified": "2026-10-09T15:13:08.28982Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.28982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ea62ad-7482-47e0-9f23-ea8eb444a43a", "created": "2026-10-09T15:13:08.290299Z", "modified": "2026-10-09T15:13:08.290299Z", "relationship_type": "indicates", "source_ref": "indicator--cebbfece-579c-479f-a7c9-ee2e41f23700", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc432b3-73d3-4f58-86a1-6e21ab470f66", "created": "2026-10-09T15:13:08.29042Z", "modified": "2026-10-09T15:13:08.29042Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.29042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab92cd18-54ba-44fb-a07a-9e608b51e325", "created": "2026-10-09T15:13:08.290893Z", "modified": "2026-10-09T15:13:08.290893Z", "relationship_type": "indicates", "source_ref": "indicator--dcc432b3-73d3-4f58-86a1-6e21ab470f66", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b564afc8-b4de-4f02-b3e3-cd3f1b77ac04", "created": "2026-10-09T15:13:08.29101Z", "modified": "2026-10-09T15:13:08.29101Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xpspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.29101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cd0c47c-602a-4f88-ad5b-0eca872fa839", "created": "2026-10-09T15:13:08.291543Z", "modified": "2026-10-09T15:13:08.291543Z", "relationship_type": "indicates", "source_ref": "indicator--b564afc8-b4de-4f02-b3e3-cd3f1b77ac04", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d9826b-d31f-4bf3-a6c7-e8cfed1c8cf5", "created": "2026-10-09T15:13:08.291665Z", "modified": "2026-10-09T15:13:08.291665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnspy.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.291665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e96b335-8705-4cc6-ae80-3beadb77e901", "created": "2026-10-09T15:13:08.292128Z", "modified": "2026-10-09T15:13:08.292128Z", "relationship_type": "indicates", "source_ref": "indicator--02d9826b-d31f-4bf3-a6c7-e8cfed1c8cf5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9738d3c-5457-4738-be0e-77d75f28a537", "created": "2026-10-09T15:13:08.292249Z", "modified": "2026-10-09T15:13:08.292249Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='inospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.292249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00205910-2eaf-4d30-9cfa-55444d94167c", "created": "2026-10-09T15:13:08.292835Z", "modified": "2026-10-09T15:13:08.292835Z", "relationship_type": "indicates", "source_ref": "indicator--d9738d3c-5457-4738-be0e-77d75f28a537", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--643546f9-e989-4be0-bb7f-ee675c4d4fcc", "created": "2026-10-09T15:13:08.292963Z", "modified": "2026-10-09T15:13:08.292963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.292963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47fad70d-cdc6-4805-b7c7-0ba34b1ebc53", "created": "2026-10-09T15:13:08.293464Z", "modified": "2026-10-09T15:13:08.293464Z", "relationship_type": "indicates", "source_ref": "indicator--643546f9-e989-4be0-bb7f-ee675c4d4fcc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af20c7a5-9a3d-497a-b831-f83b95c551c2", "created": "2026-10-09T15:13:08.293593Z", "modified": "2026-10-09T15:13:08.293593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.mobiletracking.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.293593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4471112-c26c-4f72-9f21-a8e3b5211621", "created": "2026-10-09T15:13:08.294071Z", "modified": "2026-10-09T15:13:08.294071Z", "relationship_type": "indicates", "source_ref": "indicator--af20c7a5-9a3d-497a-b831-f83b95c551c2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e076a9cd-e9bf-46cf-bb0d-b989ef5c39d9", "created": "2026-10-09T15:13:08.294197Z", "modified": "2026-10-09T15:13:08.294197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.xpspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.294197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c9c674b-652c-4c74-82d3-af2c45a1bcbc", "created": "2026-10-09T15:13:08.294687Z", "modified": "2026-10-09T15:13:08.294687Z", "relationship_type": "indicates", "source_ref": "indicator--e076a9cd-e9bf-46cf-bb0d-b989ef5c39d9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43453d2-6ee4-44e9-a648-fa93d08214d8", "created": "2026-10-09T15:13:08.294811Z", "modified": "2026-10-09T15:13:08.294811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71b1a419443c3e9be84e3784f4437f7cf63180a1cde95a0cf49da91521513fd8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.294811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc270851-f3d3-45d1-ac6a-c64c1ae8d1d6", "created": "2026-10-09T15:13:08.297426Z", "modified": "2026-10-09T15:13:08.297426Z", "relationship_type": "indicates", "source_ref": "indicator--d43453d2-6ee4-44e9-a648-fa93d08214d8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930ed5e8-8d50-4130-8553-a61c0c5cc55f", "created": "2026-10-09T15:13:08.297575Z", "modified": "2026-10-09T15:13:08.297575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d61eb2c50a0b2a5a75ce34b2b000501fc05aa25868b5f380f4e7f24872c794b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.297575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eda33587-a650-449b-acbc-54177be99fea", "created": "2026-10-09T15:13:08.298195Z", "modified": "2026-10-09T15:13:08.298195Z", "relationship_type": "indicates", "source_ref": "indicator--930ed5e8-8d50-4130-8553-a61c0c5cc55f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a9d710-ae05-4121-8a01-13193f289d32", "created": "2026-10-09T15:13:08.29834Z", "modified": "2026-10-09T15:13:08.29834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f51d827ff1625b487a12d7b8d93710af61da16f3edeac003d3ccb106e6567553']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.29834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f848317a-c01f-4467-9f5a-1fd47ef2736b", "created": "2026-10-09T15:13:08.298932Z", "modified": "2026-10-09T15:13:08.298932Z", "relationship_type": "indicates", "source_ref": "indicator--65a9d710-ae05-4121-8a01-13193f289d32", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8ec6cd-d25c-4ba0-b720-2e3a8a2febcc", "created": "2026-10-09T15:13:08.299054Z", "modified": "2026-10-09T15:13:08.299054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8af178e84d401ce19794811677f73b2ccb01abdcde376efb4f1efcdcbbd76540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.299054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edc9e311-c39a-430a-8bf2-1d165a6aaf62", "created": "2026-10-09T15:13:08.299818Z", "modified": "2026-10-09T15:13:08.299818Z", "relationship_type": "indicates", "source_ref": "indicator--0c8ec6cd-d25c-4ba0-b720-2e3a8a2febcc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925bcd3f-2e1f-4e22-bc66-e72afb0c4ef2", "created": "2026-10-09T15:13:08.299949Z", "modified": "2026-10-09T15:13:08.299949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbfcc8489ad78467eb6761008bf2425ed31d7a191225476484d30b0510e70f74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.299949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f1b5a26-219b-422c-b139-06d4925f0f48", "created": "2026-10-09T15:13:08.300549Z", "modified": "2026-10-09T15:13:08.300549Z", "relationship_type": "indicates", "source_ref": "indicator--925bcd3f-2e1f-4e22-bc66-e72afb0c4ef2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a71112-b0fa-4031-989b-a56b151ad5f0", "created": "2026-10-09T15:13:08.30068Z", "modified": "2026-10-09T15:13:08.30068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4a848f4ca3762d4040649dacc30f953eafc49fae7968ed22501e269755f4531']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.30068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91ce9e24-fc89-435b-ac73-367b421f8472", "created": "2026-10-09T15:13:08.30134Z", "modified": "2026-10-09T15:13:08.30134Z", "relationship_type": "indicates", "source_ref": "indicator--c9a71112-b0fa-4031-989b-a56b151ad5f0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf5788-a334-4137-8bda-491ce360a94c", "created": "2026-10-09T15:13:08.301468Z", "modified": "2026-10-09T15:13:08.301468Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63f428a8291d2f3a821a8358a8139bd06d219590e5e2baf31d78b83be7476c8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.301468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a873aff-dc25-4784-92c0-b1ba5d89d228", "created": "2026-10-09T15:13:08.302112Z", "modified": "2026-10-09T15:13:08.302112Z", "relationship_type": "indicates", "source_ref": "indicator--94cf5788-a334-4137-8bda-491ce360a94c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d2fe9c-b501-41ec-89d1-9f6ce47b7aa4", "created": "2026-10-09T15:13:08.302237Z", "modified": "2026-10-09T15:13:08.302237Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bc92a9900d469302b974dc54c8e4a52b4e46cccfe669a7bf026f65544f6b342']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.302237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25c6a045-211c-45ca-b0e9-6a0b960aeeaa", "created": "2026-10-09T15:13:08.302841Z", "modified": "2026-10-09T15:13:08.302841Z", "relationship_type": "indicates", "source_ref": "indicator--31d2fe9c-b501-41ec-89d1-9f6ce47b7aa4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f07e02-ece0-4259-83bb-a70012f2d26e", "created": "2026-10-09T15:13:08.302963Z", "modified": "2026-10-09T15:13:08.302963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97dfdfb46328ae1a73dead8e4771b2ffc67cb844d95a1e6f0cbe308b41790c3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.302963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f4eea17-3beb-48a5-be0c-847fb7c54af3", "created": "2026-10-09T15:13:08.303615Z", "modified": "2026-10-09T15:13:08.303615Z", "relationship_type": "indicates", "source_ref": "indicator--b6f07e02-ece0-4259-83bb-a70012f2d26e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b180ebd-f0de-49ea-ab3f-684dc85e19ba", "created": "2026-10-09T15:13:08.303741Z", "modified": "2026-10-09T15:13:08.303741Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7f67e1bb5ad006c6bd4d8d093b7e321bb6e56cc1d5e17b4fb8190aaa537d91b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.303741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1672bd5-69ec-4c1e-8702-23a902c967ec", "created": "2026-10-09T15:13:08.304393Z", "modified": "2026-10-09T15:13:08.304393Z", "relationship_type": "indicates", "source_ref": "indicator--4b180ebd-f0de-49ea-ab3f-684dc85e19ba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ee79b2-eb90-4658-8642-ec5cc8540624", "created": "2026-10-09T15:13:08.304516Z", "modified": "2026-10-09T15:13:08.304516Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='103854397cd049f06d3c38aee9dd9c4611c459eebc45a1f974b26829ea1cb3e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.304516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa6c13ae-d6fa-4860-8225-70eddb0c93cd", "created": "2026-10-09T15:13:08.305094Z", "modified": "2026-10-09T15:13:08.305094Z", "relationship_type": "indicates", "source_ref": "indicator--f6ee79b2-eb90-4658-8642-ec5cc8540624", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f71d1e-2d55-4eee-afb1-c6e942a9cc02", "created": "2026-10-09T15:13:08.305214Z", "modified": "2026-10-09T15:13:08.305214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a33c25a56b1853e0eecc9ba44c5c4e082253d064a665e37c894d4521291f0465']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.305214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b150566b-b051-4f47-9d8f-ed09c832a98d", "created": "2026-10-09T15:13:08.305807Z", "modified": "2026-10-09T15:13:08.305807Z", "relationship_type": "indicates", "source_ref": "indicator--85f71d1e-2d55-4eee-afb1-c6e942a9cc02", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce0e82e-f794-445d-bc6e-edf152fdef18", "created": "2026-10-09T15:13:08.30593Z", "modified": "2026-10-09T15:13:08.30593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dac46c02c272a5f62a2602394f1feb92d9473dd2f19c8cf59f84f2d203cee60c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.30593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a52f5cd0-4fc8-419c-8c58-4a7a1b0033a4", "created": "2026-10-09T15:13:08.30664Z", "modified": "2026-10-09T15:13:08.30664Z", "relationship_type": "indicates", "source_ref": "indicator--0ce0e82e-f794-445d-bc6e-edf152fdef18", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a956e9-807b-4fff-9670-fa37af9df156", "created": "2026-10-09T15:13:08.306777Z", "modified": "2026-10-09T15:13:08.306777Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb27d5ca159d19745d324e607da69c3c303b925a74544dd25965f02e19bbab42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.306777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa9763f9-8e5e-4d50-afc3-df374fd42354", "created": "2026-10-09T15:13:08.307383Z", "modified": "2026-10-09T15:13:08.307383Z", "relationship_type": "indicates", "source_ref": "indicator--23a956e9-807b-4fff-9670-fa37af9df156", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5883e32b-164e-4c9e-b7ef-65283a33d85b", "created": "2026-10-09T15:13:08.307511Z", "modified": "2026-10-09T15:13:08.307511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a1cd21b198bc89046410983707c1fdc1474a45977f807a04fc4be8711141c02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.307511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58a679e9-236f-427a-a50e-ad5e05ce8ec4", "created": "2026-10-09T15:13:08.308161Z", "modified": "2026-10-09T15:13:08.308161Z", "relationship_type": "indicates", "source_ref": "indicator--5883e32b-164e-4c9e-b7ef-65283a33d85b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4159a7-022d-47d9-bcac-c18459521762", "created": "2026-10-09T15:13:08.3083Z", "modified": "2026-10-09T15:13:08.3083Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a97d98442099c39e9b6722c42ce864834eedd03fdfdd877a5387b853a58ba68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.3083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12fffdff-e483-4aea-82f4-1420bceea7b9", "created": "2026-10-09T15:13:08.308948Z", "modified": "2026-10-09T15:13:08.308948Z", "relationship_type": "indicates", "source_ref": "indicator--1a4159a7-022d-47d9-bcac-c18459521762", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12685cd3-c9fa-4105-811f-28e2e51abead", "created": "2026-10-09T15:13:08.309073Z", "modified": "2026-10-09T15:13:08.309073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='16be514b6039026f2bf1b0e6ad8e69b6a0cb070946e94d8568eebc53302c9394']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.309073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d5a939b-93eb-41c4-9dec-3ad0ed447372", "created": "2026-10-09T15:13:08.309673Z", "modified": "2026-10-09T15:13:08.309673Z", "relationship_type": "indicates", "source_ref": "indicator--12685cd3-c9fa-4105-811f-28e2e51abead", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a917593f-542a-42ec-8b15-51cae7b1892c", "created": "2026-10-09T15:13:08.309799Z", "modified": "2026-10-09T15:13:08.309799Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6dbe5e7bf359d503c03bda35bfd5ed139e51ef92444235d4cfbfb2f60579c755']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.309799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6fb4563-0a9b-4caf-ac04-872cf3ab869d", "created": "2026-10-09T15:13:08.310389Z", "modified": "2026-10-09T15:13:08.310389Z", "relationship_type": "indicates", "source_ref": "indicator--a917593f-542a-42ec-8b15-51cae7b1892c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4de51f1-10c1-4098-b796-43ea4ceee9c7", "created": "2026-10-09T15:13:08.310514Z", "modified": "2026-10-09T15:13:08.310514Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a041f99656709f659a0439dc632fa55913f4ff874992db8f990a7215844e97a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.310514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c66b134-fe15-40bb-8f17-0a268ffdf398", "created": "2026-10-09T15:13:08.311173Z", "modified": "2026-10-09T15:13:08.311173Z", "relationship_type": "indicates", "source_ref": "indicator--d4de51f1-10c1-4098-b796-43ea4ceee9c7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae30ca4-2847-40f3-adba-1f9a2575c378", "created": "2026-10-09T15:13:08.311308Z", "modified": "2026-10-09T15:13:08.311308Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb00c170b6303a22a7a14585762a236bc7735f7f40804fbb80d96c0494f58226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.311308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b38e6b03-c151-4425-9f53-17bb0778afc5", "created": "2026-10-09T15:13:08.311897Z", "modified": "2026-10-09T15:13:08.311897Z", "relationship_type": "indicates", "source_ref": "indicator--8ae30ca4-2847-40f3-adba-1f9a2575c378", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fec23f-5d16-4fe1-9d2d-efb2de057bb2", "created": "2026-10-09T15:13:08.312017Z", "modified": "2026-10-09T15:13:08.312017Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbf95e4cd8471ac6357431243022510871c9567ff36049577079c3d2e1cf2f4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.312017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcaaabbf-d19f-4e27-9307-4b1f6ef5a1ca", "created": "2026-10-09T15:13:08.312718Z", "modified": "2026-10-09T15:13:08.312718Z", "relationship_type": "indicates", "source_ref": "indicator--29fec23f-5d16-4fe1-9d2d-efb2de057bb2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915eab07-3cc2-42ff-a648-5aa4d78265db", "created": "2026-10-09T15:13:08.31285Z", "modified": "2026-10-09T15:13:08.31285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28aaab6753b2da29e80caf23a667d92ee19157bf271da1efbc1d65381e428169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.31285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e50a672-fece-4ccc-8170-bbf8b03e6471", "created": "2026-10-09T15:13:08.313518Z", "modified": "2026-10-09T15:13:08.313518Z", "relationship_type": "indicates", "source_ref": "indicator--915eab07-3cc2-42ff-a648-5aa4d78265db", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ff007c-f60f-4def-868d-1cb89de9b484", "created": "2026-10-09T15:13:08.313648Z", "modified": "2026-10-09T15:13:08.313648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='697d45bec0f1fb1608f484fb95e59c8cecb1d6a1d86824e2a4860ef8dc3f28e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.313648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6a28ddb-89d7-46dd-a4b6-8de885e68492", "created": "2026-10-09T15:13:08.314234Z", "modified": "2026-10-09T15:13:08.314234Z", "relationship_type": "indicates", "source_ref": "indicator--e7ff007c-f60f-4def-868d-1cb89de9b484", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dede088a-8b9f-4748-87b0-a9c2e7abdfb2", "created": "2026-10-09T15:13:08.314382Z", "modified": "2026-10-09T15:13:08.314382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1af35ac556274230ece02f1e1c386357357e1b3c9ebe6fc6475fb4d92594323']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.314382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5147d3fa-42c7-4d50-bd99-e4e7aaf2a7cc", "created": "2026-10-09T15:13:08.314966Z", "modified": "2026-10-09T15:13:08.314966Z", "relationship_type": "indicates", "source_ref": "indicator--dede088a-8b9f-4748-87b0-a9c2e7abdfb2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d830e75-bf53-4289-be36-c1b244526052", "created": "2026-10-09T15:13:08.315088Z", "modified": "2026-10-09T15:13:08.315088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83f23a3cb934d8c3492bf81af36853983db5a80d0a105650ee2a87455f06b959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.315088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12c98398-f0e8-46fc-901c-e557dd0241e7", "created": "2026-10-09T15:13:08.31568Z", "modified": "2026-10-09T15:13:08.31568Z", "relationship_type": "indicates", "source_ref": "indicator--1d830e75-bf53-4289-be36-c1b244526052", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6ac199-0360-4c8c-ad2b-2e5faa768795", "created": "2026-10-09T15:13:08.315804Z", "modified": "2026-10-09T15:13:08.315804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1d4cc24e8b612a7c1940400590a471a197a695c9917afadb0457856cde27a1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.315804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--caa1c538-2c5b-490f-bcd7-b4a7e0ef5776", "created": "2026-10-09T15:13:08.316399Z", "modified": "2026-10-09T15:13:08.316399Z", "relationship_type": "indicates", "source_ref": "indicator--9b6ac199-0360-4c8c-ad2b-2e5faa768795", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae5d0db-2c02-4a27-a79a-f9546d0af5cb", "created": "2026-10-09T15:13:08.316523Z", "modified": "2026-10-09T15:13:08.316523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb3a9cc079da56f71bcc8f1a9b15bc37b2c8cd5fcbdd7396994105f798f5fe55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.316523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f70130d1-fc1f-42c9-b9cb-d40ee65a24d3", "created": "2026-10-09T15:13:08.317105Z", "modified": "2026-10-09T15:13:08.317105Z", "relationship_type": "indicates", "source_ref": "indicator--9ae5d0db-2c02-4a27-a79a-f9546d0af5cb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f176fe9d-ecb1-4f28-bd1e-54d4f3175afb", "created": "2026-10-09T15:13:08.317227Z", "modified": "2026-10-09T15:13:08.317227Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37bf018a269a42d994f43d40376b2bb431edf39fd86397b78a411c4513b5d27f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.317227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f085e4ab-8065-446c-b17b-80db38eb2673", "created": "2026-10-09T15:13:08.317831Z", "modified": "2026-10-09T15:13:08.317831Z", "relationship_type": "indicates", "source_ref": "indicator--f176fe9d-ecb1-4f28-bd1e-54d4f3175afb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb1410c-2944-4b41-a4f5-971c7441a8be", "created": "2026-10-09T15:13:08.317957Z", "modified": "2026-10-09T15:13:08.317957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80a5e973dd6793f60ea8026ca6c8ccc1a227a56bfb540943bc61774feda37fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.317957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2004ec0c-b754-4393-b1a7-e6e16a10afa0", "created": "2026-10-09T15:13:08.318545Z", "modified": "2026-10-09T15:13:08.318545Z", "relationship_type": "indicates", "source_ref": "indicator--8bb1410c-2944-4b41-a4f5-971c7441a8be", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d012c3f-920b-4f82-b3fb-dec86edc3c72", "created": "2026-10-09T15:13:08.318667Z", "modified": "2026-10-09T15:13:08.318667Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b1bbfac6972bdc1a915154f798945d818d0b3720586eb015522ae49b1c393d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.318667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--094033fa-7ac0-467a-9a8a-2dfa15dff625", "created": "2026-10-09T15:13:08.319377Z", "modified": "2026-10-09T15:13:08.319377Z", "relationship_type": "indicates", "source_ref": "indicator--5d012c3f-920b-4f82-b3fb-dec86edc3c72", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664ec2a9-ac40-4e55-b876-411ada4fe054", "created": "2026-10-09T15:13:08.319503Z", "modified": "2026-10-09T15:13:08.319503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f054a0578c2af378347834e07df3a17c2f33bab44e42fa0e2232edda5a183ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.319503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03ac9824-1b3c-489b-aca1-b4bbda612b8b", "created": "2026-10-09T15:13:08.320091Z", "modified": "2026-10-09T15:13:08.320091Z", "relationship_type": "indicates", "source_ref": "indicator--664ec2a9-ac40-4e55-b876-411ada4fe054", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7514945a-cd5b-42e1-9326-af390521d70e", "created": "2026-10-09T15:13:08.320216Z", "modified": "2026-10-09T15:13:08.320216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56fbd8225f06b01cf060488b7033960e4e37ea48ff7b9ee9b0e01d4766102f47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.320216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aeb33664-ca45-4664-993e-d067e8c12288", "created": "2026-10-09T15:13:08.320809Z", "modified": "2026-10-09T15:13:08.320809Z", "relationship_type": "indicates", "source_ref": "indicator--7514945a-cd5b-42e1-9326-af390521d70e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf8a225-360e-42bb-9629-b9a457225104", "created": "2026-10-09T15:13:08.320928Z", "modified": "2026-10-09T15:13:08.320928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='878780a68bc58b7a8469df4869089344c3e8f56db7089f60e2cc9c6cb63e917c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.320928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--266aa6d8-ca59-4807-a0d5-0115a6f305f4", "created": "2026-10-09T15:13:08.321513Z", "modified": "2026-10-09T15:13:08.321513Z", "relationship_type": "indicates", "source_ref": "indicator--1cf8a225-360e-42bb-9629-b9a457225104", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28192e16-c005-40d9-9a18-f72a45c855ef", "created": "2026-10-09T15:13:08.321636Z", "modified": "2026-10-09T15:13:08.321636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1819f93c6077a88660fc67bbe5c8c06ded25e066cc18f50881ed776c6c4b243f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.321636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66fde7c4-8740-4b43-a387-92364220bfb5", "created": "2026-10-09T15:13:08.322218Z", "modified": "2026-10-09T15:13:08.322218Z", "relationship_type": "indicates", "source_ref": "indicator--28192e16-c005-40d9-9a18-f72a45c855ef", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e52215b-eb49-44fd-b824-dc582d26e872", "created": "2026-10-09T15:13:08.322348Z", "modified": "2026-10-09T15:13:08.322348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f1c73bfa7a1309fbdfb067ad5f3a06f1a44df73e8effc9b27c2c600c80ae62f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.322348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdefefba-a7ed-4cd1-ac6b-d29f14ae68f1", "created": "2026-10-09T15:13:08.322939Z", "modified": "2026-10-09T15:13:08.322939Z", "relationship_type": "indicates", "source_ref": "indicator--0e52215b-eb49-44fd-b824-dc582d26e872", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bcedd0-e661-4806-8791-17fde903d7ab", "created": "2026-10-09T15:13:08.32306Z", "modified": "2026-10-09T15:13:08.32306Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b0dc1ab899a48b2e5795a200d66cbc4aa212518d2b177f1e08d016d9c7de11a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.32306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afa659cc-1f59-44a6-a88f-fc69989f9363", "created": "2026-10-09T15:13:08.323653Z", "modified": "2026-10-09T15:13:08.323653Z", "relationship_type": "indicates", "source_ref": "indicator--56bcedd0-e661-4806-8791-17fde903d7ab", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa08d5d8-8867-489d-aabb-3f987f3c1beb", "created": "2026-10-09T15:13:08.323776Z", "modified": "2026-10-09T15:13:08.323776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c7afc7a1b9cfe0c848d54cf561079abf959ed36370e3867c0bcb8625d60bb7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.323776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f916fc1-43b4-4c35-9737-e508bdcb7ca0", "created": "2026-10-09T15:13:08.324362Z", "modified": "2026-10-09T15:13:08.324362Z", "relationship_type": "indicates", "source_ref": "indicator--fa08d5d8-8867-489d-aabb-3f987f3c1beb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655d70ad-6276-4b86-b051-93bbca6a9b01", "created": "2026-10-09T15:13:08.324486Z", "modified": "2026-10-09T15:13:08.324486Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e60bed3b67c92053b5e5f3658316825221891c077b99f63ab807235ee5a8811']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.324486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37252acb-557d-43bd-b3be-cf94d3b5370d", "created": "2026-10-09T15:13:08.325074Z", "modified": "2026-10-09T15:13:08.325074Z", "relationship_type": "indicates", "source_ref": "indicator--655d70ad-6276-4b86-b051-93bbca6a9b01", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f41f639-b1d5-4fb0-8e68-eae457a00538", "created": "2026-10-09T15:13:08.325195Z", "modified": "2026-10-09T15:13:08.325195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0320bbb6b562fdfd3667816c902447e2e0d8a7074061f0c87036ebdfb7eb013']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.325195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--500cdcc4-a550-4487-ba8c-f751fdd04beb", "created": "2026-10-09T15:13:08.325897Z", "modified": "2026-10-09T15:13:08.325897Z", "relationship_type": "indicates", "source_ref": "indicator--7f41f639-b1d5-4fb0-8e68-eae457a00538", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd0781f-9b4f-41d7-b9ec-f53255fb7e41", "created": "2026-10-09T15:13:08.326022Z", "modified": "2026-10-09T15:13:08.326022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d5d88eb08afdb3f16d5b45ea6eef71ceb2bc7ccee2ca0cf419256d3f01ee3f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.326022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a778ab42-39cf-4e97-9b1c-e7bdab13eb65", "created": "2026-10-09T15:13:08.326691Z", "modified": "2026-10-09T15:13:08.326691Z", "relationship_type": "indicates", "source_ref": "indicator--acd0781f-9b4f-41d7-b9ec-f53255fb7e41", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6988ff2-e3b9-4f4e-a47c-8b3606dac147", "created": "2026-10-09T15:13:08.32682Z", "modified": "2026-10-09T15:13:08.32682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fdcff3090d84ae5b4bb8ff94704f7196cb3269bc545f6c1e245653c87922d8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.32682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52d57317-7816-4a25-82e0-475f63148987", "created": "2026-10-09T15:13:08.327418Z", "modified": "2026-10-09T15:13:08.327418Z", "relationship_type": "indicates", "source_ref": "indicator--b6988ff2-e3b9-4f4e-a47c-8b3606dac147", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5197e7-a452-4df1-a59c-b0043072a8c3", "created": "2026-10-09T15:13:08.327543Z", "modified": "2026-10-09T15:13:08.327543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a91a67560f9139d9770f1ab0540c21753c90d85d9f400cb9a859a9ec3ab738af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.327543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c817a2e8-f4bd-458f-a805-df3a3201107b", "created": "2026-10-09T15:13:08.328123Z", "modified": "2026-10-09T15:13:08.328123Z", "relationship_type": "indicates", "source_ref": "indicator--5a5197e7-a452-4df1-a59c-b0043072a8c3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b8a010-2188-4135-962d-2d7c86cedf7f", "created": "2026-10-09T15:13:08.328243Z", "modified": "2026-10-09T15:13:08.328243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f227d2415e2218adc8b14b50bc4c475e3edbbc81fe6daabe93e7cd9671c944d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.328243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17d908d3-afc1-4aa5-a2c4-26f111144562", "created": "2026-10-09T15:13:08.328835Z", "modified": "2026-10-09T15:13:08.328835Z", "relationship_type": "indicates", "source_ref": "indicator--13b8a010-2188-4135-962d-2d7c86cedf7f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b740750-861b-45e3-a917-f70dd9808e34", "created": "2026-10-09T15:13:08.328956Z", "modified": "2026-10-09T15:13:08.328956Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da4791238823d760283d6840aa35cec393e403123212e008eeb77a7c2051844d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.328956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--006f5163-a95e-4149-b691-1ddfe174f008", "created": "2026-10-09T15:13:08.329546Z", "modified": "2026-10-09T15:13:08.329546Z", "relationship_type": "indicates", "source_ref": "indicator--9b740750-861b-45e3-a917-f70dd9808e34", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44d91fb-319a-4268-bfed-6dbf797c2a92", "created": "2026-10-09T15:13:08.329669Z", "modified": "2026-10-09T15:13:08.329669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='24b67dd38394632b78ffe45985b96ceaa68769f9e4cbc9348cd434d91cbdf6fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.329669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3251d8f0-9a25-45fe-86d2-8dd8406c4027", "created": "2026-10-09T15:13:08.330243Z", "modified": "2026-10-09T15:13:08.330243Z", "relationship_type": "indicates", "source_ref": "indicator--a44d91fb-319a-4268-bfed-6dbf797c2a92", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3e07bb-710b-4174-a872-4d45da803b11", "created": "2026-10-09T15:13:08.330378Z", "modified": "2026-10-09T15:13:08.330378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5c601a346dadc7a648e5abcb2a774b178567e3dec211d3cf34f72b43c9cfa58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.330378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67a4c669-4d0e-4f72-b449-0f3a00b16113", "created": "2026-10-09T15:13:08.330966Z", "modified": "2026-10-09T15:13:08.330966Z", "relationship_type": "indicates", "source_ref": "indicator--7a3e07bb-710b-4174-a872-4d45da803b11", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e8d4f2-aebf-40fb-8c08-3b247c3cf112", "created": "2026-10-09T15:13:08.331086Z", "modified": "2026-10-09T15:13:08.331086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f67a068cc4521a36056c5f6119dd4edcb86996a85475f444cd024e2370f49fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.331086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e0d8ab2-a621-4145-bc19-4429f22cab82", "created": "2026-10-09T15:13:08.332111Z", "modified": "2026-10-09T15:13:08.332111Z", "relationship_type": "indicates", "source_ref": "indicator--e4e8d4f2-aebf-40fb-8c08-3b247c3cf112", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc605b48-4ee9-4344-a435-498cc418c7ff", "created": "2026-10-09T15:13:08.332247Z", "modified": "2026-10-09T15:13:08.332247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f761dea56b7d4a0ad40e55632da2e6e2de322d1cae3b117d1d27ea0b3346bd63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.332247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0f4631b-2e79-49ce-b746-744dd25334b4", "created": "2026-10-09T15:13:08.332868Z", "modified": "2026-10-09T15:13:08.332868Z", "relationship_type": "indicates", "source_ref": "indicator--fc605b48-4ee9-4344-a435-498cc418c7ff", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac34bbbc-e95e-49f1-9a02-443462bb642b", "created": "2026-10-09T15:13:08.332993Z", "modified": "2026-10-09T15:13:08.332993Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d7c8fa85c299051edfa59e1a9bb02cb3e6210d1fea9f1509999614986b18fe8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.332993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89035e9b-31d8-4dfa-989b-95dd9d369213", "created": "2026-10-09T15:13:08.333591Z", "modified": "2026-10-09T15:13:08.333591Z", "relationship_type": "indicates", "source_ref": "indicator--ac34bbbc-e95e-49f1-9a02-443462bb642b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2290f2-b924-40fe-925d-1a89b95c58b4", "created": "2026-10-09T15:13:08.333718Z", "modified": "2026-10-09T15:13:08.333718Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b81f7a9152d12b3db9a1e7981abe2786630e181db569fc7acc7cd32f0926159f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.333718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--088724ef-96e8-4ad0-87e9-b18a5944ac87", "created": "2026-10-09T15:13:08.334307Z", "modified": "2026-10-09T15:13:08.334307Z", "relationship_type": "indicates", "source_ref": "indicator--da2290f2-b924-40fe-925d-1a89b95c58b4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1d0d21-636d-4813-9d96-5eda548f496f", "created": "2026-10-09T15:13:08.33443Z", "modified": "2026-10-09T15:13:08.33443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff33b8329da21c7ed76e4f4bc85325cecbb9f8055471fb2493c26b4d6b4a4a7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.33443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a98c345-da43-4d5f-bd4a-9f23329e233e", "created": "2026-10-09T15:13:08.335011Z", "modified": "2026-10-09T15:13:08.335011Z", "relationship_type": "indicates", "source_ref": "indicator--7b1d0d21-636d-4813-9d96-5eda548f496f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb457b14-3dd8-4911-b0a8-485f1f9ceaff", "created": "2026-10-09T15:13:08.335133Z", "modified": "2026-10-09T15:13:08.335133Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7c37ee164c2cfd4c60d5b4861273c35668c3aa467cbf6d623bbc54ebf7bc7d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.335133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6aaf607a-b7be-48a2-915a-78f529200ed1", "created": "2026-10-09T15:13:08.33572Z", "modified": "2026-10-09T15:13:08.33572Z", "relationship_type": "indicates", "source_ref": "indicator--fb457b14-3dd8-4911-b0a8-485f1f9ceaff", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985874ed-d933-4e9f-afac-d5bbfbdf638f", "created": "2026-10-09T15:13:08.335843Z", "modified": "2026-10-09T15:13:08.335843Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23c6eb3cd9e04ff3684681c9469ea8909022bdf71dd403e8049bc88e52efc40c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.335843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96665539-fe1e-4071-8ba4-f5342fbaac86", "created": "2026-10-09T15:13:08.336435Z", "modified": "2026-10-09T15:13:08.336435Z", "relationship_type": "indicates", "source_ref": "indicator--985874ed-d933-4e9f-afac-d5bbfbdf638f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f401b249-e9cd-4a99-b744-8dfa4f1aa8f2", "created": "2026-10-09T15:13:08.336559Z", "modified": "2026-10-09T15:13:08.336559Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a0341861cd8ab51567c5bc19e1e8bbdc35e2e02927b5ae1db1d2f5bae8784d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.336559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--724a1dea-2f70-4e6d-a0d9-a4be59331f24", "created": "2026-10-09T15:13:08.337136Z", "modified": "2026-10-09T15:13:08.337136Z", "relationship_type": "indicates", "source_ref": "indicator--f401b249-e9cd-4a99-b744-8dfa4f1aa8f2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ebe11d-b4c9-4bad-9666-69fe9ff7e26e", "created": "2026-10-09T15:13:08.337254Z", "modified": "2026-10-09T15:13:08.337254Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27dc7afacaa3f229d9003790e1a49a669c5d59836ff075e6dbc33d28d069ac4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.337254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e78af0c-5e34-467f-a697-c48ebd255919", "created": "2026-10-09T15:13:08.337842Z", "modified": "2026-10-09T15:13:08.337842Z", "relationship_type": "indicates", "source_ref": "indicator--37ebe11d-b4c9-4bad-9666-69fe9ff7e26e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ee80fb-977a-4bfb-9b39-bbf5d6b4e55e", "created": "2026-10-09T15:13:08.337964Z", "modified": "2026-10-09T15:13:08.337964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf4bf9f58ab4f6fe7853256b8a432ec50a8f22e803b0ee0310fa02440d42a396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.337964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c5fa1bd-829f-42d4-8ca6-87c196e8babe", "created": "2026-10-09T15:13:08.33867Z", "modified": "2026-10-09T15:13:08.33867Z", "relationship_type": "indicates", "source_ref": "indicator--a0ee80fb-977a-4bfb-9b39-bbf5d6b4e55e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fb3132-7dc6-4805-8c5a-82aed7695d40", "created": "2026-10-09T15:13:08.338802Z", "modified": "2026-10-09T15:13:08.338802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2156664e23ecb5cd39a5a1d29ec786ff91ba863c525b9f031b44ab592a592d4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.338802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97df1405-d5e8-4dda-9fe0-6d9097723d34", "created": "2026-10-09T15:13:08.339399Z", "modified": "2026-10-09T15:13:08.339399Z", "relationship_type": "indicates", "source_ref": "indicator--e2fb3132-7dc6-4805-8c5a-82aed7695d40", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6be441-2322-4822-95c0-fdc138f7c1f9", "created": "2026-10-09T15:13:08.339526Z", "modified": "2026-10-09T15:13:08.339526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4bfb03936bd52269cdccea90222685e8b09c63e26ae037228c277b36ff6f068']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.339526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--140f04cd-a470-42d0-adc3-50f924efcae2", "created": "2026-10-09T15:13:08.340108Z", "modified": "2026-10-09T15:13:08.340108Z", "relationship_type": "indicates", "source_ref": "indicator--6d6be441-2322-4822-95c0-fdc138f7c1f9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c4a14e-88cc-4bbd-b647-974355f27dcc", "created": "2026-10-09T15:13:08.34023Z", "modified": "2026-10-09T15:13:08.34023Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f5e4e1958553ccd1a3368ae8a221c871cea29c05cf7ec15034c8ffa846e84e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.34023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78939e7a-8491-4dfb-875b-87c0424548ba", "created": "2026-10-09T15:13:08.340829Z", "modified": "2026-10-09T15:13:08.340829Z", "relationship_type": "indicates", "source_ref": "indicator--d4c4a14e-88cc-4bbd-b647-974355f27dcc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4f7e6f-ca34-4fac-9e8c-cd8e3ebb7c55", "created": "2026-10-09T15:13:08.340951Z", "modified": "2026-10-09T15:13:08.340951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4598edbfe6ca567538836cc06ffa7bf6e083e3a5e34c286f6b7fb9bb5ac57a10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.340951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9316ab3d-17b7-4804-8073-02a477dbcaba", "created": "2026-10-09T15:13:08.341538Z", "modified": "2026-10-09T15:13:08.341538Z", "relationship_type": "indicates", "source_ref": "indicator--7e4f7e6f-ca34-4fac-9e8c-cd8e3ebb7c55", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694010a3-8ace-457a-b32b-255432c7990b", "created": "2026-10-09T15:13:08.341662Z", "modified": "2026-10-09T15:13:08.341662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00b776ef565563d510b9eb428d7dddd52e8edf3bd3c38947a88cd9d7d637c874']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.341662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe0b0256-9db3-4f1f-b9fb-475d4fdef6c9", "created": "2026-10-09T15:13:08.342251Z", "modified": "2026-10-09T15:13:08.342251Z", "relationship_type": "indicates", "source_ref": "indicator--694010a3-8ace-457a-b32b-255432c7990b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abd408b-b331-4a5c-8992-2fbace9582f1", "created": "2026-10-09T15:13:08.342385Z", "modified": "2026-10-09T15:13:08.342385Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='274e086c5c34ad6f1d9eb2b5cb9dcb87d647e7a2c44e18d4529f85c5ebaaf5cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.342385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a07879ff-346f-4ae5-ae1b-4912430d5ff5", "created": "2026-10-09T15:13:08.34297Z", "modified": "2026-10-09T15:13:08.34297Z", "relationship_type": "indicates", "source_ref": "indicator--7abd408b-b331-4a5c-8992-2fbace9582f1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2404b13-ee73-4eb5-9e4d-391bd6cb5422", "created": "2026-10-09T15:13:08.343092Z", "modified": "2026-10-09T15:13:08.343092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d34e55862fb9f873422ecaf46e77146edf81fe8d18fb50e7f1ef4d84b472fc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.343092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c16c859-cb80-4e3e-9561-4c2251a4a46d", "created": "2026-10-09T15:13:08.343684Z", "modified": "2026-10-09T15:13:08.343684Z", "relationship_type": "indicates", "source_ref": "indicator--b2404b13-ee73-4eb5-9e4d-391bd6cb5422", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155b76c4-40f0-486c-939c-6149a5cbbd5e", "created": "2026-10-09T15:13:08.343805Z", "modified": "2026-10-09T15:13:08.343805Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='478eb67281278595a36bd755398a2211017ed0f1220248efd2867ac3558f9918']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.343805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--846788e8-89cc-4136-814f-a01caa8eac00", "created": "2026-10-09T15:13:08.344398Z", "modified": "2026-10-09T15:13:08.344398Z", "relationship_type": "indicates", "source_ref": "indicator--155b76c4-40f0-486c-939c-6149a5cbbd5e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadba0e4-d905-4aca-8ee8-1f8f43ac88c6", "created": "2026-10-09T15:13:08.344521Z", "modified": "2026-10-09T15:13:08.344521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='441b27d4b59fa5a27d119d649d43d5401114f9014954199edb39d2a22b24ca9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.344521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4351d4a-1002-4f97-bf5e-4d59075453ad", "created": "2026-10-09T15:13:08.345215Z", "modified": "2026-10-09T15:13:08.345215Z", "relationship_type": "indicates", "source_ref": "indicator--aadba0e4-d905-4aca-8ee8-1f8f43ac88c6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd61878-ac0f-4d56-9e3b-be0fba962cc8", "created": "2026-10-09T15:13:08.345356Z", "modified": "2026-10-09T15:13:08.345356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31ffef84cca698fc0fef5497c4abbe030e17427144864971f8a9f637f9800573']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.345356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b97c0a7-5fd9-4bce-928d-1343e0b0863f", "created": "2026-10-09T15:13:08.345946Z", "modified": "2026-10-09T15:13:08.345946Z", "relationship_type": "indicates", "source_ref": "indicator--fbd61878-ac0f-4d56-9e3b-be0fba962cc8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c1c43b-f72c-42c0-b6df-50a06cd07263", "created": "2026-10-09T15:13:08.346068Z", "modified": "2026-10-09T15:13:08.346068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bbbaff31596d3634439f7a0f29d82d120e482aa0ddc5563835c2a38a22f243d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.346068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa4e2aad-a982-45bd-b91c-d1ac2ee3cf8b", "created": "2026-10-09T15:13:08.34667Z", "modified": "2026-10-09T15:13:08.34667Z", "relationship_type": "indicates", "source_ref": "indicator--99c1c43b-f72c-42c0-b6df-50a06cd07263", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a98bf7-4cb6-4929-9270-e1d0ebbd812f", "created": "2026-10-09T15:13:08.346794Z", "modified": "2026-10-09T15:13:08.346794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a8a3eebffc80190ac84557e842cde94c369b856abe5bf11221834ee96bd945e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.346794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1a76ee6-37ca-43ac-9b80-f80702524b86", "created": "2026-10-09T15:13:08.347393Z", "modified": "2026-10-09T15:13:08.347393Z", "relationship_type": "indicates", "source_ref": "indicator--74a98bf7-4cb6-4929-9270-e1d0ebbd812f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7916be97-621b-4159-af44-6dcc6675a694", "created": "2026-10-09T15:13:08.347524Z", "modified": "2026-10-09T15:13:08.347524Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='358726ca85969ee194abf166e3b7947c674ea3dd17e058e8a468903f386025db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.347524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--082d0a2d-3f77-4906-8005-7523e50ed3c4", "created": "2026-10-09T15:13:08.348117Z", "modified": "2026-10-09T15:13:08.348117Z", "relationship_type": "indicates", "source_ref": "indicator--7916be97-621b-4159-af44-6dcc6675a694", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d880fe-4008-4992-b6bc-f277aacdb9c7", "created": "2026-10-09T15:13:08.348237Z", "modified": "2026-10-09T15:13:08.348237Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ae5b896cfa90e89bb97c94d9438cde9e9c107204ace3e58cdbde7dbadaa4562']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.348237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7efcee94-11a8-408d-b8c2-a111201b283e", "created": "2026-10-09T15:13:08.348831Z", "modified": "2026-10-09T15:13:08.348831Z", "relationship_type": "indicates", "source_ref": "indicator--46d880fe-4008-4992-b6bc-f277aacdb9c7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb25a59a-117e-44b8-ba58-1674b1f35ed2", "created": "2026-10-09T15:13:08.34895Z", "modified": "2026-10-09T15:13:08.34895Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd5587f99c25d93b8e51cf487454d2d067fc7d5fe8e107ff6824b9dbd2bc7c97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.34895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51b2c058-364b-4c72-8575-6514be70723a", "created": "2026-10-09T15:13:08.349534Z", "modified": "2026-10-09T15:13:08.349534Z", "relationship_type": "indicates", "source_ref": "indicator--cb25a59a-117e-44b8-ba58-1674b1f35ed2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfe1fb9-f8ac-42f5-8975-13b830a22a79", "created": "2026-10-09T15:13:08.349655Z", "modified": "2026-10-09T15:13:08.349655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7f1778ccb8f4640b7c511b2c065b3a610713ebad410385714ac7a6ebaff5e5f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.349655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faead1b0-1706-4d7f-8ba3-a0f03499e4b4", "created": "2026-10-09T15:13:08.350229Z", "modified": "2026-10-09T15:13:08.350229Z", "relationship_type": "indicates", "source_ref": "indicator--bdfe1fb9-f8ac-42f5-8975-13b830a22a79", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b31639-12dd-4909-8b01-a5dabcbc62eb", "created": "2026-10-09T15:13:08.350361Z", "modified": "2026-10-09T15:13:08.350361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2c00377c1274460c894c901e4fa19aa28d7fcb65e01b7ef6f6b9d7c81ab27cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.350361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c000bc1a-a7c3-4b66-ba20-723d1c6edbc1", "created": "2026-10-09T15:13:08.35094Z", "modified": "2026-10-09T15:13:08.35094Z", "relationship_type": "indicates", "source_ref": "indicator--79b31639-12dd-4909-8b01-a5dabcbc62eb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80e624a-7d64-45cf-bd07-6c26bbab7662", "created": "2026-10-09T15:13:08.351059Z", "modified": "2026-10-09T15:13:08.351059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a651cb3c1bd2942dfd293cd9e25f5c9a67725c73753f50f18abd254f9c5c63b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.351059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27e2dac5-af9a-48f0-af5f-9df7a991e96f", "created": "2026-10-09T15:13:08.351753Z", "modified": "2026-10-09T15:13:08.351753Z", "relationship_type": "indicates", "source_ref": "indicator--d80e624a-7d64-45cf-bd07-6c26bbab7662", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbe7bc9-b737-4fdf-81c9-09265dc60737", "created": "2026-10-09T15:13:08.351878Z", "modified": "2026-10-09T15:13:08.351878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='999cb8017a63d60b185a3a47d53aed69babab16bcfde1134fb7dfb90156173f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.351878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51e27e89-8fb6-494a-8a35-8ad7c9510f7c", "created": "2026-10-09T15:13:08.352482Z", "modified": "2026-10-09T15:13:08.352482Z", "relationship_type": "indicates", "source_ref": "indicator--2dbe7bc9-b737-4fdf-81c9-09265dc60737", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28539a7c-e0ca-4537-ba46-79ab505ec55c", "created": "2026-10-09T15:13:08.352607Z", "modified": "2026-10-09T15:13:08.352607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='daa67f94bc7b50021bdda068469f18616db2b7ca331fc7cb7c452a4a2e95464c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.352607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30417106-23c7-4f92-97a2-3bcad3dace66", "created": "2026-10-09T15:13:08.35319Z", "modified": "2026-10-09T15:13:08.35319Z", "relationship_type": "indicates", "source_ref": "indicator--28539a7c-e0ca-4537-ba46-79ab505ec55c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605e00f7-3e9b-4ca3-821c-8aa51bf48374", "created": "2026-10-09T15:13:08.353325Z", "modified": "2026-10-09T15:13:08.353325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6041979a0ffcb022d2ee9c59bc3609a4f46a7b20bb15e6e148f8b727ad867d4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.353325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffc47ce7-3d23-4eaf-947f-5b1256131af2", "created": "2026-10-09T15:13:08.353907Z", "modified": "2026-10-09T15:13:08.353907Z", "relationship_type": "indicates", "source_ref": "indicator--605e00f7-3e9b-4ca3-821c-8aa51bf48374", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9115846d-077e-4906-ad87-c976d9d80ef7", "created": "2026-10-09T15:13:08.354025Z", "modified": "2026-10-09T15:13:08.354025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6700abd41f151a0cd08bc85ab0cd2719357da3a1f382bc84e17e4521debeded']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.354025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00675427-9101-4544-bbb0-87f17914762e", "created": "2026-10-09T15:13:08.35463Z", "modified": "2026-10-09T15:13:08.35463Z", "relationship_type": "indicates", "source_ref": "indicator--9115846d-077e-4906-ad87-c976d9d80ef7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179e210f-6263-413c-96a1-b11a57592d9e", "created": "2026-10-09T15:13:08.354758Z", "modified": "2026-10-09T15:13:08.354758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d44a700414573f55214514ec5557576f38519ae06072c3b15e1c76c9de0c3cc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.354758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb3b4bc7-e7df-4229-bbef-270ca1421c01", "created": "2026-10-09T15:13:08.355358Z", "modified": "2026-10-09T15:13:08.355358Z", "relationship_type": "indicates", "source_ref": "indicator--179e210f-6263-413c-96a1-b11a57592d9e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84800db0-1945-4d60-bc3c-6d2fc864f8d7", "created": "2026-10-09T15:13:08.355481Z", "modified": "2026-10-09T15:13:08.355481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='159657f7a3bc53ef7617e67666f1e0b6394757fff9d86aa8026decce9786ae29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.355481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--046ef469-ddc6-42ba-ac54-d485739e10b3", "created": "2026-10-09T15:13:08.356063Z", "modified": "2026-10-09T15:13:08.356063Z", "relationship_type": "indicates", "source_ref": "indicator--84800db0-1945-4d60-bc3c-6d2fc864f8d7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4227fb-cfde-40f7-b758-258546dbb14a", "created": "2026-10-09T15:13:08.356182Z", "modified": "2026-10-09T15:13:08.356182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cba8bbe440ea785e03973f4e77238a734b70b103f81147651d4945f10943262']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.356182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cc6d946-de98-40b9-b127-3d304f515dab", "created": "2026-10-09T15:13:08.356789Z", "modified": "2026-10-09T15:13:08.356789Z", "relationship_type": "indicates", "source_ref": "indicator--ff4227fb-cfde-40f7-b758-258546dbb14a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75640b90-3c15-4b1b-85ef-b5673dc608bd", "created": "2026-10-09T15:13:08.35691Z", "modified": "2026-10-09T15:13:08.35691Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad70d8bad45ea42e15836d3f4efeb35c59a97e10a4343863d7462b86fa7c4616']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.35691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4112223-9533-4aa0-8649-f814fddc4c84", "created": "2026-10-09T15:13:08.357615Z", "modified": "2026-10-09T15:13:08.357615Z", "relationship_type": "indicates", "source_ref": "indicator--75640b90-3c15-4b1b-85ef-b5673dc608bd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c9a2b9-3a74-4846-91dd-031753be9ff2", "created": "2026-10-09T15:13:08.357747Z", "modified": "2026-10-09T15:13:08.357747Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81b145188bfb4b45c1127a4b3168e1d71cb3382318b671ca6247263bc9311e2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.357747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f3f100c-aa1a-42b3-8109-d9c5e2a5851e", "created": "2026-10-09T15:13:08.358351Z", "modified": "2026-10-09T15:13:08.358351Z", "relationship_type": "indicates", "source_ref": "indicator--06c9a2b9-3a74-4846-91dd-031753be9ff2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c10dbf7-0dc4-4abc-a0d9-852fe1483eb4", "created": "2026-10-09T15:13:08.35848Z", "modified": "2026-10-09T15:13:08.35848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58a5bbbea9a86c54742f12febd62fe25d575d21b111355d9ce0b05beed4271d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.35848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4199458f-ee68-4882-8a0c-2a0339247d55", "created": "2026-10-09T15:13:08.359063Z", "modified": "2026-10-09T15:13:08.359063Z", "relationship_type": "indicates", "source_ref": "indicator--6c10dbf7-0dc4-4abc-a0d9-852fe1483eb4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ac265c-ffc7-473d-85d7-8226b25e5bae", "created": "2026-10-09T15:13:08.359189Z", "modified": "2026-10-09T15:13:08.359189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba467303b0e601dc8dbea89e16cfb8c1253540eadf0cfc4ea875412a7a3ed834']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.359189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6cd0cc8-58a0-4644-bd13-afef6effa8c0", "created": "2026-10-09T15:13:08.359798Z", "modified": "2026-10-09T15:13:08.359798Z", "relationship_type": "indicates", "source_ref": "indicator--e7ac265c-ffc7-473d-85d7-8226b25e5bae", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310b2ce7-acd4-44e8-9ceb-6a4631369504", "created": "2026-10-09T15:13:08.359924Z", "modified": "2026-10-09T15:13:08.359924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2459dc54196813a8ed703a996f984bd40620ed408521c27d70cfd354ffd7f4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.359924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff806a7c-7765-4d20-b11a-c096abe48e2a", "created": "2026-10-09T15:13:08.360521Z", "modified": "2026-10-09T15:13:08.360521Z", "relationship_type": "indicates", "source_ref": "indicator--310b2ce7-acd4-44e8-9ceb-6a4631369504", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a636b2-f120-408b-9a45-2d52e43a75d7", "created": "2026-10-09T15:13:08.360645Z", "modified": "2026-10-09T15:13:08.360645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1ed4367a0442533e77637ce11d4165cd9d90ff33fb48a72bb3b7aa07d2544b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.360645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dedb3ad8-7c4c-41b2-b7d2-ed09230af175", "created": "2026-10-09T15:13:08.361223Z", "modified": "2026-10-09T15:13:08.361223Z", "relationship_type": "indicates", "source_ref": "indicator--04a636b2-f120-408b-9a45-2d52e43a75d7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b07964-ded6-4e16-8962-6a8f22f5f73e", "created": "2026-10-09T15:13:08.361357Z", "modified": "2026-10-09T15:13:08.361357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='217fe5b1c136d846a5141a9a8837c47372ffe0c12fb8c67a873cf632c831aa1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.361357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63aff686-f9fa-424f-95bc-f56d57da5daa", "created": "2026-10-09T15:13:08.361941Z", "modified": "2026-10-09T15:13:08.361941Z", "relationship_type": "indicates", "source_ref": "indicator--11b07964-ded6-4e16-8962-6a8f22f5f73e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aae777d-5692-4631-a161-99a317f5c614", "created": "2026-10-09T15:13:08.362062Z", "modified": "2026-10-09T15:13:08.362062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bff36343808e864d693b094d1d671f39812b3b542501825b4f0d292d5f98b0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.362062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4400b647-4683-42fd-beb3-75eb464f3e37", "created": "2026-10-09T15:13:08.362662Z", "modified": "2026-10-09T15:13:08.362662Z", "relationship_type": "indicates", "source_ref": "indicator--6aae777d-5692-4631-a161-99a317f5c614", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92449401-51c0-4b98-bfb8-609deada69e0", "created": "2026-10-09T15:13:08.362787Z", "modified": "2026-10-09T15:13:08.362787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdb590bef92cfb3049c7d4694b10f51d0dfaca2f0a323210ad9593a59c41eb7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.362787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aa21bda-db98-44aa-b5db-4bb296ea1a18", "created": "2026-10-09T15:13:08.36339Z", "modified": "2026-10-09T15:13:08.36339Z", "relationship_type": "indicates", "source_ref": "indicator--92449401-51c0-4b98-bfb8-609deada69e0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cec8db2-68a7-46a5-894b-483cffba6361", "created": "2026-10-09T15:13:08.363517Z", "modified": "2026-10-09T15:13:08.363517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5eb3168d4294b9a69f2a448a2b11cdb437e4ffca0aad5449b7851d4a56bf440']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.363517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20c0c73e-d979-4779-a401-5aee92036b8b", "created": "2026-10-09T15:13:08.36421Z", "modified": "2026-10-09T15:13:08.36421Z", "relationship_type": "indicates", "source_ref": "indicator--8cec8db2-68a7-46a5-894b-483cffba6361", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928048e4-adcb-4cf9-8c21-655b609b9dd6", "created": "2026-10-09T15:13:08.364349Z", "modified": "2026-10-09T15:13:08.364349Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7eae64715959efaf5d1b8766803b73c71dee9a9f66bd3bf0bf4c8a01644a2c04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.364349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2cba720-1b89-44e2-89bd-5fc304822133", "created": "2026-10-09T15:13:08.364935Z", "modified": "2026-10-09T15:13:08.364935Z", "relationship_type": "indicates", "source_ref": "indicator--928048e4-adcb-4cf9-8c21-655b609b9dd6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abff67e-d2e9-437a-9bb0-2ea99090909f", "created": "2026-10-09T15:13:08.365061Z", "modified": "2026-10-09T15:13:08.365061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fdd9e4396a8f7274f034958169bb47180cd7d29d1bb2d7e71895fec642437e60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.365061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--413e7cfc-e565-434f-9138-bfcf551b410a", "created": "2026-10-09T15:13:08.365664Z", "modified": "2026-10-09T15:13:08.365664Z", "relationship_type": "indicates", "source_ref": "indicator--5abff67e-d2e9-437a-9bb0-2ea99090909f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9b1aa4-9e3a-47b9-ab3c-8af008823ed1", "created": "2026-10-09T15:13:08.365791Z", "modified": "2026-10-09T15:13:08.365791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='972b291a37d8ff9dfc2459169a829112b5fface52c0ee1d445baab38d2d81053']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.365791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9e08d65-640e-4c54-9678-f332eb93946a", "created": "2026-10-09T15:13:08.366383Z", "modified": "2026-10-09T15:13:08.366383Z", "relationship_type": "indicates", "source_ref": "indicator--8e9b1aa4-9e3a-47b9-ab3c-8af008823ed1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05b9e18-385f-4e49-8bcd-40e1cffe743a", "created": "2026-10-09T15:13:08.366504Z", "modified": "2026-10-09T15:13:08.366504Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='967ef5e2a296c25e1f833dfb37e74aa66037b549684bd55fe92d5e7214b6c2fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.366504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0cf9845-b123-40d9-b5bf-b491e03c3b21", "created": "2026-10-09T15:13:08.36709Z", "modified": "2026-10-09T15:13:08.36709Z", "relationship_type": "indicates", "source_ref": "indicator--d05b9e18-385f-4e49-8bcd-40e1cffe743a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05964b7-d4f0-4db0-8faf-85500a44da7d", "created": "2026-10-09T15:13:08.367207Z", "modified": "2026-10-09T15:13:08.367207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8133ff9615b4f1821cb360be965d676ed1b916ea4d8d4f2dd334075ca65efc00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.367207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a54f9fa3-e336-4399-b547-ce24897a48a8", "created": "2026-10-09T15:13:08.367804Z", "modified": "2026-10-09T15:13:08.367804Z", "relationship_type": "indicates", "source_ref": "indicator--a05964b7-d4f0-4db0-8faf-85500a44da7d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5277c61e-7280-4a7f-b168-a5c5cfc6e7e7", "created": "2026-10-09T15:13:08.367928Z", "modified": "2026-10-09T15:13:08.367928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='052840c5e9479fcd75e12b9c55f7d9296f08393947c14108ea7c7f25606d1e83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.367928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--756b16ec-38af-400b-ad99-cd9f6bd509fc", "created": "2026-10-09T15:13:08.368523Z", "modified": "2026-10-09T15:13:08.368523Z", "relationship_type": "indicates", "source_ref": "indicator--5277c61e-7280-4a7f-b168-a5c5cfc6e7e7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96800ab-7099-44e3-95ec-5334487b257c", "created": "2026-10-09T15:13:08.368645Z", "modified": "2026-10-09T15:13:08.368645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7920cf2def13649007ea976cd0d5f0138c64d478343f0fcbbe677b953e7bfab6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.368645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6373dbfa-6f95-4993-b8e2-9ebe44015153", "created": "2026-10-09T15:13:08.369225Z", "modified": "2026-10-09T15:13:08.369225Z", "relationship_type": "indicates", "source_ref": "indicator--e96800ab-7099-44e3-95ec-5334487b257c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59c7810-c02b-4e40-936e-5513b870114c", "created": "2026-10-09T15:13:08.369356Z", "modified": "2026-10-09T15:13:08.369356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78d24906185ece29ed39e426a6f63c624b07f736e7fc10a8a085729db5b91b50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.369356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b7f1c70-e7c7-4751-b7f4-4f1c60e1029a", "created": "2026-10-09T15:13:08.369935Z", "modified": "2026-10-09T15:13:08.369935Z", "relationship_type": "indicates", "source_ref": "indicator--f59c7810-c02b-4e40-936e-5513b870114c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628c454d-bb44-48f6-b7e1-2c6f55933375", "created": "2026-10-09T15:13:08.370054Z", "modified": "2026-10-09T15:13:08.370054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb66c9e2b06cc18ddb254ffced918da2c7e7741ecfef6bc9a13c9484fcddf67e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.370054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09fb32bd-6655-486b-9e31-3549bc5f06f0", "created": "2026-10-09T15:13:08.370759Z", "modified": "2026-10-09T15:13:08.370759Z", "relationship_type": "indicates", "source_ref": "indicator--628c454d-bb44-48f6-b7e1-2c6f55933375", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6d3035-2f99-4a17-8c82-631093f61534", "created": "2026-10-09T15:13:08.370887Z", "modified": "2026-10-09T15:13:08.370887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c504f858bcd50bbef3b35b6d9ce8fbcb16e20c7b0bf5651338b0ceca6a0cab48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.370887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d2abea4-bfc9-4eff-aa5e-244008ada564", "created": "2026-10-09T15:13:08.371486Z", "modified": "2026-10-09T15:13:08.371486Z", "relationship_type": "indicates", "source_ref": "indicator--4f6d3035-2f99-4a17-8c82-631093f61534", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d634ea6b-7358-4983-83da-9ec8c4572059", "created": "2026-10-09T15:13:08.37161Z", "modified": "2026-10-09T15:13:08.37161Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9273e9be758dbd73e8f71154c17ae3e150477069d24a71e30338e60b54d300d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.37161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--712e41d1-5958-4fa0-81c7-8896eb4e7938", "created": "2026-10-09T15:13:08.372192Z", "modified": "2026-10-09T15:13:08.372192Z", "relationship_type": "indicates", "source_ref": "indicator--d634ea6b-7358-4983-83da-9ec8c4572059", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0091cd7b-b58b-4fa6-9331-2f05d75c3175", "created": "2026-10-09T15:13:08.372323Z", "modified": "2026-10-09T15:13:08.372323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6e2e75685cfaea903f94ec0d2cfa698a545d13339689282abda6f122aa4bc6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.372323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--563f3404-1f48-4e6b-94c3-75af429aa765", "created": "2026-10-09T15:13:08.372907Z", "modified": "2026-10-09T15:13:08.372907Z", "relationship_type": "indicates", "source_ref": "indicator--0091cd7b-b58b-4fa6-9331-2f05d75c3175", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22966f46-20a2-4c91-a776-8464ae54208c", "created": "2026-10-09T15:13:08.373032Z", "modified": "2026-10-09T15:13:08.373032Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a0b6bf75020a2b10334d1e754a3e13cb4099772ab0ebdf8f358f72b13087ec1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.373032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d5d452a-12d1-467d-ad08-cdf9f8c7ffc7", "created": "2026-10-09T15:13:08.373632Z", "modified": "2026-10-09T15:13:08.373632Z", "relationship_type": "indicates", "source_ref": "indicator--22966f46-20a2-4c91-a776-8464ae54208c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a99a37-19e8-4d51-89b6-8a0c1c71272b", "created": "2026-10-09T15:13:08.373761Z", "modified": "2026-10-09T15:13:08.373761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69623b7266c5a218f40219ba8e911ed5aeeb5798fa46be7ab150794f300045b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.373761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc6bbc8f-c785-4780-bdea-977c166793e9", "created": "2026-10-09T15:13:08.374364Z", "modified": "2026-10-09T15:13:08.374364Z", "relationship_type": "indicates", "source_ref": "indicator--43a99a37-19e8-4d51-89b6-8a0c1c71272b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15c6462-6ee3-48bd-a0b5-3c78db985e8a", "created": "2026-10-09T15:13:08.374486Z", "modified": "2026-10-09T15:13:08.374486Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b45f8c019a71acb350a54cd6346910ad8805a6e9e545ae253caf14ac6ba7599']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.374486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da48812f-247c-4505-9ee3-1176de7a9583", "created": "2026-10-09T15:13:08.375065Z", "modified": "2026-10-09T15:13:08.375065Z", "relationship_type": "indicates", "source_ref": "indicator--f15c6462-6ee3-48bd-a0b5-3c78db985e8a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83a2841-710c-46d5-b330-aad6b8ca96d6", "created": "2026-10-09T15:13:08.375186Z", "modified": "2026-10-09T15:13:08.375186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1160869b249cba8894268444588bd67e9a494723432bc85d30d20c07b406748d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.375186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe304904-61a3-4636-aaf5-37998ede9d27", "created": "2026-10-09T15:13:08.375778Z", "modified": "2026-10-09T15:13:08.375778Z", "relationship_type": "indicates", "source_ref": "indicator--e83a2841-710c-46d5-b330-aad6b8ca96d6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1665a33c-9512-4ce0-ae42-1c16e5f5b251", "created": "2026-10-09T15:13:08.375899Z", "modified": "2026-10-09T15:13:08.375899Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13bf4090f924bcf7d795735a61003d4e7325bb9deb9fd9e7011e260f0683eba2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.375899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5b7db10-219f-4dbd-8766-5f09b40735ef", "created": "2026-10-09T15:13:08.376607Z", "modified": "2026-10-09T15:13:08.376607Z", "relationship_type": "indicates", "source_ref": "indicator--1665a33c-9512-4ce0-ae42-1c16e5f5b251", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a162c5-5f11-4229-9d49-af2b4e2577bc", "created": "2026-10-09T15:13:08.376737Z", "modified": "2026-10-09T15:13:08.376737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='384aa1291d7d08fe264b6abfa38bd736e53211ef45ac080edb2884e964e76505']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.376737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcecef6d-7478-4891-a9e5-92583f664d72", "created": "2026-10-09T15:13:08.377337Z", "modified": "2026-10-09T15:13:08.377337Z", "relationship_type": "indicates", "source_ref": "indicator--d9a162c5-5f11-4229-9d49-af2b4e2577bc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17f3c15-f674-4c17-ac84-d98626f29441", "created": "2026-10-09T15:13:08.377461Z", "modified": "2026-10-09T15:13:08.377461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bca22874a70fe2ee9bc5d4ad9a4dc9c4d27bd9d876de2741c2fd877406b1f6bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.377461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a97e10af-30a2-4d46-b10e-fe13ca638e98", "created": "2026-10-09T15:13:08.378046Z", "modified": "2026-10-09T15:13:08.378046Z", "relationship_type": "indicates", "source_ref": "indicator--a17f3c15-f674-4c17-ac84-d98626f29441", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e5f214-9c1c-474d-ad09-bfaf9687c1ca", "created": "2026-10-09T15:13:08.37817Z", "modified": "2026-10-09T15:13:08.37817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96dce1532a4273e8e32da5b8110b739ef1dae055be9026f0c40a6112bdc09180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.37817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d04779e7-3e01-41a6-b111-bc748d4639fb", "created": "2026-10-09T15:13:08.378772Z", "modified": "2026-10-09T15:13:08.378772Z", "relationship_type": "indicates", "source_ref": "indicator--d7e5f214-9c1c-474d-ad09-bfaf9687c1ca", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f4177f-ed45-4087-9b17-452281038947", "created": "2026-10-09T15:13:08.378896Z", "modified": "2026-10-09T15:13:08.378896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b68a872aba9473dea818d371e5fdaf188e99a03066282b9b395e4902c7a7cc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.378896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d48aa7df-1b94-4052-8b87-b4d90845fdfe", "created": "2026-10-09T15:13:08.379487Z", "modified": "2026-10-09T15:13:08.379487Z", "relationship_type": "indicates", "source_ref": "indicator--80f4177f-ed45-4087-9b17-452281038947", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64466778-9fa0-4af4-ac79-eb737e8667b3", "created": "2026-10-09T15:13:08.379608Z", "modified": "2026-10-09T15:13:08.379608Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79f3c38ba7a738fddbfc553c7161abf7a13b880cc4eb32e88320477a20fe7d70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.379608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7649f97-5c54-4098-8d39-128bbe1e3600", "created": "2026-10-09T15:13:08.380189Z", "modified": "2026-10-09T15:13:08.380189Z", "relationship_type": "indicates", "source_ref": "indicator--64466778-9fa0-4af4-ac79-eb737e8667b3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a11e67-f164-446e-8de7-8cbf05cb3b56", "created": "2026-10-09T15:13:08.380319Z", "modified": "2026-10-09T15:13:08.380319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eed13ce2d07c9d0d0b6ebf5abd6675794ca154e911b6b41926380a2007132e72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.380319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d689cbf3-4eea-46a1-8b66-c8a5c06c9b64", "created": "2026-10-09T15:13:08.380901Z", "modified": "2026-10-09T15:13:08.380901Z", "relationship_type": "indicates", "source_ref": "indicator--c6a11e67-f164-446e-8de7-8cbf05cb3b56", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21f5864-c83a-4f7c-9631-71b89eacfa32", "created": "2026-10-09T15:13:08.381022Z", "modified": "2026-10-09T15:13:08.381022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc0e80e127b69476a7af69f53a00d744f15c3f460baabf1f1a8876792fccd314']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.381022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a4a725e-4777-48b2-9847-51493eb2ef70", "created": "2026-10-09T15:13:08.38169Z", "modified": "2026-10-09T15:13:08.38169Z", "relationship_type": "indicates", "source_ref": "indicator--c21f5864-c83a-4f7c-9631-71b89eacfa32", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6199c2bf-62f0-4281-b678-ad54ec318770", "created": "2026-10-09T15:13:08.381827Z", "modified": "2026-10-09T15:13:08.381827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed9b9f5e92c80365905d342323a47a2df1e7d48545423425588f8ecaaa2dc7d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.381827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ce2fce3-c194-4bf5-812d-2363a10e37f5", "created": "2026-10-09T15:13:08.382441Z", "modified": "2026-10-09T15:13:08.382441Z", "relationship_type": "indicates", "source_ref": "indicator--6199c2bf-62f0-4281-b678-ad54ec318770", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de800d64-bcd1-474b-9d2e-f31028a38880", "created": "2026-10-09T15:13:08.382571Z", "modified": "2026-10-09T15:13:08.382571Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c323fa228e8f8be02f2b9456054858a6dd7c75b85fd0bffd75ff69903af62abc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.382571Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba169545-599f-4808-ba3f-025acd6a7193", "created": "2026-10-09T15:13:08.383261Z", "modified": "2026-10-09T15:13:08.383261Z", "relationship_type": "indicates", "source_ref": "indicator--de800d64-bcd1-474b-9d2e-f31028a38880", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bab69b8-e1d4-4631-a51f-a2b8dd31e1a4", "created": "2026-10-09T15:13:08.383404Z", "modified": "2026-10-09T15:13:08.383404Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7904cc78d5d6c1edd90309b1e2439165179489abbc28a33138be09072908a13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.383404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e7b30fb-e4d4-4878-8994-5d9a36b0d436", "created": "2026-10-09T15:13:08.383984Z", "modified": "2026-10-09T15:13:08.383984Z", "relationship_type": "indicates", "source_ref": "indicator--3bab69b8-e1d4-4631-a51f-a2b8dd31e1a4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a52c547-f515-4cd5-a0fc-6d6474289162", "created": "2026-10-09T15:13:08.384104Z", "modified": "2026-10-09T15:13:08.384104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a6ae6d7f02fdaa96063f714aaba213f43509bde486c21198258e27d13da4dad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.384104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a9e624c-6ca6-422b-b65a-b9c881e221ed", "created": "2026-10-09T15:13:08.384747Z", "modified": "2026-10-09T15:13:08.384747Z", "relationship_type": "indicates", "source_ref": "indicator--4a52c547-f515-4cd5-a0fc-6d6474289162", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688cd18b-1f50-4551-b62e-0f10341f1f9e", "created": "2026-10-09T15:13:08.384887Z", "modified": "2026-10-09T15:13:08.384887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45ec7020be983fbe3eafd5646af15b60e67fb4fc85c35925d5461bcaf0dd3487']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.384887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e8e999b-6936-4ecd-aecf-17ce28803ae4", "created": "2026-10-09T15:13:08.38549Z", "modified": "2026-10-09T15:13:08.38549Z", "relationship_type": "indicates", "source_ref": "indicator--688cd18b-1f50-4551-b62e-0f10341f1f9e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b0a963-01bf-4bcc-8df6-b9ff9e6cd5f0", "created": "2026-10-09T15:13:08.385615Z", "modified": "2026-10-09T15:13:08.385615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da4e4644fe709456f032f4877bd8574b5f5f7543cab8825421cbf0f308c97f50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.385615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ced1c543-d6e6-47ab-9c1b-175a262317be", "created": "2026-10-09T15:13:08.386196Z", "modified": "2026-10-09T15:13:08.386196Z", "relationship_type": "indicates", "source_ref": "indicator--07b0a963-01bf-4bcc-8df6-b9ff9e6cd5f0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079d7f87-9551-4027-bf27-6758e39804c4", "created": "2026-10-09T15:13:08.386328Z", "modified": "2026-10-09T15:13:08.386328Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f3e424e85a5c5a8f4cdf1cc3462dd8d042fd080a1f0f66d12b0d7e8690ab0a7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.386328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--142d3b28-2d41-4378-a330-b94518289d19", "created": "2026-10-09T15:13:08.386925Z", "modified": "2026-10-09T15:13:08.386925Z", "relationship_type": "indicates", "source_ref": "indicator--079d7f87-9551-4027-bf27-6758e39804c4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b1ffe4-0507-454f-8e6e-3ee86fe6bdbe", "created": "2026-10-09T15:13:08.387046Z", "modified": "2026-10-09T15:13:08.387046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc245f301bf373feb0b8de035a91ba1a68a8387b3f1e0e8dc6eb7700eabd5201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.387046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70f46dd5-726c-4085-91c3-e3878890ce92", "created": "2026-10-09T15:13:08.387637Z", "modified": "2026-10-09T15:13:08.387637Z", "relationship_type": "indicates", "source_ref": "indicator--a0b1ffe4-0507-454f-8e6e-3ee86fe6bdbe", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4084e68e-a0a8-4011-8f3b-a756ea9ded58", "created": "2026-10-09T15:13:08.387758Z", "modified": "2026-10-09T15:13:08.387758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01d9cb71acfa655cc910c98947bb194f2738618135868664def5c1e29594f6a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.387758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd0fd55e-7344-4e4b-8970-da45e9f32d3f", "created": "2026-10-09T15:13:08.38835Z", "modified": "2026-10-09T15:13:08.38835Z", "relationship_type": "indicates", "source_ref": "indicator--4084e68e-a0a8-4011-8f3b-a756ea9ded58", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1521aa-1cde-4c2e-a093-76867031311c", "created": "2026-10-09T15:13:08.388472Z", "modified": "2026-10-09T15:13:08.388472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae9d11c4475b5fc45c2d7267a7f3b89eec54475a45ce6a5f63b242f356f1d350']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.388472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6351510-7aad-4067-ad7b-252d90196a77", "created": "2026-10-09T15:13:08.389052Z", "modified": "2026-10-09T15:13:08.389052Z", "relationship_type": "indicates", "source_ref": "indicator--3e1521aa-1cde-4c2e-a093-76867031311c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595a0060-3da5-4bf0-b6eb-10f3ad8dc278", "created": "2026-10-09T15:13:08.389173Z", "modified": "2026-10-09T15:13:08.389173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4f339df64cbe537d7c8c126962875098e60481df16c3239f52f7c68e72cccb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.389173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--999a1d04-96bb-405f-8d9d-27b9cadaf7ef", "created": "2026-10-09T15:13:08.389882Z", "modified": "2026-10-09T15:13:08.389882Z", "relationship_type": "indicates", "source_ref": "indicator--595a0060-3da5-4bf0-b6eb-10f3ad8dc278", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954d5994-e447-4390-ae0e-6cac78280dc5", "created": "2026-10-09T15:13:08.390005Z", "modified": "2026-10-09T15:13:08.390005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8deb08872530d53c9e0083c44f721a36418027f9f7fdf9b5594a85b14219e1b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.390005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f750389-9e87-44c7-8f88-c56b0a158e3a", "created": "2026-10-09T15:13:08.390599Z", "modified": "2026-10-09T15:13:08.390599Z", "relationship_type": "indicates", "source_ref": "indicator--954d5994-e447-4390-ae0e-6cac78280dc5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be75071b-de12-41c9-85e4-32dfccb4dee7", "created": "2026-10-09T15:13:08.390724Z", "modified": "2026-10-09T15:13:08.390724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ac778fb2aa09699f9699a9ad27c60e6f8b364fe37fd538eea737ad11b357cc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.390724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c14763e-60ba-40a0-9cbc-7417484bdbe5", "created": "2026-10-09T15:13:08.391312Z", "modified": "2026-10-09T15:13:08.391312Z", "relationship_type": "indicates", "source_ref": "indicator--be75071b-de12-41c9-85e4-32dfccb4dee7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafd5ed4-a35d-4f63-a26c-9729b8aa04ef", "created": "2026-10-09T15:13:08.391438Z", "modified": "2026-10-09T15:13:08.391438Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='620525c4d845f6962177b35c8fa64349f4a4e7f97969cf48983a446ffee98fcf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.391438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f7577bb-7f2e-43cb-b503-a0725152687e", "created": "2026-10-09T15:13:08.392016Z", "modified": "2026-10-09T15:13:08.392016Z", "relationship_type": "indicates", "source_ref": "indicator--aafd5ed4-a35d-4f63-a26c-9729b8aa04ef", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915aad47-2cce-468c-9384-e2f1cec0b4af", "created": "2026-10-09T15:13:08.392138Z", "modified": "2026-10-09T15:13:08.392138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fc64d9b4477bec34136ecbfa330841304bb55ca20461e7d1e71f284c34bb4d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.392138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8f092b8-5b22-4ce9-a903-a9081307b8a8", "created": "2026-10-09T15:13:08.392735Z", "modified": "2026-10-09T15:13:08.392735Z", "relationship_type": "indicates", "source_ref": "indicator--915aad47-2cce-468c-9384-e2f1cec0b4af", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24079bc-5828-4c65-a892-e08def3cbed8", "created": "2026-10-09T15:13:08.392858Z", "modified": "2026-10-09T15:13:08.392858Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f7499cfb98f4275fd88d3734602988742ff08be674ec60e79457c443b075f92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.392858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ab9213a-b753-4c1e-92dc-2ecf34cae03b", "created": "2026-10-09T15:13:08.393448Z", "modified": "2026-10-09T15:13:08.393448Z", "relationship_type": "indicates", "source_ref": "indicator--d24079bc-5828-4c65-a892-e08def3cbed8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32b1383-cdd2-4b6e-a9d1-fcddc10c43ac", "created": "2026-10-09T15:13:08.393573Z", "modified": "2026-10-09T15:13:08.393573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a71b8cf1f70f1433e09ce34058ffdd9b6d21b5565d6e31bb1c64905e33af9a99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.393573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49bf7614-08e4-4205-8be3-20529339197c", "created": "2026-10-09T15:13:08.394151Z", "modified": "2026-10-09T15:13:08.394151Z", "relationship_type": "indicates", "source_ref": "indicator--c32b1383-cdd2-4b6e-a9d1-fcddc10c43ac", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f552c0-32e8-477e-a8ad-d8c1f5cac168", "created": "2026-10-09T15:13:08.394284Z", "modified": "2026-10-09T15:13:08.394284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='093540e1fa3651b4caebcc13c64b979f2f75d893701294ce8041fdfe5d853afe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.394284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d74cf55f-1655-4492-93ab-1bd80e156a67", "created": "2026-10-09T15:13:08.39489Z", "modified": "2026-10-09T15:13:08.39489Z", "relationship_type": "indicates", "source_ref": "indicator--82f552c0-32e8-477e-a8ad-d8c1f5cac168", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ea38eb-a6cb-46d2-b1fe-f82b627b6757", "created": "2026-10-09T15:13:08.395014Z", "modified": "2026-10-09T15:13:08.395014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cf403bcb58208bae0caa437ee7775579e1ba3c1859b63ee9f7bbcb72edbc677']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.395014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--375a0b10-ef5b-4300-b438-e3265eeffd16", "created": "2026-10-09T15:13:08.395703Z", "modified": "2026-10-09T15:13:08.395703Z", "relationship_type": "indicates", "source_ref": "indicator--f9ea38eb-a6cb-46d2-b1fe-f82b627b6757", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cffc25-8016-482d-9b45-edae1c6a6217", "created": "2026-10-09T15:13:08.395832Z", "modified": "2026-10-09T15:13:08.395832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ede3f0c48d113e727baa5cde35b2a9ab93e98eebbc60b91e086e23c03c87c8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.395832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1adc2aa-8bbb-4d9a-abb8-9e8692b440d3", "created": "2026-10-09T15:13:08.396441Z", "modified": "2026-10-09T15:13:08.396441Z", "relationship_type": "indicates", "source_ref": "indicator--49cffc25-8016-482d-9b45-edae1c6a6217", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeefefa-5391-4b3d-9bf7-9d7430213a81", "created": "2026-10-09T15:13:08.396567Z", "modified": "2026-10-09T15:13:08.396567Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62b59e1c1c2bcdbd2e6538b37cb55c42c7573885008aacc97ecc9745e93c3c9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.396567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--730c1605-740d-4382-946f-5abdcda67a3f", "created": "2026-10-09T15:13:08.397152Z", "modified": "2026-10-09T15:13:08.397152Z", "relationship_type": "indicates", "source_ref": "indicator--eaeefefa-5391-4b3d-9bf7-9d7430213a81", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dd882d-ab9c-46f8-bb84-f03a044dd2a5", "created": "2026-10-09T15:13:08.397284Z", "modified": "2026-10-09T15:13:08.397284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac75e69ce4cf35ca8dc492f25ff3bad6fd9ce1a46412dbf5a559f9234003fbcb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.397284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1300d6ef-df8f-489b-a896-cf5d87099d52", "created": "2026-10-09T15:13:08.397868Z", "modified": "2026-10-09T15:13:08.397868Z", "relationship_type": "indicates", "source_ref": "indicator--26dd882d-ab9c-46f8-bb84-f03a044dd2a5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cb0077-e676-4100-a2db-9697b34c7def", "created": "2026-10-09T15:13:08.397987Z", "modified": "2026-10-09T15:13:08.397987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85177661ae43545b73a2a0050eedf095e17e786dcbd7cbbb1905412ed8edbbdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.397987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42763c57-77b8-4b72-84e4-465b4bb4b34c", "created": "2026-10-09T15:13:08.398574Z", "modified": "2026-10-09T15:13:08.398574Z", "relationship_type": "indicates", "source_ref": "indicator--10cb0077-e676-4100-a2db-9697b34c7def", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec19f06-e953-4d6a-ac40-d24ba4a38134", "created": "2026-10-09T15:13:08.398695Z", "modified": "2026-10-09T15:13:08.398695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83b2e6535589cd70d74fc4c657ec51da5bcdef90160cd449c0d6be9cce5d439c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.398695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e80f38f-dc28-4d34-b494-71c62967c9ea", "created": "2026-10-09T15:13:08.399281Z", "modified": "2026-10-09T15:13:08.399281Z", "relationship_type": "indicates", "source_ref": "indicator--dec19f06-e953-4d6a-ac40-d24ba4a38134", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2609140-3c20-4a50-9799-a35369ea9a10", "created": "2026-10-09T15:13:08.399402Z", "modified": "2026-10-09T15:13:08.399402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f897da07b17368e3c1732ee5b2e27769072e328ad72b7de7db77ec2bd04fa711']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.399402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c93cf506-c603-40ea-8e62-49e630e5f70e", "created": "2026-10-09T15:13:08.399976Z", "modified": "2026-10-09T15:13:08.399976Z", "relationship_type": "indicates", "source_ref": "indicator--c2609140-3c20-4a50-9799-a35369ea9a10", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94a8e3e-eff6-4346-a48d-c5f862ae5b96", "created": "2026-10-09T15:13:08.400095Z", "modified": "2026-10-09T15:13:08.400095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='380573652889e1a4fb2ddce0fcfd2955908c38881fd21b36f065f20af25963cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.400095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af997987-4810-4e0c-b514-f41d16993473", "created": "2026-10-09T15:13:08.400685Z", "modified": "2026-10-09T15:13:08.400685Z", "relationship_type": "indicates", "source_ref": "indicator--b94a8e3e-eff6-4346-a48d-c5f862ae5b96", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f299c6-1eed-4910-9049-152115d58f33", "created": "2026-10-09T15:13:08.400809Z", "modified": "2026-10-09T15:13:08.400809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8ac9a8b8a656baaaff1098fed39053044ddb16e6ad8c728c4b73b228544eda5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.400809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df0fcfa7-549c-421b-8b8b-6955a16aa1f1", "created": "2026-10-09T15:13:08.401412Z", "modified": "2026-10-09T15:13:08.401412Z", "relationship_type": "indicates", "source_ref": "indicator--00f299c6-1eed-4910-9049-152115d58f33", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e39077a-f0df-4aa3-a311-7bf8236fcd29", "created": "2026-10-09T15:13:08.401541Z", "modified": "2026-10-09T15:13:08.401541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf1046207cb039bef91f8a2db3986cc02a21197e7d72fd48e017103676affd0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.401541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d14548e-212c-4191-8bf6-3a1ca54302bb", "created": "2026-10-09T15:13:08.402229Z", "modified": "2026-10-09T15:13:08.402229Z", "relationship_type": "indicates", "source_ref": "indicator--5e39077a-f0df-4aa3-a311-7bf8236fcd29", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42f4c88-1b7b-4d3d-bbb7-91aa32b699c0", "created": "2026-10-09T15:13:08.402362Z", "modified": "2026-10-09T15:13:08.402362Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e061d10fe7767f44210c8d26f49a5d26f15d366f026db762277ca11430c904f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.402362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eee0237d-6633-414e-b673-df61647240f2", "created": "2026-10-09T15:13:08.402946Z", "modified": "2026-10-09T15:13:08.402946Z", "relationship_type": "indicates", "source_ref": "indicator--b42f4c88-1b7b-4d3d-bbb7-91aa32b699c0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1180ee-187b-44c2-a929-940dc0241983", "created": "2026-10-09T15:13:08.403069Z", "modified": "2026-10-09T15:13:08.403069Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='116c9888333e210d4573df71943b58d066e25bea1af906458d6e84eb97705288']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.403069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--050b2036-3460-451d-a052-f2bdf0866ebc", "created": "2026-10-09T15:13:08.403671Z", "modified": "2026-10-09T15:13:08.403671Z", "relationship_type": "indicates", "source_ref": "indicator--2b1180ee-187b-44c2-a929-940dc0241983", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d2733f-f36d-4c84-ac36-f49cc98001be", "created": "2026-10-09T15:13:08.4038Z", "modified": "2026-10-09T15:13:08.4038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e06e339f8208f61f43750251aa7ee5060d01e71f07123feb8323ce17b6c71b8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.4038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79d23a8d-4fb3-4ad1-99b5-88e259fe540f", "created": "2026-10-09T15:13:08.404393Z", "modified": "2026-10-09T15:13:08.404393Z", "relationship_type": "indicates", "source_ref": "indicator--33d2733f-f36d-4c84-ac36-f49cc98001be", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7d5569-1a40-40c9-9860-cac48d011ac6", "created": "2026-10-09T15:13:08.404513Z", "modified": "2026-10-09T15:13:08.404513Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9cdadad8acadc7ab03969192021345dbd1c61cfe4797d31f0ae67d391bdb172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.404513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2afeddba-11df-4994-8727-49c63d5ce9e9", "created": "2026-10-09T15:13:08.405097Z", "modified": "2026-10-09T15:13:08.405097Z", "relationship_type": "indicates", "source_ref": "indicator--6d7d5569-1a40-40c9-9860-cac48d011ac6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c16d566-0b19-4654-856a-de5f399cdc81", "created": "2026-10-09T15:13:08.405219Z", "modified": "2026-10-09T15:13:08.405219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c7cdb477a71b92243a2fbaff03b85eaaf0003d2b4ce93ebc4dd4a074e11fcf8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.405219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93dd81ce-b144-422a-8f69-9b121cfb40f7", "created": "2026-10-09T15:13:08.405811Z", "modified": "2026-10-09T15:13:08.405811Z", "relationship_type": "indicates", "source_ref": "indicator--4c16d566-0b19-4654-856a-de5f399cdc81", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8699887b-7ef3-4fb5-82bd-154647cecf94", "created": "2026-10-09T15:13:08.405932Z", "modified": "2026-10-09T15:13:08.405932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf74c0b98403e3adf2f1f7b8217dfd9bf4ded4e94d5cdb91fe2bad7f794db414']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.405932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a47f2f2-3df4-4d00-bcd3-bf57528125ec", "created": "2026-10-09T15:13:08.406529Z", "modified": "2026-10-09T15:13:08.406529Z", "relationship_type": "indicates", "source_ref": "indicator--8699887b-7ef3-4fb5-82bd-154647cecf94", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d276fa74-6ff0-411d-86fb-12d07a554f87", "created": "2026-10-09T15:13:08.406653Z", "modified": "2026-10-09T15:13:08.406653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='080212c48e19adcae83838afbd6e8b39a68674562473629d376757299a69bac2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.406653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c96a01bc-784c-40cf-b1b0-dca8ee38d12d", "created": "2026-10-09T15:13:08.407234Z", "modified": "2026-10-09T15:13:08.407234Z", "relationship_type": "indicates", "source_ref": "indicator--d276fa74-6ff0-411d-86fb-12d07a554f87", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5627be-644f-4e2a-9622-18f4d4f4105f", "created": "2026-10-09T15:13:08.407366Z", "modified": "2026-10-09T15:13:08.407366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b6f6b332f06922acdff5fa68b9b0a86fe659a6b8e38e5427b90ff4bce516322']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.407366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5bbfa62-29dc-4460-92bf-b0067adf1907", "created": "2026-10-09T15:13:08.40795Z", "modified": "2026-10-09T15:13:08.40795Z", "relationship_type": "indicates", "source_ref": "indicator--4c5627be-644f-4e2a-9622-18f4d4f4105f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fc67e7-726a-4f00-a13f-4c72fe4c3998", "created": "2026-10-09T15:13:08.408074Z", "modified": "2026-10-09T15:13:08.408074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a7d82a0cfe4b34d1ba283747329a5e8d9e2040edb933740f3e02c5c82aaf8f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.408074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c8235df-5bbc-4119-b835-6e749c7cf03f", "created": "2026-10-09T15:13:08.409127Z", "modified": "2026-10-09T15:13:08.409127Z", "relationship_type": "indicates", "source_ref": "indicator--f6fc67e7-726a-4f00-a13f-4c72fe4c3998", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc1f1aa-998a-4edd-a465-b420139972e1", "created": "2026-10-09T15:13:08.409256Z", "modified": "2026-10-09T15:13:08.409256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ac709aa1616c2dfb604e2d14a2063e054356130ae04fe58ade6217c23e41a03']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.409256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e198b5a1-3a2f-4281-b010-a851a0a25920", "created": "2026-10-09T15:13:08.409849Z", "modified": "2026-10-09T15:13:08.409849Z", "relationship_type": "indicates", "source_ref": "indicator--1bc1f1aa-998a-4edd-a465-b420139972e1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78faf8b-19ef-4159-a8fc-da3b273370fa", "created": "2026-10-09T15:13:08.409984Z", "modified": "2026-10-09T15:13:08.409984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='68def8d1aed44c7003b547fe26f1e87602bdc033f25cd6a98ce05e2f14218c13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.409984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c02d6ab7-5087-4309-a015-4355c3ec5a4f", "created": "2026-10-09T15:13:08.410578Z", "modified": "2026-10-09T15:13:08.410578Z", "relationship_type": "indicates", "source_ref": "indicator--a78faf8b-19ef-4159-a8fc-da3b273370fa", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e1eb6c-6ad3-4743-9408-fb51bfb78d62", "created": "2026-10-09T15:13:08.410706Z", "modified": "2026-10-09T15:13:08.410706Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='450af8d01fcdafe7f6ce3dba227f96fb3e011fb13e66c3594db636e1a4a53562']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.410706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d9ca36b-edf6-4c0d-b2b4-2af9207b3e54", "created": "2026-10-09T15:13:08.411302Z", "modified": "2026-10-09T15:13:08.411302Z", "relationship_type": "indicates", "source_ref": "indicator--c2e1eb6c-6ad3-4743-9408-fb51bfb78d62", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de9cc05-8002-4237-b8e6-4ff2bbfdf232", "created": "2026-10-09T15:13:08.411427Z", "modified": "2026-10-09T15:13:08.411427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3218f9b8c8324539526a7a3dc17a104ef3f61896513980aad6d760151d98b788']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.411427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3565dcc5-597f-4d1f-8b39-afe612a587b6", "created": "2026-10-09T15:13:08.412015Z", "modified": "2026-10-09T15:13:08.412015Z", "relationship_type": "indicates", "source_ref": "indicator--3de9cc05-8002-4237-b8e6-4ff2bbfdf232", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d80655-27b1-4744-9bde-f47905bb3047", "created": "2026-10-09T15:13:08.412137Z", "modified": "2026-10-09T15:13:08.412137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ac2c39753fcf0ac39e90920c92f29e32d8c0cfdfeb8e0d6d7adf9bfb7581bdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.412137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2cca8da-c2b0-4e5a-bf51-e9899634ae0d", "created": "2026-10-09T15:13:08.412727Z", "modified": "2026-10-09T15:13:08.412727Z", "relationship_type": "indicates", "source_ref": "indicator--b3d80655-27b1-4744-9bde-f47905bb3047", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d10edb-ba02-44ed-b253-17ef9576eca8", "created": "2026-10-09T15:13:08.412851Z", "modified": "2026-10-09T15:13:08.412851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bff570907b50e674c2e8a23f18b2dc20d0424a8d6b210027e84dc82655a527c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.412851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea801831-231a-47fa-b87b-62af49f9cfa3", "created": "2026-10-09T15:13:08.413447Z", "modified": "2026-10-09T15:13:08.413447Z", "relationship_type": "indicates", "source_ref": "indicator--b5d10edb-ba02-44ed-b253-17ef9576eca8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fbd19d-89b6-47c7-9f25-73274582dba8", "created": "2026-10-09T15:13:08.41357Z", "modified": "2026-10-09T15:13:08.41357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d136acb4b792d0043ef2588d25b8ef9239accf8a386ec4be7b38e76a518e459c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.41357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5109ac3f-b706-431d-99c5-67e294e8453a", "created": "2026-10-09T15:13:08.414141Z", "modified": "2026-10-09T15:13:08.414141Z", "relationship_type": "indicates", "source_ref": "indicator--68fbd19d-89b6-47c7-9f25-73274582dba8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09efd8b6-b7a7-4732-98d1-d1d2eaa84321", "created": "2026-10-09T15:13:08.414258Z", "modified": "2026-10-09T15:13:08.414258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ad5e67bb397e3ae0db83417eddf371e20ff515cd3aa4dab30dd231e10175e38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.414258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60abe600-6c69-4b8f-8957-bd0e75bac19c", "created": "2026-10-09T15:13:08.414967Z", "modified": "2026-10-09T15:13:08.414967Z", "relationship_type": "indicates", "source_ref": "indicator--09efd8b6-b7a7-4732-98d1-d1d2eaa84321", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d08178-208b-4848-a154-8a21dc18ea90", "created": "2026-10-09T15:13:08.415094Z", "modified": "2026-10-09T15:13:08.415094Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c6b33d9c91ac6e6f3dc91254f33cb6dbed1356f5e477c5f0a69c5e43c168ca0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.415094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24d8d26f-96be-47a9-aec3-e8d734c37404", "created": "2026-10-09T15:13:08.415703Z", "modified": "2026-10-09T15:13:08.415703Z", "relationship_type": "indicates", "source_ref": "indicator--b2d08178-208b-4848-a154-8a21dc18ea90", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86431f70-cac5-4e1a-ae30-febe6e16be61", "created": "2026-10-09T15:13:08.415829Z", "modified": "2026-10-09T15:13:08.415829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c4f8e95e1cc7a8f111ecd8efa767c2a932726cf23188429b44e8be83049b660b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.415829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ecf19fa-f4b4-4fc2-a57a-ccadefe1aa22", "created": "2026-10-09T15:13:08.416423Z", "modified": "2026-10-09T15:13:08.416423Z", "relationship_type": "indicates", "source_ref": "indicator--86431f70-cac5-4e1a-ae30-febe6e16be61", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feee0a52-0d8a-4f1e-bda8-48880214579d", "created": "2026-10-09T15:13:08.416552Z", "modified": "2026-10-09T15:13:08.416552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccfacdc42832302cc44cfa2cca12a9e0580fafc61b94f8f71d1722b91e4f390c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.416552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8619b00-82c0-463e-ba65-0d4a57e92eee", "created": "2026-10-09T15:13:08.417142Z", "modified": "2026-10-09T15:13:08.417142Z", "relationship_type": "indicates", "source_ref": "indicator--feee0a52-0d8a-4f1e-bda8-48880214579d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be35f32e-925a-4c79-9710-297f7a71b4c1", "created": "2026-10-09T15:13:08.417261Z", "modified": "2026-10-09T15:13:08.417261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffef95c056a19e07ae8f8c968f2ecc43df3ca1ad79ba160c945e8e879431a672']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.417261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89d8a2a3-bdb1-4b10-893a-54e670007941", "created": "2026-10-09T15:13:08.417855Z", "modified": "2026-10-09T15:13:08.417855Z", "relationship_type": "indicates", "source_ref": "indicator--be35f32e-925a-4c79-9710-297f7a71b4c1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c9eb72-cb3f-4c5e-b483-9108c3509ce3", "created": "2026-10-09T15:13:08.417974Z", "modified": "2026-10-09T15:13:08.417974Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1df4a79502a01a9850afd3d851d6753f478afdd219ee974bde7a30c12d85ac64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.417974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1720df9-89dc-404b-8bf5-c4771ea671b0", "created": "2026-10-09T15:13:08.418561Z", "modified": "2026-10-09T15:13:08.418561Z", "relationship_type": "indicates", "source_ref": "indicator--77c9eb72-cb3f-4c5e-b483-9108c3509ce3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27004d4-9743-48c9-9578-19016d4c6bff", "created": "2026-10-09T15:13:08.418684Z", "modified": "2026-10-09T15:13:08.418684Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a11d5f4fed5190d88513d4eb5354f2fe3f865530cec49e2c393f1eb8683983c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.418684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee21b28-2c79-4ea6-820f-ea823b3011a5", "created": "2026-10-09T15:13:08.419275Z", "modified": "2026-10-09T15:13:08.419275Z", "relationship_type": "indicates", "source_ref": "indicator--d27004d4-9743-48c9-9578-19016d4c6bff", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffda35a8-ec73-4877-a421-5788ad40b548", "created": "2026-10-09T15:13:08.419398Z", "modified": "2026-10-09T15:13:08.419398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb23a59a6dfa9f4697d518f407521f081f482142787992f6c3cd149665bbff3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.419398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b87354-b9fc-43e8-91b1-17d534da01b7", "created": "2026-10-09T15:13:08.419975Z", "modified": "2026-10-09T15:13:08.419975Z", "relationship_type": "indicates", "source_ref": "indicator--ffda35a8-ec73-4877-a421-5788ad40b548", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61a12f3-0edd-421c-ac0c-707b0fa9a814", "created": "2026-10-09T15:13:08.420096Z", "modified": "2026-10-09T15:13:08.420096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c1a21a7de0a68158b9c1933b3910d53bf0ef7fe7fc35538f769016d22d00062']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.420096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4810ab5-87a9-4ef5-8f99-3e1c5c69bbc7", "created": "2026-10-09T15:13:08.420694Z", "modified": "2026-10-09T15:13:08.420694Z", "relationship_type": "indicates", "source_ref": "indicator--e61a12f3-0edd-421c-ac0c-707b0fa9a814", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021364ce-4beb-486e-9089-d62a9da00282", "created": "2026-10-09T15:13:08.420818Z", "modified": "2026-10-09T15:13:08.420818Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ef88e0bbee52352cf95c33c18f7a945ca13e6a61ac72c517e60b0898833fda1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.420818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--573dbcd7-f219-44a5-a664-95936ce78294", "created": "2026-10-09T15:13:08.421525Z", "modified": "2026-10-09T15:13:08.421525Z", "relationship_type": "indicates", "source_ref": "indicator--021364ce-4beb-486e-9089-d62a9da00282", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbd1a88-dbed-416c-b476-e3096ae35022", "created": "2026-10-09T15:13:08.421652Z", "modified": "2026-10-09T15:13:08.421652Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b115d7b29c53bd196c786cf84d56e346e0436c825d9daef8023c25b53c3eca3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.421652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--815c64c1-f8c6-4350-b01b-6b5a65f6cd39", "created": "2026-10-09T15:13:08.422253Z", "modified": "2026-10-09T15:13:08.422253Z", "relationship_type": "indicates", "source_ref": "indicator--3cbd1a88-dbed-416c-b476-e3096ae35022", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92ade0d-60a3-4b6e-b251-41c44bd42aac", "created": "2026-10-09T15:13:08.422393Z", "modified": "2026-10-09T15:13:08.422393Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd20dae44d2ce870b03847702365bc7252e99695d9bcd9ebba3731e777ecaad7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.422393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62162ff2-7582-4fa3-9da7-a0cb905181b6", "created": "2026-10-09T15:13:08.422981Z", "modified": "2026-10-09T15:13:08.422981Z", "relationship_type": "indicates", "source_ref": "indicator--c92ade0d-60a3-4b6e-b251-41c44bd42aac", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7540bb17-baf8-433f-a660-af0a1f365503", "created": "2026-10-09T15:13:08.423103Z", "modified": "2026-10-09T15:13:08.423103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c528a0ff3c23402f2e9e0e63c70019d4b5c6e62d0c6b65a36d651d4bf6446474']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.423103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f16719c-862a-4471-93c4-868ad11aa30a", "created": "2026-10-09T15:13:08.423692Z", "modified": "2026-10-09T15:13:08.423692Z", "relationship_type": "indicates", "source_ref": "indicator--7540bb17-baf8-433f-a660-af0a1f365503", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f27d9c6-1628-42ba-9a8b-1e2974386f29", "created": "2026-10-09T15:13:08.423813Z", "modified": "2026-10-09T15:13:08.423813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d53d1bd9ef8cd4cb96e0c7d3067c9dfc51a22fd69c6336a155d8c27e63082150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.423813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31f70d5c-ced0-478a-8a8e-9d4af08aae4f", "created": "2026-10-09T15:13:08.424399Z", "modified": "2026-10-09T15:13:08.424399Z", "relationship_type": "indicates", "source_ref": "indicator--9f27d9c6-1628-42ba-9a8b-1e2974386f29", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac182cda-425c-4803-abde-6a3ee2b2a7fa", "created": "2026-10-09T15:13:08.42452Z", "modified": "2026-10-09T15:13:08.42452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09048b754ac13cd52b168ef8646762a351cd85e363f32935c5ab00dc27665819']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.42452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--979b8fd4-2c02-4edc-b106-51ceac917724", "created": "2026-10-09T15:13:08.425096Z", "modified": "2026-10-09T15:13:08.425096Z", "relationship_type": "indicates", "source_ref": "indicator--ac182cda-425c-4803-abde-6a3ee2b2a7fa", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c47f5ab-dbfe-4ec9-b015-530d37bc1ad2", "created": "2026-10-09T15:13:08.425214Z", "modified": "2026-10-09T15:13:08.425214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c214f3c137d3084baea868a788f4c8fe1e2d86d39675a99a3afd3eb4623b0e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.425214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f2909e3-6be5-4237-90cb-c3a6ecbeb03b", "created": "2026-10-09T15:13:08.425803Z", "modified": "2026-10-09T15:13:08.425803Z", "relationship_type": "indicates", "source_ref": "indicator--9c47f5ab-dbfe-4ec9-b015-530d37bc1ad2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c447943-b9db-4d24-9b0a-653ba173b836", "created": "2026-10-09T15:13:08.425919Z", "modified": "2026-10-09T15:13:08.425919Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ba0ccce0415ae30d28ac758d41cb2ff64326c0ca9b1d3bb0b13dafeb4ae5d82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.425919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a9636cc-39db-4a9f-abe8-fd7eb6c04523", "created": "2026-10-09T15:13:08.426513Z", "modified": "2026-10-09T15:13:08.426513Z", "relationship_type": "indicates", "source_ref": "indicator--1c447943-b9db-4d24-9b0a-653ba173b836", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e079ac-1923-47c4-9aa3-f11601ca3a6f", "created": "2026-10-09T15:13:08.426637Z", "modified": "2026-10-09T15:13:08.426637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28e69ca9b92cda079828560d5b6094343dfbfb60556f7372b96ce339ac3cda71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.426637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a94b7ffd-cdb8-4edd-bdd4-5c8fe2db4d3b", "created": "2026-10-09T15:13:08.427214Z", "modified": "2026-10-09T15:13:08.427214Z", "relationship_type": "indicates", "source_ref": "indicator--32e079ac-1923-47c4-9aa3-f11601ca3a6f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b9737b-bdde-4197-a928-5b73125a8d4d", "created": "2026-10-09T15:13:08.427343Z", "modified": "2026-10-09T15:13:08.427343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8558418fef61447aea6aa68fa917dec5813dac051ca882f8b68423dff4e2bc42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.427343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--786f1e9b-a798-4485-b356-9ffa69e8fad8", "created": "2026-10-09T15:13:08.428033Z", "modified": "2026-10-09T15:13:08.428033Z", "relationship_type": "indicates", "source_ref": "indicator--76b9737b-bdde-4197-a928-5b73125a8d4d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c8fce5-664a-471d-94c3-3b6d45f407bb", "created": "2026-10-09T15:13:08.428161Z", "modified": "2026-10-09T15:13:08.428161Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f591c97987f482c199c4331d83b4e9793f972794b9f15d7a34d482ddbe1172a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.428161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60c1cc96-292e-4ea1-9112-1e76f85edde1", "created": "2026-10-09T15:13:08.428759Z", "modified": "2026-10-09T15:13:08.428759Z", "relationship_type": "indicates", "source_ref": "indicator--27c8fce5-664a-471d-94c3-3b6d45f407bb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b6ffc0-6b10-4338-8d98-c90cfeb7a93f", "created": "2026-10-09T15:13:08.428884Z", "modified": "2026-10-09T15:13:08.428884Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29f2e9b3331a31299ed9d06d45a579d5366e0227cfb0f1e053f61f7e590ae335']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.428884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b6d2db2-05d9-4fec-8954-55dd12541c75", "created": "2026-10-09T15:13:08.429477Z", "modified": "2026-10-09T15:13:08.429477Z", "relationship_type": "indicates", "source_ref": "indicator--c8b6ffc0-6b10-4338-8d98-c90cfeb7a93f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6618c5-bbb4-4c77-abe6-22b113204e9d", "created": "2026-10-09T15:13:08.429601Z", "modified": "2026-10-09T15:13:08.429601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f06ff5b7d0c17cb0ce7f5428d6cf5d170f0bb08cbbdf31413e12aaf1f8d4ea6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.429601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--376d990c-3cc4-455c-aeb9-19c37d792346", "created": "2026-10-09T15:13:08.430178Z", "modified": "2026-10-09T15:13:08.430178Z", "relationship_type": "indicates", "source_ref": "indicator--7c6618c5-bbb4-4c77-abe6-22b113204e9d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a846ad9-1a92-4f9c-90ca-3a65ea8bad32", "created": "2026-10-09T15:13:08.430311Z", "modified": "2026-10-09T15:13:08.430311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fefbf54d11ba3aa741273712ba9117fc84164d05be124307f0042c9528e100a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.430311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db6bb0ae-bdca-4be4-9a08-9eafb94d001d", "created": "2026-10-09T15:13:08.430891Z", "modified": "2026-10-09T15:13:08.430891Z", "relationship_type": "indicates", "source_ref": "indicator--7a846ad9-1a92-4f9c-90ca-3a65ea8bad32", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a310a7dc-46c3-455f-912d-d70c3f48a5ed", "created": "2026-10-09T15:13:08.431009Z", "modified": "2026-10-09T15:13:08.431009Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d9aef770817ba359d60e8d73f95bea257c184f8d5e380161afda02304db25dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.431009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c351a3a-5458-4043-9c3c-92ea2fcc07b5", "created": "2026-10-09T15:13:08.431606Z", "modified": "2026-10-09T15:13:08.431606Z", "relationship_type": "indicates", "source_ref": "indicator--a310a7dc-46c3-455f-912d-d70c3f48a5ed", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6a1402-4b80-43f6-bc9c-fedbdf2e1068", "created": "2026-10-09T15:13:08.431735Z", "modified": "2026-10-09T15:13:08.431735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='452a7c12bf550daae38c836b769dc252778b3bb9a1a66bc46a9af2bfed910b24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.431735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0a958bd-68ec-4f33-b8f6-f86aa12b9fb9", "created": "2026-10-09T15:13:08.432322Z", "modified": "2026-10-09T15:13:08.432322Z", "relationship_type": "indicates", "source_ref": "indicator--4a6a1402-4b80-43f6-bc9c-fedbdf2e1068", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd093a9-f4a4-4bfe-aaaa-e704e3fe8e8c", "created": "2026-10-09T15:13:08.432442Z", "modified": "2026-10-09T15:13:08.432442Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='824f8bc12ce6f4c316bacfb419f12fbd7f4d56325e801ab238132e9e014d5dd6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.432442Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7afc6e4f-8178-42d2-b293-37d24387a919", "created": "2026-10-09T15:13:08.433011Z", "modified": "2026-10-09T15:13:08.433011Z", "relationship_type": "indicates", "source_ref": "indicator--8bd093a9-f4a4-4bfe-aaaa-e704e3fe8e8c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e529268-72f9-4c89-a666-aa2e9a13dce1", "created": "2026-10-09T15:13:08.433129Z", "modified": "2026-10-09T15:13:08.433129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='243e394bac6c022961ba371096e35a52f2403fcdc20af6c7e4d7d7f88343f0b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.433129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de5713e5-fe48-440f-b5d9-aef9eeab771e", "created": "2026-10-09T15:13:08.433716Z", "modified": "2026-10-09T15:13:08.433716Z", "relationship_type": "indicates", "source_ref": "indicator--5e529268-72f9-4c89-a666-aa2e9a13dce1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf862a1-943b-4f21-bb4d-b48dfdd95347", "created": "2026-10-09T15:13:08.433839Z", "modified": "2026-10-09T15:13:08.433839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71de91b97fbb475d0a22e44bd2ccd3833f26c5690e1ca5c5cd41c512ba237f01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.433839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0adfa0f1-dd0c-4927-906f-3960f937f984", "created": "2026-10-09T15:13:08.434539Z", "modified": "2026-10-09T15:13:08.434539Z", "relationship_type": "indicates", "source_ref": "indicator--bbf862a1-943b-4f21-bb4d-b48dfdd95347", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c17dd-0314-4bf9-bf94-9b05a43b8c5f", "created": "2026-10-09T15:13:08.434662Z", "modified": "2026-10-09T15:13:08.434662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c86160ee6203c8c54e535381404489b626ed96513526b7a414466eabeeb59f26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.434662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--627ba52d-467e-46a2-9002-ca030159dd23", "created": "2026-10-09T15:13:08.435242Z", "modified": "2026-10-09T15:13:08.435242Z", "relationship_type": "indicates", "source_ref": "indicator--c78c17dd-0314-4bf9-bf94-9b05a43b8c5f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06551588-8f70-4094-879f-77a4a0b6d957", "created": "2026-10-09T15:13:08.435376Z", "modified": "2026-10-09T15:13:08.435376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bb077a37f8e2e1c042a602d15c6368bbb63572fbd55b5f9af86f2714587f9d3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.435376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cc695d8-4ae7-4280-82ac-affb05fd5e4d", "created": "2026-10-09T15:13:08.435963Z", "modified": "2026-10-09T15:13:08.435963Z", "relationship_type": "indicates", "source_ref": "indicator--06551588-8f70-4094-879f-77a4a0b6d957", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b685418-9df3-4e10-8ac3-4579acfa3f90", "created": "2026-10-09T15:13:08.436086Z", "modified": "2026-10-09T15:13:08.436086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91a0ad6be78ecc663f73d7cba7c3235aea32fba8a376412bda88e37f6b468c27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.436086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1142f72e-9c09-43ba-9e3e-4998958025d1", "created": "2026-10-09T15:13:08.436683Z", "modified": "2026-10-09T15:13:08.436683Z", "relationship_type": "indicates", "source_ref": "indicator--3b685418-9df3-4e10-8ac3-4579acfa3f90", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbc072d-632e-460c-b4a3-2a26878d4c1f", "created": "2026-10-09T15:13:08.436806Z", "modified": "2026-10-09T15:13:08.436806Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39283b786c20fdab98188039031cc732615aeb71be06f3530f2f219b1d393ac3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.436806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24888df8-72ce-4654-88bd-5283123b7188", "created": "2026-10-09T15:13:08.437389Z", "modified": "2026-10-09T15:13:08.437389Z", "relationship_type": "indicates", "source_ref": "indicator--0dbc072d-632e-460c-b4a3-2a26878d4c1f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774bb9fe-170a-4890-9957-2f3d3d257439", "created": "2026-10-09T15:13:08.437518Z", "modified": "2026-10-09T15:13:08.437518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fefc35ce29a326420873597eae3662904649f5db16f09901048eade4d06110b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.437518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b3fd577-f751-4aaa-bee4-1350b666ff60", "created": "2026-10-09T15:13:08.438093Z", "modified": "2026-10-09T15:13:08.438093Z", "relationship_type": "indicates", "source_ref": "indicator--774bb9fe-170a-4890-9957-2f3d3d257439", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80da81da-64cb-4fe3-966e-65995175b93c", "created": "2026-10-09T15:13:08.438212Z", "modified": "2026-10-09T15:13:08.438212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d29120c16a06839083c71eddb479836740e3eb57b7cce675acdd363c16309c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.438212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb75f754-5503-453a-baee-22214d6fd292", "created": "2026-10-09T15:13:08.438801Z", "modified": "2026-10-09T15:13:08.438801Z", "relationship_type": "indicates", "source_ref": "indicator--80da81da-64cb-4fe3-966e-65995175b93c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7594e2ee-3ce5-4009-8b03-61b377acfd3b", "created": "2026-10-09T15:13:08.438921Z", "modified": "2026-10-09T15:13:08.438921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b43fbfc590bc460eeb03c31333e0a27325379126330eb1e655de73d40018811']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.438921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--038c5c0b-5d53-4d12-a0ed-b404a586265f", "created": "2026-10-09T15:13:08.439511Z", "modified": "2026-10-09T15:13:08.439511Z", "relationship_type": "indicates", "source_ref": "indicator--7594e2ee-3ce5-4009-8b03-61b377acfd3b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386d2ed9-16fd-4dfe-857b-f7fc53fc9adf", "created": "2026-10-09T15:13:08.439635Z", "modified": "2026-10-09T15:13:08.439635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02633b4fbe095f324372179fea12ffe65be340b8436e0a6706018070259ded13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.439635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ef1c88e-59c7-4db1-9973-21587cdcfdb8", "created": "2026-10-09T15:13:08.440331Z", "modified": "2026-10-09T15:13:08.440331Z", "relationship_type": "indicates", "source_ref": "indicator--386d2ed9-16fd-4dfe-857b-f7fc53fc9adf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec470ac-55b8-41eb-8ba2-452e03111442", "created": "2026-10-09T15:13:08.440459Z", "modified": "2026-10-09T15:13:08.440459Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15e64a23712dc808ee82d6c25c01834a7164577a57e2014d0ebecdea41d768ef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.440459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddf5ea4e-4668-4c7c-a573-7c5049ca9a45", "created": "2026-10-09T15:13:08.441037Z", "modified": "2026-10-09T15:13:08.441037Z", "relationship_type": "indicates", "source_ref": "indicator--bec470ac-55b8-41eb-8ba2-452e03111442", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf203c8e-70f3-448d-a5c9-a69ea86bb484", "created": "2026-10-09T15:13:08.441157Z", "modified": "2026-10-09T15:13:08.441157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2461488faf5a7ee9feb2293e33a8d63b5ea029a106386dc98d0e3e43398fa541']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.441157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--327ea5f4-c47d-443b-9f57-46ae6bbfa477", "created": "2026-10-09T15:13:08.441747Z", "modified": "2026-10-09T15:13:08.441747Z", "relationship_type": "indicates", "source_ref": "indicator--bf203c8e-70f3-448d-a5c9-a69ea86bb484", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feedba42-0ef4-40c9-b0cf-13e6a251bdda", "created": "2026-10-09T15:13:08.441867Z", "modified": "2026-10-09T15:13:08.441867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd3b1d4f1fb667b1aa2e20f84085b60c6e36fe08f33fb5d89ec0f54b5ef78cc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.441867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97563f1b-76eb-4653-add6-ceb3a0aeb22b", "created": "2026-10-09T15:13:08.44245Z", "modified": "2026-10-09T15:13:08.44245Z", "relationship_type": "indicates", "source_ref": "indicator--feedba42-0ef4-40c9-b0cf-13e6a251bdda", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e62ffd-5c1e-4209-934a-7d1eb00ea49f", "created": "2026-10-09T15:13:08.442569Z", "modified": "2026-10-09T15:13:08.442569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d2d63e0579f26f54ea25232791706094e219e1034074aecbae89e441bf0fab9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.442569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b13baca6-5fd8-4066-8bc0-62527e2aa5e6", "created": "2026-10-09T15:13:08.443158Z", "modified": "2026-10-09T15:13:08.443158Z", "relationship_type": "indicates", "source_ref": "indicator--57e62ffd-5c1e-4209-934a-7d1eb00ea49f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683ba058-c4bc-47fd-b7da-7d3388d0b70f", "created": "2026-10-09T15:13:08.443299Z", "modified": "2026-10-09T15:13:08.443299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ac5f31eb8a0cbf4363548f6b87c9346a33c17189fb55cbb7b19b60181ef298e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.443299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48489c30-9eb2-452a-99b8-518820d492ea", "created": "2026-10-09T15:13:08.443899Z", "modified": "2026-10-09T15:13:08.443899Z", "relationship_type": "indicates", "source_ref": "indicator--683ba058-c4bc-47fd-b7da-7d3388d0b70f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8f08d5-dc24-4487-a78c-13dc38b04cee", "created": "2026-10-09T15:13:08.44402Z", "modified": "2026-10-09T15:13:08.44402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82ebe4a0a595d9bcaa32cd32de5757f85b8347a42cecd8bee8792e60f0416f8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.44402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ba56b22-3534-4977-b753-cb42a23f5ae9", "created": "2026-10-09T15:13:08.44461Z", "modified": "2026-10-09T15:13:08.44461Z", "relationship_type": "indicates", "source_ref": "indicator--ab8f08d5-dc24-4487-a78c-13dc38b04cee", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30a1fb1-9f40-4c85-afdd-dad4757591de", "created": "2026-10-09T15:13:08.444733Z", "modified": "2026-10-09T15:13:08.444733Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39b3f318bd34e84452f22440dcab64238739829b9d44734d1ce3157ecab35014']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.444733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fde95305-1de6-4f96-99f2-af00f9c98d9c", "created": "2026-10-09T15:13:08.445335Z", "modified": "2026-10-09T15:13:08.445335Z", "relationship_type": "indicates", "source_ref": "indicator--b30a1fb1-9f40-4c85-afdd-dad4757591de", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee5e52e-f9e4-4fe2-a9a5-168f5c0f041b", "created": "2026-10-09T15:13:08.44546Z", "modified": "2026-10-09T15:13:08.44546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='777c920743b86dcc87953a1b963e0b792a05436cd17b3e0ff6e7d94b5cbf9a01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.44546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ca7a7d0-69ef-44bb-912e-92e39d6564f2", "created": "2026-10-09T15:13:08.446045Z", "modified": "2026-10-09T15:13:08.446045Z", "relationship_type": "indicates", "source_ref": "indicator--6ee5e52e-f9e4-4fe2-a9a5-168f5c0f041b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849d6714-fc5f-4cda-b6de-7b18ca27eaf2", "created": "2026-10-09T15:13:08.446164Z", "modified": "2026-10-09T15:13:08.446164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3134eab2bd43c1996d7f4d4866e34faba5294df41bf3291b32c75f2b3ac6396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.446164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--614aa480-3874-4e91-98bd-8bfe552cb949", "created": "2026-10-09T15:13:08.446887Z", "modified": "2026-10-09T15:13:08.446887Z", "relationship_type": "indicates", "source_ref": "indicator--849d6714-fc5f-4cda-b6de-7b18ca27eaf2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0bd245-397c-4236-9fa9-472a528ef5d4", "created": "2026-10-09T15:13:08.44702Z", "modified": "2026-10-09T15:13:08.44702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e22b036ac5a5b3ab78f236d51a40428cfcebff35a49cc28f075a63527a1c1783']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.44702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebd5e91b-93fd-4fc4-9b3c-c6dcba1afba7", "created": "2026-10-09T15:13:08.44764Z", "modified": "2026-10-09T15:13:08.44764Z", "relationship_type": "indicates", "source_ref": "indicator--ac0bd245-397c-4236-9fa9-472a528ef5d4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e3150ed-a1ce-4e15-9b6f-8bdc6d4ff7ba", "created": "2026-10-09T15:13:08.447768Z", "modified": "2026-10-09T15:13:08.447768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='224f03961205a2971982b16308cd1f89a7b5c38c5f76ca0315df3206f4b68280']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.447768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c60fde5a-535f-46fc-aae6-2e30c7524929", "created": "2026-10-09T15:13:08.448371Z", "modified": "2026-10-09T15:13:08.448371Z", "relationship_type": "indicates", "source_ref": "indicator--1e3150ed-a1ce-4e15-9b6f-8bdc6d4ff7ba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8e1fbc-fafd-4166-b731-8c5c5e390393", "created": "2026-10-09T15:13:08.448495Z", "modified": "2026-10-09T15:13:08.448495Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05500b56a49dab3535cf5443a1040d8a73a96eada3d904df1b1faf2f95a89f7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.448495Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc413374-4755-47c7-bf15-c0f2f824aa0e", "created": "2026-10-09T15:13:08.449082Z", "modified": "2026-10-09T15:13:08.449082Z", "relationship_type": "indicates", "source_ref": "indicator--be8e1fbc-fafd-4166-b731-8c5c5e390393", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef085bdd-4851-4db5-91f1-d7d9ffb19116", "created": "2026-10-09T15:13:08.449213Z", "modified": "2026-10-09T15:13:08.449213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af830b3b974f05d6df72295ac7603a766a6cc4d7bf0ac6acbe44753e98e9319e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.449213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f05e600-01f1-4a07-a6fe-86c5a32f323f", "created": "2026-10-09T15:13:08.449847Z", "modified": "2026-10-09T15:13:08.449847Z", "relationship_type": "indicates", "source_ref": "indicator--ef085bdd-4851-4db5-91f1-d7d9ffb19116", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a708f499-4945-413e-9606-b5541dd35d85", "created": "2026-10-09T15:13:08.450011Z", "modified": "2026-10-09T15:13:08.450011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f6c253a1da86914924785550ce67151339967d4b58ee2b388c3dce002a0f58e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.450011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--036e115d-d6f0-424d-b414-e82bbe535b78", "created": "2026-10-09T15:13:08.450735Z", "modified": "2026-10-09T15:13:08.450735Z", "relationship_type": "indicates", "source_ref": "indicator--a708f499-4945-413e-9606-b5541dd35d85", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbf0deb-e540-424c-9c36-b59f2f4b6daf", "created": "2026-10-09T15:13:08.450896Z", "modified": "2026-10-09T15:13:08.450896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d74d40e9211ce376974e69f5be220c057be52170e1d568ea968fcc9438a6d38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.450896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc2b50bd-6759-4a66-a9c9-9826c8640779", "created": "2026-10-09T15:13:08.451613Z", "modified": "2026-10-09T15:13:08.451613Z", "relationship_type": "indicates", "source_ref": "indicator--6fbf0deb-e540-424c-9c36-b59f2f4b6daf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbcba20-762c-4868-8048-36dc03b92e9e", "created": "2026-10-09T15:13:08.45176Z", "modified": "2026-10-09T15:13:08.45176Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4dbd129864a57380613cfc3a2cfd4f5fd1678073f520eab9d21b99ae63c59e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.45176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bf8d31d-d2ba-4848-b1a7-54d6ade80580", "created": "2026-10-09T15:13:08.452491Z", "modified": "2026-10-09T15:13:08.452491Z", "relationship_type": "indicates", "source_ref": "indicator--ecbcba20-762c-4868-8048-36dc03b92e9e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23146ed8-45e6-471f-b420-890c5957d138", "created": "2026-10-09T15:13:08.452653Z", "modified": "2026-10-09T15:13:08.452653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d07c495d093b60de69e0f612a0d3bd75144532e377153b1c1b9128092e9d4f93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.452653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b49794b-c701-4f58-bd38-6019702889cf", "created": "2026-10-09T15:13:08.453385Z", "modified": "2026-10-09T15:13:08.453385Z", "relationship_type": "indicates", "source_ref": "indicator--23146ed8-45e6-471f-b420-890c5957d138", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e85ea70-288a-44f8-ac55-01b03a8faa37", "created": "2026-10-09T15:13:08.453536Z", "modified": "2026-10-09T15:13:08.453536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19527b5cd82b869088e3dcb69d134d6d6c5b88cd3f4d97a68a8a7ebe2fe1c8ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.453536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a43af174-de82-483d-bd0e-d25a01b4774e", "created": "2026-10-09T15:13:08.454251Z", "modified": "2026-10-09T15:13:08.454251Z", "relationship_type": "indicates", "source_ref": "indicator--3e85ea70-288a-44f8-ac55-01b03a8faa37", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6942e6b9-8ee7-406f-ae06-aa9c0685c23c", "created": "2026-10-09T15:13:08.454395Z", "modified": "2026-10-09T15:13:08.454395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5220f365069a03c966261ca1886fa9c80aae9ae6e5ba78b52a9cafcd327fb72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.454395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b95f4c74-d89a-4dd2-9748-91135f290787", "created": "2026-10-09T15:13:08.454994Z", "modified": "2026-10-09T15:13:08.454994Z", "relationship_type": "indicates", "source_ref": "indicator--6942e6b9-8ee7-406f-ae06-aa9c0685c23c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d5873d-e49f-4b56-bdae-7e167663bc0c", "created": "2026-10-09T15:13:08.455118Z", "modified": "2026-10-09T15:13:08.455118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='161ca9bbd38eacfd265864b1627f3e7a85b08a8758114bce8362cdfc56fcd6be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.455118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fa68adf-b94c-4f39-b942-14bd31375fb6", "created": "2026-10-09T15:13:08.455717Z", "modified": "2026-10-09T15:13:08.455717Z", "relationship_type": "indicates", "source_ref": "indicator--c3d5873d-e49f-4b56-bdae-7e167663bc0c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4a130e-2c07-4dfb-a2cc-bfa67ff9e6d0", "created": "2026-10-09T15:13:08.45584Z", "modified": "2026-10-09T15:13:08.45584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca974a7903a7b2202b8e3834cb79f5ddf3fc49110976f33138e22dd28e6f4423']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.45584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b4d869b-e202-4224-ba54-0870828cc01b", "created": "2026-10-09T15:13:08.456431Z", "modified": "2026-10-09T15:13:08.456431Z", "relationship_type": "indicates", "source_ref": "indicator--ce4a130e-2c07-4dfb-a2cc-bfa67ff9e6d0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67df321-1d1a-4a6d-b474-836a30e9bca2", "created": "2026-10-09T15:13:08.456558Z", "modified": "2026-10-09T15:13:08.456558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc07725a32b06848f548214d3419e239d7d717e6debea3765ee6685b0eed16a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.456558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39b9a713-1f81-4ad7-a307-9de6a78422cd", "created": "2026-10-09T15:13:08.457146Z", "modified": "2026-10-09T15:13:08.457146Z", "relationship_type": "indicates", "source_ref": "indicator--c67df321-1d1a-4a6d-b474-836a30e9bca2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167eb82f-b0c1-4413-8ccc-5b1ef0600550", "created": "2026-10-09T15:13:08.457283Z", "modified": "2026-10-09T15:13:08.457283Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49000151dcf9cdbe51dd676a27fccde02509a6cf5d1802cc2e93d16c5827eccc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.457283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1348e9de-ade4-496a-9efb-1725e77d46ca", "created": "2026-10-09T15:13:08.457878Z", "modified": "2026-10-09T15:13:08.457878Z", "relationship_type": "indicates", "source_ref": "indicator--167eb82f-b0c1-4413-8ccc-5b1ef0600550", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e821454-3e17-4d30-b64e-6efc9a07bf8e", "created": "2026-10-09T15:13:08.458002Z", "modified": "2026-10-09T15:13:08.458002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='174ba6a05ec0c3d59e94e1b88b43077e1340a4b92514162c2f9ab128c2ab963f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.458002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ebed59c-0535-4d94-b174-e5d3a96d4eb7", "created": "2026-10-09T15:13:08.458592Z", "modified": "2026-10-09T15:13:08.458592Z", "relationship_type": "indicates", "source_ref": "indicator--3e821454-3e17-4d30-b64e-6efc9a07bf8e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e092f37-360a-4443-a587-39a571097bee", "created": "2026-10-09T15:13:08.458716Z", "modified": "2026-10-09T15:13:08.458716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78e0f021976f32155447277919540fe1dad7cbd5527b77d055659ce97411761a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.458716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6e4742d-9848-4569-b92d-8cf23bbf5621", "created": "2026-10-09T15:13:08.459312Z", "modified": "2026-10-09T15:13:08.459312Z", "relationship_type": "indicates", "source_ref": "indicator--7e092f37-360a-4443-a587-39a571097bee", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c50d92-57cd-4851-8c28-6399f5e1290b", "created": "2026-10-09T15:13:08.459434Z", "modified": "2026-10-09T15:13:08.459434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e298a7b804f97b31b79a2a3514bd1ab608847e507c1a7234c060b98adf287838']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.459434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--080db728-6f5c-42d6-a1ef-020c3d1ae4e4", "created": "2026-10-09T15:13:08.460118Z", "modified": "2026-10-09T15:13:08.460118Z", "relationship_type": "indicates", "source_ref": "indicator--f3c50d92-57cd-4851-8c28-6399f5e1290b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2a7097-2d53-4071-83b0-94e2c94eebaf", "created": "2026-10-09T15:13:08.460243Z", "modified": "2026-10-09T15:13:08.460243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d181f0c995296087a80e4b01b37d032d497e8d613c14d3db2ec431ff744b077a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.460243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cda26060-3abe-4548-8fe2-a5c77dbb993a", "created": "2026-10-09T15:13:08.460861Z", "modified": "2026-10-09T15:13:08.460861Z", "relationship_type": "indicates", "source_ref": "indicator--3f2a7097-2d53-4071-83b0-94e2c94eebaf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b005bac-5a55-4371-b092-e7524b9483ca", "created": "2026-10-09T15:13:08.460984Z", "modified": "2026-10-09T15:13:08.460984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e458b650af8904c898b07ceea688a81f1ad66fa447cc1ccfc4890c27ef898e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.460984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb969a3e-fed3-4635-9aa5-9a5f6008b48a", "created": "2026-10-09T15:13:08.461581Z", "modified": "2026-10-09T15:13:08.461581Z", "relationship_type": "indicates", "source_ref": "indicator--0b005bac-5a55-4371-b092-e7524b9483ca", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf97f04-dd7b-4d9a-bdc0-963ad02f8586", "created": "2026-10-09T15:13:08.461704Z", "modified": "2026-10-09T15:13:08.461704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b991813a528fec153c1e3dec85491f415b6b6e75f83510f5ce09985bd1ed5d66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.461704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3e26041-3ac5-4445-9fcc-0f506b471c4b", "created": "2026-10-09T15:13:08.462304Z", "modified": "2026-10-09T15:13:08.462304Z", "relationship_type": "indicates", "source_ref": "indicator--9bf97f04-dd7b-4d9a-bdc0-963ad02f8586", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da83ea83-2747-496d-8671-94395b7f9b6d", "created": "2026-10-09T15:13:08.462436Z", "modified": "2026-10-09T15:13:08.462436Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f693cdcdb32721cdd0487c90d7d6cb7b80f3f2abf69524238774bb3b93cf319']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.462436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24a07d3f-3c97-43e8-b0cc-6f73a803f809", "created": "2026-10-09T15:13:08.46302Z", "modified": "2026-10-09T15:13:08.46302Z", "relationship_type": "indicates", "source_ref": "indicator--da83ea83-2747-496d-8671-94395b7f9b6d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3bcdae-0ced-4f62-9dd5-496ebb54d5e4", "created": "2026-10-09T15:13:08.46314Z", "modified": "2026-10-09T15:13:08.46314Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb23a4d700a976ad3dba0b1e10b5ece3e37ad455887983bc067cb55b9cb9cc06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.46314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--261d9def-a026-457c-8bc6-34dc31aba481", "created": "2026-10-09T15:13:08.463735Z", "modified": "2026-10-09T15:13:08.463735Z", "relationship_type": "indicates", "source_ref": "indicator--db3bcdae-0ced-4f62-9dd5-496ebb54d5e4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a142f7a-f2e4-47bf-879d-96c2864754f7", "created": "2026-10-09T15:13:08.463856Z", "modified": "2026-10-09T15:13:08.463856Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='abd7c2b08c1393f7eb64d4170ef995b24cb09922ac62e4f4bdf50353f1bc703b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.463856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64854c63-84ad-4a19-b3ff-951ce0014956", "created": "2026-10-09T15:13:08.464448Z", "modified": "2026-10-09T15:13:08.464448Z", "relationship_type": "indicates", "source_ref": "indicator--0a142f7a-f2e4-47bf-879d-96c2864754f7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a39136-e7fc-4ac4-ad41-c067a1164b8c", "created": "2026-10-09T15:13:08.464569Z", "modified": "2026-10-09T15:13:08.464569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e11b06dc47fb0994a05727d029fb35837cf5e4bf29dd4a2e619ce2efe3d92b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.464569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2c2a646-536b-430c-b72f-067bd51ada31", "created": "2026-10-09T15:13:08.465146Z", "modified": "2026-10-09T15:13:08.465146Z", "relationship_type": "indicates", "source_ref": "indicator--a9a39136-e7fc-4ac4-ad41-c067a1164b8c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f18489-686b-4459-b609-db7e48ed1052", "created": "2026-10-09T15:13:08.465273Z", "modified": "2026-10-09T15:13:08.465273Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2126b6f172af725b7ff510cdc63d5147e6016bb0aa7980af00ffc87c1d07c908']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.465273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01b4cddd-1084-4d46-b091-6d9fe758e5be", "created": "2026-10-09T15:13:08.465856Z", "modified": "2026-10-09T15:13:08.465856Z", "relationship_type": "indicates", "source_ref": "indicator--d6f18489-686b-4459-b609-db7e48ed1052", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61acdbc3-430d-40fd-a10d-771b17ad1091", "created": "2026-10-09T15:13:08.465978Z", "modified": "2026-10-09T15:13:08.465978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c16ad7195bd4374830b0217f6a7ee1162cbd56608ea91d445d40e15493c1167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.465978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b9d9c48-3e4e-4f0e-ab68-80d4191274de", "created": "2026-10-09T15:13:08.466679Z", "modified": "2026-10-09T15:13:08.466679Z", "relationship_type": "indicates", "source_ref": "indicator--61acdbc3-430d-40fd-a10d-771b17ad1091", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f110187e-e48f-4bb3-9f2a-deb94d1fe7c1", "created": "2026-10-09T15:13:08.466805Z", "modified": "2026-10-09T15:13:08.466805Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b16c30aee3e1bde998d9438d6b2e1de6c46b9fde625ca78b6927f3ee71aa5e80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.466805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9e70b8d-ce31-4bb0-9376-1ca710f6e102", "created": "2026-10-09T15:13:08.467396Z", "modified": "2026-10-09T15:13:08.467396Z", "relationship_type": "indicates", "source_ref": "indicator--f110187e-e48f-4bb3-9f2a-deb94d1fe7c1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed1f5f1-3c9e-43db-827b-716b23d18188", "created": "2026-10-09T15:13:08.467517Z", "modified": "2026-10-09T15:13:08.467517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbc20c4d2a0b2a870ee08f561a8089e3cadee3b8cb16fe19581e49b19dfdf153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.467517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--418eadaa-ecf1-4d3e-b46f-cd333f6448d2", "created": "2026-10-09T15:13:08.468094Z", "modified": "2026-10-09T15:13:08.468094Z", "relationship_type": "indicates", "source_ref": "indicator--5ed1f5f1-3c9e-43db-827b-716b23d18188", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430820f3-7c28-40b7-a51c-28b8a3755963", "created": "2026-10-09T15:13:08.468214Z", "modified": "2026-10-09T15:13:08.468214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79627ef411c65960e49536333bdb8127bfb9bacf82dbe491d1466f5ff7164b4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.468214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b49bd3d2-4434-4b41-b5ea-63bb4f5b84d8", "created": "2026-10-09T15:13:08.468808Z", "modified": "2026-10-09T15:13:08.468808Z", "relationship_type": "indicates", "source_ref": "indicator--430820f3-7c28-40b7-a51c-28b8a3755963", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbc6d08-f627-45bf-be2c-ee30af5bee1d", "created": "2026-10-09T15:13:08.468927Z", "modified": "2026-10-09T15:13:08.468927Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e81de3f104586f1ca13cb54b88187bff655fb502a27f91a2019514bcb7d1f0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.468927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae3fd935-20cf-4e19-a0ad-b5cda80909f6", "created": "2026-10-09T15:13:08.469517Z", "modified": "2026-10-09T15:13:08.469517Z", "relationship_type": "indicates", "source_ref": "indicator--cbbc6d08-f627-45bf-be2c-ee30af5bee1d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2297ec6f-0d5b-4a0f-9496-88c73713c9d2", "created": "2026-10-09T15:13:08.46964Z", "modified": "2026-10-09T15:13:08.46964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06634297f6060543d654923e61446a32b8e983613bba542fb98bf828eb34a579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.46964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd655be6-dc07-4a54-b57f-17b9c9dc9f01", "created": "2026-10-09T15:13:08.470226Z", "modified": "2026-10-09T15:13:08.470226Z", "relationship_type": "indicates", "source_ref": "indicator--2297ec6f-0d5b-4a0f-9496-88c73713c9d2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229c0357-0412-46f7-87b0-e9509cfc114e", "created": "2026-10-09T15:13:08.470356Z", "modified": "2026-10-09T15:13:08.470356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9fa2573ee87a60548c69daf0637f1c3f6ab838c703242c0d639e8153b535c0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.470356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--236be9bc-455a-4eb0-8f7a-73745a009eb4", "created": "2026-10-09T15:13:08.470953Z", "modified": "2026-10-09T15:13:08.470953Z", "relationship_type": "indicates", "source_ref": "indicator--229c0357-0412-46f7-87b0-e9509cfc114e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d763eff3-5f20-4ff1-8b98-405d8f395b2b", "created": "2026-10-09T15:13:08.471078Z", "modified": "2026-10-09T15:13:08.471078Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2623011824e8113f590fde22f63319f3680707ab2193ca391eb298b06c1a0f97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.471078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f27a59f3-a9db-4aa3-b5b6-9cb0a81861b1", "created": "2026-10-09T15:13:08.471668Z", "modified": "2026-10-09T15:13:08.471668Z", "relationship_type": "indicates", "source_ref": "indicator--d763eff3-5f20-4ff1-8b98-405d8f395b2b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2be6773-c38b-4645-9f4f-8c3c2836d601", "created": "2026-10-09T15:13:08.471791Z", "modified": "2026-10-09T15:13:08.471791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c61f296599a18826bdcb2c205fe1b8c6ce0a14a20d590e84fad12476adb851a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.471791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84835f40-46c0-43d2-a55a-62f4fd1752eb", "created": "2026-10-09T15:13:08.472378Z", "modified": "2026-10-09T15:13:08.472378Z", "relationship_type": "indicates", "source_ref": "indicator--f2be6773-c38b-4645-9f4f-8c3c2836d601", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949b46ca-b6ee-44ee-a9fd-79b5d5d1a0c3", "created": "2026-10-09T15:13:08.472499Z", "modified": "2026-10-09T15:13:08.472499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70cdfa7cd38c4feeb36f8c726e2a47a85c718629bfcd683224e4afef577b4427']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.472499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c76581e4-7139-49ad-9e46-ca8faf7bc7e2", "created": "2026-10-09T15:13:08.473187Z", "modified": "2026-10-09T15:13:08.473187Z", "relationship_type": "indicates", "source_ref": "indicator--949b46ca-b6ee-44ee-a9fd-79b5d5d1a0c3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6051026-14d1-4bd1-af69-5aae64a801f8", "created": "2026-10-09T15:13:08.47332Z", "modified": "2026-10-09T15:13:08.47332Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e13c1748f6aaa7c5e49692926bbd905a961a14f76c05c00cb25a838c2725f2d9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.47332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02136f07-6f6e-40f8-8c36-8d6ec0dd2a0b", "created": "2026-10-09T15:13:08.473902Z", "modified": "2026-10-09T15:13:08.473902Z", "relationship_type": "indicates", "source_ref": "indicator--a6051026-14d1-4bd1-af69-5aae64a801f8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb5d9f8-9999-4c3d-b7ec-ccac734229f8", "created": "2026-10-09T15:13:08.474023Z", "modified": "2026-10-09T15:13:08.474023Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81a3e983d158b0b4622786be154716e19dc4137f017e4c2177edf59b572babde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.474023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2c21d09-a8d4-4a0b-b712-321da25a7762", "created": "2026-10-09T15:13:08.474615Z", "modified": "2026-10-09T15:13:08.474615Z", "relationship_type": "indicates", "source_ref": "indicator--deb5d9f8-9999-4c3d-b7ec-ccac734229f8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e63713-0f3b-4b81-84fc-76f67078913e", "created": "2026-10-09T15:13:08.474738Z", "modified": "2026-10-09T15:13:08.474738Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d805511be69a2d6f4639d188308866cca5391dd5719d4ec9318ff956465ec4d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.474738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c722fcc-e1b9-4cf4-91df-5857f47e605c", "created": "2026-10-09T15:13:08.475326Z", "modified": "2026-10-09T15:13:08.475326Z", "relationship_type": "indicates", "source_ref": "indicator--b3e63713-0f3b-4b81-84fc-76f67078913e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea857741-d65b-4ca5-a6fc-d0feabd32410", "created": "2026-10-09T15:13:08.475448Z", "modified": "2026-10-09T15:13:08.475448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d20a32781c8cf1f3f5bed793326d93a715f6ed8ea24dd5c9b9b8fc0ce20655d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.475448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90e0c04b-950d-4398-a5c2-0570cc9f8e26", "created": "2026-10-09T15:13:08.476035Z", "modified": "2026-10-09T15:13:08.476035Z", "relationship_type": "indicates", "source_ref": "indicator--ea857741-d65b-4ca5-a6fc-d0feabd32410", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662497a9-377e-4e6b-8a1d-445687967a8b", "created": "2026-10-09T15:13:08.476158Z", "modified": "2026-10-09T15:13:08.476158Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1222360bc9aee284e85b5bc2febda8578e97d816db67302b5d025e54b268655']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.476158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b9aff23-2b28-4904-accb-eaffcb43a01b", "created": "2026-10-09T15:13:08.476759Z", "modified": "2026-10-09T15:13:08.476759Z", "relationship_type": "indicates", "source_ref": "indicator--662497a9-377e-4e6b-8a1d-445687967a8b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff4af2d-18e6-479c-913b-42b1954d96f2", "created": "2026-10-09T15:13:08.476882Z", "modified": "2026-10-09T15:13:08.476882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0e3ce30cc1ef3d047da0471ec47c96abf8ca230e464cdb01c25a4baf27051d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.476882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82d33c1f-5b27-4061-8b1f-ab1362bf737b", "created": "2026-10-09T15:13:08.477472Z", "modified": "2026-10-09T15:13:08.477472Z", "relationship_type": "indicates", "source_ref": "indicator--aff4af2d-18e6-479c-913b-42b1954d96f2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7e5513-e60e-4075-9649-7c811736ad98", "created": "2026-10-09T15:13:08.477594Z", "modified": "2026-10-09T15:13:08.477594Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d006a147372fe86a8c9ff8d2d6ef4e714be3db99610292403cbc1b5720c1bfc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.477594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9355fd8b-c7a6-43d6-8ff4-34ddfbe2d0fe", "created": "2026-10-09T15:13:08.478179Z", "modified": "2026-10-09T15:13:08.478179Z", "relationship_type": "indicates", "source_ref": "indicator--ca7e5513-e60e-4075-9649-7c811736ad98", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c3d425-2643-4d75-8a1a-910bf2a27d0c", "created": "2026-10-09T15:13:08.478315Z", "modified": "2026-10-09T15:13:08.478315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ac14b87f2927f587e04fcd8c2470fccbdb6f9145deb161972472533748723ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.478315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73c6fef7-0540-43e4-9d0a-a380ed15bd0a", "created": "2026-10-09T15:13:08.479Z", "modified": "2026-10-09T15:13:08.479Z", "relationship_type": "indicates", "source_ref": "indicator--c8c3d425-2643-4d75-8a1a-910bf2a27d0c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb4d2f2-13fd-4f56-aa0b-b8720a3dbef7", "created": "2026-10-09T15:13:08.479129Z", "modified": "2026-10-09T15:13:08.479129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='805bb5a2b3e0aa393ebb50a87bad68ca8216d21c1d22817f1c53b9fd567feac2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.479129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a878bfb-bf27-49aa-970c-c371d0a2c5e2", "created": "2026-10-09T15:13:08.479728Z", "modified": "2026-10-09T15:13:08.479728Z", "relationship_type": "indicates", "source_ref": "indicator--0fb4d2f2-13fd-4f56-aa0b-b8720a3dbef7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb75df7-9e7a-440a-8da6-c42952fcfc8f", "created": "2026-10-09T15:13:08.479852Z", "modified": "2026-10-09T15:13:08.479852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc580afb916974c60c43a99c9c82fcc71b271fbf4481d52dfca77160fb065850']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.479852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac714f5f-1031-4f41-93bc-0d6e1f1326b0", "created": "2026-10-09T15:13:08.480453Z", "modified": "2026-10-09T15:13:08.480453Z", "relationship_type": "indicates", "source_ref": "indicator--adb75df7-9e7a-440a-8da6-c42952fcfc8f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628e1857-5de3-4845-ad3b-24fc8362c81d", "created": "2026-10-09T15:13:08.480576Z", "modified": "2026-10-09T15:13:08.480576Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85bc98904027679b1af7875442e202a52b4beecf19d48c3cdf92f6ecd2c4123a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.480576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbfd039-cb43-4e31-ad84-610c4c2d88b3", "created": "2026-10-09T15:13:08.48116Z", "modified": "2026-10-09T15:13:08.48116Z", "relationship_type": "indicates", "source_ref": "indicator--628e1857-5de3-4845-ad3b-24fc8362c81d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e011573-d811-4599-80b0-ec3b72ccf8f8", "created": "2026-10-09T15:13:08.481292Z", "modified": "2026-10-09T15:13:08.481292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7022452a5b8d81e20c5f0adfbf11d01afaa2eada7c55647aa432c9907b066e41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.481292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9464fa35-8708-4af0-a6f3-d4db4dc8b507", "created": "2026-10-09T15:13:08.481876Z", "modified": "2026-10-09T15:13:08.481876Z", "relationship_type": "indicates", "source_ref": "indicator--2e011573-d811-4599-80b0-ec3b72ccf8f8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39932e3e-c722-47c1-b457-f9bd91ba4440", "created": "2026-10-09T15:13:08.481995Z", "modified": "2026-10-09T15:13:08.481995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='145217272f98e3c97c48d44fad82bf3019eaa840b41b0767b12c41c01fa09890']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.481995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--978b10da-d013-4823-aca4-a973fd6b839e", "created": "2026-10-09T15:13:08.482586Z", "modified": "2026-10-09T15:13:08.482586Z", "relationship_type": "indicates", "source_ref": "indicator--39932e3e-c722-47c1-b457-f9bd91ba4440", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8615d03f-2a0a-4ba0-96b0-5b2b3f417502", "created": "2026-10-09T15:13:08.482706Z", "modified": "2026-10-09T15:13:08.482706Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c74525f9a8e02906951521e210357204ce82d9f907d42015127c6ac692f7a748']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.482706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f62d2f4-f470-488c-abcb-3c1e1c6e076e", "created": "2026-10-09T15:13:08.483297Z", "modified": "2026-10-09T15:13:08.483297Z", "relationship_type": "indicates", "source_ref": "indicator--8615d03f-2a0a-4ba0-96b0-5b2b3f417502", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2becdd22-7157-4b76-a38d-00f3abdf971d", "created": "2026-10-09T15:13:08.483422Z", "modified": "2026-10-09T15:13:08.483422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06e4312edd54c0393a451dcfa1535289f49a2948dda9a687d01894abd794fc3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.483422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--631d8e67-9150-4caa-8855-a36b9c090a25", "created": "2026-10-09T15:13:08.484005Z", "modified": "2026-10-09T15:13:08.484005Z", "relationship_type": "indicates", "source_ref": "indicator--2becdd22-7157-4b76-a38d-00f3abdf971d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35521089-443c-4c4e-9845-06c127501dd4", "created": "2026-10-09T15:13:08.484123Z", "modified": "2026-10-09T15:13:08.484123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c151a59b70fe87ae5d30d474018658de3445a0a450edb3cb59cddbf318ca5289']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.484123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72d4cca3-8bd0-465c-af73-650f8e687b3a", "created": "2026-10-09T15:13:08.484712Z", "modified": "2026-10-09T15:13:08.484712Z", "relationship_type": "indicates", "source_ref": "indicator--35521089-443c-4c4e-9845-06c127501dd4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39200ad4-d539-4083-b05a-eef4b487ba2e", "created": "2026-10-09T15:13:08.484839Z", "modified": "2026-10-09T15:13:08.484839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8344b1b5a4f2493b6d048e3d96284cab3e277761e3b24e479d4980cc33022d46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.484839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c674859-1c42-460e-922c-0706cda9b995", "created": "2026-10-09T15:13:08.485874Z", "modified": "2026-10-09T15:13:08.485874Z", "relationship_type": "indicates", "source_ref": "indicator--39200ad4-d539-4083-b05a-eef4b487ba2e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f0eb18-e26d-4d72-896e-d359e79a4c7f", "created": "2026-10-09T15:13:08.486016Z", "modified": "2026-10-09T15:13:08.486016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='201625b0ab47027bd2dcb27f88c5c0cf96e4bc32505083cb7036639c6a4a8b24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.486016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c02fcb34-55c9-456d-8416-f26238e0dd31", "created": "2026-10-09T15:13:08.486626Z", "modified": "2026-10-09T15:13:08.486626Z", "relationship_type": "indicates", "source_ref": "indicator--61f0eb18-e26d-4d72-896e-d359e79a4c7f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48af8dc2-fbf8-49df-90bf-70f41a2781a5", "created": "2026-10-09T15:13:08.486752Z", "modified": "2026-10-09T15:13:08.486752Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdeecb6a46f63ff28a6a5bc093cb80ebda01b8d0c4c155735b9b1d824c975620']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.486752Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7debdce-a41d-4634-98f5-bd44e1bffd55", "created": "2026-10-09T15:13:08.487357Z", "modified": "2026-10-09T15:13:08.487357Z", "relationship_type": "indicates", "source_ref": "indicator--48af8dc2-fbf8-49df-90bf-70f41a2781a5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c380b7-59f8-4c45-84e7-9cd889228c1c", "created": "2026-10-09T15:13:08.487483Z", "modified": "2026-10-09T15:13:08.487483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8fe4b45908ded8917d8f8a8be6493eaf128c3a7b31c959ec92387dddf09f4b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.487483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1483ef0-2c04-41d0-b29f-d4f0df585631", "created": "2026-10-09T15:13:08.488082Z", "modified": "2026-10-09T15:13:08.488082Z", "relationship_type": "indicates", "source_ref": "indicator--10c380b7-59f8-4c45-84e7-9cd889228c1c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842de792-0a6c-40ea-a7fc-7da3f01af2f5", "created": "2026-10-09T15:13:08.488209Z", "modified": "2026-10-09T15:13:08.488209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9baa5c33c411c91413ab9ef126463a893d787527055ac4fb6ac549903302b2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.488209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5985ed2-c257-4960-9836-5669986d6956", "created": "2026-10-09T15:13:08.488816Z", "modified": "2026-10-09T15:13:08.488816Z", "relationship_type": "indicates", "source_ref": "indicator--842de792-0a6c-40ea-a7fc-7da3f01af2f5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab9e174-470e-45fc-890f-60609875e372", "created": "2026-10-09T15:13:08.488938Z", "modified": "2026-10-09T15:13:08.488938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad5dfd32c19afdca643b67fb251197489486ecfdc4d76ffa7e257da9bc343ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.488938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d989764-9e75-4da2-a902-1695c953ccaf", "created": "2026-10-09T15:13:08.489532Z", "modified": "2026-10-09T15:13:08.489532Z", "relationship_type": "indicates", "source_ref": "indicator--0ab9e174-470e-45fc-890f-60609875e372", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a85822a-d2a2-4d01-869c-a68033408722", "created": "2026-10-09T15:13:08.489665Z", "modified": "2026-10-09T15:13:08.489665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a30b15ca27baa6d55992028333f57f998c81660ff3abe98abefe8398b55b233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.489665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2429cf76-7e0d-4017-8125-a2d553d93d3f", "created": "2026-10-09T15:13:08.49024Z", "modified": "2026-10-09T15:13:08.49024Z", "relationship_type": "indicates", "source_ref": "indicator--4a85822a-d2a2-4d01-869c-a68033408722", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ace19b-ff9c-445e-ae90-b7f225e45d11", "created": "2026-10-09T15:13:08.490368Z", "modified": "2026-10-09T15:13:08.490368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d91db72387809da2ed0b3c48bb8b2729e31d0bc3901f195eb331b2cdf1bdf11e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.490368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee07117c-2825-4761-b5dc-ac9c2bd6ac22", "created": "2026-10-09T15:13:08.49095Z", "modified": "2026-10-09T15:13:08.49095Z", "relationship_type": "indicates", "source_ref": "indicator--d0ace19b-ff9c-445e-ae90-b7f225e45d11", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80409c52-ada4-4abe-9ee6-af037c73e293", "created": "2026-10-09T15:13:08.491073Z", "modified": "2026-10-09T15:13:08.491073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d5a30f8a71ff83146de5b54bda8dd1984abc479fd55d2abdfbcb8a8fec965cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.491073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cac57c2-7cc9-4514-95e3-7ca6b2aff1b9", "created": "2026-10-09T15:13:08.491663Z", "modified": "2026-10-09T15:13:08.491663Z", "relationship_type": "indicates", "source_ref": "indicator--80409c52-ada4-4abe-9ee6-af037c73e293", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca348dd1-8f5b-4100-a533-c161ca5ca43d", "created": "2026-10-09T15:13:08.491787Z", "modified": "2026-10-09T15:13:08.491787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d558f5a4056acb16095adbcb0c9de9dfa450dc2b992298bd52ea8d35d22a397']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.491787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10b9d6fa-e68e-4768-a36b-8a2ce23da441", "created": "2026-10-09T15:13:08.49252Z", "modified": "2026-10-09T15:13:08.49252Z", "relationship_type": "indicates", "source_ref": "indicator--ca348dd1-8f5b-4100-a533-c161ca5ca43d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15efcffd-0acf-4c84-b502-54ca3d4c7664", "created": "2026-10-09T15:13:08.492658Z", "modified": "2026-10-09T15:13:08.492658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd1b4c56a623f17b5eb07cd460bbdd0b292ff69439a63bea9fc7564061dccb5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.492658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae664fd9-86fe-4e02-acfe-211aa77ef82b", "created": "2026-10-09T15:13:08.493255Z", "modified": "2026-10-09T15:13:08.493255Z", "relationship_type": "indicates", "source_ref": "indicator--15efcffd-0acf-4c84-b502-54ca3d4c7664", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25f9f38-0844-4aa8-85c8-b9aec068f33e", "created": "2026-10-09T15:13:08.493394Z", "modified": "2026-10-09T15:13:08.493394Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6367f22775bccdb2f625318104050a2aa069e4840268c0d7b515db324a5e14be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.493394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b097abea-3f07-4408-a210-1fe5681fb52f", "created": "2026-10-09T15:13:08.494009Z", "modified": "2026-10-09T15:13:08.494009Z", "relationship_type": "indicates", "source_ref": "indicator--f25f9f38-0844-4aa8-85c8-b9aec068f33e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc40ad6-74e1-4a47-b232-e0cbc75d723b", "created": "2026-10-09T15:13:08.494134Z", "modified": "2026-10-09T15:13:08.494134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26ff4b53cee88271e83627f5fab1bf8473c5c2631033b67cc0983cfaca37678b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.494134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22ebbba5-3c17-438e-bba4-2f4b21a9e3c7", "created": "2026-10-09T15:13:08.494727Z", "modified": "2026-10-09T15:13:08.494727Z", "relationship_type": "indicates", "source_ref": "indicator--6dc40ad6-74e1-4a47-b232-e0cbc75d723b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3497d9d4-4163-4ecc-a870-58bdbacf5d98", "created": "2026-10-09T15:13:08.494848Z", "modified": "2026-10-09T15:13:08.494848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fe9e26c656ae558b31a9428b525db20f1b144f5bcdeaaa6ab9d01151feeddb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.494848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f060a5c1-97ab-4736-9c08-8bf6fbf3c871", "created": "2026-10-09T15:13:08.495452Z", "modified": "2026-10-09T15:13:08.495452Z", "relationship_type": "indicates", "source_ref": "indicator--3497d9d4-4163-4ecc-a870-58bdbacf5d98", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e053ae-3ab2-4d2b-afbe-45b9b0c17a29", "created": "2026-10-09T15:13:08.495575Z", "modified": "2026-10-09T15:13:08.495575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bcd6d5459dd4524f3f991b209ad45324be068d580e586bfe91f6dd5d2ad0d317']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.495575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d155b0dc-2622-4850-baea-04ecb1248cd9", "created": "2026-10-09T15:13:08.496162Z", "modified": "2026-10-09T15:13:08.496162Z", "relationship_type": "indicates", "source_ref": "indicator--f6e053ae-3ab2-4d2b-afbe-45b9b0c17a29", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474be63b-b2bd-4842-9f2c-db1ddd8b9f28", "created": "2026-10-09T15:13:08.496292Z", "modified": "2026-10-09T15:13:08.496292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d417e100bf3613ee7bb2ca84e30214dcb4d93cf6c7d6fbcf9e7a73f8f9afb54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.496292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b48c88a3-1bb2-4c52-b797-bdd2de8400fb", "created": "2026-10-09T15:13:08.496949Z", "modified": "2026-10-09T15:13:08.496949Z", "relationship_type": "indicates", "source_ref": "indicator--474be63b-b2bd-4842-9f2c-db1ddd8b9f28", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3d87b9-9ae5-4c4a-acd0-5fb339b03fd4", "created": "2026-10-09T15:13:08.497081Z", "modified": "2026-10-09T15:13:08.497081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ca0e9766d2095bb6a85782e8b6fa2030cceda20ca352f50e831aada39a75521']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.497081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d01737-e365-477f-9618-419e029fd8d8", "created": "2026-10-09T15:13:08.497688Z", "modified": "2026-10-09T15:13:08.497688Z", "relationship_type": "indicates", "source_ref": "indicator--aa3d87b9-9ae5-4c4a-acd0-5fb339b03fd4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e548d1a-e958-4bc4-9cab-9384d815cde9", "created": "2026-10-09T15:13:08.497812Z", "modified": "2026-10-09T15:13:08.497812Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bff0087b9e9d47e64841c0fd32d89c521d1ff4065d695472c7c107ef620ac9ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.497812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fc19e35-6c34-4b97-8c75-ac3527c41072", "created": "2026-10-09T15:13:08.498412Z", "modified": "2026-10-09T15:13:08.498412Z", "relationship_type": "indicates", "source_ref": "indicator--7e548d1a-e958-4bc4-9cab-9384d815cde9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8941c864-ff68-4d18-beae-899775c987fe", "created": "2026-10-09T15:13:08.498538Z", "modified": "2026-10-09T15:13:08.498538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22f81170787399bb92c3349e95c33a6c4e14463e84b77a813b2474bf4fbea1ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.498538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3c27a78-b16d-4df3-b156-15cc3d300d09", "created": "2026-10-09T15:13:08.499251Z", "modified": "2026-10-09T15:13:08.499251Z", "relationship_type": "indicates", "source_ref": "indicator--8941c864-ff68-4d18-beae-899775c987fe", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc2336b-9e9e-4fa7-b948-3ab5e15fd8ef", "created": "2026-10-09T15:13:08.49939Z", "modified": "2026-10-09T15:13:08.49939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e1820f3db9c3d2b457e8bcd3ab2e5ac4e633f90e80a48987d4096003a15489e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.49939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--197a9d41-099d-4104-bed1-0d018f0323ae", "created": "2026-10-09T15:13:08.49998Z", "modified": "2026-10-09T15:13:08.49998Z", "relationship_type": "indicates", "source_ref": "indicator--dfc2336b-9e9e-4fa7-b948-3ab5e15fd8ef", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78646242-2e11-4db3-a020-98e8816051b9", "created": "2026-10-09T15:13:08.500104Z", "modified": "2026-10-09T15:13:08.500104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06bbbde6e1ea47bc9632c46440bfaa41a58357584e69d555d6d825f46bd8d84c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.500104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ef3623e-e2ef-47f1-a79f-ca5d4e8261f3", "created": "2026-10-09T15:13:08.500716Z", "modified": "2026-10-09T15:13:08.500716Z", "relationship_type": "indicates", "source_ref": "indicator--78646242-2e11-4db3-a020-98e8816051b9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d9f73b-6e6f-4afb-b485-c946a2a03ae7", "created": "2026-10-09T15:13:08.50084Z", "modified": "2026-10-09T15:13:08.50084Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4255d25301c3cbe952f623b653541e79456cb46cd9abac26ce5ed2bd81758cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.50084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b9eb7bc-df7e-4e36-9fcc-fd79b8e0eb36", "created": "2026-10-09T15:13:08.501438Z", "modified": "2026-10-09T15:13:08.501438Z", "relationship_type": "indicates", "source_ref": "indicator--79d9f73b-6e6f-4afb-b485-c946a2a03ae7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046466b7-e62d-4ca1-85e7-a17e79b9a62e", "created": "2026-10-09T15:13:08.501562Z", "modified": "2026-10-09T15:13:08.501562Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31fa0c554373b15e485f63482121c7a7676eb58b79d0aa4710d9b1584af97d91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.501562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f53e56eb-ffdd-4d92-85a8-573f816b0ce3", "created": "2026-10-09T15:13:08.502141Z", "modified": "2026-10-09T15:13:08.502141Z", "relationship_type": "indicates", "source_ref": "indicator--046466b7-e62d-4ca1-85e7-a17e79b9a62e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0880d8d0-fb4c-4dd5-ad1d-45017f1ad16f", "created": "2026-10-09T15:13:08.502263Z", "modified": "2026-10-09T15:13:08.502263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9fe4ca74944e8f1375c8234a90dd1e7b0dd25b67b699983992eb80bceb9f7eab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.502263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53726f9c-51b8-4bd7-bf42-3a0147c804d7", "created": "2026-10-09T15:13:08.502855Z", "modified": "2026-10-09T15:13:08.502855Z", "relationship_type": "indicates", "source_ref": "indicator--0880d8d0-fb4c-4dd5-ad1d-45017f1ad16f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03041d6e-866c-4e3e-883b-659003dce13d", "created": "2026-10-09T15:13:08.502976Z", "modified": "2026-10-09T15:13:08.502976Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7e057a1d55e44db277968c5725fe20886578c60b68398c582f4a3694831b22a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.502976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a1f9a27-1b20-4f01-9b45-ef7f3e9af8ac", "created": "2026-10-09T15:13:08.503563Z", "modified": "2026-10-09T15:13:08.503563Z", "relationship_type": "indicates", "source_ref": "indicator--03041d6e-866c-4e3e-883b-659003dce13d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03316d4-831d-44f5-8e12-27480d0b80eb", "created": "2026-10-09T15:13:08.503681Z", "modified": "2026-10-09T15:13:08.503681Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81db1cb7204c77e48122e909b4d94ab1f099f858d88973def2a8be4fe7935673']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.503681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecf33de4-6a40-49ed-ac17-642bf6b64a12", "created": "2026-10-09T15:13:08.504263Z", "modified": "2026-10-09T15:13:08.504263Z", "relationship_type": "indicates", "source_ref": "indicator--e03316d4-831d-44f5-8e12-27480d0b80eb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42477556-3fca-4a18-941a-c324220aff20", "created": "2026-10-09T15:13:08.504391Z", "modified": "2026-10-09T15:13:08.504391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd547958fc63e09ebc1005b1fd4dfa047cdbe959fb2299f742fd9a3b971bfdef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.504391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cd8c095-76cd-48f7-b45b-7aa08def0b16", "created": "2026-10-09T15:13:08.50497Z", "modified": "2026-10-09T15:13:08.50497Z", "relationship_type": "indicates", "source_ref": "indicator--42477556-3fca-4a18-941a-c324220aff20", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59382d18-086a-4fd1-94d4-3f6b1c05d908", "created": "2026-10-09T15:13:08.50509Z", "modified": "2026-10-09T15:13:08.50509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5262b5a3fad36ff75049819c150a69043aae5e1dbcf25d065e70947c6e04c0b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.50509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b035e08a-0279-4445-b07c-fda4e8acfc64", "created": "2026-10-09T15:13:08.505795Z", "modified": "2026-10-09T15:13:08.505795Z", "relationship_type": "indicates", "source_ref": "indicator--59382d18-086a-4fd1-94d4-3f6b1c05d908", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7ebd5c-c7e3-49c2-a2a7-d21e38fad582", "created": "2026-10-09T15:13:08.505918Z", "modified": "2026-10-09T15:13:08.505918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54f22aa019b4b3ca72dbc26feb3c5fba4f7fd042b5e4c37da051e0e3bec269df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.505918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c61b6d0f-1be1-48cf-98f0-7ef849f6566f", "created": "2026-10-09T15:13:08.50653Z", "modified": "2026-10-09T15:13:08.50653Z", "relationship_type": "indicates", "source_ref": "indicator--9f7ebd5c-c7e3-49c2-a2a7-d21e38fad582", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a904bc-7daa-42fb-81ca-a22a9c262dfd", "created": "2026-10-09T15:13:08.506658Z", "modified": "2026-10-09T15:13:08.506658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a607b57949ecc77fc0a190e4e59ecaf3016cd08547cf4178d407b773433882a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.506658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d30f65c2-bb51-4b96-b83d-6b9e74072b23", "created": "2026-10-09T15:13:08.507236Z", "modified": "2026-10-09T15:13:08.507236Z", "relationship_type": "indicates", "source_ref": "indicator--49a904bc-7daa-42fb-81ca-a22a9c262dfd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0dc1a8-9f6f-46d0-8310-a2a3d260734b", "created": "2026-10-09T15:13:08.507368Z", "modified": "2026-10-09T15:13:08.507368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32838fe1604a25a4fbcb62954c976b84c68694d73020994de034550641743f13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.507368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfb8e74c-4da0-42f4-8028-9f09d648d43d", "created": "2026-10-09T15:13:08.507944Z", "modified": "2026-10-09T15:13:08.507944Z", "relationship_type": "indicates", "source_ref": "indicator--5e0dc1a8-9f6f-46d0-8310-a2a3d260734b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099237d9-4812-49e4-aeb9-454cd614f1c3", "created": "2026-10-09T15:13:08.508062Z", "modified": "2026-10-09T15:13:08.508062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51b8a4e1f9d0e89ca2aed1f5b204c3747133ab78d687ac2c7f123d9c8af44d97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.508062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32da4053-7780-4220-8d56-67870eac0d36", "created": "2026-10-09T15:13:08.508655Z", "modified": "2026-10-09T15:13:08.508655Z", "relationship_type": "indicates", "source_ref": "indicator--099237d9-4812-49e4-aeb9-454cd614f1c3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7dc281-37e6-48d2-8ee8-4390e9761e81", "created": "2026-10-09T15:13:08.508781Z", "modified": "2026-10-09T15:13:08.508781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='045dbed6efe8d7114edefd5792a9747c3650319d5ea9f8965dff6ba976e5222b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.508781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--feffec18-a7b0-41b0-b1f7-a3bbea2362b3", "created": "2026-10-09T15:13:08.509379Z", "modified": "2026-10-09T15:13:08.509379Z", "relationship_type": "indicates", "source_ref": "indicator--dc7dc281-37e6-48d2-8ee8-4390e9761e81", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcef8f5-f7be-48d7-8d47-4e2b1570be02", "created": "2026-10-09T15:13:08.5095Z", "modified": "2026-10-09T15:13:08.5095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fdcd295d0e0d2b30a02eae4d04db09a60b1dc4b0d4d512739621bb1f052acf95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.5095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6cbfe11-a229-4081-a677-9cda46f8e8ff", "created": "2026-10-09T15:13:08.510077Z", "modified": "2026-10-09T15:13:08.510077Z", "relationship_type": "indicates", "source_ref": "indicator--bdcef8f5-f7be-48d7-8d47-4e2b1570be02", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e10ba5a-a88b-46e5-a39c-d78ff815bbc7", "created": "2026-10-09T15:13:08.510193Z", "modified": "2026-10-09T15:13:08.510193Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7adacd626fed8a0498106978d8146206636dabc5fefa5120eb0af1f8e825246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.510193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--406581db-a14a-4467-be13-cf3e5c9c1052", "created": "2026-10-09T15:13:08.510783Z", "modified": "2026-10-09T15:13:08.510783Z", "relationship_type": "indicates", "source_ref": "indicator--0e10ba5a-a88b-46e5-a39c-d78ff815bbc7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df19b91d-0ae3-42a3-b514-5cb292ca9117", "created": "2026-10-09T15:13:08.5109Z", "modified": "2026-10-09T15:13:08.5109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c83a1e479806325df53a3076f31a2b368135501c76ddd2b00a013060dd170329']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.5109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96e59ea4-c857-41bc-9e10-889f1ea4776d", "created": "2026-10-09T15:13:08.511598Z", "modified": "2026-10-09T15:13:08.511598Z", "relationship_type": "indicates", "source_ref": "indicator--df19b91d-0ae3-42a3-b514-5cb292ca9117", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f24e50-fa98-4b3a-a381-926577180438", "created": "2026-10-09T15:13:08.511724Z", "modified": "2026-10-09T15:13:08.511724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55fd2cf034c6a28885eab9d0eb6299a0597031f2427352f4101c542d22e9896f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.511724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cc53026-bc4f-4116-81cd-3e10e138b10b", "created": "2026-10-09T15:13:08.512322Z", "modified": "2026-10-09T15:13:08.512322Z", "relationship_type": "indicates", "source_ref": "indicator--10f24e50-fa98-4b3a-a381-926577180438", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d44a171-00db-4f1f-ab6f-63f4eb7492dd", "created": "2026-10-09T15:13:08.512445Z", "modified": "2026-10-09T15:13:08.512445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bf9734c63208b788875eeeaa56c49c643c3cd545813d808acd557524003771a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.512445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7576ebda-2cbb-4f4c-8389-e4daf934205b", "created": "2026-10-09T15:13:08.513027Z", "modified": "2026-10-09T15:13:08.513027Z", "relationship_type": "indicates", "source_ref": "indicator--6d44a171-00db-4f1f-ab6f-63f4eb7492dd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f1d75d-e712-4b2b-a8ce-a0ac734dd37b", "created": "2026-10-09T15:13:08.513145Z", "modified": "2026-10-09T15:13:08.513145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3151b5918698e1c24f13b8a15a2355e398718049be0e26e2d5f7ba3cfff2109e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.513145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c4a242a-8fa0-440e-89ee-69bce342f961", "created": "2026-10-09T15:13:08.513745Z", "modified": "2026-10-09T15:13:08.513745Z", "relationship_type": "indicates", "source_ref": "indicator--f9f1d75d-e712-4b2b-a8ce-a0ac734dd37b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332029a2-448b-4ca9-9b68-7e879ac7e0fd", "created": "2026-10-09T15:13:08.513867Z", "modified": "2026-10-09T15:13:08.513867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd86f3dc604b8e2f3f97884c0630688e1f0848c301ebd8e20cabea25ff6083c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.513867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1819ea95-b3d9-460e-ad12-786a9c9eddaa", "created": "2026-10-09T15:13:08.514466Z", "modified": "2026-10-09T15:13:08.514466Z", "relationship_type": "indicates", "source_ref": "indicator--332029a2-448b-4ca9-9b68-7e879ac7e0fd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5951aa99-73b0-4aac-ae9c-b5042ed2d8ff", "created": "2026-10-09T15:13:08.514586Z", "modified": "2026-10-09T15:13:08.514586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='724faff6eb37b8fa5427ce708ade5052c85a034f709a942134c7d716a8b9507a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.514586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0031b3ef-f16c-406f-9dbe-dcc2f43a7be7", "created": "2026-10-09T15:13:08.515165Z", "modified": "2026-10-09T15:13:08.515165Z", "relationship_type": "indicates", "source_ref": "indicator--5951aa99-73b0-4aac-ae9c-b5042ed2d8ff", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9ae2c9-c815-4fc8-b2e0-602a951e370a", "created": "2026-10-09T15:13:08.515296Z", "modified": "2026-10-09T15:13:08.515296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f99cfd3990364cbad1d3c25363752a69c3a77b9ba9f30f292f2694becacf3474']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.515296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6db43278-2a9f-41c5-baf3-61c2a3676729", "created": "2026-10-09T15:13:08.515885Z", "modified": "2026-10-09T15:13:08.515885Z", "relationship_type": "indicates", "source_ref": "indicator--1c9ae2c9-c815-4fc8-b2e0-602a951e370a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9abf99-8174-40aa-855b-3440cf2d6f30", "created": "2026-10-09T15:13:08.516008Z", "modified": "2026-10-09T15:13:08.516008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b64c49f599ffac658ee97f49a33d35023857cecee92219604b3576b0c348a695']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.516008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c04c466a-4d51-4565-a67a-9d72f242b5f5", "created": "2026-10-09T15:13:08.516602Z", "modified": "2026-10-09T15:13:08.516602Z", "relationship_type": "indicates", "source_ref": "indicator--6e9abf99-8174-40aa-855b-3440cf2d6f30", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3924e307-faa9-4ae8-bec3-cbdf68625587", "created": "2026-10-09T15:13:08.516723Z", "modified": "2026-10-09T15:13:08.516723Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='753a87623aed19819a702657e2eba9304f93e126e425168dbf3e142a148f9090']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.516723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16817b79-eb27-41b1-bee3-9b3e742b12c0", "created": "2026-10-09T15:13:08.517311Z", "modified": "2026-10-09T15:13:08.517311Z", "relationship_type": "indicates", "source_ref": "indicator--3924e307-faa9-4ae8-bec3-cbdf68625587", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bde9136-0d8a-4a05-9753-e4e9d7da9ff8", "created": "2026-10-09T15:13:08.51743Z", "modified": "2026-10-09T15:13:08.51743Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d00d828ce3408b0ef59b17260c7e07efa4299faa1230dc6dd0bde0d3e77f4770']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.51743Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17adaa83-30fa-4452-a26b-7de04d9b3f20", "created": "2026-10-09T15:13:08.518113Z", "modified": "2026-10-09T15:13:08.518113Z", "relationship_type": "indicates", "source_ref": "indicator--7bde9136-0d8a-4a05-9753-e4e9d7da9ff8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32b6b50-f2f8-4938-866b-6392e1c9d999", "created": "2026-10-09T15:13:08.518233Z", "modified": "2026-10-09T15:13:08.518233Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dad31e95570ac4efa60361ea3aafb98374d969d27fa378388dfce68826622fd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.518233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e92b28b-e78c-4646-90fa-00acf54f5d67", "created": "2026-10-09T15:13:08.518826Z", "modified": "2026-10-09T15:13:08.518826Z", "relationship_type": "indicates", "source_ref": "indicator--b32b6b50-f2f8-4938-866b-6392e1c9d999", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d23a71-951c-4a1c-8ed3-2c0fffd824f6", "created": "2026-10-09T15:13:08.518944Z", "modified": "2026-10-09T15:13:08.518944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f45d484c1e7bf7b2d61ec07165308ce6cd94c4b071fa2af521f085928d8338a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.518944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c52c242-4903-442c-b207-e660e46837d7", "created": "2026-10-09T15:13:08.519614Z", "modified": "2026-10-09T15:13:08.519614Z", "relationship_type": "indicates", "source_ref": "indicator--95d23a71-951c-4a1c-8ed3-2c0fffd824f6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a7b6c8-1289-432a-8451-8b9c999a925f", "created": "2026-10-09T15:13:08.519747Z", "modified": "2026-10-09T15:13:08.519747Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c757e63dd664a4b453614aef1fd7a8a91c57b888018eee088f5308cffc735c4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.519747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fee2abb9-d7e5-48be-9b54-4490d83705b6", "created": "2026-10-09T15:13:08.520358Z", "modified": "2026-10-09T15:13:08.520358Z", "relationship_type": "indicates", "source_ref": "indicator--c0a7b6c8-1289-432a-8451-8b9c999a925f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290f809a-3e9e-48b1-be01-82a21393648f", "created": "2026-10-09T15:13:08.520486Z", "modified": "2026-10-09T15:13:08.520486Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0788826eee97e14f8d6a7e66c7f431ddfa26f391bbb91e038d914861cbf67362']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.520486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98f5be0f-3784-42e4-a392-d7b9e0c5b8a9", "created": "2026-10-09T15:13:08.521074Z", "modified": "2026-10-09T15:13:08.521074Z", "relationship_type": "indicates", "source_ref": "indicator--290f809a-3e9e-48b1-be01-82a21393648f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8921eb34-31a3-48b6-929f-26f156a379d7", "created": "2026-10-09T15:13:08.521195Z", "modified": "2026-10-09T15:13:08.521195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f28f2b3798527e8bede0aefe8764ce642668cac992445ca3db936c89666b45c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.521195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a49180b7-def9-4945-81c1-8dffe02fedbb", "created": "2026-10-09T15:13:08.521784Z", "modified": "2026-10-09T15:13:08.521784Z", "relationship_type": "indicates", "source_ref": "indicator--8921eb34-31a3-48b6-929f-26f156a379d7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52b8b68-8305-4dab-9cc4-7d1e45ddd870", "created": "2026-10-09T15:13:08.521902Z", "modified": "2026-10-09T15:13:08.521902Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='524df866d77cc37efd3aeddc925604fbba30166d8d94a3f812b781c8b33487cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.521902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cabec69e-3564-4ee1-813a-5217996c25a1", "created": "2026-10-09T15:13:08.522493Z", "modified": "2026-10-09T15:13:08.522493Z", "relationship_type": "indicates", "source_ref": "indicator--b52b8b68-8305-4dab-9cc4-7d1e45ddd870", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29aa5408-794c-4821-a823-744f9221bd38", "created": "2026-10-09T15:13:08.522614Z", "modified": "2026-10-09T15:13:08.522614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cfa8df61c08325b2e1e6efe652b69ccea19218972245787ea51ce1b1581d120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.522614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2603fa0-ceee-4317-a8eb-f7ab20756fd2", "created": "2026-10-09T15:13:08.523196Z", "modified": "2026-10-09T15:13:08.523196Z", "relationship_type": "indicates", "source_ref": "indicator--29aa5408-794c-4821-a823-744f9221bd38", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5a18e4-749f-451b-a52e-ab636b0a8035", "created": "2026-10-09T15:13:08.52333Z", "modified": "2026-10-09T15:13:08.52333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f91ba35434cbf21d149f9c96aaa9dd1658ab77499a67ff03d83e90c08da7b8a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.52333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54c32e37-6cfa-4dbb-b5b3-04aac97d2e57", "created": "2026-10-09T15:13:08.523917Z", "modified": "2026-10-09T15:13:08.523917Z", "relationship_type": "indicates", "source_ref": "indicator--7e5a18e4-749f-451b-a52e-ab636b0a8035", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e9963f-180f-4fbe-9d2e-b27949cce465", "created": "2026-10-09T15:13:08.524034Z", "modified": "2026-10-09T15:13:08.524034Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='524af3569fa5e4b588ce6f6ad710effa56eb20a9ec23ee842319411230dd4364']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.524034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56598cab-ef11-45aa-8446-6e12659520cb", "created": "2026-10-09T15:13:08.524856Z", "modified": "2026-10-09T15:13:08.524856Z", "relationship_type": "indicates", "source_ref": "indicator--c4e9963f-180f-4fbe-9d2e-b27949cce465", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd0dc48-d5dc-426a-b453-fdc3716ea8a2", "created": "2026-10-09T15:13:08.525001Z", "modified": "2026-10-09T15:13:08.525001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd8625f7b6e16c3cb8041b115fa85f8eadf42b1006d0c8e97b090c51b466463a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.525001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e52cc9c4-e028-4ef8-8bdb-722ab376ee35", "created": "2026-10-09T15:13:08.525631Z", "modified": "2026-10-09T15:13:08.525631Z", "relationship_type": "indicates", "source_ref": "indicator--2dd0dc48-d5dc-426a-b453-fdc3716ea8a2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd549d4-7fd8-4be5-b3ba-5f061b27d6cf", "created": "2026-10-09T15:13:08.525762Z", "modified": "2026-10-09T15:13:08.525762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0adeef7e841a90164e64476de3a10a895be5a1694228fdc4ebf9a9a4307a8e3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.525762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e843c672-a24d-492b-9ab5-c02c0189202c", "created": "2026-10-09T15:13:08.526365Z", "modified": "2026-10-09T15:13:08.526365Z", "relationship_type": "indicates", "source_ref": "indicator--ddd549d4-7fd8-4be5-b3ba-5f061b27d6cf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffaac373-133e-4546-9b9f-214f841a1fee", "created": "2026-10-09T15:13:08.526503Z", "modified": "2026-10-09T15:13:08.526503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b3191dc2ecc2ce78b29310f691279da41b5c26a5becf34da7a9fdc0db5c0d0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.526503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1307570-aaca-4cd3-8070-1ff6d25b95f9", "created": "2026-10-09T15:13:08.527088Z", "modified": "2026-10-09T15:13:08.527088Z", "relationship_type": "indicates", "source_ref": "indicator--ffaac373-133e-4546-9b9f-214f841a1fee", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7007dd-1717-47d2-8012-849399c65e41", "created": "2026-10-09T15:13:08.527215Z", "modified": "2026-10-09T15:13:08.527215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7285d57030e016bc0f4b428cb398a07b7578cc707227718eaf94abb5ac182464']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.527215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d83f7f1-78a3-4ae6-a95f-b9b6573c405a", "created": "2026-10-09T15:13:08.527836Z", "modified": "2026-10-09T15:13:08.527836Z", "relationship_type": "indicates", "source_ref": "indicator--4d7007dd-1717-47d2-8012-849399c65e41", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be0d05a-d3e7-4313-a28f-2b12322d4c2d", "created": "2026-10-09T15:13:08.527959Z", "modified": "2026-10-09T15:13:08.527959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2abe977cf1d77ebecb4d7525c0365dae9a937fa40a31dbde4962411406eb2a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.527959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a337a6a-800c-4bae-a7aa-07d209a962e9", "created": "2026-10-09T15:13:08.528564Z", "modified": "2026-10-09T15:13:08.528564Z", "relationship_type": "indicates", "source_ref": "indicator--0be0d05a-d3e7-4313-a28f-2b12322d4c2d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51641bd0-8013-4359-a2f0-fb5303b3bf8a", "created": "2026-10-09T15:13:08.528688Z", "modified": "2026-10-09T15:13:08.528688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc48f270d3e3f9f4fd027f93078329cbf6aa401acaa125eb22b50470178eae67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.528688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bf160f0-10ec-47f6-bf9d-ec4648cd6386", "created": "2026-10-09T15:13:08.529288Z", "modified": "2026-10-09T15:13:08.529288Z", "relationship_type": "indicates", "source_ref": "indicator--51641bd0-8013-4359-a2f0-fb5303b3bf8a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75946799-9809-4447-906a-3393d54769ca", "created": "2026-10-09T15:13:08.529419Z", "modified": "2026-10-09T15:13:08.529419Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9a42214d06b0ad5242d304df3cb0e10df345390e1fd06ed71e4209ce1dc6fc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.529419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46f7f2a3-2099-4799-b1b3-b3c8a1d51bd8", "created": "2026-10-09T15:13:08.530001Z", "modified": "2026-10-09T15:13:08.530001Z", "relationship_type": "indicates", "source_ref": "indicator--75946799-9809-4447-906a-3393d54769ca", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbffce4-1826-4c2b-8ddb-4785f0dbf472", "created": "2026-10-09T15:13:08.530122Z", "modified": "2026-10-09T15:13:08.530122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c15f907f3054806d87fa645cd9d0c45a49405679bf37c60a40482f7d1eafb971']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.530122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bba2145a-009d-4808-8afd-76fe5d872a25", "created": "2026-10-09T15:13:08.530829Z", "modified": "2026-10-09T15:13:08.530829Z", "relationship_type": "indicates", "source_ref": "indicator--cdbffce4-1826-4c2b-8ddb-4785f0dbf472", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09de835-4b96-49ac-9ad9-dbf4de3ff1fb", "created": "2026-10-09T15:13:08.530962Z", "modified": "2026-10-09T15:13:08.530962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccbccbfa79bb9e809139604d480a68117a9f23456b789009823cda0103b6825b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.530962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f27b1d52-7d89-413a-b7d6-4ee1a059923f", "created": "2026-10-09T15:13:08.531574Z", "modified": "2026-10-09T15:13:08.531574Z", "relationship_type": "indicates", "source_ref": "indicator--b09de835-4b96-49ac-9ad9-dbf4de3ff1fb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305b74eb-53f4-499e-866a-9b77975e8aa8", "created": "2026-10-09T15:13:08.531701Z", "modified": "2026-10-09T15:13:08.531701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='699ce42b7abd530c3bda8340a5f5d657f579e303b35d03affabd71eafab5b1d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.531701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e220918d-a1a8-49b2-b151-e4b09dd26806", "created": "2026-10-09T15:13:08.532302Z", "modified": "2026-10-09T15:13:08.532302Z", "relationship_type": "indicates", "source_ref": "indicator--305b74eb-53f4-499e-866a-9b77975e8aa8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a4e6f5-50e1-440a-a8ef-5368a2239c54", "created": "2026-10-09T15:13:08.532427Z", "modified": "2026-10-09T15:13:08.532427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cc8e89d78cfe3b3f86a1098c97c034cfd0a1198e7be4ca9094c13574fa459f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.532427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89a60980-07d4-45df-9de0-194ae820af00", "created": "2026-10-09T15:13:08.533008Z", "modified": "2026-10-09T15:13:08.533008Z", "relationship_type": "indicates", "source_ref": "indicator--d8a4e6f5-50e1-440a-a8ef-5368a2239c54", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8714e929-ea5e-4882-9b49-ac84ac48a675", "created": "2026-10-09T15:13:08.533128Z", "modified": "2026-10-09T15:13:08.533128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e27709930ec345c37ef1895787fbfeb1c86e68a6467a7e6c88c5ec730db8fbd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.533128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99e5e239-c481-4ad2-9a3e-853a1bc709ab", "created": "2026-10-09T15:13:08.533743Z", "modified": "2026-10-09T15:13:08.533743Z", "relationship_type": "indicates", "source_ref": "indicator--8714e929-ea5e-4882-9b49-ac84ac48a675", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d888965d-6297-43f6-b882-eb9f657ef5db", "created": "2026-10-09T15:13:08.533869Z", "modified": "2026-10-09T15:13:08.533869Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e3eba3ca72c9b614c535af39528c4a1d733e5a173282ab3dfb3a5e57964f23f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.533869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ac76b50-9c3b-42a8-8715-a6a300c5284f", "created": "2026-10-09T15:13:08.534481Z", "modified": "2026-10-09T15:13:08.534481Z", "relationship_type": "indicates", "source_ref": "indicator--d888965d-6297-43f6-b882-eb9f657ef5db", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19003428-37a0-4172-bbba-9cb0fb22d0ac", "created": "2026-10-09T15:13:08.534607Z", "modified": "2026-10-09T15:13:08.534607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e27be339a91a2d7fd28c18cd41ce53e701eb1adb7cb8aea5947b6733e3bbc425']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.534607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46a9e21e-6b7e-48b4-86e6-f229fb9ebfe7", "created": "2026-10-09T15:13:08.535199Z", "modified": "2026-10-09T15:13:08.535199Z", "relationship_type": "indicates", "source_ref": "indicator--19003428-37a0-4172-bbba-9cb0fb22d0ac", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c787f85-1099-4aff-9e26-6d7b64bc3dbd", "created": "2026-10-09T15:13:08.535331Z", "modified": "2026-10-09T15:13:08.535331Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd6f65c6f07323eb59ef998c80c2757bcb4fa553d140ab66fadfaab5e1d8c30c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.535331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c01eaba-19ab-4ba7-b2b3-3583d83fd9cb", "created": "2026-10-09T15:13:08.535915Z", "modified": "2026-10-09T15:13:08.535915Z", "relationship_type": "indicates", "source_ref": "indicator--4c787f85-1099-4aff-9e26-6d7b64bc3dbd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75aa6cdc-7899-42a0-b205-a1f3d6d17463", "created": "2026-10-09T15:13:08.536038Z", "modified": "2026-10-09T15:13:08.536038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d59b2545012211cb3495d00dc0571795aa4cedaef01afa6486746966695a1e01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.536038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bfb2c62-b128-4e9f-ba83-df2ff09b3fae", "created": "2026-10-09T15:13:08.536634Z", "modified": "2026-10-09T15:13:08.536634Z", "relationship_type": "indicates", "source_ref": "indicator--75aa6cdc-7899-42a0-b205-a1f3d6d17463", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bb13b8-cce2-4977-8796-6a4d02328b9c", "created": "2026-10-09T15:13:08.536754Z", "modified": "2026-10-09T15:13:08.536754Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1e8856fe99a67654c52b8a38f88f68e1c0225c87dac9c1a0c1b0620dd9c6665']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.536754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--497eddda-e554-4d94-91c6-fc0224f8f244", "created": "2026-10-09T15:13:08.537458Z", "modified": "2026-10-09T15:13:08.537458Z", "relationship_type": "indicates", "source_ref": "indicator--99bb13b8-cce2-4977-8796-6a4d02328b9c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3015b8-f9c3-44fc-bf02-e76fa7d82003", "created": "2026-10-09T15:13:08.537583Z", "modified": "2026-10-09T15:13:08.537583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0526b3b2640685d3210003f1dd39f6275636fd608550ed31026cdfd86de2285e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.537583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a965493-84c9-415a-b87b-4a56206e4a70", "created": "2026-10-09T15:13:08.538163Z", "modified": "2026-10-09T15:13:08.538163Z", "relationship_type": "indicates", "source_ref": "indicator--5a3015b8-f9c3-44fc-bf02-e76fa7d82003", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809180f2-beeb-4169-9357-ae479ad74e12", "created": "2026-10-09T15:13:08.538297Z", "modified": "2026-10-09T15:13:08.538297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b259d82ddf17aa08bef2e6bad1aa035de419f838c12ea97ee40e7606703057b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.538297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab819426-4fb4-4cf8-b36f-b2c9e960f330", "created": "2026-10-09T15:13:08.538879Z", "modified": "2026-10-09T15:13:08.538879Z", "relationship_type": "indicates", "source_ref": "indicator--809180f2-beeb-4169-9357-ae479ad74e12", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b765aed2-e3ea-4172-9bef-e6c2504d96f4", "created": "2026-10-09T15:13:08.538999Z", "modified": "2026-10-09T15:13:08.538999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4672bed8fde5726d081162e3364fa7512174641a097f8c7cb7f833ea4b12af0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.538999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a30c5b92-a116-413d-a3ea-650fd82923c2", "created": "2026-10-09T15:13:08.539588Z", "modified": "2026-10-09T15:13:08.539588Z", "relationship_type": "indicates", "source_ref": "indicator--b765aed2-e3ea-4172-9bef-e6c2504d96f4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6206cebd-3f20-4b3d-8184-41cba35c399a", "created": "2026-10-09T15:13:08.539709Z", "modified": "2026-10-09T15:13:08.539709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a12e74f9a737f630671d8e9501c2dcb1aaba451a3a516182bf5ea485e866a406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.539709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76f8e825-278c-4ea5-a51c-a273eba2bee3", "created": "2026-10-09T15:13:08.540291Z", "modified": "2026-10-09T15:13:08.540291Z", "relationship_type": "indicates", "source_ref": "indicator--6206cebd-3f20-4b3d-8184-41cba35c399a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2c24d0-5349-4938-aa09-5ac65e537628", "created": "2026-10-09T15:13:08.540416Z", "modified": "2026-10-09T15:13:08.540416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cfb6ac6b241953f1923721c24ca33dd44152bc0040403b5e304920f3cb73177d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.540416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4057ca3-6cf7-4f26-be3b-dd4aed73702a", "created": "2026-10-09T15:13:08.541007Z", "modified": "2026-10-09T15:13:08.541007Z", "relationship_type": "indicates", "source_ref": "indicator--5b2c24d0-5349-4938-aa09-5ac65e537628", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa3a11d-989c-48c2-ad11-4fecf004a46b", "created": "2026-10-09T15:13:08.541127Z", "modified": "2026-10-09T15:13:08.541127Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a8c1ced3e5b39f37804b16cc003ae8c3c6e460c14621f62864194699ffdb5a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.541127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f187ea8b-b05f-4ef8-bf66-257fa289e610", "created": "2026-10-09T15:13:08.541714Z", "modified": "2026-10-09T15:13:08.541714Z", "relationship_type": "indicates", "source_ref": "indicator--6aa3a11d-989c-48c2-ad11-4fecf004a46b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e946662a-919a-41ed-a68d-4bad5fb4200c", "created": "2026-10-09T15:13:08.541843Z", "modified": "2026-10-09T15:13:08.541843Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fca98daedd9ca31e37054d42f4da870fa2a08d716bf121435eee6dfef51c00fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.541843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f0f33e4-2234-4399-ae3d-d99029c8b472", "created": "2026-10-09T15:13:08.542434Z", "modified": "2026-10-09T15:13:08.542434Z", "relationship_type": "indicates", "source_ref": "indicator--e946662a-919a-41ed-a68d-4bad5fb4200c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91e5582-c317-45dc-a276-3f4a3a707f28", "created": "2026-10-09T15:13:08.542553Z", "modified": "2026-10-09T15:13:08.542553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d04da91ff25c46d7ab4d0da0c8ffe8d44345d91050e9e712527efcd652ed5568']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.542553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d87cb3f-fd46-4271-b3f6-1a645b6ea621", "created": "2026-10-09T15:13:08.543134Z", "modified": "2026-10-09T15:13:08.543134Z", "relationship_type": "indicates", "source_ref": "indicator--a91e5582-c317-45dc-a276-3f4a3a707f28", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f14eeb2-25c8-43c8-adc3-6ea49a0aac3c", "created": "2026-10-09T15:13:08.54325Z", "modified": "2026-10-09T15:13:08.54325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f081ec912cdde8bec68b9a2456bf44d978e1119448a475b32ec7bd2f78680c15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.54325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41bf7ce6-8f4f-4da5-a5f4-c13f416bd1bd", "created": "2026-10-09T15:13:08.543952Z", "modified": "2026-10-09T15:13:08.543952Z", "relationship_type": "indicates", "source_ref": "indicator--1f14eeb2-25c8-43c8-adc3-6ea49a0aac3c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f291eb01-ce40-44dd-9339-587f49fa9c57", "created": "2026-10-09T15:13:08.544075Z", "modified": "2026-10-09T15:13:08.544075Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3356441f12a687c976835c4513643413942d5f7a358f4d1dfb41077d105e2e13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.544075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b814e81f-ba8b-4062-85ef-db2b353a8407", "created": "2026-10-09T15:13:08.544672Z", "modified": "2026-10-09T15:13:08.544672Z", "relationship_type": "indicates", "source_ref": "indicator--f291eb01-ce40-44dd-9339-587f49fa9c57", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd0ed55-5c19-4a7c-8b07-7796bfb9f68f", "created": "2026-10-09T15:13:08.544796Z", "modified": "2026-10-09T15:13:08.544796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac97c96e4af1c501d3a14b262fb83c6c4979c0973c6f3b0c113434d8a5660aa0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.544796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea3c19f7-1362-4b86-a650-1ffe7671313a", "created": "2026-10-09T15:13:08.545389Z", "modified": "2026-10-09T15:13:08.545389Z", "relationship_type": "indicates", "source_ref": "indicator--bfd0ed55-5c19-4a7c-8b07-7796bfb9f68f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c436de7b-2456-4a0d-93cd-9d5127005e93", "created": "2026-10-09T15:13:08.54551Z", "modified": "2026-10-09T15:13:08.54551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='223e545e6c755f16fe6084a32b1e853e7ab1236fe485ebe66aaebba040e5765e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.54551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45376baf-c199-491e-92e0-ab5b74baf358", "created": "2026-10-09T15:13:08.54609Z", "modified": "2026-10-09T15:13:08.54609Z", "relationship_type": "indicates", "source_ref": "indicator--c436de7b-2456-4a0d-93cd-9d5127005e93", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef78b7f-11c9-44d6-a5e3-2d585770d5e2", "created": "2026-10-09T15:13:08.546217Z", "modified": "2026-10-09T15:13:08.546217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d3950ff132907afad5486bc56b2f6ed55ebd4253ddb8221053a0ba6ba27337a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.546217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a00f7a9-fec3-40fc-8769-5a509ca251c6", "created": "2026-10-09T15:13:08.54683Z", "modified": "2026-10-09T15:13:08.54683Z", "relationship_type": "indicates", "source_ref": "indicator--0ef78b7f-11c9-44d6-a5e3-2d585770d5e2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de400627-d77b-4ecd-8931-19d166e4b93e", "created": "2026-10-09T15:13:08.546951Z", "modified": "2026-10-09T15:13:08.546951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='718fa2b662fa30a2d1e56b61e9df1fb6173caad011a82b8678e6173f3c6421c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.546951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--448b4fae-d6c2-4653-b849-1c2ff049ac2b", "created": "2026-10-09T15:13:08.547536Z", "modified": "2026-10-09T15:13:08.547536Z", "relationship_type": "indicates", "source_ref": "indicator--de400627-d77b-4ecd-8931-19d166e4b93e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a5bc33-2c8c-4775-8383-97868772f4bb", "created": "2026-10-09T15:13:08.547656Z", "modified": "2026-10-09T15:13:08.547656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e5e5b84a9ad8663d8047d24202c2ea87ad8e235db1b2154aba181b0c8d35ea72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.547656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d212d41-9e44-497c-af2c-4b1a2a845f9e", "created": "2026-10-09T15:13:08.548236Z", "modified": "2026-10-09T15:13:08.548236Z", "relationship_type": "indicates", "source_ref": "indicator--23a5bc33-2c8c-4775-8383-97868772f4bb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8ad8d9-bf76-4d17-bdcf-ba43e22f28b2", "created": "2026-10-09T15:13:08.548364Z", "modified": "2026-10-09T15:13:08.548364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ec050ee12ad53b3a15c41c97f6a1728e1f1650249ce8049658ea33ca88ab9b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.548364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84750e03-d86e-4697-ac98-3e2a50473b14", "created": "2026-10-09T15:13:08.548951Z", "modified": "2026-10-09T15:13:08.548951Z", "relationship_type": "indicates", "source_ref": "indicator--1d8ad8d9-bf76-4d17-bdcf-ba43e22f28b2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c876e92-c73f-4611-a1d0-67bd17a50d58", "created": "2026-10-09T15:13:08.549067Z", "modified": "2026-10-09T15:13:08.549067Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a67b576ad92e821134e4fcf8050778cb6e087d68e1d7ca79146640200e51d2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.549067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f35ad410-506d-4332-98d0-b1b20d5984e7", "created": "2026-10-09T15:13:08.549758Z", "modified": "2026-10-09T15:13:08.549758Z", "relationship_type": "indicates", "source_ref": "indicator--6c876e92-c73f-4611-a1d0-67bd17a50d58", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31cc314-f264-449d-a0ca-d3378fa3e78f", "created": "2026-10-09T15:13:08.549887Z", "modified": "2026-10-09T15:13:08.549887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ddd84859b91f4170ab59f4e28565d5b265154848454ab80b09c2f71d6b3fc629']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.549887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e7f80e3-06b0-4326-ac7f-f572fde85b38", "created": "2026-10-09T15:13:08.550482Z", "modified": "2026-10-09T15:13:08.550482Z", "relationship_type": "indicates", "source_ref": "indicator--e31cc314-f264-449d-a0ca-d3378fa3e78f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3616e1dd-021e-44e3-ae7e-d383888e58ea", "created": "2026-10-09T15:13:08.550606Z", "modified": "2026-10-09T15:13:08.550606Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae73961e7c7f8a52c7e644443c3b205bca373897b21585ba9ed0e065e5e29edd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.550606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c152d24-408c-4739-83d9-83446d012da2", "created": "2026-10-09T15:13:08.551185Z", "modified": "2026-10-09T15:13:08.551185Z", "relationship_type": "indicates", "source_ref": "indicator--3616e1dd-021e-44e3-ae7e-d383888e58ea", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca74910a-cae8-4a14-84aa-920b5505d843", "created": "2026-10-09T15:13:08.551314Z", "modified": "2026-10-09T15:13:08.551314Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50356f65d9dc98996a5fad0775650c3a12625ab3cbe70a8bd827b1b0eadd7b47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.551314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c942df95-b916-4111-91a5-f0a3e7b0a238", "created": "2026-10-09T15:13:08.551894Z", "modified": "2026-10-09T15:13:08.551894Z", "relationship_type": "indicates", "source_ref": "indicator--ca74910a-cae8-4a14-84aa-920b5505d843", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6b2c9c-c9d5-45f3-859c-47fa14f0960a", "created": "2026-10-09T15:13:08.552011Z", "modified": "2026-10-09T15:13:08.552011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a720559890caf85bf1d5a33bbfba68c021627fbf3b8ae4b5b96a1a855fbc0012']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.552011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86b88681-88c7-49e8-8db7-6150dc3be9b4", "created": "2026-10-09T15:13:08.552591Z", "modified": "2026-10-09T15:13:08.552591Z", "relationship_type": "indicates", "source_ref": "indicator--2a6b2c9c-c9d5-45f3-859c-47fa14f0960a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15963cbd-8b71-40bf-8785-c262ddb20ff3", "created": "2026-10-09T15:13:08.552708Z", "modified": "2026-10-09T15:13:08.552708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29297bcb4245b25b6816a39e4dd28c7bf56377ea9fa4f189f285b774c82f45d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.552708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6975f512-0215-4f43-8c72-a3c684c65d52", "created": "2026-10-09T15:13:08.553295Z", "modified": "2026-10-09T15:13:08.553295Z", "relationship_type": "indicates", "source_ref": "indicator--15963cbd-8b71-40bf-8785-c262ddb20ff3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a58ea23-8fa6-4a7b-a5de-15c6ebd93c8c", "created": "2026-10-09T15:13:08.553415Z", "modified": "2026-10-09T15:13:08.553415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1ae0bcdda40444aba873715569b0f5fa4b6d7c95b16ed5bfefe058fe8f441fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.553415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--659cce03-00ea-442a-b2c4-13e01a920272", "created": "2026-10-09T15:13:08.553992Z", "modified": "2026-10-09T15:13:08.553992Z", "relationship_type": "indicates", "source_ref": "indicator--2a58ea23-8fa6-4a7b-a5de-15c6ebd93c8c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ce2dad-b784-4754-ab85-4e764abfe9a4", "created": "2026-10-09T15:13:08.554109Z", "modified": "2026-10-09T15:13:08.554109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bdddefe4af4d73d1fc6766214e57ca0e1fe329a1839530153b392129d337309a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.554109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7816c7d-837f-434d-9504-4eef70289ba3", "created": "2026-10-09T15:13:08.554697Z", "modified": "2026-10-09T15:13:08.554697Z", "relationship_type": "indicates", "source_ref": "indicator--a1ce2dad-b784-4754-ab85-4e764abfe9a4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ec9173-2aac-40be-8a49-20269fe1b84a", "created": "2026-10-09T15:13:08.554814Z", "modified": "2026-10-09T15:13:08.554814Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='543bd05ea4d3714d22fa7aaf5d6f9977d145cf1819b22c31c05e0e2b044b96d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.554814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--356f2b96-8c8a-427c-83ee-8a767541a850", "created": "2026-10-09T15:13:08.555402Z", "modified": "2026-10-09T15:13:08.555402Z", "relationship_type": "indicates", "source_ref": "indicator--78ec9173-2aac-40be-8a49-20269fe1b84a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bf2114-2fb9-453d-8e7b-3c25b8fded34", "created": "2026-10-09T15:13:08.555521Z", "modified": "2026-10-09T15:13:08.555521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d13d2f985603c3f5fa3ac266e6005b52c715e2a2ac70354227f123a1bdcb7d95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.555521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57f70c19-7b9f-4ced-98c8-29b098a2e656", "created": "2026-10-09T15:13:08.556193Z", "modified": "2026-10-09T15:13:08.556193Z", "relationship_type": "indicates", "source_ref": "indicator--58bf2114-2fb9-453d-8e7b-3c25b8fded34", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d1fdc4-81dd-4db8-bd13-ab7e3d575f05", "created": "2026-10-09T15:13:08.556364Z", "modified": "2026-10-09T15:13:08.556364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c684ed7da2abbb571cb74b6b71480ecebfeac61e94e91bd193392c2967360066']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.556364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a132e7b3-4681-4b4a-a922-6a315dffa63f", "created": "2026-10-09T15:13:08.556965Z", "modified": "2026-10-09T15:13:08.556965Z", "relationship_type": "indicates", "source_ref": "indicator--65d1fdc4-81dd-4db8-bd13-ab7e3d575f05", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cc5c3b-d752-4bc2-8820-18e89aeb555a", "created": "2026-10-09T15:13:08.557086Z", "modified": "2026-10-09T15:13:08.557086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11a554ff0257d93cad1e4060e53ca509416c2d290c7adc36acf0e2d811b121dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.557086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59842b8b-676c-4a82-a8d4-3cde9984f3b5", "created": "2026-10-09T15:13:08.557681Z", "modified": "2026-10-09T15:13:08.557681Z", "relationship_type": "indicates", "source_ref": "indicator--69cc5c3b-d752-4bc2-8820-18e89aeb555a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bb4370-3e13-4d3f-be5d-74355f5baef7", "created": "2026-10-09T15:13:08.557802Z", "modified": "2026-10-09T15:13:08.557802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83e798a1e85e5f624edfce5ac714e621b5444ce60334ac99f7fd61d801bbac2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.557802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b27b1c41-013f-4fff-b46d-d68477009db9", "created": "2026-10-09T15:13:08.558393Z", "modified": "2026-10-09T15:13:08.558393Z", "relationship_type": "indicates", "source_ref": "indicator--c5bb4370-3e13-4d3f-be5d-74355f5baef7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065f9ae3-7579-449a-998d-4d302896275e", "created": "2026-10-09T15:13:08.558515Z", "modified": "2026-10-09T15:13:08.558515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c63327fbf16551846d4b5b3bf787700ae56aed91d6abd516bd1e3973c31656b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.558515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2ff1891-058a-49ef-9ec9-352a72287851", "created": "2026-10-09T15:13:08.559092Z", "modified": "2026-10-09T15:13:08.559092Z", "relationship_type": "indicates", "source_ref": "indicator--065f9ae3-7579-449a-998d-4d302896275e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0660bdc-1255-4591-bb73-220cc52ebe3f", "created": "2026-10-09T15:13:08.559209Z", "modified": "2026-10-09T15:13:08.559209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba9a3e92ee2dc9026e0a7f78efd2867abccb396d2288f8d6b5a9647300a86ce5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.559209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4bb9277-747a-4944-91ed-901499bab2de", "created": "2026-10-09T15:13:08.559795Z", "modified": "2026-10-09T15:13:08.559795Z", "relationship_type": "indicates", "source_ref": "indicator--c0660bdc-1255-4591-bb73-220cc52ebe3f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74da14f7-63bd-4e38-b9ab-fd2d8a915992", "created": "2026-10-09T15:13:08.559914Z", "modified": "2026-10-09T15:13:08.559914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b99d650506eee927cc4ba14ed2a0892b2fdae27dc940c751e4dec47cdcf3a41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.559914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa83f50c-cefd-4f37-8246-404b945895d0", "created": "2026-10-09T15:13:08.560521Z", "modified": "2026-10-09T15:13:08.560521Z", "relationship_type": "indicates", "source_ref": "indicator--74da14f7-63bd-4e38-b9ab-fd2d8a915992", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9e78c6-ed44-4134-8dd4-73a657e04db7", "created": "2026-10-09T15:13:08.560644Z", "modified": "2026-10-09T15:13:08.560644Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='226ca797966b993320d76d9cb010f83bad574bed4f47ebe75340a7232111cbd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.560644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3224a3cf-f59b-4280-ad70-38471dd2325a", "created": "2026-10-09T15:13:08.561219Z", "modified": "2026-10-09T15:13:08.561219Z", "relationship_type": "indicates", "source_ref": "indicator--ec9e78c6-ed44-4134-8dd4-73a657e04db7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1481cbd0-e748-49f0-9de4-15c45a926882", "created": "2026-10-09T15:13:08.561347Z", "modified": "2026-10-09T15:13:08.561347Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f998294f5b5935b399d498124e117f2443384ec3214f7d262c4985d9665aa2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.561347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3379272-7527-485a-826a-27a59e8b2dd8", "created": "2026-10-09T15:13:08.561999Z", "modified": "2026-10-09T15:13:08.561999Z", "relationship_type": "indicates", "source_ref": "indicator--1481cbd0-e748-49f0-9de4-15c45a926882", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee8626c-a4c7-4837-a914-191f16512e9e", "created": "2026-10-09T15:13:08.56216Z", "modified": "2026-10-09T15:13:08.56216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5b706ddb8c7e71c8e782ee8f538bb300e120cd0ceaebdf7e2ddbbfc2370bde1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.56216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de8c1e0d-7d14-4e3e-b8f9-d320ee76a8a1", "created": "2026-10-09T15:13:08.563173Z", "modified": "2026-10-09T15:13:08.563173Z", "relationship_type": "indicates", "source_ref": "indicator--1ee8626c-a4c7-4837-a914-191f16512e9e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc55307-afac-40c1-9715-3f37aa8e8a08", "created": "2026-10-09T15:13:08.563311Z", "modified": "2026-10-09T15:13:08.563311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99335aa19f2e606eaa52b10600c0ae452d601aa3e87656f779718d436f2c526f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.563311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea4f643c-b9e3-46e8-b03e-7c56b95b2739", "created": "2026-10-09T15:13:08.563904Z", "modified": "2026-10-09T15:13:08.563904Z", "relationship_type": "indicates", "source_ref": "indicator--0bc55307-afac-40c1-9715-3f37aa8e8a08", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b908d782-38c7-4878-8791-f81487d050df", "created": "2026-10-09T15:13:08.564022Z", "modified": "2026-10-09T15:13:08.564022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18a5569e795b152ce3ad4a025877e85d2c1856660fc3a43baf4ba096066bbbb3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.564022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7a074a8-8719-42b2-905e-86ffd39ce784", "created": "2026-10-09T15:13:08.564616Z", "modified": "2026-10-09T15:13:08.564616Z", "relationship_type": "indicates", "source_ref": "indicator--b908d782-38c7-4878-8791-f81487d050df", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270bb8fe-3617-4db2-a8cd-f258deafdc02", "created": "2026-10-09T15:13:08.564737Z", "modified": "2026-10-09T15:13:08.564737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f785433251bf3b2c302904f0195b20cceb04ce35ba5cb0d1b2a9b1817a2f035']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.564737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19b10b15-3d77-4e03-8629-e613dbbad45d", "created": "2026-10-09T15:13:08.565334Z", "modified": "2026-10-09T15:13:08.565334Z", "relationship_type": "indicates", "source_ref": "indicator--270bb8fe-3617-4db2-a8cd-f258deafdc02", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0855d158-a3d9-4d32-b436-299995f4282a", "created": "2026-10-09T15:13:08.565457Z", "modified": "2026-10-09T15:13:08.565457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42554cc7d6a4887124366d6f9cc5e6530814d267d94413e8695bf9445af836e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.565457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--340e84b3-0a29-4d4a-816c-021b2611b827", "created": "2026-10-09T15:13:08.566039Z", "modified": "2026-10-09T15:13:08.566039Z", "relationship_type": "indicates", "source_ref": "indicator--0855d158-a3d9-4d32-b436-299995f4282a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c7899d-27b3-4760-a4ea-be15fe2e1fcf", "created": "2026-10-09T15:13:08.566159Z", "modified": "2026-10-09T15:13:08.566159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18fc525897872b2d222a72a33995ee75d8c5cfa6b48cadbea3c790184c9b6164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.566159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f0f47bc-a067-4381-ad11-9ba136f978f7", "created": "2026-10-09T15:13:08.566759Z", "modified": "2026-10-09T15:13:08.566759Z", "relationship_type": "indicates", "source_ref": "indicator--d8c7899d-27b3-4760-a4ea-be15fe2e1fcf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e6111a-3327-4641-8b6b-c2854a61c750", "created": "2026-10-09T15:13:08.566881Z", "modified": "2026-10-09T15:13:08.566881Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d6daac87a78fb0f4ef2a3b4c6d73a09b4ce62944527e5eb8a4d12bc9b7f5d11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.566881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50304d5b-98fe-4cfc-9b05-c968545c3c32", "created": "2026-10-09T15:13:08.567476Z", "modified": "2026-10-09T15:13:08.567476Z", "relationship_type": "indicates", "source_ref": "indicator--81e6111a-3327-4641-8b6b-c2854a61c750", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b053ab-62e5-4c9b-81f4-b7a9f8cce748", "created": "2026-10-09T15:13:08.567597Z", "modified": "2026-10-09T15:13:08.567597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='639b381f6f39a37363bd6ccae7b301957fe3f19b270b029f28bac4396d3c7f7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.567597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc1d4306-cd74-4164-86f2-286344b0c849", "created": "2026-10-09T15:13:08.568176Z", "modified": "2026-10-09T15:13:08.568176Z", "relationship_type": "indicates", "source_ref": "indicator--35b053ab-62e5-4c9b-81f4-b7a9f8cce748", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad70aada-e302-4553-88f2-6e344bb523f9", "created": "2026-10-09T15:13:08.568307Z", "modified": "2026-10-09T15:13:08.568307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06f211c6eb69d2a2a67232e4e04f7428aaa0f5a188b6d142d44b6bdf0286d906']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.568307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23ee5958-3f84-4ab1-97cf-92861520661b", "created": "2026-10-09T15:13:08.568902Z", "modified": "2026-10-09T15:13:08.568902Z", "relationship_type": "indicates", "source_ref": "indicator--ad70aada-e302-4553-88f2-6e344bb523f9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b818ce-ad4e-4910-b189-29d93e8e547e", "created": "2026-10-09T15:13:08.569024Z", "modified": "2026-10-09T15:13:08.569024Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e31a39111df67c06b224f42fff53ec12461209e80881c01e9450933f6cdd28a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.569024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12432aa0-79ed-40ed-87cf-7d88b05c88d4", "created": "2026-10-09T15:13:08.56974Z", "modified": "2026-10-09T15:13:08.56974Z", "relationship_type": "indicates", "source_ref": "indicator--f9b818ce-ad4e-4910-b189-29d93e8e547e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6503accb-c815-4c55-a034-d834ab2aa7d1", "created": "2026-10-09T15:13:08.569866Z", "modified": "2026-10-09T15:13:08.569866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d9a784f63c5b9e05597ca9b9804185f39cf6abb6506935f364d7ccbf63068d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.569866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e09184d-7a8c-4ca9-a9c3-47b30774eec0", "created": "2026-10-09T15:13:08.57046Z", "modified": "2026-10-09T15:13:08.57046Z", "relationship_type": "indicates", "source_ref": "indicator--6503accb-c815-4c55-a034-d834ab2aa7d1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4539800b-6875-4c2c-b778-51f3a8adfdb1", "created": "2026-10-09T15:13:08.570583Z", "modified": "2026-10-09T15:13:08.570583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa70144ffaa96c445e5880d9f87af81a64650e03371c94d34d5e876aa9150bad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.570583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5303052d-cbd0-492a-a665-6907b4c2b231", "created": "2026-10-09T15:13:08.571169Z", "modified": "2026-10-09T15:13:08.571169Z", "relationship_type": "indicates", "source_ref": "indicator--4539800b-6875-4c2c-b778-51f3a8adfdb1", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb9d496-1a8b-4e2e-9fd1-f2ab09c1b676", "created": "2026-10-09T15:13:08.571302Z", "modified": "2026-10-09T15:13:08.571302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac79c7fb883d898c3870daf08f7cd128b835032044592b5298eae69b72ca9d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.571302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f33a3407-40b7-441b-9b8e-58d8f16166ee", "created": "2026-10-09T15:13:08.571891Z", "modified": "2026-10-09T15:13:08.571891Z", "relationship_type": "indicates", "source_ref": "indicator--9bb9d496-1a8b-4e2e-9fd1-f2ab09c1b676", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5641dad4-f445-4c1d-bc21-c3308fd0106a", "created": "2026-10-09T15:13:08.572018Z", "modified": "2026-10-09T15:13:08.572018Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='994eec95771c8e2380f16516531eaeeeef3ab439c8d1f5f7751850d1d296e28a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.572018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d69100b1-636e-4881-90e6-4c063fd458f5", "created": "2026-10-09T15:13:08.572613Z", "modified": "2026-10-09T15:13:08.572613Z", "relationship_type": "indicates", "source_ref": "indicator--5641dad4-f445-4c1d-bc21-c3308fd0106a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c777a3d-42c1-42bd-96e6-eebb4ebbbe90", "created": "2026-10-09T15:13:08.572733Z", "modified": "2026-10-09T15:13:08.572733Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d042b2b4caaddafc486b03bdab231f3ec67240dc504a485a3e3ac889b2a00fb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.572733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f514d416-cdb3-413e-9b4a-0fa80edb87f5", "created": "2026-10-09T15:13:08.573322Z", "modified": "2026-10-09T15:13:08.573322Z", "relationship_type": "indicates", "source_ref": "indicator--5c777a3d-42c1-42bd-96e6-eebb4ebbbe90", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e9622a-cd57-478c-bd12-39dae76d0fec", "created": "2026-10-09T15:13:08.573448Z", "modified": "2026-10-09T15:13:08.573448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a2a06b7ae10ab12e2ab7c6e33a77fe589c181f71940a54beacb468cb5be3fde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.573448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--579b5f87-ab46-4dea-a8d6-72782b708e39", "created": "2026-10-09T15:13:08.574024Z", "modified": "2026-10-09T15:13:08.574024Z", "relationship_type": "indicates", "source_ref": "indicator--c0e9622a-cd57-478c-bd12-39dae76d0fec", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a6cf44-4944-40bc-afd2-23e2dfada811", "created": "2026-10-09T15:13:08.574142Z", "modified": "2026-10-09T15:13:08.574142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cab2e24ae2406117485eec11fb057911f880e83d86befb2e180b3b927854abf4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.574142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--827f63ea-20b5-4364-b448-f9e193e7c42b", "created": "2026-10-09T15:13:08.574744Z", "modified": "2026-10-09T15:13:08.574744Z", "relationship_type": "indicates", "source_ref": "indicator--13a6cf44-4944-40bc-afd2-23e2dfada811", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef37c9e-5d43-430e-bd94-56d1f9216b8f", "created": "2026-10-09T15:13:08.574867Z", "modified": "2026-10-09T15:13:08.574867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='419cb0e1201948ac271fa8fbac2941cf9e151bed304282e8099e6c4d078a3b80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.574867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1000f092-c027-4785-a402-c8563bd0aa44", "created": "2026-10-09T15:13:08.575459Z", "modified": "2026-10-09T15:13:08.575459Z", "relationship_type": "indicates", "source_ref": "indicator--5ef37c9e-5d43-430e-bd94-56d1f9216b8f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0adb71d0-d809-42f0-b3d6-2aca0f3e2407", "created": "2026-10-09T15:13:08.575579Z", "modified": "2026-10-09T15:13:08.575579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0fd27560aa05dc8372a29fe86fe80254b6e0b9eeb5a78092e47e74fb7d324ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.575579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51bfb28a-b661-4719-bfc0-2c791aeddd4a", "created": "2026-10-09T15:13:08.576287Z", "modified": "2026-10-09T15:13:08.576287Z", "relationship_type": "indicates", "source_ref": "indicator--0adb71d0-d809-42f0-b3d6-2aca0f3e2407", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcb7cdc-3ffe-4b3a-bb6c-67a8ea848b14", "created": "2026-10-09T15:13:08.576416Z", "modified": "2026-10-09T15:13:08.576416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5e808891660f8ee5f9da69c5a1f31d0da037aedfdb8d1ff746d005092fbb9e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.576416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4545e0fd-dc5f-4ffa-a0ad-544e4123d4a2", "created": "2026-10-09T15:13:08.57701Z", "modified": "2026-10-09T15:13:08.57701Z", "relationship_type": "indicates", "source_ref": "indicator--3fcb7cdc-3ffe-4b3a-bb6c-67a8ea848b14", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3dd8a5-b872-43a0-a8e1-e0d86652f1a6", "created": "2026-10-09T15:13:08.577136Z", "modified": "2026-10-09T15:13:08.577136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f182f0fdde80349a05b3d74c9cfc74fa728ae5f64221e3cfb1a509a3a32fdf9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.577136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--394825be-9ab5-4e39-836d-0a0572903880", "created": "2026-10-09T15:13:08.57773Z", "modified": "2026-10-09T15:13:08.57773Z", "relationship_type": "indicates", "source_ref": "indicator--7c3dd8a5-b872-43a0-a8e1-e0d86652f1a6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf6c6a5-9b19-4999-874a-bc915fda9c3a", "created": "2026-10-09T15:13:08.577861Z", "modified": "2026-10-09T15:13:08.577861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2ee84d4064ebbe9b453f1895cafefe9f9cd2b06985851888fcad796ad7b5328']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.577861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bf6953f-f93a-44d8-91a7-e9256ca9418d", "created": "2026-10-09T15:13:08.578463Z", "modified": "2026-10-09T15:13:08.578463Z", "relationship_type": "indicates", "source_ref": "indicator--edf6c6a5-9b19-4999-874a-bc915fda9c3a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b156a650-42c4-4892-8802-4ee4b745855b", "created": "2026-10-09T15:13:08.578588Z", "modified": "2026-10-09T15:13:08.578588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d545c204038fe6713adfce311daf1e2d7cd593a9de86b98a3219a018cac8527b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.578588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d72530ab-14e6-4c4f-901c-8436ff7d19b3", "created": "2026-10-09T15:13:08.579173Z", "modified": "2026-10-09T15:13:08.579173Z", "relationship_type": "indicates", "source_ref": "indicator--b156a650-42c4-4892-8802-4ee4b745855b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8ec6d0-9809-4ace-affe-aea2f3546bdf", "created": "2026-10-09T15:13:08.579324Z", "modified": "2026-10-09T15:13:08.579324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d12579ac49a2d46028e36ecda6fc577ba3c5b37c0e9ae2b73d1853206d99e6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.579324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94754759-34e4-40e0-8c0e-bc9b241f04f7", "created": "2026-10-09T15:13:08.579921Z", "modified": "2026-10-09T15:13:08.579921Z", "relationship_type": "indicates", "source_ref": "indicator--fd8ec6d0-9809-4ace-affe-aea2f3546bdf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49be483e-0253-416a-b72c-36fb60173e5e", "created": "2026-10-09T15:13:08.58004Z", "modified": "2026-10-09T15:13:08.58004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3f972d1d64d5cecb2acf637d3ff89a60d9ddfcb27f47ce2dff565e64a9af83f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.58004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--190770d7-b7fc-47d8-b192-41f94a9cd158", "created": "2026-10-09T15:13:08.580638Z", "modified": "2026-10-09T15:13:08.580638Z", "relationship_type": "indicates", "source_ref": "indicator--49be483e-0253-416a-b72c-36fb60173e5e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4974101-7cf3-4f9c-a113-c0b8a6dbd026", "created": "2026-10-09T15:13:08.580762Z", "modified": "2026-10-09T15:13:08.580762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62020cab3c7249c75fe111922eacb7719fa88687abf4651aa57eb1d82d80bc06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.580762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d75c64a-1d01-47e3-8b53-afd6a3e7a4e0", "created": "2026-10-09T15:13:08.581351Z", "modified": "2026-10-09T15:13:08.581351Z", "relationship_type": "indicates", "source_ref": "indicator--f4974101-7cf3-4f9c-a113-c0b8a6dbd026", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd2f032-aa21-4952-8f20-24295ecf2cb5", "created": "2026-10-09T15:13:08.581474Z", "modified": "2026-10-09T15:13:08.581474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f73a6c83c2fd73ab166a8e09e67181286a91523091a67214914e2d1499ea92cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.581474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84dd1e38-82fb-4d7d-8710-43cdb49e1d8f", "created": "2026-10-09T15:13:08.58216Z", "modified": "2026-10-09T15:13:08.58216Z", "relationship_type": "indicates", "source_ref": "indicator--4dd2f032-aa21-4952-8f20-24295ecf2cb5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57113951-1a30-4182-b5b3-15ec0f990a8d", "created": "2026-10-09T15:13:08.582295Z", "modified": "2026-10-09T15:13:08.582295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e8efb2e0a97d9d454b0a8165376e3e36a5005cec7a5e3addaa3b2edf9d5b1c9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.582295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15580a3e-971c-411d-98ad-ad9d53d57e24", "created": "2026-10-09T15:13:08.582881Z", "modified": "2026-10-09T15:13:08.582881Z", "relationship_type": "indicates", "source_ref": "indicator--57113951-1a30-4182-b5b3-15ec0f990a8d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06df06e4-3e83-47c7-9d80-fa799b0889a9", "created": "2026-10-09T15:13:08.583002Z", "modified": "2026-10-09T15:13:08.583002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='336ad026ec37fe12db2fd1709a7a9244573445235891440acafe5b2a259909df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.583002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a73881f4-d67f-472e-afe0-424a054fa235", "created": "2026-10-09T15:13:08.583598Z", "modified": "2026-10-09T15:13:08.583598Z", "relationship_type": "indicates", "source_ref": "indicator--06df06e4-3e83-47c7-9d80-fa799b0889a9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69501a92-fcaa-473f-b043-ab3ca7ffc524", "created": "2026-10-09T15:13:08.583722Z", "modified": "2026-10-09T15:13:08.583722Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc432a27cdc691fb1a17e4b2de559428e1b5a7623a598e512abf55511cb05ec2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.583722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7095a522-906e-426b-bfd2-dcffca9b1333", "created": "2026-10-09T15:13:08.584321Z", "modified": "2026-10-09T15:13:08.584321Z", "relationship_type": "indicates", "source_ref": "indicator--69501a92-fcaa-473f-b043-ab3ca7ffc524", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bd320d-e4f9-4aba-b81d-e4d4a62a16d9", "created": "2026-10-09T15:13:08.584446Z", "modified": "2026-10-09T15:13:08.584446Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b96d4c161d465d8dd094c3753b37e041f5da9dd56c81be049d26105988719b87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.584446Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a38378dc-931b-4a6b-a883-ac0826218797", "created": "2026-10-09T15:13:08.585035Z", "modified": "2026-10-09T15:13:08.585035Z", "relationship_type": "indicates", "source_ref": "indicator--61bd320d-e4f9-4aba-b81d-e4d4a62a16d9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb0c64f-2a93-4162-a205-69dbe3297281", "created": "2026-10-09T15:13:08.585155Z", "modified": "2026-10-09T15:13:08.585155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a96795ed6820823c95e436b788dea5e5c58c7f199d56d454b6fd6b53d827afbb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.585155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fddc7674-ec2d-41ef-84ec-bfe843e0235f", "created": "2026-10-09T15:13:08.585759Z", "modified": "2026-10-09T15:13:08.585759Z", "relationship_type": "indicates", "source_ref": "indicator--8bb0c64f-2a93-4162-a205-69dbe3297281", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b1d443-d9c4-470c-b28a-c6b2228f4894", "created": "2026-10-09T15:13:08.58588Z", "modified": "2026-10-09T15:13:08.58588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e544d7335a66ed9b369e386f2bed975e82458ee8a0ca05648cec8aef3ad4f9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.58588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8eb00ea3-f453-4f45-971c-2e1d3028f5d5", "created": "2026-10-09T15:13:08.586478Z", "modified": "2026-10-09T15:13:08.586478Z", "relationship_type": "indicates", "source_ref": "indicator--23b1d443-d9c4-470c-b28a-c6b2228f4894", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074e4fd2-d959-4491-aefd-288432a68ac0", "created": "2026-10-09T15:13:08.586601Z", "modified": "2026-10-09T15:13:08.586601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='862028c4a32ab57bcf0568f3fde03b5c2640a53a9deb524f8229a16b135e6e37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.586601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a840d00-45ed-4b42-aceb-0f5c0fd9462e", "created": "2026-10-09T15:13:08.587177Z", "modified": "2026-10-09T15:13:08.587177Z", "relationship_type": "indicates", "source_ref": "indicator--074e4fd2-d959-4491-aefd-288432a68ac0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bf8246-19ee-4007-b6e4-6ca894458d97", "created": "2026-10-09T15:13:08.58731Z", "modified": "2026-10-09T15:13:08.58731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91225a5b66c878d5b706445d344c3d67093a30e99045afdb60b9ef3603dda4fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.58731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef443f93-fd03-495d-8524-bdff91eb9240", "created": "2026-10-09T15:13:08.58789Z", "modified": "2026-10-09T15:13:08.58789Z", "relationship_type": "indicates", "source_ref": "indicator--72bf8246-19ee-4007-b6e4-6ca894458d97", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b146924f-0ea9-4293-9c08-d0765a792a36", "created": "2026-10-09T15:13:08.588007Z", "modified": "2026-10-09T15:13:08.588007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1347d735453d810dbe3218aff637b817aee17667f7dfb309987d130231fca77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.588007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fc76281-2d20-4a37-b8f3-4e51862927ef", "created": "2026-10-09T15:13:08.588712Z", "modified": "2026-10-09T15:13:08.588712Z", "relationship_type": "indicates", "source_ref": "indicator--b146924f-0ea9-4293-9c08-d0765a792a36", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c981c952-d9d9-47bd-aaf6-5ec0d9a0c90d", "created": "2026-10-09T15:13:08.588839Z", "modified": "2026-10-09T15:13:08.588839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54ecd62b661446f31f8dee39820753996a7723bb66bdcaa834eac4bff7501614']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.588839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dcf93ee-c220-4466-b389-63b58e8567cd", "created": "2026-10-09T15:13:08.589448Z", "modified": "2026-10-09T15:13:08.589448Z", "relationship_type": "indicates", "source_ref": "indicator--c981c952-d9d9-47bd-aaf6-5ec0d9a0c90d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07e441c-b557-4226-a04c-fe16ce41c5b5", "created": "2026-10-09T15:13:08.589572Z", "modified": "2026-10-09T15:13:08.589572Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2bce478bea2fcbd3b62d177d1e3b081425eb1fbf7e5abd1d14a5058a0c85aeff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.589572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a295d54e-fab4-43e1-84ed-530e8befffb9", "created": "2026-10-09T15:13:08.590166Z", "modified": "2026-10-09T15:13:08.590166Z", "relationship_type": "indicates", "source_ref": "indicator--c07e441c-b557-4226-a04c-fe16ce41c5b5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0a227b-aceb-4416-ae31-1a6249c67fbd", "created": "2026-10-09T15:13:08.590302Z", "modified": "2026-10-09T15:13:08.590302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c812869a56a60cd946493d5db98b8a3c7c28e2a292781f056491b97cbe36f7da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.590302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10ab21d1-094a-44b0-9f44-80629cfc1c2a", "created": "2026-10-09T15:13:08.590889Z", "modified": "2026-10-09T15:13:08.590889Z", "relationship_type": "indicates", "source_ref": "indicator--db0a227b-aceb-4416-ae31-1a6249c67fbd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d08ea0-0040-458a-8ea0-76d71af241a5", "created": "2026-10-09T15:13:08.591013Z", "modified": "2026-10-09T15:13:08.591013Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80f9df9a1e2127d59c39e456110ef80692c4c427905c69afecabff33121a97f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.591013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b4cb0de-0364-418a-986a-05d46844ec88", "created": "2026-10-09T15:13:08.591606Z", "modified": "2026-10-09T15:13:08.591606Z", "relationship_type": "indicates", "source_ref": "indicator--54d08ea0-0040-458a-8ea0-76d71af241a5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f310ac4-021e-4343-9623-940c4303bd51", "created": "2026-10-09T15:13:08.591728Z", "modified": "2026-10-09T15:13:08.591728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20e41685aede18ac396138bd7a3fe44c77662ac64f54b36f0f5c6a218f714900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.591728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8445fa60-327f-4872-8ab0-b51a116e5e2a", "created": "2026-10-09T15:13:08.592335Z", "modified": "2026-10-09T15:13:08.592335Z", "relationship_type": "indicates", "source_ref": "indicator--5f310ac4-021e-4343-9623-940c4303bd51", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8926e7ca-ea81-4a28-89f7-0b0fbfbdc12b", "created": "2026-10-09T15:13:08.592455Z", "modified": "2026-10-09T15:13:08.592455Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab2b281e6e6c3ac75e187b2c759ce4c4a99b2035358edd905ca3336fa9faceba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.592455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b9d982b-5d67-4441-a874-f42421a55602", "created": "2026-10-09T15:13:08.59303Z", "modified": "2026-10-09T15:13:08.59303Z", "relationship_type": "indicates", "source_ref": "indicator--8926e7ca-ea81-4a28-89f7-0b0fbfbdc12b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080f1c97-c5c0-494e-983b-4fc639a15b07", "created": "2026-10-09T15:13:08.593147Z", "modified": "2026-10-09T15:13:08.593147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='163197ba35235b114d769b54f4603d9e525878b6bd74155ce94be3c7309864aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.593147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5994bf7-cae8-4b92-8b6f-aa8dd5d212fa", "created": "2026-10-09T15:13:08.593733Z", "modified": "2026-10-09T15:13:08.593733Z", "relationship_type": "indicates", "source_ref": "indicator--080f1c97-c5c0-494e-983b-4fc639a15b07", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f33182-7260-4c96-b0a9-264e4138bb9c", "created": "2026-10-09T15:13:08.593853Z", "modified": "2026-10-09T15:13:08.593853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='16c816230036f45ce7f0e6639700ffd2539205f4e5a01fe4f303f6e30b7ca913']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.593853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf0020a0-9210-4630-892a-0b3de005e22e", "created": "2026-10-09T15:13:08.594441Z", "modified": "2026-10-09T15:13:08.594441Z", "relationship_type": "indicates", "source_ref": "indicator--c2f33182-7260-4c96-b0a9-264e4138bb9c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfee999-a4ef-4c1d-8895-634493f9a137", "created": "2026-10-09T15:13:08.59456Z", "modified": "2026-10-09T15:13:08.59456Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3b561950e2bd1f5067564a0ce25e4d1818ab525bc98caa72c608d27a2782f19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.59456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36a2e8a9-6ce7-48d2-ba8d-3d7a0cea7474", "created": "2026-10-09T15:13:08.59524Z", "modified": "2026-10-09T15:13:08.59524Z", "relationship_type": "indicates", "source_ref": "indicator--5bfee999-a4ef-4c1d-8895-634493f9a137", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221387ef-384c-482e-9822-dbdfe4439a11", "created": "2026-10-09T15:13:08.595373Z", "modified": "2026-10-09T15:13:08.595373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f815c969f0fb27bbe77453245d0f4a7bcae246222c03ea838f1cc6525dec97c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.595373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1eb6bd9c-7596-4bb8-a743-8cc42d560da8", "created": "2026-10-09T15:13:08.595961Z", "modified": "2026-10-09T15:13:08.595961Z", "relationship_type": "indicates", "source_ref": "indicator--221387ef-384c-482e-9822-dbdfe4439a11", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6861ce-bfc8-47db-8d31-c9f70de0b348", "created": "2026-10-09T15:13:08.596084Z", "modified": "2026-10-09T15:13:08.596084Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eacaad8a2088d8abb000e1b65bde80f19c5e2b0483107334ffffadef46f00b05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.596084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d31fc9f2-576d-46ba-89e5-d18e7e6ff4f7", "created": "2026-10-09T15:13:08.596678Z", "modified": "2026-10-09T15:13:08.596678Z", "relationship_type": "indicates", "source_ref": "indicator--cb6861ce-bfc8-47db-8d31-c9f70de0b348", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2875caa-112d-4a9d-9307-2aeacc78c677", "created": "2026-10-09T15:13:08.596798Z", "modified": "2026-10-09T15:13:08.596798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e07b9d72556de869075ad4f8d53db8df3ff643b67aaf7ae116cdcf99c04ea81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.596798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2aecd18c-47b0-4c45-8ddb-476eb0e4158b", "created": "2026-10-09T15:13:08.597391Z", "modified": "2026-10-09T15:13:08.597391Z", "relationship_type": "indicates", "source_ref": "indicator--a2875caa-112d-4a9d-9307-2aeacc78c677", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6033e546-d4d6-46d1-ba27-9d5621e51f4a", "created": "2026-10-09T15:13:08.597512Z", "modified": "2026-10-09T15:13:08.597512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27c36d4b59c1cfcf99eb565895b7a28ddc509a3025ab89f972a66b6fed2aad2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.597512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3bc7911-8204-4839-82a2-a7ce84e85852", "created": "2026-10-09T15:13:08.598091Z", "modified": "2026-10-09T15:13:08.598091Z", "relationship_type": "indicates", "source_ref": "indicator--6033e546-d4d6-46d1-ba27-9d5621e51f4a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddd1843-53dc-4874-8480-b7e1d85eba51", "created": "2026-10-09T15:13:08.598208Z", "modified": "2026-10-09T15:13:08.598208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='867be4489b9132523406c75471d9db006f2233c2b0830f989759212b0d565098']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.598208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37a26101-8229-4121-a7a6-cc9c331c65b2", "created": "2026-10-09T15:13:08.598806Z", "modified": "2026-10-09T15:13:08.598806Z", "relationship_type": "indicates", "source_ref": "indicator--cddd1843-53dc-4874-8480-b7e1d85eba51", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f519866-8027-488d-945a-529bb0634a0e", "created": "2026-10-09T15:13:08.598929Z", "modified": "2026-10-09T15:13:08.598929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fdcd969c4fcb6fe3607b557a7294882cb61da3464cf980165da75c853a8168e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.598929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46fe2283-04aa-401b-bf90-693e0e010341", "created": "2026-10-09T15:13:08.599527Z", "modified": "2026-10-09T15:13:08.599527Z", "relationship_type": "indicates", "source_ref": "indicator--5f519866-8027-488d-945a-529bb0634a0e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ecbf83-b406-4a12-9f09-3a957dcd9ee9", "created": "2026-10-09T15:13:08.599658Z", "modified": "2026-10-09T15:13:08.599658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b64eb769554584940fdfda2c762e02878f6cf6ab1554936c5f330446abe4b76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.599658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--748a0a52-b1c1-4b25-9f65-e1c8f4133193", "created": "2026-10-09T15:13:08.600239Z", "modified": "2026-10-09T15:13:08.600239Z", "relationship_type": "indicates", "source_ref": "indicator--78ecbf83-b406-4a12-9f09-3a957dcd9ee9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ea6210-c90b-474c-bc75-f5ff29084a19", "created": "2026-10-09T15:13:08.600371Z", "modified": "2026-10-09T15:13:08.600371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c7f6d583fbf2136d167c4fb68473e4e7bcb372dca8f64143383a37f2d38a542']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.600371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c553102-514c-45b1-9879-c4fef0a7ee4b", "created": "2026-10-09T15:13:08.601056Z", "modified": "2026-10-09T15:13:08.601056Z", "relationship_type": "indicates", "source_ref": "indicator--26ea6210-c90b-474c-bc75-f5ff29084a19", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876e1639-35fa-41fa-9fb2-917e3e325131", "created": "2026-10-09T15:13:08.601182Z", "modified": "2026-10-09T15:13:08.601182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c58c0dda52ee07a2b5f27b4d3ef398d4b4aba6ca41acd78d1ac7f59f6dfbab47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.601182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41d02c3e-5fae-4b87-832d-cf734b71af6c", "created": "2026-10-09T15:13:08.601781Z", "modified": "2026-10-09T15:13:08.601781Z", "relationship_type": "indicates", "source_ref": "indicator--876e1639-35fa-41fa-9fb2-917e3e325131", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7c6665-ca83-4d25-9b36-a5ee103b0ea8", "created": "2026-10-09T15:13:08.601901Z", "modified": "2026-10-09T15:13:08.601901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0245f3665a8377758fed31259cde989e313215d89bc3082f3fcbefaccd6cff41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.601901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d15f1d5-eacc-4c35-8e0c-f95259dff0ab", "created": "2026-10-09T15:13:08.602495Z", "modified": "2026-10-09T15:13:08.602495Z", "relationship_type": "indicates", "source_ref": "indicator--5f7c6665-ca83-4d25-9b36-a5ee103b0ea8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b334ed-9ce7-44d1-a046-91f3d6bcb753", "created": "2026-10-09T15:13:08.602619Z", "modified": "2026-10-09T15:13:08.602619Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38cdde1c18ed0afe6ee2a54d119e258af88489efed57acd27b1ddc591d5d1ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.602619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52042549-9be3-474e-a311-5195f86f87c7", "created": "2026-10-09T15:13:08.603217Z", "modified": "2026-10-09T15:13:08.603217Z", "relationship_type": "indicates", "source_ref": "indicator--89b334ed-9ce7-44d1-a046-91f3d6bcb753", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa936eb-e267-442f-885e-ce2248de846a", "created": "2026-10-09T15:13:08.603351Z", "modified": "2026-10-09T15:13:08.603351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f0233c220be53c06ad6a57b74fcc09359efc3fc15f1ce15fa7bf83ec42d364e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.603351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdba0184-aaea-4a27-8f5f-cc5bd552da95", "created": "2026-10-09T15:13:08.60394Z", "modified": "2026-10-09T15:13:08.60394Z", "relationship_type": "indicates", "source_ref": "indicator--7fa936eb-e267-442f-885e-ce2248de846a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39fece70-8349-4706-bbff-b63910a1a53b", "created": "2026-10-09T15:13:08.604059Z", "modified": "2026-10-09T15:13:08.604059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0630edcf1dfd83ee9cef3bc4995c938967a920a130bcbd31aa6d31371374c644']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.604059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3919146-622c-4eac-aa88-6ee1bf89db48", "created": "2026-10-09T15:13:08.604653Z", "modified": "2026-10-09T15:13:08.604653Z", "relationship_type": "indicates", "source_ref": "indicator--39fece70-8349-4706-bbff-b63910a1a53b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9184b707-3ecd-45a6-94b9-037f099ccadd", "created": "2026-10-09T15:13:08.604773Z", "modified": "2026-10-09T15:13:08.604773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ca0bb6eab07356d5b349b38dbadecca9d7e6532f657a5e68a68575427852599']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.604773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea5f7f15-b01b-43b7-b330-4bea100cdec1", "created": "2026-10-09T15:13:08.605369Z", "modified": "2026-10-09T15:13:08.605369Z", "relationship_type": "indicates", "source_ref": "indicator--9184b707-3ecd-45a6-94b9-037f099ccadd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4fdd51-0b36-4a44-850d-a1b47c6dc949", "created": "2026-10-09T15:13:08.605491Z", "modified": "2026-10-09T15:13:08.605491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da609d990b861f153a314724ba33f8f537f93a2c1f737b58750d180bccc21e8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.605491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1eca6cb3-04de-46ff-8145-307a077e73cf", "created": "2026-10-09T15:13:08.606075Z", "modified": "2026-10-09T15:13:08.606075Z", "relationship_type": "indicates", "source_ref": "indicator--ed4fdd51-0b36-4a44-850d-a1b47c6dc949", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0daeba-a1cd-4422-92cf-006f42c10e9d", "created": "2026-10-09T15:13:08.606195Z", "modified": "2026-10-09T15:13:08.606195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bb25e2fc328cb7b0c229347bc6fe7bfd627bd172f7a6840992805225d8a54edb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.606195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c447aed1-94a2-4193-817b-1d70567652fa", "created": "2026-10-09T15:13:08.606798Z", "modified": "2026-10-09T15:13:08.606798Z", "relationship_type": "indicates", "source_ref": "indicator--8f0daeba-a1cd-4422-92cf-006f42c10e9d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0df6241-3548-4fbb-aa4a-cdcbc2e8ef3d", "created": "2026-10-09T15:13:08.606916Z", "modified": "2026-10-09T15:13:08.606916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f695107e1981a75474100002d87a20ae34c30c142228aa38bc31462aea13d27b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.606916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf70c9e3-3afe-464d-9eb5-3b75719aa19c", "created": "2026-10-09T15:13:08.607635Z", "modified": "2026-10-09T15:13:08.607635Z", "relationship_type": "indicates", "source_ref": "indicator--c0df6241-3548-4fbb-aa4a-cdcbc2e8ef3d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438598a3-b1e1-4829-bf68-8288d9fb0908", "created": "2026-10-09T15:13:08.60776Z", "modified": "2026-10-09T15:13:08.60776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3000bff31d917fecef13878f29f4ac56d8fc7e8ef8b16c8d5bd9e96f1af7c114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.60776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ae1ba95-1f0b-4b28-a3f3-45a04f2ecb79", "created": "2026-10-09T15:13:08.60836Z", "modified": "2026-10-09T15:13:08.60836Z", "relationship_type": "indicates", "source_ref": "indicator--438598a3-b1e1-4829-bf68-8288d9fb0908", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f45e261-8211-4f26-9e7d-40d9faa4da63", "created": "2026-10-09T15:13:08.60848Z", "modified": "2026-10-09T15:13:08.60848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b8a7fcd8c68111efa1df0cf350fba4e0a21f4cc2fbde52e30e6b12951b8f81f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.60848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61944656-1aaf-4903-a9af-178ad2c35907", "created": "2026-10-09T15:13:08.60906Z", "modified": "2026-10-09T15:13:08.60906Z", "relationship_type": "indicates", "source_ref": "indicator--1f45e261-8211-4f26-9e7d-40d9faa4da63", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f449de6-8627-4037-9b72-7d907afe6cdd", "created": "2026-10-09T15:13:08.609176Z", "modified": "2026-10-09T15:13:08.609176Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f8d2daf00a328692e488c91b1a67f9e9b1c4e144ed2aed59a98167877b314bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.609176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73267735-b531-49e5-8c02-2ca9afa7a010", "created": "2026-10-09T15:13:08.609766Z", "modified": "2026-10-09T15:13:08.609766Z", "relationship_type": "indicates", "source_ref": "indicator--7f449de6-8627-4037-9b72-7d907afe6cdd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da393aa5-7081-484d-b987-bb5c472d3dc5", "created": "2026-10-09T15:13:08.60989Z", "modified": "2026-10-09T15:13:08.60989Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7303f1cdb0e7c31dfc46c3372c5c68cb2729907471cb40b939f31f9a03e6cac0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.60989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11ce6160-0821-4a56-a265-be224d971b74", "created": "2026-10-09T15:13:08.610483Z", "modified": "2026-10-09T15:13:08.610483Z", "relationship_type": "indicates", "source_ref": "indicator--da393aa5-7081-484d-b987-bb5c472d3dc5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94708cc8-a64d-4748-bd18-c03189e134ba", "created": "2026-10-09T15:13:08.610609Z", "modified": "2026-10-09T15:13:08.610609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2da71f32dc715accdd317c86497700b4b23c1c647964b6b6c9d0c57652a233ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.610609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f82df76-b992-4732-b52b-f2bed8b7b160", "created": "2026-10-09T15:13:08.611191Z", "modified": "2026-10-09T15:13:08.611191Z", "relationship_type": "indicates", "source_ref": "indicator--94708cc8-a64d-4748-bd18-c03189e134ba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ae9a22-4a31-4f77-9598-b7b52e6142c4", "created": "2026-10-09T15:13:08.611327Z", "modified": "2026-10-09T15:13:08.611327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa80342368e0865d15b9c2edde5ec01906e1e97920e1b68c4fdbeb462a45dfe0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.611327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d10c78b-0b97-4a23-93ba-b04273b95738", "created": "2026-10-09T15:13:08.611916Z", "modified": "2026-10-09T15:13:08.611916Z", "relationship_type": "indicates", "source_ref": "indicator--83ae9a22-4a31-4f77-9598-b7b52e6142c4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200a1942-1bdd-495b-8d62-9700b768da2c", "created": "2026-10-09T15:13:08.612038Z", "modified": "2026-10-09T15:13:08.612038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b8dab7393d0d157147fe5db1968b567d5a0ec0ccd817ce1095971fef8915264']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.612038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74f58b46-dc99-498b-b0bb-90a5fbdf0272", "created": "2026-10-09T15:13:08.61264Z", "modified": "2026-10-09T15:13:08.61264Z", "relationship_type": "indicates", "source_ref": "indicator--200a1942-1bdd-495b-8d62-9700b768da2c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc143a5d-1e79-4b1e-9146-dfb633c26f4f", "created": "2026-10-09T15:13:08.61276Z", "modified": "2026-10-09T15:13:08.61276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e98bc2b678968aa61c839a991d7f09020a0627fbcf4d1caadb7546867a707084']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.61276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae92f1a8-dcd1-4079-82f0-9d1511252047", "created": "2026-10-09T15:13:08.613351Z", "modified": "2026-10-09T15:13:08.613351Z", "relationship_type": "indicates", "source_ref": "indicator--bc143a5d-1e79-4b1e-9146-dfb633c26f4f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9b7337-fea0-4490-be3b-badd7cf4c9cd", "created": "2026-10-09T15:13:08.613471Z", "modified": "2026-10-09T15:13:08.613471Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9f237a83c0e6dd3f8570fa686bb62960054a6f48776e91ca669e266ca53bec4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.613471Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5d7bbb9-e8c1-4b49-8437-62d412f8aaa4", "created": "2026-10-09T15:13:08.614161Z", "modified": "2026-10-09T15:13:08.614161Z", "relationship_type": "indicates", "source_ref": "indicator--4c9b7337-fea0-4490-be3b-badd7cf4c9cd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24898f58-e81b-4424-a455-2fcb1e623adf", "created": "2026-10-09T15:13:08.614292Z", "modified": "2026-10-09T15:13:08.614292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd8e6c537d8ddddea5f8f079efe255f5859b422fad0926c9eb4f3c04276d90ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.614292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d56a9ab-83fe-479c-b086-b87cdf10076f", "created": "2026-10-09T15:13:08.614884Z", "modified": "2026-10-09T15:13:08.614884Z", "relationship_type": "indicates", "source_ref": "indicator--24898f58-e81b-4424-a455-2fcb1e623adf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe5c3a1-05f8-4f8c-bddb-45272615d1ba", "created": "2026-10-09T15:13:08.615006Z", "modified": "2026-10-09T15:13:08.615006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04d505bd81905f606f65bdbb3abe26a88ac1b17ea687b564b9f9c6c71140115b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.615006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b302af6-0fb3-4079-9715-b43351e367e0", "created": "2026-10-09T15:13:08.615608Z", "modified": "2026-10-09T15:13:08.615608Z", "relationship_type": "indicates", "source_ref": "indicator--bfe5c3a1-05f8-4f8c-bddb-45272615d1ba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd9abbd-cdbf-44a1-b09d-912136a5e7fc", "created": "2026-10-09T15:13:08.615729Z", "modified": "2026-10-09T15:13:08.615729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bb2c39ec7dce3e1f30c1dbf55e5662f421adf968f3be7018b0c7946f1304a65b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.615729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8061be4-ce91-4ed8-8cff-5ddf69166261", "created": "2026-10-09T15:13:08.616323Z", "modified": "2026-10-09T15:13:08.616323Z", "relationship_type": "indicates", "source_ref": "indicator--ebd9abbd-cdbf-44a1-b09d-912136a5e7fc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f37d1de-623e-4865-ade7-bbe79a9e4020", "created": "2026-10-09T15:13:08.616449Z", "modified": "2026-10-09T15:13:08.616449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f9859e63c70b637ea5000a2095e6c9d3d929b0e59f0ffabb063444bf4e7de82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.616449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0755cde6-cbba-4794-a71a-27d3bcd4fd88", "created": "2026-10-09T15:13:08.617029Z", "modified": "2026-10-09T15:13:08.617029Z", "relationship_type": "indicates", "source_ref": "indicator--0f37d1de-623e-4865-ade7-bbe79a9e4020", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b2c799-8578-40f8-a6bd-71589010f400", "created": "2026-10-09T15:13:08.617152Z", "modified": "2026-10-09T15:13:08.617152Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f062bd7d159f1d9f692b1205b48b59f5cc3ec844e1167af0dcace13236a05b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.617152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeba927d-63f4-4003-9910-d34b97e5bd82", "created": "2026-10-09T15:13:08.617763Z", "modified": "2026-10-09T15:13:08.617763Z", "relationship_type": "indicates", "source_ref": "indicator--36b2c799-8578-40f8-a6bd-71589010f400", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42583c31-7d18-4f4d-8883-cff3e8c9aade", "created": "2026-10-09T15:13:08.617885Z", "modified": "2026-10-09T15:13:08.617885Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d84275666bce9e4d4addea5db756708aa689276b465e80e366e4e3d87059d41a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.617885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1161188-a8b7-4684-98aa-0ca799dca00f", "created": "2026-10-09T15:13:08.618469Z", "modified": "2026-10-09T15:13:08.618469Z", "relationship_type": "indicates", "source_ref": "indicator--42583c31-7d18-4f4d-8883-cff3e8c9aade", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d0f071-9e94-4102-a8fb-fd73f29f07cc", "created": "2026-10-09T15:13:08.61859Z", "modified": "2026-10-09T15:13:08.61859Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='384a6d337ff3615143d5915207051b13603e843d25508a62993bb889321bda1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.61859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d99c3ea6-e0f4-4e3d-a3d4-1a21f5ad256e", "created": "2026-10-09T15:13:08.619179Z", "modified": "2026-10-09T15:13:08.619179Z", "relationship_type": "indicates", "source_ref": "indicator--f5d0f071-9e94-4102-a8fb-fd73f29f07cc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed229f40-c34c-4f0a-bbd2-ca098317c294", "created": "2026-10-09T15:13:08.619316Z", "modified": "2026-10-09T15:13:08.619316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a8df497302602515f23edd51ee23de5fd86810e91797e8e796f05b39aef7597']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.619316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86f0b94a-33a5-477a-8115-1dd743e44ac1", "created": "2026-10-09T15:13:08.620003Z", "modified": "2026-10-09T15:13:08.620003Z", "relationship_type": "indicates", "source_ref": "indicator--ed229f40-c34c-4f0a-bbd2-ca098317c294", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730b6546-0670-46e0-abde-54ea8d42dec3", "created": "2026-10-09T15:13:08.620131Z", "modified": "2026-10-09T15:13:08.620131Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3d5224e78aa075da25d4407e8f56c1dca4bde8a42d5fb850dab2f40440217dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.620131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9489f17-6edf-4cfc-b2d5-f1e0ed23fc0a", "created": "2026-10-09T15:13:08.62076Z", "modified": "2026-10-09T15:13:08.62076Z", "relationship_type": "indicates", "source_ref": "indicator--730b6546-0670-46e0-abde-54ea8d42dec3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dc890e-c3dd-43c9-bcca-daabd05b72f0", "created": "2026-10-09T15:13:08.620888Z", "modified": "2026-10-09T15:13:08.620888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48f50083d3ceb26776bc8b8196b5ca0b174ba090a7800ff1501332363a5d7a12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.620888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bef6dba2-7018-4bb1-8dd6-a4488b593cc0", "created": "2026-10-09T15:13:08.621492Z", "modified": "2026-10-09T15:13:08.621492Z", "relationship_type": "indicates", "source_ref": "indicator--12dc890e-c3dd-43c9-bcca-daabd05b72f0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51475882-5750-4b6e-809c-c950bdd73e5f", "created": "2026-10-09T15:13:08.621615Z", "modified": "2026-10-09T15:13:08.621615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6d19159d1d34cd01a248d5f74f11d30641b7e5ccf6aae49e88be0695276b0ba8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.621615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd27cccb-db4a-4e1e-92c3-8de4b8857015", "created": "2026-10-09T15:13:08.622193Z", "modified": "2026-10-09T15:13:08.622193Z", "relationship_type": "indicates", "source_ref": "indicator--51475882-5750-4b6e-809c-c950bdd73e5f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0f8f3e-9a84-4cef-953b-074000415a7d", "created": "2026-10-09T15:13:08.622324Z", "modified": "2026-10-09T15:13:08.622324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b75c8da86b2280c41551eaa2729b4a2678ba07aadf5bd858b1144543e4e0dc86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.622324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--678eaeec-de8b-47bc-85ca-4bab328ed4a1", "created": "2026-10-09T15:13:08.622908Z", "modified": "2026-10-09T15:13:08.622908Z", "relationship_type": "indicates", "source_ref": "indicator--0e0f8f3e-9a84-4cef-953b-074000415a7d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8e7bbf-76e7-4b05-a011-693e21dff6b0", "created": "2026-10-09T15:13:08.623027Z", "modified": "2026-10-09T15:13:08.623027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='25eeebb1afa4e2e69d38c82cd7bd7e858f96660c5ac4f7de180ff3195b78b35d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.623027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f071cd2-024f-4d6e-a4a4-8af062f8c4a1", "created": "2026-10-09T15:13:08.623624Z", "modified": "2026-10-09T15:13:08.623624Z", "relationship_type": "indicates", "source_ref": "indicator--ae8e7bbf-76e7-4b05-a011-693e21dff6b0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b457802-74fc-4a08-90bc-620c8b74f4f6", "created": "2026-10-09T15:13:08.623746Z", "modified": "2026-10-09T15:13:08.623746Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ec259e0de00dbcca2817907aef55fb41bd94b918bc629889a92d7cb710094a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.623746Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fcfec87-f82b-4a61-910c-a2f46efb01c3", "created": "2026-10-09T15:13:08.624335Z", "modified": "2026-10-09T15:13:08.624335Z", "relationship_type": "indicates", "source_ref": "indicator--7b457802-74fc-4a08-90bc-620c8b74f4f6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71505cf-62ef-442c-9f67-ac8ab7c93082", "created": "2026-10-09T15:13:08.624456Z", "modified": "2026-10-09T15:13:08.624456Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='719ab7f46fc5de5c49b7a04a36adb2010d04ce75d627d4444031225786f7ab14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.624456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--329ee120-2988-4013-8c2d-581faa4287a4", "created": "2026-10-09T15:13:08.625038Z", "modified": "2026-10-09T15:13:08.625038Z", "relationship_type": "indicates", "source_ref": "indicator--c71505cf-62ef-442c-9f67-ac8ab7c93082", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4232b1-655f-4c96-875f-f4a19fd9e4cf", "created": "2026-10-09T15:13:08.62516Z", "modified": "2026-10-09T15:13:08.62516Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52f3e09a1fac75a1c2ca1c667367b9a80bfec3dc8c0c395fa129935196e929c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.62516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0c075ec-07ad-4226-aa52-b1a2ebee7ddf", "created": "2026-10-09T15:13:08.625761Z", "modified": "2026-10-09T15:13:08.625761Z", "relationship_type": "indicates", "source_ref": "indicator--3e4232b1-655f-4c96-875f-f4a19fd9e4cf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b07a689-169b-4c20-8738-842b52a075ee", "created": "2026-10-09T15:13:08.625889Z", "modified": "2026-10-09T15:13:08.625889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c26855167ec5089bc21eb6ec582706bfd822ebecb9d423141740cd15ae64f83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.625889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcfd6aa8-a073-4070-9b5c-2822a785a9f3", "created": "2026-10-09T15:13:08.626595Z", "modified": "2026-10-09T15:13:08.626595Z", "relationship_type": "indicates", "source_ref": "indicator--2b07a689-169b-4c20-8738-842b52a075ee", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21523427-9f39-47bc-94eb-7d437a19eefa", "created": "2026-10-09T15:13:08.626719Z", "modified": "2026-10-09T15:13:08.626719Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c3cbc565510f9d30b09941925d2327b8dd72e8c0de46d27792819daa03d4714']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.626719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--699e1a41-e524-4d7f-bae5-5eeb71b5501e", "created": "2026-10-09T15:13:08.627317Z", "modified": "2026-10-09T15:13:08.627317Z", "relationship_type": "indicates", "source_ref": "indicator--21523427-9f39-47bc-94eb-7d437a19eefa", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe5f61f-10a1-4542-be5f-2dbadaee6c42", "created": "2026-10-09T15:13:08.627438Z", "modified": "2026-10-09T15:13:08.627438Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bac5836ab104b431f70887bfbaaf277c4bff24408d6a34d3b214e0318b375cc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.627438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c201b19f-a57e-4725-884b-dbc2fcc18c9d", "created": "2026-10-09T15:13:08.628022Z", "modified": "2026-10-09T15:13:08.628022Z", "relationship_type": "indicates", "source_ref": "indicator--cfe5f61f-10a1-4542-be5f-2dbadaee6c42", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cdf5ca-8af5-494f-88ab-2ed72a954295", "created": "2026-10-09T15:13:08.628141Z", "modified": "2026-10-09T15:13:08.628141Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e25964805c4c29f01331e2547ff568a1b1124debbae0b3bc84ad22b8aaf38132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.628141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13248e6a-91d4-4270-bb5e-0aacb1da26dc", "created": "2026-10-09T15:13:08.628737Z", "modified": "2026-10-09T15:13:08.628737Z", "relationship_type": "indicates", "source_ref": "indicator--f9cdf5ca-8af5-494f-88ab-2ed72a954295", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8b81b5-bdd2-4686-8ce5-fc57a1639bdf", "created": "2026-10-09T15:13:08.62886Z", "modified": "2026-10-09T15:13:08.62886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf01c02d795c2077c200311c4ab6b000ec74559cf9017a54d767e36fb26e3a41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.62886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cca04e6-8350-4d91-a52d-ff15c0e022fa", "created": "2026-10-09T15:13:08.629465Z", "modified": "2026-10-09T15:13:08.629465Z", "relationship_type": "indicates", "source_ref": "indicator--3a8b81b5-bdd2-4686-8ce5-fc57a1639bdf", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135911d6-dc0b-461a-a34b-e1095f0b3fe7", "created": "2026-10-09T15:13:08.629588Z", "modified": "2026-10-09T15:13:08.629588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='764beec56787acf2aa462edfea6c56782f4e278cd641d22e89996349cc502103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.629588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e4445d3-5cd7-44d6-964b-8525acfa6325", "created": "2026-10-09T15:13:08.630171Z", "modified": "2026-10-09T15:13:08.630171Z", "relationship_type": "indicates", "source_ref": "indicator--135911d6-dc0b-461a-a34b-e1095f0b3fe7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952d51ed-a8ee-45b9-813a-0004123d7b7b", "created": "2026-10-09T15:13:08.630307Z", "modified": "2026-10-09T15:13:08.630307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d2cc5342f65d13d66f179bad47356fe6de3cce08b92f97a52d5f36b7fdcf4b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.630307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3c70012-9927-4b4e-85fb-ccaa9aeb7740", "created": "2026-10-09T15:13:08.630907Z", "modified": "2026-10-09T15:13:08.630907Z", "relationship_type": "indicates", "source_ref": "indicator--952d51ed-a8ee-45b9-813a-0004123d7b7b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8093a002-954f-405d-84ea-3c1a4268d324", "created": "2026-10-09T15:13:08.631026Z", "modified": "2026-10-09T15:13:08.631026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a84d2fa5fc444434a4145a4e7969f0d900311b6af2bcc6bf6b2b2878dd63194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.631026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1904d7a-0f06-4ad7-a1b7-b39392848c91", "created": "2026-10-09T15:13:08.631621Z", "modified": "2026-10-09T15:13:08.631621Z", "relationship_type": "indicates", "source_ref": "indicator--8093a002-954f-405d-84ea-3c1a4268d324", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75fbe2c-794c-437d-81cd-cba9d961b254", "created": "2026-10-09T15:13:08.631741Z", "modified": "2026-10-09T15:13:08.631741Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6346a454eeafde43b606b0a615034e57a49cc79c8564f351e9aa87890d96a670']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.631741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e0bcd1-779f-4b91-9ed2-167c7e7ba025", "created": "2026-10-09T15:13:08.63233Z", "modified": "2026-10-09T15:13:08.63233Z", "relationship_type": "indicates", "source_ref": "indicator--e75fbe2c-794c-437d-81cd-cba9d961b254", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698a0382-bd0d-4d12-9b20-d3e2bb09d936", "created": "2026-10-09T15:13:08.632461Z", "modified": "2026-10-09T15:13:08.632461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12f34d14d25a3fe519621343588dbfd17cac7180b276e77aecfb46b4e2140eb8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.632461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df749272-e49f-4471-8ed5-97469b540bf9", "created": "2026-10-09T15:13:08.633154Z", "modified": "2026-10-09T15:13:08.633154Z", "relationship_type": "indicates", "source_ref": "indicator--698a0382-bd0d-4d12-9b20-d3e2bb09d936", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b6146d-2166-4fc5-84e9-ec74552c3541", "created": "2026-10-09T15:13:08.633285Z", "modified": "2026-10-09T15:13:08.633285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c59cdf11196bfc860cbd6da9ceec71c94c83d9af227922854ff4233022a37e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.633285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53f71597-686c-4882-b359-777db1e07b8e", "created": "2026-10-09T15:13:08.633871Z", "modified": "2026-10-09T15:13:08.633871Z", "relationship_type": "indicates", "source_ref": "indicator--19b6146d-2166-4fc5-84e9-ec74552c3541", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a5f64f-8527-4df8-8bff-c7344ade92dc", "created": "2026-10-09T15:13:08.633988Z", "modified": "2026-10-09T15:13:08.633988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df068984b6f190b40db3ce276de6374c2ede3b8c335bdc6215914089d70cc436']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.633988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac4982f7-6748-40d3-bf2b-aee5c7df5673", "created": "2026-10-09T15:13:08.634576Z", "modified": "2026-10-09T15:13:08.634576Z", "relationship_type": "indicates", "source_ref": "indicator--18a5f64f-8527-4df8-8bff-c7344ade92dc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6805642-a320-497e-b5a7-02713512a11a", "created": "2026-10-09T15:13:08.634695Z", "modified": "2026-10-09T15:13:08.634695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be0a23b7a7bc0fcc326d5f649db64bab09efdc150704586235af66dad9e6f0f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.634695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c06904b7-e9cd-49a3-a0f9-a00f20590844", "created": "2026-10-09T15:13:08.635283Z", "modified": "2026-10-09T15:13:08.635283Z", "relationship_type": "indicates", "source_ref": "indicator--b6805642-a320-497e-b5a7-02713512a11a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ca8f1d-2f81-49c4-99ed-3c0c57061792", "created": "2026-10-09T15:13:08.635402Z", "modified": "2026-10-09T15:13:08.635402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='238f7954871661c1647e0b9f7946b3bfcd058c0dd3678d80afa7ff050442f279']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.635402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f181266-1e72-497a-9de9-b9ab68933c2c", "created": "2026-10-09T15:13:08.635978Z", "modified": "2026-10-09T15:13:08.635978Z", "relationship_type": "indicates", "source_ref": "indicator--c6ca8f1d-2f81-49c4-99ed-3c0c57061792", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d48697c-3062-4c65-9422-ab3fabc7a188", "created": "2026-10-09T15:13:08.636093Z", "modified": "2026-10-09T15:13:08.636093Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3431bbb0a073c4529a869d0453d8284e3d684cf7e16cad947fac90dcf2513023']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.636093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f454a307-5962-4db7-9c28-81a63317019a", "created": "2026-10-09T15:13:08.63668Z", "modified": "2026-10-09T15:13:08.63668Z", "relationship_type": "indicates", "source_ref": "indicator--6d48697c-3062-4c65-9422-ab3fabc7a188", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c839dc3-32b7-408d-b05c-13c7afc5f2eb", "created": "2026-10-09T15:13:08.636798Z", "modified": "2026-10-09T15:13:08.636798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6a99920c4155147f9d76900fbcd7cd827ae924b2f1c4d4c04944167831361be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.636798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d040d5f-4304-4a7d-a272-49264a0cb23b", "created": "2026-10-09T15:13:08.637376Z", "modified": "2026-10-09T15:13:08.637376Z", "relationship_type": "indicates", "source_ref": "indicator--4c839dc3-32b7-408d-b05c-13c7afc5f2eb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49100539-f5b4-4784-9609-2b54d20bbdcd", "created": "2026-10-09T15:13:08.637501Z", "modified": "2026-10-09T15:13:08.637501Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04feea6f12083462adac1b4f4eb034e8e8d095090c52169b0057a59360208e2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.637501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbd04977-c1b1-4da9-be46-5dd35d9ece66", "created": "2026-10-09T15:13:08.63808Z", "modified": "2026-10-09T15:13:08.63808Z", "relationship_type": "indicates", "source_ref": "indicator--49100539-f5b4-4784-9609-2b54d20bbdcd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5a6b01-d699-4e48-92ff-e47ecea97f8f", "created": "2026-10-09T15:13:08.6382Z", "modified": "2026-10-09T15:13:08.6382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d948848bfc8f4dc82a1553f7a3c69ae201e4814b9dfd04092a315a4bb04d3435']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.6382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccabe337-ddf7-4a82-9331-7f201415e5f7", "created": "2026-10-09T15:13:08.63923Z", "modified": "2026-10-09T15:13:08.63923Z", "relationship_type": "indicates", "source_ref": "indicator--dd5a6b01-d699-4e48-92ff-e47ecea97f8f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6256e8-6169-4519-b970-1c1afa57576c", "created": "2026-10-09T15:13:08.639385Z", "modified": "2026-10-09T15:13:08.639385Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fc32c9192cf58e323bfa7bdf3980f267b1602789e38c929900d9d946622f557']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.639385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c807ec7c-229b-4f03-b7ae-f1b477d314cb", "created": "2026-10-09T15:13:08.639978Z", "modified": "2026-10-09T15:13:08.639978Z", "relationship_type": "indicates", "source_ref": "indicator--6b6256e8-6169-4519-b970-1c1afa57576c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95cf477-5886-44c5-a676-4d4efb52e3c7", "created": "2026-10-09T15:13:08.6401Z", "modified": "2026-10-09T15:13:08.6401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c5d95ffe5860dce230e821645ff1fd5aa79723802fd2f8e2221801aa07d29a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.6401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--311c0b0c-ae03-47cf-ba40-38c312acbe82", "created": "2026-10-09T15:13:08.640697Z", "modified": "2026-10-09T15:13:08.640697Z", "relationship_type": "indicates", "source_ref": "indicator--f95cf477-5886-44c5-a676-4d4efb52e3c7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3db02c9-c519-43c1-9ab9-d23375555d3c", "created": "2026-10-09T15:13:08.64082Z", "modified": "2026-10-09T15:13:08.64082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75251236c63561fc188aba70e59fe9cf0456308df52838b203e9acefa9e87479']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.64082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--722c5c8f-40c0-4389-8c29-d17726b75614", "created": "2026-10-09T15:13:08.641414Z", "modified": "2026-10-09T15:13:08.641414Z", "relationship_type": "indicates", "source_ref": "indicator--c3db02c9-c519-43c1-9ab9-d23375555d3c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28f67d4-7e6e-4660-a16f-2086933f5aaa", "created": "2026-10-09T15:13:08.64154Z", "modified": "2026-10-09T15:13:08.64154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e771860ba23ee8aa9b9991e70a6cdc01e3f58d0c1695c70f3ad9aecf2aaf8db1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.64154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2ec8516-e52e-4db0-bcfa-60123f4b81f2", "created": "2026-10-09T15:13:08.642121Z", "modified": "2026-10-09T15:13:08.642121Z", "relationship_type": "indicates", "source_ref": "indicator--e28f67d4-7e6e-4660-a16f-2086933f5aaa", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf9a07a-b5fa-48de-a41a-9b6acbc10a7d", "created": "2026-10-09T15:13:08.642243Z", "modified": "2026-10-09T15:13:08.642243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d9563d4230764a27ca3f440de688333e8b744c69381729e7cffea1e182e20aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.642243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--993fa51a-37ef-43bd-9024-dedb6e9979ca", "created": "2026-10-09T15:13:08.642836Z", "modified": "2026-10-09T15:13:08.642836Z", "relationship_type": "indicates", "source_ref": "indicator--3cf9a07a-b5fa-48de-a41a-9b6acbc10a7d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a553f35e-904b-4c80-ba0e-8cc14a27d968", "created": "2026-10-09T15:13:08.642958Z", "modified": "2026-10-09T15:13:08.642958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f35905ccdca42feb449faa89bb4243c8200a6f7712359b6792b2a89cf6ddc8a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.642958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d68bad62-60f9-4f41-b251-f84a5e69ab86", "created": "2026-10-09T15:13:08.643553Z", "modified": "2026-10-09T15:13:08.643553Z", "relationship_type": "indicates", "source_ref": "indicator--a553f35e-904b-4c80-ba0e-8cc14a27d968", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e7d627-8c99-46dc-994d-7188eaddc20e", "created": "2026-10-09T15:13:08.643676Z", "modified": "2026-10-09T15:13:08.643676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.643676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13a83d61-0ccb-4685-b933-af22d350551a", "created": "2026-10-09T15:13:08.644255Z", "modified": "2026-10-09T15:13:08.644255Z", "relationship_type": "indicates", "source_ref": "indicator--56e7d627-8c99-46dc-994d-7188eaddc20e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a2b677-e905-4559-90b5-b97d7b74f515", "created": "2026-10-09T15:13:08.644388Z", "modified": "2026-10-09T15:13:08.644388Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9c630ce2c80d3142c8f95611589c6f2e6cb507472146d327aedfe423b98f8b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.644388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f9039f7-269d-44e1-9e15-74e66864ab52", "created": "2026-10-09T15:13:08.644975Z", "modified": "2026-10-09T15:13:08.644975Z", "relationship_type": "indicates", "source_ref": "indicator--66a2b677-e905-4559-90b5-b97d7b74f515", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abbd60e-4aeb-4207-b2db-3ffc650ac172", "created": "2026-10-09T15:13:08.645095Z", "modified": "2026-10-09T15:13:08.645095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44b0b4bd26973348dbab8d4d7d9fc3116576e76d6bb3cb09c1362263ba94c890']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.645095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e143efa-f949-4941-8c04-484b8b130904", "created": "2026-10-09T15:13:08.658288Z", "modified": "2026-10-09T15:13:08.658288Z", "relationship_type": "indicates", "source_ref": "indicator--5abbd60e-4aeb-4207-b2db-3ffc650ac172", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf37c3e-6668-4a02-b39a-59e4156a8216", "created": "2026-10-09T15:13:08.658464Z", "modified": "2026-10-09T15:13:08.658464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21c96e36d06f19c6b54b3d6d5d93e6c9b3da729e669675f08114419374c9323a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.658464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb227bde-bd80-400b-aab6-83e22cf83a40", "created": "2026-10-09T15:13:08.659091Z", "modified": "2026-10-09T15:13:08.659091Z", "relationship_type": "indicates", "source_ref": "indicator--bbf37c3e-6668-4a02-b39a-59e4156a8216", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5120de49-05a2-44a4-a456-febecff698fd", "created": "2026-10-09T15:13:08.659222Z", "modified": "2026-10-09T15:13:08.659222Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23a1d9a6a748f159f96a285992cf99415c41aa89b5455bb08ec16ef8056ce36d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.659222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e05c18f-f0a4-48a5-a436-4ba5bd06df10", "created": "2026-10-09T15:13:08.659839Z", "modified": "2026-10-09T15:13:08.659839Z", "relationship_type": "indicates", "source_ref": "indicator--5120de49-05a2-44a4-a456-febecff698fd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ae77df-ce67-4462-9324-728147a2b7cc", "created": "2026-10-09T15:13:08.659967Z", "modified": "2026-10-09T15:13:08.659967Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a11d3f2dbfdd6bc19fc14a786c573bd15c28d7c91498fae2c8343204875b45ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.659967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2d5ed07-81c8-4feb-a271-4e18a5fb77a9", "created": "2026-10-09T15:13:08.660632Z", "modified": "2026-10-09T15:13:08.660632Z", "relationship_type": "indicates", "source_ref": "indicator--a3ae77df-ce67-4462-9324-728147a2b7cc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286a1769-927f-4b8c-8eca-f6b3cef6472d", "created": "2026-10-09T15:13:08.660773Z", "modified": "2026-10-09T15:13:08.660773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92783577529e705b02bb2131606419789104bf251076c57ad11119f1f6478e23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.660773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33c8f4da-bf33-4a9c-bc92-e121e1608a1e", "created": "2026-10-09T15:13:08.661379Z", "modified": "2026-10-09T15:13:08.661379Z", "relationship_type": "indicates", "source_ref": "indicator--286a1769-927f-4b8c-8eca-f6b3cef6472d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3116464e-8bd5-4b3f-a89f-d5e4fa02a7c0", "created": "2026-10-09T15:13:08.661507Z", "modified": "2026-10-09T15:13:08.661507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='942b57b04c8a2f0385162aaafc7890eaeeb6a8667e03820707cf1e0c1633989d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.661507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e2a2745-b2ab-48ab-9ecb-7c68357d5547", "created": "2026-10-09T15:13:08.662105Z", "modified": "2026-10-09T15:13:08.662105Z", "relationship_type": "indicates", "source_ref": "indicator--3116464e-8bd5-4b3f-a89f-d5e4fa02a7c0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60559f9-2b67-4983-8508-660d871c8fa8", "created": "2026-10-09T15:13:08.662228Z", "modified": "2026-10-09T15:13:08.662228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac1dec50ad9ca74715a7bd3802116ed7593e5fd6b4f5963d84655364e8efb2ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.662228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f12f3ad0-66e5-4b5d-973a-d917441768e8", "created": "2026-10-09T15:13:08.662833Z", "modified": "2026-10-09T15:13:08.662833Z", "relationship_type": "indicates", "source_ref": "indicator--a60559f9-2b67-4983-8508-660d871c8fa8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cd6140-acf2-4bcc-ae66-42fef983209f", "created": "2026-10-09T15:13:08.662954Z", "modified": "2026-10-09T15:13:08.662954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5eff9ed897b61e5a24251a3712d3cb65cecffbf9868f325fda965efe94f1f819']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.662954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fba2cff-8bae-403d-b539-09de62c3cb89", "created": "2026-10-09T15:13:08.663656Z", "modified": "2026-10-09T15:13:08.663656Z", "relationship_type": "indicates", "source_ref": "indicator--b0cd6140-acf2-4bcc-ae66-42fef983209f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727e1ede-4bdc-4a2a-9a01-72d2c6d440e6", "created": "2026-10-09T15:13:08.663787Z", "modified": "2026-10-09T15:13:08.663787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36e4151a751d3d244a691b1cdf84825cf933397100a6e174b26fd6ef56cc80ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.663787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9490a155-a6e1-4c15-8039-b04095e75877", "created": "2026-10-09T15:13:08.664389Z", "modified": "2026-10-09T15:13:08.664389Z", "relationship_type": "indicates", "source_ref": "indicator--727e1ede-4bdc-4a2a-9a01-72d2c6d440e6", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4af37ea-4d79-4ae0-82b4-3d81adb48bdd", "created": "2026-10-09T15:13:08.664514Z", "modified": "2026-10-09T15:13:08.664514Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06f368cc3e1a84c7976f7b7749ec7d6d8e1a654cf38648161e27b533b788f08e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.664514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--500b7bec-3170-4379-a7ea-0923d69796b7", "created": "2026-10-09T15:13:08.665099Z", "modified": "2026-10-09T15:13:08.665099Z", "relationship_type": "indicates", "source_ref": "indicator--d4af37ea-4d79-4ae0-82b4-3d81adb48bdd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb19b00-c925-42b7-8fff-26a91d45e7e2", "created": "2026-10-09T15:13:08.665222Z", "modified": "2026-10-09T15:13:08.665222Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e92b20674c86b01be77c51093dee2504ceaeda7adbd4fe401e3803a812e56514']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.665222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c00b825-36e7-42e9-ba25-393fe1440d9e", "created": "2026-10-09T15:13:08.665823Z", "modified": "2026-10-09T15:13:08.665823Z", "relationship_type": "indicates", "source_ref": "indicator--2fb19b00-c925-42b7-8fff-26a91d45e7e2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4431f4b-ea72-424f-991a-879cff79b836", "created": "2026-10-09T15:13:08.665945Z", "modified": "2026-10-09T15:13:08.665945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1926abf924d7903caf2ead771bd3a8f0205277f06f1370f015da50362f49f9f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.665945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad8bcc08-fff2-43eb-9012-3567ebe835bd", "created": "2026-10-09T15:13:08.666541Z", "modified": "2026-10-09T15:13:08.666541Z", "relationship_type": "indicates", "source_ref": "indicator--f4431f4b-ea72-424f-991a-879cff79b836", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cf1b05-f8dc-470f-bb6f-cb7b21c1cd95", "created": "2026-10-09T15:13:08.666662Z", "modified": "2026-10-09T15:13:08.666662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43071339975ea2e470c643e6ff22044ec516ba84371ec0d233a6314e7dd653b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.666662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c25896f-9a05-4277-86c6-a6c0ecc608c1", "created": "2026-10-09T15:13:08.667237Z", "modified": "2026-10-09T15:13:08.667237Z", "relationship_type": "indicates", "source_ref": "indicator--43cf1b05-f8dc-470f-bb6f-cb7b21c1cd95", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d5ff19-726c-4142-bbfb-b4871bc9e450", "created": "2026-10-09T15:13:08.667374Z", "modified": "2026-10-09T15:13:08.667374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fed5f1dff6139f2c7201039e676df0b9441e044e5f51dbd76733d529a24c27b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.667374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bf9d337-3294-4fef-84fe-457beb8cb540", "created": "2026-10-09T15:13:08.667955Z", "modified": "2026-10-09T15:13:08.667955Z", "relationship_type": "indicates", "source_ref": "indicator--c0d5ff19-726c-4142-bbfb-b4871bc9e450", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de77b6ed-ed4c-42e6-919e-04d009490bd3", "created": "2026-10-09T15:13:08.668073Z", "modified": "2026-10-09T15:13:08.668073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e6281d60175b988e71a2f26c259cbbc51913caca6bedcba90eaf47ad8394883']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.668073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c44026a-de41-42fe-b18a-3d537a8f8b9a", "created": "2026-10-09T15:13:08.66868Z", "modified": "2026-10-09T15:13:08.66868Z", "relationship_type": "indicates", "source_ref": "indicator--de77b6ed-ed4c-42e6-919e-04d009490bd3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d14327-034b-4548-b830-eaed1cd92176", "created": "2026-10-09T15:13:08.668803Z", "modified": "2026-10-09T15:13:08.668803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60d3e0dce72494e7ea645abcbce6b689d7e7f159e119380ccb97c8765d3fe420']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.668803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cee2195-4ea8-461c-95a2-6653d68846eb", "created": "2026-10-09T15:13:08.669396Z", "modified": "2026-10-09T15:13:08.669396Z", "relationship_type": "indicates", "source_ref": "indicator--31d14327-034b-4548-b830-eaed1cd92176", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1654a8d8-7967-474c-9487-6289ff63c29b", "created": "2026-10-09T15:13:08.669518Z", "modified": "2026-10-09T15:13:08.669518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd9f98e815dc04fe6926c37a4209640f6fbc52cd253a7c79273b5ac8a61c6817']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.669518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2175b7a7-99a5-42e5-88ca-46671a5c675b", "created": "2026-10-09T15:13:08.670195Z", "modified": "2026-10-09T15:13:08.670195Z", "relationship_type": "indicates", "source_ref": "indicator--1654a8d8-7967-474c-9487-6289ff63c29b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43c7603-82da-4aaa-a68c-9eb6e9786572", "created": "2026-10-09T15:13:08.67033Z", "modified": "2026-10-09T15:13:08.67033Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99c231e24f06f3d8517dcc3bca2d91ec92caaf2d155a52e20b4110b6f0022408']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.67033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fd17eca-74b7-4180-a6d1-857fd41eb774", "created": "2026-10-09T15:13:08.670913Z", "modified": "2026-10-09T15:13:08.670913Z", "relationship_type": "indicates", "source_ref": "indicator--f43c7603-82da-4aaa-a68c-9eb6e9786572", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b67bd49-a814-48b4-8c8f-38e8af8c11f4", "created": "2026-10-09T15:13:08.671036Z", "modified": "2026-10-09T15:13:08.671036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2d3c1ee4fa154844b508c78746743a46a736bd462a0493ce1019b19229b05bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.671036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5063a5de-f90e-4980-a639-550c1002019d", "created": "2026-10-09T15:13:08.671626Z", "modified": "2026-10-09T15:13:08.671626Z", "relationship_type": "indicates", "source_ref": "indicator--9b67bd49-a814-48b4-8c8f-38e8af8c11f4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e800ca3f-d796-4176-a5e4-1c494c9a4e67", "created": "2026-10-09T15:13:08.671748Z", "modified": "2026-10-09T15:13:08.671748Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf05b4147c610c8eaffcc3d944ca5b26205782b96a845823c225eca4c43a76f4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.671748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f179884e-da85-4c62-b59c-a7516d6b4766", "created": "2026-10-09T15:13:08.672336Z", "modified": "2026-10-09T15:13:08.672336Z", "relationship_type": "indicates", "source_ref": "indicator--e800ca3f-d796-4176-a5e4-1c494c9a4e67", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa74cd70-57a2-4bb9-91ea-18f09f0c35fd", "created": "2026-10-09T15:13:08.672458Z", "modified": "2026-10-09T15:13:08.672458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='289a0d31a280a58570bc56f7799ceabd15ce6d9329ad79e7f8fde2635718a526']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.672458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d763bd72-21e1-40ef-8e7b-2cbf59c436b7", "created": "2026-10-09T15:13:08.67304Z", "modified": "2026-10-09T15:13:08.67304Z", "relationship_type": "indicates", "source_ref": "indicator--aa74cd70-57a2-4bb9-91ea-18f09f0c35fd", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618d29d6-a622-4a84-864f-d88ead935c32", "created": "2026-10-09T15:13:08.673159Z", "modified": "2026-10-09T15:13:08.673159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e3e27372d68c4a3de42843ec98619a2e4d42b92d3ba35f76a1efe8f698e27ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.673159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0937b88b-c92d-47f5-818c-075422f8fac1", "created": "2026-10-09T15:13:08.673752Z", "modified": "2026-10-09T15:13:08.673752Z", "relationship_type": "indicates", "source_ref": "indicator--618d29d6-a622-4a84-864f-d88ead935c32", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9a578e-7709-4672-9cdc-0c9fdba73f9e", "created": "2026-10-09T15:13:08.673876Z", "modified": "2026-10-09T15:13:08.673876Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56d92ede777635bf80b1b7e873dc46c82bc0f1c5fcc9b44d6c93e1f49400ee44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.673876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60ac8285-6f29-4fa4-b158-fda873cdf91c", "created": "2026-10-09T15:13:08.674474Z", "modified": "2026-10-09T15:13:08.674474Z", "relationship_type": "indicates", "source_ref": "indicator--6e9a578e-7709-4672-9cdc-0c9fdba73f9e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0aa70c2-1f15-4d29-b8c6-314461a24cbe", "created": "2026-10-09T15:13:08.674596Z", "modified": "2026-10-09T15:13:08.674596Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7d246bbf76bf4773312eff25fb6e658bb8c0f5d5cbcc098354f078e5c3ef8b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.674596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37243139-50a9-4cdd-a290-3c06fbc5b51e", "created": "2026-10-09T15:13:08.675167Z", "modified": "2026-10-09T15:13:08.675167Z", "relationship_type": "indicates", "source_ref": "indicator--e0aa70c2-1f15-4d29-b8c6-314461a24cbe", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472da670-85eb-465c-803f-3797a2ee1f8d", "created": "2026-10-09T15:13:08.675295Z", "modified": "2026-10-09T15:13:08.675295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0570daaa9db24c98671baded7e1dd3d77398b645d6c53ff765b91a0c95de3e01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.675295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32093b24-2a02-44bb-934d-b0910a545b6c", "created": "2026-10-09T15:13:08.675987Z", "modified": "2026-10-09T15:13:08.675987Z", "relationship_type": "indicates", "source_ref": "indicator--472da670-85eb-465c-803f-3797a2ee1f8d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1852fcc7-71e1-4227-b482-76ba5e060c7a", "created": "2026-10-09T15:13:08.67611Z", "modified": "2026-10-09T15:13:08.67611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e45a09ee59120878fba5329b21b327eaecdf28211fb147ca00a9bf6dec79ad1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.67611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ce2f27f-c3df-42df-8ea9-18bdcc46739a", "created": "2026-10-09T15:13:08.676706Z", "modified": "2026-10-09T15:13:08.676706Z", "relationship_type": "indicates", "source_ref": "indicator--1852fcc7-71e1-4227-b482-76ba5e060c7a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc134c95-9501-4b73-b93e-ba1342d42030", "created": "2026-10-09T15:13:08.676832Z", "modified": "2026-10-09T15:13:08.676832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fe24371a5ffefc073b010fd138ca0e1804a09b53d1373266db292ba56ab026b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.676832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d19227b1-76dc-43da-880e-cd30c9a3abbf", "created": "2026-10-09T15:13:08.677417Z", "modified": "2026-10-09T15:13:08.677417Z", "relationship_type": "indicates", "source_ref": "indicator--fc134c95-9501-4b73-b93e-ba1342d42030", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788e5b71-35d7-4ccb-876d-a3ae4853542e", "created": "2026-10-09T15:13:08.677537Z", "modified": "2026-10-09T15:13:08.677537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d210218fcdc241d017839feb17a8b8f22904b0ea251e0441ee4f2bd55b1140ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.677537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e59db0d6-68eb-4f4e-930f-9e43929b2c05", "created": "2026-10-09T15:13:08.678114Z", "modified": "2026-10-09T15:13:08.678114Z", "relationship_type": "indicates", "source_ref": "indicator--788e5b71-35d7-4ccb-876d-a3ae4853542e", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e909a8-7f07-4e6c-ab8f-d047acc3ff5f", "created": "2026-10-09T15:13:08.678231Z", "modified": "2026-10-09T15:13:08.678231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3efa85cb979b680aa2e9dfcd1460b7557b594cd1555efa8ae7c3adcf14b5cac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.678231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0516e820-2190-4f51-adc7-cfbbdca5516d", "created": "2026-10-09T15:13:08.678826Z", "modified": "2026-10-09T15:13:08.678826Z", "relationship_type": "indicates", "source_ref": "indicator--16e909a8-7f07-4e6c-ab8f-d047acc3ff5f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dc1f9d-7f26-4662-ad4c-03daf3ac53e4", "created": "2026-10-09T15:13:08.678947Z", "modified": "2026-10-09T15:13:08.678947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9ea53856bc3922b599129cdecdc5e511178100cde1e2628b55b40b5d81758df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.678947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--828578bb-527d-4a32-bc96-f6440d8e2881", "created": "2026-10-09T15:13:08.679586Z", "modified": "2026-10-09T15:13:08.679586Z", "relationship_type": "indicates", "source_ref": "indicator--e3dc1f9d-7f26-4662-ad4c-03daf3ac53e4", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f159d8-4020-480e-8dba-fd7290120e86", "created": "2026-10-09T15:13:08.67971Z", "modified": "2026-10-09T15:13:08.67971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a847a6b31d6ce38ea911a7975897cf0b24d7532f38de4acad566ddca34d17fe2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.67971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ad24a8-8430-44e2-81a7-1faebd4acdb8", "created": "2026-10-09T15:13:08.680319Z", "modified": "2026-10-09T15:13:08.680319Z", "relationship_type": "indicates", "source_ref": "indicator--37f159d8-4020-480e-8dba-fd7290120e86", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0521ad-ed51-42b3-a7de-b345bc9140c2", "created": "2026-10-09T15:13:08.680441Z", "modified": "2026-10-09T15:13:08.680441Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85cdb85ffec0fa8d05aef6421e38f245570dead161e37c90f3bc9ee46d98a625']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.680441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd5c07d1-db62-4dd3-aac6-51654c562628", "created": "2026-10-09T15:13:08.681016Z", "modified": "2026-10-09T15:13:08.681016Z", "relationship_type": "indicates", "source_ref": "indicator--1d0521ad-ed51-42b3-a7de-b345bc9140c2", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bba2f31-e8a3-4356-b1e7-60cf65458948", "created": "2026-10-09T15:13:08.681133Z", "modified": "2026-10-09T15:13:08.681133Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adc012af3b25e51f9353e23483366eb79f7559dd5bdeb03e518a7e34aa6a9727']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.681133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46f00fe9-fd68-420f-9a25-4178b515a0b3", "created": "2026-10-09T15:13:08.681725Z", "modified": "2026-10-09T15:13:08.681725Z", "relationship_type": "indicates", "source_ref": "indicator--0bba2f31-e8a3-4356-b1e7-60cf65458948", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810851f1-555b-4486-ab48-8b9536f45c3a", "created": "2026-10-09T15:13:08.681842Z", "modified": "2026-10-09T15:13:08.681842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b476d299f75eaf4d729f2c7d5b4e41d735e2ae44d38e1cd3ea1a54a63fa2b187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.681842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--220e644a-ba88-490d-9125-ec111193e07f", "created": "2026-10-09T15:13:08.682559Z", "modified": "2026-10-09T15:13:08.682559Z", "relationship_type": "indicates", "source_ref": "indicator--810851f1-555b-4486-ab48-8b9536f45c3a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505bffa3-17be-4f0a-89b0-fa72e42a3468", "created": "2026-10-09T15:13:08.682684Z", "modified": "2026-10-09T15:13:08.682684Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9103be9e4e0c016fbf7541a8056903d1e485cb6633003ed4b9afe201930b521']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.682684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73ce5231-4ca2-4981-af87-5a9078d22ab9", "created": "2026-10-09T15:13:08.683275Z", "modified": "2026-10-09T15:13:08.683275Z", "relationship_type": "indicates", "source_ref": "indicator--505bffa3-17be-4f0a-89b0-fa72e42a3468", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb3bbda-485a-4daf-8e53-b975cc81481c", "created": "2026-10-09T15:13:08.683401Z", "modified": "2026-10-09T15:13:08.683401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33a04fc3ebcc75961d82661318e42af5ef41a74f4cddc9b52ada07e6efe58668']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.683401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a39e8f53-ef54-48da-94fc-08b827d27192", "created": "2026-10-09T15:13:08.68399Z", "modified": "2026-10-09T15:13:08.68399Z", "relationship_type": "indicates", "source_ref": "indicator--cbb3bbda-485a-4daf-8e53-b975cc81481c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0b3354-3e5f-4e11-ba04-a9c3bf81f7a7", "created": "2026-10-09T15:13:08.684112Z", "modified": "2026-10-09T15:13:08.684112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='616283cad705f9337ba35b2a19d5f18f9d78e23dd0802c33c185d95027854561']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.684112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff0c184e-9927-4b68-b9e7-6a03464075f4", "created": "2026-10-09T15:13:08.68474Z", "modified": "2026-10-09T15:13:08.68474Z", "relationship_type": "indicates", "source_ref": "indicator--fa0b3354-3e5f-4e11-ba04-a9c3bf81f7a7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209a2084-b28e-44b8-935e-a526e13f8612", "created": "2026-10-09T15:13:08.684866Z", "modified": "2026-10-09T15:13:08.684866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3bb77f13d13c9000c9139d545dfb15820ce361ec5d98d4e50f8d2b013c931bc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.684866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0082cad5-fd6a-4bb7-befa-5ae56e1b06ab", "created": "2026-10-09T15:13:08.685463Z", "modified": "2026-10-09T15:13:08.685463Z", "relationship_type": "indicates", "source_ref": "indicator--209a2084-b28e-44b8-935e-a526e13f8612", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a85d8e9-4e88-4eaa-bbdf-32d0ca108b60", "created": "2026-10-09T15:13:08.685587Z", "modified": "2026-10-09T15:13:08.685587Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71a09a046782c388255631305585a5f1a94ece68fb5ff1d9114928342fcd4df8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.685587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acc6498b-fcc0-44b2-a133-38957e06f593", "created": "2026-10-09T15:13:08.68617Z", "modified": "2026-10-09T15:13:08.68617Z", "relationship_type": "indicates", "source_ref": "indicator--4a85d8e9-4e88-4eaa-bbdf-32d0ca108b60", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d49d9f6-22af-4774-9792-4c6d40eb3ccb", "created": "2026-10-09T15:13:08.686301Z", "modified": "2026-10-09T15:13:08.686301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8834166aaf6bafa764e046c085ad42656a3123b33eaece4d0051103d82c5b28d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.686301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2465968-68d5-4a4f-9409-99d254a2902e", "created": "2026-10-09T15:13:08.686892Z", "modified": "2026-10-09T15:13:08.686892Z", "relationship_type": "indicates", "source_ref": "indicator--2d49d9f6-22af-4774-9792-4c6d40eb3ccb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7029ad-59b1-4560-8074-0a00c31bc79b", "created": "2026-10-09T15:13:08.687012Z", "modified": "2026-10-09T15:13:08.687012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='675f4412c360e47220d02dd74646058122f8b3a5b3631251e9f09447a4fc8373']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.687012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d40e162a-40fe-4c4b-99ca-d217aea91ab1", "created": "2026-10-09T15:13:08.68761Z", "modified": "2026-10-09T15:13:08.68761Z", "relationship_type": "indicates", "source_ref": "indicator--0a7029ad-59b1-4560-8074-0a00c31bc79b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f77e173-6633-432e-82d8-5ed1cda45267", "created": "2026-10-09T15:13:08.68773Z", "modified": "2026-10-09T15:13:08.68773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='653d4cdfc8679fd00c6b35666f72393c0b32aa458f707b13276086619b587a67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.68773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--148715c4-e4d0-465c-a19e-a9831cc982fb", "created": "2026-10-09T15:13:08.688323Z", "modified": "2026-10-09T15:13:08.688323Z", "relationship_type": "indicates", "source_ref": "indicator--0f77e173-6633-432e-82d8-5ed1cda45267", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2feaf6-4a2c-4ec0-9bf7-af1a59334be3", "created": "2026-10-09T15:13:08.688444Z", "modified": "2026-10-09T15:13:08.688444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0be371f3b8d403837e9ab11e4f7c5671db79b8306bc02bdc6f5c1a90c0846fb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.688444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--928a3eb5-31e2-41ac-8890-2cb3b9c920db", "created": "2026-10-09T15:13:08.689132Z", "modified": "2026-10-09T15:13:08.689132Z", "relationship_type": "indicates", "source_ref": "indicator--ab2feaf6-4a2c-4ec0-9bf7-af1a59334be3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7190ae94-ef91-4edf-85c1-0eaa313cab6c", "created": "2026-10-09T15:13:08.689257Z", "modified": "2026-10-09T15:13:08.689257Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14c01c9513ab79ae179098e74ecc2ee373230a167c1c9d2436652a8611b61ceb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.689257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee6f719a-b8b2-4470-9bef-3a6d58a3c8e2", "created": "2026-10-09T15:13:08.689847Z", "modified": "2026-10-09T15:13:08.689847Z", "relationship_type": "indicates", "source_ref": "indicator--7190ae94-ef91-4edf-85c1-0eaa313cab6c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda76dce-6593-4d8b-9e07-08436b58b042", "created": "2026-10-09T15:13:08.689968Z", "modified": "2026-10-09T15:13:08.689968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a28aa0ce129f5f835712c80b3c543a235e0a106cb28913a8aec67968bf2c0bb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.689968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9de09082-7498-4f20-bee5-892e169647f3", "created": "2026-10-09T15:13:08.69056Z", "modified": "2026-10-09T15:13:08.69056Z", "relationship_type": "indicates", "source_ref": "indicator--bda76dce-6593-4d8b-9e07-08436b58b042", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7828505-ee51-435e-af50-9c948fba8c1d", "created": "2026-10-09T15:13:08.69068Z", "modified": "2026-10-09T15:13:08.69068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2cae869c12fc10c3435d0164a535b39ff65b55ffda551a4ff7be022e0ef40da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.69068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a355ba0c-57f3-496e-9e07-edfbd9ccdf8d", "created": "2026-10-09T15:13:08.691259Z", "modified": "2026-10-09T15:13:08.691259Z", "relationship_type": "indicates", "source_ref": "indicator--b7828505-ee51-435e-af50-9c948fba8c1d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c43daa6-3c1a-4288-ae47-7bef82547aea", "created": "2026-10-09T15:13:08.691392Z", "modified": "2026-10-09T15:13:08.691392Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15eaf97dd6738aa25914fd8088bcdb11aaa0c62408544da452bf201dd53b11ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.691392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ef7d438-d59d-4c5a-8ade-c558225d0753", "created": "2026-10-09T15:13:08.691969Z", "modified": "2026-10-09T15:13:08.691969Z", "relationship_type": "indicates", "source_ref": "indicator--9c43daa6-3c1a-4288-ae47-7bef82547aea", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63ad6f4-4601-485a-b3f9-a7be6078cee3", "created": "2026-10-09T15:13:08.692087Z", "modified": "2026-10-09T15:13:08.692087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87a1fd64100929bd36e355e09cf5e9de57d7080ddc498541cce64f3323141b84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.692087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1489810-92eb-4f3b-bc8e-70508b3903ee", "created": "2026-10-09T15:13:08.692677Z", "modified": "2026-10-09T15:13:08.692677Z", "relationship_type": "indicates", "source_ref": "indicator--b63ad6f4-4601-485a-b3f9-a7be6078cee3", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8601b861-7926-4c06-b10c-ac742652f946", "created": "2026-10-09T15:13:08.692796Z", "modified": "2026-10-09T15:13:08.692796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17107b3e4f8bee149c3bf74e1100e7c2a6cd04920479dcb6147c5703375cbb4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.692796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--534d440c-9876-4be2-bce0-04a14a8200f3", "created": "2026-10-09T15:13:08.693379Z", "modified": "2026-10-09T15:13:08.693379Z", "relationship_type": "indicates", "source_ref": "indicator--8601b861-7926-4c06-b10c-ac742652f946", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20563a9-12f6-4d76-b00f-e8081b7756aa", "created": "2026-10-09T15:13:08.6935Z", "modified": "2026-10-09T15:13:08.6935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ba2e5a3c21d32b40abe213e36eef9f1e3254c7393c5680736e6f848f0ec5289']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.6935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d535aff6-65cb-4cdf-8fcc-71b6e93c8ec9", "created": "2026-10-09T15:13:08.694089Z", "modified": "2026-10-09T15:13:08.694089Z", "relationship_type": "indicates", "source_ref": "indicator--f20563a9-12f6-4d76-b00f-e8081b7756aa", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713f1e94-1a4e-4da1-9fca-87c0a8767e3f", "created": "2026-10-09T15:13:08.694213Z", "modified": "2026-10-09T15:13:08.694213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3f11dadf9168c2605a7f0ad0cc9111998e5086a55bc76ec8392d604b131fde1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.694213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--620c6a26-8bcf-4404-b4ff-52377fe7387a", "created": "2026-10-09T15:13:08.694922Z", "modified": "2026-10-09T15:13:08.694922Z", "relationship_type": "indicates", "source_ref": "indicator--713f1e94-1a4e-4da1-9fca-87c0a8767e3f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5180f7-b5f0-476d-b534-9dd9f458ec63", "created": "2026-10-09T15:13:08.695048Z", "modified": "2026-10-09T15:13:08.695048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='878bc1f24e4d3026a1421c746aca699764967bd020fd62ef1c93515d0028642a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.695048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b477bfe5-01fd-403f-8869-24a7bda6567f", "created": "2026-10-09T15:13:08.695661Z", "modified": "2026-10-09T15:13:08.695661Z", "relationship_type": "indicates", "source_ref": "indicator--5b5180f7-b5f0-476d-b534-9dd9f458ec63", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112ca955-5f7e-406e-84ee-bb6a55f407ec", "created": "2026-10-09T15:13:08.695791Z", "modified": "2026-10-09T15:13:08.695791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34249b289aed6366633e3f91a36e39b90a43dd999f0f0a4fc0e98e63662cd60c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.695791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba3c971e-00f5-4507-a3e8-a5eb745246d0", "created": "2026-10-09T15:13:08.696386Z", "modified": "2026-10-09T15:13:08.696386Z", "relationship_type": "indicates", "source_ref": "indicator--112ca955-5f7e-406e-84ee-bb6a55f407ec", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d5c440-1c5f-490f-b99b-3084f2b26874", "created": "2026-10-09T15:13:08.69651Z", "modified": "2026-10-09T15:13:08.69651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5f71fdf2a86bcf3ea0f922b06ffde1eceeab7d3f25aee928ff7fd22839fb602']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.69651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91f06035-f670-482c-af2a-33dd1836d1f8", "created": "2026-10-09T15:13:08.697086Z", "modified": "2026-10-09T15:13:08.697086Z", "relationship_type": "indicates", "source_ref": "indicator--48d5c440-1c5f-490f-b99b-3084f2b26874", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f62271-d3ba-4293-a1b9-8e69cc1d4fba", "created": "2026-10-09T15:13:08.697203Z", "modified": "2026-10-09T15:13:08.697203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fa36da8909548c83d9e8917e4b8ea1409b2ffe88fa5dab02c51611ee87a53f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.697203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f934177-257f-4bc8-91f6-50e16a286f43", "created": "2026-10-09T15:13:08.697795Z", "modified": "2026-10-09T15:13:08.697795Z", "relationship_type": "indicates", "source_ref": "indicator--31f62271-d3ba-4293-a1b9-8e69cc1d4fba", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e149d75-c121-4f01-9268-91d7ea23b46f", "created": "2026-10-09T15:13:08.697914Z", "modified": "2026-10-09T15:13:08.697914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95fc33ac432632804fcf8c133d6ce111d18b694e07ddd2c104dcaf76b182a053']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.697914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7783bec6-a1ac-4282-890d-4f38204d04db", "created": "2026-10-09T15:13:08.698508Z", "modified": "2026-10-09T15:13:08.698508Z", "relationship_type": "indicates", "source_ref": "indicator--6e149d75-c121-4f01-9268-91d7ea23b46f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66feff75-5bc5-4cea-94a1-390577637e99", "created": "2026-10-09T15:13:08.698644Z", "modified": "2026-10-09T15:13:08.698644Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='88330769127ef9f023f4ffc17c12fb5e28557dfaaa65d5d159d31e161ce7a787']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.698644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--060677c8-19b5-42ff-a43f-ea645ceccb1a", "created": "2026-10-09T15:13:08.699239Z", "modified": "2026-10-09T15:13:08.699239Z", "relationship_type": "indicates", "source_ref": "indicator--66feff75-5bc5-4cea-94a1-390577637e99", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c2f40a-b80a-49a5-aa17-561e995c1032", "created": "2026-10-09T15:13:08.699376Z", "modified": "2026-10-09T15:13:08.699376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81ca4988ce166a3b6b629e074d4c2fe12dbcc297e1d4399dee3dadf9dc869109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.699376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61f36a2d-04af-4f67-8c0e-4710705b599f", "created": "2026-10-09T15:13:08.699964Z", "modified": "2026-10-09T15:13:08.699964Z", "relationship_type": "indicates", "source_ref": "indicator--a2c2f40a-b80a-49a5-aa17-561e995c1032", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66247c14-b980-49c9-8ca8-f1ebf2efa4eb", "created": "2026-10-09T15:13:08.700086Z", "modified": "2026-10-09T15:13:08.700086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='404cab9bdec390531240bf8b661c1d71e7e6d252b6f9343cff124197152787db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.700086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02f55649-5d69-464c-8adb-69a5adad8ddf", "created": "2026-10-09T15:13:08.700684Z", "modified": "2026-10-09T15:13:08.700684Z", "relationship_type": "indicates", "source_ref": "indicator--66247c14-b980-49c9-8ca8-f1ebf2efa4eb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39ee25e-9620-4c3c-a1ab-0eba10421b15", "created": "2026-10-09T15:13:08.700804Z", "modified": "2026-10-09T15:13:08.700804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='abb87ad479d011c3f499887e79fe476d8c65517d7f57f98e0d0086067d3e2415']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.700804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--233406ef-eb5f-4f1b-b2a6-2e4a3046980d", "created": "2026-10-09T15:13:08.701518Z", "modified": "2026-10-09T15:13:08.701518Z", "relationship_type": "indicates", "source_ref": "indicator--e39ee25e-9620-4c3c-a1ab-0eba10421b15", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec22540-f2ad-4f94-9a08-a4edf9427352", "created": "2026-10-09T15:13:08.701648Z", "modified": "2026-10-09T15:13:08.701648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11f56a7989ba68c6b99ecebe2d8230cbcd205ac3e61396f3dc9f3d92d0088b2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.701648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--027023be-4347-4515-8d07-a70c67ee0d80", "created": "2026-10-09T15:13:08.70224Z", "modified": "2026-10-09T15:13:08.70224Z", "relationship_type": "indicates", "source_ref": "indicator--3ec22540-f2ad-4f94-9a08-a4edf9427352", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31bbcbf-15ba-4d4e-9f6e-6f0e1fa7d724", "created": "2026-10-09T15:13:08.702375Z", "modified": "2026-10-09T15:13:08.702375Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d624eb9219fb5ccae550320b8eeea6b8d2b1870f6b8763da6d3b5e1265e9a8c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.702375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da57b285-4dc4-4dac-a48e-2ba30b90a3b4", "created": "2026-10-09T15:13:08.702964Z", "modified": "2026-10-09T15:13:08.702964Z", "relationship_type": "indicates", "source_ref": "indicator--b31bbcbf-15ba-4d4e-9f6e-6f0e1fa7d724", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f8d7ef-7c66-4b00-8371-d83a3e9a3911", "created": "2026-10-09T15:13:08.703085Z", "modified": "2026-10-09T15:13:08.703085Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd2ce4e3bf429f1b4ee33b8f5610baf628b854eb61d3965e1420c6d47c3c1c77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.703085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--424aae46-d3c1-41a6-9a81-3d2cda6cce72", "created": "2026-10-09T15:13:08.703684Z", "modified": "2026-10-09T15:13:08.703684Z", "relationship_type": "indicates", "source_ref": "indicator--d4f8d7ef-7c66-4b00-8371-d83a3e9a3911", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67489c6-6ba9-4039-a7ab-025e7e8504a7", "created": "2026-10-09T15:13:08.703806Z", "modified": "2026-10-09T15:13:08.703806Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='138a985abd08524ec1d98181344f52725ff0ee3baaadec6ccef869933f93a74d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.703806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4e5329c-bdf7-468a-b287-931d90accc0d", "created": "2026-10-09T15:13:08.704398Z", "modified": "2026-10-09T15:13:08.704398Z", "relationship_type": "indicates", "source_ref": "indicator--f67489c6-6ba9-4039-a7ab-025e7e8504a7", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac273dd-d29d-4ae6-8727-d3a1a1a46ace", "created": "2026-10-09T15:13:08.70452Z", "modified": "2026-10-09T15:13:08.70452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='064605e408c01ce1552b73412c9b61a996cbb72f501714bef0747d28f2254d97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.70452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--982ae0ce-a012-4aa3-b0b5-c75ed1ac911d", "created": "2026-10-09T15:13:08.705106Z", "modified": "2026-10-09T15:13:08.705106Z", "relationship_type": "indicates", "source_ref": "indicator--aac273dd-d29d-4ae6-8727-d3a1a1a46ace", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003b9685-a6eb-453f-990b-792bd36d098d", "created": "2026-10-09T15:13:08.705227Z", "modified": "2026-10-09T15:13:08.705227Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.apspy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.705227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5c508f0-a509-4b84-8326-1d8cf012fecf", "created": "2026-10-09T15:13:08.706055Z", "modified": "2026-10-09T15:13:08.706055Z", "relationship_type": "indicates", "source_ref": "indicator--003b9685-a6eb-453f-990b-792bd36d098d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0028c8-137a-43d2-8fc1-1ebce7df7512", "created": "2026-10-09T15:13:08.706188Z", "modified": "2026-10-09T15:13:08.706188Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.706188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad8a16df-4585-4ad6-99ec-b76003bfe14d", "created": "2026-10-09T15:13:08.706656Z", "modified": "2026-10-09T15:13:08.706656Z", "relationship_type": "indicates", "source_ref": "indicator--8f0028c8-137a-43d2-8fc1-1ebce7df7512", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1689bd68-b878-4a19-b297-14c9c26e7ea8", "created": "2026-10-09T15:13:08.706778Z", "modified": "2026-10-09T15:13:08.706778Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.guest']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.706778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--759495c3-2516-421f-8626-c260eea5c190", "created": "2026-10-09T15:13:08.707216Z", "modified": "2026-10-09T15:13:08.707216Z", "relationship_type": "indicates", "source_ref": "indicator--1689bd68-b878-4a19-b297-14c9c26e7ea8", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e639a133-a9b8-4ec1-84e2-d4d1127da171", "created": "2026-10-09T15:13:08.707349Z", "modified": "2026-10-09T15:13:08.707349Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ispyoo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.707349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6281ce01-e597-4722-a449-8679f8d2ca95", "created": "2026-10-09T15:13:08.707905Z", "modified": "2026-10-09T15:13:08.707905Z", "relationship_type": "indicates", "source_ref": "indicator--e639a133-a9b8-4ec1-84e2-d4d1127da171", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbb01d2-7812-4003-9cd3-09eee8180d21", "created": "2026-10-09T15:13:08.708027Z", "modified": "2026-10-09T15:13:08.708027Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ispyoo.traceyou']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.708027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cd5fc25-3f60-4337-aaab-e8c8e87990c9", "created": "2026-10-09T15:13:08.708489Z", "modified": "2026-10-09T15:13:08.708489Z", "relationship_type": "indicates", "source_ref": "indicator--9bbb01d2-7812-4003-9cd3-09eee8180d21", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5ce075-5450-4cb2-a3ce-8ace29571116", "created": "2026-10-09T15:13:08.708612Z", "modified": "2026-10-09T15:13:08.708612Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mxspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.708612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3880870c-e517-427d-b402-4d5cc5e20798", "created": "2026-10-09T15:13:08.70905Z", "modified": "2026-10-09T15:13:08.70905Z", "relationship_type": "indicates", "source_ref": "indicator--1c5ce075-5450-4cb2-a3ce-8ace29571116", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75da1f6-9951-4a2f-97a6-146f05d8ae0b", "created": "2026-10-09T15:13:08.709169Z", "modified": "2026-10-09T15:13:08.709169Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyzee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.709169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15bd479b-4207-4f28-b1ff-24bcd98a091f", "created": "2026-10-09T15:13:08.709618Z", "modified": "2026-10-09T15:13:08.709618Z", "relationship_type": "indicates", "source_ref": "indicator--f75da1f6-9951-4a2f-97a6-146f05d8ae0b", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8c111e-2034-4f0a-aa46-f6c968901ee5", "created": "2026-10-09T15:13:08.709737Z", "modified": "2026-10-09T15:13:08.709737Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.systemservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.709737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e978801-84e6-4b51-99d2-a3434be002bc", "created": "2026-10-09T15:13:08.710204Z", "modified": "2026-10-09T15:13:08.710204Z", "relationship_type": "indicates", "source_ref": "indicator--5c8c111e-2034-4f0a-aa46-f6c968901ee5", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a979d77-ac2b-49a6-a123-f0654de8d5cc", "created": "2026-10-09T15:13:08.710338Z", "modified": "2026-10-09T15:13:08.710338Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thetruth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.710338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ec16e5d-66bb-47c7-879d-a56e7bf1b905", "created": "2026-10-09T15:13:08.710788Z", "modified": "2026-10-09T15:13:08.710788Z", "relationship_type": "indicates", "source_ref": "indicator--9a979d77-ac2b-49a6-a123-f0654de8d5cc", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef17564-c12d-4eaf-82ef-aaa88e929d5f", "created": "2026-10-09T15:13:08.710911Z", "modified": "2026-10-09T15:13:08.710911Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ttsapp.catchcheating']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.710911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1436a17c-f680-4db6-9373-0494e0069451", "created": "2026-10-09T15:13:08.71139Z", "modified": "2026-10-09T15:13:08.71139Z", "relationship_type": "indicates", "source_ref": "indicator--7ef17564-c12d-4eaf-82ef-aaa88e929d5f", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e2787e-701d-458e-8812-39f42e4de3cb", "created": "2026-10-09T15:13:08.711511Z", "modified": "2026-10-09T15:13:08.711511Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='31A6ECECD97CF39BC4126B8745CD94A7C30BF81C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.711511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deade79b-05f3-47d9-9975-4ff690ab6c4f", "created": "2026-10-09T15:13:08.712609Z", "modified": "2026-10-09T15:13:08.712609Z", "relationship_type": "indicates", "source_ref": "indicator--e5e2787e-701d-458e-8812-39f42e4de3cb", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0911fd-a983-44fb-9d2a-1efbc789033d", "created": "2026-10-09T15:13:08.71274Z", "modified": "2026-10-09T15:13:08.71274Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='36E6671BC4397F475A350905D9A649A5ADE97BB2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.71274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01f27bb4-ab6e-4ea8-960b-0566e57260cb", "created": "2026-10-09T15:13:08.713307Z", "modified": "2026-10-09T15:13:08.713307Z", "relationship_type": "indicates", "source_ref": "indicator--ac0911fd-a983-44fb-9d2a-1efbc789033d", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf252da-33b5-4d03-8329-e896100f7966", "created": "2026-10-09T15:13:08.713432Z", "modified": "2026-10-09T15:13:08.713432Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='483716998F0C092FE82B0B12B1A4BA399D941318']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.713432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4efcb68b-6fb1-44d8-8b26-d418f17a7634", "created": "2026-10-09T15:13:08.714088Z", "modified": "2026-10-09T15:13:08.714088Z", "relationship_type": "indicates", "source_ref": "indicator--4cf252da-33b5-4d03-8329-e896100f7966", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f30d33e-2e67-4930-9f54-4bd35780fcae", "created": "2026-10-09T15:13:08.714216Z", "modified": "2026-10-09T15:13:08.714216Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4FF0174BEDC1D16BE55AC53B98599398AC461F82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.714216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be027687-6166-4419-82fb-9498870576e7", "created": "2026-10-09T15:13:08.714781Z", "modified": "2026-10-09T15:13:08.714781Z", "relationship_type": "indicates", "source_ref": "indicator--0f30d33e-2e67-4930-9f54-4bd35780fcae", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850bb732-f14a-494c-ac51-7c8d90fd378c", "created": "2026-10-09T15:13:08.714903Z", "modified": "2026-10-09T15:13:08.714903Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='56EF5244378FB6B4EF82D2B9E99BF41F7B97D93A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.714903Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f6b0ba6-d823-4bd2-a02c-04b2d72cb3de", "created": "2026-10-09T15:13:08.715456Z", "modified": "2026-10-09T15:13:08.715456Z", "relationship_type": "indicates", "source_ref": "indicator--850bb732-f14a-494c-ac51-7c8d90fd378c", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7148004-09d0-4621-a515-783ae4139910", "created": "2026-10-09T15:13:08.715585Z", "modified": "2026-10-09T15:13:08.715585Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5D7B59F3AFB74D86CCD56440F99CA2FC83A23F22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.715585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2597e058-b03d-4426-bb54-ebda911e2060", "created": "2026-10-09T15:13:08.716213Z", "modified": "2026-10-09T15:13:08.716213Z", "relationship_type": "indicates", "source_ref": "indicator--b7148004-09d0-4621-a515-783ae4139910", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3927bc-6772-494e-8ff6-4dea5158bb67", "created": "2026-10-09T15:13:08.716359Z", "modified": "2026-10-09T15:13:08.716359Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='917BB5B2D40EC40018541784A06285DE0F50F60F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.716359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35c2a7ad-debb-4018-ab4f-d22c9b8d3f1f", "created": "2026-10-09T15:13:08.716904Z", "modified": "2026-10-09T15:13:08.716904Z", "relationship_type": "indicates", "source_ref": "indicator--8d3927bc-6772-494e-8ff6-4dea5158bb67", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275a6a49-e13b-436f-9643-dd67b804cd30", "created": "2026-10-09T15:13:08.717023Z", "modified": "2026-10-09T15:13:08.717023Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B0F639B67819EDBADC73B9FEFF2582FC58B8F115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.717023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d7113b0-89c3-4ad9-bd45-641317dc7fb8", "created": "2026-10-09T15:13:08.717647Z", "modified": "2026-10-09T15:13:08.717647Z", "relationship_type": "indicates", "source_ref": "indicator--275a6a49-e13b-436f-9643-dd67b804cd30", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59bba15e-21cd-4887-bf03-159234d2b4be", "created": "2026-10-09T15:13:08.717775Z", "modified": "2026-10-09T15:13:08.717775Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B1336A5F3A017394186563E84AE0D2649FC1697D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.717775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf9c241e-cdb5-4989-9e54-6f2f980b50ea", "created": "2026-10-09T15:13:08.718327Z", "modified": "2026-10-09T15:13:08.718327Z", "relationship_type": "indicates", "source_ref": "indicator--59bba15e-21cd-4887-bf03-159234d2b4be", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff19586a-7a63-4560-bdc7-43119f62a4f0", "created": "2026-10-09T15:13:08.718449Z", "modified": "2026-10-09T15:13:08.718449Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CBDA86758FBE8E5A6AB805F493AA151B1F2B95F4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.718449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c798867e-763e-48a2-92a7-c0777daad873", "created": "2026-10-09T15:13:08.719073Z", "modified": "2026-10-09T15:13:08.719073Z", "relationship_type": "indicates", "source_ref": "indicator--ff19586a-7a63-4560-bdc7-43119f62a4f0", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ae38a0-5675-4c2c-a240-b198b192f364", "created": "2026-10-09T15:13:08.719195Z", "modified": "2026-10-09T15:13:08.719195Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D667A33203776F2285EBA3E826CD286356EF05D0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.719195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--784d8d67-df9a-40f5-9568-8ebef9f0a303", "created": "2026-10-09T15:13:08.719816Z", "modified": "2026-10-09T15:13:08.719816Z", "relationship_type": "indicates", "source_ref": "indicator--a9ae38a0-5675-4c2c-a240-b198b192f364", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582b7d3e-3816-44a4-8244-33852ec5ab82", "created": "2026-10-09T15:13:08.71994Z", "modified": "2026-10-09T15:13:08.71994Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FF8CCD9816B0524A58FBDE1809FB227DBCDFD692']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.71994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c431e4a5-38d4-43a3-b665-113be4894d06", "created": "2026-10-09T15:13:08.72065Z", "modified": "2026-10-09T15:13:08.72065Z", "relationship_type": "indicates", "source_ref": "indicator--582b7d3e-3816-44a4-8244-33852ec5ab82", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f094a4e0-1f29-4e15-9595-d229aaf01123", "created": "2026-10-09T15:13:08.720773Z", "modified": "2026-10-09T15:13:08.720773Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E6502D8A870C3F3910EA34F5B46D20D923047580']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.720773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d8fffcf-f5e4-4002-b6d0-8bb750cc4fea", "created": "2026-10-09T15:13:08.721378Z", "modified": "2026-10-09T15:13:08.721378Z", "relationship_type": "indicates", "source_ref": "indicator--f094a4e0-1f29-4e15-9595-d229aaf01123", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3726a0e7-77b8-4efe-95b2-43479fac72d9", "created": "2026-10-09T15:13:08.721501Z", "modified": "2026-10-09T15:13:08.721501Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DE648A3253C16692AF71141C069D15C87C3E5495']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.721501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35884a63-5a6f-4ed1-a963-c6b310ebf294", "created": "2026-10-09T15:13:08.722038Z", "modified": "2026-10-09T15:13:08.722038Z", "relationship_type": "indicates", "source_ref": "indicator--3726a0e7-77b8-4efe-95b2-43479fac72d9", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4857f46f-22b7-4b22-ac41-990d9b0a431a", "created": "2026-10-09T15:13:08.722157Z", "modified": "2026-10-09T15:13:08.722157Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F9181C6CF9AACB3AB1092F5338C3198A8D833431']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.722157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11fd0ac4-2357-402c-a63e-7a7fb3b493fd", "created": "2026-10-09T15:13:08.722704Z", "modified": "2026-10-09T15:13:08.722704Z", "relationship_type": "indicates", "source_ref": "indicator--4857f46f-22b7-4b22-ac41-990d9b0a431a", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22932176-3d87-4cce-bcdc-80a03e825645", "created": "2026-10-09T15:13:08.722826Z", "modified": "2026-10-09T15:13:08.722826Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5E3C376B52C672C81439358DE6348F25F96EAAA4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.722826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75a7bd45-d4fe-4a83-983a-4dbfc0c94899", "created": "2026-10-09T15:13:08.723378Z", "modified": "2026-10-09T15:13:08.723378Z", "relationship_type": "indicates", "source_ref": "indicator--22932176-3d87-4cce-bcdc-80a03e825645", "target_ref": "malware--d318fe02-8a5f-4715-aa2f-4ade53189c13"}, {"type": "malware", "spec_version": "2.1", "id": "malware--571c7809-40b3-4331-bcf1-4203e05112cb", "created": "2026-10-09T15:13:08.723502Z", "modified": "2026-10-09T15:13:08.723502Z", "name": "HelloSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baeaed1-3935-4c61-a85a-ac49291386fb", "created": "2026-10-09T15:13:08.723622Z", "modified": "2026-10-09T15:13:08.723622Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='1topspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.723622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd1b4acf-a47a-4553-a092-f538d9d9f98a", "created": "2026-10-09T15:13:08.724083Z", "modified": "2026-10-09T15:13:08.724083Z", "relationship_type": "indicates", "source_ref": "indicator--6baeaed1-3935-4c61-a85a-ac49291386fb", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584b6b15-129f-431f-93ee-4ceb08ced86d", "created": "2026-10-09T15:13:08.7242Z", "modified": "2026-10-09T15:13:08.7242Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.cellphone-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.7242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4c3301b-3e57-4ab9-a793-27d9b36d83c2", "created": "2026-10-09T15:13:08.724708Z", "modified": "2026-10-09T15:13:08.724708Z", "relationship_type": "indicates", "source_ref": "indicator--584b6b15-129f-431f-93ee-4ceb08ced86d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc838174-641f-4085-8ee5-e4e77e33854b", "created": "2026-10-09T15:13:08.724829Z", "modified": "2026-10-09T15:13:08.724829Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphone-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.724829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aecdb277-f819-4879-aec3-5d270196d38a", "created": "2026-10-09T15:13:08.725324Z", "modified": "2026-10-09T15:13:08.725324Z", "relationship_type": "indicates", "source_ref": "indicator--bc838174-641f-4085-8ee5-e4e77e33854b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a6cdec-fed5-4aba-b852-0c1a64e57c8c", "created": "2026-10-09T15:13:08.725451Z", "modified": "2026-10-09T15:13:08.725451Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='client.spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.725451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11a368e2-f765-4936-9364-2579148793ab", "created": "2026-10-09T15:13:08.725922Z", "modified": "2026-10-09T15:13:08.725922Z", "relationship_type": "indicates", "source_ref": "indicator--e9a6cdec-fed5-4aba-b852-0c1a64e57c8c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce952626-d5f7-4855-a23e-1a541ebfb9f2", "created": "2026-10-09T15:13:08.726038Z", "modified": "2026-10-09T15:13:08.726038Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='client.spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.726038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--438369f4-dba8-4be0-a004-8ff415ec8822", "created": "2026-10-09T15:13:08.726625Z", "modified": "2026-10-09T15:13:08.726625Z", "relationship_type": "indicates", "source_ref": "indicator--ce952626-d5f7-4855-a23e-1a541ebfb9f2", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3bb482-d11f-4dbe-af3b-1e214ca6d918", "created": "2026-10-09T15:13:08.726746Z", "modified": "2026-10-09T15:13:08.726746Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='copy9db.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.726746Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6033670-a1da-4f4c-8e36-b53737878a54", "created": "2026-10-09T15:13:08.727212Z", "modified": "2026-10-09T15:13:08.727212Z", "relationship_type": "indicates", "source_ref": "indicator--ae3bb482-d11f-4dbe-af3b-1e214ca6d918", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1176cb52-cad6-4aaa-a464-3ebd6a628f5d", "created": "2026-10-09T15:13:08.727344Z", "modified": "2026-10-09T15:13:08.727344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata.1topspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.727344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eba70edb-18b7-4312-a60f-81f6ac25a72c", "created": "2026-10-09T15:13:08.727823Z", "modified": "2026-10-09T15:13:08.727823Z", "relationship_type": "indicates", "source_ref": "indicator--1176cb52-cad6-4aaa-a464-3ebd6a628f5d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315308cc-dc01-440f-96ae-d3d8a7ff3ec2", "created": "2026-10-09T15:13:08.727943Z", "modified": "2026-10-09T15:13:08.727943Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata.copy9db.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.727943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfb5d3fd-c693-4b23-9cf8-11b972d3e56e", "created": "2026-10-09T15:13:08.72844Z", "modified": "2026-10-09T15:13:08.72844Z", "relationship_type": "indicates", "source_ref": "indicator--315308cc-dc01-440f-96ae-d3d8a7ff3ec2", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e9df1b-9aaa-4c69-ba07-ef5804f25117", "created": "2026-10-09T15:13:08.72856Z", "modified": "2026-10-09T15:13:08.72856Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.72856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33a8f305-0910-4039-a98f-53f8637ae37e", "created": "2026-10-09T15:13:08.729039Z", "modified": "2026-10-09T15:13:08.729039Z", "relationship_type": "indicates", "source_ref": "indicator--78e9df1b-9aaa-4c69-ba07-ef5804f25117", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4885f34e-b3eb-4175-81a6-0b602e6a392f", "created": "2026-10-09T15:13:08.729176Z", "modified": "2026-10-09T15:13:08.729176Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata2.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.729176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64285b86-bf6d-4444-8215-2747be906b63", "created": "2026-10-09T15:13:08.729688Z", "modified": "2026-10-09T15:13:08.729688Z", "relationship_type": "indicates", "source_ref": "indicator--4885f34e-b3eb-4175-81a6-0b602e6a392f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f1cf94-1ef3-459a-af87-fac603a6f3fe", "created": "2026-10-09T15:13:08.729811Z", "modified": "2026-10-09T15:13:08.729811Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata3.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.729811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a906435-aa28-4403-aca3-f700d3cfcc5a", "created": "2026-10-09T15:13:08.730306Z", "modified": "2026-10-09T15:13:08.730306Z", "relationship_type": "indicates", "source_ref": "indicator--69f1cf94-1ef3-459a-af87-fac603a6f3fe", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcc612d-a82a-483c-b5e6-47e6ba94c25a", "created": "2026-10-09T15:13:08.730429Z", "modified": "2026-10-09T15:13:08.730429Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata4.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.730429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d5cd5b1-3528-4d3a-931a-1e8953fbe215", "created": "2026-10-09T15:13:08.730908Z", "modified": "2026-10-09T15:13:08.730908Z", "relationship_type": "indicates", "source_ref": "indicator--bdcc612d-a82a-483c-b5e6-47e6ba94c25a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd15ef3d-1ee0-4bc2-ad1c-8fd3235a2d8c", "created": "2026-10-09T15:13:08.731026Z", "modified": "2026-10-09T15:13:08.731026Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata5.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.731026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b174b5e-90eb-4571-a17e-af2e1b683e3e", "created": "2026-10-09T15:13:08.731518Z", "modified": "2026-10-09T15:13:08.731518Z", "relationship_type": "indicates", "source_ref": "indicator--bd15ef3d-1ee0-4bc2-ad1c-8fd3235a2d8c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3392ba-5a2f-43f6-8a79-4810da3000bd", "created": "2026-10-09T15:13:08.731637Z", "modified": "2026-10-09T15:13:08.731637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdbd.maxxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.731637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6324bcba-70a8-4ff7-952c-bb0d50dd8768", "created": "2026-10-09T15:13:08.732569Z", "modified": "2026-10-09T15:13:08.732569Z", "relationship_type": "indicates", "source_ref": "indicator--bb3392ba-5a2f-43f6-8a79-4810da3000bd", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efc7b81-24d7-490d-bdf0-e8f02f50b487", "created": "2026-10-09T15:13:08.732701Z", "modified": "2026-10-09T15:13:08.732701Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.732701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c95c92d-1c70-46ab-868d-3a0f1e0bef58", "created": "2026-10-09T15:13:08.73318Z", "modified": "2026-10-09T15:13:08.73318Z", "relationship_type": "indicates", "source_ref": "indicator--3efc7b81-24d7-490d-bdf0-e8f02f50b487", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fb6fc7-de61-4f31-95f8-6ea561b94f13", "created": "2026-10-09T15:13:08.733313Z", "modified": "2026-10-09T15:13:08.733313Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maxxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.733313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbe4656a-0e62-4f60-9268-78e63de1d20e", "created": "2026-10-09T15:13:08.733787Z", "modified": "2026-10-09T15:13:08.733787Z", "relationship_type": "indicates", "source_ref": "indicator--46fb6fc7-de61-4f31-95f8-6ea561b94f13", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c14d2a9-496a-4bc8-a127-ddd25bed5f6f", "created": "2026-10-09T15:13:08.733911Z", "modified": "2026-10-09T15:13:08.733911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.733911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c750e88-dcde-4fb9-bbf9-6fa598a0b92d", "created": "2026-10-09T15:13:08.734418Z", "modified": "2026-10-09T15:13:08.734418Z", "relationship_type": "indicates", "source_ref": "indicator--4c14d2a9-496a-4bc8-a127-ddd25bed5f6f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5918e9cf-f676-4da2-ba04-f687c27c9ced", "created": "2026-10-09T15:13:08.734543Z", "modified": "2026-10-09T15:13:08.734543Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.734543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37a39406-2aa3-400f-ae52-bc2ea201f100", "created": "2026-10-09T15:13:08.735025Z", "modified": "2026-10-09T15:13:08.735025Z", "relationship_type": "indicates", "source_ref": "indicator--5918e9cf-f676-4da2-ba04-f687c27c9ced", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e298d8-3ca9-48fb-ada4-730d8aaabe98", "created": "2026-10-09T15:13:08.735153Z", "modified": "2026-10-09T15:13:08.735153Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.735153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc772668-0ae8-4787-aa5b-84e206ef6e2e", "created": "2026-10-09T15:13:08.735639Z", "modified": "2026-10-09T15:13:08.735639Z", "relationship_type": "indicates", "source_ref": "indicator--74e298d8-3ca9-48fb-ada4-730d8aaabe98", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c399f90-f616-4347-bb6d-1b61548b0c45", "created": "2026-10-09T15:13:08.735761Z", "modified": "2026-10-09T15:13:08.735761Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='virsis.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.735761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fadbe0d-dfbc-4553-9ee2-c609646f6927", "created": "2026-10-09T15:13:08.736306Z", "modified": "2026-10-09T15:13:08.736306Z", "relationship_type": "indicates", "source_ref": "indicator--9c399f90-f616-4347-bb6d-1b61548b0c45", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7966b24-4ad3-4925-8bc6-3851b1c3c0b2", "created": "2026-10-09T15:13:08.736431Z", "modified": "2026-10-09T15:13:08.736431Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webservicesdb.mobiispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.736431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--099538c9-d0f3-478e-8b2a-89017baf27d1", "created": "2026-10-09T15:13:08.736915Z", "modified": "2026-10-09T15:13:08.736915Z", "relationship_type": "indicates", "source_ref": "indicator--c7966b24-4ad3-4925-8bc6-3851b1c3c0b2", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbf284a-7233-4af1-b545-69fafd94e730", "created": "2026-10-09T15:13:08.737032Z", "modified": "2026-10-09T15:13:08.737032Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.737032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c23b0a83-2772-4ef9-aa1f-b6f52cf6f27d", "created": "2026-10-09T15:13:08.73752Z", "modified": "2026-10-09T15:13:08.73752Z", "relationship_type": "indicates", "source_ref": "indicator--cdbf284a-7233-4af1-b545-69fafd94e730", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef20d9ba-2ce2-44be-8c17-52d3b73541f5", "created": "2026-10-09T15:13:08.737645Z", "modified": "2026-10-09T15:13:08.737645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.737645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f65d59b5-bdcd-441a-af30-1f253776b5a3", "created": "2026-10-09T15:13:08.738116Z", "modified": "2026-10-09T15:13:08.738116Z", "relationship_type": "indicates", "source_ref": "indicator--ef20d9ba-2ce2-44be-8c17-52d3b73541f5", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5554d841-4c91-427f-aa93-aec769de59ce", "created": "2026-10-09T15:13:08.738234Z", "modified": "2026-10-09T15:13:08.738234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='1topspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.738234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20f61a98-9e20-4c94-af7b-db9647e7a574", "created": "2026-10-09T15:13:08.738821Z", "modified": "2026-10-09T15:13:08.738821Z", "relationship_type": "indicates", "source_ref": "indicator--5554d841-4c91-427f-aa93-aec769de59ce", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db4db1b-c92b-42f6-acfb-93a5055f2fc7", "created": "2026-10-09T15:13:08.738943Z", "modified": "2026-10-09T15:13:08.738943Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.mobile-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.738943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1549f773-5c96-4e6a-a125-10e2f5a0087e", "created": "2026-10-09T15:13:08.739459Z", "modified": "2026-10-09T15:13:08.739459Z", "relationship_type": "indicates", "source_ref": "indicator--0db4db1b-c92b-42f6-acfb-93a5055f2fc7", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f26fe7-8eb2-4a02-b876-ac1b61dfd38b", "created": "2026-10-09T15:13:08.739582Z", "modified": "2026-10-09T15:13:08.739582Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.739582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1eee48c-cb5d-4a52-8494-12850bf60b43", "created": "2026-10-09T15:13:08.740061Z", "modified": "2026-10-09T15:13:08.740061Z", "relationship_type": "indicates", "source_ref": "indicator--37f26fe7-8eb2-4a02-b876-ac1b61dfd38b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a571beb-3832-4003-ab6a-7e9a202138f7", "created": "2026-10-09T15:13:08.740183Z", "modified": "2026-10-09T15:13:08.740183Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getspyapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.740183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f14e256d-2bea-4820-be20-2d0cd33df5ae", "created": "2026-10-09T15:13:08.740678Z", "modified": "2026-10-09T15:13:08.740678Z", "relationship_type": "indicates", "source_ref": "indicator--3a571beb-3832-4003-ab6a-7e9a202138f7", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ce8c63-3b63-4252-9a97-9bcf1dde561b", "created": "2026-10-09T15:13:08.740797Z", "modified": "2026-10-09T15:13:08.740797Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.740797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5758e2e-b7a7-4e99-8719-ca637c5c5e35", "created": "2026-10-09T15:13:08.741255Z", "modified": "2026-10-09T15:13:08.741255Z", "relationship_type": "indicates", "source_ref": "indicator--d7ce8c63-3b63-4252-9a97-9bcf1dde561b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbffb6f2-3f52-4868-9128-e5e50137c937", "created": "2026-10-09T15:13:08.741382Z", "modified": "2026-10-09T15:13:08.741382Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='innovaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.741382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae13f68b-d2a3-433e-bdd7-b55755c7b2e6", "created": "2026-10-09T15:13:08.741847Z", "modified": "2026-10-09T15:13:08.741847Z", "relationship_type": "indicates", "source_ref": "indicator--bbffb6f2-3f52-4868-9128-e5e50137c937", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd60a76-9566-4fcb-8d32-454035d3e14a", "created": "2026-10-09T15:13:08.741963Z", "modified": "2026-10-09T15:13:08.741963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ispytic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.741963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3afcdd1-4627-4e34-aed6-1830d35bee1c", "created": "2026-10-09T15:13:08.742429Z", "modified": "2026-10-09T15:13:08.742429Z", "relationship_type": "indicates", "source_ref": "indicator--4fd60a76-9566-4fcb-8d32-454035d3e14a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa14bc4-ae73-4f47-832e-663b1caf4d0a", "created": "2026-10-09T15:13:08.742545Z", "modified": "2026-10-09T15:13:08.742545Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maxxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.742545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a978efc6-8c20-4baf-8d1c-4bf64af1bef8", "created": "2026-10-09T15:13:08.743019Z", "modified": "2026-10-09T15:13:08.743019Z", "relationship_type": "indicates", "source_ref": "indicator--6fa14bc4-ae73-4f47-832e-663b1caf4d0a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283bf78e-4542-4ffb-b7fe-81073471d6e1", "created": "2026-10-09T15:13:08.743142Z", "modified": "2026-10-09T15:13:08.743142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobeespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.743142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--371f7b9f-ba31-4d77-81e4-34f9664f9741", "created": "2026-10-09T15:13:08.743621Z", "modified": "2026-10-09T15:13:08.743621Z", "relationship_type": "indicates", "source_ref": "indicator--283bf78e-4542-4ffb-b7fe-81073471d6e1", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3e2d86-e436-4c1b-bcb2-98e0c11fce14", "created": "2026-10-09T15:13:08.743742Z", "modified": "2026-10-09T15:13:08.743742Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.743742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--566ea791-fbd2-4fa7-b226-55c52a5d14cd", "created": "2026-10-09T15:13:08.744355Z", "modified": "2026-10-09T15:13:08.744355Z", "relationship_type": "indicates", "source_ref": "indicator--ab3e2d86-e436-4c1b-bcb2-98e0c11fce14", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338c3884-182b-4c4b-9a42-220278550505", "created": "2026-10-09T15:13:08.744491Z", "modified": "2026-10-09T15:13:08.744491Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.744491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de3c55fb-000a-4e5a-a9cf-ccb965180338", "created": "2026-10-09T15:13:08.744974Z", "modified": "2026-10-09T15:13:08.744974Z", "relationship_type": "indicates", "source_ref": "indicator--338c3884-182b-4c4b-9a42-220278550505", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a832167d-15b0-4879-b0a7-30096dee5c0a", "created": "2026-10-09T15:13:08.745099Z", "modified": "2026-10-09T15:13:08.745099Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.745099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74c808fa-de73-4f14-9458-72629f1e73f1", "created": "2026-10-09T15:13:08.745593Z", "modified": "2026-10-09T15:13:08.745593Z", "relationship_type": "indicates", "source_ref": "indicator--a832167d-15b0-4879-b0a7-30096dee5c0a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e389c112-a66e-4fe0-9660-0ca344343313", "created": "2026-10-09T15:13:08.745716Z", "modified": "2026-10-09T15:13:08.745716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespyblog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.745716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed0489d3-a18b-443b-949a-25a8181ed355", "created": "2026-10-09T15:13:08.746199Z", "modified": "2026-10-09T15:13:08.746199Z", "relationship_type": "indicates", "source_ref": "indicator--e389c112-a66e-4fe0-9660-0ca344343313", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14f8ab3-e987-4723-887f-638b438cd53b", "created": "2026-10-09T15:13:08.74633Z", "modified": "2026-10-09T15:13:08.74633Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspymax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.74633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36953e71-8d95-4ea1-9c4c-6b76e61b4c6b", "created": "2026-10-09T15:13:08.746796Z", "modified": "2026-10-09T15:13:08.746796Z", "relationship_type": "indicates", "source_ref": "indicator--b14f8ab3-e987-4723-887f-638b438cd53b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302a27af-6303-41ba-a7f0-3258a79a8de7", "created": "2026-10-09T15:13:08.746915Z", "modified": "2026-10-09T15:13:08.746915Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='opispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.746915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86db783b-6c5d-4ed8-b0f1-d712a31ad7a0", "created": "2026-10-09T15:13:08.747473Z", "modified": "2026-10-09T15:13:08.747473Z", "relationship_type": "indicates", "source_ref": "indicator--302a27af-6303-41ba-a7f0-3258a79a8de7", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de82caad-bb8d-4ac2-9023-abe28a1eee69", "created": "2026-10-09T15:13:08.7476Z", "modified": "2026-10-09T15:13:08.7476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyacellphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.7476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14c76679-5ac7-4513-9a7b-af34c5cfa5ff", "created": "2026-10-09T15:13:08.748079Z", "modified": "2026-10-09T15:13:08.748079Z", "relationship_type": "indicates", "source_ref": "indicator--de82caad-bb8d-4ac2-9023-abe28a1eee69", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f4bed6-4561-4896-9e8e-a228eff753ba", "created": "2026-10-09T15:13:08.748199Z", "modified": "2026-10-09T15:13:08.748199Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.748199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e4437ce-e54a-4a7c-9395-ddf47d1ed3c8", "created": "2026-10-09T15:13:08.748691Z", "modified": "2026-10-09T15:13:08.748691Z", "relationship_type": "indicates", "source_ref": "indicator--a1f4bed6-4561-4896-9e8e-a228eff753ba", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e353c2-f393-4b0c-8f31-79ad9e920af1", "created": "2026-10-09T15:13:08.748811Z", "modified": "2026-10-09T15:13:08.748811Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.748811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c521d5c2-3803-4cec-9e07-80116c2ca6cd", "created": "2026-10-09T15:13:08.749283Z", "modified": "2026-10-09T15:13:08.749283Z", "relationship_type": "indicates", "source_ref": "indicator--f2e353c2-f393-4b0c-8f31-79ad9e920af1", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8565006-7072-48af-9c04-601c326b5c4a", "created": "2026-10-09T15:13:08.749405Z", "modified": "2026-10-09T15:13:08.749405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyios8x.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.749405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b34284d7-bc65-429b-b63e-ad0f035a0e11", "created": "2026-10-09T15:13:08.749978Z", "modified": "2026-10-09T15:13:08.749978Z", "relationship_type": "indicates", "source_ref": "indicator--e8565006-7072-48af-9c04-601c326b5c4a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3cecb1-fc28-4667-811f-a1818ce9faab", "created": "2026-10-09T15:13:08.750101Z", "modified": "2026-10-09T15:13:08.750101Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.750101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a9b9dee-23c6-4206-bf97-b11c4e3ee0e9", "created": "2026-10-09T15:13:08.750587Z", "modified": "2026-10-09T15:13:08.750587Z", "relationship_type": "indicates", "source_ref": "indicator--cd3cecb1-fc28-4667-811f-a1818ce9faab", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36483fe7-aed1-4a28-9c72-97b5a7bfaffe", "created": "2026-10-09T15:13:08.750708Z", "modified": "2026-10-09T15:13:08.750708Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.750708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da3118cb-3797-4cd7-8376-4fb18a7ccb4f", "created": "2026-10-09T15:13:08.751169Z", "modified": "2026-10-09T15:13:08.751169Z", "relationship_type": "indicates", "source_ref": "indicator--36483fe7-aed1-4a28-9c72-97b5a7bfaffe", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee023b8b-84a0-488e-a9d0-e4db9d980e52", "created": "2026-10-09T15:13:08.7513Z", "modified": "2026-10-09T15:13:08.7513Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='profotoeditor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.7513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--437e91af-d047-412d-a107-6684b5d66b84", "created": "2026-10-09T15:13:08.751787Z", "modified": "2026-10-09T15:13:08.751787Z", "relationship_type": "indicates", "source_ref": "indicator--ee023b8b-84a0-488e-a9d0-e4db9d980e52", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e93fb88-ceaf-447f-9d1a-60193759e360", "created": "2026-10-09T15:13:08.751907Z", "modified": "2026-10-09T15:13:08.751907Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='178.63.71.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.751907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd6bea16-073b-4ab6-88d6-8d0c6e48be82", "created": "2026-10-09T15:13:08.752392Z", "modified": "2026-10-09T15:13:08.752392Z", "relationship_type": "indicates", "source_ref": "indicator--0e93fb88-ceaf-447f-9d1a-60193759e360", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e7dae5-aede-4daa-a2ae-2da5be558735", "created": "2026-10-09T15:13:08.752519Z", "modified": "2026-10-09T15:13:08.752519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='495c1e3b40afd320a2d67dee6dfc0b58744c07c9e6cbbf554c35e5497d76f351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.752519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--334deb5c-2d97-4da7-aa28-485f2f82896b", "created": "2026-10-09T15:13:08.753129Z", "modified": "2026-10-09T15:13:08.753129Z", "relationship_type": "indicates", "source_ref": "indicator--d8e7dae5-aede-4daa-a2ae-2da5be558735", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feef4a21-a561-4529-8838-3fa4c87c10bd", "created": "2026-10-09T15:13:08.753254Z", "modified": "2026-10-09T15:13:08.753254Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a8cea56f382e5339fed2387b2c06083683fd1613b7db5eef03d619c5ecea5d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.753254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eaadba96-b6c7-459b-9263-37132a7e84ac", "created": "2026-10-09T15:13:08.753853Z", "modified": "2026-10-09T15:13:08.753853Z", "relationship_type": "indicates", "source_ref": "indicator--feef4a21-a561-4529-8838-3fa4c87c10bd", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5ddd11-0e94-4898-b5e7-cf7710b3b291", "created": "2026-10-09T15:13:08.753973Z", "modified": "2026-10-09T15:13:08.753973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7955cef071d9e2d563cb1ba9aecea2dba361854641c4cbfad39cb242d1cb7156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.753973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--454b331b-1923-452c-94da-be5b05d0658e", "created": "2026-10-09T15:13:08.754563Z", "modified": "2026-10-09T15:13:08.754563Z", "relationship_type": "indicates", "source_ref": "indicator--1f5ddd11-0e94-4898-b5e7-cf7710b3b291", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca1cc46-17e5-41f0-b0d8-8747a56e6a7b", "created": "2026-10-09T15:13:08.75468Z", "modified": "2026-10-09T15:13:08.75468Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5d27b69497c09d2481b662a84b0dac694f2f932f8160b9a4f1c9e99cc359fc5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.75468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0b2d7cc-6f51-434a-ac1d-0b28466a0125", "created": "2026-10-09T15:13:08.755283Z", "modified": "2026-10-09T15:13:08.755283Z", "relationship_type": "indicates", "source_ref": "indicator--4ca1cc46-17e5-41f0-b0d8-8747a56e6a7b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d719a7a-cab2-486b-bae0-25700960ab10", "created": "2026-10-09T15:13:08.755406Z", "modified": "2026-10-09T15:13:08.755406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e13a41ca68f0a2b41d97426600b7f64e8cb11c01251a8373e21369d0d2a1c59d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.755406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5033df2c-0b0f-4204-979c-cae0de546b18", "created": "2026-10-09T15:13:08.756085Z", "modified": "2026-10-09T15:13:08.756085Z", "relationship_type": "indicates", "source_ref": "indicator--9d719a7a-cab2-486b-bae0-25700960ab10", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67e88e9-8fec-4661-aff7-d2bbf31859c4", "created": "2026-10-09T15:13:08.756205Z", "modified": "2026-10-09T15:13:08.756205Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0b247dd8c09d5af2a6e58b7dada1bbff3741ed379ce40fdf9b497469ba03d85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.756205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46c02bed-6603-4ebd-882b-b25480529629", "created": "2026-10-09T15:13:08.756807Z", "modified": "2026-10-09T15:13:08.756807Z", "relationship_type": "indicates", "source_ref": "indicator--c67e88e9-8fec-4661-aff7-d2bbf31859c4", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e9779a-3fa9-432a-bfc3-b8da3da49c53", "created": "2026-10-09T15:13:08.756928Z", "modified": "2026-10-09T15:13:08.756928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a48445a5da9d5649bb5dabe40155c99fcfe1fb503fa169d9f21bbe68cfd3114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.756928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5ec9bce-5278-451d-8bcf-42654d565884", "created": "2026-10-09T15:13:08.757523Z", "modified": "2026-10-09T15:13:08.757523Z", "relationship_type": "indicates", "source_ref": "indicator--86e9779a-3fa9-432a-bfc3-b8da3da49c53", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d4b849-ce08-4464-a5dd-c55fea631266", "created": "2026-10-09T15:13:08.757645Z", "modified": "2026-10-09T15:13:08.757645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8ea0be5ada9340af9ee46dd71e6f537c6e96631bf6b1d88813acdfed76bb392']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.757645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b22a2a3-92ee-48e7-aa60-46bf7eea3e57", "created": "2026-10-09T15:13:08.758234Z", "modified": "2026-10-09T15:13:08.758234Z", "relationship_type": "indicates", "source_ref": "indicator--49d4b849-ce08-4464-a5dd-c55fea631266", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f290bc10-49ec-4ed5-9f91-66d46cd15028", "created": "2026-10-09T15:13:08.75837Z", "modified": "2026-10-09T15:13:08.75837Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93b0fa151195b9827ee07fadc8d7831a734ef2fb2756bdae02b1dd98a1c6d39b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.75837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fd08f36-2828-4ac2-97fa-e35743a009d2", "created": "2026-10-09T15:13:08.758956Z", "modified": "2026-10-09T15:13:08.758956Z", "relationship_type": "indicates", "source_ref": "indicator--f290bc10-49ec-4ed5-9f91-66d46cd15028", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53592165-2877-4e77-89b2-9ac896354ce4", "created": "2026-10-09T15:13:08.75908Z", "modified": "2026-10-09T15:13:08.75908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fcd4d09edc2c20ecb4b3eca758f5c263998fe2c07f4001b692460f004743c8c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.75908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd216b23-5542-46d4-a491-32a183e94500", "created": "2026-10-09T15:13:08.759673Z", "modified": "2026-10-09T15:13:08.759673Z", "relationship_type": "indicates", "source_ref": "indicator--53592165-2877-4e77-89b2-9ac896354ce4", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228d9c39-7e47-459f-819b-61360ae10686", "created": "2026-10-09T15:13:08.759794Z", "modified": "2026-10-09T15:13:08.759794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d10af08a10e726a9ec8561ccde7450a2fbd68c8cae95b4e12a2eca08c769b27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.759794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de50305f-c64e-40be-a379-70a33be4a6e0", "created": "2026-10-09T15:13:08.760385Z", "modified": "2026-10-09T15:13:08.760385Z", "relationship_type": "indicates", "source_ref": "indicator--228d9c39-7e47-459f-819b-61360ae10686", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cd3ab9-9fdb-4ce3-8d4f-d45689771022", "created": "2026-10-09T15:13:08.760514Z", "modified": "2026-10-09T15:13:08.760514Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15564b1fe7262e02254c639abc08086f92bf8f8a60d765c750ee69e1b7aea541']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.760514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ec4e1c2-64a7-4b0e-a602-4bd48e97475e", "created": "2026-10-09T15:13:08.761106Z", "modified": "2026-10-09T15:13:08.761106Z", "relationship_type": "indicates", "source_ref": "indicator--56cd3ab9-9fdb-4ce3-8d4f-d45689771022", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5295b0-31f2-4029-a112-391434b8ed75", "created": "2026-10-09T15:13:08.761226Z", "modified": "2026-10-09T15:13:08.761226Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a896c127a7a4b75b7032dc5f56d20ebb918403c0d84d2f3cf4fd55e785cf9415']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.761226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43238c70-daf4-4c21-8abf-9aabe0180a73", "created": "2026-10-09T15:13:08.761821Z", "modified": "2026-10-09T15:13:08.761821Z", "relationship_type": "indicates", "source_ref": "indicator--aa5295b0-31f2-4029-a112-391434b8ed75", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528b6045-32bb-478d-bd15-55299186e027", "created": "2026-10-09T15:13:08.761939Z", "modified": "2026-10-09T15:13:08.761939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='809444db04b9e9f6a79df4634313cc952499feaa1ef6b4033244ead19f40301d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.761939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c65aafc-808f-492c-947e-22b1e4b08f97", "created": "2026-10-09T15:13:08.762629Z", "modified": "2026-10-09T15:13:08.762629Z", "relationship_type": "indicates", "source_ref": "indicator--528b6045-32bb-478d-bd15-55299186e027", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d2be4a-128d-46a2-bff0-869a5e3316c2", "created": "2026-10-09T15:13:08.762751Z", "modified": "2026-10-09T15:13:08.762751Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b267249cbcb222e2f45e6ab2a3de557fa7f9bef4b34d011c7ad4511b41e4eec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.762751Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ecff336-6bc2-4d58-a10a-8f2a79f127e0", "created": "2026-10-09T15:13:08.763343Z", "modified": "2026-10-09T15:13:08.763343Z", "relationship_type": "indicates", "source_ref": "indicator--98d2be4a-128d-46a2-bff0-869a5e3316c2", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f43bfae-f59d-4dcf-871f-3d0f46c0df31", "created": "2026-10-09T15:13:08.763466Z", "modified": "2026-10-09T15:13:08.763466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f3bc9ebe8c249f0416f5b0367f34b4b8f6aaa7d351dc5b4912fe2558491b6b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.763466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f6a625e-e84f-4b4a-8796-40c2f590cfd6", "created": "2026-10-09T15:13:08.764043Z", "modified": "2026-10-09T15:13:08.764043Z", "relationship_type": "indicates", "source_ref": "indicator--5f43bfae-f59d-4dcf-871f-3d0f46c0df31", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd17a6f-1ed6-42bd-ad00-9e4942489b30", "created": "2026-10-09T15:13:08.764163Z", "modified": "2026-10-09T15:13:08.764163Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed44c74b000809a45506c57080658303357716d454919bd4394dac4cf3edf8ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.764163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12109e31-d888-4bad-8dfd-c05b5b95bcb2", "created": "2026-10-09T15:13:08.764774Z", "modified": "2026-10-09T15:13:08.764774Z", "relationship_type": "indicates", "source_ref": "indicator--cbd17a6f-1ed6-42bd-ad00-9e4942489b30", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76af5d12-37fb-4e47-b724-57f3f3f502ba", "created": "2026-10-09T15:13:08.764896Z", "modified": "2026-10-09T15:13:08.764896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bac1e5c3cc602952d002db55d9de0f80adc1fa3ec32c5050c292e1d4d7f3df17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.764896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6820cd7c-4e59-49b0-9b8e-8b91981eaa42", "created": "2026-10-09T15:13:08.765497Z", "modified": "2026-10-09T15:13:08.765497Z", "relationship_type": "indicates", "source_ref": "indicator--76af5d12-37fb-4e47-b724-57f3f3f502ba", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f29f79-e11c-44dc-9fe4-412c0c6e44a0", "created": "2026-10-09T15:13:08.76562Z", "modified": "2026-10-09T15:13:08.76562Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2d9b06b9a8f2db3032f10cb82716b8db7cd72f98cd6be1689de1e56331bc1ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.76562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fe700e5-6a5a-4384-bc2a-4e12c3d8fe3b", "created": "2026-10-09T15:13:08.766201Z", "modified": "2026-10-09T15:13:08.766201Z", "relationship_type": "indicates", "source_ref": "indicator--c8f29f79-e11c-44dc-9fe4-412c0c6e44a0", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010bc2d5-7976-4e47-b221-28e94b9bafb1", "created": "2026-10-09T15:13:08.766333Z", "modified": "2026-10-09T15:13:08.766333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='362a5b734c80c992a39710609add8e01a1168949c4f7de891fa55040428832b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.766333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8e1ac70-6dbe-439e-a113-55b0450e6a94", "created": "2026-10-09T15:13:08.766919Z", "modified": "2026-10-09T15:13:08.766919Z", "relationship_type": "indicates", "source_ref": "indicator--010bc2d5-7976-4e47-b221-28e94b9bafb1", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b15369-257d-45ac-8660-8454fa445d6d", "created": "2026-10-09T15:13:08.767038Z", "modified": "2026-10-09T15:13:08.767038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4ae7dfa492edc2d47c1fd8346588718e1f51c1bf4b74a0909c88fb6327e734b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.767038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ce9f4c7-77fd-4d6e-8606-e84f80517fd0", "created": "2026-10-09T15:13:08.767636Z", "modified": "2026-10-09T15:13:08.767636Z", "relationship_type": "indicates", "source_ref": "indicator--39b15369-257d-45ac-8660-8454fa445d6d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fed99ba-0c25-454b-953b-9651e540efd9", "created": "2026-10-09T15:13:08.767761Z", "modified": "2026-10-09T15:13:08.767761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='611736dfb1f0da65604412ed3cedc612fa292349c3041b9d3971e0426728c1bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.767761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--653c139b-b9df-4b90-8131-4376c1135ead", "created": "2026-10-09T15:13:08.768356Z", "modified": "2026-10-09T15:13:08.768356Z", "relationship_type": "indicates", "source_ref": "indicator--3fed99ba-0c25-454b-953b-9651e540efd9", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba2ccd2-92c3-47c6-ba82-2f32177d0a5e", "created": "2026-10-09T15:13:08.768478Z", "modified": "2026-10-09T15:13:08.768478Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13e0ac75810028bc4a2ee4b810f4fb9eb5c8dbe5ed43e88f4b635f5877475864']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.768478Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1b0e4d3-fd06-42f9-87ef-ad10d9f75a37", "created": "2026-10-09T15:13:08.769163Z", "modified": "2026-10-09T15:13:08.769163Z", "relationship_type": "indicates", "source_ref": "indicator--6ba2ccd2-92c3-47c6-ba82-2f32177d0a5e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f3092c-7154-40c5-a483-f77906fe8f00", "created": "2026-10-09T15:13:08.769295Z", "modified": "2026-10-09T15:13:08.769295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e87884b4bc35d6c2ecc57912ccf91dd8ea903818d1ab988c106d9e60b0c93a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.769295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46bf7917-f6ec-4918-b0a1-f0ac0ee91898", "created": "2026-10-09T15:13:08.769881Z", "modified": "2026-10-09T15:13:08.769881Z", "relationship_type": "indicates", "source_ref": "indicator--20f3092c-7154-40c5-a483-f77906fe8f00", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed061304-5e40-4b11-9375-6b3f0942cd0d", "created": "2026-10-09T15:13:08.770003Z", "modified": "2026-10-09T15:13:08.770003Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1add35a54b77ce30742d18398d9f79b8ffb49e3d39f846381eea3624db598d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.770003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54cb5bb2-a20b-4ef2-9435-0eecbe8d09a6", "created": "2026-10-09T15:13:08.770599Z", "modified": "2026-10-09T15:13:08.770599Z", "relationship_type": "indicates", "source_ref": "indicator--ed061304-5e40-4b11-9375-6b3f0942cd0d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e32f12-9f6a-4d94-82b4-6d3d27cf5918", "created": "2026-10-09T15:13:08.770721Z", "modified": "2026-10-09T15:13:08.770721Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89b921dd0ddec7feec1877862f215408484340f3362f28698beddb17d9bf445d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.770721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c7c25d4-9f3e-4e62-89a4-2adc1a8e40f1", "created": "2026-10-09T15:13:08.771317Z", "modified": "2026-10-09T15:13:08.771317Z", "relationship_type": "indicates", "source_ref": "indicator--01e32f12-9f6a-4d94-82b4-6d3d27cf5918", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad706762-3ac3-48ea-af7d-9c68ccd0f823", "created": "2026-10-09T15:13:08.771439Z", "modified": "2026-10-09T15:13:08.771439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5918f58ba7b9fcb1cc92fd3b6b1d80638ae2f5ffe3687f1b22fdf4db6927d4ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.771439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01bb88cf-75a5-4d2a-be19-11309a65bd8a", "created": "2026-10-09T15:13:08.772029Z", "modified": "2026-10-09T15:13:08.772029Z", "relationship_type": "indicates", "source_ref": "indicator--ad706762-3ac3-48ea-af7d-9c68ccd0f823", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02dfdfa-0e32-447e-b5c7-e8a5008a5464", "created": "2026-10-09T15:13:08.772148Z", "modified": "2026-10-09T15:13:08.772148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4dfdba46a872d5e10c69bee741aa08dcd4cb0b2373a736b972eaa85b80659d32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.772148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67563e51-3cc1-4db9-b1cb-117bdec4f76e", "created": "2026-10-09T15:13:08.772742Z", "modified": "2026-10-09T15:13:08.772742Z", "relationship_type": "indicates", "source_ref": "indicator--c02dfdfa-0e32-447e-b5c7-e8a5008a5464", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e468c971-84ea-4367-bbbe-35c2b9b79759", "created": "2026-10-09T15:13:08.772864Z", "modified": "2026-10-09T15:13:08.772864Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f916cd6796935aa9a83bfb076fb86795450d81abb47f9965647b4ce255d4181f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.772864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7373aaf8-3db9-446c-8284-79af7351ce4e", "created": "2026-10-09T15:13:08.77346Z", "modified": "2026-10-09T15:13:08.77346Z", "relationship_type": "indicates", "source_ref": "indicator--e468c971-84ea-4367-bbbe-35c2b9b79759", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf31747-3576-4d68-a445-72b07044889c", "created": "2026-10-09T15:13:08.773581Z", "modified": "2026-10-09T15:13:08.773581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c07b0cbad31ce7e331b161e88f117436be656a2179f5aa37a81f1500141335a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.773581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--735d685a-de0f-44d4-bb29-d72da7bd041d", "created": "2026-10-09T15:13:08.774158Z", "modified": "2026-10-09T15:13:08.774158Z", "relationship_type": "indicates", "source_ref": "indicator--baf31747-3576-4d68-a445-72b07044889c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f2958b-ce44-4ae7-8b12-533048883641", "created": "2026-10-09T15:13:08.774286Z", "modified": "2026-10-09T15:13:08.774286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f6efeefea291f1fbd8584914ce24ac6361c790397ff13b2c12978538f963af0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.774286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13af5b43-c02d-4810-b9d2-fef8e4f0a77e", "created": "2026-10-09T15:13:08.774977Z", "modified": "2026-10-09T15:13:08.774977Z", "relationship_type": "indicates", "source_ref": "indicator--13f2958b-ce44-4ae7-8b12-533048883641", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bd5145-0e98-4350-8de9-98477f44717a", "created": "2026-10-09T15:13:08.775101Z", "modified": "2026-10-09T15:13:08.775101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee23b9af72c59bed21df12958e3a2a7e5c06d34310f4b03be641baa4e3b92b6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.775101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1532933e-00ea-421f-920c-6f37590791f8", "created": "2026-10-09T15:13:08.775723Z", "modified": "2026-10-09T15:13:08.775723Z", "relationship_type": "indicates", "source_ref": "indicator--e8bd5145-0e98-4350-8de9-98477f44717a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560bd12f-41b3-434a-b896-554d3a77ef07", "created": "2026-10-09T15:13:08.775847Z", "modified": "2026-10-09T15:13:08.775847Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f6b9e1f728e69e499b82120666dc7119a74b3ede8c8341211815e9d87fdb125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.775847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40725367-4f5a-4a20-90c4-fbd2ba6910ff", "created": "2026-10-09T15:13:08.77645Z", "modified": "2026-10-09T15:13:08.77645Z", "relationship_type": "indicates", "source_ref": "indicator--560bd12f-41b3-434a-b896-554d3a77ef07", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e76cad-ddb4-4e3b-997e-7310da5ddf27", "created": "2026-10-09T15:13:08.776574Z", "modified": "2026-10-09T15:13:08.776574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d582f5748e72a4d12ade3a61aedfbf150fe46edd88da6e8ed0b224cce526de4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.776574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f9ce316-d976-4be5-bc2e-0ff60da24f3a", "created": "2026-10-09T15:13:08.777156Z", "modified": "2026-10-09T15:13:08.777156Z", "relationship_type": "indicates", "source_ref": "indicator--e4e76cad-ddb4-4e3b-997e-7310da5ddf27", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a21700-8e6a-4617-80c8-aa35dd227802", "created": "2026-10-09T15:13:08.777286Z", "modified": "2026-10-09T15:13:08.777286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='122398ef2c28b577e491459915dfc00da1de6bb942cc67b1c273180a0af116ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.777286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c873b994-f92b-4ce3-b3d7-f49befc3fb04", "created": "2026-10-09T15:13:08.777876Z", "modified": "2026-10-09T15:13:08.777876Z", "relationship_type": "indicates", "source_ref": "indicator--47a21700-8e6a-4617-80c8-aa35dd227802", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d146495-12e4-4977-9872-9cdc8095831e", "created": "2026-10-09T15:13:08.778Z", "modified": "2026-10-09T15:13:08.778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bbe03430f5e9128c1dcaff73d94036ce40373170101f003ab30891ea5cacbfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--423810db-4bcc-4a54-b26a-9ac026f52649", "created": "2026-10-09T15:13:08.778593Z", "modified": "2026-10-09T15:13:08.778593Z", "relationship_type": "indicates", "source_ref": "indicator--9d146495-12e4-4977-9872-9cdc8095831e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69f7d1d-0e27-4262-9951-e7fe00172dda", "created": "2026-10-09T15:13:08.778714Z", "modified": "2026-10-09T15:13:08.778714Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73ef0fb8b79a60703f3d5e88305aefba67141b774fa6b84a798d29ab7415c557']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.778714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--861a9ea5-5d64-42b4-bbd8-440a34104810", "created": "2026-10-09T15:13:08.779305Z", "modified": "2026-10-09T15:13:08.779305Z", "relationship_type": "indicates", "source_ref": "indicator--b69f7d1d-0e27-4262-9951-e7fe00172dda", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517f49b8-a3e9-4529-805c-df81ba6fe615", "created": "2026-10-09T15:13:08.779433Z", "modified": "2026-10-09T15:13:08.779433Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3566fa1503c6bcb641c7f486f3ea2950d0f83800733bc4fe55bc1246b5fde57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.779433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e05b9de-250a-4322-995a-016e5b883e4c", "created": "2026-10-09T15:13:08.780019Z", "modified": "2026-10-09T15:13:08.780019Z", "relationship_type": "indicates", "source_ref": "indicator--517f49b8-a3e9-4529-805c-df81ba6fe615", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaa5294-2ccd-47aa-8ef7-f7bf1b35db6e", "created": "2026-10-09T15:13:08.780136Z", "modified": "2026-10-09T15:13:08.780136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7f29ea7beb90ea5b68304d99b7e985cc34ddab1e148720e5dd8eb692e0d9e3c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.780136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7525a996-9968-4981-92c9-4b25428a9031", "created": "2026-10-09T15:13:08.780733Z", "modified": "2026-10-09T15:13:08.780733Z", "relationship_type": "indicates", "source_ref": "indicator--3aaa5294-2ccd-47aa-8ef7-f7bf1b35db6e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e4dde6-7567-49a7-8f75-2773c847af98", "created": "2026-10-09T15:13:08.780854Z", "modified": "2026-10-09T15:13:08.780854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8893180027877372dba71e4484c99a0a2783e381191ac84169ea585307c19c80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.780854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50cf5446-253c-4d2f-adc7-487193d2d71a", "created": "2026-10-09T15:13:08.781566Z", "modified": "2026-10-09T15:13:08.781566Z", "relationship_type": "indicates", "source_ref": "indicator--83e4dde6-7567-49a7-8f75-2773c847af98", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5a70ca-7280-4eb5-aa41-816dec031eee", "created": "2026-10-09T15:13:08.78169Z", "modified": "2026-10-09T15:13:08.78169Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4886c4faa0b3578ef90af88f3ef29bf55d46d9c4f0c9bc7c527d59079308ef9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.78169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63116cf6-387e-4865-999d-edb0b992a1db", "created": "2026-10-09T15:13:08.782291Z", "modified": "2026-10-09T15:13:08.782291Z", "relationship_type": "indicates", "source_ref": "indicator--6d5a70ca-7280-4eb5-aa41-816dec031eee", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b67cf0-178e-4790-900e-0be0c4d8357b", "created": "2026-10-09T15:13:08.782414Z", "modified": "2026-10-09T15:13:08.782414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c6cf9e15fd3d70369d930dae92111518deb5c4cfe2a411a74292f62a320fe0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.782414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c806f02f-71ac-4490-86e6-883a027fbc40", "created": "2026-10-09T15:13:08.783002Z", "modified": "2026-10-09T15:13:08.783002Z", "relationship_type": "indicates", "source_ref": "indicator--74b67cf0-178e-4790-900e-0be0c4d8357b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c89623-9a92-46bf-ba4e-aad4c7cd0e98", "created": "2026-10-09T15:13:08.783126Z", "modified": "2026-10-09T15:13:08.783126Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b93de26791c2c7c8e98d74bc5727a4367b68a1f14a8c71f176f92d7b8049329']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.783126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28757608-f4f7-45f5-a92a-5fa58841010a", "created": "2026-10-09T15:13:08.783727Z", "modified": "2026-10-09T15:13:08.783727Z", "relationship_type": "indicates", "source_ref": "indicator--44c89623-9a92-46bf-ba4e-aad4c7cd0e98", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bbea41-2659-4cf3-a7be-885180ad1e1f", "created": "2026-10-09T15:13:08.783849Z", "modified": "2026-10-09T15:13:08.783849Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d97f8b225371e30ba72c6b724a8e0214e29343138dcaa545e5b166581d08c4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.783849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b682ff22-9ce8-4b07-98e1-a5ce04f026a2", "created": "2026-10-09T15:13:08.784445Z", "modified": "2026-10-09T15:13:08.784445Z", "relationship_type": "indicates", "source_ref": "indicator--83bbea41-2659-4cf3-a7be-885180ad1e1f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9711fe-4236-49cd-aea7-bde1478db095", "created": "2026-10-09T15:13:08.784563Z", "modified": "2026-10-09T15:13:08.784563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9a20dc495151ead4193171d4f94e7a30c2efe8fe30dccd98534b752f356512']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.784563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4512a223-f86d-4084-8d85-5cce0a501a56", "created": "2026-10-09T15:13:08.785157Z", "modified": "2026-10-09T15:13:08.785157Z", "relationship_type": "indicates", "source_ref": "indicator--0c9711fe-4236-49cd-aea7-bde1478db095", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda89d7d-4204-47fd-a0a7-98645aa06bdb", "created": "2026-10-09T15:13:08.785296Z", "modified": "2026-10-09T15:13:08.785296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='710d70fb43c87b7d663daeadb2c8e39b91dece4cdd89085944452f88587ba00c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.785296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9dd5e9a-2059-4e04-89b7-90b03c4b3468", "created": "2026-10-09T15:13:08.785878Z", "modified": "2026-10-09T15:13:08.785878Z", "relationship_type": "indicates", "source_ref": "indicator--dda89d7d-4204-47fd-a0a7-98645aa06bdb", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bd6d53-4762-47dc-adca-b4cb9f27f4c3", "created": "2026-10-09T15:13:08.785995Z", "modified": "2026-10-09T15:13:08.785995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='577493b01b33d87a0fbe988bf8e3008060584ff62b1ca949cd798b9747e63aa8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.785995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1d3d217-4732-457f-b90c-0af68e199015", "created": "2026-10-09T15:13:08.786602Z", "modified": "2026-10-09T15:13:08.786602Z", "relationship_type": "indicates", "source_ref": "indicator--a8bd6d53-4762-47dc-adca-b4cb9f27f4c3", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03193f41-0228-4e18-a591-258bf480651d", "created": "2026-10-09T15:13:08.786726Z", "modified": "2026-10-09T15:13:08.786726Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95f0d0c28040db9d8aab64ba1a4173cde0da43680a26e3e531c9291cd2597254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.786726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51cee92c-4bbe-43c7-99fd-337353c04d8e", "created": "2026-10-09T15:13:08.787335Z", "modified": "2026-10-09T15:13:08.787335Z", "relationship_type": "indicates", "source_ref": "indicator--03193f41-0228-4e18-a591-258bf480651d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699f41c0-fd61-4df4-aa1a-a78d86c0b1d6", "created": "2026-10-09T15:13:08.78746Z", "modified": "2026-10-09T15:13:08.78746Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aae89e217255e486541d8e94635d01b9221b92eaa7bc5125026c9aae4d93fba0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.78746Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90e8d0e7-390e-4e03-ba0a-42d18dadf9f7", "created": "2026-10-09T15:13:08.788153Z", "modified": "2026-10-09T15:13:08.788153Z", "relationship_type": "indicates", "source_ref": "indicator--699f41c0-fd61-4df4-aa1a-a78d86c0b1d6", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a28180-427c-4963-8a2f-b56aa287bb86", "created": "2026-10-09T15:13:08.788284Z", "modified": "2026-10-09T15:13:08.788284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='891fef1417324175fa4e7c35be818d0e1bc0e2537094061719ffdd8f5c2c1afc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.788284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe1a9d0d-8f93-4872-9fa3-0da5a4fed12c", "created": "2026-10-09T15:13:08.788873Z", "modified": "2026-10-09T15:13:08.788873Z", "relationship_type": "indicates", "source_ref": "indicator--72a28180-427c-4963-8a2f-b56aa287bb86", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c15ecf-36e8-45cc-9e89-22b9f73e43c2", "created": "2026-10-09T15:13:08.788993Z", "modified": "2026-10-09T15:13:08.788993Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8b2647ee3d1c2004954c406d1cea79d14127614bcf0d65fa55e657e5cfc2318']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.788993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--316e3f29-c01b-4dd5-bcdf-22a989cba035", "created": "2026-10-09T15:13:08.78959Z", "modified": "2026-10-09T15:13:08.78959Z", "relationship_type": "indicates", "source_ref": "indicator--25c15ecf-36e8-45cc-9e89-22b9f73e43c2", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f474d73f-e390-4739-a90d-600b543a54a3", "created": "2026-10-09T15:13:08.789712Z", "modified": "2026-10-09T15:13:08.789712Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='792f97b7c7ef2bcb2a67f94e103d38677f0ea5da6496c587db6f039fa47f861f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.789712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51d6011e-98c1-4d5c-8358-f6ae8906d9c9", "created": "2026-10-09T15:13:08.790307Z", "modified": "2026-10-09T15:13:08.790307Z", "relationship_type": "indicates", "source_ref": "indicator--f474d73f-e390-4739-a90d-600b543a54a3", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd74e46-87a3-41c2-9c7c-e56d90699e9f", "created": "2026-10-09T15:13:08.79043Z", "modified": "2026-10-09T15:13:08.79043Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='196c325ea637bf2bf0054e8f1e3683d784a6b6a95c04a4bf2920b0e7e5c0d68c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.79043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cefd946-c4d9-4bea-a3bb-f20c586184b0", "created": "2026-10-09T15:13:08.791016Z", "modified": "2026-10-09T15:13:08.791016Z", "relationship_type": "indicates", "source_ref": "indicator--3bd74e46-87a3-41c2-9c7c-e56d90699e9f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121413c9-b06d-46b5-ac45-42313c38f287", "created": "2026-10-09T15:13:08.791134Z", "modified": "2026-10-09T15:13:08.791134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e85a3b7c279b4a8f9a27dad7e6db00e9b5c0a33b2c0c047d648e7769de9b5bf1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.791134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78b7b8a7-3e6f-4491-9705-846802cdf78c", "created": "2026-10-09T15:13:08.791723Z", "modified": "2026-10-09T15:13:08.791723Z", "relationship_type": "indicates", "source_ref": "indicator--121413c9-b06d-46b5-ac45-42313c38f287", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecb2716-5ae9-47c5-937a-10dd485c7426", "created": "2026-10-09T15:13:08.791842Z", "modified": "2026-10-09T15:13:08.791842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d6d2394e3cbff757197f1826c86a12a348cdb877d144fe959745f9e0f451118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.791842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dd908c2-2af4-4c34-863f-925a605f05c0", "created": "2026-10-09T15:13:08.792434Z", "modified": "2026-10-09T15:13:08.792434Z", "relationship_type": "indicates", "source_ref": "indicator--8ecb2716-5ae9-47c5-937a-10dd485c7426", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e9864f-6956-46e0-831d-3740cb4baf47", "created": "2026-10-09T15:13:08.792556Z", "modified": "2026-10-09T15:13:08.792556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c380d86db0157f569e4ad908d12f2276573a2faede578daa31e474e200132deb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.792556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e517b1ff-d2d6-4040-babe-fb4b8df61f21", "created": "2026-10-09T15:13:08.793144Z", "modified": "2026-10-09T15:13:08.793144Z", "relationship_type": "indicates", "source_ref": "indicator--e1e9864f-6956-46e0-831d-3740cb4baf47", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32743383-dc27-4f6e-a151-627df57d9c67", "created": "2026-10-09T15:13:08.79328Z", "modified": "2026-10-09T15:13:08.79328Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a64fed1c630a11ad7e70a0313fc8e5126ce92d654850e7a3905470bc28f514f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.79328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b4f65bb-2d9d-43a3-8e27-407bb91baffe", "created": "2026-10-09T15:13:08.793976Z", "modified": "2026-10-09T15:13:08.793976Z", "relationship_type": "indicates", "source_ref": "indicator--32743383-dc27-4f6e-a151-627df57d9c67", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f550b1a5-fdfe-4b40-b659-3f0e72b9212d", "created": "2026-10-09T15:13:08.794104Z", "modified": "2026-10-09T15:13:08.794104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a9c6fdff26bf37bc4b374d43a93b30c0f7f52020a41c699a8bfa1868840df66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.794104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be717435-7d6d-4c3e-941b-4a890201666f", "created": "2026-10-09T15:13:08.794698Z", "modified": "2026-10-09T15:13:08.794698Z", "relationship_type": "indicates", "source_ref": "indicator--f550b1a5-fdfe-4b40-b659-3f0e72b9212d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac93ba4b-b82f-40c3-b28e-ca759b2ba5d5", "created": "2026-10-09T15:13:08.79482Z", "modified": "2026-10-09T15:13:08.79482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='759af7e0434126059069bb16f7de28f88643f305bebe71528e155e916fc31546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.79482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec182472-a818-4d98-b109-6329d9d6b314", "created": "2026-10-09T15:13:08.795414Z", "modified": "2026-10-09T15:13:08.795414Z", "relationship_type": "indicates", "source_ref": "indicator--ac93ba4b-b82f-40c3-b28e-ca759b2ba5d5", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d885c5ed-a6ea-428a-8342-23ef02ea609b", "created": "2026-10-09T15:13:08.795535Z", "modified": "2026-10-09T15:13:08.795535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dba1d575e17644e2132fff6eced7746fe8825358ba33d7519853a3836ae0b21f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.795535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ead6a02-bd0e-46d3-bc0e-10fe023317d9", "created": "2026-10-09T15:13:08.796117Z", "modified": "2026-10-09T15:13:08.796117Z", "relationship_type": "indicates", "source_ref": "indicator--d885c5ed-a6ea-428a-8342-23ef02ea609b", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc45274-2cdf-41f2-aa38-91d9458189b3", "created": "2026-10-09T15:13:08.796236Z", "modified": "2026-10-09T15:13:08.796236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3300e23f115da752db66a446eb6b10c73561cc7d9bf941e535d78ab8a1835632']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.796236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ded2a0f-30f6-4feb-899c-61c0744b7f7b", "created": "2026-10-09T15:13:08.79684Z", "modified": "2026-10-09T15:13:08.79684Z", "relationship_type": "indicates", "source_ref": "indicator--cfc45274-2cdf-41f2-aa38-91d9458189b3", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1a7346-dfb0-4443-ae74-1af717a62c06", "created": "2026-10-09T15:13:08.796968Z", "modified": "2026-10-09T15:13:08.796968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a69a276db6d439001e364aab2c37d6c40557095953fc02ec849b637ad264d45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.796968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad6d1826-b633-44e2-a20c-9f62934025de", "created": "2026-10-09T15:13:08.797565Z", "modified": "2026-10-09T15:13:08.797565Z", "relationship_type": "indicates", "source_ref": "indicator--5f1a7346-dfb0-4443-ae74-1af717a62c06", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d89fbe-9515-45de-b8ee-9766f66d4c5f", "created": "2026-10-09T15:13:08.797688Z", "modified": "2026-10-09T15:13:08.797688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3e76b47e122eadbab168e53c9bf1af92a60ac5c8edd6ac317db97a9d2c39e26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.797688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0feaf57f-a2df-4cf9-b753-d0438f105b00", "created": "2026-10-09T15:13:08.79829Z", "modified": "2026-10-09T15:13:08.79829Z", "relationship_type": "indicates", "source_ref": "indicator--a8d89fbe-9515-45de-b8ee-9766f66d4c5f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c907cc9-44a1-4047-9f79-f379359179ad", "created": "2026-10-09T15:13:08.798425Z", "modified": "2026-10-09T15:13:08.798425Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='777d0bc5091dcd5d1dc5fd51ca5e4e67312cf08eb60dc7ea8dac01105821d200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.798425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5302e2ab-75c4-4d54-8330-4e46828fbed5", "created": "2026-10-09T15:13:08.799013Z", "modified": "2026-10-09T15:13:08.799013Z", "relationship_type": "indicates", "source_ref": "indicator--6c907cc9-44a1-4047-9f79-f379359179ad", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c95608-c0b3-43ef-b712-4da3faa66b73", "created": "2026-10-09T15:13:08.799132Z", "modified": "2026-10-09T15:13:08.799132Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9bf8f7e8e949fc21009c431e4eee01e996f0e1caaef41699b22321d8abf0c53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.799132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91c563a8-9a2a-47ff-b8e4-54ba48da823d", "created": "2026-10-09T15:13:08.799722Z", "modified": "2026-10-09T15:13:08.799722Z", "relationship_type": "indicates", "source_ref": "indicator--84c95608-c0b3-43ef-b712-4da3faa66b73", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f574a026-599a-4767-8eca-c5395aadd030", "created": "2026-10-09T15:13:08.799842Z", "modified": "2026-10-09T15:13:08.799842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a6e2a38782ea3d0eabf1bbc5f388ea3dd56d08d38ffc81cebe7c8fdf5594e42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.799842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0f65633-112a-466e-8772-f6ade17bb552", "created": "2026-10-09T15:13:08.800545Z", "modified": "2026-10-09T15:13:08.800545Z", "relationship_type": "indicates", "source_ref": "indicator--f574a026-599a-4767-8eca-c5395aadd030", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0442608-36a2-4f08-9a94-f669ced61506", "created": "2026-10-09T15:13:08.800668Z", "modified": "2026-10-09T15:13:08.800668Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e52438f28275dc2a7e83b989e726f86ba53c915b44f126507763850197646f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.800668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e26591ed-25be-4a1e-8c8d-4954a8a95db1", "created": "2026-10-09T15:13:08.801246Z", "modified": "2026-10-09T15:13:08.801246Z", "relationship_type": "indicates", "source_ref": "indicator--b0442608-36a2-4f08-9a94-f669ced61506", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585dad57-a556-4203-9f31-f44612e6ad42", "created": "2026-10-09T15:13:08.801376Z", "modified": "2026-10-09T15:13:08.801376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76a5121457d43a79b1fcb4c6b6098b23def2d9509e111fcf11c6dc276f500c97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.801376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--792a14af-fba1-4212-8eab-0fd16e00e48e", "created": "2026-10-09T15:13:08.801957Z", "modified": "2026-10-09T15:13:08.801957Z", "relationship_type": "indicates", "source_ref": "indicator--585dad57-a556-4203-9f31-f44612e6ad42", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d50c8ea-d799-412c-8c42-9b09f7a17fea", "created": "2026-10-09T15:13:08.802076Z", "modified": "2026-10-09T15:13:08.802076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10c4749bcf4e36638c54d5f2e141b7f90a580f670d3f72841fa79e42d275a217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.802076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e724dce7-f7f6-4e22-9c09-a0496ac55955", "created": "2026-10-09T15:13:08.80267Z", "modified": "2026-10-09T15:13:08.80267Z", "relationship_type": "indicates", "source_ref": "indicator--4d50c8ea-d799-412c-8c42-9b09f7a17fea", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240ac3e3-dbfd-406d-8bab-6e4cdd1fef28", "created": "2026-10-09T15:13:08.802791Z", "modified": "2026-10-09T15:13:08.802791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f29e75c97f1c0f3461c384c3358ad888e1be114dc0eef9d44cd12b7b30a5d5e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.802791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ec78320-9b4c-4ffd-8af2-9fbf7e27b919", "created": "2026-10-09T15:13:08.803384Z", "modified": "2026-10-09T15:13:08.803384Z", "relationship_type": "indicates", "source_ref": "indicator--240ac3e3-dbfd-406d-8bab-6e4cdd1fef28", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f597a569-31b8-45b8-9f2e-ec4944633163", "created": "2026-10-09T15:13:08.803503Z", "modified": "2026-10-09T15:13:08.803503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='efb55e3b484ac441976eb9ec20e2c61ca350b4356971da806558dfc5317ecfb6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.803503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbc72722-bcce-4785-924f-d311dac83f78", "created": "2026-10-09T15:13:08.804082Z", "modified": "2026-10-09T15:13:08.804082Z", "relationship_type": "indicates", "source_ref": "indicator--f597a569-31b8-45b8-9f2e-ec4944633163", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425e671b-3870-4db0-966d-6d488de59893", "created": "2026-10-09T15:13:08.804199Z", "modified": "2026-10-09T15:13:08.804199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b64e301fe0a37ed680cf3d1be58a2f5dd7b6f86911c06edce62cc023ccbb68c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.804199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28adbe94-df4f-4113-935d-c62336486acf", "created": "2026-10-09T15:13:08.804792Z", "modified": "2026-10-09T15:13:08.804792Z", "relationship_type": "indicates", "source_ref": "indicator--425e671b-3870-4db0-966d-6d488de59893", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f770951-0050-42c6-ac59-b63761a74412", "created": "2026-10-09T15:13:08.804908Z", "modified": "2026-10-09T15:13:08.804908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac2ef74229eb170380330c85ad511ac70660554dfdefdbd6a1bd15b7cbdf2c62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.804908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48d51111-123e-4bcc-a670-afa3aa73fcb0", "created": "2026-10-09T15:13:08.805501Z", "modified": "2026-10-09T15:13:08.805501Z", "relationship_type": "indicates", "source_ref": "indicator--9f770951-0050-42c6-ac59-b63761a74412", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9ded22-3c5b-4c8b-946d-e817bf364a7c", "created": "2026-10-09T15:13:08.805622Z", "modified": "2026-10-09T15:13:08.805622Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6691acdde1290b1bedf893841a04730c1ab1f5a00ceff01b5ad719b9d9341a48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.805622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b77ed858-911f-4b9b-8648-cdb50fd18078", "created": "2026-10-09T15:13:08.806208Z", "modified": "2026-10-09T15:13:08.806208Z", "relationship_type": "indicates", "source_ref": "indicator--ec9ded22-3c5b-4c8b-946d-e817bf364a7c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d36d87-fa4e-4c89-b6b5-c776cc077baa", "created": "2026-10-09T15:13:08.806341Z", "modified": "2026-10-09T15:13:08.806341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc7623a9f959d384ffaee43f0083356a79ef0669ed2af18c0c38d5c1c6fa1ae1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.806341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efa1ffee-7d95-441a-ae28-93bbac99c6e7", "created": "2026-10-09T15:13:08.807353Z", "modified": "2026-10-09T15:13:08.807353Z", "relationship_type": "indicates", "source_ref": "indicator--07d36d87-fa4e-4c89-b6b5-c776cc077baa", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1727f65e-0332-45e3-b387-e2f434fe8d51", "created": "2026-10-09T15:13:08.807477Z", "modified": "2026-10-09T15:13:08.807477Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cfd4bb895ea465ce3d92d4e99ef220d97e5cf6d9936b4b08fc55c52384195659']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.807477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--136c83e7-e585-43b8-a3c7-2a28d1f7bc69", "created": "2026-10-09T15:13:08.80806Z", "modified": "2026-10-09T15:13:08.80806Z", "relationship_type": "indicates", "source_ref": "indicator--1727f65e-0332-45e3-b387-e2f434fe8d51", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4255763d-69e2-4c4a-8988-be6207a65003", "created": "2026-10-09T15:13:08.808182Z", "modified": "2026-10-09T15:13:08.808182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d7c87283256621dca3f48887f7a9068b6636124a552cff54924d96e7fbccff0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.808182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33267e51-443d-48dc-a74e-9a994b7044d3", "created": "2026-10-09T15:13:08.808775Z", "modified": "2026-10-09T15:13:08.808775Z", "relationship_type": "indicates", "source_ref": "indicator--4255763d-69e2-4c4a-8988-be6207a65003", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be583bb6-fead-45fc-8b19-9424d13620a6", "created": "2026-10-09T15:13:08.808897Z", "modified": "2026-10-09T15:13:08.808897Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56ee9dfee5c1526be1b421a2dab7026cccd6b1697b25b9babf48fa178ab20034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.808897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65a00bad-2396-4dba-84e5-b03eafbd5c79", "created": "2026-10-09T15:13:08.809505Z", "modified": "2026-10-09T15:13:08.809505Z", "relationship_type": "indicates", "source_ref": "indicator--be583bb6-fead-45fc-8b19-9424d13620a6", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae4c3b8-a181-4b98-891a-e55497899ea2", "created": "2026-10-09T15:13:08.809632Z", "modified": "2026-10-09T15:13:08.809632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5516637d5c79334b79ff5b8877bedcfdb395858c467a84df3f555836d1c3d3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.809632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba09c62b-9706-48a2-9cbe-f26387471f5c", "created": "2026-10-09T15:13:08.810219Z", "modified": "2026-10-09T15:13:08.810219Z", "relationship_type": "indicates", "source_ref": "indicator--9ae4c3b8-a181-4b98-891a-e55497899ea2", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd9e877-623d-4938-a0b9-a3bd21f1594a", "created": "2026-10-09T15:13:08.810353Z", "modified": "2026-10-09T15:13:08.810353Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cac7e08e64454ca6fe5519e3cbdd3cf2aba1f06656721b99948b7275c7e532f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.810353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--914584b7-d85e-4e2e-b1dc-79d1b4bfd655", "created": "2026-10-09T15:13:08.810939Z", "modified": "2026-10-09T15:13:08.810939Z", "relationship_type": "indicates", "source_ref": "indicator--5dd9e877-623d-4938-a0b9-a3bd21f1594a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783b18ff-bf62-40ea-a49a-6d1ada1f7d14", "created": "2026-10-09T15:13:08.811064Z", "modified": "2026-10-09T15:13:08.811064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95af557b9026cee5918a89dd8db67bb894be31ae26a048896995b520613a606e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.811064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ad7237f-219b-45bb-8ea0-8b76ed8e9908", "created": "2026-10-09T15:13:08.811653Z", "modified": "2026-10-09T15:13:08.811653Z", "relationship_type": "indicates", "source_ref": "indicator--783b18ff-bf62-40ea-a49a-6d1ada1f7d14", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6877516-f6a0-41a2-8120-0e31b35714e7", "created": "2026-10-09T15:13:08.811772Z", "modified": "2026-10-09T15:13:08.811772Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a0e3850015f87d7e88d7637e37051f7a64732a254e456d7b8e21d66a4f8d6e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.811772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73a28228-721e-4d58-b1e6-7dcf8fe5bb00", "created": "2026-10-09T15:13:08.812384Z", "modified": "2026-10-09T15:13:08.812384Z", "relationship_type": "indicates", "source_ref": "indicator--d6877516-f6a0-41a2-8120-0e31b35714e7", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebc8f72-f045-4548-8517-f399114d9824", "created": "2026-10-09T15:13:08.812512Z", "modified": "2026-10-09T15:13:08.812512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fdd77772c6b37bb2008977740f0582d7b474095de55b8a15b6300dcda4426a2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.812512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14a61c63-a491-48a9-9800-7abf3a0c20d4", "created": "2026-10-09T15:13:08.813104Z", "modified": "2026-10-09T15:13:08.813104Z", "relationship_type": "indicates", "source_ref": "indicator--7ebc8f72-f045-4548-8517-f399114d9824", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cd0d18-e43b-4f82-9377-0311edea86d5", "created": "2026-10-09T15:13:08.813223Z", "modified": "2026-10-09T15:13:08.813223Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea75e842ec7e927aed6ec0fe3a85f515f2f9bfaa1a84d665c7937fa1e5caf7c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.813223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5e04162-a010-41f7-985b-8d91a0a46aae", "created": "2026-10-09T15:13:08.813937Z", "modified": "2026-10-09T15:13:08.813937Z", "relationship_type": "indicates", "source_ref": "indicator--19cd0d18-e43b-4f82-9377-0311edea86d5", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b2c4d0-b986-40ac-8ef3-638d77970892", "created": "2026-10-09T15:13:08.814065Z", "modified": "2026-10-09T15:13:08.814065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23929ad7a4945c8ddb12545c90d9739895d1846f168bba367a556e458a53c7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.814065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af048357-ff12-4cef-b9a2-b907e32f14c2", "created": "2026-10-09T15:13:08.814662Z", "modified": "2026-10-09T15:13:08.814662Z", "relationship_type": "indicates", "source_ref": "indicator--83b2c4d0-b986-40ac-8ef3-638d77970892", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21fd0b8-5b9e-4614-9da2-d1c878f799cb", "created": "2026-10-09T15:13:08.814784Z", "modified": "2026-10-09T15:13:08.814784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d22eede29d9c481053d6c288c4aa722451d3ce032cc801856259dfe7ae450cb8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.814784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e20e94-a585-4567-87df-740d6404969e", "created": "2026-10-09T15:13:08.815372Z", "modified": "2026-10-09T15:13:08.815372Z", "relationship_type": "indicates", "source_ref": "indicator--e21fd0b8-5b9e-4614-9da2-d1c878f799cb", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccbbb40-64ef-4f11-bae5-24a758871c48", "created": "2026-10-09T15:13:08.815492Z", "modified": "2026-10-09T15:13:08.815492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d040065f9160e463225bddeb3179b2210eaca53b47334c808f4e65cb6fc47284']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.815492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20f30c38-4e78-445d-b1b6-19e6cc53b698", "created": "2026-10-09T15:13:08.816076Z", "modified": "2026-10-09T15:13:08.816076Z", "relationship_type": "indicates", "source_ref": "indicator--7ccbbb40-64ef-4f11-bae5-24a758871c48", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9b58ae-70b0-4ad0-a871-d693b3e7c241", "created": "2026-10-09T15:13:08.816195Z", "modified": "2026-10-09T15:13:08.816195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22bcd6529138782ce7b8311c41de307660efe4f26f5b77f88ee52ec0b31b797a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.816195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6077acd9-a7b0-4681-b7ef-b059f24989c5", "created": "2026-10-09T15:13:08.816789Z", "modified": "2026-10-09T15:13:08.816789Z", "relationship_type": "indicates", "source_ref": "indicator--bf9b58ae-70b0-4ad0-a871-d693b3e7c241", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5355d3-fe3a-4ba7-b451-2b04d2f07656", "created": "2026-10-09T15:13:08.816911Z", "modified": "2026-10-09T15:13:08.816911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fba88e4aaf2af1500a5720d48d6c63ec234270f1278ca412257d0013fe132dc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.816911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66aa269d-82ad-42c3-8792-3979759c8840", "created": "2026-10-09T15:13:08.81751Z", "modified": "2026-10-09T15:13:08.81751Z", "relationship_type": "indicates", "source_ref": "indicator--4d5355d3-fe3a-4ba7-b451-2b04d2f07656", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b21699c-a09d-4198-b511-a7452a2dda39", "created": "2026-10-09T15:13:08.817633Z", "modified": "2026-10-09T15:13:08.817633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e24bed9ae314f7b50a234805584c1e9cd5f20513fb619555841ea3caeb20ddd5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.817633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da8bf33d-1057-4a3c-b019-b5c1ed466b68", "created": "2026-10-09T15:13:08.818235Z", "modified": "2026-10-09T15:13:08.818235Z", "relationship_type": "indicates", "source_ref": "indicator--4b21699c-a09d-4198-b511-a7452a2dda39", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7266e25-8a20-461d-87e1-16a403e276ff", "created": "2026-10-09T15:13:08.818368Z", "modified": "2026-10-09T15:13:08.818368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b17c3e598cb3657439996d26d70562b72487086d5677975b97598e86d0ff4d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.818368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a61d0b13-58ed-4786-8113-326756af7c84", "created": "2026-10-09T15:13:08.818951Z", "modified": "2026-10-09T15:13:08.818951Z", "relationship_type": "indicates", "source_ref": "indicator--c7266e25-8a20-461d-87e1-16a403e276ff", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80df12fd-c33e-48d1-9970-4f98e9dc10c8", "created": "2026-10-09T15:13:08.81907Z", "modified": "2026-10-09T15:13:08.81907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca912c296e5a65b241d83da71b7ddfb3bef5f3ab412ec122b8557e2ab15b6671']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.81907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd8f1736-e755-4f13-b15e-417dec2ef0bc", "created": "2026-10-09T15:13:08.819661Z", "modified": "2026-10-09T15:13:08.819661Z", "relationship_type": "indicates", "source_ref": "indicator--80df12fd-c33e-48d1-9970-4f98e9dc10c8", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1eddc0-f341-4c7c-bb98-2f0f20fdd8c1", "created": "2026-10-09T15:13:08.819779Z", "modified": "2026-10-09T15:13:08.819779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7789c3bf629fa260712aedefa93c688cf999133f89d724366dec3e6c14986c12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.819779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5853cd3d-562b-4c7b-bf65-769d696aea64", "created": "2026-10-09T15:13:08.820498Z", "modified": "2026-10-09T15:13:08.820498Z", "relationship_type": "indicates", "source_ref": "indicator--cb1eddc0-f341-4c7c-bb98-2f0f20fdd8c1", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5bf2c3-b390-4737-998a-732b7cc34c88", "created": "2026-10-09T15:13:08.820627Z", "modified": "2026-10-09T15:13:08.820627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a52c9089d7a5a53fb94b3232691dd5e8299e35840b1503d5e2051f4068ca512b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.820627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c54be7ea-adea-4986-b096-f64ff4a226ab", "created": "2026-10-09T15:13:08.821217Z", "modified": "2026-10-09T15:13:08.821217Z", "relationship_type": "indicates", "source_ref": "indicator--9e5bf2c3-b390-4737-998a-732b7cc34c88", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b073f241-0a73-43a3-ad88-5ab920e62e2a", "created": "2026-10-09T15:13:08.821352Z", "modified": "2026-10-09T15:13:08.821352Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59616acb848184ef501b55eed59ded3db51e7a1b4ccc476a8eec784b9db87270']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.821352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8255768d-c869-4e0a-b5b3-922ab9f6ae35", "created": "2026-10-09T15:13:08.821958Z", "modified": "2026-10-09T15:13:08.821958Z", "relationship_type": "indicates", "source_ref": "indicator--b073f241-0a73-43a3-ad88-5ab920e62e2a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eb6541-bba8-431b-b37b-0e346bb4fb24", "created": "2026-10-09T15:13:08.822082Z", "modified": "2026-10-09T15:13:08.822082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db96ea05672188096d05c657fddb4134c56adf9f9971a234c6c1028959eae4c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.822082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41294b01-c41e-4138-9ee3-eed78a9661d6", "created": "2026-10-09T15:13:08.82267Z", "modified": "2026-10-09T15:13:08.82267Z", "relationship_type": "indicates", "source_ref": "indicator--28eb6541-bba8-431b-b37b-0e346bb4fb24", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25bd19c3-bce6-4c74-88a4-242b377fa258", "created": "2026-10-09T15:13:08.822789Z", "modified": "2026-10-09T15:13:08.822789Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aae6a0f264a658f1630e99c636cf854f6224648dbfe2e8838e7656c891ed681']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.822789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8783cb8-2fae-4fbd-9ca3-760296fef2bf", "created": "2026-10-09T15:13:08.823386Z", "modified": "2026-10-09T15:13:08.823386Z", "relationship_type": "indicates", "source_ref": "indicator--25bd19c3-bce6-4c74-88a4-242b377fa258", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d938cb-e3b3-47c7-aef8-4dfc262aa0fe", "created": "2026-10-09T15:13:08.823508Z", "modified": "2026-10-09T15:13:08.823508Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09a21b7d1b9a7bafd0341b2bba43c5b66edaa044d48c0efd6bb6691ecbbee5f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.823508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe0789e8-8e18-4202-84aa-ef7574abe3b6", "created": "2026-10-09T15:13:08.824098Z", "modified": "2026-10-09T15:13:08.824098Z", "relationship_type": "indicates", "source_ref": "indicator--a4d938cb-e3b3-47c7-aef8-4dfc262aa0fe", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6a21f3-5c2a-47da-a12b-35f240b7b3ec", "created": "2026-10-09T15:13:08.824221Z", "modified": "2026-10-09T15:13:08.824221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed0dfb8089d82dd415dcdcb40b67b3f3c28cb3c520a00cc70cb08bf606cc4e66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.824221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43b1987c-fb82-47ec-aaa8-4ec13a58cfa9", "created": "2026-10-09T15:13:08.824815Z", "modified": "2026-10-09T15:13:08.824815Z", "relationship_type": "indicates", "source_ref": "indicator--ae6a21f3-5c2a-47da-a12b-35f240b7b3ec", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fe691d-c697-406f-9fc4-088f8ce6c810", "created": "2026-10-09T15:13:08.824933Z", "modified": "2026-10-09T15:13:08.824933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1605113e98c26220b694135f5020844d93d72d70b61e17fd555cbcc0a3854ebe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.824933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f519ee6-231b-442c-84ad-7b39e576d812", "created": "2026-10-09T15:13:08.825526Z", "modified": "2026-10-09T15:13:08.825526Z", "relationship_type": "indicates", "source_ref": "indicator--f0fe691d-c697-406f-9fc4-088f8ce6c810", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b552e60-d996-4b45-9292-a727ead03f01", "created": "2026-10-09T15:13:08.825649Z", "modified": "2026-10-09T15:13:08.825649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ac65ea5e1604d0e437e6dd0fcd0888a31cf6c96833015059f6cb0d989c18158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.825649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03dd54c7-86cd-4e25-abe7-044340c97ef0", "created": "2026-10-09T15:13:08.826359Z", "modified": "2026-10-09T15:13:08.826359Z", "relationship_type": "indicates", "source_ref": "indicator--3b552e60-d996-4b45-9292-a727ead03f01", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9937c443-ab31-4ac4-999b-9232a5fc569e", "created": "2026-10-09T15:13:08.826486Z", "modified": "2026-10-09T15:13:08.826486Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='252d55271e0fe3b9d9f5971963d63fdb9f6ec0e19a5d7ff27f27c066438a2748']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.826486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c5d66e6-e9b5-4bfa-b972-f527a197e558", "created": "2026-10-09T15:13:08.827076Z", "modified": "2026-10-09T15:13:08.827076Z", "relationship_type": "indicates", "source_ref": "indicator--9937c443-ab31-4ac4-999b-9232a5fc569e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae9eeaa-e9be-40e1-adb6-0807a8936287", "created": "2026-10-09T15:13:08.827196Z", "modified": "2026-10-09T15:13:08.827196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6977e6e1050aa884ebc4732859c9c239218847ddd492a86dfdc19fbc3748a109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.827196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ece58904-343c-47a5-a803-17b1a76c183f", "created": "2026-10-09T15:13:08.827794Z", "modified": "2026-10-09T15:13:08.827794Z", "relationship_type": "indicates", "source_ref": "indicator--aae9eeaa-e9be-40e1-adb6-0807a8936287", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c06a507-7449-4943-8d1a-6fec8f1d6673", "created": "2026-10-09T15:13:08.827914Z", "modified": "2026-10-09T15:13:08.827914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b0a0b6b4fb7ecbcabf3111007f051bf0067b86123aa24ad6adbcfc7648562ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.827914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a945a2a-1a6d-497d-9e2d-9b14f4d59914", "created": "2026-10-09T15:13:08.82851Z", "modified": "2026-10-09T15:13:08.82851Z", "relationship_type": "indicates", "source_ref": "indicator--6c06a507-7449-4943-8d1a-6fec8f1d6673", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7615159-0a40-481f-a5eb-472f6cfe402e", "created": "2026-10-09T15:13:08.828635Z", "modified": "2026-10-09T15:13:08.828635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83971977247736f1a99a02b9eb394e560e98de9a0cd64fbae594f6da622f4859']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.828635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4c02664-7d09-4b15-b0be-20ef48b8fcd1", "created": "2026-10-09T15:13:08.829226Z", "modified": "2026-10-09T15:13:08.829226Z", "relationship_type": "indicates", "source_ref": "indicator--a7615159-0a40-481f-a5eb-472f6cfe402e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63c3e12-fa5a-4a5d-8b7f-0d375726f64a", "created": "2026-10-09T15:13:08.829358Z", "modified": "2026-10-09T15:13:08.829358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d7f8e66fc6b436c68fa3620ebcf573fb4a28feb802710543b6bb8690e5abf8c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.829358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb2be3dc-18ed-438c-afc4-d5fd33161dcd", "created": "2026-10-09T15:13:08.829951Z", "modified": "2026-10-09T15:13:08.829951Z", "relationship_type": "indicates", "source_ref": "indicator--a63c3e12-fa5a-4a5d-8b7f-0d375726f64a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286bbf69-ce86-44d4-af30-3b13fef8d173", "created": "2026-10-09T15:13:08.830072Z", "modified": "2026-10-09T15:13:08.830072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dfba04a26e0727fbd1d2a32e91125c5588d399388a1bcabf57b87d80f6c8b49c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.830072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26a4d2e9-8565-41c6-b829-32d57c24e99f", "created": "2026-10-09T15:13:08.830671Z", "modified": "2026-10-09T15:13:08.830671Z", "relationship_type": "indicates", "source_ref": "indicator--286bbf69-ce86-44d4-af30-3b13fef8d173", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e1405b-1f12-4a56-901d-8d125f819d9d", "created": "2026-10-09T15:13:08.83079Z", "modified": "2026-10-09T15:13:08.83079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3321aef6bb5d4807badc0171ec6169f623057a970311adb26ec958e1ec03347e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.83079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3df11ac-9e51-4b23-9846-bc3131147f72", "created": "2026-10-09T15:13:08.831381Z", "modified": "2026-10-09T15:13:08.831381Z", "relationship_type": "indicates", "source_ref": "indicator--95e1405b-1f12-4a56-901d-8d125f819d9d", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b850bd43-c683-41a8-9a76-9b6efb230a42", "created": "2026-10-09T15:13:08.831501Z", "modified": "2026-10-09T15:13:08.831501Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bffe294019c86f9a65ccafc7cb9c07ea44295ca0cd4dbe99afb36e2944765148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.831501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f96d3b7-4ddd-41d4-915b-5e0ea4dd8493", "created": "2026-10-09T15:13:08.832098Z", "modified": "2026-10-09T15:13:08.832098Z", "relationship_type": "indicates", "source_ref": "indicator--b850bd43-c683-41a8-9a76-9b6efb230a42", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1e91b6-91f5-475f-8274-56c2b87f512c", "created": "2026-10-09T15:13:08.832217Z", "modified": "2026-10-09T15:13:08.832217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='056c74dc28215a1846fdc556de6ff80e6db0433abb972dfc72cf78a65c077a7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.832217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--606df48f-1123-452f-bcd1-ab43e64c4af1", "created": "2026-10-09T15:13:08.832915Z", "modified": "2026-10-09T15:13:08.832915Z", "relationship_type": "indicates", "source_ref": "indicator--db1e91b6-91f5-475f-8274-56c2b87f512c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63ee1d1-cde4-4ca6-909f-5b178d8e5970", "created": "2026-10-09T15:13:08.833036Z", "modified": "2026-10-09T15:13:08.833036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4beacf285240ff4f7e2c7f7405d4f962b3559bd3b3b501bdbb82eae296e35d7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.833036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--163eb25f-6f05-4924-8919-fdbaf52e8643", "created": "2026-10-09T15:13:08.833632Z", "modified": "2026-10-09T15:13:08.833632Z", "relationship_type": "indicates", "source_ref": "indicator--c63ee1d1-cde4-4ca6-909f-5b178d8e5970", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46eae9f-8ac5-4053-aeeb-dc3b30a97326", "created": "2026-10-09T15:13:08.833753Z", "modified": "2026-10-09T15:13:08.833753Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0599af4764489034a34c7f00e5bb1c5f04bcbe75c6861e967c58175a9395928c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.833753Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e832026f-3c2a-47ee-bde8-acd43c16d515", "created": "2026-10-09T15:13:08.834343Z", "modified": "2026-10-09T15:13:08.834343Z", "relationship_type": "indicates", "source_ref": "indicator--e46eae9f-8ac5-4053-aeeb-dc3b30a97326", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953bc167-8ec4-4b20-84a1-e11245206e18", "created": "2026-10-09T15:13:08.834462Z", "modified": "2026-10-09T15:13:08.834462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c82bb722ce8a846541cc009a0760bd05f9455f27d9d4c76bbb9a6733f8d1d7dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.834462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f719be7-a65a-4d95-991a-d6b3c85deece", "created": "2026-10-09T15:13:08.835049Z", "modified": "2026-10-09T15:13:08.835049Z", "relationship_type": "indicates", "source_ref": "indicator--953bc167-8ec4-4b20-84a1-e11245206e18", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a084adc-e8d7-4715-b846-3ec89b8b5c04", "created": "2026-10-09T15:13:08.835168Z", "modified": "2026-10-09T15:13:08.835168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='badb44ccdde53618f84d6ba7e774f5c2333fd87260127ff66d3346c984525d92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.835168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1041806-ec96-406a-a136-0ead3f94ee75", "created": "2026-10-09T15:13:08.835773Z", "modified": "2026-10-09T15:13:08.835773Z", "relationship_type": "indicates", "source_ref": "indicator--6a084adc-e8d7-4715-b846-3ec89b8b5c04", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91bcac6-f8fc-4b85-bcd4-0386df1957b9", "created": "2026-10-09T15:13:08.835892Z", "modified": "2026-10-09T15:13:08.835892Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56b6e1a065a3414fc259bd2592b345d3e20c267e84fe60260e266b7a1fb6611c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.835892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1325aa88-7341-4266-a8b7-d0f76f860408", "created": "2026-10-09T15:13:08.836492Z", "modified": "2026-10-09T15:13:08.836492Z", "relationship_type": "indicates", "source_ref": "indicator--c91bcac6-f8fc-4b85-bcd4-0386df1957b9", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cf2c06-e518-4e9a-bde6-d197e9858390", "created": "2026-10-09T15:13:08.836622Z", "modified": "2026-10-09T15:13:08.836622Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4e991488843dad10d87d240b9acff78a8373a5335d5959e8b1e06e2fdf491e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.836622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dbbbb5a-acb2-4111-af81-a5275d75dc8e", "created": "2026-10-09T15:13:08.837215Z", "modified": "2026-10-09T15:13:08.837215Z", "relationship_type": "indicates", "source_ref": "indicator--66cf2c06-e518-4e9a-bde6-d197e9858390", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0cc644-61f9-4e23-81be-f05ccc362f9e", "created": "2026-10-09T15:13:08.837348Z", "modified": "2026-10-09T15:13:08.837348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='688a0ee417e51bddfa2f1469d165c03e69b1e5a55fb61180c8b945aa1916fbea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.837348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52f77d6-9c31-404f-9fb3-c9ba863b8a5b", "created": "2026-10-09T15:13:08.837932Z", "modified": "2026-10-09T15:13:08.837932Z", "relationship_type": "indicates", "source_ref": "indicator--ce0cc644-61f9-4e23-81be-f05ccc362f9e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4900d808-706d-47a9-bc82-a0a278288b3e", "created": "2026-10-09T15:13:08.838051Z", "modified": "2026-10-09T15:13:08.838051Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5afd2f43d1a15fe32a4352796e2deb2ed60b74a3a4040cc8a767191372d2e56c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.838051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc5a08e5-4540-4bc0-a191-247e3fd235a4", "created": "2026-10-09T15:13:08.838644Z", "modified": "2026-10-09T15:13:08.838644Z", "relationship_type": "indicates", "source_ref": "indicator--4900d808-706d-47a9-bc82-a0a278288b3e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a802d59d-671b-4fec-8ebe-d183b2af609c", "created": "2026-10-09T15:13:08.838765Z", "modified": "2026-10-09T15:13:08.838765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85ac17c9a999fe8fd5df3880184e6a38398af4370b479ac0ab377a0d5fdabb43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.838765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e53b6d09-e983-403c-91bd-a93306595c7c", "created": "2026-10-09T15:13:08.839464Z", "modified": "2026-10-09T15:13:08.839464Z", "relationship_type": "indicates", "source_ref": "indicator--a802d59d-671b-4fec-8ebe-d183b2af609c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96338fdb-3706-4500-a501-227695cc8c7f", "created": "2026-10-09T15:13:08.839586Z", "modified": "2026-10-09T15:13:08.839586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ef9e3d36b90f82b92dda8477ede97c7c6e86f0728b83071d671dd8748a9cf50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.839586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33dd7918-914e-492a-bdce-990702469f85", "created": "2026-10-09T15:13:08.840161Z", "modified": "2026-10-09T15:13:08.840161Z", "relationship_type": "indicates", "source_ref": "indicator--96338fdb-3706-4500-a501-227695cc8c7f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14bd12e-62eb-4607-b90e-ca90d966b5ab", "created": "2026-10-09T15:13:08.840294Z", "modified": "2026-10-09T15:13:08.840294Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf4119dd0afbba9e8ca53d4544750f810f545da1fc38cc3b3efbcb14f3be65b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.840294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05f3bdd9-dab5-42dc-919f-4216d84d6f67", "created": "2026-10-09T15:13:08.840876Z", "modified": "2026-10-09T15:13:08.840876Z", "relationship_type": "indicates", "source_ref": "indicator--e14bd12e-62eb-4607-b90e-ca90d966b5ab", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1211775-249a-4011-8bc1-63d7fdf028cb", "created": "2026-10-09T15:13:08.840994Z", "modified": "2026-10-09T15:13:08.840994Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.innovaspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.840994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34a47aaf-c4c3-45e7-8ee4-886834900307", "created": "2026-10-09T15:13:08.841466Z", "modified": "2026-10-09T15:13:08.841466Z", "relationship_type": "indicates", "source_ref": "indicator--e1211775-249a-4011-8bc1-63d7fdf028cb", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be172f7a-3789-4f86-a462-d32750b85a2c", "created": "2026-10-09T15:13:08.841585Z", "modified": "2026-10-09T15:13:08.841585Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.hellospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.841585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1aa52ee-6f16-41c2-a020-1f60d87396f1", "created": "2026-10-09T15:13:08.842041Z", "modified": "2026-10-09T15:13:08.842041Z", "relationship_type": "indicates", "source_ref": "indicator--be172f7a-3789-4f86-a462-d32750b85a2c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b2eacc-fe10-408b-a101-2a6b13ed65e6", "created": "2026-10-09T15:13:08.842161Z", "modified": "2026-10-09T15:13:08.842161Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.googlesettings.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.842161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d40707ab-9817-41e5-946b-f51199da7c85", "created": "2026-10-09T15:13:08.84265Z", "modified": "2026-10-09T15:13:08.84265Z", "relationship_type": "indicates", "source_ref": "indicator--54b2eacc-fe10-408b-a101-2a6b13ed65e6", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f332515-614a-4fbc-9f7b-938d33e0ed74", "created": "2026-10-09T15:13:08.842773Z", "modified": "2026-10-09T15:13:08.842773Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hellospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.842773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3107038-fb87-423b-aa83-7648deb26af6", "created": "2026-10-09T15:13:08.843211Z", "modified": "2026-10-09T15:13:08.843211Z", "relationship_type": "indicates", "source_ref": "indicator--0f332515-614a-4fbc-9f7b-938d33e0ed74", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9374f1d-4ecd-4827-a1f2-b912869f9a52", "created": "2026-10-09T15:13:08.843339Z", "modified": "2026-10-09T15:13:08.843339Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hellospy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.843339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff0ae489-7f2b-48aa-84d1-c27c423f2e27", "created": "2026-10-09T15:13:08.843794Z", "modified": "2026-10-09T15:13:08.843794Z", "relationship_type": "indicates", "source_ref": "indicator--d9374f1d-4ecd-4827-a1f2-b912869f9a52", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81074fa-1513-45f2-9591-5ebf07ca7093", "created": "2026-10-09T15:13:08.843915Z", "modified": "2026-10-09T15:13:08.843915Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.maxxspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.843915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d63c83c8-3e06-45d0-ba92-166b83bbab38", "created": "2026-10-09T15:13:08.844367Z", "modified": "2026-10-09T15:13:08.844367Z", "relationship_type": "indicates", "source_ref": "indicator--c81074fa-1513-45f2-9591-5ebf07ca7093", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13760f02-a5d2-4514-8d67-f40c289bab67", "created": "2026-10-09T15:13:08.844488Z", "modified": "2026-10-09T15:13:08.844488Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.maxxspy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.844488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceff333f-1ca6-43d5-a8f1-872acf304dc0", "created": "2026-10-09T15:13:08.845045Z", "modified": "2026-10-09T15:13:08.845045Z", "relationship_type": "indicates", "source_ref": "indicator--13760f02-a5d2-4514-8d67-f40c289bab67", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df508818-f161-4093-a794-ac414844a83c", "created": "2026-10-09T15:13:08.845165Z", "modified": "2026-10-09T15:13:08.845165Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiispy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.845165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb49e9f3-cbf5-4126-9758-2b848d347e6f", "created": "2026-10-09T15:13:08.845622Z", "modified": "2026-10-09T15:13:08.845622Z", "relationship_type": "indicates", "source_ref": "indicator--df508818-f161-4093-a794-ac414844a83c", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47df4327-129c-4fcf-8b74-6e089f502a74", "created": "2026-10-09T15:13:08.845743Z", "modified": "2026-10-09T15:13:08.845743Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiispy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.845743Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--558532f3-ccec-47cb-9247-5d51bd36e388", "created": "2026-10-09T15:13:08.846198Z", "modified": "2026-10-09T15:13:08.846198Z", "relationship_type": "indicates", "source_ref": "indicator--47df4327-129c-4fcf-8b74-6e089f502a74", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5069729-57c0-4829-a4d8-d9ed5f3ad58e", "created": "2026-10-09T15:13:08.846329Z", "modified": "2026-10-09T15:13:08.846329Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrblue.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.846329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--436477fa-5f88-4d01-b045-181c00f572ea", "created": "2026-10-09T15:13:08.846787Z", "modified": "2026-10-09T15:13:08.846787Z", "relationship_type": "indicates", "source_ref": "indicator--e5069729-57c0-4829-a4d8-d9ed5f3ad58e", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5714297b-309a-4992-9ab6-e14b18d67acd", "created": "2026-10-09T15:13:08.846905Z", "modified": "2026-10-09T15:13:08.846905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrbluetooth.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.846905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc497b83-c642-4c7f-bd53-abd6b576671d", "created": "2026-10-09T15:13:08.847369Z", "modified": "2026-10-09T15:13:08.847369Z", "relationship_type": "indicates", "source_ref": "indicator--5714297b-309a-4992-9ab6-e14b18d67acd", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529f387d-6948-4b5f-922a-c62195817227", "created": "2026-10-09T15:13:08.847489Z", "modified": "2026-10-09T15:13:08.847489Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrtred.setred']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.847489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed35c09a-4625-42df-9542-6bc93b965d66", "created": "2026-10-09T15:13:08.847948Z", "modified": "2026-10-09T15:13:08.847948Z", "relationship_type": "indicates", "source_ref": "indicator--529f387d-6948-4b5f-922a-c62195817227", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec79a61-832f-4734-8522-cf8c2ec2a82f", "created": "2026-10-09T15:13:08.848067Z", "modified": "2026-10-09T15:13:08.848067Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.prophoto.editor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.848067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7056ba9c-b139-4538-a41b-e1aa779ee3eb", "created": "2026-10-09T15:13:08.848531Z", "modified": "2026-10-09T15:13:08.848531Z", "relationship_type": "indicates", "source_ref": "indicator--1ec79a61-832f-4734-8522-cf8c2ec2a82f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cd7ff7-b85a-4ee1-b9b7-f92dc9dbda23", "created": "2026-10-09T15:13:08.84865Z", "modified": "2026-10-09T15:13:08.84865Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.topspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.84865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e36c7b-c0ae-415b-8355-f8dc1769a05e", "created": "2026-10-09T15:13:08.849089Z", "modified": "2026-10-09T15:13:08.849089Z", "relationship_type": "indicates", "source_ref": "indicator--92cd7ff7-b85a-4ee1-b9b7-f92dc9dbda23", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c817be9-f678-432b-b0d8-bb5200d9f2cc", "created": "2026-10-09T15:13:08.849205Z", "modified": "2026-10-09T15:13:08.849205Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.topspy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.849205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0b1056d-9fa7-4e74-8c01-9d4d69c16260", "created": "2026-10-09T15:13:08.849664Z", "modified": "2026-10-09T15:13:08.849664Z", "relationship_type": "indicates", "source_ref": "indicator--8c817be9-f678-432b-b0d8-bb5200d9f2cc", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3ca649-6fd4-4441-9514-ea5e895ec269", "created": "2026-10-09T15:13:08.84978Z", "modified": "2026-10-09T15:13:08.84978Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.virsys.tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.84978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2afeb8c-7b42-4045-86d1-12996e7eae12", "created": "2026-10-09T15:13:08.850342Z", "modified": "2026-10-09T15:13:08.850342Z", "relationship_type": "indicates", "source_ref": "indicator--2f3ca649-6fd4-4441-9514-ea5e895ec269", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5701e58-3eef-42d9-b50f-50c9a2b134ab", "created": "2026-10-09T15:13:08.850464Z", "modified": "2026-10-09T15:13:08.850464Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wifiset.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.850464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9a8dbee-0139-49ff-9e6c-e09db1d7f8b9", "created": "2026-10-09T15:13:08.850919Z", "modified": "2026-10-09T15:13:08.850919Z", "relationship_type": "indicates", "source_ref": "indicator--a5701e58-3eef-42d9-b50f-50c9a2b134ab", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9838fefa-1e14-49cf-b5f7-b4234520818f", "created": "2026-10-09T15:13:08.85104Z", "modified": "2026-10-09T15:13:08.85104Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wifisettings.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.85104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f991864d-5674-4be0-90ba-25bcd6eda782", "created": "2026-10-09T15:13:08.851514Z", "modified": "2026-10-09T15:13:08.851514Z", "relationship_type": "indicates", "source_ref": "indicator--9838fefa-1e14-49cf-b5f7-b4234520818f", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e62167-98fd-47eb-a482-42ede124d650", "created": "2026-10-09T15:13:08.851646Z", "modified": "2026-10-09T15:13:08.851646Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='googlesettings.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.851646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cd425a9-7c01-44b1-80d0-4850e314292f", "created": "2026-10-09T15:13:08.852104Z", "modified": "2026-10-09T15:13:08.852104Z", "relationship_type": "indicates", "source_ref": "indicator--39e62167-98fd-47eb-a482-42ede124d650", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0fc0fc-6840-4856-8324-4b9472948eb6", "created": "2026-10-09T15:13:08.85222Z", "modified": "2026-10-09T15:13:08.85222Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1EBFFD9FE9463B2ED24582D2846990A5ABEF79B9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.85222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08c8a106-1d14-4e6b-831d-1f6646029dde", "created": "2026-10-09T15:13:08.852774Z", "modified": "2026-10-09T15:13:08.852774Z", "relationship_type": "indicates", "source_ref": "indicator--1f0fc0fc-6840-4856-8324-4b9472948eb6", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5051f94d-7072-4cc7-818d-3fe4b5b393b4", "created": "2026-10-09T15:13:08.852892Z", "modified": "2026-10-09T15:13:08.852892Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='656CD7890ED79CE8570D1B7156C31958D5AC1606']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.852892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d573cd8-a4f2-4a68-af57-4777963b9b94", "created": "2026-10-09T15:13:08.853444Z", "modified": "2026-10-09T15:13:08.853444Z", "relationship_type": "indicates", "source_ref": "indicator--5051f94d-7072-4cc7-818d-3fe4b5b393b4", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318faab-ddc5-4440-9ab5-a4cbd36cf7f4", "created": "2026-10-09T15:13:08.853565Z", "modified": "2026-10-09T15:13:08.853565Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6B660EAAEBA47793B7A1278D714669A6612BCA5B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.853565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed6322fd-4350-4cc5-811c-a0f4fb0dda6a", "created": "2026-10-09T15:13:08.854103Z", "modified": "2026-10-09T15:13:08.854103Z", "relationship_type": "indicates", "source_ref": "indicator--6318faab-ddc5-4440-9ab5-a4cbd36cf7f4", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec18972d-63d4-4bff-9f44-1190ad8b25a4", "created": "2026-10-09T15:13:08.854221Z", "modified": "2026-10-09T15:13:08.854221Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6EB49E72D6138B4210D1CA60247D419E5660315C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.854221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d18729c-2901-427f-b43e-f63ec308deb0", "created": "2026-10-09T15:13:08.854766Z", "modified": "2026-10-09T15:13:08.854766Z", "relationship_type": "indicates", "source_ref": "indicator--ec18972d-63d4-4bff-9f44-1190ad8b25a4", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1931b893-5a23-4114-ae09-f009906f558a", "created": "2026-10-09T15:13:08.854882Z", "modified": "2026-10-09T15:13:08.854882Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7AFD651F96C7C938351396A53895C3C0704F6B96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.854882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8490cbc3-1f63-41d2-a212-29fda2c99783", "created": "2026-10-09T15:13:08.855434Z", "modified": "2026-10-09T15:13:08.855434Z", "relationship_type": "indicates", "source_ref": "indicator--1931b893-5a23-4114-ae09-f009906f558a", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb750c8-0e7d-4249-9653-fca1cf2b38c6", "created": "2026-10-09T15:13:08.855552Z", "modified": "2026-10-09T15:13:08.855552Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7F5C0D54A813BA9B87A91420CA2C3DE5E7948F09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.855552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad4aa404-82fa-4eb9-b7a0-acfa73d6bc32", "created": "2026-10-09T15:13:08.856193Z", "modified": "2026-10-09T15:13:08.856193Z", "relationship_type": "indicates", "source_ref": "indicator--1fb750c8-0e7d-4249-9653-fca1cf2b38c6", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56b9346-1007-45ac-bb8a-82a927e1dd13", "created": "2026-10-09T15:13:08.856333Z", "modified": "2026-10-09T15:13:08.856333Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A40D8FDC7953AD69D970FF00658EB0F58B3A052A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.856333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b1d59df-f29c-429b-b1b1-cb7c042fdf22", "created": "2026-10-09T15:13:08.856995Z", "modified": "2026-10-09T15:13:08.856995Z", "relationship_type": "indicates", "source_ref": "indicator--b56b9346-1007-45ac-bb8a-82a927e1dd13", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6deed7d-81ca-4f37-9bc3-676ae7baf820", "created": "2026-10-09T15:13:08.857121Z", "modified": "2026-10-09T15:13:08.857121Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CD8F39DAECC7793F33D8D847A598373B8F25A7B7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.857121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9090039c-4762-4850-8d31-f9210161fc05", "created": "2026-10-09T15:13:08.85768Z", "modified": "2026-10-09T15:13:08.85768Z", "relationship_type": "indicates", "source_ref": "indicator--b6deed7d-81ca-4f37-9bc3-676ae7baf820", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d36423-fcdb-464d-a611-45471d9162a6", "created": "2026-10-09T15:13:08.857802Z", "modified": "2026-10-09T15:13:08.857802Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F6914F044B9385D6005DC9C50A9AECDC2349F413']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.857802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--543d3236-3b46-44cf-bfd6-22f9a58b965d", "created": "2026-10-09T15:13:08.858358Z", "modified": "2026-10-09T15:13:08.858358Z", "relationship_type": "indicates", "source_ref": "indicator--c0d36423-fcdb-464d-a611-45471d9162a6", "target_ref": "malware--571c7809-40b3-4331-bcf1-4203e05112cb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b", "created": "2026-10-09T15:13:08.858481Z", "modified": "2026-10-09T15:13:08.858481Z", "name": "SpyAdvice", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac765bc-ef22-4782-96cd-c6ebce439643", "created": "2026-10-09T15:13:08.858601Z", "modified": "2026-10-09T15:13:08.858601Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracking-dd226.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.858601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deaee1a0-5520-457b-8ce1-3912d3102464", "created": "2026-10-09T15:13:08.859096Z", "modified": "2026-10-09T15:13:08.859096Z", "relationship_type": "indicates", "source_ref": "indicator--eac765bc-ef22-4782-96cd-c6ebce439643", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9faf6c8-d631-46a3-a9a4-08df1cf6e08e", "created": "2026-10-09T15:13:08.859215Z", "modified": "2026-10-09T15:13:08.859215Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyadvice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.859215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b70c3aa1-7ca5-4426-a2aa-58073f01e461", "created": "2026-10-09T15:13:08.859699Z", "modified": "2026-10-09T15:13:08.859699Z", "relationship_type": "indicates", "source_ref": "indicator--b9faf6c8-d631-46a3-a9a4-08df1cf6e08e", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefd0ece-9ef7-4316-a59b-22619c91692f", "created": "2026-10-09T15:13:08.859838Z", "modified": "2026-10-09T15:13:08.859838Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyadvice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.859838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0e9c90b-dcc8-4a34-8359-79b9aa8325d3", "created": "2026-10-09T15:13:08.860324Z", "modified": "2026-10-09T15:13:08.860324Z", "relationship_type": "indicates", "source_ref": "indicator--fefd0ece-9ef7-4316-a59b-22619c91692f", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6a403a-62c9-45e2-8de0-0f8fec6312ba", "created": "2026-10-09T15:13:08.860447Z", "modified": "2026-10-09T15:13:08.860447Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freespyphone.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.860447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef85eab9-ab16-4182-8941-ddf0661e1841", "created": "2026-10-09T15:13:08.860912Z", "modified": "2026-10-09T15:13:08.860912Z", "relationship_type": "indicates", "source_ref": "indicator--4b6a403a-62c9-45e2-8de0-0f8fec6312ba", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9f8d14-1f84-41c5-845d-3721ebb8d418", "created": "2026-10-09T15:13:08.861029Z", "modified": "2026-10-09T15:13:08.861029Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='download.freespyphone.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.861029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e28d2db3-2299-46c4-904b-5eadf16d49a9", "created": "2026-10-09T15:13:08.861526Z", "modified": "2026-10-09T15:13:08.861526Z", "relationship_type": "indicates", "source_ref": "indicator--4c9f8d14-1f84-41c5-845d-3721ebb8d418", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b05f1bb-a6bd-4be1-9d74-5d243c0c4125", "created": "2026-10-09T15:13:08.861648Z", "modified": "2026-10-09T15:13:08.861648Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sa.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.861648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4763f9d1-8b5c-4dd1-9661-cdb4f0953816", "created": "2026-10-09T15:13:08.862192Z", "modified": "2026-10-09T15:13:08.862192Z", "relationship_type": "indicates", "source_ref": "indicator--3b05f1bb-a6bd-4be1-9d74-5d243c0c4125", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d434d73-2244-43ec-a6a8-5bf54fdb6030", "created": "2026-10-09T15:13:08.862324Z", "modified": "2026-10-09T15:13:08.862324Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B374A75F87F992A6F57CF99A24197ABCEB17A1E7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.862324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e83ba001-4d61-40d1-95ad-caf29b63c371", "created": "2026-10-09T15:13:08.862864Z", "modified": "2026-10-09T15:13:08.862864Z", "relationship_type": "indicates", "source_ref": "indicator--7d434d73-2244-43ec-a6a8-5bf54fdb6030", "target_ref": "malware--e28868e1-87db-4b5b-bcf8-a05b7f43787b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5", "created": "2026-10-09T15:13:08.862982Z", "modified": "2026-10-09T15:13:08.862982Z", "name": "Reptilicus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcd6e36-c5ef-4536-9777-c14500eea128", "created": "2026-10-09T15:13:08.863095Z", "modified": "2026-10-09T15:13:08.863095Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apollospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.863095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb7e5bc3-2056-410f-9cde-9d821e815ce4", "created": "2026-10-09T15:13:08.863582Z", "modified": "2026-10-09T15:13:08.863582Z", "relationship_type": "indicates", "source_ref": "indicator--7fcd6e36-c5ef-4536-9777-c14500eea128", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d0679-8fed-49af-9765-7fe37c956fec", "created": "2026-10-09T15:13:08.863707Z", "modified": "2026-10-09T15:13:08.863707Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.ecohouse-eg.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.863707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df46055e-57ef-4f0f-9849-de0b50b29312", "created": "2026-10-09T15:13:08.864199Z", "modified": "2026-10-09T15:13:08.864199Z", "relationship_type": "indicates", "source_ref": "indicator--7f1d0679-8fed-49af-9765-7fe37c956fec", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18204eb8-b332-4c28-8645-9197849bb063", "created": "2026-10-09T15:13:08.864331Z", "modified": "2026-10-09T15:13:08.864331Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.gps-monitor.uz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.864331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a997500c-321d-45fb-bcf4-2ebad119ea22", "created": "2026-10-09T15:13:08.864812Z", "modified": "2026-10-09T15:13:08.864812Z", "relationship_type": "indicates", "source_ref": "indicator--18204eb8-b332-4c28-8645-9197849bb063", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7663d7c-3490-44e6-900a-a7cfe968b3c8", "created": "2026-10-09T15:13:08.86493Z", "modified": "2026-10-09T15:13:08.86493Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.kfnm.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.86493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e6df4b6-de93-4892-88fb-394abffe0e08", "created": "2026-10-09T15:13:08.865423Z", "modified": "2026-10-09T15:13:08.865423Z", "relationship_type": "indicates", "source_ref": "indicator--c7663d7c-3490-44e6-900a-a7cfe968b3c8", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25aec74-4804-41e8-9c7e-9ff6e18c0d8b", "created": "2026-10-09T15:13:08.865545Z", "modified": "2026-10-09T15:13:08.865545Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.vegosm.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.865545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27e126ab-e943-454d-8374-41b1ffa0f884", "created": "2026-10-09T15:13:08.866023Z", "modified": "2026-10-09T15:13:08.866023Z", "relationship_type": "indicates", "source_ref": "indicator--c25aec74-4804-41e8-9c7e-9ff6e18c0d8b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9513078b-fb31-446f-8946-a1471ca3312b", "created": "2026-10-09T15:13:08.86614Z", "modified": "2026-10-09T15:13:08.86614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.vkur.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.86614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48acedfe-4baa-4b3c-80ef-f64e71172590", "created": "2026-10-09T15:13:08.866626Z", "modified": "2026-10-09T15:13:08.866626Z", "relationship_type": "indicates", "source_ref": "indicator--9513078b-fb31-446f-8946-a1471ca3312b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a795ff67-f3b8-4a97-a29f-5b2a20c00e0f", "created": "2026-10-09T15:13:08.866754Z", "modified": "2026-10-09T15:13:08.866754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.vkur1.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.866754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a83acfa8-e454-46c7-8363-600aa1c8267f", "created": "2026-10-09T15:13:08.867225Z", "modified": "2026-10-09T15:13:08.867225Z", "relationship_type": "indicates", "source_ref": "indicator--a795ff67-f3b8-4a97-a29f-5b2a20c00e0f", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecef587f-60d9-4ad8-ae3a-2f7d0a9cdbb6", "created": "2026-10-09T15:13:08.867363Z", "modified": "2026-10-09T15:13:08.867363Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.thecybernanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.867363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--267bcdd8-aecc-4a19-af62-9f972843abef", "created": "2026-10-09T15:13:08.867946Z", "modified": "2026-10-09T15:13:08.867946Z", "relationship_type": "indicates", "source_ref": "indicator--ecef587f-60d9-4ad8-ae3a-2f7d0a9cdbb6", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e055943-25bb-4ae6-a16a-a1b82f92cb09", "created": "2026-10-09T15:13:08.868066Z", "modified": "2026-10-09T15:13:08.868066Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.868066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee302ffe-b113-4294-81bf-fcf82f1db8b0", "created": "2026-10-09T15:13:08.868616Z", "modified": "2026-10-09T15:13:08.868616Z", "relationship_type": "indicates", "source_ref": "indicator--0e055943-25bb-4ae6-a16a-a1b82f92cb09", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaa5361-a2d9-4023-bc94-03aeaa3f521d", "created": "2026-10-09T15:13:08.868759Z", "modified": "2026-10-09T15:13:08.868759Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e2c64.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.868759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c74d376c-d1ca-4f5b-a7d0-15a8ea4ce35a", "created": "2026-10-09T15:13:08.869244Z", "modified": "2026-10-09T15:13:08.869244Z", "relationship_type": "indicates", "source_ref": "indicator--dfaa5361-a2d9-4023-bc94-03aeaa3f521d", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d38afd1-f305-437e-9ffd-3cde22b8eead", "created": "2026-10-09T15:13:08.869384Z", "modified": "2026-10-09T15:13:08.869384Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='labrador.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.869384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a1cf95b-84f2-47f5-baf9-b44933a5d99f", "created": "2026-10-09T15:13:08.869928Z", "modified": "2026-10-09T15:13:08.869928Z", "relationship_type": "indicates", "source_ref": "indicator--7d38afd1-f305-437e-9ffd-3cde22b8eead", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e546024a-a37d-4d8e-815b-b3700d001bb1", "created": "2026-10-09T15:13:08.87005Z", "modified": "2026-10-09T15:13:08.87005Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mob.eurotrans.kz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.87005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dffb512c-2d42-44bc-89bd-3bd903da9231", "created": "2026-10-09T15:13:08.870531Z", "modified": "2026-10-09T15:13:08.870531Z", "relationship_type": "indicates", "source_ref": "indicator--e546024a-a37d-4d8e-815b-b3700d001bb1", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152f9403-0226-49fd-b642-4ade7d32ee5d", "created": "2026-10-09T15:13:08.870653Z", "modified": "2026-10-09T15:13:08.870653Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonecontrolapp-e2c64.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.870653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89c12f73-4117-4f97-94cf-332a066cf508", "created": "2026-10-09T15:13:08.871165Z", "modified": "2026-10-09T15:13:08.871165Z", "relationship_type": "indicates", "source_ref": "indicator--152f9403-0226-49fd-b642-4ade7d32ee5d", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d66b15-6845-4d58-9031-d3794578c0e6", "created": "2026-10-09T15:13:08.871296Z", "modified": "2026-10-09T15:13:08.871296Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='proxy.reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.871296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58745d8d-ec48-40c9-9003-2acae3d817d6", "created": "2026-10-09T15:13:08.871777Z", "modified": "2026-10-09T15:13:08.871777Z", "relationship_type": "indicates", "source_ref": "indicator--22d66b15-6845-4d58-9031-d3794578c0e6", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663a93ac-e692-4712-9f6d-743cb93c57f6", "created": "2026-10-09T15:13:08.871896Z", "modified": "2026-10-09T15:13:08.871896Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.871896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58066685-bc94-4e36-a99b-f8c00f85a38c", "created": "2026-10-09T15:13:08.872446Z", "modified": "2026-10-09T15:13:08.872446Z", "relationship_type": "indicates", "source_ref": "indicator--663a93ac-e692-4712-9f6d-743cb93c57f6", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ae89a3-9116-452c-bb05-752429c9223c", "created": "2026-10-09T15:13:08.872568Z", "modified": "2026-10-09T15:13:08.872568Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.apollospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.872568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b1765d0-315b-4714-a54d-8cf67b6d825a", "created": "2026-10-09T15:13:08.873042Z", "modified": "2026-10-09T15:13:08.873042Z", "relationship_type": "indicates", "source_ref": "indicator--22ae89a3-9116-452c-bb05-752429c9223c", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991cf8bc-bf74-4ee9-b843-98c295403f6e", "created": "2026-10-09T15:13:08.873162Z", "modified": "2026-10-09T15:13:08.873162Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.dedrone.com.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.873162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f91ee435-8f26-4ea9-8037-d113f07672a4", "created": "2026-10-09T15:13:08.873749Z", "modified": "2026-10-09T15:13:08.873749Z", "relationship_type": "indicates", "source_ref": "indicator--991cf8bc-bf74-4ee9-b843-98c295403f6e", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7856c499-4026-4a4c-9100-c1113675b110", "created": "2026-10-09T15:13:08.873872Z", "modified": "2026-10-09T15:13:08.873872Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.labrador.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.873872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38defbf7-23ab-49df-97e5-e3660a7bd554", "created": "2026-10-09T15:13:08.874357Z", "modified": "2026-10-09T15:13:08.874357Z", "relationship_type": "indicates", "source_ref": "indicator--7856c499-4026-4a4c-9100-c1113675b110", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b26a2-e74f-4cac-b3df-13f1bc10d95a", "created": "2026-10-09T15:13:08.874481Z", "modified": "2026-10-09T15:13:08.874481Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.liquidblue.com.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.874481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--885fe7fb-0d84-4e33-b806-17bca49577ea", "created": "2026-10-09T15:13:08.875046Z", "modified": "2026-10-09T15:13:08.875046Z", "relationship_type": "indicates", "source_ref": "indicator--854b26a2-e74f-4cac-b3df-13f1bc10d95a", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b409ef-e9d1-4447-96c0-c38685fa2282", "created": "2026-10-09T15:13:08.87517Z", "modified": "2026-10-09T15:13:08.87517Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='vkur.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.87517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--884392b5-fbcf-40ab-b655-8eb3a53ed8d8", "created": "2026-10-09T15:13:08.87566Z", "modified": "2026-10-09T15:13:08.87566Z", "relationship_type": "indicates", "source_ref": "indicator--e6b409ef-e9d1-4447-96c0-c38685fa2282", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbad2426-c5af-46c4-ad9d-9b1d0a6a9f8c", "created": "2026-10-09T15:13:08.875782Z", "modified": "2026-10-09T15:13:08.875782Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='vkur1.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.875782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--117e05b9-2ef8-4cc0-9010-adb8da38dffb", "created": "2026-10-09T15:13:08.876247Z", "modified": "2026-10-09T15:13:08.876247Z", "relationship_type": "indicates", "source_ref": "indicator--bbad2426-c5af-46c4-ad9d-9b1d0a6a9f8c", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8975fc-0e28-43ae-a893-f0455a7ad586", "created": "2026-10-09T15:13:08.876407Z", "modified": "2026-10-09T15:13:08.876407Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.876407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--329686cb-d73b-49e6-a3c1-d0ca2446377f", "created": "2026-10-09T15:13:08.876898Z", "modified": "2026-10-09T15:13:08.876898Z", "relationship_type": "indicates", "source_ref": "indicator--2a8975fc-0e28-43ae-a893-f0455a7ad586", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50266d6-63e8-4944-a9ee-2ae14ca31357", "created": "2026-10-09T15:13:08.877027Z", "modified": "2026-10-09T15:13:08.877027Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.877027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7b5075c-86c4-4889-b2dc-d3e2b43b9154", "created": "2026-10-09T15:13:08.87751Z", "modified": "2026-10-09T15:13:08.87751Z", "relationship_type": "indicates", "source_ref": "indicator--c50266d6-63e8-4944-a9ee-2ae14ca31357", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf97854-6058-4bba-8296-16b7d752fbe9", "created": "2026-10-09T15:13:08.877632Z", "modified": "2026-10-09T15:13:08.877632Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thecybernanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.877632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--796bca7e-bdd0-4ac1-ba84-60d25b7667ca", "created": "2026-10-09T15:13:08.878116Z", "modified": "2026-10-09T15:13:08.878116Z", "relationship_type": "indicates", "source_ref": "indicator--adf97854-6058-4bba-8296-16b7d752fbe9", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d96396-aa71-42b1-84ff-e72d653a5822", "created": "2026-10-09T15:13:08.878235Z", "modified": "2026-10-09T15:13:08.878235Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apollospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.878235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--289661ab-ddca-418c-a6ff-3360efdce572", "created": "2026-10-09T15:13:08.878726Z", "modified": "2026-10-09T15:13:08.878726Z", "relationship_type": "indicates", "source_ref": "indicator--50d96396-aa71-42b1-84ff-e72d653a5822", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0fbc9e-ed16-4c91-995d-9936dcc5a4a9", "created": "2026-10-09T15:13:08.878845Z", "modified": "2026-10-09T15:13:08.878845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51fde0197f1152a0145bf0fbfd17809b9b105557e9c980d2e886cf01b85add51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.878845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--805a8890-9fdc-4e3f-9106-1e6fc690ad08", "created": "2026-10-09T15:13:08.879796Z", "modified": "2026-10-09T15:13:08.879796Z", "relationship_type": "indicates", "source_ref": "indicator--8f0fbc9e-ed16-4c91-995d-9936dcc5a4a9", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d41a524-bc3b-4541-bc6f-4dfbcb0b166a", "created": "2026-10-09T15:13:08.879927Z", "modified": "2026-10-09T15:13:08.879927Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2ab208206321b463bc7e5c3089814391b425db13e6aa917ffb368018f5d8872']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.879927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c18f0b4-2759-4207-82e2-0c9c66366659", "created": "2026-10-09T15:13:08.880539Z", "modified": "2026-10-09T15:13:08.880539Z", "relationship_type": "indicates", "source_ref": "indicator--5d41a524-bc3b-4541-bc6f-4dfbcb0b166a", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f3cddd-66d5-461f-8a30-ee5ef3f7d074", "created": "2026-10-09T15:13:08.880664Z", "modified": "2026-10-09T15:13:08.880664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8264d44e15f8b7278bd10a6df07cfa859340d11c35bf4877101cdb71c9f07aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.880664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7ee7839-bf3a-4c5f-9556-708f7289a038", "created": "2026-10-09T15:13:08.881253Z", "modified": "2026-10-09T15:13:08.881253Z", "relationship_type": "indicates", "source_ref": "indicator--f1f3cddd-66d5-461f-8a30-ee5ef3f7d074", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5f5b36-840e-4bea-a603-d55fe147bca6", "created": "2026-10-09T15:13:08.881388Z", "modified": "2026-10-09T15:13:08.881388Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11e937f2bfcbce24be626bcd2a5c7a8c90e8ce3d4317c43b9a044a2b44f17417']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.881388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e773d81b-6f49-42e9-8a53-69e729891854", "created": "2026-10-09T15:13:08.882038Z", "modified": "2026-10-09T15:13:08.882038Z", "relationship_type": "indicates", "source_ref": "indicator--bc5f5b36-840e-4bea-a603-d55fe147bca6", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1039ecc-460d-499c-8def-f420ab97f150", "created": "2026-10-09T15:13:08.882173Z", "modified": "2026-10-09T15:13:08.882173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d8cac906fefc39de9df995854771f61a3c8cd0c14fe5ad456c91913ba77793a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.882173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1cfbc56-6c83-48b5-9f25-799a8faafb7e", "created": "2026-10-09T15:13:08.882799Z", "modified": "2026-10-09T15:13:08.882799Z", "relationship_type": "indicates", "source_ref": "indicator--b1039ecc-460d-499c-8def-f420ab97f150", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e9c979-f2ea-461d-b803-42f17ff6f0bf", "created": "2026-10-09T15:13:08.882925Z", "modified": "2026-10-09T15:13:08.882925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c58eefbfdeb3248d52eb914ef7f91c6df7dfbe3f20314ee3a9ecab4d16899389']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.882925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbb8c7b3-9cfc-464d-952a-4e295a8a9d43", "created": "2026-10-09T15:13:08.883522Z", "modified": "2026-10-09T15:13:08.883522Z", "relationship_type": "indicates", "source_ref": "indicator--80e9c979-f2ea-461d-b803-42f17ff6f0bf", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda60ab9-7b13-4047-a5a3-9fbf5b218a5b", "created": "2026-10-09T15:13:08.883647Z", "modified": "2026-10-09T15:13:08.883647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fd97d68386eacce306ed977d0d3a3947a5bee704a91491d9045ccc48e79a1fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.883647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--328b533f-a8ed-49bf-995d-4ffec6ad5de3", "created": "2026-10-09T15:13:08.884231Z", "modified": "2026-10-09T15:13:08.884231Z", "relationship_type": "indicates", "source_ref": "indicator--bda60ab9-7b13-4047-a5a3-9fbf5b218a5b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067c9ea7-e5eb-451d-aa97-d59a7cbe3e86", "created": "2026-10-09T15:13:08.884363Z", "modified": "2026-10-09T15:13:08.884363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2cc4882a5cb1950f3b984e1d8cbd55d489096d7a3e2cb9c0194f5440a88ae5e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.884363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--628eb439-55b1-4bf6-8efb-4a0f6ce2eedc", "created": "2026-10-09T15:13:08.884955Z", "modified": "2026-10-09T15:13:08.884955Z", "relationship_type": "indicates", "source_ref": "indicator--067c9ea7-e5eb-451d-aa97-d59a7cbe3e86", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d99570-59c3-46a7-9a13-56ac43f8c409", "created": "2026-10-09T15:13:08.885073Z", "modified": "2026-10-09T15:13:08.885073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e8b15fcb82e229cee20f1fbf6c75bf1f617308cd321ccaacd8583c4dd4bc8bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.885073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68c60f9e-18dd-454b-a187-3cce6a7bcc0a", "created": "2026-10-09T15:13:08.885666Z", "modified": "2026-10-09T15:13:08.885666Z", "relationship_type": "indicates", "source_ref": "indicator--c0d99570-59c3-46a7-9a13-56ac43f8c409", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd51ef1-1a7e-444c-8c76-0cc28c084fae", "created": "2026-10-09T15:13:08.885788Z", "modified": "2026-10-09T15:13:08.885788Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f9c4103e3551b2849d378baaabc06fa4de042419ce45f78a3105feb9a582d01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.885788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1447c868-ed9c-460e-9458-242727875bf1", "created": "2026-10-09T15:13:08.886497Z", "modified": "2026-10-09T15:13:08.886497Z", "relationship_type": "indicates", "source_ref": "indicator--6bd51ef1-1a7e-444c-8c76-0cc28c084fae", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf855b8-2dba-4fb6-9e6d-8dac62ca6476", "created": "2026-10-09T15:13:08.886627Z", "modified": "2026-10-09T15:13:08.886627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b2027a3eec306415fe09fd97a7b13f31318d4eb1c5ef4f3854cd6121e05833d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.886627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d11da429-27d9-4402-a2e1-fc6863a5d24f", "created": "2026-10-09T15:13:08.887214Z", "modified": "2026-10-09T15:13:08.887214Z", "relationship_type": "indicates", "source_ref": "indicator--baf855b8-2dba-4fb6-9e6d-8dac62ca6476", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d880d9e1-30ac-4fdb-82ba-78fbc35e1fb6", "created": "2026-10-09T15:13:08.887346Z", "modified": "2026-10-09T15:13:08.887346Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d035848c249baaf2907922e5c1a45a18b0d1a0af29181d6d6f942e7d7ac7e1fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.887346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea909943-4458-4f2f-b961-d10595ca6157", "created": "2026-10-09T15:13:08.887932Z", "modified": "2026-10-09T15:13:08.887932Z", "relationship_type": "indicates", "source_ref": "indicator--d880d9e1-30ac-4fdb-82ba-78fbc35e1fb6", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb06800d-83b9-4b61-a56d-d59927652eff", "created": "2026-10-09T15:13:08.888052Z", "modified": "2026-10-09T15:13:08.888052Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='915b558ddf6456534f77d3a609154bef8b3ed9bbc0993f80c7dc9b13e5365ec8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.888052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--168df506-54a2-491d-84de-dec63232605c", "created": "2026-10-09T15:13:08.888638Z", "modified": "2026-10-09T15:13:08.888638Z", "relationship_type": "indicates", "source_ref": "indicator--bb06800d-83b9-4b61-a56d-d59927652eff", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2140a9c3-64d0-4a14-9ea7-7e7f1af9fdaf", "created": "2026-10-09T15:13:08.888758Z", "modified": "2026-10-09T15:13:08.888758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d6ec4cd2a5f3192cdc1e6ff0ca59f9a92b358ef08f7c5f0118ba15afea0c74d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.888758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6c5c53c-a28e-40f9-9d78-88560e485951", "created": "2026-10-09T15:13:08.889344Z", "modified": "2026-10-09T15:13:08.889344Z", "relationship_type": "indicates", "source_ref": "indicator--2140a9c3-64d0-4a14-9ea7-7e7f1af9fdaf", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803abbc2-3f3c-43dc-aaa8-d1c1455b4a5b", "created": "2026-10-09T15:13:08.889464Z", "modified": "2026-10-09T15:13:08.889464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='effb9c98db3d940644b8b7bc0e6e05f52631836fa9955707f2d811e444cd2e1f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.889464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb178977-ee23-4991-8ec1-7059662490a5", "created": "2026-10-09T15:13:08.89005Z", "modified": "2026-10-09T15:13:08.89005Z", "relationship_type": "indicates", "source_ref": "indicator--803abbc2-3f3c-43dc-aaa8-d1c1455b4a5b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6055b5-a916-4bf9-94e7-b3ff90f0c101", "created": "2026-10-09T15:13:08.890167Z", "modified": "2026-10-09T15:13:08.890167Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9191a8236f338269f957294c6137ce83df5dc4af51f5ea812c08f585f66c03bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.890167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81d2d5c6-8919-484b-8609-f557448bfd61", "created": "2026-10-09T15:13:08.890759Z", "modified": "2026-10-09T15:13:08.890759Z", "relationship_type": "indicates", "source_ref": "indicator--cf6055b5-a916-4bf9-94e7-b3ff90f0c101", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d18b2e-7e2d-4150-8ce6-f1e52c86654d", "created": "2026-10-09T15:13:08.890878Z", "modified": "2026-10-09T15:13:08.890878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c3c0bff829c72cea1e4fc0633bda56594cbb68572fd38989d87843a84275e96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.890878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56e3bb9d-cc25-4acb-b29b-4bac459749c1", "created": "2026-10-09T15:13:08.891472Z", "modified": "2026-10-09T15:13:08.891472Z", "relationship_type": "indicates", "source_ref": "indicator--73d18b2e-7e2d-4150-8ce6-f1e52c86654d", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2852a79a-ca67-4873-a063-eede3af9d322", "created": "2026-10-09T15:13:08.891591Z", "modified": "2026-10-09T15:13:08.891591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b4eb6e5f5c82ec6b84cced857714e7a217fd835d2442b1504aa950d99d42ba2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.891591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abbf3492-1c9e-4a1a-8deb-aa9879b4c517", "created": "2026-10-09T15:13:08.892171Z", "modified": "2026-10-09T15:13:08.892171Z", "relationship_type": "indicates", "source_ref": "indicator--2852a79a-ca67-4873-a063-eede3af9d322", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6f5ddb-23d8-468a-823c-0909e589d155", "created": "2026-10-09T15:13:08.892297Z", "modified": "2026-10-09T15:13:08.892297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98a9c10c998a81be77dfc8c45a8eb731d2921487401490c0fc2102f15f0a3c26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.892297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4fd7509-be0e-41e5-84eb-03901c53d6a4", "created": "2026-10-09T15:13:08.892988Z", "modified": "2026-10-09T15:13:08.892988Z", "relationship_type": "indicates", "source_ref": "indicator--dc6f5ddb-23d8-468a-823c-0909e589d155", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c5c5c5-810b-4b37-a1a1-1094f8b707de", "created": "2026-10-09T15:13:08.893109Z", "modified": "2026-10-09T15:13:08.893109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='25c0a8426afa94c2f0a0a12f75d141370b3a4fe8653292c19b241c83eb39e579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.893109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99ef4142-df08-49b8-8c18-37cd0ecba994", "created": "2026-10-09T15:13:08.893703Z", "modified": "2026-10-09T15:13:08.893703Z", "relationship_type": "indicates", "source_ref": "indicator--e9c5c5c5-810b-4b37-a1a1-1094f8b707de", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f68d6c-ede2-44f2-badc-dea61a5e7a11", "created": "2026-10-09T15:13:08.893831Z", "modified": "2026-10-09T15:13:08.893831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99b36b155f432d5b36b46f294cda426b08a1a5cca0796ccd418b15e070448fd3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.893831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ede5ca40-2e22-42e5-960e-b04ec42b15ae", "created": "2026-10-09T15:13:08.894423Z", "modified": "2026-10-09T15:13:08.894423Z", "relationship_type": "indicates", "source_ref": "indicator--01f68d6c-ede2-44f2-badc-dea61a5e7a11", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec05ca3f-b6d5-4144-9806-c8745b23e04c", "created": "2026-10-09T15:13:08.894542Z", "modified": "2026-10-09T15:13:08.894542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ac2e7a717737cab28d8f63d61af9349c5456ec7dbe67c523e5c6f7348885a8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.894542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f99cbcf9-2e7e-4a8f-a2ff-30b798839b98", "created": "2026-10-09T15:13:08.895116Z", "modified": "2026-10-09T15:13:08.895116Z", "relationship_type": "indicates", "source_ref": "indicator--ec05ca3f-b6d5-4144-9806-c8745b23e04c", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25143877-6abe-4003-97e9-81ea28a5c12e", "created": "2026-10-09T15:13:08.895238Z", "modified": "2026-10-09T15:13:08.895238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84b85ab4d5972bbb1cd1305c2ebb78c7cbc9328942a09260deab92f9832a639a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.895238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--150aea47-2b3f-4066-bc3c-b0b3877c8e60", "created": "2026-10-09T15:13:08.895829Z", "modified": "2026-10-09T15:13:08.895829Z", "relationship_type": "indicates", "source_ref": "indicator--25143877-6abe-4003-97e9-81ea28a5c12e", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb19f520-6c44-4b8e-ba09-fd04c5acc0ce", "created": "2026-10-09T15:13:08.89595Z", "modified": "2026-10-09T15:13:08.89595Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3b8b90ee684eef32a590fa452f0d06199c6f02303e255d02876f73cb03259db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.89595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25001355-b9a7-4078-8aa2-e183e8fd806b", "created": "2026-10-09T15:13:08.896545Z", "modified": "2026-10-09T15:13:08.896545Z", "relationship_type": "indicates", "source_ref": "indicator--fb19f520-6c44-4b8e-ba09-fd04c5acc0ce", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c732296-e89b-4083-bc35-9a09a133c08b", "created": "2026-10-09T15:13:08.896665Z", "modified": "2026-10-09T15:13:08.896665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='326a3e4dc76dafd9722406dd2fdb1e10f65a836a64b14e23cde921020f8979c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.896665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4941076a-ccae-4935-a031-1a6dac1b31cd", "created": "2026-10-09T15:13:08.897248Z", "modified": "2026-10-09T15:13:08.897248Z", "relationship_type": "indicates", "source_ref": "indicator--8c732296-e89b-4083-bc35-9a09a133c08b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae7469a-9911-463f-b815-3b00ecf3d4e1", "created": "2026-10-09T15:13:08.897377Z", "modified": "2026-10-09T15:13:08.897377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='057105577ff80bc15ff151a6e976814b0a2404239a236e2bd084f784ba0154e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.897377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e09a346-470c-46a6-a1a2-bef7e9caafdc", "created": "2026-10-09T15:13:08.897956Z", "modified": "2026-10-09T15:13:08.897956Z", "relationship_type": "indicates", "source_ref": "indicator--fae7469a-9911-463f-b815-3b00ecf3d4e1", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2907e396-a82e-4b9c-bb19-32f84d505d61", "created": "2026-10-09T15:13:08.898074Z", "modified": "2026-10-09T15:13:08.898074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b3a099d0d5983f472c7f42e91873d91a6ddc3dae3b4d02c32845e0d118bb3c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.898074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bfc5884-3bd6-4724-898d-4ccf8f56e17d", "created": "2026-10-09T15:13:08.898664Z", "modified": "2026-10-09T15:13:08.898664Z", "relationship_type": "indicates", "source_ref": "indicator--2907e396-a82e-4b9c-bb19-32f84d505d61", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c3f358-a223-45f7-9796-4f5843a4f472", "created": "2026-10-09T15:13:08.898785Z", "modified": "2026-10-09T15:13:08.898785Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b89b9f572ba37c239fc3c1821939ecfd7e7e0aac00f992f733bdb197de8808e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.898785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4529428-4324-4c2d-a5ba-d79d3c261960", "created": "2026-10-09T15:13:08.899489Z", "modified": "2026-10-09T15:13:08.899489Z", "relationship_type": "indicates", "source_ref": "indicator--82c3f358-a223-45f7-9796-4f5843a4f472", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dd0414-a499-4498-9b8d-459780059e51", "created": "2026-10-09T15:13:08.899613Z", "modified": "2026-10-09T15:13:08.899613Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5272239d925132c601125328cc58897753ae068116fc1dd93df740b1d59d8597']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.899613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23d36f9c-be30-4c43-b7ab-f5841b8cf62e", "created": "2026-10-09T15:13:08.900202Z", "modified": "2026-10-09T15:13:08.900202Z", "relationship_type": "indicates", "source_ref": "indicator--32dd0414-a499-4498-9b8d-459780059e51", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7ce547-b73c-4140-bf59-8bf6b3145bb9", "created": "2026-10-09T15:13:08.900332Z", "modified": "2026-10-09T15:13:08.900332Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='331e395fa0a9d75342d41f2b4d2e5c48042a528e61e41b3678dabdd28c8bb3c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.900332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d556918e-e13f-4c4f-aff2-93c99b68aa03", "created": "2026-10-09T15:13:08.900913Z", "modified": "2026-10-09T15:13:08.900913Z", "relationship_type": "indicates", "source_ref": "indicator--6c7ce547-b73c-4140-bf59-8bf6b3145bb9", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13121cbb-ae9b-4a2e-a379-4cd6f8fed1c5", "created": "2026-10-09T15:13:08.901031Z", "modified": "2026-10-09T15:13:08.901031Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37f1ffb5f1806cec2c6f323feace42894ad11758af05f416a518e9730ca3faba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.901031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddaa41d1-1181-43f2-98dc-188c95627a74", "created": "2026-10-09T15:13:08.901624Z", "modified": "2026-10-09T15:13:08.901624Z", "relationship_type": "indicates", "source_ref": "indicator--13121cbb-ae9b-4a2e-a379-4cd6f8fed1c5", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af55dc-913d-499f-afb7-5a069b0c946d", "created": "2026-10-09T15:13:08.901744Z", "modified": "2026-10-09T15:13:08.901744Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78a81b421b7e4c695c6cb657774f5b0d03c8b2b830aa53d0f6585511060fdbd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.901744Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--136f08b1-15a0-402e-a4f9-3374670ae77a", "created": "2026-10-09T15:13:08.902334Z", "modified": "2026-10-09T15:13:08.902334Z", "relationship_type": "indicates", "source_ref": "indicator--13af55dc-913d-499f-afb7-5a069b0c946d", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7729a2-87a0-408b-9d8a-11317aaf84a6", "created": "2026-10-09T15:13:08.902453Z", "modified": "2026-10-09T15:13:08.902453Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b622cf798e09493f59c8bb64e82daa4c0c165db2f57d7bc9ba83ec803b27bd7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.902453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d165937d-4f56-4a4c-ba59-d0acc88bd04d", "created": "2026-10-09T15:13:08.903028Z", "modified": "2026-10-09T15:13:08.903028Z", "relationship_type": "indicates", "source_ref": "indicator--ef7729a2-87a0-408b-9d8a-11317aaf84a6", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94928da-83cf-4790-af8b-49c65b315afd", "created": "2026-10-09T15:13:08.903145Z", "modified": "2026-10-09T15:13:08.903145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e884358fe79d553e129a0b5c4571b096416a33de780fbc540c79dee852a2f19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.903145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b36e9e50-1592-41ca-adfd-308e83407c0b", "created": "2026-10-09T15:13:08.903734Z", "modified": "2026-10-09T15:13:08.903734Z", "relationship_type": "indicates", "source_ref": "indicator--e94928da-83cf-4790-af8b-49c65b315afd", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bef127b-4e59-4c82-a16a-cbbe7e3700e8", "created": "2026-10-09T15:13:08.903853Z", "modified": "2026-10-09T15:13:08.903853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35ca9897210d2f34a8acf81bf573c03a9f0fd35b0be2388d2ebfcca98aaab760']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.903853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9746b4ec-e422-4415-895c-8728d04f25e2", "created": "2026-10-09T15:13:08.904443Z", "modified": "2026-10-09T15:13:08.904443Z", "relationship_type": "indicates", "source_ref": "indicator--7bef127b-4e59-4c82-a16a-cbbe7e3700e8", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d689232-f74a-425c-82ff-0229f31f6f1d", "created": "2026-10-09T15:13:08.904567Z", "modified": "2026-10-09T15:13:08.904567Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e25e41a6347212b24e4b4c7ba374851932f63b856acd72292e935d5613ad5e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.904567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ac3cd35-f262-47d1-9913-4770ca11fa17", "created": "2026-10-09T15:13:08.905258Z", "modified": "2026-10-09T15:13:08.905258Z", "relationship_type": "indicates", "source_ref": "indicator--7d689232-f74a-425c-82ff-0229f31f6f1d", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e72d2a-bf9a-4daf-bd55-5d91afb91d82", "created": "2026-10-09T15:13:08.905396Z", "modified": "2026-10-09T15:13:08.905396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae34a70a1dea161ea00dacd26a204800445593af962b81931f769807e9e4bf75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.905396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63704db2-f19c-4d77-b0b0-e1f657c898a5", "created": "2026-10-09T15:13:08.905998Z", "modified": "2026-10-09T15:13:08.905998Z", "relationship_type": "indicates", "source_ref": "indicator--22e72d2a-bf9a-4daf-bd55-5d91afb91d82", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33f3a79-e870-4fbe-a0fd-4889a790910e", "created": "2026-10-09T15:13:08.90612Z", "modified": "2026-10-09T15:13:08.90612Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ccbb0b25fdc6757072fb7fe648f61dcef6650d71003af2b219e5b781406b5fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.90612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--661e204c-f63b-4dd3-9cc2-b625c77d7e98", "created": "2026-10-09T15:13:08.90671Z", "modified": "2026-10-09T15:13:08.90671Z", "relationship_type": "indicates", "source_ref": "indicator--b33f3a79-e870-4fbe-a0fd-4889a790910e", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8187c80a-0ceb-4e09-9f7f-ee6c881df838", "created": "2026-10-09T15:13:08.906832Z", "modified": "2026-10-09T15:13:08.906832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67cd617d215361904ac274e1600cd1e48642a8b1e8381edd6e80e286d8297e8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.906832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1954a0fd-7547-4ca3-8c5b-1ffb4f652134", "created": "2026-10-09T15:13:08.907432Z", "modified": "2026-10-09T15:13:08.907432Z", "relationship_type": "indicates", "source_ref": "indicator--8187c80a-0ceb-4e09-9f7f-ee6c881df838", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ebcc94-56c2-4eb1-aa10-4da729d85236", "created": "2026-10-09T15:13:08.907554Z", "modified": "2026-10-09T15:13:08.907554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='489fe688a5ecb172e95aeb007ec5c62cfa5c50841bf220810c449a004b2f45d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.907554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29857d70-6a31-424a-a036-371b1e70d738", "created": "2026-10-09T15:13:08.908149Z", "modified": "2026-10-09T15:13:08.908149Z", "relationship_type": "indicates", "source_ref": "indicator--d0ebcc94-56c2-4eb1-aa10-4da729d85236", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639fed63-15c2-4ff9-9ff3-32de7180142f", "created": "2026-10-09T15:13:08.908285Z", "modified": "2026-10-09T15:13:08.908285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69fa86e8a5415f44db366787058f5fd0c73efd88de5f4fd94aeb8e899fb8cec8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.908285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1865caa6-c2fc-4873-a0ea-900fabea4f31", "created": "2026-10-09T15:13:08.908881Z", "modified": "2026-10-09T15:13:08.908881Z", "relationship_type": "indicates", "source_ref": "indicator--639fed63-15c2-4ff9-9ff3-32de7180142f", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674b66ae-3d96-486c-abf5-95aca529fe8e", "created": "2026-10-09T15:13:08.908999Z", "modified": "2026-10-09T15:13:08.908999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cd9704928789629ed804ac9d726fa8fd809b682d83ca83b2755e537b98c656b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.908999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a3ffad8-a921-4fc6-9f22-96c4b6f72df6", "created": "2026-10-09T15:13:08.909597Z", "modified": "2026-10-09T15:13:08.909597Z", "relationship_type": "indicates", "source_ref": "indicator--674b66ae-3d96-486c-abf5-95aca529fe8e", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5ba54f-9ff5-4e92-8ddb-935e508e7e9e", "created": "2026-10-09T15:13:08.909722Z", "modified": "2026-10-09T15:13:08.909722Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb28dd7db2ed33a74f22a89777714b5d4bc3bf838c20b885f41f9f589f8168dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.909722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a9b79cc-6b1a-4372-a367-e80af5ec4021", "created": "2026-10-09T15:13:08.910313Z", "modified": "2026-10-09T15:13:08.910313Z", "relationship_type": "indicates", "source_ref": "indicator--ee5ba54f-9ff5-4e92-8ddb-935e508e7e9e", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a77b8b-c01f-4c3e-8013-6db968b854c7", "created": "2026-10-09T15:13:08.910434Z", "modified": "2026-10-09T15:13:08.910434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cfe5ec79c7fbdf94c3ec90ac0a8e2d1b4f1a13409c384c9dfbc51fc3839051b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.910434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d8b61cc-b7a4-48a3-9598-335988395f88", "created": "2026-10-09T15:13:08.91102Z", "modified": "2026-10-09T15:13:08.91102Z", "relationship_type": "indicates", "source_ref": "indicator--41a77b8b-c01f-4c3e-8013-6db968b854c7", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07454607-15d9-4e32-a095-f1a54177dc7e", "created": "2026-10-09T15:13:08.911138Z", "modified": "2026-10-09T15:13:08.911138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26434d43e515f38a10263cf74fc6ce2849423ac477de0f4ae4c397152a2efbaa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.911138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c636ac89-cb7f-4d0e-8127-0f3297567173", "created": "2026-10-09T15:13:08.911858Z", "modified": "2026-10-09T15:13:08.911858Z", "relationship_type": "indicates", "source_ref": "indicator--07454607-15d9-4e32-a095-f1a54177dc7e", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a2db01-058d-4f68-b022-7ad4fd93e74f", "created": "2026-10-09T15:13:08.911983Z", "modified": "2026-10-09T15:13:08.911983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dcdeaf96b4eb779fe6b2b827575d9630fd9fa089bfdd701b807efb2a8bbdcc83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.911983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8945505f-dff4-4219-b66e-d3808dacead4", "created": "2026-10-09T15:13:08.912582Z", "modified": "2026-10-09T15:13:08.912582Z", "relationship_type": "indicates", "source_ref": "indicator--14a2db01-058d-4f68-b022-7ad4fd93e74f", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dd692e-1a5e-40a4-97cc-60e6ae1a9c3a", "created": "2026-10-09T15:13:08.91271Z", "modified": "2026-10-09T15:13:08.91271Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47ee347a4a534e32fe4546a0105bec0b669fe72ca81d9ead591d501f9a0168aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.91271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d723428b-c532-4590-adfa-101b76fc51ba", "created": "2026-10-09T15:13:08.913306Z", "modified": "2026-10-09T15:13:08.913306Z", "relationship_type": "indicates", "source_ref": "indicator--48dd692e-1a5e-40a4-97cc-60e6ae1a9c3a", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8601ce79-678f-405b-bf11-1cb232675e83", "created": "2026-10-09T15:13:08.913436Z", "modified": "2026-10-09T15:13:08.913436Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c9ff006344869c4ce571ecb11c9e4e1e5c11784efe0132a5e2420941be5d767']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.913436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ebe3c2c-b242-46a4-a807-35f0cac5916e", "created": "2026-10-09T15:13:08.914023Z", "modified": "2026-10-09T15:13:08.914023Z", "relationship_type": "indicates", "source_ref": "indicator--8601ce79-678f-405b-bf11-1cb232675e83", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f185ec-3ade-4c55-949f-0ff11ee55980", "created": "2026-10-09T15:13:08.914143Z", "modified": "2026-10-09T15:13:08.914143Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='078cc832db7df902bf6b30bec5da07321e07e62fbfde75a50522c29dfed34996']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.914143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb9c76a1-1d19-4931-ac83-992d83615bfb", "created": "2026-10-09T15:13:08.914733Z", "modified": "2026-10-09T15:13:08.914733Z", "relationship_type": "indicates", "source_ref": "indicator--05f185ec-3ade-4c55-949f-0ff11ee55980", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd40ec4-b13c-469e-9b0d-322f33b1b828", "created": "2026-10-09T15:13:08.914854Z", "modified": "2026-10-09T15:13:08.914854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b08592d6aa163a92f6294e806f938a5a15b143bd6604677e1988d8ab30c1b9c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.914854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--577d36ef-fb46-44ad-ac44-336dc35a62f1", "created": "2026-10-09T15:13:08.915457Z", "modified": "2026-10-09T15:13:08.915457Z", "relationship_type": "indicates", "source_ref": "indicator--1bd40ec4-b13c-469e-9b0d-322f33b1b828", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced7f535-3a22-424f-b218-233bf585b723", "created": "2026-10-09T15:13:08.915578Z", "modified": "2026-10-09T15:13:08.915578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='161e8d0c4eb623b81862e09a6f4097bdaa13ef45f3b9e8f0206f503acbae27c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.915578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9799cda4-6df8-4199-bbe2-47c77dcfb1a7", "created": "2026-10-09T15:13:08.916154Z", "modified": "2026-10-09T15:13:08.916154Z", "relationship_type": "indicates", "source_ref": "indicator--ced7f535-3a22-424f-b218-233bf585b723", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ff3ac7-ee25-411d-8935-3239d7578b8b", "created": "2026-10-09T15:13:08.916281Z", "modified": "2026-10-09T15:13:08.916281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='086a72891ad805b02028ab878fe04219b47b41e7fe57827cb8bae3342df8fbf0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.916281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d54aba-238b-4f2e-86b8-89394cbb6afa", "created": "2026-10-09T15:13:08.91687Z", "modified": "2026-10-09T15:13:08.91687Z", "relationship_type": "indicates", "source_ref": "indicator--48ff3ac7-ee25-411d-8935-3239d7578b8b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e429ffb0-13a3-488d-85d4-9df5de1f381a", "created": "2026-10-09T15:13:08.916989Z", "modified": "2026-10-09T15:13:08.916989Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1bcb08fb20b3a22938c3c01fe4f4890404310ea65eb86e5dfd1639f30c8d73d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.916989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--104781f5-2574-415e-9f07-dd744c6d52f9", "created": "2026-10-09T15:13:08.91758Z", "modified": "2026-10-09T15:13:08.91758Z", "relationship_type": "indicates", "source_ref": "indicator--e429ffb0-13a3-488d-85d4-9df5de1f381a", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0778b6ec-0d99-4216-8e95-d18c5b267e88", "created": "2026-10-09T15:13:08.917699Z", "modified": "2026-10-09T15:13:08.917699Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce7a44a38be92c59a9924c56c231340d6714d5c68cd95bbec88c1fec7a989b56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.917699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4eccdf4d-b95a-489b-9182-9c049aba4101", "created": "2026-10-09T15:13:08.918401Z", "modified": "2026-10-09T15:13:08.918401Z", "relationship_type": "indicates", "source_ref": "indicator--0778b6ec-0d99-4216-8e95-d18c5b267e88", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a6159a-bfd5-44d1-853e-291a8881979d", "created": "2026-10-09T15:13:08.918524Z", "modified": "2026-10-09T15:13:08.918524Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a296ebc5ed97d07685fc341dace821adb37fdf5d704c02f32a0c9f137827eff9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.918524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae89ea9b-cb82-4502-94c6-c5e41bbe20ad", "created": "2026-10-09T15:13:08.919107Z", "modified": "2026-10-09T15:13:08.919107Z", "relationship_type": "indicates", "source_ref": "indicator--d5a6159a-bfd5-44d1-853e-291a8881979d", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e31b03-9d72-45c2-8117-57683d774535", "created": "2026-10-09T15:13:08.919228Z", "modified": "2026-10-09T15:13:08.919228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a56b53a2ed3e43b13a92d1083a4c8e8ee331e01b64bab28979c8b2d1fd52eb71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.919228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0d1991d-55ec-4660-b18a-8080c2da2f0c", "created": "2026-10-09T15:13:08.919823Z", "modified": "2026-10-09T15:13:08.919823Z", "relationship_type": "indicates", "source_ref": "indicator--b6e31b03-9d72-45c2-8117-57683d774535", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2279cba-b530-41dd-96bb-2601bb3553fc", "created": "2026-10-09T15:13:08.919942Z", "modified": "2026-10-09T15:13:08.919942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b04afa264292511d139605687f674e4e65046791a276357d4fcddc526672861a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.919942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e48d295-83ac-435d-843d-6b8cb456fe38", "created": "2026-10-09T15:13:08.920542Z", "modified": "2026-10-09T15:13:08.920542Z", "relationship_type": "indicates", "source_ref": "indicator--f2279cba-b530-41dd-96bb-2601bb3553fc", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b315f5fd-68f1-4185-b859-e20519aa2570", "created": "2026-10-09T15:13:08.920671Z", "modified": "2026-10-09T15:13:08.920671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96067163a2d66143758df859d4f8d45dab7b45a5f5a5d708aa17d97499776fcb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.920671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d6dfd96-90e3-4345-b265-4220765a3dad", "created": "2026-10-09T15:13:08.921253Z", "modified": "2026-10-09T15:13:08.921253Z", "relationship_type": "indicates", "source_ref": "indicator--b315f5fd-68f1-4185-b859-e20519aa2570", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d14cbe-aede-4a6f-bd7f-a9e4b6fe0626", "created": "2026-10-09T15:13:08.921384Z", "modified": "2026-10-09T15:13:08.921384Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.brot.storage.work']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.921384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8461549e-8579-4bdb-80c9-2f535b2d0ba4", "created": "2026-10-09T15:13:08.921841Z", "modified": "2026-10-09T15:13:08.921841Z", "relationship_type": "indicates", "source_ref": "indicator--18d14cbe-aede-4a6f-bd7f-a9e4b6fe0626", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d85e0d-bf1d-40da-a0f9-bb916add7334", "created": "2026-10-09T15:13:08.92196Z", "modified": "2026-10-09T15:13:08.92196Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cycle.start.mess']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.92196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--989b5868-9d7a-423c-aeb3-d38fc437cf2d", "created": "2026-10-09T15:13:08.922418Z", "modified": "2026-10-09T15:13:08.922418Z", "relationship_type": "indicates", "source_ref": "indicator--d9d85e0d-bf1d-40da-a0f9-bb916add7334", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e8ae43-f8b4-4add-b7b2-559756ccbdd9", "created": "2026-10-09T15:13:08.92254Z", "modified": "2026-10-09T15:13:08.92254Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thecybernanny.andapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.92254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066b41ec-78ab-4038-b061-217a95e947c8", "created": "2026-10-09T15:13:08.922996Z", "modified": "2026-10-09T15:13:08.922996Z", "relationship_type": "indicates", "source_ref": "indicator--49e8ae43-f8b4-4add-b7b2-559756ccbdd9", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb7ac1c-64a2-4918-b38e-e7c95f61d72a", "created": "2026-10-09T15:13:08.923113Z", "modified": "2026-10-09T15:13:08.923113Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.androidcoreapp.androidbackup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.923113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37c7db2c-c59a-416a-9756-21a337281b53", "created": "2026-10-09T15:13:08.923683Z", "modified": "2026-10-09T15:13:08.923683Z", "relationship_type": "indicates", "source_ref": "indicator--acb7ac1c-64a2-4918-b38e-e7c95f61d72a", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ce143d-a79c-4999-a6bf-1f94faedc089", "created": "2026-10-09T15:13:08.923806Z", "modified": "2026-10-09T15:13:08.923806Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.delphiboardlayer.androidcoreapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.923806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd768f1f-b0ee-48c7-adb6-50124d5ac7ea", "created": "2026-10-09T15:13:08.924399Z", "modified": "2026-10-09T15:13:08.924399Z", "relationship_type": "indicates", "source_ref": "indicator--c3ce143d-a79c-4999-a6bf-1f94faedc089", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1033f961-3c79-4852-97a6-f7b76bceae52", "created": "2026-10-09T15:13:08.924525Z", "modified": "2026-10-09T15:13:08.924525Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.reptilicus.clientapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.924525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab0997d5-bdff-4375-9bf3-5c47541be3e2", "created": "2026-10-09T15:13:08.924988Z", "modified": "2026-10-09T15:13:08.924988Z", "relationship_type": "indicates", "source_ref": "indicator--1033f961-3c79-4852-97a6-f7b76bceae52", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0cb33b-fd94-4ae2-8409-92cc6fa0ae12", "created": "2026-10-09T15:13:08.925106Z", "modified": "2026-10-09T15:13:08.925106Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.system_updater_abs341']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.925106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b019fa6a-9b26-467e-9766-bc453ea735f3", "created": "2026-10-09T15:13:08.925641Z", "modified": "2026-10-09T15:13:08.925641Z", "relationship_type": "indicates", "source_ref": "indicator--1f0cb33b-fd94-4ae2-8409-92cc6fa0ae12", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d4c7aa-8277-4c3f-90b0-7ceb6aa1aedd", "created": "2026-10-09T15:13:08.925765Z", "modified": "2026-10-09T15:13:08.925765Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.vkurhandler']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.925765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6aef7129-72ac-4237-9caf-c01ed0810b4a", "created": "2026-10-09T15:13:08.926223Z", "modified": "2026-10-09T15:13:08.926223Z", "relationship_type": "indicates", "source_ref": "indicator--71d4c7aa-8277-4c3f-90b0-7ceb6aa1aedd", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd714c0-adc5-4160-88d2-68911f8be3a7", "created": "2026-10-09T15:13:08.926362Z", "modified": "2026-10-09T15:13:08.926362Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='se.vkur.clientapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.926362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35b3b87f-e160-447a-872a-c8c0dbf9d85e", "created": "2026-10-09T15:13:08.926825Z", "modified": "2026-10-09T15:13:08.926825Z", "relationship_type": "indicates", "source_ref": "indicator--0dd714c0-adc5-4160-88d2-68911f8be3a7", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9412c373-1e70-4d71-9f48-b6a7907a900f", "created": "2026-10-09T15:13:08.926943Z", "modified": "2026-10-09T15:13:08.926943Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='yc.sysupd.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.926943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65c382ff-12da-40e8-974e-86aec9a547c7", "created": "2026-10-09T15:13:08.927472Z", "modified": "2026-10-09T15:13:08.927472Z", "relationship_type": "indicates", "source_ref": "indicator--9412c373-1e70-4d71-9f48-b6a7907a900f", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67140545-315c-4e90-985e-a3e1dab9e53b", "created": "2026-10-09T15:13:08.927593Z", "modified": "2026-10-09T15:13:08.927593Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='230E35A26E471352DF5DBDBCF9834E0711500CB0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.927593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27adc63e-b2d5-4ded-83d4-6621c1682c33", "created": "2026-10-09T15:13:08.928133Z", "modified": "2026-10-09T15:13:08.928133Z", "relationship_type": "indicates", "source_ref": "indicator--67140545-315c-4e90-985e-a3e1dab9e53b", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59360636-d3a0-4be8-adb9-bcda99fe12b0", "created": "2026-10-09T15:13:08.928251Z", "modified": "2026-10-09T15:13:08.928251Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2C08279BCC8EB16B2B31ACFBD7E1D4BB28E49A87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.928251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fbedf93-f175-4c41-8521-ab43ce4cff2c", "created": "2026-10-09T15:13:08.928804Z", "modified": "2026-10-09T15:13:08.928804Z", "relationship_type": "indicates", "source_ref": "indicator--59360636-d3a0-4be8-adb9-bcda99fe12b0", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136e93f4-25c9-4bdd-ad96-a108511f818f", "created": "2026-10-09T15:13:08.928922Z", "modified": "2026-10-09T15:13:08.928922Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2FD8BEF4081F126D4DA655B40E9FC63F116DD857']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.928922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3168324c-6782-4df9-8761-267e72b56d82", "created": "2026-10-09T15:13:08.92948Z", "modified": "2026-10-09T15:13:08.92948Z", "relationship_type": "indicates", "source_ref": "indicator--136e93f4-25c9-4bdd-ad96-a108511f818f", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9565860d-7d95-4eca-a19f-9cbf6c1b9f45", "created": "2026-10-09T15:13:08.929603Z", "modified": "2026-10-09T15:13:08.929603Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9256E291823DA741B64CB23F7E371D0940E5272E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.929603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3583b7d8-94cb-4a42-b539-c01fb9024854", "created": "2026-10-09T15:13:08.930243Z", "modified": "2026-10-09T15:13:08.930243Z", "relationship_type": "indicates", "source_ref": "indicator--9565860d-7d95-4eca-a19f-9cbf6c1b9f45", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d6afb3-50d4-4a07-a849-559c690536bd", "created": "2026-10-09T15:13:08.930375Z", "modified": "2026-10-09T15:13:08.930375Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9BD494107EFED96F630D29D6E18AE4DCC47149E2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.930375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb107688-ef8b-4b32-ad10-7b5afe573547", "created": "2026-10-09T15:13:08.930909Z", "modified": "2026-10-09T15:13:08.930909Z", "relationship_type": "indicates", "source_ref": "indicator--d2d6afb3-50d4-4a07-a849-559c690536bd", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76121284-1018-43e7-8824-d7c9e2bf5bea", "created": "2026-10-09T15:13:08.93103Z", "modified": "2026-10-09T15:13:08.93103Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6D0FF787BF4534F1077D1E4BF2E18BA381D97061']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.93103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d205c3e-25e6-444d-94c6-7b9b92cf0d2f", "created": "2026-10-09T15:13:08.931576Z", "modified": "2026-10-09T15:13:08.931576Z", "relationship_type": "indicates", "source_ref": "indicator--76121284-1018-43e7-8824-d7c9e2bf5bea", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec0ef71-ee73-4bea-95db-1c81463c5999", "created": "2026-10-09T15:13:08.931699Z", "modified": "2026-10-09T15:13:08.931699Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D3A7E0E542A3E1112741806AC31F341C4200FBA1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.931699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bc8e9cc-ebef-4bf9-8760-3316cc6a26ed", "created": "2026-10-09T15:13:08.932242Z", "modified": "2026-10-09T15:13:08.932242Z", "relationship_type": "indicates", "source_ref": "indicator--6ec0ef71-ee73-4bea-95db-1c81463c5999", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c9e755-a292-4f28-bb08-544518bc0c59", "created": "2026-10-09T15:13:08.932374Z", "modified": "2026-10-09T15:13:08.932374Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B61326887306E5A65726AE6BFD1D720D2760CEFF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.932374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f61c1de-edf2-4251-8e49-975c64effdbe", "created": "2026-10-09T15:13:08.932924Z", "modified": "2026-10-09T15:13:08.932924Z", "relationship_type": "indicates", "source_ref": "indicator--d6c9e755-a292-4f28-bb08-544518bc0c59", "target_ref": "malware--5025f01e-b540-4b51-9dd7-9d7650c44ed5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3", "created": "2026-10-09T15:13:08.933045Z", "modified": "2026-10-09T15:13:08.933045Z", "name": "PhoneSheriff", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150bdaa0-5aa0-46d9-96e4-dea68739d1cc", "created": "2026-10-09T15:13:08.933162Z", "modified": "2026-10-09T15:13:08.933162Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilenannylogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.933162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb86a4af-79a1-4216-94ba-56f2bec3ae7a", "created": "2026-10-09T15:13:08.933652Z", "modified": "2026-10-09T15:13:08.933652Z", "relationship_type": "indicates", "source_ref": "indicator--150bdaa0-5aa0-46d9-96e4-dea68739d1cc", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a342c3b-3c4c-4acb-a150-c18fea427c85", "created": "2026-10-09T15:13:08.933772Z", "modified": "2026-10-09T15:13:08.933772Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonesheriff.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.933772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7697b08-5a78-4e5a-8b33-3fcf67e9526f", "created": "2026-10-09T15:13:08.934247Z", "modified": "2026-10-09T15:13:08.934247Z", "relationship_type": "indicates", "source_ref": "indicator--9a342c3b-3c4c-4acb-a150-c18fea427c85", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2826a986-054b-454f-a845-0a95b061eabf", "created": "2026-10-09T15:13:08.93438Z", "modified": "2026-10-09T15:13:08.93438Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellmonitoring.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.93438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d57e08a8-3481-443e-8612-e76a1ea8061d", "created": "2026-10-09T15:13:08.934847Z", "modified": "2026-10-09T15:13:08.934847Z", "relationship_type": "indicates", "source_ref": "indicator--2826a986-054b-454f-a845-0a95b061eabf", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c32c56-97a9-40e1-afd9-29bc383967b3", "created": "2026-10-09T15:13:08.934962Z", "modified": "2026-10-09T15:13:08.934962Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cellmonitoring.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.934962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d07bcd4-60be-4efa-94b5-8e624e7a3c55", "created": "2026-10-09T15:13:08.935446Z", "modified": "2026-10-09T15:13:08.935446Z", "relationship_type": "indicates", "source_ref": "indicator--43c32c56-97a9-40e1-afd9-29bc383967b3", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2a5137-c841-4ea8-93fc-84e9d422caac", "created": "2026-10-09T15:13:08.935572Z", "modified": "2026-10-09T15:13:08.935572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobile-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.935572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a682fe3-2652-4d2a-afcc-4e0671d95416", "created": "2026-10-09T15:13:08.936148Z", "modified": "2026-10-09T15:13:08.936148Z", "relationship_type": "indicates", "source_ref": "indicator--5f2a5137-c841-4ea8-93fc-84e9d422caac", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c232d50-069f-444f-b1ff-aabc01db6c9c", "created": "2026-10-09T15:13:08.936278Z", "modified": "2026-10-09T15:13:08.936278Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.emobilespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.936278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9772d38e-3cf0-4cf7-ad8e-09106be089f9", "created": "2026-10-09T15:13:08.936753Z", "modified": "2026-10-09T15:13:08.936753Z", "relationship_type": "indicates", "source_ref": "indicator--4c232d50-069f-444f-b1ff-aabc01db6c9c", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230e5bee-e963-4b4a-8613-8e2023e41e99", "created": "2026-10-09T15:13:08.936872Z", "modified": "2026-10-09T15:13:08.936872Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonesheriff.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.936872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbb0213-69c0-463d-9a97-f296f273d614", "created": "2026-10-09T15:13:08.937347Z", "modified": "2026-10-09T15:13:08.937347Z", "relationship_type": "indicates", "source_ref": "indicator--230e5bee-e963-4b4a-8613-8e2023e41e99", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31576a4f-5c02-4ccb-8e8a-86498db8c415", "created": "2026-10-09T15:13:08.937466Z", "modified": "2026-10-09T15:13:08.937466Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phonesheriff.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.937466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77a7a989-ee63-4a10-aad3-03ccd2fbe848", "created": "2026-10-09T15:13:08.937935Z", "modified": "2026-10-09T15:13:08.937935Z", "relationship_type": "indicates", "source_ref": "indicator--31576a4f-5c02-4ccb-8e8a-86498db8c415", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e524a3a-a9c4-48ff-8437-cc3139ce6c18", "created": "2026-10-09T15:13:08.93805Z", "modified": "2026-10-09T15:13:08.93805Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.retinax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.93805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--925c23ae-a289-4f37-b4ea-6483886f63ea", "created": "2026-10-09T15:13:08.938524Z", "modified": "2026-10-09T15:13:08.938524Z", "relationship_type": "indicates", "source_ref": "indicator--3e524a3a-a9c4-48ff-8437-cc3139ce6c18", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9ac748-4dcf-44e7-9e01-f365feda18c2", "created": "2026-10-09T15:13:08.938641Z", "modified": "2026-10-09T15:13:08.938641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='retinax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.938641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--491799c4-9252-4d21-b0f2-d44919038fbd", "created": "2026-10-09T15:13:08.939097Z", "modified": "2026-10-09T15:13:08.939097Z", "relationship_type": "indicates", "source_ref": "indicator--ef9ac748-4dcf-44e7-9e01-f365feda18c2", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30381445-82bb-4075-ab9e-9dce3f608678", "created": "2026-10-09T15:13:08.939218Z", "modified": "2026-10-09T15:13:08.939218Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retina.phonesheriff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.939218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc65b0ae-0890-47ad-8134-5fc9476f29ba", "created": "2026-10-09T15:13:08.93969Z", "modified": "2026-10-09T15:13:08.93969Z", "relationship_type": "indicates", "source_ref": "indicator--30381445-82bb-4075-ab9e-9dce3f608678", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939885ec-82f5-437e-b05f-1e1d0960827e", "created": "2026-10-09T15:13:08.939805Z", "modified": "2026-10-09T15:13:08.939805Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retina21.ms41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.939805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc2165d1-0513-459c-9873-a2901cb08e79", "created": "2026-10-09T15:13:08.940243Z", "modified": "2026-10-09T15:13:08.940243Z", "relationship_type": "indicates", "source_ref": "indicator--939885ec-82f5-437e-b05f-1e1d0960827e", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fdcb65-8c2b-46b7-83aa-b73d3c2fa724", "created": "2026-10-09T15:13:08.940378Z", "modified": "2026-10-09T15:13:08.940378Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retina22.ms6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.940378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9334ccf-4cb5-4299-b0eb-90e0772388a7", "created": "2026-10-09T15:13:08.940825Z", "modified": "2026-10-09T15:13:08.940825Z", "relationship_type": "indicates", "source_ref": "indicator--15fdcb65-8c2b-46b7-83aa-b73d3c2fa724", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e7db85-01aa-4490-b4d8-6ff3b099bb17", "created": "2026-10-09T15:13:08.940941Z", "modified": "2026-10-09T15:13:08.940941Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl22.retinaspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.940941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2df2004-5675-4482-925a-2249f2f44e90", "created": "2026-10-09T15:13:08.941509Z", "modified": "2026-10-09T15:13:08.941509Z", "relationship_type": "indicates", "source_ref": "indicator--a3e7db85-01aa-4490-b4d8-6ff3b099bb17", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa989a1d-bc0e-4c4a-a72f-2301cc90e7d5", "created": "2026-10-09T15:13:08.941633Z", "modified": "2026-10-09T15:13:08.941633Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retinasoft.ephonetracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.941633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7565e465-be6b-41b9-9145-18e8247c83b1", "created": "2026-10-09T15:13:08.942105Z", "modified": "2026-10-09T15:13:08.942105Z", "relationship_type": "indicates", "source_ref": "indicator--fa989a1d-bc0e-4c4a-a72f-2301cc90e7d5", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c604d8-da42-4a60-8be4-185c57193e89", "created": "2026-10-09T15:13:08.942224Z", "modified": "2026-10-09T15:13:08.942224Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl15.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.942224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a59f1738-66ad-4ff9-af6b-4312bee06bd3", "created": "2026-10-09T15:13:08.942698Z", "modified": "2026-10-09T15:13:08.942698Z", "relationship_type": "indicates", "source_ref": "indicator--37c604d8-da42-4a60-8be4-185c57193e89", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ed9fc2-0ba9-4f8b-9710-e82cfbc81cd9", "created": "2026-10-09T15:13:08.942816Z", "modified": "2026-10-09T15:13:08.942816Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl16.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.942816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--617f1b71-fb47-4876-8112-6251b0713836", "created": "2026-10-09T15:13:08.943281Z", "modified": "2026-10-09T15:13:08.943281Z", "relationship_type": "indicates", "source_ref": "indicator--f4ed9fc2-0ba9-4f8b-9710-e82cfbc81cd9", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2736d4-5f87-48a8-b205-55a65b04ebf2", "created": "2026-10-09T15:13:08.943402Z", "modified": "2026-10-09T15:13:08.943402Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl17.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.943402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0df6617-cda1-4ec8-bffc-9d255678854e", "created": "2026-10-09T15:13:08.943864Z", "modified": "2026-10-09T15:13:08.943864Z", "relationship_type": "indicates", "source_ref": "indicator--4e2736d4-5f87-48a8-b205-55a65b04ebf2", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a3c210-01f5-4663-8859-667451d77bef", "created": "2026-10-09T15:13:08.943979Z", "modified": "2026-10-09T15:13:08.943979Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl18.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.943979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7bc4649-8bd8-4097-9b37-07e182ce80a7", "created": "2026-10-09T15:13:08.944445Z", "modified": "2026-10-09T15:13:08.944445Z", "relationship_type": "indicates", "source_ref": "indicator--a0a3c210-01f5-4663-8859-667451d77bef", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df63960a-8404-4975-a343-956910383b03", "created": "2026-10-09T15:13:08.944564Z", "modified": "2026-10-09T15:13:08.944564Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl19.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.944564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e48de916-b7d7-4d4c-bf52-f5f9c7c2ce58", "created": "2026-10-09T15:13:08.945022Z", "modified": "2026-10-09T15:13:08.945022Z", "relationship_type": "indicates", "source_ref": "indicator--df63960a-8404-4975-a343-956910383b03", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496d4cf9-8c3d-425d-a573-0774d8e81b1d", "created": "2026-10-09T15:13:08.945137Z", "modified": "2026-10-09T15:13:08.945137Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl20.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.945137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d58eb529-0227-4816-b13e-5e37db8a71a3", "created": "2026-10-09T15:13:08.945603Z", "modified": "2026-10-09T15:13:08.945603Z", "relationship_type": "indicates", "source_ref": "indicator--496d4cf9-8c3d-425d-a573-0774d8e81b1d", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6270717-915b-485b-bc75-86b6900c7c23", "created": "2026-10-09T15:13:08.945721Z", "modified": "2026-10-09T15:13:08.945721Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl21.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.945721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--522030fd-9806-40eb-a112-2869d32920ca", "created": "2026-10-09T15:13:08.946193Z", "modified": "2026-10-09T15:13:08.946193Z", "relationship_type": "indicates", "source_ref": "indicator--f6270717-915b-485b-bc75-86b6900c7c23", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d02df7-2e55-40db-8e9e-dbb96937af17", "created": "2026-10-09T15:13:08.946321Z", "modified": "2026-10-09T15:13:08.946321Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F57CBB4CBB9834A14AF675222CECA6A0D26D838E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.946321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c4e5ae9-1fd9-4538-9ade-b0fd69703d0e", "created": "2026-10-09T15:13:08.946969Z", "modified": "2026-10-09T15:13:08.946969Z", "relationship_type": "indicates", "source_ref": "indicator--a9d02df7-2e55-40db-8e9e-dbb96937af17", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422be1e2-4b4e-4ed9-84e4-1a9cba96b804", "created": "2026-10-09T15:13:08.947091Z", "modified": "2026-10-09T15:13:08.947091Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F28F3A97D25E51AB266E56D3B80F04747D242E50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.947091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c26fd102-6d77-4a58-b4eb-f57dcc7622b1", "created": "2026-10-09T15:13:08.94765Z", "modified": "2026-10-09T15:13:08.94765Z", "relationship_type": "indicates", "source_ref": "indicator--422be1e2-4b4e-4ed9-84e4-1a9cba96b804", "target_ref": "malware--5c87dacc-d80d-49af-9df5-649ac9a4d3f3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--92a0777c-b499-458a-b65f-bac430147186", "created": "2026-10-09T15:13:08.947771Z", "modified": "2026-10-09T15:13:08.947771Z", "name": "OwnSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4ff965-43c0-44ae-be39-0da9fb2a8565", "created": "2026-10-09T15:13:08.947887Z", "modified": "2026-10-09T15:13:08.947887Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user.ownspy.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.947887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8aa54ba8-6182-417f-9850-396cfb7f2cb3", "created": "2026-10-09T15:13:08.948358Z", "modified": "2026-10-09T15:13:08.948358Z", "relationship_type": "indicates", "source_ref": "indicator--3c4ff965-43c0-44ae-be39-0da9fb2a8565", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c17c1c5-b81f-45c4-845f-bad452be42b6", "created": "2026-10-09T15:13:08.948479Z", "modified": "2026-10-09T15:13:08.948479Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobileinnova.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.948479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77e2d860-db95-4713-9378-c8ea1e63ca29", "created": "2026-10-09T15:13:08.94895Z", "modified": "2026-10-09T15:13:08.94895Z", "relationship_type": "indicates", "source_ref": "indicator--0c17c1c5-b81f-45c4-845f-bad452be42b6", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a41484-4d4f-4215-8b76-bf4202c42dd7", "created": "2026-10-09T15:13:08.949069Z", "modified": "2026-10-09T15:13:08.949069Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ownspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.949069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21376bfe-2ca1-464d-89be-d33188caa644", "created": "2026-10-09T15:13:08.949541Z", "modified": "2026-10-09T15:13:08.949541Z", "relationship_type": "indicates", "source_ref": "indicator--38a41484-4d4f-4215-8b76-bf4202c42dd7", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe45251-e934-44ed-9d85-d4689f0058fe", "created": "2026-10-09T15:13:08.94966Z", "modified": "2026-10-09T15:13:08.94966Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='en.ownspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.94966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--960e8dd3-1304-4319-8ed5-cba2f6057b1c", "created": "2026-10-09T15:13:08.950142Z", "modified": "2026-10-09T15:13:08.950142Z", "relationship_type": "indicates", "source_ref": "indicator--ebe45251-e934-44ed-9d85-d4689f0058fe", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf6f044-775b-4e78-be4c-417d1c66ca0a", "created": "2026-10-09T15:13:08.950274Z", "modified": "2026-10-09T15:13:08.950274Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webdetetive.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.950274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc903558-5723-44d8-be70-69dbe1d59f21", "created": "2026-10-09T15:13:08.950756Z", "modified": "2026-10-09T15:13:08.950756Z", "relationship_type": "indicates", "source_ref": "indicator--9cf6f044-775b-4e78-be4c-417d1c66ca0a", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18655919-57dc-4de0-86bd-86bc2c66576e", "created": "2026-10-09T15:13:08.950873Z", "modified": "2026-10-09T15:13:08.950873Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ownspy.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.950873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c59ef52-d7b3-4752-b923-7da5ac79030a", "created": "2026-10-09T15:13:08.951353Z", "modified": "2026-10-09T15:13:08.951353Z", "relationship_type": "indicates", "source_ref": "indicator--18655919-57dc-4de0-86bd-86bc2c66576e", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7775cc9-4e12-43fd-9807-042c293a544d", "created": "2026-10-09T15:13:08.951478Z", "modified": "2026-10-09T15:13:08.951478Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='saferspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.951478Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0f33bf4-ed2d-4d7d-a744-9544c74f162e", "created": "2026-10-09T15:13:08.951944Z", "modified": "2026-10-09T15:13:08.951944Z", "relationship_type": "indicates", "source_ref": "indicator--b7775cc9-4e12-43fd-9807-042c293a544d", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b84765-6cc3-4d00-b943-85d8a563ada1", "created": "2026-10-09T15:13:08.952063Z", "modified": "2026-10-09T15:13:08.952063Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.webdetetive.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.952063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93c8778f-bd02-431f-ba9c-27a44e758a2c", "created": "2026-10-09T15:13:08.952942Z", "modified": "2026-10-09T15:13:08.952942Z", "relationship_type": "indicates", "source_ref": "indicator--72b84765-6cc3-4d00-b943-85d8a563ada1", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdce30a-9814-41b0-aef5-1411c18f7450", "created": "2026-10-09T15:13:08.953071Z", "modified": "2026-10-09T15:13:08.953071Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.953071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd9b976a-a900-41ad-a205-5878289c8853", "created": "2026-10-09T15:13:08.953558Z", "modified": "2026-10-09T15:13:08.953558Z", "relationship_type": "indicates", "source_ref": "indicator--cfdce30a-9814-41b0-aef5-1411c18f7450", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2f6b81-0c61-465a-815f-aa8f1783490c", "created": "2026-10-09T15:13:08.953681Z", "modified": "2026-10-09T15:13:08.953681Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.webdetetive.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.953681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10019476-1262-4cbc-b08c-df919f15384f", "created": "2026-10-09T15:13:08.954158Z", "modified": "2026-10-09T15:13:08.954158Z", "relationship_type": "indicates", "source_ref": "indicator--9d2f6b81-0c61-465a-815f-aa8f1783490c", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566f95ab-e3fd-47ee-b0e1-752b0ca92c88", "created": "2026-10-09T15:13:08.954285Z", "modified": "2026-10-09T15:13:08.954285Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webdetetive.era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.954285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8cd0458-5fd9-48fb-8599-ad6f6148c9c0", "created": "2026-10-09T15:13:08.954762Z", "modified": "2026-10-09T15:13:08.954762Z", "relationship_type": "indicates", "source_ref": "indicator--566f95ab-e3fd-47ee-b0e1-752b0ca92c88", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1ed629-6e63-4d09-a1fb-7f53ab2c0c40", "created": "2026-10-09T15:13:08.95488Z", "modified": "2026-10-09T15:13:08.95488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='6287970dd9.era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.95488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1055570-a180-4e3b-b63a-1062441203bf", "created": "2026-10-09T15:13:08.955369Z", "modified": "2026-10-09T15:13:08.955369Z", "relationship_type": "indicates", "source_ref": "indicator--ff1ed629-6e63-4d09-a1fb-7f53ab2c0c40", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe61a32c-869b-4b59-82cb-cf800fcb5bb1", "created": "2026-10-09T15:13:08.95549Z", "modified": "2026-10-09T15:13:08.95549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c9db9bbc8d.era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.95549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ca2495d-f881-4bb7-a452-f37e52e800b3", "created": "2026-10-09T15:13:08.955967Z", "modified": "2026-10-09T15:13:08.955967Z", "relationship_type": "indicates", "source_ref": "indicator--fe61a32c-869b-4b59-82cb-cf800fcb5bb1", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2241ff-cb22-47e0-a0b9-857caac1e049", "created": "2026-10-09T15:13:08.956086Z", "modified": "2026-10-09T15:13:08.956086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bcf96117b47fac6666eec22664c721546b45dcf42857f49277d1cb7e8f90b70a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.956086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2cb2ebb-7a0e-4139-9a42-9f8daf37ee38", "created": "2026-10-09T15:13:08.956689Z", "modified": "2026-10-09T15:13:08.956689Z", "relationship_type": "indicates", "source_ref": "indicator--ba2241ff-cb22-47e0-a0b9-857caac1e049", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe47a03-a6d7-4d6a-80f3-4634dbcbdab0", "created": "2026-10-09T15:13:08.956813Z", "modified": "2026-10-09T15:13:08.956813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1bc37d9be07ffad8b21f673f2b678b24ad0a53f51fe53598544da549fe4d4e66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.956813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1f9df2d-7da7-4cd9-973e-8d87f66b316b", "created": "2026-10-09T15:13:08.957405Z", "modified": "2026-10-09T15:13:08.957405Z", "relationship_type": "indicates", "source_ref": "indicator--ebe47a03-a6d7-4d6a-80f3-4634dbcbdab0", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ccb73c-2e48-45fb-8aae-b6ddbcf59967", "created": "2026-10-09T15:13:08.957523Z", "modified": "2026-10-09T15:13:08.957523Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ownspy.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.957523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0748a02-85cc-4912-beb8-e66429c41df5", "created": "2026-10-09T15:13:08.957974Z", "modified": "2026-10-09T15:13:08.957974Z", "relationship_type": "indicates", "source_ref": "indicator--e3ccb73c-2e48-45fb-8aae-b6ddbcf59967", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb72fe5-41d5-475b-bea7-f36c8c68173e", "created": "2026-10-09T15:13:08.958091Z", "modified": "2026-10-09T15:13:08.958091Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.system.kernel']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.958091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--204b35b4-7c8b-4be5-b431-a14c5d814db7", "created": "2026-10-09T15:13:08.958651Z", "modified": "2026-10-09T15:13:08.958651Z", "relationship_type": "indicates", "source_ref": "indicator--3eb72fe5-41d5-475b-bea7-f36c8c68173e", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d7c5d7-59ab-4626-9b57-6108cdff49ad", "created": "2026-10-09T15:13:08.958778Z", "modified": "2026-10-09T15:13:08.958778Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CA5304E94F4BC97DA9D147E76858DBF70AB8B4E6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.958778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f05de7ca-f8d8-4580-869f-12f57727d840", "created": "2026-10-09T15:13:08.959331Z", "modified": "2026-10-09T15:13:08.959331Z", "relationship_type": "indicates", "source_ref": "indicator--48d7c5d7-59ab-4626-9b57-6108cdff49ad", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115a60c3-ad08-4424-8f37-76b1ca3c8b26", "created": "2026-10-09T15:13:08.959452Z", "modified": "2026-10-09T15:13:08.959452Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='14A071616D4BC37F08BE865D375101F4C963777A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.959452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cad8d65-cf81-4557-9cfe-a13561206e47", "created": "2026-10-09T15:13:08.959991Z", "modified": "2026-10-09T15:13:08.959991Z", "relationship_type": "indicates", "source_ref": "indicator--115a60c3-ad08-4424-8f37-76b1ca3c8b26", "target_ref": "malware--92a0777c-b499-458a-b65f-bac430147186"}, {"type": "malware", "spec_version": "2.1", "id": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197", "created": "2026-10-09T15:13:08.960108Z", "modified": "2026-10-09T15:13:08.960108Z", "name": "Cocospy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e4b7f8-a95e-4082-8b86-c67906439fba", "created": "2026-10-09T15:13:08.960225Z", "modified": "2026-10-09T15:13:08.960225Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alog.umeng.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.960225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e908424-4345-4b47-84ad-a9224f6b1741", "created": "2026-10-09T15:13:08.960702Z", "modified": "2026-10-09T15:13:08.960702Z", "relationship_type": "indicates", "source_ref": "indicator--13e4b7f8-a95e-4082-8b86-c67906439fba", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5732394-84b8-42cb-9cf0-7c29cad5ce90", "created": "2026-10-09T15:13:08.960823Z", "modified": "2026-10-09T15:13:08.960823Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app-api.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.960823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e19ba594-13b0-430d-8c31-8cd8c19b9ad9", "created": "2026-10-09T15:13:08.9613Z", "modified": "2026-10-09T15:13:08.9613Z", "relationship_type": "indicates", "source_ref": "indicator--e5732394-84b8-42cb-9cf0-7c29cad5ce90", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7383608f-db44-4c9e-99b1-b1a3ce4ab2a1", "created": "2026-10-09T15:13:08.961418Z", "modified": "2026-10-09T15:13:08.961418Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.api.spyzie.wondershare.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.961418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e49a051-a2f5-4d84-87c9-579edf915898", "created": "2026-10-09T15:13:08.961903Z", "modified": "2026-10-09T15:13:08.961903Z", "relationship_type": "indicates", "source_ref": "indicator--7383608f-db44-4c9e-99b1-b1a3ce4ab2a1", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010b651e-3c6d-490f-b43d-856bec572bc1", "created": "2026-10-09T15:13:08.962028Z", "modified": "2026-10-09T15:13:08.962028Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.962028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc33f1d2-4f75-4839-8c7c-6911fd7b5c42", "created": "2026-10-09T15:13:08.962601Z", "modified": "2026-10-09T15:13:08.962601Z", "relationship_type": "indicates", "source_ref": "indicator--010b651e-3c6d-490f-b43d-856bec572bc1", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83db30dc-ee3d-425b-abe7-6273ebf6d684", "created": "2026-10-09T15:13:08.962723Z", "modified": "2026-10-09T15:13:08.962723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='b.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.962723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22e0de82-8e59-4ace-84ea-30432c65013e", "created": "2026-10-09T15:13:08.963196Z", "modified": "2026-10-09T15:13:08.963196Z", "relationship_type": "indicates", "source_ref": "indicator--83db30dc-ee3d-425b-abe7-6273ebf6d684", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1015af76-639f-4c69-ae40-1954c238e59c", "created": "2026-10-09T15:13:08.963325Z", "modified": "2026-10-09T15:13:08.963325Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.963325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aac05246-5301-4c36-b778-a7a42745b5a2", "created": "2026-10-09T15:13:08.9638Z", "modified": "2026-10-09T15:13:08.9638Z", "relationship_type": "indicates", "source_ref": "indicator--1015af76-639f-4c69-ae40-1954c238e59c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bcdf13-22ce-4db9-8fa6-9ed5d69f8b80", "created": "2026-10-09T15:13:08.963916Z", "modified": "2026-10-09T15:13:08.963916Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.963916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a9fe345-29b4-4fef-b90d-f233b3b2d11a", "created": "2026-10-09T15:13:08.964505Z", "modified": "2026-10-09T15:13:08.964505Z", "relationship_type": "indicates", "source_ref": "indicator--13bcdf13-22ce-4db9-8fa6-9ed5d69f8b80", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033434ab-9db4-4a91-b71b-99c1b94c08e2", "created": "2026-10-09T15:13:08.964629Z", "modified": "2026-10-09T15:13:08.964629Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.964629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--072420bd-cfa2-465a-9175-4057f205a581", "created": "2026-10-09T15:13:08.965101Z", "modified": "2026-10-09T15:13:08.965101Z", "relationship_type": "indicates", "source_ref": "indicator--033434ab-9db4-4a91-b71b-99c1b94c08e2", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875927ac-affc-4eaa-809b-f0a702ac2bd6", "created": "2026-10-09T15:13:08.965219Z", "modified": "2026-10-09T15:13:08.965219Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='f.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.965219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--586d0edd-07e5-4160-bae0-9bf38736760f", "created": "2026-10-09T15:13:08.9657Z", "modified": "2026-10-09T15:13:08.9657Z", "relationship_type": "indicates", "source_ref": "indicator--875927ac-affc-4eaa-809b-f0a702ac2bd6", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74747a5-7694-439b-a1c7-394013f5af85", "created": "2026-10-09T15:13:08.965822Z", "modified": "2026-10-09T15:13:08.965822Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fonemonitor.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.965822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--896b876c-9b40-4923-8f2c-f94116aa36f4", "created": "2026-10-09T15:13:08.966299Z", "modified": "2026-10-09T15:13:08.966299Z", "relationship_type": "indicates", "source_ref": "indicator--e74747a5-7694-439b-a1c7-394013f5af85", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7166667-abf3-4a0b-a581-4ef2069b1180", "created": "2026-10-09T15:13:08.966432Z", "modified": "2026-10-09T15:13:08.966432Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='g.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.966432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2773851-70bd-4f27-8cb9-a9f36819e1de", "created": "2026-10-09T15:13:08.966899Z", "modified": "2026-10-09T15:13:08.966899Z", "relationship_type": "indicates", "source_ref": "indicator--e7166667-abf3-4a0b-a581-4ef2069b1180", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9134cbc-8be0-4f59-b4cb-c8449d6744d1", "created": "2026-10-09T15:13:08.967016Z", "modified": "2026-10-09T15:13:08.967016Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-api.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.967016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce5fe421-ffc9-4cd1-9454-da862f1c3a29", "created": "2026-10-09T15:13:08.967496Z", "modified": "2026-10-09T15:13:08.967496Z", "relationship_type": "indicates", "source_ref": "indicator--a9134cbc-8be0-4f59-b4cb-c8449d6744d1", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebee378-085d-409a-beb8-39f459b29110", "created": "2026-10-09T15:13:08.967615Z", "modified": "2026-10-09T15:13:08.967615Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.api.spyzie.wondershare.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.967615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34ef06fc-a00d-493b-b2c6-ce9f21316d78", "created": "2026-10-09T15:13:08.968122Z", "modified": "2026-10-09T15:13:08.968122Z", "relationship_type": "indicates", "source_ref": "indicator--8ebee378-085d-409a-beb8-39f459b29110", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37ff1e3-36ce-44c5-bf22-33d36dc5184b", "created": "2026-10-09T15:13:08.968238Z", "modified": "2026-10-09T15:13:08.968238Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='h.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.968238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--280fc581-c7f8-4060-bd5f-bf32525328e3", "created": "2026-10-09T15:13:08.968721Z", "modified": "2026-10-09T15:13:08.968721Z", "relationship_type": "indicates", "source_ref": "indicator--e37ff1e3-36ce-44c5-bf22-33d36dc5184b", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8705c756-53ca-465c-ac36-40e26a94ad15", "created": "2026-10-09T15:13:08.968839Z", "modified": "2026-10-09T15:13:08.968839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.fonemonitor.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.968839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf5affb1-7d72-438e-a78a-9f1a3e270923", "created": "2026-10-09T15:13:08.969319Z", "modified": "2026-10-09T15:13:08.969319Z", "relationship_type": "indicates", "source_ref": "indicator--8705c756-53ca-465c-ac36-40e26a94ad15", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33221b5-e82f-431c-bb41-0106dd9a0f31", "created": "2026-10-09T15:13:08.969438Z", "modified": "2026-10-09T15:13:08.969438Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.cocospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.969438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5b24487-36b2-4fd1-aba8-256b50cfdfe6", "created": "2026-10-09T15:13:08.970012Z", "modified": "2026-10-09T15:13:08.970012Z", "relationship_type": "indicates", "source_ref": "indicator--a33221b5-e82f-431c-bb41-0106dd9a0f31", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f88d2f0-1888-4af3-bdbc-1a50715e6346", "created": "2026-10-09T15:13:08.970138Z", "modified": "2026-10-09T15:13:08.970138Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.minspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.970138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42aeab5d-f70a-4987-831b-9d09e99b7074", "created": "2026-10-09T15:13:08.970616Z", "modified": "2026-10-09T15:13:08.970616Z", "relationship_type": "indicates", "source_ref": "indicator--0f88d2f0-1888-4af3-bdbc-1a50715e6346", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9666b6dd-3256-40dc-ba23-71864c5fc35c", "created": "2026-10-09T15:13:08.970741Z", "modified": "2026-10-09T15:13:08.970741Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.neatspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.970741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39b4b812-ba43-400d-93cb-e1625da28d58", "created": "2026-10-09T15:13:08.971206Z", "modified": "2026-10-09T15:13:08.971206Z", "relationship_type": "indicates", "source_ref": "indicator--9666b6dd-3256-40dc-ba23-71864c5fc35c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5cd87e-20b8-4358-93db-dae562dd3f82", "created": "2026-10-09T15:13:08.971335Z", "modified": "2026-10-09T15:13:08.971335Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.safespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.971335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca8211b2-46fa-4a26-bed4-53b796a8e904", "created": "2026-10-09T15:13:08.971803Z", "modified": "2026-10-09T15:13:08.971803Z", "relationship_type": "indicates", "source_ref": "indicator--9b5cd87e-20b8-4358-93db-dae562dd3f82", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059a5864-6db1-4725-9d45-7bcdfd1f0b3b", "created": "2026-10-09T15:13:08.97192Z", "modified": "2026-10-09T15:13:08.97192Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.97192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3aa4fcbb-56bf-4d75-8687-4e326dfe5aff", "created": "2026-10-09T15:13:08.972392Z", "modified": "2026-10-09T15:13:08.972392Z", "relationship_type": "indicates", "source_ref": "indicator--059a5864-6db1-4725-9d45-7bcdfd1f0b3b", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a417bc2-ed10-4ce3-840e-04388bc4d84a", "created": "2026-10-09T15:13:08.97251Z", "modified": "2026-10-09T15:13:08.97251Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyine.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.97251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d0f7856-f027-4603-90a5-df74afee1fe9", "created": "2026-10-09T15:13:08.972976Z", "modified": "2026-10-09T15:13:08.972976Z", "relationship_type": "indicates", "source_ref": "indicator--5a417bc2-ed10-4ce3-840e-04388bc4d84a", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287ae621-030f-49e2-ae53-b281823a678c", "created": "2026-10-09T15:13:08.973095Z", "modified": "2026-10-09T15:13:08.973095Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyzie.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.973095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bedb6b3-4d4c-4d43-8e1c-8e932dee2790", "created": "2026-10-09T15:13:08.973573Z", "modified": "2026-10-09T15:13:08.973573Z", "relationship_type": "indicates", "source_ref": "indicator--287ae621-030f-49e2-ae53-b281823a678c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f88707f-8d4f-4ac2-8701-9dc7b2d25f4c", "created": "2026-10-09T15:13:08.973693Z", "modified": "2026-10-09T15:13:08.973693Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.teensafe.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.973693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6902b7f-8795-4f36-acdc-1b75d375492f", "created": "2026-10-09T15:13:08.974165Z", "modified": "2026-10-09T15:13:08.974165Z", "relationship_type": "indicates", "source_ref": "indicator--6f88707f-8d4f-4ac2-8701-9dc7b2d25f4c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44021dc3-4ded-4dac-9f00-283f02b19079", "created": "2026-10-09T15:13:08.974298Z", "modified": "2026-10-09T15:13:08.974298Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mintrack.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.974298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80c007e1-095c-4d11-a009-be4b8e8565a5", "created": "2026-10-09T15:13:08.974765Z", "modified": "2026-10-09T15:13:08.974765Z", "relationship_type": "indicates", "source_ref": "indicator--44021dc3-4ded-4dac-9f00-283f02b19079", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbbfe77-455f-4bd8-ae53-1f99aeb2dd38", "created": "2026-10-09T15:13:08.974885Z", "modified": "2026-10-09T15:13:08.974885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.974885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b06e9d5-acac-47ba-9f87-fa12d0233213", "created": "2026-10-09T15:13:08.975452Z", "modified": "2026-10-09T15:13:08.975452Z", "relationship_type": "indicates", "source_ref": "indicator--0dbbfe77-455f-4bd8-ae53-1f99aeb2dd38", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb437a2-bc6b-4d79-bc21-50a0e6484735", "created": "2026-10-09T15:13:08.975574Z", "modified": "2026-10-09T15:13:08.975574Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neatspy.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.975574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b9f499e-42c1-4e5a-a20b-684f3ce1cdf8", "created": "2026-10-09T15:13:08.976035Z", "modified": "2026-10-09T15:13:08.976035Z", "relationship_type": "indicates", "source_ref": "indicator--4bb437a2-bc6b-4d79-bc21-50a0e6484735", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ff24da-dc87-4963-82b1-cba46ab8109e", "created": "2026-10-09T15:13:08.976154Z", "modified": "2026-10-09T15:13:08.976154Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonedata.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.976154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bec89eea-ea75-498e-8ba6-85602614229e", "created": "2026-10-09T15:13:08.976636Z", "modified": "2026-10-09T15:13:08.976636Z", "relationship_type": "indicates", "source_ref": "indicator--a8ff24da-dc87-4963-82b1-cba46ab8109e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e85538-b28d-4adf-b18a-78b89b475804", "created": "2026-10-09T15:13:08.976757Z", "modified": "2026-10-09T15:13:08.976757Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app-api.phonedata.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.976757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ad75ab8-cc1c-4c5f-9dfc-81bff4a120ce", "created": "2026-10-09T15:13:08.97723Z", "modified": "2026-10-09T15:13:08.97723Z", "relationship_type": "indicates", "source_ref": "indicator--a3e85538-b28d-4adf-b18a-78b89b475804", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba68e251-0d58-4c37-ae91-22c54a77195d", "created": "2026-10-09T15:13:08.97736Z", "modified": "2026-10-09T15:13:08.97736Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-api.phonedata.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.97736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6d09454-78af-4778-a8f0-4bdf2fde2814", "created": "2026-10-09T15:13:08.977846Z", "modified": "2026-10-09T15:13:08.977846Z", "relationship_type": "indicates", "source_ref": "indicator--ba68e251-0d58-4c37-ae91-22c54a77195d", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cd0572-7d85-4dc0-9dce-3593263cd9f5", "created": "2026-10-09T15:13:08.977967Z", "modified": "2026-10-09T15:13:08.977967Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie-a.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.977967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb4e3661-f2a5-4a7b-b0b9-5d7a9c97e6a7", "created": "2026-10-09T15:13:08.978463Z", "modified": "2026-10-09T15:13:08.978463Z", "relationship_type": "indicates", "source_ref": "indicator--47cd0572-7d85-4dc0-9dce-3593263cd9f5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72605a2a-b082-4c6a-9c87-e9ad342e0087", "created": "2026-10-09T15:13:08.978586Z", "modified": "2026-10-09T15:13:08.978586Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mg-spyzie.oss-us-west-1.aliyuncs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.978586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50566243-1312-4b10-b49b-05a22b8776b4", "created": "2026-10-09T15:13:08.979087Z", "modified": "2026-10-09T15:13:08.979087Z", "relationship_type": "indicates", "source_ref": "indicator--72605a2a-b082-4c6a-9c87-e9ad342e0087", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b869f3-7c44-4428-814d-1752876f9bd0", "created": "2026-10-09T15:13:08.979204Z", "modified": "2026-10-09T15:13:08.979204Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.979204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b184610-4d59-4955-85a5-3dbb990edc89", "created": "2026-10-09T15:13:08.979679Z", "modified": "2026-10-09T15:13:08.979679Z", "relationship_type": "indicates", "source_ref": "indicator--f2b869f3-7c44-4428-814d-1752876f9bd0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a26e1c-c11a-4753-82c3-a3e1f51b4947", "created": "2026-10-09T15:13:08.979797Z", "modified": "2026-10-09T15:13:08.979797Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safespy.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.979797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae249a0c-3843-494d-b2c1-520d4cd16983", "created": "2026-10-09T15:13:08.98026Z", "modified": "2026-10-09T15:13:08.98026Z", "relationship_type": "indicates", "source_ref": "indicator--e1a26e1c-c11a-4753-82c3-a3e1f51b4947", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c3d6f9-ece3-4096-b9a5-90772301b39e", "created": "2026-10-09T15:13:08.98039Z", "modified": "2026-10-09T15:13:08.98039Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sp.kuuvv.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.98039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06e1aad4-372c-447a-a23b-859537bc343d", "created": "2026-10-09T15:13:08.980957Z", "modified": "2026-10-09T15:13:08.980957Z", "relationship_type": "indicates", "source_ref": "indicator--d4c3d6f9-ece3-4096-b9a5-90772301b39e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41383160-286e-4b88-9ff6-6bfa0e5a01cc", "created": "2026-10-09T15:13:08.981077Z", "modified": "2026-10-09T15:13:08.981077Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kuuvv.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.981077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97929d94-a80d-4036-8216-145718219d0d", "created": "2026-10-09T15:13:08.981639Z", "modified": "2026-10-09T15:13:08.981639Z", "relationship_type": "indicates", "source_ref": "indicator--41383160-286e-4b88-9ff6-6bfa0e5a01cc", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34befda-3a67-4a98-8d90-53094c741b83", "created": "2026-10-09T15:13:08.981762Z", "modified": "2026-10-09T15:13:08.981762Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.981762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20ab8fb4-454a-4589-b0bd-dd12920e9133", "created": "2026-10-09T15:13:08.982218Z", "modified": "2026-10-09T15:13:08.982218Z", "relationship_type": "indicates", "source_ref": "indicator--c34befda-3a67-4a98-8d90-53094c741b83", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c534049-9815-4377-9ade-018e123adc1d", "created": "2026-10-09T15:13:08.982352Z", "modified": "2026-10-09T15:13:08.982352Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackier.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.982352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42e9beb8-7e3b-42c3-9f50-7440eba2d77e", "created": "2026-10-09T15:13:08.982812Z", "modified": "2026-10-09T15:13:08.982812Z", "relationship_type": "indicates", "source_ref": "indicator--4c534049-9815-4377-9ade-018e123adc1d", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0486b373-5b25-4b81-a507-60270b90e600", "created": "2026-10-09T15:13:08.982929Z", "modified": "2026-10-09T15:13:08.982929Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackine.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.982929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf71906a-f3c9-46b0-8370-aff9fa6d3d99", "created": "2026-10-09T15:13:08.983396Z", "modified": "2026-10-09T15:13:08.983396Z", "relationship_type": "indicates", "source_ref": "indicator--0486b373-5b25-4b81-a507-60270b90e600", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935f8d3a-5068-4eee-acf4-0c2e6c2bc2b8", "created": "2026-10-09T15:13:08.983514Z", "modified": "2026-10-09T15:13:08.983514Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackpro.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.983514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c60f1d75-e698-4792-806c-f145f9f3b846", "created": "2026-10-09T15:13:08.983975Z", "modified": "2026-10-09T15:13:08.983975Z", "relationship_type": "indicates", "source_ref": "indicator--935f8d3a-5068-4eee-acf4-0c2e6c2bc2b8", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a7d43e-b44f-43bd-ae15-8f0063d31d32", "created": "2026-10-09T15:13:08.984089Z", "modified": "2026-10-09T15:13:08.984089Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptrack.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.984089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b30b81ca-6efb-49a4-84ee-605844613976", "created": "2026-10-09T15:13:08.98456Z", "modified": "2026-10-09T15:13:08.98456Z", "relationship_type": "indicates", "source_ref": "indicator--87a7d43e-b44f-43bd-ae15-8f0063d31d32", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be45ebd6-1f17-490b-b9d1-bd34230505de", "created": "2026-10-09T15:13:08.984676Z", "modified": "2026-10-09T15:13:08.984676Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.984676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f997fefc-4be3-42b4-b26e-a51813675622", "created": "2026-10-09T15:13:08.985144Z", "modified": "2026-10-09T15:13:08.985144Z", "relationship_type": "indicates", "source_ref": "indicator--be45ebd6-1f17-490b-b9d1-bd34230505de", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cd519f-a1ed-4a0e-8b85-d47741877eed", "created": "2026-10-09T15:13:08.985279Z", "modified": "2026-10-09T15:13:08.985279Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='best-mobile-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.985279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23868131-8144-4037-8235-79ac8421d7fe", "created": "2026-10-09T15:13:08.98576Z", "modified": "2026-10-09T15:13:08.98576Z", "relationship_type": "indicates", "source_ref": "indicator--e2cd519f-a1ed-4a0e-8b85-d47741877eed", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d383f9c3-0da1-4a4c-8897-6da27c27bbb3", "created": "2026-10-09T15:13:08.985882Z", "modified": "2026-10-09T15:13:08.985882Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cocospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.985882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff58947f-e0d2-485c-bc88-138a5c67b4b4", "created": "2026-10-09T15:13:08.98645Z", "modified": "2026-10-09T15:13:08.98645Z", "relationship_type": "indicates", "source_ref": "indicator--d383f9c3-0da1-4a4c-8897-6da27c27bbb3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad20866-7366-4907-9127-a69e3c6f39e2", "created": "2026-10-09T15:13:08.986576Z", "modified": "2026-10-09T15:13:08.986576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cocospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.986576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24f39551-aa90-4dd5-b461-f651514481e9", "created": "2026-10-09T15:13:08.987041Z", "modified": "2026-10-09T15:13:08.987041Z", "relationship_type": "indicates", "source_ref": "indicator--1ad20866-7366-4907-9127-a69e3c6f39e2", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d801d9-d925-4e4f-9a60-a54b96e58ff5", "created": "2026-10-09T15:13:08.987158Z", "modified": "2026-10-09T15:13:08.987158Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fonemonitor.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.987158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a06e754f-270f-432f-adeb-3a97ef3125c7", "created": "2026-10-09T15:13:08.987634Z", "modified": "2026-10-09T15:13:08.987634Z", "relationship_type": "indicates", "source_ref": "indicator--e6d801d9-d925-4e4f-9a60-a54b96e58ff5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdae3401-dfbd-4119-a6bd-5b56920706e5", "created": "2026-10-09T15:13:08.987755Z", "modified": "2026-10-09T15:13:08.987755Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='minspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.987755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c1b9ee2-c7dd-4dde-b1c9-615065e8241d", "created": "2026-10-09T15:13:08.988218Z", "modified": "2026-10-09T15:13:08.988218Z", "relationship_type": "indicates", "source_ref": "indicator--fdae3401-dfbd-4119-a6bd-5b56920706e5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a41510-43f0-4d7a-8c05-ce341414fd84", "created": "2026-10-09T15:13:08.98835Z", "modified": "2026-10-09T15:13:08.98835Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neatspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.98835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86b0aed3-434f-4d6a-9cc4-d4c205a6882a", "created": "2026-10-09T15:13:08.988817Z", "modified": "2026-10-09T15:13:08.988817Z", "relationship_type": "indicates", "source_ref": "indicator--01a41510-43f0-4d7a-8c05-ce341414fd84", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b882cb5-6d6b-45d4-8c3a-27f5d91d8235", "created": "2026-10-09T15:13:08.988937Z", "modified": "2026-10-09T15:13:08.988937Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.988937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b87fb6a-c91f-46b2-83a4-aca6081d5d6a", "created": "2026-10-09T15:13:08.989412Z", "modified": "2026-10-09T15:13:08.989412Z", "relationship_type": "indicates", "source_ref": "indicator--0b882cb5-6d6b-45d4-8c3a-27f5d91d8235", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953160dc-144d-40b7-9635-2b8fd21b8861", "created": "2026-10-09T15:13:08.989536Z", "modified": "2026-10-09T15:13:08.989536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyic.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.989536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd2c2632-2962-4005-9ace-d0d73e632f60", "created": "2026-10-09T15:13:08.990004Z", "modified": "2026-10-09T15:13:08.990004Z", "relationship_type": "indicates", "source_ref": "indicator--953160dc-144d-40b7-9635-2b8fd21b8861", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dbd945-b7ca-409b-958f-2dd26f62dd86", "created": "2026-10-09T15:13:08.990122Z", "modified": "2026-10-09T15:13:08.990122Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.990122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26e3c17c-ec8f-4a67-8282-1674e69dc71f", "created": "2026-10-09T15:13:08.990591Z", "modified": "2026-10-09T15:13:08.990591Z", "relationship_type": "indicates", "source_ref": "indicator--68dbd945-b7ca-409b-958f-2dd26f62dd86", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c080ab5d-e937-470e-8f9e-a006e863824b", "created": "2026-10-09T15:13:08.990714Z", "modified": "2026-10-09T15:13:08.990714Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyier.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.990714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10d34a8e-3e5e-4b53-bc54-7d07b29c5264", "created": "2026-10-09T15:13:08.991178Z", "modified": "2026-10-09T15:13:08.991178Z", "relationship_type": "indicates", "source_ref": "indicator--c080ab5d-e937-470e-8f9e-a006e863824b", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8633e882-14d9-4a9e-bcaa-ccb470d572eb", "created": "2026-10-09T15:13:08.991309Z", "modified": "2026-10-09T15:13:08.991309Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyine.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.991309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa7e16ee-2cab-44f3-a8a9-6b5ef1a0f5e3", "created": "2026-10-09T15:13:08.991872Z", "modified": "2026-10-09T15:13:08.991872Z", "relationship_type": "indicates", "source_ref": "indicator--8633e882-14d9-4a9e-bcaa-ccb470d572eb", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63893143-15f2-4f9f-b183-1a861d15934d", "created": "2026-10-09T15:13:08.991996Z", "modified": "2026-10-09T15:13:08.991996Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyine.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.991996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcc4766e-33dd-4b38-8259-8c907002283d", "created": "2026-10-09T15:13:08.992471Z", "modified": "2026-10-09T15:13:08.992471Z", "relationship_type": "indicates", "source_ref": "indicator--63893143-15f2-4f9f-b183-1a861d15934d", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4625508c-f9da-4053-b9ef-03b50999c7c9", "created": "2026-10-09T15:13:08.992594Z", "modified": "2026-10-09T15:13:08.992594Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.992594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2db66a6-83ec-40d4-8cfb-1142ef985818", "created": "2026-10-09T15:13:08.993055Z", "modified": "2026-10-09T15:13:08.993055Z", "relationship_type": "indicates", "source_ref": "indicator--4625508c-f9da-4053-b9ef-03b50999c7c9", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe872670-e68d-4011-bc51-f9a7500187bf", "created": "2026-10-09T15:13:08.993172Z", "modified": "2026-10-09T15:13:08.993172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.993172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fae2d75-62da-40ba-a357-dd888c76ccb7", "created": "2026-10-09T15:13:08.993641Z", "modified": "2026-10-09T15:13:08.993641Z", "relationship_type": "indicates", "source_ref": "indicator--fe872670-e68d-4011-bc51-f9a7500187bf", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027bf10d-e209-4a4e-82ca-12873772ab64", "created": "2026-10-09T15:13:08.993766Z", "modified": "2026-10-09T15:13:08.993766Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.993766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85e14ba8-1ad7-4915-baa0-57c347161b3f", "created": "2026-10-09T15:13:08.994316Z", "modified": "2026-10-09T15:13:08.994316Z", "relationship_type": "indicates", "source_ref": "indicator--027bf10d-e209-4a4e-82ca-12873772ab64", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc99abf8-d5d7-442f-9777-df0a43d536b0", "created": "2026-10-09T15:13:08.994449Z", "modified": "2026-10-09T15:13:08.994449Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teensafe.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.994449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99ad786d-620e-484a-9ef1-6f888f5a754d", "created": "2026-10-09T15:13:08.994926Z", "modified": "2026-10-09T15:13:08.994926Z", "relationship_type": "indicates", "source_ref": "indicator--fc99abf8-d5d7-442f-9777-df0a43d536b0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd05cd05-2396-405c-8605-b3b2fb075e27", "created": "2026-10-09T15:13:08.99505Z", "modified": "2026-10-09T15:13:08.99505Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teensoftware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.99505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df0eaa4f-c837-47dc-bd50-b14f9c23d61c", "created": "2026-10-09T15:13:08.995526Z", "modified": "2026-10-09T15:13:08.995526Z", "relationship_type": "indicates", "source_ref": "indicator--fd05cd05-2396-405c-8605-b3b2fb075e27", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c577f9-4103-4c17-9159-8e05ae78b975", "created": "2026-10-09T15:13:08.995645Z", "modified": "2026-10-09T15:13:08.995645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.fonemonitor.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.995645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4116a60a-c5ff-459a-a3f9-dfa013423de1", "created": "2026-10-09T15:13:08.996113Z", "modified": "2026-10-09T15:13:08.996113Z", "relationship_type": "indicates", "source_ref": "indicator--b6c577f9-4103-4c17-9159-8e05ae78b975", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe94715-5402-4a40-bb11-8b6e5ccee6d3", "created": "2026-10-09T15:13:08.996229Z", "modified": "2026-10-09T15:13:08.996229Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.minspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.996229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d65ef144-c9ad-4f27-834d-8a4ceb8377d1", "created": "2026-10-09T15:13:08.99672Z", "modified": "2026-10-09T15:13:08.99672Z", "relationship_type": "indicates", "source_ref": "indicator--2fe94715-5402-4a40-bb11-8b6e5ccee6d3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572cd8c2-80f5-4ed4-bd8e-c17c396a1151", "created": "2026-10-09T15:13:08.996844Z", "modified": "2026-10-09T15:13:08.996844Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.996844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee315474-0a31-4717-a114-7b4376cdb20f", "created": "2026-10-09T15:13:08.997477Z", "modified": "2026-10-09T15:13:08.997477Z", "relationship_type": "indicates", "source_ref": "indicator--572cd8c2-80f5-4ed4-bd8e-c17c396a1151", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993e8f29-97bd-419b-b5f0-b7da989406f0", "created": "2026-10-09T15:13:08.997612Z", "modified": "2026-10-09T15:13:08.997612Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.997612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a1eb2f7-9b13-42c6-988c-5852090a50fd", "created": "2026-10-09T15:13:08.998098Z", "modified": "2026-10-09T15:13:08.998098Z", "relationship_type": "indicates", "source_ref": "indicator--993e8f29-97bd-419b-b5f0-b7da989406f0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96a708d-d712-47a8-8432-b65d0f26ccf8", "created": "2026-10-09T15:13:08.998222Z", "modified": "2026-10-09T15:13:08.998222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.teensafe.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.998222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d9ba512-3cec-4aa5-b57e-41f57a63e669", "created": "2026-10-09T15:13:08.998706Z", "modified": "2026-10-09T15:13:08.998706Z", "relationship_type": "indicates", "source_ref": "indicator--c96a708d-d712-47a8-8432-b65d0f26ccf8", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be1663b-b1ff-4aa8-8529-8c525f0201a3", "created": "2026-10-09T15:13:08.998826Z", "modified": "2026-10-09T15:13:08.998826Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.teensoftware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.998826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8fb1351-a01d-4c10-a0b7-0487bc9b0718", "created": "2026-10-09T15:13:08.999307Z", "modified": "2026-10-09T15:13:08.999307Z", "relationship_type": "indicates", "source_ref": "indicator--3be1663b-b1ff-4aa8-8529-8c525f0201a3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8169f79-b417-4ec1-a04e-486b2a7df202", "created": "2026-10-09T15:13:08.99943Z", "modified": "2026-10-09T15:13:08.99943Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teensafe.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:08.99943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64faaf78-abb3-4706-b441-70062cc0eae0", "created": "2026-10-09T15:13:08.999901Z", "modified": "2026-10-09T15:13:08.999901Z", "relationship_type": "indicates", "source_ref": "indicator--a8169f79-b417-4ec1-a04e-486b2a7df202", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e919b0-d958-4f5a-ad1d-681028112ba0", "created": "2026-10-09T15:13:09.000023Z", "modified": "2026-10-09T15:13:09.000023Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='557aed501642b5f3a19a4a63dea96eedf806930be02a0aef3fa304dd57d8c1ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.000023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa9cd4df-fa61-4437-8c00-74375749f60c", "created": "2026-10-09T15:13:09.000628Z", "modified": "2026-10-09T15:13:09.000628Z", "relationship_type": "indicates", "source_ref": "indicator--27e919b0-d958-4f5a-ad1d-681028112ba0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d5febb-03c1-49b3-b186-f3db64b1b0cb", "created": "2026-10-09T15:13:09.000751Z", "modified": "2026-10-09T15:13:09.000751Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e178303fc38f0cb0cd876df6ea52ed524567e55fa74043bc8bfa48fd25ce676']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.000751Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96959ca2-68d8-4626-9fcf-6e2632a1906c", "created": "2026-10-09T15:13:09.001347Z", "modified": "2026-10-09T15:13:09.001347Z", "relationship_type": "indicates", "source_ref": "indicator--d7d5febb-03c1-49b3-b186-f3db64b1b0cb", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc13f6b2-5a21-483f-b76e-67d045f11006", "created": "2026-10-09T15:13:09.00147Z", "modified": "2026-10-09T15:13:09.00147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bb1d81cb33d3bdfd40b77a63b98987b98aefb74b8c866e2f51d4a129bbcd27e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.00147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8056209-3be0-4638-b0ea-c8eff0c1c5fb", "created": "2026-10-09T15:13:09.002057Z", "modified": "2026-10-09T15:13:09.002057Z", "relationship_type": "indicates", "source_ref": "indicator--dc13f6b2-5a21-483f-b76e-67d045f11006", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73f798d-2163-4178-b053-f0f454df59bf", "created": "2026-10-09T15:13:09.002183Z", "modified": "2026-10-09T15:13:09.002183Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4de6da48ac3d70e725c8aaaa60bd88c69a761e645602d26316c5f1f714bfa7a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.002183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf67532f-80f6-46eb-847e-379710b92732", "created": "2026-10-09T15:13:09.002787Z", "modified": "2026-10-09T15:13:09.002787Z", "relationship_type": "indicates", "source_ref": "indicator--b73f798d-2163-4178-b053-f0f454df59bf", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f710de29-c8eb-4e8c-b0ca-66d03f45c5d5", "created": "2026-10-09T15:13:09.002908Z", "modified": "2026-10-09T15:13:09.002908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0968c53c9c1b62e20b99aa2de3a1f4d971f6f49630f0727f635e4551f0e8e313']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.002908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35f17240-3dd8-448c-a471-fd8d8fc032b8", "created": "2026-10-09T15:13:09.003612Z", "modified": "2026-10-09T15:13:09.003612Z", "relationship_type": "indicates", "source_ref": "indicator--f710de29-c8eb-4e8c-b0ca-66d03f45c5d5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd60568-f71c-4279-a59b-68d79c8ff134", "created": "2026-10-09T15:13:09.003737Z", "modified": "2026-10-09T15:13:09.003737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aae4aa1dcf5d62eb31e8435e8f307d9310cbfc2b6410e59ae433c5782e9f86a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.003737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4323408e-36fe-4815-b52d-8561fe959d43", "created": "2026-10-09T15:13:09.004357Z", "modified": "2026-10-09T15:13:09.004357Z", "relationship_type": "indicates", "source_ref": "indicator--9dd60568-f71c-4279-a59b-68d79c8ff134", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d6c80d-157b-4f99-a83c-dea8ef5af269", "created": "2026-10-09T15:13:09.004488Z", "modified": "2026-10-09T15:13:09.004488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='838b9875bd4e9e3000674e1a67844b9d7d2038337f638c4db0c22916a49ab49e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.004488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5a4cd77-bd5c-443a-91bc-80b853082bc4", "created": "2026-10-09T15:13:09.005085Z", "modified": "2026-10-09T15:13:09.005085Z", "relationship_type": "indicates", "source_ref": "indicator--74d6c80d-157b-4f99-a83c-dea8ef5af269", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2125690-839f-4de7-9020-ca3dbe521304", "created": "2026-10-09T15:13:09.005206Z", "modified": "2026-10-09T15:13:09.005206Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fa29aa23e741e1774820634b9a10d9cd6bc2ea383967b9c2ef4ecb799699f79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.005206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35974f4a-abbb-4f95-8623-17c7ac5ad00c", "created": "2026-10-09T15:13:09.005803Z", "modified": "2026-10-09T15:13:09.005803Z", "relationship_type": "indicates", "source_ref": "indicator--d2125690-839f-4de7-9020-ca3dbe521304", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a15911-2b2e-4705-ad98-2a6568a8dee3", "created": "2026-10-09T15:13:09.005927Z", "modified": "2026-10-09T15:13:09.005927Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f2b87ad63011a214462c2057d0df46d828f16282508e35bc69a5341c1eccdb6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.005927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e8f2c35-a595-4777-a69e-317983feeca2", "created": "2026-10-09T15:13:09.006529Z", "modified": "2026-10-09T15:13:09.006529Z", "relationship_type": "indicates", "source_ref": "indicator--e1a15911-2b2e-4705-ad98-2a6568a8dee3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160c0f5a-abda-4961-9447-0d2bff94665b", "created": "2026-10-09T15:13:09.006652Z", "modified": "2026-10-09T15:13:09.006652Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='159e6a085f5ed4659b21a8b7e545decd97879981302fc874b3919a0e8ba42ff4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.006652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94595223-b23f-4cd8-a186-5eadacd05074", "created": "2026-10-09T15:13:09.007235Z", "modified": "2026-10-09T15:13:09.007235Z", "relationship_type": "indicates", "source_ref": "indicator--160c0f5a-abda-4961-9447-0d2bff94665b", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b004b6-e6e3-42e6-aae6-05266a5b45de", "created": "2026-10-09T15:13:09.007375Z", "modified": "2026-10-09T15:13:09.007375Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='008c67b7156648f4ef43a24d9cccfc6a47b89216ab266fa23e4384bc424b94fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.007375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1d76472-77e8-44d8-9bad-dccebb9f588e", "created": "2026-10-09T15:13:09.007964Z", "modified": "2026-10-09T15:13:09.007964Z", "relationship_type": "indicates", "source_ref": "indicator--a3b004b6-e6e3-42e6-aae6-05266a5b45de", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d334276-2fa4-4ea7-9720-289f4de3f0d0", "created": "2026-10-09T15:13:09.008082Z", "modified": "2026-10-09T15:13:09.008082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d7740906a42489a080eef75ae793b9f838cef58b9bd55ba6094359e8eda68697']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.008082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--781649bb-c2c2-45c2-96d8-e6d91877c22c", "created": "2026-10-09T15:13:09.00868Z", "modified": "2026-10-09T15:13:09.00868Z", "relationship_type": "indicates", "source_ref": "indicator--7d334276-2fa4-4ea7-9720-289f4de3f0d0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531a046a-b377-4a26-bcfd-3c393ba18344", "created": "2026-10-09T15:13:09.008803Z", "modified": "2026-10-09T15:13:09.008803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d41d89ef814b64729856fd42e75927bd25921353dad4f3df5839552b1c58b6f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.008803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4ee1809-58a4-4119-b441-1b0f42a6c8f5", "created": "2026-10-09T15:13:09.009402Z", "modified": "2026-10-09T15:13:09.009402Z", "relationship_type": "indicates", "source_ref": "indicator--531a046a-b377-4a26-bcfd-3c393ba18344", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343e9c2e-af7b-41c4-9cf2-0a0e80112ac6", "created": "2026-10-09T15:13:09.009522Z", "modified": "2026-10-09T15:13:09.009522Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27b925ca2e6f01815a66b01f63c7ac17175e9df205d7655336bd3eb7e89cfa10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.009522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8e89e84-e39b-4fc0-acad-e40d5006ef34", "created": "2026-10-09T15:13:09.01023Z", "modified": "2026-10-09T15:13:09.01023Z", "relationship_type": "indicates", "source_ref": "indicator--343e9c2e-af7b-41c4-9cf2-0a0e80112ac6", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48738a72-7e3a-4b6d-82cd-ec262ec4d3ee", "created": "2026-10-09T15:13:09.010368Z", "modified": "2026-10-09T15:13:09.010368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9f55944213d777b829b2f1bd2c60052f3f4b60166e9f4e2af00921131483109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.010368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ab50d8d-c124-43e8-9607-2d9f17710640", "created": "2026-10-09T15:13:09.010956Z", "modified": "2026-10-09T15:13:09.010956Z", "relationship_type": "indicates", "source_ref": "indicator--48738a72-7e3a-4b6d-82cd-ec262ec4d3ee", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a7eae2-6924-418d-9191-6b66cbd1a5e0", "created": "2026-10-09T15:13:09.011075Z", "modified": "2026-10-09T15:13:09.011075Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7ee8dfac77959bfc2a92ea4fdc1385b23c3619af731dc8b4fbb8eccbcfdf7fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.011075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d6ce4a-8db6-4d56-942b-0b7455b8d1d5", "created": "2026-10-09T15:13:09.011668Z", "modified": "2026-10-09T15:13:09.011668Z", "relationship_type": "indicates", "source_ref": "indicator--44a7eae2-6924-418d-9191-6b66cbd1a5e0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527b7273-028e-48d4-9ce9-3854c5b5b3db", "created": "2026-10-09T15:13:09.011795Z", "modified": "2026-10-09T15:13:09.011795Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6809eabd0d264aa223aaf5775fc477237cca3e537b7348757303ca8fccbcda6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.011795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf66c006-cd80-4beb-94cd-f7c563adfef9", "created": "2026-10-09T15:13:09.012396Z", "modified": "2026-10-09T15:13:09.012396Z", "relationship_type": "indicates", "source_ref": "indicator--527b7273-028e-48d4-9ce9-3854c5b5b3db", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db574319-c009-4714-adc9-33e602d6f71a", "created": "2026-10-09T15:13:09.012519Z", "modified": "2026-10-09T15:13:09.012519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6414d67b5b5390e026d309908c9660ed59a044a8352c4bd6056dc5ee0ef6c420']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.012519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b4023d2-7936-45eb-9239-6e830a0e21ca", "created": "2026-10-09T15:13:09.013096Z", "modified": "2026-10-09T15:13:09.013096Z", "relationship_type": "indicates", "source_ref": "indicator--db574319-c009-4714-adc9-33e602d6f71a", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83da7f82-622f-4f75-ae60-3c11eefe3e8a", "created": "2026-10-09T15:13:09.013213Z", "modified": "2026-10-09T15:13:09.013213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f3551e3c55f89add1c12384f7e434caa7610b34c4a0207f2efcbd86ea14eaf4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.013213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c3c2a84-ef2c-4548-8881-02b50e9f0d3d", "created": "2026-10-09T15:13:09.013804Z", "modified": "2026-10-09T15:13:09.013804Z", "relationship_type": "indicates", "source_ref": "indicator--83da7f82-622f-4f75-ae60-3c11eefe3e8a", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd0fdd6-4c2a-43d5-8416-b4e6dd2de792", "created": "2026-10-09T15:13:09.013925Z", "modified": "2026-10-09T15:13:09.013925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77974461c24e1b4256f786b5178cfb96d282ada253275d64d81a18d84cfcb1f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.013925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe99b5bd-d4e5-41e0-879f-45e38fe86bec", "created": "2026-10-09T15:13:09.014518Z", "modified": "2026-10-09T15:13:09.014518Z", "relationship_type": "indicates", "source_ref": "indicator--6fd0fdd6-4c2a-43d5-8416-b4e6dd2de792", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60e97ca-18e0-4a89-a160-108324549e43", "created": "2026-10-09T15:13:09.014643Z", "modified": "2026-10-09T15:13:09.014643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bd1b652ec1ce452b79245898150cc258c44f175011c7051a21047fbee2e3fd5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.014643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f0deaab-cd56-4709-948c-3d6227988f82", "created": "2026-10-09T15:13:09.015228Z", "modified": "2026-10-09T15:13:09.015228Z", "relationship_type": "indicates", "source_ref": "indicator--e60e97ca-18e0-4a89-a160-108324549e43", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab190630-c977-4886-8dac-31c035a6027c", "created": "2026-10-09T15:13:09.01536Z", "modified": "2026-10-09T15:13:09.01536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cd110c2311deac8ef7ad60e062786b033c08b7911e9fc4ea88de07f21b9d8ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.01536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e630864-caca-46ab-b485-e1e362498d88", "created": "2026-10-09T15:13:09.015948Z", "modified": "2026-10-09T15:13:09.015948Z", "relationship_type": "indicates", "source_ref": "indicator--ab190630-c977-4886-8dac-31c035a6027c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395f87c9-0be3-4d54-b8cf-d8968379c30c", "created": "2026-10-09T15:13:09.016069Z", "modified": "2026-10-09T15:13:09.016069Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fd8e2317a8e92953009bbd1dd1386d5ab2bfcfa977ce14633b671b32c490893']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.016069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--235fe0f7-229c-427e-9b2c-fea815c1fd43", "created": "2026-10-09T15:13:09.016764Z", "modified": "2026-10-09T15:13:09.016764Z", "relationship_type": "indicates", "source_ref": "indicator--395f87c9-0be3-4d54-b8cf-d8968379c30c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c573dc-a44d-4777-94a7-162148917df5", "created": "2026-10-09T15:13:09.016888Z", "modified": "2026-10-09T15:13:09.016888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='176cd54005aeb64d2415685c0f97bdad0292e9ae2f307bb6908c2927d5edd3a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.016888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc0fe2be-c7f8-4307-b9b6-523a34154d28", "created": "2026-10-09T15:13:09.017485Z", "modified": "2026-10-09T15:13:09.017485Z", "relationship_type": "indicates", "source_ref": "indicator--51c573dc-a44d-4777-94a7-162148917df5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2587692-6b74-4118-a45a-9ac1c9cd0d11", "created": "2026-10-09T15:13:09.017609Z", "modified": "2026-10-09T15:13:09.017609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc363b9033dc72646064095dd55926f8f86108c04410ba0ad2fe08cc729153b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.017609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b0fc6dd-b9c7-4bbc-8ab8-e7f57b36bd90", "created": "2026-10-09T15:13:09.018194Z", "modified": "2026-10-09T15:13:09.018194Z", "relationship_type": "indicates", "source_ref": "indicator--f2587692-6b74-4118-a45a-9ac1c9cd0d11", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e580ee-87f2-437d-9780-6c141c7f6b10", "created": "2026-10-09T15:13:09.018327Z", "modified": "2026-10-09T15:13:09.018327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87113158aaef934387e4aa58f4fd9fdc9cfe40fa56be8ff38ad5a4786b41f61e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.018327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e35141cf-88b2-427b-971a-f0451202a851", "created": "2026-10-09T15:13:09.018908Z", "modified": "2026-10-09T15:13:09.018908Z", "relationship_type": "indicates", "source_ref": "indicator--40e580ee-87f2-437d-9780-6c141c7f6b10", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe00359-e61b-4c5f-b868-c620d99328ca", "created": "2026-10-09T15:13:09.019027Z", "modified": "2026-10-09T15:13:09.019027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7092fce338cf4aa2d16d3f1e8a5d619da15f2be4702b53c71797ffca82afda70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.019027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad66612d-fd43-4877-9d03-f306394bb546", "created": "2026-10-09T15:13:09.019621Z", "modified": "2026-10-09T15:13:09.019621Z", "relationship_type": "indicates", "source_ref": "indicator--2fe00359-e61b-4c5f-b868-c620d99328ca", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34cb31b-8b1b-4911-b05e-c497f10c7eea", "created": "2026-10-09T15:13:09.019749Z", "modified": "2026-10-09T15:13:09.019749Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3ae6c9b88be100b82a681f3ec91caec88f76b8cf0bc61762f149e680900ffa3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.019749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0389bb5-064e-4fa9-9cbf-841214e5ffce", "created": "2026-10-09T15:13:09.020343Z", "modified": "2026-10-09T15:13:09.020343Z", "relationship_type": "indicates", "source_ref": "indicator--b34cb31b-8b1b-4911-b05e-c497f10c7eea", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366c5b22-5a34-4213-b8a4-7ae73c1ac214", "created": "2026-10-09T15:13:09.020461Z", "modified": "2026-10-09T15:13:09.020461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acb90adf1ab4889eff77d3346a74a51b23794827f7c2d2ebda025de77b8d7433']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.020461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b193de6-7212-4246-b42c-daf29989f16d", "created": "2026-10-09T15:13:09.021047Z", "modified": "2026-10-09T15:13:09.021047Z", "relationship_type": "indicates", "source_ref": "indicator--366c5b22-5a34-4213-b8a4-7ae73c1ac214", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe7e083-b17e-430e-bd84-336ddac51a33", "created": "2026-10-09T15:13:09.021163Z", "modified": "2026-10-09T15:13:09.021163Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='408799aa71be8ab451b675b15509689ca77895888cfc0b39956437359350f84a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.021163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a72f0f4c-0192-48f6-a269-913250c0d7c1", "created": "2026-10-09T15:13:09.021752Z", "modified": "2026-10-09T15:13:09.021752Z", "relationship_type": "indicates", "source_ref": "indicator--efe7e083-b17e-430e-bd84-336ddac51a33", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f055afc2-bfa2-4990-8ca2-1a2b29726ea1", "created": "2026-10-09T15:13:09.021874Z", "modified": "2026-10-09T15:13:09.021874Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bce7153e517f6c18a3140f425fb3134b0ddea711cddf3724fe2a026eb3fc277']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.021874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72e56a58-5119-49f0-9efd-e37072aaa48b", "created": "2026-10-09T15:13:09.022844Z", "modified": "2026-10-09T15:13:09.022844Z", "relationship_type": "indicates", "source_ref": "indicator--f055afc2-bfa2-4990-8ca2-1a2b29726ea1", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edc6ad3-2c95-4c04-809a-7a4161cb6958", "created": "2026-10-09T15:13:09.022972Z", "modified": "2026-10-09T15:13:09.022972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f0a99fb4fb4ad917d59d6bf6551ba5f359b0f038879bbbb3ed34060a8d18339']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.022972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb5469ef-fda4-4203-9e17-8b6e7f0afa7e", "created": "2026-10-09T15:13:09.023574Z", "modified": "2026-10-09T15:13:09.023574Z", "relationship_type": "indicates", "source_ref": "indicator--4edc6ad3-2c95-4c04-809a-7a4161cb6958", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9712c629-dbc0-4f84-bd2f-4992e43b65c9", "created": "2026-10-09T15:13:09.023697Z", "modified": "2026-10-09T15:13:09.023697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6a6539c8c0dbfdfe609ccc73029d134719c655b75bd0e6ade8a366897634067']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.023697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0786e19c-aa32-4198-bed0-42646a22ceca", "created": "2026-10-09T15:13:09.024295Z", "modified": "2026-10-09T15:13:09.024295Z", "relationship_type": "indicates", "source_ref": "indicator--9712c629-dbc0-4f84-bd2f-4992e43b65c9", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9491cf85-7b14-4595-82cf-d52860425d75", "created": "2026-10-09T15:13:09.024419Z", "modified": "2026-10-09T15:13:09.024419Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67e54def3d50d32cf133dd9ef388f4f659725532997c868d1a109d8eabb22215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.024419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9355a90-15b7-41c1-b80a-c89fbc7e388b", "created": "2026-10-09T15:13:09.025005Z", "modified": "2026-10-09T15:13:09.025005Z", "relationship_type": "indicates", "source_ref": "indicator--9491cf85-7b14-4595-82cf-d52860425d75", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b98ba92-3b2d-41e4-a6b4-f904dd11fbb4", "created": "2026-10-09T15:13:09.025125Z", "modified": "2026-10-09T15:13:09.025125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42efcf7403a8e26537cf825f9f642055f8db423c211ec045b532c55c12f03a4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.025125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--455c3c77-1214-4a77-afee-8ffce3352d29", "created": "2026-10-09T15:13:09.025715Z", "modified": "2026-10-09T15:13:09.025715Z", "relationship_type": "indicates", "source_ref": "indicator--8b98ba92-3b2d-41e4-a6b4-f904dd11fbb4", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5feddbb0-7077-442d-9eca-1ffeee453b3a", "created": "2026-10-09T15:13:09.025836Z", "modified": "2026-10-09T15:13:09.025836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d3508316b60a1ad87f666a22acd2fbf3e113c6b9afe2574a3d69bef092c8e90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.025836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26d3e0e3-827a-4cd9-896d-506e8aa3c5e7", "created": "2026-10-09T15:13:09.026424Z", "modified": "2026-10-09T15:13:09.026424Z", "relationship_type": "indicates", "source_ref": "indicator--5feddbb0-7077-442d-9eca-1ffeee453b3a", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff019fe-8e47-4290-bace-54871f052429", "created": "2026-10-09T15:13:09.026546Z", "modified": "2026-10-09T15:13:09.026546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1271c5fed302d2dab3a74bcda70d8bcb4566b8c92639c08229f009103e0d3984']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.026546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba3193d6-282a-4704-864c-1f4dd82b06e5", "created": "2026-10-09T15:13:09.027126Z", "modified": "2026-10-09T15:13:09.027126Z", "relationship_type": "indicates", "source_ref": "indicator--cff019fe-8e47-4290-bace-54871f052429", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ba49b6-570c-4091-91e9-512ddf1fac0e", "created": "2026-10-09T15:13:09.027245Z", "modified": "2026-10-09T15:13:09.027245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce271fe1f0987bb6e646593fb08f36edf915ed0f11960473f6cb95aba9e8d1f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.027245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fb7f4da-22e1-44bf-91f0-b9b4a72c364d", "created": "2026-10-09T15:13:09.027838Z", "modified": "2026-10-09T15:13:09.027838Z", "relationship_type": "indicates", "source_ref": "indicator--e1ba49b6-570c-4091-91e9-512ddf1fac0e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c97b77-690c-4cab-b283-2e565c283a03", "created": "2026-10-09T15:13:09.027957Z", "modified": "2026-10-09T15:13:09.027957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='385b1dabc4438c2bae87d355cfe333f09cd5c6215f9c90dd1827c459657a37f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.027957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10f6e4db-3781-4bcc-b9a7-9ed643417f0c", "created": "2026-10-09T15:13:09.028545Z", "modified": "2026-10-09T15:13:09.028545Z", "relationship_type": "indicates", "source_ref": "indicator--83c97b77-690c-4cab-b283-2e565c283a03", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6c81f3-5b1a-4ba1-b2b5-4fe4cfe8b829", "created": "2026-10-09T15:13:09.028675Z", "modified": "2026-10-09T15:13:09.028675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45369166e1d856a1263e9e691989e6bee43c8f750bb7a2b74a15fbba28aa0351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.028675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a465796d-df3b-4235-86cc-0fd9ca272989", "created": "2026-10-09T15:13:09.029371Z", "modified": "2026-10-09T15:13:09.029371Z", "relationship_type": "indicates", "source_ref": "indicator--5c6c81f3-5b1a-4ba1-b2b5-4fe4cfe8b829", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51f9d04-e706-4c4d-98ba-ba309b46da09", "created": "2026-10-09T15:13:09.029496Z", "modified": "2026-10-09T15:13:09.029496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f7e06c6e23e1e8ca668cdc9a718e6448be54c2cb177b152fbfe535cdfdad263']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.029496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed3dc92f-ac45-4bb6-b07e-c75095ce199f", "created": "2026-10-09T15:13:09.030088Z", "modified": "2026-10-09T15:13:09.030088Z", "relationship_type": "indicates", "source_ref": "indicator--d51f9d04-e706-4c4d-98ba-ba309b46da09", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f124040-c46f-44e2-8838-c1f71109884a", "created": "2026-10-09T15:13:09.03021Z", "modified": "2026-10-09T15:13:09.03021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c7df1452ad261a0ca16320285169970d93cc3ff99aceaba4c57fff1a7e3153e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.03021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--788e68a8-9f36-4dd1-8754-666b9f4094ab", "created": "2026-10-09T15:13:09.0308Z", "modified": "2026-10-09T15:13:09.0308Z", "relationship_type": "indicates", "source_ref": "indicator--4f124040-c46f-44e2-8838-c1f71109884a", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7042cd83-56e9-4918-be51-dab3ef5c8b6c", "created": "2026-10-09T15:13:09.030926Z", "modified": "2026-10-09T15:13:09.030926Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29130a7cd58c757128aed9dcca6741206a710f99d865917c0301c5e2736e9814']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.030926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bf4841f-90ff-41e4-9195-f1295eabe0e1", "created": "2026-10-09T15:13:09.031529Z", "modified": "2026-10-09T15:13:09.031529Z", "relationship_type": "indicates", "source_ref": "indicator--7042cd83-56e9-4918-be51-dab3ef5c8b6c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a82f6b-6e12-482a-90e0-ca2c50bda013", "created": "2026-10-09T15:13:09.031656Z", "modified": "2026-10-09T15:13:09.031656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a720420cd96fda86ac73721ffc7f2efd57887e30632d7b945749bd30822a6d0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.031656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3043b3a4-b98d-4283-833f-63c522cc8d5d", "created": "2026-10-09T15:13:09.032234Z", "modified": "2026-10-09T15:13:09.032234Z", "relationship_type": "indicates", "source_ref": "indicator--d7a82f6b-6e12-482a-90e0-ca2c50bda013", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a131b413-f7c1-43e2-8172-e7e6aef89a63", "created": "2026-10-09T15:13:09.032364Z", "modified": "2026-10-09T15:13:09.032364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6cd1a15a89bb1d1b3bca94434e11647b5a5630a9f19013829a8f120bcc78c54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.032364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2de51b8f-f5ff-4eeb-912c-d0e11ea4226b", "created": "2026-10-09T15:13:09.032944Z", "modified": "2026-10-09T15:13:09.032944Z", "relationship_type": "indicates", "source_ref": "indicator--a131b413-f7c1-43e2-8172-e7e6aef89a63", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e855b1-cd47-40c5-9862-37d0e3caa6cf", "created": "2026-10-09T15:13:09.033062Z", "modified": "2026-10-09T15:13:09.033062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6b1ec9a59c2e9dcbe550a737dc028d8f174f11b9a69c397f81438c0e93ecc3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.033062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2b5d3fa-d52e-4bd3-8c77-c9b94396e5e2", "created": "2026-10-09T15:13:09.033657Z", "modified": "2026-10-09T15:13:09.033657Z", "relationship_type": "indicates", "source_ref": "indicator--14e855b1-cd47-40c5-9862-37d0e3caa6cf", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062416ef-e698-40ec-aede-8134f24ea81e", "created": "2026-10-09T15:13:09.033777Z", "modified": "2026-10-09T15:13:09.033777Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed47a8032c4551004c26875716bac7f60f091c4049bcb1719bfe44475d8b2e00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.033777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--484584b6-51c3-40ad-bd93-51e092866d30", "created": "2026-10-09T15:13:09.034378Z", "modified": "2026-10-09T15:13:09.034378Z", "relationship_type": "indicates", "source_ref": "indicator--062416ef-e698-40ec-aede-8134f24ea81e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8617ea51-a5ed-48e0-a5fc-69c95ff67ca5", "created": "2026-10-09T15:13:09.034499Z", "modified": "2026-10-09T15:13:09.034499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90c5d8c8d4e91e18effcf66e90b30283b43d1d5d1d68b6ac60d81e50c13cf5cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.034499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--664efb95-2c4e-4d34-9b6c-e9bebdff4182", "created": "2026-10-09T15:13:09.035085Z", "modified": "2026-10-09T15:13:09.035085Z", "relationship_type": "indicates", "source_ref": "indicator--8617ea51-a5ed-48e0-a5fc-69c95ff67ca5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a57a348-497e-4fb8-be33-35157764326e", "created": "2026-10-09T15:13:09.03521Z", "modified": "2026-10-09T15:13:09.03521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58c6cb7eb7b0c280a72f72e3ef3a778e08a44471e194f5b21b7c56360ddb7555']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.03521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e51f04c4-ca4b-4efd-90eb-867f130030fa", "created": "2026-10-09T15:13:09.035921Z", "modified": "2026-10-09T15:13:09.035921Z", "relationship_type": "indicates", "source_ref": "indicator--9a57a348-497e-4fb8-be33-35157764326e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e72980-877a-4095-a527-2349f2a24597", "created": "2026-10-09T15:13:09.036044Z", "modified": "2026-10-09T15:13:09.036044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4504de667760eb5004a37c38b993ac5284d6ebff8d5b81ba81413a56f705496b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.036044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52f8da23-bac1-4f59-9012-6e15cfdf29fb", "created": "2026-10-09T15:13:09.036653Z", "modified": "2026-10-09T15:13:09.036653Z", "relationship_type": "indicates", "source_ref": "indicator--89e72980-877a-4095-a527-2349f2a24597", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a84fff-0350-490d-8d17-a176eaa3c928", "created": "2026-10-09T15:13:09.036776Z", "modified": "2026-10-09T15:13:09.036776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62e56df0d5dd4e2499fb71a24ec06f22f93b89ba6957e7c8e0f8dc52873a38a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.036776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3835b98-fd2a-484a-9499-83af3cd97459", "created": "2026-10-09T15:13:09.037376Z", "modified": "2026-10-09T15:13:09.037376Z", "relationship_type": "indicates", "source_ref": "indicator--d6a84fff-0350-490d-8d17-a176eaa3c928", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5f487d-4a8e-4485-8310-506f637cdd41", "created": "2026-10-09T15:13:09.037503Z", "modified": "2026-10-09T15:13:09.037503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5643706ca9651fd45a57fb61aa982981bba374467294dca6d10159d137c6f24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.037503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--939dcece-c62a-4bbd-9308-6877f11d6ada", "created": "2026-10-09T15:13:09.038083Z", "modified": "2026-10-09T15:13:09.038083Z", "relationship_type": "indicates", "source_ref": "indicator--cd5f487d-4a8e-4485-8310-506f637cdd41", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc797b2a-9277-472e-8ce8-6cd5b8643a5a", "created": "2026-10-09T15:13:09.038205Z", "modified": "2026-10-09T15:13:09.038205Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e202dfca580e51005d9f9c1613e39a5376a64e34d92086eaa7f8b7e1ffd32d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.038205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4825ee4e-ce26-4c2f-a71f-dd7d4df13701", "created": "2026-10-09T15:13:09.038795Z", "modified": "2026-10-09T15:13:09.038795Z", "relationship_type": "indicates", "source_ref": "indicator--fc797b2a-9277-472e-8ce8-6cd5b8643a5a", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596b553e-1fcd-4afc-aa5c-b94c3ef0c1c3", "created": "2026-10-09T15:13:09.03892Z", "modified": "2026-10-09T15:13:09.03892Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e546aab3699d6e228142e5d86ece710bcb298e6c3d2440b831dc4fb695e7b045']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.03892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f964d5a5-64e9-477b-811b-a5c69dcbcbb1", "created": "2026-10-09T15:13:09.039516Z", "modified": "2026-10-09T15:13:09.039516Z", "relationship_type": "indicates", "source_ref": "indicator--596b553e-1fcd-4afc-aa5c-b94c3ef0c1c3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949db299-13e3-49cf-8ad1-9aadf6b8a547", "created": "2026-10-09T15:13:09.039639Z", "modified": "2026-10-09T15:13:09.039639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a393c89393d78a01ad9fa7bce5eeeb74281d794bfa1caff00ebd2fbd1cc1c40c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.039639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c198b866-6c1d-4fbf-befb-97e06412a8d0", "created": "2026-10-09T15:13:09.04022Z", "modified": "2026-10-09T15:13:09.04022Z", "relationship_type": "indicates", "source_ref": "indicator--949db299-13e3-49cf-8ad1-9aadf6b8a547", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89dfc15-0d37-4b4b-82c3-7b6dfbcb8ebf", "created": "2026-10-09T15:13:09.040358Z", "modified": "2026-10-09T15:13:09.040358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9055c385207e82e4c758e5f2de86c9dbc6a0fcffcde6d82afb020deb14bf04cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.040358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--733a6f78-7bc2-4080-802d-e222ed74e9cb", "created": "2026-10-09T15:13:09.040952Z", "modified": "2026-10-09T15:13:09.040952Z", "relationship_type": "indicates", "source_ref": "indicator--a89dfc15-0d37-4b4b-82c3-7b6dfbcb8ebf", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d9a47f-2a10-4b29-accc-81864221b2a7", "created": "2026-10-09T15:13:09.041074Z", "modified": "2026-10-09T15:13:09.041074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa32bee555c9e780a36f3c8f7b0d226a45d0d0fc4047a32aabb4703df79dbbf9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.041074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6de1261f-b312-4445-8e13-9a78f83d645d", "created": "2026-10-09T15:13:09.04167Z", "modified": "2026-10-09T15:13:09.04167Z", "relationship_type": "indicates", "source_ref": "indicator--74d9a47f-2a10-4b29-accc-81864221b2a7", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e998d1-2857-4abd-ac7f-c91ba77db4b3", "created": "2026-10-09T15:13:09.041791Z", "modified": "2026-10-09T15:13:09.041791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63762e5ff7bc93ee68424d698e65a0f247dc594c78af298f6796b541bc208364']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.041791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30d9968f-b0de-4f82-aab6-26c9f86df411", "created": "2026-10-09T15:13:09.042487Z", "modified": "2026-10-09T15:13:09.042487Z", "relationship_type": "indicates", "source_ref": "indicator--e2e998d1-2857-4abd-ac7f-c91ba77db4b3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3b79bf-ff1c-4c0f-8f45-d60957de4a18", "created": "2026-10-09T15:13:09.042614Z", "modified": "2026-10-09T15:13:09.042614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4da7cfcec9d9e597e93ac647ef4093cfbaa203889a8922ec1e09d7921aaa6ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.042614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c28bae6c-68e3-4ffb-8758-37e84feea9be", "created": "2026-10-09T15:13:09.043198Z", "modified": "2026-10-09T15:13:09.043198Z", "relationship_type": "indicates", "source_ref": "indicator--6b3b79bf-ff1c-4c0f-8f45-d60957de4a18", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baae30b7-3be5-49a0-a00c-9c3aeb3692be", "created": "2026-10-09T15:13:09.04333Z", "modified": "2026-10-09T15:13:09.04333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='deda527cc46e85197ea4aff42be0ce22e4f11ddcf7fc58fe87a0ddc228416864']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.04333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae7a7111-5623-477b-b5b3-0d578634a71a", "created": "2026-10-09T15:13:09.043916Z", "modified": "2026-10-09T15:13:09.043916Z", "relationship_type": "indicates", "source_ref": "indicator--baae30b7-3be5-49a0-a00c-9c3aeb3692be", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6891c28-c722-48e1-bf62-fcc6cedf018b", "created": "2026-10-09T15:13:09.044035Z", "modified": "2026-10-09T15:13:09.044035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbd3c5cf40d3e98e8c40b76892b7f9a5a22c1115bfd7e836bd3beecd477bd657']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.044035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93a656b6-f914-4744-b804-029720bc3faa", "created": "2026-10-09T15:13:09.044622Z", "modified": "2026-10-09T15:13:09.044622Z", "relationship_type": "indicates", "source_ref": "indicator--a6891c28-c722-48e1-bf62-fcc6cedf018b", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b106ccc-ec0c-417c-bf19-3950c0a0fa12", "created": "2026-10-09T15:13:09.044743Z", "modified": "2026-10-09T15:13:09.044743Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eee03bd119096fcf1ed0fa1c51154d022185f51b0273951e8b65fd28e5edd77e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.044743Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94d8dd99-3f8c-46ff-88bb-e4635ddc2328", "created": "2026-10-09T15:13:09.045341Z", "modified": "2026-10-09T15:13:09.045341Z", "relationship_type": "indicates", "source_ref": "indicator--8b106ccc-ec0c-417c-bf19-3950c0a0fa12", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677f0310-fb25-4002-84f1-d293d7f415ec", "created": "2026-10-09T15:13:09.045463Z", "modified": "2026-10-09T15:13:09.045463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e9baea9166fc547a66342551b68eb4e782d82c5b3ab8ab15aa7361dd2ef58914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.045463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc940e03-ee85-488a-a1ab-6aad2ffdcfc0", "created": "2026-10-09T15:13:09.046084Z", "modified": "2026-10-09T15:13:09.046084Z", "relationship_type": "indicates", "source_ref": "indicator--677f0310-fb25-4002-84f1-d293d7f415ec", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bffe1da-efbd-493e-9bd6-7749707d3be4", "created": "2026-10-09T15:13:09.046222Z", "modified": "2026-10-09T15:13:09.046222Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e99235fe8fa6da324fda5e6eb1816320ecf9ca68756703dd46d613fef2145435']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.046222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf992675-9a76-4ade-bdbc-26f6bf5af7cf", "created": "2026-10-09T15:13:09.046824Z", "modified": "2026-10-09T15:13:09.046824Z", "relationship_type": "indicates", "source_ref": "indicator--3bffe1da-efbd-493e-9bd6-7749707d3be4", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287e59ad-20cb-4f12-82a9-675393e98852", "created": "2026-10-09T15:13:09.04695Z", "modified": "2026-10-09T15:13:09.04695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='416d5a5525b9d36b185fdc9538887d8c80dcd70b581d1349343e0f322ef99a22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.04695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41026913-11db-4bd7-a7f5-ddaf9260e337", "created": "2026-10-09T15:13:09.04754Z", "modified": "2026-10-09T15:13:09.04754Z", "relationship_type": "indicates", "source_ref": "indicator--287e59ad-20cb-4f12-82a9-675393e98852", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9147ff-ed9b-44c9-893a-63d79bbca693", "created": "2026-10-09T15:13:09.047664Z", "modified": "2026-10-09T15:13:09.047664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2db9a5df39e4e897d6da33053e67de44f222937ca2355bc10e9966472da66144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.047664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97f22fdb-55f4-4cb5-9862-4e3a1c9fcb1d", "created": "2026-10-09T15:13:09.048357Z", "modified": "2026-10-09T15:13:09.048357Z", "relationship_type": "indicates", "source_ref": "indicator--8d9147ff-ed9b-44c9-893a-63d79bbca693", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328b5e4a-bba2-4a9f-a752-4f16fac20b3e", "created": "2026-10-09T15:13:09.048483Z", "modified": "2026-10-09T15:13:09.048483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3da79e8a3a933a4dae169726df56cdab56e35cbaeb81eece3c3edfb7a8598751']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.048483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db9c8eb2-8fc7-4a68-891d-0745b58c42c3", "created": "2026-10-09T15:13:09.049077Z", "modified": "2026-10-09T15:13:09.049077Z", "relationship_type": "indicates", "source_ref": "indicator--328b5e4a-bba2-4a9f-a752-4f16fac20b3e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cfcb0e-2dbb-4e26-bb02-13ab7ca026c7", "created": "2026-10-09T15:13:09.0492Z", "modified": "2026-10-09T15:13:09.0492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bfebe651c4254f1939de5941f659421fe47dec9f93900ea06d087348beca482f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.0492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2c0acbc-ecb7-46c6-adb7-faf4d749bb09", "created": "2026-10-09T15:13:09.049799Z", "modified": "2026-10-09T15:13:09.049799Z", "relationship_type": "indicates", "source_ref": "indicator--09cfcb0e-2dbb-4e26-bb02-13ab7ca026c7", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869cb24c-7fc3-4af9-84e9-20368fd88eb8", "created": "2026-10-09T15:13:09.049927Z", "modified": "2026-10-09T15:13:09.049927Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a0aa568ff6cc8e19d71e9bb979fca0c268ce1ee022cb1831839634e5bd4adec4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.049927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32ea2f60-e7fd-40e6-b7ad-53a3569433d5", "created": "2026-10-09T15:13:09.050597Z", "modified": "2026-10-09T15:13:09.050597Z", "relationship_type": "indicates", "source_ref": "indicator--869cb24c-7fc3-4af9-84e9-20368fd88eb8", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8324692b-be30-4733-869c-918c0e0868b4", "created": "2026-10-09T15:13:09.050737Z", "modified": "2026-10-09T15:13:09.050737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f060c5b5437b63757e0d8a3e5a5b5bfd24e740c21668a8722d51e16e091c37d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.050737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00d55010-8c55-4fdf-b15d-b1c36e21231d", "created": "2026-10-09T15:13:09.051347Z", "modified": "2026-10-09T15:13:09.051347Z", "relationship_type": "indicates", "source_ref": "indicator--8324692b-be30-4733-869c-918c0e0868b4", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd92de67-162a-431d-8563-668dfadec93f", "created": "2026-10-09T15:13:09.051474Z", "modified": "2026-10-09T15:13:09.051474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5cd5d3ab9d603aa4048ea46d91c4694097083da6d9f5458e10f5eec166d6d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.051474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f136505-3cd0-4b82-b23d-aa00c0dd0bbc", "created": "2026-10-09T15:13:09.05206Z", "modified": "2026-10-09T15:13:09.05206Z", "relationship_type": "indicates", "source_ref": "indicator--cd92de67-162a-431d-8563-668dfadec93f", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d114cb-7d85-48be-94ed-789a041c0fad", "created": "2026-10-09T15:13:09.05218Z", "modified": "2026-10-09T15:13:09.05218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15fc2ca31516f06ea1ec75cb83c3fec66318bd21f15f67839115e1a4bdcd3b25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.05218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afc98157-42ea-4927-a662-a2675f296555", "created": "2026-10-09T15:13:09.052776Z", "modified": "2026-10-09T15:13:09.052776Z", "relationship_type": "indicates", "source_ref": "indicator--c2d114cb-7d85-48be-94ed-789a041c0fad", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4609df56-4f2c-4c37-b06e-25fbdd83d3d8", "created": "2026-10-09T15:13:09.052896Z", "modified": "2026-10-09T15:13:09.052896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33f625191b79757f685a3337dabca583311484003b9aa0b900baee014646f750']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.052896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c403a4d-0003-4898-96b4-0a16b1c95700", "created": "2026-10-09T15:13:09.053503Z", "modified": "2026-10-09T15:13:09.053503Z", "relationship_type": "indicates", "source_ref": "indicator--4609df56-4f2c-4c37-b06e-25fbdd83d3d8", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fffaa8-2c34-4e7b-a827-8318279c868c", "created": "2026-10-09T15:13:09.053624Z", "modified": "2026-10-09T15:13:09.053624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0af3f6499567eec869567675c72be4b5ec0822133759af12599502b8a23219b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.053624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--183abd14-5750-4dd7-91ce-fd04c66cfec4", "created": "2026-10-09T15:13:09.054219Z", "modified": "2026-10-09T15:13:09.054219Z", "relationship_type": "indicates", "source_ref": "indicator--44fffaa8-2c34-4e7b-a827-8318279c868c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583d5a00-b3dd-46a4-b232-5a54b8b17c7c", "created": "2026-10-09T15:13:09.054357Z", "modified": "2026-10-09T15:13:09.054357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6121b820224ea5fa55feacc28f58f33af900e71a3131874d0e0e5fb9ad9388d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.054357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3e77cc2-c42b-4a5d-b171-9e08475bff3e", "created": "2026-10-09T15:13:09.055039Z", "modified": "2026-10-09T15:13:09.055039Z", "relationship_type": "indicates", "source_ref": "indicator--583d5a00-b3dd-46a4-b232-5a54b8b17c7c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468803d0-a011-4141-b30b-49602cf834e5", "created": "2026-10-09T15:13:09.055162Z", "modified": "2026-10-09T15:13:09.055162Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb29f0351a0a4d5e3d20cc84f0a79c0e1a0105d9b1b6532eb3d3cf08de0e09b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.055162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ce35f84-53b9-417b-9e2a-bfa73f337443", "created": "2026-10-09T15:13:09.055755Z", "modified": "2026-10-09T15:13:09.055755Z", "relationship_type": "indicates", "source_ref": "indicator--468803d0-a011-4141-b30b-49602cf834e5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a008c036-952a-459a-975d-a6a8ec2677e0", "created": "2026-10-09T15:13:09.055878Z", "modified": "2026-10-09T15:13:09.055878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98965236f66b61c17f1482b0e4bce1591f770c2ebfb9a8dba37dda2aa0b7538c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.055878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34bb31f2-4d89-4d1b-b691-879724599065", "created": "2026-10-09T15:13:09.056472Z", "modified": "2026-10-09T15:13:09.056472Z", "relationship_type": "indicates", "source_ref": "indicator--a008c036-952a-459a-975d-a6a8ec2677e0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c8fe87-5a46-4a85-987f-0760306eb331", "created": "2026-10-09T15:13:09.056597Z", "modified": "2026-10-09T15:13:09.056597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0161661923f6ec731fc9cfcf20ac7fcadab5904e6a943440c591908241609de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.056597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4e6dd46-113e-400a-8ce4-b7fe624c76e2", "created": "2026-10-09T15:13:09.057179Z", "modified": "2026-10-09T15:13:09.057179Z", "relationship_type": "indicates", "source_ref": "indicator--59c8fe87-5a46-4a85-987f-0760306eb331", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7386f0-f50f-4d81-9c31-7546dcf7a570", "created": "2026-10-09T15:13:09.057311Z", "modified": "2026-10-09T15:13:09.057311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1f617da385ecd97334c00d2dd1983c271c64a052183f4ef3b68be0652e6d835']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.057311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acff43b9-db25-4f37-9864-d0b7a605689d", "created": "2026-10-09T15:13:09.057893Z", "modified": "2026-10-09T15:13:09.057893Z", "relationship_type": "indicates", "source_ref": "indicator--5b7386f0-f50f-4d81-9c31-7546dcf7a570", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84714a7a-a915-49a0-923b-88ce4242aba6", "created": "2026-10-09T15:13:09.058011Z", "modified": "2026-10-09T15:13:09.058011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='30bef83da4c61b26da43657b92ecda7f7901dc44514d41477a5994ccd565823a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.058011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23c31ec4-c946-482e-baea-6dc6775cf64a", "created": "2026-10-09T15:13:09.058607Z", "modified": "2026-10-09T15:13:09.058607Z", "relationship_type": "indicates", "source_ref": "indicator--84714a7a-a915-49a0-923b-88ce4242aba6", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3f2207-3620-4c7d-92f7-8c082a9537d2", "created": "2026-10-09T15:13:09.058728Z", "modified": "2026-10-09T15:13:09.058728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb0292635fe1b34a41777cab425828cf52a2a6efe83171e9a1b75c32b0b10142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.058728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef223c3c-a23d-4cf1-863d-3ed206ecbbee", "created": "2026-10-09T15:13:09.059321Z", "modified": "2026-10-09T15:13:09.059321Z", "relationship_type": "indicates", "source_ref": "indicator--ed3f2207-3620-4c7d-92f7-8c082a9537d2", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c442de1-28fa-41ea-807a-26fedd3732be", "created": "2026-10-09T15:13:09.059446Z", "modified": "2026-10-09T15:13:09.059446Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='867aa54974964038876b563c52132106e5f8c70afe13ba73b633e4edf8d74cfa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.059446Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d995772-9ee6-4556-bec6-5b0a478e8b77", "created": "2026-10-09T15:13:09.060023Z", "modified": "2026-10-09T15:13:09.060023Z", "relationship_type": "indicates", "source_ref": "indicator--0c442de1-28fa-41ea-807a-26fedd3732be", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dd529b-d4c2-407c-aea8-eb055dc02866", "created": "2026-10-09T15:13:09.060146Z", "modified": "2026-10-09T15:13:09.060146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d88f39434478f77240930ce4bfc9399ab72687a92a8e4380ee92c236eb98a971']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.060146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a975ac14-b437-4c57-bca2-0046b292833f", "created": "2026-10-09T15:13:09.060742Z", "modified": "2026-10-09T15:13:09.060742Z", "relationship_type": "indicates", "source_ref": "indicator--62dd529b-d4c2-407c-aea8-eb055dc02866", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914cfbe2-98d9-4bb6-b52a-8602772145ef", "created": "2026-10-09T15:13:09.060861Z", "modified": "2026-10-09T15:13:09.060861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05f727e005501f389ceda32a0e03d524a19bba867fa4c29364214fac0dcbd6d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.060861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9894bb2-9ba9-4b58-9ff3-f1c85032da84", "created": "2026-10-09T15:13:09.061553Z", "modified": "2026-10-09T15:13:09.061553Z", "relationship_type": "indicates", "source_ref": "indicator--914cfbe2-98d9-4bb6-b52a-8602772145ef", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a67f70-7c4c-4c43-b3be-5b740bee5c56", "created": "2026-10-09T15:13:09.061676Z", "modified": "2026-10-09T15:13:09.061676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa484e6bb7390781ab5fd707a3e3b18b7c6c3431bb6b209a95ae2443170d50dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.061676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6e14ecb-7b04-4ece-b370-22abc927037e", "created": "2026-10-09T15:13:09.06226Z", "modified": "2026-10-09T15:13:09.06226Z", "relationship_type": "indicates", "source_ref": "indicator--91a67f70-7c4c-4c43-b3be-5b740bee5c56", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd7a4b5-9de1-42a9-99b8-a5cd2548ed26", "created": "2026-10-09T15:13:09.062393Z", "modified": "2026-10-09T15:13:09.062393Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a20880e386b4863240db059c990d8585c34dcbbaef91de2ffb0005131717bad3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.062393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86610244-185b-47bc-953f-862e2c09757b", "created": "2026-10-09T15:13:09.062976Z", "modified": "2026-10-09T15:13:09.062976Z", "relationship_type": "indicates", "source_ref": "indicator--0cd7a4b5-9de1-42a9-99b8-a5cd2548ed26", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66675f7-f0d3-4fe8-b945-018a65c5f93b", "created": "2026-10-09T15:13:09.063097Z", "modified": "2026-10-09T15:13:09.063097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b9464102c37803c6e8d117419ad07a75ebb85dc54cc1a95dba05f433fc89990']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.063097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37a2eb73-9b7f-4c62-bea3-6160f0c08942", "created": "2026-10-09T15:13:09.063696Z", "modified": "2026-10-09T15:13:09.063696Z", "relationship_type": "indicates", "source_ref": "indicator--d66675f7-f0d3-4fe8-b945-018a65c5f93b", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5baf04b9-8c79-438e-9312-b479bbe16013", "created": "2026-10-09T15:13:09.06382Z", "modified": "2026-10-09T15:13:09.06382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe5e68f082f2e533f628351cd40a76369e423131851a1133373c755ab2986439']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.06382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71d8084e-da08-46a2-b677-b0c8bfdd63e6", "created": "2026-10-09T15:13:09.064424Z", "modified": "2026-10-09T15:13:09.064424Z", "relationship_type": "indicates", "source_ref": "indicator--5baf04b9-8c79-438e-9312-b479bbe16013", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed83729-61ea-492f-a35e-9a2d8c2b5c52", "created": "2026-10-09T15:13:09.064545Z", "modified": "2026-10-09T15:13:09.064545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc8a1e738d33844713c454473d9089d7f47cdeaa9bf8e0551f964092fb604b05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.064545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6d1d043-745f-4fdd-aa47-b34310b6d15e", "created": "2026-10-09T15:13:09.065127Z", "modified": "2026-10-09T15:13:09.065127Z", "relationship_type": "indicates", "source_ref": "indicator--aed83729-61ea-492f-a35e-9a2d8c2b5c52", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5b3e90-6681-413d-8fb4-00844a006b71", "created": "2026-10-09T15:13:09.065245Z", "modified": "2026-10-09T15:13:09.065245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c19bc3323f51c454689cfcf5c6379b06f28971e381c4f46ef573b1e11b086f00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.065245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52fbea1-2060-44ce-8772-372510773522", "created": "2026-10-09T15:13:09.06584Z", "modified": "2026-10-09T15:13:09.06584Z", "relationship_type": "indicates", "source_ref": "indicator--cf5b3e90-6681-413d-8fb4-00844a006b71", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b58fe6c-2a60-4dfc-a081-9fd52974d374", "created": "2026-10-09T15:13:09.065959Z", "modified": "2026-10-09T15:13:09.065959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='111b7a2f8988cb30e74f51e66f7083f84c4b53f0971c4b5f1007547355e6bb35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.065959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac3d1250-bba9-4fe6-b08e-a196a9d2011e", "created": "2026-10-09T15:13:09.066556Z", "modified": "2026-10-09T15:13:09.066556Z", "relationship_type": "indicates", "source_ref": "indicator--1b58fe6c-2a60-4dfc-a081-9fd52974d374", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76adce0c-15e6-4620-8bd3-f46d01d7344d", "created": "2026-10-09T15:13:09.066675Z", "modified": "2026-10-09T15:13:09.066675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d6d997ee4a59a78629e32b081be072799cf75595c1e23abba0ea0507c31b1aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.066675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41ac6ef8-782f-4943-992e-a0cdd959f97d", "created": "2026-10-09T15:13:09.067374Z", "modified": "2026-10-09T15:13:09.067374Z", "relationship_type": "indicates", "source_ref": "indicator--76adce0c-15e6-4620-8bd3-f46d01d7344d", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dc9626-7525-431f-9db0-7dead5d7d129", "created": "2026-10-09T15:13:09.067503Z", "modified": "2026-10-09T15:13:09.067503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='042cb2188ee3948b336613b2c526d3e54437807909a45366b127e8baa9dbf976']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.067503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07b8fc68-c901-4318-be7b-3e3007ee3880", "created": "2026-10-09T15:13:09.068103Z", "modified": "2026-10-09T15:13:09.068103Z", "relationship_type": "indicates", "source_ref": "indicator--b5dc9626-7525-431f-9db0-7dead5d7d129", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc50060-436d-49ea-b4a0-537a89d3bcc4", "created": "2026-10-09T15:13:09.068223Z", "modified": "2026-10-09T15:13:09.068223Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='efd1ced7031ead2ee8ec6dbf8e7fdcb5bb36e3edf8294552fe954157c4dd2bf7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.068223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ea2d51c-c569-46ea-8528-c92f6665530e", "created": "2026-10-09T15:13:09.068845Z", "modified": "2026-10-09T15:13:09.068845Z", "relationship_type": "indicates", "source_ref": "indicator--bcc50060-436d-49ea-b4a0-537a89d3bcc4", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08e8a2f-9436-4395-be36-48878ce83ca4", "created": "2026-10-09T15:13:09.068968Z", "modified": "2026-10-09T15:13:09.068968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b5b1406549c995a617c322a6d5863e59aaeb0749f9a9ee7018cb11abf3cfdc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.068968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6baff71b-a2c3-4dc0-8394-05833bfbbc98", "created": "2026-10-09T15:13:09.069579Z", "modified": "2026-10-09T15:13:09.069579Z", "relationship_type": "indicates", "source_ref": "indicator--b08e8a2f-9436-4395-be36-48878ce83ca4", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a3ed24-f16f-4674-8027-7f02829e6aec", "created": "2026-10-09T15:13:09.069706Z", "modified": "2026-10-09T15:13:09.069706Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aiyi.admin']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.069706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea319139-9cbe-49b6-8027-bdfa33b80902", "created": "2026-10-09T15:13:09.070158Z", "modified": "2026-10-09T15:13:09.070158Z", "relationship_type": "indicates", "source_ref": "indicator--90a3ed24-f16f-4674-8027-7f02829e6aec", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e656d45-793a-4f8a-a60d-887f2944194e", "created": "2026-10-09T15:13:09.070286Z", "modified": "2026-10-09T15:13:09.070286Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cocospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.070286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5577739-3c63-41ef-ae02-b3539d5bb6f6", "created": "2026-10-09T15:13:09.070731Z", "modified": "2026-10-09T15:13:09.070731Z", "relationship_type": "indicates", "source_ref": "indicator--6e656d45-793a-4f8a-a60d-887f2944194e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e695b-7f6f-47f2-a294-3648c9a7191e", "created": "2026-10-09T15:13:09.070852Z", "modified": "2026-10-09T15:13:09.070852Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.cocospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.070852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7d296cc-8eb6-45b4-9ed8-c2b112b38cae", "created": "2026-10-09T15:13:09.071321Z", "modified": "2026-10-09T15:13:09.071321Z", "relationship_type": "indicates", "source_ref": "indicator--7d1e695b-7f6f-47f2-a294-3648c9a7191e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e61d67d-c280-480c-a7b2-8242e47492b9", "created": "2026-10-09T15:13:09.071444Z", "modified": "2026-10-09T15:13:09.071444Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.cocospy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.071444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10ca1958-6faa-4abd-b2c9-49581754ca48", "created": "2026-10-09T15:13:09.071908Z", "modified": "2026-10-09T15:13:09.071908Z", "relationship_type": "indicates", "source_ref": "indicator--9e61d67d-c280-480c-a7b2-8242e47492b9", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf94f69-351c-477e-ba35-cc9ae4c5558f", "created": "2026-10-09T15:13:09.072026Z", "modified": "2026-10-09T15:13:09.072026Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.fonemonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.072026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e23a0e99-0902-44b9-a52f-e364561a06d5", "created": "2026-10-09T15:13:09.072502Z", "modified": "2026-10-09T15:13:09.072502Z", "relationship_type": "indicates", "source_ref": "indicator--3cf94f69-351c-477e-ba35-cc9ae4c5558f", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efed00d1-5cda-42f4-8681-69dc10896252", "created": "2026-10-09T15:13:09.072626Z", "modified": "2026-10-09T15:13:09.072626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.spyine']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.072626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--047b5006-0460-47ba-85c6-80d3819f5517", "created": "2026-10-09T15:13:09.073174Z", "modified": "2026-10-09T15:13:09.073174Z", "relationship_type": "indicates", "source_ref": "indicator--efed00d1-5cda-42f4-8681-69dc10896252", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561ddf86-2c5c-452f-9e15-999b2743cf21", "created": "2026-10-09T15:13:09.073314Z", "modified": "2026-10-09T15:13:09.073314Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.spyzie']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.073314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e91fe10a-127f-4432-a210-5fa60b1178e9", "created": "2026-10-09T15:13:09.073794Z", "modified": "2026-10-09T15:13:09.073794Z", "relationship_type": "indicates", "source_ref": "indicator--561ddf86-2c5c-452f-9e15-999b2743cf21", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cddbb22-c527-4106-abae-dc231e7d614e", "created": "2026-10-09T15:13:09.073918Z", "modified": "2026-10-09T15:13:09.073918Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.spyic']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.073918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b86553b-3c1a-4b44-bb77-8f7440fd0a38", "created": "2026-10-09T15:13:09.074381Z", "modified": "2026-10-09T15:13:09.074381Z", "relationship_type": "indicates", "source_ref": "indicator--4cddbb22-c527-4106-abae-dc231e7d614e", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a24a2bd-6836-4305-a086-7d4b43c7ed08", "created": "2026-10-09T15:13:09.074504Z", "modified": "2026-10-09T15:13:09.074504Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.minspy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.074504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a855dd32-d162-4fde-8ac4-e703766956a5", "created": "2026-10-09T15:13:09.074947Z", "modified": "2026-10-09T15:13:09.074947Z", "relationship_type": "indicates", "source_ref": "indicator--2a24a2bd-6836-4305-a086-7d4b43c7ed08", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5461c159-606c-4657-942e-a0016470bb5c", "created": "2026-10-09T15:13:09.075067Z", "modified": "2026-10-09T15:13:09.075067Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.minspy.v3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.075067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d12d0f6-5e70-49db-9e52-a5f44bc9adb9", "created": "2026-10-09T15:13:09.075526Z", "modified": "2026-10-09T15:13:09.075526Z", "relationship_type": "indicates", "source_ref": "indicator--5461c159-606c-4657-942e-a0016470bb5c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8e4542-623b-431d-9a64-9c344acf65bb", "created": "2026-10-09T15:13:09.075647Z", "modified": "2026-10-09T15:13:09.075647Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.cocospy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.075647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fba9bea3-1bf7-4488-a533-c793771c1d50", "created": "2026-10-09T15:13:09.076107Z", "modified": "2026-10-09T15:13:09.076107Z", "relationship_type": "indicates", "source_ref": "indicator--9f8e4542-623b-431d-9a64-9c344acf65bb", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac905243-9b6a-409a-a8f5-92c7dbaa3aaf", "created": "2026-10-09T15:13:09.07623Z", "modified": "2026-10-09T15:13:09.07623Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.fonemonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.07623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a675b62d-2f55-4024-bc89-5c850dc2690a", "created": "2026-10-09T15:13:09.076774Z", "modified": "2026-10-09T15:13:09.076774Z", "relationship_type": "indicates", "source_ref": "indicator--ac905243-9b6a-409a-a8f5-92c7dbaa3aaf", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be302ed-d2ae-4b08-8127-4fc8c1b22ef7", "created": "2026-10-09T15:13:09.076905Z", "modified": "2026-10-09T15:13:09.076905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.fonemonitor.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.076905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ea5d2fc-8e91-473c-b950-faeb4a917692", "created": "2026-10-09T15:13:09.07738Z", "modified": "2026-10-09T15:13:09.07738Z", "relationship_type": "indicates", "source_ref": "indicator--4be302ed-d2ae-4b08-8127-4fc8c1b22ef7", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545dc213-af64-4417-b5c0-996f76a8caaf", "created": "2026-10-09T15:13:09.077501Z", "modified": "2026-10-09T15:13:09.077501Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.minspy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.077501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61da9991-b568-4d2b-b730-8bb889ee22b2", "created": "2026-10-09T15:13:09.077958Z", "modified": "2026-10-09T15:13:09.077958Z", "relationship_type": "indicates", "source_ref": "indicator--545dc213-af64-4417-b5c0-996f76a8caaf", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb368a42-4003-4bd0-9df1-9127ceaa9700", "created": "2026-10-09T15:13:09.078074Z", "modified": "2026-10-09T15:13:09.078074Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.neatspy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.078074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba0db508-6bea-4044-94d7-fc03323aac81", "created": "2026-10-09T15:13:09.078637Z", "modified": "2026-10-09T15:13:09.078637Z", "relationship_type": "indicates", "source_ref": "indicator--bb368a42-4003-4bd0-9df1-9127ceaa9700", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df3fcde-881d-4c0b-8390-85f7c760543d", "created": "2026-10-09T15:13:09.078762Z", "modified": "2026-10-09T15:13:09.078762Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.safespy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.078762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40571f74-04e2-4542-8483-bfa1a62a1f7f", "created": "2026-10-09T15:13:09.079217Z", "modified": "2026-10-09T15:13:09.079217Z", "relationship_type": "indicates", "source_ref": "indicator--6df3fcde-881d-4c0b-8390-85f7c760543d", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a1fb61-24f7-4f23-9603-757909f8efb5", "created": "2026-10-09T15:13:09.079351Z", "modified": "2026-10-09T15:13:09.079351Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.safespy.v3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.079351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34248378-2450-4522-8361-7a98e66aeff7", "created": "2026-10-09T15:13:09.079803Z", "modified": "2026-10-09T15:13:09.079803Z", "relationship_type": "indicates", "source_ref": "indicator--a2a1fb61-24f7-4f23-9603-757909f8efb5", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940f38fb-72a7-4f76-97a3-03e05711f137", "created": "2026-10-09T15:13:09.079922Z", "modified": "2026-10-09T15:13:09.079922Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyic.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.079922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a830e70-09a0-4afc-9415-bc48d8382fdb", "created": "2026-10-09T15:13:09.080382Z", "modified": "2026-10-09T15:13:09.080382Z", "relationship_type": "indicates", "source_ref": "indicator--940f38fb-72a7-4f76-97a3-03e05711f137", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e84cfa-5c81-472f-8924-5d19179aea6c", "created": "2026-10-09T15:13:09.080508Z", "modified": "2026-10-09T15:13:09.080508Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyic.v3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.080508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c458310-12e5-4672-9656-3da00bf8c014", "created": "2026-10-09T15:13:09.080965Z", "modified": "2026-10-09T15:13:09.080965Z", "relationship_type": "indicates", "source_ref": "indicator--d1e84cfa-5c81-472f-8924-5d19179aea6c", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b8467d-9f60-451c-9f96-c2eab72a2430", "created": "2026-10-09T15:13:09.081087Z", "modified": "2026-10-09T15:13:09.081087Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyier.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.081087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f811d290-9bb2-4b8e-8c42-84a284671bc0", "created": "2026-10-09T15:13:09.081546Z", "modified": "2026-10-09T15:13:09.081546Z", "relationship_type": "indicates", "source_ref": "indicator--32b8467d-9f60-451c-9f96-c2eab72a2430", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f9ba46-3ce8-4aaf-bad6-1f2ee0b7f029", "created": "2026-10-09T15:13:09.081666Z", "modified": "2026-10-09T15:13:09.081666Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyine.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.081666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04a3142d-ecf7-4163-9331-55a1a5a76ff1", "created": "2026-10-09T15:13:09.082118Z", "modified": "2026-10-09T15:13:09.082118Z", "relationship_type": "indicates", "source_ref": "indicator--19f9ba46-3ce8-4aaf-bad6-1f2ee0b7f029", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f53fe5-7888-4fec-b1b9-335aa53eb4b1", "created": "2026-10-09T15:13:09.082237Z", "modified": "2026-10-09T15:13:09.082237Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyzie.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.082237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b43a5aec-c17f-404e-b68a-ec916c20b623", "created": "2026-10-09T15:13:09.082701Z", "modified": "2026-10-09T15:13:09.082701Z", "relationship_type": "indicates", "source_ref": "indicator--80f53fe5-7888-4fec-b1b9-335aa53eb4b1", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f70698e-d5c2-432b-90e2-5359917bb186", "created": "2026-10-09T15:13:09.082818Z", "modified": "2026-10-09T15:13:09.082818Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dy.spyzie.v4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.082818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b3a000b-afe3-4537-a5c1-81a2b4691e17", "created": "2026-10-09T15:13:09.083285Z", "modified": "2026-10-09T15:13:09.083285Z", "relationship_type": "indicates", "source_ref": "indicator--3f70698e-d5c2-432b-90e2-5359917bb186", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbdaf9c-6b3f-422e-89df-c42361b89294", "created": "2026-10-09T15:13:09.083405Z", "modified": "2026-10-09T15:13:09.083405Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.teensafe.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.083405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9aaf085-45c9-419c-ae06-0d4a58b17ae7", "created": "2026-10-09T15:13:09.083958Z", "modified": "2026-10-09T15:13:09.083958Z", "relationship_type": "indicates", "source_ref": "indicator--cdbdaf9c-6b3f-422e-89df-c42361b89294", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5469b1d3-9bd4-4671-b90e-749da52b96e3", "created": "2026-10-09T15:13:09.084081Z", "modified": "2026-10-09T15:13:09.084081Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyic']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.084081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b754d237-30a4-4da0-8e64-0f27915f6a25", "created": "2026-10-09T15:13:09.084536Z", "modified": "2026-10-09T15:13:09.084536Z", "relationship_type": "indicates", "source_ref": "indicator--5469b1d3-9bd4-4671-b90e-749da52b96e3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292162b5-9657-41ec-9a54-0d813b8cfad3", "created": "2026-10-09T15:13:09.084659Z", "modified": "2026-10-09T15:13:09.084659Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wb.production']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.084659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29c39169-c718-4599-b4ef-549ee4f159f7", "created": "2026-10-09T15:13:09.085107Z", "modified": "2026-10-09T15:13:09.085107Z", "relationship_type": "indicates", "source_ref": "indicator--292162b5-9657-41ec-9a54-0d813b8cfad3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341bfdde-2b2e-4468-b872-f49f310c56de", "created": "2026-10-09T15:13:09.085223Z", "modified": "2026-10-09T15:13:09.085223Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ws.sc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.085223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48e5ff0a-7afe-476f-a8b9-3beb6ce6feb1", "created": "2026-10-09T15:13:09.085676Z", "modified": "2026-10-09T15:13:09.085676Z", "relationship_type": "indicates", "source_ref": "indicator--341bfdde-2b2e-4468-b872-f49f310c56de", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9e40d5-c437-4d97-9617-9b34e3a74030", "created": "2026-10-09T15:13:09.085796Z", "modified": "2026-10-09T15:13:09.085796Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ws.scli']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.085796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba2f7081-580c-4a24-9b04-92f1b61c55f6", "created": "2026-10-09T15:13:09.086234Z", "modified": "2026-10-09T15:13:09.086234Z", "relationship_type": "indicates", "source_ref": "indicator--8b9e40d5-c437-4d97-9617-9b34e3a74030", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623c1c1a-de44-4840-baae-3f8333c9aac3", "created": "2026-10-09T15:13:09.086366Z", "modified": "2026-10-09T15:13:09.086366Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8418703221A74C73405AD273C28CBC12444D7520']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.086366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcbf7f8c-663a-4251-a9a0-80e318e481ec", "created": "2026-10-09T15:13:09.086917Z", "modified": "2026-10-09T15:13:09.086917Z", "relationship_type": "indicates", "source_ref": "indicator--623c1c1a-de44-4840-baae-3f8333c9aac3", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c61bc4-9ec8-4169-968f-5dc7ffde0364", "created": "2026-10-09T15:13:09.087038Z", "modified": "2026-10-09T15:13:09.087038Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B4A1513C2C71F08D2EE763CD3FAE585F71F268A9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.087038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d9d3f96-c5db-4526-b068-403f121df26c", "created": "2026-10-09T15:13:09.087603Z", "modified": "2026-10-09T15:13:09.087603Z", "relationship_type": "indicates", "source_ref": "indicator--60c61bc4-9ec8-4169-968f-5dc7ffde0364", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff2ff49-b661-4a96-8319-6f1f461ab0b0", "created": "2026-10-09T15:13:09.08773Z", "modified": "2026-10-09T15:13:09.08773Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C377ADFF5DF116AB7297D32850ADE8A8FC3F8FB9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.08773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aa2c933-2090-4e90-8fdc-e002cfd5c679", "created": "2026-10-09T15:13:09.088286Z", "modified": "2026-10-09T15:13:09.088286Z", "relationship_type": "indicates", "source_ref": "indicator--2ff2ff49-b661-4a96-8319-6f1f461ab0b0", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be92d1-223c-4e58-985b-bbd7a71f9942", "created": "2026-10-09T15:13:09.08841Z", "modified": "2026-10-09T15:13:09.08841Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CC866E79BDAD431A2B1E07229B92E64808221610']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.08841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bb93521-23b1-49d0-8313-fa0ae7ac63dc", "created": "2026-10-09T15:13:09.08897Z", "modified": "2026-10-09T15:13:09.08897Z", "relationship_type": "indicates", "source_ref": "indicator--80be92d1-223c-4e58-985b-bbd7a71f9942", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40a5a85-403a-4b92-9bea-0c02c47638e8", "created": "2026-10-09T15:13:09.089089Z", "modified": "2026-10-09T15:13:09.089089Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F25D72FCCB84BAF7F73467FC9571024B7E274CA3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.089089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ce96f45-a63a-4cc9-b3d3-20dd5581385f", "created": "2026-10-09T15:13:09.089742Z", "modified": "2026-10-09T15:13:09.089742Z", "relationship_type": "indicates", "source_ref": "indicator--e40a5a85-403a-4b92-9bea-0c02c47638e8", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5214cec6-c407-4550-9bfe-abcad81834d8", "created": "2026-10-09T15:13:09.089869Z", "modified": "2026-10-09T15:13:09.089869Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='71BE35691A181E1524DDF83F931FBC62DC4E7EC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.089869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a934eba3-9d96-4c50-8493-2a931032dadd", "created": "2026-10-09T15:13:09.090417Z", "modified": "2026-10-09T15:13:09.090417Z", "relationship_type": "indicates", "source_ref": "indicator--5214cec6-c407-4550-9bfe-abcad81834d8", "target_ref": "malware--490ccc5f-ecb3-415b-87ac-797fa87f2197"}, {"type": "malware", "spec_version": "2.1", "id": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e", "created": "2026-10-09T15:13:09.090538Z", "modified": "2026-10-09T15:13:09.090538Z", "name": "VIPTrack", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d964d9-26a2-4dca-beec-99f3e5246d60", "created": "2026-10-09T15:13:09.090658Z", "modified": "2026-10-09T15:13:09.090658Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.viptrack.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.090658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d7b626a-8858-4efa-a9bb-89de310002f3", "created": "2026-10-09T15:13:09.091157Z", "modified": "2026-10-09T15:13:09.091157Z", "relationship_type": "indicates", "source_ref": "indicator--b8d964d9-26a2-4dca-beec-99f3e5246d60", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44e2ff7-6268-42e8-ab7f-2e134fa86e1c", "created": "2026-10-09T15:13:09.09129Z", "modified": "2026-10-09T15:13:09.09129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptrack.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.09129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47ec74a4-b3da-4602-a73d-446f64378ca3", "created": "2026-10-09T15:13:09.091753Z", "modified": "2026-10-09T15:13:09.091753Z", "relationship_type": "indicates", "source_ref": "indicator--e44e2ff7-6268-42e8-ab7f-2e134fa86e1c", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab5b1dd-1c1d-407b-959c-91edec831ceb", "created": "2026-10-09T15:13:09.091876Z", "modified": "2026-10-09T15:13:09.091876Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c253a652ab4262072431e9729710a25e5554e09ac8dff4452f1c20a7271b1a57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.091876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97a74d70-47b1-489f-9bfb-75db3180406e", "created": "2026-10-09T15:13:09.092477Z", "modified": "2026-10-09T15:13:09.092477Z", "relationship_type": "indicates", "source_ref": "indicator--eab5b1dd-1c1d-407b-959c-91edec831ceb", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a640ed46-2e0a-4ee4-bd54-9ec25a02ee31", "created": "2026-10-09T15:13:09.092607Z", "modified": "2026-10-09T15:13:09.092607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b9a62be13f91df54c555f43b6e1243d8b7b9f3345c44fee95dbc0c9fe0e35b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.092607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--421ef5fc-7525-48bb-b0f1-4dad575e09ce", "created": "2026-10-09T15:13:09.093194Z", "modified": "2026-10-09T15:13:09.093194Z", "relationship_type": "indicates", "source_ref": "indicator--a640ed46-2e0a-4ee4-bd54-9ec25a02ee31", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be09ab91-bb92-4ce0-a6cf-25e7fd67f06c", "created": "2026-10-09T15:13:09.093326Z", "modified": "2026-10-09T15:13:09.093326Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f0cf9791c98c84cd758b6a18760dc5118ec59c6fff9f8d279a09790084ff1a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.093326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9425b0d-be94-4d70-82df-eae4b1033768", "created": "2026-10-09T15:13:09.093915Z", "modified": "2026-10-09T15:13:09.093915Z", "relationship_type": "indicates", "source_ref": "indicator--be09ab91-bb92-4ce0-a6cf-25e7fd67f06c", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1e3718-06b7-47e5-a4a6-8ef4751c2f55", "created": "2026-10-09T15:13:09.09404Z", "modified": "2026-10-09T15:13:09.09404Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mit.viptrackpro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.09404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb5d0bb6-3a15-4f63-9d36-fd9e122c14b7", "created": "2026-10-09T15:13:09.094514Z", "modified": "2026-10-09T15:13:09.094514Z", "relationship_type": "indicates", "source_ref": "indicator--6b1e3718-06b7-47e5-a4a6-8ef4751c2f55", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5faf08-38ea-437a-9c1f-4be903658b91", "created": "2026-10-09T15:13:09.094637Z", "modified": "2026-10-09T15:13:09.094637Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mit.networkadapter']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.094637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f85c1766-2c1d-43bd-a186-efb9172c8de5", "created": "2026-10-09T15:13:09.095095Z", "modified": "2026-10-09T15:13:09.095095Z", "relationship_type": "indicates", "source_ref": "indicator--ec5faf08-38ea-437a-9c1f-4be903658b91", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b3443a-393b-4660-baa1-aba630785bfd", "created": "2026-10-09T15:13:09.095212Z", "modified": "2026-10-09T15:13:09.095212Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tag.viptrack']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.095212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1231887-8dd9-421b-b275-10cf432880bf", "created": "2026-10-09T15:13:09.096091Z", "modified": "2026-10-09T15:13:09.096091Z", "relationship_type": "indicates", "source_ref": "indicator--65b3443a-393b-4660-baa1-aba630785bfd", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822384fb-7db0-4afe-8141-e0384141b821", "created": "2026-10-09T15:13:09.096219Z", "modified": "2026-10-09T15:13:09.096219Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2E104C33C8DA4DB32E59A45701D8E0C4CAD16BD3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.096219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65554abf-be39-4765-80f1-84f472cd9248", "created": "2026-10-09T15:13:09.096778Z", "modified": "2026-10-09T15:13:09.096778Z", "relationship_type": "indicates", "source_ref": "indicator--822384fb-7db0-4afe-8141-e0384141b821", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7142fb76-a24d-4ab3-bb05-b3f8f39f4050", "created": "2026-10-09T15:13:09.096905Z", "modified": "2026-10-09T15:13:09.096905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5A73C8FE7CBA5C9E70B0DF69B3A111C42A10B215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.096905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d4c971f-bc28-4484-a768-5f2a22233b3a", "created": "2026-10-09T15:13:09.097457Z", "modified": "2026-10-09T15:13:09.097457Z", "relationship_type": "indicates", "source_ref": "indicator--7142fb76-a24d-4ab3-bb05-b3f8f39f4050", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c4fe25-004b-40b3-81f5-718fdd08d656", "created": "2026-10-09T15:13:09.09758Z", "modified": "2026-10-09T15:13:09.09758Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='437940A417B58B1C2CDB85EDE4D37C3DE6EFDC95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.09758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ab74fad-9a07-4b32-be27-2357a0766e56", "created": "2026-10-09T15:13:09.098117Z", "modified": "2026-10-09T15:13:09.098117Z", "relationship_type": "indicates", "source_ref": "indicator--27c4fe25-004b-40b3-81f5-718fdd08d656", "target_ref": "malware--75be5e7e-24fa-4380-aff4-0cb85723ee5e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848", "created": "2026-10-09T15:13:09.098235Z", "modified": "2026-10-09T15:13:09.098235Z", "name": "EasyLogger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cb4c5f-cefe-42c0-b70b-96b205ac354c", "created": "2026-10-09T15:13:09.098365Z", "modified": "2026-10-09T15:13:09.098365Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='97.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.098365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72af98c5-c856-47c2-9250-376e9e77cee4", "created": "2026-10-09T15:13:09.098834Z", "modified": "2026-10-09T15:13:09.098834Z", "relationship_type": "indicates", "source_ref": "indicator--86cb4c5f-cefe-42c0-b70b-96b205ac354c", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95292152-ca3e-4c25-857d-3cf3528b35a4", "created": "2026-10-09T15:13:09.098956Z", "modified": "2026-10-09T15:13:09.098956Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.098956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6457478-2eb6-407a-8bb0-5b6f1d041268", "created": "2026-10-09T15:13:09.099436Z", "modified": "2026-10-09T15:13:09.099436Z", "relationship_type": "indicates", "source_ref": "indicator--95292152-ca3e-4c25-857d-3cf3528b35a4", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7721aa-0092-42b5-a73f-442371365092", "created": "2026-10-09T15:13:09.099557Z", "modified": "2026-10-09T15:13:09.099557Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.099557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6ff4eed-fbd9-481e-ba2a-19b357aa7b05", "created": "2026-10-09T15:13:09.100045Z", "modified": "2026-10-09T15:13:09.100045Z", "relationship_type": "indicates", "source_ref": "indicator--6b7721aa-0092-42b5-a73f-442371365092", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1488d06-84b4-454c-b27c-4526406732ae", "created": "2026-10-09T15:13:09.100163Z", "modified": "2026-10-09T15:13:09.100163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.100163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e0775fc-cb1e-41d6-9928-3d9ad085cd86", "created": "2026-10-09T15:13:09.100655Z", "modified": "2026-10-09T15:13:09.100655Z", "relationship_type": "indicates", "source_ref": "indicator--c1488d06-84b4-454c-b27c-4526406732ae", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6730efc-a2e4-416f-bc27-fbc95a6bf155", "created": "2026-10-09T15:13:09.100774Z", "modified": "2026-10-09T15:13:09.100774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.100774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf6eb9f0-2251-4eea-b985-ff52b0180b6b", "created": "2026-10-09T15:13:09.101248Z", "modified": "2026-10-09T15:13:09.101248Z", "relationship_type": "indicates", "source_ref": "indicator--d6730efc-a2e4-416f-bc27-fbc95a6bf155", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdd6c4e-9d85-479c-ab07-b17b2e7be7d8", "created": "2026-10-09T15:13:09.101381Z", "modified": "2026-10-09T15:13:09.101381Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta-api.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.101381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d89055f4-6e9b-4ac4-8b60-3ef211eb13e9", "created": "2026-10-09T15:13:09.101951Z", "modified": "2026-10-09T15:13:09.101951Z", "relationship_type": "indicates", "source_ref": "indicator--ecdd6c4e-9d85-479c-ab07-b17b2e7be7d8", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f21895d-c30e-4821-ab88-7d748496cb89", "created": "2026-10-09T15:13:09.102074Z", "modified": "2026-10-09T15:13:09.102074Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.102074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5040611-a890-4df6-b6cb-9722b66252ff", "created": "2026-10-09T15:13:09.102561Z", "modified": "2026-10-09T15:13:09.102561Z", "relationship_type": "indicates", "source_ref": "indicator--8f21895d-c30e-4821-ab88-7d748496cb89", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a840296c-20cd-4ac0-9a23-0b7fd7966b18", "created": "2026-10-09T15:13:09.102683Z", "modified": "2026-10-09T15:13:09.102683Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easyloggerbeta.azurewebsites.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.102683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9db80031-9fb8-4abf-acc9-b1d8f7d9d6ae", "created": "2026-10-09T15:13:09.103174Z", "modified": "2026-10-09T15:13:09.103174Z", "relationship_type": "indicates", "source_ref": "indicator--a840296c-20cd-4ac0-9a23-0b7fd7966b18", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d92c4b-8750-4055-84b8-27f4dea00878", "created": "2026-10-09T15:13:09.103309Z", "modified": "2026-10-09T15:13:09.103309Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='elcore-api.azurewebsites.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.103309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b36f244-ec61-4d36-8c35-0fa455c09c25", "created": "2026-10-09T15:13:09.10381Z", "modified": "2026-10-09T15:13:09.10381Z", "relationship_type": "indicates", "source_ref": "indicator--16d92c4b-8750-4055-84b8-27f4dea00878", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b226ee3-ca1d-4a05-be1c-f1711f223422", "created": "2026-10-09T15:13:09.103938Z", "modified": "2026-10-09T15:13:09.103938Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='inv.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.103938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03e27298-1c40-4591-a6eb-3a3be46b212c", "created": "2026-10-09T15:13:09.104416Z", "modified": "2026-10-09T15:13:09.104416Z", "relationship_type": "indicates", "source_ref": "indicator--2b226ee3-ca1d-4a05-be1c-f1711f223422", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940aaf85-73bb-497c-871f-47d5728e933a", "created": "2026-10-09T15:13:09.104535Z", "modified": "2026-10-09T15:13:09.104535Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pro.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.104535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--834e06ab-1bdf-41cf-9b65-7527a772fe66", "created": "2026-10-09T15:13:09.104999Z", "modified": "2026-10-09T15:13:09.104999Z", "relationship_type": "indicates", "source_ref": "indicator--940aaf85-73bb-497c-871f-47d5728e933a", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c133b9b0-30a6-46a2-a8c9-b789dfd0e5dd", "created": "2026-10-09T15:13:09.105116Z", "modified": "2026-10-09T15:13:09.105116Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ps97mailer.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.105116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--885497af-d1d5-4449-862c-e271f79aa7f7", "created": "2026-10-09T15:13:09.105599Z", "modified": "2026-10-09T15:13:09.105599Z", "relationship_type": "indicates", "source_ref": "indicator--c133b9b0-30a6-46a2-a8c9-b789dfd0e5dd", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f953d35c-d455-44f2-9a3a-d49b5d0fd7af", "created": "2026-10-09T15:13:09.105719Z", "modified": "2026-10-09T15:13:09.105719Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pulsesolutions-net-easy-logger.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.105719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4548483a-4429-4827-bb05-29f2d6be31d5", "created": "2026-10-09T15:13:09.106227Z", "modified": "2026-10-09T15:13:09.106227Z", "relationship_type": "indicates", "source_ref": "indicator--f953d35c-d455-44f2-9a3a-d49b5d0fd7af", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395f5ca9-4052-4e2d-b439-05f22430cc41", "created": "2026-10-09T15:13:09.106366Z", "modified": "2026-10-09T15:13:09.106366Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sandbox97.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.106366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9be0ca25-5cc1-4fab-9314-e61b924667c9", "created": "2026-10-09T15:13:09.106865Z", "modified": "2026-10-09T15:13:09.106865Z", "relationship_type": "indicates", "source_ref": "indicator--395f5ca9-4052-4e2d-b439-05f22430cc41", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c561033-4910-4f6e-9242-b43fffcec02e", "created": "2026-10-09T15:13:09.106982Z", "modified": "2026-10-09T15:13:09.106982Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sandbox97.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.106982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdd320bf-1c62-407c-a2a7-f1e24e4b3247", "created": "2026-10-09T15:13:09.107471Z", "modified": "2026-10-09T15:13:09.107471Z", "relationship_type": "indicates", "source_ref": "indicator--6c561033-4910-4f6e-9242-b43fffcec02e", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f511cc4b-89c3-4fbd-b96c-254fcc977421", "created": "2026-10-09T15:13:09.10759Z", "modified": "2026-10-09T15:13:09.10759Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sandbox97.seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.10759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b714d9de-6a58-435a-a7bd-cfe7b625e572", "created": "2026-10-09T15:13:09.108172Z", "modified": "2026-10-09T15:13:09.108172Z", "relationship_type": "indicates", "source_ref": "indicator--f511cc4b-89c3-4fbd-b96c-254fcc977421", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9faaa20-7a1c-41a8-8ede-2009878cfbcc", "created": "2026-10-09T15:13:09.108307Z", "modified": "2026-10-09T15:13:09.108307Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='senior-safety-189010.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.108307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8863fcf8-af78-4bb6-bfcc-f60b49ec1921", "created": "2026-10-09T15:13:09.108802Z", "modified": "2026-10-09T15:13:09.108802Z", "relationship_type": "indicates", "source_ref": "indicator--e9faaa20-7a1c-41a8-8ede-2009878cfbcc", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011e3014-bc9f-47ce-8263-ae7eaae49de1", "created": "2026-10-09T15:13:09.108928Z", "modified": "2026-10-09T15:13:09.108928Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='servicesloggermobi.azurewebsites.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.108928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f324d7d5-bd35-4350-b919-3ac3ad1962c2", "created": "2026-10-09T15:13:09.109433Z", "modified": "2026-10-09T15:13:09.109433Z", "relationship_type": "indicates", "source_ref": "indicator--011e3014-bc9f-47ce-8263-ae7eaae49de1", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d68a77a-b666-43d8-9896-158b8f24a7dc", "created": "2026-10-09T15:13:09.109554Z", "modified": "2026-10-09T15:13:09.109554Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='waws-prod-blu-247-e7b3.eastus.cloudapp.azure.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.109554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fafd0bd4-8c30-4228-a301-62dfb8c3188c", "created": "2026-10-09T15:13:09.110058Z", "modified": "2026-10-09T15:13:09.110058Z", "relationship_type": "indicates", "source_ref": "indicator--6d68a77a-b666-43d8-9896-158b8f24a7dc", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3931cf50-b989-4589-bff8-7678cded31a7", "created": "2026-10-09T15:13:09.110174Z", "modified": "2026-10-09T15:13:09.110174Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='waws-prod-blu-247.sip.azurewebsites.windows.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.110174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47cc0f63-27d5-400d-af4e-3235ae470de5", "created": "2026-10-09T15:13:09.110694Z", "modified": "2026-10-09T15:13:09.110694Z", "relationship_type": "indicates", "source_ref": "indicator--3931cf50-b989-4589-bff8-7678cded31a7", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8779c41c-b3a3-43e2-80be-863da1a8e1b6", "created": "2026-10-09T15:13:09.110814Z", "modified": "2026-10-09T15:13:09.110814Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.110814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70aab07b-8d4b-4a23-b663-4f31eec5ca97", "created": "2026-10-09T15:13:09.111296Z", "modified": "2026-10-09T15:13:09.111296Z", "relationship_type": "indicates", "source_ref": "indicator--8779c41c-b3a3-43e2-80be-863da1a8e1b6", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e15bff4-8618-40c1-97ef-4314ce1db92e", "created": "2026-10-09T15:13:09.111417Z", "modified": "2026-10-09T15:13:09.111417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.111417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a73fa181-c4f2-4186-a796-35b45b8a3920", "created": "2026-10-09T15:13:09.111898Z", "modified": "2026-10-09T15:13:09.111898Z", "relationship_type": "indicates", "source_ref": "indicator--5e15bff4-8618-40c1-97ef-4314ce1db92e", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a722ef-21f7-4d24-98df-4536657e11b8", "created": "2026-10-09T15:13:09.112018Z", "modified": "2026-10-09T15:13:09.112018Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.112018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3eb6f31-eebf-44be-bfe5-f7c471a8fbbb", "created": "2026-10-09T15:13:09.112499Z", "modified": "2026-10-09T15:13:09.112499Z", "relationship_type": "indicates", "source_ref": "indicator--16a722ef-21f7-4d24-98df-4536657e11b8", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6caec0d-3fd8-41a4-b3bc-15b1ae940a4b", "created": "2026-10-09T15:13:09.112621Z", "modified": "2026-10-09T15:13:09.112621Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.112621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--029535d7-639d-42d4-8a82-f0d5020987f2", "created": "2026-10-09T15:13:09.11311Z", "modified": "2026-10-09T15:13:09.11311Z", "relationship_type": "indicates", "source_ref": "indicator--d6caec0d-3fd8-41a4-b3bc-15b1ae940a4b", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398ffa7b-b4c1-454b-b50b-118a26db7c54", "created": "2026-10-09T15:13:09.113227Z", "modified": "2026-10-09T15:13:09.113227Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.113227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a7640d3-1696-41ec-9e41-7e63e8dc4de3", "created": "2026-10-09T15:13:09.113823Z", "modified": "2026-10-09T15:13:09.113823Z", "relationship_type": "indicates", "source_ref": "indicator--398ffa7b-b4c1-454b-b50b-118a26db7c54", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e69b715-6887-42fa-98e1-d83c40c67038", "created": "2026-10-09T15:13:09.113944Z", "modified": "2026-10-09T15:13:09.113944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='inv.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.113944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dca7d0a3-9af4-41b8-9da2-3fcd0ffa5af3", "created": "2026-10-09T15:13:09.114423Z", "modified": "2026-10-09T15:13:09.114423Z", "relationship_type": "indicates", "source_ref": "indicator--7e69b715-6887-42fa-98e1-d83c40c67038", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945691fc-f6be-45e8-9565-b45807d47fb7", "created": "2026-10-09T15:13:09.114548Z", "modified": "2026-10-09T15:13:09.114548Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pro.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.114548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--421b69aa-1b03-4c3f-a67b-b8145331b9a6", "created": "2026-10-09T15:13:09.115022Z", "modified": "2026-10-09T15:13:09.115022Z", "relationship_type": "indicates", "source_ref": "indicator--945691fc-f6be-45e8-9565-b45807d47fb7", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183aed55-d5f9-40b3-83bf-85cb2e539143", "created": "2026-10-09T15:13:09.115142Z", "modified": "2026-10-09T15:13:09.115142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='354b5dcbd4ca6e3281e1584ab15b92a2e79b3f33cf791a01803d9045de022a87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.115142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8434bd96-d385-4325-b178-06a2a17272c1", "created": "2026-10-09T15:13:09.115746Z", "modified": "2026-10-09T15:13:09.115746Z", "relationship_type": "indicates", "source_ref": "indicator--183aed55-d5f9-40b3-83bf-85cb2e539143", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb5dc89-8762-40d7-9da0-3b15831c84e3", "created": "2026-10-09T15:13:09.115872Z", "modified": "2026-10-09T15:13:09.115872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='411788a467aa79c387f1f1f6a1977f4d053b5d512e7304d1a09bc6cc331a0291']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.115872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5f089e7-38b9-4f01-9310-7d982f903bc8", "created": "2026-10-09T15:13:09.116475Z", "modified": "2026-10-09T15:13:09.116475Z", "relationship_type": "indicates", "source_ref": "indicator--4bb5dc89-8762-40d7-9da0-3b15831c84e3", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b419fc4-969b-4f0e-8611-e9e7b922e26f", "created": "2026-10-09T15:13:09.116598Z", "modified": "2026-10-09T15:13:09.116598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1373c0b0e89b895bba9d86c720f715419a98e4047c12ab6c68dc1dcbfdc7f62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.116598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--205dff8b-b66a-496a-9a2e-3e1e4adb994c", "created": "2026-10-09T15:13:09.117189Z", "modified": "2026-10-09T15:13:09.117189Z", "relationship_type": "indicates", "source_ref": "indicator--0b419fc4-969b-4f0e-8611-e9e7b922e26f", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0684a0-a80a-48e7-aec7-38867074da2d", "created": "2026-10-09T15:13:09.117326Z", "modified": "2026-10-09T15:13:09.117326Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='289ce92449f253dd853338ffe9172bc66afd757d88f19c28375709bd869644e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.117326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43dab2f3-9c2b-475a-b67c-6e6975dc14c1", "created": "2026-10-09T15:13:09.117917Z", "modified": "2026-10-09T15:13:09.117917Z", "relationship_type": "indicates", "source_ref": "indicator--eb0684a0-a80a-48e7-aec7-38867074da2d", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0939dc19-94d9-4776-9f1b-df1943b8513f", "created": "2026-10-09T15:13:09.118042Z", "modified": "2026-10-09T15:13:09.118042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c6d461732dfb332e6043d6ffcd364d03cd8b30980b4afa67d0ed1477d2ab9da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.118042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--419c45e9-bedc-4f28-a022-46be87e2284a", "created": "2026-10-09T15:13:09.118641Z", "modified": "2026-10-09T15:13:09.118641Z", "relationship_type": "indicates", "source_ref": "indicator--0939dc19-94d9-4776-9f1b-df1943b8513f", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e54e94-e2ec-43f7-a56c-a223ba3ab062", "created": "2026-10-09T15:13:09.118763Z", "modified": "2026-10-09T15:13:09.118763Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e48e0a6c56c655cb8027e3b7c405c5521f6867bc4835eeea6bfb2da13aecd5b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.118763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c397aa6d-55ea-488a-b0b7-0028a7566180", "created": "2026-10-09T15:13:09.119365Z", "modified": "2026-10-09T15:13:09.119365Z", "relationship_type": "indicates", "source_ref": "indicator--67e54e94-e2ec-43f7-a56c-a223ba3ab062", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e28557d-b7df-4b6b-9c2c-0492b261f9cc", "created": "2026-10-09T15:13:09.119489Z", "modified": "2026-10-09T15:13:09.119489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9139a94cc8faf55427974883ac4c75aa7e010257ffc673eee9381c3db0b14744']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.119489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95979990-f3f4-425f-aac6-218a380c989a", "created": "2026-10-09T15:13:09.12019Z", "modified": "2026-10-09T15:13:09.12019Z", "relationship_type": "indicates", "source_ref": "indicator--8e28557d-b7df-4b6b-9c2c-0492b261f9cc", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6b1039-4b65-46eb-a4c0-0119459c0f31", "created": "2026-10-09T15:13:09.120328Z", "modified": "2026-10-09T15:13:09.120328Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8ba451b2aead09660235de21d2361575839be51d14f974ff71b4e74c944467e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.120328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a84d69f3-2b67-4ccd-a55e-f0908e65dc9a", "created": "2026-10-09T15:13:09.120918Z", "modified": "2026-10-09T15:13:09.120918Z", "relationship_type": "indicates", "source_ref": "indicator--2f6b1039-4b65-46eb-a4c0-0119459c0f31", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939fbb8d-17ce-4b58-a19d-1311009aaf60", "created": "2026-10-09T15:13:09.121039Z", "modified": "2026-10-09T15:13:09.121039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00bd13864abccee1f8c781cd92dbd438acdefde5c7b33b2be7572e3491859692']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.121039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1337a006-0fe6-49e5-8d7a-774c7546e254", "created": "2026-10-09T15:13:09.121634Z", "modified": "2026-10-09T15:13:09.121634Z", "relationship_type": "indicates", "source_ref": "indicator--939fbb8d-17ce-4b58-a19d-1311009aaf60", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8b6253-76fb-449a-9468-5dabe18dc257", "created": "2026-10-09T15:13:09.121758Z", "modified": "2026-10-09T15:13:09.121758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e76c4e421558f4dea735a845bbedd1524846263d806a992a3154926f7f95c914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.121758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e59b96b-ec17-4565-a284-2965e52c81ad", "created": "2026-10-09T15:13:09.122357Z", "modified": "2026-10-09T15:13:09.122357Z", "relationship_type": "indicates", "source_ref": "indicator--4c8b6253-76fb-449a-9468-5dabe18dc257", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2faadccb-46b3-4c87-940d-580f4888c5dc", "created": "2026-10-09T15:13:09.122482Z", "modified": "2026-10-09T15:13:09.122482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e24bfc5adb0c77b7c773348da561a2600d3eecfffb4428c027ff6fa8652aec22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.122482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4933687d-d962-4131-a759-246f9116706e", "created": "2026-10-09T15:13:09.123071Z", "modified": "2026-10-09T15:13:09.123071Z", "relationship_type": "indicates", "source_ref": "indicator--2faadccb-46b3-4c87-940d-580f4888c5dc", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d7b7842-29a8-4f26-898b-6a42f122da5d", "created": "2026-10-09T15:13:09.12319Z", "modified": "2026-10-09T15:13:09.12319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bfd7fbb09425ea712c2123ff051d9b3b1b4011ee2a1d2eee612d68f193d1836']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.12319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13ac3030-a088-4bef-b66a-e30d241908ab", "created": "2026-10-09T15:13:09.123794Z", "modified": "2026-10-09T15:13:09.123794Z", "relationship_type": "indicates", "source_ref": "indicator--9d7b7842-29a8-4f26-898b-6a42f122da5d", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cb102c-0777-4686-9366-a2d9330ef2ad", "created": "2026-10-09T15:13:09.123915Z", "modified": "2026-10-09T15:13:09.123915Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f01fb1f694ae7133710ad9ef725808d2dd4fd73cccf98be9c70644767c1fab2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.123915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--227e4f1d-ec2d-4ad2-9dea-12e195f602ae", "created": "2026-10-09T15:13:09.124517Z", "modified": "2026-10-09T15:13:09.124517Z", "relationship_type": "indicates", "source_ref": "indicator--02cb102c-0777-4686-9366-a2d9330ef2ad", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db14be1-8973-4991-9407-d1c04f8d8eb6", "created": "2026-10-09T15:13:09.124639Z", "modified": "2026-10-09T15:13:09.124639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9f8a542a3ba6e9ec9fb5ec6c79e6c0aa98bafed1b44df55aab16b40a0625fd3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.124639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98e7eeaa-9162-4690-bd93-77d65aed7922", "created": "2026-10-09T15:13:09.125226Z", "modified": "2026-10-09T15:13:09.125226Z", "relationship_type": "indicates", "source_ref": "indicator--8db14be1-8973-4991-9407-d1c04f8d8eb6", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc02a61-c4b3-4a11-861b-73e8cf7127e5", "created": "2026-10-09T15:13:09.125359Z", "modified": "2026-10-09T15:13:09.125359Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d9d78cc88d322195395dbc3667cb8fdfdbecf3c9bd55917ebf885376e6663829']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.125359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7f342ee-5ee6-4e2e-a30e-f259f9f3a71b", "created": "2026-10-09T15:13:09.125948Z", "modified": "2026-10-09T15:13:09.125948Z", "relationship_type": "indicates", "source_ref": "indicator--0fc02a61-c4b3-4a11-861b-73e8cf7127e5", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8879b09d-44e6-46a4-8f4b-f42833bd5139", "created": "2026-10-09T15:13:09.126066Z", "modified": "2026-10-09T15:13:09.126066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d919252d2e7f7430c647bfb37ebf073ff1cc0934b1530de0a664f7a01563c69f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.126066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ddcf4b7-acad-4f0a-98de-8f93e3de37d9", "created": "2026-10-09T15:13:09.126776Z", "modified": "2026-10-09T15:13:09.126776Z", "relationship_type": "indicates", "source_ref": "indicator--8879b09d-44e6-46a4-8f4b-f42833bd5139", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739cff47-e9c6-4b7c-b485-0416ffc26b42", "created": "2026-10-09T15:13:09.126906Z", "modified": "2026-10-09T15:13:09.126906Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='389a112d584290bd70fb929fc73135c3c06c21c315d0175315235f3697b23e2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.126906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca8a6faf-e9b4-4990-9da3-4469ccc55087", "created": "2026-10-09T15:13:09.127503Z", "modified": "2026-10-09T15:13:09.127503Z", "relationship_type": "indicates", "source_ref": "indicator--739cff47-e9c6-4b7c-b485-0416ffc26b42", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463cd1e4-d8e7-445b-bc0c-874221514ded", "created": "2026-10-09T15:13:09.127625Z", "modified": "2026-10-09T15:13:09.127625Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbeea229410935271c3c957fc5488072e666ed29515bbffb4e08e39dd169077a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.127625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afe25d25-5b72-4335-a071-38b4566c2a12", "created": "2026-10-09T15:13:09.128206Z", "modified": "2026-10-09T15:13:09.128206Z", "relationship_type": "indicates", "source_ref": "indicator--463cd1e4-d8e7-445b-bc0c-874221514ded", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eeb990-1879-4cbc-a052-152ab9a7b10c", "created": "2026-10-09T15:13:09.128338Z", "modified": "2026-10-09T15:13:09.128338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29f8127cd10082ff0254141ec7f327da46c24843e3108fccf8762b208228868f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.128338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e8dc9f4-5282-463a-bf9f-3d5adf454111", "created": "2026-10-09T15:13:09.128924Z", "modified": "2026-10-09T15:13:09.128924Z", "relationship_type": "indicates", "source_ref": "indicator--b7eeb990-1879-4cbc-a052-152ab9a7b10c", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a34ec9-5a5b-45fc-a152-8b1d94f74996", "created": "2026-10-09T15:13:09.129044Z", "modified": "2026-10-09T15:13:09.129044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18e3249eda93d29928a847508546450cd2ec56054e19bfe34ac21aba2392b7ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.129044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76c2a591-769d-464b-ba09-5ce897ecc15d", "created": "2026-10-09T15:13:09.129642Z", "modified": "2026-10-09T15:13:09.129642Z", "relationship_type": "indicates", "source_ref": "indicator--52a34ec9-5a5b-45fc-a152-8b1d94f74996", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b671858-6705-48e7-ae95-45c4a13229f3", "created": "2026-10-09T15:13:09.129764Z", "modified": "2026-10-09T15:13:09.129764Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9af1d9d0c13acfdc4de301f49423954022dffe00b9e1139392ea907e1ae5135f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.129764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--101e8cef-9bc1-48d8-b52e-1328788e371d", "created": "2026-10-09T15:13:09.130365Z", "modified": "2026-10-09T15:13:09.130365Z", "relationship_type": "indicates", "source_ref": "indicator--9b671858-6705-48e7-ae95-45c4a13229f3", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fbfaf9-f42a-4424-a640-73a73a9fdef7", "created": "2026-10-09T15:13:09.130485Z", "modified": "2026-10-09T15:13:09.130485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e1ececaf9ee86e31dcd9772637304b314be6e45563d7de1db915e4896173400']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.130485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a56cef7c-c6d4-4a4f-acb7-6372235fa9b3", "created": "2026-10-09T15:13:09.131074Z", "modified": "2026-10-09T15:13:09.131074Z", "relationship_type": "indicates", "source_ref": "indicator--67fbfaf9-f42a-4424-a640-73a73a9fdef7", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb8b14f-0160-41bf-8ba5-dde7983b5313", "created": "2026-10-09T15:13:09.131193Z", "modified": "2026-10-09T15:13:09.131193Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66e5fdd27e3e9854385af877179ff9573db9d29927582cd40f19f364cb1b681e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.131193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c26ee598-9207-480e-b47b-8b3da3d4ecc4", "created": "2026-10-09T15:13:09.131795Z", "modified": "2026-10-09T15:13:09.131795Z", "relationship_type": "indicates", "source_ref": "indicator--1bb8b14f-0160-41bf-8ba5-dde7983b5313", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c6e082-8355-4b0c-9699-2ecc72fa0240", "created": "2026-10-09T15:13:09.131917Z", "modified": "2026-10-09T15:13:09.131917Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c9504d0ce1395de79b30d5cb40f621a648ce218129e998c398fd44956df4b39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.131917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e0eb5c0-5bb2-4cb2-a374-a85bcaa47ff6", "created": "2026-10-09T15:13:09.13264Z", "modified": "2026-10-09T15:13:09.13264Z", "relationship_type": "indicates", "source_ref": "indicator--a0c6e082-8355-4b0c-9699-2ecc72fa0240", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c6570c-68a5-4dd9-b361-483c9213eb95", "created": "2026-10-09T15:13:09.132771Z", "modified": "2026-10-09T15:13:09.132771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3d8f0861e78c1f6907f5d4847f3e04f294fbc8e22bf90311da73c3decdd4226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.132771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f41e7ee4-2eab-4528-a490-03cfdc5b7ef3", "created": "2026-10-09T15:13:09.133378Z", "modified": "2026-10-09T15:13:09.133378Z", "relationship_type": "indicates", "source_ref": "indicator--e6c6570c-68a5-4dd9-b361-483c9213eb95", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676b0468-760d-45c8-92f3-a69806f1f8a6", "created": "2026-10-09T15:13:09.133502Z", "modified": "2026-10-09T15:13:09.133502Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fb2298f86314ec2f6a9576dfde72e8c04c1f043eec062c0ef6b5488401ffae5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.133502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbb50c93-e292-400f-a35c-f4e56dbf1486", "created": "2026-10-09T15:13:09.13409Z", "modified": "2026-10-09T15:13:09.13409Z", "relationship_type": "indicates", "source_ref": "indicator--676b0468-760d-45c8-92f3-a69806f1f8a6", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901fe848-8fc5-42f9-9c9f-b6bfa0cfae7c", "created": "2026-10-09T15:13:09.134213Z", "modified": "2026-10-09T15:13:09.134213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36c4a03f3195fd0279afd6760797348a07478a0522e6556dabb6e6e925a928d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.134213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--843bbd96-7367-4095-b0ad-a7ade4620815", "created": "2026-10-09T15:13:09.134817Z", "modified": "2026-10-09T15:13:09.134817Z", "relationship_type": "indicates", "source_ref": "indicator--901fe848-8fc5-42f9-9c9f-b6bfa0cfae7c", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3f4dee-2095-467d-9585-d0c65179abfa", "created": "2026-10-09T15:13:09.134939Z", "modified": "2026-10-09T15:13:09.134939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='afadbc7afb73fb9b95d8209bce8441032ffdc1d2d636d957bc3bb54bdd89c71a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.134939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5603cdac-2d37-49e9-8f1f-d8b959192094", "created": "2026-10-09T15:13:09.135541Z", "modified": "2026-10-09T15:13:09.135541Z", "relationship_type": "indicates", "source_ref": "indicator--db3f4dee-2095-467d-9585-d0c65179abfa", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f3fa90-48a5-4723-b427-b558d9bda99a", "created": "2026-10-09T15:13:09.135662Z", "modified": "2026-10-09T15:13:09.135662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad4497491dd50c7dba63b557800c49fc3a16fe1f7ef6213df985b6e9c365daed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.135662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6e711bb-387a-4762-b3f9-3be3e795af20", "created": "2026-10-09T15:13:09.136241Z", "modified": "2026-10-09T15:13:09.136241Z", "relationship_type": "indicates", "source_ref": "indicator--68f3fa90-48a5-4723-b427-b558d9bda99a", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9a7404-7504-413f-b8a9-865857a63702", "created": "2026-10-09T15:13:09.136378Z", "modified": "2026-10-09T15:13:09.136378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e5e309f9ad7954ba2a6ec25badac9ebbd82ead4e553a6928d6d4cce60b713138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.136378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a8c1c65-6988-4337-bfad-8325c295b52a", "created": "2026-10-09T15:13:09.136972Z", "modified": "2026-10-09T15:13:09.136972Z", "relationship_type": "indicates", "source_ref": "indicator--9f9a7404-7504-413f-b8a9-865857a63702", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d823d9da-75f8-491b-9dde-4261df8e3af8", "created": "2026-10-09T15:13:09.137095Z", "modified": "2026-10-09T15:13:09.137095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6051aa1995cb631183b037893b0da787eb2ffdddd2b1b4327fcd6f8306e4354e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.137095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f83ebca2-89e0-43de-94aa-06a1eeeef62a", "created": "2026-10-09T15:13:09.13769Z", "modified": "2026-10-09T15:13:09.13769Z", "relationship_type": "indicates", "source_ref": "indicator--d823d9da-75f8-491b-9dde-4261df8e3af8", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07956fc2-3349-4ee7-93e5-f500c58f0996", "created": "2026-10-09T15:13:09.137808Z", "modified": "2026-10-09T15:13:09.137808Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6aaceba978bf1178e0f26310b7842c279ac6497a1abf259c99e1c83d9800c9bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.137808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9683679c-b02a-44bc-94ca-ddfdbcc30560", "created": "2026-10-09T15:13:09.138395Z", "modified": "2026-10-09T15:13:09.138395Z", "relationship_type": "indicates", "source_ref": "indicator--07956fc2-3349-4ee7-93e5-f500c58f0996", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6699cf-3a19-4521-9f4c-46a9ae71b0b3", "created": "2026-10-09T15:13:09.138514Z", "modified": "2026-10-09T15:13:09.138514Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d6df3a8bd15ee450294b011abfd7c85b4129e4866d57b09c9bbd3977f5ae5a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.138514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f9b845d-96a4-4886-80d3-0f18ad7fb944", "created": "2026-10-09T15:13:09.139198Z", "modified": "2026-10-09T15:13:09.139198Z", "relationship_type": "indicates", "source_ref": "indicator--7f6699cf-3a19-4521-9f4c-46a9ae71b0b3", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646145c8-c957-4459-b2b8-590209a59450", "created": "2026-10-09T15:13:09.139339Z", "modified": "2026-10-09T15:13:09.139339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93976fde3c9acefd4707bac5f2bc2d29b55db0deee66a27b7b38301278060f6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.139339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86508fd6-e7a8-41b8-a283-5686ab893a09", "created": "2026-10-09T15:13:09.139935Z", "modified": "2026-10-09T15:13:09.139935Z", "relationship_type": "indicates", "source_ref": "indicator--646145c8-c957-4459-b2b8-590209a59450", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bea5cf5-8354-406c-a25c-4124691d2b86", "created": "2026-10-09T15:13:09.140058Z", "modified": "2026-10-09T15:13:09.140058Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17fdeaaac973b0802caf128f876ec30faefb1341c5050de284709c035759fc22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.140058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1621b388-eb91-4e26-933b-d06b0afd86e5", "created": "2026-10-09T15:13:09.14065Z", "modified": "2026-10-09T15:13:09.14065Z", "relationship_type": "indicates", "source_ref": "indicator--1bea5cf5-8354-406c-a25c-4124691d2b86", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cda20ef-e1dd-4b95-a357-745a843f7c49", "created": "2026-10-09T15:13:09.14077Z", "modified": "2026-10-09T15:13:09.14077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8ba96349a9c2be3e198256a6b0dd803435d919770cf0db7541fba4f8387c3cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.14077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae8384fd-e67f-4f9e-9507-4f8bbd94f2fd", "created": "2026-10-09T15:13:09.141357Z", "modified": "2026-10-09T15:13:09.141357Z", "relationship_type": "indicates", "source_ref": "indicator--0cda20ef-e1dd-4b95-a357-745a843f7c49", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9421ba39-224c-4bef-a437-a0facfeb13f7", "created": "2026-10-09T15:13:09.141477Z", "modified": "2026-10-09T15:13:09.141477Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0a79a098bc718e2c67db89d0a37b7247ec2fcfcdd35d14bd8c3fd2f72d482fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.141477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4110dfd8-39b5-4e74-a5dd-91ea41064b2f", "created": "2026-10-09T15:13:09.142065Z", "modified": "2026-10-09T15:13:09.142065Z", "relationship_type": "indicates", "source_ref": "indicator--9421ba39-224c-4bef-a437-a0facfeb13f7", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f86a7d-5f1f-494d-9cd7-9967721318f6", "created": "2026-10-09T15:13:09.142184Z", "modified": "2026-10-09T15:13:09.142184Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ed2ec205d1a492b2846a65d4202bb6943e09165cf145d93a8fd18bc0421d38b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.142184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edc11ac4-9a71-4ff0-895e-5e34fbaaa9f1", "created": "2026-10-09T15:13:09.142777Z", "modified": "2026-10-09T15:13:09.142777Z", "relationship_type": "indicates", "source_ref": "indicator--03f86a7d-5f1f-494d-9cd7-9967721318f6", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17a75b5-417c-4f7b-9a64-f0248e088155", "created": "2026-10-09T15:13:09.142897Z", "modified": "2026-10-09T15:13:09.142897Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='282924a246f2962e42afaa8b2dee0b49989e0e88c1aabd8387176661aabca07a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.142897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e8849b0-24f8-4958-b1e3-566397091e1f", "created": "2026-10-09T15:13:09.143494Z", "modified": "2026-10-09T15:13:09.143494Z", "relationship_type": "indicates", "source_ref": "indicator--c17a75b5-417c-4f7b-9a64-f0248e088155", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a393d9-0003-4585-afb4-349996cbec6f", "created": "2026-10-09T15:13:09.143617Z", "modified": "2026-10-09T15:13:09.143617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f328a85b096ed6aac67720332c06e224ce01e422a13090bd885a7af162bf825']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.143617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ff344c2-97ee-4c18-954f-b57ea6de0257", "created": "2026-10-09T15:13:09.144205Z", "modified": "2026-10-09T15:13:09.144205Z", "relationship_type": "indicates", "source_ref": "indicator--a2a393d9-0003-4585-afb4-349996cbec6f", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9211ab18-11c9-4fbb-b961-0e3c75b584bb", "created": "2026-10-09T15:13:09.144335Z", "modified": "2026-10-09T15:13:09.144335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0980b9d5a8b4ed687738ccb9ecd39b40baf85e28e75f926494907d5d0c10907e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.144335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84d9a420-2ae9-4bc6-b63c-9287bd8e9aa2", "created": "2026-10-09T15:13:09.144921Z", "modified": "2026-10-09T15:13:09.144921Z", "relationship_type": "indicates", "source_ref": "indicator--9211ab18-11c9-4fbb-b961-0e3c75b584bb", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d65027-6032-43f0-9234-d306c00a7cf9", "created": "2026-10-09T15:13:09.145041Z", "modified": "2026-10-09T15:13:09.145041Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='972550785e90d4829e60bac4cd76c8cbf1edb3e2b246c13719d0331be14c0b95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.145041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54757d25-18f6-4f3b-9657-3e850189d436", "created": "2026-10-09T15:13:09.145736Z", "modified": "2026-10-09T15:13:09.145736Z", "relationship_type": "indicates", "source_ref": "indicator--a5d65027-6032-43f0-9234-d306c00a7cf9", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40bb044-293d-4871-90e3-0cf4fb62f8de", "created": "2026-10-09T15:13:09.14586Z", "modified": "2026-10-09T15:13:09.14586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09aa8f60b4fc67f24c1a97568e2d385dddf40c4307ad59df06c812129e677a33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.14586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38c688e6-e6be-47e8-bb3a-e86a8bfd3937", "created": "2026-10-09T15:13:09.146453Z", "modified": "2026-10-09T15:13:09.146453Z", "relationship_type": "indicates", "source_ref": "indicator--a40bb044-293d-4871-90e3-0cf4fb62f8de", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92e913e-9895-4360-bfcd-274bef1e2f50", "created": "2026-10-09T15:13:09.146574Z", "modified": "2026-10-09T15:13:09.146574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61c7f52d3fedb428288b8c949a05b8301c5c2e6fbdf43848220e950086598b8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.146574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e10b6caa-8b8f-40b1-b30f-e91406a6b506", "created": "2026-10-09T15:13:09.147152Z", "modified": "2026-10-09T15:13:09.147152Z", "relationship_type": "indicates", "source_ref": "indicator--f92e913e-9895-4360-bfcd-274bef1e2f50", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01e67fb-97b4-4559-8839-2de4cccf5643", "created": "2026-10-09T15:13:09.147281Z", "modified": "2026-10-09T15:13:09.147281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7f60ce4e1ddde8dc7f866b17067ef1ff337f4073edb052fe5fa68a759276003']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.147281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5109c9e1-8ad3-4422-90ac-1ebd346d3bdf", "created": "2026-10-09T15:13:09.147863Z", "modified": "2026-10-09T15:13:09.147863Z", "relationship_type": "indicates", "source_ref": "indicator--c01e67fb-97b4-4559-8839-2de4cccf5643", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71bbf956-0856-4b80-9621-5714c11f296a", "created": "2026-10-09T15:13:09.147981Z", "modified": "2026-10-09T15:13:09.147981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32dd7e9982153978a5887d618ed2fcc752d00613fde0289a4871eade2cbb4674']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.147981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48b84c30-c7f5-4066-ac99-5fd21f91b99e", "created": "2026-10-09T15:13:09.148575Z", "modified": "2026-10-09T15:13:09.148575Z", "relationship_type": "indicates", "source_ref": "indicator--71bbf956-0856-4b80-9621-5714c11f296a", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b57f0b-0976-4ed4-9094-f886fc2d06fc", "created": "2026-10-09T15:13:09.148697Z", "modified": "2026-10-09T15:13:09.148697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffa2d012c4a9966d4ecc527c6c79d0292d2ef08e15d5190ac1b8419193457a1e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.148697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3bf29c0-89ef-435d-b577-a3448e2cb95f", "created": "2026-10-09T15:13:09.149288Z", "modified": "2026-10-09T15:13:09.149288Z", "relationship_type": "indicates", "source_ref": "indicator--d0b57f0b-0976-4ed4-9094-f886fc2d06fc", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3706c705-00eb-40f3-81dd-5c234e414083", "created": "2026-10-09T15:13:09.149408Z", "modified": "2026-10-09T15:13:09.149408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f944adb68c483acc7a30ef569d8d42fc52cab59a7b27f50d17434c359bd389c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.149408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdab4b05-d570-4de0-b84d-5aff8bb0a9a5", "created": "2026-10-09T15:13:09.149986Z", "modified": "2026-10-09T15:13:09.149986Z", "relationship_type": "indicates", "source_ref": "indicator--3706c705-00eb-40f3-81dd-5c234e414083", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c681b35a-6b94-4d50-8a0b-9b18957786b6", "created": "2026-10-09T15:13:09.150105Z", "modified": "2026-10-09T15:13:09.150105Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.EasyLogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.150105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5b20494-335c-484b-954d-6cdcb13b88f7", "created": "2026-10-09T15:13:09.150674Z", "modified": "2026-10-09T15:13:09.150674Z", "relationship_type": "indicates", "source_ref": "indicator--c681b35a-6b94-4d50-8a0b-9b18957786b6", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f1fd50d-a03d-4ebb-8ada-358f2a645a0e", "created": "2026-10-09T15:13:09.150798Z", "modified": "2026-10-09T15:13:09.150798Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.Easylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.150798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ba9d2d6-ea06-44f5-a5af-7895705fa067", "created": "2026-10-09T15:13:09.151377Z", "modified": "2026-10-09T15:13:09.151377Z", "relationship_type": "indicates", "source_ref": "indicator--8f1fd50d-a03d-4ebb-8ada-358f2a645a0e", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87998238-fbc2-45e6-84ba-bde8dbb44b5c", "created": "2026-10-09T15:13:09.151501Z", "modified": "2026-10-09T15:13:09.151501Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.Elogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.151501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1cc3e51-7759-47c2-8a4e-e796343eab13", "created": "2026-10-09T15:13:09.151948Z", "modified": "2026-10-09T15:13:09.151948Z", "relationship_type": "indicates", "source_ref": "indicator--87998238-fbc2-45e6-84ba-bde8dbb44b5c", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc282822-6827-4e10-8e25-fca349114eed", "created": "2026-10-09T15:13:09.152065Z", "modified": "2026-10-09T15:13:09.152065Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.childsafetytracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.152065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c62963a0-fc26-4383-b52f-50f8b1c21c52", "created": "2026-10-09T15:13:09.152528Z", "modified": "2026-10-09T15:13:09.152528Z", "relationship_type": "indicates", "source_ref": "indicator--fc282822-6827-4e10-8e25-fca349114eed", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987a4412-3861-4b78-affc-d4bef1b90ce3", "created": "2026-10-09T15:13:09.152648Z", "modified": "2026-10-09T15:13:09.152648Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.seniorsafety']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.152648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cfbf8c1-ec45-4809-ba1e-2ff7c5e596ca", "created": "2026-10-09T15:13:09.1531Z", "modified": "2026-10-09T15:13:09.1531Z", "relationship_type": "indicates", "source_ref": "indicator--987a4412-3861-4b78-affc-d4bef1b90ce3", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4ff24c-7a15-4878-98db-10345bb9fde5", "created": "2026-10-09T15:13:09.15322Z", "modified": "2026-10-09T15:13:09.15322Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='07906D1FA933730B8EB44F03910C88FDAC2C0135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.15322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4777bae6-10f2-4cf1-bbac-7cbe2435d299", "created": "2026-10-09T15:13:09.153773Z", "modified": "2026-10-09T15:13:09.153773Z", "relationship_type": "indicates", "source_ref": "indicator--aa4ff24c-7a15-4878-98db-10345bb9fde5", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8893ac3d-f048-471c-bad5-a35d975216bf", "created": "2026-10-09T15:13:09.153893Z", "modified": "2026-10-09T15:13:09.153893Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='24D3251C7A1184649211B9068820545397B112C9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.153893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--236e9056-2431-4290-9a80-82183f968003", "created": "2026-10-09T15:13:09.154437Z", "modified": "2026-10-09T15:13:09.154437Z", "relationship_type": "indicates", "source_ref": "indicator--8893ac3d-f048-471c-bad5-a35d975216bf", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffc9827-86bb-49c2-b53f-ee34d8b77344", "created": "2026-10-09T15:13:09.15456Z", "modified": "2026-10-09T15:13:09.15456Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35D7CF057BFA5023CE739A725ADA0DA1FD34D1FF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.15456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f36e3ae-6bd8-487a-b03e-732340381dc3", "created": "2026-10-09T15:13:09.155093Z", "modified": "2026-10-09T15:13:09.155093Z", "relationship_type": "indicates", "source_ref": "indicator--9ffc9827-86bb-49c2-b53f-ee34d8b77344", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9932a744-d1c5-4fcf-8592-3b24c874f744", "created": "2026-10-09T15:13:09.155209Z", "modified": "2026-10-09T15:13:09.155209Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8698564FBEC700167FCC53D1AED00FFADF6BED6C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.155209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05b1de6e-9658-4fe0-874a-1de3485545dc", "created": "2026-10-09T15:13:09.155767Z", "modified": "2026-10-09T15:13:09.155767Z", "relationship_type": "indicates", "source_ref": "indicator--9932a744-d1c5-4fcf-8592-3b24c874f744", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b823949d-c46d-40bd-8466-4a32771e2dce", "created": "2026-10-09T15:13:09.155905Z", "modified": "2026-10-09T15:13:09.155905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8F23E1457ADC6189F6ED504A60DF8896FEC6D970']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.155905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae24c5cc-d4e8-4447-808b-3475d2c2786f", "created": "2026-10-09T15:13:09.156467Z", "modified": "2026-10-09T15:13:09.156467Z", "relationship_type": "indicates", "source_ref": "indicator--b823949d-c46d-40bd-8466-4a32771e2dce", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f27de8f-a436-4804-af99-74b1ab260a0d", "created": "2026-10-09T15:13:09.156589Z", "modified": "2026-10-09T15:13:09.156589Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D15A276F181C839E0390672A43065E8D97F140E9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.156589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d65b1c3-d35d-4fdc-b20a-0f52e32d8862", "created": "2026-10-09T15:13:09.157225Z", "modified": "2026-10-09T15:13:09.157225Z", "relationship_type": "indicates", "source_ref": "indicator--1f27de8f-a436-4804-af99-74b1ab260a0d", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfddf49-bf74-4508-b0eb-8823a7a19a95", "created": "2026-10-09T15:13:09.157361Z", "modified": "2026-10-09T15:13:09.157361Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='53FADDAF873B7BD00E5AD9F5F05E7888A398CE70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.157361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--580b926c-2b11-4d90-8fc3-98aa6493cb87", "created": "2026-10-09T15:13:09.157911Z", "modified": "2026-10-09T15:13:09.157911Z", "relationship_type": "indicates", "source_ref": "indicator--3dfddf49-bf74-4508-b0eb-8823a7a19a95", "target_ref": "malware--8a8a0b2f-0f09-41a8-9374-a0c566dfc848"}, {"type": "malware", "spec_version": "2.1", "id": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31", "created": "2026-10-09T15:13:09.15803Z", "modified": "2026-10-09T15:13:09.15803Z", "name": "Hoverwatch", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08cf4f8-b999-49f8-8335-8f1dfaedb6f5", "created": "2026-10-09T15:13:09.15815Z", "modified": "2026-10-09T15:13:09.15815Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.15815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--869ed41a-f9cb-42c4-ba09-0908a393194b", "created": "2026-10-09T15:13:09.158617Z", "modified": "2026-10-09T15:13:09.158617Z", "relationship_type": "indicates", "source_ref": "indicator--d08cf4f8-b999-49f8-8335-8f1dfaedb6f5", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389ebc8d-547e-4269-b098-2811a88dce7b", "created": "2026-10-09T15:13:09.158737Z", "modified": "2026-10-09T15:13:09.158737Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.158737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d578bd9-3410-44a4-af9d-abac85ac0f8a", "created": "2026-10-09T15:13:09.159195Z", "modified": "2026-10-09T15:13:09.159195Z", "relationship_type": "indicates", "source_ref": "indicator--389ebc8d-547e-4269-b098-2811a88dce7b", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb19a1bb-607d-4bf2-816d-a4f2410b2ed3", "created": "2026-10-09T15:13:09.159328Z", "modified": "2026-10-09T15:13:09.159328Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.hwa.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.159328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab6bf72e-a996-474c-8392-633a2cf33c0c", "created": "2026-10-09T15:13:09.159785Z", "modified": "2026-10-09T15:13:09.159785Z", "relationship_type": "indicates", "source_ref": "indicator--bb19a1bb-607d-4bf2-816d-a4f2410b2ed3", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c171ff8c-ada3-4bce-ae6b-15fad3344c4f", "created": "2026-10-09T15:13:09.159911Z", "modified": "2026-10-09T15:13:09.159911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.159911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89fa35be-3555-4305-9f1a-e5f136dabf50", "created": "2026-10-09T15:13:09.160409Z", "modified": "2026-10-09T15:13:09.160409Z", "relationship_type": "indicates", "source_ref": "indicator--c171ff8c-ada3-4bce-ae6b-15fad3344c4f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87138b9-43f0-4a67-986b-f1fe3fd87042", "created": "2026-10-09T15:13:09.160529Z", "modified": "2026-10-09T15:13:09.160529Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.160529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9c8941d-46e4-496b-9e0f-00377636ca6a", "created": "2026-10-09T15:13:09.161005Z", "modified": "2026-10-09T15:13:09.161005Z", "relationship_type": "indicates", "source_ref": "indicator--c87138b9-43f0-4a67-986b-f1fe3fd87042", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd397ac2-624b-49b2-8e97-176f034201ac", "created": "2026-10-09T15:13:09.161121Z", "modified": "2026-10-09T15:13:09.161121Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev2.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.161121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80915bc1-b54c-40bc-9772-ba9506ad0aec", "created": "2026-10-09T15:13:09.161596Z", "modified": "2026-10-09T15:13:09.161596Z", "relationship_type": "indicates", "source_ref": "indicator--dd397ac2-624b-49b2-8e97-176f034201ac", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0b448e-0ca6-40c3-9e97-91b6ed8071de", "created": "2026-10-09T15:13:09.161719Z", "modified": "2026-10-09T15:13:09.161719Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='downloads.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.161719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--942fc7a1-babf-42ba-b7e0-72973abe2cb2", "created": "2026-10-09T15:13:09.162191Z", "modified": "2026-10-09T15:13:09.162191Z", "relationship_type": "indicates", "source_ref": "indicator--5b0b448e-0ca6-40c3-9e97-91b6ed8071de", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74f67e0-ea14-4bb8-8741-ce715dd0089d", "created": "2026-10-09T15:13:09.16234Z", "modified": "2026-10-09T15:13:09.16234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hover.watch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.16234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e42b422-b6e5-42f6-88b2-844ef7944a4e", "created": "2026-10-09T15:13:09.162902Z", "modified": "2026-10-09T15:13:09.162902Z", "relationship_type": "indicates", "source_ref": "indicator--d74f67e0-ea14-4bb8-8741-ce715dd0089d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb75e94-b11d-4c82-a7e2-2e53b841deca", "created": "2026-10-09T15:13:09.163029Z", "modified": "2026-10-09T15:13:09.163029Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.163029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25247623-ab4e-4c20-8ecf-485bc0fd20fc", "created": "2026-10-09T15:13:09.163511Z", "modified": "2026-10-09T15:13:09.163511Z", "relationship_type": "indicates", "source_ref": "indicator--3fb75e94-b11d-4c82-a7e2-2e53b841deca", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49ad7f4-8836-4787-b87e-09136b78d258", "created": "2026-10-09T15:13:09.163633Z", "modified": "2026-10-09T15:13:09.163633Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hwa.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.163633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3922b25c-162a-46ff-b1c5-c2dc227c1cee", "created": "2026-10-09T15:13:09.164087Z", "modified": "2026-10-09T15:13:09.164087Z", "relationship_type": "indicates", "source_ref": "indicator--c49ad7f4-8836-4787-b87e-09136b78d258", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5856f45c-c9b9-4ae9-82c9-e8d0521cfbb1", "created": "2026-10-09T15:13:09.164204Z", "modified": "2026-10-09T15:13:09.164204Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hwm.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.164204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48dc919e-65b8-4e4b-85cf-54672e632ec1", "created": "2026-10-09T15:13:09.164682Z", "modified": "2026-10-09T15:13:09.164682Z", "relationship_type": "indicates", "source_ref": "indicator--5856f45c-c9b9-4ae9-82c9-e8d0521cfbb1", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e43620-02d3-4fd0-b7b2-b1ad4a7c7009", "created": "2026-10-09T15:13:09.16481Z", "modified": "2026-10-09T15:13:09.16481Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hws.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.16481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05caef43-63b0-426f-a032-a06e27e2188a", "created": "2026-10-09T15:13:09.165262Z", "modified": "2026-10-09T15:13:09.165262Z", "relationship_type": "indicates", "source_ref": "indicator--c9e43620-02d3-4fd0-b7b2-b1ad4a7c7009", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7098022e-31f8-49e5-80fc-5e802e5acb21", "created": "2026-10-09T15:13:09.165392Z", "modified": "2026-10-09T15:13:09.165392Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hww.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.165392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c271a70-9e8b-49ac-8b48-5ad511edf216", "created": "2026-10-09T15:13:09.165853Z", "modified": "2026-10-09T15:13:09.165853Z", "relationship_type": "indicates", "source_ref": "indicator--7098022e-31f8-49e5-80fc-5e802e5acb21", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e95c3d7-fad0-4a13-9bea-a8a3d84d184d", "created": "2026-10-09T15:13:09.165974Z", "modified": "2026-10-09T15:13:09.165974Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.165974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4931dbd-c8aa-482f-a42b-7454990af666", "created": "2026-10-09T15:13:09.166459Z", "modified": "2026-10-09T15:13:09.166459Z", "relationship_type": "indicates", "source_ref": "indicator--7e95c3d7-fad0-4a13-9bea-a8a3d84d184d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5ad4f0-c347-466c-9cbc-27f3ee666e50", "created": "2026-10-09T15:13:09.166579Z", "modified": "2026-10-09T15:13:09.166579Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i1.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.166579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28a8fa52-f1e4-4fe6-995d-ffbad5d9d7bf", "created": "2026-10-09T15:13:09.167045Z", "modified": "2026-10-09T15:13:09.167045Z", "relationship_type": "indicates", "source_ref": "indicator--6a5ad4f0-c347-466c-9cbc-27f3ee666e50", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb15e30-4bc2-400e-a73c-e07ecea55cbe", "created": "2026-10-09T15:13:09.167162Z", "modified": "2026-10-09T15:13:09.167162Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='office.hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.167162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b000259-71c1-402f-b5c8-ed2ed9a2a6ab", "created": "2026-10-09T15:13:09.16765Z", "modified": "2026-10-09T15:13:09.16765Z", "relationship_type": "indicates", "source_ref": "indicator--deb15e30-4bc2-400e-a73c-e07ecea55cbe", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5dee89-b8d7-4a73-a655-325885de7d00", "created": "2026-10-09T15:13:09.167769Z", "modified": "2026-10-09T15:13:09.167769Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rec.hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.167769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32090873-515c-4af4-bfef-24c600c3f8ab", "created": "2026-10-09T15:13:09.168624Z", "modified": "2026-10-09T15:13:09.168624Z", "relationship_type": "indicates", "source_ref": "indicator--0f5dee89-b8d7-4a73-a655-325885de7d00", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c9d5b1-0311-4644-a4c6-3584a8e0b4ee", "created": "2026-10-09T15:13:09.168753Z", "modified": "2026-10-09T15:13:09.168753Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.168753Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--796412e6-2578-40bf-af7d-ae874ec3da8b", "created": "2026-10-09T15:13:09.169225Z", "modified": "2026-10-09T15:13:09.169225Z", "relationship_type": "indicates", "source_ref": "indicator--c2c9d5b1-0311-4644-a4c6-3584a8e0b4ee", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113bc242-2914-41de-bcea-477e1ec598bc", "created": "2026-10-09T15:13:09.169357Z", "modified": "2026-10-09T15:13:09.169357Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.syncvch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.169357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e8fe606-c69e-4124-a874-965a257108ad", "created": "2026-10-09T15:13:09.169825Z", "modified": "2026-10-09T15:13:09.169825Z", "relationship_type": "indicates", "source_ref": "indicator--113bc242-2914-41de-bcea-477e1ec598bc", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dcaebd-9709-4f4e-a153-62326ee8aca5", "created": "2026-10-09T15:13:09.169947Z", "modified": "2026-10-09T15:13:09.169947Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.169947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c7c35a1-09ec-4731-b694-221571e96635", "created": "2026-10-09T15:13:09.170424Z", "modified": "2026-10-09T15:13:09.170424Z", "relationship_type": "indicates", "source_ref": "indicator--48dcaebd-9709-4f4e-a153-62326ee8aca5", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37240d78-de94-4745-8b5d-cbb5f5f7aa31", "created": "2026-10-09T15:13:09.170545Z", "modified": "2026-10-09T15:13:09.170545Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='de.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.170545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d0d4729-7268-41da-9514-3110617d3d72", "created": "2026-10-09T15:13:09.171006Z", "modified": "2026-10-09T15:13:09.171006Z", "relationship_type": "indicates", "source_ref": "indicator--37240d78-de94-4745-8b5d-cbb5f5f7aa31", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf32cbe-c766-4ad9-88e7-76f7be0d134e", "created": "2026-10-09T15:13:09.171124Z", "modified": "2026-10-09T15:13:09.171124Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='es.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.171124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c003a4e7-36b2-487b-96e8-4d4469e4bcc1", "created": "2026-10-09T15:13:09.171603Z", "modified": "2026-10-09T15:13:09.171603Z", "relationship_type": "indicates", "source_ref": "indicator--fcf32cbe-c766-4ad9-88e7-76f7be0d134e", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6685204c-2e83-4f6b-a25f-d000a8282b00", "created": "2026-10-09T15:13:09.171723Z", "modified": "2026-10-09T15:13:09.171723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fr.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.171723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19dd9605-ee52-44b6-9ac9-f101d79fbcbb", "created": "2026-10-09T15:13:09.172179Z", "modified": "2026-10-09T15:13:09.172179Z", "relationship_type": "indicates", "source_ref": "indicator--6685204c-2e83-4f6b-a25f-d000a8282b00", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43ce5d5-6250-486a-9f3b-abf2e8751718", "created": "2026-10-09T15:13:09.172315Z", "modified": "2026-10-09T15:13:09.172315Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='highstermobi.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.172315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96b3e5ad-d53f-4d77-a2cf-f54d161cf879", "created": "2026-10-09T15:13:09.172807Z", "modified": "2026-10-09T15:13:09.172807Z", "relationship_type": "indicates", "source_ref": "indicator--d43ce5d5-6250-486a-9f3b-abf2e8751718", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22b7012-42fb-474f-aa96-8f55da9320b6", "created": "2026-10-09T15:13:09.172926Z", "modified": "2026-10-09T15:13:09.172926Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hover.watch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.172926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44c87693-08d5-4b1f-9d11-d90199b808db", "created": "2026-10-09T15:13:09.173402Z", "modified": "2026-10-09T15:13:09.173402Z", "relationship_type": "indicates", "source_ref": "indicator--a22b7012-42fb-474f-aa96-8f55da9320b6", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae88816-a727-4301-a5aa-5eaabfa88130", "created": "2026-10-09T15:13:09.173522Z", "modified": "2026-10-09T15:13:09.173522Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.173522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8dde238-db0a-4103-b704-c49ccde61763", "created": "2026-10-09T15:13:09.173991Z", "modified": "2026-10-09T15:13:09.173991Z", "relationship_type": "indicates", "source_ref": "indicator--eae88816-a727-4301-a5aa-5eaabfa88130", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9183f68d-2583-4e0f-b359-0fd295a4f360", "created": "2026-10-09T15:13:09.174109Z", "modified": "2026-10-09T15:13:09.174109Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hu.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.174109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fe24b85-1935-4312-a504-d2bd9f6053e8", "created": "2026-10-09T15:13:09.174691Z", "modified": "2026-10-09T15:13:09.174691Z", "relationship_type": "indicates", "source_ref": "indicator--9183f68d-2583-4e0f-b359-0fd295a4f360", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819e8a11-94f2-4b91-b0c8-8e433f6b81ef", "created": "2026-10-09T15:13:09.174813Z", "modified": "2026-10-09T15:13:09.174813Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hws.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.174813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a86f2fd1-5cbc-49c1-bcde-d8fbe0096609", "created": "2026-10-09T15:13:09.175282Z", "modified": "2026-10-09T15:13:09.175282Z", "relationship_type": "indicates", "source_ref": "indicator--819e8a11-94f2-4b91-b0c8-8e433f6b81ef", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf868d0-5e97-46b9-b07b-17159f7839ac", "created": "2026-10-09T15:13:09.175404Z", "modified": "2026-10-09T15:13:09.175404Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='it.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.175404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f77dd66-f610-4ee3-99ff-7099d99a9fa3", "created": "2026-10-09T15:13:09.175865Z", "modified": "2026-10-09T15:13:09.175865Z", "relationship_type": "indicates", "source_ref": "indicator--bcf868d0-5e97-46b9-b07b-17159f7839ac", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f35e6e-ade7-47d6-870f-794156ef7764", "created": "2026-10-09T15:13:09.175981Z", "modified": "2026-10-09T15:13:09.175981Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.hws.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.175981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--884344ae-ae5e-4d0a-adc6-90256815f462", "created": "2026-10-09T15:13:09.176445Z", "modified": "2026-10-09T15:13:09.176445Z", "relationship_type": "indicates", "source_ref": "indicator--78f35e6e-ade7-47d6-870f-794156ef7764", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8955cf33-7727-4ad1-86d8-b0b6ab57dc0e", "created": "2026-10-09T15:13:09.176564Z", "modified": "2026-10-09T15:13:09.176564Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nl.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.176564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dddb4cfd-dd77-4825-b122-131fc0f03992", "created": "2026-10-09T15:13:09.177028Z", "modified": "2026-10-09T15:13:09.177028Z", "relationship_type": "indicates", "source_ref": "indicator--8955cf33-7727-4ad1-86d8-b0b6ab57dc0e", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0ff9ef-a0da-4b96-ae0b-7c965d445ca4", "created": "2026-10-09T15:13:09.177151Z", "modified": "2026-10-09T15:13:09.177151Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prospybubble.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.177151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e841a127-805a-4447-a38d-3316be98f0c6", "created": "2026-10-09T15:13:09.177629Z", "modified": "2026-10-09T15:13:09.177629Z", "relationship_type": "indicates", "source_ref": "indicator--8d0ff9ef-a0da-4b96-ae0b-7c965d445ca4", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e12d4b5-b7b5-4302-9c79-174dd5e2e7e0", "created": "2026-10-09T15:13:09.177747Z", "modified": "2026-10-09T15:13:09.177747Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.177747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf633f95-a2fd-4961-9141-fdf33bb7cabf", "created": "2026-10-09T15:13:09.178214Z", "modified": "2026-10-09T15:13:09.178214Z", "relationship_type": "indicates", "source_ref": "indicator--7e12d4b5-b7b5-4302-9c79-174dd5e2e7e0", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69177636-2a13-4604-90c4-579853f61135", "created": "2026-10-09T15:13:09.178352Z", "modified": "2026-10-09T15:13:09.178352Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.178352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7bf5092-bb79-4b21-99e2-302343556d33", "created": "2026-10-09T15:13:09.178805Z", "modified": "2026-10-09T15:13:09.178805Z", "relationship_type": "indicates", "source_ref": "indicator--69177636-2a13-4604-90c4-579853f61135", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e2029-0f0b-42fd-8680-841904ec6b86", "created": "2026-10-09T15:13:09.17892Z", "modified": "2026-10-09T15:13:09.17892Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.17892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c576520-4e73-43f7-8b5b-9ab076f97a06", "created": "2026-10-09T15:13:09.179379Z", "modified": "2026-10-09T15:13:09.179379Z", "relationship_type": "indicates", "source_ref": "indicator--e46e2029-0f0b-42fd-8680-841904ec6b86", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05008b35-7aa2-43fc-b1ca-b86051e0ac93", "created": "2026-10-09T15:13:09.179498Z", "modified": "2026-10-09T15:13:09.179498Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.179498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7375ab08-40c5-4578-b25a-e2a7fbaacc2a", "created": "2026-10-09T15:13:09.180049Z", "modified": "2026-10-09T15:13:09.180049Z", "relationship_type": "indicates", "source_ref": "indicator--05008b35-7aa2-43fc-b1ca-b86051e0ac93", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40337690-fbf8-4f6d-9f5f-c1df0acdface", "created": "2026-10-09T15:13:09.180168Z", "modified": "2026-10-09T15:13:09.180168Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ro.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.180168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dbe8927-2075-4575-91e7-dbf3458e3943", "created": "2026-10-09T15:13:09.180647Z", "modified": "2026-10-09T15:13:09.180647Z", "relationship_type": "indicates", "source_ref": "indicator--40337690-fbf8-4f6d-9f5f-c1df0acdface", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96490220-93e1-467e-83cf-c038e496b9bf", "created": "2026-10-09T15:13:09.180771Z", "modified": "2026-10-09T15:13:09.180771Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.180771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0925e618-f5f8-447f-b339-75619552c066", "created": "2026-10-09T15:13:09.181241Z", "modified": "2026-10-09T15:13:09.181241Z", "relationship_type": "indicates", "source_ref": "indicator--96490220-93e1-467e-83cf-c038e496b9bf", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad714dbc-362c-4f54-bd14-66d5fda6ab86", "created": "2026-10-09T15:13:09.181374Z", "modified": "2026-10-09T15:13:09.181374Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.181374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1f78734-a021-42c5-8ef8-0f99557e278a", "created": "2026-10-09T15:13:09.181835Z", "modified": "2026-10-09T15:13:09.181835Z", "relationship_type": "indicates", "source_ref": "indicator--ad714dbc-362c-4f54-bd14-66d5fda6ab86", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58bb970-cd06-4acd-bcad-35067a2dea0e", "created": "2026-10-09T15:13:09.18196Z", "modified": "2026-10-09T15:13:09.18196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1357b95d5aee15bba6e5bb79ab3d064d9302d677f1150c81d108d1ac763d43a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.18196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--392bc02d-a180-4313-877d-e24507c95f11", "created": "2026-10-09T15:13:09.182559Z", "modified": "2026-10-09T15:13:09.182559Z", "relationship_type": "indicates", "source_ref": "indicator--b58bb970-cd06-4acd-bcad-35067a2dea0e", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301fbe88-8edc-4ac3-9e1f-4d24829d48fe", "created": "2026-10-09T15:13:09.182683Z", "modified": "2026-10-09T15:13:09.182683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c61b33f97ebe874e3ec161690ba3ea9e5aa941f17e02e79d4944adb62fd0853']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.182683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b1eb77d-1890-4519-82c0-2990b9ec920d", "created": "2026-10-09T15:13:09.183274Z", "modified": "2026-10-09T15:13:09.183274Z", "relationship_type": "indicates", "source_ref": "indicator--301fbe88-8edc-4ac3-9e1f-4d24829d48fe", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f970df69-5113-40f8-9d94-21747f87c6e2", "created": "2026-10-09T15:13:09.183396Z", "modified": "2026-10-09T15:13:09.183396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3091ea4ad98319d4129502465e6e8a01af1e3d39a1690cb0eee870909bafe01f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.183396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84b1d59b-1e73-4ae6-8b7c-a3e8d64b52b6", "created": "2026-10-09T15:13:09.183985Z", "modified": "2026-10-09T15:13:09.183985Z", "relationship_type": "indicates", "source_ref": "indicator--f970df69-5113-40f8-9d94-21747f87c6e2", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe81874b-5ba1-43d1-a192-ddf1d1cd3547", "created": "2026-10-09T15:13:09.184104Z", "modified": "2026-10-09T15:13:09.184104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50b4b3c76ae285c3562c6bf73752713ee7016f1ad8adeda77e72def340c6bac4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.184104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ca984d5-f905-4946-ade4-29f4f85e1198", "created": "2026-10-09T15:13:09.184692Z", "modified": "2026-10-09T15:13:09.184692Z", "relationship_type": "indicates", "source_ref": "indicator--fe81874b-5ba1-43d1-a192-ddf1d1cd3547", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5f96da-58f4-4c43-910b-7de3b67b69d6", "created": "2026-10-09T15:13:09.18481Z", "modified": "2026-10-09T15:13:09.18481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b31d2fcd456f58adfe16b4b074124be618c4d81231342b98bae8b87e3f8c6f1f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.18481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5967729-1411-4dbf-b09a-5778f96b0335", "created": "2026-10-09T15:13:09.185396Z", "modified": "2026-10-09T15:13:09.185396Z", "relationship_type": "indicates", "source_ref": "indicator--dc5f96da-58f4-4c43-910b-7de3b67b69d6", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee89734-6d31-45f1-9810-fae1b273f97f", "created": "2026-10-09T15:13:09.185517Z", "modified": "2026-10-09T15:13:09.185517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca67b603e41b81be9176cefbe4f7c6a8bc4772c9b60da8316377cf032556d0e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.185517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00c7e33b-2068-4f2b-bfe3-d0eae583551a", "created": "2026-10-09T15:13:09.186203Z", "modified": "2026-10-09T15:13:09.186203Z", "relationship_type": "indicates", "source_ref": "indicator--dee89734-6d31-45f1-9810-fae1b273f97f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab8c61c-e23c-4f69-a8a2-1aa9a85ca3c5", "created": "2026-10-09T15:13:09.186336Z", "modified": "2026-10-09T15:13:09.186336Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f201a70dd254e3d9ecf64fadffdc4281f4b4995a5757b36e205e651ae9917acf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.186336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8598198-0f28-40be-9883-555654404d3f", "created": "2026-10-09T15:13:09.18692Z", "modified": "2026-10-09T15:13:09.18692Z", "relationship_type": "indicates", "source_ref": "indicator--9ab8c61c-e23c-4f69-a8a2-1aa9a85ca3c5", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fec6096-a97a-4be6-a1b8-151f1afe4baf", "created": "2026-10-09T15:13:09.187046Z", "modified": "2026-10-09T15:13:09.187046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f1468cf727c5833853ee5fcfbb525a83c54619f97939258d1a6b6ec75969357']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.187046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2cbb632-a8fc-4cef-93bb-bc693e66f4ea", "created": "2026-10-09T15:13:09.187642Z", "modified": "2026-10-09T15:13:09.187642Z", "relationship_type": "indicates", "source_ref": "indicator--2fec6096-a97a-4be6-a1b8-151f1afe4baf", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431fb98c-4deb-4a70-ae1b-ff634c25425f", "created": "2026-10-09T15:13:09.187768Z", "modified": "2026-10-09T15:13:09.187768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa83a1dda275ec4c436f97852ea4880f75704a632365da9a696156a039493035']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.187768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c54b3022-b2ef-482f-b00e-cace6ea68b1f", "created": "2026-10-09T15:13:09.188362Z", "modified": "2026-10-09T15:13:09.188362Z", "relationship_type": "indicates", "source_ref": "indicator--431fb98c-4deb-4a70-ae1b-ff634c25425f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffe9ffa-50af-49ad-b9fa-3b8a2797afba", "created": "2026-10-09T15:13:09.188485Z", "modified": "2026-10-09T15:13:09.188485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='615fd55f6857081495a6a6b019df89c25c6e6834e7e30a6c4bd8104e1da75ea2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.188485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22a352a9-c7fd-4d55-aeb3-135b91c6b47b", "created": "2026-10-09T15:13:09.189066Z", "modified": "2026-10-09T15:13:09.189066Z", "relationship_type": "indicates", "source_ref": "indicator--fffe9ffa-50af-49ad-b9fa-3b8a2797afba", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b64767-9fe9-4d7f-b12e-1fcfb209e60d", "created": "2026-10-09T15:13:09.189184Z", "modified": "2026-10-09T15:13:09.189184Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89390464d8f0e6e11235e44bbb57a14d3d365cd6413224263b9e08d1e5d74713']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.189184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--395a18bd-bd28-47bd-a301-46f928b114f1", "created": "2026-10-09T15:13:09.189787Z", "modified": "2026-10-09T15:13:09.189787Z", "relationship_type": "indicates", "source_ref": "indicator--97b64767-9fe9-4d7f-b12e-1fcfb209e60d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786c43ed-d439-44d2-834b-f113b8eb0326", "created": "2026-10-09T15:13:09.189911Z", "modified": "2026-10-09T15:13:09.189911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='910f43bafff554ad99d9215313d66f244d3da62de2d2f9ebcc6c0b4719f74140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.189911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aeab36b-a6fc-4afa-b868-3a03e4f1b3b4", "created": "2026-10-09T15:13:09.190508Z", "modified": "2026-10-09T15:13:09.190508Z", "relationship_type": "indicates", "source_ref": "indicator--786c43ed-d439-44d2-834b-f113b8eb0326", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b1c5f5-844f-4a64-9f51-afe48fa84083", "created": "2026-10-09T15:13:09.190631Z", "modified": "2026-10-09T15:13:09.190631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b71d7fa108b86302f7809f9b65388d46f9f379287ec3e62ff342d85c8ee33710']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.190631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a2a0106-455c-40e1-a20b-a06a147b2850", "created": "2026-10-09T15:13:09.191209Z", "modified": "2026-10-09T15:13:09.191209Z", "relationship_type": "indicates", "source_ref": "indicator--b5b1c5f5-844f-4a64-9f51-afe48fa84083", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b1af97-2160-452b-a9b3-c4d5c5c34e91", "created": "2026-10-09T15:13:09.191348Z", "modified": "2026-10-09T15:13:09.191348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='876c5ec4a6dc4a5eb12325934295cf897a6111865e6c629db79f77c286b1f157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.191348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--352d2166-2e09-4ff7-b67e-ea6940dc9cdd", "created": "2026-10-09T15:13:09.191936Z", "modified": "2026-10-09T15:13:09.191936Z", "relationship_type": "indicates", "source_ref": "indicator--03b1af97-2160-452b-a9b3-c4d5c5c34e91", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ac537a-6787-44e3-9059-3ed84d526975", "created": "2026-10-09T15:13:09.192054Z", "modified": "2026-10-09T15:13:09.192054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3faacaf1994eba94aacd14e97e5bf7ea04e14ed33664041c9321561000bbc8cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.192054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3de154ac-d7b3-451a-9a05-0261c6791b3e", "created": "2026-10-09T15:13:09.192749Z", "modified": "2026-10-09T15:13:09.192749Z", "relationship_type": "indicates", "source_ref": "indicator--71ac537a-6787-44e3-9059-3ed84d526975", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0600cacc-fb87-4692-a94b-4fc6034703ce", "created": "2026-10-09T15:13:09.192874Z", "modified": "2026-10-09T15:13:09.192874Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee8668b7e826977a6efd2d0051d7822accb1f09fa2f400adda252fc49d996d89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.192874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7580724-a0db-4b08-b9f5-1cc3d884eacb", "created": "2026-10-09T15:13:09.193462Z", "modified": "2026-10-09T15:13:09.193462Z", "relationship_type": "indicates", "source_ref": "indicator--0600cacc-fb87-4692-a94b-4fc6034703ce", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b32d4e-e1c0-4f35-a559-2e175670ab7b", "created": "2026-10-09T15:13:09.193582Z", "modified": "2026-10-09T15:13:09.193582Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3b8642927b2d5f6cbb5bcd117f770dfeb0d9179f6aafb7b5357c2b63f07b1dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.193582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca070e4c-761a-493f-ab5c-3a804762d0e1", "created": "2026-10-09T15:13:09.194155Z", "modified": "2026-10-09T15:13:09.194155Z", "relationship_type": "indicates", "source_ref": "indicator--08b32d4e-e1c0-4f35-a559-2e175670ab7b", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2171049-a2fd-4a08-8a39-4f766a1994c9", "created": "2026-10-09T15:13:09.194281Z", "modified": "2026-10-09T15:13:09.194281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58bf54327ff51b5630681cee4c5baeae4c720d182943b4d859d35ca24403ccbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.194281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f55c936-a982-43aa-9dbc-9c09f9572d96", "created": "2026-10-09T15:13:09.194867Z", "modified": "2026-10-09T15:13:09.194867Z", "relationship_type": "indicates", "source_ref": "indicator--f2171049-a2fd-4a08-8a39-4f766a1994c9", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13391fb9-0e74-470d-84e7-6ba086c4c074", "created": "2026-10-09T15:13:09.194985Z", "modified": "2026-10-09T15:13:09.194985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b4cfd6e231a489a9845cca1ca9ff7f1b80cc97b72f04cfe758116fd01aa8d9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.194985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b3bf451-1a47-4482-a1ab-82870e91713b", "created": "2026-10-09T15:13:09.195579Z", "modified": "2026-10-09T15:13:09.195579Z", "relationship_type": "indicates", "source_ref": "indicator--13391fb9-0e74-470d-84e7-6ba086c4c074", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94ccf30-4730-440a-9769-cf29e7b7bc8b", "created": "2026-10-09T15:13:09.195704Z", "modified": "2026-10-09T15:13:09.195704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ff19c25ae603c42019156565b5723133f41bdc2ed0b975444ab450a4a23d2d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.195704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8f30bec-de9d-4af8-a063-ac9fa8a561ab", "created": "2026-10-09T15:13:09.196292Z", "modified": "2026-10-09T15:13:09.196292Z", "relationship_type": "indicates", "source_ref": "indicator--b94ccf30-4730-440a-9769-cf29e7b7bc8b", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e90bfc-0388-48d5-b1f0-66e88f4df206", "created": "2026-10-09T15:13:09.19643Z", "modified": "2026-10-09T15:13:09.19643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d22a334010c7e9d366463a9cb77e868712b45561baa6b1fafed9b8169335ecc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.19643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79cc8a7e-8d6f-4ba3-bead-53337ebecde6", "created": "2026-10-09T15:13:09.197013Z", "modified": "2026-10-09T15:13:09.197013Z", "relationship_type": "indicates", "source_ref": "indicator--a1e90bfc-0388-48d5-b1f0-66e88f4df206", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788098d6-e121-48ba-ad95-869233e86197", "created": "2026-10-09T15:13:09.197129Z", "modified": "2026-10-09T15:13:09.197129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd82087ae2d9fbd7ab3c7be3a06ff30ec6d7c40400dc2497c3e5839953c48d69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.197129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd162207-90b8-47ef-b7da-a002baf8afa9", "created": "2026-10-09T15:13:09.197725Z", "modified": "2026-10-09T15:13:09.197725Z", "relationship_type": "indicates", "source_ref": "indicator--788098d6-e121-48ba-ad95-869233e86197", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676a4734-1729-46f0-88cb-afa80280903d", "created": "2026-10-09T15:13:09.197851Z", "modified": "2026-10-09T15:13:09.197851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d71add7cd70d52a8e2ccbd6edd9b082f33cf561db3f93b8bd331a787ae8d8069']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.197851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--926978d4-4485-4b4f-b522-6bae65777958", "created": "2026-10-09T15:13:09.19844Z", "modified": "2026-10-09T15:13:09.19844Z", "relationship_type": "indicates", "source_ref": "indicator--676a4734-1729-46f0-88cb-afa80280903d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6c34f0-cf6d-4423-9e85-03b93dbf416f", "created": "2026-10-09T15:13:09.19856Z", "modified": "2026-10-09T15:13:09.19856Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10128147241f0815954bc145323ad36c271309fdff2794d090ec96c51820e70f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.19856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6df5a78-3daf-427e-9e51-5ff5512b93d7", "created": "2026-10-09T15:13:09.199241Z", "modified": "2026-10-09T15:13:09.199241Z", "relationship_type": "indicates", "source_ref": "indicator--4c6c34f0-cf6d-4423-9e85-03b93dbf416f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed78724-52f7-461e-addd-7da0382c7f89", "created": "2026-10-09T15:13:09.199379Z", "modified": "2026-10-09T15:13:09.199379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf7cf560bc07799400b21a271521c924a027e4cce236dc9a3790f24da0e80097']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.199379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4916acf9-093e-4b78-8ab4-d091fbb7de46", "created": "2026-10-09T15:13:09.199978Z", "modified": "2026-10-09T15:13:09.199978Z", "relationship_type": "indicates", "source_ref": "indicator--aed78724-52f7-461e-addd-7da0382c7f89", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813d14d7-4a95-4dcc-a363-85926859209f", "created": "2026-10-09T15:13:09.200098Z", "modified": "2026-10-09T15:13:09.200098Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dfd16f4511101b1700c66ce1fbab90a5c071fd91300cddacf7db512e60c2f593']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.200098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d234b26f-b854-4547-9116-25b60f604932", "created": "2026-10-09T15:13:09.200691Z", "modified": "2026-10-09T15:13:09.200691Z", "relationship_type": "indicates", "source_ref": "indicator--813d14d7-4a95-4dcc-a363-85926859209f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0531b768-3684-426a-b652-8a96456b2a09", "created": "2026-10-09T15:13:09.200812Z", "modified": "2026-10-09T15:13:09.200812Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='533af9199639b5020addb4c6ccf7d6f9dce2deae7276137b1e75bf513b7a2f9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.200812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--114a67cc-af2d-4961-a10b-722e91d4e701", "created": "2026-10-09T15:13:09.2014Z", "modified": "2026-10-09T15:13:09.2014Z", "relationship_type": "indicates", "source_ref": "indicator--0531b768-3684-426a-b652-8a96456b2a09", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd37fc50-0bf7-4724-a311-eead71a15ed1", "created": "2026-10-09T15:13:09.20152Z", "modified": "2026-10-09T15:13:09.20152Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f1d2ad4ba2f1e3b65792b213d43744c7cd2aff1a832e2f45acde5a0a4a84701']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.20152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--351f7163-f0ec-41ac-b415-d3fe73ec8735", "created": "2026-10-09T15:13:09.202113Z", "modified": "2026-10-09T15:13:09.202113Z", "relationship_type": "indicates", "source_ref": "indicator--dd37fc50-0bf7-4724-a311-eead71a15ed1", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8260a0-eb4d-4180-adbd-f47210a4ed8f", "created": "2026-10-09T15:13:09.202235Z", "modified": "2026-10-09T15:13:09.202235Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='649552d0431edc9bae9bde32f6eef9fa84024a47f576ba86e70d0fd5a3f36d62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.202235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac3e3999-77b2-4969-9d15-d3913e09f44e", "created": "2026-10-09T15:13:09.202843Z", "modified": "2026-10-09T15:13:09.202843Z", "relationship_type": "indicates", "source_ref": "indicator--0c8260a0-eb4d-4180-adbd-f47210a4ed8f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d854c90c-446e-4f27-8fd9-4725a8066951", "created": "2026-10-09T15:13:09.202965Z", "modified": "2026-10-09T15:13:09.202965Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35e7bc0aa4450af68cc8fae1d2220ea5823ca19d35adc6da12d6f51e48bd8551']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.202965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--160eff11-f137-4a73-8632-2d6732147156", "created": "2026-10-09T15:13:09.203571Z", "modified": "2026-10-09T15:13:09.203571Z", "relationship_type": "indicates", "source_ref": "indicator--d854c90c-446e-4f27-8fd9-4725a8066951", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c53819-eb97-43d3-9402-1c891e72da8d", "created": "2026-10-09T15:13:09.203696Z", "modified": "2026-10-09T15:13:09.203696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4496787c23f2a21a12875acee68b724768494f4f87a198a10c405769ee5ba2a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.203696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fd29668-8bb2-41ae-8aae-e9299b375098", "created": "2026-10-09T15:13:09.204288Z", "modified": "2026-10-09T15:13:09.204288Z", "relationship_type": "indicates", "source_ref": "indicator--f2c53819-eb97-43d3-9402-1c891e72da8d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a010f2b1-f614-4f42-9fa0-ce53b5079749", "created": "2026-10-09T15:13:09.204409Z", "modified": "2026-10-09T15:13:09.204409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2409cdaa1ce7a6c6e3c4caab729975a199e9bf68946194e4beda44f20e5628c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.204409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3417de45-5059-4ffa-852b-1464b7f24068", "created": "2026-10-09T15:13:09.205112Z", "modified": "2026-10-09T15:13:09.205112Z", "relationship_type": "indicates", "source_ref": "indicator--a010f2b1-f614-4f42-9fa0-ce53b5079749", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d1c410-9728-4caf-bffd-b9e13fa7eab5", "created": "2026-10-09T15:13:09.205245Z", "modified": "2026-10-09T15:13:09.205245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00b7b5b659f0d8fe8d8890c1928ae8862e8f369aa0b97d5b13263b6d3a4016ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.205245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75dcad1d-731f-4289-a04b-f64f966e90eb", "created": "2026-10-09T15:13:09.20585Z", "modified": "2026-10-09T15:13:09.20585Z", "relationship_type": "indicates", "source_ref": "indicator--70d1c410-9728-4caf-bffd-b9e13fa7eab5", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8639c045-6006-4400-8967-214cfc7c3212", "created": "2026-10-09T15:13:09.205979Z", "modified": "2026-10-09T15:13:09.205979Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf056638e09afda32ee30d49f55b0679a33b48c50904ce92631e5da464f4c19d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.205979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39872781-7541-49ce-8606-e9c78d9de084", "created": "2026-10-09T15:13:09.206571Z", "modified": "2026-10-09T15:13:09.206571Z", "relationship_type": "indicates", "source_ref": "indicator--8639c045-6006-4400-8967-214cfc7c3212", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafe94b7-3a1f-4158-9b42-d5b7310563f8", "created": "2026-10-09T15:13:09.206693Z", "modified": "2026-10-09T15:13:09.206693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='efbe52ccccec13b0639d43ffd46aabab109f94732ffade78812502cd3971d2fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.206693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4319610-c278-4f0d-82a3-1a36df67a657", "created": "2026-10-09T15:13:09.20729Z", "modified": "2026-10-09T15:13:09.20729Z", "relationship_type": "indicates", "source_ref": "indicator--fafe94b7-3a1f-4158-9b42-d5b7310563f8", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9baf45f2-606d-4a81-bd11-db6c3f0d730e", "created": "2026-10-09T15:13:09.207414Z", "modified": "2026-10-09T15:13:09.207414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4383eaee4e3f09da61dc68b4f2f1af7b959d3393b5b160d2d20225f66ca83460']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.207414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29cd146c-106e-458d-8cf7-69e83fedf7e0", "created": "2026-10-09T15:13:09.207993Z", "modified": "2026-10-09T15:13:09.207993Z", "relationship_type": "indicates", "source_ref": "indicator--9baf45f2-606d-4a81-bd11-db6c3f0d730e", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f1474c-e925-4260-8a77-bdc2957d4da6", "created": "2026-10-09T15:13:09.208112Z", "modified": "2026-10-09T15:13:09.208112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='314e9832a66fca4020f2e7c03216c0cbfd088dbaf37765f2b943c15529a36b66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.208112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--945f91f8-8368-4cc0-98a3-4dab22b20e36", "created": "2026-10-09T15:13:09.208707Z", "modified": "2026-10-09T15:13:09.208707Z", "relationship_type": "indicates", "source_ref": "indicator--36f1474c-e925-4260-8a77-bdc2957d4da6", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e3da4d-d1e6-49c7-8ab9-3be18613975b", "created": "2026-10-09T15:13:09.208831Z", "modified": "2026-10-09T15:13:09.208831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4285828eade067fd3229a10079b13aedc168d3440f6fe22c611f77701a9a4ee6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.208831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--106864bd-4cc8-4108-8a5a-7cf674273f86", "created": "2026-10-09T15:13:09.209431Z", "modified": "2026-10-09T15:13:09.209431Z", "relationship_type": "indicates", "source_ref": "indicator--19e3da4d-d1e6-49c7-8ab9-3be18613975b", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351cd634-ef65-4a97-ab06-6bbdc7a94340", "created": "2026-10-09T15:13:09.209552Z", "modified": "2026-10-09T15:13:09.209552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d933cb48462898e5cfb360a530f927dd6834fcbb32f6577a1602607709b08d7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.209552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--895f8a35-eaf8-4a4c-8b58-12e8e954ea27", "created": "2026-10-09T15:13:09.210136Z", "modified": "2026-10-09T15:13:09.210136Z", "relationship_type": "indicates", "source_ref": "indicator--351cd634-ef65-4a97-ab06-6bbdc7a94340", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2cecfe-1ca8-4ddb-8384-ee5447e00e40", "created": "2026-10-09T15:13:09.210258Z", "modified": "2026-10-09T15:13:09.210258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e32cd90b7d31dd786df87e09546eee8237dbb7f83ad300407cd4e839ac2c30c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.210258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39d7f26f-6af0-430a-afa7-9e1d0c9e0dc4", "created": "2026-10-09T15:13:09.210859Z", "modified": "2026-10-09T15:13:09.210859Z", "relationship_type": "indicates", "source_ref": "indicator--cb2cecfe-1ca8-4ddb-8384-ee5447e00e40", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933edfde-e607-4bdc-a96f-ef7e128fe678", "created": "2026-10-09T15:13:09.210978Z", "modified": "2026-10-09T15:13:09.210978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8237488be720903fdf4aa951ccf850b0aae4a980d9cdba388b124f021a1bc7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.210978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--572db8b4-31b5-49bf-9cad-5de3b61c9aa5", "created": "2026-10-09T15:13:09.211675Z", "modified": "2026-10-09T15:13:09.211675Z", "relationship_type": "indicates", "source_ref": "indicator--933edfde-e607-4bdc-a96f-ef7e128fe678", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ba883e-a217-423e-863c-7af47b674979", "created": "2026-10-09T15:13:09.211798Z", "modified": "2026-10-09T15:13:09.211798Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitor.debug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.211798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fd8cbc2-d9cf-4fe3-9432-b272c1ab8b2f", "created": "2026-10-09T15:13:09.212275Z", "modified": "2026-10-09T15:13:09.212275Z", "relationship_type": "indicates", "source_ref": "indicator--c1ba883e-a217-423e-863c-7af47b674979", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b55472-8891-4740-9f3b-12c49f15c57a", "created": "2026-10-09T15:13:09.212395Z", "modified": "2026-10-09T15:13:09.212395Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitor.null']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.212395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f388115-53f7-4adf-aa9d-09ade389f8c3", "created": "2026-10-09T15:13:09.212868Z", "modified": "2026-10-09T15:13:09.212868Z", "relationship_type": "indicates", "source_ref": "indicator--26b55472-8891-4740-9f3b-12c49f15c57a", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b701b117-3eda-44bb-bc6b-39510a0e2e8d", "created": "2026-10-09T15:13:09.212986Z", "modified": "2026-10-09T15:13:09.212986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitornull']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.212986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d1d4ccb-0fe6-412b-9ef0-8eec90dd0a1b", "created": "2026-10-09T15:13:09.213465Z", "modified": "2026-10-09T15:13:09.213465Z", "relationship_type": "indicates", "source_ref": "indicator--b701b117-3eda-44bb-bc6b-39510a0e2e8d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ea9040-464a-448b-a423-1512c413a62f", "created": "2026-10-09T15:13:09.213586Z", "modified": "2026-10-09T15:13:09.213586Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.213586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32dbe3ae-3bea-4f96-8480-2ff72d633094", "created": "2026-10-09T15:13:09.214059Z", "modified": "2026-10-09T15:13:09.214059Z", "relationship_type": "indicates", "source_ref": "indicator--21ea9040-464a-448b-a423-1512c413a62f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04502364-d1e4-44ff-b82e-57321b64f3ab", "created": "2026-10-09T15:13:09.214181Z", "modified": "2026-10-09T15:13:09.214181Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.214181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f42c0f47-a9cb-41ad-8a27-c7afb7d41687", "created": "2026-10-09T15:13:09.214716Z", "modified": "2026-10-09T15:13:09.214716Z", "relationship_type": "indicates", "source_ref": "indicator--04502364-d1e4-44ff-b82e-57321b64f3ab", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1480fb70-fa80-4442-96f4-730aec40f926", "created": "2026-10-09T15:13:09.214855Z", "modified": "2026-10-09T15:13:09.214855Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnta']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.214855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfeeea60-9627-4413-958b-d368d0e7d3c9", "created": "2026-10-09T15:13:09.215333Z", "modified": "2026-10-09T15:13:09.215333Z", "relationship_type": "indicates", "source_ref": "indicator--1480fb70-fa80-4442-96f4-730aec40f926", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607c376a-0592-49bb-afef-efdd4f3082a6", "created": "2026-10-09T15:13:09.215454Z", "modified": "2026-10-09T15:13:09.215454Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntah']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.215454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9ac3b5b-5e4d-4b53-bc1a-04be03c17fb8", "created": "2026-10-09T15:13:09.215916Z", "modified": "2026-10-09T15:13:09.215916Z", "relationship_type": "indicates", "source_ref": "indicator--607c376a-0592-49bb-afef-efdd4f3082a6", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2449422e-f50a-4e39-862c-d7d1c5fa3f8c", "created": "2026-10-09T15:13:09.216036Z", "modified": "2026-10-09T15:13:09.216036Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.216036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9353a7bb-958e-4114-ab40-f74a7c135c8b", "created": "2026-10-09T15:13:09.21651Z", "modified": "2026-10-09T15:13:09.21651Z", "relationship_type": "indicates", "source_ref": "indicator--2449422e-f50a-4e39-862c-d7d1c5fa3f8c", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425010ef-8391-4c5e-b2e6-41244f7a1e12", "created": "2026-10-09T15:13:09.216631Z", "modified": "2026-10-09T15:13:09.216631Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.216631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--254b9121-f720-419a-b0dc-759875948c3d", "created": "2026-10-09T15:13:09.217187Z", "modified": "2026-10-09T15:13:09.217187Z", "relationship_type": "indicates", "source_ref": "indicator--425010ef-8391-4c5e-b2e6-41244f7a1e12", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f0ecd-f871-4e9f-90b9-cb1ba5b773f1", "created": "2026-10-09T15:13:09.217321Z", "modified": "2026-10-09T15:13:09.217321Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnte']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.217321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f03c27e-680f-498b-99a3-1ddd3222c76e", "created": "2026-10-09T15:13:09.217785Z", "modified": "2026-10-09T15:13:09.217785Z", "relationship_type": "indicates", "source_ref": "indicator--790f0ecd-f871-4e9f-90b9-cb1ba5b773f1", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f868092-0213-4eb0-b6d3-5e10c89c74de", "created": "2026-10-09T15:13:09.217905Z", "modified": "2026-10-09T15:13:09.217905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.217905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4875c60-6719-4a67-92f9-c04f4a4a2a6c", "created": "2026-10-09T15:13:09.218379Z", "modified": "2026-10-09T15:13:09.218379Z", "relationship_type": "indicates", "source_ref": "indicator--3f868092-0213-4eb0-b6d3-5e10c89c74de", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3ba1da-ac6b-4be2-903d-57e04408e6ef", "created": "2026-10-09T15:13:09.218507Z", "modified": "2026-10-09T15:13:09.218507Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntg']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.218507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55d03ec7-2769-4ad0-9958-a882c991ff53", "created": "2026-10-09T15:13:09.218963Z", "modified": "2026-10-09T15:13:09.218963Z", "relationship_type": "indicates", "source_ref": "indicator--dc3ba1da-ac6b-4be2-903d-57e04408e6ef", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2725a6-16a1-4893-aac8-0f814f64b5d8", "created": "2026-10-09T15:13:09.219082Z", "modified": "2026-10-09T15:13:09.219082Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.219082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c11b8433-4802-44fb-b237-8690ce2b5e83", "created": "2026-10-09T15:13:09.219559Z", "modified": "2026-10-09T15:13:09.219559Z", "relationship_type": "indicates", "source_ref": "indicator--ff2725a6-16a1-4893-aac8-0f814f64b5d8", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26130a26-c143-4c3b-aadb-8870a9d6e80a", "created": "2026-10-09T15:13:09.219681Z", "modified": "2026-10-09T15:13:09.219681Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnti']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.219681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e70c464-32e5-4cba-b173-b28971f73f89", "created": "2026-10-09T15:13:09.220145Z", "modified": "2026-10-09T15:13:09.220145Z", "relationship_type": "indicates", "source_ref": "indicator--26130a26-c143-4c3b-aadb-8870a9d6e80a", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f84dc5-0f65-4b7a-9860-be11761b5e71", "created": "2026-10-09T15:13:09.220277Z", "modified": "2026-10-09T15:13:09.220277Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.220277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82ace972-5e7c-4851-aa01-946f6fd240d5", "created": "2026-10-09T15:13:09.22074Z", "modified": "2026-10-09T15:13:09.22074Z", "relationship_type": "indicates", "source_ref": "indicator--90f84dc5-0f65-4b7a-9860-be11761b5e71", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab40215-0d58-4e8e-9549-1b3ead7ff1b4", "created": "2026-10-09T15:13:09.220857Z", "modified": "2026-10-09T15:13:09.220857Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.220857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6146f355-c333-4593-89db-bf700b0f85e2", "created": "2026-10-09T15:13:09.221321Z", "modified": "2026-10-09T15:13:09.221321Z", "relationship_type": "indicates", "source_ref": "indicator--cab40215-0d58-4e8e-9549-1b3ead7ff1b4", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efadc0c1-5fd1-475a-88a3-d581b036ef50", "created": "2026-10-09T15:13:09.221439Z", "modified": "2026-10-09T15:13:09.221439Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.221439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88a7a406-c01c-49a2-acb4-1a41b623f193", "created": "2026-10-09T15:13:09.221896Z", "modified": "2026-10-09T15:13:09.221896Z", "relationship_type": "indicates", "source_ref": "indicator--efadc0c1-5fd1-475a-88a3-d581b036ef50", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1dc6f2b-cfa6-4cce-bdb4-dbd0e7d8e734", "created": "2026-10-09T15:13:09.22201Z", "modified": "2026-10-09T15:13:09.22201Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.22201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--560fa928-41ff-403c-937f-29e2bf320e10", "created": "2026-10-09T15:13:09.222563Z", "modified": "2026-10-09T15:13:09.222563Z", "relationship_type": "indicates", "source_ref": "indicator--e1dc6f2b-cfa6-4cce-bdb4-dbd0e7d8e734", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f12a756-28d4-48d8-ab57-c30f8279b62f", "created": "2026-10-09T15:13:09.222707Z", "modified": "2026-10-09T15:13:09.222707Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.222707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ce47a57-6080-4d3b-8e91-aa3404af145a", "created": "2026-10-09T15:13:09.223168Z", "modified": "2026-10-09T15:13:09.223168Z", "relationship_type": "indicates", "source_ref": "indicator--0f12a756-28d4-48d8-ab57-c30f8279b62f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826c115e-0a89-4098-a853-c4847b04ce3a", "created": "2026-10-09T15:13:09.223301Z", "modified": "2026-10-09T15:13:09.223301Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnto']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.223301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5267a31a-1e43-4525-ba9a-ea7fb33c4d90", "created": "2026-10-09T15:13:09.223756Z", "modified": "2026-10-09T15:13:09.223756Z", "relationship_type": "indicates", "source_ref": "indicator--826c115e-0a89-4098-a853-c4847b04ce3a", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62453cb7-b54e-4cbc-befa-4a5bfbe6a952", "created": "2026-10-09T15:13:09.223872Z", "modified": "2026-10-09T15:13:09.223872Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.223872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b182ace4-6a76-4ce3-bc1e-287a9dbe1af7", "created": "2026-10-09T15:13:09.224336Z", "modified": "2026-10-09T15:13:09.224336Z", "relationship_type": "indicates", "source_ref": "indicator--62453cb7-b54e-4cbc-befa-4a5bfbe6a952", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9137fa-0bf3-4096-99e0-5e19673fcb2b", "created": "2026-10-09T15:13:09.224454Z", "modified": "2026-10-09T15:13:09.224454Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.224454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbe24672-efa2-4e6a-8186-6e47cdd6706d", "created": "2026-10-09T15:13:09.224912Z", "modified": "2026-10-09T15:13:09.224912Z", "relationship_type": "indicates", "source_ref": "indicator--1a9137fa-0bf3-4096-99e0-5e19673fcb2b", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76dd736-cc9d-4309-9afb-3ba2ddaa6461", "created": "2026-10-09T15:13:09.225031Z", "modified": "2026-10-09T15:13:09.225031Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.225031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4115c5cd-33d6-4305-8686-0aace5dbec0a", "created": "2026-10-09T15:13:09.2255Z", "modified": "2026-10-09T15:13:09.2255Z", "relationship_type": "indicates", "source_ref": "indicator--b76dd736-cc9d-4309-9afb-3ba2ddaa6461", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20464e1e-6e1e-45e5-b6d5-9ed9ef727ee7", "created": "2026-10-09T15:13:09.225618Z", "modified": "2026-10-09T15:13:09.225618Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnts']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.225618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--524d4601-9e2f-4108-baa5-404198519b55", "created": "2026-10-09T15:13:09.226076Z", "modified": "2026-10-09T15:13:09.226076Z", "relationship_type": "indicates", "source_ref": "indicator--20464e1e-6e1e-45e5-b6d5-9ed9ef727ee7", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc2d23c-f1c9-4415-b62f-6baedbf39c46", "created": "2026-10-09T15:13:09.226195Z", "modified": "2026-10-09T15:13:09.226195Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.226195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29e665f0-356b-4e9d-9096-f995a1938c6d", "created": "2026-10-09T15:13:09.226669Z", "modified": "2026-10-09T15:13:09.226669Z", "relationship_type": "indicates", "source_ref": "indicator--cdc2d23c-f1c9-4415-b62f-6baedbf39c46", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d8f30-be36-4b25-a993-b759e4021570", "created": "2026-10-09T15:13:09.226789Z", "modified": "2026-10-09T15:13:09.226789Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.226789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78162522-8ced-444f-a174-32f704ebed2c", "created": "2026-10-09T15:13:09.227253Z", "modified": "2026-10-09T15:13:09.227253Z", "relationship_type": "indicates", "source_ref": "indicator--270d8f30-be36-4b25-a993-b759e4021570", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35f4f1f-0ed1-4312-abcb-391c59359e78", "created": "2026-10-09T15:13:09.227384Z", "modified": "2026-10-09T15:13:09.227384Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.227384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26becf2d-bdee-466e-925b-b4abcb66df1b", "created": "2026-10-09T15:13:09.227934Z", "modified": "2026-10-09T15:13:09.227934Z", "relationship_type": "indicates", "source_ref": "indicator--f35f4f1f-0ed1-4312-abcb-391c59359e78", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3417ca2e-5d22-4323-bed4-ab020d67fcfd", "created": "2026-10-09T15:13:09.228056Z", "modified": "2026-10-09T15:13:09.228056Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.228056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--449fc36d-2e4e-42fe-954b-0e8ff6dafebe", "created": "2026-10-09T15:13:09.228533Z", "modified": "2026-10-09T15:13:09.228533Z", "relationship_type": "indicates", "source_ref": "indicator--3417ca2e-5d22-4323-bed4-ab020d67fcfd", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536eec7f-9beb-4587-8a4f-83dbd4bb26d1", "created": "2026-10-09T15:13:09.228657Z", "modified": "2026-10-09T15:13:09.228657Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.228657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b57f0d89-db94-409a-a103-03688debc802", "created": "2026-10-09T15:13:09.229115Z", "modified": "2026-10-09T15:13:09.229115Z", "relationship_type": "indicates", "source_ref": "indicator--536eec7f-9beb-4587-8a4f-83dbd4bb26d1", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235b8afd-868e-4753-a0b0-39507ba39bdc", "created": "2026-10-09T15:13:09.229237Z", "modified": "2026-10-09T15:13:09.229237Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnty']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.229237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c2d06b8-e5ed-4ef8-a9e6-2faa77de3cdf", "created": "2026-10-09T15:13:09.2297Z", "modified": "2026-10-09T15:13:09.2297Z", "relationship_type": "indicates", "source_ref": "indicator--235b8afd-868e-4753-a0b0-39507ba39bdc", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a2cd09-8bd4-4b81-ac89-9c13b21ac883", "created": "2026-10-09T15:13:09.22982Z", "modified": "2026-10-09T15:13:09.22982Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.22982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab3f4eba-5ae0-4107-a9e9-3fc7c7dd8e2c", "created": "2026-10-09T15:13:09.230283Z", "modified": "2026-10-09T15:13:09.230283Z", "relationship_type": "indicates", "source_ref": "indicator--a6a2cd09-8bd4-4b81-ac89-9c13b21ac883", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cc6825-f297-49c3-8146-7f2eafca9cac", "created": "2026-10-09T15:13:09.230402Z", "modified": "2026-10-09T15:13:09.230402Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='cmf0.c3b5bm90zq.patch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.230402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--278cc511-a83c-46c4-9aa2-0f24a50e4f9b", "created": "2026-10-09T15:13:09.230855Z", "modified": "2026-10-09T15:13:09.230855Z", "relationship_type": "indicates", "source_ref": "indicator--f4cc6825-f297-49c3-8146-7f2eafca9cac", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6675ca1c-73d6-4499-b81e-d2b0d3e28aa7", "created": "2026-10-09T15:13:09.230979Z", "modified": "2026-10-09T15:13:09.230979Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0E0BE37D31CA21F19095FC38F9F1BEF310CE227C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.230979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--564e2188-e64c-431c-ae85-8345da6df98c", "created": "2026-10-09T15:13:09.231537Z", "modified": "2026-10-09T15:13:09.231537Z", "relationship_type": "indicates", "source_ref": "indicator--6675ca1c-73d6-4499-b81e-d2b0d3e28aa7", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafc726e-de47-4d4e-81e5-d3d4ef1eda76", "created": "2026-10-09T15:13:09.231658Z", "modified": "2026-10-09T15:13:09.231658Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4F6AD2383DADACCF93EA5BE4300571C315DBDF5B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.231658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c02ab6b-3244-4608-8b8a-6267ea6bbe7a", "created": "2026-10-09T15:13:09.232205Z", "modified": "2026-10-09T15:13:09.232205Z", "relationship_type": "indicates", "source_ref": "indicator--cafc726e-de47-4d4e-81e5-d3d4ef1eda76", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bb9aee-cbe8-412a-ab7f-e36260c52a8e", "created": "2026-10-09T15:13:09.232341Z", "modified": "2026-10-09T15:13:09.232341Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5284272445CE993DE601BB23CAE6BA9E43E4589C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.232341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83427909-eb23-4ea2-a35c-52bc584ca55e", "created": "2026-10-09T15:13:09.232892Z", "modified": "2026-10-09T15:13:09.232892Z", "relationship_type": "indicates", "source_ref": "indicator--47bb9aee-cbe8-412a-ab7f-e36260c52a8e", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ff60c8-b1cf-4cd5-ad50-4b3a95d3956a", "created": "2026-10-09T15:13:09.233011Z", "modified": "2026-10-09T15:13:09.233011Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6144ED2E25B6F3A5FAFCF914965CA071A685674B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.233011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66e10875-aad7-4002-9b3c-fc515f8503c1", "created": "2026-10-09T15:13:09.23365Z", "modified": "2026-10-09T15:13:09.23365Z", "relationship_type": "indicates", "source_ref": "indicator--04ff60c8-b1cf-4cd5-ad50-4b3a95d3956a", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee4ac71-938d-465b-9579-1b13dbb31613", "created": "2026-10-09T15:13:09.233772Z", "modified": "2026-10-09T15:13:09.233772Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='64403A61F41848F987D6FD0BE00392E9561A0EF7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.233772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9630387a-5607-4777-abb4-77d059f80732", "created": "2026-10-09T15:13:09.234327Z", "modified": "2026-10-09T15:13:09.234327Z", "relationship_type": "indicates", "source_ref": "indicator--2ee4ac71-938d-465b-9579-1b13dbb31613", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4102170c-8612-4bb0-a3dc-668be15c153f", "created": "2026-10-09T15:13:09.23445Z", "modified": "2026-10-09T15:13:09.23445Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AFC457A96258490FBC284EE889634B5F3E325B8E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.23445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebea138e-21f3-48ef-97d3-b8db5db073d5", "created": "2026-10-09T15:13:09.234985Z", "modified": "2026-10-09T15:13:09.234985Z", "relationship_type": "indicates", "source_ref": "indicator--4102170c-8612-4bb0-a3dc-668be15c153f", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01eb5175-9eb5-4571-9dd0-64637102a73d", "created": "2026-10-09T15:13:09.235102Z", "modified": "2026-10-09T15:13:09.235102Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B6B58148F1B2198C94BDE546FD2E0734EC7838D6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.235102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f54a65c3-eebf-4594-be51-6d48009f9586", "created": "2026-10-09T15:13:09.23565Z", "modified": "2026-10-09T15:13:09.23565Z", "relationship_type": "indicates", "source_ref": "indicator--01eb5175-9eb5-4571-9dd0-64637102a73d", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ab200c-c18f-4c5d-8d8d-5be2a50e73b1", "created": "2026-10-09T15:13:09.235771Z", "modified": "2026-10-09T15:13:09.235771Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CC4A78DBE96AC1FA5977E03C97052A9A334113B4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.235771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc8a1352-3aa3-4f83-9591-160dc53f452f", "created": "2026-10-09T15:13:09.236326Z", "modified": "2026-10-09T15:13:09.236326Z", "relationship_type": "indicates", "source_ref": "indicator--f8ab200c-c18f-4c5d-8d8d-5be2a50e73b1", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6e53c4-24b7-4794-ae71-59540eb0ad96", "created": "2026-10-09T15:13:09.236449Z", "modified": "2026-10-09T15:13:09.236449Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E8FF1077D207E47AB4B53F275C437C0889579658']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.236449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07dcdf57-3210-46bb-8edf-2f51ff4e3c9c", "created": "2026-10-09T15:13:09.236985Z", "modified": "2026-10-09T15:13:09.236985Z", "relationship_type": "indicates", "source_ref": "indicator--db6e53c4-24b7-4794-ae71-59540eb0ad96", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2defc72-85a7-45a3-9402-237df4c04332", "created": "2026-10-09T15:13:09.237103Z", "modified": "2026-10-09T15:13:09.237103Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F21ECAFCFF000686E8EC090F1ECDAECE08798BFF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.237103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3c7e430-1d5d-4122-8b35-2ec271fdf861", "created": "2026-10-09T15:13:09.237664Z", "modified": "2026-10-09T15:13:09.237664Z", "relationship_type": "indicates", "source_ref": "indicator--e2defc72-85a7-45a3-9402-237df4c04332", "target_ref": "malware--16d957ac-ece9-42c6-b565-3868ff2f1f31"}, {"type": "malware", "spec_version": "2.1", "id": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e", "created": "2026-10-09T15:13:09.237783Z", "modified": "2026-10-09T15:13:09.237783Z", "name": "LetMeSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06f4e72-bcff-4ad6-84e2-342e53723e08", "created": "2026-10-09T15:13:09.237901Z", "modified": "2026-10-09T15:13:09.237901Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='letmespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.237901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc83d26d-527b-4fc2-a5e6-d6c3d7f48671", "created": "2026-10-09T15:13:09.238379Z", "modified": "2026-10-09T15:13:09.238379Z", "relationship_type": "indicates", "source_ref": "indicator--f06f4e72-bcff-4ad6-84e2-342e53723e08", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db28b33-f651-473c-9e33-a1acc4eeb6e8", "created": "2026-10-09T15:13:09.238501Z", "modified": "2026-10-09T15:13:09.238501Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotecommands.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.238501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--593cdae9-5ff2-4f2d-9ade-5b561be96f2e", "created": "2026-10-09T15:13:09.238969Z", "modified": "2026-10-09T15:13:09.238969Z", "relationship_type": "indicates", "source_ref": "indicator--2db28b33-f651-473c-9e33-a1acc4eeb6e8", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569b607b-6466-41c9-83f2-6929a42382ca", "created": "2026-10-09T15:13:09.239091Z", "modified": "2026-10-09T15:13:09.239091Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='zdalnakontrola.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.239091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8005a7bf-77d8-45ea-afa8-8ad36a65a789", "created": "2026-10-09T15:13:09.240052Z", "modified": "2026-10-09T15:13:09.240052Z", "relationship_type": "indicates", "source_ref": "indicator--569b607b-6466-41c9-83f2-6929a42382ca", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b366a5-a296-4877-9e5d-362ad2d56ae6", "created": "2026-10-09T15:13:09.240184Z", "modified": "2026-10-09T15:13:09.240184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='letmespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.240184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e451b87e-ba1c-4324-8acb-04ea3e2c7b43", "created": "2026-10-09T15:13:09.24067Z", "modified": "2026-10-09T15:13:09.24067Z", "relationship_type": "indicates", "source_ref": "indicator--57b366a5-a296-4877-9e5d-362ad2d56ae6", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89bdeee-05bb-4223-9d79-d5f1725aa8fc", "created": "2026-10-09T15:13:09.240795Z", "modified": "2026-10-09T15:13:09.240795Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotecommands.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.240795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc3bcb02-66f5-4eb5-a404-a657e5a58450", "created": "2026-10-09T15:13:09.241282Z", "modified": "2026-10-09T15:13:09.241282Z", "relationship_type": "indicates", "source_ref": "indicator--d89bdeee-05bb-4223-9d79-d5f1725aa8fc", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cedd668-96f0-4fc0-ab32-c053af16f9e3", "created": "2026-10-09T15:13:09.241407Z", "modified": "2026-10-09T15:13:09.241407Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.letmespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.241407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e527058c-8c71-441a-9c1a-118e0b9c6acc", "created": "2026-10-09T15:13:09.241891Z", "modified": "2026-10-09T15:13:09.241891Z", "relationship_type": "indicates", "source_ref": "indicator--2cedd668-96f0-4fc0-ab32-c053af16f9e3", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2bef82-4082-4a4b-9955-eb015e602b47", "created": "2026-10-09T15:13:09.242016Z", "modified": "2026-10-09T15:13:09.242016Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.teleszpieg.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.242016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1577be2f-08a8-4362-b48d-c58dce606524", "created": "2026-10-09T15:13:09.242499Z", "modified": "2026-10-09T15:13:09.242499Z", "relationship_type": "indicates", "source_ref": "indicator--be2bef82-4082-4a4b-9955-eb015e602b47", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d02188-5cee-45ad-bc91-378584d24a85", "created": "2026-10-09T15:13:09.242622Z", "modified": "2026-10-09T15:13:09.242622Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teleszpieg.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.242622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69fa7380-b973-4ae7-b195-f272e82b3e3b", "created": "2026-10-09T15:13:09.24309Z", "modified": "2026-10-09T15:13:09.24309Z", "relationship_type": "indicates", "source_ref": "indicator--45d02188-5cee-45ad-bc91-378584d24a85", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452ddbc8-bf11-44ae-ae16-ab51d5a68f47", "created": "2026-10-09T15:13:09.243211Z", "modified": "2026-10-09T15:13:09.243211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bbiindia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.243211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2c75414-f372-4050-8327-5a34873dfb6a", "created": "2026-10-09T15:13:09.243686Z", "modified": "2026-10-09T15:13:09.243686Z", "relationship_type": "indicates", "source_ref": "indicator--452ddbc8-bf11-44ae-ae16-ab51d5a68f47", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff361bc-91f7-46aa-909e-906275eac35b", "created": "2026-10-09T15:13:09.243806Z", "modified": "2026-10-09T15:13:09.243806Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.bbiindia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.243806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--751a818d-2827-465b-aef0-b7ae2dac03e2", "created": "2026-10-09T15:13:09.244288Z", "modified": "2026-10-09T15:13:09.244288Z", "relationship_type": "indicates", "source_ref": "indicator--9ff361bc-91f7-46aa-909e-906275eac35b", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ea19cc-4061-424f-b688-2fa77d3dbb7f", "created": "2026-10-09T15:13:09.24441Z", "modified": "2026-10-09T15:13:09.24441Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='856bc344bce5fbb077b1ce545000e26b68b97e3b089d4f737321d5d9347ff02b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.24441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66dd8868-085d-4a9c-a9f8-11123123f226", "created": "2026-10-09T15:13:09.245002Z", "modified": "2026-10-09T15:13:09.245002Z", "relationship_type": "indicates", "source_ref": "indicator--b9ea19cc-4061-424f-b688-2fa77d3dbb7f", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb371431-fc0f-4159-871c-d9888af0a331", "created": "2026-10-09T15:13:09.245122Z", "modified": "2026-10-09T15:13:09.245122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd8128c2f0839bae94bf0160265c8b3313cdd53ab373e1489c03659b1c8b14ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.245122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--095ced6e-c579-4f3f-a7ba-42cf5542b557", "created": "2026-10-09T15:13:09.245821Z", "modified": "2026-10-09T15:13:09.245821Z", "relationship_type": "indicates", "source_ref": "indicator--cb371431-fc0f-4159-871c-d9888af0a331", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a188c6fe-b658-40b6-8dbb-3fbecafe55da", "created": "2026-10-09T15:13:09.245953Z", "modified": "2026-10-09T15:13:09.245953Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8afd404efffc98ecc19ecbb442b80cb55b61ebd8a3e6b2e231e6241dbff2dc18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.245953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7c71802-184c-4e0d-911d-fe9f61e62ceb", "created": "2026-10-09T15:13:09.246561Z", "modified": "2026-10-09T15:13:09.246561Z", "relationship_type": "indicates", "source_ref": "indicator--a188c6fe-b658-40b6-8dbb-3fbecafe55da", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52874151-36b9-4967-b1ba-4e0b262e4042", "created": "2026-10-09T15:13:09.246688Z", "modified": "2026-10-09T15:13:09.246688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8788135bd2bed69d497185bbe92de240265676df335770d2adae1ed056910f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.246688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e87655d8-449c-4ab0-81a1-c169d73a083f", "created": "2026-10-09T15:13:09.24729Z", "modified": "2026-10-09T15:13:09.24729Z", "relationship_type": "indicates", "source_ref": "indicator--52874151-36b9-4967-b1ba-4e0b262e4042", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb5a457-7d1f-43c4-82ec-8b61e6308874", "created": "2026-10-09T15:13:09.247416Z", "modified": "2026-10-09T15:13:09.247416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='176affea44663f35cff671dc935402bd4c69e2dd22d2d87bed618096057a25bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.247416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc3dc391-6738-41fa-9b08-b7d40f363424", "created": "2026-10-09T15:13:09.248003Z", "modified": "2026-10-09T15:13:09.248003Z", "relationship_type": "indicates", "source_ref": "indicator--0eb5a457-7d1f-43c4-82ec-8b61e6308874", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c12190-3f0a-46eb-9749-e40faae49d12", "created": "2026-10-09T15:13:09.248123Z", "modified": "2026-10-09T15:13:09.248123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01e890e3f24a8394a37545c5d6438fe7f38cbde9c843ac38ec934dcdba50cd6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.248123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6ec3bfa-4a20-400b-99c1-9d22d9627010", "created": "2026-10-09T15:13:09.248718Z", "modified": "2026-10-09T15:13:09.248718Z", "relationship_type": "indicates", "source_ref": "indicator--c0c12190-3f0a-46eb-9749-e40faae49d12", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ac7e7f-6ac4-4608-80cf-8303e6184699", "created": "2026-10-09T15:13:09.248842Z", "modified": "2026-10-09T15:13:09.248842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66f44a0f7c74778af95e4a7d6037294aff7e6078992048d83a98467b98a0ed29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.248842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84ea2ead-232d-40b0-be9c-809078591af0", "created": "2026-10-09T15:13:09.249442Z", "modified": "2026-10-09T15:13:09.249442Z", "relationship_type": "indicates", "source_ref": "indicator--39ac7e7f-6ac4-4608-80cf-8303e6184699", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756e16eb-6112-4f12-a7a1-5be977b3d5a8", "created": "2026-10-09T15:13:09.249564Z", "modified": "2026-10-09T15:13:09.249564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a456009451a128251961927d7b142a1770672d486dbd9eb0cd1cfcdc656b14df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.249564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0de6e7e7-aa86-42ff-8c4c-97e98b1fa81c", "created": "2026-10-09T15:13:09.250152Z", "modified": "2026-10-09T15:13:09.250152Z", "relationship_type": "indicates", "source_ref": "indicator--756e16eb-6112-4f12-a7a1-5be977b3d5a8", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e695be4-4ed8-427a-9ae4-a5922f67b0c6", "created": "2026-10-09T15:13:09.250286Z", "modified": "2026-10-09T15:13:09.250286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fb5e267ad05981323449b69a57d280f033f0a0609c49773e567687a6cba77a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.250286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef4f0af1-ac01-4c4b-a7f9-e89b5f62fce6", "created": "2026-10-09T15:13:09.250869Z", "modified": "2026-10-09T15:13:09.250869Z", "relationship_type": "indicates", "source_ref": "indicator--6e695be4-4ed8-427a-9ae4-a5922f67b0c6", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25313699-1688-4f80-9647-a20d688dcc80", "created": "2026-10-09T15:13:09.250987Z", "modified": "2026-10-09T15:13:09.250987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26deed22f8f2b611a1aeb2abb03d65fde6a31674abbcf09a9d19a85a1b91bbca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.250987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9dfaae7-0196-4709-90b4-cfc6beeb85e1", "created": "2026-10-09T15:13:09.251579Z", "modified": "2026-10-09T15:13:09.251579Z", "relationship_type": "indicates", "source_ref": "indicator--25313699-1688-4f80-9647-a20d688dcc80", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93954ad6-5d72-4eaf-a895-f63657836d8a", "created": "2026-10-09T15:13:09.251704Z", "modified": "2026-10-09T15:13:09.251704Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.251704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dace05d-a02b-493e-823a-29aad5163e24", "created": "2026-10-09T15:13:09.252283Z", "modified": "2026-10-09T15:13:09.252283Z", "relationship_type": "indicates", "source_ref": "indicator--93954ad6-5d72-4eaf-a895-f63657836d8a", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec65588-dd78-41fb-a9ad-c493daa48987", "created": "2026-10-09T15:13:09.252411Z", "modified": "2026-10-09T15:13:09.252411Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.252411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b7315ef-cb11-4ed3-ba93-10dcb8d70338", "created": "2026-10-09T15:13:09.252865Z", "modified": "2026-10-09T15:13:09.252865Z", "relationship_type": "indicates", "source_ref": "indicator--aec65588-dd78-41fb-a9ad-c493daa48987", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8461569-91c1-43a1-b7cd-25df3939d403", "created": "2026-10-09T15:13:09.252987Z", "modified": "2026-10-09T15:13:09.252987Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.252987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de4183ea-0469-453d-82a4-eab8c918c8fe", "created": "2026-10-09T15:13:09.253456Z", "modified": "2026-10-09T15:13:09.253456Z", "relationship_type": "indicates", "source_ref": "indicator--d8461569-91c1-43a1-b7cd-25df3939d403", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13546942-f526-4f46-a532-d6e8aae75532", "created": "2026-10-09T15:13:09.253578Z", "modified": "2026-10-09T15:13:09.253578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.253578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eeef1a6-8e88-4a1f-89d1-90875ee5faa8", "created": "2026-10-09T15:13:09.254034Z", "modified": "2026-10-09T15:13:09.254034Z", "relationship_type": "indicates", "source_ref": "indicator--13546942-f526-4f46-a532-d6e8aae75532", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98684f7a-be8a-4120-96fe-bb03804d09b7", "created": "2026-10-09T15:13:09.254152Z", "modified": "2026-10-09T15:13:09.254152Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.254152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65c2c5a9-bc2e-40e1-8378-0602c0657ea1", "created": "2026-10-09T15:13:09.254618Z", "modified": "2026-10-09T15:13:09.254618Z", "relationship_type": "indicates", "source_ref": "indicator--98684f7a-be8a-4120-96fe-bb03804d09b7", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b81b22-121f-4a67-bdc2-4fdb9f04ff62", "created": "2026-10-09T15:13:09.254738Z", "modified": "2026-10-09T15:13:09.254738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.lms']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.254738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f8e5228-32ff-4d2a-8f48-57eab65126f0", "created": "2026-10-09T15:13:09.255182Z", "modified": "2026-10-09T15:13:09.255182Z", "relationship_type": "indicates", "source_ref": "indicator--f0b81b22-121f-4a67-bdc2-4fdb9f04ff62", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34db2c0e-13f8-4b6a-bbf3-00b1cb0493c9", "created": "2026-10-09T15:13:09.255321Z", "modified": "2026-10-09T15:13:09.255321Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.remote']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.255321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4923451-9879-42d7-82f3-0289cb9e2290", "created": "2026-10-09T15:13:09.255777Z", "modified": "2026-10-09T15:13:09.255777Z", "relationship_type": "indicates", "source_ref": "indicator--34db2c0e-13f8-4b6a-bbf3-00b1cb0493c9", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b476256-5bc8-4bcb-9350-4c9afd492d42", "created": "2026-10-09T15:13:09.2559Z", "modified": "2026-10-09T15:13:09.2559Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.remote1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.2559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14f7cfbe-f97c-4ad8-a8f3-b493bfdade52", "created": "2026-10-09T15:13:09.256368Z", "modified": "2026-10-09T15:13:09.256368Z", "relationship_type": "indicates", "source_ref": "indicator--6b476256-5bc8-4bcb-9350-4c9afd492d42", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dee9c2-7c1e-4936-9d34-1dfff5672c20", "created": "2026-10-09T15:13:09.256504Z", "modified": "2026-10-09T15:13:09.256504Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.remote2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.256504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e774cd93-a889-42ec-92a5-a97645a9f46b", "created": "2026-10-09T15:13:09.256979Z", "modified": "2026-10-09T15:13:09.256979Z", "relationship_type": "indicates", "source_ref": "indicator--c4dee9c2-7c1e-4936-9d34-1dfff5672c20", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dc403b-d98f-4f6c-bd14-6c255b9dc17c", "created": "2026-10-09T15:13:09.257097Z", "modified": "2026-10-09T15:13:09.257097Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.radeal.lms4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.257097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fddd47d-4aa5-4ed1-a194-42d5f40f3a05", "created": "2026-10-09T15:13:09.257656Z", "modified": "2026-10-09T15:13:09.257656Z", "relationship_type": "indicates", "source_ref": "indicator--81dc403b-d98f-4f6c-bd14-6c255b9dc17c", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b8ea9-e1dd-4e5a-ab6f-b94d2602b6e3", "created": "2026-10-09T15:13:09.257783Z", "modified": "2026-10-09T15:13:09.257783Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='340E571CB1A64E6EE384D3F8A544681459CF3F5F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.257783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d525ab01-b46f-4a34-894c-9473171e66da", "created": "2026-10-09T15:13:09.258338Z", "modified": "2026-10-09T15:13:09.258338Z", "relationship_type": "indicates", "source_ref": "indicator--ba9b8ea9-e1dd-4e5a-ab6f-b94d2602b6e3", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacd85a3-9273-4089-a051-4a5e3c8aa0fa", "created": "2026-10-09T15:13:09.25846Z", "modified": "2026-10-09T15:13:09.25846Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='69EE83CB3E0968B49E33849D40F7D91B0592C7DB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.25846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c1cad57-f9fe-4eb0-b8df-a5aeb3d5e477", "created": "2026-10-09T15:13:09.259005Z", "modified": "2026-10-09T15:13:09.259005Z", "relationship_type": "indicates", "source_ref": "indicator--dacd85a3-9273-4089-a051-4a5e3c8aa0fa", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4a3c53-bd86-4f94-82f6-2fd370fbca6c", "created": "2026-10-09T15:13:09.259125Z", "modified": "2026-10-09T15:13:09.259125Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8F0EAD4F1DA5DAAF8C0F7A51096CECEEF81D0C76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.259125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23bcec35-26ff-4fdd-82d7-eb5631fab045", "created": "2026-10-09T15:13:09.259684Z", "modified": "2026-10-09T15:13:09.259684Z", "relationship_type": "indicates", "source_ref": "indicator--5f4a3c53-bd86-4f94-82f6-2fd370fbca6c", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26607766-c3ad-4b68-8bd0-3ff6fd31ab92", "created": "2026-10-09T15:13:09.259806Z", "modified": "2026-10-09T15:13:09.259806Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EF6BC4C13FE455CD98192E56D96317069BDF7658']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.259806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdaa2c13-7ba0-4f96-bb80-2774ba7ee3cc", "created": "2026-10-09T15:13:09.260356Z", "modified": "2026-10-09T15:13:09.260356Z", "relationship_type": "indicates", "source_ref": "indicator--26607766-c3ad-4b68-8bd0-3ff6fd31ab92", "target_ref": "malware--bc8d0af4-28a4-4ab9-b79e-a5b78482ad2e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c3462954-a06c-420e-8746-990a30793e79", "created": "2026-10-09T15:13:09.260474Z", "modified": "2026-10-09T15:13:09.260474Z", "name": "Snoopza", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7956ddec-f00f-4fd0-bab6-9f9c82dda02d", "created": "2026-10-09T15:13:09.260589Z", "modified": "2026-10-09T15:13:09.260589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.260589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fb80b8c-99c0-4f30-acd8-51366be164b3", "created": "2026-10-09T15:13:09.261062Z", "modified": "2026-10-09T15:13:09.261062Z", "relationship_type": "indicates", "source_ref": "indicator--7956ddec-f00f-4fd0-bab6-9f9c82dda02d", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdd99c4-9b9e-44a1-ab36-5ceb5b4a6701", "created": "2026-10-09T15:13:09.261189Z", "modified": "2026-10-09T15:13:09.261189Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.261189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e623d6f-9bdd-491b-9fe3-e098f8a88419", "created": "2026-10-09T15:13:09.261675Z", "modified": "2026-10-09T15:13:09.261675Z", "relationship_type": "indicates", "source_ref": "indicator--8cdd99c4-9b9e-44a1-ab36-5ceb5b4a6701", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc498ea2-dd5b-4715-9cc8-84d9778c2674", "created": "2026-10-09T15:13:09.261795Z", "modified": "2026-10-09T15:13:09.261795Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app2.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.261795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b06aba3b-8f88-43e1-8476-16aaf2eccf8a", "created": "2026-10-09T15:13:09.262296Z", "modified": "2026-10-09T15:13:09.262296Z", "relationship_type": "indicates", "source_ref": "indicator--dc498ea2-dd5b-4715-9cc8-84d9778c2674", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48421940-54e3-43d5-a929-727c890df1d0", "created": "2026-10-09T15:13:09.26242Z", "modified": "2026-10-09T15:13:09.26242Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.26242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69374f85-6412-4cc7-8e94-54db584af1fc", "created": "2026-10-09T15:13:09.262894Z", "modified": "2026-10-09T15:13:09.262894Z", "relationship_type": "indicates", "source_ref": "indicator--48421940-54e3-43d5-a929-727c890df1d0", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd95293-9624-45ef-8ffb-6e96e4719bfb", "created": "2026-10-09T15:13:09.263012Z", "modified": "2026-10-09T15:13:09.263012Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flower.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.263012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea56907f-9b3b-4f6a-b126-d85b2cd2a80b", "created": "2026-10-09T15:13:09.263592Z", "modified": "2026-10-09T15:13:09.263592Z", "relationship_type": "indicates", "source_ref": "indicator--abd95293-9624-45ef-8ffb-6e96e4719bfb", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c28e8f-e3a0-492f-8856-050121eaabf4", "created": "2026-10-09T15:13:09.26372Z", "modified": "2026-10-09T15:13:09.26372Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='get.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.26372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c298520-e9c7-4244-a15e-a326f84fbc21", "created": "2026-10-09T15:13:09.264188Z", "modified": "2026-10-09T15:13:09.264188Z", "relationship_type": "indicates", "source_ref": "indicator--22c28e8f-e3a0-492f-8856-050121eaabf4", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3b233f-dab2-4637-a437-3c03983345b2", "created": "2026-10-09T15:13:09.264321Z", "modified": "2026-10-09T15:13:09.264321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.264321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72bd97ec-e49c-44c1-a75b-dd8bd9ffa392", "created": "2026-10-09T15:13:09.264792Z", "modified": "2026-10-09T15:13:09.264792Z", "relationship_type": "indicates", "source_ref": "indicator--1a3b233f-dab2-4637-a437-3c03983345b2", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847d953f-626c-4bce-9ff6-7f9c4c67c093", "created": "2026-10-09T15:13:09.264913Z", "modified": "2026-10-09T15:13:09.264913Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my2.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.264913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11f30326-6796-47fc-91be-b7fb168c25b7", "created": "2026-10-09T15:13:09.265386Z", "modified": "2026-10-09T15:13:09.265386Z", "relationship_type": "indicates", "source_ref": "indicator--847d953f-626c-4bce-9ff6-7f9c4c67c093", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a90d44-92ce-4c6b-97c6-023518c4fc3f", "created": "2026-10-09T15:13:09.265504Z", "modified": "2026-10-09T15:13:09.265504Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.265504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79e5b475-9fdf-4df4-b04c-c1707ac0b5f0", "created": "2026-10-09T15:13:09.26597Z", "modified": "2026-10-09T15:13:09.26597Z", "relationship_type": "indicates", "source_ref": "indicator--a8a90d44-92ce-4c6b-97c6-023518c4fc3f", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7c0efb-f217-4b26-9f02-605f65313b0e", "created": "2026-10-09T15:13:09.266087Z", "modified": "2026-10-09T15:13:09.266087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viewer.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.266087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--856bc989-8988-436f-87d6-16a4b6f27e22", "created": "2026-10-09T15:13:09.266569Z", "modified": "2026-10-09T15:13:09.266569Z", "relationship_type": "indicates", "source_ref": "indicator--2f7c0efb-f217-4b26-9f02-605f65313b0e", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd322bc5-7c78-431f-9e8b-bcac6fdf49ce", "created": "2026-10-09T15:13:09.266689Z", "modified": "2026-10-09T15:13:09.266689Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.266689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--207068d5-ca57-4523-b74a-810e0163524c", "created": "2026-10-09T15:13:09.267156Z", "modified": "2026-10-09T15:13:09.267156Z", "relationship_type": "indicates", "source_ref": "indicator--bd322bc5-7c78-431f-9e8b-bcac6fdf49ce", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b3a3fa-ff27-4781-bef8-fcf12f29b1c9", "created": "2026-10-09T15:13:09.267285Z", "modified": "2026-10-09T15:13:09.267285Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='get.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.267285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8d373ff-eb24-4a23-a578-9218e43562b8", "created": "2026-10-09T15:13:09.267756Z", "modified": "2026-10-09T15:13:09.267756Z", "relationship_type": "indicates", "source_ref": "indicator--78b3a3fa-ff27-4781-bef8-fcf12f29b1c9", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40538094-f90f-4b62-82de-faf38d26b48a", "created": "2026-10-09T15:13:09.267875Z", "modified": "2026-10-09T15:13:09.267875Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='snoopza.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.267875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--849d857f-a16b-4840-85d3-373e396bf707", "created": "2026-10-09T15:13:09.268361Z", "modified": "2026-10-09T15:13:09.268361Z", "relationship_type": "indicates", "source_ref": "indicator--40538094-f90f-4b62-82de-faf38d26b48a", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8344e8-5fb6-474a-bf09-79e42f77225a", "created": "2026-10-09T15:13:09.268481Z", "modified": "2026-10-09T15:13:09.268481Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.268481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6795a0b6-8add-42b5-a31f-14fa072061f5", "created": "2026-10-09T15:13:09.26905Z", "modified": "2026-10-09T15:13:09.26905Z", "relationship_type": "indicates", "source_ref": "indicator--cb8344e8-5fb6-474a-bf09-79e42f77225a", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16862f9e-c705-4664-960c-63893036d7c4", "created": "2026-10-09T15:13:09.269172Z", "modified": "2026-10-09T15:13:09.269172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='newdemo.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.269172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c408e353-a0cb-47b9-825a-5e243c5b15b9", "created": "2026-10-09T15:13:09.269665Z", "modified": "2026-10-09T15:13:09.269665Z", "relationship_type": "indicates", "source_ref": "indicator--16862f9e-c705-4664-960c-63893036d7c4", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81c00b9-f15b-4daf-ab8c-8a3717ba5e9a", "created": "2026-10-09T15:13:09.26979Z", "modified": "2026-10-09T15:13:09.26979Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ceccb0637ecb2ebe90a96ea63e99603be67e4e4e20b2195c69feef633136558']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.26979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0803c3ac-191c-454e-b7d0-c7a5fd0be573", "created": "2026-10-09T15:13:09.270402Z", "modified": "2026-10-09T15:13:09.270402Z", "relationship_type": "indicates", "source_ref": "indicator--e81c00b9-f15b-4daf-ab8c-8a3717ba5e9a", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ed4480-2892-44a2-b8a6-540544fa0b23", "created": "2026-10-09T15:13:09.270532Z", "modified": "2026-10-09T15:13:09.270532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='997b808e64c1ce1fed7605e63cffd37b98b3add891d22cddfda3e29dbfebb9d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.270532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7c35bd2-aa49-4278-b8dd-2c3867a00d03", "created": "2026-10-09T15:13:09.271123Z", "modified": "2026-10-09T15:13:09.271123Z", "relationship_type": "indicates", "source_ref": "indicator--d6ed4480-2892-44a2-b8a6-540544fa0b23", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83dc9403-97d9-4e13-9c1e-411358955b6e", "created": "2026-10-09T15:13:09.271246Z", "modified": "2026-10-09T15:13:09.271246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6b9370976a38b07771c528a0e66bcedf51f88d348c1c6a3a21d7e14fbef6094']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.271246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ea8c023-85cf-48ed-b1e9-b392f1161a5a", "created": "2026-10-09T15:13:09.271858Z", "modified": "2026-10-09T15:13:09.271858Z", "relationship_type": "indicates", "source_ref": "indicator--83dc9403-97d9-4e13-9c1e-411358955b6e", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5edf28-c874-425a-bbbe-dbb56802a2a9", "created": "2026-10-09T15:13:09.271983Z", "modified": "2026-10-09T15:13:09.271983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08a52e468a094957728b15cfcec2c25de03725c393c4c37e5ef72eb3bf7d09b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.271983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d99fd24c-05d1-4296-8dd3-4e30b063c81f", "created": "2026-10-09T15:13:09.272586Z", "modified": "2026-10-09T15:13:09.272586Z", "relationship_type": "indicates", "source_ref": "indicator--7c5edf28-c874-425a-bbbe-dbb56802a2a9", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f87c44-f653-40f8-bbd7-7bb44f5bb13b", "created": "2026-10-09T15:13:09.272707Z", "modified": "2026-10-09T15:13:09.272707Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='820d38f51e2557a5a20c9a6d53f116850bec0c2277cf111a1c631a35a47ccac2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.272707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31b4e83e-1471-459d-a3e9-16b442c3b4ca", "created": "2026-10-09T15:13:09.273293Z", "modified": "2026-10-09T15:13:09.273293Z", "relationship_type": "indicates", "source_ref": "indicator--05f87c44-f653-40f8-bbd7-7bb44f5bb13b", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ed08c3-0ad1-4d76-bc0b-c913338656ed", "created": "2026-10-09T15:13:09.273412Z", "modified": "2026-10-09T15:13:09.273412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e53360b146fac1dd68a92cde0d23c5badf852745222366b293d3936b306c275']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.273412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd7b56c7-3d1e-4414-b759-e37589f8be2c", "created": "2026-10-09T15:13:09.273996Z", "modified": "2026-10-09T15:13:09.273996Z", "relationship_type": "indicates", "source_ref": "indicator--41ed08c3-0ad1-4d76-bc0b-c913338656ed", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493fbe25-fe48-4f43-9bb6-299df4acc124", "created": "2026-10-09T15:13:09.274113Z", "modified": "2026-10-09T15:13:09.274113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f739bf9d16d719f55a4ccffd6b928a9f50cc8c226ff3568481e5584154e35a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.274113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69cfe1e8-4df2-47c5-b6f2-ed9bbc6f91e6", "created": "2026-10-09T15:13:09.274725Z", "modified": "2026-10-09T15:13:09.274725Z", "relationship_type": "indicates", "source_ref": "indicator--493fbe25-fe48-4f43-9bb6-299df4acc124", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd4585a-771b-4a47-9309-ee7c40655783", "created": "2026-10-09T15:13:09.274846Z", "modified": "2026-10-09T15:13:09.274846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2ff81a8d5f980e54c818df634b16b659471ebab0d358e132c9561ec3fcff1e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.274846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--646f10d6-4af4-4db5-b3e5-b5448c48b51a", "created": "2026-10-09T15:13:09.275544Z", "modified": "2026-10-09T15:13:09.275544Z", "relationship_type": "indicates", "source_ref": "indicator--ebd4585a-771b-4a47-9309-ee7c40655783", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee9c1e2-fee4-45df-8574-21bf1e01f71a", "created": "2026-10-09T15:13:09.275668Z", "modified": "2026-10-09T15:13:09.275668Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='168272c0283d82d9af512cbe379de2799d779bc7d68ae5c901e1bd388b63cd2c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.275668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e921242d-47b6-4db9-8c16-0e766a94f91c", "created": "2026-10-09T15:13:09.276255Z", "modified": "2026-10-09T15:13:09.276255Z", "relationship_type": "indicates", "source_ref": "indicator--0ee9c1e2-fee4-45df-8574-21bf1e01f71a", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a76b28d-bfb8-4137-b0fc-26f9217161a4", "created": "2026-10-09T15:13:09.27639Z", "modified": "2026-10-09T15:13:09.27639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cdd2c1df453e1db2845f3e26cb73ea9012f2bed64485da7278a5a88f8f67895']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.27639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec42eb49-531b-4c60-8efb-f6c2156356d7", "created": "2026-10-09T15:13:09.276978Z", "modified": "2026-10-09T15:13:09.276978Z", "relationship_type": "indicates", "source_ref": "indicator--2a76b28d-bfb8-4137-b0fc-26f9217161a4", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284496d4-f00c-455f-99f6-7894a054b0a8", "created": "2026-10-09T15:13:09.277098Z", "modified": "2026-10-09T15:13:09.277098Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='07cfd836073d0012c9f7d0ecc3fcfb0af848098d6fa60708acc9e2213fbd59a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.277098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5ac7a3a-54c6-4ba1-b8b2-c2f1cbbfdfe6", "created": "2026-10-09T15:13:09.277694Z", "modified": "2026-10-09T15:13:09.277694Z", "relationship_type": "indicates", "source_ref": "indicator--284496d4-f00c-455f-99f6-7894a054b0a8", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eac817-11cf-4a61-a9d9-7ccc7f4ee350", "created": "2026-10-09T15:13:09.277817Z", "modified": "2026-10-09T15:13:09.277817Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.277817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfdc10c4-d78d-4413-a88c-2347165280c5", "created": "2026-10-09T15:13:09.278287Z", "modified": "2026-10-09T15:13:09.278287Z", "relationship_type": "indicates", "source_ref": "indicator--03eac817-11cf-4a61-a9d9-7ccc7f4ee350", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970ec02a-e913-4cec-a36d-3f9ea42af386", "created": "2026-10-09T15:13:09.278406Z", "modified": "2026-10-09T15:13:09.278406Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.278406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--665d116e-0a48-441c-b5c2-4bfc18134fb4", "created": "2026-10-09T15:13:09.278859Z", "modified": "2026-10-09T15:13:09.278859Z", "relationship_type": "indicates", "source_ref": "indicator--970ec02a-e913-4cec-a36d-3f9ea42af386", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b374b7e9-5c08-4ef6-84d1-4f4a4b647bf5", "created": "2026-10-09T15:13:09.278974Z", "modified": "2026-10-09T15:13:09.278974Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.278974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21a6846e-fb4b-467c-8698-4a0874452554", "created": "2026-10-09T15:13:09.279448Z", "modified": "2026-10-09T15:13:09.279448Z", "relationship_type": "indicates", "source_ref": "indicator--b374b7e9-5c08-4ef6-84d1-4f4a4b647bf5", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cf75bc-aff2-4a38-b61f-59b93d6b6aad", "created": "2026-10-09T15:13:09.279568Z", "modified": "2026-10-09T15:13:09.279568Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.279568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91706c20-f795-459a-98a8-1d9ea98c6c18", "created": "2026-10-09T15:13:09.280025Z", "modified": "2026-10-09T15:13:09.280025Z", "relationship_type": "indicates", "source_ref": "indicator--c2cf75bc-aff2-4a38-b61f-59b93d6b6aad", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17eb90a2-8c26-46ce-978e-f638e994f649", "created": "2026-10-09T15:13:09.28014Z", "modified": "2026-10-09T15:13:09.28014Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.28014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c13d594c-17f0-49c3-ae9c-aaac2fac8d68", "created": "2026-10-09T15:13:09.280617Z", "modified": "2026-10-09T15:13:09.280617Z", "relationship_type": "indicates", "source_ref": "indicator--17eb90a2-8c26-46ce-978e-f638e994f649", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1f5d56-b9dd-4400-82d8-ef2c7a4393ad", "created": "2026-10-09T15:13:09.280738Z", "modified": "2026-10-09T15:13:09.280738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.280738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83757fbe-5def-4a96-a42c-730210d12085", "created": "2026-10-09T15:13:09.281307Z", "modified": "2026-10-09T15:13:09.281307Z", "relationship_type": "indicates", "source_ref": "indicator--3d1f5d56-b9dd-4400-82d8-ef2c7a4393ad", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9277585-8376-48dd-9ba5-caa2a81d5ad2", "created": "2026-10-09T15:13:09.281433Z", "modified": "2026-10-09T15:13:09.281433Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.281433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28889179-3be1-4c9e-97f5-2257de289c5d", "created": "2026-10-09T15:13:09.281893Z", "modified": "2026-10-09T15:13:09.281893Z", "relationship_type": "indicates", "source_ref": "indicator--a9277585-8376-48dd-9ba5-caa2a81d5ad2", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b3d62f-0d02-486b-a6e6-bb0b11a05e70", "created": "2026-10-09T15:13:09.282015Z", "modified": "2026-10-09T15:13:09.282015Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.282015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a73b7b7b-fb8f-40f1-ac3b-660ba142418b", "created": "2026-10-09T15:13:09.282477Z", "modified": "2026-10-09T15:13:09.282477Z", "relationship_type": "indicates", "source_ref": "indicator--32b3d62f-0d02-486b-a6e6-bb0b11a05e70", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8b31b4-b360-4035-a83d-608fd5d0ac93", "created": "2026-10-09T15:13:09.282604Z", "modified": "2026-10-09T15:13:09.282604Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.282604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b12ab24-6f5b-4e33-81b7-b8e135492a5f", "created": "2026-10-09T15:13:09.283058Z", "modified": "2026-10-09T15:13:09.283058Z", "relationship_type": "indicates", "source_ref": "indicator--ad8b31b4-b360-4035-a83d-608fd5d0ac93", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdd7ff4-7789-46fe-9eeb-14fcc1087c7b", "created": "2026-10-09T15:13:09.283174Z", "modified": "2026-10-09T15:13:09.283174Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.283174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d4b2398-b810-4f22-a850-69df3193650b", "created": "2026-10-09T15:13:09.283654Z", "modified": "2026-10-09T15:13:09.283654Z", "relationship_type": "indicates", "source_ref": "indicator--0bdd7ff4-7789-46fe-9eeb-14fcc1087c7b", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a8be33-d701-48e2-8a0a-3a16ca700e5e", "created": "2026-10-09T15:13:09.283778Z", "modified": "2026-10-09T15:13:09.283778Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.283778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9e052d1-0a3b-4f5e-a53c-1e72a9cdc514", "created": "2026-10-09T15:13:09.284236Z", "modified": "2026-10-09T15:13:09.284236Z", "relationship_type": "indicates", "source_ref": "indicator--90a8be33-d701-48e2-8a0a-3a16ca700e5e", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f24fd7-b1d9-421f-a956-d1f50d47a1d8", "created": "2026-10-09T15:13:09.284424Z", "modified": "2026-10-09T15:13:09.284424Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.284424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b14aebe4-fbd3-4e2b-818b-aa449ab34368", "created": "2026-10-09T15:13:09.284902Z", "modified": "2026-10-09T15:13:09.284902Z", "relationship_type": "indicates", "source_ref": "indicator--08f24fd7-b1d9-421f-a956-d1f50d47a1d8", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23faeb3d-010b-4025-b62f-605407cd870d", "created": "2026-10-09T15:13:09.285022Z", "modified": "2026-10-09T15:13:09.285022Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.285022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a346f007-3c38-43dd-91ce-7999374b09bb", "created": "2026-10-09T15:13:09.285531Z", "modified": "2026-10-09T15:13:09.285531Z", "relationship_type": "indicates", "source_ref": "indicator--23faeb3d-010b-4025-b62f-605407cd870d", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29450e69-a213-4008-9d74-af7cdd56a137", "created": "2026-10-09T15:13:09.285653Z", "modified": "2026-10-09T15:13:09.285653Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.285653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28c7881d-af20-40ee-b1e9-8e88f74bbb6d", "created": "2026-10-09T15:13:09.286119Z", "modified": "2026-10-09T15:13:09.286119Z", "relationship_type": "indicates", "source_ref": "indicator--29450e69-a213-4008-9d74-af7cdd56a137", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b0f765-886e-4b6e-81cd-829514c09d19", "created": "2026-10-09T15:13:09.286237Z", "modified": "2026-10-09T15:13:09.286237Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.286237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b147bb7d-3095-4d2d-8e60-6d88dc2099f7", "created": "2026-10-09T15:13:09.286812Z", "modified": "2026-10-09T15:13:09.286812Z", "relationship_type": "indicates", "source_ref": "indicator--a7b0f765-886e-4b6e-81cd-829514c09d19", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c17b27-42cf-4335-8e91-791f4a4e5826", "created": "2026-10-09T15:13:09.28694Z", "modified": "2026-10-09T15:13:09.28694Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.28694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc676151-b62a-484c-9965-14e28fbe895b", "created": "2026-10-09T15:13:09.287422Z", "modified": "2026-10-09T15:13:09.287422Z", "relationship_type": "indicates", "source_ref": "indicator--c8c17b27-42cf-4335-8e91-791f4a4e5826", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc22f637-f528-4e39-b442-0429092b463c", "created": "2026-10-09T15:13:09.287551Z", "modified": "2026-10-09T15:13:09.287551Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.287551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29724fe8-aaab-45b9-af67-3e289f8382b5", "created": "2026-10-09T15:13:09.288017Z", "modified": "2026-10-09T15:13:09.288017Z", "relationship_type": "indicates", "source_ref": "indicator--cc22f637-f528-4e39-b442-0429092b463c", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9a733e-e5b9-4be9-a4b7-154ae283f6dc", "created": "2026-10-09T15:13:09.28814Z", "modified": "2026-10-09T15:13:09.28814Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='240E97A0587BF99441787EA3BCB2B2D8827564FE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.28814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--977a6b9f-c3de-4f9d-b410-28cfaf93ceb8", "created": "2026-10-09T15:13:09.288699Z", "modified": "2026-10-09T15:13:09.288699Z", "relationship_type": "indicates", "source_ref": "indicator--8e9a733e-e5b9-4be9-a4b7-154ae283f6dc", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a31c95d-9c24-4c8e-b80a-4c8c9b162eee", "created": "2026-10-09T15:13:09.288825Z", "modified": "2026-10-09T15:13:09.288825Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='854F7978408EA58C5B792C1C1EF9733FC2D5E813']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.288825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--408971dd-76ea-4147-9add-4d68f43b880c", "created": "2026-10-09T15:13:09.289387Z", "modified": "2026-10-09T15:13:09.289387Z", "relationship_type": "indicates", "source_ref": "indicator--6a31c95d-9c24-4c8e-b80a-4c8c9b162eee", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d13b3b6-b303-46a4-bdd5-cd8dcd924ff0", "created": "2026-10-09T15:13:09.289512Z", "modified": "2026-10-09T15:13:09.289512Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1988EDEA389D42983CEC8B5F8A9C27AE49F800F9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.289512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--545b6a95-20b1-4457-90df-ec130cfdd0aa", "created": "2026-10-09T15:13:09.290053Z", "modified": "2026-10-09T15:13:09.290053Z", "relationship_type": "indicates", "source_ref": "indicator--3d13b3b6-b303-46a4-bdd5-cd8dcd924ff0", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bee9c0-a694-43ad-94b7-634f701ec2bb", "created": "2026-10-09T15:13:09.29017Z", "modified": "2026-10-09T15:13:09.29017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5E16BA998632C1C3E4D4AE707D6EE2454ED2AEB5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.29017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f45ff4a0-9669-4edf-893b-4e1548d98177", "created": "2026-10-09T15:13:09.290717Z", "modified": "2026-10-09T15:13:09.290717Z", "relationship_type": "indicates", "source_ref": "indicator--81bee9c0-a694-43ad-94b7-634f701ec2bb", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cfc3f3-07a3-4afb-b75e-8a587a600d2b", "created": "2026-10-09T15:13:09.290834Z", "modified": "2026-10-09T15:13:09.290834Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E023517B163AAAE209CBD97E312752960F575D38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.290834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b62fc98-d321-4434-803b-827253cb97b6", "created": "2026-10-09T15:13:09.291393Z", "modified": "2026-10-09T15:13:09.291393Z", "relationship_type": "indicates", "source_ref": "indicator--a3cfc3f3-07a3-4afb-b75e-8a587a600d2b", "target_ref": "malware--c3462954-a06c-420e-8746-990a30793e79"}, {"type": "malware", "spec_version": "2.1", "id": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b", "created": "2026-10-09T15:13:09.291513Z", "modified": "2026-10-09T15:13:09.291513Z", "name": "TrackMyPhones", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f40fbf5-f7b7-4ad1-bb2d-0607e4b92dbc", "created": "2026-10-09T15:13:09.291627Z", "modified": "2026-10-09T15:13:09.291627Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cell-tracker-green.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.291627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a0d6485-689f-4d95-98ff-f348f743eacd", "created": "2026-10-09T15:13:09.292125Z", "modified": "2026-10-09T15:13:09.292125Z", "relationship_type": "indicates", "source_ref": "indicator--6f40fbf5-f7b7-4ad1-bb2d-0607e4b92dbc", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6d9b3e-62cd-46eb-b2eb-cd9062db45eb", "created": "2026-10-09T15:13:09.292244Z", "modified": "2026-10-09T15:13:09.292244Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cell-tracker-updated.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.292244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31883b83-caa2-4b9e-8d20-041473d0fd31", "created": "2026-10-09T15:13:09.292856Z", "modified": "2026-10-09T15:13:09.292856Z", "relationship_type": "indicates", "source_ref": "indicator--7d6d9b3e-62cd-46eb-b2eb-cd9062db45eb", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c96dd2c-0602-4b38-899a-417d5ba5ac70", "created": "2026-10-09T15:13:09.292978Z", "modified": "2026-10-09T15:13:09.292978Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='key-logger-90fff.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.292978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--427b27ec-004e-4aa5-86ba-210542c7b3ac", "created": "2026-10-09T15:13:09.29348Z", "modified": "2026-10-09T15:13:09.29348Z", "relationship_type": "indicates", "source_ref": "indicator--2c96dd2c-0602-4b38-899a-417d5ba5ac70", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c309d49-fe55-4e1e-b5a3-597232f6f878", "created": "2026-10-09T15:13:09.293604Z", "modified": "2026-10-09T15:13:09.293604Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='message-tracker-98822.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.293604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92315192-c5e8-4bf0-a688-0190ec341f34", "created": "2026-10-09T15:13:09.294105Z", "modified": "2026-10-09T15:13:09.294105Z", "relationship_type": "indicates", "source_ref": "indicator--7c309d49-fe55-4e1e-b5a3-597232f6f878", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedc14be-af48-45dd-bbe1-00ace2f4fc38", "created": "2026-10-09T15:13:09.294225Z", "modified": "2026-10-09T15:13:09.294225Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smsandcalltracker.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.294225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7775f8ed-9867-4f4f-8292-9adc3361eab3", "created": "2026-10-09T15:13:09.294728Z", "modified": "2026-10-09T15:13:09.294728Z", "relationship_type": "indicates", "source_ref": "indicator--cedc14be-af48-45dd-bbe1-00ace2f4fc38", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d906e8-80d8-4f14-a9ec-2148dd91d50e", "created": "2026-10-09T15:13:09.294848Z", "modified": "2026-10-09T15:13:09.294848Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyaudiorecorder.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.294848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b73ab85-9c90-4349-ac1b-df5a19a8de6f", "created": "2026-10-09T15:13:09.295347Z", "modified": "2026-10-09T15:13:09.295347Z", "relationship_type": "indicates", "source_ref": "indicator--22d906e8-80d8-4f14-a9ec-2148dd91d50e", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bcd2ea-746b-4fab-83fe-1b0afd21f6f2", "created": "2026-10-09T15:13:09.295468Z", "modified": "2026-10-09T15:13:09.295468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmyphones-pro.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.295468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ce403c5-15ca-4558-abfc-4d3584a5be0b", "created": "2026-10-09T15:13:09.295955Z", "modified": "2026-10-09T15:13:09.295955Z", "relationship_type": "indicates", "source_ref": "indicator--63bcd2ea-746b-4fab-83fe-1b0afd21f6f2", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24580904-4d9c-47a5-896b-c1d2c4823330", "created": "2026-10-09T15:13:09.296072Z", "modified": "2026-10-09T15:13:09.296072Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.296072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92bd35bd-3585-446b-b8cd-690f0547c6e4", "created": "2026-10-09T15:13:09.29656Z", "modified": "2026-10-09T15:13:09.29656Z", "relationship_type": "indicates", "source_ref": "indicator--24580904-4d9c-47a5-896b-c1d2c4823330", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38468a23-d070-456a-bb7b-a867ce99e066", "created": "2026-10-09T15:13:09.296689Z", "modified": "2026-10-09T15:13:09.296689Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='video-recorder-c0419.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.296689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7029c4da-dc83-42bc-b4b6-1d2324f2cac8", "created": "2026-10-09T15:13:09.297182Z", "modified": "2026-10-09T15:13:09.297182Z", "relationship_type": "indicates", "source_ref": "indicator--38468a23-d070-456a-bb7b-a867ce99e066", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8979a5-7b77-449f-9381-1fcdce64271e", "created": "2026-10-09T15:13:09.297315Z", "modified": "2026-10-09T15:13:09.297315Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.297315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f04469d-09bd-4503-9452-6d475be54dae", "created": "2026-10-09T15:13:09.297808Z", "modified": "2026-10-09T15:13:09.297808Z", "relationship_type": "indicates", "source_ref": "indicator--6c8979a5-7b77-449f-9381-1fcdce64271e", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a246fe4-307a-4942-b95a-3eb56439a55f", "created": "2026-10-09T15:13:09.297936Z", "modified": "2026-10-09T15:13:09.297936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.297936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c45e7c8-1e69-4fd5-b228-2089e806c8c1", "created": "2026-10-09T15:13:09.298524Z", "modified": "2026-10-09T15:13:09.298524Z", "relationship_type": "indicates", "source_ref": "indicator--7a246fe4-307a-4942-b95a-3eb56439a55f", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc80c79-b3c4-4b8c-9241-ee84b83ad8da", "created": "2026-10-09T15:13:09.298649Z", "modified": "2026-10-09T15:13:09.298649Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.298649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c41408c-1845-45a5-97e5-310a3d6b3062", "created": "2026-10-09T15:13:09.29913Z", "modified": "2026-10-09T15:13:09.29913Z", "relationship_type": "indicates", "source_ref": "indicator--8fc80c79-b3c4-4b8c-9241-ee84b83ad8da", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178723aa-1aa0-4458-a160-511f099bae8d", "created": "2026-10-09T15:13:09.299252Z", "modified": "2026-10-09T15:13:09.299252Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.audiorec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.299252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fabc3153-b64a-4163-b484-5b343d364c04", "created": "2026-10-09T15:13:09.299718Z", "modified": "2026-10-09T15:13:09.299718Z", "relationship_type": "indicates", "source_ref": "indicator--178723aa-1aa0-4458-a160-511f099bae8d", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e362e55-5e61-44b8-af8a-203ca62d390f", "created": "2026-10-09T15:13:09.299834Z", "modified": "2026-10-09T15:13:09.299834Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.call_rec_hidden']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.299834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b2f3de3-b2a7-4be1-91fd-54b53d306c21", "created": "2026-10-09T15:13:09.300305Z", "modified": "2026-10-09T15:13:09.300305Z", "relationship_type": "indicates", "source_ref": "indicator--2e362e55-5e61-44b8-af8a-203ca62d390f", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04dc4e2-5e79-4a63-8f5a-e0113a0604f1", "created": "2026-10-09T15:13:09.300428Z", "modified": "2026-10-09T15:13:09.300428Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.300428Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0475ddff-15d4-4574-8898-5ea56f109890", "created": "2026-10-09T15:13:09.300886Z", "modified": "2026-10-09T15:13:09.300886Z", "relationship_type": "indicates", "source_ref": "indicator--d04dc4e2-5e79-4a63-8f5a-e0113a0604f1", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d540b191-7efe-4a1e-b81f-decd4f2d537c", "created": "2026-10-09T15:13:09.301006Z", "modified": "2026-10-09T15:13:09.301006Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.spy_call_recorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.301006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--526e2de4-adf3-459a-8c5a-54c042417d34", "created": "2026-10-09T15:13:09.30148Z", "modified": "2026-10-09T15:13:09.30148Z", "relationship_type": "indicates", "source_ref": "indicator--d540b191-7efe-4a1e-b81f-decd4f2d537c", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede439b5-161a-41bf-b63b-7fb268b394fe", "created": "2026-10-09T15:13:09.3016Z", "modified": "2026-10-09T15:13:09.3016Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.recorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.3016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--714d2a75-5955-42b4-ada1-a4ed09cd4c89", "created": "2026-10-09T15:13:09.302044Z", "modified": "2026-10-09T15:13:09.302044Z", "relationship_type": "indicates", "source_ref": "indicator--ede439b5-161a-41bf-b63b-7fb268b394fe", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784842b2-8613-4b01-b022-56c85a9817c3", "created": "2026-10-09T15:13:09.302161Z", "modified": "2026-10-09T15:13:09.302161Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.videorec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.302161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67251cf7-ba62-4444-996e-847544d060f2", "created": "2026-10-09T15:13:09.302638Z", "modified": "2026-10-09T15:13:09.302638Z", "relationship_type": "indicates", "source_ref": "indicator--784842b2-8613-4b01-b022-56c85a9817c3", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2801a8f8-3bd5-4a76-9069-c603d96db2a8", "created": "2026-10-09T15:13:09.30276Z", "modified": "2026-10-09T15:13:09.30276Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.apps.anti_theft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.30276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fb9a351-1eb9-42fb-9574-7ead59a5407f", "created": "2026-10-09T15:13:09.303221Z", "modified": "2026-10-09T15:13:09.303221Z", "relationship_type": "indicates", "source_ref": "indicator--2801a8f8-3bd5-4a76-9069-c603d96db2a8", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9005968-2979-4a99-9c98-a4d17bf4f544", "created": "2026-10-09T15:13:09.303354Z", "modified": "2026-10-09T15:13:09.303354Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.apps.rct.CellTrackerActivity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.303354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2250d04d-00d1-4a13-98c1-ff7d6dc37327", "created": "2026-10-09T15:13:09.304023Z", "modified": "2026-10-09T15:13:09.304023Z", "relationship_type": "indicates", "source_ref": "indicator--e9005968-2979-4a99-9c98-a4d17bf4f544", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b781b5a1-16dd-440f-b57e-3b9943a0e6d4", "created": "2026-10-09T15:13:09.304152Z", "modified": "2026-10-09T15:13:09.304152Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dev4playapps.whatsdeleted']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.304152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b8f5d3b-4838-4f7f-ab3f-afece294922f", "created": "2026-10-09T15:13:09.304639Z", "modified": "2026-10-09T15:13:09.304639Z", "relationship_type": "indicates", "source_ref": "indicator--b781b5a1-16dd-440f-b57e-3b9943a0e6d4", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c3143a-ec41-4712-9cd5-2e8fef07b450", "created": "2026-10-09T15:13:09.304759Z", "modified": "2026-10-09T15:13:09.304759Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_sms_tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.304759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98705d01-96a7-4a0b-bad9-646c51220464", "created": "2026-10-09T15:13:09.30522Z", "modified": "2026-10-09T15:13:09.30522Z", "relationship_type": "indicates", "source_ref": "indicator--99c3143a-ec41-4712-9cd5-2e8fef07b450", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4ca7f6-ffb2-4fd5-8054-e45eef37198b", "created": "2026-10-09T15:13:09.305355Z", "modified": "2026-10-09T15:13:09.305355Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_sms_tracker.updated']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.305355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa3c8847-b1f9-4ce7-b1b2-5373e634ad9a", "created": "2026-10-09T15:13:09.305831Z", "modified": "2026-10-09T15:13:09.305831Z", "relationship_type": "indicates", "source_ref": "indicator--3b4ca7f6-ffb2-4fd5-8054-e45eef37198b", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1482c3-ad33-4f71-9d12-ecc730d89030", "created": "2026-10-09T15:13:09.305951Z", "modified": "2026-10-09T15:13:09.305951Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.305951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e612c73a-0d4b-4746-b09a-5a95dbe0ece9", "created": "2026-10-09T15:13:09.306412Z", "modified": "2026-10-09T15:13:09.306412Z", "relationship_type": "indicates", "source_ref": "indicator--ff1482c3-ad33-4f71-9d12-ecc730d89030", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e79f59-d1d0-4c66-9aa5-5ac9b0a5593f", "created": "2026-10-09T15:13:09.306535Z", "modified": "2026-10-09T15:13:09.306535Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_celltracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.306535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c12ab74-f2c5-4235-ba5e-54c903efdbfa", "created": "2026-10-09T15:13:09.306983Z", "modified": "2026-10-09T15:13:09.306983Z", "relationship_type": "indicates", "source_ref": "indicator--d5e79f59-d1d0-4c66-9aa5-5ac9b0a5593f", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84207ab4-c931-421c-a3c2-c9af8d882bab", "created": "2026-10-09T15:13:09.307099Z", "modified": "2026-10-09T15:13:09.307099Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.local_cell_tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.307099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23b3f847-79f1-4c58-b99b-73bd323641c8", "created": "2026-10-09T15:13:09.307575Z", "modified": "2026-10-09T15:13:09.307575Z", "relationship_type": "indicates", "source_ref": "indicator--84207ab4-c931-421c-a3c2-c9af8d882bab", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05f1e7e-979a-4ee0-a27e-d1eca4ed392c", "created": "2026-10-09T15:13:09.307697Z", "modified": "2026-10-09T15:13:09.307697Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.local_cell_tracker_updated']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.307697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06a94db3-3b4d-4eae-9c10-220b2b424b7b", "created": "2026-10-09T15:13:09.308169Z", "modified": "2026-10-09T15:13:09.308169Z", "relationship_type": "indicates", "source_ref": "indicator--c05f1e7e-979a-4ee0-a27e-d1eca4ed392c", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20168450-a3fc-47e6-8c9b-da99a295e06f", "created": "2026-10-09T15:13:09.308303Z", "modified": "2026-10-09T15:13:09.308303Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.soh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.308303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3618c6cc-70c6-4acc-b630-cd13b8c102dd", "created": "2026-10-09T15:13:09.308745Z", "modified": "2026-10-09T15:13:09.308745Z", "relationship_type": "indicates", "source_ref": "indicator--20168450-a3fc-47e6-8c9b-da99a295e06f", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aaf5a1a-cd91-4dfa-aed5-19bde52a5931", "created": "2026-10-09T15:13:09.308862Z", "modified": "2026-10-09T15:13:09.308862Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackerapps.whatsaptracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.308862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--712d4790-125a-46ef-944f-06cd6e305ea1", "created": "2026-10-09T15:13:09.309687Z", "modified": "2026-10-09T15:13:09.309687Z", "relationship_type": "indicates", "source_ref": "indicator--4aaf5a1a-cd91-4dfa-aed5-19bde52a5931", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360d7c9e-1b70-42e5-b6e2-24957d020a46", "created": "2026-10-09T15:13:09.309814Z", "modified": "2026-10-09T15:13:09.309814Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphone_pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.309814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d47d0c16-6e83-4e5d-bc8e-f0b07ee57da1", "created": "2026-10-09T15:13:09.310288Z", "modified": "2026-10-09T15:13:09.310288Z", "relationship_type": "indicates", "source_ref": "indicator--360d7c9e-1b70-42e5-b6e2-24957d020a46", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7186ab2-4138-4440-9254-07816eca08ca", "created": "2026-10-09T15:13:09.31041Z", "modified": "2026-10-09T15:13:09.31041Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphones.livefamilytracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.31041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9b44b6c-4ddf-42fe-8c8f-769506122853", "created": "2026-10-09T15:13:09.310886Z", "modified": "2026-10-09T15:13:09.310886Z", "relationship_type": "indicates", "source_ref": "indicator--c7186ab2-4138-4440-9254-07816eca08ca", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abdb505-7082-4d90-9643-f331530df4c1", "created": "2026-10-09T15:13:09.311007Z", "modified": "2026-10-09T15:13:09.311007Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphones.recoverphoneusingchatmessages']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.311007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--209e1279-3478-4540-838a-f792e42ab51f", "created": "2026-10-09T15:13:09.311512Z", "modified": "2026-10-09T15:13:09.311512Z", "relationship_type": "indicates", "source_ref": "indicator--7abdb505-7082-4d90-9643-f331530df4c1", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb4e550-6435-400c-822a-903b161d4462", "created": "2026-10-09T15:13:09.311634Z", "modified": "2026-10-09T15:13:09.311634Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphones.tmpusingchatmessages']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.311634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a30b007-fcd4-4bb4-898e-9a5459ff6b5f", "created": "2026-10-09T15:13:09.31211Z", "modified": "2026-10-09T15:13:09.31211Z", "relationship_type": "indicates", "source_ref": "indicator--6bb4e550-6435-400c-822a-903b161d4462", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8449756a-f5cd-41ec-94ba-f40304f1bef2", "created": "2026-10-09T15:13:09.31223Z", "modified": "2026-10-09T15:13:09.31223Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='37ACE0321E8833F25BDDB363AB395C81354E88A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.31223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3cb8906-2a47-46a8-b311-127770744bae", "created": "2026-10-09T15:13:09.312783Z", "modified": "2026-10-09T15:13:09.312783Z", "relationship_type": "indicates", "source_ref": "indicator--8449756a-f5cd-41ec-94ba-f40304f1bef2", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ff01ed-9cea-4c7f-a4c0-86f3454c1994", "created": "2026-10-09T15:13:09.312901Z", "modified": "2026-10-09T15:13:09.312901Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='554137DEE63BE07CE9687C5886244954277227F5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.312901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dfb1e60-cea8-44fe-8bb5-0426b5a1a3fd", "created": "2026-10-09T15:13:09.313452Z", "modified": "2026-10-09T15:13:09.313452Z", "relationship_type": "indicates", "source_ref": "indicator--f8ff01ed-9cea-4c7f-a4c0-86f3454c1994", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673267bd-f196-4828-999e-fd526e4f1fbd", "created": "2026-10-09T15:13:09.31358Z", "modified": "2026-10-09T15:13:09.31358Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='68AC78A7CD660ED204B4BC3C73A3F91DA1AE45FC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.31358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5e7c7c1-2df3-4111-bbd5-c59f0feb9776", "created": "2026-10-09T15:13:09.314126Z", "modified": "2026-10-09T15:13:09.314126Z", "relationship_type": "indicates", "source_ref": "indicator--673267bd-f196-4828-999e-fd526e4f1fbd", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0960e5f-3900-4a2f-ae68-730ebaab75a8", "created": "2026-10-09T15:13:09.314244Z", "modified": "2026-10-09T15:13:09.314244Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6DB1F33668AA745163DFB6C5614C3800BCA8D693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.314244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3737309f-01f5-4979-9cef-d05b41f9dd30", "created": "2026-10-09T15:13:09.314791Z", "modified": "2026-10-09T15:13:09.314791Z", "relationship_type": "indicates", "source_ref": "indicator--e0960e5f-3900-4a2f-ae68-730ebaab75a8", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025552ca-e61a-4a40-aebc-7d44fa556e98", "created": "2026-10-09T15:13:09.314909Z", "modified": "2026-10-09T15:13:09.314909Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='849D181E1BEE5084CBE1BACBA8442996A8B1F8C6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.314909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eae93482-8bb7-403e-a865-d9dffa23cd2e", "created": "2026-10-09T15:13:09.315549Z", "modified": "2026-10-09T15:13:09.315549Z", "relationship_type": "indicates", "source_ref": "indicator--025552ca-e61a-4a40-aebc-7d44fa556e98", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a189c0-02c1-4452-bda3-3dbf4845b4cd", "created": "2026-10-09T15:13:09.315675Z", "modified": "2026-10-09T15:13:09.315675Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='87EF370B8D6E3089E7F8CDDD6E830B5E4C8CF60B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.315675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c523c501-3eb7-4862-8ce9-add0d9460da9", "created": "2026-10-09T15:13:09.316219Z", "modified": "2026-10-09T15:13:09.316219Z", "relationship_type": "indicates", "source_ref": "indicator--29a189c0-02c1-4452-bda3-3dbf4845b4cd", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c721b91-3736-4ec1-98d1-14742d73ca56", "created": "2026-10-09T15:13:09.316354Z", "modified": "2026-10-09T15:13:09.316354Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A93266E83B136CBC220062898D308213263E793A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.316354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ac72aed-667a-4d7c-a9ea-a52c6d259c25", "created": "2026-10-09T15:13:09.316899Z", "modified": "2026-10-09T15:13:09.316899Z", "relationship_type": "indicates", "source_ref": "indicator--6c721b91-3736-4ec1-98d1-14742d73ca56", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fb7932-a6a6-451f-b1bd-dc1ef52e1cd9", "created": "2026-10-09T15:13:09.317017Z", "modified": "2026-10-09T15:13:09.317017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7285348B05EDAEFF7F032384E4F90182E1C1F27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.317017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--069c8ba6-7d83-49d3-a74a-9b13d427c0d7", "created": "2026-10-09T15:13:09.317563Z", "modified": "2026-10-09T15:13:09.317563Z", "relationship_type": "indicates", "source_ref": "indicator--91fb7932-a6a6-451f-b1bd-dc1ef52e1cd9", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c5889d-c010-4390-8742-025d96946a17", "created": "2026-10-09T15:13:09.317683Z", "modified": "2026-10-09T15:13:09.317683Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EBD3713DFB02D79ADC90C88DE1E0B547882F5A42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.317683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8f9beeb-dee8-4849-a920-135f932f6dd4", "created": "2026-10-09T15:13:09.318213Z", "modified": "2026-10-09T15:13:09.318213Z", "relationship_type": "indicates", "source_ref": "indicator--91c5889d-c010-4390-8742-025d96946a17", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed53798c-1e60-46be-88bc-67427fec335b", "created": "2026-10-09T15:13:09.318341Z", "modified": "2026-10-09T15:13:09.318341Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F5A5336B28456208EF357B4630A93A91206CF21A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.318341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53f483b3-6df4-43c6-b205-24997810cbf1", "created": "2026-10-09T15:13:09.318874Z", "modified": "2026-10-09T15:13:09.318874Z", "relationship_type": "indicates", "source_ref": "indicator--ed53798c-1e60-46be-88bc-67427fec335b", "target_ref": "malware--34faf8c6-6a96-4a1a-812c-ad1bfc707b2b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5", "created": "2026-10-09T15:13:09.31899Z", "modified": "2026-10-09T15:13:09.31899Z", "name": "FlexiSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96954b86-ab3b-47ce-9e90-9ed0168f1c69", "created": "2026-10-09T15:13:09.319107Z", "modified": "2026-10-09T15:13:09.319107Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.319107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e76940e6-740a-438d-80cf-f55cfa8b088d", "created": "2026-10-09T15:13:09.319593Z", "modified": "2026-10-09T15:13:09.319593Z", "relationship_type": "indicates", "source_ref": "indicator--96954b86-ab3b-47ce-9e90-9ed0168f1c69", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59162f55-a2b9-434e-b316-9c3035e348e8", "created": "2026-10-09T15:13:09.319716Z", "modified": "2026-10-09T15:13:09.319716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.319716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccd16614-158f-4a09-83bf-0f6228061bb5", "created": "2026-10-09T15:13:09.320185Z", "modified": "2026-10-09T15:13:09.320185Z", "relationship_type": "indicates", "source_ref": "indicator--59162f55-a2b9-434e-b316-9c3035e348e8", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3457dbc8-803b-4c10-829e-f0d4f120064c", "created": "2026-10-09T15:13:09.320314Z", "modified": "2026-10-09T15:13:09.320314Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='client.mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.320314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3a7dc0b-7b59-4314-a49c-e6dc4e6f698e", "created": "2026-10-09T15:13:09.320794Z", "modified": "2026-10-09T15:13:09.320794Z", "relationship_type": "indicates", "source_ref": "indicator--3457dbc8-803b-4c10-829e-f0d4f120064c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd550c8-b3a5-46c4-a39d-a5a9b9683bbf", "created": "2026-10-09T15:13:09.320913Z", "modified": "2026-10-09T15:13:09.320913Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='djp.bz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.320913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b7a10e3-c6b4-47da-bd93-a54202752eb6", "created": "2026-10-09T15:13:09.321482Z", "modified": "2026-10-09T15:13:09.321482Z", "relationship_type": "indicates", "source_ref": "indicator--7cd550c8-b3a5-46c4-a39d-a5a9b9683bbf", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e898b5e-67ea-42e6-9983-a6cbe289ab1d", "created": "2026-10-09T15:13:09.321608Z", "modified": "2026-10-09T15:13:09.321608Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dmw.bz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.321608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f20eee7c-3c41-4ba1-82c4-ee16d3307aed", "created": "2026-10-09T15:13:09.322067Z", "modified": "2026-10-09T15:13:09.322067Z", "relationship_type": "indicates", "source_ref": "indicator--5e898b5e-67ea-42e6-9983-a6cbe289ab1d", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ee0e8a-22b4-45dc-bcd0-ecabfad14de7", "created": "2026-10-09T15:13:09.322187Z", "modified": "2026-10-09T15:13:09.322187Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dmw.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.322187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6707b38-f110-4cb8-976e-e33d6a14f810", "created": "2026-10-09T15:13:09.322655Z", "modified": "2026-10-09T15:13:09.322655Z", "relationship_type": "indicates", "source_ref": "indicator--38ee0e8a-22b4-45dc-bcd0-ecabfad14de7", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb1d6b5-caf3-4f98-9c1d-502ac76b5112", "created": "2026-10-09T15:13:09.322775Z", "modified": "2026-10-09T15:13:09.322775Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ecom.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.322775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b06bbb37-f698-4339-8a39-86b7fad695df", "created": "2026-10-09T15:13:09.323245Z", "modified": "2026-10-09T15:13:09.323245Z", "relationship_type": "indicates", "source_ref": "indicator--fcb1d6b5-caf3-4f98-9c1d-502ac76b5112", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb18e52-53e9-49c1-b595-b44d4f12fe81", "created": "2026-10-09T15:13:09.323377Z", "modified": "2026-10-09T15:13:09.323377Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mflx.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.323377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8036af66-6ffc-4bb8-a579-712f4dbcbad3", "created": "2026-10-09T15:13:09.323842Z", "modified": "2026-10-09T15:13:09.323842Z", "relationship_type": "indicates", "source_ref": "indicator--0cb18e52-53e9-49c1-b595-b44d4f12fe81", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05155c8-5a59-4323-ad37-949d75867853", "created": "2026-10-09T15:13:09.32396Z", "modified": "2026-10-09T15:13:09.32396Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.32396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f33978f-8adf-43b3-bf8b-705133e81866", "created": "2026-10-09T15:13:09.324438Z", "modified": "2026-10-09T15:13:09.324438Z", "relationship_type": "indicates", "source_ref": "indicator--e05155c8-5a59-4323-ad37-949d75867853", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292cef12-23ae-455e-bffd-e190e70901b5", "created": "2026-10-09T15:13:09.324556Z", "modified": "2026-10-09T15:13:09.324556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='push.mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.324556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--209e1564-0091-458d-b883-b80976874c1e", "created": "2026-10-09T15:13:09.325029Z", "modified": "2026-10-09T15:13:09.325029Z", "relationship_type": "indicates", "source_ref": "indicator--292cef12-23ae-455e-bffd-e190e70901b5", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6950e048-f8ea-4cf0-9db9-d5fb8c0c12d8", "created": "2026-10-09T15:13:09.325147Z", "modified": "2026-10-09T15:13:09.325147Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test-client.mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.325147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce51a415-c065-44d8-afd8-3236b65c4917", "created": "2026-10-09T15:13:09.325651Z", "modified": "2026-10-09T15:13:09.325651Z", "relationship_type": "indicates", "source_ref": "indicator--6950e048-f8ea-4cf0-9db9-d5fb8c0c12d8", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df082e6e-d05b-4cfe-82b3-e24fa647292b", "created": "2026-10-09T15:13:09.325779Z", "modified": "2026-10-09T15:13:09.325779Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trkps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.325779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8a9f061-c73e-45c0-a825-9becfcc7e64b", "created": "2026-10-09T15:13:09.326252Z", "modified": "2026-10-09T15:13:09.326252Z", "relationship_type": "indicates", "source_ref": "indicator--df082e6e-d05b-4cfe-82b3-e24fa647292b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcab47af-8367-4555-ba2b-a830dfa27e05", "created": "2026-10-09T15:13:09.326384Z", "modified": "2026-10-09T15:13:09.326384Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.326384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac4362de-533a-441e-aefd-03a056f33dd9", "created": "2026-10-09T15:13:09.326949Z", "modified": "2026-10-09T15:13:09.326949Z", "relationship_type": "indicates", "source_ref": "indicator--dcab47af-8367-4555-ba2b-a830dfa27e05", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07566a5-fe26-47b8-90a7-24806a83e14b", "created": "2026-10-09T15:13:09.327072Z", "modified": "2026-10-09T15:13:09.327072Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='community.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.327072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1e44e79-fd7e-4d2d-85fc-1c5159b8e254", "created": "2026-10-09T15:13:09.327575Z", "modified": "2026-10-09T15:13:09.327575Z", "relationship_type": "indicates", "source_ref": "indicator--e07566a5-fe26-47b8-90a7-24806a83e14b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a24b29-8ca2-4fa8-bc08-b7a07a9f0565", "created": "2026-10-09T15:13:09.3277Z", "modified": "2026-10-09T15:13:09.3277Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='blog.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.3277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fafd1486-3750-4efd-b9db-5ebaa4429983", "created": "2026-10-09T15:13:09.328186Z", "modified": "2026-10-09T15:13:09.328186Z", "relationship_type": "indicates", "source_ref": "indicator--00a24b29-8ca2-4fa8-bc08-b7a07a9f0565", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cda275d-f7a1-4c0b-9eb5-1cd0491b1d8f", "created": "2026-10-09T15:13:09.328321Z", "modified": "2026-10-09T15:13:09.328321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.328321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--691c135e-3888-4bed-81a8-23429332aeff", "created": "2026-10-09T15:13:09.328791Z", "modified": "2026-10-09T15:13:09.328791Z", "relationship_type": "indicates", "source_ref": "indicator--0cda275d-f7a1-4c0b-9eb5-1cd0491b1d8f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd368290-f1c0-4931-b9e8-69c685fd6f3e", "created": "2026-10-09T15:13:09.328911Z", "modified": "2026-10-09T15:13:09.328911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.328911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c4683a5-70d7-4783-b911-735914ec6d37", "created": "2026-10-09T15:13:09.329388Z", "modified": "2026-10-09T15:13:09.329388Z", "relationship_type": "indicates", "source_ref": "indicator--fd368290-f1c0-4931-b9e8-69c685fd6f3e", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4642d8c4-85f0-4c3a-b46d-7db5f21a93d6", "created": "2026-10-09T15:13:09.329509Z", "modified": "2026-10-09T15:13:09.329509Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobileapps.com.my']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.329509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d291f088-1b92-4cec-a921-915c362150a0", "created": "2026-10-09T15:13:09.329983Z", "modified": "2026-10-09T15:13:09.329983Z", "relationship_type": "indicates", "source_ref": "indicator--4642d8c4-85f0-4c3a-b46d-7db5f21a93d6", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1494d94-da44-4d8d-a2f8-47ca961a7558", "created": "2026-10-09T15:13:09.330101Z", "modified": "2026-10-09T15:13:09.330101Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flexispy.mobileapps.com.my']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.330101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad3df45e-1b98-436a-a3e2-53a4035036b6", "created": "2026-10-09T15:13:09.330597Z", "modified": "2026-10-09T15:13:09.330597Z", "relationship_type": "indicates", "source_ref": "indicator--e1494d94-da44-4d8d-a2f8-47ca961a7558", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ac4426-fad7-4987-8ccd-13ca2696cd53", "created": "2026-10-09T15:13:09.330718Z", "modified": "2026-10-09T15:13:09.330718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.330718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f482b16-fad2-452e-baca-d98835e2f33b", "created": "2026-10-09T15:13:09.331198Z", "modified": "2026-10-09T15:13:09.331198Z", "relationship_type": "indicates", "source_ref": "indicator--47ac4426-fad7-4987-8ccd-13ca2696cd53", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea014ae-5913-4cfc-91c0-6785b9a5cdf4", "created": "2026-10-09T15:13:09.331327Z", "modified": "2026-10-09T15:13:09.331327Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='svlogin.asia']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.331327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1366f34a-8352-4234-9163-9a9a61d87701", "created": "2026-10-09T15:13:09.331796Z", "modified": "2026-10-09T15:13:09.331796Z", "relationship_type": "indicates", "source_ref": "indicator--5ea014ae-5913-4cfc-91c0-6785b9a5cdf4", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f739c5-97fe-40ed-abaf-7a8eb0ca7021", "created": "2026-10-09T15:13:09.331911Z", "modified": "2026-10-09T15:13:09.331911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyphonereview.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.331911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbc1c1e8-f8fa-449f-97d6-b2f490633ca4", "created": "2026-10-09T15:13:09.332486Z", "modified": "2026-10-09T15:13:09.332486Z", "relationship_type": "indicates", "source_ref": "indicator--a6f739c5-97fe-40ed-abaf-7a8eb0ca7021", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693ff46d-81aa-4ec7-bbf6-1a7d6739ee07", "created": "2026-10-09T15:13:09.332611Z", "modified": "2026-10-09T15:13:09.332611Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyphonereview.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.332611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c1b6089-a36d-4f64-98c5-412bc39be165", "created": "2026-10-09T15:13:09.333088Z", "modified": "2026-10-09T15:13:09.333088Z", "relationship_type": "indicates", "source_ref": "indicator--693ff46d-81aa-4ec7-bbf6-1a7d6739ee07", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e30789-8fe7-4065-91fa-31d8086471b2", "created": "2026-10-09T15:13:09.333213Z", "modified": "2026-10-09T15:13:09.333213Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='store.mycustomdevice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.333213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eff2196a-b4dd-4494-a4e9-aef27e64688f", "created": "2026-10-09T15:13:09.333703Z", "modified": "2026-10-09T15:13:09.333703Z", "relationship_type": "indicates", "source_ref": "indicator--82e30789-8fe7-4065-91fa-31d8086471b2", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5c0205-8419-4807-9c84-2f995949115a", "created": "2026-10-09T15:13:09.333822Z", "modified": "2026-10-09T15:13:09.333822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='629d05645708f678964dd536486a92db104c9e4b36c12d7a0602ca0e28be3f19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.333822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed69cfd4-ccf5-498d-9033-65ab59d96a51", "created": "2026-10-09T15:13:09.334421Z", "modified": "2026-10-09T15:13:09.334421Z", "relationship_type": "indicates", "source_ref": "indicator--0a5c0205-8419-4807-9c84-2f995949115a", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470e11fb-f7e3-4e7b-a369-5ebef810b0e6", "created": "2026-10-09T15:13:09.334544Z", "modified": "2026-10-09T15:13:09.334544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2283cc6dffe003313ddb8f27f265bf2b2e0d780560d98b38bb9ee4f3771bf07a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.334544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fce558c-27f8-4eca-a066-2596224a3a33", "created": "2026-10-09T15:13:09.335126Z", "modified": "2026-10-09T15:13:09.335126Z", "relationship_type": "indicates", "source_ref": "indicator--470e11fb-f7e3-4e7b-a369-5ebef810b0e6", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe2a21d-c3df-47e3-842d-4828ba89944f", "created": "2026-10-09T15:13:09.335248Z", "modified": "2026-10-09T15:13:09.335248Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d7cf15f08898313e87d36853532005ddf258ac11c4ae222c042ace22fa9859cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.335248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69b34531-724c-45cf-af24-6e55304e7a63", "created": "2026-10-09T15:13:09.335855Z", "modified": "2026-10-09T15:13:09.335855Z", "relationship_type": "indicates", "source_ref": "indicator--5fe2a21d-c3df-47e3-842d-4828ba89944f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f74ae1-b4d8-469b-a558-98f40dfd0844", "created": "2026-10-09T15:13:09.33598Z", "modified": "2026-10-09T15:13:09.33598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f92141215556f23b0f27e540edc6a46a6a6eea4fac8275f2386a14f9584beee4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.33598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72f6f8bb-3536-48f1-94af-fd17f5e1c060", "created": "2026-10-09T15:13:09.336578Z", "modified": "2026-10-09T15:13:09.336578Z", "relationship_type": "indicates", "source_ref": "indicator--37f74ae1-b4d8-469b-a558-98f40dfd0844", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a362c7-217e-4014-bed8-b56f5133523a", "created": "2026-10-09T15:13:09.336698Z", "modified": "2026-10-09T15:13:09.336698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='504475cf9bc3d997a6657d9ffd49a65ea96d333924615f158e3f992c33c4df65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.336698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8876166-ecdf-4b46-ba58-e5928f61b967", "created": "2026-10-09T15:13:09.337278Z", "modified": "2026-10-09T15:13:09.337278Z", "relationship_type": "indicates", "source_ref": "indicator--a4a362c7-217e-4014-bed8-b56f5133523a", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68200032-637b-4e07-98bd-a688cdf3169f", "created": "2026-10-09T15:13:09.337403Z", "modified": "2026-10-09T15:13:09.337403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73dcb593e6884c8727df4e214214b58fa5de719a4d2b91c7a209123ee64d3040']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.337403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2053746c-319c-4d50-896a-0b655f6c6ee3", "created": "2026-10-09T15:13:09.337986Z", "modified": "2026-10-09T15:13:09.337986Z", "relationship_type": "indicates", "source_ref": "indicator--68200032-637b-4e07-98bd-a688cdf3169f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46bbc99-9eac-4d80-8e26-fb04e331ff40", "created": "2026-10-09T15:13:09.338105Z", "modified": "2026-10-09T15:13:09.338105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bd871d3581be83459d6d166ba02fe89cad32549c393cd8a63420a7e02e3968d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.338105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f524b0c-996f-48ac-a9b6-4bcdfffe28ea", "created": "2026-10-09T15:13:09.338798Z", "modified": "2026-10-09T15:13:09.338798Z", "relationship_type": "indicates", "source_ref": "indicator--b46bbc99-9eac-4d80-8e26-fb04e331ff40", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd6a43f-cae7-441e-94b3-279923f13315", "created": "2026-10-09T15:13:09.338921Z", "modified": "2026-10-09T15:13:09.338921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6e4983f344777a35d5d671b9bae8058a6789ee76c7b0188635b79a161bca4e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.338921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2aadb71a-bdf4-4fef-972d-613061a252ed", "created": "2026-10-09T15:13:09.339519Z", "modified": "2026-10-09T15:13:09.339519Z", "relationship_type": "indicates", "source_ref": "indicator--ccd6a43f-cae7-441e-94b3-279923f13315", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3144ae8-1321-402d-9c9a-d69b7680dac5", "created": "2026-10-09T15:13:09.339641Z", "modified": "2026-10-09T15:13:09.339641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82b9a2e301f8de29a212777fd3402979ad61429b6b2606d800b6194405573a8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.339641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14d6135a-3389-43f1-bcb7-b2fad97000df", "created": "2026-10-09T15:13:09.340224Z", "modified": "2026-10-09T15:13:09.340224Z", "relationship_type": "indicates", "source_ref": "indicator--a3144ae8-1321-402d-9c9a-d69b7680dac5", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ee4070-a81c-4596-bf9b-563be8ddbd13", "created": "2026-10-09T15:13:09.340357Z", "modified": "2026-10-09T15:13:09.340357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='819d52dd948f3d60e63d77de87b4a283b9702062b21d2a222c4049cbfc828f27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.340357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a271bfa3-a608-4b11-b5aa-c9fcfc8b2ed9", "created": "2026-10-09T15:13:09.340948Z", "modified": "2026-10-09T15:13:09.340948Z", "relationship_type": "indicates", "source_ref": "indicator--19ee4070-a81c-4596-bf9b-563be8ddbd13", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1f5ac7-8da5-424e-b552-2d6c3c7fe610", "created": "2026-10-09T15:13:09.341069Z", "modified": "2026-10-09T15:13:09.341069Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8324ae4a0a721029a219d3f2e9fd2cd20c33a5cb1ac99f4f078b59f7939b3546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.341069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb4cb81d-9a7a-4750-abf1-335dd4a1ebb5", "created": "2026-10-09T15:13:09.341661Z", "modified": "2026-10-09T15:13:09.341661Z", "relationship_type": "indicates", "source_ref": "indicator--0a1f5ac7-8da5-424e-b552-2d6c3c7fe610", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375b66bc-d43c-440a-9137-a85dd02adaec", "created": "2026-10-09T15:13:09.34179Z", "modified": "2026-10-09T15:13:09.34179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b424e7e6cea215d3b4ef4f4d8577681b5adef42e739c744b10fcfc9fa1d09651']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.34179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ce7505b-0143-47f3-831a-7149d45712a4", "created": "2026-10-09T15:13:09.342387Z", "modified": "2026-10-09T15:13:09.342387Z", "relationship_type": "indicates", "source_ref": "indicator--375b66bc-d43c-440a-9137-a85dd02adaec", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46690843-d42b-4da9-a784-1990480e1ce6", "created": "2026-10-09T15:13:09.342509Z", "modified": "2026-10-09T15:13:09.342509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='524a8f152fbb35f63d4dadd4eca7d791976e3ebf9c69073b0fd896b118719dd4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.342509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ece76e3-de40-4068-80ab-d06df6495343", "created": "2026-10-09T15:13:09.343086Z", "modified": "2026-10-09T15:13:09.343086Z", "relationship_type": "indicates", "source_ref": "indicator--46690843-d42b-4da9-a784-1990480e1ce6", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eed1f75-3bc3-4210-bf23-9513b0d7c5a3", "created": "2026-10-09T15:13:09.343204Z", "modified": "2026-10-09T15:13:09.343204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='283b1f5f28bcefe24280befc8b82cf5d762dee195fbcfc26209e75076b9fb288']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.343204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbdb0148-509a-43b1-8669-cd805660d958", "created": "2026-10-09T15:13:09.343802Z", "modified": "2026-10-09T15:13:09.343802Z", "relationship_type": "indicates", "source_ref": "indicator--0eed1f75-3bc3-4210-bf23-9513b0d7c5a3", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b7940e-1eb3-44f9-9c4c-e5cc3aeb172a", "created": "2026-10-09T15:13:09.343924Z", "modified": "2026-10-09T15:13:09.343924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e772d5f847aad9584da5647c9fb1b32b47695e80dbe0c41c5f1fc501e0d49a25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.343924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d13d609-38c2-4ed6-83e5-5fade93d164d", "created": "2026-10-09T15:13:09.344532Z", "modified": "2026-10-09T15:13:09.344532Z", "relationship_type": "indicates", "source_ref": "indicator--e1b7940e-1eb3-44f9-9c4c-e5cc3aeb172a", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cb1d4f-4fd4-488f-9fde-ca7078a0840e", "created": "2026-10-09T15:13:09.344658Z", "modified": "2026-10-09T15:13:09.344658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e8aba856583237cabb2a418dbd81557998900416750df51a626a6ad6b1f37f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.344658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdd92f62-399a-4cee-a642-155734d35a03", "created": "2026-10-09T15:13:09.345359Z", "modified": "2026-10-09T15:13:09.345359Z", "relationship_type": "indicates", "source_ref": "indicator--36cb1d4f-4fd4-488f-9fde-ca7078a0840e", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326b6655-c830-459d-9b05-e6ec20d21da4", "created": "2026-10-09T15:13:09.345483Z", "modified": "2026-10-09T15:13:09.345483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63cb196bb96066e3dde59c01ed17d2ad00c236dc8c39f30702210d3d2978c8bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.345483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d838dc6e-5b9e-4826-b473-50027b11953f", "created": "2026-10-09T15:13:09.346065Z", "modified": "2026-10-09T15:13:09.346065Z", "relationship_type": "indicates", "source_ref": "indicator--326b6655-c830-459d-9b05-e6ec20d21da4", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1f7286-90b0-47c6-b369-1baa020bf117", "created": "2026-10-09T15:13:09.346187Z", "modified": "2026-10-09T15:13:09.346187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d77efd4d77c74bfeddbbcb498429b1fb8c8e5e89bea76ce789d61946f34e1ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.346187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbd19de-7c32-4aff-aa5a-4b1819d4fa75", "created": "2026-10-09T15:13:09.346796Z", "modified": "2026-10-09T15:13:09.346796Z", "relationship_type": "indicates", "source_ref": "indicator--9a1f7286-90b0-47c6-b369-1baa020bf117", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722e9dd9-1ead-41d3-b6a1-13291d4d646d", "created": "2026-10-09T15:13:09.346936Z", "modified": "2026-10-09T15:13:09.346936Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db872af401506c44cfb9d8fabda8ddd000f6a0692896fa7a113bd8f5e9217aac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.346936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f565d39-1b97-46d2-b9e6-c0102ba28c4f", "created": "2026-10-09T15:13:09.347537Z", "modified": "2026-10-09T15:13:09.347537Z", "relationship_type": "indicates", "source_ref": "indicator--722e9dd9-1ead-41d3-b6a1-13291d4d646d", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f2e860-841f-4fa2-9378-3ec1f810b895", "created": "2026-10-09T15:13:09.34766Z", "modified": "2026-10-09T15:13:09.34766Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='147d59d853429661fec7c0020fd06cfd6a49a3b4dcfd9e412800f58854c655d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.34766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90730629-4d98-4114-9b82-495561e61c0a", "created": "2026-10-09T15:13:09.348234Z", "modified": "2026-10-09T15:13:09.348234Z", "relationship_type": "indicates", "source_ref": "indicator--40f2e860-841f-4fa2-9378-3ec1f810b895", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44765758-11b8-4e9a-9056-da54173652cc", "created": "2026-10-09T15:13:09.348363Z", "modified": "2026-10-09T15:13:09.348363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03060cf094cfcb9b9dff2c9b91e58ab554b3608e7d0a8b606e9761d81ab67c2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.348363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e295ef1-0671-445a-a8f5-db2af8079e1f", "created": "2026-10-09T15:13:09.348942Z", "modified": "2026-10-09T15:13:09.348942Z", "relationship_type": "indicates", "source_ref": "indicator--44765758-11b8-4e9a-9056-da54173652cc", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3872d476-c6bc-4b16-ae3a-2a973bbe18b7", "created": "2026-10-09T15:13:09.349059Z", "modified": "2026-10-09T15:13:09.349059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1b93bd9d49499356fc34bb4e6d15dfa61f5629fce87c971739978ee5ed43d7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.349059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eed1e3de-bfa2-4ba2-91f6-a646a6c46447", "created": "2026-10-09T15:13:09.34965Z", "modified": "2026-10-09T15:13:09.34965Z", "relationship_type": "indicates", "source_ref": "indicator--3872d476-c6bc-4b16-ae3a-2a973bbe18b7", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0f4c85-19cf-4988-9fc5-1ff3766f151c", "created": "2026-10-09T15:13:09.349771Z", "modified": "2026-10-09T15:13:09.349771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d11ecfd27befbbff688b87d2cde7653f8d283ee1e255a891a7ba589337fbc8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.349771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4cdd4f2-329d-4c73-914e-638d7b50bbc5", "created": "2026-10-09T15:13:09.350356Z", "modified": "2026-10-09T15:13:09.350356Z", "relationship_type": "indicates", "source_ref": "indicator--1c0f4c85-19cf-4988-9fc5-1ff3766f151c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce44301-3a83-4f64-8ba0-6925edaac22f", "created": "2026-10-09T15:13:09.350476Z", "modified": "2026-10-09T15:13:09.350476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='729e706200803df2e11690cfc55e946eef62471293f2de2bc6bc57fa0b580286']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.350476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2511ab6-df4e-42bb-b9f8-04325746e654", "created": "2026-10-09T15:13:09.351054Z", "modified": "2026-10-09T15:13:09.351054Z", "relationship_type": "indicates", "source_ref": "indicator--2ce44301-3a83-4f64-8ba0-6925edaac22f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c193b094-cfe1-4c85-ab19-f2a0cfbb3aab", "created": "2026-10-09T15:13:09.351177Z", "modified": "2026-10-09T15:13:09.351177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='263219f185aa2a847bcb4ca981ec4a7c7eff8ded2d3b49d6fb2b4a578b43af60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.351177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53f67db0-0249-4247-86ba-6f2c76df5627", "created": "2026-10-09T15:13:09.351871Z", "modified": "2026-10-09T15:13:09.351871Z", "relationship_type": "indicates", "source_ref": "indicator--c193b094-cfe1-4c85-ab19-f2a0cfbb3aab", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d1c26-9a12-45de-be73-12a587957a42", "created": "2026-10-09T15:13:09.351992Z", "modified": "2026-10-09T15:13:09.351992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b3ddf2432581270677918128fb89c65e02f5e3955bb71bdc1d1d2622db5aa53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.351992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d1ab7a2-5eee-4487-bf6f-83642cac6cd3", "created": "2026-10-09T15:13:09.352583Z", "modified": "2026-10-09T15:13:09.352583Z", "relationship_type": "indicates", "source_ref": "indicator--317d1c26-9a12-45de-be73-12a587957a42", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc69201-6702-45ec-8eec-c4a84fce5826", "created": "2026-10-09T15:13:09.352708Z", "modified": "2026-10-09T15:13:09.352708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fc4127488d0d321e76fdb05d96270f63445a5d3eb4036f873e5b99fc6073621']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.352708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bbeb2fc-9c47-4090-adb3-0cd011a7fb7e", "created": "2026-10-09T15:13:09.353299Z", "modified": "2026-10-09T15:13:09.353299Z", "relationship_type": "indicates", "source_ref": "indicator--efc69201-6702-45ec-8eec-c4a84fce5826", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832d9156-f547-44c4-aa19-90d9ab4e9606", "created": "2026-10-09T15:13:09.353421Z", "modified": "2026-10-09T15:13:09.353421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b60c93c5ef18d8562c21fd6bda4bb9cc629b47913a32fc4fd05acffc7df2cbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.353421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9fe76e1-7e07-4dc8-9111-129c0adf2d1b", "created": "2026-10-09T15:13:09.353997Z", "modified": "2026-10-09T15:13:09.353997Z", "relationship_type": "indicates", "source_ref": "indicator--832d9156-f547-44c4-aa19-90d9ab4e9606", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac12fdb8-b4f0-4184-894a-736dce454043", "created": "2026-10-09T15:13:09.354113Z", "modified": "2026-10-09T15:13:09.354113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14e5272ab2e72d6dbf7da98156b2ed2f8e4706a6b8948fcc527d44deb2304db4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.354113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--094d4566-6f26-44da-95d5-8480ade22649", "created": "2026-10-09T15:13:09.354702Z", "modified": "2026-10-09T15:13:09.354702Z", "relationship_type": "indicates", "source_ref": "indicator--ac12fdb8-b4f0-4184-894a-736dce454043", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899a4de7-e1c2-4b2b-b08e-aec72c3e7fd0", "created": "2026-10-09T15:13:09.354822Z", "modified": "2026-10-09T15:13:09.354822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b989e458d1f1e921a779308f5b00b0142b13b27b956643c84a4484f11850620']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.354822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9772cb2-9bfa-482f-92b6-bf9df909e932", "created": "2026-10-09T15:13:09.355414Z", "modified": "2026-10-09T15:13:09.355414Z", "relationship_type": "indicates", "source_ref": "indicator--899a4de7-e1c2-4b2b-b08e-aec72c3e7fd0", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9732c4e-9352-4d9d-be4b-3f51116f8831", "created": "2026-10-09T15:13:09.355539Z", "modified": "2026-10-09T15:13:09.355539Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af66f53ec62cfd40fbf5970e647eaea9344b00e3071ca826dd5069f7368b9c89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.355539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e9910ee-e75a-4a9a-afb4-64779b5a1e45", "created": "2026-10-09T15:13:09.35613Z", "modified": "2026-10-09T15:13:09.35613Z", "relationship_type": "indicates", "source_ref": "indicator--b9732c4e-9352-4d9d-be4b-3f51116f8831", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867b44b5-efa7-4956-a472-94f7455b6438", "created": "2026-10-09T15:13:09.356255Z", "modified": "2026-10-09T15:13:09.356255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8b29c1a9d041bd40d125e429c361abac9173e185c438f888b2e6fd185300055']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.356255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac80de51-2aac-4b24-813f-0b0d63909dea", "created": "2026-10-09T15:13:09.356854Z", "modified": "2026-10-09T15:13:09.356854Z", "relationship_type": "indicates", "source_ref": "indicator--867b44b5-efa7-4956-a472-94f7455b6438", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80e7a8e-76ab-40bd-b6d2-5a3bbabe3e61", "created": "2026-10-09T15:13:09.356973Z", "modified": "2026-10-09T15:13:09.356973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69341dd6f108d496a32bb33b4afc1f801a048749e4d6f18b1c689bac02d516d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.356973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14c603fb-10e4-47d9-b38b-5d7cf5f4893f", "created": "2026-10-09T15:13:09.357669Z", "modified": "2026-10-09T15:13:09.357669Z", "relationship_type": "indicates", "source_ref": "indicator--c80e7a8e-76ab-40bd-b6d2-5a3bbabe3e61", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55d943c-4c2d-4484-bca9-5e268515b6a0", "created": "2026-10-09T15:13:09.357797Z", "modified": "2026-10-09T15:13:09.357797Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c308d3c41f8dffd0360f5c42863133ed9393b128ff5fec9d54a75cd562bfe88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.357797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af1c817b-b3b8-49dc-8529-8f3b6b606d42", "created": "2026-10-09T15:13:09.358395Z", "modified": "2026-10-09T15:13:09.358395Z", "relationship_type": "indicates", "source_ref": "indicator--e55d943c-4c2d-4484-bca9-5e268515b6a0", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6d422c-dc7b-438c-bb95-bc86aa291fa7", "created": "2026-10-09T15:13:09.358521Z", "modified": "2026-10-09T15:13:09.358521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5097b54f3e552a5a30bed7a68fc60e3156d74e84686e35f79e6a5cbc95ae3c96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.358521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dc23554-f3ee-4c06-a15e-e069c3e4df5e", "created": "2026-10-09T15:13:09.359106Z", "modified": "2026-10-09T15:13:09.359106Z", "relationship_type": "indicates", "source_ref": "indicator--6a6d422c-dc7b-438c-bb95-bc86aa291fa7", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e7fd5b-ddb8-4145-81d9-ce3481fd33e9", "created": "2026-10-09T15:13:09.359225Z", "modified": "2026-10-09T15:13:09.359225Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4b9d0fbde6e33f835e2f59a2a53e1795648de6850404fceb72e6896cf8a529b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.359225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6481cc64-1905-4e6e-8b5a-1dacb566dab8", "created": "2026-10-09T15:13:09.359813Z", "modified": "2026-10-09T15:13:09.359813Z", "relationship_type": "indicates", "source_ref": "indicator--b6e7fd5b-ddb8-4145-81d9-ce3481fd33e9", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67333c63-0893-41f2-81b4-502737bfb25f", "created": "2026-10-09T15:13:09.359933Z", "modified": "2026-10-09T15:13:09.359933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2916e11f87c0a12f1412f0b6c4c470ea205e59d7b28f03d090a4960fc6bc26f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.359933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05244d71-715e-43aa-8f7e-f5bafdda5e1f", "created": "2026-10-09T15:13:09.360529Z", "modified": "2026-10-09T15:13:09.360529Z", "relationship_type": "indicates", "source_ref": "indicator--67333c63-0893-41f2-81b4-502737bfb25f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fefb63-7e61-4a44-8d42-1d915bdd9a0c", "created": "2026-10-09T15:13:09.360651Z", "modified": "2026-10-09T15:13:09.360651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='652a3041b5f5d4a213a4a3c6f2e37c85ec6dc51dba81752e98c7729b5ec9af00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.360651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd2594f5-2af9-4d7d-9c8f-a3715fc37e08", "created": "2026-10-09T15:13:09.361239Z", "modified": "2026-10-09T15:13:09.361239Z", "relationship_type": "indicates", "source_ref": "indicator--86fefb63-7e61-4a44-8d42-1d915bdd9a0c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef9e20c-c72f-4874-9792-4cc671b79ead", "created": "2026-10-09T15:13:09.361372Z", "modified": "2026-10-09T15:13:09.361372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66d0cd34a03c4a1613a638ef596648df724c148b6eb381fd080ab70c203e6022']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.361372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--467c2b36-fc3b-4e10-94eb-585041254eb7", "created": "2026-10-09T15:13:09.361959Z", "modified": "2026-10-09T15:13:09.361959Z", "relationship_type": "indicates", "source_ref": "indicator--1ef9e20c-c72f-4874-9792-4cc671b79ead", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3781d7d3-bab0-4a85-b429-dee063f70116", "created": "2026-10-09T15:13:09.362076Z", "modified": "2026-10-09T15:13:09.362076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f873a95f8d26798663c07dfd7460fedb3908612d3a1ebd1049a6c9b2fdd11f29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.362076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a594e37-b860-497e-bc0b-dc0f3c74daa5", "created": "2026-10-09T15:13:09.362669Z", "modified": "2026-10-09T15:13:09.362669Z", "relationship_type": "indicates", "source_ref": "indicator--3781d7d3-bab0-4a85-b429-dee063f70116", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0489d493-89f3-4462-843c-553f1b7128db", "created": "2026-10-09T15:13:09.362791Z", "modified": "2026-10-09T15:13:09.362791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2230455762c1bcfa9e646612b2bfc9685b1dae9dcc908be1d0fe5ce88d8d059a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.362791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef642f10-dc32-4eee-9957-b1b7c441970f", "created": "2026-10-09T15:13:09.363389Z", "modified": "2026-10-09T15:13:09.363389Z", "relationship_type": "indicates", "source_ref": "indicator--0489d493-89f3-4462-843c-553f1b7128db", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ef3868-9e96-4aec-b35e-ae2564b92f19", "created": "2026-10-09T15:13:09.36351Z", "modified": "2026-10-09T15:13:09.36351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1633f820bc6ad7ca13929f7760a42b1905b50bcaeec7475982120850bcae4de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.36351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfbaa1fe-425e-4411-8e1a-58356314911c", "created": "2026-10-09T15:13:09.364191Z", "modified": "2026-10-09T15:13:09.364191Z", "relationship_type": "indicates", "source_ref": "indicator--93ef3868-9e96-4aec-b35e-ae2564b92f19", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a69580-f37e-4a76-bd8d-18a08c061cfc", "created": "2026-10-09T15:13:09.364333Z", "modified": "2026-10-09T15:13:09.364333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8d613ed8e7df9dc1d675fdc0693e9cd6aef1c8e8452648af54a628cc1e71408']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.364333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30c7234c-987f-471d-9b09-7b9a42c31f00", "created": "2026-10-09T15:13:09.364916Z", "modified": "2026-10-09T15:13:09.364916Z", "relationship_type": "indicates", "source_ref": "indicator--d1a69580-f37e-4a76-bd8d-18a08c061cfc", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17e5e31-9485-4ce5-966a-46deb072b5f9", "created": "2026-10-09T15:13:09.365035Z", "modified": "2026-10-09T15:13:09.365035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d6e2a682c5e9588b77832cc34d3165a17895ce1ab39207c047421ec005bd1d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.365035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31fbc914-39ef-4c3a-805d-20a360dbd965", "created": "2026-10-09T15:13:09.365627Z", "modified": "2026-10-09T15:13:09.365627Z", "relationship_type": "indicates", "source_ref": "indicator--a17e5e31-9485-4ce5-966a-46deb072b5f9", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def46c89-e3df-43f2-bc13-573edf5fd2d5", "created": "2026-10-09T15:13:09.365754Z", "modified": "2026-10-09T15:13:09.365754Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79db438fad26a902b5b51cfb768ef52e1bd8570b576a622f69b563cfb4a6ad70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.365754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--147292d6-6933-4337-b5a1-afbaef3bf634", "created": "2026-10-09T15:13:09.366341Z", "modified": "2026-10-09T15:13:09.366341Z", "relationship_type": "indicates", "source_ref": "indicator--def46c89-e3df-43f2-bc13-573edf5fd2d5", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b0df313-d9cc-4e6d-bea6-baabca38089b", "created": "2026-10-09T15:13:09.366464Z", "modified": "2026-10-09T15:13:09.366464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a75266cb760660918103793a953b23081cb3f71068f6bfd2b2a9218f08a5c203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.366464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cc873f4-d4d5-4c2f-8b1a-54f3f98062f2", "created": "2026-10-09T15:13:09.367047Z", "modified": "2026-10-09T15:13:09.367047Z", "relationship_type": "indicates", "source_ref": "indicator--4b0df313-d9cc-4e6d-bea6-baabca38089b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae96a1e-62aa-4993-b5bf-d0379e9bf072", "created": "2026-10-09T15:13:09.367171Z", "modified": "2026-10-09T15:13:09.367171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='842bda5b3c8a095bed05067f75613d5b8bf5b394b814d239cdfcb1265b64d743']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.367171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f766b379-ba98-4617-b89f-09d5b7b93785", "created": "2026-10-09T15:13:09.367766Z", "modified": "2026-10-09T15:13:09.367766Z", "relationship_type": "indicates", "source_ref": "indicator--bae96a1e-62aa-4993-b5bf-d0379e9bf072", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13d2a29-c8f0-4ff3-821a-939efe61151f", "created": "2026-10-09T15:13:09.367894Z", "modified": "2026-10-09T15:13:09.367894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8975d81eaafecd67e784ffdc4caefd8a7859d1d5c4c36e034db97f89bd61ea09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.367894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--411e6ab2-b173-49d5-a6fa-9b9b1d23845d", "created": "2026-10-09T15:13:09.368486Z", "modified": "2026-10-09T15:13:09.368486Z", "relationship_type": "indicates", "source_ref": "indicator--f13d2a29-c8f0-4ff3-821a-939efe61151f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c39975-e95a-4158-9c7c-ef3ca07d6d5b", "created": "2026-10-09T15:13:09.368609Z", "modified": "2026-10-09T15:13:09.368609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e711734c571f89ad89015bde8956fdf76dfe8ab5140a7fe988214bf0c37db9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.368609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f9c39d5-8595-4d65-a003-5d910e747ec6", "created": "2026-10-09T15:13:09.369197Z", "modified": "2026-10-09T15:13:09.369197Z", "relationship_type": "indicates", "source_ref": "indicator--17c39975-e95a-4158-9c7c-ef3ca07d6d5b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eb4bc4-4938-4bc3-ab01-0e8fcb40d59d", "created": "2026-10-09T15:13:09.369331Z", "modified": "2026-10-09T15:13:09.369331Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cba7ae61dd553d033d353f000ea1b3484835000571be66b91e9dace1e21bf87a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.369331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04badce1-b47b-49f9-89d4-d2d5d75fe8b4", "created": "2026-10-09T15:13:09.36992Z", "modified": "2026-10-09T15:13:09.36992Z", "relationship_type": "indicates", "source_ref": "indicator--91eb4bc4-4938-4bc3-ab01-0e8fcb40d59d", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81f1e18-4085-42d0-b822-73806e85398f", "created": "2026-10-09T15:13:09.37004Z", "modified": "2026-10-09T15:13:09.37004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='891c7a96df0a0096186530d9fb76675af3c8b47e253f78aa393d8b89d8fdca7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.37004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--773fc9ea-a5d1-4e14-9bb8-593d812b2dd6", "created": "2026-10-09T15:13:09.37075Z", "modified": "2026-10-09T15:13:09.37075Z", "relationship_type": "indicates", "source_ref": "indicator--b81f1e18-4085-42d0-b822-73806e85398f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298fd5f1-d991-4f57-8691-402785085221", "created": "2026-10-09T15:13:09.370874Z", "modified": "2026-10-09T15:13:09.370874Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de89b1deda366a5dcdbca15e5ff243341bde19d041593db4b93342b7fdebd5e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.370874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--862c1e09-636a-4728-9c4f-709b970f00bd", "created": "2026-10-09T15:13:09.371482Z", "modified": "2026-10-09T15:13:09.371482Z", "relationship_type": "indicates", "source_ref": "indicator--298fd5f1-d991-4f57-8691-402785085221", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813631f0-5135-48bb-b00b-14282181157e", "created": "2026-10-09T15:13:09.371606Z", "modified": "2026-10-09T15:13:09.371606Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9876ffb4ade94291f96b53fe7900cf6ac859f72faae855fb640dad233bee4673']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.371606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c716653a-3d05-447b-959c-2b349ec54f33", "created": "2026-10-09T15:13:09.372183Z", "modified": "2026-10-09T15:13:09.372183Z", "relationship_type": "indicates", "source_ref": "indicator--813631f0-5135-48bb-b00b-14282181157e", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5669d749-6643-4eaa-a020-086f1d377970", "created": "2026-10-09T15:13:09.372315Z", "modified": "2026-10-09T15:13:09.372315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0ebd581890e0cc562205e71ca2868375b4349ec2961828117cb866032445be8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.372315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d85c852-c3ad-4c1b-b63e-5a8965d838fd", "created": "2026-10-09T15:13:09.372906Z", "modified": "2026-10-09T15:13:09.372906Z", "relationship_type": "indicates", "source_ref": "indicator--5669d749-6643-4eaa-a020-086f1d377970", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b71d53-d325-4992-bb3f-99348083f30a", "created": "2026-10-09T15:13:09.373026Z", "modified": "2026-10-09T15:13:09.373026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='520f8d78b3ccd3a772394225df7324003606aa0308753e5705ae4a87fedc9337']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.373026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42742a58-e3bb-441e-ad36-2b6fc98890da", "created": "2026-10-09T15:13:09.373625Z", "modified": "2026-10-09T15:13:09.373625Z", "relationship_type": "indicates", "source_ref": "indicator--e8b71d53-d325-4992-bb3f-99348083f30a", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e9d499-d473-47fc-af24-7e16a5b37e72", "created": "2026-10-09T15:13:09.373749Z", "modified": "2026-10-09T15:13:09.373749Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='805d9b7d316c37d45564cafc86c82adec7e820db8090ac1a80335074aa14fd91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.373749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4dddf064-f535-47fd-8700-d2b342f4f448", "created": "2026-10-09T15:13:09.374344Z", "modified": "2026-10-09T15:13:09.374344Z", "relationship_type": "indicates", "source_ref": "indicator--98e9d499-d473-47fc-af24-7e16a5b37e72", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd7af06-ae6b-4d3a-b0b9-9abc24cec685", "created": "2026-10-09T15:13:09.374464Z", "modified": "2026-10-09T15:13:09.374464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='127d342107c75a177516ab409da7df8cd0ac84984841684ab1a1aafce0eb8332']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.374464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1699539-543e-4a69-82a5-9ecd51c7ca8b", "created": "2026-10-09T15:13:09.375044Z", "modified": "2026-10-09T15:13:09.375044Z", "relationship_type": "indicates", "source_ref": "indicator--2cd7af06-ae6b-4d3a-b0b9-9abc24cec685", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c7648b-95db-4335-bb88-6515f621e8f1", "created": "2026-10-09T15:13:09.375164Z", "modified": "2026-10-09T15:13:09.375164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='254788b618c9e4558be3a718dd83aeb8eb87bc06f895a0d1c5b18275379a2860']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.375164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc515feb-92df-4b08-aa51-f62e69f7a410", "created": "2026-10-09T15:13:09.375759Z", "modified": "2026-10-09T15:13:09.375759Z", "relationship_type": "indicates", "source_ref": "indicator--50c7648b-95db-4335-bb88-6515f621e8f1", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43896269-c5ee-4fbd-951b-eef4c92400e7", "created": "2026-10-09T15:13:09.375885Z", "modified": "2026-10-09T15:13:09.375885Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd668d5caaf95f9888b0ff7973f58ba819693dff60aac0ef09f1a2702de4aeca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.375885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca06bb7b-ab24-4235-86f3-110a0362ab97", "created": "2026-10-09T15:13:09.376591Z", "modified": "2026-10-09T15:13:09.376591Z", "relationship_type": "indicates", "source_ref": "indicator--43896269-c5ee-4fbd-951b-eef4c92400e7", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d968ed3-3201-4c2e-a898-d293802987e6", "created": "2026-10-09T15:13:09.376719Z", "modified": "2026-10-09T15:13:09.376719Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4000906ce1876a11bbb9645b4dcb8366c8f6bfee8a7208130114180413a29cdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.376719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7460077a-3164-4f38-a44d-8753919aa89d", "created": "2026-10-09T15:13:09.377322Z", "modified": "2026-10-09T15:13:09.377322Z", "relationship_type": "indicates", "source_ref": "indicator--3d968ed3-3201-4c2e-a898-d293802987e6", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0c71ec-e2da-4f68-9c0e-934f3b6eb68a", "created": "2026-10-09T15:13:09.377445Z", "modified": "2026-10-09T15:13:09.377445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4838c60ef16339705f6463513b2bc61bf3003954975541e4ffab6a5c59901b62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.377445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50f899d1-5f3d-4562-b6be-e012105bc675", "created": "2026-10-09T15:13:09.378034Z", "modified": "2026-10-09T15:13:09.378034Z", "relationship_type": "indicates", "source_ref": "indicator--1e0c71ec-e2da-4f68-9c0e-934f3b6eb68a", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd77285a-23b8-4b0d-984d-2a9766072d92", "created": "2026-10-09T15:13:09.378154Z", "modified": "2026-10-09T15:13:09.378154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a1be708e64e987bb08e475e48fb9970624d1d473c647926991b8fe18dd706aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.378154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c8a1f85-dd8c-47cf-999f-6b31efb9ba6d", "created": "2026-10-09T15:13:09.378755Z", "modified": "2026-10-09T15:13:09.378755Z", "relationship_type": "indicates", "source_ref": "indicator--cd77285a-23b8-4b0d-984d-2a9766072d92", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11132bf-ff61-4c52-aeb9-1545e20a3ef0", "created": "2026-10-09T15:13:09.378878Z", "modified": "2026-10-09T15:13:09.378878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f4ecfc90ef28f3ef1d521cad9a8feb02115df22a3900f415f81c9114eb81b5f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.378878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aeebe7cd-8b7d-4570-86d4-0dfdc104314c", "created": "2026-10-09T15:13:09.379481Z", "modified": "2026-10-09T15:13:09.379481Z", "relationship_type": "indicates", "source_ref": "indicator--c11132bf-ff61-4c52-aeb9-1545e20a3ef0", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7f0990-216a-4a78-82fb-519e78f96de9", "created": "2026-10-09T15:13:09.379602Z", "modified": "2026-10-09T15:13:09.379602Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='292ae1988fe6189ccb2ff4b48708eed4907c191e0832fce16a095d908a13af23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.379602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--157d7ff7-e894-48cc-9829-ed9b2fbf923c", "created": "2026-10-09T15:13:09.380182Z", "modified": "2026-10-09T15:13:09.380182Z", "relationship_type": "indicates", "source_ref": "indicator--4b7f0990-216a-4a78-82fb-519e78f96de9", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3144b917-4c29-4e2a-bdc2-c2634f28e25b", "created": "2026-10-09T15:13:09.38031Z", "modified": "2026-10-09T15:13:09.38031Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be6726bcb1b986c66a44c9b6b96e91e36d3d486355cc57a546eb3091ede013ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.38031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8706b05-7133-4391-84d5-50ce7903258d", "created": "2026-10-09T15:13:09.380904Z", "modified": "2026-10-09T15:13:09.380904Z", "relationship_type": "indicates", "source_ref": "indicator--3144b917-4c29-4e2a-bdc2-c2634f28e25b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed9bce7-d17b-48ec-ada6-c3a968b49e76", "created": "2026-10-09T15:13:09.381025Z", "modified": "2026-10-09T15:13:09.381025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ded02bf772eee8a4f8536372bf36ebf77158766518462f30c435d9ee4b28987d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.381025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddf915f2-0fa2-44fe-9224-7d951e95bbe5", "created": "2026-10-09T15:13:09.381629Z", "modified": "2026-10-09T15:13:09.381629Z", "relationship_type": "indicates", "source_ref": "indicator--4ed9bce7-d17b-48ec-ada6-c3a968b49e76", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f584dec3-e434-4935-a864-5c05d14dd0e4", "created": "2026-10-09T15:13:09.381827Z", "modified": "2026-10-09T15:13:09.381827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d65dc0e9a6dbaf9cd17fec2a46d6dc30d91abeb21404ea8468cf7dc15d3fb62c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.381827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee4c7d4d-0d85-4e10-a483-afa3f5de91f6", "created": "2026-10-09T15:13:09.382456Z", "modified": "2026-10-09T15:13:09.382456Z", "relationship_type": "indicates", "source_ref": "indicator--f584dec3-e434-4935-a864-5c05d14dd0e4", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730ec128-d9bb-45cc-b20a-1117d4c28db9", "created": "2026-10-09T15:13:09.382581Z", "modified": "2026-10-09T15:13:09.382581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ba9575f107c2fdeab000b4c65c44dc8d92e1371d26651d78776b157f8ce2bb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.382581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--362f1f8b-6e4e-4ebc-9688-9a80575b0d4a", "created": "2026-10-09T15:13:09.383572Z", "modified": "2026-10-09T15:13:09.383572Z", "relationship_type": "indicates", "source_ref": "indicator--730ec128-d9bb-45cc-b20a-1117d4c28db9", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58beabd0-5afc-4122-9f75-931b3aab7fd8", "created": "2026-10-09T15:13:09.383701Z", "modified": "2026-10-09T15:13:09.383701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acce32692b0737b9d6446500ef609e9e50e60849820f9669c428d6e18d3ec026']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.383701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acb3af49-206d-4f45-b537-003d3ba4a011", "created": "2026-10-09T15:13:09.384317Z", "modified": "2026-10-09T15:13:09.384317Z", "relationship_type": "indicates", "source_ref": "indicator--58beabd0-5afc-4122-9f75-931b3aab7fd8", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2abbbe-b7e1-46b4-adfb-74d9b0da76aa", "created": "2026-10-09T15:13:09.384448Z", "modified": "2026-10-09T15:13:09.384448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94d82ad0fb1ba8d93038915d43eceea3ab1c7dfcc9c71628d5ec36d0bdf980b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.384448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90334143-a71a-4d33-9029-5687c2c9925f", "created": "2026-10-09T15:13:09.385118Z", "modified": "2026-10-09T15:13:09.385118Z", "relationship_type": "indicates", "source_ref": "indicator--af2abbbe-b7e1-46b4-adfb-74d9b0da76aa", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bc8cb0-3564-48fe-bd6e-fdd6e14a6912", "created": "2026-10-09T15:13:09.385249Z", "modified": "2026-10-09T15:13:09.385249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b851f5c83f11447d2f57b6d668cd391446b5e73382af827b7e74ff21f8e9cbbe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.385249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39caf9b5-581f-4c07-94f7-d1757a696536", "created": "2026-10-09T15:13:09.385878Z", "modified": "2026-10-09T15:13:09.385878Z", "relationship_type": "indicates", "source_ref": "indicator--e8bc8cb0-3564-48fe-bd6e-fdd6e14a6912", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fac902-e820-4087-bb60-b3a032fd460d", "created": "2026-10-09T15:13:09.386007Z", "modified": "2026-10-09T15:13:09.386007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='390534af533e709ea543b3f8b013d4ecc173dd7def431d6209886b23f37ca23d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.386007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46266167-b050-44a7-ad7a-f325a00f0aa2", "created": "2026-10-09T15:13:09.386617Z", "modified": "2026-10-09T15:13:09.386617Z", "relationship_type": "indicates", "source_ref": "indicator--e6fac902-e820-4087-bb60-b3a032fd460d", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd3b08-79db-43dc-82e9-89ef2118d6d1", "created": "2026-10-09T15:13:09.386745Z", "modified": "2026-10-09T15:13:09.386745Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf98e618a65d47048f4b7ad8bea6fe7f48a618580bd377f666228942698f34eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.386745Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--247e715f-cd5b-4def-ac76-b8fff96b0c29", "created": "2026-10-09T15:13:09.387349Z", "modified": "2026-10-09T15:13:09.387349Z", "relationship_type": "indicates", "source_ref": "indicator--6ecd3b08-79db-43dc-82e9-89ef2118d6d1", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53912210-43d6-410c-ba2c-de1386f6ffc8", "created": "2026-10-09T15:13:09.387472Z", "modified": "2026-10-09T15:13:09.387472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a1e5a7dafa54a23fe9050f1fdd1286d3bdfb75a80a90cafebfdbbc451f4f9a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.387472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d3d28e4-3a39-4880-be07-fc8dbb04ddf1", "created": "2026-10-09T15:13:09.388053Z", "modified": "2026-10-09T15:13:09.388053Z", "relationship_type": "indicates", "source_ref": "indicator--53912210-43d6-410c-ba2c-de1386f6ffc8", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740778a2-b1fb-46d8-8534-940cb3b49a63", "created": "2026-10-09T15:13:09.388174Z", "modified": "2026-10-09T15:13:09.388174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7a23301118ed495f62f01ee99df45d14928e14e5c7a2606278e8b3a8d949b8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.388174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11027ef2-4590-415d-9d6d-95345e99e666", "created": "2026-10-09T15:13:09.388769Z", "modified": "2026-10-09T15:13:09.388769Z", "relationship_type": "indicates", "source_ref": "indicator--740778a2-b1fb-46d8-8534-940cb3b49a63", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919b876c-c10a-41da-af0b-5065cd933f35", "created": "2026-10-09T15:13:09.38889Z", "modified": "2026-10-09T15:13:09.38889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3a8a88b9fdd79880e3d2c501831b262a63c7638cfc9f796b7ec38d27e114499']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.38889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4552dbf9-8499-44e1-b153-673cf43cbabc", "created": "2026-10-09T15:13:09.389487Z", "modified": "2026-10-09T15:13:09.389487Z", "relationship_type": "indicates", "source_ref": "indicator--919b876c-c10a-41da-af0b-5065cd933f35", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9c6bb6-fabe-407e-baf1-ac293830a1dc", "created": "2026-10-09T15:13:09.38961Z", "modified": "2026-10-09T15:13:09.38961Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0dcca2c94eae4d6f84f27ed91ff678e9234aa675abadd6f7d47c401874295a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.38961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e558a98-9ee1-4a3b-b35f-a4eb1016f880", "created": "2026-10-09T15:13:09.390313Z", "modified": "2026-10-09T15:13:09.390313Z", "relationship_type": "indicates", "source_ref": "indicator--da9c6bb6-fabe-407e-baf1-ac293830a1dc", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415f9e8c-52dd-4e57-9a90-7f854ab6789f", "created": "2026-10-09T15:13:09.390443Z", "modified": "2026-10-09T15:13:09.390443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58e036f627f0d56a4c52c69aa195c6e190c0c92e9c7b59908eb03dbc44d81540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.390443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--700c7bb9-a64d-4abd-819d-8dbccf4965ab", "created": "2026-10-09T15:13:09.391033Z", "modified": "2026-10-09T15:13:09.391033Z", "relationship_type": "indicates", "source_ref": "indicator--415f9e8c-52dd-4e57-9a90-7f854ab6789f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f26a46e-efe0-446f-8c9c-c1f88f661c05", "created": "2026-10-09T15:13:09.391155Z", "modified": "2026-10-09T15:13:09.391155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50d0dc2a515ea00c86b15c7c1bcc2910a05e4ad78eb85d7e553882e810106252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.391155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe5f1163-8625-4647-8ffb-872260c06ece", "created": "2026-10-09T15:13:09.391748Z", "modified": "2026-10-09T15:13:09.391748Z", "relationship_type": "indicates", "source_ref": "indicator--6f26a46e-efe0-446f-8c9c-c1f88f661c05", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdd7b3f-6947-4993-b72e-0b8e1f0639a6", "created": "2026-10-09T15:13:09.391871Z", "modified": "2026-10-09T15:13:09.391871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f278d8755ca9eddf7aa5b80270d3363a1204543576ace51047bda967e8abe7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.391871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eaafb42a-cab0-4992-8ba4-373acec16bae", "created": "2026-10-09T15:13:09.392467Z", "modified": "2026-10-09T15:13:09.392467Z", "relationship_type": "indicates", "source_ref": "indicator--0cdd7b3f-6947-4993-b72e-0b8e1f0639a6", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4adab1-851e-45b4-88ad-3981b29df65d", "created": "2026-10-09T15:13:09.392588Z", "modified": "2026-10-09T15:13:09.392588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2d37e1ad33b35341e91823aaaa715f8cb6faf9cede6e0dd33f193b7142ee034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.392588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecf7169a-793e-4eb6-8ea1-36a548e7cb8d", "created": "2026-10-09T15:13:09.393169Z", "modified": "2026-10-09T15:13:09.393169Z", "relationship_type": "indicates", "source_ref": "indicator--5f4adab1-851e-45b4-88ad-3981b29df65d", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781f33de-7a1d-4d90-980f-6ebc0a2d1177", "created": "2026-10-09T15:13:09.393297Z", "modified": "2026-10-09T15:13:09.393297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7783772328ece39c65c4c11f1dbcf43741b26aed87e778e095957c9f6633d056']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.393297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cf269b0-bd11-48d2-946d-7d9a4e970eca", "created": "2026-10-09T15:13:09.393883Z", "modified": "2026-10-09T15:13:09.393883Z", "relationship_type": "indicates", "source_ref": "indicator--781f33de-7a1d-4d90-980f-6ebc0a2d1177", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071a8dee-0f67-4e38-9444-c221efaf0f23", "created": "2026-10-09T15:13:09.394003Z", "modified": "2026-10-09T15:13:09.394003Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27407f291d9c51296950f0a37357583b1abf9968a24944df857bf241912bb792']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.394003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45621a40-9226-4931-b6cc-e352ca106b76", "created": "2026-10-09T15:13:09.394622Z", "modified": "2026-10-09T15:13:09.394622Z", "relationship_type": "indicates", "source_ref": "indicator--071a8dee-0f67-4e38-9444-c221efaf0f23", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392dc011-bcda-40c7-a4fe-1470762a063c", "created": "2026-10-09T15:13:09.394757Z", "modified": "2026-10-09T15:13:09.394757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='556e3b6460db768e576cfb7c95cce80d8fac0d464a4e04a1ae30da52d00161a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.394757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0dbeefa-613d-43e4-a62f-7a69f9960c7c", "created": "2026-10-09T15:13:09.395363Z", "modified": "2026-10-09T15:13:09.395363Z", "relationship_type": "indicates", "source_ref": "indicator--392dc011-bcda-40c7-a4fe-1470762a063c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1b3829-5b26-495f-994b-72da7a6ca560", "created": "2026-10-09T15:13:09.395485Z", "modified": "2026-10-09T15:13:09.395485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='505086563ff31206caacb2d80cb1351f101cf471b625b49e1750f39f9461f2e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.395485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f34d51c-3f5a-4679-ae60-818b17eb86c0", "created": "2026-10-09T15:13:09.396075Z", "modified": "2026-10-09T15:13:09.396075Z", "relationship_type": "indicates", "source_ref": "indicator--3c1b3829-5b26-495f-994b-72da7a6ca560", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc6ab06-13fe-4ee5-bb66-480a8f6c3397", "created": "2026-10-09T15:13:09.396192Z", "modified": "2026-10-09T15:13:09.396192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='385a17abde5f2a08372881383afc7b5afa96560edc23404bbd72d595e1b73c46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.396192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d8dbd7e-e214-4034-87e6-5ec23538067b", "created": "2026-10-09T15:13:09.396899Z", "modified": "2026-10-09T15:13:09.396899Z", "relationship_type": "indicates", "source_ref": "indicator--cfc6ab06-13fe-4ee5-bb66-480a8f6c3397", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c47399-136a-434f-be40-d4596662ee5a", "created": "2026-10-09T15:13:09.397021Z", "modified": "2026-10-09T15:13:09.397021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c33396a9b73a8ce66681b9badac7fe463e37c7f5917fad08be4d49bc4e6513eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.397021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bab49ecd-9388-4c75-8ad1-2eaeefa1d076", "created": "2026-10-09T15:13:09.397618Z", "modified": "2026-10-09T15:13:09.397618Z", "relationship_type": "indicates", "source_ref": "indicator--36c47399-136a-434f-be40-d4596662ee5a", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248417dc-2cf6-4c22-bc15-d864d4b2565b", "created": "2026-10-09T15:13:09.39774Z", "modified": "2026-10-09T15:13:09.39774Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5129bfdd8ed1c48d085a6b7602712a1127ee763540823f8a69181f58207c4fdd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.39774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48db26d7-f2c0-4098-9522-0da77ae1c885", "created": "2026-10-09T15:13:09.398335Z", "modified": "2026-10-09T15:13:09.398335Z", "relationship_type": "indicates", "source_ref": "indicator--248417dc-2cf6-4c22-bc15-d864d4b2565b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cf02a5-325a-414e-9526-d06bc9e17773", "created": "2026-10-09T15:13:09.39846Z", "modified": "2026-10-09T15:13:09.39846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='585de082b8eef0da4e4f0bf9e411a1981d1aeae17c4af3777cfaf7baa8f611df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.39846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3aded18-5175-43d0-9f9a-3d6b4d33410d", "created": "2026-10-09T15:13:09.39904Z", "modified": "2026-10-09T15:13:09.39904Z", "relationship_type": "indicates", "source_ref": "indicator--01cf02a5-325a-414e-9526-d06bc9e17773", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10170558-11ed-4903-9dc7-94c407bb2fb8", "created": "2026-10-09T15:13:09.399157Z", "modified": "2026-10-09T15:13:09.399157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a7e00818893e4558d4eb13e7481b65588836d854332deca6efd479930e9063f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.399157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b76d6a4-2941-48b1-bb74-270ae150f9a5", "created": "2026-10-09T15:13:09.399741Z", "modified": "2026-10-09T15:13:09.399741Z", "relationship_type": "indicates", "source_ref": "indicator--10170558-11ed-4903-9dc7-94c407bb2fb8", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64e9001-ed81-4166-b874-5f6c2f8fda6c", "created": "2026-10-09T15:13:09.39986Z", "modified": "2026-10-09T15:13:09.39986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='093076b9a75cab66895dfefde626f969c0147cf60c83e2311925a050285727e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.39986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cdc7da8-1646-44fb-8fd2-f50ab69c22b2", "created": "2026-10-09T15:13:09.400461Z", "modified": "2026-10-09T15:13:09.400461Z", "relationship_type": "indicates", "source_ref": "indicator--c64e9001-ed81-4166-b874-5f6c2f8fda6c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c836e73-b9f5-49c7-a948-2e06b35f2584", "created": "2026-10-09T15:13:09.400581Z", "modified": "2026-10-09T15:13:09.400581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91039e7c4700b0a1d6a44da6090b6eb06a8974e00ba27f54be399aaa50d3509a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.400581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa8eac5e-4b52-430e-8803-fcde916ec0b4", "created": "2026-10-09T15:13:09.401166Z", "modified": "2026-10-09T15:13:09.401166Z", "relationship_type": "indicates", "source_ref": "indicator--2c836e73-b9f5-49c7-a948-2e06b35f2584", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0034978-b88d-4409-a839-599526169c7e", "created": "2026-10-09T15:13:09.401295Z", "modified": "2026-10-09T15:13:09.401295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdffd1415a68c0cd95506b0ebed583174362019cef2132503ccf4579f3f8f8fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.401295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42c935b3-b3bc-4e74-8955-88efd6088dc3", "created": "2026-10-09T15:13:09.401879Z", "modified": "2026-10-09T15:13:09.401879Z", "relationship_type": "indicates", "source_ref": "indicator--c0034978-b88d-4409-a839-599526169c7e", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b92aef-d446-4c56-aa5a-0b3c99fe354f", "created": "2026-10-09T15:13:09.402007Z", "modified": "2026-10-09T15:13:09.402007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18b6ea2b5ccb594d9591556e9928d9745d6ebf4fad91d1e0b59b9b304234f46c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.402007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4d023d4-2713-4de8-8dd9-1f67e12242e9", "created": "2026-10-09T15:13:09.40271Z", "modified": "2026-10-09T15:13:09.40271Z", "relationship_type": "indicates", "source_ref": "indicator--18b92aef-d446-4c56-aa5a-0b3c99fe354f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8ba648-ae47-42e3-9edd-5c23c5c4f8f2", "created": "2026-10-09T15:13:09.402839Z", "modified": "2026-10-09T15:13:09.402839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dfd2ca20f81b6472cb4e74576871a1f57bfe5282b586c0d25050f512230619a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.402839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9eebff0-60bd-4df2-b527-1024d08401bf", "created": "2026-10-09T15:13:09.403438Z", "modified": "2026-10-09T15:13:09.403438Z", "relationship_type": "indicates", "source_ref": "indicator--8f8ba648-ae47-42e3-9edd-5c23c5c4f8f2", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9833a3c-4aa2-454d-a304-697d5a807bad", "created": "2026-10-09T15:13:09.40356Z", "modified": "2026-10-09T15:13:09.40356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62349f77e57047221064198a22b78919704df22091e09501c2416ece13e9a31c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.40356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6daa0bd8-e577-4f59-b5b6-f1e87a8fc636", "created": "2026-10-09T15:13:09.404144Z", "modified": "2026-10-09T15:13:09.404144Z", "relationship_type": "indicates", "source_ref": "indicator--c9833a3c-4aa2-454d-a304-697d5a807bad", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5da5cc-9bec-4f5b-8edc-171a5efb3313", "created": "2026-10-09T15:13:09.404278Z", "modified": "2026-10-09T15:13:09.404278Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d4956f7a43ed5500dc872a978fe34f6c34bdc8b5a436023dea08e8cf524a82d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.404278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--639962d2-f89a-462e-ab92-e13fd64f9839", "created": "2026-10-09T15:13:09.404862Z", "modified": "2026-10-09T15:13:09.404862Z", "relationship_type": "indicates", "source_ref": "indicator--0b5da5cc-9bec-4f5b-8edc-171a5efb3313", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce4d035-7bd6-4283-a85b-c00a113c4b13", "created": "2026-10-09T15:13:09.404982Z", "modified": "2026-10-09T15:13:09.404982Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80e9696f77364874cde7a23400e9272f8a485a943ee74a003e03c3b8a73098d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.404982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f9f03b7-f39a-4b68-9dd1-1a9fa822db88", "created": "2026-10-09T15:13:09.405583Z", "modified": "2026-10-09T15:13:09.405583Z", "relationship_type": "indicates", "source_ref": "indicator--8ce4d035-7bd6-4283-a85b-c00a113c4b13", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a00eff-4417-4e33-a3be-128854f626bc", "created": "2026-10-09T15:13:09.405706Z", "modified": "2026-10-09T15:13:09.405706Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d70ad214e2fe251b312b7740753e5a2ac0eae852bb13fcc06d98ff46970e98d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.405706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1d6c6fe-c273-45b8-a38c-92671099db4d", "created": "2026-10-09T15:13:09.406299Z", "modified": "2026-10-09T15:13:09.406299Z", "relationship_type": "indicates", "source_ref": "indicator--32a00eff-4417-4e33-a3be-128854f626bc", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d098864-9ff6-4b03-b9ff-732ad934e176", "created": "2026-10-09T15:13:09.406421Z", "modified": "2026-10-09T15:13:09.406421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95fab09d873a64584d14a0d902daba42da9ec19a75091caa487f50004b60fefa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.406421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcbcdbca-5eed-4e51-b531-46c7ea326195", "created": "2026-10-09T15:13:09.407006Z", "modified": "2026-10-09T15:13:09.407006Z", "relationship_type": "indicates", "source_ref": "indicator--9d098864-9ff6-4b03-b9ff-732ad934e176", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da1855b-603a-43a3-9e66-e77b02d35185", "created": "2026-10-09T15:13:09.407124Z", "modified": "2026-10-09T15:13:09.407124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6eee949f056538041d98233d10e1a1ad9f6c235e88c8475676c9c5b02f5b011']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.407124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16d46332-e9ee-40da-8938-863f66dafad9", "created": "2026-10-09T15:13:09.407716Z", "modified": "2026-10-09T15:13:09.407716Z", "relationship_type": "indicates", "source_ref": "indicator--1da1855b-603a-43a3-9e66-e77b02d35185", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b7b385-b741-4210-99d3-b7047b9150b3", "created": "2026-10-09T15:13:09.40784Z", "modified": "2026-10-09T15:13:09.40784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cad96486bad1db79f65433cf71935b6d9404f9c91786479141274ad6a6b52cf5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.40784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da6fc40c-bd3f-474d-99fe-807006851215", "created": "2026-10-09T15:13:09.40844Z", "modified": "2026-10-09T15:13:09.40844Z", "relationship_type": "indicates", "source_ref": "indicator--e6b7b385-b741-4210-99d3-b7047b9150b3", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfe4440-389b-4326-a5a5-5221ec13c68b", "created": "2026-10-09T15:13:09.40856Z", "modified": "2026-10-09T15:13:09.40856Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.vvt.android.syncmanager']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.40856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d464810-2f7e-4f6c-a14e-e25a86671bfb", "created": "2026-10-09T15:13:09.409136Z", "modified": "2026-10-09T15:13:09.409136Z", "relationship_type": "indicates", "source_ref": "indicator--fdfe4440-389b-4326-a5a5-5221ec13c68b", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782519ce-1849-4d39-8b23-a00a6b10f037", "created": "2026-10-09T15:13:09.409258Z", "modified": "2026-10-09T15:13:09.409258Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.telephony.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.409258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80ffcd16-b59c-44f2-9d3c-c13ac043a2c9", "created": "2026-10-09T15:13:09.409738Z", "modified": "2026-10-09T15:13:09.409738Z", "relationship_type": "indicates", "source_ref": "indicator--782519ce-1849-4d39-8b23-a00a6b10f037", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a22ee93-c0d4-449e-bf5e-f6e857250b4e", "created": "2026-10-09T15:13:09.409863Z", "modified": "2026-10-09T15:13:09.409863Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fp.backup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.409863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e067439c-8c33-4322-bc3e-d73c3baddbe6", "created": "2026-10-09T15:13:09.410321Z", "modified": "2026-10-09T15:13:09.410321Z", "relationship_type": "indicates", "source_ref": "indicator--0a22ee93-c0d4-449e-bf5e-f6e857250b4e", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb866d74-7090-408b-83b8-5ef6b674322c", "created": "2026-10-09T15:13:09.410443Z", "modified": "2026-10-09T15:13:09.410443Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.phone.dialer']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.410443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f2c2f13-501b-420a-8a0c-17725b2b0684", "created": "2026-10-09T15:13:09.410895Z", "modified": "2026-10-09T15:13:09.410895Z", "relationship_type": "indicates", "source_ref": "indicator--bb866d74-7090-408b-83b8-5ef6b674322c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24087a87-8003-461b-9ef7-8d3dba8388c9", "created": "2026-10-09T15:13:09.411013Z", "modified": "2026-10-09T15:13:09.411013Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='69B327860EDB531DDFFB1B5DBF0C24245A75F3E4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.411013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--809e259e-466e-4c4b-9627-72580ec49184", "created": "2026-10-09T15:13:09.411571Z", "modified": "2026-10-09T15:13:09.411571Z", "relationship_type": "indicates", "source_ref": "indicator--24087a87-8003-461b-9ef7-8d3dba8388c9", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07243dd-1fe2-40a2-9291-27e6bce9b692", "created": "2026-10-09T15:13:09.411692Z", "modified": "2026-10-09T15:13:09.411692Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='93385A087BB5CAB96EAE83A1AF874E0E39B2990F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.411692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a103913-f8a0-4c4c-bf3e-aeee39e9eae0", "created": "2026-10-09T15:13:09.412238Z", "modified": "2026-10-09T15:13:09.412238Z", "relationship_type": "indicates", "source_ref": "indicator--b07243dd-1fe2-40a2-9291-27e6bce9b692", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73692e52-d65e-4317-90f8-427c519e7a9f", "created": "2026-10-09T15:13:09.412382Z", "modified": "2026-10-09T15:13:09.412382Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20C940625B322C487A89B1FEBF6C090845B040C1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.412382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fa78532-e8a0-4674-a9ff-f3efcb38834b", "created": "2026-10-09T15:13:09.412926Z", "modified": "2026-10-09T15:13:09.412926Z", "relationship_type": "indicates", "source_ref": "indicator--73692e52-d65e-4317-90f8-427c519e7a9f", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c880b9-4c41-4a15-ab0d-0521d581a081", "created": "2026-10-09T15:13:09.413048Z", "modified": "2026-10-09T15:13:09.413048Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='984F8786102D9BF26E5244BBC93733D3609948F4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.413048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--273afe81-ae8e-4072-a6fa-2afd86d7958c", "created": "2026-10-09T15:13:09.413599Z", "modified": "2026-10-09T15:13:09.413599Z", "relationship_type": "indicates", "source_ref": "indicator--f0c880b9-4c41-4a15-ab0d-0521d581a081", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06791391-071e-4267-8f16-adb4403a2be3", "created": "2026-10-09T15:13:09.413725Z", "modified": "2026-10-09T15:13:09.413725Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='45DECBF059864164A4BC644D3EAB8127FC98238A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.413725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c69721bd-85bb-44ed-8784-11870c1b5360", "created": "2026-10-09T15:13:09.414307Z", "modified": "2026-10-09T15:13:09.414307Z", "relationship_type": "indicates", "source_ref": "indicator--06791391-071e-4267-8f16-adb4403a2be3", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881e59e9-1d72-44d2-9fde-616f05d55178", "created": "2026-10-09T15:13:09.414436Z", "modified": "2026-10-09T15:13:09.414436Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0B6C1B010FBEA4316EB01602F71CDD6A8F365023']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.414436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b19c00cb-3b74-4bfc-b578-e3eabd3e2f19", "created": "2026-10-09T15:13:09.415101Z", "modified": "2026-10-09T15:13:09.415101Z", "relationship_type": "indicates", "source_ref": "indicator--881e59e9-1d72-44d2-9fde-616f05d55178", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f197c9-ea40-467d-9865-ed171a132c18", "created": "2026-10-09T15:13:09.415224Z", "modified": "2026-10-09T15:13:09.415224Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='636F6FE622D3059B569C9989F3CD491607F23A5D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.415224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5afab2c7-1270-4c14-a056-6188840c096e", "created": "2026-10-09T15:13:09.415778Z", "modified": "2026-10-09T15:13:09.415778Z", "relationship_type": "indicates", "source_ref": "indicator--30f197c9-ea40-467d-9865-ed171a132c18", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabf08eb-cd6c-430c-a8b6-17bd9248e1d7", "created": "2026-10-09T15:13:09.415906Z", "modified": "2026-10-09T15:13:09.415906Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='284E4AF2E92E8E49EDC2C8792D7008759813CB68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.415906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff8490d3-e022-46b6-a579-532ecc9a6d83", "created": "2026-10-09T15:13:09.416448Z", "modified": "2026-10-09T15:13:09.416448Z", "relationship_type": "indicates", "source_ref": "indicator--aabf08eb-cd6c-430c-a8b6-17bd9248e1d7", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1131892d-4a76-4dcd-986d-364058baa54c", "created": "2026-10-09T15:13:09.416575Z", "modified": "2026-10-09T15:13:09.416575Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F6422B9D4DD3C7370E3ED2879EA4DC8F463CD2A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.416575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6437c45a-8528-4923-a591-919ff9b41518", "created": "2026-10-09T15:13:09.417116Z", "modified": "2026-10-09T15:13:09.417116Z", "relationship_type": "indicates", "source_ref": "indicator--1131892d-4a76-4dcd-986d-364058baa54c", "target_ref": "malware--89bc74b0-c6e6-4ceb-a107-bef3b2dabfe5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11", "created": "2026-10-09T15:13:09.417235Z", "modified": "2026-10-09T15:13:09.417235Z", "name": "Cerberus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08209e1-7fe2-47ad-8b31-f6e4d150f5d0", "created": "2026-10-09T15:13:09.417366Z", "modified": "2026-10-09T15:13:09.417366Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api-project-999803017449.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.417366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--671da633-773f-4509-a450-391154001682", "created": "2026-10-09T15:13:09.417874Z", "modified": "2026-10-09T15:13:09.417874Z", "relationship_type": "indicates", "source_ref": "indicator--c08209e1-7fe2-47ad-8b31-f6e4d150f5d0", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1f4b68-9b9f-4c79-aae5-7ef24b0fc061", "created": "2026-10-09T15:13:09.417998Z", "modified": "2026-10-09T15:13:09.417998Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.417998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c7b8d7e-bc6e-4d81-83a0-9e8ec5113cd8", "created": "2026-10-09T15:13:09.418477Z", "modified": "2026-10-09T15:13:09.418477Z", "relationship_type": "indicates", "source_ref": "indicator--bf1f4b68-9b9f-4c79-aae5-7ef24b0fc061", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d657bfac-7d92-4e7b-8e0d-1dcd82774914", "created": "2026-10-09T15:13:09.418597Z", "modified": "2026-10-09T15:13:09.418597Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.418597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--583159bd-fa19-4476-a172-18f96e083734", "created": "2026-10-09T15:13:09.419075Z", "modified": "2026-10-09T15:13:09.419075Z", "relationship_type": "indicates", "source_ref": "indicator--d657bfac-7d92-4e7b-8e0d-1dcd82774914", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c34bf3-f8a9-45c7-b19c-928f237fb4d7", "created": "2026-10-09T15:13:09.419193Z", "modified": "2026-10-09T15:13:09.419193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='enterprise.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.419193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9fd8b0c-fde9-41a5-9ca9-5e1eb6355ee7", "created": "2026-10-09T15:13:09.419684Z", "modified": "2026-10-09T15:13:09.419684Z", "relationship_type": "indicates", "source_ref": "indicator--12c34bf3-f8a9-45c7-b19c-928f237fb4d7", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c24cd77-f55b-4398-89c7-be10204bef86", "created": "2026-10-09T15:13:09.419805Z", "modified": "2026-10-09T15:13:09.419805Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphonetrackers.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.419805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58147db3-d607-4a7b-a0ed-70d5b77af0e0", "created": "2026-10-09T15:13:09.420294Z", "modified": "2026-10-09T15:13:09.420294Z", "relationship_type": "indicates", "source_ref": "indicator--5c24cd77-f55b-4398-89c7-be10204bef86", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f4ee4b-b28f-4bc3-829d-0f5b56972da2", "created": "2026-10-09T15:13:09.420413Z", "modified": "2026-10-09T15:13:09.420413Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.420413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76371db1-9a6a-4e33-8bd6-5b6601e2bddf", "created": "2026-10-09T15:13:09.420975Z", "modified": "2026-10-09T15:13:09.420975Z", "relationship_type": "indicates", "source_ref": "indicator--19f4ee4b-b28f-4bc3-829d-0f5b56972da2", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f700d348-94d8-4416-8a83-4d80a2824412", "created": "2026-10-09T15:13:09.421102Z", "modified": "2026-10-09T15:13:09.421102Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cerberusbrasil.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.421102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a797352-9db3-46b9-8f10-c3d22c2f7dac", "created": "2026-10-09T15:13:09.421587Z", "modified": "2026-10-09T15:13:09.421587Z", "relationship_type": "indicates", "source_ref": "indicator--f700d348-94d8-4416-8a83-4d80a2824412", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636553e3-5e49-4ced-b255-1efde5c10519", "created": "2026-10-09T15:13:09.421705Z", "modified": "2026-10-09T15:13:09.421705Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='enterprise.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.421705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdc4fbe5-4f57-4900-a234-3d1801015150", "created": "2026-10-09T15:13:09.42218Z", "modified": "2026-10-09T15:13:09.42218Z", "relationship_type": "indicates", "source_ref": "indicator--636553e3-5e49-4ced-b255-1efde5c10519", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc02461-50d0-4727-a8b0-6e186a58654b", "created": "2026-10-09T15:13:09.422309Z", "modified": "2026-10-09T15:13:09.422309Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.422309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa516d32-804e-45c7-afd5-268c504e9968", "created": "2026-10-09T15:13:09.422787Z", "modified": "2026-10-09T15:13:09.422787Z", "relationship_type": "indicates", "source_ref": "indicator--efc02461-50d0-4727-a8b0-6e186a58654b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f34109-7558-4bd2-be7d-3222b4feea67", "created": "2026-10-09T15:13:09.422904Z", "modified": "2026-10-09T15:13:09.422904Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cerberusbrasil.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.422904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35454f77-bb54-4a3b-a53d-be8a5e11f20a", "created": "2026-10-09T15:13:09.423411Z", "modified": "2026-10-09T15:13:09.423411Z", "relationship_type": "indicates", "source_ref": "indicator--d6f34109-7558-4bd2-be7d-3222b4feea67", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44730b49-a0c8-4507-916a-d3ea76683082", "created": "2026-10-09T15:13:09.423534Z", "modified": "2026-10-09T15:13:09.423534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90a0b5a532734653239bf2709d8d1cf3f9a6bb43d0fbff1fd872c6ddab37198e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.423534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7f58c12-b329-4ec8-b8ba-33e4210eff71", "created": "2026-10-09T15:13:09.424116Z", "modified": "2026-10-09T15:13:09.424116Z", "relationship_type": "indicates", "source_ref": "indicator--44730b49-a0c8-4507-916a-d3ea76683082", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f453092c-04e8-49b8-94d3-42b950501f3e", "created": "2026-10-09T15:13:09.424236Z", "modified": "2026-10-09T15:13:09.424236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a07519e35578e06abea58b877be6b51fab3e21ac1c0697e7d4d4dce2956168ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.424236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2504ce29-eaa6-44ab-837a-a9e953eb8817", "created": "2026-10-09T15:13:09.424848Z", "modified": "2026-10-09T15:13:09.424848Z", "relationship_type": "indicates", "source_ref": "indicator--f453092c-04e8-49b8-94d3-42b950501f3e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76f77af-6a10-426a-8c5b-5381e98bca54", "created": "2026-10-09T15:13:09.424967Z", "modified": "2026-10-09T15:13:09.424967Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18d8df481f25012c7997847dea274190e73b6d513ed90381b7dca23c63c820ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.424967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a184e644-98da-424a-8896-0214cd1985a5", "created": "2026-10-09T15:13:09.42557Z", "modified": "2026-10-09T15:13:09.42557Z", "relationship_type": "indicates", "source_ref": "indicator--f76f77af-6a10-426a-8c5b-5381e98bca54", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45478a53-07bb-40b1-a270-faaa250aba72", "created": "2026-10-09T15:13:09.425694Z", "modified": "2026-10-09T15:13:09.425694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ffb1824ae4ebe89792e49a7516eb0cb5edd459725c53828405717769d913520']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.425694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1466dd6-2795-4e57-92fb-c87da684365c", "created": "2026-10-09T15:13:09.426285Z", "modified": "2026-10-09T15:13:09.426285Z", "relationship_type": "indicates", "source_ref": "indicator--45478a53-07bb-40b1-a270-faaa250aba72", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1587c9-d9d4-4ab9-8970-0bcc79d5c4c9", "created": "2026-10-09T15:13:09.426411Z", "modified": "2026-10-09T15:13:09.426411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f050fe6731bad4a1144b35bf71f11940504a3bbd925c32ce014f040b3fdf7d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.426411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d5e0f96-ee70-421c-9e86-f7508fba0660", "created": "2026-10-09T15:13:09.427091Z", "modified": "2026-10-09T15:13:09.427091Z", "relationship_type": "indicates", "source_ref": "indicator--ee1587c9-d9d4-4ab9-8970-0bcc79d5c4c9", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf3971b-c9d4-4f86-840a-86b338013ca8", "created": "2026-10-09T15:13:09.427212Z", "modified": "2026-10-09T15:13:09.427212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de45510a354a6f6e479acf13cb3857576ba32e1613d744b64b04f0ea14987efb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.427212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21301ae0-ed8f-4e62-902d-4d01f568fddf", "created": "2026-10-09T15:13:09.427802Z", "modified": "2026-10-09T15:13:09.427802Z", "relationship_type": "indicates", "source_ref": "indicator--6bf3971b-c9d4-4f86-840a-86b338013ca8", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae396a9-b929-41cc-8b5d-9b3432a63c7f", "created": "2026-10-09T15:13:09.427923Z", "modified": "2026-10-09T15:13:09.427923Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f99642f097d882c0ed84ca3e3cd1a5bc71addbeae9a8382b3d536e78b959445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.427923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04a4e759-d9d0-466f-9053-27b9261a5126", "created": "2026-10-09T15:13:09.428516Z", "modified": "2026-10-09T15:13:09.428516Z", "relationship_type": "indicates", "source_ref": "indicator--6ae396a9-b929-41cc-8b5d-9b3432a63c7f", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10df8bf4-15c9-4a55-bdec-6bf09c29b0fd", "created": "2026-10-09T15:13:09.428643Z", "modified": "2026-10-09T15:13:09.428643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ea0a03485b81c507fa2cdf5b1e59db92117ad07c36653b1f9e8b35b048ab2f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.428643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c4ed51a-4e24-4e72-a97f-bb22e8fb244f", "created": "2026-10-09T15:13:09.429228Z", "modified": "2026-10-09T15:13:09.429228Z", "relationship_type": "indicates", "source_ref": "indicator--10df8bf4-15c9-4a55-bdec-6bf09c29b0fd", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b92b7d-6950-4beb-9b98-506530e2c161", "created": "2026-10-09T15:13:09.429361Z", "modified": "2026-10-09T15:13:09.429361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccb7fb6f3d46b752e028a642f03891b8c64ffd538a28a3e089f547a4ae3050f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.429361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f4f4cb7-2c69-4a83-b066-6ad7446de137", "created": "2026-10-09T15:13:09.429944Z", "modified": "2026-10-09T15:13:09.429944Z", "relationship_type": "indicates", "source_ref": "indicator--a2b92b7d-6950-4beb-9b98-506530e2c161", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc46f49-ceee-497d-acf8-f0a7598c6a08", "created": "2026-10-09T15:13:09.43007Z", "modified": "2026-10-09T15:13:09.43007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbf16231002ec4d6b938ab1d13f9be65f311ae50b88ef7650df5e63e64d9201d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.43007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--162eae98-17f5-4a68-a300-ea0dfc97f025", "created": "2026-10-09T15:13:09.430664Z", "modified": "2026-10-09T15:13:09.430664Z", "relationship_type": "indicates", "source_ref": "indicator--2cc46f49-ceee-497d-acf8-f0a7598c6a08", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60593a32-6878-46b8-b598-005452d64292", "created": "2026-10-09T15:13:09.430786Z", "modified": "2026-10-09T15:13:09.430786Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21b9ee90d26b44f4044fd53567cddfe6d17317ee8ed9d6131f92b2a56ce36478']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.430786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08e5cea2-da79-4ad9-9766-c950231459e0", "created": "2026-10-09T15:13:09.431384Z", "modified": "2026-10-09T15:13:09.431384Z", "relationship_type": "indicates", "source_ref": "indicator--60593a32-6878-46b8-b598-005452d64292", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba9390e-f4d1-4f5d-80e1-542087012a2d", "created": "2026-10-09T15:13:09.431504Z", "modified": "2026-10-09T15:13:09.431504Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='325143730618dc75a5801736072483973c9b96451e30de2be3620eb48a0eab7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.431504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2aecf1e-9288-4b2b-992d-ada4ad778a34", "created": "2026-10-09T15:13:09.43208Z", "modified": "2026-10-09T15:13:09.43208Z", "relationship_type": "indicates", "source_ref": "indicator--9ba9390e-f4d1-4f5d-80e1-542087012a2d", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775b9ea4-1a23-4a87-b889-adc946fca2b4", "created": "2026-10-09T15:13:09.432196Z", "modified": "2026-10-09T15:13:09.432196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23edea9968a85b9b7fd8637a06312a376a529d6db55abca70a191e71c82b81b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.432196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a638cbb7-9e4a-475a-a76d-73ff5f38eaa6", "created": "2026-10-09T15:13:09.432793Z", "modified": "2026-10-09T15:13:09.432793Z", "relationship_type": "indicates", "source_ref": "indicator--775b9ea4-1a23-4a87-b889-adc946fca2b4", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a05d0b1-88c7-4923-b5b7-5dea0ff8504b", "created": "2026-10-09T15:13:09.432918Z", "modified": "2026-10-09T15:13:09.432918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17286a07d28d5322c3fc327b310d06864d46ce1dbb442dd9c458d7dd43042525']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.432918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a175d598-c62f-4492-89be-fd623a12ac11", "created": "2026-10-09T15:13:09.433604Z", "modified": "2026-10-09T15:13:09.433604Z", "relationship_type": "indicates", "source_ref": "indicator--8a05d0b1-88c7-4923-b5b7-5dea0ff8504b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dde44b3-862e-4f0f-88dd-5ea8ca46ac17", "created": "2026-10-09T15:13:09.433726Z", "modified": "2026-10-09T15:13:09.433726Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e06a17b2f2410e54cd8a830ea8dbb1bb5fd14e55b3ee31b971d82e9ac5ab55c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.433726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17dfe59e-da67-409f-9d1c-d6333b7e9151", "created": "2026-10-09T15:13:09.434315Z", "modified": "2026-10-09T15:13:09.434315Z", "relationship_type": "indicates", "source_ref": "indicator--4dde44b3-862e-4f0f-88dd-5ea8ca46ac17", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db74826-ac66-4413-923a-3e9d338d1b7b", "created": "2026-10-09T15:13:09.43444Z", "modified": "2026-10-09T15:13:09.43444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='24bfa61267cc51de3b38e5d5f3361826b590ebcf380325ec42e5855785360269']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.43444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c95a683-e3a6-4c5a-8c5a-09801853737d", "created": "2026-10-09T15:13:09.435019Z", "modified": "2026-10-09T15:13:09.435019Z", "relationship_type": "indicates", "source_ref": "indicator--9db74826-ac66-4413-923a-3e9d338d1b7b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc151a74-9811-4532-b71a-79afba694bc5", "created": "2026-10-09T15:13:09.435137Z", "modified": "2026-10-09T15:13:09.435137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3fb79d7235abd7c01a4d4d204baf6b31d2da1a45370fa00acbe40b916e040b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.435137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96a8229a-4f1c-4e22-b5fe-b184e320a898", "created": "2026-10-09T15:13:09.435726Z", "modified": "2026-10-09T15:13:09.435726Z", "relationship_type": "indicates", "source_ref": "indicator--fc151a74-9811-4532-b71a-79afba694bc5", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3073d21-e1d5-4f74-8652-814b0d5977c9", "created": "2026-10-09T15:13:09.435847Z", "modified": "2026-10-09T15:13:09.435847Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d9ed7d93e4a84865da85196f220fbe7da684cb965e3d497d99ed02ff24da566']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.435847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16db25f6-6d86-409d-a03c-d370c6e6e9b8", "created": "2026-10-09T15:13:09.436444Z", "modified": "2026-10-09T15:13:09.436444Z", "relationship_type": "indicates", "source_ref": "indicator--c3073d21-e1d5-4f74-8652-814b0d5977c9", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc8b7cf-5489-4c71-8c0d-2d9cf79ee517", "created": "2026-10-09T15:13:09.436572Z", "modified": "2026-10-09T15:13:09.436572Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7def7aa2f1efd31194492451f32be88836b61035738b441ae6f416f9cb9cee9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.436572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50716c1c-c357-480e-9d36-a6cee3abe1fa", "created": "2026-10-09T15:13:09.437151Z", "modified": "2026-10-09T15:13:09.437151Z", "relationship_type": "indicates", "source_ref": "indicator--cbc8b7cf-5489-4c71-8c0d-2d9cf79ee517", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de49c47f-d11c-4f73-8834-412c77a5c7d6", "created": "2026-10-09T15:13:09.437281Z", "modified": "2026-10-09T15:13:09.437281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8caf04eb2f7aeb72dd7844a3401e5ef188766cf0f655f837d17b566009e69b6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.437281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41ba8afb-84ee-452c-92ef-c0f0ac34cd8a", "created": "2026-10-09T15:13:09.437866Z", "modified": "2026-10-09T15:13:09.437866Z", "relationship_type": "indicates", "source_ref": "indicator--de49c47f-d11c-4f73-8834-412c77a5c7d6", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583fca66-169e-4f90-8fb7-7e466baae0c5", "created": "2026-10-09T15:13:09.437983Z", "modified": "2026-10-09T15:13:09.437983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ecb4970eb7c4e570aa8611e8bdd094b6372ed03b815149c1bcd4b5be67eaf5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.437983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96743014-5463-49fa-9f2a-f916b405a065", "created": "2026-10-09T15:13:09.438575Z", "modified": "2026-10-09T15:13:09.438575Z", "relationship_type": "indicates", "source_ref": "indicator--583fca66-169e-4f90-8fb7-7e466baae0c5", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4005e64d-352b-4683-b935-4f0c8b2a4736", "created": "2026-10-09T15:13:09.438694Z", "modified": "2026-10-09T15:13:09.438694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='489b6a49d868a32ca3b019f64f2bd26d77a876cbb53cdb72b145c26adba667b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.438694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e81e45e9-79b0-4d15-93d5-227c6c5c2284", "created": "2026-10-09T15:13:09.439283Z", "modified": "2026-10-09T15:13:09.439283Z", "relationship_type": "indicates", "source_ref": "indicator--4005e64d-352b-4683-b935-4f0c8b2a4736", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed802c2-2a3e-4687-920b-ca1177298f3f", "created": "2026-10-09T15:13:09.439405Z", "modified": "2026-10-09T15:13:09.439405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='501ddb6420159994a344fa02be86dc8603667899009906edb473e393d91a7237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.439405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab1487cd-0b78-4e72-aaa2-e5c85955e6e1", "created": "2026-10-09T15:13:09.440096Z", "modified": "2026-10-09T15:13:09.440096Z", "relationship_type": "indicates", "source_ref": "indicator--bed802c2-2a3e-4687-920b-ca1177298f3f", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae6069c-f1c6-49d1-b668-2bf7dfcca630", "created": "2026-10-09T15:13:09.440219Z", "modified": "2026-10-09T15:13:09.440219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8dbc12619d968342ec4ebbdfcc58f18e0904ad79d53ebb56445c29b31f9f6c26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.440219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--309b8113-3b62-4c50-a513-935d3ee8c100", "created": "2026-10-09T15:13:09.440808Z", "modified": "2026-10-09T15:13:09.440808Z", "relationship_type": "indicates", "source_ref": "indicator--aae6069c-f1c6-49d1-b668-2bf7dfcca630", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f58b453-3645-43ad-97e7-440c0a2513eb", "created": "2026-10-09T15:13:09.440928Z", "modified": "2026-10-09T15:13:09.440928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='203e8ecb5a4b9efbc5a15e598ab1b3227814a50ab49bb0d80fd47e4d8ebed502']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.440928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7937c23b-87df-4784-85dd-75332e3512bc", "created": "2026-10-09T15:13:09.441519Z", "modified": "2026-10-09T15:13:09.441519Z", "relationship_type": "indicates", "source_ref": "indicator--2f58b453-3645-43ad-97e7-440c0a2513eb", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438c4bb9-aef5-455e-8660-9b552b2cf765", "created": "2026-10-09T15:13:09.441642Z", "modified": "2026-10-09T15:13:09.441642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3e19b106287edb6fd9204f176bbac37467d0e72f9c987cd2c69085aff3bc213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.441642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f57bb76-4afd-4a11-9d4c-9ecdf4182a32", "created": "2026-10-09T15:13:09.44223Z", "modified": "2026-10-09T15:13:09.44223Z", "relationship_type": "indicates", "source_ref": "indicator--438c4bb9-aef5-455e-8660-9b552b2cf765", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10628c7c-7441-4ae2-a8a0-afd3935cec60", "created": "2026-10-09T15:13:09.442362Z", "modified": "2026-10-09T15:13:09.442362Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7f4e8107365877e88b3cc70c334ae959f84d08e7ea8da663ace1ebc41212c5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.442362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b86f748-5760-4d0e-bab5-faf4eb1a5155", "created": "2026-10-09T15:13:09.44294Z", "modified": "2026-10-09T15:13:09.44294Z", "relationship_type": "indicates", "source_ref": "indicator--10628c7c-7441-4ae2-a8a0-afd3935cec60", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f838b7-3d96-4663-9660-f907af114f10", "created": "2026-10-09T15:13:09.443061Z", "modified": "2026-10-09T15:13:09.443061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ba5d45eafffd7e2feae9a2a9af61b7fa89550927664810f67db2dd7ed803851']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.443061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--618179e3-48db-436f-80f8-59ce3f533127", "created": "2026-10-09T15:13:09.443647Z", "modified": "2026-10-09T15:13:09.443647Z", "relationship_type": "indicates", "source_ref": "indicator--39f838b7-3d96-4663-9660-f907af114f10", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db98424f-3459-4825-9545-bc2517d62fd4", "created": "2026-10-09T15:13:09.443771Z", "modified": "2026-10-09T15:13:09.443771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c29fef7ae07b6209b608bd91a9704594c587d7bb846181d3a8df7a37803f28f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.443771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acf011d3-73a0-43d0-b60c-c9201ce66b19", "created": "2026-10-09T15:13:09.444356Z", "modified": "2026-10-09T15:13:09.444356Z", "relationship_type": "indicates", "source_ref": "indicator--db98424f-3459-4825-9545-bc2517d62fd4", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726ce72f-b3b4-4613-a65f-7c23f9e4357a", "created": "2026-10-09T15:13:09.444476Z", "modified": "2026-10-09T15:13:09.444476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a5c15412f8761a80cb73f651f5cb26600af1cdc614d815b0928070d54ec6a2c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.444476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--206d5b51-dc28-46cd-96ab-13d72d4d3149", "created": "2026-10-09T15:13:09.445055Z", "modified": "2026-10-09T15:13:09.445055Z", "relationship_type": "indicates", "source_ref": "indicator--726ce72f-b3b4-4613-a65f-7c23f9e4357a", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d257be2-a443-436c-b82a-3955dc3651e2", "created": "2026-10-09T15:13:09.445172Z", "modified": "2026-10-09T15:13:09.445172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4df74d42567fe4bea1d0e50fa7404406a92719fc8d48f287ec0af3e4451c2df8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.445172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05baa25f-1ca1-4079-9958-55b758d41690", "created": "2026-10-09T15:13:09.44587Z", "modified": "2026-10-09T15:13:09.44587Z", "relationship_type": "indicates", "source_ref": "indicator--5d257be2-a443-436c-b82a-3955dc3651e2", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2f4788-7624-469e-a3c9-5b02e18cf253", "created": "2026-10-09T15:13:09.446001Z", "modified": "2026-10-09T15:13:09.446001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69bc10d678014dd31013ed7ad63f79166344e37e0c93a1f26d929eb5a57be5c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.446001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b37fc8c1-5252-4af9-ba63-930b75346fea", "created": "2026-10-09T15:13:09.446609Z", "modified": "2026-10-09T15:13:09.446609Z", "relationship_type": "indicates", "source_ref": "indicator--3b2f4788-7624-469e-a3c9-5b02e18cf253", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f40b55-fea6-42f3-9bc8-2a155a1b47c8", "created": "2026-10-09T15:13:09.446732Z", "modified": "2026-10-09T15:13:09.446732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e874ee18137ab71db82f77008e25f26d42b8ba43ab348ef8e0e2399a59c19995']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.446732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c14ebd0c-4ffc-49e6-b15c-7a032363dced", "created": "2026-10-09T15:13:09.447321Z", "modified": "2026-10-09T15:13:09.447321Z", "relationship_type": "indicates", "source_ref": "indicator--d7f40b55-fea6-42f3-9bc8-2a155a1b47c8", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d1a0aa-aac8-42d7-9457-5d7e7373f6e1", "created": "2026-10-09T15:13:09.447443Z", "modified": "2026-10-09T15:13:09.447443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f23de045919828b23bc093e33249860939350f0800148e9f8e1b48ffa4f113b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.447443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ecd8cf6-ff21-4312-b690-4b194bc6d9ab", "created": "2026-10-09T15:13:09.448023Z", "modified": "2026-10-09T15:13:09.448023Z", "relationship_type": "indicates", "source_ref": "indicator--77d1a0aa-aac8-42d7-9457-5d7e7373f6e1", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be73163b-57ce-4186-963d-f2a7ecf05a26", "created": "2026-10-09T15:13:09.448146Z", "modified": "2026-10-09T15:13:09.448146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bc87b3228185cf54a2d5be5da23820c2ee88962546402a88755219c4f084997']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.448146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--865f59d7-8e8e-438d-a39e-674a2453e25e", "created": "2026-10-09T15:13:09.44874Z", "modified": "2026-10-09T15:13:09.44874Z", "relationship_type": "indicates", "source_ref": "indicator--be73163b-57ce-4186-963d-f2a7ecf05a26", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5716af60-862b-4a5c-a2df-303ee1a61ee8", "created": "2026-10-09T15:13:09.448863Z", "modified": "2026-10-09T15:13:09.448863Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98c2fe30c335bcd89c2ca4eff4b3ec92184344c5a498b01cb48534bbff7b32f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.448863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61df7595-f534-4f89-842b-a6fc2ead068d", "created": "2026-10-09T15:13:09.449451Z", "modified": "2026-10-09T15:13:09.449451Z", "relationship_type": "indicates", "source_ref": "indicator--5716af60-862b-4a5c-a2df-303ee1a61ee8", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06b5aba-bb63-453a-8818-f2e417e8045b", "created": "2026-10-09T15:13:09.449571Z", "modified": "2026-10-09T15:13:09.449571Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6f03f6950a15a60ce52357430755255d381a625d41dd791e62b58bab983f1f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.449571Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f854022-95da-4a43-b0ee-699cd51243d0", "created": "2026-10-09T15:13:09.450151Z", "modified": "2026-10-09T15:13:09.450151Z", "relationship_type": "indicates", "source_ref": "indicator--a06b5aba-bb63-453a-8818-f2e417e8045b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ffd4a0-02a0-46b8-9659-689d742344ab", "created": "2026-10-09T15:13:09.450279Z", "modified": "2026-10-09T15:13:09.450279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c18f91c5a54b5bcb866a181773b56ee3c0e573169929317d858aa332c1c3d7a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.450279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42e07754-323b-474b-8864-83d80ee226be", "created": "2026-10-09T15:13:09.450858Z", "modified": "2026-10-09T15:13:09.450858Z", "relationship_type": "indicates", "source_ref": "indicator--70ffd4a0-02a0-46b8-9659-689d742344ab", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25240a4-8330-4063-a720-f884ba3f46a6", "created": "2026-10-09T15:13:09.450977Z", "modified": "2026-10-09T15:13:09.450977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd9062afe3ac12c5c5cdc964349536007880869221cbf5dd94b46a926afdddd4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.450977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10766146-58a8-4455-95b2-a21224f5bc4a", "created": "2026-10-09T15:13:09.451585Z", "modified": "2026-10-09T15:13:09.451585Z", "relationship_type": "indicates", "source_ref": "indicator--e25240a4-8330-4063-a720-f884ba3f46a6", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2eef161-6084-4448-86ca-e29d5ed018ee", "created": "2026-10-09T15:13:09.451708Z", "modified": "2026-10-09T15:13:09.451708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='390152f181af51b3bbfde605eecafc3a7f816ce2f94554e8590d638b0c4e094f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.451708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cd4287f-7032-404c-b64e-b3c23e2d2cfa", "created": "2026-10-09T15:13:09.452403Z", "modified": "2026-10-09T15:13:09.452403Z", "relationship_type": "indicates", "source_ref": "indicator--f2eef161-6084-4448-86ca-e29d5ed018ee", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d508b048-c0cc-4374-ab37-e92c470e7eb6", "created": "2026-10-09T15:13:09.452527Z", "modified": "2026-10-09T15:13:09.452527Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e5d37d253fe2f6fe951c864574b0a41375d0d3e045a8b4a5860daab61bfc1d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.452527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ec6b149-4d57-440a-a072-67e7e71add59", "created": "2026-10-09T15:13:09.453111Z", "modified": "2026-10-09T15:13:09.453111Z", "relationship_type": "indicates", "source_ref": "indicator--d508b048-c0cc-4374-ab37-e92c470e7eb6", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e185456c-eca7-4bfe-bd13-968b11376f4c", "created": "2026-10-09T15:13:09.45323Z", "modified": "2026-10-09T15:13:09.45323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a2d93e6833f2d520f0f94c9e319ee995e1182147d587e74620dcba949d134da8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.45323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccb9b3bb-7a15-48a8-8e2c-7650a18bebb6", "created": "2026-10-09T15:13:09.453828Z", "modified": "2026-10-09T15:13:09.453828Z", "relationship_type": "indicates", "source_ref": "indicator--e185456c-eca7-4bfe-bd13-968b11376f4c", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7222c0af-e230-49ff-9581-f8720a70a1d0", "created": "2026-10-09T15:13:09.45395Z", "modified": "2026-10-09T15:13:09.45395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e5bc1dba5530f53144df8f2325d9c3c66ffea8646b5678ab88492ca56a15e41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.45395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18a04e84-c5bd-45ec-8bbe-5f306af1d38b", "created": "2026-10-09T15:13:09.454549Z", "modified": "2026-10-09T15:13:09.454549Z", "relationship_type": "indicates", "source_ref": "indicator--7222c0af-e230-49ff-9581-f8720a70a1d0", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabce825-7161-40e7-b9c6-4e51828af3a5", "created": "2026-10-09T15:13:09.454674Z", "modified": "2026-10-09T15:13:09.454674Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='663fac6c8596e6e330a281ec72f2eed59a70247f123b0c0ad00c7b728b543294']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.454674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06e75216-f451-4832-815f-15046ba35741", "created": "2026-10-09T15:13:09.455286Z", "modified": "2026-10-09T15:13:09.455286Z", "relationship_type": "indicates", "source_ref": "indicator--fabce825-7161-40e7-b9c6-4e51828af3a5", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ae2410-afba-48df-8079-48a80e6b0c61", "created": "2026-10-09T15:13:09.455415Z", "modified": "2026-10-09T15:13:09.455415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ebaaf97580389dc501d317fa582196f1c530c770491a8b1a17028cfeaf971811']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.455415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45be3ca3-fd7a-4609-81b3-45c8d0506711", "created": "2026-10-09T15:13:09.456Z", "modified": "2026-10-09T15:13:09.456Z", "relationship_type": "indicates", "source_ref": "indicator--49ae2410-afba-48df-8079-48a80e6b0c61", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c46fb9-1284-437f-a9d6-2e6780ced5c2", "created": "2026-10-09T15:13:09.456122Z", "modified": "2026-10-09T15:13:09.456122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fde4af34b9d436e87918c31388086e1a498f45990198da603bd051635830f0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.456122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7ed09ff-df08-4434-9170-f3e122a10cb4", "created": "2026-10-09T15:13:09.456725Z", "modified": "2026-10-09T15:13:09.456725Z", "relationship_type": "indicates", "source_ref": "indicator--b7c46fb9-1284-437f-a9d6-2e6780ced5c2", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7308b92-bd04-404b-a6e7-8cc9c2ccc1c8", "created": "2026-10-09T15:13:09.456849Z", "modified": "2026-10-09T15:13:09.456849Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='494ac65f3cc919ca2324ce53123bf24e66780da71c494bac0ee0aca84a4d11d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.456849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bd10aaf-9ddd-4bba-8771-15436ccb0428", "created": "2026-10-09T15:13:09.457448Z", "modified": "2026-10-09T15:13:09.457448Z", "relationship_type": "indicates", "source_ref": "indicator--d7308b92-bd04-404b-a6e7-8cc9c2ccc1c8", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8c34da-69cd-447b-9dc0-3f0b15c3091e", "created": "2026-10-09T15:13:09.457573Z", "modified": "2026-10-09T15:13:09.457573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14d6ef76cf0202162553f1dc09c83abd3ca48845ac0e6604e104887cdb8a6008']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.457573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8654dd71-3223-40f5-a163-72d0eb9b5a22", "created": "2026-10-09T15:13:09.458163Z", "modified": "2026-10-09T15:13:09.458163Z", "relationship_type": "indicates", "source_ref": "indicator--5e8c34da-69cd-447b-9dc0-3f0b15c3091e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31283c97-8bdb-4160-93a3-f588833e0505", "created": "2026-10-09T15:13:09.458298Z", "modified": "2026-10-09T15:13:09.458298Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d59ebd8ef23a5bc501c503b234a8524ac1aa7689cae3bcb58aa8997470566ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.458298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92404464-ab24-406f-a60a-ee2e65af7192", "created": "2026-10-09T15:13:09.459321Z", "modified": "2026-10-09T15:13:09.459321Z", "relationship_type": "indicates", "source_ref": "indicator--31283c97-8bdb-4160-93a3-f588833e0505", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187949e7-cd1c-4d7a-a4e7-2a4741dc0645", "created": "2026-10-09T15:13:09.459452Z", "modified": "2026-10-09T15:13:09.459452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f091196126df6461ff0e659e04f48b98bb6dccab30833dcae4f0b9d603a00de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.459452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d81d9e3-e688-48ab-86f6-6f957610b9c2", "created": "2026-10-09T15:13:09.460036Z", "modified": "2026-10-09T15:13:09.460036Z", "relationship_type": "indicates", "source_ref": "indicator--187949e7-cd1c-4d7a-a4e7-2a4741dc0645", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230c78b1-cfda-4356-a6cf-63540d374330", "created": "2026-10-09T15:13:09.460157Z", "modified": "2026-10-09T15:13:09.460157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7af5da575ef4aab70f6c1eace5ac224a7abf61d1aa10c68239c3ec6237e9a58f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.460157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7581f325-3d59-48b0-9a74-bbbfcd7ac316", "created": "2026-10-09T15:13:09.460752Z", "modified": "2026-10-09T15:13:09.460752Z", "relationship_type": "indicates", "source_ref": "indicator--230c78b1-cfda-4356-a6cf-63540d374330", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f61172-3857-4993-a32b-fa9c72cedfdb", "created": "2026-10-09T15:13:09.460873Z", "modified": "2026-10-09T15:13:09.460873Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04b5f3df56e473b9d936535e784b8d6eddc45d12031608c54d098450c00cbff4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.460873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2d6806a-cdb8-4f80-9037-c09358660b16", "created": "2026-10-09T15:13:09.461462Z", "modified": "2026-10-09T15:13:09.461462Z", "relationship_type": "indicates", "source_ref": "indicator--61f61172-3857-4993-a32b-fa9c72cedfdb", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b7cff7-2744-4c4b-bfd5-c41b40e8644d", "created": "2026-10-09T15:13:09.461583Z", "modified": "2026-10-09T15:13:09.461583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='002cd8c6e3f67b6b8563b7164bb06a5b0235635d6a5b53357a75016d01aeed27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.461583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d93d9e0-3425-453d-8a15-5f7f2165835e", "created": "2026-10-09T15:13:09.462159Z", "modified": "2026-10-09T15:13:09.462159Z", "relationship_type": "indicates", "source_ref": "indicator--d4b7cff7-2744-4c4b-bfd5-c41b40e8644d", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18ce152-106e-4618-8776-a443a8fb61b0", "created": "2026-10-09T15:13:09.462291Z", "modified": "2026-10-09T15:13:09.462291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb7f8d93c28a35a88020f950864ad347f9700864f03838591bc126416dbc59a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.462291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc27caac-9948-489e-9001-a3dab37979a0", "created": "2026-10-09T15:13:09.462874Z", "modified": "2026-10-09T15:13:09.462874Z", "relationship_type": "indicates", "source_ref": "indicator--d18ce152-106e-4618-8776-a443a8fb61b0", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9053afc-12e7-4327-a0ca-439a29144426", "created": "2026-10-09T15:13:09.462995Z", "modified": "2026-10-09T15:13:09.462995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5eef3c6c8c5d19a070029be8030af6b37a10d3f1daa643e1156dbce0bbf30ca0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.462995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfab772b-c024-4b48-9de8-2967b9978358", "created": "2026-10-09T15:13:09.463583Z", "modified": "2026-10-09T15:13:09.463583Z", "relationship_type": "indicates", "source_ref": "indicator--e9053afc-12e7-4327-a0ca-439a29144426", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be2237e-45dd-4e1b-8d71-2a353285ed8c", "created": "2026-10-09T15:13:09.463702Z", "modified": "2026-10-09T15:13:09.463702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1724f15eb4e7c55a5bc7af6cdfe76bf6ae42c1a389e4a5b8f9cc42a535093dff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.463702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--919d1865-b2c4-4a37-b8a6-42bfb2708ed1", "created": "2026-10-09T15:13:09.464284Z", "modified": "2026-10-09T15:13:09.464284Z", "relationship_type": "indicates", "source_ref": "indicator--6be2237e-45dd-4e1b-8d71-2a353285ed8c", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc12c10-b1f2-44cd-9e34-5fca06c4d9ce", "created": "2026-10-09T15:13:09.464403Z", "modified": "2026-10-09T15:13:09.464403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8700ee8ba1a5dfbfaf8a31b0f9c3750ab3054977c9bac5ac14a4feca4a40bc9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.464403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f976fbf-6967-4cc5-85b5-8cd5a3c62927", "created": "2026-10-09T15:13:09.464981Z", "modified": "2026-10-09T15:13:09.464981Z", "relationship_type": "indicates", "source_ref": "indicator--efc12c10-b1f2-44cd-9e34-5fca06c4d9ce", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e3950d-f108-468d-8f95-6c7426eddf92", "created": "2026-10-09T15:13:09.4651Z", "modified": "2026-10-09T15:13:09.4651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e2d0dde40dc8afb8a3fc5005f15fe79da60db989436545d20616b10824a17d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.4651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c487e051-2f43-4d3f-a049-628cf2d44d64", "created": "2026-10-09T15:13:09.484597Z", "modified": "2026-10-09T15:13:09.484597Z", "relationship_type": "indicates", "source_ref": "indicator--33e3950d-f108-468d-8f95-6c7426eddf92", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b38dae-6298-4043-bd33-d8921714d6af", "created": "2026-10-09T15:13:09.484794Z", "modified": "2026-10-09T15:13:09.484794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0b89e87f4d8d0127c930ab87891f8c0cf500d1424735ba47ab139c6ccd0665c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.484794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5c44c36-7f01-45d2-87ba-f6886a161e40", "created": "2026-10-09T15:13:09.485433Z", "modified": "2026-10-09T15:13:09.485433Z", "relationship_type": "indicates", "source_ref": "indicator--60b38dae-6298-4043-bd33-d8921714d6af", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8989c321-3c03-426e-9ab1-ba7a6517fead", "created": "2026-10-09T15:13:09.485564Z", "modified": "2026-10-09T15:13:09.485564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbccb5de6c125a90effc42f15fdf6de9cf867ae519fb181354ac318cb92d3d91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.485564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87ac9934-ae55-4eb0-ac59-dd327fa3e93a", "created": "2026-10-09T15:13:09.48615Z", "modified": "2026-10-09T15:13:09.48615Z", "relationship_type": "indicates", "source_ref": "indicator--8989c321-3c03-426e-9ab1-ba7a6517fead", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44966dc-0b1e-439c-83d6-7d6fcf04d922", "created": "2026-10-09T15:13:09.48629Z", "modified": "2026-10-09T15:13:09.48629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c47536b476ce3f78e856de261cf80150eb0e330fb5f0aa84829a41bac8658153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.48629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cf6b648-269c-4613-a646-f5a6f164c525", "created": "2026-10-09T15:13:09.48688Z", "modified": "2026-10-09T15:13:09.48688Z", "relationship_type": "indicates", "source_ref": "indicator--f44966dc-0b1e-439c-83d6-7d6fcf04d922", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc522712-6710-49d2-b809-6f5607e3a271", "created": "2026-10-09T15:13:09.487005Z", "modified": "2026-10-09T15:13:09.487005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b15f7bc5c4a773f7c1d5889dd9070a5d8e8f926a6e456eb1e60338aa1855345']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.487005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e7027dc-ee46-41a5-86da-ab06f56dbda8", "created": "2026-10-09T15:13:09.487601Z", "modified": "2026-10-09T15:13:09.487601Z", "relationship_type": "indicates", "source_ref": "indicator--dc522712-6710-49d2-b809-6f5607e3a271", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a8540c-9b13-4d09-8536-40c1c4d8d473", "created": "2026-10-09T15:13:09.487726Z", "modified": "2026-10-09T15:13:09.487726Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21906fd407287ee32a1d72582d039878a1778707b3c640028bd820fa5e973a45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.487726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec8512f9-9f3d-4261-b880-98c8ce1b8c22", "created": "2026-10-09T15:13:09.488318Z", "modified": "2026-10-09T15:13:09.488318Z", "relationship_type": "indicates", "source_ref": "indicator--d8a8540c-9b13-4d09-8536-40c1c4d8d473", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2d40b2-56d6-4bfe-8fc3-151179d5ded0", "created": "2026-10-09T15:13:09.488439Z", "modified": "2026-10-09T15:13:09.488439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='296cac079673fa68d20d5880dd006f30ee0579ffb24a60b44d30ca3cf8fe2a06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.488439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db01d1d3-3d11-4547-9163-7004d6ee7811", "created": "2026-10-09T15:13:09.489017Z", "modified": "2026-10-09T15:13:09.489017Z", "relationship_type": "indicates", "source_ref": "indicator--9c2d40b2-56d6-4bfe-8fc3-151179d5ded0", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0aeafd-f07f-4cda-97bc-28588cb84fdb", "created": "2026-10-09T15:13:09.489141Z", "modified": "2026-10-09T15:13:09.489141Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a177e2d78c6156f9bda619c823411eae7006bce89105a66c40a6c1d28efd2993']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.489141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8704c4b1-93dc-4ee0-818e-724c6f8dcb66", "created": "2026-10-09T15:13:09.489827Z", "modified": "2026-10-09T15:13:09.489827Z", "relationship_type": "indicates", "source_ref": "indicator--9e0aeafd-f07f-4cda-97bc-28588cb84fdb", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455118b2-86c6-4545-aa93-414930e72538", "created": "2026-10-09T15:13:09.489956Z", "modified": "2026-10-09T15:13:09.489956Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7193cdd49b786ad7c837257b7f451f5da8d4b9dc5e35b706361994b72318fc10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.489956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dba62437-17f8-4038-8575-e12f5643f4fe", "created": "2026-10-09T15:13:09.490552Z", "modified": "2026-10-09T15:13:09.490552Z", "relationship_type": "indicates", "source_ref": "indicator--455118b2-86c6-4545-aa93-414930e72538", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9056617a-1404-4a65-97ae-f5c122868538", "created": "2026-10-09T15:13:09.490676Z", "modified": "2026-10-09T15:13:09.490676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec32249ef4d671f4320c343c6ddcff2c2767a055a41e29a6c7aaf866310dae9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.490676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc8be62e-90a6-4a71-8c18-fb5756101b1f", "created": "2026-10-09T15:13:09.491253Z", "modified": "2026-10-09T15:13:09.491253Z", "relationship_type": "indicates", "source_ref": "indicator--9056617a-1404-4a65-97ae-f5c122868538", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fba2b22-98de-47dd-9cbc-ffc781c567d8", "created": "2026-10-09T15:13:09.491386Z", "modified": "2026-10-09T15:13:09.491386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7c612a24cde80de65d92273ce35d85c95275fd97f653b71e3a7d2151f3b45bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.491386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ed98c80-ffde-4440-849c-0c3d0f6c60d7", "created": "2026-10-09T15:13:09.491961Z", "modified": "2026-10-09T15:13:09.491961Z", "relationship_type": "indicates", "source_ref": "indicator--7fba2b22-98de-47dd-9cbc-ffc781c567d8", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adf091c-0d3a-4a1c-92d5-b161734a649d", "created": "2026-10-09T15:13:09.49208Z", "modified": "2026-10-09T15:13:09.49208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f3cf212099992f1e810721e61259d2035743469d31bf21633f399532dcda63d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.49208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--566b3809-2195-48aa-a24d-12dc77234bec", "created": "2026-10-09T15:13:09.492727Z", "modified": "2026-10-09T15:13:09.492727Z", "relationship_type": "indicates", "source_ref": "indicator--4adf091c-0d3a-4a1c-92d5-b161734a649d", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afff35a6-0198-4d8f-99c0-6044cf0dba58", "created": "2026-10-09T15:13:09.492866Z", "modified": "2026-10-09T15:13:09.492866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6e1ed8a10db9f522c14da5e32eefb59f4e559ecc2de434242f157542fc8d7dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.492866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75e98a69-f6dd-4f22-afed-1186326f0d6c", "created": "2026-10-09T15:13:09.493476Z", "modified": "2026-10-09T15:13:09.493476Z", "relationship_type": "indicates", "source_ref": "indicator--afff35a6-0198-4d8f-99c0-6044cf0dba58", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd2d471-f47b-4644-af19-558d3f1aa960", "created": "2026-10-09T15:13:09.493615Z", "modified": "2026-10-09T15:13:09.493615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20ac33ae8111ccc34bcf7a7a33053d181a394dbf53e791dffbf78032184b97a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.493615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af0a17bd-fdbf-4a2d-bc05-dc5e05e54b22", "created": "2026-10-09T15:13:09.494224Z", "modified": "2026-10-09T15:13:09.494224Z", "relationship_type": "indicates", "source_ref": "indicator--5fd2d471-f47b-4644-af19-558d3f1aa960", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6708d14e-b94e-4c4f-a9f2-076082de8efe", "created": "2026-10-09T15:13:09.494357Z", "modified": "2026-10-09T15:13:09.494357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d958a3505ad55fb55f9381d3e14201b68dbab38754ddb741fbf32d6aa493e9fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.494357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bacadcd-739f-4ca0-88ad-389bb0811472", "created": "2026-10-09T15:13:09.494956Z", "modified": "2026-10-09T15:13:09.494956Z", "relationship_type": "indicates", "source_ref": "indicator--6708d14e-b94e-4c4f-a9f2-076082de8efe", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fe6b09-013c-414e-a6bb-9f7b5ae2ea48", "created": "2026-10-09T15:13:09.495082Z", "modified": "2026-10-09T15:13:09.495082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c00adefe81b8519bfde28b4268e3fb0e7678fe8af884f40ce612bb3e682a5da7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.495082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ccd7aee-6c25-4763-9102-f7ce103c7726", "created": "2026-10-09T15:13:09.495788Z", "modified": "2026-10-09T15:13:09.495788Z", "relationship_type": "indicates", "source_ref": "indicator--28fe6b09-013c-414e-a6bb-9f7b5ae2ea48", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df22e07d-7045-48f5-bde8-1a777fd4b7a1", "created": "2026-10-09T15:13:09.495923Z", "modified": "2026-10-09T15:13:09.495923Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a05497647a879afec62bc7e916005f729fbfee48cfd56423481e0600061678b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.495923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d67351c9-7028-4aca-8988-359d72385af0", "created": "2026-10-09T15:13:09.496538Z", "modified": "2026-10-09T15:13:09.496538Z", "relationship_type": "indicates", "source_ref": "indicator--df22e07d-7045-48f5-bde8-1a777fd4b7a1", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d3617f-c404-4eb6-a958-9916232a44a9", "created": "2026-10-09T15:13:09.496664Z", "modified": "2026-10-09T15:13:09.496664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb576cb72bd89024c477591f3f409d8b7442187c3eaa01c96fc010d83fa8de75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.496664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55a8edaa-419c-459d-ac36-601b903898a2", "created": "2026-10-09T15:13:09.497331Z", "modified": "2026-10-09T15:13:09.497331Z", "relationship_type": "indicates", "source_ref": "indicator--94d3617f-c404-4eb6-a958-9916232a44a9", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ceb19d-6eb8-4d7f-b729-062cb8a52567", "created": "2026-10-09T15:13:09.49747Z", "modified": "2026-10-09T15:13:09.49747Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67623c4c5ae742a48f832f373637709553c786b44af632120b48189de93c8d67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.49747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1cc1ce3-fc3a-499c-94b2-89e5149f4831", "created": "2026-10-09T15:13:09.498069Z", "modified": "2026-10-09T15:13:09.498069Z", "relationship_type": "indicates", "source_ref": "indicator--63ceb19d-6eb8-4d7f-b729-062cb8a52567", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3044ee24-7695-410f-adbd-5efb97d9fe54", "created": "2026-10-09T15:13:09.498192Z", "modified": "2026-10-09T15:13:09.498192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4504937d81feb23d6f80e158518336bb319734c3af182d91e5864bcf62a0d6c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.498192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cec635b-224a-4771-970d-93498733f922", "created": "2026-10-09T15:13:09.498786Z", "modified": "2026-10-09T15:13:09.498786Z", "relationship_type": "indicates", "source_ref": "indicator--3044ee24-7695-410f-adbd-5efb97d9fe54", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4805153e-0379-4d54-8a7b-e8c83dfd8678", "created": "2026-10-09T15:13:09.498909Z", "modified": "2026-10-09T15:13:09.498909Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4aa64965d1c1e2e1dd1acf4c3d604af5de50fcb1235ff1709216a28b0882abc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.498909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee80129f-ef0b-4fc6-86d7-d7bc3a24c216", "created": "2026-10-09T15:13:09.499507Z", "modified": "2026-10-09T15:13:09.499507Z", "relationship_type": "indicates", "source_ref": "indicator--4805153e-0379-4d54-8a7b-e8c83dfd8678", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce2239d-f68a-44e4-805c-127090b3b4bd", "created": "2026-10-09T15:13:09.499632Z", "modified": "2026-10-09T15:13:09.499632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9dcd9769489c9b0d9ce1ce12d07ce183cc8111e7400a7c2d3c68dbb57f770494']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.499632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60e276b4-5176-463f-a729-d3b25c91dca3", "created": "2026-10-09T15:13:09.500215Z", "modified": "2026-10-09T15:13:09.500215Z", "relationship_type": "indicates", "source_ref": "indicator--bce2239d-f68a-44e4-805c-127090b3b4bd", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2b3305-dd75-4f7a-95a7-c0626e936f51", "created": "2026-10-09T15:13:09.500351Z", "modified": "2026-10-09T15:13:09.500351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc86f2ac1741ba158c7a7949347d801eb71c1b6f1da7fc991978f6b4a02b6bdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.500351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a06eb88-8350-4010-847f-317993256087", "created": "2026-10-09T15:13:09.500958Z", "modified": "2026-10-09T15:13:09.500958Z", "relationship_type": "indicates", "source_ref": "indicator--6d2b3305-dd75-4f7a-95a7-c0626e936f51", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dfa85e-c70b-45c7-bdfe-c0d3881f2a84", "created": "2026-10-09T15:13:09.501082Z", "modified": "2026-10-09T15:13:09.501082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d35b2e66894572c23fd22274aec55f7386e7ba4d6f9f421b36205237d455520']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.501082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40628ddc-1707-4f27-972e-ce17192e30b3", "created": "2026-10-09T15:13:09.501682Z", "modified": "2026-10-09T15:13:09.501682Z", "relationship_type": "indicates", "source_ref": "indicator--c4dfa85e-c70b-45c7-bdfe-c0d3881f2a84", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9fa321-d749-47bf-a045-b0359101711a", "created": "2026-10-09T15:13:09.501804Z", "modified": "2026-10-09T15:13:09.501804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3638ca8c45d7a5c495a68d32fa0fd09df2687ce91c91813b3c9ff4c352adac0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.501804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa64dfe0-9ad5-40d5-86bd-40a40b6ea6c5", "created": "2026-10-09T15:13:09.502519Z", "modified": "2026-10-09T15:13:09.502519Z", "relationship_type": "indicates", "source_ref": "indicator--1e9fa321-d749-47bf-a045-b0359101711a", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81fb3ab-5767-451d-bfb2-fd7e0e19fdf1", "created": "2026-10-09T15:13:09.502646Z", "modified": "2026-10-09T15:13:09.502646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9818505c5bd59787507394c1bdca6a8420d5ad23a269db324f0773e6a8eecaa0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.502646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e26dc611-fd7c-4d04-adfd-7da2d99148a4", "created": "2026-10-09T15:13:09.503229Z", "modified": "2026-10-09T15:13:09.503229Z", "relationship_type": "indicates", "source_ref": "indicator--f81fb3ab-5767-451d-bfb2-fd7e0e19fdf1", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19042918-9466-4de2-83b0-70eabda4a7bd", "created": "2026-10-09T15:13:09.503362Z", "modified": "2026-10-09T15:13:09.503362Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b8baba194af82fff3dbcc4534ca98691bbf2d488179970b39e3d25e86951263']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.503362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cce0f041-b341-48ca-91a6-e212bf35a1a4", "created": "2026-10-09T15:13:09.50395Z", "modified": "2026-10-09T15:13:09.50395Z", "relationship_type": "indicates", "source_ref": "indicator--19042918-9466-4de2-83b0-70eabda4a7bd", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277ed9db-89fe-41ac-af3d-b82ac8426264", "created": "2026-10-09T15:13:09.504073Z", "modified": "2026-10-09T15:13:09.504073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1301d019bd48c4874944b5897cbe9b1f0593d324ad413c818692a76af36b4e01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.504073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03397af4-c8b6-43a9-9795-e680f7733bd8", "created": "2026-10-09T15:13:09.504663Z", "modified": "2026-10-09T15:13:09.504663Z", "relationship_type": "indicates", "source_ref": "indicator--277ed9db-89fe-41ac-af3d-b82ac8426264", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cff1d4-1d01-4c51-aa79-1549c62a668e", "created": "2026-10-09T15:13:09.504786Z", "modified": "2026-10-09T15:13:09.504786Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='134ec5be40cff4267996caa0d0112ab90fd4d5ac7c57a5fe823ed024e8af8558']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.504786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--257845cc-1e64-4173-ac30-bfd6fc562550", "created": "2026-10-09T15:13:09.505371Z", "modified": "2026-10-09T15:13:09.505371Z", "relationship_type": "indicates", "source_ref": "indicator--99cff1d4-1d01-4c51-aa79-1549c62a668e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d1e968-7d7a-4489-b174-8e8b7f3394d3", "created": "2026-10-09T15:13:09.505491Z", "modified": "2026-10-09T15:13:09.505491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='414e1b4af56a923d7c61608fc909610f321787ef841ba6ec5b32e0daef2b215e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.505491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4dcecc3-0938-4a5b-9dee-73edfd5e75f2", "created": "2026-10-09T15:13:09.506066Z", "modified": "2026-10-09T15:13:09.506066Z", "relationship_type": "indicates", "source_ref": "indicator--59d1e968-7d7a-4489-b174-8e8b7f3394d3", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580e8af7-3633-447b-87f5-4603f351f308", "created": "2026-10-09T15:13:09.506188Z", "modified": "2026-10-09T15:13:09.506188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='046d45f815ba13432d393d58842e70f87124a89d77b87d6c0fb6581cc60eab74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.506188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1fbba7c-fa26-4089-9563-50aa9a9ca5ad", "created": "2026-10-09T15:13:09.506786Z", "modified": "2026-10-09T15:13:09.506786Z", "relationship_type": "indicates", "source_ref": "indicator--580e8af7-3633-447b-87f5-4603f351f308", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3107108-3683-4490-ae36-cb88d293b67f", "created": "2026-10-09T15:13:09.506916Z", "modified": "2026-10-09T15:13:09.506916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7db18faba5b25ef971206f4cc8be7eb87aadc7e48fb1be638de71dd4ef510861']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.506916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7dc23f1c-18a0-44d3-a165-3e2a5a9426c4", "created": "2026-10-09T15:13:09.507521Z", "modified": "2026-10-09T15:13:09.507521Z", "relationship_type": "indicates", "source_ref": "indicator--e3107108-3683-4490-ae36-cb88d293b67f", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd295c38-27ef-43ae-a939-f275215187ed", "created": "2026-10-09T15:13:09.507648Z", "modified": "2026-10-09T15:13:09.507648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15d84d734ea5feaee6221dd9bbfd26ebe93a3d663c4aff02940c9bca3c464d52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.507648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45e55158-3e56-4a67-9486-06f3db115acc", "created": "2026-10-09T15:13:09.508237Z", "modified": "2026-10-09T15:13:09.508237Z", "relationship_type": "indicates", "source_ref": "indicator--dd295c38-27ef-43ae-a939-f275215187ed", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67299a1-e45f-4e5e-a99b-014cb5dfee3c", "created": "2026-10-09T15:13:09.508371Z", "modified": "2026-10-09T15:13:09.508371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='30a04f90abe86750f5d63af04408ab5d5caf4197780f5087e46aae466f5f223b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.508371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc5964d9-274c-4498-94e2-a000361b936b", "created": "2026-10-09T15:13:09.509087Z", "modified": "2026-10-09T15:13:09.509087Z", "relationship_type": "indicates", "source_ref": "indicator--c67299a1-e45f-4e5e-a99b-014cb5dfee3c", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6efcd3-7cca-49e3-807d-f1d1422fd863", "created": "2026-10-09T15:13:09.509209Z", "modified": "2026-10-09T15:13:09.509209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b4c4c6ae454a5fe79e019667661fc2c9532e32be17d9d7ed98adbeb70c547e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.509209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba27c710-7baa-4c0d-8a09-9134d99333ce", "created": "2026-10-09T15:13:09.509803Z", "modified": "2026-10-09T15:13:09.509803Z", "relationship_type": "indicates", "source_ref": "indicator--ae6efcd3-7cca-49e3-807d-f1d1422fd863", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e9e01a1-8e71-4013-a7b8-053f46fa678b", "created": "2026-10-09T15:13:09.509924Z", "modified": "2026-10-09T15:13:09.509924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a445c9d1263b4349121466f0883864392cbc246bab34e0ee2bbe4cbb1faedd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.509924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1eb32211-7265-41ed-ab1f-9de7776e9232", "created": "2026-10-09T15:13:09.510509Z", "modified": "2026-10-09T15:13:09.510509Z", "relationship_type": "indicates", "source_ref": "indicator--0e9e01a1-8e71-4013-a7b8-053f46fa678b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2060119-bff3-4f5a-acd9-3aaf11059f4f", "created": "2026-10-09T15:13:09.510629Z", "modified": "2026-10-09T15:13:09.510629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f6ea7265d007a7206c9e2434ae9a7092fab73f80840b266be87d54c234cbff3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.510629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0424d103-f58d-44d8-bc39-e7335dea9e80", "created": "2026-10-09T15:13:09.511207Z", "modified": "2026-10-09T15:13:09.511207Z", "relationship_type": "indicates", "source_ref": "indicator--b2060119-bff3-4f5a-acd9-3aaf11059f4f", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d4d486-4106-43ce-b17a-85c65bd82504", "created": "2026-10-09T15:13:09.511348Z", "modified": "2026-10-09T15:13:09.511348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c8dd2ee7c332951b69de477c2fa95e727bee57a60ac0d6567f18b292f6efd21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.511348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b938f2c-bee0-4a39-a921-9c3899b09340", "created": "2026-10-09T15:13:09.511925Z", "modified": "2026-10-09T15:13:09.511925Z", "relationship_type": "indicates", "source_ref": "indicator--d4d4d486-4106-43ce-b17a-85c65bd82504", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41e4ab7-c54b-451d-acb7-af02a0525fe3", "created": "2026-10-09T15:13:09.512042Z", "modified": "2026-10-09T15:13:09.512042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='107c79b245dce3d1352f5b9b4c24336c6dd84041458f6bf5a4e522148ec37ddf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.512042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e99f5375-29e2-439f-9fe2-79cbf5ad4fa2", "created": "2026-10-09T15:13:09.51264Z", "modified": "2026-10-09T15:13:09.51264Z", "relationship_type": "indicates", "source_ref": "indicator--d41e4ab7-c54b-451d-acb7-af02a0525fe3", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ef96b3-00e4-49e6-b598-3c7d7c899f41", "created": "2026-10-09T15:13:09.512762Z", "modified": "2026-10-09T15:13:09.512762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14c414d2892a76f19671406d24cb12db3af3106c5925b5732b26c73c3a97e2c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.512762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a25c08c6-e670-45cf-828c-18e2e98d9b5d", "created": "2026-10-09T15:13:09.513354Z", "modified": "2026-10-09T15:13:09.513354Z", "relationship_type": "indicates", "source_ref": "indicator--07ef96b3-00e4-49e6-b598-3c7d7c899f41", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95e61a6-7c09-4f53-bbd0-4b77d41b3556", "created": "2026-10-09T15:13:09.513472Z", "modified": "2026-10-09T15:13:09.513472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59978b1dc7227708a05add05d752b7cccdad2b9fdc8e0009f247619015796d95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.513472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11b91b01-f0b4-48f7-904d-b96cd5b7cd46", "created": "2026-10-09T15:13:09.514083Z", "modified": "2026-10-09T15:13:09.514083Z", "relationship_type": "indicates", "source_ref": "indicator--f95e61a6-7c09-4f53-bbd0-4b77d41b3556", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebb5cc8-8ae5-471f-9dd4-d2d68abf7b0e", "created": "2026-10-09T15:13:09.514203Z", "modified": "2026-10-09T15:13:09.514203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5203ccda246412f86334687f61bee49226c836eb4c2b772ea6c086d4593be6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.514203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5e2492-915f-4311-8fe9-753fdfb2b78f", "created": "2026-10-09T15:13:09.51493Z", "modified": "2026-10-09T15:13:09.51493Z", "relationship_type": "indicates", "source_ref": "indicator--4ebb5cc8-8ae5-471f-9dd4-d2d68abf7b0e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cf12be-2455-4455-8a0c-c59bbbc26a10", "created": "2026-10-09T15:13:09.515058Z", "modified": "2026-10-09T15:13:09.515058Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f41fa15a2f0f89c96ff292d0f64caecaa17fd5fadc566e4918e5ab6bcdd6e12b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.515058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ff93e0b-3939-4a1e-a18b-018fe06d7979", "created": "2026-10-09T15:13:09.515659Z", "modified": "2026-10-09T15:13:09.515659Z", "relationship_type": "indicates", "source_ref": "indicator--26cf12be-2455-4455-8a0c-c59bbbc26a10", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0e4bdb-8cf5-473f-80f3-1647b5cec710", "created": "2026-10-09T15:13:09.515783Z", "modified": "2026-10-09T15:13:09.515783Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='612683622ab49d8b52f893aa54b988e4badbcb4f0fae73d48c086e90f023d371']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.515783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c2ff7d6-d2d9-48a7-af6b-6ed6a0b901f6", "created": "2026-10-09T15:13:09.516392Z", "modified": "2026-10-09T15:13:09.516392Z", "relationship_type": "indicates", "source_ref": "indicator--0e0e4bdb-8cf5-473f-80f3-1647b5cec710", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320ab68a-ae83-451f-bf01-4f161404c19b", "created": "2026-10-09T15:13:09.516525Z", "modified": "2026-10-09T15:13:09.516525Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberuss']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.516525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--977cb8f8-d03b-480d-9bc0-001fa2fcca03", "created": "2026-10-09T15:13:09.516984Z", "modified": "2026-10-09T15:13:09.516984Z", "relationship_type": "indicates", "source_ref": "indicator--320ab68a-ae83-451f-bf01-4f161404c19b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--202d3afb-9ae8-4f77-b217-ce967ae92640", "created": "2026-10-09T15:13:09.517107Z", "modified": "2026-10-09T15:13:09.517107Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.persona']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.517107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--776b14b1-d864-48a8-8c5c-36e33d7f318e", "created": "2026-10-09T15:13:09.517585Z", "modified": "2026-10-09T15:13:09.517585Z", "relationship_type": "indicates", "source_ref": "indicator--202d3afb-9ae8-4f77-b217-ce967ae92640", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2223ac-0bf7-4e55-8eda-bd39c8a25a1b", "created": "2026-10-09T15:13:09.517704Z", "modified": "2026-10-09T15:13:09.517704Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.persona2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.517704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b225f41-8feb-4604-8b80-bedb9260952b", "created": "2026-10-09T15:13:09.518169Z", "modified": "2026-10-09T15:13:09.518169Z", "relationship_type": "indicates", "source_ref": "indicator--ae2223ac-0bf7-4e55-8eda-bd39c8a25a1b", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6e8350-7866-4e87-ad66-28357ac71dcc", "created": "2026-10-09T15:13:09.518298Z", "modified": "2026-10-09T15:13:09.518298Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.kids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.518298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25f11974-0e91-4707-8784-ce66f79f3df4", "created": "2026-10-09T15:13:09.51876Z", "modified": "2026-10-09T15:13:09.51876Z", "relationship_type": "indicates", "source_ref": "indicator--cf6e8350-7866-4e87-ad66-28357ac71dcc", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1478dd17-0ec8-46ab-8e2f-47c57d56312a", "created": "2026-10-09T15:13:09.518877Z", "modified": "2026-10-09T15:13:09.518877Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.518877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d8c30a-1f68-46d8-8286-4dd46fbda0e1", "created": "2026-10-09T15:13:09.519352Z", "modified": "2026-10-09T15:13:09.519352Z", "relationship_type": "indicates", "source_ref": "indicator--1478dd17-0ec8-46ab-8e2f-47c57d56312a", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc5ff9d-f490-46af-abc2-f404257c9e01", "created": "2026-10-09T15:13:09.519477Z", "modified": "2026-10-09T15:13:09.519477Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.519477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50a21644-7f3f-4a79-a252-5ded3edddffe", "created": "2026-10-09T15:13:09.519926Z", "modified": "2026-10-09T15:13:09.519926Z", "relationship_type": "indicates", "source_ref": "indicator--abc5ff9d-f490-46af-abc2-f404257c9e01", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6ea060-3d4d-474a-a476-bd1fc4db22b1", "created": "2026-10-09T15:13:09.520045Z", "modified": "2026-10-09T15:13:09.520045Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.surebrec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.520045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6c04333-ce84-4122-97d4-40a54a9b78ad", "created": "2026-10-09T15:13:09.520605Z", "modified": "2026-10-09T15:13:09.520605Z", "relationship_type": "indicates", "source_ref": "indicator--bf6ea060-3d4d-474a-a476-bd1fc4db22b1", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f21c45c-99d9-49ca-8787-3e40457f5d8c", "created": "2026-10-09T15:13:09.520729Z", "modified": "2026-10-09T15:13:09.520729Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ssurebrec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.520729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48cfc210-61dc-403a-ac67-77707f72eada", "created": "2026-10-09T15:13:09.521173Z", "modified": "2026-10-09T15:13:09.521173Z", "relationship_type": "indicates", "source_ref": "indicator--0f21c45c-99d9-49ca-8787-3e40457f5d8c", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddcd5d0-f01e-4d1f-8daa-fa18bc53ff6e", "created": "2026-10-09T15:13:09.521301Z", "modified": "2026-10-09T15:13:09.521301Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.enterprise']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.521301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0323134-43f0-4c8a-ad59-4613fb7a77c2", "created": "2026-10-09T15:13:09.521772Z", "modified": "2026-10-09T15:13:09.521772Z", "relationship_type": "indicates", "source_ref": "indicator--4ddcd5d0-f01e-4d1f-8daa-fa18bc53ff6e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a9e7ff-5e39-42e3-a011-eb57c683b263", "created": "2026-10-09T15:13:09.521888Z", "modified": "2026-10-09T15:13:09.521888Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.lsp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.521888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff6cb5a1-7a37-4796-a23a-998686718f7e", "created": "2026-10-09T15:13:09.52235Z", "modified": "2026-10-09T15:13:09.52235Z", "relationship_type": "indicates", "source_ref": "indicator--57a9e7ff-5e39-42e3-a011-eb57c683b263", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf43e1d1-0559-4d88-9008-8eeaf1569471", "created": "2026-10-09T15:13:09.522476Z", "modified": "2026-10-09T15:13:09.522476Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BC693B48B7EC988E275CF9E1CDAA1447A31717D9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.522476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--057a392c-25ac-44e2-931f-eb07901cd659", "created": "2026-10-09T15:13:09.523015Z", "modified": "2026-10-09T15:13:09.523015Z", "relationship_type": "indicates", "source_ref": "indicator--bf43e1d1-0559-4d88-9008-8eeaf1569471", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f46c64-215b-483e-bee8-c8051de70e4f", "created": "2026-10-09T15:13:09.523134Z", "modified": "2026-10-09T15:13:09.523134Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='724C6500F11737C12C0B89185A60427989656697']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.523134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97fad288-937b-44ee-844f-9d2c305b7512", "created": "2026-10-09T15:13:09.523691Z", "modified": "2026-10-09T15:13:09.523691Z", "relationship_type": "indicates", "source_ref": "indicator--d3f46c64-215b-483e-bee8-c8051de70e4f", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cea101-91e2-4198-b84b-2e6286ac914e", "created": "2026-10-09T15:13:09.52382Z", "modified": "2026-10-09T15:13:09.52382Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='69C28343A4D0F2156D7B56AE4616E1386173A047']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.52382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca819044-83ba-4c30-afe1-15d55e40d664", "created": "2026-10-09T15:13:09.524371Z", "modified": "2026-10-09T15:13:09.524371Z", "relationship_type": "indicates", "source_ref": "indicator--49cea101-91e2-4198-b84b-2e6286ac914e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275678e7-a919-42bf-92a5-8bf3139a7083", "created": "2026-10-09T15:13:09.524494Z", "modified": "2026-10-09T15:13:09.524494Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F2633353631EE72F7B7A7B946FABE1EF0A339041']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.524494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ada9bc77-8c76-495e-9827-7ab7b5e77ea4", "created": "2026-10-09T15:13:09.525024Z", "modified": "2026-10-09T15:13:09.525024Z", "relationship_type": "indicates", "source_ref": "indicator--275678e7-a919-42bf-92a5-8bf3139a7083", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641b622c-7019-4d57-b382-9f5dbac418c8", "created": "2026-10-09T15:13:09.525144Z", "modified": "2026-10-09T15:13:09.525144Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B4ED5FA9E2A9176DA53324717A9B10F57191859C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.525144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d0fa46a-ee00-41b3-a2bf-8d374038ead3", "created": "2026-10-09T15:13:09.525696Z", "modified": "2026-10-09T15:13:09.525696Z", "relationship_type": "indicates", "source_ref": "indicator--641b622c-7019-4d57-b382-9f5dbac418c8", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0731131-b026-47e6-9a94-007bd7e84d6e", "created": "2026-10-09T15:13:09.52582Z", "modified": "2026-10-09T15:13:09.52582Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='409B589FDEAE073A94D609E2B41A6C0EA952B35A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.52582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76b53bfc-3f09-4a52-8070-521fc9287680", "created": "2026-10-09T15:13:09.526476Z", "modified": "2026-10-09T15:13:09.526476Z", "relationship_type": "indicates", "source_ref": "indicator--d0731131-b026-47e6-9a94-007bd7e84d6e", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e114eb26-3036-44c8-8de2-67a38caa709f", "created": "2026-10-09T15:13:09.5266Z", "modified": "2026-10-09T15:13:09.5266Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C87A87F7F5EDE2D279DDA0CCDE55E6AB85549D70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.5266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--352af47b-a3b1-44ea-8209-5fa74ad32e91", "created": "2026-10-09T15:13:09.52714Z", "modified": "2026-10-09T15:13:09.52714Z", "relationship_type": "indicates", "source_ref": "indicator--e114eb26-3036-44c8-8de2-67a38caa709f", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c26901-7099-423a-8a5e-5e8f9c117783", "created": "2026-10-09T15:13:09.527258Z", "modified": "2026-10-09T15:13:09.527258Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='52B12772C6558D6A44A2DAF9E18FFAE48C577CA7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.527258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2be5bd4-b5d0-467c-86f9-5e88f2cf7549", "created": "2026-10-09T15:13:09.52781Z", "modified": "2026-10-09T15:13:09.52781Z", "relationship_type": "indicates", "source_ref": "indicator--c9c26901-7099-423a-8a5e-5e8f9c117783", "target_ref": "malware--dd0fe0c4-8623-4db6-8d61-c0086dd68b11"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9c87fdff-330c-4fb0-b03a-79964b212708", "created": "2026-10-09T15:13:09.52793Z", "modified": "2026-10-09T15:13:09.52793Z", "name": "mSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8673ba06-2574-403e-b6ac-336f164c804e", "created": "2026-10-09T15:13:09.528048Z", "modified": "2026-10-09T15:13:09.528048Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a-qa3.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.528048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee35982-0119-413d-8f6a-0fd51a1b9d1d", "created": "2026-10-09T15:13:09.52853Z", "modified": "2026-10-09T15:13:09.52853Z", "relationship_type": "indicates", "source_ref": "indicator--8673ba06-2574-403e-b6ac-336f164c804e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06240b6b-f45c-4651-b7ba-e803970eed99", "created": "2026-10-09T15:13:09.528653Z", "modified": "2026-10-09T15:13:09.528653Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.528653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fd65b04-d205-4546-84ac-683d2876463e", "created": "2026-10-09T15:13:09.52911Z", "modified": "2026-10-09T15:13:09.52911Z", "relationship_type": "indicates", "source_ref": "indicator--06240b6b-f45c-4651-b7ba-e803970eed99", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af33908-c436-4000-a53c-bb9bcaad122b", "created": "2026-10-09T15:13:09.529227Z", "modified": "2026-10-09T15:13:09.529227Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.529227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5c8bebc-b01b-495b-979a-7367008fa9ce", "created": "2026-10-09T15:13:09.5297Z", "modified": "2026-10-09T15:13:09.5297Z", "relationship_type": "indicates", "source_ref": "indicator--3af33908-c436-4000-a53c-bb9bcaad122b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f535a976-6880-4f2d-bb7a-4cbfd458a474", "created": "2026-10-09T15:13:09.529822Z", "modified": "2026-10-09T15:13:09.529822Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.529822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47cefc2d-cf9b-4d39-8eef-f994dd1a9346", "created": "2026-10-09T15:13:09.5303Z", "modified": "2026-10-09T15:13:09.5303Z", "relationship_type": "indicates", "source_ref": "indicator--f535a976-6880-4f2d-bb7a-4cbfd458a474", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f243cc57-dd8b-466c-8597-134aa0c43902", "created": "2026-10-09T15:13:09.530421Z", "modified": "2026-10-09T15:13:09.530421Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apiv4.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.530421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03eea697-1283-4b61-bd55-e478e7f1395b", "created": "2026-10-09T15:13:09.5309Z", "modified": "2026-10-09T15:13:09.5309Z", "relationship_type": "indicates", "source_ref": "indicator--f243cc57-dd8b-466c-8597-134aa0c43902", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003abc7a-f7cc-4963-b262-5dcb662057f4", "created": "2026-10-09T15:13:09.531021Z", "modified": "2026-10-09T15:13:09.531021Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='b55y.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.531021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5af4737e-47fe-4bd4-8928-054bdc66bf9f", "created": "2026-10-09T15:13:09.531492Z", "modified": "2026-10-09T15:13:09.531492Z", "relationship_type": "indicates", "source_ref": "indicator--003abc7a-f7cc-4963-b262-5dcb662057f4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e8c773-a748-48e7-af49-9c805d435fc0", "created": "2026-10-09T15:13:09.531614Z", "modified": "2026-10-09T15:13:09.531614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bbrp.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.531614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f91f71e-7231-449f-9446-474780f160be", "created": "2026-10-09T15:13:09.532171Z", "modified": "2026-10-09T15:13:09.532171Z", "relationship_type": "indicates", "source_ref": "indicator--56e8c773-a748-48e7-af49-9c805d435fc0", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e1f951-cd52-412a-9cf1-39758cd7297c", "created": "2026-10-09T15:13:09.53231Z", "modified": "2026-10-09T15:13:09.53231Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bi.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.53231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f74be02d-64bf-45b7-85c3-001dce58f44b", "created": "2026-10-09T15:13:09.53277Z", "modified": "2026-10-09T15:13:09.53277Z", "relationship_type": "indicates", "source_ref": "indicator--14e1f951-cd52-412a-9cf1-39758cd7297c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b31fd90-34ed-4b4e-a2cf-9d241d166a34", "created": "2026-10-09T15:13:09.53289Z", "modified": "2026-10-09T15:13:09.53289Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.53289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f6adb77-5f07-4e57-9dcf-6132565ef79b", "created": "2026-10-09T15:13:09.533365Z", "modified": "2026-10-09T15:13:09.533365Z", "relationship_type": "indicates", "source_ref": "indicator--9b31fd90-34ed-4b4e-a2cf-9d241d166a34", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fcab28-1abc-4db9-8a43-e76ca2a809c6", "created": "2026-10-09T15:13:09.533485Z", "modified": "2026-10-09T15:13:09.533485Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='eyezyapp.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.533485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3099a333-09e4-446b-9b44-c1c8e0092dd5", "created": "2026-10-09T15:13:09.533951Z", "modified": "2026-10-09T15:13:09.533951Z", "relationship_type": "indicates", "source_ref": "indicator--18fcab28-1abc-4db9-8a43-e76ca2a809c6", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa691aaa-dc80-40da-baa6-3412e63452c1", "created": "2026-10-09T15:13:09.534081Z", "modified": "2026-10-09T15:13:09.534081Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getmspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.534081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20d1806c-b375-4a1f-b105-64ae296c56d5", "created": "2026-10-09T15:13:09.534557Z", "modified": "2026-10-09T15:13:09.534557Z", "relationship_type": "indicates", "source_ref": "indicator--fa691aaa-dc80-40da-baa6-3412e63452c1", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14fe83ed-9221-4f3b-9593-a284325ea328", "created": "2026-10-09T15:13:09.534674Z", "modified": "2026-10-09T15:13:09.534674Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hz-service.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.534674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd91c556-55df-4840-beba-19f2b7b9ed72", "created": "2026-10-09T15:13:09.535146Z", "modified": "2026-10-09T15:13:09.535146Z", "relationship_type": "indicates", "source_ref": "indicator--14fe83ed-9221-4f3b-9593-a284325ea328", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8e20e9-a6bf-484d-9f1f-a007982b5212", "created": "2026-10-09T15:13:09.535276Z", "modified": "2026-10-09T15:13:09.535276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hz7.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.535276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cbbb776-1c18-45be-ad2d-6189f13a8b8a", "created": "2026-10-09T15:13:09.535753Z", "modified": "2026-10-09T15:13:09.535753Z", "relationship_type": "indicates", "source_ref": "indicator--0f8e20e9-a6bf-484d-9f1f-a007982b5212", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee0c67c-8743-4d18-aae3-70596c074bd3", "created": "2026-10-09T15:13:09.535873Z", "modified": "2026-10-09T15:13:09.535873Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='idevs.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.535873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d25a1d4-5555-4d4b-983a-0a7f1c95ec24", "created": "2026-10-09T15:13:09.536338Z", "modified": "2026-10-09T15:13:09.536338Z", "relationship_type": "indicates", "source_ref": "indicator--dee0c67c-8743-4d18-aae3-70596c074bd3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb4eb06-6ee1-40cc-acdb-91a444533bd9", "created": "2026-10-09T15:13:09.53646Z", "modified": "2026-10-09T15:13:09.53646Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='jailbreak-gateway.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.53646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b00f03c-4373-4bd2-bc13-7ffcf69e2abe", "created": "2026-10-09T15:13:09.537038Z", "modified": "2026-10-09T15:13:09.537038Z", "relationship_type": "indicates", "source_ref": "indicator--edb4eb06-6ee1-40cc-acdb-91a444533bd9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695eb08f-c839-4c79-880a-ac9fb0592f6f", "created": "2026-10-09T15:13:09.53716Z", "modified": "2026-10-09T15:13:09.53716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kypler.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.53716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e78e1398-ae4f-4d0d-8cc3-60cb7bf574f6", "created": "2026-10-09T15:13:09.537738Z", "modified": "2026-10-09T15:13:09.537738Z", "relationship_type": "indicates", "source_ref": "indicator--695eb08f-c839-4c79-880a-ac9fb0592f6f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975f9bec-3c8d-40e2-9d7d-38cc96447321", "created": "2026-10-09T15:13:09.537861Z", "modified": "2026-10-09T15:13:09.537861Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m-media.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.537861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8df4c8c-873c-4dd2-bb9e-c86d41db00a7", "created": "2026-10-09T15:13:09.538346Z", "modified": "2026-10-09T15:13:09.538346Z", "relationship_type": "indicates", "source_ref": "indicator--975f9bec-3c8d-40e2-9d7d-38cc96447321", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec3ade0-01e1-4cf2-96c7-292e2be9be0b", "created": "2026-10-09T15:13:09.538469Z", "modified": "2026-10-09T15:13:09.538469Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mcloud-api.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.538469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--175664bd-0408-4550-997c-304937558005", "created": "2026-10-09T15:13:09.538951Z", "modified": "2026-10-09T15:13:09.538951Z", "relationship_type": "indicates", "source_ref": "indicator--fec3ade0-01e1-4cf2-96c7-292e2be9be0b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57557fdf-fd60-4218-ae34-33a4b75c28de", "created": "2026-10-09T15:13:09.539072Z", "modified": "2026-10-09T15:13:09.539072Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mi.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.539072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82eebf96-aee3-4938-867e-c4ba93427103", "created": "2026-10-09T15:13:09.539549Z", "modified": "2026-10-09T15:13:09.539549Z", "relationship_type": "indicates", "source_ref": "indicator--57557fdf-fd60-4218-ae34-33a4b75c28de", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f43670b-6835-432a-b1b5-9dfd91243233", "created": "2026-10-09T15:13:09.539674Z", "modified": "2026-10-09T15:13:09.539674Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mlite-app.livekit.cloud']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.539674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1cb93f3-dffd-4034-8ed3-c6c5c0d418fb", "created": "2026-10-09T15:13:09.540151Z", "modified": "2026-10-09T15:13:09.540151Z", "relationship_type": "indicates", "source_ref": "indicator--1f43670b-6835-432a-b1b5-9dfd91243233", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22bef15b-bf51-4ed2-a1e4-7fca7105649e", "created": "2026-10-09T15:13:09.540283Z", "modified": "2026-10-09T15:13:09.540283Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mlite-app.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.540283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e948d2c7-157c-479d-a2f0-d4b9bfdcdf62", "created": "2026-10-09T15:13:09.540758Z", "modified": "2026-10-09T15:13:09.540758Z", "relationship_type": "indicates", "source_ref": "indicator--22bef15b-bf51-4ed2-a1e4-7fca7105649e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7372c436-5459-4e68-b679-0801a46d8bfa", "created": "2026-10-09T15:13:09.540876Z", "modified": "2026-10-09T15:13:09.540876Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mlite-socket.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.540876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e08224da-901b-46d6-84e9-31d2ed21bb7d", "created": "2026-10-09T15:13:09.54136Z", "modified": "2026-10-09T15:13:09.54136Z", "relationship_type": "indicates", "source_ref": "indicator--7372c436-5459-4e68-b679-0801a46d8bfa", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d382ef5-37c4-4e5b-952e-a80778f4c787", "created": "2026-10-09T15:13:09.541484Z", "modified": "2026-10-09T15:13:09.541484Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mliteapp.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.541484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ed58b08-74c7-47ec-a86e-617d0f9d9abd", "created": "2026-10-09T15:13:09.54196Z", "modified": "2026-10-09T15:13:09.54196Z", "relationship_type": "indicates", "source_ref": "indicator--6d382ef5-37c4-4e5b-952e-a80778f4c787", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422aee76-f916-461c-a3e4-6fb4ce98fcbd", "created": "2026-10-09T15:13:09.54208Z", "modified": "2026-10-09T15:13:09.54208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-gw.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.54208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fef3fd3-5763-4b83-89d4-4dc9f4f73250", "created": "2026-10-09T15:13:09.542564Z", "modified": "2026-10-09T15:13:09.542564Z", "relationship_type": "indicates", "source_ref": "indicator--422aee76-f916-461c-a3e4-6fb4ce98fcbd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95220ea-b4a9-4a8c-a5c4-722989104a3b", "created": "2026-10-09T15:13:09.542687Z", "modified": "2026-10-09T15:13:09.542687Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.542687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f507c6d-5b42-4326-9bcf-81953e857561", "created": "2026-10-09T15:13:09.543279Z", "modified": "2026-10-09T15:13:09.543279Z", "relationship_type": "indicates", "source_ref": "indicator--a95220ea-b4a9-4a8c-a5c4-722989104a3b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5876b8b-8472-45ea-bda2-f362fd395e02", "created": "2026-10-09T15:13:09.543404Z", "modified": "2026-10-09T15:13:09.543404Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.543404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d58ec6df-2bc0-4160-b94a-cfbf332ea2a3", "created": "2026-10-09T15:13:09.543873Z", "modified": "2026-10-09T15:13:09.543873Z", "relationship_type": "indicates", "source_ref": "indicator--e5876b8b-8472-45ea-bda2-f362fd395e02", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ed820f-e64c-438c-a1f2-a28b16d59696", "created": "2026-10-09T15:13:09.543991Z", "modified": "2026-10-09T15:13:09.543991Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspytrackercom.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.543991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--140a39a7-aea4-4a7f-8c97-9096761ca104", "created": "2026-10-09T15:13:09.544491Z", "modified": "2026-10-09T15:13:09.544491Z", "relationship_type": "indicates", "source_ref": "indicator--f6ed820f-e64c-438c-a1f2-a28b16d59696", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d7d3a3-b813-4e47-bfdf-de37b6310fb7", "created": "2026-10-09T15:13:09.544613Z", "modified": "2026-10-09T15:13:09.544613Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtechn.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.544613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9380cdee-bfc1-4530-afae-61147f6ab895", "created": "2026-10-09T15:13:09.545089Z", "modified": "2026-10-09T15:13:09.545089Z", "relationship_type": "indicates", "source_ref": "indicator--65d7d3a3-b813-4e47-bfdf-de37b6310fb7", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be87394-3dfb-4079-843c-9e19176c811a", "created": "2026-10-09T15:13:09.545208Z", "modified": "2026-10-09T15:13:09.545208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.kidsecured.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.545208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e8dc753-c794-40de-a0f0-5df25012b3f4", "created": "2026-10-09T15:13:09.545693Z", "modified": "2026-10-09T15:13:09.545693Z", "relationship_type": "indicates", "source_ref": "indicator--1be87394-3dfb-4079-843c-9e19176c811a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acadf29-b8f7-4956-adeb-4656a4afdb4b", "created": "2026-10-09T15:13:09.545812Z", "modified": "2026-10-09T15:13:09.545812Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.545812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87a6a3be-a170-47d8-ad6c-803844fc81d2", "created": "2026-10-09T15:13:09.546288Z", "modified": "2026-10-09T15:13:09.546288Z", "relationship_type": "indicates", "source_ref": "indicator--5acadf29-b8f7-4956-adeb-4656a4afdb4b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a05a962-424e-4147-ad1f-7532b989e90a", "created": "2026-10-09T15:13:09.546417Z", "modified": "2026-10-09T15:13:09.546417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.phonsee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.546417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccf2d42b-f650-40ec-82a9-cba226b8b09f", "created": "2026-10-09T15:13:09.546892Z", "modified": "2026-10-09T15:13:09.546892Z", "relationship_type": "indicates", "source_ref": "indicator--1a05a962-424e-4147-ad1f-7532b989e90a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9d2eb0-3b63-4a5b-aa84-52855cb4ce43", "created": "2026-10-09T15:13:09.547009Z", "modified": "2026-10-09T15:13:09.547009Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.securechildren.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.547009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e1e969e-2106-42ff-ab60-7623b5d0fbb9", "created": "2026-10-09T15:13:09.547496Z", "modified": "2026-10-09T15:13:09.547496Z", "relationship_type": "indicates", "source_ref": "indicator--6c9d2eb0-3b63-4a5b-aa84-52855cb4ce43", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50363595-e1a5-4b10-862b-33bf934500d2", "created": "2026-10-09T15:13:09.547614Z", "modified": "2026-10-09T15:13:09.547614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pipe.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.547614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--265e22c4-71f6-4620-9500-a0ef77059c44", "created": "2026-10-09T15:13:09.548081Z", "modified": "2026-10-09T15:13:09.548081Z", "relationship_type": "indicates", "source_ref": "indicator--50363595-e1a5-4b10-862b-33bf934500d2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06c14e6-d18b-46fe-b573-8e7acc2ec4fc", "created": "2026-10-09T15:13:09.548204Z", "modified": "2026-10-09T15:13:09.548204Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='project-323448153542050953.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.548204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6688b52-6afb-466d-bcb8-86e03f55f335", "created": "2026-10-09T15:13:09.548813Z", "modified": "2026-10-09T15:13:09.548813Z", "relationship_type": "indicates", "source_ref": "indicator--a06c14e6-d18b-46fe-b573-8e7acc2ec4fc", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5919974b-cc63-4043-8298-640551a42041", "created": "2026-10-09T15:13:09.548934Z", "modified": "2026-10-09T15:13:09.548934Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='q12z.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.548934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34970ef1-3c60-4e9f-b7b5-cf48eec3ddf2", "created": "2026-10-09T15:13:09.549507Z", "modified": "2026-10-09T15:13:09.549507Z", "relationship_type": "indicates", "source_ref": "indicator--5919974b-cc63-4043-8298-640551a42041", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a3ff73-2115-4a5b-af95-1215211199ff", "created": "2026-10-09T15:13:09.549634Z", "modified": "2026-10-09T15:13:09.549634Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='repo.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.549634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6b20a2e-42b7-48ef-b8d7-085689bc7a41", "created": "2026-10-09T15:13:09.550126Z", "modified": "2026-10-09T15:13:09.550126Z", "relationship_type": "indicates", "source_ref": "indicator--94a3ff73-2115-4a5b-af95-1215211199ff", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba10dc2-3edd-4a28-87ce-735876d6c31e", "created": "2026-10-09T15:13:09.550252Z", "modified": "2026-10-09T15:13:09.550252Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rockalab.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.550252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15f195ef-535e-496e-a4e2-1bbd9866f0a2", "created": "2026-10-09T15:13:09.550734Z", "modified": "2026-10-09T15:13:09.550734Z", "relationship_type": "indicates", "source_ref": "indicator--0ba10dc2-3edd-4a28-87ce-735876d6c31e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b5186d-69b2-4f58-a05e-ff77c29f4173", "created": "2026-10-09T15:13:09.550856Z", "modified": "2026-10-09T15:13:09.550856Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s3.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.550856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5581a760-65af-4ab0-a517-a9ef36a0f649", "created": "2026-10-09T15:13:09.551342Z", "modified": "2026-10-09T15:13:09.551342Z", "relationship_type": "indicates", "source_ref": "indicator--42b5186d-69b2-4f58-a05e-ff77c29f4173", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4120c38-258c-47aa-b10b-4d9327567046", "created": "2026-10-09T15:13:09.551464Z", "modified": "2026-10-09T15:13:09.551464Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-01.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.551464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e156ee76-364f-4dc6-915d-44c2453e9305", "created": "2026-10-09T15:13:09.551936Z", "modified": "2026-10-09T15:13:09.551936Z", "relationship_type": "indicates", "source_ref": "indicator--d4120c38-258c-47aa-b10b-4d9327567046", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b83dc3-6dfd-4421-b457-0ba61f980a0b", "created": "2026-10-09T15:13:09.552056Z", "modified": "2026-10-09T15:13:09.552056Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-02.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.552056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd32d675-5168-423d-b06f-b9f9092ee320", "created": "2026-10-09T15:13:09.55255Z", "modified": "2026-10-09T15:13:09.55255Z", "relationship_type": "indicates", "source_ref": "indicator--67b83dc3-6dfd-4421-b457-0ba61f980a0b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab25bcf-40bd-483a-a364-0f309160d173", "created": "2026-10-09T15:13:09.55268Z", "modified": "2026-10-09T15:13:09.55268Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-03.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.55268Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21c97e63-549e-4dce-a754-c4f24bafcb35", "created": "2026-10-09T15:13:09.553156Z", "modified": "2026-10-09T15:13:09.553156Z", "relationship_type": "indicates", "source_ref": "indicator--bab25bcf-40bd-483a-a364-0f309160d173", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf0a57f-b34a-4fc6-8664-2c716090287d", "created": "2026-10-09T15:13:09.553287Z", "modified": "2026-10-09T15:13:09.553287Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-04.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.553287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35a63148-7a71-45f5-8eee-9251c621fd26", "created": "2026-10-09T15:13:09.553763Z", "modified": "2026-10-09T15:13:09.553763Z", "relationship_type": "indicates", "source_ref": "indicator--edf0a57f-b34a-4fc6-8664-2c716090287d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcce8a1-b60d-467e-b905-840a91724026", "created": "2026-10-09T15:13:09.553884Z", "modified": "2026-10-09T15:13:09.553884Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-05.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.553884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8fc8191-b1e1-42e5-95a3-99cd6e7adad4", "created": "2026-10-09T15:13:09.55479Z", "modified": "2026-10-09T15:13:09.55479Z", "relationship_type": "indicates", "source_ref": "indicator--7fcce8a1-b60d-467e-b905-840a91724026", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe78f2f2-aaf3-4700-b48b-365413df6eb5", "created": "2026-10-09T15:13:09.554923Z", "modified": "2026-10-09T15:13:09.554923Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-06.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.554923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32ebfdbe-8531-447e-81a7-b6af084096dc", "created": "2026-10-09T15:13:09.555417Z", "modified": "2026-10-09T15:13:09.555417Z", "relationship_type": "indicates", "source_ref": "indicator--fe78f2f2-aaf3-4700-b48b-365413df6eb5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d447220-35ed-48d3-b174-bdfb62abb36a", "created": "2026-10-09T15:13:09.55554Z", "modified": "2026-10-09T15:13:09.55554Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-07.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.55554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cab9f898-4f1b-4e3c-8587-ca22a21026e1", "created": "2026-10-09T15:13:09.556014Z", "modified": "2026-10-09T15:13:09.556014Z", "relationship_type": "indicates", "source_ref": "indicator--9d447220-35ed-48d3-b174-bdfb62abb36a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5f55e0-aeb1-4fca-8dde-f679f9917178", "created": "2026-10-09T15:13:09.556136Z", "modified": "2026-10-09T15:13:09.556136Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-product-new.bbrp.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.556136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed10654a-cd95-40d7-8482-4d68caa8f616", "created": "2026-10-09T15:13:09.55664Z", "modified": "2026-10-09T15:13:09.55664Z", "relationship_type": "indicates", "source_ref": "indicator--0c5f55e0-aeb1-4fca-8dde-f679f9917178", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdfc10c-9737-48d3-9223-4f6e73660e4e", "created": "2026-10-09T15:13:09.556764Z", "modified": "2026-10-09T15:13:09.556764Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.556764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6f64d58-26a7-4667-a95f-aaf52b345fd4", "created": "2026-10-09T15:13:09.557229Z", "modified": "2026-10-09T15:13:09.557229Z", "relationship_type": "indicates", "source_ref": "indicator--cbdfc10c-9737-48d3-9223-4f6e73660e4e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17010e3d-d6a3-437d-af7c-18c11fdc5186", "created": "2026-10-09T15:13:09.557363Z", "modified": "2026-10-09T15:13:09.557363Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracking.mliteapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.557363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdcd355b-7842-4fda-a0be-fd4d2064d746", "created": "2026-10-09T15:13:09.557844Z", "modified": "2026-10-09T15:13:09.557844Z", "relationship_type": "indicates", "source_ref": "indicator--17010e3d-d6a3-437d-af7c-18c11fdc5186", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c8cc37-57db-47a9-88a1-29d8eae4f7e5", "created": "2026-10-09T15:13:09.557964Z", "modified": "2026-10-09T15:13:09.557964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracking.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.557964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4385bb5-4df2-42cc-abb7-76f4f5595bdb", "created": "2026-10-09T15:13:09.558461Z", "modified": "2026-10-09T15:13:09.558461Z", "relationship_type": "indicates", "source_ref": "indicator--07c8cc37-57db-47a9-88a1-29d8eae4f7e5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7de337-55be-41de-b79d-48d68b45a66e", "created": "2026-10-09T15:13:09.558583Z", "modified": "2026-10-09T15:13:09.558583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='update-service-7e59f.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.558583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--162f6a00-c4a1-4670-82cd-9653859e2b23", "created": "2026-10-09T15:13:09.559083Z", "modified": "2026-10-09T15:13:09.559083Z", "relationship_type": "indicates", "source_ref": "indicator--5d7de337-55be-41de-b79d-48d68b45a66e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611638b2-5f34-45b7-ae11-7fbb92330db3", "created": "2026-10-09T15:13:09.5592Z", "modified": "2026-10-09T15:13:09.5592Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webrtc.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.5592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6025995-345d-4106-b9cb-c3f3fc1cad6a", "created": "2026-10-09T15:13:09.559674Z", "modified": "2026-10-09T15:13:09.559674Z", "relationship_type": "indicates", "source_ref": "indicator--611638b2-5f34-45b7-ae11-7fbb92330db3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18694ff7-49d8-491a-b131-09efd8699a17", "created": "2026-10-09T15:13:09.559791Z", "modified": "2026-10-09T15:13:09.559791Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.559791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8f5be51-bf1b-4917-b2db-3b99fd274816", "created": "2026-10-09T15:13:09.560245Z", "modified": "2026-10-09T15:13:09.560245Z", "relationship_type": "indicates", "source_ref": "indicator--18694ff7-49d8-491a-b131-09efd8699a17", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b71d785-9696-47be-bc1a-704ff41b0c50", "created": "2026-10-09T15:13:09.560378Z", "modified": "2026-10-09T15:13:09.560378Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.560378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97b24dc8-71dd-4c37-9c5a-aefba9a10974", "created": "2026-10-09T15:13:09.56096Z", "modified": "2026-10-09T15:13:09.56096Z", "relationship_type": "indicates", "source_ref": "indicator--1b71d785-9696-47be-bc1a-704ff41b0c50", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f52d15-353e-49d9-954c-303f61f8983b", "created": "2026-10-09T15:13:09.561081Z", "modified": "2026-10-09T15:13:09.561081Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bill-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.561081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37a9c975-c119-4686-841c-490c6fc0747a", "created": "2026-10-09T15:13:09.561553Z", "modified": "2026-10-09T15:13:09.561553Z", "relationship_type": "indicates", "source_ref": "indicator--e9f52d15-353e-49d9-954c-303f61f8983b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7bfdef-7121-44fc-be3c-86d8327d6921", "created": "2026-10-09T15:13:09.561674Z", "modified": "2026-10-09T15:13:09.561674Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cart.mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.561674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1040d366-4c3c-478c-9489-d6ebaabbc1a2", "created": "2026-10-09T15:13:09.562161Z", "modified": "2026-10-09T15:13:09.562161Z", "relationship_type": "indicates", "source_ref": "indicator--9c7bfdef-7121-44fc-be3c-86d8327d6921", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7014dd2-a4b8-4656-a177-9737774bf491", "created": "2026-10-09T15:13:09.562332Z", "modified": "2026-10-09T15:13:09.562332Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ctrl-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.562332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a61267e-7ee4-4502-8495-7174f6dc2a57", "created": "2026-10-09T15:13:09.562874Z", "modified": "2026-10-09T15:13:09.562874Z", "relationship_type": "indicates", "source_ref": "indicator--a7014dd2-a4b8-4656-a177-9737774bf491", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946b772a-6f50-486b-adae-c45d4732e559", "created": "2026-10-09T15:13:09.563001Z", "modified": "2026-10-09T15:13:09.563001Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freefonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.563001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57bf23f4-7568-4347-b976-6a4f3d35010e", "created": "2026-10-09T15:13:09.563489Z", "modified": "2026-10-09T15:13:09.563489Z", "relationship_type": "indicates", "source_ref": "indicator--946b772a-6f50-486b-adae-c45d4732e559", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee2853e-64df-4bb6-81dc-00c1621c42f5", "created": "2026-10-09T15:13:09.56361Z", "modified": "2026-10-09T15:13:09.56361Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsecured.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.56361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ec891eb-dba7-4bbd-b0c3-2e71e8bd781b", "created": "2026-10-09T15:13:09.564084Z", "modified": "2026-10-09T15:13:09.564084Z", "relationship_type": "indicates", "source_ref": "indicator--dee2853e-64df-4bb6-81dc-00c1621c42f5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5e7783-f9c8-4e7c-8001-1a74d82bfded", "created": "2026-10-09T15:13:09.564201Z", "modified": "2026-10-09T15:13:09.564201Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m-services.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.564201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--503add5d-86a4-4d96-bc75-1d5782f2298d", "created": "2026-10-09T15:13:09.564681Z", "modified": "2026-10-09T15:13:09.564681Z", "relationship_type": "indicates", "source_ref": "indicator--1a5e7783-f9c8-4e7c-8001-1a74d82bfded", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd8925a-1d48-4870-8b97-fadb54bb8db3", "created": "2026-10-09T15:13:09.564797Z", "modified": "2026-10-09T15:13:09.564797Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mbill.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.564797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36c188bb-1bab-4300-8242-eed68352c7e1", "created": "2026-10-09T15:13:09.565258Z", "modified": "2026-10-09T15:13:09.565258Z", "relationship_type": "indicates", "source_ref": "indicator--bbd8925a-1d48-4870-8b97-fadb54bb8db3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b007eea-c844-4938-8883-bca2e6b07575", "created": "2026-10-09T15:13:09.565387Z", "modified": "2026-10-09T15:13:09.565387Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mcontrolapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.565387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e6196f6-face-4157-a7bf-661deae912c3", "created": "2026-10-09T15:13:09.56586Z", "modified": "2026-10-09T15:13:09.56586Z", "relationship_type": "indicates", "source_ref": "indicator--3b007eea-c844-4938-8883-bca2e6b07575", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd31d97-84c0-4e7a-af61-e9e1548e0d7d", "created": "2026-10-09T15:13:09.56598Z", "modified": "2026-10-09T15:13:09.56598Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mkid.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.56598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0f25405-b8e2-47a1-87b3-00388f14e690", "created": "2026-10-09T15:13:09.56655Z", "modified": "2026-10-09T15:13:09.56655Z", "relationship_type": "indicates", "source_ref": "indicator--ffd31d97-84c0-4e7a-af61-e9e1548e0d7d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77dda121-1c32-4e3a-bf6a-2c23948c0b80", "created": "2026-10-09T15:13:09.566682Z", "modified": "2026-10-09T15:13:09.566682Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mkidctrl.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.566682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0b7db8f-4736-4db4-94ab-ce62f1fbb145", "created": "2026-10-09T15:13:09.56715Z", "modified": "2026-10-09T15:13:09.56715Z", "relationship_type": "indicates", "source_ref": "indicator--77dda121-1c32-4e3a-bf6a-2c23948c0b80", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e6f78d-18d6-40f5-b66d-8454f641fd0f", "created": "2026-10-09T15:13:09.567282Z", "modified": "2026-10-09T15:13:09.567282Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mkidsecure.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.567282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee798a9-b7c6-44cc-9569-4ee570902f00", "created": "2026-10-09T15:13:09.567751Z", "modified": "2026-10-09T15:13:09.567751Z", "relationship_type": "indicates", "source_ref": "indicator--14e6f78d-18d6-40f5-b66d-8454f641fd0f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5d004a-b034-4b70-8435-5f58c3f40d2f", "created": "2026-10-09T15:13:09.567871Z", "modified": "2026-10-09T15:13:09.567871Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mliteapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.567871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f672d19d-3d7f-4552-88b5-3127c19aa588", "created": "2026-10-09T15:13:09.568344Z", "modified": "2026-10-09T15:13:09.568344Z", "relationship_type": "indicates", "source_ref": "indicator--5b5d004a-b034-4b70-8435-5f58c3f40d2f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6277533b-411c-4294-a1a1-d88bafa6c9d2", "created": "2026-10-09T15:13:09.568465Z", "modified": "2026-10-09T15:13:09.568465Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mpotect.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.568465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c0fb21d-5c65-459a-b57a-49030a151a89", "created": "2026-10-09T15:13:09.568926Z", "modified": "2026-10-09T15:13:09.568926Z", "relationship_type": "indicates", "source_ref": "indicator--6277533b-411c-4294-a1a1-d88bafa6c9d2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba4df92-35d9-4f6c-b9e2-83541189c65f", "created": "2026-10-09T15:13:09.569043Z", "modified": "2026-10-09T15:13:09.569043Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msafety.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.569043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f77b4df5-c935-43a4-89f0-cf1245262198", "created": "2026-10-09T15:13:09.569508Z", "modified": "2026-10-09T15:13:09.569508Z", "relationship_type": "indicates", "source_ref": "indicator--cba4df92-35d9-4f6c-b9e2-83541189c65f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b27b48f-4da6-4121-a218-37b72cd34e49", "created": "2026-10-09T15:13:09.569626Z", "modified": "2026-10-09T15:13:09.569626Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msecureapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.569626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98c99b67-9177-4559-9a2e-b154da9ef4a8", "created": "2026-10-09T15:13:09.570089Z", "modified": "2026-10-09T15:13:09.570089Z", "relationship_type": "indicates", "source_ref": "indicator--0b27b48f-4da6-4121-a218-37b72cd34e49", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f13e3479-5fb3-4c02-b2f5-02003c2f57a4", "created": "2026-10-09T15:13:09.570204Z", "modified": "2026-10-09T15:13:09.570204Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msp-control.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.570204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63873683-0edf-41b5-9f3f-a89ae42c6377", "created": "2026-10-09T15:13:09.570681Z", "modified": "2026-10-09T15:13:09.570681Z", "relationship_type": "indicates", "source_ref": "indicator--f13e3479-5fb3-4c02-b2f5-02003c2f57a4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52700eed-be70-40c5-b912-d58b95ef4cb9", "created": "2026-10-09T15:13:09.570798Z", "modified": "2026-10-09T15:13:09.570798Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspkid.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.570798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2d8feeb-6032-4c45-9794-7ea5b87cae3a", "created": "2026-10-09T15:13:09.57126Z", "modified": "2026-10-09T15:13:09.57126Z", "relationship_type": "indicates", "source_ref": "indicator--52700eed-be70-40c5-b912-d58b95ef4cb9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec3b351-ce31-450a-98af-7f8d378dc106", "created": "2026-10-09T15:13:09.571389Z", "modified": "2026-10-09T15:13:09.571389Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.co.il']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.571389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08663dde-17e5-481f-a14c-f53b953f0408", "created": "2026-10-09T15:13:09.571947Z", "modified": "2026-10-09T15:13:09.571947Z", "relationship_type": "indicates", "source_ref": "indicator--cec3b351-ce31-450a-98af-7f8d378dc106", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade46767-d54d-4c52-b586-3cf29a8d8d95", "created": "2026-10-09T15:13:09.572068Z", "modified": "2026-10-09T15:13:09.572068Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.co.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.572068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d58d40e8-1c0f-4a18-92d3-08d78c3b269e", "created": "2026-10-09T15:13:09.572549Z", "modified": "2026-10-09T15:13:09.572549Z", "relationship_type": "indicates", "source_ref": "indicator--ade46767-d54d-4c52-b586-3cf29a8d8d95", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130d35e4-1235-4439-b6a2-105884b5678a", "created": "2026-10-09T15:13:09.572673Z", "modified": "2026-10-09T15:13:09.572673Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.572673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36557d8f-503b-47c0-a203-a1fe5ef0e9e5", "created": "2026-10-09T15:13:09.573128Z", "modified": "2026-10-09T15:13:09.573128Z", "relationship_type": "indicates", "source_ref": "indicator--130d35e4-1235-4439-b6a2-105884b5678a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f5249c-5030-43bb-a54c-43c496f8bf12", "created": "2026-10-09T15:13:09.573245Z", "modified": "2026-10-09T15:13:09.573245Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.ar']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.573245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95747f00-6e2c-408d-a11a-a64075fd4aa3", "created": "2026-10-09T15:13:09.573718Z", "modified": "2026-10-09T15:13:09.573718Z", "relationship_type": "indicates", "source_ref": "indicator--51f5249c-5030-43bb-a54c-43c496f8bf12", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594c288d-a8ad-4c49-85fe-47c4faf75771", "created": "2026-10-09T15:13:09.573841Z", "modified": "2026-10-09T15:13:09.573841Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.573841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64d4591f-1a3a-4290-b05e-4b6dab4b7e91", "created": "2026-10-09T15:13:09.574313Z", "modified": "2026-10-09T15:13:09.574313Z", "relationship_type": "indicates", "source_ref": "indicator--594c288d-a8ad-4c49-85fe-47c4faf75771", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a392ecf0-4173-4b68-9a0a-fcb3955e0157", "created": "2026-10-09T15:13:09.574432Z", "modified": "2026-10-09T15:13:09.574432Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.574432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed29b1a6-792f-4289-840c-ecd42ed044e2", "created": "2026-10-09T15:13:09.574898Z", "modified": "2026-10-09T15:13:09.574898Z", "relationship_type": "indicates", "source_ref": "indicator--a392ecf0-4173-4b68-9a0a-fcb3955e0157", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480553a2-6e14-48d9-8a2e-29bcdf3e1777", "created": "2026-10-09T15:13:09.575015Z", "modified": "2026-10-09T15:13:09.575015Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.575015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0500074c-07b0-490b-81df-9fbe521b0e5e", "created": "2026-10-09T15:13:09.575491Z", "modified": "2026-10-09T15:13:09.575491Z", "relationship_type": "indicates", "source_ref": "indicator--480553a2-6e14-48d9-8a2e-29bcdf3e1777", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef52618-f61d-49fa-b603-4d360071c9bd", "created": "2026-10-09T15:13:09.57561Z", "modified": "2026-10-09T15:13:09.57561Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.57561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3020f2a-8a05-4354-8c94-6ab63328ec4e", "created": "2026-10-09T15:13:09.576087Z", "modified": "2026-10-09T15:13:09.576087Z", "relationship_type": "indicates", "source_ref": "indicator--9ef52618-f61d-49fa-b603-4d360071c9bd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df85a95e-33e3-41e3-b949-8af027a3247c", "created": "2026-10-09T15:13:09.576204Z", "modified": "2026-10-09T15:13:09.576204Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.576204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--552d3860-13f7-47a2-9893-34f9ab6a4864", "created": "2026-10-09T15:13:09.576674Z", "modified": "2026-10-09T15:13:09.576674Z", "relationship_type": "indicates", "source_ref": "indicator--df85a95e-33e3-41e3-b949-8af027a3247c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee5412c-da80-4bff-a370-7de1cd8adbf8", "created": "2026-10-09T15:13:09.576797Z", "modified": "2026-10-09T15:13:09.576797Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.576797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50af539e-cb64-43b6-b40c-7950d70bd94f", "created": "2026-10-09T15:13:09.577369Z", "modified": "2026-10-09T15:13:09.577369Z", "relationship_type": "indicates", "source_ref": "indicator--5ee5412c-da80-4bff-a370-7de1cd8adbf8", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980a1077-f28e-4342-a931-8c639f644e77", "created": "2026-10-09T15:13:09.577496Z", "modified": "2026-10-09T15:13:09.577496Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.jp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.577496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9d05fce-3fd5-4110-8b13-26c2210e2c2f", "created": "2026-10-09T15:13:09.577972Z", "modified": "2026-10-09T15:13:09.577972Z", "relationship_type": "indicates", "source_ref": "indicator--980a1077-f28e-4342-a931-8c639f644e77", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d8c1a2-c59c-4cf6-8d08-aa0a684388f4", "created": "2026-10-09T15:13:09.578091Z", "modified": "2026-10-09T15:13:09.578091Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.578091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb643dc8-c1b9-4cf6-b5eb-1e8ed9cfb708", "created": "2026-10-09T15:13:09.578558Z", "modified": "2026-10-09T15:13:09.578558Z", "relationship_type": "indicates", "source_ref": "indicator--39d8c1a2-c59c-4cf6-8d08-aa0a684388f4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5735e10a-fa02-4671-b919-adf80e1717a2", "created": "2026-10-09T15:13:09.578676Z", "modified": "2026-10-09T15:13:09.578676Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.nl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.578676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02b75d9a-d3bf-4c5b-8304-5b6bca820a3c", "created": "2026-10-09T15:13:09.579132Z", "modified": "2026-10-09T15:13:09.579132Z", "relationship_type": "indicates", "source_ref": "indicator--5735e10a-fa02-4671-b919-adf80e1717a2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ed48a4-e325-4613-9cff-a1e01d12ad71", "created": "2026-10-09T15:13:09.579253Z", "modified": "2026-10-09T15:13:09.579253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.support']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.579253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a91fa24c-b8fa-47a9-a3fc-00938a9cd832", "created": "2026-10-09T15:13:09.579738Z", "modified": "2026-10-09T15:13:09.579738Z", "relationship_type": "indicates", "source_ref": "indicator--53ed48a4-e325-4613-9cff-a1e01d12ad71", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3829871-3a73-4e73-9210-569fca93679d", "created": "2026-10-09T15:13:09.579859Z", "modified": "2026-10-09T15:13:09.579859Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspylite.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.579859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df5bcb77-ecc8-4026-a110-70ce7a8c722e", "created": "2026-10-09T15:13:09.580355Z", "modified": "2026-10-09T15:13:09.580355Z", "relationship_type": "indicates", "source_ref": "indicator--c3829871-3a73-4e73-9210-569fca93679d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84977eb-0cc4-4e57-b241-d12de3b9faaf", "created": "2026-10-09T15:13:09.580482Z", "modified": "2026-10-09T15:13:09.580482Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.580482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e7d0928-9938-4202-91ae-75a063406c19", "created": "2026-10-09T15:13:09.580952Z", "modified": "2026-10-09T15:13:09.580952Z", "relationship_type": "indicates", "source_ref": "indicator--a84977eb-0cc4-4e57-b241-d12de3b9faaf", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090deac3-f14b-4440-b217-f37b17da3a00", "created": "2026-10-09T15:13:09.581067Z", "modified": "2026-10-09T15:13:09.581067Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyplus.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.581067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94d6fefd-d42a-4c50-be0c-b8ba805c5cd1", "created": "2026-10-09T15:13:09.581544Z", "modified": "2026-10-09T15:13:09.581544Z", "relationship_type": "indicates", "source_ref": "indicator--090deac3-f14b-4440-b217-f37b17da3a00", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ca61bf-5c16-49ac-b468-b3f48b58fbd2", "created": "2026-10-09T15:13:09.581669Z", "modified": "2026-10-09T15:13:09.581669Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='myfonemate.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.581669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28eebba2-58f8-46e2-a47c-f2a7b2f5313f", "created": "2026-10-09T15:13:09.582138Z", "modified": "2026-10-09T15:13:09.582138Z", "relationship_type": "indicates", "source_ref": "indicator--48ca61bf-5c16-49ac-b468-b3f48b58fbd2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b817827-c943-467a-a113-9c8b519ca655", "created": "2026-10-09T15:13:09.582255Z", "modified": "2026-10-09T15:13:09.582255Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinecontrol.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.582255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c58433aa-47df-4de8-bf52-07971c2aaefb", "created": "2026-10-09T15:13:09.582843Z", "modified": "2026-10-09T15:13:09.582843Z", "relationship_type": "indicates", "source_ref": "indicator--9b817827-c943-467a-a113-9c8b519ca655", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7d05e5-679b-4c4b-8e5c-c87b1d7750c2", "created": "2026-10-09T15:13:09.582963Z", "modified": "2026-10-09T15:13:09.582963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinesecure.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.582963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d61e8360-33ac-4f7a-9927-0df7696cbc4a", "created": "2026-10-09T15:13:09.583444Z", "modified": "2026-10-09T15:13:09.583444Z", "relationship_type": "indicates", "source_ref": "indicator--4a7d05e5-679b-4c4b-8e5c-c87b1d7750c2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e169115-1f63-4a8b-8265-e3899b39d380", "created": "2026-10-09T15:13:09.583565Z", "modified": "2026-10-09T15:13:09.583565Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='parent-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.583565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--617056e5-61fc-4b9c-925a-71a34a53c322", "created": "2026-10-09T15:13:09.584033Z", "modified": "2026-10-09T15:13:09.584033Z", "relationship_type": "indicates", "source_ref": "indicator--1e169115-1f63-4a8b-8265-e3899b39d380", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f244e93c-b2cb-41ff-b2fe-8ed061cebad1", "created": "2026-10-09T15:13:09.58415Z", "modified": "2026-10-09T15:13:09.58415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonsee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.58415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b20229da-fcc1-453b-95f8-74b605c289a9", "created": "2026-10-09T15:13:09.584616Z", "modified": "2026-10-09T15:13:09.584616Z", "relationship_type": "indicates", "source_ref": "indicator--f244e93c-b2cb-41ff-b2fe-8ed061cebad1", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75285afc-f82d-4ca4-b55b-3d5cd6fc5fbf", "created": "2026-10-09T15:13:09.584741Z", "modified": "2026-10-09T15:13:09.584741Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safe-root.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.584741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a40fb54b-6b1a-4666-a8c2-90d9025c7b68", "created": "2026-10-09T15:13:09.585211Z", "modified": "2026-10-09T15:13:09.585211Z", "relationship_type": "indicates", "source_ref": "indicator--75285afc-f82d-4ca4-b55b-3d5cd6fc5fbf", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb618c0-3e97-4a06-b8df-dc3305186def", "created": "2026-10-09T15:13:09.585341Z", "modified": "2026-10-09T15:13:09.585341Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='secure-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.585341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d728289-04f2-4275-afd6-a43d76f6d800", "created": "2026-10-09T15:13:09.58581Z", "modified": "2026-10-09T15:13:09.58581Z", "relationship_type": "indicates", "source_ref": "indicator--dcb618c0-3e97-4a06-b8df-dc3305186def", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f47b8d0-16d1-4fa8-a3f9-d453bf84f0f4", "created": "2026-10-09T15:13:09.585928Z", "modified": "2026-10-09T15:13:09.585928Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='securechildren.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.585928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d449a63-fe3d-4147-8762-3dc5c84b8232", "created": "2026-10-09T15:13:09.586422Z", "modified": "2026-10-09T15:13:09.586422Z", "relationship_type": "indicates", "source_ref": "indicator--8f47b8d0-16d1-4fa8-a3f9-d453bf84f0f4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac3ab24-40dd-48dd-a101-6852f0836b06", "created": "2026-10-09T15:13:09.586546Z", "modified": "2026-10-09T15:13:09.586546Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='theispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.586546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5b353ae-3c43-4843-90ab-17d178662cb5", "created": "2026-10-09T15:13:09.58701Z", "modified": "2026-10-09T15:13:09.58701Z", "relationship_type": "indicates", "source_ref": "indicator--cac3ab24-40dd-48dd-a101-6852f0836b06", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c90a1d-5988-4fe7-a5b8-89a9c24a8c95", "created": "2026-10-09T15:13:09.587128Z", "modified": "2026-10-09T15:13:09.587128Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.eyezy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.587128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47fc8aae-c0ed-4399-becf-6eda9cd246b1", "created": "2026-10-09T15:13:09.587606Z", "modified": "2026-10-09T15:13:09.587606Z", "relationship_type": "indicates", "source_ref": "indicator--87c90a1d-5988-4fe7-a5b8-89a9c24a8c95", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f20765-9dde-499c-8575-e398ea31d2eb", "created": "2026-10-09T15:13:09.58773Z", "modified": "2026-10-09T15:13:09.58773Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.58773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c50056f-3b02-4a7e-981b-935867cc1961", "created": "2026-10-09T15:13:09.5883Z", "modified": "2026-10-09T15:13:09.5883Z", "relationship_type": "indicates", "source_ref": "indicator--95f20765-9dde-499c-8575-e398ea31d2eb", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42a513d-b39a-400e-9cd6-3f8cb4693d47", "created": "2026-10-09T15:13:09.588425Z", "modified": "2026-10-09T15:13:09.588425Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.588425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4404dbd1-23c6-4031-b640-60243ca68fea", "created": "2026-10-09T15:13:09.588913Z", "modified": "2026-10-09T15:13:09.588913Z", "relationship_type": "indicates", "source_ref": "indicator--d42a513d-b39a-400e-9cd6-3f8cb4693d47", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8410d416-3b7b-402a-b4a7-f6b75f48afa0", "created": "2026-10-09T15:13:09.589035Z", "modified": "2026-10-09T15:13:09.589035Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='q12z.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.589035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f608832e-5828-437b-86f9-383582254986", "created": "2026-10-09T15:13:09.589504Z", "modified": "2026-10-09T15:13:09.589504Z", "relationship_type": "indicates", "source_ref": "indicator--8410d416-3b7b-402a-b4a7-f6b75f48afa0", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2f47e3-8221-4619-9e41-0dd7a4b02b39", "created": "2026-10-09T15:13:09.589624Z", "modified": "2026-10-09T15:13:09.589624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getmspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.589624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f0d30d2-f73d-4252-9922-ab3e01c24cfb", "created": "2026-10-09T15:13:09.590089Z", "modified": "2026-10-09T15:13:09.590089Z", "relationship_type": "indicates", "source_ref": "indicator--6b2f47e3-8221-4619-9e41-0dd7a4b02b39", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baa1960-5979-46cc-b1fb-97a9c9b6e9ef", "created": "2026-10-09T15:13:09.59021Z", "modified": "2026-10-09T15:13:09.59021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0df406d88bd0e184090750bb2e7db58a9a9f87f794ad8fe1a20c2744bef6ee3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.59021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc99ca2d-5da9-4dd9-bb39-1a1b6ec766fd", "created": "2026-10-09T15:13:09.590821Z", "modified": "2026-10-09T15:13:09.590821Z", "relationship_type": "indicates", "source_ref": "indicator--0baa1960-5979-46cc-b1fb-97a9c9b6e9ef", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85964476-cc63-4214-96e5-166de221b4ac", "created": "2026-10-09T15:13:09.590942Z", "modified": "2026-10-09T15:13:09.590942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0ed21d5fd144f23a58c5775472387a0d4fa6647013d948db307143d7a0b20e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.590942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d154f71a-1828-4ddb-9b54-6854703f016c", "created": "2026-10-09T15:13:09.591538Z", "modified": "2026-10-09T15:13:09.591538Z", "relationship_type": "indicates", "source_ref": "indicator--85964476-cc63-4214-96e5-166de221b4ac", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35eb2247-152f-4a5d-979f-a6b5e0907341", "created": "2026-10-09T15:13:09.591662Z", "modified": "2026-10-09T15:13:09.591662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00416236b1aef68e56acdbade8d86fb9c052fcd28af17d72e015552af99a6a4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.591662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b10ed40-7c17-4638-8621-df3d3182ca75", "created": "2026-10-09T15:13:09.592245Z", "modified": "2026-10-09T15:13:09.592245Z", "relationship_type": "indicates", "source_ref": "indicator--35eb2247-152f-4a5d-979f-a6b5e0907341", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2fbef3-35d4-4785-a854-15e678a6b8ff", "created": "2026-10-09T15:13:09.592377Z", "modified": "2026-10-09T15:13:09.592377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fcc10df7f2e68aeb144dbf1e672fae0211c4c8d96d1ce1d181734670cc8c9d83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.592377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--403fd898-c297-4b3e-884f-99a955904152", "created": "2026-10-09T15:13:09.592969Z", "modified": "2026-10-09T15:13:09.592969Z", "relationship_type": "indicates", "source_ref": "indicator--3c2fbef3-35d4-4785-a854-15e678a6b8ff", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb8ffe5-4b0e-4119-b80c-a8352f1e84d8", "created": "2026-10-09T15:13:09.593089Z", "modified": "2026-10-09T15:13:09.593089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='085247cbee6743c55e7eb9c443c0f6309707be99c5dd68e35992568f69bd0959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.593089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33ccedb4-2b63-4f1e-b889-12a0d3508032", "created": "2026-10-09T15:13:09.593688Z", "modified": "2026-10-09T15:13:09.593688Z", "relationship_type": "indicates", "source_ref": "indicator--3eb8ffe5-4b0e-4119-b80c-a8352f1e84d8", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928ceaac-e2dc-4954-b5dd-69b12a0e4314", "created": "2026-10-09T15:13:09.593813Z", "modified": "2026-10-09T15:13:09.593813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='392e97f9d95ca9472df41423116ad60bdae397b3fb0c60e3c0bc71525ec0e5fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.593813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1532b9f1-3bc9-4a1a-9e1b-8d4be8de2e80", "created": "2026-10-09T15:13:09.594509Z", "modified": "2026-10-09T15:13:09.594509Z", "relationship_type": "indicates", "source_ref": "indicator--928ceaac-e2dc-4954-b5dd-69b12a0e4314", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71aca2b9-df78-47fd-b7b4-af1795674ab7", "created": "2026-10-09T15:13:09.594634Z", "modified": "2026-10-09T15:13:09.594634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8754b595aa85bed501a9f7d084245a4d8040f3f019e42e2d1de02de22cb061f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.594634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc0e6887-b5a4-4369-8d08-11ef66b3465c", "created": "2026-10-09T15:13:09.595217Z", "modified": "2026-10-09T15:13:09.595217Z", "relationship_type": "indicates", "source_ref": "indicator--71aca2b9-df78-47fd-b7b4-af1795674ab7", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005476f3-353f-4b8b-a8ca-2e925f7b5ac4", "created": "2026-10-09T15:13:09.595358Z", "modified": "2026-10-09T15:13:09.595358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='baf843b6c8fbf36d586a29ada5722b02e21d6ee885d98e7765eb0c4fc6250dfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.595358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59e5b5b3-e0d7-4550-b59a-4e5c3519f39b", "created": "2026-10-09T15:13:09.595942Z", "modified": "2026-10-09T15:13:09.595942Z", "relationship_type": "indicates", "source_ref": "indicator--005476f3-353f-4b8b-a8ca-2e925f7b5ac4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e82aa75-b9a7-4edf-8815-37a9bd70eccf", "created": "2026-10-09T15:13:09.596062Z", "modified": "2026-10-09T15:13:09.596062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c452916371a86977eb246c6841d87790ecfb73984481b3913335622425d5fc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.596062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9c591ce-a438-42c5-9325-92c23eeead40", "created": "2026-10-09T15:13:09.596668Z", "modified": "2026-10-09T15:13:09.596668Z", "relationship_type": "indicates", "source_ref": "indicator--2e82aa75-b9a7-4edf-8815-37a9bd70eccf", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4dadad-1857-4dcb-b0bb-21827ee91db2", "created": "2026-10-09T15:13:09.596797Z", "modified": "2026-10-09T15:13:09.596797Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87a87973e7a7452cc63ed855f32511723acc0803b75c68e649cbe62bb4ddbbdd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.596797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b60e5385-e856-44a8-b178-40af535d3b0c", "created": "2026-10-09T15:13:09.597388Z", "modified": "2026-10-09T15:13:09.597388Z", "relationship_type": "indicates", "source_ref": "indicator--ee4dadad-1857-4dcb-b0bb-21827ee91db2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f875ff-0ac8-45c1-a063-999d8149da95", "created": "2026-10-09T15:13:09.597516Z", "modified": "2026-10-09T15:13:09.597516Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e82c639bc8a4f59045a130a7696e1523d34d15895b98a1adb75d2547b3d17e6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.597516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f4fe67b-5c50-4c74-aa05-4ee04c55fd8f", "created": "2026-10-09T15:13:09.598097Z", "modified": "2026-10-09T15:13:09.598097Z", "relationship_type": "indicates", "source_ref": "indicator--43f875ff-0ac8-45c1-a063-999d8149da95", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d3cf4e-ac6f-4cb3-8930-6b0b139f1c0e", "created": "2026-10-09T15:13:09.598216Z", "modified": "2026-10-09T15:13:09.598216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f3a354527bc832ccbaae4ab3c1ac71559b3df284873e0a91f90278bdb765d3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.598216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1443096a-a0f9-4fca-81b9-e7319e210fd0", "created": "2026-10-09T15:13:09.59882Z", "modified": "2026-10-09T15:13:09.59882Z", "relationship_type": "indicates", "source_ref": "indicator--a3d3cf4e-ac6f-4cb3-8930-6b0b139f1c0e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810734c7-9d94-499f-a985-7e48db1c8983", "created": "2026-10-09T15:13:09.59894Z", "modified": "2026-10-09T15:13:09.59894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='627f9abeb2a949bd39a7c855bf5de4cec1814d20953b709bfd1f83a155b302e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.59894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0860127-85fc-4bd5-bffc-c235f3979cef", "created": "2026-10-09T15:13:09.59953Z", "modified": "2026-10-09T15:13:09.59953Z", "relationship_type": "indicates", "source_ref": "indicator--810734c7-9d94-499f-a985-7e48db1c8983", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29191c1f-e887-4042-bd74-ff267b02ef54", "created": "2026-10-09T15:13:09.599654Z", "modified": "2026-10-09T15:13:09.599654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8705f071aeea7a4865719e335aa784d37b8e06a0830f4073d0d5b14b41c01d3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.599654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e0f0f13-7e9a-4802-99b3-b22fe07c1af8", "created": "2026-10-09T15:13:09.600239Z", "modified": "2026-10-09T15:13:09.600239Z", "relationship_type": "indicates", "source_ref": "indicator--29191c1f-e887-4042-bd74-ff267b02ef54", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70634fbe-ad59-43fa-a0fb-117e8622799e", "created": "2026-10-09T15:13:09.600369Z", "modified": "2026-10-09T15:13:09.600369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d9c2b030895af7f5be38a527d6d08de0aa2f6be58b594c1abc250b6984821ecd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.600369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f0ceb2b-b2a3-4093-964c-1bdc458961e2", "created": "2026-10-09T15:13:09.601057Z", "modified": "2026-10-09T15:13:09.601057Z", "relationship_type": "indicates", "source_ref": "indicator--70634fbe-ad59-43fa-a0fb-117e8622799e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828188e8-4075-4c47-bb1c-29197905cb8d", "created": "2026-10-09T15:13:09.601179Z", "modified": "2026-10-09T15:13:09.601179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a08a591e8aac40f2d226f05777fac82a6e5929c85291e97c33eac58825a12396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.601179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae72cb4f-d598-4319-83ae-54a38d486c16", "created": "2026-10-09T15:13:09.601767Z", "modified": "2026-10-09T15:13:09.601767Z", "relationship_type": "indicates", "source_ref": "indicator--828188e8-4075-4c47-bb1c-29197905cb8d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d58941a-8790-40a3-aab3-670d143fccf4", "created": "2026-10-09T15:13:09.601888Z", "modified": "2026-10-09T15:13:09.601888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ec27607644332121b1effd38ac6a854aa640aa4463118aaf4de4c49b5477014']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.601888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70ba6b55-de54-47f5-844c-a9986d706fd6", "created": "2026-10-09T15:13:09.602479Z", "modified": "2026-10-09T15:13:09.602479Z", "relationship_type": "indicates", "source_ref": "indicator--9d58941a-8790-40a3-aab3-670d143fccf4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f85632d-98cd-4f9a-9236-55119066a4fe", "created": "2026-10-09T15:13:09.602598Z", "modified": "2026-10-09T15:13:09.602598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0402fac1ebba70be44930201bf46564b2434c771acf606aa6b35b40f07633e97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.602598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5352b78e-fc19-47fd-97eb-24a8ae0f0747", "created": "2026-10-09T15:13:09.603174Z", "modified": "2026-10-09T15:13:09.603174Z", "relationship_type": "indicates", "source_ref": "indicator--4f85632d-98cd-4f9a-9236-55119066a4fe", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998ebb21-7341-41f7-a238-f8455945ce5e", "created": "2026-10-09T15:13:09.603303Z", "modified": "2026-10-09T15:13:09.603303Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c721a94374b54c7fb2b2a61b626eac53a68a208db6e8efdb5c9cf6246f4622b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.603303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a27c88a9-4242-4651-94e3-e30d4d360420", "created": "2026-10-09T15:13:09.603879Z", "modified": "2026-10-09T15:13:09.603879Z", "relationship_type": "indicates", "source_ref": "indicator--998ebb21-7341-41f7-a238-f8455945ce5e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1bd4ab-efde-456d-975d-d68ff66f6f5f", "created": "2026-10-09T15:13:09.603996Z", "modified": "2026-10-09T15:13:09.603996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f421b018aa5a87d4d7f14e623d1a54a171aa048a99c3a11c745dc744b3bcb995']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.603996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--644984a9-aa5d-4c13-ae1d-816cab917219", "created": "2026-10-09T15:13:09.604582Z", "modified": "2026-10-09T15:13:09.604582Z", "relationship_type": "indicates", "source_ref": "indicator--6e1bd4ab-efde-456d-975d-d68ff66f6f5f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09da38b8-fa9b-4638-9715-a4ba15bb5b8b", "created": "2026-10-09T15:13:09.604707Z", "modified": "2026-10-09T15:13:09.604707Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed9ddba2c932cac15eac9764baf4d66825bc7e236d09e4fb3a9820bdc667acc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.604707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08350e45-7087-46dd-a74e-a5cc3d0c3cfd", "created": "2026-10-09T15:13:09.605295Z", "modified": "2026-10-09T15:13:09.605295Z", "relationship_type": "indicates", "source_ref": "indicator--09da38b8-fa9b-4638-9715-a4ba15bb5b8b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5747f3-9deb-480d-aa24-ba1b20bf70cb", "created": "2026-10-09T15:13:09.605415Z", "modified": "2026-10-09T15:13:09.605415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be77672e111d3d90698acf07f39c1a36c59b5723f05185e86fade1c2d6c75a09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.605415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97f5e6ee-4054-48fe-80ee-fab677259ea6", "created": "2026-10-09T15:13:09.606Z", "modified": "2026-10-09T15:13:09.606Z", "relationship_type": "indicates", "source_ref": "indicator--dd5747f3-9deb-480d-aa24-ba1b20bf70cb", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2482d08b-c04c-45ae-afb5-8e5aabeb6d35", "created": "2026-10-09T15:13:09.60612Z", "modified": "2026-10-09T15:13:09.60612Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4dc2d3808d9d0b4355db4598455805fd08ffe0b04206eaf6e0c73e165a1c3a94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.60612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82414661-d9ab-42e6-a813-78589f6349bf", "created": "2026-10-09T15:13:09.606723Z", "modified": "2026-10-09T15:13:09.606723Z", "relationship_type": "indicates", "source_ref": "indicator--2482d08b-c04c-45ae-afb5-8e5aabeb6d35", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eceb28d-9643-4236-a8d6-ba833d685e93", "created": "2026-10-09T15:13:09.606844Z", "modified": "2026-10-09T15:13:09.606844Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76dd98737513cefa2d86e3d8b58a26ebf3bf08cdeb64180ea11a93dfc64948d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.606844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c475acf-4392-431f-bcea-f63aa51c2582", "created": "2026-10-09T15:13:09.607545Z", "modified": "2026-10-09T15:13:09.607545Z", "relationship_type": "indicates", "source_ref": "indicator--0eceb28d-9643-4236-a8d6-ba833d685e93", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a46aa23-fe54-4bf2-ae69-40b30950ec6d", "created": "2026-10-09T15:13:09.607673Z", "modified": "2026-10-09T15:13:09.607673Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cf24d982ba3399722e871fb7b7ce3f54299ab5201946906f8dc32a846883956']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.607673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9acc8a60-ec12-42a6-9e2a-1edb70a18466", "created": "2026-10-09T15:13:09.608283Z", "modified": "2026-10-09T15:13:09.608283Z", "relationship_type": "indicates", "source_ref": "indicator--7a46aa23-fe54-4bf2-ae69-40b30950ec6d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269240a0-8d1b-4ee2-8f84-9620cfc7a37f", "created": "2026-10-09T15:13:09.608407Z", "modified": "2026-10-09T15:13:09.608407Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b54ada1d3ef333d82e6bfc0e3ffb7b3abfa9d783d18fd89dac05097eebfeb3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.608407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cafc8bc4-a631-49d1-bd9d-736a2b6f5012", "created": "2026-10-09T15:13:09.608987Z", "modified": "2026-10-09T15:13:09.608987Z", "relationship_type": "indicates", "source_ref": "indicator--269240a0-8d1b-4ee2-8f84-9620cfc7a37f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ade477-464e-4a79-88e3-45a925dbdb11", "created": "2026-10-09T15:13:09.609106Z", "modified": "2026-10-09T15:13:09.609106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08b06c85ee7e55589dad092518b62975678d386ad811f8533cb3a2184a5cf387']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.609106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fce1c747-09b3-4e9e-b7ce-3c35e95b47f6", "created": "2026-10-09T15:13:09.609695Z", "modified": "2026-10-09T15:13:09.609695Z", "relationship_type": "indicates", "source_ref": "indicator--d8ade477-464e-4a79-88e3-45a925dbdb11", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adde46b1-05e4-4ee5-9868-5ff9c8d50b0a", "created": "2026-10-09T15:13:09.609816Z", "modified": "2026-10-09T15:13:09.609816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5737fd8755d36b3d0f2cc4e09fa31feee01a27d1ce2c60af072838aeadf33720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.609816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9a73183-1bd1-4648-a943-8f2ee251f500", "created": "2026-10-09T15:13:09.610416Z", "modified": "2026-10-09T15:13:09.610416Z", "relationship_type": "indicates", "source_ref": "indicator--adde46b1-05e4-4ee5-9868-5ff9c8d50b0a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d966cf-8051-4de7-a3ef-0a2e86013b4d", "created": "2026-10-09T15:13:09.610538Z", "modified": "2026-10-09T15:13:09.610538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='483d896f6b276543ff7e63c9904fd2f44f9e84bda93472ca117cb5c079e221e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.610538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8789e248-7419-41da-8cea-5f6c608bd084", "created": "2026-10-09T15:13:09.611118Z", "modified": "2026-10-09T15:13:09.611118Z", "relationship_type": "indicates", "source_ref": "indicator--62d966cf-8051-4de7-a3ef-0a2e86013b4d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e627c6c-21b1-4653-a1e5-621c475f3e77", "created": "2026-10-09T15:13:09.611234Z", "modified": "2026-10-09T15:13:09.611234Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e2af470ab97da2415093e6bfdc9cdebc38c513e8f0fb5ab91b87f1a3bfb9ee6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.611234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46b27b6c-cf98-45bb-8bda-4da37a36acf6", "created": "2026-10-09T15:13:09.611829Z", "modified": "2026-10-09T15:13:09.611829Z", "relationship_type": "indicates", "source_ref": "indicator--8e627c6c-21b1-4653-a1e5-621c475f3e77", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bd1a90-cbe2-4c3f-a66c-1e1d9675cab5", "created": "2026-10-09T15:13:09.611945Z", "modified": "2026-10-09T15:13:09.611945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc6b6da244cba2d3705eb3f7c0074ceaa8fa31f62c0e7ce1e4afb9c301882e06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.611945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cf7d43f-a183-4a4a-8d44-1712ed218ef4", "created": "2026-10-09T15:13:09.612544Z", "modified": "2026-10-09T15:13:09.612544Z", "relationship_type": "indicates", "source_ref": "indicator--91bd1a90-cbe2-4c3f-a66c-1e1d9675cab5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2d8208-fdb6-413d-8d18-7c0e88db47a3", "created": "2026-10-09T15:13:09.612666Z", "modified": "2026-10-09T15:13:09.612666Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac364112ed1229280ddd799d82d16f664500eb46c27ac317acc2b7d439eff72b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.612666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01e7643e-b993-408d-b729-1f084f628703", "created": "2026-10-09T15:13:09.613356Z", "modified": "2026-10-09T15:13:09.613356Z", "relationship_type": "indicates", "source_ref": "indicator--5c2d8208-fdb6-413d-8d18-7c0e88db47a3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1afe07-64cd-496b-8e7d-66de3d588308", "created": "2026-10-09T15:13:09.613483Z", "modified": "2026-10-09T15:13:09.613483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d99836459f75c5280e775d4a39365e12bf2591c60a033a0f6236e14c467d6af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.613483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0e45d4e-dd7c-494f-8544-ff2d17a14a18", "created": "2026-10-09T15:13:09.614065Z", "modified": "2026-10-09T15:13:09.614065Z", "relationship_type": "indicates", "source_ref": "indicator--1e1afe07-64cd-496b-8e7d-66de3d588308", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54ff51-14dd-4055-a45d-b9bd8998d73c", "created": "2026-10-09T15:13:09.61418Z", "modified": "2026-10-09T15:13:09.61418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='916eeb482717a0aef9e97ede57db9485e5165103b0dbfa6c7d07d748c99f4ba4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.61418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b89d3216-c05d-47a7-8297-6202f60568f8", "created": "2026-10-09T15:13:09.614765Z", "modified": "2026-10-09T15:13:09.614765Z", "relationship_type": "indicates", "source_ref": "indicator--1f54ff51-14dd-4055-a45d-b9bd8998d73c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b951d5-9e34-4f66-a131-7a2d7e7435ef", "created": "2026-10-09T15:13:09.614882Z", "modified": "2026-10-09T15:13:09.614882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7e40293cca0ebac7d6cbb280c108cdd04bfdf5306cb08501f9490c47b6d4255']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.614882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9c3f786-e9a7-41ce-9d31-1dc66bd9f4a3", "created": "2026-10-09T15:13:09.615483Z", "modified": "2026-10-09T15:13:09.615483Z", "relationship_type": "indicates", "source_ref": "indicator--05b951d5-9e34-4f66-a131-7a2d7e7435ef", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061d72cf-33ae-4018-ae66-b043f2eaee1c", "created": "2026-10-09T15:13:09.61561Z", "modified": "2026-10-09T15:13:09.61561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80d78ff98b6aeee7b371c8b3609428dcec9b059920748600afc38e7c9c6aa84c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.61561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ca054f4-6729-44b1-9fae-ad6160b1b938", "created": "2026-10-09T15:13:09.616191Z", "modified": "2026-10-09T15:13:09.616191Z", "relationship_type": "indicates", "source_ref": "indicator--061d72cf-33ae-4018-ae66-b043f2eaee1c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361b6e70-c7fa-4379-9c9e-c4c18e474a86", "created": "2026-10-09T15:13:09.616322Z", "modified": "2026-10-09T15:13:09.616322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75c0210e138f4ab490f9e59d1b1d586771910c61b0e87a27d011a56ca3933384']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.616322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9397dd10-c599-407d-bc57-003c5b907b28", "created": "2026-10-09T15:13:09.616911Z", "modified": "2026-10-09T15:13:09.616911Z", "relationship_type": "indicates", "source_ref": "indicator--361b6e70-c7fa-4379-9c9e-c4c18e474a86", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13a59e2-0f40-4720-9e5c-1466af7ba0b4", "created": "2026-10-09T15:13:09.617032Z", "modified": "2026-10-09T15:13:09.617032Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='549289995e5c6bae3f7f9cee7b851bc83e4c1fc9410e93d0de01f5f10040bd02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.617032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d7a662e-9d96-4baf-b8a1-66a6bdeefeaa", "created": "2026-10-09T15:13:09.617635Z", "modified": "2026-10-09T15:13:09.617635Z", "relationship_type": "indicates", "source_ref": "indicator--a13a59e2-0f40-4720-9e5c-1466af7ba0b4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ac7781-d316-4440-af08-ccacc3dd6d32", "created": "2026-10-09T15:13:09.617759Z", "modified": "2026-10-09T15:13:09.617759Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d12eefaee51f6b4eae7be39835ff51f7398f2ee84d2c8fbf4831b62cd185b6bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.617759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4695be16-2271-4655-a678-edaa30c0d017", "created": "2026-10-09T15:13:09.618352Z", "modified": "2026-10-09T15:13:09.618352Z", "relationship_type": "indicates", "source_ref": "indicator--e4ac7781-d316-4440-af08-ccacc3dd6d32", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1c7ebe-25b3-4630-8955-9493fba1f73d", "created": "2026-10-09T15:13:09.618481Z", "modified": "2026-10-09T15:13:09.618481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee81106b607814edde77aed4db925fe02f9af9e7a4f84ac584713b2b5324ba57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.618481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8de64ce-0504-4b8f-a855-f95df496e0d2", "created": "2026-10-09T15:13:09.619056Z", "modified": "2026-10-09T15:13:09.619056Z", "relationship_type": "indicates", "source_ref": "indicator--ea1c7ebe-25b3-4630-8955-9493fba1f73d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b59249-f681-4cb5-b567-f05c334034d5", "created": "2026-10-09T15:13:09.619178Z", "modified": "2026-10-09T15:13:09.619178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e99337ee42bf5e8595ff6b7241e3e401b8b4f38f8be5158d1034e8f370281419']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.619178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d7004b9-288b-4540-9b5f-712d02674d76", "created": "2026-10-09T15:13:09.619882Z", "modified": "2026-10-09T15:13:09.619882Z", "relationship_type": "indicates", "source_ref": "indicator--43b59249-f681-4cb5-b567-f05c334034d5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dab331-19e6-4c65-96d8-849cbbc5581f", "created": "2026-10-09T15:13:09.62001Z", "modified": "2026-10-09T15:13:09.62001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2eeabe41570f8b997c48fdac5ce1680ec0f9a478db3a2932de5c0a9711bd42ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.62001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf7f6625-85ad-4eaf-971b-cfac0438ab94", "created": "2026-10-09T15:13:09.620604Z", "modified": "2026-10-09T15:13:09.620604Z", "relationship_type": "indicates", "source_ref": "indicator--d4dab331-19e6-4c65-96d8-849cbbc5581f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db804839-442b-4c6c-864b-59893b849a7b", "created": "2026-10-09T15:13:09.620728Z", "modified": "2026-10-09T15:13:09.620728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6da4ab778b34634530db84b20a131cc1c951680c213474e21c2bf3933a97f3cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.620728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f6ff495-36c6-45df-a1a1-f1bb82aad547", "created": "2026-10-09T15:13:09.621318Z", "modified": "2026-10-09T15:13:09.621318Z", "relationship_type": "indicates", "source_ref": "indicator--db804839-442b-4c6c-864b-59893b849a7b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a2eaf5-f709-4e42-bca3-4de0169b420d", "created": "2026-10-09T15:13:09.621443Z", "modified": "2026-10-09T15:13:09.621443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47e560c6631d899abef1851054cc8d560619307c0f8c8360f155e64013fcd624']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.621443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6bf7eba-ccfc-43ab-8342-f7ddb288694d", "created": "2026-10-09T15:13:09.622027Z", "modified": "2026-10-09T15:13:09.622027Z", "relationship_type": "indicates", "source_ref": "indicator--d2a2eaf5-f709-4e42-bca3-4de0169b420d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caeb7bb-9a17-4ede-9d72-04a85e83f379", "created": "2026-10-09T15:13:09.622148Z", "modified": "2026-10-09T15:13:09.622148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8812752b8cc6f0a5a7b2396a0f0ca4aa1da8e54152b2b009b1d2261ff28c978']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.622148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a3d3e3b-537b-4d00-b723-93120dc0b107", "created": "2026-10-09T15:13:09.62275Z", "modified": "2026-10-09T15:13:09.62275Z", "relationship_type": "indicates", "source_ref": "indicator--1caeb7bb-9a17-4ede-9d72-04a85e83f379", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ebef2c-e5b7-40d1-9155-9d87873ae99b", "created": "2026-10-09T15:13:09.622875Z", "modified": "2026-10-09T15:13:09.622875Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fa9be198abadc44e904e60418e7cd9dd1d51a55cad2ffac1c38ccd5b46e752a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.622875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec2067b3-33e5-4f31-ab9a-25b2ad1b73fd", "created": "2026-10-09T15:13:09.623495Z", "modified": "2026-10-09T15:13:09.623495Z", "relationship_type": "indicates", "source_ref": "indicator--37ebef2c-e5b7-40d1-9155-9d87873ae99b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097b65af-a712-4483-8fcf-b1dd77c557f5", "created": "2026-10-09T15:13:09.623621Z", "modified": "2026-10-09T15:13:09.623621Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5884a5df598be76473128c8bf7f92fc1450b794d2cf7db5f3c3a7efef508158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.623621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--360f98a9-259b-4451-b1fc-2586054703d2", "created": "2026-10-09T15:13:09.624208Z", "modified": "2026-10-09T15:13:09.624208Z", "relationship_type": "indicates", "source_ref": "indicator--097b65af-a712-4483-8fcf-b1dd77c557f5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfb07a8-26b1-4c52-b244-debe72e94453", "created": "2026-10-09T15:13:09.624339Z", "modified": "2026-10-09T15:13:09.624339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2891097e941e0b110811290c99e3e51fa653b87ec98aaebaf78c20bb181bbb77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.624339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a437acc-203b-4422-a4b2-3295e99b36d0", "created": "2026-10-09T15:13:09.624933Z", "modified": "2026-10-09T15:13:09.624933Z", "relationship_type": "indicates", "source_ref": "indicator--abfb07a8-26b1-4c52-b244-debe72e94453", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f123b6-19fc-448e-9aa5-2e63bfe3726d", "created": "2026-10-09T15:13:09.625059Z", "modified": "2026-10-09T15:13:09.625059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5423afeaf7793dd1001d883fd5dde713c7fb85ea11df4bbd399471c305485134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.625059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b74e101c-6da0-40e1-b8d0-55a35f29c2cb", "created": "2026-10-09T15:13:09.625663Z", "modified": "2026-10-09T15:13:09.625663Z", "relationship_type": "indicates", "source_ref": "indicator--48f123b6-19fc-448e-9aa5-2e63bfe3726d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41239ad6-c525-4a14-8d40-43fed820f9b6", "created": "2026-10-09T15:13:09.625787Z", "modified": "2026-10-09T15:13:09.625787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da730bb1514d9707dbf223f8b0c33145e7be98584b96de947f52dc377aa0e697']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.625787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49e41e72-13ab-40d4-9309-3b14bde6ea19", "created": "2026-10-09T15:13:09.626798Z", "modified": "2026-10-09T15:13:09.626798Z", "relationship_type": "indicates", "source_ref": "indicator--41239ad6-c525-4a14-8d40-43fed820f9b6", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb30fe54-8e10-4899-b604-0bbb39624ccb", "created": "2026-10-09T15:13:09.626932Z", "modified": "2026-10-09T15:13:09.626932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97715ba24db091958df5dc8c7a7f67ed1f051e5c90f426d1f873ec29cd7eb3a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.626932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92b1aa86-46ba-4126-a594-7ab42906f9d4", "created": "2026-10-09T15:13:09.627543Z", "modified": "2026-10-09T15:13:09.627543Z", "relationship_type": "indicates", "source_ref": "indicator--cb30fe54-8e10-4899-b604-0bbb39624ccb", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c14c990-50a7-4e61-85fa-fca9473aff91", "created": "2026-10-09T15:13:09.627669Z", "modified": "2026-10-09T15:13:09.627669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f4112d1d0fb449fb1c83ac1644c0b3e5a28439a5ee3ddde5f02d7d96745ec14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.627669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a27fcd7a-ed14-434e-b91a-80e4b2743b53", "created": "2026-10-09T15:13:09.628263Z", "modified": "2026-10-09T15:13:09.628263Z", "relationship_type": "indicates", "source_ref": "indicator--5c14c990-50a7-4e61-85fa-fca9473aff91", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c9a732-db91-4d16-9237-1b187e75ff68", "created": "2026-10-09T15:13:09.628409Z", "modified": "2026-10-09T15:13:09.628409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7956bbbf94a5984dd67ff85ac7f14fcf3d9ab46f463c8d7c6cb7a2d2654378da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.628409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66fbf19f-3700-4c56-85a9-7c06b09fa523", "created": "2026-10-09T15:13:09.628992Z", "modified": "2026-10-09T15:13:09.628992Z", "relationship_type": "indicates", "source_ref": "indicator--70c9a732-db91-4d16-9237-1b187e75ff68", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c34b160-6c24-4a40-88d3-07909586cf63", "created": "2026-10-09T15:13:09.629112Z", "modified": "2026-10-09T15:13:09.629112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='468fe728ed93b83460db66108135a40233b3a97bc91b5164df32d2110544087f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.629112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f227c3aa-df1c-41fa-9f2c-81fe3299c853", "created": "2026-10-09T15:13:09.629698Z", "modified": "2026-10-09T15:13:09.629698Z", "relationship_type": "indicates", "source_ref": "indicator--6c34b160-6c24-4a40-88d3-07909586cf63", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17115f7e-6668-43e6-b04f-dc0c514b785f", "created": "2026-10-09T15:13:09.62982Z", "modified": "2026-10-09T15:13:09.62982Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc65e2ca2bff6cbf5262396fc3d8451a189bb43c2c1054847cf328ef1fce1c09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.62982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c6da601-953a-4c2f-89a6-33465c8b8aa6", "created": "2026-10-09T15:13:09.630408Z", "modified": "2026-10-09T15:13:09.630408Z", "relationship_type": "indicates", "source_ref": "indicator--17115f7e-6668-43e6-b04f-dc0c514b785f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5729b8b-1204-46b8-a52e-f18badece249", "created": "2026-10-09T15:13:09.630532Z", "modified": "2026-10-09T15:13:09.630532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='536b024aa90699cae1cdee59cf4702c87a15db20465701a2dccf6ef7a5be5512']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.630532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--897d2879-0db0-41b8-9c67-25603a648706", "created": "2026-10-09T15:13:09.631117Z", "modified": "2026-10-09T15:13:09.631117Z", "relationship_type": "indicates", "source_ref": "indicator--a5729b8b-1204-46b8-a52e-f18badece249", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116c1df4-f939-49f2-a0e1-fa8ece811fb4", "created": "2026-10-09T15:13:09.631238Z", "modified": "2026-10-09T15:13:09.631238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9987d97fa44821bd2d9756cb949e88a97ee528b6676cfc45b77ccff775e1c3c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.631238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0c15145-f596-4a35-99a6-4f1c7dba45a5", "created": "2026-10-09T15:13:09.631825Z", "modified": "2026-10-09T15:13:09.631825Z", "relationship_type": "indicates", "source_ref": "indicator--116c1df4-f939-49f2-a0e1-fa8ece811fb4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80319d0e-852f-45b2-ba66-52938c6f5221", "created": "2026-10-09T15:13:09.631943Z", "modified": "2026-10-09T15:13:09.631943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f735c37978eac0e3cd314a522595727e7be2a89ad8918ff66b5a4d268a8f93cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.631943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e0672cf-ae3e-40a5-9fe9-282266738427", "created": "2026-10-09T15:13:09.632533Z", "modified": "2026-10-09T15:13:09.632533Z", "relationship_type": "indicates", "source_ref": "indicator--80319d0e-852f-45b2-ba66-52938c6f5221", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650a33a7-81af-4465-8612-daca393c9c7d", "created": "2026-10-09T15:13:09.632655Z", "modified": "2026-10-09T15:13:09.632655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='207a9ae2aa59a198ede58839008dc24d8ebf9ba99fe41f732ebdebd79423be18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.632655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b04a8a0d-683a-455a-b268-898dab429045", "created": "2026-10-09T15:13:09.633369Z", "modified": "2026-10-09T15:13:09.633369Z", "relationship_type": "indicates", "source_ref": "indicator--650a33a7-81af-4465-8612-daca393c9c7d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba78c1a4-0916-4664-996e-36815e472d4e", "created": "2026-10-09T15:13:09.633496Z", "modified": "2026-10-09T15:13:09.633496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff8990ed2a42c2bccee6e3bda634198a3f74513bb129c93c8d61f963e833aa7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.633496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7eafe7-54a0-408f-8678-f9a2311b4aea", "created": "2026-10-09T15:13:09.634084Z", "modified": "2026-10-09T15:13:09.634084Z", "relationship_type": "indicates", "source_ref": "indicator--ba78c1a4-0916-4664-996e-36815e472d4e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287d537a-60c1-4ebd-ab3c-d68e6cb92939", "created": "2026-10-09T15:13:09.634209Z", "modified": "2026-10-09T15:13:09.634209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d57febeb66a6fd289604ca3993cbeda26cd67facfe67ff7861380faff1a638de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.634209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e3edb28-9c09-4a9b-a815-4c6288096bd0", "created": "2026-10-09T15:13:09.6348Z", "modified": "2026-10-09T15:13:09.6348Z", "relationship_type": "indicates", "source_ref": "indicator--287d537a-60c1-4ebd-ab3c-d68e6cb92939", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703ca687-5d31-4f68-8a9f-2d0e85fecf4f", "created": "2026-10-09T15:13:09.634945Z", "modified": "2026-10-09T15:13:09.634945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85df23f6550b3edbe532e503ad82f2b4f918fbfeb6e707f087abd8b72ffd1b2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.634945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8797ea2-e0da-42e5-bf29-3c5adf66f9b3", "created": "2026-10-09T15:13:09.635549Z", "modified": "2026-10-09T15:13:09.635549Z", "relationship_type": "indicates", "source_ref": "indicator--703ca687-5d31-4f68-8a9f-2d0e85fecf4f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509f2f43-bf4f-46f6-b4da-68933fe937a0", "created": "2026-10-09T15:13:09.635671Z", "modified": "2026-10-09T15:13:09.635671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f94e12dfa2bea040d9bd5e21107365dfdf5db1e7d67f7eb39ea96956092d932a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.635671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24048278-f31a-4cc5-bd30-f1f635a38082", "created": "2026-10-09T15:13:09.636253Z", "modified": "2026-10-09T15:13:09.636253Z", "relationship_type": "indicates", "source_ref": "indicator--509f2f43-bf4f-46f6-b4da-68933fe937a0", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2daa0d03-dd5f-4d29-809f-50c92912c075", "created": "2026-10-09T15:13:09.636383Z", "modified": "2026-10-09T15:13:09.636383Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b427d08be352393ad21a48ff59c2b828e762e3c9601862c8eeba1e14f237e76e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.636383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39ce2b2b-ce8f-47ad-95ae-936b23f10c7b", "created": "2026-10-09T15:13:09.636976Z", "modified": "2026-10-09T15:13:09.636976Z", "relationship_type": "indicates", "source_ref": "indicator--2daa0d03-dd5f-4d29-809f-50c92912c075", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f0c452-b05e-4633-a92a-b24efedb898c", "created": "2026-10-09T15:13:09.637095Z", "modified": "2026-10-09T15:13:09.637095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='86f1e1f3a143b283806d045d455b1e9856079a46ab1e28a67ba5553bae71f89c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.637095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--142adfe0-1a73-4f51-8876-37af1c664f07", "created": "2026-10-09T15:13:09.637697Z", "modified": "2026-10-09T15:13:09.637697Z", "relationship_type": "indicates", "source_ref": "indicator--31f0c452-b05e-4633-a92a-b24efedb898c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4b1099-ba0d-437d-9070-11c00924d419", "created": "2026-10-09T15:13:09.637822Z", "modified": "2026-10-09T15:13:09.637822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84ef3a7833d1c8e0fefaffafecec669a56bc534c5ad4e82d88553c8c91252a4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.637822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54316f8b-d8e3-4e3a-8355-343c017409c3", "created": "2026-10-09T15:13:09.638418Z", "modified": "2026-10-09T15:13:09.638418Z", "relationship_type": "indicates", "source_ref": "indicator--6a4b1099-ba0d-437d-9070-11c00924d419", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0d3a7e-c5d3-4b5a-9217-58adce9b56d9", "created": "2026-10-09T15:13:09.638548Z", "modified": "2026-10-09T15:13:09.638548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3cfc59af419701a70713e049b1d5c896d1876ff931a7018c41de101faf24958']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.638548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dbc39e9-309f-45e9-9d26-6b294d015690", "created": "2026-10-09T15:13:09.639128Z", "modified": "2026-10-09T15:13:09.639128Z", "relationship_type": "indicates", "source_ref": "indicator--7a0d3a7e-c5d3-4b5a-9217-58adce9b56d9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0227b314-780e-4694-8ab7-ff95ccb22d68", "created": "2026-10-09T15:13:09.639252Z", "modified": "2026-10-09T15:13:09.639252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8ff45ea892a09c449972a06d435f9cdc5befaa1e422249f18b779766d528e7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.639252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--897a00ef-7f4d-4add-855e-27850c566fc9", "created": "2026-10-09T15:13:09.639956Z", "modified": "2026-10-09T15:13:09.639956Z", "relationship_type": "indicates", "source_ref": "indicator--0227b314-780e-4694-8ab7-ff95ccb22d68", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f04c252-d287-48a4-8456-03a2b0966f11", "created": "2026-10-09T15:13:09.64008Z", "modified": "2026-10-09T15:13:09.64008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b928427e0d8192c0b817b67068f6b5ba68652cf4314aa5c124efeaea7bddb6aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.64008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--966b91b2-17d2-460d-92b4-164ef1c32d0c", "created": "2026-10-09T15:13:09.640686Z", "modified": "2026-10-09T15:13:09.640686Z", "relationship_type": "indicates", "source_ref": "indicator--8f04c252-d287-48a4-8456-03a2b0966f11", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ced439-4a2f-4258-a4c6-e2684cb75a48", "created": "2026-10-09T15:13:09.640809Z", "modified": "2026-10-09T15:13:09.640809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cba6dcfdea71a91898ecbd83971bd7aedfe0d8dd5c8748ef171e8184142e4009']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.640809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--564f6dbc-8ddd-41de-84b2-3d4ed0a00711", "created": "2026-10-09T15:13:09.6414Z", "modified": "2026-10-09T15:13:09.6414Z", "relationship_type": "indicates", "source_ref": "indicator--77ced439-4a2f-4258-a4c6-e2684cb75a48", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb74e28e-0050-4e26-8e20-0dec040d952b", "created": "2026-10-09T15:13:09.641523Z", "modified": "2026-10-09T15:13:09.641523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='323aeb2a3a47fb41c002f53336f1d289bced3f6a78fdcefaf42638309b7dd090']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.641523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a795cf5a-daa8-4f33-85e5-9aa4a4765b37", "created": "2026-10-09T15:13:09.642108Z", "modified": "2026-10-09T15:13:09.642108Z", "relationship_type": "indicates", "source_ref": "indicator--eb74e28e-0050-4e26-8e20-0dec040d952b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333e7842-6478-4bdc-8a4b-a45f7bb48c52", "created": "2026-10-09T15:13:09.642229Z", "modified": "2026-10-09T15:13:09.642229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8432579e565fa483359a3c780e111a62f05bb651acf7bcedfd987cc655e9a4ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.642229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33b5f1c1-e5ad-49e9-8dce-b43ecbf465bc", "created": "2026-10-09T15:13:09.642816Z", "modified": "2026-10-09T15:13:09.642816Z", "relationship_type": "indicates", "source_ref": "indicator--333e7842-6478-4bdc-8a4b-a45f7bb48c52", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246b0e9f-3bb3-4975-a314-b9507d01c227", "created": "2026-10-09T15:13:09.64294Z", "modified": "2026-10-09T15:13:09.64294Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af804926e9e99351f69ab929e43fd34418df830e2d467e27ed42e5aa3d49c818']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.64294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--257f4ede-f2c8-47dd-bb40-16995906d69b", "created": "2026-10-09T15:13:09.643533Z", "modified": "2026-10-09T15:13:09.643533Z", "relationship_type": "indicates", "source_ref": "indicator--246b0e9f-3bb3-4975-a314-b9507d01c227", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e37817-da14-44a7-a4d6-c7cc120a74d4", "created": "2026-10-09T15:13:09.643654Z", "modified": "2026-10-09T15:13:09.643654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4332a21d82c077b3729d1a2c9cdca62451eec1012a14d7aa6fa6456e48adfd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.643654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c98b9074-50ab-4d39-b936-f6013a2d3152", "created": "2026-10-09T15:13:09.644232Z", "modified": "2026-10-09T15:13:09.644232Z", "relationship_type": "indicates", "source_ref": "indicator--d4e37817-da14-44a7-a4d6-c7cc120a74d4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2c787d-3515-4da5-b130-0a0e6b1b4f9f", "created": "2026-10-09T15:13:09.644365Z", "modified": "2026-10-09T15:13:09.644365Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d73ac6f56c008885da798193cf8f35b6bc6d9d1ab11203e75666a67e5741e29d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.644365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfead02a-6522-4217-af33-edce4251e2d9", "created": "2026-10-09T15:13:09.644949Z", "modified": "2026-10-09T15:13:09.644949Z", "relationship_type": "indicates", "source_ref": "indicator--3c2c787d-3515-4da5-b130-0a0e6b1b4f9f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3543ca0f-42b3-45be-a60f-5f69d7d8d0cd", "created": "2026-10-09T15:13:09.645066Z", "modified": "2026-10-09T15:13:09.645066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e96e997112bc9926d393506358909a1026c595bd1032eb88672004ffa5529fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.645066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--171bec3b-68cc-43d6-97cd-ce02aa6b19ff", "created": "2026-10-09T15:13:09.645769Z", "modified": "2026-10-09T15:13:09.645769Z", "relationship_type": "indicates", "source_ref": "indicator--3543ca0f-42b3-45be-a60f-5f69d7d8d0cd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935e28b1-8f02-4319-aedb-4af6efb38a08", "created": "2026-10-09T15:13:09.6459Z", "modified": "2026-10-09T15:13:09.6459Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='157c3c266202e4a424c94119d70d6ae15dc0f7604f986e64e8e68530b8e84916']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.6459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fae135cf-0489-4301-8a88-4e8b964bc874", "created": "2026-10-09T15:13:09.646507Z", "modified": "2026-10-09T15:13:09.646507Z", "relationship_type": "indicates", "source_ref": "indicator--935e28b1-8f02-4319-aedb-4af6efb38a08", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb01b66-8a34-411a-b3b9-7914be826345", "created": "2026-10-09T15:13:09.646633Z", "modified": "2026-10-09T15:13:09.646633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c12763bd29097d6c09d53656186d11cad0eaf974879d5385ebeff668f67ad9c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.646633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9467bf12-eaf3-4820-a108-31338b912d30", "created": "2026-10-09T15:13:09.647219Z", "modified": "2026-10-09T15:13:09.647219Z", "relationship_type": "indicates", "source_ref": "indicator--5eb01b66-8a34-411a-b3b9-7914be826345", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d714e522-4236-4c5b-b287-1dcc2a862a93", "created": "2026-10-09T15:13:09.647357Z", "modified": "2026-10-09T15:13:09.647357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='166fe98608bc815ee66047a278e432118c745d39f8fd42d5ef65b65d95ef0369']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.647357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0720e164-e6dc-4a1f-af2d-17067dc26cc0", "created": "2026-10-09T15:13:09.647947Z", "modified": "2026-10-09T15:13:09.647947Z", "relationship_type": "indicates", "source_ref": "indicator--d714e522-4236-4c5b-b287-1dcc2a862a93", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bfbf507-d64d-47ac-83ca-91b090f972da", "created": "2026-10-09T15:13:09.648064Z", "modified": "2026-10-09T15:13:09.648064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='759a2c3079c80814929b02e42d7c2f0120da433505bf2b4a1efdda5ef088a25c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.648064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--054aa0e0-2f89-461c-8ea6-fc9cd472c289", "created": "2026-10-09T15:13:09.648659Z", "modified": "2026-10-09T15:13:09.648659Z", "relationship_type": "indicates", "source_ref": "indicator--3bfbf507-d64d-47ac-83ca-91b090f972da", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9333ca-ffe9-413f-a594-1a0f5fdd58bd", "created": "2026-10-09T15:13:09.648779Z", "modified": "2026-10-09T15:13:09.648779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e76bc1df01262d5bf69988cf1fbe1c403a8dcd3bbc36b3d172579b5c3fd46d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.648779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b27ace60-6484-4171-b1ce-a342efd1ccf7", "created": "2026-10-09T15:13:09.649368Z", "modified": "2026-10-09T15:13:09.649368Z", "relationship_type": "indicates", "source_ref": "indicator--cd9333ca-ffe9-413f-a594-1a0f5fdd58bd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f7f381-b7b7-4601-ae82-e89cb4c19f95", "created": "2026-10-09T15:13:09.649489Z", "modified": "2026-10-09T15:13:09.649489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='218204686f868406698c45124d7010ada3fb3b2bc5abffcbdd3ee53adb2c824e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.649489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81941b99-d33b-4b37-9cfb-9066d2c1213e", "created": "2026-10-09T15:13:09.650065Z", "modified": "2026-10-09T15:13:09.650065Z", "relationship_type": "indicates", "source_ref": "indicator--18f7f381-b7b7-4601-ae82-e89cb4c19f95", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdcd432-74bd-44dc-920c-0db8e822342e", "created": "2026-10-09T15:13:09.650183Z", "modified": "2026-10-09T15:13:09.650183Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='305dcea07ceb1dff25a041d10a95d08c7d485d63253c6ec5ce3b57ed0e588887']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.650183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef00a78c-877e-4f40-9d9f-ec6ebf666c7e", "created": "2026-10-09T15:13:09.65079Z", "modified": "2026-10-09T15:13:09.65079Z", "relationship_type": "indicates", "source_ref": "indicator--7bdcd432-74bd-44dc-920c-0db8e822342e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde0e3df-8471-4c5d-979c-ab1b2538e344", "created": "2026-10-09T15:13:09.650912Z", "modified": "2026-10-09T15:13:09.650912Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8866edde22cf865b2e3d3e0316af56346256c01b6783337e95ca73b2434fadde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.650912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95c8d440-3a52-4ac6-b333-20885c6fd031", "created": "2026-10-09T15:13:09.65151Z", "modified": "2026-10-09T15:13:09.65151Z", "relationship_type": "indicates", "source_ref": "indicator--bde0e3df-8471-4c5d-979c-ab1b2538e344", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f326e6cb-cb72-4a29-ac7d-6f5493f24383", "created": "2026-10-09T15:13:09.651633Z", "modified": "2026-10-09T15:13:09.651633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8eeba8744bbee35172387138eda7af15e07d10b31f826da086e4f9ae113408d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.651633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7d231c7-dd6f-49be-85e5-446ca61e7e10", "created": "2026-10-09T15:13:09.652327Z", "modified": "2026-10-09T15:13:09.652327Z", "relationship_type": "indicates", "source_ref": "indicator--f326e6cb-cb72-4a29-ac7d-6f5493f24383", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6f19bf-91c1-46cb-9740-fd67dbdbb536", "created": "2026-10-09T15:13:09.652455Z", "modified": "2026-10-09T15:13:09.652455Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc014d2237668f688dfa2872558cbb13ac55293533642cab773eb64c33350a05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.652455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d523479-8a61-4aea-8f4e-cb09e442cd24", "created": "2026-10-09T15:13:09.653049Z", "modified": "2026-10-09T15:13:09.653049Z", "relationship_type": "indicates", "source_ref": "indicator--0f6f19bf-91c1-46cb-9740-fd67dbdbb536", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774e41e2-67ad-430b-b7b2-79ea75f9aced", "created": "2026-10-09T15:13:09.653173Z", "modified": "2026-10-09T15:13:09.653173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a89d65d8143b8c08bbcf804937b637690e786c9a2ebc0a37f7069c31f6ba6e9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.653173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48a49678-e210-4d5c-8eb6-3dbd4bf35a7e", "created": "2026-10-09T15:13:09.653769Z", "modified": "2026-10-09T15:13:09.653769Z", "relationship_type": "indicates", "source_ref": "indicator--774e41e2-67ad-430b-b7b2-79ea75f9aced", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d27e51-ddbf-42ea-8635-5c0aacf3e277", "created": "2026-10-09T15:13:09.653896Z", "modified": "2026-10-09T15:13:09.653896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d090c5ea725bb7bdf76adfa3d3be1dab42612e289be0e5efb98e87417eb8de7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.653896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b779f97e-332c-4a33-b347-2dda9fc91f60", "created": "2026-10-09T15:13:09.654491Z", "modified": "2026-10-09T15:13:09.654491Z", "relationship_type": "indicates", "source_ref": "indicator--d7d27e51-ddbf-42ea-8635-5c0aacf3e277", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1410fe-6764-4125-8230-d8dc2d540426", "created": "2026-10-09T15:13:09.654614Z", "modified": "2026-10-09T15:13:09.654614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='501ca9e6893b2df4694bdfd828cb3a90265ef365bf8b7e0934d1fa4bebb67c71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.654614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc1ddaf8-e0e7-49f1-bb7d-b84f2940cb5f", "created": "2026-10-09T15:13:09.655196Z", "modified": "2026-10-09T15:13:09.655196Z", "relationship_type": "indicates", "source_ref": "indicator--ed1410fe-6764-4125-8230-d8dc2d540426", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d326fba5-42b8-4603-9211-fba5a5963e5c", "created": "2026-10-09T15:13:09.65533Z", "modified": "2026-10-09T15:13:09.65533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65433cd4a24d64a84f62f4d3b0b9389516028a413f0cc2346c6735e76de1f46e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.65533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e5e6b01-5157-4a40-a9a8-420c4791479b", "created": "2026-10-09T15:13:09.655912Z", "modified": "2026-10-09T15:13:09.655912Z", "relationship_type": "indicates", "source_ref": "indicator--d326fba5-42b8-4603-9211-fba5a5963e5c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eed76f6-76de-401e-8497-f0a2b3e82664", "created": "2026-10-09T15:13:09.656034Z", "modified": "2026-10-09T15:13:09.656034Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55d5fea9f5e2dd4284e53c1061560c2878cfb525a525356727f7f6e9eaf4913f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.656034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57da04df-71d6-4827-bdd4-4fa756728ca0", "created": "2026-10-09T15:13:09.656631Z", "modified": "2026-10-09T15:13:09.656631Z", "relationship_type": "indicates", "source_ref": "indicator--5eed76f6-76de-401e-8497-f0a2b3e82664", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba84d26-a086-4b08-8c43-d41ff67675d9", "created": "2026-10-09T15:13:09.656751Z", "modified": "2026-10-09T15:13:09.656751Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9db57d7c719721d797f37a8e7fc31cfbfb2399edff6283610ae84e32cb7e7a6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.656751Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c10f8e0-f9f4-4f4b-b15b-1f12cb857090", "created": "2026-10-09T15:13:09.657339Z", "modified": "2026-10-09T15:13:09.657339Z", "relationship_type": "indicates", "source_ref": "indicator--aba84d26-a086-4b08-8c43-d41ff67675d9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac21d0e7-fd14-466f-9a09-3753fe1b5960", "created": "2026-10-09T15:13:09.657464Z", "modified": "2026-10-09T15:13:09.657464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c17d26d205648793ef3033f957bb01695bed7e6d4658fa1ddb8ca32a2c430577']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.657464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2295d608-2300-498f-9bc7-d37f5b718fef", "created": "2026-10-09T15:13:09.658049Z", "modified": "2026-10-09T15:13:09.658049Z", "relationship_type": "indicates", "source_ref": "indicator--ac21d0e7-fd14-466f-9a09-3753fe1b5960", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6558bd88-acc0-4b14-9a02-2ac9392684cc", "created": "2026-10-09T15:13:09.658168Z", "modified": "2026-10-09T15:13:09.658168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ce89bc268d34bc8a9acdb4e1e0910423420ab7127b0629bca77778551a0a62d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.658168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03a7b4e1-353c-4e86-847a-66627d69feef", "created": "2026-10-09T15:13:09.65886Z", "modified": "2026-10-09T15:13:09.65886Z", "relationship_type": "indicates", "source_ref": "indicator--6558bd88-acc0-4b14-9a02-2ac9392684cc", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34835c4f-0c20-4f79-ac73-77eeef9178dd", "created": "2026-10-09T15:13:09.658982Z", "modified": "2026-10-09T15:13:09.658982Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a72bafdcbf7635f7128fe0e7490ea5a92f878a38de90e80c166a41732437e39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.658982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c900b906-1edd-442d-bc9a-da880d3f97df", "created": "2026-10-09T15:13:09.659572Z", "modified": "2026-10-09T15:13:09.659572Z", "relationship_type": "indicates", "source_ref": "indicator--34835c4f-0c20-4f79-ac73-77eeef9178dd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6211b6-0927-4b39-8cbc-8e53abaf44e4", "created": "2026-10-09T15:13:09.659693Z", "modified": "2026-10-09T15:13:09.659693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ff41f27d438b69332d45c140c3b838fce4cdc69c90d7f4bace4ee3dae47a50f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.659693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd9c88a2-54de-4c6c-b190-9d99a2c5a866", "created": "2026-10-09T15:13:09.66028Z", "modified": "2026-10-09T15:13:09.66028Z", "relationship_type": "indicates", "source_ref": "indicator--9a6211b6-0927-4b39-8cbc-8e53abaf44e4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff064943-01a8-422b-88d0-5910c2e0d7cb", "created": "2026-10-09T15:13:09.6604Z", "modified": "2026-10-09T15:13:09.6604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1d6d79fcbe0414924f8ebed39b0e7967b9e06ba9be638917dfe8b58b49bbf7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.6604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e69eb60d-7615-4ab3-9360-93804066b95a", "created": "2026-10-09T15:13:09.660988Z", "modified": "2026-10-09T15:13:09.660988Z", "relationship_type": "indicates", "source_ref": "indicator--ff064943-01a8-422b-88d0-5910c2e0d7cb", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d7e6bf-3210-415f-baca-4db108d9ed36", "created": "2026-10-09T15:13:09.661111Z", "modified": "2026-10-09T15:13:09.661111Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dde982934a97318d1b69a42fd83017cf674e46febb8aa45e9be6e8e50ca4e957']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.661111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc84c0e8-9c38-4f36-8554-621886650ac7", "created": "2026-10-09T15:13:09.661718Z", "modified": "2026-10-09T15:13:09.661718Z", "relationship_type": "indicates", "source_ref": "indicator--71d7e6bf-3210-415f-baca-4db108d9ed36", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7c2274-02c7-4bd1-9d94-def258e4531c", "created": "2026-10-09T15:13:09.661845Z", "modified": "2026-10-09T15:13:09.661845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c9a1cb9eb2d4670583b373f60ff07a187dd42eb5684939484984d846346a6cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.661845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eadedfe-2bdc-415f-a680-31a19b40cee0", "created": "2026-10-09T15:13:09.662445Z", "modified": "2026-10-09T15:13:09.662445Z", "relationship_type": "indicates", "source_ref": "indicator--0d7c2274-02c7-4bd1-9d94-def258e4531c", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927bd044-ec66-434e-b6dd-497a89f3317b", "created": "2026-10-09T15:13:09.662566Z", "modified": "2026-10-09T15:13:09.662566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b53b7016e7d1b1b2133afd7da9baac29b3accae1671f057fa15b17ab77a3d78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.662566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73d1a2e1-1e01-4cdf-92d5-73d8f4973298", "created": "2026-10-09T15:13:09.663155Z", "modified": "2026-10-09T15:13:09.663155Z", "relationship_type": "indicates", "source_ref": "indicator--927bd044-ec66-434e-b6dd-497a89f3317b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97341939-1e0d-4558-8aec-454bf40971b7", "created": "2026-10-09T15:13:09.66329Z", "modified": "2026-10-09T15:13:09.66329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bfb653f8f7ed32dc607513979c680982f214380e2675daef9b62a1254868b3eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.66329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e024a136-6a64-4979-89b3-1772c8dba819", "created": "2026-10-09T15:13:09.663879Z", "modified": "2026-10-09T15:13:09.663879Z", "relationship_type": "indicates", "source_ref": "indicator--97341939-1e0d-4558-8aec-454bf40971b7", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ba852b-be7d-4616-a0d6-3a1a813ca391", "created": "2026-10-09T15:13:09.664006Z", "modified": "2026-10-09T15:13:09.664006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33f5c93d68126a0c5b172c874b618d5680c45ebe7f9679d61537f0d475b56b52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.664006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebb0addc-c73c-43e9-b561-9e8804e6041a", "created": "2026-10-09T15:13:09.66471Z", "modified": "2026-10-09T15:13:09.66471Z", "relationship_type": "indicates", "source_ref": "indicator--48ba852b-be7d-4616-a0d6-3a1a813ca391", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e218c3cb-0aad-4eff-84d1-4eb5686eca46", "created": "2026-10-09T15:13:09.664836Z", "modified": "2026-10-09T15:13:09.664836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9b38a66424087a0543997fbe518eaaec677e6c726e7449aed61572743c54fbe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.664836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b2f18ce-5cb5-4ea3-8eb9-a5de8ce3d765", "created": "2026-10-09T15:13:09.665436Z", "modified": "2026-10-09T15:13:09.665436Z", "relationship_type": "indicates", "source_ref": "indicator--e218c3cb-0aad-4eff-84d1-4eb5686eca46", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24819205-b2d7-441e-b0cf-75319eb02623", "created": "2026-10-09T15:13:09.665559Z", "modified": "2026-10-09T15:13:09.665559Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cb6a5ee1b623f173073aeb19a9a6ea1f4278a3f1fa3226792e2e55007011203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.665559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ef231a8-9143-4eb9-81bb-234986ba5387", "created": "2026-10-09T15:13:09.666141Z", "modified": "2026-10-09T15:13:09.666141Z", "relationship_type": "indicates", "source_ref": "indicator--24819205-b2d7-441e-b0cf-75319eb02623", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd58698-2adb-44f5-93b1-b5be745f975b", "created": "2026-10-09T15:13:09.666261Z", "modified": "2026-10-09T15:13:09.666261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed68dc86b533df5158c8c95973c5c0f03706821a926eaec524e596f7146a7b04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.666261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6960eebd-5dc7-4220-a0f8-723458165096", "created": "2026-10-09T15:13:09.666859Z", "modified": "2026-10-09T15:13:09.666859Z", "relationship_type": "indicates", "source_ref": "indicator--dfd58698-2adb-44f5-93b1-b5be745f975b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0bf74f-768d-4584-8ed3-576e7274066e", "created": "2026-10-09T15:13:09.66698Z", "modified": "2026-10-09T15:13:09.66698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='908c111d553e75fc8a6cf297fa67a7ab5a4b573ea1a7006dcf943356df272985']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.66698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--933ab441-9753-4b88-97dd-2befeff8de1a", "created": "2026-10-09T15:13:09.667573Z", "modified": "2026-10-09T15:13:09.667573Z", "relationship_type": "indicates", "source_ref": "indicator--fa0bf74f-768d-4584-8ed3-576e7274066e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdc19a3-7e19-45a9-8463-ddb6eaa82333", "created": "2026-10-09T15:13:09.667692Z", "modified": "2026-10-09T15:13:09.667692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37e00b010f093ca48523cdc0efb41a8c488880734f7e5de1b06588ad626d1302']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.667692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62449f33-964d-4f18-ae67-9c19966e2783", "created": "2026-10-09T15:13:09.668285Z", "modified": "2026-10-09T15:13:09.668285Z", "relationship_type": "indicates", "source_ref": "indicator--ebdc19a3-7e19-45a9-8463-ddb6eaa82333", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42299d31-39d5-493b-af1b-14f40fa1074b", "created": "2026-10-09T15:13:09.668409Z", "modified": "2026-10-09T15:13:09.668409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d8dd1c7a2a7cce465aa7852a29b5cf819d99dd13c9ce60c3f30f9f9250c77e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.668409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f318104-a4ee-4b3c-a288-179d5acee1ee", "created": "2026-10-09T15:13:09.668999Z", "modified": "2026-10-09T15:13:09.668999Z", "relationship_type": "indicates", "source_ref": "indicator--42299d31-39d5-493b-af1b-14f40fa1074b", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85415335-8ffa-4beb-8439-e06962bba9d1", "created": "2026-10-09T15:13:09.669122Z", "modified": "2026-10-09T15:13:09.669122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d93743c4425f9e4d80531b9cfec734278ba0c7692e7efcfc9d700128efa4b53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.669122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9515fb28-d8fe-4392-8f3f-a45d98f85cd0", "created": "2026-10-09T15:13:09.669721Z", "modified": "2026-10-09T15:13:09.669721Z", "relationship_type": "indicates", "source_ref": "indicator--85415335-8ffa-4beb-8439-e06962bba9d1", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a809917-1af9-4316-90f7-279d7ac2318f", "created": "2026-10-09T15:13:09.669851Z", "modified": "2026-10-09T15:13:09.669851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7b0301524262df91b1af8af58fb4472b7faff4d4b651d36ea18b4615ca0df18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.669851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fecf97f1-bdf9-44a0-8cb4-4bbbefd0db75", "created": "2026-10-09T15:13:09.670448Z", "modified": "2026-10-09T15:13:09.670448Z", "relationship_type": "indicates", "source_ref": "indicator--0a809917-1af9-4316-90f7-279d7ac2318f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bdd481-2b57-4f87-8c16-b4534f4c5295", "created": "2026-10-09T15:13:09.67057Z", "modified": "2026-10-09T15:13:09.67057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='370adbdcea209d4b3728d540ebbc90a376302bb9b82c1ab1f7b6490d15652057']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.67057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c35b3e69-7af2-4f96-8794-e418a7e8c5e1", "created": "2026-10-09T15:13:09.671256Z", "modified": "2026-10-09T15:13:09.671256Z", "relationship_type": "indicates", "source_ref": "indicator--c9bdd481-2b57-4f87-8c16-b4534f4c5295", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e830f6df-0135-4f19-9509-b98aabef9096", "created": "2026-10-09T15:13:09.67139Z", "modified": "2026-10-09T15:13:09.67139Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9fac3cd5e7866cb1ceb25e95e2705a9d359df77b095f6115eff9ad427b22a5ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.67139Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05820b04-22e0-446e-93d3-d8d262b7dfbe", "created": "2026-10-09T15:13:09.671974Z", "modified": "2026-10-09T15:13:09.671974Z", "relationship_type": "indicates", "source_ref": "indicator--e830f6df-0135-4f19-9509-b98aabef9096", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c19155-3645-4af3-acda-a2a4d239e5a3", "created": "2026-10-09T15:13:09.672093Z", "modified": "2026-10-09T15:13:09.672093Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a030b46e6769dbcec4353878f0d53d25fbe97cd3156285163791de4e2a730c7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.672093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--991b20b9-487a-4977-aead-3829fa223bea", "created": "2026-10-09T15:13:09.672689Z", "modified": "2026-10-09T15:13:09.672689Z", "relationship_type": "indicates", "source_ref": "indicator--21c19155-3645-4af3-acda-a2a4d239e5a3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1dcc7f-96d6-49a6-893c-9c43d5692263", "created": "2026-10-09T15:13:09.672811Z", "modified": "2026-10-09T15:13:09.672811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6cb5e58f081baeeecf82a912324c20c90259e2b13c85d8bf54d7379e747c3a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.672811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67a70c4b-bc2a-4f42-b51f-0afdafe01337", "created": "2026-10-09T15:13:09.673399Z", "modified": "2026-10-09T15:13:09.673399Z", "relationship_type": "indicates", "source_ref": "indicator--fa1dcc7f-96d6-49a6-893c-9c43d5692263", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026a78d4-1689-4c52-823a-cbeb7c17da7a", "created": "2026-10-09T15:13:09.673526Z", "modified": "2026-10-09T15:13:09.673526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='830dcbf277fb9048cd3a1392fc8ed45c0ea3a84148ba33852289dfb1dac297c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.673526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--980d9494-0daa-4381-ab38-b832c0082a15", "created": "2026-10-09T15:13:09.674109Z", "modified": "2026-10-09T15:13:09.674109Z", "relationship_type": "indicates", "source_ref": "indicator--026a78d4-1689-4c52-823a-cbeb7c17da7a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c634d47-12c2-4ed3-81fd-2a91b96f831a", "created": "2026-10-09T15:13:09.674229Z", "modified": "2026-10-09T15:13:09.674229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46bb1d48c7254122bf629bf4b5da56b8c14abe8d4cf3dd9d6853b99ee1b63fdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.674229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b61d8c8f-af0a-4575-be98-d869ed030907", "created": "2026-10-09T15:13:09.674824Z", "modified": "2026-10-09T15:13:09.674824Z", "relationship_type": "indicates", "source_ref": "indicator--1c634d47-12c2-4ed3-81fd-2a91b96f831a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b519bd-64dc-49ef-95fe-91f5cd8f5683", "created": "2026-10-09T15:13:09.674948Z", "modified": "2026-10-09T15:13:09.674948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95cdd80a64b9c6e1327d7a2dcb0e852612f05aad8c981200a98fdfaea5ce7a0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.674948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc328ef4-232b-4035-a8c6-49395e7acf87", "created": "2026-10-09T15:13:09.675551Z", "modified": "2026-10-09T15:13:09.675551Z", "relationship_type": "indicates", "source_ref": "indicator--40b519bd-64dc-49ef-95fe-91f5cd8f5683", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67caa83-6ed8-404f-9c8d-93127cef7b88", "created": "2026-10-09T15:13:09.675672Z", "modified": "2026-10-09T15:13:09.675672Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab3226bc92a30c5ff9e187e24f2138997141ce56f3d53642223edfd96ae5af03']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.675672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ed37f76-aa3b-402f-803e-8eeb6f8a372f", "created": "2026-10-09T15:13:09.676254Z", "modified": "2026-10-09T15:13:09.676254Z", "relationship_type": "indicates", "source_ref": "indicator--a67caa83-6ed8-404f-9c8d-93127cef7b88", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4f11d89-619d-4ab9-8c34-983341d9d7a6", "created": "2026-10-09T15:13:09.676387Z", "modified": "2026-10-09T15:13:09.676387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c99e7f942e8299cbb4a652e204b5528904975db3f0db40234ba0b20ea4fd83e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.676387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01471326-07f7-48e2-8e1c-f7bd4014323a", "created": "2026-10-09T15:13:09.676986Z", "modified": "2026-10-09T15:13:09.676986Z", "relationship_type": "indicates", "source_ref": "indicator--f4f11d89-619d-4ab9-8c34-983341d9d7a6", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8f4166-d71e-497b-9ae4-a665945875d3", "created": "2026-10-09T15:13:09.677105Z", "modified": "2026-10-09T15:13:09.677105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c8bb9b83627908b7c5f512ecdceaab5d1d7771dfb0905a4b4bb18e82b77b9c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.677105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad118e4d-9048-44c0-a49f-7d88cb337b47", "created": "2026-10-09T15:13:09.677805Z", "modified": "2026-10-09T15:13:09.677805Z", "relationship_type": "indicates", "source_ref": "indicator--ee8f4166-d71e-497b-9ae4-a665945875d3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5d11b6-5b30-481c-bcff-67aeb96c044d", "created": "2026-10-09T15:13:09.67793Z", "modified": "2026-10-09T15:13:09.67793Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2396540902e94ae196838e7ad4799842af881b6c01600ddb1c233765bd9b506']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.67793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f68523a-8408-41ef-8213-2555cc7e0d90", "created": "2026-10-09T15:13:09.678528Z", "modified": "2026-10-09T15:13:09.678528Z", "relationship_type": "indicates", "source_ref": "indicator--3c5d11b6-5b30-481c-bcff-67aeb96c044d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4da59c0-2b87-49c8-a4e4-0a6036044a67", "created": "2026-10-09T15:13:09.678652Z", "modified": "2026-10-09T15:13:09.678652Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c39ffcd61f1aa08945483157fead9a60844e844151e7b9670ad64b5b2381aeaa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.678652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64c2bb2e-07a3-4830-8627-f27cce23f819", "created": "2026-10-09T15:13:09.679232Z", "modified": "2026-10-09T15:13:09.679232Z", "relationship_type": "indicates", "source_ref": "indicator--d4da59c0-2b87-49c8-a4e4-0a6036044a67", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00634ffb-598b-4665-b8d8-9e3cc35f40cf", "created": "2026-10-09T15:13:09.679365Z", "modified": "2026-10-09T15:13:09.679365Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8828ba55ff66bc703641de3cee4d393bed542e30ef63033c426dffc8d711f1dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.679365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd58158a-1983-4107-bd61-6d05bb990b8a", "created": "2026-10-09T15:13:09.679946Z", "modified": "2026-10-09T15:13:09.679946Z", "relationship_type": "indicates", "source_ref": "indicator--00634ffb-598b-4665-b8d8-9e3cc35f40cf", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fbd793-47ea-4e57-9362-32a05ab2cca2", "created": "2026-10-09T15:13:09.680065Z", "modified": "2026-10-09T15:13:09.680065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4a365aa68fd78cdae40ef867683dacead675e1c01dc3ff27aad25b47ab405a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.680065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd8d5a82-46d5-48a2-9f8b-d0250e3083a2", "created": "2026-10-09T15:13:09.680659Z", "modified": "2026-10-09T15:13:09.680659Z", "relationship_type": "indicates", "source_ref": "indicator--15fbd793-47ea-4e57-9362-32a05ab2cca2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ba93ae-85ac-4265-840d-315293bb5260", "created": "2026-10-09T15:13:09.680781Z", "modified": "2026-10-09T15:13:09.680781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82272188b1f2e5802e09eaa2b3f46f25c81b071390a75da5a0eb991d807f2064']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.680781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--048b317d-069d-489b-84f2-2d2ee4ed97bd", "created": "2026-10-09T15:13:09.681373Z", "modified": "2026-10-09T15:13:09.681373Z", "relationship_type": "indicates", "source_ref": "indicator--b6ba93ae-85ac-4265-840d-315293bb5260", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a4cb56-2197-434c-a54d-6e7db2d931a2", "created": "2026-10-09T15:13:09.681493Z", "modified": "2026-10-09T15:13:09.681493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='edac129da979cc46e8a0fb8b02d2fa17f7736ce2d58a73672512304094158bef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.681493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d44056de-87ad-47c0-bf48-0d8ba4e00d3e", "created": "2026-10-09T15:13:09.682076Z", "modified": "2026-10-09T15:13:09.682076Z", "relationship_type": "indicates", "source_ref": "indicator--64a4cb56-2197-434c-a54d-6e7db2d931a2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cfdf3f8-a6ee-4583-9eb9-01b0fafb225f", "created": "2026-10-09T15:13:09.682199Z", "modified": "2026-10-09T15:13:09.682199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5005671403dee02aed2a0a8a63c372b713b4a64030886f796618a28c447f3fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.682199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67342100-937c-4fdd-9a95-421454e67262", "created": "2026-10-09T15:13:09.682804Z", "modified": "2026-10-09T15:13:09.682804Z", "relationship_type": "indicates", "source_ref": "indicator--9cfdf3f8-a6ee-4583-9eb9-01b0fafb225f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a7d183-6834-48a1-920a-1d4c7d810acd", "created": "2026-10-09T15:13:09.682936Z", "modified": "2026-10-09T15:13:09.682936Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97c44463c157d4a3e5e2401856e5376edd1b75463b923f0463cfe294daf7d2f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.682936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71cb0e74-fb9e-4615-8a72-da9789060097", "created": "2026-10-09T15:13:09.683633Z", "modified": "2026-10-09T15:13:09.683633Z", "relationship_type": "indicates", "source_ref": "indicator--63a7d183-6834-48a1-920a-1d4c7d810acd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a6f3ea-b731-4a6c-92f5-ba24efd92691", "created": "2026-10-09T15:13:09.68376Z", "modified": "2026-10-09T15:13:09.68376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd87a57a655aa415367e2c9717a194f6d3169d58a7983c33464d1f005c8a8b92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.68376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b216b165-10f0-411e-a199-3b8885f509d8", "created": "2026-10-09T15:13:09.684357Z", "modified": "2026-10-09T15:13:09.684357Z", "relationship_type": "indicates", "source_ref": "indicator--33a6f3ea-b731-4a6c-92f5-ba24efd92691", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f38471-f38b-48b7-8ae2-1f26197f907e", "created": "2026-10-09T15:13:09.684481Z", "modified": "2026-10-09T15:13:09.684481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='767304f6cbdd6ffb366727522df761fb96c09643b31c992b6342270f1bef4562']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.684481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70dc9760-1c85-40f4-a512-03d3f1e6c97f", "created": "2026-10-09T15:13:09.685063Z", "modified": "2026-10-09T15:13:09.685063Z", "relationship_type": "indicates", "source_ref": "indicator--a6f38471-f38b-48b7-8ae2-1f26197f907e", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aa1848-5283-4df7-9f24-7054fef2b368", "created": "2026-10-09T15:13:09.685182Z", "modified": "2026-10-09T15:13:09.685182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2ddfb877aa8aa08bb7edfd070a3a0b48983c56f30bc8d51dd9985e8c33e689e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.685182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--616ead85-2898-4394-a6a6-ee33359f06ea", "created": "2026-10-09T15:13:09.685772Z", "modified": "2026-10-09T15:13:09.685772Z", "relationship_type": "indicates", "source_ref": "indicator--33aa1848-5283-4df7-9f24-7054fef2b368", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa90617a-2247-4d8b-9ac1-cddb66bf38bd", "created": "2026-10-09T15:13:09.685894Z", "modified": "2026-10-09T15:13:09.685894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='518b7d6c1aa9cc690701f6d949a6c5dfb6b9485bb3d457030a4fb3200c08adb9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.685894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b0eee7d-273e-40f9-ba02-fc4d449dbd02", "created": "2026-10-09T15:13:09.686495Z", "modified": "2026-10-09T15:13:09.686495Z", "relationship_type": "indicates", "source_ref": "indicator--aa90617a-2247-4d8b-9ac1-cddb66bf38bd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08794805-71ef-4212-b186-ba27cf6993b9", "created": "2026-10-09T15:13:09.686624Z", "modified": "2026-10-09T15:13:09.686624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8946aa2f8e12a5752fed44b5b17a45721b2d9bccc80d3c9c7fad56e44a30b2d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.686624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6474241-1276-46d5-b05e-e1b8621d08ff", "created": "2026-10-09T15:13:09.687216Z", "modified": "2026-10-09T15:13:09.687216Z", "relationship_type": "indicates", "source_ref": "indicator--08794805-71ef-4212-b186-ba27cf6993b9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafa5792-942f-4e73-8537-364afe3c0100", "created": "2026-10-09T15:13:09.687348Z", "modified": "2026-10-09T15:13:09.687348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f6cf25c7cf6eacff554971e37a2f9e82f61b515694312ea1b3e3ded5cbb767e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.687348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1930061c-c38b-4d47-9146-01ec1b01c397", "created": "2026-10-09T15:13:09.687936Z", "modified": "2026-10-09T15:13:09.687936Z", "relationship_type": "indicates", "source_ref": "indicator--cafa5792-942f-4e73-8537-364afe3c0100", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e83f77-b30b-4aa2-90c7-bc725ff8d68f", "created": "2026-10-09T15:13:09.688055Z", "modified": "2026-10-09T15:13:09.688055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c666d6e4ed464aecfcdc097b672c6cc4ee290e5a528f6225976c105a11f62773']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.688055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b0550cd-dc79-4ac5-85ab-d66e35efbbba", "created": "2026-10-09T15:13:09.688644Z", "modified": "2026-10-09T15:13:09.688644Z", "relationship_type": "indicates", "source_ref": "indicator--57e83f77-b30b-4aa2-90c7-bc725ff8d68f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d08d29a-cc66-415f-83b9-447cef1c7b04", "created": "2026-10-09T15:13:09.688765Z", "modified": "2026-10-09T15:13:09.688765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4aabc151cb75b3ef289c5f9288f1a2d8cf67c5c86fab93ecd6c4c5922e20fab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.688765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--282ad34d-2363-469f-bbfb-02e9b346868b", "created": "2026-10-09T15:13:09.689355Z", "modified": "2026-10-09T15:13:09.689355Z", "relationship_type": "indicates", "source_ref": "indicator--9d08d29a-cc66-415f-83b9-447cef1c7b04", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dea72fb-5ec0-43da-b78f-d772f0111353", "created": "2026-10-09T15:13:09.689474Z", "modified": "2026-10-09T15:13:09.689474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc9f6820fdf94d4eb4278d201d6449c896c54c163a90665de4c5b862aed2622e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.689474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bd17190-68a7-4557-b657-af92bc91591f", "created": "2026-10-09T15:13:09.690158Z", "modified": "2026-10-09T15:13:09.690158Z", "relationship_type": "indicates", "source_ref": "indicator--1dea72fb-5ec0-43da-b78f-d772f0111353", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8195f4d-7ef0-4ffa-82fc-87e3eb9358b5", "created": "2026-10-09T15:13:09.69029Z", "modified": "2026-10-09T15:13:09.69029Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a15ebe89884deab73056b0f84b2bebd46149db37eb64e6567955d7b8d45e3368']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.69029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2478d6cf-1a2e-4ae6-84fd-8902e27271e1", "created": "2026-10-09T15:13:09.690872Z", "modified": "2026-10-09T15:13:09.690872Z", "relationship_type": "indicates", "source_ref": "indicator--b8195f4d-7ef0-4ffa-82fc-87e3eb9358b5", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22fec29-103e-4d5d-a045-0665b2ca62be", "created": "2026-10-09T15:13:09.69099Z", "modified": "2026-10-09T15:13:09.69099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27509254cf91e223a476757e930ec471f7ba20a4922099c4c645520af763de00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.69099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71ae057b-e6e8-4f04-80d5-b4b090a079ee", "created": "2026-10-09T15:13:09.691582Z", "modified": "2026-10-09T15:13:09.691582Z", "relationship_type": "indicates", "source_ref": "indicator--e22fec29-103e-4d5d-a045-0665b2ca62be", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32127104-64f6-4d1d-8c9b-3fa3bc4363a4", "created": "2026-10-09T15:13:09.691713Z", "modified": "2026-10-09T15:13:09.691713Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b97258d931cc4419b8a62f2bbf6ac189f6929d446542c7cc790e82678d464f78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.691713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65390cd9-75e8-41c2-a8d3-6bba96cfb396", "created": "2026-10-09T15:13:09.692305Z", "modified": "2026-10-09T15:13:09.692305Z", "relationship_type": "indicates", "source_ref": "indicator--32127104-64f6-4d1d-8c9b-3fa3bc4363a4", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823178f8-1315-4b41-b568-1fa9dfecf6af", "created": "2026-10-09T15:13:09.692432Z", "modified": "2026-10-09T15:13:09.692432Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00eed6c09ef87c6a39e7412d835d7a686f9e964d13199390715f2b80bdc31cf3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.692432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a124b614-42d2-45ad-8702-854e955ac015", "created": "2026-10-09T15:13:09.693009Z", "modified": "2026-10-09T15:13:09.693009Z", "relationship_type": "indicates", "source_ref": "indicator--823178f8-1315-4b41-b568-1fa9dfecf6af", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a890b57-0149-47fa-925a-498b50d5cc51", "created": "2026-10-09T15:13:09.693127Z", "modified": "2026-10-09T15:13:09.693127Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c19504fc67483d88991016df4fa6a8bce60e9d41ac4a6a25545437d37c809de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.693127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e16246a-1c87-4f49-9aab-ea098a25cb1a", "created": "2026-10-09T15:13:09.693718Z", "modified": "2026-10-09T15:13:09.693718Z", "relationship_type": "indicates", "source_ref": "indicator--3a890b57-0149-47fa-925a-498b50d5cc51", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fcdbe3-0578-411f-98db-85bf363361e1", "created": "2026-10-09T15:13:09.693839Z", "modified": "2026-10-09T15:13:09.693839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd5b6d46a5d17e26cdb30d3de2de17a53b82d43144b770f9b9407c34e4ac5c72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.693839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa7edc1e-dcbb-4327-907f-07d6c028182f", "created": "2026-10-09T15:13:09.694431Z", "modified": "2026-10-09T15:13:09.694431Z", "relationship_type": "indicates", "source_ref": "indicator--37fcdbe3-0578-411f-98db-85bf363361e1", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d548fee7-e72f-4fa4-b501-1d88ae095585", "created": "2026-10-09T15:13:09.694552Z", "modified": "2026-10-09T15:13:09.694552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df6f3b19b1bedc24d1f4ad27352d307e8aa8f691ded118ad5e23a3bfb71c7735']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.694552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71c09ed4-6828-4d76-b996-f17fccc0fc3a", "created": "2026-10-09T15:13:09.69514Z", "modified": "2026-10-09T15:13:09.69514Z", "relationship_type": "indicates", "source_ref": "indicator--d548fee7-e72f-4fa4-b501-1d88ae095585", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e2f6b3-29b6-4786-8b68-acea4aaea9bf", "created": "2026-10-09T15:13:09.695258Z", "modified": "2026-10-09T15:13:09.695258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cf27d94116caaa62da0aedc3a70336ae46fbc409667b32d02e6621a6ab74720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.695258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a22fbf4-648c-4f6f-a30d-6b9c4dd16ef5", "created": "2026-10-09T15:13:09.695852Z", "modified": "2026-10-09T15:13:09.695852Z", "relationship_type": "indicates", "source_ref": "indicator--68e2f6b3-29b6-4786-8b68-acea4aaea9bf", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc15d54-bbec-4cd9-88f2-63be8ef8efd2", "created": "2026-10-09T15:13:09.695971Z", "modified": "2026-10-09T15:13:09.695971Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='android.helper.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.695971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9025bd7-7e6b-462a-b417-01f22093f6db", "created": "2026-10-09T15:13:09.696538Z", "modified": "2026-10-09T15:13:09.696538Z", "relationship_type": "indicates", "source_ref": "indicator--1cc15d54-bbec-4cd9-88f2-63be8ef8efd2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eda0627-2bc9-4c6b-8e05-046f6d31a7e2", "created": "2026-10-09T15:13:09.69666Z", "modified": "2026-10-09T15:13:09.69666Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='android.sys.process']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.69666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c0a01d7-722f-4a58-9408-22bf883a6953", "created": "2026-10-09T15:13:09.697112Z", "modified": "2026-10-09T15:13:09.697112Z", "relationship_type": "indicates", "source_ref": "indicator--3eda0627-2bc9-4c6b-8e05-046f6d31a7e2", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7f7b9a-b21a-447e-9ea8-7ad60db356bd", "created": "2026-10-09T15:13:09.69723Z", "modified": "2026-10-09T15:13:09.69723Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.keyboardhelper']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.69723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1467a75-a38a-4301-9a0a-192b019f5fbb", "created": "2026-10-09T15:13:09.6977Z", "modified": "2026-10-09T15:13:09.6977Z", "relationship_type": "indicates", "source_ref": "indicator--6c7f7b9a-b21a-447e-9ea8-7ad60db356bd", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe5a098-6e8f-43da-abb2-907abe4719a3", "created": "2026-10-09T15:13:09.697818Z", "modified": "2026-10-09T15:13:09.697818Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mspy.lite']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.697818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d45a68e-b768-42a3-931b-477d16fbad9e", "created": "2026-10-09T15:13:09.698278Z", "modified": "2026-10-09T15:13:09.698278Z", "relationship_type": "indicates", "source_ref": "indicator--afe5a098-6e8f-43da-abb2-907abe4719a3", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f03379-3a28-4e3b-bf85-0a672fbb1fd9", "created": "2026-10-09T15:13:09.698399Z", "modified": "2026-10-09T15:13:09.698399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='core.framework']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.698399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79d168ff-b262-498d-b909-31805fd67c23", "created": "2026-10-09T15:13:09.69884Z", "modified": "2026-10-09T15:13:09.69884Z", "relationship_type": "indicates", "source_ref": "indicator--c3f03379-3a28-4e3b-bf85-0a672fbb1fd9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb8062f-5607-468e-81f2-4b237dfefa8f", "created": "2026-10-09T15:13:09.698955Z", "modified": "2026-10-09T15:13:09.698955Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.eyezy.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.698955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5886e853-8b1d-4e6a-ad61-be723d2a1001", "created": "2026-10-09T15:13:09.699416Z", "modified": "2026-10-09T15:13:09.699416Z", "relationship_type": "indicates", "source_ref": "indicator--dcb8062f-5607-468e-81f2-4b237dfefa8f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b190674-342b-41d4-a499-385600bf7204", "created": "2026-10-09T15:13:09.699536Z", "modified": "2026-10-09T15:13:09.699536Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='core.update.framework']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.699536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f1e01f0-f65e-4076-9eea-21c27f6fc51c", "created": "2026-10-09T15:13:09.699996Z", "modified": "2026-10-09T15:13:09.699996Z", "relationship_type": "indicates", "source_ref": "indicator--6b190674-342b-41d4-a499-385600bf7204", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24e86c6-0b05-4a1f-8abf-fae644b4f2d1", "created": "2026-10-09T15:13:09.700117Z", "modified": "2026-10-09T15:13:09.700117Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='med.mspy.mspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.700117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f780a57e-2813-4ced-a14c-2eb94270760f", "created": "2026-10-09T15:13:09.700647Z", "modified": "2026-10-09T15:13:09.700647Z", "relationship_type": "indicates", "source_ref": "indicator--b24e86c6-0b05-4a1f-8abf-fae644b4f2d1", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a795162-ee09-4a0d-b52b-57be63045065", "created": "2026-10-09T15:13:09.700782Z", "modified": "2026-10-09T15:13:09.700782Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='system.framework']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.700782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4fe989a-234a-413e-8918-151b3741fe84", "created": "2026-10-09T15:13:09.701244Z", "modified": "2026-10-09T15:13:09.701244Z", "relationship_type": "indicates", "source_ref": "indicator--3a795162-ee09-4a0d-b52b-57be63045065", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af991f5a-b3ee-4c76-84af-238ed3e5706d", "created": "2026-10-09T15:13:09.701376Z", "modified": "2026-10-09T15:13:09.701376Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='update.service.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.701376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--446b4365-b712-4dc0-a7de-073514ed2ff2", "created": "2026-10-09T15:13:09.70219Z", "modified": "2026-10-09T15:13:09.70219Z", "relationship_type": "indicates", "source_ref": "indicator--af991f5a-b3ee-4c76-84af-238ed3e5706d", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd085dd-9b0d-4cc6-8368-82e4961f055a", "created": "2026-10-09T15:13:09.70233Z", "modified": "2026-10-09T15:13:09.70233Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='update.service.android.installer']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.70233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5c37c8f-d2ca-4125-a5fc-89c12c159fa9", "created": "2026-10-09T15:13:09.702805Z", "modified": "2026-10-09T15:13:09.702805Z", "relationship_type": "indicates", "source_ref": "indicator--6cd085dd-9b0d-4cc6-8368-82e4961f055a", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150bc5fa-941e-4045-b27f-1b49a0f50254", "created": "2026-10-09T15:13:09.702925Z", "modified": "2026-10-09T15:13:09.702925Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='021985CEA754D8E58D538D2FEDFF6B1565A6B45B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.702925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e206ab16-798b-44fa-ba9e-2102cb483767", "created": "2026-10-09T15:13:09.703485Z", "modified": "2026-10-09T15:13:09.703485Z", "relationship_type": "indicates", "source_ref": "indicator--150bc5fa-941e-4045-b27f-1b49a0f50254", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee027b45-98ed-46e9-84a1-d67889b3d35f", "created": "2026-10-09T15:13:09.703614Z", "modified": "2026-10-09T15:13:09.703614Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3930B621F30D13D24692CBBBBC67C59F92F1C9BD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.703614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b7b98a9-838e-4d04-9d6e-e461e8b05e7c", "created": "2026-10-09T15:13:09.704158Z", "modified": "2026-10-09T15:13:09.704158Z", "relationship_type": "indicates", "source_ref": "indicator--ee027b45-98ed-46e9-84a1-d67889b3d35f", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b74f06-941c-4d73-832c-ac066d3a0e97", "created": "2026-10-09T15:13:09.704292Z", "modified": "2026-10-09T15:13:09.704292Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5EEC898F0DBBD70A9B33DD16EE5FF06B6DE26EA6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.704292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7debdaa6-da5b-467e-9db7-820d6092da49", "created": "2026-10-09T15:13:09.704835Z", "modified": "2026-10-09T15:13:09.704835Z", "relationship_type": "indicates", "source_ref": "indicator--52b74f06-941c-4d73-832c-ac066d3a0e97", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d95d58e-0f23-44b0-9311-84f26d96a414", "created": "2026-10-09T15:13:09.704954Z", "modified": "2026-10-09T15:13:09.704954Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7FFE6DA96346FEE822E1F791176CD6970A1DC770']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.704954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e03ae732-bebd-4a4d-80d3-3752cc66dc49", "created": "2026-10-09T15:13:09.705502Z", "modified": "2026-10-09T15:13:09.705502Z", "relationship_type": "indicates", "source_ref": "indicator--2d95d58e-0f23-44b0-9311-84f26d96a414", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0064294-2fc1-478e-952e-8855e632f0f9", "created": "2026-10-09T15:13:09.705623Z", "modified": "2026-10-09T15:13:09.705623Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E1A6646C93A7423A25104A88DA5BECE2F35EFF0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.705623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2708013-5f1b-43e3-ab15-1fa4d53709c4", "created": "2026-10-09T15:13:09.706169Z", "modified": "2026-10-09T15:13:09.706169Z", "relationship_type": "indicates", "source_ref": "indicator--e0064294-2fc1-478e-952e-8855e632f0f9", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4589e3ee-b0aa-4eec-9a75-96fabc7d7adc", "created": "2026-10-09T15:13:09.706303Z", "modified": "2026-10-09T15:13:09.706303Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CB28ADFD818FBFFDF5542F2EFC5140D596EE957E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.706303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3270d190-e1bb-4c63-8ec8-f294855eba41", "created": "2026-10-09T15:13:09.706851Z", "modified": "2026-10-09T15:13:09.706851Z", "relationship_type": "indicates", "source_ref": "indicator--4589e3ee-b0aa-4eec-9a75-96fabc7d7adc", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a880c60-cc58-4596-be42-6bb594a08437", "created": "2026-10-09T15:13:09.706971Z", "modified": "2026-10-09T15:13:09.706971Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FE821A533BDC31822D9EB5F98243EB16917C8EE7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.706971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2a0c046-6263-44e0-8c3c-3fb5c64348b3", "created": "2026-10-09T15:13:09.707526Z", "modified": "2026-10-09T15:13:09.707526Z", "relationship_type": "indicates", "source_ref": "indicator--6a880c60-cc58-4596-be42-6bb594a08437", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34730fb-26a4-4d1f-8b7d-9651307be047", "created": "2026-10-09T15:13:09.707649Z", "modified": "2026-10-09T15:13:09.707649Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1ECC7F67BBD1BFAB97ADDCB05A496BCA7B6B135F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.707649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74979c22-03e6-4bf3-a1f1-3f20a7c8195f", "created": "2026-10-09T15:13:09.708323Z", "modified": "2026-10-09T15:13:09.708323Z", "relationship_type": "indicates", "source_ref": "indicator--e34730fb-26a4-4d1f-8b7d-9651307be047", "target_ref": "malware--9c87fdff-330c-4fb0-b03a-79964b212708"}, {"type": "malware", "spec_version": "2.1", "id": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac", "created": "2026-10-09T15:13:09.708452Z", "modified": "2026-10-09T15:13:09.708452Z", "name": "MeuSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7335132-795e-460e-81f0-0ca3c489b49e", "created": "2026-10-09T15:13:09.70858Z", "modified": "2026-10-09T15:13:09.70858Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.70858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1413458f-78bc-4b0a-b07e-9c846220ff4c", "created": "2026-10-09T15:13:09.709054Z", "modified": "2026-10-09T15:13:09.709054Z", "relationship_type": "indicates", "source_ref": "indicator--f7335132-795e-460e-81f0-0ca3c489b49e", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfe0fa1-cf52-48f7-b436-72df52a9672c", "created": "2026-10-09T15:13:09.709178Z", "modified": "2026-10-09T15:13:09.709178Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='n.servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.709178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--019056ec-e30e-4509-9f42-037614853fd4", "created": "2026-10-09T15:13:09.709664Z", "modified": "2026-10-09T15:13:09.709664Z", "relationship_type": "indicates", "source_ref": "indicator--bbfe0fa1-cf52-48f7-b436-72df52a9672c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80142171-ecbc-4849-8aa9-b900580d18fd", "created": "2026-10-09T15:13:09.709789Z", "modified": "2026-10-09T15:13:09.709789Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='l.servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.709789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11c88b44-61c3-484a-814f-33decf7a0e5a", "created": "2026-10-09T15:13:09.710254Z", "modified": "2026-10-09T15:13:09.710254Z", "relationship_type": "indicates", "source_ref": "indicator--80142171-ecbc-4849-8aa9-b900580d18fd", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8638d2-20b2-4cb8-8eec-2e58eba1e663", "created": "2026-10-09T15:13:09.71039Z", "modified": "2026-10-09T15:13:09.71039Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s.servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.71039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c7d45a5-b3f9-4cad-bf0d-ace62ffb36ec", "created": "2026-10-09T15:13:09.710857Z", "modified": "2026-10-09T15:13:09.710857Z", "relationship_type": "indicates", "source_ref": "indicator--ad8638d2-20b2-4cb8-8eec-2e58eba1e663", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079da4b9-4aa4-4832-b0f8-f6aa91233c39", "created": "2026-10-09T15:13:09.710976Z", "modified": "2026-10-09T15:13:09.710976Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='play-store-3bb64.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.710976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a6c734d-baee-4db2-9a9a-3d583a5cd11a", "created": "2026-10-09T15:13:09.711487Z", "modified": "2026-10-09T15:13:09.711487Z", "relationship_type": "indicates", "source_ref": "indicator--079da4b9-4aa4-4832-b0f8-f6aa91233c39", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8b6b84-e8c6-4ff8-82a3-b7079827f3b4", "created": "2026-10-09T15:13:09.711607Z", "modified": "2026-10-09T15:13:09.711607Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='meuspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.711607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c855cbf5-1596-4917-be1b-ba6dd616cbdb", "created": "2026-10-09T15:13:09.71207Z", "modified": "2026-10-09T15:13:09.71207Z", "relationship_type": "indicates", "source_ref": "indicator--3b8b6b84-e8c6-4ff8-82a3-b7079827f3b4", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8e2417-c4f5-473d-a4f2-39a2447b614b", "created": "2026-10-09T15:13:09.712192Z", "modified": "2026-10-09T15:13:09.712192Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitorecell.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.712192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64e4291b-7c1a-417a-9901-c465e2c02370", "created": "2026-10-09T15:13:09.712721Z", "modified": "2026-10-09T15:13:09.712721Z", "relationship_type": "indicates", "source_ref": "indicator--5e8e2417-c4f5-473d-a4f2-39a2447b614b", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86eeb7d-8fcf-4dc5-935b-92133d73eefe", "created": "2026-10-09T15:13:09.712845Z", "modified": "2026-10-09T15:13:09.712845Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='espiao.meuspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.712845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6a079b8-b0f1-492b-85a2-33f4681445a6", "created": "2026-10-09T15:13:09.713332Z", "modified": "2026-10-09T15:13:09.713332Z", "relationship_type": "indicates", "source_ref": "indicator--a86eeb7d-8fcf-4dc5-935b-92133d73eefe", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcaf6ca6-5372-4afc-b6e2-79b73cdcd957", "created": "2026-10-09T15:13:09.713455Z", "modified": "2026-10-09T15:13:09.713455Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.espiaodecelulargratis.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.713455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c46af67-27c4-4cbe-b71f-0839d3fac28c", "created": "2026-10-09T15:13:09.714054Z", "modified": "2026-10-09T15:13:09.714054Z", "relationship_type": "indicates", "source_ref": "indicator--bcaf6ca6-5372-4afc-b6e2-79b73cdcd957", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12eb2e9-21de-4262-9839-388d35eb40ab", "created": "2026-10-09T15:13:09.714179Z", "modified": "2026-10-09T15:13:09.714179Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='espiaodecelulargratis.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.714179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0656105f-7055-4811-96a4-e1a25115112c", "created": "2026-10-09T15:13:09.714684Z", "modified": "2026-10-09T15:13:09.714684Z", "relationship_type": "indicates", "source_ref": "indicator--d12eb2e9-21de-4262-9839-388d35eb40ab", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e068f1e-8896-4bdd-842c-a12f4a23e811", "created": "2026-10-09T15:13:09.71481Z", "modified": "2026-10-09T15:13:09.71481Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.71481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e49bdbe-481a-4f42-a18c-aba218236ac0", "created": "2026-10-09T15:13:09.715286Z", "modified": "2026-10-09T15:13:09.715286Z", "relationship_type": "indicates", "source_ref": "indicator--7e068f1e-8896-4bdd-842c-a12f4a23e811", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad99c50-c967-491c-aa74-68dbe07bc88d", "created": "2026-10-09T15:13:09.715408Z", "modified": "2026-10-09T15:13:09.715408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b367dc7ebf8f5e8ade0d70c1f24376b3edb133aa6ba539e411dfe55accfc5938']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.715408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95e6bf46-63c1-4fb5-b943-b0eb9a0df2a5", "created": "2026-10-09T15:13:09.715992Z", "modified": "2026-10-09T15:13:09.715992Z", "relationship_type": "indicates", "source_ref": "indicator--dad99c50-c967-491c-aa74-68dbe07bc88d", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747ce975-f8f1-42e8-98fc-398b88e990bd", "created": "2026-10-09T15:13:09.716112Z", "modified": "2026-10-09T15:13:09.716112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06a58b4d9a363abf3112ac61d74ba02587d80917534de68e6951ecf211f8fe26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.716112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c234492e-e913-421a-bf78-598609622497", "created": "2026-10-09T15:13:09.716711Z", "modified": "2026-10-09T15:13:09.716711Z", "relationship_type": "indicates", "source_ref": "indicator--747ce975-f8f1-42e8-98fc-398b88e990bd", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b4229b-6ed2-49f0-bcdb-ed86c107e777", "created": "2026-10-09T15:13:09.716838Z", "modified": "2026-10-09T15:13:09.716838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dffa24c101779b97416f7570f969cd5913cd7e153aa35ae84a20f3302f684101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.716838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--189c3002-cdee-4070-8fcc-1eccb494185f", "created": "2026-10-09T15:13:09.717437Z", "modified": "2026-10-09T15:13:09.717437Z", "relationship_type": "indicates", "source_ref": "indicator--32b4229b-6ed2-49f0-bcdb-ed86c107e777", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b496b562-a7e4-4115-b57c-c31fd59a4e9c", "created": "2026-10-09T15:13:09.717561Z", "modified": "2026-10-09T15:13:09.717561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1b06c6e54e7c8ba1ea0579e2751785b554ec0af000d47168483002cdd37878b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.717561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20b85f6f-faf7-4ffa-8274-10580372c38d", "created": "2026-10-09T15:13:09.718162Z", "modified": "2026-10-09T15:13:09.718162Z", "relationship_type": "indicates", "source_ref": "indicator--b496b562-a7e4-4115-b57c-c31fd59a4e9c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e618dd-4f1e-40c1-98a0-5de22eab0bb1", "created": "2026-10-09T15:13:09.718296Z", "modified": "2026-10-09T15:13:09.718296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0892a28616f3ab5c71f3cef7089f9e361ef9c71355d54cb38fe13bc5feae24c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.718296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a43f6e6-cf3b-4ed3-9b45-8184ff4fa283", "created": "2026-10-09T15:13:09.718885Z", "modified": "2026-10-09T15:13:09.718885Z", "relationship_type": "indicates", "source_ref": "indicator--86e618dd-4f1e-40c1-98a0-5de22eab0bb1", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465b26a6-a286-4edb-8378-754710f527ce", "created": "2026-10-09T15:13:09.71901Z", "modified": "2026-10-09T15:13:09.71901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e681b1313af537c0ac807e301692ef4b0177e25fe2e2283776ba752892d47f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.71901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3669fe43-fbe9-410c-8566-4e8bb7c65cfe", "created": "2026-10-09T15:13:09.719678Z", "modified": "2026-10-09T15:13:09.719678Z", "relationship_type": "indicates", "source_ref": "indicator--465b26a6-a286-4edb-8378-754710f527ce", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1088ea34-2523-4f19-8f08-33f94251ce80", "created": "2026-10-09T15:13:09.719807Z", "modified": "2026-10-09T15:13:09.719807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ea2c19aa256b90129be460a7bb21705b98cb91e8d432dbaeba7124628788e56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.719807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b9f0f76-48a5-4159-904c-e53397ff8ceb", "created": "2026-10-09T15:13:09.720524Z", "modified": "2026-10-09T15:13:09.720524Z", "relationship_type": "indicates", "source_ref": "indicator--1088ea34-2523-4f19-8f08-33f94251ce80", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce566ae7-f6cd-4c8e-9259-2e79e38b45bd", "created": "2026-10-09T15:13:09.720653Z", "modified": "2026-10-09T15:13:09.720653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd5a2f7d4c53b28c6aa43508dfd0d27c8163d57a66f2e2e8c7025aaf8b16ab48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.720653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faf802d4-7fb2-431e-b385-a47c27a8319d", "created": "2026-10-09T15:13:09.721255Z", "modified": "2026-10-09T15:13:09.721255Z", "relationship_type": "indicates", "source_ref": "indicator--ce566ae7-f6cd-4c8e-9259-2e79e38b45bd", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeb4fd0-6179-420b-bad9-01e1d41f7be3", "created": "2026-10-09T15:13:09.721393Z", "modified": "2026-10-09T15:13:09.721393Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8dc9a426cc79d3a50cf8349e722dbd568326b24bc2cce3dda286176fc9e24ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.721393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8c3b158-c3ae-427e-a5fe-1a2793451b7b", "created": "2026-10-09T15:13:09.721978Z", "modified": "2026-10-09T15:13:09.721978Z", "relationship_type": "indicates", "source_ref": "indicator--edeb4fd0-6179-420b-bad9-01e1d41f7be3", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de989dd0-8b8c-4936-8c60-06f56e1055a3", "created": "2026-10-09T15:13:09.722102Z", "modified": "2026-10-09T15:13:09.722102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70c49c4abb40861f9195e17231952f303dfc3203fa8578efadbfcda8cb20c25d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.722102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68260534-07ea-49a4-9e83-b894fed06b1b", "created": "2026-10-09T15:13:09.72271Z", "modified": "2026-10-09T15:13:09.72271Z", "relationship_type": "indicates", "source_ref": "indicator--de989dd0-8b8c-4936-8c60-06f56e1055a3", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03885e9-9204-45ef-95d2-c7ada17fd2e3", "created": "2026-10-09T15:13:09.722834Z", "modified": "2026-10-09T15:13:09.722834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0121e555be6023ef689f3f0c1a5c9b1941cff26d391eba2501738988b8ea5c18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.722834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8716e633-090d-452d-a467-f151397d2ac9", "created": "2026-10-09T15:13:09.72343Z", "modified": "2026-10-09T15:13:09.72343Z", "relationship_type": "indicates", "source_ref": "indicator--e03885e9-9204-45ef-95d2-c7ada17fd2e3", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e15c4b-9dc2-40a9-9965-2f6bfcbbf175", "created": "2026-10-09T15:13:09.723552Z", "modified": "2026-10-09T15:13:09.723552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d61488b453037935909bb79aa318f2eb6df007e80e6b3e53014e76630b27b7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.723552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af599b68-e60a-43b0-afd0-9a98a51e5a72", "created": "2026-10-09T15:13:09.724146Z", "modified": "2026-10-09T15:13:09.724146Z", "relationship_type": "indicates", "source_ref": "indicator--d9e15c4b-9dc2-40a9-9965-2f6bfcbbf175", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8765526d-f4c4-4f5a-ad08-eb8391787273", "created": "2026-10-09T15:13:09.724276Z", "modified": "2026-10-09T15:13:09.724276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36946639ff7a0edd11857ab93956de4d2efc567c6d9b91f67bfd76972dd89d68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.724276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--088fdca7-f3ba-4cbc-a369-f75e80d8056b", "created": "2026-10-09T15:13:09.724867Z", "modified": "2026-10-09T15:13:09.724867Z", "relationship_type": "indicates", "source_ref": "indicator--8765526d-f4c4-4f5a-ad08-eb8391787273", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6112a4fb-0ebd-49a9-ab9e-e46e550ffc71", "created": "2026-10-09T15:13:09.724988Z", "modified": "2026-10-09T15:13:09.724988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66e2e38bd9a88bc47b83f940ddd332ad3da1129f906a511412be00f7f6a9cf92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.724988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcaab4c3-4353-429d-b376-2f143ab9d8b7", "created": "2026-10-09T15:13:09.725592Z", "modified": "2026-10-09T15:13:09.725592Z", "relationship_type": "indicates", "source_ref": "indicator--6112a4fb-0ebd-49a9-ab9e-e46e550ffc71", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0536767a-bd92-4ff2-bd58-c493f90058b9", "created": "2026-10-09T15:13:09.725714Z", "modified": "2026-10-09T15:13:09.725714Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0565a08105be8401c46c73a7966de8cf842785671ab9a60beb2a8828b2ede4d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.725714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd169330-3762-41bd-843c-cf2fed2191e8", "created": "2026-10-09T15:13:09.726305Z", "modified": "2026-10-09T15:13:09.726305Z", "relationship_type": "indicates", "source_ref": "indicator--0536767a-bd92-4ff2-bd58-c493f90058b9", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e017db-2f78-411f-82ec-b8420ce1e751", "created": "2026-10-09T15:13:09.726434Z", "modified": "2026-10-09T15:13:09.726434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40a209d5a72553f5a22cb14ea642cdec95aea8749189a8aa47d84bac87de530f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.726434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f599ef24-7e09-4f59-936e-5c5d08a8df55", "created": "2026-10-09T15:13:09.727134Z", "modified": "2026-10-09T15:13:09.727134Z", "relationship_type": "indicates", "source_ref": "indicator--83e017db-2f78-411f-82ec-b8420ce1e751", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f420c1-e482-4a0c-bd87-bef689678e25", "created": "2026-10-09T15:13:09.727261Z", "modified": "2026-10-09T15:13:09.727261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19e83992f9001a6afe25f6bb7537ec13642cece0e697b646156e77c4f83450c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.727261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5da9c03-fbc8-48fb-b1f5-98d901c9e6e6", "created": "2026-10-09T15:13:09.727858Z", "modified": "2026-10-09T15:13:09.727858Z", "relationship_type": "indicates", "source_ref": "indicator--30f420c1-e482-4a0c-bd87-bef689678e25", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9217d20-070e-4d26-9067-11f144ac33c4", "created": "2026-10-09T15:13:09.727979Z", "modified": "2026-10-09T15:13:09.727979Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b77358edbfa99450d2b93fc4860d388f8b235b7e99e5dc04f38840f90fe6d823']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.727979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6621ca00-c486-4866-88c7-77fd8ad9d9c3", "created": "2026-10-09T15:13:09.728566Z", "modified": "2026-10-09T15:13:09.728566Z", "relationship_type": "indicates", "source_ref": "indicator--b9217d20-070e-4d26-9067-11f144ac33c4", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a05e7c8-bdbb-4584-bb88-34c26716e41b", "created": "2026-10-09T15:13:09.728686Z", "modified": "2026-10-09T15:13:09.728686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='762f37796fb724ccff5f38e7f172b2a74803df051d717560930bd2e7033f5238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.728686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e3d9387-867f-4e58-94b4-9272feeaeb48", "created": "2026-10-09T15:13:09.72931Z", "modified": "2026-10-09T15:13:09.72931Z", "relationship_type": "indicates", "source_ref": "indicator--0a05e7c8-bdbb-4584-bb88-34c26716e41b", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1647b0a3-d4a2-4841-9185-95712a222609", "created": "2026-10-09T15:13:09.729458Z", "modified": "2026-10-09T15:13:09.729458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='051e178449098ea7932917618c7587d54f18eab1d906febc193801d37e2b9caa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.729458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66047963-36de-4f1b-965a-f9754c3f0282", "created": "2026-10-09T15:13:09.73005Z", "modified": "2026-10-09T15:13:09.73005Z", "relationship_type": "indicates", "source_ref": "indicator--1647b0a3-d4a2-4841-9185-95712a222609", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9783a8-3c6f-4b8d-ba36-81e16b10f724", "created": "2026-10-09T15:13:09.730171Z", "modified": "2026-10-09T15:13:09.730171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='081c92a6b126002c38085eeac0d553c76bed6ba8687f80ea0e760bf6b2f9ad1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.730171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d00e276-1889-4ded-ad65-e739c50f0a1e", "created": "2026-10-09T15:13:09.730765Z", "modified": "2026-10-09T15:13:09.730765Z", "relationship_type": "indicates", "source_ref": "indicator--eb9783a8-3c6f-4b8d-ba36-81e16b10f724", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22412e5a-67c5-4830-ab29-503fc19a520c", "created": "2026-10-09T15:13:09.730885Z", "modified": "2026-10-09T15:13:09.730885Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f302340a037576c7765b24c3dfdc8c30f11275ee2e004c3f28ddf883df9969d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.730885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce6830c2-a3a9-4bc5-9828-6b7e9e17ec89", "created": "2026-10-09T15:13:09.731482Z", "modified": "2026-10-09T15:13:09.731482Z", "relationship_type": "indicates", "source_ref": "indicator--22412e5a-67c5-4830-ab29-503fc19a520c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d554508b-8fac-4452-8670-50febc1c4230", "created": "2026-10-09T15:13:09.731604Z", "modified": "2026-10-09T15:13:09.731604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fcbc5f3bb8f8aa8a44cec1ce98195e0265389dcc367a6e6e443fa1c42f95bd7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.731604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6cae176-de9e-4d72-9913-d12605a28517", "created": "2026-10-09T15:13:09.732194Z", "modified": "2026-10-09T15:13:09.732194Z", "relationship_type": "indicates", "source_ref": "indicator--d554508b-8fac-4452-8670-50febc1c4230", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4134105c-2ddd-442f-a8d9-a4a056331937", "created": "2026-10-09T15:13:09.732329Z", "modified": "2026-10-09T15:13:09.732329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aac13c7dec7b5acb804d4b896245962c395f1cd6dfce79bc9c96edcf65ae8e68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.732329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db493311-dd71-4000-b585-31af35e56227", "created": "2026-10-09T15:13:09.732918Z", "modified": "2026-10-09T15:13:09.732918Z", "relationship_type": "indicates", "source_ref": "indicator--4134105c-2ddd-442f-a8d9-a4a056331937", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ab58a0-6240-4034-90a7-04e1e93cab05", "created": "2026-10-09T15:13:09.733045Z", "modified": "2026-10-09T15:13:09.733045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d8a447321b65b72b95d1dbb4edf3426bed820952fded12de2faa98562498363']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.733045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e6dd527-2f02-405e-9491-7d4267be2622", "created": "2026-10-09T15:13:09.73374Z", "modified": "2026-10-09T15:13:09.73374Z", "relationship_type": "indicates", "source_ref": "indicator--85ab58a0-6240-4034-90a7-04e1e93cab05", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e389fa9f-4b93-40e6-9896-bb058fe46c70", "created": "2026-10-09T15:13:09.733867Z", "modified": "2026-10-09T15:13:09.733867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66142abed999f8fb22ae48836009508de97a6ccf08634166c5a263121dafd995']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.733867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb0656b0-7942-4ffb-89da-92fd7a2065aa", "created": "2026-10-09T15:13:09.734457Z", "modified": "2026-10-09T15:13:09.734457Z", "relationship_type": "indicates", "source_ref": "indicator--e389fa9f-4b93-40e6-9896-bb058fe46c70", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8bd577-0e58-43b0-8433-99bf5169b5eb", "created": "2026-10-09T15:13:09.73458Z", "modified": "2026-10-09T15:13:09.73458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f4ecbfb0d0c7efe637527572f6681e10f727a0ff202061a14267a2ab2f9d1a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.73458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--246f5dc6-0482-45b0-a07b-21816b8014d4", "created": "2026-10-09T15:13:09.735156Z", "modified": "2026-10-09T15:13:09.735156Z", "relationship_type": "indicates", "source_ref": "indicator--fd8bd577-0e58-43b0-8433-99bf5169b5eb", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b65821e-79fb-4f5d-b304-df6cb65c52e1", "created": "2026-10-09T15:13:09.735287Z", "modified": "2026-10-09T15:13:09.735287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='092608edcf4e1cdf564cc520ec7c4f2c9ccb80a017df2610c3988783269ebff5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.735287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38748e56-1503-4810-ac1b-bdcbf33ab079", "created": "2026-10-09T15:13:09.73587Z", "modified": "2026-10-09T15:13:09.73587Z", "relationship_type": "indicates", "source_ref": "indicator--8b65821e-79fb-4f5d-b304-df6cb65c52e1", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50de5728-0d43-456e-8b26-e113f3e0e3e2", "created": "2026-10-09T15:13:09.735995Z", "modified": "2026-10-09T15:13:09.735995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ba7505b93e251ea5b32285b0da00ce741ee52472a4277e1321eb6de3c4371f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.735995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8982e6ef-c345-4fbb-bbb3-17963cc8fa56", "created": "2026-10-09T15:13:09.736591Z", "modified": "2026-10-09T15:13:09.736591Z", "relationship_type": "indicates", "source_ref": "indicator--50de5728-0d43-456e-8b26-e113f3e0e3e2", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f9eeab-29f9-40e9-a88d-f089bb2caac3", "created": "2026-10-09T15:13:09.736716Z", "modified": "2026-10-09T15:13:09.736716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01dba4e95ff4afd9938f9f7889c36060722041665d96d1a19ff6a7c40f431dd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.736716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b2d89fa-0bac-44c8-b320-f36d6e161f84", "created": "2026-10-09T15:13:09.737315Z", "modified": "2026-10-09T15:13:09.737315Z", "relationship_type": "indicates", "source_ref": "indicator--69f9eeab-29f9-40e9-a88d-f089bb2caac3", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c7cbb0-755e-480e-9336-f32a3e9fdbe4", "created": "2026-10-09T15:13:09.737441Z", "modified": "2026-10-09T15:13:09.737441Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3991e8bd37ec6fc2f03df9fe5f2e5ef8ace526c0d5c0f54cb9dbc99c4e1b9bd7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.737441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e284a2f-e365-42e3-a107-9842bca3e936", "created": "2026-10-09T15:13:09.738028Z", "modified": "2026-10-09T15:13:09.738028Z", "relationship_type": "indicates", "source_ref": "indicator--64c7cbb0-755e-480e-9336-f32a3e9fdbe4", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f237a59-c99f-423b-9e02-e0ada32ef68f", "created": "2026-10-09T15:13:09.738148Z", "modified": "2026-10-09T15:13:09.738148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5acbab149609464f49cb403ca206b2573f479b563b522bf1eb3735b58b757245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.738148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a00538b-3447-4112-9cc6-232e9a6aab91", "created": "2026-10-09T15:13:09.738747Z", "modified": "2026-10-09T15:13:09.738747Z", "relationship_type": "indicates", "source_ref": "indicator--8f237a59-c99f-423b-9e02-e0ada32ef68f", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4639b0-c6c0-40c4-b91e-de17677b9df9", "created": "2026-10-09T15:13:09.738869Z", "modified": "2026-10-09T15:13:09.738869Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c76a9f0999854fd7ff0aeeb52fa90a49c206d6d63386f7a4a63bf58119c8db1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.738869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73d7e8ae-c23b-4651-927f-61574f457baf", "created": "2026-10-09T15:13:09.739572Z", "modified": "2026-10-09T15:13:09.739572Z", "relationship_type": "indicates", "source_ref": "indicator--3d4639b0-c6c0-40c4-b91e-de17677b9df9", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08db6a3f-1935-4a8d-b460-0596b16eba2b", "created": "2026-10-09T15:13:09.739697Z", "modified": "2026-10-09T15:13:09.739697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f56ed465e9c3d0ffa2dc3695367d29d9874717c2d76418b6a78efdb0bf47b53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.739697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a18cdd3e-d1a2-4fef-9f9c-3e1cecaae8ec", "created": "2026-10-09T15:13:09.740292Z", "modified": "2026-10-09T15:13:09.740292Z", "relationship_type": "indicates", "source_ref": "indicator--08db6a3f-1935-4a8d-b460-0596b16eba2b", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72dc073-eeeb-4e9e-8fdc-3e08b986f51f", "created": "2026-10-09T15:13:09.740415Z", "modified": "2026-10-09T15:13:09.740415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b2e214a5df407cf5bf5b40046f90b545e096d150d1e5d7e95a2f18959cf6f46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.740415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbbeb28a-bb4e-41c4-940e-99cd9852e2ad", "created": "2026-10-09T15:13:09.740999Z", "modified": "2026-10-09T15:13:09.740999Z", "relationship_type": "indicates", "source_ref": "indicator--b72dc073-eeeb-4e9e-8fdc-3e08b986f51f", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5623d69c-3f55-47d7-b6e1-4ffc7ce181c6", "created": "2026-10-09T15:13:09.74112Z", "modified": "2026-10-09T15:13:09.74112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9bc5bb5b7dbe2b4298d419f0e6de987cd270b5c6442e6326b61775ca704ab4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.74112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83595dbe-77ed-4d31-b656-1aea2e6f5932", "created": "2026-10-09T15:13:09.741712Z", "modified": "2026-10-09T15:13:09.741712Z", "relationship_type": "indicates", "source_ref": "indicator--5623d69c-3f55-47d7-b6e1-4ffc7ce181c6", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0fdbee-bf8d-4d48-a0f9-d3021029f0dd", "created": "2026-10-09T15:13:09.741835Z", "modified": "2026-10-09T15:13:09.741835Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48fa7886cceccec35236eb219100e55f17a77648617e96f66282489e72c2d0d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.741835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fcbe85e-32fd-44cc-a823-2cb015361d16", "created": "2026-10-09T15:13:09.742429Z", "modified": "2026-10-09T15:13:09.742429Z", "relationship_type": "indicates", "source_ref": "indicator--bf0fdbee-bf8d-4d48-a0f9-d3021029f0dd", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c104f1c-06c2-4869-ad8c-92b4cd292678", "created": "2026-10-09T15:13:09.742549Z", "modified": "2026-10-09T15:13:09.742549Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3126ef39783b476ecf5ab14d5993afe899edf720638e409226afa23a9dbc384c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.742549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ac12703-d9c3-4ade-931b-d82bb69dac3e", "created": "2026-10-09T15:13:09.743134Z", "modified": "2026-10-09T15:13:09.743134Z", "relationship_type": "indicates", "source_ref": "indicator--4c104f1c-06c2-4869-ad8c-92b4cd292678", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5abeae-2eb6-451e-8383-e59c45c68c12", "created": "2026-10-09T15:13:09.743254Z", "modified": "2026-10-09T15:13:09.743254Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ead6cfddfe5283c747bc6920d884c8a335722e463a69572b752010d37d499e9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.743254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d331cb25-bbee-425a-80bd-23c0e0ad88eb", "created": "2026-10-09T15:13:09.743848Z", "modified": "2026-10-09T15:13:09.743848Z", "relationship_type": "indicates", "source_ref": "indicator--db5abeae-2eb6-451e-8383-e59c45c68c12", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0f651c-09cf-447f-9148-586dc7047a0e", "created": "2026-10-09T15:13:09.743968Z", "modified": "2026-10-09T15:13:09.743968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6994f6b58f84f5c1cf9dc36edd9a28b846873036372e4ebb2ebb85e91c780e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.743968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--447c96f9-7d1b-4bce-9685-db595f244279", "created": "2026-10-09T15:13:09.744568Z", "modified": "2026-10-09T15:13:09.744568Z", "relationship_type": "indicates", "source_ref": "indicator--7c0f651c-09cf-447f-9148-586dc7047a0e", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f209c478-1a54-4141-90b6-7861802cda32", "created": "2026-10-09T15:13:09.74469Z", "modified": "2026-10-09T15:13:09.74469Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87396d68345c4d7825be02221868f3897e11333afd0fb2b4f8070d8ba8765e80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.74469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10696e52-0304-4a27-89a7-c145357b2df3", "created": "2026-10-09T15:13:09.745293Z", "modified": "2026-10-09T15:13:09.745293Z", "relationship_type": "indicates", "source_ref": "indicator--f209c478-1a54-4141-90b6-7861802cda32", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f7abe5-2acf-4a8d-8ff4-dd57115a9133", "created": "2026-10-09T15:13:09.745419Z", "modified": "2026-10-09T15:13:09.745419Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aede95542d2ddbfaa828586f71e031227f40c98f9b2df7b1025ddb241ad638d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.745419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c69606bd-06df-4045-935c-e747434b6778", "created": "2026-10-09T15:13:09.746115Z", "modified": "2026-10-09T15:13:09.746115Z", "relationship_type": "indicates", "source_ref": "indicator--d3f7abe5-2acf-4a8d-8ff4-dd57115a9133", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a6e481-6d9a-4732-b5a0-c29b68eed587", "created": "2026-10-09T15:13:09.746241Z", "modified": "2026-10-09T15:13:09.746241Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c06594c3f7684d633161c99bd53d86d340aaece23f96d3a951fa02dbe8c7061a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.746241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f01e7ee1-c32d-49dd-ab3e-c022517b29d6", "created": "2026-10-09T15:13:09.746836Z", "modified": "2026-10-09T15:13:09.746836Z", "relationship_type": "indicates", "source_ref": "indicator--08a6e481-6d9a-4732-b5a0-c29b68eed587", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9144a9d3-1e7e-49b6-947d-f8a77ff6b239", "created": "2026-10-09T15:13:09.746958Z", "modified": "2026-10-09T15:13:09.746958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d333a05b9c0fe70145ace7656d373fc656a97de35bf1f2bf11783de7fec14274']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.746958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85f691a0-6424-4649-a416-8cbb1ddea231", "created": "2026-10-09T15:13:09.747556Z", "modified": "2026-10-09T15:13:09.747556Z", "relationship_type": "indicates", "source_ref": "indicator--9144a9d3-1e7e-49b6-947d-f8a77ff6b239", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28777bc-e8f4-44e9-a071-7185f7074e58", "created": "2026-10-09T15:13:09.74768Z", "modified": "2026-10-09T15:13:09.74768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='851f99ddf2ba43c0a3b09cf43863e25cc707a51558669417663c74c48dc2df0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.74768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce20d1a4-6c6a-406c-8ab5-9a77f276f5e8", "created": "2026-10-09T15:13:09.748284Z", "modified": "2026-10-09T15:13:09.748284Z", "relationship_type": "indicates", "source_ref": "indicator--a28777bc-e8f4-44e9-a071-7185f7074e58", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f55957-0b57-4284-90c6-c57bfd0f531b", "created": "2026-10-09T15:13:09.74841Z", "modified": "2026-10-09T15:13:09.74841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d916c4b0f60c745011b8a5c764cfb444d225339c89517b1a2a8542ac225c80d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.74841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfafced0-2e0e-4610-a9b1-467ad439531e", "created": "2026-10-09T15:13:09.748996Z", "modified": "2026-10-09T15:13:09.748996Z", "relationship_type": "indicates", "source_ref": "indicator--a2f55957-0b57-4284-90c6-c57bfd0f531b", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfb84d2-77e3-4f0c-a6f8-723f87c950ee", "created": "2026-10-09T15:13:09.749117Z", "modified": "2026-10-09T15:13:09.749117Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5de38f37d7b7d8eceeae0909b26c822540fe29fbc9fd0b924b81e41cfbb363e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.749117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--711a2637-cf93-48db-bc55-305f7a697418", "created": "2026-10-09T15:13:09.749716Z", "modified": "2026-10-09T15:13:09.749716Z", "relationship_type": "indicates", "source_ref": "indicator--bbfb84d2-77e3-4f0c-a6f8-723f87c950ee", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3254882d-db61-4cd9-87f8-e8fd77074cc9", "created": "2026-10-09T15:13:09.749841Z", "modified": "2026-10-09T15:13:09.749841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9619395db1a3eed472b792cc62e216d72f4015c8d1e0de20f50e0aa5b74fb0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.749841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--789e175e-21e8-468d-b7a8-84ed455ba33e", "created": "2026-10-09T15:13:09.750448Z", "modified": "2026-10-09T15:13:09.750448Z", "relationship_type": "indicates", "source_ref": "indicator--3254882d-db61-4cd9-87f8-e8fd77074cc9", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67924ecb-6f2b-4c73-b999-ad2a7f28945f", "created": "2026-10-09T15:13:09.750569Z", "modified": "2026-10-09T15:13:09.750569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c8d28b5bfb26976a1b02403a8b21a13d73bf3f677c66b77515fa71cdae97dac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.750569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83095382-248b-4844-b2be-7061c2cc2069", "created": "2026-10-09T15:13:09.751151Z", "modified": "2026-10-09T15:13:09.751151Z", "relationship_type": "indicates", "source_ref": "indicator--67924ecb-6f2b-4c73-b999-ad2a7f28945f", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73275658-7fab-4cef-baff-6d7a3b948def", "created": "2026-10-09T15:13:09.751281Z", "modified": "2026-10-09T15:13:09.751281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fee230123d03d9608afc1d89491dafab4d57b5c68a42315b97efd9ff6d1d8480']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.751281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5164ebb4-6ba2-410a-9c9b-36acbba546d8", "created": "2026-10-09T15:13:09.751869Z", "modified": "2026-10-09T15:13:09.751869Z", "relationship_type": "indicates", "source_ref": "indicator--73275658-7fab-4cef-baff-6d7a3b948def", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b00a25d-90e6-4ee2-8f99-2d4a800c1bdc", "created": "2026-10-09T15:13:09.751994Z", "modified": "2026-10-09T15:13:09.751994Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e9f94fdb423395396c4bebccbeb4543d7d729fe41ade6111693be1112ee8f4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.751994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7133117-1b24-475a-90c1-69a4857e8759", "created": "2026-10-09T15:13:09.752696Z", "modified": "2026-10-09T15:13:09.752696Z", "relationship_type": "indicates", "source_ref": "indicator--8b00a25d-90e6-4ee2-8f99-2d4a800c1bdc", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3309577-7371-4fe7-aab8-63113afab50d", "created": "2026-10-09T15:13:09.752829Z", "modified": "2026-10-09T15:13:09.752829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9803ede6da0685e9a71d2d0b6352d2aec8f0d6480c5b40d2fffbeac4b26cd580']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.752829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf5fd0f9-477b-4086-ae94-36d01b497df2", "created": "2026-10-09T15:13:09.753429Z", "modified": "2026-10-09T15:13:09.753429Z", "relationship_type": "indicates", "source_ref": "indicator--f3309577-7371-4fe7-aab8-63113afab50d", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d458c50c-727c-4fbc-8ee9-5fddc6bf0b48", "created": "2026-10-09T15:13:09.753554Z", "modified": "2026-10-09T15:13:09.753554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34725136b028210b7f852f5dd3dd501aadfad62501bc31a1bcdc891d27b38ab8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.753554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1b5fa87-f8e0-44c0-962c-d2ebceefc504", "created": "2026-10-09T15:13:09.754141Z", "modified": "2026-10-09T15:13:09.754141Z", "relationship_type": "indicates", "source_ref": "indicator--d458c50c-727c-4fbc-8ee9-5fddc6bf0b48", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e82027-e5e7-4808-83d7-322fd2aa9f1f", "created": "2026-10-09T15:13:09.754263Z", "modified": "2026-10-09T15:13:09.754263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52ad2c5d6ff126e15d37cdf487dd0b1c109df3194fbe0397360d8f841d627f93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.754263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2f2b599-d781-47ec-889c-92b38dd5a7c1", "created": "2026-10-09T15:13:09.754859Z", "modified": "2026-10-09T15:13:09.754859Z", "relationship_type": "indicates", "source_ref": "indicator--84e82027-e5e7-4808-83d7-322fd2aa9f1f", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db85698-62b7-4261-9802-71e581480c0c", "created": "2026-10-09T15:13:09.75498Z", "modified": "2026-10-09T15:13:09.75498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b04f7fe0ec9e58d950f8f36a7eaa80fe9c42449f3cab32ec5dd413fdbf2ae1c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.75498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ea1782c-835d-4588-a384-f8ae25a5daed", "created": "2026-10-09T15:13:09.755572Z", "modified": "2026-10-09T15:13:09.755572Z", "relationship_type": "indicates", "source_ref": "indicator--0db85698-62b7-4261-9802-71e581480c0c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad185c8d-12d8-4932-bd68-812704c376fb", "created": "2026-10-09T15:13:09.755696Z", "modified": "2026-10-09T15:13:09.755696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d7a7aea398c58f4c3fde8c37abbae54be531717932dc16bce84637e7cf5d11b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.755696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bd6f271-5016-4f0b-8b9c-aec8732dce58", "created": "2026-10-09T15:13:09.756289Z", "modified": "2026-10-09T15:13:09.756289Z", "relationship_type": "indicates", "source_ref": "indicator--ad185c8d-12d8-4932-bd68-812704c376fb", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f80be9-ac83-4b2f-bb69-d5bd2831a36d", "created": "2026-10-09T15:13:09.75641Z", "modified": "2026-10-09T15:13:09.75641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb5a23d0a66652f110017a7309578d7f4e79e7f0cd2ea62052bc6cada8bebd59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.75641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ab0da37-e590-4d95-8121-5b4c3812fa7f", "created": "2026-10-09T15:13:09.756987Z", "modified": "2026-10-09T15:13:09.756987Z", "relationship_type": "indicates", "source_ref": "indicator--25f80be9-ac83-4b2f-bb69-d5bd2831a36d", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f093967c-a14a-4ba4-b560-709ef47024f3", "created": "2026-10-09T15:13:09.757109Z", "modified": "2026-10-09T15:13:09.757109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0447f1679c8a783bb36d89a6e851c8a3b6640eead26994fe9486f027a665959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.757109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d081e07-5442-4ccc-ac2d-72a5e38e7fef", "created": "2026-10-09T15:13:09.757704Z", "modified": "2026-10-09T15:13:09.757704Z", "relationship_type": "indicates", "source_ref": "indicator--f093967c-a14a-4ba4-b560-709ef47024f3", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a98a77-266c-43eb-accf-f27e444abd6e", "created": "2026-10-09T15:13:09.757824Z", "modified": "2026-10-09T15:13:09.757824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12880e5a23c20885a76aecf132a3026f6ca05480b1aa3ce8f64616f7a5df552d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.757824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54c23867-6545-42ca-aa58-b6a3677dfca9", "created": "2026-10-09T15:13:09.758518Z", "modified": "2026-10-09T15:13:09.758518Z", "relationship_type": "indicates", "source_ref": "indicator--02a98a77-266c-43eb-accf-f27e444abd6e", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5322f222-0823-40a4-9b28-d6c3e61a2116", "created": "2026-10-09T15:13:09.758645Z", "modified": "2026-10-09T15:13:09.758645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9147f641d3a8799e51f2b5164e2a481b2c2b0ef4baae28edbbcc7f7b7536d13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.758645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4ea362f-537e-4358-beb2-bc674370cc9e", "created": "2026-10-09T15:13:09.759229Z", "modified": "2026-10-09T15:13:09.759229Z", "relationship_type": "indicates", "source_ref": "indicator--5322f222-0823-40a4-9b28-d6c3e61a2116", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3db7a0-e9c9-43ea-990b-2a54263781da", "created": "2026-10-09T15:13:09.759372Z", "modified": "2026-10-09T15:13:09.759372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8a33d82cb0f981250175e789bc585599b7745565b28fef522451ca6c7b898da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.759372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a485b97-c76c-41c1-9ca0-ba15372d25c7", "created": "2026-10-09T15:13:09.759959Z", "modified": "2026-10-09T15:13:09.759959Z", "relationship_type": "indicates", "source_ref": "indicator--4f3db7a0-e9c9-43ea-990b-2a54263781da", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bbda8b-ed72-456c-b6a8-813f1c947289", "created": "2026-10-09T15:13:09.760081Z", "modified": "2026-10-09T15:13:09.760081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b42a90a982744bf601da86e0e938f22f7757367099f39caff40186318621df43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.760081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adb92f78-e6d5-4b8b-a190-279e378947e0", "created": "2026-10-09T15:13:09.760686Z", "modified": "2026-10-09T15:13:09.760686Z", "relationship_type": "indicates", "source_ref": "indicator--57bbda8b-ed72-456c-b6a8-813f1c947289", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec87589-39d0-43a4-a998-d38975d02128", "created": "2026-10-09T15:13:09.760819Z", "modified": "2026-10-09T15:13:09.760819Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.com.app.com.app.aplintal']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.760819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ad8f2f4-7932-4eed-8e73-9fc98543b9bf", "created": "2026-10-09T15:13:09.761313Z", "modified": "2026-10-09T15:13:09.761313Z", "relationship_type": "indicates", "source_ref": "indicator--0ec87589-39d0-43a4-a998-d38975d02128", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b9af13-d403-4e7f-8f61-bbb0d023ca74", "created": "2026-10-09T15:13:09.761438Z", "modified": "2026-10-09T15:13:09.761438Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.insapp2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.761438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f11e13fe-269c-4419-b234-1f095d3da6a2", "created": "2026-10-09T15:13:09.761889Z", "modified": "2026-10-09T15:13:09.761889Z", "relationship_type": "indicates", "source_ref": "indicator--89b9af13-d403-4e7f-8f61-bbb0d023ca74", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb359098-3e3a-444e-9fe2-727cd6c337f6", "created": "2026-10-09T15:13:09.76201Z", "modified": "2026-10-09T15:13:09.76201Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.meuspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.76201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c245b592-3131-4305-acde-c8e3f00b2c10", "created": "2026-10-09T15:13:09.762475Z", "modified": "2026-10-09T15:13:09.762475Z", "relationship_type": "indicates", "source_ref": "indicator--bb359098-3e3a-444e-9fe2-727cd6c337f6", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a11f02-33e0-4c34-bfd1-3e549382e213", "created": "2026-10-09T15:13:09.762599Z", "modified": "2026-10-09T15:13:09.762599Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.cloud.aplicativo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.762599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8590770-0394-4189-ab3e-a5b1c287b1d7", "created": "2026-10-09T15:13:09.763059Z", "modified": "2026-10-09T15:13:09.763059Z", "relationship_type": "indicates", "source_ref": "indicator--79a11f02-33e0-4c34-bfd1-3e549382e213", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2861c2ae-0771-4a81-ac6a-cda214be393f", "created": "2026-10-09T15:13:09.763182Z", "modified": "2026-10-09T15:13:09.763182Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.cloud.backup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.763182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa8309e7-0f50-45fc-9d81-1005d7c80ab3", "created": "2026-10-09T15:13:09.763668Z", "modified": "2026-10-09T15:13:09.763668Z", "relationship_type": "indicates", "source_ref": "indicator--2861c2ae-0771-4a81-ac6a-cda214be393f", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d22e7a8-9e58-481a-bad2-90b449db04ac", "created": "2026-10-09T15:13:09.763789Z", "modified": "2026-10-09T15:13:09.763789Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.daggers.gameap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.763789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8dabde7-b003-44a0-ac5a-bb7765eb4937", "created": "2026-10-09T15:13:09.764356Z", "modified": "2026-10-09T15:13:09.764356Z", "relationship_type": "indicates", "source_ref": "indicator--4d22e7a8-9e58-481a-bad2-90b449db04ac", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfef2ff2-91b9-4b78-a57f-247d4bd401fb", "created": "2026-10-09T15:13:09.764483Z", "modified": "2026-10-09T15:13:09.764483Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.daggers.toshtec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.764483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbb8bd40-a33c-4a2c-aa83-069c1ea69e22", "created": "2026-10-09T15:13:09.764947Z", "modified": "2026-10-09T15:13:09.764947Z", "relationship_type": "indicates", "source_ref": "indicator--bfef2ff2-91b9-4b78-a57f-247d4bd401fb", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5976a6b-078b-4fa1-ba7a-cdfac77d582c", "created": "2026-10-09T15:13:09.765078Z", "modified": "2026-10-09T15:13:09.765078Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.cloud1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.765078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2f13564-4fbf-42d6-ac84-a9add6abcc9c", "created": "2026-10-09T15:13:09.76555Z", "modified": "2026-10-09T15:13:09.76555Z", "relationship_type": "indicates", "source_ref": "indicator--d5976a6b-078b-4fa1-ba7a-cdfac77d582c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11de6dbf-ad87-46ea-9b54-832407797c26", "created": "2026-10-09T15:13:09.765667Z", "modified": "2026-10-09T15:13:09.765667Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.go5ge']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.765667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf1ce5ea-bbca-45d7-b98a-fc0029159196", "created": "2026-10-09T15:13:09.76613Z", "modified": "2026-10-09T15:13:09.76613Z", "relationship_type": "indicates", "source_ref": "indicator--11de6dbf-ad87-46ea-9b54-832407797c26", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac63406-1609-441a-903b-0abe7fcbcfd8", "created": "2026-10-09T15:13:09.766251Z", "modified": "2026-10-09T15:13:09.766251Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.maps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.766251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3335556e-e406-40e4-ac4f-b27a068d9b63", "created": "2026-10-09T15:13:09.766733Z", "modified": "2026-10-09T15:13:09.766733Z", "relationship_type": "indicates", "source_ref": "indicator--cac63406-1609-441a-903b-0abe7fcbcfd8", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7562ccc4-5397-4650-bf85-41e7f85397e0", "created": "2026-10-09T15:13:09.766861Z", "modified": "2026-10-09T15:13:09.766861Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.radio']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.766861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3178b1f-5be9-4af4-8406-792901c19e48", "created": "2026-10-09T15:13:09.767331Z", "modified": "2026-10-09T15:13:09.767331Z", "relationship_type": "indicates", "source_ref": "indicator--7562ccc4-5397-4650-bf85-41e7f85397e0", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081f93dd-e046-4f4d-8fab-cb3cd17ad269", "created": "2026-10-09T15:13:09.76745Z", "modified": "2026-10-09T15:13:09.76745Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.76745Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e68fa4d-be20-46eb-a613-5d55af5a9400", "created": "2026-10-09T15:13:09.767907Z", "modified": "2026-10-09T15:13:09.767907Z", "relationship_type": "indicates", "source_ref": "indicator--081f93dd-e046-4f4d-8fab-cb3cd17ad269", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328c0b35-ad1c-4c00-bfbc-98a4ee97fb14", "created": "2026-10-09T15:13:09.768022Z", "modified": "2026-10-09T15:13:09.768022Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.sistema.aplicativo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.768022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7f0ce4c-100a-484c-98f2-7b6c0a257ab9", "created": "2026-10-09T15:13:09.768499Z", "modified": "2026-10-09T15:13:09.768499Z", "relationship_type": "indicates", "source_ref": "indicator--328c0b35-ad1c-4c00-bfbc-98a4ee97fb14", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7faec449-0019-4206-b50b-19fcd1475946", "created": "2026-10-09T15:13:09.768626Z", "modified": "2026-10-09T15:13:09.768626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.monsthers.gameap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.768626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--441e8c0d-4a9a-4489-b529-a57f74bd74d1", "created": "2026-10-09T15:13:09.769089Z", "modified": "2026-10-09T15:13:09.769089Z", "relationship_type": "indicates", "source_ref": "indicator--7faec449-0019-4206-b50b-19fcd1475946", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f852917-d70a-4972-ae97-ff6d4cfab6ff", "created": "2026-10-09T15:13:09.769211Z", "modified": "2026-10-09T15:13:09.769211Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='in.servidor.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.769211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea9ef687-3cea-4484-9d67-4e44fcf6f41a", "created": "2026-10-09T15:13:09.769763Z", "modified": "2026-10-09T15:13:09.769763Z", "relationship_type": "indicates", "source_ref": "indicator--0f852917-d70a-4972-ae97-ff6d4cfab6ff", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ad418e-a011-4f0f-863e-b37500bebae8", "created": "2026-10-09T15:13:09.769889Z", "modified": "2026-10-09T15:13:09.769889Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.galaxys.gameap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.769889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c307692-5074-4f8a-8efc-b142e462136e", "created": "2026-10-09T15:13:09.770359Z", "modified": "2026-10-09T15:13:09.770359Z", "relationship_type": "indicates", "source_ref": "indicator--90ad418e-a011-4f0f-863e-b37500bebae8", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946c24d8-5168-45b2-bfa2-64eacf80a185", "created": "2026-10-09T15:13:09.770481Z", "modified": "2026-10-09T15:13:09.770481Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.gamelevel.playstart']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.770481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--276e0cfe-bb2c-4bfd-9489-93fe4cd7b6bd", "created": "2026-10-09T15:13:09.770944Z", "modified": "2026-10-09T15:13:09.770944Z", "relationship_type": "indicates", "source_ref": "indicator--946c24d8-5168-45b2-bfa2-64eacf80a185", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972b9874-0875-4f1a-9ed0-4a6ed8e1a599", "created": "2026-10-09T15:13:09.771067Z", "modified": "2026-10-09T15:13:09.771067Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.gamelevel.cloudv3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.771067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37586b17-de93-44fa-b8f6-042f4403560b", "created": "2026-10-09T15:13:09.771538Z", "modified": "2026-10-09T15:13:09.771538Z", "relationship_type": "indicates", "source_ref": "indicator--972b9874-0875-4f1a-9ed0-4a6ed8e1a599", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f04506e-0b70-43ff-b7b7-d98fbca374f3", "created": "2026-10-09T15:13:09.771661Z", "modified": "2026-10-09T15:13:09.771661Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tutorial.instalao']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.771661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da51f38f-b0e3-4b7e-8f7d-0b64c347d7dc", "created": "2026-10-09T15:13:09.77212Z", "modified": "2026-10-09T15:13:09.77212Z", "relationship_type": "indicates", "source_ref": "indicator--2f04506e-0b70-43ff-b7b7-d98fbca374f3", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0781c5-0b06-417e-a54d-1fd8e7f408f8", "created": "2026-10-09T15:13:09.772242Z", "modified": "2026-10-09T15:13:09.772242Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aisistem.instalao']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.772242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55997735-fe0b-470b-8f91-8285bd634820", "created": "2026-10-09T15:13:09.772714Z", "modified": "2026-10-09T15:13:09.772714Z", "relationship_type": "indicates", "source_ref": "indicator--9c0781c5-0b06-417e-a54d-1fd8e7f408f8", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2070dfc7-04b0-43c9-9718-515d009a7b5c", "created": "2026-10-09T15:13:09.772865Z", "modified": "2026-10-09T15:13:09.772865Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.appfornecedor.legal']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.772865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12d52546-d073-4614-aa16-1afd35ba8a1b", "created": "2026-10-09T15:13:09.773354Z", "modified": "2026-10-09T15:13:09.773354Z", "relationship_type": "indicates", "source_ref": "indicator--2070dfc7-04b0-43c9-9718-515d009a7b5c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e658d2-9a64-4d39-887a-0e4aae2df1a6", "created": "2026-10-09T15:13:09.773482Z", "modified": "2026-10-09T15:13:09.773482Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77E86A5C583256B5A52A5AEEB70542CD1BE34A99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.773482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8469cbbc-58a1-46ac-9a22-923ec246a9f3", "created": "2026-10-09T15:13:09.774026Z", "modified": "2026-10-09T15:13:09.774026Z", "relationship_type": "indicates", "source_ref": "indicator--29e658d2-9a64-4d39-887a-0e4aae2df1a6", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2e09d1-c0c4-41fc-8a5e-3aa84ad2ec8e", "created": "2026-10-09T15:13:09.774152Z", "modified": "2026-10-09T15:13:09.774152Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E929DB5941C185EA4FAC2B0D7BA7589D40A379E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.774152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2aa4d30-0237-42d5-8d76-49192ed5f1d7", "created": "2026-10-09T15:13:09.774711Z", "modified": "2026-10-09T15:13:09.774711Z", "relationship_type": "indicates", "source_ref": "indicator--9c2e09d1-c0c4-41fc-8a5e-3aa84ad2ec8e", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d257728-cc7a-4ae5-993d-6bb406818417", "created": "2026-10-09T15:13:09.774837Z", "modified": "2026-10-09T15:13:09.774837Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8CA103D22C39282D7A1E8028D93333E481CCA83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.774837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44adbb80-2dd0-453b-a1e4-377bde45a2d5", "created": "2026-10-09T15:13:09.775756Z", "modified": "2026-10-09T15:13:09.775756Z", "relationship_type": "indicates", "source_ref": "indicator--4d257728-cc7a-4ae5-993d-6bb406818417", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22785fa2-3696-4dc2-ba29-9aaac9c8bda7", "created": "2026-10-09T15:13:09.775891Z", "modified": "2026-10-09T15:13:09.775891Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='018D06B4A5679892572CB9DA44BA1A8C1E3B68A5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.775891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd206547-b6e9-4ca4-a589-6b75cada1f72", "created": "2026-10-09T15:13:09.77645Z", "modified": "2026-10-09T15:13:09.77645Z", "relationship_type": "indicates", "source_ref": "indicator--22785fa2-3696-4dc2-ba29-9aaac9c8bda7", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47164c80-eb0e-4edf-8eef-363bf3fb3838", "created": "2026-10-09T15:13:09.776574Z", "modified": "2026-10-09T15:13:09.776574Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B0A100360B029E0B2105F60E2C8EEB9053998A7E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.776574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63d71f28-32c7-47f0-a59e-0f8142c358aa", "created": "2026-10-09T15:13:09.777109Z", "modified": "2026-10-09T15:13:09.777109Z", "relationship_type": "indicates", "source_ref": "indicator--47164c80-eb0e-4edf-8eef-363bf3fb3838", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66eb1363-b7a9-4790-86ff-0074db605405", "created": "2026-10-09T15:13:09.777227Z", "modified": "2026-10-09T15:13:09.777227Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E0E02AD30F042E096A7A5654217B846EA08C02D1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.777227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--728146fe-d6d9-4370-9592-b4162d4401dc", "created": "2026-10-09T15:13:09.777783Z", "modified": "2026-10-09T15:13:09.777783Z", "relationship_type": "indicates", "source_ref": "indicator--66eb1363-b7a9-4790-86ff-0074db605405", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee188f75-1162-44e5-b185-83c6660d782e", "created": "2026-10-09T15:13:09.777903Z", "modified": "2026-10-09T15:13:09.777903Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='493812991A9A1CC7BEEFD45F2180CD2FC0AF8913']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.777903Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9de25b8d-ac34-4770-b814-75d293c2b1fa", "created": "2026-10-09T15:13:09.778451Z", "modified": "2026-10-09T15:13:09.778451Z", "relationship_type": "indicates", "source_ref": "indicator--ee188f75-1162-44e5-b185-83c6660d782e", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0884cfc3-c425-412f-b131-9400dc9fd1c9", "created": "2026-10-09T15:13:09.778573Z", "modified": "2026-10-09T15:13:09.778573Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35B05ACC96D02849E20D9ED3BA9CEA41C2B83FFA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.778573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a8e63cd-36de-4028-8436-23334535a325", "created": "2026-10-09T15:13:09.779115Z", "modified": "2026-10-09T15:13:09.779115Z", "relationship_type": "indicates", "source_ref": "indicator--0884cfc3-c425-412f-b131-9400dc9fd1c9", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37fc7be-7cb3-4d1a-ac87-e17933937093", "created": "2026-10-09T15:13:09.779234Z", "modified": "2026-10-09T15:13:09.779234Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6C0B8CF7F47DB7A82A2C06D410690935FDD912DF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.779234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8606606-f4d9-4212-905b-399f518863a0", "created": "2026-10-09T15:13:09.779783Z", "modified": "2026-10-09T15:13:09.779783Z", "relationship_type": "indicates", "source_ref": "indicator--f37fc7be-7cb3-4d1a-ac87-e17933937093", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fa0c48-fbb0-4267-8aa1-ab58e0e33792", "created": "2026-10-09T15:13:09.779902Z", "modified": "2026-10-09T15:13:09.779902Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='18C94FAB82F77F89546600F84D2D2B48A0C0B927']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.779902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bccd507a-2fe8-4dd9-adcb-d85a5a267d24", "created": "2026-10-09T15:13:09.780457Z", "modified": "2026-10-09T15:13:09.780457Z", "relationship_type": "indicates", "source_ref": "indicator--a5fa0c48-fbb0-4267-8aa1-ab58e0e33792", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580e1067-d65e-429f-8836-ec677a4fbdda", "created": "2026-10-09T15:13:09.780584Z", "modified": "2026-10-09T15:13:09.780584Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0AF3219D3A9525CB4A618215DB7A29CBFD9FFE78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.780584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01606749-ff69-465d-9ca4-b7224b437e91", "created": "2026-10-09T15:13:09.78112Z", "modified": "2026-10-09T15:13:09.78112Z", "relationship_type": "indicates", "source_ref": "indicator--580e1067-d65e-429f-8836-ec677a4fbdda", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94c7292-2235-4a02-8046-25e5805b271f", "created": "2026-10-09T15:13:09.781244Z", "modified": "2026-10-09T15:13:09.781244Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6B1DC3EAE0E8C59E7769A6E0A1BAA1938620A191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.781244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--761b3c0d-45b8-462f-a406-d387ee6f01b4", "created": "2026-10-09T15:13:09.781907Z", "modified": "2026-10-09T15:13:09.781907Z", "relationship_type": "indicates", "source_ref": "indicator--a94c7292-2235-4a02-8046-25e5805b271f", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5390ab97-3ef1-4aad-b18e-6e1580669daf", "created": "2026-10-09T15:13:09.78203Z", "modified": "2026-10-09T15:13:09.78203Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8508603AE680C3BCDE91E6F909BF400F6DC878B4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.78203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--733d0d44-f30d-4fef-ad12-f35a8d68e5bf", "created": "2026-10-09T15:13:09.782582Z", "modified": "2026-10-09T15:13:09.782582Z", "relationship_type": "indicates", "source_ref": "indicator--5390ab97-3ef1-4aad-b18e-6e1580669daf", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132482b8-5cf3-44b9-8bad-a9780a801359", "created": "2026-10-09T15:13:09.782706Z", "modified": "2026-10-09T15:13:09.782706Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DD34B4E5125F07BA50738192FBE7B745785FC15A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.782706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27e11f38-0e02-4c65-b15e-87d4a1c876d0", "created": "2026-10-09T15:13:09.783247Z", "modified": "2026-10-09T15:13:09.783247Z", "relationship_type": "indicates", "source_ref": "indicator--132482b8-5cf3-44b9-8bad-a9780a801359", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cf0e92-9a44-4cbc-8caf-0f2b1eec34d1", "created": "2026-10-09T15:13:09.783381Z", "modified": "2026-10-09T15:13:09.783381Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AF113D18054A6B8DE74644BCE3F0AE41206B16AC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.783381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ceec902-b072-484c-b43d-a1ef66e9487b", "created": "2026-10-09T15:13:09.78392Z", "modified": "2026-10-09T15:13:09.78392Z", "relationship_type": "indicates", "source_ref": "indicator--19cf0e92-9a44-4cbc-8caf-0f2b1eec34d1", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a428630-8649-4be9-9f64-cca00f254104", "created": "2026-10-09T15:13:09.784038Z", "modified": "2026-10-09T15:13:09.784038Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A7E75010B3709D54D52CCE914AF06946744F5F67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.784038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97f67680-2d51-4a00-9da7-bbe46588bd9c", "created": "2026-10-09T15:13:09.784582Z", "modified": "2026-10-09T15:13:09.784582Z", "relationship_type": "indicates", "source_ref": "indicator--7a428630-8649-4be9-9f64-cca00f254104", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c6996a-c39c-4d15-8591-e3b1bad8abc2", "created": "2026-10-09T15:13:09.784702Z", "modified": "2026-10-09T15:13:09.784702Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='53486B8F8790D1848E0842F37B5C6DFA15CD3EBB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.784702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbcf9f06-a684-42b3-91b0-d341ec558948", "created": "2026-10-09T15:13:09.785237Z", "modified": "2026-10-09T15:13:09.785237Z", "relationship_type": "indicates", "source_ref": "indicator--f3c6996a-c39c-4d15-8591-e3b1bad8abc2", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8871ffd-9d84-4e26-9ca5-1a046d78146c", "created": "2026-10-09T15:13:09.785365Z", "modified": "2026-10-09T15:13:09.785365Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='114C4DC0F254EFD81F0AC7F41DBE882FFDB2E127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.785365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c11f26a4-240b-484f-9b67-7932b8df898e", "created": "2026-10-09T15:13:09.7859Z", "modified": "2026-10-09T15:13:09.7859Z", "relationship_type": "indicates", "source_ref": "indicator--e8871ffd-9d84-4e26-9ca5-1a046d78146c", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c52bc4-ca86-45a2-9b32-7f35d539a334", "created": "2026-10-09T15:13:09.786016Z", "modified": "2026-10-09T15:13:09.786016Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='50CADBA5487E7C00D67C8FF0D3A952D7B62BEE9A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.786016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0574f7a1-d353-404f-98ac-43f364980584", "created": "2026-10-09T15:13:09.786572Z", "modified": "2026-10-09T15:13:09.786572Z", "relationship_type": "indicates", "source_ref": "indicator--15c52bc4-ca86-45a2-9b32-7f35d539a334", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c90883f-0411-4ccd-a7cb-077f74f50409", "created": "2026-10-09T15:13:09.786693Z", "modified": "2026-10-09T15:13:09.786693Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B9F546776987F0F2FF893325D2CCDF7F62F0D56E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.786693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f37e541-bd8b-4520-8c29-d9249509c738", "created": "2026-10-09T15:13:09.787223Z", "modified": "2026-10-09T15:13:09.787223Z", "relationship_type": "indicates", "source_ref": "indicator--1c90883f-0411-4ccd-a7cb-077f74f50409", "target_ref": "malware--b4d95e16-016e-4ac4-a10f-2690a3ccbdac"}, {"type": "malware", "spec_version": "2.1", "id": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e", "created": "2026-10-09T15:13:09.787355Z", "modified": "2026-10-09T15:13:09.787355Z", "name": "AppSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ac5408-1fe7-4e7e-a01a-dca5f60bcdc4", "created": "2026-10-09T15:13:09.78748Z", "modified": "2026-10-09T15:13:09.78748Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.free-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.78748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04616691-2b77-4b6e-b8ae-8948ce7ad931", "created": "2026-10-09T15:13:09.788063Z", "modified": "2026-10-09T15:13:09.788063Z", "relationship_type": "indicates", "source_ref": "indicator--c5ac5408-1fe7-4e7e-a01a-dca5f60bcdc4", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5684a73-74a5-4c65-923d-f1e01b40bf05", "created": "2026-10-09T15:13:09.788186Z", "modified": "2026-10-09T15:13:09.788186Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.788186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be263599-d146-4333-89de-6d89c824b444", "created": "2026-10-09T15:13:09.788667Z", "modified": "2026-10-09T15:13:09.788667Z", "relationship_type": "indicates", "source_ref": "indicator--d5684a73-74a5-4c65-923d-f1e01b40bf05", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a8b9e0-a664-4918-928a-cb57a5c0cc26", "created": "2026-10-09T15:13:09.788793Z", "modified": "2026-10-09T15:13:09.788793Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy-net.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.788793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f373267-20aa-4a30-bd14-c48f1e6d73f1", "created": "2026-10-09T15:13:09.789291Z", "modified": "2026-10-09T15:13:09.789291Z", "relationship_type": "indicates", "source_ref": "indicator--71a8b9e0-a664-4918-928a-cb57a5c0cc26", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7babe7-0faf-4859-931a-4074028b88f4", "created": "2026-10-09T15:13:09.789415Z", "modified": "2026-10-09T15:13:09.789415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.789415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce6b4a55-d086-467a-81f3-c6f6ea240591", "created": "2026-10-09T15:13:09.789876Z", "modified": "2026-10-09T15:13:09.789876Z", "relationship_type": "indicates", "source_ref": "indicator--1a7babe7-0faf-4859-931a-4074028b88f4", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903784a7-881f-4925-85f9-ab43116007fa", "created": "2026-10-09T15:13:09.789994Z", "modified": "2026-10-09T15:13:09.789994Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freemobilespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.789994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cbdd6e4-2d64-47cb-930c-403042c5d521", "created": "2026-10-09T15:13:09.790472Z", "modified": "2026-10-09T15:13:09.790472Z", "relationship_type": "indicates", "source_ref": "indicator--903784a7-881f-4925-85f9-ab43116007fa", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15da6465-eb16-469a-bee9-54f3bd8f6a1d", "created": "2026-10-09T15:13:09.790593Z", "modified": "2026-10-09T15:13:09.790593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.790593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--655c89d1-e928-460f-97b1-88ae8e6e93d5", "created": "2026-10-09T15:13:09.791072Z", "modified": "2026-10-09T15:13:09.791072Z", "relationship_type": "indicates", "source_ref": "indicator--15da6465-eb16-469a-bee9-54f3bd8f6a1d", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8a10f9-60a4-4c6b-97af-b4056a6804aa", "created": "2026-10-09T15:13:09.791195Z", "modified": "2026-10-09T15:13:09.791195Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.appspyfree.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.791195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a027372-889b-4a38-af27-ceea5677bb9e", "created": "2026-10-09T15:13:09.791692Z", "modified": "2026-10-09T15:13:09.791692Z", "relationship_type": "indicates", "source_ref": "indicator--2e8a10f9-60a4-4c6b-97af-b4056a6804aa", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1668585-eefe-4319-a888-d91df2806c5f", "created": "2026-10-09T15:13:09.791813Z", "modified": "2026-10-09T15:13:09.791813Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.freephonespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.791813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d23fcb9-678b-4468-8b66-1d4c99011504", "created": "2026-10-09T15:13:09.792303Z", "modified": "2026-10-09T15:13:09.792303Z", "relationship_type": "indicates", "source_ref": "indicator--c1668585-eefe-4319-a888-d91df2806c5f", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c42c0a3-d905-4d72-9817-81237858609d", "created": "2026-10-09T15:13:09.792434Z", "modified": "2026-10-09T15:13:09.792434Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.mobilespyfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.792434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ff32d97-6d46-4c34-b562-69ad5383cbb1", "created": "2026-10-09T15:13:09.792913Z", "modified": "2026-10-09T15:13:09.792913Z", "relationship_type": "indicates", "source_ref": "indicator--2c42c0a3-d905-4d72-9817-81237858609d", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea052c0-43df-4d9d-86b9-574dc04a649d", "created": "2026-10-09T15:13:09.793031Z", "modified": "2026-10-09T15:13:09.793031Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.793031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--439d6648-34c3-4821-8b28-f1866509febd", "created": "2026-10-09T15:13:09.793617Z", "modified": "2026-10-09T15:13:09.793617Z", "relationship_type": "indicates", "source_ref": "indicator--cea052c0-43df-4d9d-86b9-574dc04a649d", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6f4aa4-7d6d-4664-94ee-7487f450b92e", "created": "2026-10-09T15:13:09.793745Z", "modified": "2026-10-09T15:13:09.793745Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.793745Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af298d6b-8da3-4384-b322-3c62aecafbff", "created": "2026-10-09T15:13:09.794209Z", "modified": "2026-10-09T15:13:09.794209Z", "relationship_type": "indicates", "source_ref": "indicator--8c6f4aa4-7d6d-4664-94ee-7487f450b92e", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2695d5e-4992-417a-b8ee-994b07aabe1c", "created": "2026-10-09T15:13:09.794349Z", "modified": "2026-10-09T15:13:09.794349Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspyfree.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.794349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e1c5575-f1b8-4017-aeb8-e195d363e19f", "created": "2026-10-09T15:13:09.794816Z", "modified": "2026-10-09T15:13:09.794816Z", "relationship_type": "indicates", "source_ref": "indicator--b2695d5e-4992-417a-b8ee-994b07aabe1c", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33894256-45b1-444a-b237-4e8bfdd539ab", "created": "2026-10-09T15:13:09.794935Z", "modified": "2026-10-09T15:13:09.794935Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apptracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.794935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--766720fd-633a-4e5d-a292-7b9bc7cd2b49", "created": "2026-10-09T15:13:09.795422Z", "modified": "2026-10-09T15:13:09.795422Z", "relationship_type": "indicates", "source_ref": "indicator--33894256-45b1-444a-b237-4e8bfdd539ab", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0415532d-aec8-4b69-8aaa-409e64293136", "created": "2026-10-09T15:13:09.795541Z", "modified": "2026-10-09T15:13:09.795541Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphonespyappon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.795541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0313e426-72f4-43ab-877c-86a9cf291113", "created": "2026-10-09T15:13:09.796013Z", "modified": "2026-10-09T15:13:09.796013Z", "relationship_type": "indicates", "source_ref": "indicator--0415532d-aec8-4b69-8aaa-409e64293136", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebeaf50-c5d1-4d55-b095-622624a86b26", "created": "2026-10-09T15:13:09.796129Z", "modified": "2026-10-09T15:13:09.796129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='free-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.796129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53fa4542-a7c6-4894-92d0-5e321607fd0b", "created": "2026-10-09T15:13:09.796613Z", "modified": "2026-10-09T15:13:09.796613Z", "relationship_type": "indicates", "source_ref": "indicator--aebeaf50-c5d1-4d55-b095-622624a86b26", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1413c565-57f7-4102-8652-88401aa6f0d0", "created": "2026-10-09T15:13:09.796734Z", "modified": "2026-10-09T15:13:09.796734Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='free.apptracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.796734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdf04ef7-7df7-4189-ab1f-dbc9a1fe199e", "created": "2026-10-09T15:13:09.79721Z", "modified": "2026-10-09T15:13:09.79721Z", "relationship_type": "indicates", "source_ref": "indicator--1413c565-57f7-4102-8652-88401aa6f0d0", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b691489d-cb6e-4a5b-9a9d-b39844393937", "created": "2026-10-09T15:13:09.797339Z", "modified": "2026-10-09T15:13:09.797339Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freemobilespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.797339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bc504ec-bd45-4e86-9615-7f47fbbcee15", "created": "2026-10-09T15:13:09.797813Z", "modified": "2026-10-09T15:13:09.797813Z", "relationship_type": "indicates", "source_ref": "indicator--b691489d-cb6e-4a5b-9a9d-b39844393937", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e34a7a2-f6ac-43d2-904c-9e9b2c66bc05", "created": "2026-10-09T15:13:09.797932Z", "modified": "2026-10-09T15:13:09.797932Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freephonespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.797932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee6be70f-96bb-46c7-9a2e-3aefb0baa089", "created": "2026-10-09T15:13:09.798411Z", "modified": "2026-10-09T15:13:09.798411Z", "relationship_type": "indicates", "source_ref": "indicator--0e34a7a2-f6ac-43d2-904c-9e9b2c66bc05", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3155b6f4-9edc-4226-bcb7-c6155751ca5b", "created": "2026-10-09T15:13:09.798532Z", "modified": "2026-10-09T15:13:09.798532Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='justseries.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.798532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b53bd982-3c8e-463d-bbf7-a69552c97697", "created": "2026-10-09T15:13:09.799101Z", "modified": "2026-10-09T15:13:09.799101Z", "relationship_type": "indicates", "source_ref": "indicator--3155b6f4-9edc-4226-bcb7-c6155751ca5b", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5330a2bb-6bd3-41c9-afb0-969da7e4f6a8", "created": "2026-10-09T15:13:09.799223Z", "modified": "2026-10-09T15:13:09.799223Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespyfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.799223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5330120-6aeb-4032-96d0-25f8bf858346", "created": "2026-10-09T15:13:09.799717Z", "modified": "2026-10-09T15:13:09.799717Z", "relationship_type": "indicates", "source_ref": "indicator--5330a2bb-6bd3-41c9-afb0-969da7e4f6a8", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369a51a3-2fd7-40e6-9931-03d4ad5be1a3", "created": "2026-10-09T15:13:09.799836Z", "modified": "2026-10-09T15:13:09.799836Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyren.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.799836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--916ec76e-8e72-4b3e-bdb8-7e59bcddd765", "created": "2026-10-09T15:13:09.800306Z", "modified": "2026-10-09T15:13:09.800306Z", "relationship_type": "indicates", "source_ref": "indicator--369a51a3-2fd7-40e6-9931-03d4ad5be1a3", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0591d5-1add-437b-8c32-a3f793c449eb", "created": "2026-10-09T15:13:09.800425Z", "modified": "2026-10-09T15:13:09.800425Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackerfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.800425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30048a24-0a89-4145-b991-f8bc2ddb70ee", "created": "2026-10-09T15:13:09.800893Z", "modified": "2026-10-09T15:13:09.800893Z", "relationship_type": "indicates", "source_ref": "indicator--ff0591d5-1add-437b-8c32-a3f793c449eb", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309a770-5f6c-4dfc-b613-c0ef20654685", "created": "2026-10-09T15:13:09.801011Z", "modified": "2026-10-09T15:13:09.801011Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.appspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.801011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e893858-1dd1-4fe5-b847-6446c92579f5", "created": "2026-10-09T15:13:09.801495Z", "modified": "2026-10-09T15:13:09.801495Z", "relationship_type": "indicates", "source_ref": "indicator--0309a770-5f6c-4dfc-b613-c0ef20654685", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8bf015-e58c-40a3-9537-af809206cd04", "created": "2026-10-09T15:13:09.801615Z", "modified": "2026-10-09T15:13:09.801615Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.801615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--023e4df8-98be-462d-82a3-f0466ee76664", "created": "2026-10-09T15:13:09.802084Z", "modified": "2026-10-09T15:13:09.802084Z", "relationship_type": "indicates", "source_ref": "indicator--5a8bf015-e58c-40a3-9537-af809206cd04", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ab0e02-b196-43a3-811b-e8bb2951ebae", "created": "2026-10-09T15:13:09.802206Z", "modified": "2026-10-09T15:13:09.802206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.apptracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.802206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32f28877-ad76-434f-9a8f-48ce04c9a7f3", "created": "2026-10-09T15:13:09.802688Z", "modified": "2026-10-09T15:13:09.802688Z", "relationship_type": "indicates", "source_ref": "indicator--28ab0e02-b196-43a3-811b-e8bb2951ebae", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fdce4c-0a74-4dde-8afc-41622daaa0a6", "created": "2026-10-09T15:13:09.80281Z", "modified": "2026-10-09T15:13:09.80281Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cellphonespyappon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.80281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbe13817-aa6f-44e1-93ac-73e8dce39121", "created": "2026-10-09T15:13:09.803319Z", "modified": "2026-10-09T15:13:09.803319Z", "relationship_type": "indicates", "source_ref": "indicator--a5fdce4c-0a74-4dde-8afc-41622daaa0a6", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1455cd-efdf-4d5a-b207-04e90646ee23", "created": "2026-10-09T15:13:09.803444Z", "modified": "2026-10-09T15:13:09.803444Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.freemobilespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.803444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e8533ba-3e3e-4af1-b530-688a1cee8066", "created": "2026-10-09T15:13:09.803922Z", "modified": "2026-10-09T15:13:09.803922Z", "relationship_type": "indicates", "source_ref": "indicator--6e1455cd-efdf-4d5a-b207-04e90646ee23", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ecbdb0-1939-436e-a490-f60661b5033e", "created": "2026-10-09T15:13:09.804043Z", "modified": "2026-10-09T15:13:09.804043Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.freephonespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.804043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60364215-bb94-4c77-a632-0322f13031ff", "created": "2026-10-09T15:13:09.804624Z", "modified": "2026-10-09T15:13:09.804624Z", "relationship_type": "indicates", "source_ref": "indicator--23ecbdb0-1939-436e-a490-f60661b5033e", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fddb6e-e09a-4666-a317-957bbe52fcb8", "created": "2026-10-09T15:13:09.804754Z", "modified": "2026-10-09T15:13:09.804754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilespyfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.804754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0fffde2-2389-455e-9f68-9e726d542e40", "created": "2026-10-09T15:13:09.805235Z", "modified": "2026-10-09T15:13:09.805235Z", "relationship_type": "indicates", "source_ref": "indicator--72fddb6e-e09a-4666-a317-957bbe52fcb8", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38f0618-7139-46c9-b9c4-268dd0bbbfa6", "created": "2026-10-09T15:13:09.805367Z", "modified": "2026-10-09T15:13:09.805367Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyren.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.805367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3909de6c-ca8d-43e0-b6d6-a0f4af584fd3", "created": "2026-10-09T15:13:09.805834Z", "modified": "2026-10-09T15:13:09.805834Z", "relationship_type": "indicates", "source_ref": "indicator--e38f0618-7139-46c9-b9c4-268dd0bbbfa6", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61cea2f1-75d5-4a5b-b1e8-e184fde964c0", "created": "2026-10-09T15:13:09.805954Z", "modified": "2026-10-09T15:13:09.805954Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackerfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.805954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db071f7e-56b9-4ea2-aa91-afc216e69f8e", "created": "2026-10-09T15:13:09.806438Z", "modified": "2026-10-09T15:13:09.806438Z", "relationship_type": "indicates", "source_ref": "indicator--61cea2f1-75d5-4a5b-b1e8-e184fde964c0", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77be22e7-7348-4720-b0d9-3464f3d687a0", "created": "2026-10-09T15:13:09.806576Z", "modified": "2026-10-09T15:13:09.806576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.xvids.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.806576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3575e28-3ba9-41c3-934c-b3475b0cdb06", "created": "2026-10-09T15:13:09.80704Z", "modified": "2026-10-09T15:13:09.80704Z", "relationship_type": "indicates", "source_ref": "indicator--77be22e7-7348-4720-b0d9-3464f3d687a0", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba950365-110f-4ae9-b83d-3020527ec867", "created": "2026-10-09T15:13:09.807157Z", "modified": "2026-10-09T15:13:09.807157Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xvids.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.807157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4845c0b2-8f65-44bc-bfb2-1aff8a179f18", "created": "2026-10-09T15:13:09.807637Z", "modified": "2026-10-09T15:13:09.807637Z", "relationship_type": "indicates", "source_ref": "indicator--ba950365-110f-4ae9-b83d-3020527ec867", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760e3fde-5663-4c22-a238-0ce6fb7ddbb8", "created": "2026-10-09T15:13:09.80776Z", "modified": "2026-10-09T15:13:09.80776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2986278fb13c2ee360235ca814d3c42c03a41b14bddf0ab222caec30d974b529']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.80776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0bdb25e-fad4-4eef-aed1-75564dd214ab", "created": "2026-10-09T15:13:09.808366Z", "modified": "2026-10-09T15:13:09.808366Z", "relationship_type": "indicates", "source_ref": "indicator--760e3fde-5663-4c22-a238-0ce6fb7ddbb8", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4a61b2-47c4-4aba-ac0c-efd633bf69c7", "created": "2026-10-09T15:13:09.808488Z", "modified": "2026-10-09T15:13:09.808488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c332a7aa934516020b4736cb1fa92380a6c9aec4fd24b02f3db19d4c7639b1a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.808488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70bb5830-91a6-44bb-9fde-d62851154fbc", "created": "2026-10-09T15:13:09.809077Z", "modified": "2026-10-09T15:13:09.809077Z", "relationship_type": "indicates", "source_ref": "indicator--6f4a61b2-47c4-4aba-ac0c-efd633bf69c7", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de25921-d7c6-4303-b1fc-95ffd7578e80", "created": "2026-10-09T15:13:09.809199Z", "modified": "2026-10-09T15:13:09.809199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a4f4e4d3d0eea2128f112c759ef7561d4109813c909b5675096a4c4e1fedebe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.809199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1fc23e4-c5e1-4f79-b5c2-caaa62986aa3", "created": "2026-10-09T15:13:09.8098Z", "modified": "2026-10-09T15:13:09.8098Z", "relationship_type": "indicates", "source_ref": "indicator--2de25921-d7c6-4303-b1fc-95ffd7578e80", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53350fc7-db55-44a3-b9fe-a3de037a365d", "created": "2026-10-09T15:13:09.80992Z", "modified": "2026-10-09T15:13:09.80992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1a45094b55f6d581c1de2b3267ffa71f717567af493cf3ca953b7c38f4b3a60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.80992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19851391-e94c-46ef-b8d8-c50a59c5814e", "created": "2026-10-09T15:13:09.810613Z", "modified": "2026-10-09T15:13:09.810613Z", "relationship_type": "indicates", "source_ref": "indicator--53350fc7-db55-44a3-b9fe-a3de037a365d", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c98e840-f2a9-4350-9b05-963c58bcc702", "created": "2026-10-09T15:13:09.810743Z", "modified": "2026-10-09T15:13:09.810743Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6c9b63eda49c6f00b47e4fc1a2320a91378a9e9eadeff5324cc972e59d43046']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.810743Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93417a12-893a-4b90-a6c1-1e8316179cec", "created": "2026-10-09T15:13:09.81134Z", "modified": "2026-10-09T15:13:09.81134Z", "relationship_type": "indicates", "source_ref": "indicator--7c98e840-f2a9-4350-9b05-963c58bcc702", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d491e79a-c38a-409e-bb07-3fb6ee85fc01", "created": "2026-10-09T15:13:09.811465Z", "modified": "2026-10-09T15:13:09.811465Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.atracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.811465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92e27d90-15b4-434d-a384-b84409092b73", "created": "2026-10-09T15:13:09.811919Z", "modified": "2026-10-09T15:13:09.811919Z", "relationship_type": "indicates", "source_ref": "indicator--d491e79a-c38a-409e-bb07-3fb6ee85fc01", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6bf17f-4b85-4d3c-b8dd-2e5c775233a1", "created": "2026-10-09T15:13:09.812039Z", "modified": "2026-10-09T15:13:09.812039Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.agpstracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.812039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39996cf6-64c4-470b-a213-823a4fcb794e", "created": "2026-10-09T15:13:09.812504Z", "modified": "2026-10-09T15:13:09.812504Z", "relationship_type": "indicates", "source_ref": "indicator--fc6bf17f-4b85-4d3c-b8dd-2e5c775233a1", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2978b768-101e-4a51-9a53-fcdd8d5f6207", "created": "2026-10-09T15:13:09.812627Z", "modified": "2026-10-09T15:13:09.812627Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aphonetracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.812627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f50481f4-1ecd-49c9-963a-3f6426757c50", "created": "2026-10-09T15:13:09.813084Z", "modified": "2026-10-09T15:13:09.813084Z", "relationship_type": "indicates", "source_ref": "indicator--2978b768-101e-4a51-9a53-fcdd8d5f6207", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bfa870-441b-4196-bf55-d2fb67d10164", "created": "2026-10-09T15:13:09.813205Z", "modified": "2026-10-09T15:13:09.813205Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.afreesmstracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.813205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a3614e3-8bb5-4a99-83da-d916814a5b06", "created": "2026-10-09T15:13:09.813679Z", "modified": "2026-10-09T15:13:09.813679Z", "relationship_type": "indicates", "source_ref": "indicator--b6bfa870-441b-4196-bf55-d2fb67d10164", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b744599d-5eb1-45be-ab19-99bea01a0580", "created": "2026-10-09T15:13:09.813795Z", "modified": "2026-10-09T15:13:09.813795Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobilefindfree']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.813795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0191138f-2fc0-4638-a596-76d85c1ce0c4", "created": "2026-10-09T15:13:09.814248Z", "modified": "2026-10-09T15:13:09.814248Z", "relationship_type": "indicates", "source_ref": "indicator--b744599d-5eb1-45be-ab19-99bea01a0580", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e943d540-5121-4fe3-b6c6-4fcbd4dbcddb", "created": "2026-10-09T15:13:09.814378Z", "modified": "2026-10-09T15:13:09.814378Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='07525D7D2E83CE865F98E1B9C0F6095B1C29D48A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.814378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80921ba0-e42a-4283-9123-3fb4d1659d16", "created": "2026-10-09T15:13:09.814924Z", "modified": "2026-10-09T15:13:09.814924Z", "relationship_type": "indicates", "source_ref": "indicator--e943d540-5121-4fe3-b6c6-4fcbd4dbcddb", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bde3d46-f6ad-4b1f-aa17-1dd7e86cc1bf", "created": "2026-10-09T15:13:09.815045Z", "modified": "2026-10-09T15:13:09.815045Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0AD33649F0D0532B5EB0A36A81712962AA79BF54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.815045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cffdb64b-f8a0-4512-8417-b24043940e7a", "created": "2026-10-09T15:13:09.815597Z", "modified": "2026-10-09T15:13:09.815597Z", "relationship_type": "indicates", "source_ref": "indicator--9bde3d46-f6ad-4b1f-aa17-1dd7e86cc1bf", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0501d9c1-1627-4fc4-bdaf-ebc91ab0d1f4", "created": "2026-10-09T15:13:09.815721Z", "modified": "2026-10-09T15:13:09.815721Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='492FF617A79F6C8D80B453815CFE6586E21C5F72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.815721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74527587-1d33-4211-bb89-6f0ca6fc0cdf", "created": "2026-10-09T15:13:09.816378Z", "modified": "2026-10-09T15:13:09.816378Z", "relationship_type": "indicates", "source_ref": "indicator--0501d9c1-1627-4fc4-bdaf-ebc91ab0d1f4", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc4e0cf-d580-40bb-a82c-a7bd0261b89a", "created": "2026-10-09T15:13:09.816503Z", "modified": "2026-10-09T15:13:09.816503Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9E09874197988F20DB51EB6A34BFD908AC42C35B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.816503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46934ea4-c1e1-43a7-9c4b-42689857ee43", "created": "2026-10-09T15:13:09.817044Z", "modified": "2026-10-09T15:13:09.817044Z", "relationship_type": "indicates", "source_ref": "indicator--5bc4e0cf-d580-40bb-a82c-a7bd0261b89a", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3edc409-86c2-495a-b5f4-b0d259dafd41", "created": "2026-10-09T15:13:09.817166Z", "modified": "2026-10-09T15:13:09.817166Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D98C69B50C1092FE21F7CF748DC8B2F91BE56B64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.817166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db8d57b2-ae57-4cec-99e5-c69c9d73c119", "created": "2026-10-09T15:13:09.817715Z", "modified": "2026-10-09T15:13:09.817715Z", "relationship_type": "indicates", "source_ref": "indicator--a3edc409-86c2-495a-b5f4-b0d259dafd41", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f3ed3f-b4d2-4204-ad53-fe9318ab90b7", "created": "2026-10-09T15:13:09.817839Z", "modified": "2026-10-09T15:13:09.817839Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FB926CF2937331BB8A46E2C5280233C04DA2342E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.817839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6336ba65-8120-4ce1-8646-f1e2d48ac6e1", "created": "2026-10-09T15:13:09.818388Z", "modified": "2026-10-09T15:13:09.818388Z", "relationship_type": "indicates", "source_ref": "indicator--e3f3ed3f-b4d2-4204-ad53-fe9318ab90b7", "target_ref": "malware--33fc23ac-0031-4010-a502-d95fcd8e769e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910", "created": "2026-10-09T15:13:09.818508Z", "modified": "2026-10-09T15:13:09.818508Z", "name": "MobileTrackerFree", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a102b8f8-02dd-4540-8219-818e7656b9bf", "created": "2026-10-09T15:13:09.818624Z", "modified": "2026-10-09T15:13:09.818624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api1.easydoc.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.818624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1c58199-a5d6-49ee-9eb8-820d15fb1c5e", "created": "2026-10-09T15:13:09.819101Z", "modified": "2026-10-09T15:13:09.819101Z", "relationship_type": "indicates", "source_ref": "indicator--a102b8f8-02dd-4540-8219-818e7656b9bf", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04aacad5-8f0d-4084-8f5c-a2f7450db93a", "created": "2026-10-09T15:13:09.819222Z", "modified": "2026-10-09T15:13:09.819222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api3.easydoc.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.819222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2fad901-0890-4493-b800-8325afde9bb3", "created": "2026-10-09T15:13:09.819707Z", "modified": "2026-10-09T15:13:09.819707Z", "relationship_type": "indicates", "source_ref": "indicator--04aacad5-8f0d-4084-8f5c-a2f7450db93a", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bb8c52-2d9e-4856-a8fa-73ab0a90925e", "created": "2026-10-09T15:13:09.819826Z", "modified": "2026-10-09T15:13:09.819826Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk.mtf.re']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.819826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c84cc8df-8c0d-46e4-8783-e697e72e2241", "created": "2026-10-09T15:13:09.820302Z", "modified": "2026-10-09T15:13:09.820302Z", "relationship_type": "indicates", "source_ref": "indicator--36bb8c52-2d9e-4856-a8fa-73ab0a90925e", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d0b4c0-8df2-47c4-9e42-0a3a5674a369", "created": "2026-10-09T15:13:09.820422Z", "modified": "2026-10-09T15:13:09.820422Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celltrackernew.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.820422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eabf8eb5-228b-44e2-b4dc-592e9a914c65", "created": "2026-10-09T15:13:09.820917Z", "modified": "2026-10-09T15:13:09.820917Z", "relationship_type": "indicates", "source_ref": "indicator--29d0b4c0-8df2-47c4-9e42-0a3a5674a369", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68be4bdc-2885-45fe-8eb7-70930bd14b64", "created": "2026-10-09T15:13:09.821037Z", "modified": "2026-10-09T15:13:09.821037Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d-app-apk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.821037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--804484a1-cdaa-4ae2-b756-da05700dd72f", "created": "2026-10-09T15:13:09.821506Z", "modified": "2026-10-09T15:13:09.821506Z", "relationship_type": "indicates", "source_ref": "indicator--68be4bdc-2885-45fe-8eb7-70930bd14b64", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373734ed-efbb-48b4-9dd6-3f84d04aeb11", "created": "2026-10-09T15:13:09.821643Z", "modified": "2026-10-09T15:13:09.821643Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.d-app-apk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.821643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--461555ac-7847-4108-bd42-a1fa0a31a24f", "created": "2026-10-09T15:13:09.822213Z", "modified": "2026-10-09T15:13:09.822213Z", "relationship_type": "indicates", "source_ref": "indicator--373734ed-efbb-48b4-9dd6-3f84d04aeb11", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d13a44-6429-4d87-81eb-67b614b8c87c", "created": "2026-10-09T15:13:09.822349Z", "modified": "2026-10-09T15:13:09.822349Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easydoc.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.822349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9540a6d0-8521-4dfd-8bd4-0eab3224ff78", "created": "2026-10-09T15:13:09.822814Z", "modified": "2026-10-09T15:13:09.822814Z", "relationship_type": "indicates", "source_ref": "indicator--77d13a44-6429-4d87-81eb-67b614b8c87c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff0c18b-6bfc-4f92-9bff-e0ecdefdee36", "created": "2026-10-09T15:13:09.822932Z", "modified": "2026-10-09T15:13:09.822932Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.822932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7de055e4-3d2e-4901-b9f3-188c04ad01f0", "created": "2026-10-09T15:13:09.823407Z", "modified": "2026-10-09T15:13:09.823407Z", "relationship_type": "indicates", "source_ref": "indicator--7ff0c18b-6bfc-4f92-9bff-e0ecdefdee36", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3be2e5-f9fc-4f3d-aace-e89f70382f8c", "created": "2026-10-09T15:13:09.823527Z", "modified": "2026-10-09T15:13:09.823527Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-data.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.823527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efa32930-a86a-469e-a892-a6a437b7945a", "created": "2026-10-09T15:13:09.824005Z", "modified": "2026-10-09T15:13:09.824005Z", "relationship_type": "indicates", "source_ref": "indicator--cb3be2e5-f9fc-4f3d-aace-e89f70382f8c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1945dd99-2862-4561-80cc-083059579b89", "created": "2026-10-09T15:13:09.824122Z", "modified": "2026-10-09T15:13:09.824122Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtf.re']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.824122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00c617a9-d866-43f7-bd21-e00ad2bf355d", "created": "2026-10-09T15:13:09.824593Z", "modified": "2026-10-09T15:13:09.824593Z", "relationship_type": "indicates", "source_ref": "indicator--1945dd99-2862-4561-80cc-083059579b89", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc859d7-5cb2-479e-b6bf-4e15dbd2fc9e", "created": "2026-10-09T15:13:09.824713Z", "modified": "2026-10-09T15:13:09.824713Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='myappmobile-537f7.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.824713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--606845d5-4a20-4932-a8bd-67495e19c387", "created": "2026-10-09T15:13:09.825207Z", "modified": "2026-10-09T15:13:09.825207Z", "relationship_type": "indicates", "source_ref": "indicator--efc859d7-5cb2-479e-b6bf-4e15dbd2fc9e", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363465dc-816a-437c-a3cf-4a1c0ebe864d", "created": "2026-10-09T15:13:09.825345Z", "modified": "2026-10-09T15:13:09.825345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='n6sm2m.celltracker.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.825345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--550e0fe7-d60d-46bb-b7ed-f3b42070485f", "created": "2026-10-09T15:13:09.82582Z", "modified": "2026-10-09T15:13:09.82582Z", "relationship_type": "indicates", "source_ref": "indicator--363465dc-816a-437c-a3cf-4a1c0ebe864d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae328172-82d7-4196-b067-675e0e31d539", "created": "2026-10-09T15:13:09.825936Z", "modified": "2026-10-09T15:13:09.825936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='olurdaolurdediler.shop']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.825936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9002b067-58a6-4517-bc1d-fd875e9c5174", "created": "2026-10-09T15:13:09.826433Z", "modified": "2026-10-09T15:13:09.826433Z", "relationship_type": "indicates", "source_ref": "indicator--ae328172-82d7-4196-b067-675e0e31d539", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a97ccf7-a005-475c-bc3c-0188b11501a9", "created": "2026-10-09T15:13:09.826558Z", "modified": "2026-10-09T15:13:09.826558Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sapient-flight-837.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.826558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd1fe0cc-7168-48cd-b82b-b99f2d4f971b", "created": "2026-10-09T15:13:09.82706Z", "modified": "2026-10-09T15:13:09.82706Z", "relationship_type": "indicates", "source_ref": "indicator--4a97ccf7-a005-475c-bc3c-0188b11501a9", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0245b4-e921-4608-82bb-3b33e1c257f2", "created": "2026-10-09T15:13:09.827178Z", "modified": "2026-10-09T15:13:09.827178Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.827178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4b07f95-008c-4bce-866f-8c216bdb89d2", "created": "2026-10-09T15:13:09.827756Z", "modified": "2026-10-09T15:13:09.827756Z", "relationship_type": "indicates", "source_ref": "indicator--4a0245b4-e921-4608-82bb-3b33e1c257f2", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f56d9aa-78f8-487e-b47d-dfe713a28b30", "created": "2026-10-09T15:13:09.827879Z", "modified": "2026-10-09T15:13:09.827879Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.827879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8526621c-1244-42e2-9466-5a285386b4fe", "created": "2026-10-09T15:13:09.828383Z", "modified": "2026-10-09T15:13:09.828383Z", "relationship_type": "indicates", "source_ref": "indicator--9f56d9aa-78f8-487e-b47d-dfe713a28b30", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff3d09b-9e7d-46a4-beb5-1af9da818f9c", "created": "2026-10-09T15:13:09.828505Z", "modified": "2026-10-09T15:13:09.828505Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.828505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7cba609-5272-4799-847b-94e9171a908a", "created": "2026-10-09T15:13:09.828976Z", "modified": "2026-10-09T15:13:09.828976Z", "relationship_type": "indicates", "source_ref": "indicator--dff3d09b-9e7d-46a4-beb5-1af9da818f9c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2cd9cb-7b6c-4eb0-8317-6fb79b3e7a42", "created": "2026-10-09T15:13:09.829104Z", "modified": "2026-10-09T15:13:09.829104Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celltracker.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.829104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4ffe7f6-ad75-45a9-bde8-3f15cf0bb85e", "created": "2026-10-09T15:13:09.829587Z", "modified": "2026-10-09T15:13:09.829587Z", "relationship_type": "indicates", "source_ref": "indicator--2a2cd9cb-7b6c-4eb0-8317-6fb79b3e7a42", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb2db13-2a72-4dc3-b8bf-cea24b9d54ac", "created": "2026-10-09T15:13:09.829719Z", "modified": "2026-10-09T15:13:09.829719Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.829719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ed20104-d76d-49ea-b680-521ba0510b29", "created": "2026-10-09T15:13:09.830194Z", "modified": "2026-10-09T15:13:09.830194Z", "relationship_type": "indicates", "source_ref": "indicator--9cb2db13-2a72-4dc3-b8bf-cea24b9d54ac", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67269e5e-e2a3-43f4-ab39-bf79d3aac189", "created": "2026-10-09T15:13:09.830324Z", "modified": "2026-10-09T15:13:09.830324Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-family.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.830324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f578fe37-0d58-4434-8ed6-d44c5ed14b0b", "created": "2026-10-09T15:13:09.830803Z", "modified": "2026-10-09T15:13:09.830803Z", "relationship_type": "indicates", "source_ref": "indicator--67269e5e-e2a3-43f4-ab39-bf79d3aac189", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa51728-7aaa-4adb-9cbd-4504b22d7ae1", "created": "2026-10-09T15:13:09.83092Z", "modified": "2026-10-09T15:13:09.83092Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.83092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0c67aba-34c4-47ff-a140-af83a7cf96ca", "created": "2026-10-09T15:13:09.831419Z", "modified": "2026-10-09T15:13:09.831419Z", "relationship_type": "indicates", "source_ref": "indicator--5aa51728-7aaa-4adb-9cbd-4504b22d7ae1", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b209020-7831-4438-ab67-db291a82483f", "created": "2026-10-09T15:13:09.831543Z", "modified": "2026-10-09T15:13:09.831543Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.831543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5c64f33-a842-4e68-8e8f-ca4d5864944b", "created": "2026-10-09T15:13:09.832027Z", "modified": "2026-10-09T15:13:09.832027Z", "relationship_type": "indicates", "source_ref": "indicator--5b209020-7831-4438-ab67-db291a82483f", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13420de9-416d-4c48-a7e1-0267dfa591b3", "created": "2026-10-09T15:13:09.832147Z", "modified": "2026-10-09T15:13:09.832147Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.832147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b10962f0-2518-4145-b19f-c6cc9b1c7d0a", "created": "2026-10-09T15:13:09.832634Z", "modified": "2026-10-09T15:13:09.832634Z", "relationship_type": "indicates", "source_ref": "indicator--13420de9-416d-4c48-a7e1-0267dfa591b3", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404c2554-6a98-47cc-b4c6-748c44bbbed9", "created": "2026-10-09T15:13:09.832758Z", "modified": "2026-10-09T15:13:09.832758Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.832758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12bc3090-8cea-424d-9fbc-8efc042aa689", "created": "2026-10-09T15:13:09.833347Z", "modified": "2026-10-09T15:13:09.833347Z", "relationship_type": "indicates", "source_ref": "indicator--404c2554-6a98-47cc-b4c6-748c44bbbed9", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af715df3-4edb-405f-b640-0a01658491f7", "created": "2026-10-09T15:13:09.833475Z", "modified": "2026-10-09T15:13:09.833475Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.833475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0313b731-2cd1-4b44-96f4-588621ef5ca9", "created": "2026-10-09T15:13:09.833956Z", "modified": "2026-10-09T15:13:09.833956Z", "relationship_type": "indicates", "source_ref": "indicator--af715df3-4edb-405f-b640-0a01658491f7", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bcba35-7850-4a2a-a50e-1610d03e87c0", "created": "2026-10-09T15:13:09.834079Z", "modified": "2026-10-09T15:13:09.834079Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.834079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8751b4d-0ef6-42f2-bffe-a24cc57fac43", "created": "2026-10-09T15:13:09.834568Z", "modified": "2026-10-09T15:13:09.834568Z", "relationship_type": "indicates", "source_ref": "indicator--e1bcba35-7850-4a2a-a50e-1610d03e87c0", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fe21a1-d5f7-46d5-9558-78d1f914a1d5", "created": "2026-10-09T15:13:09.834689Z", "modified": "2026-10-09T15:13:09.834689Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.834689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--031a87a1-e9cf-4d85-ac36-744ea5e2e712", "created": "2026-10-09T15:13:09.835171Z", "modified": "2026-10-09T15:13:09.835171Z", "relationship_type": "indicates", "source_ref": "indicator--a6fe21a1-d5f7-46d5-9558-78d1f914a1d5", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fc3ee8-499e-4ab7-8704-dd95db9b9beb", "created": "2026-10-09T15:13:09.8353Z", "modified": "2026-10-09T15:13:09.8353Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.8353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37786459-b312-47ce-9433-79f866471080", "created": "2026-10-09T15:13:09.835782Z", "modified": "2026-10-09T15:13:09.835782Z", "relationship_type": "indicates", "source_ref": "indicator--76fc3ee8-499e-4ab7-8704-dd95db9b9beb", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473bb9db-2232-4099-a82f-85d25accf2b6", "created": "2026-10-09T15:13:09.835898Z", "modified": "2026-10-09T15:13:09.835898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.835898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b2624be-044a-46b4-b079-d70bfd6c0a6c", "created": "2026-10-09T15:13:09.836384Z", "modified": "2026-10-09T15:13:09.836384Z", "relationship_type": "indicates", "source_ref": "indicator--473bb9db-2232-4099-a82f-85d25accf2b6", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe9fb7f-85b3-4ea4-ba76-3a079616f815", "created": "2026-10-09T15:13:09.836506Z", "modified": "2026-10-09T15:13:09.836506Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.836506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e02beb88-4eb0-4dc6-973e-5f158baf9321", "created": "2026-10-09T15:13:09.836995Z", "modified": "2026-10-09T15:13:09.836995Z", "relationship_type": "indicates", "source_ref": "indicator--1fe9fb7f-85b3-4ea4-ba76-3a079616f815", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4bdb7e1-6991-4dd2-bfc5-db5a7413279d", "created": "2026-10-09T15:13:09.837121Z", "modified": "2026-10-09T15:13:09.837121Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.837121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa6ac2f5-87d3-4de2-94dc-19e089880f6f", "created": "2026-10-09T15:13:09.837612Z", "modified": "2026-10-09T15:13:09.837612Z", "relationship_type": "indicates", "source_ref": "indicator--f4bdb7e1-6991-4dd2-bfc5-db5a7413279d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cc78f6-9572-4bd2-972d-5ade3cfd88bc", "created": "2026-10-09T15:13:09.837733Z", "modified": "2026-10-09T15:13:09.837733Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.837733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6833898-1130-4bb2-a941-cee1f4d2f0d1", "created": "2026-10-09T15:13:09.838222Z", "modified": "2026-10-09T15:13:09.838222Z", "relationship_type": "indicates", "source_ref": "indicator--e5cc78f6-9572-4bd2-972d-5ade3cfd88bc", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce2de4c-0948-4c04-b5cc-c5b52c6a4136", "created": "2026-10-09T15:13:09.838352Z", "modified": "2026-10-09T15:13:09.838352Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.838352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57556363-799f-4c04-9dec-d9735062ab10", "created": "2026-10-09T15:13:09.838923Z", "modified": "2026-10-09T15:13:09.838923Z", "relationship_type": "indicates", "source_ref": "indicator--0ce2de4c-0948-4c04-b5cc-c5b52c6a4136", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8becc5c4-9419-4d63-9a1c-1d1007c0dc64", "created": "2026-10-09T15:13:09.839047Z", "modified": "2026-10-09T15:13:09.839047Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.839047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe467212-cee1-430d-b6b5-611954cb2b84", "created": "2026-10-09T15:13:09.839545Z", "modified": "2026-10-09T15:13:09.839545Z", "relationship_type": "indicates", "source_ref": "indicator--8becc5c4-9419-4d63-9a1c-1d1007c0dc64", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b526801f-1128-4908-bf79-8a8e65010d13", "created": "2026-10-09T15:13:09.839669Z", "modified": "2026-10-09T15:13:09.839669Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.839669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6ee3393-86c7-4f3c-84dc-6ee1dbc15137", "created": "2026-10-09T15:13:09.84015Z", "modified": "2026-10-09T15:13:09.84015Z", "relationship_type": "indicates", "source_ref": "indicator--b526801f-1128-4908-bf79-8a8e65010d13", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656c3b38-d8fc-429a-82d4-7f57fb89ef3c", "created": "2026-10-09T15:13:09.840279Z", "modified": "2026-10-09T15:13:09.840279Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.840279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3600e9e2-f322-41ec-98d0-a8568394be58", "created": "2026-10-09T15:13:09.840758Z", "modified": "2026-10-09T15:13:09.840758Z", "relationship_type": "indicates", "source_ref": "indicator--656c3b38-d8fc-429a-82d4-7f57fb89ef3c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c9e685-b019-4cb7-a7ac-eac10c9ceaf5", "created": "2026-10-09T15:13:09.840878Z", "modified": "2026-10-09T15:13:09.840878Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.840878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e89dc40d-7f66-4f99-9b31-5b41e1c5951d", "created": "2026-10-09T15:13:09.841383Z", "modified": "2026-10-09T15:13:09.841383Z", "relationship_type": "indicates", "source_ref": "indicator--05c9e685-b019-4cb7-a7ac-eac10c9ceaf5", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc72e8e1-ea87-455b-b1b5-a93bca2ae96c", "created": "2026-10-09T15:13:09.841507Z", "modified": "2026-10-09T15:13:09.841507Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.841507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--862edfb9-6fc0-41cb-b740-c7e5a098571e", "created": "2026-10-09T15:13:09.841981Z", "modified": "2026-10-09T15:13:09.841981Z", "relationship_type": "indicates", "source_ref": "indicator--bc72e8e1-ea87-455b-b1b5-a93bca2ae96c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c03434-513c-469b-9a1d-1506e7bec386", "created": "2026-10-09T15:13:09.842104Z", "modified": "2026-10-09T15:13:09.842104Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.842104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec325a1f-21be-4147-a4d7-7d20ceaaad2f", "created": "2026-10-09T15:13:09.842587Z", "modified": "2026-10-09T15:13:09.842587Z", "relationship_type": "indicates", "source_ref": "indicator--e3c03434-513c-469b-9a1d-1506e7bec386", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55afb432-f387-4748-80d0-c3cc6883eb19", "created": "2026-10-09T15:13:09.842706Z", "modified": "2026-10-09T15:13:09.842706Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobitrackapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.842706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dcc39a2-4eb7-4a81-82fd-f1367053b8a9", "created": "2026-10-09T15:13:09.84318Z", "modified": "2026-10-09T15:13:09.84318Z", "relationship_type": "indicates", "source_ref": "indicator--55afb432-f387-4748-80d0-c3cc6883eb19", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ee5b0c-0c37-421e-bca5-3c30fe5168f2", "created": "2026-10-09T15:13:09.843311Z", "modified": "2026-10-09T15:13:09.843311Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='download.mobile-tracker-free.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.843311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ead5d4dd-e262-4c47-8b35-f69c80ecbd3c", "created": "2026-10-09T15:13:09.843808Z", "modified": "2026-10-09T15:13:09.843808Z", "relationship_type": "indicates", "source_ref": "indicator--a9ee5b0c-0c37-421e-bca5-3c30fe5168f2", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7220c35-4f2c-445a-aaa5-ce811faeea2d", "created": "2026-10-09T15:13:09.843925Z", "modified": "2026-10-09T15:13:09.843925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c002b5ea002542055462150cf5b42e69b6ae34bb7b7b9247113986effe0eef91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.843925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9c43658-c88b-43c7-a545-95efa99e542e", "created": "2026-10-09T15:13:09.844878Z", "modified": "2026-10-09T15:13:09.844878Z", "relationship_type": "indicates", "source_ref": "indicator--f7220c35-4f2c-445a-aaa5-ce811faeea2d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eb0d33-5e78-4444-9845-cdc99a69ed37", "created": "2026-10-09T15:13:09.845014Z", "modified": "2026-10-09T15:13:09.845014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7e3e1434a7701c49c0d07c88ecaad13df4d03e14a58da3937d0e5e278dc624c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.845014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c36eaa56-ab14-4edd-80b0-fc635c6663c8", "created": "2026-10-09T15:13:09.845624Z", "modified": "2026-10-09T15:13:09.845624Z", "relationship_type": "indicates", "source_ref": "indicator--d5eb0d33-5e78-4444-9845-cdc99a69ed37", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa597c67-043e-4ad5-ba0c-3e91fedfa7a5", "created": "2026-10-09T15:13:09.84575Z", "modified": "2026-10-09T15:13:09.84575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbf73d0d2ad2491b7086fd13ea1378002ca0950a777172f90d320c879ce70753']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.84575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066e1d1e-9ee5-4762-83de-2d439339ed05", "created": "2026-10-09T15:13:09.846351Z", "modified": "2026-10-09T15:13:09.846351Z", "relationship_type": "indicates", "source_ref": "indicator--fa597c67-043e-4ad5-ba0c-3e91fedfa7a5", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07da601-356b-44f5-9aab-7723fd57c641", "created": "2026-10-09T15:13:09.846477Z", "modified": "2026-10-09T15:13:09.846477Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='268eea5eecf51d1013e63fbcd3c690a222366d5a73493e76f570fbf106b4d1e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.846477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33409f95-cf35-424d-9491-5691fb4ef2f8", "created": "2026-10-09T15:13:09.847066Z", "modified": "2026-10-09T15:13:09.847066Z", "relationship_type": "indicates", "source_ref": "indicator--b07da601-356b-44f5-9aab-7723fd57c641", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83b3ae7-5071-40a3-ab3b-778d80298a2d", "created": "2026-10-09T15:13:09.847186Z", "modified": "2026-10-09T15:13:09.847186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91b76ed0a4005d5cbb6e59d454d21368040093f721d07c8f5c3e2abe7ad19ddc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.847186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe09adaf-6a29-43fa-84ed-89928b7c7790", "created": "2026-10-09T15:13:09.847777Z", "modified": "2026-10-09T15:13:09.847777Z", "relationship_type": "indicates", "source_ref": "indicator--f83b3ae7-5071-40a3-ab3b-778d80298a2d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab301e2-2b9e-4a8e-93aa-1edd8b621996", "created": "2026-10-09T15:13:09.847896Z", "modified": "2026-10-09T15:13:09.847896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6db8dfaf7c15c37328fdd30aea6807a38147e1676f259059387af1bcaa1a88b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.847896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--475b7cc5-aa75-425a-a4be-5ce30770b3da", "created": "2026-10-09T15:13:09.84849Z", "modified": "2026-10-09T15:13:09.84849Z", "relationship_type": "indicates", "source_ref": "indicator--4ab301e2-2b9e-4a8e-93aa-1edd8b621996", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ce68de-627d-49fc-b2ea-656a5c918105", "created": "2026-10-09T15:13:09.848615Z", "modified": "2026-10-09T15:13:09.848615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='864afc39b095d481c983b011e85768a424027af1ceefbdcaeb552b9dcdec2592']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.848615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb202628-aefe-4da9-9c50-63d093964c0f", "created": "2026-10-09T15:13:09.8492Z", "modified": "2026-10-09T15:13:09.8492Z", "relationship_type": "indicates", "source_ref": "indicator--a2ce68de-627d-49fc-b2ea-656a5c918105", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e22c4-d610-456d-9077-31a6c6f35e98", "created": "2026-10-09T15:13:09.849337Z", "modified": "2026-10-09T15:13:09.849337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c3ad1cdef70ce9964f71ae654b3f1ddabc422b2c8bc50048b7c7b1190584bac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.849337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de7f11e6-e2fc-4d12-9c8b-f15a343fbec9", "created": "2026-10-09T15:13:09.849928Z", "modified": "2026-10-09T15:13:09.849928Z", "relationship_type": "indicates", "source_ref": "indicator--fa8e22c4-d610-456d-9077-31a6c6f35e98", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d43d406-01a8-4248-be5e-777f8bc5ffb4", "created": "2026-10-09T15:13:09.850049Z", "modified": "2026-10-09T15:13:09.850049Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1c55e0d5b14d535b09ba8fa7f507a88ef8f08120a49aa333ca4d4a2d8f918c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.850049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50101cda-02e0-4f70-ab51-c923a19a2ecc", "created": "2026-10-09T15:13:09.850662Z", "modified": "2026-10-09T15:13:09.850662Z", "relationship_type": "indicates", "source_ref": "indicator--5d43d406-01a8-4248-be5e-777f8bc5ffb4", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34caec8c-f744-4670-b092-69f79bfeca6c", "created": "2026-10-09T15:13:09.850787Z", "modified": "2026-10-09T15:13:09.850787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a1ce22914b95014469ff80e3d30bf570bb75af97db933c21561767789632859']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.850787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff2e9722-82fd-421b-bad3-c786da843f90", "created": "2026-10-09T15:13:09.851484Z", "modified": "2026-10-09T15:13:09.851484Z", "relationship_type": "indicates", "source_ref": "indicator--34caec8c-f744-4670-b092-69f79bfeca6c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b584423-8014-4596-a625-aa6868c045e3", "created": "2026-10-09T15:13:09.85161Z", "modified": "2026-10-09T15:13:09.85161Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4f6d8c0bb4149f2e494caf6ad9f9d120068bc7f33962b3746e89171d1de18c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.85161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1625da14-9fa2-4815-b142-02afb52d1b98", "created": "2026-10-09T15:13:09.852194Z", "modified": "2026-10-09T15:13:09.852194Z", "relationship_type": "indicates", "source_ref": "indicator--2b584423-8014-4596-a625-aa6868c045e3", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24211d55-95e9-4ddf-9813-1da747f94189", "created": "2026-10-09T15:13:09.852328Z", "modified": "2026-10-09T15:13:09.852328Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11880d737423d29ff7412988f48ba450d32c5be76d264b60e3f4fff4d739c1a7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.852328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3166f495-a09c-434b-96f7-7441ec2639c1", "created": "2026-10-09T15:13:09.852913Z", "modified": "2026-10-09T15:13:09.852913Z", "relationship_type": "indicates", "source_ref": "indicator--24211d55-95e9-4ddf-9813-1da747f94189", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf59678-c655-48ac-9d4d-b81d4be74977", "created": "2026-10-09T15:13:09.853034Z", "modified": "2026-10-09T15:13:09.853034Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a0e47181a540418be8c1d20b295a77768ac5e83f7dccab3ac7f26e30440d1af5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.853034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7d399d9-0b50-4b95-a036-8f07f6969a2a", "created": "2026-10-09T15:13:09.853619Z", "modified": "2026-10-09T15:13:09.853619Z", "relationship_type": "indicates", "source_ref": "indicator--dbf59678-c655-48ac-9d4d-b81d4be74977", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1ee9ed-78f6-4b1c-93e0-33294d0eae73", "created": "2026-10-09T15:13:09.853741Z", "modified": "2026-10-09T15:13:09.853741Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='148032ea08c82329bb4e8faaf0d0eacf161e818286f7d0eacacfa77bcb53c48b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.853741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa292183-ad0e-4629-a8c7-ed399e75faed", "created": "2026-10-09T15:13:09.85433Z", "modified": "2026-10-09T15:13:09.85433Z", "relationship_type": "indicates", "source_ref": "indicator--7f1ee9ed-78f6-4b1c-93e0-33294d0eae73", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2671b59c-09e5-4f2e-b3ed-db8b9c5639f1", "created": "2026-10-09T15:13:09.854452Z", "modified": "2026-10-09T15:13:09.854452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='88e5fc20c108a3a7486eaad3a79feb73bbf92d614bf55fc005fc0a995ba34afd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.854452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42e2025c-35f4-4ca8-83bc-574bb9965bf9", "created": "2026-10-09T15:13:09.855036Z", "modified": "2026-10-09T15:13:09.855036Z", "relationship_type": "indicates", "source_ref": "indicator--2671b59c-09e5-4f2e-b3ed-db8b9c5639f1", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599d5d80-7ea6-4075-9bf2-387f15b9c67b", "created": "2026-10-09T15:13:09.855155Z", "modified": "2026-10-09T15:13:09.855155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da8a66f41d052f78d3a7045776728d3db899a14551cde89c6cf9900d59971ef7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.855155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f505457-bddf-4f84-a45d-725b27d4d8de", "created": "2026-10-09T15:13:09.855749Z", "modified": "2026-10-09T15:13:09.855749Z", "relationship_type": "indicates", "source_ref": "indicator--599d5d80-7ea6-4075-9bf2-387f15b9c67b", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a41de6b-8c32-4315-9f9a-4e7ee90dd4ab", "created": "2026-10-09T15:13:09.855873Z", "modified": "2026-10-09T15:13:09.855873Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2de500618c8ba340dbbe615cef8df65d9864e8b6bee7fa78c16421a38b1bd185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.855873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87fa8de1-17d3-43d1-972d-e2e37a81990b", "created": "2026-10-09T15:13:09.856465Z", "modified": "2026-10-09T15:13:09.856465Z", "relationship_type": "indicates", "source_ref": "indicator--0a41de6b-8c32-4315-9f9a-4e7ee90dd4ab", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72204406-cfc7-4b78-9edd-012e3e21f869", "created": "2026-10-09T15:13:09.856591Z", "modified": "2026-10-09T15:13:09.856591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d72f5e0aa70f6968bde4d36befbf64624d66200b6f7c12443b9055a2bfb48cf6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.856591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ae5bc1b-d403-4d4a-b26b-b3c1420106b3", "created": "2026-10-09T15:13:09.857171Z", "modified": "2026-10-09T15:13:09.857171Z", "relationship_type": "indicates", "source_ref": "indicator--72204406-cfc7-4b78-9edd-012e3e21f869", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce755ff8-394e-4718-8c39-bbbec7df001a", "created": "2026-10-09T15:13:09.857302Z", "modified": "2026-10-09T15:13:09.857302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e12027382b28c141e0358a6796d3d9dbfb0fc850aa60f656f9864c95a76c412']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.857302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02f4d2ec-dea7-489a-96f2-5f1c988598f2", "created": "2026-10-09T15:13:09.857989Z", "modified": "2026-10-09T15:13:09.857989Z", "relationship_type": "indicates", "source_ref": "indicator--ce755ff8-394e-4718-8c39-bbbec7df001a", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6871be00-77fb-4c94-be9e-dd9b9aaf1710", "created": "2026-10-09T15:13:09.858111Z", "modified": "2026-10-09T15:13:09.858111Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5cd3375434ab83a9edea2e4828f938cbf5790786dc786074c627e5fb74f8ba3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.858111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e7cbfe9-619f-4be2-8ee7-b7ac031f766f", "created": "2026-10-09T15:13:09.858715Z", "modified": "2026-10-09T15:13:09.858715Z", "relationship_type": "indicates", "source_ref": "indicator--6871be00-77fb-4c94-be9e-dd9b9aaf1710", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79de8390-9bd3-49bf-844f-ebffb066125d", "created": "2026-10-09T15:13:09.858839Z", "modified": "2026-10-09T15:13:09.858839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc4efa3286518427ea1e14e1b614783b044e59ffa4e00abf609fef1f9f96b054']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.858839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--092900d0-0009-4c46-9993-f49d92f8c025", "created": "2026-10-09T15:13:09.859436Z", "modified": "2026-10-09T15:13:09.859436Z", "relationship_type": "indicates", "source_ref": "indicator--79de8390-9bd3-49bf-844f-ebffb066125d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f81ff3-67df-4c00-8c65-979791515a74", "created": "2026-10-09T15:13:09.85956Z", "modified": "2026-10-09T15:13:09.85956Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='585ff51e2cb9cd41dd0c0c931f4804ab475cc73cf1aea718883d0e78a891f946']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.85956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ffc3db6-f8e8-4c99-bdbd-91757eba3f7c", "created": "2026-10-09T15:13:09.86015Z", "modified": "2026-10-09T15:13:09.86015Z", "relationship_type": "indicates", "source_ref": "indicator--d6f81ff3-67df-4c00-8c65-979791515a74", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a34f5a3-53d8-480e-9e14-abe3f8cc6756", "created": "2026-10-09T15:13:09.860282Z", "modified": "2026-10-09T15:13:09.860282Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.860282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80a75671-4727-4db3-9e66-b1e83db45f75", "created": "2026-10-09T15:13:09.860866Z", "modified": "2026-10-09T15:13:09.860866Z", "relationship_type": "indicates", "source_ref": "indicator--7a34f5a3-53d8-480e-9e14-abe3f8cc6756", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3149af99-e93c-4a1b-9fbd-be9600c5c65c", "created": "2026-10-09T15:13:09.860983Z", "modified": "2026-10-09T15:13:09.860983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='362affec49bd9735b781cc11a6984ac1dfc018e35a26ca33cde4a64256a4675a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.860983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98ecc7e5-4b2f-46a7-88ac-030924305ccd", "created": "2026-10-09T15:13:09.861572Z", "modified": "2026-10-09T15:13:09.861572Z", "relationship_type": "indicates", "source_ref": "indicator--3149af99-e93c-4a1b-9fbd-be9600c5c65c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58879b1a-6b5f-4fa0-8957-b19c8bbf53c1", "created": "2026-10-09T15:13:09.861692Z", "modified": "2026-10-09T15:13:09.861692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fdb988c774b0499099d1818d8ed5a8b2b9d27880b885211e9a7dbf5c2fe32a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.861692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df95e43a-b61b-4d9e-9def-71da7729a27a", "created": "2026-10-09T15:13:09.86228Z", "modified": "2026-10-09T15:13:09.86228Z", "relationship_type": "indicates", "source_ref": "indicator--58879b1a-6b5f-4fa0-8957-b19c8bbf53c1", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90d2044-93e9-45cf-ba88-c0e504088417", "created": "2026-10-09T15:13:09.8624Z", "modified": "2026-10-09T15:13:09.8624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08cd793840d56aac534f46fd468cbd6e5209116c006ff046f58ee3018d6fd17d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.8624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4030d0b-4c29-4026-8870-a47dcee8cd06", "created": "2026-10-09T15:13:09.86298Z", "modified": "2026-10-09T15:13:09.86298Z", "relationship_type": "indicates", "source_ref": "indicator--c90d2044-93e9-45cf-ba88-c0e504088417", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb71253f-1ad4-42e1-a50d-4b90b1997544", "created": "2026-10-09T15:13:09.863102Z", "modified": "2026-10-09T15:13:09.863102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7ed24a3142962727a2e215c284777a709fd38f3dc6006cd7a802d95f1f14cc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.863102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02fcdb17-ab40-4318-9f0d-187ac74c27a6", "created": "2026-10-09T15:13:09.863692Z", "modified": "2026-10-09T15:13:09.863692Z", "relationship_type": "indicates", "source_ref": "indicator--eb71253f-1ad4-42e1-a50d-4b90b1997544", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e2d0e0-50b0-4d9d-ba9a-70d4b41fa557", "created": "2026-10-09T15:13:09.863816Z", "modified": "2026-10-09T15:13:09.863816Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='a.tck.lvmchi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.863816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58f7b6d0-1d1e-4020-8e82-c619862c75b1", "created": "2026-10-09T15:13:09.864379Z", "modified": "2026-10-09T15:13:09.864379Z", "relationship_type": "indicates", "source_ref": "indicator--56e2d0e0-50b0-4d9d-ba9a-70d4b41fa557", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2820a87-459c-4655-8de0-f5df7426f1fb", "created": "2026-10-09T15:13:09.864505Z", "modified": "2026-10-09T15:13:09.864505Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.androdid.inteernet.aa21111227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.864505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f17c256-e8d0-49f0-8408-3a47e81ee1fb", "created": "2026-10-09T15:13:09.864975Z", "modified": "2026-10-09T15:13:09.864975Z", "relationship_type": "indicates", "source_ref": "indicator--f2820a87-459c-4655-8de0-f5df7426f1fb", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c287dfdb-f59d-4572-a786-c4cbb4eb9a01", "created": "2026-10-09T15:13:09.865097Z", "modified": "2026-10-09T15:13:09.865097Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.jyotin.ct']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.865097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64d1537d-4c33-4fdf-a425-23dd45aa2901", "created": "2026-10-09T15:13:09.865555Z", "modified": "2026-10-09T15:13:09.865555Z", "relationship_type": "indicates", "source_ref": "indicator--c287dfdb-f59d-4572-a786-c4cbb4eb9a01", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03afe86e-a1ac-406d-b96f-c5573026de54", "created": "2026-10-09T15:13:09.865675Z", "modified": "2026-10-09T15:13:09.865675Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lrvciyti.unrxnfig']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.865675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d186b6e2-d69e-44d6-b4b1-fd422546bfa7", "created": "2026-10-09T15:13:09.866129Z", "modified": "2026-10-09T15:13:09.866129Z", "relationship_type": "indicates", "source_ref": "indicator--03afe86e-a1ac-406d-b96f-c5573026de54", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5b1c48-6618-415f-b470-38ecbe089607", "created": "2026-10-09T15:13:09.866248Z", "modified": "2026-10-09T15:13:09.866248Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.m.service.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.866248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7062f8b-8a57-4242-9e60-ab237c4f8b8b", "created": "2026-10-09T15:13:09.866718Z", "modified": "2026-10-09T15:13:09.866718Z", "relationship_type": "indicates", "source_ref": "indicator--9c5b1c48-6618-415f-b470-38ecbe089607", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ec3624-4b60-4b4b-b3eb-18c4e8e1ca7b", "created": "2026-10-09T15:13:09.86684Z", "modified": "2026-10-09T15:13:09.86684Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mob.service.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.86684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--595b6bd6-2e81-43a2-8c87-14e44c877b87", "created": "2026-10-09T15:13:09.867306Z", "modified": "2026-10-09T15:13:09.867306Z", "relationship_type": "indicates", "source_ref": "indicator--94ec3624-4b60-4b4b-b3eb-18c4e8e1ca7b", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3352f8-b0d7-42bb-b75b-7f59b81fa030", "created": "2026-10-09T15:13:09.867432Z", "modified": "2026-10-09T15:13:09.867432Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.gps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.867432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--997dae0c-6838-4193-b841-ed660224b877", "created": "2026-10-09T15:13:09.867883Z", "modified": "2026-10-09T15:13:09.867883Z", "relationship_type": "indicates", "source_ref": "indicator--2d3352f8-b0d7-42bb-b75b-7f59b81fa030", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3b8295-25df-4856-9a61-1b34c121d053", "created": "2026-10-09T15:13:09.868003Z", "modified": "2026-10-09T15:13:09.868003Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.loc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.868003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1000b63-4d1b-4999-b0e1-395053d089db", "created": "2026-10-09T15:13:09.868471Z", "modified": "2026-10-09T15:13:09.868471Z", "relationship_type": "indicates", "source_ref": "indicator--fc3b8295-25df-4856-9a61-1b34c121d053", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed15219-5326-4c07-beea-37df908f4dec", "created": "2026-10-09T15:13:09.868595Z", "modified": "2026-10-09T15:13:09.868595Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiletracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.868595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fb502b6-87e0-4e13-99a3-e133c87b3d54", "created": "2026-10-09T15:13:09.869054Z", "modified": "2026-10-09T15:13:09.869054Z", "relationship_type": "indicates", "source_ref": "indicator--6ed15219-5326-4c07-beea-37df908f4dec", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c627f6a9-cf74-4159-ae35-872f3f1686da", "created": "2026-10-09T15:13:09.869172Z", "modified": "2026-10-09T15:13:09.869172Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiletrackerfree.secondapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.869172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afb08b76-7116-44df-9548-d70fc697bd90", "created": "2026-10-09T15:13:09.86975Z", "modified": "2026-10-09T15:13:09.86975Z", "relationship_type": "indicates", "source_ref": "indicator--c627f6a9-cf74-4159-ae35-872f3f1686da", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd59e5bb-99d3-4272-94fc-bca85838c627", "created": "2026-10-09T15:13:09.869873Z", "modified": "2026-10-09T15:13:09.869873Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiletrackerfree.www']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.869873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c774737-9660-424a-8a84-69e4859fbac1", "created": "2026-10-09T15:13:09.870344Z", "modified": "2026-10-09T15:13:09.870344Z", "relationship_type": "indicates", "source_ref": "indicator--fd59e5bb-99d3-4272-94fc-bca85838c627", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb7151c-de36-4df6-9e59-b759995477da", "created": "2026-10-09T15:13:09.870462Z", "modified": "2026-10-09T15:13:09.870462Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mtf.d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.870462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96ddc6e1-88cf-4985-9ade-294c62380ae4", "created": "2026-10-09T15:13:09.870899Z", "modified": "2026-10-09T15:13:09.870899Z", "relationship_type": "indicates", "source_ref": "indicator--dbb7151c-de36-4df6-9e59-b759995477da", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00258ed5-cf95-4483-b47e-337a552a97f6", "created": "2026-10-09T15:13:09.871016Z", "modified": "2026-10-09T15:13:09.871016Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.netowrk.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.871016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d860bf23-3f91-4060-bbeb-4ad1e9c056f3", "created": "2026-10-09T15:13:09.871482Z", "modified": "2026-10-09T15:13:09.871482Z", "relationship_type": "indicates", "source_ref": "indicator--00258ed5-cf95-4483-b47e-337a552a97f6", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a70e45a-631d-4055-be44-25c8f0974582", "created": "2026-10-09T15:13:09.871611Z", "modified": "2026-10-09T15:13:09.871611Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.services.phone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.871611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--567838b7-ea62-437a-b74b-af5b54e1a4cf", "created": "2026-10-09T15:13:09.872068Z", "modified": "2026-10-09T15:13:09.872068Z", "relationship_type": "indicates", "source_ref": "indicator--8a70e45a-631d-4055-be44-25c8f0974582", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61706aa5-54ed-43ab-9a53-2aad3d5fcf49", "created": "2026-10-09T15:13:09.872191Z", "modified": "2026-10-09T15:13:09.872191Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='g.google.llc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.872191Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7afae62-c2f0-4957-a5f6-53c062f42665", "created": "2026-10-09T15:13:09.872648Z", "modified": "2026-10-09T15:13:09.872648Z", "relationship_type": "indicates", "source_ref": "indicator--61706aa5-54ed-43ab-9a53-2aad3d5fcf49", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946ab64a-c48c-43e6-b9f0-bb051b1f15f3", "created": "2026-10-09T15:13:09.872768Z", "modified": "2026-10-09T15:13:09.872768Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.mob.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.872768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff706d79-7fe7-43b2-8561-3671d96eef7d", "created": "2026-10-09T15:13:09.873208Z", "modified": "2026-10-09T15:13:09.873208Z", "relationship_type": "indicates", "source_ref": "indicator--946ab64a-c48c-43e6-b9f0-bb051b1f15f3", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8188f9f1-24cf-4245-b44c-e2f94929da28", "created": "2026-10-09T15:13:09.87334Z", "modified": "2026-10-09T15:13:09.87334Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.mob.service2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.87334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d76d23a8-1e1b-47ba-abf2-f7f57dd2d419", "created": "2026-10-09T15:13:09.873793Z", "modified": "2026-10-09T15:13:09.873793Z", "relationship_type": "indicates", "source_ref": "indicator--8188f9f1-24cf-4245-b44c-e2f94929da28", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8deba8dc-18e5-4a19-8c84-79955d8b0de6", "created": "2026-10-09T15:13:09.873913Z", "modified": "2026-10-09T15:13:09.873913Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.phone.control2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.873913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e353f00-0952-47fd-906b-b3e4a59da595", "created": "2026-10-09T15:13:09.87438Z", "modified": "2026-10-09T15:13:09.87438Z", "relationship_type": "indicates", "source_ref": "indicator--8deba8dc-18e5-4a19-8c84-79955d8b0de6", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4b9ade-1d5f-4d9b-b79f-2a30301de746", "created": "2026-10-09T15:13:09.874502Z", "modified": "2026-10-09T15:13:09.874502Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.protect.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.874502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9c4eef8-1273-4d76-8563-5302511ac0d9", "created": "2026-10-09T15:13:09.875063Z", "modified": "2026-10-09T15:13:09.875063Z", "relationship_type": "indicates", "source_ref": "indicator--6f4b9ade-1d5f-4d9b-b79f-2a30301de746", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe9d71e-a1cd-4d67-8839-96a1045f8699", "created": "2026-10-09T15:13:09.87519Z", "modified": "2026-10-09T15:13:09.87519Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.protect.parental']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.87519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd0bb889-212f-4b65-8656-5ff6b61da2f2", "created": "2026-10-09T15:13:09.875667Z", "modified": "2026-10-09T15:13:09.875667Z", "relationship_type": "indicates", "source_ref": "indicator--efe9d71e-a1cd-4d67-8839-96a1045f8699", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b8aae2-39ee-415f-8e49-93f4ddf67ee7", "created": "2026-10-09T15:13:09.87579Z", "modified": "2026-10-09T15:13:09.87579Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.secu.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.87579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d08184d7-15ef-4cb1-abe0-fdfdce5d03ae", "created": "2026-10-09T15:13:09.876249Z", "modified": "2026-10-09T15:13:09.876249Z", "relationship_type": "indicates", "source_ref": "indicator--e6b8aae2-39ee-415f-8e49-93f4ddf67ee7", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4537e385-68f2-420b-9aaf-1d427be3006a", "created": "2026-10-09T15:13:09.876382Z", "modified": "2026-10-09T15:13:09.876382Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.security.parental']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.876382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab3d5c92-b3da-46a4-9f74-f947d9ce86b1", "created": "2026-10-09T15:13:09.876843Z", "modified": "2026-10-09T15:13:09.876843Z", "relationship_type": "indicates", "source_ref": "indicator--4537e385-68f2-420b-9aaf-1d427be3006a", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3406aae1-34d5-40f0-b6b5-e9d417f15dab", "created": "2026-10-09T15:13:09.876962Z", "modified": "2026-10-09T15:13:09.876962Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mob.protect.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.876962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66ea8990-9511-49dc-941a-a5c9e8eef538", "created": "2026-10-09T15:13:09.877433Z", "modified": "2026-10-09T15:13:09.877433Z", "relationship_type": "indicates", "source_ref": "indicator--3406aae1-34d5-40f0-b6b5-e9d417f15dab", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1a5966-b007-475d-af83-ef1ff2c6bf04", "created": "2026-10-09T15:13:09.877555Z", "modified": "2026-10-09T15:13:09.877555Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mob.service.parental2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.877555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68940593-9ff7-4bb7-8b59-8948e3b6f776", "created": "2026-10-09T15:13:09.878021Z", "modified": "2026-10-09T15:13:09.878021Z", "relationship_type": "indicates", "source_ref": "indicator--1d1a5966-b007-475d-af83-ef1ff2c6bf04", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc285b9-6351-4fa8-bcd7-2faf88e50111", "created": "2026-10-09T15:13:09.878138Z", "modified": "2026-10-09T15:13:09.878138Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.controlparental2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.878138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c963f580-0481-4767-8d33-4fd09f1ed22d", "created": "2026-10-09T15:13:09.878606Z", "modified": "2026-10-09T15:13:09.878606Z", "relationship_type": "indicates", "source_ref": "indicator--8dc285b9-6351-4fa8-bcd7-2faf88e50111", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d90cd81-9498-4835-a6cf-0896f5c0bd8b", "created": "2026-10-09T15:13:09.878726Z", "modified": "2026-10-09T15:13:09.878726Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2021']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.878726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2080a93b-8553-44c3-852b-1689f888377a", "created": "2026-10-09T15:13:09.879197Z", "modified": "2026-10-09T15:13:09.879197Z", "relationship_type": "indicates", "source_ref": "indicator--9d90cd81-9498-4835-a6cf-0896f5c0bd8b", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468ecf3f-fae8-4456-8408-2ff3426e4ccd", "created": "2026-10-09T15:13:09.879326Z", "modified": "2026-10-09T15:13:09.879326Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2022']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.879326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c7e2c67-3a0a-4d9f-828f-a3071cc882cc", "created": "2026-10-09T15:13:09.879798Z", "modified": "2026-10-09T15:13:09.879798Z", "relationship_type": "indicates", "source_ref": "indicator--468ecf3f-fae8-4456-8408-2ff3426e4ccd", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de555688-7a0e-455d-bbf9-d73e371ec5b4", "created": "2026-10-09T15:13:09.879918Z", "modified": "2026-10-09T15:13:09.879918Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2023']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.879918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76b18192-af6a-4d82-8b34-d52b38e7100c", "created": "2026-10-09T15:13:09.880473Z", "modified": "2026-10-09T15:13:09.880473Z", "relationship_type": "indicates", "source_ref": "indicator--de555688-7a0e-455d-bbf9-d73e371ec5b4", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9c0c6e-ba3d-43d0-83bf-50a0351a5b1a", "created": "2026-10-09T15:13:09.880596Z", "modified": "2026-10-09T15:13:09.880596Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.880596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3967ae8a-2179-48d1-a4e8-5a49d738fbbe", "created": "2026-10-09T15:13:09.88106Z", "modified": "2026-10-09T15:13:09.88106Z", "relationship_type": "indicates", "source_ref": "indicator--4e9c0c6e-ba3d-43d0-83bf-50a0351a5b1a", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54aa9a5-0b38-423e-955a-2bf95c1edc31", "created": "2026-10-09T15:13:09.881183Z", "modified": "2026-10-09T15:13:09.881183Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.parental2021']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.881183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d336ff3-11e4-4b83-9323-3737b08504a5", "created": "2026-10-09T15:13:09.881652Z", "modified": "2026-10-09T15:13:09.881652Z", "relationship_type": "indicates", "source_ref": "indicator--e54aa9a5-0b38-423e-955a-2bf95c1edc31", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b16bde-c362-40a3-b957-76f033b1f1b1", "created": "2026-10-09T15:13:09.881771Z", "modified": "2026-10-09T15:13:09.881771Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.protect.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.881771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b7f2335-c5f8-46e6-8222-451c929163c6", "created": "2026-10-09T15:13:09.882231Z", "modified": "2026-10-09T15:13:09.882231Z", "relationship_type": "indicates", "source_ref": "indicator--73b16bde-c362-40a3-b957-76f033b1f1b1", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f44106-adf4-476a-840a-3cd3aaa0033c", "created": "2026-10-09T15:13:09.882406Z", "modified": "2026-10-09T15:13:09.882406Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.protect.children2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.882406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91100a37-18c9-4d06-800b-99497bba9a59", "created": "2026-10-09T15:13:09.882917Z", "modified": "2026-10-09T15:13:09.882917Z", "relationship_type": "indicates", "source_ref": "indicator--06f44106-adf4-476a-840a-3cd3aaa0033c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ec8196-4b65-4b7c-bab2-201263d0912e", "created": "2026-10-09T15:13:09.88304Z", "modified": "2026-10-09T15:13:09.88304Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='security.mobile.parental']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.88304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab4626fd-9681-4264-b257-3dbf4c9c74a6", "created": "2026-10-09T15:13:09.883517Z", "modified": "2026-10-09T15:13:09.883517Z", "relationship_type": "indicates", "source_ref": "indicator--53ec8196-4b65-4b7c-bab2-201263d0912e", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4bc7b27-12d3-4f4c-a6a3-de2ff9bb76d4", "created": "2026-10-09T15:13:09.88364Z", "modified": "2026-10-09T15:13:09.88364Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='service.download.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.88364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0090b92b-33cc-42d6-9238-b4e352a3e97b", "created": "2026-10-09T15:13:09.884098Z", "modified": "2026-10-09T15:13:09.884098Z", "relationship_type": "indicates", "source_ref": "indicator--c4bc7b27-12d3-4f4c-a6a3-de2ff9bb76d4", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f275a218-9f53-4220-9883-3eb1c5cf6829", "created": "2026-10-09T15:13:09.884222Z", "modified": "2026-10-09T15:13:09.884222Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tracker.mob.gps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.884222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3051d99c-69e8-4c1e-baef-367333c0afb4", "created": "2026-10-09T15:13:09.884685Z", "modified": "2026-10-09T15:13:09.884685Z", "relationship_type": "indicates", "source_ref": "indicator--f275a218-9f53-4220-9883-3eb1c5cf6829", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73bc8ee-d5aa-4412-8fc1-de17a7e962ce", "created": "2026-10-09T15:13:09.884828Z", "modified": "2026-10-09T15:13:09.884828Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='yogaworkouts.dailyyoga.yogafitness']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.884828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03b14e27-5482-4826-9064-cfcd862c0753", "created": "2026-10-09T15:13:09.885317Z", "modified": "2026-10-09T15:13:09.885317Z", "relationship_type": "indicates", "source_ref": "indicator--c73bc8ee-d5aa-4412-8fc1-de17a7e962ce", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59817a6c-d21f-489e-8ad4-cf21f408e0dd", "created": "2026-10-09T15:13:09.885438Z", "modified": "2026-10-09T15:13:09.885438Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.get.mtf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.885438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c69077b-f90f-41ed-89d8-21847aef58fd", "created": "2026-10-09T15:13:09.885988Z", "modified": "2026-10-09T15:13:09.885988Z", "relationship_type": "indicates", "source_ref": "indicator--59817a6c-d21f-489e-8ad4-cf21f408e0dd", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0519297b-ab0e-4a62-9072-d7f29f4a581f", "created": "2026-10-09T15:13:09.886117Z", "modified": "2026-10-09T15:13:09.886117Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mtf.download']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.886117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35bba923-eb0e-4ab0-8195-f8000657673f", "created": "2026-10-09T15:13:09.886592Z", "modified": "2026-10-09T15:13:09.886592Z", "relationship_type": "indicates", "source_ref": "indicator--0519297b-ab0e-4a62-9072-d7f29f4a581f", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425abd31-4814-4035-a77d-ad2a8a2fea31", "created": "2026-10-09T15:13:09.886714Z", "modified": "2026-10-09T15:13:09.886714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.protect.download']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.886714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81309fc9-afa7-485d-8e3f-12b272b86690", "created": "2026-10-09T15:13:09.887169Z", "modified": "2026-10-09T15:13:09.887169Z", "relationship_type": "indicates", "source_ref": "indicator--425abd31-4814-4035-a77d-ad2a8a2fea31", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487a2759-2ad9-435d-afb9-9d4d13c60946", "created": "2026-10-09T15:13:09.887302Z", "modified": "2026-10-09T15:13:09.887302Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='021A3F097EDA780798DF5ECB16EF338C08236847']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.887302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea139df2-a6de-4e9a-ab03-6364861efab8", "created": "2026-10-09T15:13:09.887862Z", "modified": "2026-10-09T15:13:09.887862Z", "relationship_type": "indicates", "source_ref": "indicator--487a2759-2ad9-435d-afb9-9d4d13c60946", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3361f535-c541-4663-9b39-d8f96a2d6d24", "created": "2026-10-09T15:13:09.887989Z", "modified": "2026-10-09T15:13:09.887989Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0568E0400308CBFC58E11A324EA233F5B2E923BF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.887989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90eac734-7278-405b-8272-5a32b88ffb01", "created": "2026-10-09T15:13:09.888541Z", "modified": "2026-10-09T15:13:09.888541Z", "relationship_type": "indicates", "source_ref": "indicator--3361f535-c541-4663-9b39-d8f96a2d6d24", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9814e427-1b8e-4030-b926-8d1c067b3d54", "created": "2026-10-09T15:13:09.888662Z", "modified": "2026-10-09T15:13:09.888662Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='09DCBFDB7C7262F143089C5493435AB07564FD67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.888662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59a38f37-87cb-4d0f-8427-4e835ac0d1de", "created": "2026-10-09T15:13:09.889202Z", "modified": "2026-10-09T15:13:09.889202Z", "relationship_type": "indicates", "source_ref": "indicator--9814e427-1b8e-4030-b926-8d1c067b3d54", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79d8689-b337-4ad9-ac43-97ceb165d634", "created": "2026-10-09T15:13:09.88933Z", "modified": "2026-10-09T15:13:09.88933Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0FB6108D34289681BA0181ED9A4350514EB07665']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.88933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97248d9e-46a2-492d-9819-64f3a4879364", "created": "2026-10-09T15:13:09.889872Z", "modified": "2026-10-09T15:13:09.889872Z", "relationship_type": "indicates", "source_ref": "indicator--b79d8689-b337-4ad9-ac43-97ceb165d634", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1fe571-9511-407b-a6a3-c468a76e67e0", "created": "2026-10-09T15:13:09.889994Z", "modified": "2026-10-09T15:13:09.889994Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1128939E0D8B8BAEAB14C41AEBFAA100C319AD8F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.889994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5361d245-1b79-420b-93e6-04a8f5a102c2", "created": "2026-10-09T15:13:09.890536Z", "modified": "2026-10-09T15:13:09.890536Z", "relationship_type": "indicates", "source_ref": "indicator--df1fe571-9511-407b-a6a3-c468a76e67e0", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cab0b9-b6d2-477f-8b7b-af9603efa061", "created": "2026-10-09T15:13:09.890657Z", "modified": "2026-10-09T15:13:09.890657Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='16254E7CBDFEC82B6CCE599DFCE6A6E84CF25504']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.890657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67ac485b-3684-466f-abb0-1592027ed930", "created": "2026-10-09T15:13:09.891198Z", "modified": "2026-10-09T15:13:09.891198Z", "relationship_type": "indicates", "source_ref": "indicator--80cab0b9-b6d2-477f-8b7b-af9603efa061", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa83767-03c9-453e-9c1c-c3b399c131d1", "created": "2026-10-09T15:13:09.891331Z", "modified": "2026-10-09T15:13:09.891331Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='29FFFE437675D2B55512953759C40776E547592D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.891331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04b2af12-c971-4244-8c9b-28c3d7b86947", "created": "2026-10-09T15:13:09.89198Z", "modified": "2026-10-09T15:13:09.89198Z", "relationship_type": "indicates", "source_ref": "indicator--0aa83767-03c9-453e-9c1c-c3b399c131d1", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69012c4-d690-419a-95ad-5eb50ee03890", "created": "2026-10-09T15:13:09.892101Z", "modified": "2026-10-09T15:13:09.892101Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2F033070A8CD93CEAC60F9E203BA33C9A9A3D226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.892101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9252336-24cc-47f5-9484-dbb858b9f4b4", "created": "2026-10-09T15:13:09.892652Z", "modified": "2026-10-09T15:13:09.892652Z", "relationship_type": "indicates", "source_ref": "indicator--a69012c4-d690-419a-95ad-5eb50ee03890", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c157c7-7dee-4da5-99bf-4a60d035fdd0", "created": "2026-10-09T15:13:09.892774Z", "modified": "2026-10-09T15:13:09.892774Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35CD797D1736484786152A231920575FABC5C12A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.892774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4179d6b3-cbd7-47b3-ba35-dca0757f894a", "created": "2026-10-09T15:13:09.893327Z", "modified": "2026-10-09T15:13:09.893327Z", "relationship_type": "indicates", "source_ref": "indicator--46c157c7-7dee-4da5-99bf-4a60d035fdd0", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec02d0c-4f61-457f-9732-6fc1f1189bc7", "created": "2026-10-09T15:13:09.893451Z", "modified": "2026-10-09T15:13:09.893451Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='377223C40330F7925BB238E3A2AC6E1BE1A05749']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.893451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35772eae-2c9b-41a5-9142-49e86cb0e1ce", "created": "2026-10-09T15:13:09.893991Z", "modified": "2026-10-09T15:13:09.893991Z", "relationship_type": "indicates", "source_ref": "indicator--fec02d0c-4f61-457f-9732-6fc1f1189bc7", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08954b2-d882-4440-b5e2-93ee315b2f9e", "created": "2026-10-09T15:13:09.894109Z", "modified": "2026-10-09T15:13:09.894109Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3935E474CD6EDACB19F24192809B337D376656F6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.894109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--148d6857-7889-4440-b06b-9983ca5a2710", "created": "2026-10-09T15:13:09.894654Z", "modified": "2026-10-09T15:13:09.894654Z", "relationship_type": "indicates", "source_ref": "indicator--c08954b2-d882-4440-b5e2-93ee315b2f9e", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1258f40-8f77-473d-bb41-1c82bdd6d96a", "created": "2026-10-09T15:13:09.894776Z", "modified": "2026-10-09T15:13:09.894776Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='457D2470CA3E635178D224C14C0D743B7C7F9F80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.894776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2789b1ed-d4f8-444e-b12f-e4e036d581de", "created": "2026-10-09T15:13:09.895319Z", "modified": "2026-10-09T15:13:09.895319Z", "relationship_type": "indicates", "source_ref": "indicator--c1258f40-8f77-473d-bb41-1c82bdd6d96a", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdce13c5-6254-4cb7-bea2-e4ea8ab882aa", "created": "2026-10-09T15:13:09.895439Z", "modified": "2026-10-09T15:13:09.895439Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='57178BA7BE0677C3143C24362FD35A9CF0E311A8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.895439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ffeafe9-ce00-4331-bf10-b40cb03ff2b3", "created": "2026-10-09T15:13:09.895982Z", "modified": "2026-10-09T15:13:09.895982Z", "relationship_type": "indicates", "source_ref": "indicator--cdce13c5-6254-4cb7-bea2-e4ea8ab882aa", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9ed00c-26fc-4f83-b83b-2b0d560e014a", "created": "2026-10-09T15:13:09.896098Z", "modified": "2026-10-09T15:13:09.896098Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='575A730BC2411897A318DEB23B3C3CC4F63422F5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.896098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50abec38-7faa-40fa-a10b-411d0bf89cf4", "created": "2026-10-09T15:13:09.896658Z", "modified": "2026-10-09T15:13:09.896658Z", "relationship_type": "indicates", "source_ref": "indicator--ef9ed00c-26fc-4f83-b83b-2b0d560e014a", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894b7282-b94a-4d0e-ba6c-a9b6d25ed180", "created": "2026-10-09T15:13:09.896782Z", "modified": "2026-10-09T15:13:09.896782Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5F43A60BFC663FB37F419A40015495431649310B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.896782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3787e58e-e191-4a18-969e-5288365da17f", "created": "2026-10-09T15:13:09.89733Z", "modified": "2026-10-09T15:13:09.89733Z", "relationship_type": "indicates", "source_ref": "indicator--894b7282-b94a-4d0e-ba6c-a9b6d25ed180", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8f96cc-fd27-4b55-9789-9d03723b8ff3", "created": "2026-10-09T15:13:09.897452Z", "modified": "2026-10-09T15:13:09.897452Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6000C3F6A35C81C0AE6ACA73DBF7B7D19DCDB7BC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.897452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84c0673c-0bbd-4af7-a0b8-e06164192315", "created": "2026-10-09T15:13:09.898086Z", "modified": "2026-10-09T15:13:09.898086Z", "relationship_type": "indicates", "source_ref": "indicator--3b8f96cc-fd27-4b55-9789-9d03723b8ff3", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85f39d1-f227-43e9-bbdc-65fa6c06b7ae", "created": "2026-10-09T15:13:09.898207Z", "modified": "2026-10-09T15:13:09.898207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6F1CE95315749AC6F377B310C0B831CF05B04C68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.898207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19494ba6-5394-4062-963f-e106b39e0bef", "created": "2026-10-09T15:13:09.898757Z", "modified": "2026-10-09T15:13:09.898757Z", "relationship_type": "indicates", "source_ref": "indicator--c85f39d1-f227-43e9-bbdc-65fa6c06b7ae", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205b6834-99d1-4843-a963-ab42c2374aef", "created": "2026-10-09T15:13:09.898881Z", "modified": "2026-10-09T15:13:09.898881Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='845705FB0FE177970768CE3F5241AEBD99F3BEEE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.898881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69467423-229c-4c46-8575-c4b8cc40d0fa", "created": "2026-10-09T15:13:09.89943Z", "modified": "2026-10-09T15:13:09.89943Z", "relationship_type": "indicates", "source_ref": "indicator--205b6834-99d1-4843-a963-ab42c2374aef", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8a1134-240b-4311-bcb4-11b68290380d", "created": "2026-10-09T15:13:09.899552Z", "modified": "2026-10-09T15:13:09.899552Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='85F12B25CEB58B8376F83209D8D128841132DC51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.899552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8650591a-2cec-4bae-b794-5874c979fea7", "created": "2026-10-09T15:13:09.900083Z", "modified": "2026-10-09T15:13:09.900083Z", "relationship_type": "indicates", "source_ref": "indicator--1e8a1134-240b-4311-bcb4-11b68290380d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab87bae3-4caa-48e7-9ee0-2b62c6fea7b0", "created": "2026-10-09T15:13:09.9002Z", "modified": "2026-10-09T15:13:09.9002Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8A718113C6EDE9473FE4BF1F29E2E807B7EB7B56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.9002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b7be738-cfbb-4b86-9460-fe1df5818827", "created": "2026-10-09T15:13:09.900787Z", "modified": "2026-10-09T15:13:09.900787Z", "relationship_type": "indicates", "source_ref": "indicator--ab87bae3-4caa-48e7-9ee0-2b62c6fea7b0", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d052097-c352-48b5-b986-54fbf004d07e", "created": "2026-10-09T15:13:09.900911Z", "modified": "2026-10-09T15:13:09.900911Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8A92A4F6F9FC52BC8788F17704944614C744716C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.900911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82720f66-10c6-49b6-aade-0ae526cd7892", "created": "2026-10-09T15:13:09.901468Z", "modified": "2026-10-09T15:13:09.901468Z", "relationship_type": "indicates", "source_ref": "indicator--0d052097-c352-48b5-b986-54fbf004d07e", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6996eed-32ab-491f-9137-7b17f5ec6d2f", "created": "2026-10-09T15:13:09.901592Z", "modified": "2026-10-09T15:13:09.901592Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8B9540311C46184984B48BF9CB51F1742A8AFB42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.901592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8b35316-885b-471a-9c17-1eaa99612073", "created": "2026-10-09T15:13:09.902137Z", "modified": "2026-10-09T15:13:09.902137Z", "relationship_type": "indicates", "source_ref": "indicator--a6996eed-32ab-491f-9137-7b17f5ec6d2f", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1efa5d-493e-4c7e-9deb-3287c7ed9ad6", "created": "2026-10-09T15:13:09.902256Z", "modified": "2026-10-09T15:13:09.902256Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8CED75E875A2F11B3327A73A6DBD0B25E26533F2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.902256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4078410b-6c4d-48a5-b81b-3299d48ed745", "created": "2026-10-09T15:13:09.902815Z", "modified": "2026-10-09T15:13:09.902815Z", "relationship_type": "indicates", "source_ref": "indicator--1a1efa5d-493e-4c7e-9deb-3287c7ed9ad6", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8398fba-e74c-4abb-87cb-d34c342eaf4b", "created": "2026-10-09T15:13:09.902934Z", "modified": "2026-10-09T15:13:09.902934Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9225C8FD380154467908AE344FBE75CE7EF996B8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.902934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a360a3d6-3158-40b3-840b-53fe28c1e7f5", "created": "2026-10-09T15:13:09.903485Z", "modified": "2026-10-09T15:13:09.903485Z", "relationship_type": "indicates", "source_ref": "indicator--f8398fba-e74c-4abb-87cb-d34c342eaf4b", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbb3fe5-da8d-4764-9fa4-032b3e178e0c", "created": "2026-10-09T15:13:09.903608Z", "modified": "2026-10-09T15:13:09.903608Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='927CA44949D7788AA86F9D7F04D7FDACECD1DFB9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.903608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--311af6cf-ee3b-46ef-8f31-2b9a6fddea42", "created": "2026-10-09T15:13:09.904261Z", "modified": "2026-10-09T15:13:09.904261Z", "relationship_type": "indicates", "source_ref": "indicator--8fbb3fe5-da8d-4764-9fa4-032b3e178e0c", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11a11e-e44a-4afe-a139-dd305107c839", "created": "2026-10-09T15:13:09.904397Z", "modified": "2026-10-09T15:13:09.904397Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9442F1D40FBAAD7053D130986C4487D0BA5C079F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.904397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--271d667f-e502-4f9e-8119-e5c04ab8a9c0", "created": "2026-10-09T15:13:09.904938Z", "modified": "2026-10-09T15:13:09.904938Z", "relationship_type": "indicates", "source_ref": "indicator--3f11a11e-e44a-4afe-a139-dd305107c839", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dac8706-5660-429c-9009-f1fe1f6fe671", "created": "2026-10-09T15:13:09.905057Z", "modified": "2026-10-09T15:13:09.905057Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A75B340A58545B28B7E837582259C1CC2CE21512']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.905057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c827b0b-9d66-477e-af07-2d0ae3464f3a", "created": "2026-10-09T15:13:09.905607Z", "modified": "2026-10-09T15:13:09.905607Z", "relationship_type": "indicates", "source_ref": "indicator--1dac8706-5660-429c-9009-f1fe1f6fe671", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62aae9a-01ce-4e38-a9f7-fd3b64bc4a0d", "created": "2026-10-09T15:13:09.905729Z", "modified": "2026-10-09T15:13:09.905729Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B0B09157DC34E3D20DF6A92EBA0014D36A27C451']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.905729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b89acf87-37ba-4f0e-80c9-6e1032600aa4", "created": "2026-10-09T15:13:09.906276Z", "modified": "2026-10-09T15:13:09.906276Z", "relationship_type": "indicates", "source_ref": "indicator--f62aae9a-01ce-4e38-a9f7-fd3b64bc4a0d", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4c3816-2c01-42e6-aa8c-e9d97723de8e", "created": "2026-10-09T15:13:09.906397Z", "modified": "2026-10-09T15:13:09.906397Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7322B2126B2C4F4DED940D719FE1E63FD233D35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.906397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c9847ec-d569-43be-89d4-5bfe7a850ed1", "created": "2026-10-09T15:13:09.906943Z", "modified": "2026-10-09T15:13:09.906943Z", "relationship_type": "indicates", "source_ref": "indicator--fa4c3816-2c01-42e6-aa8c-e9d97723de8e", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c5ab4f-3a0f-49a6-a405-72f55bf2434b", "created": "2026-10-09T15:13:09.907065Z", "modified": "2026-10-09T15:13:09.907065Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8D8C25B1CFE2829D397C8FB166895A6791A43D5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.907065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0eed013c-7cfc-47ab-828a-48906e1cb2e5", "created": "2026-10-09T15:13:09.907615Z", "modified": "2026-10-09T15:13:09.907615Z", "relationship_type": "indicates", "source_ref": "indicator--82c5ab4f-3a0f-49a6-a405-72f55bf2434b", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b526e1-dbe0-4624-a8ad-0ca52a6d4545", "created": "2026-10-09T15:13:09.907735Z", "modified": "2026-10-09T15:13:09.907735Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C656605BDB536B842319AC008FBB249D8B0A7422']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.907735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--172c999b-5a2d-4bfb-a82e-4e81ed5d5518", "created": "2026-10-09T15:13:09.908293Z", "modified": "2026-10-09T15:13:09.908293Z", "relationship_type": "indicates", "source_ref": "indicator--87b526e1-dbe0-4624-a8ad-0ca52a6d4545", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0653b3d9-789c-45cf-b412-88caf90fda52", "created": "2026-10-09T15:13:09.908451Z", "modified": "2026-10-09T15:13:09.908451Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CB6E6DEB296275EDF70DC71A62A75AB7B9C8DB89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.908451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfb78eb8-ae16-4c48-8f20-c68859846646", "created": "2026-10-09T15:13:09.909009Z", "modified": "2026-10-09T15:13:09.909009Z", "relationship_type": "indicates", "source_ref": "indicator--0653b3d9-789c-45cf-b412-88caf90fda52", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f9ea18-5d13-4d95-b3e2-a4f05ddda4d4", "created": "2026-10-09T15:13:09.909131Z", "modified": "2026-10-09T15:13:09.909131Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CD5724426B602C1CD0BF3BD65EF75B9021C0EC3A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.909131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c89f9c7b-b2c6-4ad7-9edc-85a880802409", "created": "2026-10-09T15:13:09.909796Z", "modified": "2026-10-09T15:13:09.909796Z", "relationship_type": "indicates", "source_ref": "indicator--47f9ea18-5d13-4d95-b3e2-a4f05ddda4d4", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefa06cd-bb76-49da-b391-f47b4e31b846", "created": "2026-10-09T15:13:09.909921Z", "modified": "2026-10-09T15:13:09.909921Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CE3BB9701274C15D26A92C1D7D34110961EB73F1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.909921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c575a07c-f9b3-4e3f-bd2c-aef66344cb1e", "created": "2026-10-09T15:13:09.910485Z", "modified": "2026-10-09T15:13:09.910485Z", "relationship_type": "indicates", "source_ref": "indicator--eefa06cd-bb76-49da-b391-f47b4e31b846", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6a7020-6fb9-4cf3-ab33-083d678d870b", "created": "2026-10-09T15:13:09.910616Z", "modified": "2026-10-09T15:13:09.910616Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D244AA1DD3D4296CE875EDA2E1B0332459F7DACE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.910616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fc4742d-28ec-407b-b206-172197aa3b4a", "created": "2026-10-09T15:13:09.911159Z", "modified": "2026-10-09T15:13:09.911159Z", "relationship_type": "indicates", "source_ref": "indicator--1a6a7020-6fb9-4cf3-ab33-083d678d870b", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2d02a9-d91d-4eac-87fb-ad6baecf6c99", "created": "2026-10-09T15:13:09.911287Z", "modified": "2026-10-09T15:13:09.911287Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D943998AEC15B3D70DA3BF00FF7BF580A41F6E4B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.911287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bfb94ee-af21-4ad3-ad71-573d8b3e8448", "created": "2026-10-09T15:13:09.911832Z", "modified": "2026-10-09T15:13:09.911832Z", "relationship_type": "indicates", "source_ref": "indicator--5b2d02a9-d91d-4eac-87fb-ad6baecf6c99", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e377b1-d714-4af9-826f-7172047762b4", "created": "2026-10-09T15:13:09.911954Z", "modified": "2026-10-09T15:13:09.911954Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DDCF7F1032E7D9DA4E3D245A5145363F69F9C393']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.911954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36b1bb4c-6754-477a-bb94-f55930a0f64a", "created": "2026-10-09T15:13:09.912511Z", "modified": "2026-10-09T15:13:09.912511Z", "relationship_type": "indicates", "source_ref": "indicator--06e377b1-d714-4af9-826f-7172047762b4", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa531a7-8d13-4bc8-9bc1-2e265c1266b0", "created": "2026-10-09T15:13:09.912631Z", "modified": "2026-10-09T15:13:09.912631Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E8395BE2A32B62C1BA21E37663E3BF1583E00FAA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.912631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e4fd6a0-c416-45ea-93df-be6a3a482301", "created": "2026-10-09T15:13:09.913171Z", "modified": "2026-10-09T15:13:09.913171Z", "relationship_type": "indicates", "source_ref": "indicator--0fa531a7-8d13-4bc8-9bc1-2e265c1266b0", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af851ee2-5de4-4422-9086-e226aff8dd07", "created": "2026-10-09T15:13:09.913305Z", "modified": "2026-10-09T15:13:09.913305Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FB2EEA183C183B486B3001EC5FC4E8C906593356']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.913305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38f1c9ac-0625-461f-b668-ccc5614c95d8", "created": "2026-10-09T15:13:09.913859Z", "modified": "2026-10-09T15:13:09.913859Z", "relationship_type": "indicates", "source_ref": "indicator--af851ee2-5de4-4422-9086-e226aff8dd07", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b168eede-7d01-48e6-b7c3-850b92f4e782", "created": "2026-10-09T15:13:09.91398Z", "modified": "2026-10-09T15:13:09.91398Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='09273A6004A46078991F3FBA2A4868DA26DBB508']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.91398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8202aeff-e078-48a5-bae2-0c4b2ca534a6", "created": "2026-10-09T15:13:09.914536Z", "modified": "2026-10-09T15:13:09.914536Z", "relationship_type": "indicates", "source_ref": "indicator--b168eede-7d01-48e6-b7c3-850b92f4e782", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b94dc3d-ea36-458c-9ab8-4acf5d3cf8c8", "created": "2026-10-09T15:13:09.914658Z", "modified": "2026-10-09T15:13:09.914658Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2A84B79A7E17E1F49642E8D5EA9828CFEA763E8C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.914658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19f91c3a-de23-4b43-94ed-3f7e49d9763a", "created": "2026-10-09T15:13:09.915203Z", "modified": "2026-10-09T15:13:09.915203Z", "relationship_type": "indicates", "source_ref": "indicator--7b94dc3d-ea36-458c-9ab8-4acf5d3cf8c8", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3661b6fd-c691-4cc1-a71c-6667ac3bc884", "created": "2026-10-09T15:13:09.915347Z", "modified": "2026-10-09T15:13:09.915347Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A4817668612688754B4905C44AB9F70C58C25CB2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.915347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e398e9fa-3d17-41d0-93af-4e203ac8046d", "created": "2026-10-09T15:13:09.916301Z", "modified": "2026-10-09T15:13:09.916301Z", "relationship_type": "indicates", "source_ref": "indicator--3661b6fd-c691-4cc1-a71c-6667ac3bc884", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b184e296-4ba7-49f1-8a72-88389f867a46", "created": "2026-10-09T15:13:09.916432Z", "modified": "2026-10-09T15:13:09.916432Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1CE722F401C3FA8FE498FF824669C0007A200AA9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.916432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--561d96a3-929c-4807-94e2-b149c367d689", "created": "2026-10-09T15:13:09.916979Z", "modified": "2026-10-09T15:13:09.916979Z", "relationship_type": "indicates", "source_ref": "indicator--b184e296-4ba7-49f1-8a72-88389f867a46", "target_ref": "malware--543e13b3-472b-401c-a3b9-a5483f5b8910"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c", "created": "2026-10-09T15:13:09.917097Z", "modified": "2026-10-09T15:13:09.917097Z", "name": "iKeyMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839c6cc2-31dc-43c0-bfe6-2746021bb221", "created": "2026-10-09T15:13:09.917218Z", "modified": "2026-10-09T15:13:09.917218Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='83dd4.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.917218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93d80649-ca05-43e5-8561-6413c4b1d07e", "created": "2026-10-09T15:13:09.917708Z", "modified": "2026-10-09T15:13:09.917708Z", "relationship_type": "indicates", "source_ref": "indicator--839c6cc2-31dc-43c0-bfe6-2746021bb221", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b69177b-d30e-4856-9aed-b7c0b4c3201a", "created": "2026-10-09T15:13:09.917828Z", "modified": "2026-10-09T15:13:09.917828Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awsapi.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.917828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b4af763-b0f3-470a-b636-b9f0cdb9034d", "created": "2026-10-09T15:13:09.918297Z", "modified": "2026-10-09T15:13:09.918297Z", "relationship_type": "indicates", "source_ref": "indicator--1b69177b-d30e-4856-9aed-b7c0b4c3201a", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba47c1d-21b0-4e79-a56a-896c921eab30", "created": "2026-10-09T15:13:09.918417Z", "modified": "2026-10-09T15:13:09.918417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='em.awsapi.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.918417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48bfb61c-cecd-48cb-91d6-de969a512b30", "created": "2026-10-09T15:13:09.918878Z", "modified": "2026-10-09T15:13:09.918878Z", "relationship_type": "indicates", "source_ref": "indicator--cba47c1d-21b0-4e79-a56a-896c921eab30", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeba8269-96f2-4033-abdb-02b26a04132b", "created": "2026-10-09T15:13:09.918997Z", "modified": "2026-10-09T15:13:09.918997Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ikm.awsapi.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.918997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3167b245-b9ff-489c-82d4-c9c9493e06fb", "created": "2026-10-09T15:13:09.919483Z", "modified": "2026-10-09T15:13:09.919483Z", "relationship_type": "indicates", "source_ref": "indicator--eeba8269-96f2-4033-abdb-02b26a04132b", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ebf6ca-7cb0-4f6f-8ff6-d175008638c4", "created": "2026-10-09T15:13:09.919604Z", "modified": "2026-10-09T15:13:09.919604Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='emcpanel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.919604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--471e019d-61c3-484e-b302-deb7da71d5cd", "created": "2026-10-09T15:13:09.920065Z", "modified": "2026-10-09T15:13:09.920065Z", "relationship_type": "indicates", "source_ref": "indicator--78ebf6ca-7cb0-4f6f-8ff6-d175008638c4", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7794e077-d3aa-4802-b2ac-6c76c2a4c138", "created": "2026-10-09T15:13:09.920184Z", "modified": "2026-10-09T15:13:09.920184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.easemon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.920184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--274d5ea0-eed8-499b-9347-349def62964d", "created": "2026-10-09T15:13:09.920663Z", "modified": "2026-10-09T15:13:09.920663Z", "relationship_type": "indicates", "source_ref": "indicator--7794e077-d3aa-4802-b2ac-6c76c2a4c138", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0db17e-dd80-40e3-8855-4ddfabfad67d", "created": "2026-10-09T15:13:09.920784Z", "modified": "2026-10-09T15:13:09.920784Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ikeymonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.920784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80316c08-f11e-4d41-a35f-4df57f36eecd", "created": "2026-10-09T15:13:09.921257Z", "modified": "2026-10-09T15:13:09.921257Z", "relationship_type": "indicates", "source_ref": "indicator--6e0db17e-dd80-40e3-8855-4ddfabfad67d", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c604b0-48b2-44e6-a23d-0167988c0727", "created": "2026-10-09T15:13:09.92139Z", "modified": "2026-10-09T15:13:09.92139Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ikeymonitor.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.92139Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08286241-5f5e-4059-bea5-a234802c7272", "created": "2026-10-09T15:13:09.921957Z", "modified": "2026-10-09T15:13:09.921957Z", "relationship_type": "indicates", "source_ref": "indicator--51c604b0-48b2-44e6-a23d-0167988c0727", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef73a19-7f47-4e15-b7d2-b67477865585", "created": "2026-10-09T15:13:09.922087Z", "modified": "2026-10-09T15:13:09.922087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.awosoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.922087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e8dd403-762a-42c3-9302-57c0fc99cd2a", "created": "2026-10-09T15:13:09.922573Z", "modified": "2026-10-09T15:13:09.922573Z", "relationship_type": "indicates", "source_ref": "indicator--2ef73a19-7f47-4e15-b7d2-b67477865585", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607bdaa4-d94f-4768-b269-2e99ef151017", "created": "2026-10-09T15:13:09.922698Z", "modified": "2026-10-09T15:13:09.922698Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easemon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.922698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2880fc66-f6ec-4729-96e3-6e22949c6428", "created": "2026-10-09T15:13:09.923158Z", "modified": "2026-10-09T15:13:09.923158Z", "relationship_type": "indicates", "source_ref": "indicator--607bdaa4-d94f-4768-b269-2e99ef151017", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4df8b3-ddc5-4cd9-acc8-2735c8069cdd", "created": "2026-10-09T15:13:09.923292Z", "modified": "2026-10-09T15:13:09.923292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1b5e6af98dfa2c8e1ceddf4eb4d8c533db415cbea5047c6bd3ec041ae642a36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.923292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60e886c5-7afb-4693-933f-4a23bc85813f", "created": "2026-10-09T15:13:09.923882Z", "modified": "2026-10-09T15:13:09.923882Z", "relationship_type": "indicates", "source_ref": "indicator--bf4df8b3-ddc5-4cd9-acc8-2735c8069cdd", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89afdb62-084d-403f-a588-53ab9032c3ba", "created": "2026-10-09T15:13:09.924004Z", "modified": "2026-10-09T15:13:09.924004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34eeabc826dc4f8e9aeb981b6f2738572bc8c5b7ae351aef7ecd71899754dc34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.924004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e77ad972-8732-4f9e-b1b7-0a50ae6585f3", "created": "2026-10-09T15:13:09.924603Z", "modified": "2026-10-09T15:13:09.924603Z", "relationship_type": "indicates", "source_ref": "indicator--89afdb62-084d-403f-a588-53ab9032c3ba", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a27b656-67a8-4e7c-ba89-6f5c8e7ebea4", "created": "2026-10-09T15:13:09.924725Z", "modified": "2026-10-09T15:13:09.924725Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b6216005c45b9d12cb12921340bd5db6a9eb7b0684e6db456a02d04ceb9b908']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.924725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98b280e7-ca5c-4a81-b703-d94a8c6e7750", "created": "2026-10-09T15:13:09.925316Z", "modified": "2026-10-09T15:13:09.925316Z", "relationship_type": "indicates", "source_ref": "indicator--3a27b656-67a8-4e7c-ba89-6f5c8e7ebea4", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b846726-8608-496d-b467-abe62a0ca7d7", "created": "2026-10-09T15:13:09.925439Z", "modified": "2026-10-09T15:13:09.925439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63c22cbd47fccaff2b3ed583cefd694a8f2c64060b0fb83577c8beea35743f6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.925439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f23d539b-f36c-4581-b343-f65642416426", "created": "2026-10-09T15:13:09.926019Z", "modified": "2026-10-09T15:13:09.926019Z", "relationship_type": "indicates", "source_ref": "indicator--9b846726-8608-496d-b467-abe62a0ca7d7", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e143db-35d4-4f1e-8d33-44f6b5ae6ec4", "created": "2026-10-09T15:13:09.926138Z", "modified": "2026-10-09T15:13:09.926138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8b8190a1d7f54dfc26b73c0915f9cf15df57a7812b805857f6fd6314dfdcb51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.926138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5681a9e-ad18-4978-bd93-979192dc9134", "created": "2026-10-09T15:13:09.926742Z", "modified": "2026-10-09T15:13:09.926742Z", "relationship_type": "indicates", "source_ref": "indicator--61e143db-35d4-4f1e-8d33-44f6b5ae6ec4", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cc7924-877c-4554-86f2-d32e842cff74", "created": "2026-10-09T15:13:09.926865Z", "modified": "2026-10-09T15:13:09.926865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2929f77cd59baf6ea8f759b3c5284075b8daa60b04c5b3333a1be1f857f19ec0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.926865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a64dc4d0-a74c-45ee-8e8c-080fc644e886", "created": "2026-10-09T15:13:09.927463Z", "modified": "2026-10-09T15:13:09.927463Z", "relationship_type": "indicates", "source_ref": "indicator--42cc7924-877c-4554-86f2-d32e842cff74", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ccfb9f-5349-4ca0-bf11-f64c637543e1", "created": "2026-10-09T15:13:09.927585Z", "modified": "2026-10-09T15:13:09.927585Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34be41a01b632ca4b4b011b80cbaf381f0e81e76f94e5024b8fbeb44969df419']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.927585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8292dfaf-c89c-4a34-8603-3cc92ece3562", "created": "2026-10-09T15:13:09.928282Z", "modified": "2026-10-09T15:13:09.928282Z", "relationship_type": "indicates", "source_ref": "indicator--77ccfb9f-5349-4ca0-bf11-f64c637543e1", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9113a99-b156-4dde-9220-fe8893fac34e", "created": "2026-10-09T15:13:09.928411Z", "modified": "2026-10-09T15:13:09.928411Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20200817']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.928411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ce19418-788d-4cd6-9574-11472ba42d39", "created": "2026-10-09T15:13:09.928896Z", "modified": "2026-10-09T15:13:09.928896Z", "relationship_type": "indicates", "source_ref": "indicator--f9113a99-b156-4dde-9220-fe8893fac34e", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a96e076-7712-4274-9e05-249ad249a414", "created": "2026-10-09T15:13:09.929019Z", "modified": "2026-10-09T15:13:09.929019Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20210916']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.929019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c036266-9970-4988-846f-6c685b86ca97", "created": "2026-10-09T15:13:09.929498Z", "modified": "2026-10-09T15:13:09.929498Z", "relationship_type": "indicates", "source_ref": "indicator--3a96e076-7712-4274-9e05-249ad249a414", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47443597-b31e-402b-a3f3-1e7430177429", "created": "2026-10-09T15:13:09.929622Z", "modified": "2026-10-09T15:13:09.929622Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20220729']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.929622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e62b6a06-29bc-4da0-b350-a8aa3bb2c3e6", "created": "2026-10-09T15:13:09.930084Z", "modified": "2026-10-09T15:13:09.930084Z", "relationship_type": "indicates", "source_ref": "indicator--47443597-b31e-402b-a3f3-1e7430177429", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c16f7ed-2e16-4e7c-9b91-ec588d5d4fe7", "created": "2026-10-09T15:13:09.930204Z", "modified": "2026-10-09T15:13:09.930204Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20220829']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.930204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--372d8503-1993-49b8-a525-8ad420b0aa60", "created": "2026-10-09T15:13:09.930692Z", "modified": "2026-10-09T15:13:09.930692Z", "relationship_type": "indicates", "source_ref": "indicator--3c16f7ed-2e16-4e7c-9b91-ec588d5d4fe7", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7af0cbb-14ab-4dc9-8040-d63bf7b4a6c6", "created": "2026-10-09T15:13:09.930811Z", "modified": "2026-10-09T15:13:09.930811Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20220914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.930811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de673bfe-e106-4230-a0a1-780d50e21ba5", "created": "2026-10-09T15:13:09.931287Z", "modified": "2026-10-09T15:13:09.931287Z", "relationship_type": "indicates", "source_ref": "indicator--a7af0cbb-14ab-4dc9-8040-d63bf7b4a6c6", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9b9ffb-57f8-4d56-b71e-3cc75586250d", "created": "2026-10-09T15:13:09.931413Z", "modified": "2026-10-09T15:13:09.931413Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.android.internet.im.service.im20190118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.931413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0f59c21-6947-4ef0-86be-7239c89bb1ec", "created": "2026-10-09T15:13:09.931898Z", "modified": "2026-10-09T15:13:09.931898Z", "relationship_type": "indicates", "source_ref": "indicator--be9b9ffb-57f8-4d56-b71e-3cc75586250d", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ecb45d-f9c3-49a3-9b61-7fe8d15c8e98", "created": "2026-10-09T15:13:09.932019Z", "modified": "2026-10-09T15:13:09.932019Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.android.internet.im.service.im20190419']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.932019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58815f7f-f3dd-4b85-9d1e-97688c92c759", "created": "2026-10-09T15:13:09.932516Z", "modified": "2026-10-09T15:13:09.932516Z", "relationship_type": "indicates", "source_ref": "indicator--c3ecb45d-f9c3-49a3-9b61-7fe8d15c8e98", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38e5f9a-4d2b-404c-bee9-ca7bbae8945f", "created": "2026-10-09T15:13:09.932635Z", "modified": "2026-10-09T15:13:09.932635Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.android.internet.im.service.im20210815']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.932635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3c44f81-2446-4e8b-ae01-1ebacdd4a23e", "created": "2026-10-09T15:13:09.933123Z", "modified": "2026-10-09T15:13:09.933123Z", "relationship_type": "indicates", "source_ref": "indicator--b38e5f9a-4d2b-404c-bee9-ca7bbae8945f", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b25f6a-111d-4020-b884-74c8940780f0", "created": "2026-10-09T15:13:09.933242Z", "modified": "2026-10-09T15:13:09.933242Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C1D83F5FFE3EC319FF103EC7346CDDF218B5634D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.933242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8be1a7a0-63a2-4427-9794-5a6f2f66a458", "created": "2026-10-09T15:13:09.933893Z", "modified": "2026-10-09T15:13:09.933893Z", "relationship_type": "indicates", "source_ref": "indicator--01b25f6a-111d-4020-b884-74c8940780f0", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4fcbe4-a3d2-4d96-b3a3-0d0d3a523865", "created": "2026-10-09T15:13:09.934018Z", "modified": "2026-10-09T15:13:09.934018Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4DAD108F915E237CA2834FAC70C077AD8105E804']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.934018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fab23ac-6280-453c-94ce-8f7907773e4e", "created": "2026-10-09T15:13:09.934584Z", "modified": "2026-10-09T15:13:09.934584Z", "relationship_type": "indicates", "source_ref": "indicator--6d4fcbe4-a3d2-4d96-b3a3-0d0d3a523865", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f3c643-cfbf-4dba-a85c-8b906cbb69e6", "created": "2026-10-09T15:13:09.934705Z", "modified": "2026-10-09T15:13:09.934705Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8F5FDFAE5920C4CFB6ACE214D39327F299FA76D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.934705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc952b52-3fcd-4722-8988-169d6affae76", "created": "2026-10-09T15:13:09.935235Z", "modified": "2026-10-09T15:13:09.935235Z", "relationship_type": "indicates", "source_ref": "indicator--c6f3c643-cfbf-4dba-a85c-8b906cbb69e6", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0cf5c3-e0e2-45b3-9b25-7e4954e3cbbc", "created": "2026-10-09T15:13:09.935366Z", "modified": "2026-10-09T15:13:09.935366Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9284CB43B87E9F9C77DA509F1672E884BD6CA876']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.935366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fa2503c-28ef-46fb-bae7-cc77133990ae", "created": "2026-10-09T15:13:09.935903Z", "modified": "2026-10-09T15:13:09.935903Z", "relationship_type": "indicates", "source_ref": "indicator--fc0cf5c3-e0e2-45b3-9b25-7e4954e3cbbc", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87b872d-08d1-4ef4-845c-10a418ce626b", "created": "2026-10-09T15:13:09.936021Z", "modified": "2026-10-09T15:13:09.936021Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='786325AB3E614F868CA2A7F2F0E75EC76A047311']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.936021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b184bc75-6a40-4c44-a3b0-b9835428a5a4", "created": "2026-10-09T15:13:09.936601Z", "modified": "2026-10-09T15:13:09.936601Z", "relationship_type": "indicates", "source_ref": "indicator--b87b872d-08d1-4ef4-845c-10a418ce626b", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab49f546-4d99-499c-aefe-49ffb0bcaa76", "created": "2026-10-09T15:13:09.93673Z", "modified": "2026-10-09T15:13:09.93673Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F747F0BBEF33FFEE6AFC4E7CFA03B28215985F24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.93673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e038d00b-b995-4636-8bae-973f3f55f74d", "created": "2026-10-09T15:13:09.937289Z", "modified": "2026-10-09T15:13:09.937289Z", "relationship_type": "indicates", "source_ref": "indicator--ab49f546-4d99-499c-aefe-49ffb0bcaa76", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92aca75b-ab2e-4376-8950-a0493d58cf6b", "created": "2026-10-09T15:13:09.937411Z", "modified": "2026-10-09T15:13:09.937411Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0C422F0025F866C311DF61A7549FCD519683898D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.937411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abde78e9-e0c4-4849-bb87-0eef380a29ea", "created": "2026-10-09T15:13:09.937952Z", "modified": "2026-10-09T15:13:09.937952Z", "relationship_type": "indicates", "source_ref": "indicator--92aca75b-ab2e-4376-8950-a0493d58cf6b", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc5b525-b32d-417f-949c-4734eff20b9e", "created": "2026-10-09T15:13:09.93807Z", "modified": "2026-10-09T15:13:09.93807Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='98ED5841256A44FB1525FE154C0516ACED82FFF3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.93807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c5a4c77-d9e1-4703-8c34-8b824ee0ee69", "created": "2026-10-09T15:13:09.938619Z", "modified": "2026-10-09T15:13:09.938619Z", "relationship_type": "indicates", "source_ref": "indicator--5cc5b525-b32d-417f-949c-4734eff20b9e", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d9e222-cf8e-4b94-aae0-84e1159dd383", "created": "2026-10-09T15:13:09.938742Z", "modified": "2026-10-09T15:13:09.938742Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='ACB2CA50376456FD81B5C6C19CF6D717CFBB888B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.938742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ec3e362-389f-47ed-ba0a-04b50255fee2", "created": "2026-10-09T15:13:09.939285Z", "modified": "2026-10-09T15:13:09.939285Z", "relationship_type": "indicates", "source_ref": "indicator--86d9e222-cf8e-4b94-aae0-84e1159dd383", "target_ref": "malware--5eb3d5ae-f274-4614-9017-b4f421aa550c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd", "created": "2026-10-09T15:13:09.93941Z", "modified": "2026-10-09T15:13:09.93941Z", "name": "PanSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed1fea4-d5de-4f6f-9511-06bc2f30471b", "created": "2026-10-09T15:13:09.93953Z", "modified": "2026-10-09T15:13:09.93953Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.93953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5c602f5-0437-4648-9294-80d3085cd3d3", "created": "2026-10-09T15:13:09.9401Z", "modified": "2026-10-09T15:13:09.9401Z", "relationship_type": "indicates", "source_ref": "indicator--3ed1fea4-d5de-4f6f-9511-06bc2f30471b", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba69f882-33f5-47a8-b213-c8c9b34b100f", "created": "2026-10-09T15:13:09.940222Z", "modified": "2026-10-09T15:13:09.940222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.940222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e5b2908-0901-4312-ae14-c0093b064047", "created": "2026-10-09T15:13:09.940696Z", "modified": "2026-10-09T15:13:09.940696Z", "relationship_type": "indicates", "source_ref": "indicator--ba69f882-33f5-47a8-b213-c8c9b34b100f", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc51e9e8-edc2-4f54-b728-ac1a47a030cd", "created": "2026-10-09T15:13:09.940817Z", "modified": "2026-10-09T15:13:09.940817Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ali.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.940817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5157de3-bfe6-4f29-b269-96d725366ead", "created": "2026-10-09T15:13:09.941295Z", "modified": "2026-10-09T15:13:09.941295Z", "relationship_type": "indicates", "source_ref": "indicator--dc51e9e8-edc2-4f54-b728-ac1a47a030cd", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dc7e07-e7ce-4b60-99c1-404f8be35196", "created": "2026-10-09T15:13:09.941415Z", "modified": "2026-10-09T15:13:09.941415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.941415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75816fd7-d3fa-44b9-ad3b-8140e93b51bb", "created": "2026-10-09T15:13:09.941879Z", "modified": "2026-10-09T15:13:09.941879Z", "relationship_type": "indicates", "source_ref": "indicator--d4dc7e07-e7ce-4b60-99c1-404f8be35196", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1b03ae-2eff-41e7-b0cc-8679c50a302d", "created": "2026-10-09T15:13:09.941996Z", "modified": "2026-10-09T15:13:09.941996Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.941996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0bdc68e-6f0b-4be4-8c27-5eaee7384780", "created": "2026-10-09T15:13:09.942483Z", "modified": "2026-10-09T15:13:09.942483Z", "relationship_type": "indicates", "source_ref": "indicator--fc1b03ae-2eff-41e7-b0cc-8679c50a302d", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9726691d-a653-4e7c-ac90-48b5fde50500", "created": "2026-10-09T15:13:09.942603Z", "modified": "2026-10-09T15:13:09.942603Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.942603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--183ddfd8-2268-4c10-8d33-b4b0bbbdf0fe", "created": "2026-10-09T15:13:09.943063Z", "modified": "2026-10-09T15:13:09.943063Z", "relationship_type": "indicates", "source_ref": "indicator--9726691d-a653-4e7c-ac90-48b5fde50500", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db854d75-8a7b-423d-aca3-b884e3449b8b", "created": "2026-10-09T15:13:09.943181Z", "modified": "2026-10-09T15:13:09.943181Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='u1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.943181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c14fe90-78d1-4ab0-82fa-cda730e6871a", "created": "2026-10-09T15:13:09.943666Z", "modified": "2026-10-09T15:13:09.943666Z", "relationship_type": "indicates", "source_ref": "indicator--db854d75-8a7b-423d-aca3-b884e3449b8b", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e11d442-4bbd-4d5b-8463-883a41b023bc", "created": "2026-10-09T15:13:09.943793Z", "modified": "2026-10-09T15:13:09.943793Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy-1.oss-us-west-1.aliyuncs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.943793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26a7470e-85f7-4297-b98b-b395fae35585", "created": "2026-10-09T15:13:09.944305Z", "modified": "2026-10-09T15:13:09.944305Z", "relationship_type": "indicates", "source_ref": "indicator--5e11d442-4bbd-4d5b-8463-883a41b023bc", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5113dad2-4a8e-4ec9-bd61-62bc920760e1", "created": "2026-10-09T15:13:09.944427Z", "modified": "2026-10-09T15:13:09.944427Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.944427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--812045b5-80ca-4b92-8667-61e516af1f9d", "created": "2026-10-09T15:13:09.944888Z", "modified": "2026-10-09T15:13:09.944888Z", "relationship_type": "indicates", "source_ref": "indicator--5113dad2-4a8e-4ec9-bd61-62bc920760e1", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f05dc6c-141f-4ccb-8233-71f8d812a80a", "created": "2026-10-09T15:13:09.945003Z", "modified": "2026-10-09T15:13:09.945003Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='surveilstar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.945003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5c400e-cbd2-456c-a011-13d0e29e030b", "created": "2026-10-09T15:13:09.945566Z", "modified": "2026-10-09T15:13:09.945566Z", "relationship_type": "indicates", "source_ref": "indicator--7f05dc6c-141f-4ccb-8233-71f8d812a80a", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7937cb66-b220-449f-bb36-3f0b943b187c", "created": "2026-10-09T15:13:09.945688Z", "modified": "2026-10-09T15:13:09.945688Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.945688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c168a824-aaf5-4d0d-b11e-611693b3ab1e", "created": "2026-10-09T15:13:09.946154Z", "modified": "2026-10-09T15:13:09.946154Z", "relationship_type": "indicates", "source_ref": "indicator--7937cb66-b220-449f-bb36-3f0b943b187c", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9195ec-8c25-4a7c-9953-3d6b088040b6", "created": "2026-10-09T15:13:09.946287Z", "modified": "2026-10-09T15:13:09.946287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc3235263174fe8f05b5db49c36094549a2597e8d57b586fd0374d28d1c0a5c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.946287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fd3dec5-2b02-45f4-a2aa-e4e9f5fcbe31", "created": "2026-10-09T15:13:09.946875Z", "modified": "2026-10-09T15:13:09.946875Z", "relationship_type": "indicates", "source_ref": "indicator--2a9195ec-8c25-4a7c-9953-3d6b088040b6", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f45e645-9c75-4c26-b960-de2bb1561304", "created": "2026-10-09T15:13:09.946996Z", "modified": "2026-10-09T15:13:09.946996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aa4fe0c11404baaa2d3ce8fe1b284d66b9020397083616df85aa9c06afe94fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.946996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5c86877-9cf9-4552-9d19-cb2cfa0f7992", "created": "2026-10-09T15:13:09.947587Z", "modified": "2026-10-09T15:13:09.947587Z", "relationship_type": "indicates", "source_ref": "indicator--8f45e645-9c75-4c26-b960-de2bb1561304", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c787c813-2718-466e-be6c-321df2e547c6", "created": "2026-10-09T15:13:09.947731Z", "modified": "2026-10-09T15:13:09.947731Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.panspy.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.947731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--197f39f8-9340-4f7c-80fc-377c6b894989", "created": "2026-10-09T15:13:09.948186Z", "modified": "2026-10-09T15:13:09.948186Z", "relationship_type": "indicates", "source_ref": "indicator--c787c813-2718-466e-be6c-321df2e547c6", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6483b6f5-b425-4f6e-a7fe-26a113876fa2", "created": "2026-10-09T15:13:09.948316Z", "modified": "2026-10-09T15:13:09.948316Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CCD5678FF73D6ECF4E74317166422AFE67D77406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.948316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4dbe4e2-5fb9-437c-ba96-52fb8c6f55d6", "created": "2026-10-09T15:13:09.948863Z", "modified": "2026-10-09T15:13:09.948863Z", "relationship_type": "indicates", "source_ref": "indicator--6483b6f5-b425-4f6e-a7fe-26a113876fa2", "target_ref": "malware--0b701aa8-84eb-4936-8959-0bef07df92bd"}, {"type": "malware", "spec_version": "2.1", "id": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d", "created": "2026-10-09T15:13:09.948981Z", "modified": "2026-10-09T15:13:09.948981Z", "name": "AndroidLost", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc94e26-f61d-4790-8af9-90d355dd4752", "created": "2026-10-09T15:13:09.9491Z", "modified": "2026-10-09T15:13:09.9491Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.9491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--385c031a-a0e5-4071-a3fd-f31445351b9c", "created": "2026-10-09T15:13:09.949595Z", "modified": "2026-10-09T15:13:09.949595Z", "relationship_type": "indicates", "source_ref": "indicator--3dc94e26-f61d-4790-8af9-90d355dd4752", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f6055a-a118-4dda-bbf1-4b2e38b5d7f9", "created": "2026-10-09T15:13:09.949721Z", "modified": "2026-10-09T15:13:09.949721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.949721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac79ae5a-6bba-4ab0-995a-061d4884494f", "created": "2026-10-09T15:13:09.950209Z", "modified": "2026-10-09T15:13:09.950209Z", "relationship_type": "indicates", "source_ref": "indicator--a0f6055a-a118-4dda-bbf1-4b2e38b5d7f9", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2de8a99-c88b-4f90-ade8-f94c41170051", "created": "2026-10-09T15:13:09.950348Z", "modified": "2026-10-09T15:13:09.950348Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.950348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81190268-f337-4bf0-9bfd-bce17888f1f6", "created": "2026-10-09T15:13:09.95081Z", "modified": "2026-10-09T15:13:09.95081Z", "relationship_type": "indicates", "source_ref": "indicator--d2de8a99-c88b-4f90-ade8-f94c41170051", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d1e07a-728b-480c-9ac5-9fd0c501ca65", "created": "2026-10-09T15:13:09.950931Z", "modified": "2026-10-09T15:13:09.950931Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.950931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e744f1e-01fe-49c2-ab05-1a9c7a767e09", "created": "2026-10-09T15:13:09.951517Z", "modified": "2026-10-09T15:13:09.951517Z", "relationship_type": "indicates", "source_ref": "indicator--e8d1e07a-728b-480c-9ac5-9fd0c501ca65", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b471523-7e0f-46e1-b4f2-713cec1ec08d", "created": "2026-10-09T15:13:09.951644Z", "modified": "2026-10-09T15:13:09.951644Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.951644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81896af8-3812-4125-839e-470a6c4404f1", "created": "2026-10-09T15:13:09.952123Z", "modified": "2026-10-09T15:13:09.952123Z", "relationship_type": "indicates", "source_ref": "indicator--3b471523-7e0f-46e1-b4f2-713cec1ec08d", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f983f6f5-4a51-47e8-bd8e-c4e987d72f3d", "created": "2026-10-09T15:13:09.952242Z", "modified": "2026-10-09T15:13:09.952242Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='new.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.952242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a2396c0-d28a-4541-ad97-bf790c5ad818", "created": "2026-10-09T15:13:09.952725Z", "modified": "2026-10-09T15:13:09.952725Z", "relationship_type": "indicates", "source_ref": "indicator--f983f6f5-4a51-47e8-bd8e-c4e987d72f3d", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccd0c68-ef56-4074-92a2-696de6b9498e", "created": "2026-10-09T15:13:09.952843Z", "modified": "2026-10-09T15:13:09.952843Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.952843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fa7d44d-9ca4-4f9f-ba43-5b1943d77a85", "created": "2026-10-09T15:13:09.953321Z", "modified": "2026-10-09T15:13:09.953321Z", "relationship_type": "indicates", "source_ref": "indicator--1ccd0c68-ef56-4074-92a2-696de6b9498e", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa087cc-74ed-4147-9759-0266072344ff", "created": "2026-10-09T15:13:09.953443Z", "modified": "2026-10-09T15:13:09.953443Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.953443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb08e15b-b709-4894-b28f-cd3d6b885d1e", "created": "2026-10-09T15:13:09.953919Z", "modified": "2026-10-09T15:13:09.953919Z", "relationship_type": "indicates", "source_ref": "indicator--2fa087cc-74ed-4147-9759-0266072344ff", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b09bda8-0e3d-4bb3-b442-581ada55a8ff", "created": "2026-10-09T15:13:09.954036Z", "modified": "2026-10-09T15:13:09.954036Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.androidlost']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.954036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b46f820-37ea-42fd-9c19-931ffb31196c", "created": "2026-10-09T15:13:09.954495Z", "modified": "2026-10-09T15:13:09.954495Z", "relationship_type": "indicates", "source_ref": "indicator--9b09bda8-0e3d-4bb3-b442-581ada55a8ff", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c9e2f2-b32a-4024-96b0-ae41f51f2180", "created": "2026-10-09T15:13:09.954616Z", "modified": "2026-10-09T15:13:09.954616Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.androidlost.smshandler']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.954616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c4122ce-3fa8-416b-865e-fdd38f268dad", "created": "2026-10-09T15:13:09.955084Z", "modified": "2026-10-09T15:13:09.955084Z", "relationship_type": "indicates", "source_ref": "indicator--03c9e2f2-b32a-4024-96b0-ae41f51f2180", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db332ec-50ca-431e-9898-d58368aa196b", "created": "2026-10-09T15:13:09.955207Z", "modified": "2026-10-09T15:13:09.955207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9EECE9B4ECF4DC0C5981FEACFB271E1C0A2967FF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.955207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01ea9bc9-2a5f-40f5-9162-721536f8edaf", "created": "2026-10-09T15:13:09.955774Z", "modified": "2026-10-09T15:13:09.955774Z", "relationship_type": "indicates", "source_ref": "indicator--3db332ec-50ca-431e-9898-d58368aa196b", "target_ref": "malware--eedfabb2-30ba-40cc-ba9a-c0e7d08df44d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--42b3ee5c-1e8a-4275-af16-9394d4dfcc4d", "created": "2026-10-09T15:13:09.955899Z", "modified": "2026-10-09T15:13:09.955899Z", "name": "Metasploit", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1489e82d-a30f-448a-8268-6bc126d81ef0", "created": "2026-10-09T15:13:09.956015Z", "modified": "2026-10-09T15:13:09.956015Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='foreverspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.956015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c299f9a-3127-49d5-9ed2-279d1415dedb", "created": "2026-10-09T15:13:09.956509Z", "modified": "2026-10-09T15:13:09.956509Z", "relationship_type": "indicates", "source_ref": "indicator--1489e82d-a30f-448a-8268-6bc126d81ef0", "target_ref": "malware--42b3ee5c-1e8a-4275-af16-9394d4dfcc4d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429caaa8-e9ad-4f0e-bc73-4e7ef003e995", "created": "2026-10-09T15:13:09.956636Z", "modified": "2026-10-09T15:13:09.956636Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.foreverspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.956636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19586292-ceed-40ba-8839-ac513d68eb5b", "created": "2026-10-09T15:13:09.957206Z", "modified": "2026-10-09T15:13:09.957206Z", "relationship_type": "indicates", "source_ref": "indicator--429caaa8-e9ad-4f0e-bc73-4e7ef003e995", "target_ref": "malware--42b3ee5c-1e8a-4275-af16-9394d4dfcc4d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d875dc07-2fad-4a29-b847-83f674811839", "created": "2026-10-09T15:13:09.957342Z", "modified": "2026-10-09T15:13:09.957342Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='foreverspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.957342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9ba14c8-1628-4efc-9890-d4e1bd111582", "created": "2026-10-09T15:13:09.957812Z", "modified": "2026-10-09T15:13:09.957812Z", "relationship_type": "indicates", "source_ref": "indicator--d875dc07-2fad-4a29-b847-83f674811839", "target_ref": "malware--42b3ee5c-1e8a-4275-af16-9394d4dfcc4d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c08f97-bfc5-47b9-ac68-94391616e7aa", "created": "2026-10-09T15:13:09.957932Z", "modified": "2026-10-09T15:13:09.957932Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.metasploit.stage']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.957932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad6258d6-0082-4f76-b168-9e8c47798dfe", "created": "2026-10-09T15:13:09.958403Z", "modified": "2026-10-09T15:13:09.958403Z", "relationship_type": "indicates", "source_ref": "indicator--c3c08f97-bfc5-47b9-ac68-94391616e7aa", "target_ref": "malware--42b3ee5c-1e8a-4275-af16-9394d4dfcc4d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--780f5350-21f2-4ff1-823e-0cef34729be6", "created": "2026-10-09T15:13:09.958523Z", "modified": "2026-10-09T15:13:09.958523Z", "name": "Spy24", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb58c42-f78e-4152-af9f-8e88b1cb92f2", "created": "2026-10-09T15:13:09.958645Z", "modified": "2026-10-09T15:13:09.958645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy24.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.958645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e910f35-38f2-4223-9b12-3edb78d47892", "created": "2026-10-09T15:13:09.959109Z", "modified": "2026-10-09T15:13:09.959109Z", "relationship_type": "indicates", "source_ref": "indicator--dfb58c42-f78e-4152-af9f-8e88b1cb92f2", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd241b5-698d-4fe8-b751-110a0b4ed25e", "created": "2026-10-09T15:13:09.959234Z", "modified": "2026-10-09T15:13:09.959234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.spy24.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.959234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1a96ca2-2605-43b1-8738-6500842c0589", "created": "2026-10-09T15:13:09.959723Z", "modified": "2026-10-09T15:13:09.959723Z", "relationship_type": "indicates", "source_ref": "indicator--bdd241b5-698d-4fe8-b751-110a0b4ed25e", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4635d955-745c-46d3-ba82-56f9f44938a1", "created": "2026-10-09T15:13:09.959844Z", "modified": "2026-10-09T15:13:09.959844Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel24.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.959844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--288e9626-e95a-4530-a4f6-be45615a3794", "created": "2026-10-09T15:13:09.960321Z", "modified": "2026-10-09T15:13:09.960321Z", "relationship_type": "indicates", "source_ref": "indicator--4635d955-745c-46d3-ba82-56f9f44938a1", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e4461c-c1a3-45ae-9fb4-2c15e8134caf", "created": "2026-10-09T15:13:09.960445Z", "modified": "2026-10-09T15:13:09.960445Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.spy24.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.960445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dd88f43-9d8a-4018-b604-8886f2505598", "created": "2026-10-09T15:13:09.960922Z", "modified": "2026-10-09T15:13:09.960922Z", "relationship_type": "indicates", "source_ref": "indicator--a9e4461c-c1a3-45ae-9fb4-2c15e8134caf", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281dcae6-d7c6-4fb0-ae51-2f65bfae422b", "created": "2026-10-09T15:13:09.961041Z", "modified": "2026-10-09T15:13:09.961041Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy24.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.961041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1cb370d-6d20-421f-a111-acc7b447b182", "created": "2026-10-09T15:13:09.961548Z", "modified": "2026-10-09T15:13:09.961548Z", "relationship_type": "indicates", "source_ref": "indicator--281dcae6-d7c6-4fb0-ae51-2f65bfae422b", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b480473b-e79c-4aca-b31c-02fca2af62d6", "created": "2026-10-09T15:13:09.961674Z", "modified": "2026-10-09T15:13:09.961674Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy24.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.961674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ace01a36-e4cc-4f24-9ae4-53b9f67080fb", "created": "2026-10-09T15:13:09.962144Z", "modified": "2026-10-09T15:13:09.962144Z", "relationship_type": "indicates", "source_ref": "indicator--b480473b-e79c-4aca-b31c-02fca2af62d6", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011675cd-d38b-48f7-9b7d-d7eb5c88d90d", "created": "2026-10-09T15:13:09.962263Z", "modified": "2026-10-09T15:13:09.962263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='780afa15f99c85055f93bff4ad40c5f4a7d7252cbc7dc1716c8db866d2a3ff53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.962263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--922fb75d-2905-45c6-9092-0aa162a523ea", "created": "2026-10-09T15:13:09.96296Z", "modified": "2026-10-09T15:13:09.96296Z", "relationship_type": "indicates", "source_ref": "indicator--011675cd-d38b-48f7-9b7d-d7eb5c88d90d", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c068a9ac-a069-4b50-9d46-bf1e3edc10ce", "created": "2026-10-09T15:13:09.963089Z", "modified": "2026-10-09T15:13:09.963089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f4c694c0cd43327da1d20781fa2e4a6e4467432b09c6050b0446007576a0f4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.963089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b99cea1-dbf4-4db6-9134-679c3f06ad9d", "created": "2026-10-09T15:13:09.9637Z", "modified": "2026-10-09T15:13:09.9637Z", "relationship_type": "indicates", "source_ref": "indicator--c068a9ac-a069-4b50-9d46-bf1e3edc10ce", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a78dd5-b46b-41c1-81c4-72b90f16fd3f", "created": "2026-10-09T15:13:09.963828Z", "modified": "2026-10-09T15:13:09.963828Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b264075a58febc9c89a534723c543750e5f1df23aea03eafebba4b0ff8823599']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.963828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de9d7378-c1c6-4887-922b-0f7e3eb3b85b", "created": "2026-10-09T15:13:09.964424Z", "modified": "2026-10-09T15:13:09.964424Z", "relationship_type": "indicates", "source_ref": "indicator--91a78dd5-b46b-41c1-81c4-72b90f16fd3f", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420b3c3e-42e1-4ce1-bd33-392bbdab6d1f", "created": "2026-10-09T15:13:09.964548Z", "modified": "2026-10-09T15:13:09.964548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e01118a89e9a8bab0a36b93ad15caf1432fc615afa61d7dccd99773debeba818']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.964548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--832ed2c9-64ac-4966-bf0e-1433f2a9825b", "created": "2026-10-09T15:13:09.965132Z", "modified": "2026-10-09T15:13:09.965132Z", "relationship_type": "indicates", "source_ref": "indicator--420b3c3e-42e1-4ce1-bd33-392bbdab6d1f", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28decce7-9d6c-464a-8cbb-bfe28fdcde8a", "created": "2026-10-09T15:13:09.965253Z", "modified": "2026-10-09T15:13:09.965253Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77d4f937b2855137ed14dadab49da6e1f0be27b9c032dd9316af97ea3f139893']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.965253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9474f521-1acf-4d4b-b95b-c59dd86fd64a", "created": "2026-10-09T15:13:09.965855Z", "modified": "2026-10-09T15:13:09.965855Z", "relationship_type": "indicates", "source_ref": "indicator--28decce7-9d6c-464a-8cbb-bfe28fdcde8a", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43f2fbe-77c7-4cce-aeb1-f084f12e2a16", "created": "2026-10-09T15:13:09.965977Z", "modified": "2026-10-09T15:13:09.965977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='037323bb567391a8d55ce2361942cda125b4fcccd8e559027356f8f7e65d9445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.965977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47df7a45-8df2-4427-9d4f-feda5de90b12", "created": "2026-10-09T15:13:09.96658Z", "modified": "2026-10-09T15:13:09.96658Z", "relationship_type": "indicates", "source_ref": "indicator--c43f2fbe-77c7-4cce-aeb1-f084f12e2a16", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a6a231-e778-40a9-b911-592036ae9411", "created": "2026-10-09T15:13:09.966706Z", "modified": "2026-10-09T15:13:09.966706Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='913b6ce2b37b667106287d36f2e675eb177d28a270b3e815e90bdd9d2cc44dcb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.966706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6e2cf78-04d6-449b-b3c1-f5e232e1abb9", "created": "2026-10-09T15:13:09.967301Z", "modified": "2026-10-09T15:13:09.967301Z", "relationship_type": "indicates", "source_ref": "indicator--67a6a231-e778-40a9-b911-592036ae9411", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5454cf-55c0-4c96-b666-d723359d80eb", "created": "2026-10-09T15:13:09.967425Z", "modified": "2026-10-09T15:13:09.967425Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.spy24.wifi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.967425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98dfbcff-4487-46e2-bff3-ad8610f236af", "created": "2026-10-09T15:13:09.967873Z", "modified": "2026-10-09T15:13:09.967873Z", "relationship_type": "indicates", "source_ref": "indicator--2d5454cf-55c0-4c96-b666-d723359d80eb", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ade89d0-f3fc-4967-b6a0-7d4912b7d10c", "created": "2026-10-09T15:13:09.967991Z", "modified": "2026-10-09T15:13:09.967991Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.openanotherapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.967991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01386d13-54b1-4631-8b2f-60e75bbc11e1", "created": "2026-10-09T15:13:09.968464Z", "modified": "2026-10-09T15:13:09.968464Z", "relationship_type": "indicates", "source_ref": "indicator--0ade89d0-f3fc-4967-b6a0-7d4912b7d10c", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65005271-c5ca-4ef9-83af-bd61488c0613", "created": "2026-10-09T15:13:09.968585Z", "modified": "2026-10-09T15:13:09.968585Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ir.spy24.updater']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.968585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b9da4b3-e53a-470d-8bc6-8adbf1054843", "created": "2026-10-09T15:13:09.969136Z", "modified": "2026-10-09T15:13:09.969136Z", "relationship_type": "indicates", "source_ref": "indicator--65005271-c5ca-4ef9-83af-bd61488c0613", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7546e099-a362-415b-833d-2598ffaca080", "created": "2026-10-09T15:13:09.969257Z", "modified": "2026-10-09T15:13:09.969257Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ir.spy24.wifi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.969257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f428751d-1eea-4830-8d68-985f85a9360f", "created": "2026-10-09T15:13:09.969725Z", "modified": "2026-10-09T15:13:09.969725Z", "relationship_type": "indicates", "source_ref": "indicator--7546e099-a362-415b-833d-2598ffaca080", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2736c6-37b8-4fb5-9d69-78d49c30a524", "created": "2026-10-09T15:13:09.969845Z", "modified": "2026-10-09T15:13:09.969845Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.spy24.systemwifi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.969845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78418045-480a-42cf-ba28-5721395c7a7f", "created": "2026-10-09T15:13:09.97032Z", "modified": "2026-10-09T15:13:09.97032Z", "relationship_type": "indicates", "source_ref": "indicator--3a2736c6-37b8-4fb5-9d69-78d49c30a524", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec1e0ab-44f9-4d48-92f1-1ccbb329ef80", "created": "2026-10-09T15:13:09.970445Z", "modified": "2026-10-09T15:13:09.970445Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.spy24.spy24installer']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.970445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d901ac3-a8c6-4cf1-9623-a332664e989d", "created": "2026-10-09T15:13:09.970905Z", "modified": "2026-10-09T15:13:09.970905Z", "relationship_type": "indicates", "source_ref": "indicator--7ec1e0ab-44f9-4d48-92f1-1ccbb329ef80", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec8bbf2-8207-4d52-85bf-bd12e4c754be", "created": "2026-10-09T15:13:09.971024Z", "modified": "2026-10-09T15:13:09.971024Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='79C395148C34F0826E04B37A6632A53A7977A1AA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.971024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64be91f6-844f-48bc-a59e-8ce0fcda26fe", "created": "2026-10-09T15:13:09.97158Z", "modified": "2026-10-09T15:13:09.97158Z", "relationship_type": "indicates", "source_ref": "indicator--5ec8bbf2-8207-4d52-85bf-bd12e4c754be", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242b9b69-25a8-4692-acb3-e8a4dff3dbc5", "created": "2026-10-09T15:13:09.971702Z", "modified": "2026-10-09T15:13:09.971702Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F5C25A3B800311E8053295676ADB112753E03F0B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.971702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d51bc02-1f57-4359-8798-f623554b5f54", "created": "2026-10-09T15:13:09.972241Z", "modified": "2026-10-09T15:13:09.972241Z", "relationship_type": "indicates", "source_ref": "indicator--242b9b69-25a8-4692-acb3-e8a4dff3dbc5", "target_ref": "malware--780f5350-21f2-4ff1-823e-0cef34729be6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d", "created": "2026-10-09T15:13:09.972372Z", "modified": "2026-10-09T15:13:09.972372Z", "name": "CatWatchful", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fae41b8-1b7c-4a50-8f34-ae1c6437cd0d", "created": "2026-10-09T15:13:09.972487Z", "modified": "2026-10-09T15:13:09.972487Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.972487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2533ba86-354f-4579-b4d8-7b5006acd5c5", "created": "2026-10-09T15:13:09.972964Z", "modified": "2026-10-09T15:13:09.972964Z", "relationship_type": "indicates", "source_ref": "indicator--8fae41b8-1b7c-4a50-8f34-ae1c6437cd0d", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56a41c4-526e-421b-b4f1-9240fb18c105", "created": "2026-10-09T15:13:09.973083Z", "modified": "2026-10-09T15:13:09.973083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful-e03b8.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.973083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70782a99-2801-462e-b400-22c1c62d9015", "created": "2026-10-09T15:13:09.973591Z", "modified": "2026-10-09T15:13:09.973591Z", "relationship_type": "indicates", "source_ref": "indicator--c56a41c4-526e-421b-b4f1-9240fb18c105", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940a9740-ac48-4baa-806a-3e2f9a0b93d6", "created": "2026-10-09T15:13:09.973713Z", "modified": "2026-10-09T15:13:09.973713Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful-e03b8-2.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.973713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bc4a738-be3c-48c6-8cf6-c43d7628c29a", "created": "2026-10-09T15:13:09.974208Z", "modified": "2026-10-09T15:13:09.974208Z", "relationship_type": "indicates", "source_ref": "indicator--940a9740-ac48-4baa-806a-3e2f9a0b93d6", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ab907d-1ecd-437b-be9c-3d4030fcf7b2", "created": "2026-10-09T15:13:09.97434Z", "modified": "2026-10-09T15:13:09.97434Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us-central1-catwatchful-e03b8.cloudfunctions.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.97434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75007b4b-92ef-442a-b224-dbd032edb509", "created": "2026-10-09T15:13:09.974963Z", "modified": "2026-10-09T15:13:09.974963Z", "relationship_type": "indicates", "source_ref": "indicator--b3ab907d-1ecd-437b-be9c-3d4030fcf7b2", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d5b8f5-e660-4b1d-aa45-716b9c4d6dd4", "created": "2026-10-09T15:13:09.975087Z", "modified": "2026-10-09T15:13:09.975087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.975087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69fa0fa4-a51c-402c-adb6-b1c4c55aa3ff", "created": "2026-10-09T15:13:09.975563Z", "modified": "2026-10-09T15:13:09.975563Z", "relationship_type": "indicates", "source_ref": "indicator--69d5b8f5-e660-4b1d-aa45-716b9c4d6dd4", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce32cd9b-f79c-46f5-b79d-5252ff911f17", "created": "2026-10-09T15:13:09.975684Z", "modified": "2026-10-09T15:13:09.975684Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.975684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f3a122b-c37f-49fb-9bce-e936d715f9a3", "created": "2026-10-09T15:13:09.97615Z", "modified": "2026-10-09T15:13:09.97615Z", "relationship_type": "indicates", "source_ref": "indicator--ce32cd9b-f79c-46f5-b79d-5252ff911f17", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c53f25-b00e-45ec-8f6a-5f03983e774a", "created": "2026-10-09T15:13:09.976277Z", "modified": "2026-10-09T15:13:09.976277Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.pink']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.976277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--546f4a26-1195-461d-9452-b93a03bb2c88", "created": "2026-10-09T15:13:09.976751Z", "modified": "2026-10-09T15:13:09.976751Z", "relationship_type": "indicates", "source_ref": "indicator--d4c53f25-b00e-45ec-8f6a-5f03983e774a", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dbb100-dea3-40b4-b750-0faf41d91fb9", "created": "2026-10-09T15:13:09.976873Z", "modified": "2026-10-09T15:13:09.976873Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful-e03b8.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.976873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9ac4ef8-770a-46a2-961d-9020ce75760f", "created": "2026-10-09T15:13:09.977368Z", "modified": "2026-10-09T15:13:09.977368Z", "relationship_type": "indicates", "source_ref": "indicator--26dbb100-dea3-40b4-b750-0faf41d91fb9", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c2b2e6-6790-4b02-ac3b-98da0eae9832", "created": "2026-10-09T15:13:09.977492Z", "modified": "2026-10-09T15:13:09.977492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe77dd56ebf17341fdf8fee28ce8ddd344fa01542d73ac97284dd5242940573e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.977492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e0e32d4-e48f-472c-a7fc-a48700867c33", "created": "2026-10-09T15:13:09.978078Z", "modified": "2026-10-09T15:13:09.978078Z", "relationship_type": "indicates", "source_ref": "indicator--b4c2b2e6-6790-4b02-ac3b-98da0eae9832", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4a7ba4-67c7-4fbd-ac41-83325bb9a437", "created": "2026-10-09T15:13:09.978198Z", "modified": "2026-10-09T15:13:09.978198Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c063bd99b668f3723031f7fd5597e8d55fe2d054038a1c91094fb543e69a04ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.978198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--144c8ef7-c243-4c52-b732-4fbaae2ebecb", "created": "2026-10-09T15:13:09.978797Z", "modified": "2026-10-09T15:13:09.978797Z", "relationship_type": "indicates", "source_ref": "indicator--bd4a7ba4-67c7-4fbd-ac41-83325bb9a437", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa69502-9b12-40f1-ac8a-db1b2a350504", "created": "2026-10-09T15:13:09.978919Z", "modified": "2026-10-09T15:13:09.978919Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60b15caf1287b9f15923d30fb853e1b2cb44366c15720c55ce0f4eb90d5f85b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.978919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9109a8dc-d795-42ab-8625-702b950f20d6", "created": "2026-10-09T15:13:09.979519Z", "modified": "2026-10-09T15:13:09.979519Z", "relationship_type": "indicates", "source_ref": "indicator--0aa69502-9b12-40f1-ac8a-db1b2a350504", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2aec5a-b3f6-461d-a89e-4cefffe928d3", "created": "2026-10-09T15:13:09.979647Z", "modified": "2026-10-09T15:13:09.979647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2976d9a27f1c6eaa04d08e25209c86cbd856c54afc78134289a05f26823c7963']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.979647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e3067b7-d271-4e2e-aa1b-39e87b5465ea", "created": "2026-10-09T15:13:09.980235Z", "modified": "2026-10-09T15:13:09.980235Z", "relationship_type": "indicates", "source_ref": "indicator--5b2aec5a-b3f6-461d-a89e-4cefffe928d3", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a12684b-7e0c-4dea-8b50-a5c1f9a7edfd", "created": "2026-10-09T15:13:09.980367Z", "modified": "2026-10-09T15:13:09.980367Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a17f2827ae21e9fadd35d2d49a873ed5bf5fd3c004dcd01464580cf956250f87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.980367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c35f6b19-9095-416e-b930-0656a2379100", "created": "2026-10-09T15:13:09.981043Z", "modified": "2026-10-09T15:13:09.981043Z", "relationship_type": "indicates", "source_ref": "indicator--5a12684b-7e0c-4dea-8b50-a5c1f9a7edfd", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257ae070-3984-40de-a9c9-9596b0a9b248", "created": "2026-10-09T15:13:09.981166Z", "modified": "2026-10-09T15:13:09.981166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b08acf93dc801ed4f2622b803f5aa064802fd93c740815e734d6c5f1dd3f1fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.981166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a512c96-7c1e-423c-a47e-a355e8fee076", "created": "2026-10-09T15:13:09.981761Z", "modified": "2026-10-09T15:13:09.981761Z", "relationship_type": "indicates", "source_ref": "indicator--257ae070-3984-40de-a9c9-9596b0a9b248", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417addf3-9efb-481c-bbdb-4c19c47150ef", "created": "2026-10-09T15:13:09.981888Z", "modified": "2026-10-09T15:13:09.981888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be2117b85fe9011bb225757f2b5aa60b37fd2b9e9456b1646fe157e82c151730']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.981888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbb7da46-3b28-4b00-bfa9-342f1cc2df13", "created": "2026-10-09T15:13:09.982482Z", "modified": "2026-10-09T15:13:09.982482Z", "relationship_type": "indicates", "source_ref": "indicator--417addf3-9efb-481c-bbdb-4c19c47150ef", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cd085d-f62d-4228-80e2-50128308eadb", "created": "2026-10-09T15:13:09.982606Z", "modified": "2026-10-09T15:13:09.982606Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c6194edfac89a1342a122880efa264ff68fff6aafeb9b12796993d7afc0acdd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.982606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcba2bbd-a946-44bf-9e68-deb76ee04f15", "created": "2026-10-09T15:13:09.983186Z", "modified": "2026-10-09T15:13:09.983186Z", "relationship_type": "indicates", "source_ref": "indicator--c0cd085d-f62d-4228-80e2-50128308eadb", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5034cbe6-f55f-4ebb-9d10-b0b668b29b01", "created": "2026-10-09T15:13:09.983318Z", "modified": "2026-10-09T15:13:09.983318Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53368734b4a4726c046b686f9cd65f49b3fc974a447e49d12263686969093733']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.983318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3238df80-bc3f-4795-be17-457bbb9590cd", "created": "2026-10-09T15:13:09.9839Z", "modified": "2026-10-09T15:13:09.9839Z", "relationship_type": "indicates", "source_ref": "indicator--5034cbe6-f55f-4ebb-9d10-b0b668b29b01", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c582b42-6a18-4c11-ae41-d3e0029602b0", "created": "2026-10-09T15:13:09.984018Z", "modified": "2026-10-09T15:13:09.984018Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='553e5ac25765c2b2761f59f09119ae25776d7b472ebadad202b665ed0e67a9d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.984018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2db378f-5e9c-4f8b-be50-31ab55e6befd", "created": "2026-10-09T15:13:09.984607Z", "modified": "2026-10-09T15:13:09.984607Z", "relationship_type": "indicates", "source_ref": "indicator--0c582b42-6a18-4c11-ae41-d3e0029602b0", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b80e026-1c3e-459d-bd29-828816a9f4ff", "created": "2026-10-09T15:13:09.984728Z", "modified": "2026-10-09T15:13:09.984728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd3b233be7017f03139f323f38ff0d049ec9a67fe1b4b1a4989b0ae84b495297']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.984728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51bf392d-3427-46f8-b574-9e77325a747c", "created": "2026-10-09T15:13:09.985316Z", "modified": "2026-10-09T15:13:09.985316Z", "relationship_type": "indicates", "source_ref": "indicator--8b80e026-1c3e-459d-bd29-828816a9f4ff", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c196cf32-bcaa-4c69-89f8-0eba6eed95fa", "created": "2026-10-09T15:13:09.985436Z", "modified": "2026-10-09T15:13:09.985436Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47a2eeece313d88f73ec09b927c405edb232ba8d6a37b1df3b9990490f993590']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.985436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36eb2211-4a83-4a58-bd8b-686af8471bad", "created": "2026-10-09T15:13:09.986013Z", "modified": "2026-10-09T15:13:09.986013Z", "relationship_type": "indicates", "source_ref": "indicator--c196cf32-bcaa-4c69-89f8-0eba6eed95fa", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d1fcdc-5436-4e90-b01c-e04ddc8dfa7c", "created": "2026-10-09T15:13:09.986135Z", "modified": "2026-10-09T15:13:09.986135Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ff34cfc43b9611f1c78f39d062a9e41f98b88ea86568f3480e69f37e772d188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.986135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7defe47b-512b-4382-a977-e8940bdf37b1", "created": "2026-10-09T15:13:09.986723Z", "modified": "2026-10-09T15:13:09.986723Z", "relationship_type": "indicates", "source_ref": "indicator--c8d1fcdc-5436-4e90-b01c-e04ddc8dfa7c", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f053db39-cbf4-4564-ad5d-49b619e3a031", "created": "2026-10-09T15:13:09.98685Z", "modified": "2026-10-09T15:13:09.98685Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc2796d634e3d919ff69a8bce4498d1f2c526dcec5e88259bf7f04e389d2507b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.98685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77efbe13-239f-4e5f-af86-edc133e8fcde", "created": "2026-10-09T15:13:09.987848Z", "modified": "2026-10-09T15:13:09.987848Z", "relationship_type": "indicates", "source_ref": "indicator--f053db39-cbf4-4564-ad5d-49b619e3a031", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0ae2b6-d20e-4834-aba8-fe8274fc547a", "created": "2026-10-09T15:13:09.987978Z", "modified": "2026-10-09T15:13:09.987978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cd408a676818c03bac423ed3f6a661a5e68a2160344f8147c10d0552d7a7bfc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.987978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc46df9e-e242-435f-af91-3a7ff837560e", "created": "2026-10-09T15:13:09.98858Z", "modified": "2026-10-09T15:13:09.98858Z", "relationship_type": "indicates", "source_ref": "indicator--9e0ae2b6-d20e-4834-aba8-fe8274fc547a", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed45ede1-9b81-4ea1-a4f7-4448291c9ee5", "created": "2026-10-09T15:13:09.988703Z", "modified": "2026-10-09T15:13:09.988703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aee5c850ff5e443f1e4d97a5e248c806b619d55db3769093a7b4723ff96fe1d9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.988703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59722fba-705d-4c4b-810f-5a75d0e8d64f", "created": "2026-10-09T15:13:09.989293Z", "modified": "2026-10-09T15:13:09.989293Z", "relationship_type": "indicates", "source_ref": "indicator--ed45ede1-9b81-4ea1-a4f7-4448291c9ee5", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0882c8-bd1d-4e44-91ba-8840003fb27a", "created": "2026-10-09T15:13:09.989421Z", "modified": "2026-10-09T15:13:09.989421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81797af37afe240298962963e764ec4ad7f791a7ba0c4ecc6080898ea26199fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.989421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2febf8a-aaec-48f3-a3b5-8cf285daa212", "created": "2026-10-09T15:13:09.989998Z", "modified": "2026-10-09T15:13:09.989998Z", "relationship_type": "indicates", "source_ref": "indicator--ed0882c8-bd1d-4e44-91ba-8840003fb27a", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddc1905-829b-4fc9-b5ce-624db0ccac0f", "created": "2026-10-09T15:13:09.990118Z", "modified": "2026-10-09T15:13:09.990118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c797afcca01bcca459de144b6e4f604d320898012745b4f09190e2734e23fd33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.990118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3486585e-e980-4dd7-b45a-48573d5fb84c", "created": "2026-10-09T15:13:09.990711Z", "modified": "2026-10-09T15:13:09.990711Z", "relationship_type": "indicates", "source_ref": "indicator--4ddc1905-829b-4fc9-b5ce-624db0ccac0f", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3063d735-2376-416a-9bfc-3489270a002c", "created": "2026-10-09T15:13:09.990835Z", "modified": "2026-10-09T15:13:09.990835Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6a5d1fb355c7b32f0c3a8ab2dd03321ea7b3c77cf3334cf74c790bc038c7cc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.990835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--727c4007-35f0-4146-9611-8ddacff8bd9a", "created": "2026-10-09T15:13:09.991428Z", "modified": "2026-10-09T15:13:09.991428Z", "relationship_type": "indicates", "source_ref": "indicator--3063d735-2376-416a-9bfc-3489270a002c", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f1f397-2f99-48c9-828a-5b3b075ed8c9", "created": "2026-10-09T15:13:09.99155Z", "modified": "2026-10-09T15:13:09.99155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39e8e58f3ff50d1635195d0e671db701325bc2d6114b1545d6feca04c26f074c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.99155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed942836-1c28-4bb0-aedb-805707e3c36e", "created": "2026-10-09T15:13:09.992125Z", "modified": "2026-10-09T15:13:09.992125Z", "relationship_type": "indicates", "source_ref": "indicator--30f1f397-2f99-48c9-828a-5b3b075ed8c9", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b611d34f-7c75-4080-afaf-2977dd4ba820", "created": "2026-10-09T15:13:09.992244Z", "modified": "2026-10-09T15:13:09.992244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a41dd50ce93b251a9f3442202389a596766e5c9d5fbf31817a8c68066c57a8d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.992244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce4df600-2fdd-40ea-ac30-6e04ae21313d", "created": "2026-10-09T15:13:09.992837Z", "modified": "2026-10-09T15:13:09.992837Z", "relationship_type": "indicates", "source_ref": "indicator--b611d34f-7c75-4080-afaf-2977dd4ba820", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a30ddf2-02fb-43d9-ad24-bff4466ec907", "created": "2026-10-09T15:13:09.992959Z", "modified": "2026-10-09T15:13:09.992959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47897df4aa0f0533b67381cbc051a75adaae8d2caab10a6d9e31fa6435c09118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.992959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b1956ee-4ea3-4881-924c-76e413d7e6a8", "created": "2026-10-09T15:13:09.993614Z", "modified": "2026-10-09T15:13:09.993614Z", "relationship_type": "indicates", "source_ref": "indicator--1a30ddf2-02fb-43d9-ad24-bff4466ec907", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e93f94-bfd1-49d3-b44a-1f23f4a590fa", "created": "2026-10-09T15:13:09.993761Z", "modified": "2026-10-09T15:13:09.993761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c24fa3a293241cc75638bcc206ccb05291b03c18bccf915df339b232eb083a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.993761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aad729eb-9583-4dd4-80b4-b28ec8cd147c", "created": "2026-10-09T15:13:09.994482Z", "modified": "2026-10-09T15:13:09.994482Z", "relationship_type": "indicates", "source_ref": "indicator--c4e93f94-bfd1-49d3-b44a-1f23f4a590fa", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42ed87d-8c5e-4c6a-b6fe-cb1b59ab5282", "created": "2026-10-09T15:13:09.99461Z", "modified": "2026-10-09T15:13:09.99461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4601c28bb41bcc466c28a4f07d714bd9ee0a40923021ef6f80cffbb52e5b886a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.99461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84359c68-eca5-40eb-b639-be6242a3f784", "created": "2026-10-09T15:13:09.995193Z", "modified": "2026-10-09T15:13:09.995193Z", "relationship_type": "indicates", "source_ref": "indicator--b42ed87d-8c5e-4c6a-b6fe-cb1b59ab5282", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06820510-13ad-40f3-92e7-64229cb107fb", "created": "2026-10-09T15:13:09.995326Z", "modified": "2026-10-09T15:13:09.995326Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00fa503b424e90e4556e4dadab20293d279bf893c34ca988d76e3d1e540c5d59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.995326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b437c744-2e8f-4f86-b6e4-79584bb72b11", "created": "2026-10-09T15:13:09.995914Z", "modified": "2026-10-09T15:13:09.995914Z", "relationship_type": "indicates", "source_ref": "indicator--06820510-13ad-40f3-92e7-64229cb107fb", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7947b03-487f-4aa6-a64e-073b76bb9065", "created": "2026-10-09T15:13:09.996036Z", "modified": "2026-10-09T15:13:09.996036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44b85adf22f7d194be044f1150bdc1a8338ebd47c952172c5bf54cfd9e0cb4e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.996036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38bcb7f6-c2e8-4ccf-aa04-7e83c260bf51", "created": "2026-10-09T15:13:09.996659Z", "modified": "2026-10-09T15:13:09.996659Z", "relationship_type": "indicates", "source_ref": "indicator--c7947b03-487f-4aa6-a64e-073b76bb9065", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3829e643-e35d-44df-9a61-d8014a61fb72", "created": "2026-10-09T15:13:09.996821Z", "modified": "2026-10-09T15:13:09.996821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3baadde6121e589205577d8b372c6d10097823c0a14d6d68a9b656dce6750596']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.996821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24481d0d-edf4-4c5e-957e-a28ec8da3128", "created": "2026-10-09T15:13:09.997429Z", "modified": "2026-10-09T15:13:09.997429Z", "relationship_type": "indicates", "source_ref": "indicator--3829e643-e35d-44df-9a61-d8014a61fb72", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04962774-6995-41c6-a17b-ecb4308c4744", "created": "2026-10-09T15:13:09.997556Z", "modified": "2026-10-09T15:13:09.997556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f9eaa5e9c1ac6ca975988d1e0c513e325e8d52f61dc046f56c4f42bcb720827']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.997556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4eb7f805-7e1f-42f5-956b-535ab8c78aa2", "created": "2026-10-09T15:13:09.998148Z", "modified": "2026-10-09T15:13:09.998148Z", "relationship_type": "indicates", "source_ref": "indicator--04962774-6995-41c6-a17b-ecb4308c4744", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9d31c2-5921-4bad-962e-aa7aa5285648", "created": "2026-10-09T15:13:09.998284Z", "modified": "2026-10-09T15:13:09.998284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3eb43fedce4110046c24ce5817a4ad498004ef6de6e1aa957394394a9b5fcb4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.998284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5e55750-13ec-45a1-9557-34b1f3d57e54", "created": "2026-10-09T15:13:09.99886Z", "modified": "2026-10-09T15:13:09.99886Z", "relationship_type": "indicates", "source_ref": "indicator--bf9d31c2-5921-4bad-962e-aa7aa5285648", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f5d4cc-5897-4700-8298-561e482955f5", "created": "2026-10-09T15:13:09.998978Z", "modified": "2026-10-09T15:13:09.998978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3155d15a07478d5ee9e4b6398a0c789e538a90cc3eff88755544f3376fccdc7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.998978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a004f20-1655-450e-b8fd-d8d3529791ef", "created": "2026-10-09T15:13:09.99958Z", "modified": "2026-10-09T15:13:09.99958Z", "relationship_type": "indicates", "source_ref": "indicator--90f5d4cc-5897-4700-8298-561e482955f5", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf422e7-44a7-4475-a3a5-717b02778262", "created": "2026-10-09T15:13:09.999705Z", "modified": "2026-10-09T15:13:09.999705Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5dfe44c5acec25511e1307b7bd1ae715fbfd66d2925a286904fc6e483635eb7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:09.999705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d468fca-303c-4a9b-80cb-24dc8e32906d", "created": "2026-10-09T15:13:10.000297Z", "modified": "2026-10-09T15:13:10.000297Z", "relationship_type": "indicates", "source_ref": "indicator--edf422e7-44a7-4475-a3a5-717b02778262", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db37927-4819-4f25-8251-4fc6ee5c679a", "created": "2026-10-09T15:13:10.000421Z", "modified": "2026-10-09T15:13:10.000421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e048ff6e9fe5f197ec94399dc832a12f6f614fb8850336e097f86f951dc6478']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.000421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2f999b0-2196-403f-8f1a-92116a937f9c", "created": "2026-10-09T15:13:10.00111Z", "modified": "2026-10-09T15:13:10.00111Z", "relationship_type": "indicates", "source_ref": "indicator--9db37927-4819-4f25-8251-4fc6ee5c679a", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9b5208-6a45-4bba-bb12-7a8b5fdd7a09", "created": "2026-10-09T15:13:10.001233Z", "modified": "2026-10-09T15:13:10.001233Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='wosc.cwf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.001233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ad973af-2a31-419b-b556-36161f311448", "created": "2026-10-09T15:13:10.001684Z", "modified": "2026-10-09T15:13:10.001684Z", "relationship_type": "indicates", "source_ref": "indicator--1b9b5208-6a45-4bba-bb12-7a8b5fdd7a09", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fa396e-a627-4f7b-a437-16ffc02db89f", "created": "2026-10-09T15:13:10.001806Z", "modified": "2026-10-09T15:13:10.001806Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='wosc.cwf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.001806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16899622-9137-4c69-86ec-621349b74bfd", "created": "2026-10-09T15:13:10.002248Z", "modified": "2026-10-09T15:13:10.002248Z", "relationship_type": "indicates", "source_ref": "indicator--24fa396e-a627-4f7b-a437-16ffc02db89f", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d2807c-8d82-4ea5-b208-4ed6837bfb37", "created": "2026-10-09T15:13:10.002386Z", "modified": "2026-10-09T15:13:10.002386Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.wosc.androidclient']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.002386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d07acd6-9bd9-45fa-a6c0-c4e623b2fb84", "created": "2026-10-09T15:13:10.002855Z", "modified": "2026-10-09T15:13:10.002855Z", "relationship_type": "indicates", "source_ref": "indicator--d5d2807c-8d82-4ea5-b208-4ed6837bfb37", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d76ed8-14c7-4fdc-944e-3c9c2789dc1a", "created": "2026-10-09T15:13:10.002973Z", "modified": "2026-10-09T15:13:10.002973Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5037E917539B4F31E0B92EBB7A9089C5DC567518']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.002973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a301e40e-dce1-4982-a009-fdbe565e0452", "created": "2026-10-09T15:13:10.003522Z", "modified": "2026-10-09T15:13:10.003522Z", "relationship_type": "indicates", "source_ref": "indicator--06d76ed8-14c7-4fdc-944e-3c9c2789dc1a", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b61a77-c8c4-4749-988d-e25a21e2caf0", "created": "2026-10-09T15:13:10.003642Z", "modified": "2026-10-09T15:13:10.003642Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='68E4A16FD2B8D41E817CC5A06BA95B9CED9BD9F9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.003642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b3ae5a1-c379-4eee-8256-00d2aa8a30e4", "created": "2026-10-09T15:13:10.004177Z", "modified": "2026-10-09T15:13:10.004177Z", "relationship_type": "indicates", "source_ref": "indicator--f3b61a77-c8c4-4749-988d-e25a21e2caf0", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4577cf-9685-4f6e-931a-e7acb579bc05", "created": "2026-10-09T15:13:10.004307Z", "modified": "2026-10-09T15:13:10.004307Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='757DB1C635344324B665BAF056DC3E4B1D0CC39B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.004307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afc5ba3f-9ac4-46b4-8cd3-4df263e6259d", "created": "2026-10-09T15:13:10.004858Z", "modified": "2026-10-09T15:13:10.004858Z", "relationship_type": "indicates", "source_ref": "indicator--4e4577cf-9685-4f6e-931a-e7acb579bc05", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3731873c-1fc0-4af8-a1e0-2622f379c8a7", "created": "2026-10-09T15:13:10.004979Z", "modified": "2026-10-09T15:13:10.004979Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='783B1880ECDC5E75620A4C484E3BDBE08D6D4397']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.004979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfb47da9-e951-4226-9418-beb54e88a766", "created": "2026-10-09T15:13:10.005536Z", "modified": "2026-10-09T15:13:10.005536Z", "relationship_type": "indicates", "source_ref": "indicator--3731873c-1fc0-4af8-a1e0-2622f379c8a7", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcaa772-e0a8-4d65-98bf-10b068e6c082", "created": "2026-10-09T15:13:10.005658Z", "modified": "2026-10-09T15:13:10.005658Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8E352F2EE18054DF97C238915C0375AA13305DEC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.005658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e586ee3-d906-4138-8a4f-b69eff7a6e2a", "created": "2026-10-09T15:13:10.006204Z", "modified": "2026-10-09T15:13:10.006204Z", "relationship_type": "indicates", "source_ref": "indicator--fdcaa772-e0a8-4d65-98bf-10b068e6c082", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ac4982-2ebe-48b2-8585-fce70c94be9d", "created": "2026-10-09T15:13:10.006336Z", "modified": "2026-10-09T15:13:10.006336Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='92DF71DB15BEEAB77DF36FD879A89E5E0DEF4617']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.006336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f36d37d-ecac-4f2c-9f5b-7e2bb69f2e3b", "created": "2026-10-09T15:13:10.006974Z", "modified": "2026-10-09T15:13:10.006974Z", "relationship_type": "indicates", "source_ref": "indicator--15ac4982-2ebe-48b2-8585-fce70c94be9d", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fa0945-ab1c-4401-9237-c0eb225e7d92", "created": "2026-10-09T15:13:10.007099Z", "modified": "2026-10-09T15:13:10.007099Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='93135ABA6FF4B6CFE9B06153B9BDF769AEBC1D87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.007099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f2526e2-e0c4-4584-b215-77fac111d9ef", "created": "2026-10-09T15:13:10.007654Z", "modified": "2026-10-09T15:13:10.007654Z", "relationship_type": "indicates", "source_ref": "indicator--30fa0945-ab1c-4401-9237-c0eb225e7d92", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6621bc5e-c941-4f83-adf1-5390538238dd", "created": "2026-10-09T15:13:10.007779Z", "modified": "2026-10-09T15:13:10.007779Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9FE876AF76CDCB685102A38528A3A732B0872DC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.007779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66074c4b-08d7-4fb9-926d-b6128d787b7d", "created": "2026-10-09T15:13:10.008333Z", "modified": "2026-10-09T15:13:10.008333Z", "relationship_type": "indicates", "source_ref": "indicator--6621bc5e-c941-4f83-adf1-5390538238dd", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d763a1-ae74-40ee-ad35-e8a6dd174f78", "created": "2026-10-09T15:13:10.008455Z", "modified": "2026-10-09T15:13:10.008455Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B927DACA3BB3876523E2E8B1BDB56CE84B0DFFF7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.008455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e35354f-68de-40e6-8661-9b8c6b39fbbe", "created": "2026-10-09T15:13:10.008987Z", "modified": "2026-10-09T15:13:10.008987Z", "relationship_type": "indicates", "source_ref": "indicator--25d763a1-ae74-40ee-ad35-e8a6dd174f78", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdb47db-df06-4863-b65b-8962c928ba4b", "created": "2026-10-09T15:13:10.009105Z", "modified": "2026-10-09T15:13:10.009105Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F18B3369F152EC3C74EC884BE977B3CA0E0C996D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.009105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7de3a4f-7a18-4a5d-8f58-829670486bbc", "created": "2026-10-09T15:13:10.009647Z", "modified": "2026-10-09T15:13:10.009647Z", "relationship_type": "indicates", "source_ref": "indicator--4fdb47db-df06-4863-b65b-8962c928ba4b", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfaab75-3597-41a5-99d7-925e112340eb", "created": "2026-10-09T15:13:10.009766Z", "modified": "2026-10-09T15:13:10.009766Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='523C42BF2F6CBAFC78BE41043E8E3E3BB311CBA2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.009766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42172a9d-1619-4307-adc3-aac60edf2c11", "created": "2026-10-09T15:13:10.010335Z", "modified": "2026-10-09T15:13:10.010335Z", "relationship_type": "indicates", "source_ref": "indicator--7dfaab75-3597-41a5-99d7-925e112340eb", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d3f378-190a-4e18-8cd4-2c526c6918a4", "created": "2026-10-09T15:13:10.010459Z", "modified": "2026-10-09T15:13:10.010459Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77032E80CC0ECEE49B8F2F58F9999330026E0DB3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.010459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--056d7460-b5c6-4f5b-bf59-5ed791ff7f1c", "created": "2026-10-09T15:13:10.011008Z", "modified": "2026-10-09T15:13:10.011008Z", "relationship_type": "indicates", "source_ref": "indicator--70d3f378-190a-4e18-8cd4-2c526c6918a4", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efcccdb-602d-49c1-80c7-a08a85a19432", "created": "2026-10-09T15:13:10.011126Z", "modified": "2026-10-09T15:13:10.011126Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7688EA09EE353ED077E0A90D401881B63F115A3F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.011126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1efe8171-f3d0-4e30-963d-042d2a9a2f6c", "created": "2026-10-09T15:13:10.011679Z", "modified": "2026-10-09T15:13:10.011679Z", "relationship_type": "indicates", "source_ref": "indicator--3efcccdb-602d-49c1-80c7-a08a85a19432", "target_ref": "malware--27d6e875-5aa2-4da7-b390-86ec6c4ebc3d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--08f43763-8a93-4802-bad3-af7c2b87d700", "created": "2026-10-09T15:13:10.0118Z", "modified": "2026-10-09T15:13:10.0118Z", "name": "HighsterMobile", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c86eb8-80d3-4fd4-9583-4852b18d8b61", "created": "2026-10-09T15:13:10.011917Z", "modified": "2026-10-09T15:13:10.011917Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a71f4.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.011917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8c7746f-c2f4-405b-b596-42c63a0e81c5", "created": "2026-10-09T15:13:10.012508Z", "modified": "2026-10-09T15:13:10.012508Z", "relationship_type": "indicates", "source_ref": "indicator--b2c86eb8-80d3-4fd4-9583-4852b18d8b61", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97aca558-26cb-42b3-aef3-f661729426be", "created": "2026-10-09T15:13:10.012638Z", "modified": "2026-10-09T15:13:10.012638Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ac480.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.012638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbc4c6ef-287b-4982-a5b9-a66c856486e2", "created": "2026-10-09T15:13:10.013125Z", "modified": "2026-10-09T15:13:10.013125Z", "relationship_type": "indicates", "source_ref": "indicator--97aca558-26cb-42b3-aef3-f661729426be", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bc3dbf-b08b-424a-9470-d7c2ad81406f", "created": "2026-10-09T15:13:10.013246Z", "modified": "2026-10-09T15:13:10.013246Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='auto-forward.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.013246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77326409-3e89-4b9e-b4df-29edb19a8ba4", "created": "2026-10-09T15:13:10.013732Z", "modified": "2026-10-09T15:13:10.013732Z", "relationship_type": "indicates", "source_ref": "indicator--c9bc3dbf-b08b-424a-9470-d7c2ad81406f", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a460101-4ef0-4981-b892-8c5a77f9f1b3", "created": "2026-10-09T15:13:10.013851Z", "modified": "2026-10-09T15:13:10.013851Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='autoforward-8433d.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.013851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b924c30-1403-4a4d-91bb-f4564792135b", "created": "2026-10-09T15:13:10.014343Z", "modified": "2026-10-09T15:13:10.014343Z", "relationship_type": "indicates", "source_ref": "indicator--2a460101-4ef0-4981-b892-8c5a77f9f1b3", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9786dc28-0272-464d-ac50-7c8e56f57e73", "created": "2026-10-09T15:13:10.014462Z", "modified": "2026-10-09T15:13:10.014462Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='backup-a71f4.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.014462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7069c7fc-83a8-49bb-98dd-27c33bb4c358", "created": "2026-10-09T15:13:10.014947Z", "modified": "2026-10-09T15:13:10.014947Z", "relationship_type": "indicates", "source_ref": "indicator--9786dc28-0272-464d-ac50-7c8e56f57e73", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a1ed47-3c3c-4a6b-baca-3fdc442e2c9b", "created": "2026-10-09T15:13:10.015068Z", "modified": "2026-10-09T15:13:10.015068Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphoneservices.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.015068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e6d154-f2b8-495e-83fb-3d57f88e74ae", "created": "2026-10-09T15:13:10.015558Z", "modified": "2026-10-09T15:13:10.015558Z", "relationship_type": "indicates", "source_ref": "indicator--e0a1ed47-3c3c-4a6b-baca-3fdc442e2c9b", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8dd56e-1736-4b5f-8d98-05394d184678", "created": "2026-10-09T15:13:10.015681Z", "modified": "2026-10-09T15:13:10.015681Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ddiutilities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.015681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df23ee6c-d367-4acc-9190-95e05110e6ea", "created": "2026-10-09T15:13:10.01615Z", "modified": "2026-10-09T15:13:10.01615Z", "relationship_type": "indicates", "source_ref": "indicator--ad8dd56e-1736-4b5f-8d98-05394d184678", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80589ff0-64d8-49b5-beb4-148100dd92d5", "created": "2026-10-09T15:13:10.016278Z", "modified": "2026-10-09T15:13:10.016278Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='device-ac480.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.016278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e1ddbc1-ae4d-4080-86b1-6bd5fc242d8c", "created": "2026-10-09T15:13:10.016765Z", "modified": "2026-10-09T15:13:10.016765Z", "relationship_type": "indicates", "source_ref": "indicator--80589ff0-64d8-49b5-beb4-148100dd92d5", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffd60c9-c3f3-4d3e-bd3f-87d5a61e521b", "created": "2026-10-09T15:13:10.016883Z", "modified": "2026-10-09T15:13:10.016883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='device-ac480.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.016883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a32dd67-95c4-45c9-846d-f094f3e25d5b", "created": "2026-10-09T15:13:10.017385Z", "modified": "2026-10-09T15:13:10.017385Z", "relationship_type": "indicates", "source_ref": "indicator--4ffd60c9-c3f3-4d3e-bd3f-87d5a61e521b", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd461356-3403-4198-aa8e-4f982c6a1f11", "created": "2026-10-09T15:13:10.017505Z", "modified": "2026-10-09T15:13:10.017505Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='evt17.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.017505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--350e2625-a583-44fb-8dc3-0f5ef775c776", "created": "2026-10-09T15:13:10.018065Z", "modified": "2026-10-09T15:13:10.018065Z", "relationship_type": "indicates", "source_ref": "indicator--fd461356-3403-4198-aa8e-4f982c6a1f11", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877618b7-71f4-498d-a959-58a6a7c41c95", "created": "2026-10-09T15:13:10.01819Z", "modified": "2026-10-09T15:13:10.01819Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ngc77.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.01819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11fc300e-6b5b-4fe3-a2c5-9e74695cfa4c", "created": "2026-10-09T15:13:10.018675Z", "modified": "2026-10-09T15:13:10.018675Z", "relationship_type": "indicates", "source_ref": "indicator--877618b7-71f4-498d-a959-58a6a7c41c95", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0b3a36-cb42-462d-bd36-06f92abdf839", "created": "2026-10-09T15:13:10.018795Z", "modified": "2026-10-09T15:13:10.018795Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespector-b2f13.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.018795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4366fd0b-33d2-44ca-a921-e9a7b3858375", "created": "2026-10-09T15:13:10.019293Z", "modified": "2026-10-09T15:13:10.019293Z", "relationship_type": "indicates", "source_ref": "indicator--0e0b3a36-cb42-462d-bd36-06f92abdf839", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28b9708-0440-42a3-b66d-bb5f50718235", "created": "2026-10-09T15:13:10.019411Z", "modified": "2026-10-09T15:13:10.019411Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespector.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.019411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--321ea207-f529-4316-9907-4098ce0fc126", "created": "2026-10-09T15:13:10.019879Z", "modified": "2026-10-09T15:13:10.019879Z", "relationship_type": "indicates", "source_ref": "indicator--b28b9708-0440-42a3-b66d-bb5f50718235", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4c1372-d33d-47bd-993a-ab30854e71ca", "created": "2026-10-09T15:13:10.019997Z", "modified": "2026-10-09T15:13:10.019997Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='auto-forward.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.019997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--917b95ac-32cd-495b-9da1-078a1218fed3", "created": "2026-10-09T15:13:10.020478Z", "modified": "2026-10-09T15:13:10.020478Z", "relationship_type": "indicates", "source_ref": "indicator--0d4c1372-d33d-47bd-993a-ab30854e71ca", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fd67ea-a4c2-4130-acb7-2d18fd753eaa", "created": "2026-10-09T15:13:10.020599Z", "modified": "2026-10-09T15:13:10.020599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='autoforward.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.020599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39495ca9-d5ed-4681-aee9-28f790e5c7f4", "created": "2026-10-09T15:13:10.021065Z", "modified": "2026-10-09T15:13:10.021065Z", "relationship_type": "indicates", "source_ref": "indicator--c4fd67ea-a4c2-4130-acb7-2d18fd753eaa", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f6719d-e3c1-45bc-9721-7f7ee58663eb", "created": "2026-10-09T15:13:10.021183Z", "modified": "2026-10-09T15:13:10.021183Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='autoforward.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.021183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50ac2e89-7e7e-47f1-94d3-e736a98b9573", "created": "2026-10-09T15:13:10.021658Z", "modified": "2026-10-09T15:13:10.021658Z", "relationship_type": "indicates", "source_ref": "indicator--71f6719d-e3c1-45bc-9721-7f7ee58663eb", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9075c7dc-0af9-4514-9df7-f216b28d125e", "created": "2026-10-09T15:13:10.021775Z", "modified": "2026-10-09T15:13:10.021775Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bestcellphonespyapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.021775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5decd93b-9bca-4894-ab21-12cdefded334", "created": "2026-10-09T15:13:10.022251Z", "modified": "2026-10-09T15:13:10.022251Z", "relationship_type": "indicates", "source_ref": "indicator--9075c7dc-0af9-4514-9df7-f216b28d125e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85e19d0-620d-4197-a18c-814c74a51a3b", "created": "2026-10-09T15:13:10.022386Z", "modified": "2026-10-09T15:13:10.022386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='buyeasyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.022386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cafd5b17-b210-4a67-9b52-bfeec3afced6", "created": "2026-10-09T15:13:10.022852Z", "modified": "2026-10-09T15:13:10.022852Z", "relationship_type": "indicates", "source_ref": "indicator--d85e19d0-620d-4197-a18c-814c74a51a3b", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6733e493-8739-49ba-b525-93774f3bf5d5", "created": "2026-10-09T15:13:10.022976Z", "modified": "2026-10-09T15:13:10.022976Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphoneservices.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.022976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e27db0f-c0ae-48f3-9814-e9245d8be4a0", "created": "2026-10-09T15:13:10.023559Z", "modified": "2026-10-09T15:13:10.023559Z", "relationship_type": "indicates", "source_ref": "indicator--6733e493-8739-49ba-b525-93774f3bf5d5", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30ceeba-51e2-472f-a3f4-df584cf3bbb4", "created": "2026-10-09T15:13:10.023682Z", "modified": "2026-10-09T15:13:10.023682Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ddiutilities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.023682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d220415f-b219-41cd-88ef-2bd32e22c75a", "created": "2026-10-09T15:13:10.024155Z", "modified": "2026-10-09T15:13:10.024155Z", "relationship_type": "indicates", "source_ref": "indicator--c30ceeba-51e2-472f-a3f4-df584cf3bbb4", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f02277-4f8d-49ae-a218-b76e291741c8", "created": "2026-10-09T15:13:10.024291Z", "modified": "2026-10-09T15:13:10.024291Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev.safeguarde.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.024291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--447b4134-87e3-4def-9cb2-bd094556264a", "created": "2026-10-09T15:13:10.024768Z", "modified": "2026-10-09T15:13:10.024768Z", "relationship_type": "indicates", "source_ref": "indicator--98f02277-4f8d-49ae-a218-b76e291741c8", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6715f629-96b8-45ee-a2db-9d7c20b706f8", "created": "2026-10-09T15:13:10.024885Z", "modified": "2026-10-09T15:13:10.024885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='digitalsecurityworld.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.024885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9eaf5fc-2f5d-4562-ad9f-c2dc6572556c", "created": "2026-10-09T15:13:10.025375Z", "modified": "2026-10-09T15:13:10.025375Z", "relationship_type": "indicates", "source_ref": "indicator--6715f629-96b8-45ee-a2db-9d7c20b706f8", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a8692b-72be-41d0-96e9-73dbf2c46cf2", "created": "2026-10-09T15:13:10.025495Z", "modified": "2026-10-09T15:13:10.025495Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='evt17.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.025495Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7db11a47-cb8c-4b69-a8bf-2eeb33426b92", "created": "2026-10-09T15:13:10.025952Z", "modified": "2026-10-09T15:13:10.025952Z", "relationship_type": "indicates", "source_ref": "indicator--11a8692b-72be-41d0-96e9-73dbf2c46cf2", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189a0de4-d8b4-4aa4-9f29-c42ad10f8405", "created": "2026-10-09T15:13:10.02607Z", "modified": "2026-10-09T15:13:10.02607Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='highstermobile.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.02607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--511ba7d1-fc43-4bfb-bdef-5f1b39eba1f8", "created": "2026-10-09T15:13:10.026546Z", "modified": "2026-10-09T15:13:10.026546Z", "relationship_type": "indicates", "source_ref": "indicator--189a0de4-d8b4-4aa4-9f29-c42ad10f8405", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10cb499-ffb7-4f49-a304-f643a3a7fbc4", "created": "2026-10-09T15:13:10.026669Z", "modified": "2026-10-09T15:13:10.026669Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='highstermobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.026669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f75765e8-ce38-4c10-be14-161af3e9afb3", "created": "2026-10-09T15:13:10.027145Z", "modified": "2026-10-09T15:13:10.027145Z", "relationship_type": "indicates", "source_ref": "indicator--e10cb499-ffb7-4f49-a304-f643a3a7fbc4", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9c1b09-947e-4113-a26b-67b75ee1617e", "created": "2026-10-09T15:13:10.027275Z", "modified": "2026-10-09T15:13:10.027275Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ilfmobileapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.027275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6941b800-c133-4c92-ba2d-ef26599f03fd", "created": "2026-10-09T15:13:10.027753Z", "modified": "2026-10-09T15:13:10.027753Z", "relationship_type": "indicates", "source_ref": "indicator--3e9c1b09-947e-4113-a26b-67b75ee1617e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc546df-6ecc-4cb3-b0e3-4dc6b9cb4e12", "created": "2026-10-09T15:13:10.027876Z", "modified": "2026-10-09T15:13:10.027876Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.surepointspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.027876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5a35212-4e98-4584-98ba-6a256547adca", "created": "2026-10-09T15:13:10.028394Z", "modified": "2026-10-09T15:13:10.028394Z", "relationship_type": "indicates", "source_ref": "indicator--ebc546df-6ecc-4cb3-b0e3-4dc6b9cb4e12", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4c94df-d1b3-454b-9832-7e4f42de5778", "created": "2026-10-09T15:13:10.028517Z", "modified": "2026-10-09T15:13:10.028517Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespector.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.028517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eb2ade4-c5e7-46b3-918d-2cc63cb11552", "created": "2026-10-09T15:13:10.029078Z", "modified": "2026-10-09T15:13:10.029078Z", "relationship_type": "indicates", "source_ref": "indicator--6a4c94df-d1b3-454b-9832-7e4f42de5778", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269b4bac-1d4b-408b-b4d3-5a018ad0bdb8", "created": "2026-10-09T15:13:10.029199Z", "modified": "2026-10-09T15:13:10.029199Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safeguarde.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.029199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33104a90-43f3-4644-b2f8-50c31ba3d553", "created": "2026-10-09T15:13:10.029682Z", "modified": "2026-10-09T15:13:10.029682Z", "relationship_type": "indicates", "source_ref": "indicator--269b4bac-1d4b-408b-b4d3-5a018ad0bdb8", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dbbb1b-e0c8-49da-b627-7c8033cf18a4", "created": "2026-10-09T15:13:10.029804Z", "modified": "2026-10-09T15:13:10.029804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='surepointspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.029804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--260dbe43-6ba0-415d-a114-480143768d28", "created": "2026-10-09T15:13:10.03028Z", "modified": "2026-10-09T15:13:10.03028Z", "relationship_type": "indicates", "source_ref": "indicator--78dbbb1b-e0c8-49da-b627-7c8033cf18a4", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ae3d4b-72e1-4be8-9847-8a8ef5b1b6fb", "created": "2026-10-09T15:13:10.030405Z", "modified": "2026-10-09T15:13:10.030405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thepowerlinegroup.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.030405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a46b8f21-2c01-4323-ac73-59d21999937d", "created": "2026-10-09T15:13:10.030877Z", "modified": "2026-10-09T15:13:10.030877Z", "relationship_type": "indicates", "source_ref": "indicator--80ae3d4b-72e1-4be8-9847-8a8ef5b1b6fb", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075faa7a-35f0-4f8d-ad3b-3deef1eb1c37", "created": "2026-10-09T15:13:10.031Z", "modified": "2026-10-09T15:13:10.031Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='turbophonepsy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2c6aaad-94e9-40b6-a766-041c8e332434", "created": "2026-10-09T15:13:10.031484Z", "modified": "2026-10-09T15:13:10.031484Z", "relationship_type": "indicates", "source_ref": "indicator--075faa7a-35f0-4f8d-ad3b-3deef1eb1c37", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d0c271-b6f5-4f65-861c-ce08f983dbc0", "created": "2026-10-09T15:13:10.031608Z", "modified": "2026-10-09T15:13:10.031608Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.surepointspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.031608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15b12b38-fccf-4568-b395-d80a5c17182e", "created": "2026-10-09T15:13:10.032087Z", "modified": "2026-10-09T15:13:10.032087Z", "relationship_type": "indicates", "source_ref": "indicator--a6d0c271-b6f5-4f65-861c-ce08f983dbc0", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78742ce0-009b-4b7e-af67-351c5f44c212", "created": "2026-10-09T15:13:10.032206Z", "modified": "2026-10-09T15:13:10.032206Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='938db24aae3b4af828f8cea815c01535e0ea8bb759560d66544097aba4262624']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.032206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bd35b3a-8e9a-499b-9e0f-a3b2809c7ce9", "created": "2026-10-09T15:13:10.032806Z", "modified": "2026-10-09T15:13:10.032806Z", "relationship_type": "indicates", "source_ref": "indicator--78742ce0-009b-4b7e-af67-351c5f44c212", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ed5c0e-4d21-4861-8696-8dc5c208993e", "created": "2026-10-09T15:13:10.032928Z", "modified": "2026-10-09T15:13:10.032928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a71b17d433953f3add4788c5a12e08af94a286c9464f219db4fcd7d13a115ade']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.032928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f669946b-dc06-4993-81fb-950a2e2f54a3", "created": "2026-10-09T15:13:10.033522Z", "modified": "2026-10-09T15:13:10.033522Z", "relationship_type": "indicates", "source_ref": "indicator--88ed5c0e-4d21-4861-8696-8dc5c208993e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb6ccfb-4730-4911-8674-6305fca5a4cc", "created": "2026-10-09T15:13:10.033645Z", "modified": "2026-10-09T15:13:10.033645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f35d0b6c48b3392791ac52edec41ff8f770967fb8c120a933e2c5bb08675b40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.033645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--658250bd-bffd-406d-ad87-c3429fcec049", "created": "2026-10-09T15:13:10.034223Z", "modified": "2026-10-09T15:13:10.034223Z", "relationship_type": "indicates", "source_ref": "indicator--3fb6ccfb-4730-4911-8674-6305fca5a4cc", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7ecf31-0803-4ecd-8058-1548074cbdf5", "created": "2026-10-09T15:13:10.034354Z", "modified": "2026-10-09T15:13:10.034354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8cdf8f9864c7b47f61308681201eaf08a32d6de08b1b0a1c4219a541b580899']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.034354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae9606f4-d647-4575-85c1-5140758ede76", "created": "2026-10-09T15:13:10.035034Z", "modified": "2026-10-09T15:13:10.035034Z", "relationship_type": "indicates", "source_ref": "indicator--0a7ecf31-0803-4ecd-8058-1548074cbdf5", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddbae48-208e-4e02-a491-4debcf1c951a", "created": "2026-10-09T15:13:10.035157Z", "modified": "2026-10-09T15:13:10.035157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef5e17260944003fa58ecc3d3032ae86bb332f666cb4cb3d8b0d8940ba97d790']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.035157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a25612e2-96cc-4fb8-826b-09802cff35f4", "created": "2026-10-09T15:13:10.03576Z", "modified": "2026-10-09T15:13:10.03576Z", "relationship_type": "indicates", "source_ref": "indicator--1ddbae48-208e-4e02-a491-4debcf1c951a", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229d839d-b4e0-4e0e-89be-c54e6dab7f20", "created": "2026-10-09T15:13:10.035889Z", "modified": "2026-10-09T15:13:10.035889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b0e9ab177668fce3385a9d8f5eaa30b23d1057e926240d062b1632d4fd820f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.035889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd3a5dd7-d94b-497d-b9a5-77a7d4121649", "created": "2026-10-09T15:13:10.036476Z", "modified": "2026-10-09T15:13:10.036476Z", "relationship_type": "indicates", "source_ref": "indicator--229d839d-b4e0-4e0e-89be-c54e6dab7f20", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fb39a5-af9e-4392-a7e2-64e4ad18af18", "created": "2026-10-09T15:13:10.036601Z", "modified": "2026-10-09T15:13:10.036601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e13d931a2ae1e85361f90230cd3cde659a547a5b2685bfb4e2bf131b9adea5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.036601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f538a041-576c-40dc-838e-bb4fd69f65ff", "created": "2026-10-09T15:13:10.037182Z", "modified": "2026-10-09T15:13:10.037182Z", "relationship_type": "indicates", "source_ref": "indicator--97fb39a5-af9e-4392-a7e2-64e4ad18af18", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f189a131-ebb2-4538-9bc6-4a0a19475fae", "created": "2026-10-09T15:13:10.037313Z", "modified": "2026-10-09T15:13:10.037313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3122101efc547ef00c2a784526daef090db876148d36d5588bd6513b079ffa0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.037313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7537a06d-55e3-401c-aa7f-28227924a68d", "created": "2026-10-09T15:13:10.037898Z", "modified": "2026-10-09T15:13:10.037898Z", "relationship_type": "indicates", "source_ref": "indicator--f189a131-ebb2-4538-9bc6-4a0a19475fae", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc03eb0f-a166-4cec-b54c-a523bd634e13", "created": "2026-10-09T15:13:10.038016Z", "modified": "2026-10-09T15:13:10.038016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9aa3af4c99f29f640db11571f48902c49683899c9caadc3cd1de6aeba9e275e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.038016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a84f9fd-45e0-4a2c-87a6-6fad6d40402c", "created": "2026-10-09T15:13:10.038602Z", "modified": "2026-10-09T15:13:10.038602Z", "relationship_type": "indicates", "source_ref": "indicator--dc03eb0f-a166-4cec-b54c-a523bd634e13", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b24397-51b7-43d3-8b98-e573fa3b965e", "created": "2026-10-09T15:13:10.038721Z", "modified": "2026-10-09T15:13:10.038721Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acc61d9b97eb173ec23a4aeda6765b02830a6a47bcd3c16fa6d18f26c8b2abbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.038721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dbc4aeb-fa83-4c82-af20-f0c803ae2332", "created": "2026-10-09T15:13:10.039305Z", "modified": "2026-10-09T15:13:10.039305Z", "relationship_type": "indicates", "source_ref": "indicator--f3b24397-51b7-43d3-8b98-e573fa3b965e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94f4b34-a104-4118-9844-a3eb22e5200e", "created": "2026-10-09T15:13:10.039427Z", "modified": "2026-10-09T15:13:10.039427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='364596f30e98e90233470aa5fb647fb57c412ac103bbf09ab63938e2dcfa8f35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.039427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5a13b9e-20ad-4981-b60c-835549af5688", "created": "2026-10-09T15:13:10.040013Z", "modified": "2026-10-09T15:13:10.040013Z", "relationship_type": "indicates", "source_ref": "indicator--a94f4b34-a104-4118-9844-a3eb22e5200e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb23400-6c78-47d5-89fe-b85139ca4221", "created": "2026-10-09T15:13:10.04014Z", "modified": "2026-10-09T15:13:10.04014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d49a80d2fa2033c9cb7e1534b36f9632b9f19078c5bd81e16abb70cd4bf66d92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.04014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bc2328e-c74a-4436-8eb5-6d75ecc71bd8", "created": "2026-10-09T15:13:10.040743Z", "modified": "2026-10-09T15:13:10.040743Z", "relationship_type": "indicates", "source_ref": "indicator--6bb23400-6c78-47d5-89fe-b85139ca4221", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6873ec-ef6b-4021-857d-6856ac53864e", "created": "2026-10-09T15:13:10.040865Z", "modified": "2026-10-09T15:13:10.040865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82ee68050c19f9f23e5c670e9c219c1a8d1e45be5f1b378152a9e9d9858e55b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.040865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6be4c667-fb37-4f74-ae2a-9e44dc6743a5", "created": "2026-10-09T15:13:10.041573Z", "modified": "2026-10-09T15:13:10.041573Z", "relationship_type": "indicates", "source_ref": "indicator--8c6873ec-ef6b-4021-857d-6856ac53864e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ee14f2-3842-4d4e-8fbc-4c49bb28afdd", "created": "2026-10-09T15:13:10.041696Z", "modified": "2026-10-09T15:13:10.041696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e55858f1aee6a230f9459ffa50e018b4b12222c7fb66843c1658a2419726db99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.041696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f59e6c6a-976b-453d-8b39-0237182ed564", "created": "2026-10-09T15:13:10.042289Z", "modified": "2026-10-09T15:13:10.042289Z", "relationship_type": "indicates", "source_ref": "indicator--f2ee14f2-3842-4d4e-8fbc-4c49bb28afdd", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68f02ec9-a8d6-4f70-aa7a-0103e95b4112", "created": "2026-10-09T15:13:10.042412Z", "modified": "2026-10-09T15:13:10.042412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b63023f964f51fd8f401a23dccadf848cd80777406baeb3f63ec54f2821a2179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.042412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b049e729-0691-40e5-9f36-f9baea6dc88c", "created": "2026-10-09T15:13:10.042994Z", "modified": "2026-10-09T15:13:10.042994Z", "relationship_type": "indicates", "source_ref": "indicator--68f02ec9-a8d6-4f70-aa7a-0103e95b4112", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58eb183-274f-4b49-adbc-31d7e7cf033b", "created": "2026-10-09T15:13:10.043118Z", "modified": "2026-10-09T15:13:10.043118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c330a8c09c63297153a5cfcff81eb41712ed1c8da3c8c654e4443f17ae461da9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.043118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4de4623a-d624-4a8d-8198-265a0d18b456", "created": "2026-10-09T15:13:10.043723Z", "modified": "2026-10-09T15:13:10.043723Z", "relationship_type": "indicates", "source_ref": "indicator--b58eb183-274f-4b49-adbc-31d7e7cf033b", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07385c39-4143-4a03-9065-1032dd75bbd7", "created": "2026-10-09T15:13:10.043851Z", "modified": "2026-10-09T15:13:10.043851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ab873c0b420b224fc1df482eec9d59a1309bec4afd675f5010a162d17998b59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.043851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6723ed8e-9c0b-4336-8271-af8f3776eaa6", "created": "2026-10-09T15:13:10.044453Z", "modified": "2026-10-09T15:13:10.044453Z", "relationship_type": "indicates", "source_ref": "indicator--07385c39-4143-4a03-9065-1032dd75bbd7", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1b9caf-18e7-411e-bf71-9de4b2ed4607", "created": "2026-10-09T15:13:10.044578Z", "modified": "2026-10-09T15:13:10.044578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28808594b8679d9646d31a999575d78131195209487c084187142c0db8ac4338']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.044578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef973bc-ace7-4656-9ac0-a2d869290ac3", "created": "2026-10-09T15:13:10.045159Z", "modified": "2026-10-09T15:13:10.045159Z", "relationship_type": "indicates", "source_ref": "indicator--af1b9caf-18e7-411e-bf71-9de4b2ed4607", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3647cb3f-f048-4b08-9490-daabacd43a55", "created": "2026-10-09T15:13:10.045291Z", "modified": "2026-10-09T15:13:10.045291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50db15ff369972f11e4ced9872c7cb4a00044745f1a666a81b74227e8f3a07fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.045291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f2ae912-bea5-4ac6-ac70-2da9443f2bdd", "created": "2026-10-09T15:13:10.045886Z", "modified": "2026-10-09T15:13:10.045886Z", "relationship_type": "indicates", "source_ref": "indicator--3647cb3f-f048-4b08-9490-daabacd43a55", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e618b065-d171-467d-9295-e287edd5ec18", "created": "2026-10-09T15:13:10.046008Z", "modified": "2026-10-09T15:13:10.046008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0f84fc8159f08475d560fa458317cad5140bde80d5798a92ba6e1ae9364eff1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.046008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d7a1375-2695-4437-b4bd-64eded01481d", "created": "2026-10-09T15:13:10.046611Z", "modified": "2026-10-09T15:13:10.046611Z", "relationship_type": "indicates", "source_ref": "indicator--e618b065-d171-467d-9295-e287edd5ec18", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8af106-6012-4f93-b86c-83d3c4cd69c5", "created": "2026-10-09T15:13:10.046737Z", "modified": "2026-10-09T15:13:10.046737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce378d29e5529337bdd4ae34220529c240a4f56f1bd6904559d34d0d21ab4443']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.046737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--254d9355-aa31-4d8e-958f-3a74db9338b6", "created": "2026-10-09T15:13:10.047343Z", "modified": "2026-10-09T15:13:10.047343Z", "relationship_type": "indicates", "source_ref": "indicator--7a8af106-6012-4f93-b86c-83d3c4cd69c5", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fca10ef-22ae-4fcc-b372-0cce8f1f7638", "created": "2026-10-09T15:13:10.047466Z", "modified": "2026-10-09T15:13:10.047466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51d3969fc75c16c92eff45e851196b7e78f882bd798f1fc0431818b619e1470e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.047466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d5ec517-6939-4344-9059-72874d8cf7d8", "created": "2026-10-09T15:13:10.048154Z", "modified": "2026-10-09T15:13:10.048154Z", "relationship_type": "indicates", "source_ref": "indicator--0fca10ef-22ae-4fcc-b372-0cce8f1f7638", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317a627c-46fe-466b-bfdc-8626e698ec9e", "created": "2026-10-09T15:13:10.048291Z", "modified": "2026-10-09T15:13:10.048291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e1dc9a39d44f210312b5f9ef2c70f5857ca5522e056180b490c70fc7a27e7da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.048291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01159b4c-1355-452d-96bd-d6f2d2535dc4", "created": "2026-10-09T15:13:10.048879Z", "modified": "2026-10-09T15:13:10.048879Z", "relationship_type": "indicates", "source_ref": "indicator--317a627c-46fe-466b-bfdc-8626e698ec9e", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be3bc81-882a-4536-b392-8204eed7ee23", "created": "2026-10-09T15:13:10.049001Z", "modified": "2026-10-09T15:13:10.049001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1093b4d504fd4909d8487e115826be4461fa0e0ca9b9bdab65039b6b1c8285d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.049001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2be147b5-5b16-4e24-9429-98d52808084d", "created": "2026-10-09T15:13:10.0496Z", "modified": "2026-10-09T15:13:10.0496Z", "relationship_type": "indicates", "source_ref": "indicator--4be3bc81-882a-4536-b392-8204eed7ee23", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd42a47a-f370-48bd-8c80-d401fa734772", "created": "2026-10-09T15:13:10.049727Z", "modified": "2026-10-09T15:13:10.049727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d836c14377dcd6bb9db88db2b0de8ea11bd9787390f8b46960d78836acccc207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.049727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4532ccc-ccca-4321-adf3-63f0e3309c6e", "created": "2026-10-09T15:13:10.050319Z", "modified": "2026-10-09T15:13:10.050319Z", "relationship_type": "indicates", "source_ref": "indicator--cd42a47a-f370-48bd-8c80-d401fa734772", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8749899-4d00-40d9-a155-fdd1ed626f7f", "created": "2026-10-09T15:13:10.050443Z", "modified": "2026-10-09T15:13:10.050443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51380dc4104bb6172a5a1402de4e69d9271a1ba87177a2c217c795f36d468f53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.050443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3a13387-8571-4da9-b936-8f814c8d3462", "created": "2026-10-09T15:13:10.05103Z", "modified": "2026-10-09T15:13:10.05103Z", "relationship_type": "indicates", "source_ref": "indicator--c8749899-4d00-40d9-a155-fdd1ed626f7f", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66db910a-768a-49d9-9008-03e6634f4ba8", "created": "2026-10-09T15:13:10.051151Z", "modified": "2026-10-09T15:13:10.051151Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e690fbf9a7d02cf2430c7b323c09ba4e00ddccee1befd00c428bb89c9628ef37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.051151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--580205bc-9155-4bb8-bad5-c9a6690db67c", "created": "2026-10-09T15:13:10.051746Z", "modified": "2026-10-09T15:13:10.051746Z", "relationship_type": "indicates", "source_ref": "indicator--66db910a-768a-49d9-9008-03e6634f4ba8", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d4eee6-4a5d-4340-9d2e-067459fb6ded", "created": "2026-10-09T15:13:10.051865Z", "modified": "2026-10-09T15:13:10.051865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2155b7bd208559e5839fe74feba9044ee4d548b6775b3cd49eda3fbd4fbc4b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.051865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a7a6468-8e86-40ab-9702-7ec3df47f200", "created": "2026-10-09T15:13:10.052455Z", "modified": "2026-10-09T15:13:10.052455Z", "relationship_type": "indicates", "source_ref": "indicator--f9d4eee6-4a5d-4340-9d2e-067459fb6ded", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37c41bd-9d98-4ca1-a03f-b791d69fd53a", "created": "2026-10-09T15:13:10.052575Z", "modified": "2026-10-09T15:13:10.052575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0257b232b9293dd72ce7b8db1c460d54f7fb2b52e452a3dd639e1cd66e1dab9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.052575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9a4ba19-99c8-45dc-b3aa-18b1c8352309", "created": "2026-10-09T15:13:10.053233Z", "modified": "2026-10-09T15:13:10.053233Z", "relationship_type": "indicates", "source_ref": "indicator--b37c41bd-9d98-4ca1-a03f-b791d69fd53a", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48947cee-4ab5-4068-ab60-87f74630ca80", "created": "2026-10-09T15:13:10.053386Z", "modified": "2026-10-09T15:13:10.053386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3aa6bdc2d66e9842bde47c8c79010106966a2f0dc24dbe62a51a5e0314994fe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.053386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--663de79b-c173-4eab-8c9a-5ddf88baa9b6", "created": "2026-10-09T15:13:10.054084Z", "modified": "2026-10-09T15:13:10.054084Z", "relationship_type": "indicates", "source_ref": "indicator--48947cee-4ab5-4068-ab60-87f74630ca80", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c97387-85fb-4840-9202-2a595b62d3a1", "created": "2026-10-09T15:13:10.054213Z", "modified": "2026-10-09T15:13:10.054213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='528eede62b2e0ebe848717e72fd68fcbaa5fc473941c8012e6f064dae32f9967']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.054213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b5f461b-6474-4fae-ab93-75e74f24210e", "created": "2026-10-09T15:13:10.054816Z", "modified": "2026-10-09T15:13:10.054816Z", "relationship_type": "indicates", "source_ref": "indicator--09c97387-85fb-4840-9202-2a595b62d3a1", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96ae748-a5ca-4e9b-bfbf-b12bbfd5bd9b", "created": "2026-10-09T15:13:10.054941Z", "modified": "2026-10-09T15:13:10.054941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b183e8c52ad4b6ed725d0dc13c995ea8981b7d8e06578b1c00485a3a615003b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.054941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3a352e7-ab6d-438a-b546-8df69f3b29ba", "created": "2026-10-09T15:13:10.05554Z", "modified": "2026-10-09T15:13:10.05554Z", "relationship_type": "indicates", "source_ref": "indicator--a96ae748-a5ca-4e9b-bfbf-b12bbfd5bd9b", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439c873c-eb55-4b85-8238-f869ff1ebd0d", "created": "2026-10-09T15:13:10.055662Z", "modified": "2026-10-09T15:13:10.055662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='163b206a7f9cc0e53b1a889b612090e1215535dee162be42bb09d4b47afde461']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.055662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--269baf28-fa50-4984-9e3b-b59008dedac3", "created": "2026-10-09T15:13:10.056243Z", "modified": "2026-10-09T15:13:10.056243Z", "relationship_type": "indicates", "source_ref": "indicator--439c873c-eb55-4b85-8238-f869ff1ebd0d", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad91203-f704-44d4-9ad9-35ab17fba4e6", "created": "2026-10-09T15:13:10.056374Z", "modified": "2026-10-09T15:13:10.056374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf9ce377ecb808318dc1737d38ec56283183ae8512ef3f9af10870c0c2efa3f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.056374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f491b10e-2490-4abb-824f-487ccf90fe90", "created": "2026-10-09T15:13:10.056973Z", "modified": "2026-10-09T15:13:10.056973Z", "relationship_type": "indicates", "source_ref": "indicator--cad91203-f704-44d4-9ad9-35ab17fba4e6", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b4dca3-0644-476d-afe3-6c2fa12dd69c", "created": "2026-10-09T15:13:10.057094Z", "modified": "2026-10-09T15:13:10.057094Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='217c1440567b34d8d37f2ae3f7a9166c5c4d0315ef912bea44c4e8e62c2e1db7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.057094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1337af78-9d6a-4b37-b968-fb79e817630b", "created": "2026-10-09T15:13:10.057691Z", "modified": "2026-10-09T15:13:10.057691Z", "relationship_type": "indicates", "source_ref": "indicator--50b4dca3-0644-476d-afe3-6c2fa12dd69c", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe9b7ae-2ac2-483a-ae6a-6c9824d72531", "created": "2026-10-09T15:13:10.057816Z", "modified": "2026-10-09T15:13:10.057816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61d6a412c8082fbaa7781accc8c830a422d182a94ff8a6b0cde8611d4c2c097d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.057816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e28ee18-5507-40ca-8124-438b00af32a3", "created": "2026-10-09T15:13:10.058417Z", "modified": "2026-10-09T15:13:10.058417Z", "relationship_type": "indicates", "source_ref": "indicator--1fe9b7ae-2ac2-483a-ae6a-6c9824d72531", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581d8aa2-a199-4211-864a-6dc88f04f8ce", "created": "2026-10-09T15:13:10.05855Z", "modified": "2026-10-09T15:13:10.05855Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b94bd72ec7d64f8a9e213837c38e26c328d3d3f8be47ea720029a050b5244990']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.05855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--637d70c9-71e0-4531-9e45-5db800623ed1", "created": "2026-10-09T15:13:10.059138Z", "modified": "2026-10-09T15:13:10.059138Z", "relationship_type": "indicates", "source_ref": "indicator--581d8aa2-a199-4211-864a-6dc88f04f8ce", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e452e3-9998-4486-a8a6-b32b470c5449", "created": "2026-10-09T15:13:10.059259Z", "modified": "2026-10-09T15:13:10.059259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='effd675d65adcaa283d2832e3f60c3c4c678c46aaf219fa4569ea116cfe3b463']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.059259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3932d732-448e-4a59-8504-96917aff4c4a", "created": "2026-10-09T15:13:10.059853Z", "modified": "2026-10-09T15:13:10.059853Z", "relationship_type": "indicates", "source_ref": "indicator--f6e452e3-9998-4486-a8a6-b32b470c5449", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801bb739-7fe2-42ef-969f-732e770eeccf", "created": "2026-10-09T15:13:10.059972Z", "modified": "2026-10-09T15:13:10.059972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='653b02c2a96033605a7c6d896053c8b7ad8fad4a2ab383acb08613ea0f75e41d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.059972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95250635-b99f-485d-b32f-503ec004f399", "created": "2026-10-09T15:13:10.060948Z", "modified": "2026-10-09T15:13:10.060948Z", "relationship_type": "indicates", "source_ref": "indicator--801bb739-7fe2-42ef-969f-732e770eeccf", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3510b4-113a-46da-99fb-a2a56243b18b", "created": "2026-10-09T15:13:10.061078Z", "modified": "2026-10-09T15:13:10.061078Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c23327f795fe4f5eba98d0fa5d74dc925fa0e1d223236d8f5729d0a6b116401f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.061078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f93efc5c-6e0c-492f-90cb-9d1be8b68e89", "created": "2026-10-09T15:13:10.061682Z", "modified": "2026-10-09T15:13:10.061682Z", "relationship_type": "indicates", "source_ref": "indicator--5e3510b4-113a-46da-99fb-a2a56243b18b", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c80a9a-e41d-4d11-8c3a-3a573ad96891", "created": "2026-10-09T15:13:10.061804Z", "modified": "2026-10-09T15:13:10.061804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2bbb8e87b338a26a035b922225ae1f6f57fcfc749495185268d12318886a292']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.061804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fc99382-4cd8-4cb0-acae-9eeb3bc54e41", "created": "2026-10-09T15:13:10.062395Z", "modified": "2026-10-09T15:13:10.062395Z", "relationship_type": "indicates", "source_ref": "indicator--96c80a9a-e41d-4d11-8c3a-3a573ad96891", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4514251e-d5e4-4a6f-a523-ef6b3291a0db", "created": "2026-10-09T15:13:10.062518Z", "modified": "2026-10-09T15:13:10.062518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4708c8e8132f14b0e19af0aa285eb486adee3cb762d81791c5d5a9baf7b2f2f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.062518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--331d54a6-43ba-4c8f-a786-997a8ea8edfc", "created": "2026-10-09T15:13:10.063095Z", "modified": "2026-10-09T15:13:10.063095Z", "relationship_type": "indicates", "source_ref": "indicator--4514251e-d5e4-4a6f-a523-ef6b3291a0db", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb426b8-eab1-462a-98cf-82103657e0c1", "created": "2026-10-09T15:13:10.063214Z", "modified": "2026-10-09T15:13:10.063214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59e3c677ba56be2f662346d707705a8ff3220e8f5f99d9a4b9f4fc650b41de88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.063214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3736fad-bee1-4c36-9647-14632a8b6842", "created": "2026-10-09T15:13:10.063807Z", "modified": "2026-10-09T15:13:10.063807Z", "relationship_type": "indicates", "source_ref": "indicator--bcb426b8-eab1-462a-98cf-82103657e0c1", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403b8de7-a135-4ade-b25f-1d2ff7ddb7ee", "created": "2026-10-09T15:13:10.063929Z", "modified": "2026-10-09T15:13:10.063929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e792db1d59f079d73c7792aead58eceefe0d05a063810a8403be9009a88b7fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.063929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40d2a293-7a2f-4462-bfcc-66a17138274f", "created": "2026-10-09T15:13:10.064518Z", "modified": "2026-10-09T15:13:10.064518Z", "relationship_type": "indicates", "source_ref": "indicator--403b8de7-a135-4ade-b25f-1d2ff7ddb7ee", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0cf0ddd-132f-41db-91c8-0343672207ba", "created": "2026-10-09T15:13:10.064638Z", "modified": "2026-10-09T15:13:10.064638Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='357f344ce7c6f639f5e55db509d655f11bf88a853cbd01092e13b08460fa1af2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.064638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36bfbbb5-24a6-470b-952e-006fc0eac3e1", "created": "2026-10-09T15:13:10.065213Z", "modified": "2026-10-09T15:13:10.065213Z", "relationship_type": "indicates", "source_ref": "indicator--d0cf0ddd-132f-41db-91c8-0343672207ba", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9e3c9e-3ee8-41ad-b30a-4e7b37ad2254", "created": "2026-10-09T15:13:10.065343Z", "modified": "2026-10-09T15:13:10.065343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='daad66a7133509b7947973e2936def4451a0ecf5782fde3f3b0cfa0a9756cc6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.065343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9103ee1-9d38-4df1-a767-ab40ee573a4d", "created": "2026-10-09T15:13:10.065921Z", "modified": "2026-10-09T15:13:10.065921Z", "relationship_type": "indicates", "source_ref": "indicator--bb9e3c9e-3ee8-41ad-b30a-4e7b37ad2254", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c143f0-735e-46ef-92a0-a5e74296b474", "created": "2026-10-09T15:13:10.066039Z", "modified": "2026-10-09T15:13:10.066039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ddd56982c1c475a2f805bd9715147233aa8af24182f099bc9372235324719e9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.066039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bad7deae-8369-4470-bcaa-c64206aac404", "created": "2026-10-09T15:13:10.066648Z", "modified": "2026-10-09T15:13:10.066648Z", "relationship_type": "indicates", "source_ref": "indicator--f4c143f0-735e-46ef-92a0-a5e74296b474", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecdb8be-5ce8-44bc-90da-483a7ecc76d7", "created": "2026-10-09T15:13:10.066771Z", "modified": "2026-10-09T15:13:10.066771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64fe966d4848f43f4a9fbd21c0fd1184cb8f97b297316ee0468fcec81b3960d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.066771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--650c496d-8034-4d6c-9191-789b694edfe1", "created": "2026-10-09T15:13:10.067479Z", "modified": "2026-10-09T15:13:10.067479Z", "relationship_type": "indicates", "source_ref": "indicator--aecdb8be-5ce8-44bc-90da-483a7ecc76d7", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f756e929-8795-4790-be6c-8a4230f6e0b3", "created": "2026-10-09T15:13:10.067604Z", "modified": "2026-10-09T15:13:10.067604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78e35033a73beba28fe46725093fe91eb5839ca93d59e18b83edb63b85e53a8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.067604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d3ea3b3-7230-40ca-a624-aafe70c16e7e", "created": "2026-10-09T15:13:10.068183Z", "modified": "2026-10-09T15:13:10.068183Z", "relationship_type": "indicates", "source_ref": "indicator--f756e929-8795-4790-be6c-8a4230f6e0b3", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e4804d-cdde-4f93-8c53-4ac1bc75ce88", "created": "2026-10-09T15:13:10.068318Z", "modified": "2026-10-09T15:13:10.068318Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41b621292bd2d4fb7ec3f6928e65f85fdad647bd7c1687808be06dd8d76260ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.068318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da6f7408-da62-444a-8b3f-edd564591733", "created": "2026-10-09T15:13:10.068903Z", "modified": "2026-10-09T15:13:10.068903Z", "relationship_type": "indicates", "source_ref": "indicator--29e4804d-cdde-4f93-8c53-4ac1bc75ce88", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b402fd8-c3f3-4957-a619-9ec39cf533af", "created": "2026-10-09T15:13:10.069027Z", "modified": "2026-10-09T15:13:10.069027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d90b0da4c46c19a853a0c91869b925a414bf5a99c9cf157cd8cf158fa02c840']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.069027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de189383-d0c6-469f-915e-9d4036d688c1", "created": "2026-10-09T15:13:10.069622Z", "modified": "2026-10-09T15:13:10.069622Z", "relationship_type": "indicates", "source_ref": "indicator--7b402fd8-c3f3-4957-a619-9ec39cf533af", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dd0a0a-f166-43d8-9fe3-4c4561118241", "created": "2026-10-09T15:13:10.069744Z", "modified": "2026-10-09T15:13:10.069744Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e05f2a8472efcbb340841ea6bc6b3345d63ba867db5435bc2b4d9fc5f2ae92d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.069744Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ab9f34e-ccfa-4246-ab32-32b7a51858d1", "created": "2026-10-09T15:13:10.07036Z", "modified": "2026-10-09T15:13:10.07036Z", "relationship_type": "indicates", "source_ref": "indicator--a5dd0a0a-f166-43d8-9fe3-4c4561118241", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ff7a4e-e167-4429-871c-3b380c0f5c94", "created": "2026-10-09T15:13:10.070485Z", "modified": "2026-10-09T15:13:10.070485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f991701ef188d167a860c3696cb3ced8dbbebfa7008c695a345fb90005bf4c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.070485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5ec2518-f57d-48c1-b403-338ae9576506", "created": "2026-10-09T15:13:10.071067Z", "modified": "2026-10-09T15:13:10.071067Z", "relationship_type": "indicates", "source_ref": "indicator--73ff7a4e-e167-4429-871c-3b380c0f5c94", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c49011-8d2f-4063-8999-f163d8850af3", "created": "2026-10-09T15:13:10.071188Z", "modified": "2026-10-09T15:13:10.071188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ca4345795db838ac77809cb0037ea792b0d0f5ac0ad804a0ff0523309010e34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.071188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a65e917-387f-437a-b040-f6c745af6d9c", "created": "2026-10-09T15:13:10.071782Z", "modified": "2026-10-09T15:13:10.071782Z", "relationship_type": "indicates", "source_ref": "indicator--52c49011-8d2f-4063-8999-f163d8850af3", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc61f60f-8f38-4e78-811f-2afb40a1a1bd", "created": "2026-10-09T15:13:10.071905Z", "modified": "2026-10-09T15:13:10.071905Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71481a24df261719216803424bd209a2456e7e79d2dda74849bab907e44d8b9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.071905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd2e43bf-f8de-4f36-b36b-0e42d3b112f6", "created": "2026-10-09T15:13:10.072513Z", "modified": "2026-10-09T15:13:10.072513Z", "relationship_type": "indicates", "source_ref": "indicator--bc61f60f-8f38-4e78-811f-2afb40a1a1bd", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7599a8d8-5036-4d2d-8533-634e6ff686cc", "created": "2026-10-09T15:13:10.07264Z", "modified": "2026-10-09T15:13:10.07264Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b38a9a7142daa7db2c9f919435efe3cb9297e5e0ac1367dd8b5a958664eec360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.07264Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6deda1c2-4f0b-4a45-b64c-b740812d4c08", "created": "2026-10-09T15:13:10.073222Z", "modified": "2026-10-09T15:13:10.073222Z", "relationship_type": "indicates", "source_ref": "indicator--7599a8d8-5036-4d2d-8533-634e6ff686cc", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf77f1c-b4c1-4020-8ab0-c9e7e14af790", "created": "2026-10-09T15:13:10.073358Z", "modified": "2026-10-09T15:13:10.073358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e7bdf0f6386de43c6a4e6373988919035c331dd447210db3ec24f59253d8f98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.073358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14512290-1b8f-42ef-9d2b-61f32ee02f36", "created": "2026-10-09T15:13:10.074045Z", "modified": "2026-10-09T15:13:10.074045Z", "relationship_type": "indicates", "source_ref": "indicator--9cf77f1c-b4c1-4020-8ab0-c9e7e14af790", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89f4eda-c27d-4bcb-a256-579ec60d12eb", "created": "2026-10-09T15:13:10.074167Z", "modified": "2026-10-09T15:13:10.074167Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.secure.smsgps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.074167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9224fed-7337-45cf-9475-e38fd2d0c383", "created": "2026-10-09T15:13:10.074633Z", "modified": "2026-10-09T15:13:10.074633Z", "relationship_type": "indicates", "source_ref": "indicator--b89f4eda-c27d-4bcb-a256-579ec60d12eb", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a315a-0e85-42ea-ba49-5988eab83419", "created": "2026-10-09T15:13:10.074753Z", "modified": "2026-10-09T15:13:10.074753Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.autoforward.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.074753Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fd2aed7-6099-4c2b-a79b-58f25bf48486", "created": "2026-10-09T15:13:10.075212Z", "modified": "2026-10-09T15:13:10.075212Z", "relationship_type": "indicates", "source_ref": "indicator--f79a315a-0e85-42ea-ba49-5988eab83419", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08284fd2-f526-4a50-bd69-4ee690a6809a", "created": "2026-10-09T15:13:10.075344Z", "modified": "2026-10-09T15:13:10.075344Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phonespector.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.075344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5009cf73-b142-4bfa-ba2a-a09850ba3377", "created": "2026-10-09T15:13:10.0758Z", "modified": "2026-10-09T15:13:10.0758Z", "relationship_type": "indicates", "source_ref": "indicator--08284fd2-f526-4a50-bd69-4ee690a6809a", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1893d869-ce39-49f8-b059-0f83a6f582ce", "created": "2026-10-09T15:13:10.075917Z", "modified": "2026-10-09T15:13:10.075917Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ddiutilities.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.075917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bed9509-544b-4ce6-9af8-e0e771b63698", "created": "2026-10-09T15:13:10.076385Z", "modified": "2026-10-09T15:13:10.076385Z", "relationship_type": "indicates", "source_ref": "indicator--1893d869-ce39-49f8-b059-0f83a6f582ce", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa340c0-5e63-40b2-8fd8-54dc4b5664ed", "created": "2026-10-09T15:13:10.076506Z", "modified": "2026-10-09T15:13:10.076506Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='683722A1C629AD5734B93E08ADFAA61775AD196F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.076506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8913781a-a965-4426-bef9-f90a64eb5b47", "created": "2026-10-09T15:13:10.077045Z", "modified": "2026-10-09T15:13:10.077045Z", "relationship_type": "indicates", "source_ref": "indicator--9fa340c0-5e63-40b2-8fd8-54dc4b5664ed", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2c0ad6-51a1-4fdd-bd37-a4bc097e7c6a", "created": "2026-10-09T15:13:10.077165Z", "modified": "2026-10-09T15:13:10.077165Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='48A2190050B80F31E1E3CCFAF9909FAD238D9849']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.077165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e61c9870-ea1e-46a0-8b59-b47b8c5e014a", "created": "2026-10-09T15:13:10.077717Z", "modified": "2026-10-09T15:13:10.077717Z", "relationship_type": "indicates", "source_ref": "indicator--ac2c0ad6-51a1-4fdd-bd37-a4bc097e7c6a", "target_ref": "malware--08f43763-8a93-4802-bad3-af7c2b87d700"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b", "created": "2026-10-09T15:13:10.077843Z", "modified": "2026-10-09T15:13:10.077843Z", "name": "iMonitorSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0d5cce-493b-406f-81f1-40f20cdd72cd", "created": "2026-10-09T15:13:10.077964Z", "modified": "2026-10-09T15:13:10.077964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitor-da8b2.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.077964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8aa3f7a-da1e-4e7f-bd88-c26d78a24c2c", "created": "2026-10-09T15:13:10.078469Z", "modified": "2026-10-09T15:13:10.078469Z", "relationship_type": "indicates", "source_ref": "indicator--7e0d5cce-493b-406f-81f1-40f20cdd72cd", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a8e5b1-5aad-412d-8936-b759e6dfcd44", "created": "2026-10-09T15:13:10.078591Z", "modified": "2026-10-09T15:13:10.078591Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorke.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.078591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b54924d1-b33c-4903-bdaa-d3c225aa4d8f", "created": "2026-10-09T15:13:10.079063Z", "modified": "2026-10-09T15:13:10.079063Z", "relationship_type": "indicates", "source_ref": "indicator--f6a8e5b1-5aad-412d-8936-b759e6dfcd44", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec193bc-ce52-4175-80bf-c6323f4d5856", "created": "2026-10-09T15:13:10.079183Z", "modified": "2026-10-09T15:13:10.079183Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.079183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93ac82cb-08af-4a14-95b4-547205d0ee1b", "created": "2026-10-09T15:13:10.079775Z", "modified": "2026-10-09T15:13:10.079775Z", "relationship_type": "indicates", "source_ref": "indicator--fec193bc-ce52-4175-80bf-c6323f4d5856", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1517d913-2ac8-4d30-b16e-be915c9818f1", "created": "2026-10-09T15:13:10.079899Z", "modified": "2026-10-09T15:13:10.079899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.079899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08661673-befe-450b-8adf-54f2c71190fb", "created": "2026-10-09T15:13:10.080388Z", "modified": "2026-10-09T15:13:10.080388Z", "relationship_type": "indicates", "source_ref": "indicator--1517d913-2ac8-4d30-b16e-be915c9818f1", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769c88cd-b517-4f06-b336-82cec1e8ebc3", "created": "2026-10-09T15:13:10.080513Z", "modified": "2026-10-09T15:13:10.080513Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.080513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7652702-0d25-4de9-8cf8-82e5a53cd0dc", "created": "2026-10-09T15:13:10.080981Z", "modified": "2026-10-09T15:13:10.080981Z", "relationship_type": "indicates", "source_ref": "indicator--769c88cd-b517-4f06-b336-82cec1e8ebc3", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1cdff2-d8a7-479a-887d-b91af069bb45", "created": "2026-10-09T15:13:10.081101Z", "modified": "2026-10-09T15:13:10.081101Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.081101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eead6f73-bb10-44db-aeac-3437c790f4e8", "created": "2026-10-09T15:13:10.081583Z", "modified": "2026-10-09T15:13:10.081583Z", "relationship_type": "indicates", "source_ref": "indicator--db1cdff2-d8a7-479a-887d-b91af069bb45", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a6d9c1-7e1c-4e85-be30-44a5677c1ac0", "created": "2026-10-09T15:13:10.081712Z", "modified": "2026-10-09T15:13:10.081712Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.081712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19380270-5604-4373-8ddc-119f57bec68f", "created": "2026-10-09T15:13:10.082201Z", "modified": "2026-10-09T15:13:10.082201Z", "relationship_type": "indicates", "source_ref": "indicator--d9a6d9c1-7e1c-4e85-be30-44a5677c1ac0", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bec893e-b506-4a94-b04a-5b18c1c11d1e", "created": "2026-10-09T15:13:10.082333Z", "modified": "2026-10-09T15:13:10.082333Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.082333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8715c557-cf0c-46a2-80bf-1fd0b67355db", "created": "2026-10-09T15:13:10.082814Z", "modified": "2026-10-09T15:13:10.082814Z", "relationship_type": "indicates", "source_ref": "indicator--8bec893e-b506-4a94-b04a-5b18c1c11d1e", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f51be94-70dc-467d-ab77-9f35378c01b6", "created": "2026-10-09T15:13:10.082936Z", "modified": "2026-10-09T15:13:10.082936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.082936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--981a06f0-a834-4576-9029-6a423b06a701", "created": "2026-10-09T15:13:10.08342Z", "modified": "2026-10-09T15:13:10.08342Z", "relationship_type": "indicates", "source_ref": "indicator--6f51be94-70dc-467d-ab77-9f35378c01b6", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c7b04a-01bd-4b28-9c8e-7b784bbe4aa0", "created": "2026-10-09T15:13:10.083542Z", "modified": "2026-10-09T15:13:10.083542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf626709db2c441d78f3772cb53bf3ea2cdf1061b52a6fe938d2e7ec2c4b5551']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.083542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fa50a4b-a64c-480c-b57a-e5bf536c2657", "created": "2026-10-09T15:13:10.084131Z", "modified": "2026-10-09T15:13:10.084131Z", "relationship_type": "indicates", "source_ref": "indicator--96c7b04a-01bd-4b28-9c8e-7b784bbe4aa0", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8488722-f35d-4b77-9610-7779b3a26d2b", "created": "2026-10-09T15:13:10.084255Z", "modified": "2026-10-09T15:13:10.084255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48dc6a29b6e44f0dfb1b45fbe02f982ede42875e6faef744998aec67869e4f3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.084255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77dbdcce-1091-4c8c-9bb2-9a4e94590408", "created": "2026-10-09T15:13:10.084855Z", "modified": "2026-10-09T15:13:10.084855Z", "relationship_type": "indicates", "source_ref": "indicator--c8488722-f35d-4b77-9610-7779b3a26d2b", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf68737-7093-4018-8084-5753c4a93a53", "created": "2026-10-09T15:13:10.084973Z", "modified": "2026-10-09T15:13:10.084973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.084973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47d2372f-04cf-4a58-a46c-4d38a047e8bf", "created": "2026-10-09T15:13:10.085672Z", "modified": "2026-10-09T15:13:10.085672Z", "relationship_type": "indicates", "source_ref": "indicator--2bf68737-7093-4018-8084-5753c4a93a53", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b728e291-2417-46a2-ad31-e7d852464400", "created": "2026-10-09T15:13:10.085797Z", "modified": "2026-10-09T15:13:10.085797Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2b46db1c0f6c239965f0bd688de394c32e825c0d782f2bd9ef61b4e14bc0def']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.085797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c7fc802-1f83-4a92-a031-e476a4894ebc", "created": "2026-10-09T15:13:10.08639Z", "modified": "2026-10-09T15:13:10.08639Z", "relationship_type": "indicates", "source_ref": "indicator--b728e291-2417-46a2-ad31-e7d852464400", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1badb4d-fe82-4d4c-8302-4c67cecd5236", "created": "2026-10-09T15:13:10.086512Z", "modified": "2026-10-09T15:13:10.086512Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.imonitor.ainfo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.086512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4453d7d5-a2a3-4183-9069-7c71cc7c51aa", "created": "2026-10-09T15:13:10.086974Z", "modified": "2026-10-09T15:13:10.086974Z", "relationship_type": "indicates", "source_ref": "indicator--d1badb4d-fe82-4d4c-8302-4c67cecd5236", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c893a7-bb7f-4dd4-b6bc-e7d401fd999e", "created": "2026-10-09T15:13:10.087096Z", "modified": "2026-10-09T15:13:10.087096Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='inc.imonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.087096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--246f076b-5b40-4b76-bfa6-05ef7b322d96", "created": "2026-10-09T15:13:10.087553Z", "modified": "2026-10-09T15:13:10.087553Z", "relationship_type": "indicates", "source_ref": "indicator--a6c893a7-bb7f-4dd4-b6bc-e7d401fd999e", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701cfd5e-564c-4922-86bb-a18cfd80cebf", "created": "2026-10-09T15:13:10.087674Z", "modified": "2026-10-09T15:13:10.087674Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3EA68714AE224B0C0EEED64A14B11D3983C3D6F8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.087674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--056e780f-d3b0-491e-bb4b-f78551388f42", "created": "2026-10-09T15:13:10.088209Z", "modified": "2026-10-09T15:13:10.088209Z", "relationship_type": "indicates", "source_ref": "indicator--701cfd5e-564c-4922-86bb-a18cfd80cebf", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243e4ecb-7143-4fe9-a6f9-a5dc92f87927", "created": "2026-10-09T15:13:10.088339Z", "modified": "2026-10-09T15:13:10.088339Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BFC4C15E35E3506095B42E2B428E4016B1FFA1AB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.088339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9132dcf3-cf16-4b29-99f1-997673140e29", "created": "2026-10-09T15:13:10.088883Z", "modified": "2026-10-09T15:13:10.088883Z", "relationship_type": "indicates", "source_ref": "indicator--243e4ecb-7143-4fe9-a6f9-a5dc92f87927", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81896320-03e7-4a40-b761-6453b765a0f5", "created": "2026-10-09T15:13:10.089005Z", "modified": "2026-10-09T15:13:10.089005Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5C5EF3DFE98B02251A6EC82609F22A092562AFEE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.089005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65710f0e-e874-48d7-a391-ff193af7833f", "created": "2026-10-09T15:13:10.089553Z", "modified": "2026-10-09T15:13:10.089553Z", "relationship_type": "indicates", "source_ref": "indicator--81896320-03e7-4a40-b761-6453b765a0f5", "target_ref": "malware--3009e95c-a0fc-44ea-8dd7-4e0cdeabca9b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7", "created": "2026-10-09T15:13:10.089673Z", "modified": "2026-10-09T15:13:10.089673Z", "name": "MobileTool", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc93964e-cd5d-49f6-8bfa-0b91fde5a83d", "created": "2026-10-09T15:13:10.089785Z", "modified": "2026-10-09T15:13:10.089785Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='6kvses.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.089785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8f3921e-461f-4173-83f1-36921d878a28", "created": "2026-10-09T15:13:10.090257Z", "modified": "2026-10-09T15:13:10.090257Z", "relationship_type": "indicates", "source_ref": "indicator--fc93964e-cd5d-49f6-8bfa-0b91fde5a83d", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9423e4-f391-4ba2-8c40-149ed3afdd33", "created": "2026-10-09T15:13:10.09039Z", "modified": "2026-10-09T15:13:10.09039Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bincdi.6kvses.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.09039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc78aff7-4fd5-43c6-93c6-e5523b12d940", "created": "2026-10-09T15:13:10.090869Z", "modified": "2026-10-09T15:13:10.090869Z", "relationship_type": "indicates", "source_ref": "indicator--bf9423e4-f391-4ba2-8c40-149ed3afdd33", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5799d2dd-344f-4bd3-be4c-08e44bf433f8", "created": "2026-10-09T15:13:10.090986Z", "modified": "2026-10-09T15:13:10.090986Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bincdi.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.090986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52f50a84-7304-40a5-8df0-6a28271c7e11", "created": "2026-10-09T15:13:10.091582Z", "modified": "2026-10-09T15:13:10.091582Z", "relationship_type": "indicates", "source_ref": "indicator--5799d2dd-344f-4bd3-be4c-08e44bf433f8", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93b4b27-ab4e-4553-802b-a38e9345dbde", "created": "2026-10-09T15:13:10.091707Z", "modified": "2026-10-09T15:13:10.091707Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.091707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f224eacb-3a3a-48a6-9a49-1e58e97d746c", "created": "2026-10-09T15:13:10.092171Z", "modified": "2026-10-09T15:13:10.092171Z", "relationship_type": "indicates", "source_ref": "indicator--f93b4b27-ab4e-4553-802b-a38e9345dbde", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3c1460-c471-4f79-884a-f6915ee04f69", "created": "2026-10-09T15:13:10.092335Z", "modified": "2026-10-09T15:13:10.092335Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dz7.wethnc067.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.092335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e279592-e24a-40f7-b6a3-67f9f8fc7c74", "created": "2026-10-09T15:13:10.092822Z", "modified": "2026-10-09T15:13:10.092822Z", "relationship_type": "indicates", "source_ref": "indicator--1a3c1460-c471-4f79-884a-f6915ee04f69", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382968de-f355-438e-ac74-865e085eb4fe", "created": "2026-10-09T15:13:10.092946Z", "modified": "2026-10-09T15:13:10.092946Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hzdy.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.092946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4807ea1-3bcd-4b3e-89ea-bfa9cfeccbf0", "created": "2026-10-09T15:13:10.093444Z", "modified": "2026-10-09T15:13:10.093444Z", "relationship_type": "indicates", "source_ref": "indicator--382968de-f355-438e-ac74-865e085eb4fe", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df9d112-1688-4091-909c-b6c30a05858d", "created": "2026-10-09T15:13:10.093577Z", "modified": "2026-10-09T15:13:10.093577Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ixhtb.s9gxw8.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.093577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aca44d27-24fc-4032-b3cd-f6820ce893ed", "created": "2026-10-09T15:13:10.094053Z", "modified": "2026-10-09T15:13:10.094053Z", "relationship_type": "indicates", "source_ref": "indicator--3df9d112-1688-4091-909c-b6c30a05858d", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e945680-0f37-4604-bf2d-5eb2d8d63858", "created": "2026-10-09T15:13:10.094171Z", "modified": "2026-10-09T15:13:10.094171Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kvshdi.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.094171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d998846e-b6a6-43b8-8d85-1eb0b8f22218", "created": "2026-10-09T15:13:10.094662Z", "modified": "2026-10-09T15:13:10.094662Z", "relationship_type": "indicates", "source_ref": "indicator--3e945680-0f37-4604-bf2d-5eb2d8d63858", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b11333-893d-4d05-a4de-8489a29bc808", "created": "2026-10-09T15:13:10.094783Z", "modified": "2026-10-09T15:13:10.094783Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.094783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbec7623-7733-490a-9ce3-5ee907563b76", "created": "2026-10-09T15:13:10.095254Z", "modified": "2026-10-09T15:13:10.095254Z", "relationship_type": "indicates", "source_ref": "indicator--69b11333-893d-4d05-a4de-8489a29bc808", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1501192-20c3-4d4b-b1d2-6b5d7d115725", "created": "2026-10-09T15:13:10.095396Z", "modified": "2026-10-09T15:13:10.095396Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mrswd.wo87sf.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.095396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06f145fe-537e-465b-af1d-0ea00208adeb", "created": "2026-10-09T15:13:10.095878Z", "modified": "2026-10-09T15:13:10.095878Z", "relationship_type": "indicates", "source_ref": "indicator--a1501192-20c3-4d4b-b1d2-6b5d7d115725", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b896b6-44d8-41ef-8f3a-0e4a35cc0db2", "created": "2026-10-09T15:13:10.095996Z", "modified": "2026-10-09T15:13:10.095996Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.095996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2275ae9d-1848-4192-ad78-4fb6cf259b70", "created": "2026-10-09T15:13:10.096485Z", "modified": "2026-10-09T15:13:10.096485Z", "relationship_type": "indicates", "source_ref": "indicator--c9b896b6-44d8-41ef-8f3a-0e4a35cc0db2", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c70f2e-c970-4b27-aadd-1d8964902235", "created": "2026-10-09T15:13:10.096612Z", "modified": "2026-10-09T15:13:10.096612Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.096612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e67912a-18a5-4ee7-9823-f6564a87d8f2", "created": "2026-10-09T15:13:10.097188Z", "modified": "2026-10-09T15:13:10.097188Z", "relationship_type": "indicates", "source_ref": "indicator--32c70f2e-c970-4b27-aadd-1d8964902235", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecb5ddb-a362-46c8-befd-07437c422947", "created": "2026-10-09T15:13:10.097338Z", "modified": "2026-10-09T15:13:10.097338Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.097338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b24470a6-8110-40ae-bd3a-ab5e82117889", "created": "2026-10-09T15:13:10.097821Z", "modified": "2026-10-09T15:13:10.097821Z", "relationship_type": "indicates", "source_ref": "indicator--9ecb5ddb-a362-46c8-befd-07437c422947", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f270ce3a-965b-4dcb-a1df-5fc3033722b8", "created": "2026-10-09T15:13:10.097947Z", "modified": "2026-10-09T15:13:10.097947Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.097947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--148c5778-c585-4f82-a6da-cfa1a83142c3", "created": "2026-10-09T15:13:10.098434Z", "modified": "2026-10-09T15:13:10.098434Z", "relationship_type": "indicates", "source_ref": "indicator--f270ce3a-965b-4dcb-a1df-5fc3033722b8", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37bb33c-ca8d-42eb-a095-abac6bf15305", "created": "2026-10-09T15:13:10.098559Z", "modified": "2026-10-09T15:13:10.098559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mzpgfh.uhabq9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.098559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f33403f-c231-49af-b35d-fd7110a23b36", "created": "2026-10-09T15:13:10.099032Z", "modified": "2026-10-09T15:13:10.099032Z", "relationship_type": "indicates", "source_ref": "indicator--e37bb33c-ca8d-42eb-a095-abac6bf15305", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107cf8d5-336b-43b1-a354-f848bb623190", "created": "2026-10-09T15:13:10.099153Z", "modified": "2026-10-09T15:13:10.099153Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='noujx.s9gxw8.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.099153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10e7f309-9285-4727-93dc-20bcbc4438b8", "created": "2026-10-09T15:13:10.099635Z", "modified": "2026-10-09T15:13:10.099635Z", "relationship_type": "indicates", "source_ref": "indicator--107cf8d5-336b-43b1-a354-f848bb623190", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d042f4-a332-496b-8199-d42273fdfd4a", "created": "2026-10-09T15:13:10.099755Z", "modified": "2026-10-09T15:13:10.099755Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s9gxw8.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.099755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--064115f3-bab9-440b-b873-5b5313b8843e", "created": "2026-10-09T15:13:10.100219Z", "modified": "2026-10-09T15:13:10.100219Z", "relationship_type": "indicates", "source_ref": "indicator--e1d042f4-a332-496b-8199-d42273fdfd4a", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec824c59-fac7-48ac-b126-e78aaaf888a9", "created": "2026-10-09T15:13:10.100356Z", "modified": "2026-10-09T15:13:10.100356Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.mtoolapp.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.100356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9ca753f-9e39-4dba-83f4-69694f05ad6d", "created": "2026-10-09T15:13:10.100841Z", "modified": "2026-10-09T15:13:10.100841Z", "relationship_type": "indicates", "source_ref": "indicator--ec824c59-fac7-48ac-b126-e78aaaf888a9", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1112956-7695-4948-8396-1de6c8c2ec09", "created": "2026-10-09T15:13:10.100963Z", "modified": "2026-10-09T15:13:10.100963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ug1c5v.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.100963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4eaa316-a799-4491-ba86-448d2d1b2116", "created": "2026-10-09T15:13:10.101462Z", "modified": "2026-10-09T15:13:10.101462Z", "relationship_type": "indicates", "source_ref": "indicator--d1112956-7695-4948-8396-1de6c8c2ec09", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac26b97-a3b5-4255-b3d3-c5c155b6f428", "created": "2026-10-09T15:13:10.10159Z", "modified": "2026-10-09T15:13:10.10159Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wethnc067.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.10159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c3a9098-2951-4576-af41-abbe445b8142", "created": "2026-10-09T15:13:10.102064Z", "modified": "2026-10-09T15:13:10.102064Z", "relationship_type": "indicates", "source_ref": "indicator--7ac26b97-a3b5-4255-b3d3-c5c155b6f428", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a89bae4-de5c-4edb-b62b-dc03b90fdab6", "created": "2026-10-09T15:13:10.102188Z", "modified": "2026-10-09T15:13:10.102188Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.102188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b10b2e47-807b-4639-84e4-0b28d216b68e", "created": "2026-10-09T15:13:10.102792Z", "modified": "2026-10-09T15:13:10.102792Z", "relationship_type": "indicates", "source_ref": "indicator--4a89bae4-de5c-4edb-b62b-dc03b90fdab6", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c032b6cb-343b-49f6-8451-89010673359a", "created": "2026-10-09T15:13:10.10292Z", "modified": "2026-10-09T15:13:10.10292Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xmyevq.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.10292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b2f7ea5-d79d-4a0f-a84e-cdae0314186d", "created": "2026-10-09T15:13:10.103404Z", "modified": "2026-10-09T15:13:10.103404Z", "relationship_type": "indicates", "source_ref": "indicator--c032b6cb-343b-49f6-8451-89010673359a", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6bcaab-7acc-400c-ae67-e9bec2e3819f", "created": "2026-10-09T15:13:10.103528Z", "modified": "2026-10-09T15:13:10.103528Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.103528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e038d3b6-5cc7-4a93-ae62-08006f1de385", "created": "2026-10-09T15:13:10.10399Z", "modified": "2026-10-09T15:13:10.10399Z", "relationship_type": "indicates", "source_ref": "indicator--da6bcaab-7acc-400c-ae67-e9bec2e3819f", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4247186c-5a84-42d1-9b34-a9d65bfe38b3", "created": "2026-10-09T15:13:10.104108Z", "modified": "2026-10-09T15:13:10.104108Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.104108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c30236a-109f-4092-8ba4-26938dab0805", "created": "2026-10-09T15:13:10.104589Z", "modified": "2026-10-09T15:13:10.104589Z", "relationship_type": "indicates", "source_ref": "indicator--4247186c-5a84-42d1-9b34-a9d65bfe38b3", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc7b241-f0cb-46cf-8f8c-c271666a81ba", "created": "2026-10-09T15:13:10.104711Z", "modified": "2026-10-09T15:13:10.104711Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.104711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6138b0ec-4dd6-452d-b047-b488ba670f1d", "created": "2026-10-09T15:13:10.105239Z", "modified": "2026-10-09T15:13:10.105239Z", "relationship_type": "indicates", "source_ref": "indicator--4bc7b241-f0cb-46cf-8f8c-c271666a81ba", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3d281e-ae60-4725-ba07-c8ab9dd206fc", "created": "2026-10-09T15:13:10.105371Z", "modified": "2026-10-09T15:13:10.105371Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.105371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--549eda9d-f0fa-499d-8882-c22ea0fc709b", "created": "2026-10-09T15:13:10.105835Z", "modified": "2026-10-09T15:13:10.105835Z", "relationship_type": "indicates", "source_ref": "indicator--1a3d281e-ae60-4725-ba07-c8ab9dd206fc", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9377da5e-2b2f-444e-bbac-0ba87ec96614", "created": "2026-10-09T15:13:10.105952Z", "modified": "2026-10-09T15:13:10.105952Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.105952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--464d4715-b828-4722-943a-1f9e6482b2a8", "created": "2026-10-09T15:13:10.106418Z", "modified": "2026-10-09T15:13:10.106418Z", "relationship_type": "indicates", "source_ref": "indicator--9377da5e-2b2f-444e-bbac-0ba87ec96614", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42e3b42-3719-4ff2-99fd-257d48ca505c", "created": "2026-10-09T15:13:10.106535Z", "modified": "2026-10-09T15:13:10.106535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2aaff9b722c64fbf1a14f321121ed6f048f6355178ae8ef432660bd8f63ad06f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.106535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1317a7b0-6a5e-499a-bea3-56d32aa6e04e", "created": "2026-10-09T15:13:10.107128Z", "modified": "2026-10-09T15:13:10.107128Z", "relationship_type": "indicates", "source_ref": "indicator--a42e3b42-3719-4ff2-99fd-257d48ca505c", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce46a25a-29bc-45bb-a2b6-878dd29316d8", "created": "2026-10-09T15:13:10.107249Z", "modified": "2026-10-09T15:13:10.107249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e192a106795784bcf53eb7a30c35b0b09225419821f2a3ef247f48ee460ca93f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.107249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75a6ae5e-f626-4d8c-83d7-0859862b1175", "created": "2026-10-09T15:13:10.107846Z", "modified": "2026-10-09T15:13:10.107846Z", "relationship_type": "indicates", "source_ref": "indicator--ce46a25a-29bc-45bb-a2b6-878dd29316d8", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c72df3-8366-4610-bd55-0fb2b26c8b84", "created": "2026-10-09T15:13:10.107968Z", "modified": "2026-10-09T15:13:10.107968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f62c540f21d26f0330abc1decf13ae06b12ec884d0530173b86ead1d8ae9a1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.107968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8319432c-2422-4cb7-8320-a696d9600587", "created": "2026-10-09T15:13:10.108655Z", "modified": "2026-10-09T15:13:10.108655Z", "relationship_type": "indicates", "source_ref": "indicator--60c72df3-8366-4610-bd55-0fb2b26c8b84", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaace24-834f-4fb1-9b50-616300ca8cd8", "created": "2026-10-09T15:13:10.10878Z", "modified": "2026-10-09T15:13:10.10878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b21d5f9bff20271cb69f4c228d0cf57e8ae5acc6d7af11eabb77ccf3b6cb4bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.10878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1be38857-658d-4050-8eae-33b66b1360bc", "created": "2026-10-09T15:13:10.109369Z", "modified": "2026-10-09T15:13:10.109369Z", "relationship_type": "indicates", "source_ref": "indicator--9aaace24-834f-4fb1-9b50-616300ca8cd8", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f41567-d379-4191-acc3-f78f4984f1a3", "created": "2026-10-09T15:13:10.10949Z", "modified": "2026-10-09T15:13:10.10949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='30162c493f80446c61aef3bb7a1584ebd8f587a7962cdf61fd949e208bffcbfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.10949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--878a4bb7-2ed6-4df7-9fbe-f69500afb08d", "created": "2026-10-09T15:13:10.110065Z", "modified": "2026-10-09T15:13:10.110065Z", "relationship_type": "indicates", "source_ref": "indicator--20f41567-d379-4191-acc3-f78f4984f1a3", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79032a3-c744-43b8-8df5-a1bb17691ce9", "created": "2026-10-09T15:13:10.110186Z", "modified": "2026-10-09T15:13:10.110186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae7031250999ea1691ae338a68a019cf3b94b8ffa8cc4543c35871329a266c82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.110186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1702d22b-6f35-403d-8e56-ca1482b80b10", "created": "2026-10-09T15:13:10.110783Z", "modified": "2026-10-09T15:13:10.110783Z", "relationship_type": "indicates", "source_ref": "indicator--d79032a3-c744-43b8-8df5-a1bb17691ce9", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ad2b94-f6cf-49a5-8ff3-81de45012c83", "created": "2026-10-09T15:13:10.110902Z", "modified": "2026-10-09T15:13:10.110902Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e903cfbb68be63c44d9d24bc5540133f2b24b6231c79a1b472a6d7d738852346']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.110902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bed9f1b-fad1-4b5a-a1f6-94424c0eaa23", "created": "2026-10-09T15:13:10.1115Z", "modified": "2026-10-09T15:13:10.1115Z", "relationship_type": "indicates", "source_ref": "indicator--40ad2b94-f6cf-49a5-8ff3-81de45012c83", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3090c9f-50c8-4bf8-8984-e5b58d184c4d", "created": "2026-10-09T15:13:10.111622Z", "modified": "2026-10-09T15:13:10.111622Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='688787f02a05bd757b1a42a1c1e3d738b79a86bb25e55d9d0840ac81b20181c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.111622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8adbad1c-0b3b-4941-b8cd-1bcf3f7f9951", "created": "2026-10-09T15:13:10.112206Z", "modified": "2026-10-09T15:13:10.112206Z", "relationship_type": "indicates", "source_ref": "indicator--d3090c9f-50c8-4bf8-8984-e5b58d184c4d", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7987f15-31ed-4aca-9f30-a0198ed9987c", "created": "2026-10-09T15:13:10.112337Z", "modified": "2026-10-09T15:13:10.112337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89367091e3404fe46f5e500442eec0169c56b31e8a03438aaf41387ee44fb6fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.112337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dee61c7-ae1f-4a61-ba4e-7ae8381dd600", "created": "2026-10-09T15:13:10.112921Z", "modified": "2026-10-09T15:13:10.112921Z", "relationship_type": "indicates", "source_ref": "indicator--b7987f15-31ed-4aca-9f30-a0198ed9987c", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9970328e-5ef6-410d-872f-e17ab2f67344", "created": "2026-10-09T15:13:10.113039Z", "modified": "2026-10-09T15:13:10.113039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e96ed84d650d4f2dd427674b4466c0abe816fcb14c336c14fc52333222fd848']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.113039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2960cf30-8aa1-4a77-b51f-23fdb4c6cca0", "created": "2026-10-09T15:13:10.113637Z", "modified": "2026-10-09T15:13:10.113637Z", "relationship_type": "indicates", "source_ref": "indicator--9970328e-5ef6-410d-872f-e17ab2f67344", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8365a5-46f1-4931-8f25-cfed3342ddd7", "created": "2026-10-09T15:13:10.113759Z", "modified": "2026-10-09T15:13:10.113759Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2974b2985779df9d6f7d6ad3a990b9db697f3e12cf1be764840097dc2263b0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.113759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--439557b9-3f89-40a7-8033-0061f770e8a9", "created": "2026-10-09T15:13:10.114357Z", "modified": "2026-10-09T15:13:10.114357Z", "relationship_type": "indicates", "source_ref": "indicator--ad8365a5-46f1-4931-8f25-cfed3342ddd7", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94635b7-7cc1-4702-8c22-995a592fe6f8", "created": "2026-10-09T15:13:10.114476Z", "modified": "2026-10-09T15:13:10.114476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc3b974977486f4706e23d935a6d58a2708d48d2c88e4a5d8213daf4585509ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.114476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76609a68-4983-4c58-a6ba-654e0deafae0", "created": "2026-10-09T15:13:10.115159Z", "modified": "2026-10-09T15:13:10.115159Z", "relationship_type": "indicates", "source_ref": "indicator--a94635b7-7cc1-4702-8c22-995a592fe6f8", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9d45ea-b71f-401f-9ed4-4b872e2ef626", "created": "2026-10-09T15:13:10.115292Z", "modified": "2026-10-09T15:13:10.115292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c55f8061468d7f1f59283c966c35615c3a5840ef0e868208ff2ae260fb90c497']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.115292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77d5e7cb-c324-4681-9590-898e8b070b5e", "created": "2026-10-09T15:13:10.115875Z", "modified": "2026-10-09T15:13:10.115875Z", "relationship_type": "indicates", "source_ref": "indicator--7a9d45ea-b71f-401f-9ed4-4b872e2ef626", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af18ef7-d751-4884-af84-81aaf3f4e84a", "created": "2026-10-09T15:13:10.115994Z", "modified": "2026-10-09T15:13:10.115994Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c00914e230123a5a9bf28b602a4231c8f594abeb72e224f7c004a13f454022b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.115994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d7724dd-fb87-4ead-b044-c8a28738b6e0", "created": "2026-10-09T15:13:10.116606Z", "modified": "2026-10-09T15:13:10.116606Z", "relationship_type": "indicates", "source_ref": "indicator--8af18ef7-d751-4884-af84-81aaf3f4e84a", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b68c84-b49b-4f64-b03a-cc8534bdf2af", "created": "2026-10-09T15:13:10.116732Z", "modified": "2026-10-09T15:13:10.116732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7a3a7f1fbd7c428f1dc8c913234d8c486950d9c61f41a411f7efc6b467203dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.116732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--752e9150-776a-487f-9309-d0cb7eb61a54", "created": "2026-10-09T15:13:10.117334Z", "modified": "2026-10-09T15:13:10.117334Z", "relationship_type": "indicates", "source_ref": "indicator--70b68c84-b49b-4f64-b03a-cc8534bdf2af", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b74b36-7f37-4d49-bc89-5e7ff13c75ed", "created": "2026-10-09T15:13:10.117463Z", "modified": "2026-10-09T15:13:10.117463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='834796b0ff9ddf5275cec0843e6886dcea174ee185dbd0e2bb0c9cd7485be06c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.117463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90514add-4a4b-425f-831f-ef9845d387d1", "created": "2026-10-09T15:13:10.118053Z", "modified": "2026-10-09T15:13:10.118053Z", "relationship_type": "indicates", "source_ref": "indicator--76b74b36-7f37-4d49-bc89-5e7ff13c75ed", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127b06c7-9394-4882-9c6d-e4be922860ef", "created": "2026-10-09T15:13:10.118173Z", "modified": "2026-10-09T15:13:10.118173Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.poleward.burghs.hydrotherapy.homonymously']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.118173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d305126e-21da-4b7a-a9f4-1ec282c0b018", "created": "2026-10-09T15:13:10.118685Z", "modified": "2026-10-09T15:13:10.118685Z", "relationship_type": "indicates", "source_ref": "indicator--127b06c7-9394-4882-9c6d-e4be922860ef", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9210b9-a7d0-4472-a83c-35794a4e102b", "created": "2026-10-09T15:13:10.118807Z", "modified": "2026-10-09T15:13:10.118807Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.urates.amirates.suffocate.chiliast']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.118807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a6fd467-0f74-4b3d-8b3c-eca1e8d8d52c", "created": "2026-10-09T15:13:10.1193Z", "modified": "2026-10-09T15:13:10.1193Z", "relationship_type": "indicates", "source_ref": "indicator--8b9210b9-a7d0-4472-a83c-35794a4e102b", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0460057-1b30-43fc-8be5-6d92a29c628e", "created": "2026-10-09T15:13:10.119424Z", "modified": "2026-10-09T15:13:10.119424Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.connecting.updived.hygeist.interplays']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.119424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efd8b1a4-e58e-4074-9d44-eda9bf32eeb5", "created": "2026-10-09T15:13:10.119933Z", "modified": "2026-10-09T15:13:10.119933Z", "relationship_type": "indicates", "source_ref": "indicator--d0460057-1b30-43fc-8be5-6d92a29c628e", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f8f90f-714f-49ec-ad7a-badc0d47d734", "created": "2026-10-09T15:13:10.120056Z", "modified": "2026-10-09T15:13:10.120056Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E9B3E5190F64BA9A952B7F57942AA21FFDA50BA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.120056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ff35520-5f64-46bb-a498-f404efe073df", "created": "2026-10-09T15:13:10.120605Z", "modified": "2026-10-09T15:13:10.120605Z", "relationship_type": "indicates", "source_ref": "indicator--87f8f90f-714f-49ec-ad7a-badc0d47d734", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa9b87a-8528-4c14-92f0-35518cf0fc0a", "created": "2026-10-09T15:13:10.120728Z", "modified": "2026-10-09T15:13:10.120728Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7F11358AC560C5E90B735A21B907F1C8143353DF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.120728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e45b27d-2c8a-4ed3-aa34-564baaa4f650", "created": "2026-10-09T15:13:10.121377Z", "modified": "2026-10-09T15:13:10.121377Z", "relationship_type": "indicates", "source_ref": "indicator--bfa9b87a-8528-4c14-92f0-35518cf0fc0a", "target_ref": "malware--35fe18b4-5a09-424d-992a-cdf027c26bc7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712", "created": "2026-10-09T15:13:10.121499Z", "modified": "2026-10-09T15:13:10.121499Z", "name": "ShadowSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e48913-c9bd-4908-b1a7-018ca6d1e219", "created": "2026-10-09T15:13:10.121614Z", "modified": "2026-10-09T15:13:10.121614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='runaki-support.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.121614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec55771a-5c5e-4ee6-aee5-018768032762", "created": "2026-10-09T15:13:10.122105Z", "modified": "2026-10-09T15:13:10.122105Z", "relationship_type": "indicates", "source_ref": "indicator--e5e48913-c9bd-4908-b1a7-018ca6d1e219", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6366fae6-e4b1-4581-b637-bb9d8ed770db", "created": "2026-10-09T15:13:10.122226Z", "modified": "2026-10-09T15:13:10.122226Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.122226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58740ae1-8fb2-4cc0-ae49-06aa469dd0a4", "created": "2026-10-09T15:13:10.122711Z", "modified": "2026-10-09T15:13:10.122711Z", "relationship_type": "indicates", "source_ref": "indicator--6366fae6-e4b1-4581-b637-bb9d8ed770db", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74983bb-8159-4ba2-bfe0-b9fe5277e4cf", "created": "2026-10-09T15:13:10.122832Z", "modified": "2026-10-09T15:13:10.122832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.122832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d91e3f73-99dd-4591-ba2c-042b2e45e0c7", "created": "2026-10-09T15:13:10.123309Z", "modified": "2026-10-09T15:13:10.123309Z", "relationship_type": "indicates", "source_ref": "indicator--a74983bb-8159-4ba2-bfe0-b9fe5277e4cf", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bc3242-bd59-4353-9e92-12ea384974dc", "created": "2026-10-09T15:13:10.123436Z", "modified": "2026-10-09T15:13:10.123436Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadowappbundle-default-rtdb.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.123436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce292060-c19a-4abb-b47a-965f8925170e", "created": "2026-10-09T15:13:10.123946Z", "modified": "2026-10-09T15:13:10.123946Z", "relationship_type": "indicates", "source_ref": "indicator--04bc3242-bd59-4353-9e92-12ea384974dc", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdb8a57-1047-448a-b283-8c9c7942a0b8", "created": "2026-10-09T15:13:10.124064Z", "modified": "2026-10-09T15:13:10.124064Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadowlogspanel.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.124064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42829195-8548-4b6d-bd21-89deef0bcd7d", "created": "2026-10-09T15:13:10.124567Z", "modified": "2026-10-09T15:13:10.124567Z", "relationship_type": "indicates", "source_ref": "indicator--6cdb8a57-1047-448a-b283-8c9c7942a0b8", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb4846b-2b3d-4d13-ac8c-5c0c33702714", "created": "2026-10-09T15:13:10.124686Z", "modified": "2026-10-09T15:13:10.124686Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.124686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bb127db-b4cc-470a-9164-b55c918e023b", "created": "2026-10-09T15:13:10.125159Z", "modified": "2026-10-09T15:13:10.125159Z", "relationship_type": "indicates", "source_ref": "indicator--0bb4846b-2b3d-4d13-ac8c-5c0c33702714", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210160ed-a518-401a-a2ad-fa6d38ab1216", "created": "2026-10-09T15:13:10.125288Z", "modified": "2026-10-09T15:13:10.125288Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.125288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c0f70c6-23c6-4d94-8c9b-345ccaa65a0b", "created": "2026-10-09T15:13:10.125779Z", "modified": "2026-10-09T15:13:10.125779Z", "relationship_type": "indicates", "source_ref": "indicator--210160ed-a518-401a-a2ad-fa6d38ab1216", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687088b6-ae46-46ad-9420-dce44c7f670a", "created": "2026-10-09T15:13:10.125899Z", "modified": "2026-10-09T15:13:10.125899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.125899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1b0c088-8ee6-4bd2-9c6d-560739924bef", "created": "2026-10-09T15:13:10.126378Z", "modified": "2026-10-09T15:13:10.126378Z", "relationship_type": "indicates", "source_ref": "indicator--687088b6-ae46-46ad-9420-dce44c7f670a", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693f3a35-ab2d-47ce-9ac5-7d81143d24dd", "created": "2026-10-09T15:13:10.126502Z", "modified": "2026-10-09T15:13:10.126502Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.126502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d2079ea-6c6a-49dd-821d-72e1215c77e2", "created": "2026-10-09T15:13:10.127094Z", "modified": "2026-10-09T15:13:10.127094Z", "relationship_type": "indicates", "source_ref": "indicator--693f3a35-ab2d-47ce-9ac5-7d81143d24dd", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb56d70-597b-4db3-92a6-d73fd9362c1e", "created": "2026-10-09T15:13:10.127222Z", "modified": "2026-10-09T15:13:10.127222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.127222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99c58a76-6ea9-44e6-9389-6ac8f6f2334d", "created": "2026-10-09T15:13:10.127718Z", "modified": "2026-10-09T15:13:10.127718Z", "relationship_type": "indicates", "source_ref": "indicator--bfb56d70-597b-4db3-92a6-d73fd9362c1e", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bece0a1-8dec-4cde-b55e-872fa35f6acd", "created": "2026-10-09T15:13:10.127839Z", "modified": "2026-10-09T15:13:10.127839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='downloads.shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.127839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--802ef5d4-71be-43de-a2d5-5bb188b852e9", "created": "2026-10-09T15:13:10.128329Z", "modified": "2026-10-09T15:13:10.128329Z", "relationship_type": "indicates", "source_ref": "indicator--8bece0a1-8dec-4cde-b55e-872fa35f6acd", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988129a4-067d-4d49-be35-692f359d4371", "created": "2026-10-09T15:13:10.128452Z", "modified": "2026-10-09T15:13:10.128452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f44362503765ef80b51c5db69b1ee2b2f027b98cecefbcad59800867c2c21206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.128452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c93cd002-d59a-4364-89d6-bbbb2aeee568", "created": "2026-10-09T15:13:10.129039Z", "modified": "2026-10-09T15:13:10.129039Z", "relationship_type": "indicates", "source_ref": "indicator--988129a4-067d-4d49-be35-692f359d4371", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb02091b-96f4-4d75-a741-6b93376e4a72", "created": "2026-10-09T15:13:10.12916Z", "modified": "2026-10-09T15:13:10.12916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32f14f7b5fa51dac3391047e45a9dfbd339cbadacbf6603646564d2e6c386eb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.12916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--141815cc-c463-43bf-97c7-75f34018d0d7", "created": "2026-10-09T15:13:10.129767Z", "modified": "2026-10-09T15:13:10.129767Z", "relationship_type": "indicates", "source_ref": "indicator--eb02091b-96f4-4d75-a741-6b93376e4a72", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee22bee-d1d3-4928-945a-8e7272a8ce94", "created": "2026-10-09T15:13:10.129892Z", "modified": "2026-10-09T15:13:10.129892Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a5425fc6e6933eef19a34eac1557e8364baec3c0ea112dbd453662035656adb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.129892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77812797-127b-437a-b91d-e260a6d32e3e", "created": "2026-10-09T15:13:10.130488Z", "modified": "2026-10-09T15:13:10.130488Z", "relationship_type": "indicates", "source_ref": "indicator--bee22bee-d1d3-4928-945a-8e7272a8ce94", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355c3815-8f37-4254-87ca-e51fabd190e6", "created": "2026-10-09T15:13:10.130609Z", "modified": "2026-10-09T15:13:10.130609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3c8494ea7b5f943cba317df63455d9012c514931d9402761a44725a35be7738']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.130609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad47e268-555c-40da-81b5-f2c682e93eca", "created": "2026-10-09T15:13:10.131194Z", "modified": "2026-10-09T15:13:10.131194Z", "relationship_type": "indicates", "source_ref": "indicator--355c3815-8f37-4254-87ca-e51fabd190e6", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051cae3b-b8da-4874-ab9c-1e0c824a4a4f", "created": "2026-10-09T15:13:10.131323Z", "modified": "2026-10-09T15:13:10.131323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e06da44828957c44edbd4b4249f4a68f3ca30ef5569f38b62a81f6d05bfd65fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.131323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96bbe414-183c-487d-a1f1-c59fb378f162", "created": "2026-10-09T15:13:10.131916Z", "modified": "2026-10-09T15:13:10.131916Z", "relationship_type": "indicates", "source_ref": "indicator--051cae3b-b8da-4874-ab9c-1e0c824a4a4f", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414407aa-8163-42c5-b785-944174a48021", "created": "2026-10-09T15:13:10.132035Z", "modified": "2026-10-09T15:13:10.132035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd62e9a9b810cd8d478426fe10265726d8044986a7662e6364e6ab3694408e6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.132035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bc36e60-4c7d-4cf7-8cd7-c7aaf9ca7fd5", "created": "2026-10-09T15:13:10.13263Z", "modified": "2026-10-09T15:13:10.13263Z", "relationship_type": "indicates", "source_ref": "indicator--414407aa-8163-42c5-b785-944174a48021", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e17f77e-9642-47f0-93ba-b419eb6fe9a2", "created": "2026-10-09T15:13:10.132752Z", "modified": "2026-10-09T15:13:10.132752Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ef2e208a4634ae90c6f36c0995ee3f90b43d4968795d18f2a68192b78a72601']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.132752Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c72302a6-d038-4ca1-950f-925356bcd9bf", "created": "2026-10-09T15:13:10.133759Z", "modified": "2026-10-09T15:13:10.133759Z", "relationship_type": "indicates", "source_ref": "indicator--1e17f77e-9642-47f0-93ba-b419eb6fe9a2", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473a0f77-8cef-494a-bb8c-d51e6c414ef0", "created": "2026-10-09T15:13:10.133891Z", "modified": "2026-10-09T15:13:10.133891Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='450403109acca7d483c1ab247e8af3703df3f7bac626f4f74a48ca959526b9cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.133891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdb85c98-ce07-447e-acf0-9a8d90ed83e3", "created": "2026-10-09T15:13:10.134501Z", "modified": "2026-10-09T15:13:10.134501Z", "relationship_type": "indicates", "source_ref": "indicator--473a0f77-8cef-494a-bb8c-d51e6c414ef0", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd8ab85-f02a-4a95-8934-b082e2999a53", "created": "2026-10-09T15:13:10.13463Z", "modified": "2026-10-09T15:13:10.13463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91ddf0f129973ee862900895f6d72e7a680a6e755ed14703657aa7dd7cf921a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.13463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79f601f2-9731-49a3-9737-2ad2f0bbf49b", "created": "2026-10-09T15:13:10.135212Z", "modified": "2026-10-09T15:13:10.135212Z", "relationship_type": "indicates", "source_ref": "indicator--abd8ab85-f02a-4a95-8934-b082e2999a53", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0790aad2-5bb6-4d65-924f-4747660437b6", "created": "2026-10-09T15:13:10.135348Z", "modified": "2026-10-09T15:13:10.135348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bdb600952547731a01b792e45489c97faca0cadbe696241166be3bab39e6b9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.135348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a952ba33-9903-495e-9d26-32fc6bfa4a7c", "created": "2026-10-09T15:13:10.135931Z", "modified": "2026-10-09T15:13:10.135931Z", "relationship_type": "indicates", "source_ref": "indicator--0790aad2-5bb6-4d65-924f-4747660437b6", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96483977-c8f2-4cd8-a0d0-50c810dc3a59", "created": "2026-10-09T15:13:10.136053Z", "modified": "2026-10-09T15:13:10.136053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea0936c14dc8edf98c07e82e38914838e1915f452f0969c8e50b7b09fc8cf6c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.136053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7313014a-d3c2-4820-aef8-e2f9b9188eb2", "created": "2026-10-09T15:13:10.136649Z", "modified": "2026-10-09T15:13:10.136649Z", "relationship_type": "indicates", "source_ref": "indicator--96483977-c8f2-4cd8-a0d0-50c810dc3a59", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0879cb-bc53-4266-9150-8b9288d184b1", "created": "2026-10-09T15:13:10.136773Z", "modified": "2026-10-09T15:13:10.136773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa3f65dbe91cc87d3a2deb040cecb13397a169f7e5d6ddc9b622b69cfbc1c41d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.136773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--527543fb-a824-41ab-bddd-389b4a54fe4c", "created": "2026-10-09T15:13:10.137368Z", "modified": "2026-10-09T15:13:10.137368Z", "relationship_type": "indicates", "source_ref": "indicator--dc0879cb-bc53-4266-9150-8b9288d184b1", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d79a1e-2c7a-4e6c-ad47-f14fe184dc94", "created": "2026-10-09T15:13:10.13749Z", "modified": "2026-10-09T15:13:10.13749Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ebdd719b01b484e75ea477feec129390204c3e7b02d9b11b7290ee3233728bd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.13749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--311a1b19-82af-4a2c-8fbe-81e9ed3af4f4", "created": "2026-10-09T15:13:10.138076Z", "modified": "2026-10-09T15:13:10.138076Z", "relationship_type": "indicates", "source_ref": "indicator--d6d79a1e-2c7a-4e6c-ad47-f14fe184dc94", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b9975-e337-424e-84fe-e45e647be783", "created": "2026-10-09T15:13:10.138201Z", "modified": "2026-10-09T15:13:10.138201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8aa7f3faf867fb08d9403d2ca36fa0ec68eddaed9d0175302a27949187c6e87a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.138201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebe8889e-fed5-4baf-addf-1a40e022542c", "created": "2026-10-09T15:13:10.1388Z", "modified": "2026-10-09T15:13:10.1388Z", "relationship_type": "indicates", "source_ref": "indicator--a73b9975-e337-424e-84fe-e45e647be783", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9f9e02-f748-4ca8-b250-cb4da798af77", "created": "2026-10-09T15:13:10.138924Z", "modified": "2026-10-09T15:13:10.138924Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.runaki.synclogs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.138924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--464fa3d4-a62c-44af-ba7f-ed6f9ce086a3", "created": "2026-10-09T15:13:10.139394Z", "modified": "2026-10-09T15:13:10.139394Z", "relationship_type": "indicates", "source_ref": "indicator--fb9f9e02-f748-4ca8-b250-cb4da798af77", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1f18af-6767-44f7-8e9a-e97c1d30194f", "created": "2026-10-09T15:13:10.139516Z", "modified": "2026-10-09T15:13:10.139516Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.client.requestlogs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.139516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c4bd7cc-2066-4527-8aca-66ff6ddca4ca", "created": "2026-10-09T15:13:10.140088Z", "modified": "2026-10-09T15:13:10.140088Z", "relationship_type": "indicates", "source_ref": "indicator--3b1f18af-6767-44f7-8e9a-e97c1d30194f", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c418d08-39d2-4d19-88f9-235438293805", "created": "2026-10-09T15:13:10.140212Z", "modified": "2026-10-09T15:13:10.140212Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.shadow.client.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.140212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc7bd67b-f29a-4aaf-868c-98a4a9e34910", "created": "2026-10-09T15:13:10.140697Z", "modified": "2026-10-09T15:13:10.140697Z", "relationship_type": "indicates", "source_ref": "indicator--4c418d08-39d2-4d19-88f9-235438293805", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5001882-26cc-455d-b85b-84e1f4d3aab9", "created": "2026-10-09T15:13:10.140822Z", "modified": "2026-10-09T15:13:10.140822Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FE7626A8D3C38FD78EA2A729B39B943BA814F014']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.140822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dab39dff-a306-474d-8b0b-f288c10df8e5", "created": "2026-10-09T15:13:10.141377Z", "modified": "2026-10-09T15:13:10.141377Z", "relationship_type": "indicates", "source_ref": "indicator--d5001882-26cc-455d-b85b-84e1f4d3aab9", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a561db73-7e88-478f-82cf-909a9c0328f7", "created": "2026-10-09T15:13:10.141502Z", "modified": "2026-10-09T15:13:10.141502Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='01E49C220A9776D4978C1D28D6C32F86D145B8AE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.141502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77a3bfd0-7ff3-4195-9095-a73414b8d2b9", "created": "2026-10-09T15:13:10.142042Z", "modified": "2026-10-09T15:13:10.142042Z", "relationship_type": "indicates", "source_ref": "indicator--a561db73-7e88-478f-82cf-909a9c0328f7", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42982530-ddfd-4c12-950a-675ad2e05e0f", "created": "2026-10-09T15:13:10.142164Z", "modified": "2026-10-09T15:13:10.142164Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AD231A7CD57E2CEF8162F4D341C3573DE2B8F443']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.142164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34573add-cc2d-4bce-b8ad-01898e06f188", "created": "2026-10-09T15:13:10.142721Z", "modified": "2026-10-09T15:13:10.142721Z", "relationship_type": "indicates", "source_ref": "indicator--42982530-ddfd-4c12-950a-675ad2e05e0f", "target_ref": "malware--f6d486ef-7e1d-4c2d-bc19-af93e1b41712"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d62df853-34bc-484c-b603-fd212a913276", "created": "2026-10-09T15:13:10.142846Z", "modified": "2026-10-09T15:13:10.142846Z", "name": "SpyHuman", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963155fa-1188-4b4e-add6-fb6f0ec99e1c", "created": "2026-10-09T15:13:10.142963Z", "modified": "2026-10-09T15:13:10.142963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apispyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.142963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1c6477f-9cef-4949-9b62-4fa239085c2c", "created": "2026-10-09T15:13:10.143447Z", "modified": "2026-10-09T15:13:10.143447Z", "relationship_type": "indicates", "source_ref": "indicator--963155fa-1188-4b4e-add6-fb6f0ec99e1c", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b1da73-5330-485f-a415-2c51111cec21", "created": "2026-10-09T15:13:10.143568Z", "modified": "2026-10-09T15:13:10.143568Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps22.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.143568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fe5a3ff-acc5-4cab-bed2-4fdbbc758f67", "created": "2026-10-09T15:13:10.144041Z", "modified": "2026-10-09T15:13:10.144041Z", "relationship_type": "indicates", "source_ref": "indicator--f4b1da73-5330-485f-a415-2c51111cec21", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5a8062-83f5-4a11-a2af-d6f2c7c4b2e1", "created": "2026-10-09T15:13:10.144158Z", "modified": "2026-10-09T15:13:10.144158Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps12.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.144158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a353d73-5589-42ef-97d3-f81bde497b30", "created": "2026-10-09T15:13:10.144634Z", "modified": "2026-10-09T15:13:10.144634Z", "relationship_type": "indicates", "source_ref": "indicator--ed5a8062-83f5-4a11-a2af-d6f2c7c4b2e1", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea323198-b249-45ce-b841-07673549327d", "created": "2026-10-09T15:13:10.144757Z", "modified": "2026-10-09T15:13:10.144757Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps13.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.144757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94c46142-c4d0-424a-9821-e5cb46a77e41", "created": "2026-10-09T15:13:10.145236Z", "modified": "2026-10-09T15:13:10.145236Z", "relationship_type": "indicates", "source_ref": "indicator--ea323198-b249-45ce-b841-07673549327d", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb0db22-f308-4446-8d4c-eed8316acbcf", "created": "2026-10-09T15:13:10.145367Z", "modified": "2026-10-09T15:13:10.145367Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps14.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.145367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9ec6194-44e4-41c0-b974-3490ff0ad9bc", "created": "2026-10-09T15:13:10.145957Z", "modified": "2026-10-09T15:13:10.145957Z", "relationship_type": "indicates", "source_ref": "indicator--0bb0db22-f308-4446-8d4c-eed8316acbcf", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef72336-198e-47ce-b76f-4fb860fb6cc7", "created": "2026-10-09T15:13:10.146079Z", "modified": "2026-10-09T15:13:10.146079Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps15.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.146079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--697c14f4-9c3c-4100-a492-24d93f91ce3c", "created": "2026-10-09T15:13:10.146566Z", "modified": "2026-10-09T15:13:10.146566Z", "relationship_type": "indicates", "source_ref": "indicator--9ef72336-198e-47ce-b76f-4fb860fb6cc7", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44118099-5de7-4745-8f19-80c94a908e19", "created": "2026-10-09T15:13:10.146695Z", "modified": "2026-10-09T15:13:10.146695Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps16.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.146695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea810b8a-8c4a-4b2a-b4d9-bdc3cf55b7f7", "created": "2026-10-09T15:13:10.147169Z", "modified": "2026-10-09T15:13:10.147169Z", "relationship_type": "indicates", "source_ref": "indicator--44118099-5de7-4745-8f19-80c94a908e19", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b6c11f-215c-4dd8-b95e-ac3ad4e9a0ba", "created": "2026-10-09T15:13:10.147297Z", "modified": "2026-10-09T15:13:10.147297Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps17.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.147297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d91a7a59-a0fe-4ece-957b-cd0f70f056f2", "created": "2026-10-09T15:13:10.147764Z", "modified": "2026-10-09T15:13:10.147764Z", "relationship_type": "indicates", "source_ref": "indicator--a4b6c11f-215c-4dd8-b95e-ac3ad4e9a0ba", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d9593a-373c-4d0b-a54e-b0e134945ba3", "created": "2026-10-09T15:13:10.147881Z", "modified": "2026-10-09T15:13:10.147881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps16042016.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.147881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66618e1c-455e-41a1-a5db-a132f7c7ec06", "created": "2026-10-09T15:13:10.14837Z", "modified": "2026-10-09T15:13:10.14837Z", "relationship_type": "indicates", "source_ref": "indicator--e4d9593a-373c-4d0b-a54e-b0e134945ba3", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73e5000-9b85-400c-8b52-5ac006d7d700", "created": "2026-10-09T15:13:10.148494Z", "modified": "2026-10-09T15:13:10.148494Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps18data.securebackuponline.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.148494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--601cdf26-a512-42bb-99fb-0b8df54b2240", "created": "2026-10-09T15:13:10.148977Z", "modified": "2026-10-09T15:13:10.148977Z", "relationship_type": "indicates", "source_ref": "indicator--c73e5000-9b85-400c-8b52-5ac006d7d700", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93166066-4d88-47df-b0fd-dcc9189be20f", "created": "2026-10-09T15:13:10.149094Z", "modified": "2026-10-09T15:13:10.149094Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps18file.securebackuponline.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.149094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37ad1358-1218-4ef7-8852-661f267cfc5c", "created": "2026-10-09T15:13:10.149592Z", "modified": "2026-10-09T15:13:10.149592Z", "relationship_type": "indicates", "source_ref": "indicator--93166066-4d88-47df-b0fd-dcc9189be20f", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7764e50c-80b0-454a-ac21-c1cda3388653", "created": "2026-10-09T15:13:10.14971Z", "modified": "2026-10-09T15:13:10.14971Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps2.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.14971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e8b7939-486e-479a-acc6-316e8377ee79", "created": "2026-10-09T15:13:10.150181Z", "modified": "2026-10-09T15:13:10.150181Z", "relationship_type": "indicates", "source_ref": "indicator--7764e50c-80b0-454a-ac21-c1cda3388653", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba6039b-663a-4a0d-aa5b-cf6e00199ee9", "created": "2026-10-09T15:13:10.150308Z", "modified": "2026-10-09T15:13:10.150308Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nodejs.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.150308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74ba1346-84bf-4294-ae9e-d3b54e6f21a1", "created": "2026-10-09T15:13:10.15079Z", "modified": "2026-10-09T15:13:10.15079Z", "relationship_type": "indicates", "source_ref": "indicator--5ba6039b-663a-4a0d-aa5b-cf6e00199ee9", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189fa281-d1a1-4e5a-a127-655b6d210627", "created": "2026-10-09T15:13:10.150908Z", "modified": "2026-10-09T15:13:10.150908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='securebackuponline.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.150908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9b0130b-19ce-42af-b1c7-55383a6392d1", "created": "2026-10-09T15:13:10.15149Z", "modified": "2026-10-09T15:13:10.15149Z", "relationship_type": "indicates", "source_ref": "indicator--189fa281-d1a1-4e5a-a127-655b6d210627", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619138ca-ef5c-488a-acf4-d9d7dde56053", "created": "2026-10-09T15:13:10.151615Z", "modified": "2026-10-09T15:13:10.151615Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sp18022019.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.151615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--531236a9-13cb-44ad-a786-9f38bbbaf5c9", "created": "2026-10-09T15:13:10.152095Z", "modified": "2026-10-09T15:13:10.152095Z", "relationship_type": "indicates", "source_ref": "indicator--619138ca-ef5c-488a-acf4-d9d7dde56053", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041874cc-eea0-41e2-8834-13f131253171", "created": "2026-10-09T15:13:10.152211Z", "modified": "2026-10-09T15:13:10.152211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhuman-97943.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.152211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f37ed224-a28d-4848-a413-ff5244d1e1b3", "created": "2026-10-09T15:13:10.152706Z", "modified": "2026-10-09T15:13:10.152706Z", "relationship_type": "indicates", "source_ref": "indicator--041874cc-eea0-41e2-8834-13f131253171", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b7ac92-9be0-40f8-b46a-d19988f6081f", "created": "2026-10-09T15:13:10.152829Z", "modified": "2026-10-09T15:13:10.152829Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.152829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a4f9aca-6eb9-4269-808a-1a39f92bc6ca", "created": "2026-10-09T15:13:10.153309Z", "modified": "2026-10-09T15:13:10.153309Z", "relationship_type": "indicates", "source_ref": "indicator--c7b7ac92-9be0-40f8-b46a-d19988f6081f", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cc45bb-42d5-4c0b-93e3-68a01ff774e0", "created": "2026-10-09T15:13:10.153433Z", "modified": "2026-10-09T15:13:10.153433Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.153433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a324d76-86b9-45fa-bced-fb76985a9253", "created": "2026-10-09T15:13:10.153894Z", "modified": "2026-10-09T15:13:10.153894Z", "relationship_type": "indicates", "source_ref": "indicator--c2cc45bb-42d5-4c0b-93e3-68a01ff774e0", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4715a8ed-73df-4dbe-abfc-0862ffc89c24", "created": "2026-10-09T15:13:10.154011Z", "modified": "2026-10-09T15:13:10.154011Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='services.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.154011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d160345-908a-4292-888f-ccbefa09a126", "created": "2026-10-09T15:13:10.154496Z", "modified": "2026-10-09T15:13:10.154496Z", "relationship_type": "indicates", "source_ref": "indicator--4715a8ed-73df-4dbe-abfc-0862ffc89c24", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea048a7-e90f-476e-a0b8-2d74600ac23f", "created": "2026-10-09T15:13:10.15462Z", "modified": "2026-10-09T15:13:10.15462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92f3944d95608095c528904bb548f8d1e3740bc7fa37ec1ed0962eef37fa6aa9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.15462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a364083-2b04-490f-9986-db8cb97708c5", "created": "2026-10-09T15:13:10.155204Z", "modified": "2026-10-09T15:13:10.155204Z", "relationship_type": "indicates", "source_ref": "indicator--1ea048a7-e90f-476e-a0b8-2d74600ac23f", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e0f4cf-3d37-459f-b62a-8f544f57b689", "created": "2026-10-09T15:13:10.155335Z", "modified": "2026-10-09T15:13:10.155335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cad3083109f41d10cf6a8ac127a0622260f08074d1dcfde76135c1c73bddbe7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.155335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adc871ac-9bdd-46ad-a0be-3771e489fd46", "created": "2026-10-09T15:13:10.155918Z", "modified": "2026-10-09T15:13:10.155918Z", "relationship_type": "indicates", "source_ref": "indicator--21e0f4cf-3d37-459f-b62a-8f544f57b689", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89188cb5-5aa6-41a0-a22e-4426daf8c6ac", "created": "2026-10-09T15:13:10.15604Z", "modified": "2026-10-09T15:13:10.15604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1408db265a20e78eb1df9675ff2cfdf60a959c8445a9241a45218e72c0826b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.15604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c73e19c-691b-4cef-8229-759661002ad0", "created": "2026-10-09T15:13:10.156683Z", "modified": "2026-10-09T15:13:10.156683Z", "relationship_type": "indicates", "source_ref": "indicator--89188cb5-5aa6-41a0-a22e-4426daf8c6ac", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537afb86-05a1-4d2a-9dd2-84459af87e93", "created": "2026-10-09T15:13:10.15681Z", "modified": "2026-10-09T15:13:10.15681Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d62be7e176f35c56b41a5682d9b7d4b6eaea365ae424dad5d123f3897d48175f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.15681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e509644-b299-45ed-88ea-4986155310af", "created": "2026-10-09T15:13:10.157517Z", "modified": "2026-10-09T15:13:10.157517Z", "relationship_type": "indicates", "source_ref": "indicator--537afb86-05a1-4d2a-9dd2-84459af87e93", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e2524e-e4a9-457c-98f5-0377b025f8e4", "created": "2026-10-09T15:13:10.157645Z", "modified": "2026-10-09T15:13:10.157645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08c2ff278ea4cfbfb0560b1be52bfebe422b892345fcb89283bc6ecf4374b36b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.157645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f998370-9a33-4d04-af61-eb4918dac993", "created": "2026-10-09T15:13:10.158231Z", "modified": "2026-10-09T15:13:10.158231Z", "relationship_type": "indicates", "source_ref": "indicator--02e2524e-e4a9-457c-98f5-0377b025f8e4", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3a1b4c-2fd2-4846-a3fc-cbc7a7651d72", "created": "2026-10-09T15:13:10.158368Z", "modified": "2026-10-09T15:13:10.158368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64e4b9bce5c6ab60cf1800860f3ab13b6f7a246381512ed4fb3c429fa26aadfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.158368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eee3890-6e01-47c9-b803-9c4330fbf33a", "created": "2026-10-09T15:13:10.158948Z", "modified": "2026-10-09T15:13:10.158948Z", "relationship_type": "indicates", "source_ref": "indicator--9e3a1b4c-2fd2-4846-a3fc-cbc7a7651d72", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d420de-22c7-4b12-8bf1-0de0eccca9c4", "created": "2026-10-09T15:13:10.159068Z", "modified": "2026-10-09T15:13:10.159068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4929cd572e6ff12d0fb634e91e6eaede233647c1f933b4a1151d443466297c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.159068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--978f3883-f640-4b68-a61b-214ead2e5300", "created": "2026-10-09T15:13:10.159655Z", "modified": "2026-10-09T15:13:10.159655Z", "relationship_type": "indicates", "source_ref": "indicator--67d420de-22c7-4b12-8bf1-0de0eccca9c4", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef43714b-d9ba-4ac1-ae64-98f7d84d3db3", "created": "2026-10-09T15:13:10.159776Z", "modified": "2026-10-09T15:13:10.159776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d63cdd585d86beebfba2f6a660851b685e05e7326f966949f7c33995919c4cfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.159776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db041051-4135-4c04-9dee-02e99e5bf4d8", "created": "2026-10-09T15:13:10.160371Z", "modified": "2026-10-09T15:13:10.160371Z", "relationship_type": "indicates", "source_ref": "indicator--ef43714b-d9ba-4ac1-ae64-98f7d84d3db3", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f8261f-8e61-492d-8786-5e9fe804d7e6", "created": "2026-10-09T15:13:10.16049Z", "modified": "2026-10-09T15:13:10.16049Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='961fb6983f9cbdbc105943650c69049f94c69f3e2c5cecfd2a5d001dc972ad99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.16049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a47c8333-4b7c-45b7-903c-f8cf23cf15ce", "created": "2026-10-09T15:13:10.161065Z", "modified": "2026-10-09T15:13:10.161065Z", "relationship_type": "indicates", "source_ref": "indicator--e3f8261f-8e61-492d-8786-5e9fe804d7e6", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4805089-aa4f-4143-ad02-c3038614b127", "created": "2026-10-09T15:13:10.161183Z", "modified": "2026-10-09T15:13:10.161183Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3392b6d1214ec1278036c34d0c10e48671f3766ccb73248ee336572db400d946']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.161183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57077b07-97cf-4deb-a13b-d34aa36ac93a", "created": "2026-10-09T15:13:10.161784Z", "modified": "2026-10-09T15:13:10.161784Z", "relationship_type": "indicates", "source_ref": "indicator--f4805089-aa4f-4143-ad02-c3038614b127", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5998693-2612-45d5-9759-c1a7e04d8580", "created": "2026-10-09T15:13:10.161908Z", "modified": "2026-10-09T15:13:10.161908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4336f17e5f5aec06fa8a5f2f3b213597f176a1941af3e91616e2fdd54cc9b8ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.161908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36cbcd07-4a46-4b3d-94c0-c163e7090181", "created": "2026-10-09T15:13:10.162508Z", "modified": "2026-10-09T15:13:10.162508Z", "relationship_type": "indicates", "source_ref": "indicator--c5998693-2612-45d5-9759-c1a7e04d8580", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2862acf8-5265-49c8-a774-882b87e7f62c", "created": "2026-10-09T15:13:10.162634Z", "modified": "2026-10-09T15:13:10.162634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fe1264cf5c44fc7e1df682020c1c55999dc38988d7d33aee4bb4c40b270b92b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.162634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78207e92-162e-40fb-8df5-ab6cfe5c0468", "created": "2026-10-09T15:13:10.163211Z", "modified": "2026-10-09T15:13:10.163211Z", "relationship_type": "indicates", "source_ref": "indicator--2862acf8-5265-49c8-a774-882b87e7f62c", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b2533f-469a-4f1b-a5af-30400e267083", "created": "2026-10-09T15:13:10.16334Z", "modified": "2026-10-09T15:13:10.16334Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ee25a50014e7b5d393ac0c9c2e1e35857597af39ee7fcb404c3170bd58757f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.16334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5237acd3-ea4b-4081-a638-f92f3ca0f011", "created": "2026-10-09T15:13:10.164024Z", "modified": "2026-10-09T15:13:10.164024Z", "relationship_type": "indicates", "source_ref": "indicator--c5b2533f-469a-4f1b-a5af-30400e267083", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccf1cf5-d632-4c44-9982-04b34052db26", "created": "2026-10-09T15:13:10.164146Z", "modified": "2026-10-09T15:13:10.164146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='862b6c3279e9dd7d0033e33b04960a7a9922e7d5e14975d4dd62c0785da94f82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.164146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e7322cd-9f78-4a4c-9201-903318c2df05", "created": "2026-10-09T15:13:10.164743Z", "modified": "2026-10-09T15:13:10.164743Z", "relationship_type": "indicates", "source_ref": "indicator--0ccf1cf5-d632-4c44-9982-04b34052db26", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2e609e-2a6f-412b-8e85-8343727a4253", "created": "2026-10-09T15:13:10.164868Z", "modified": "2026-10-09T15:13:10.164868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef633f4259b85b0e5fd9722a1e6eac56ad640a282b0e4b1623da5d1453aaeb37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.164868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7050f36d-bf31-4f8e-a3c9-94a9f2e679dd", "created": "2026-10-09T15:13:10.165466Z", "modified": "2026-10-09T15:13:10.165466Z", "relationship_type": "indicates", "source_ref": "indicator--3b2e609e-2a6f-412b-8e85-8343727a4253", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc9f43b-ae64-4d32-8ec1-3c21a27b4187", "created": "2026-10-09T15:13:10.165591Z", "modified": "2026-10-09T15:13:10.165591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8ece4fda85f0613d63d7792ff803b65621e0fbd47f02e6a7fc4b22f5ab87293']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.165591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e57eff12-a14e-452e-a5d5-9baedf35a5e8", "created": "2026-10-09T15:13:10.166185Z", "modified": "2026-10-09T15:13:10.166185Z", "relationship_type": "indicates", "source_ref": "indicator--5dc9f43b-ae64-4d32-8ec1-3c21a27b4187", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7252dff-78ca-4a7b-85c6-7d6018460330", "created": "2026-10-09T15:13:10.166316Z", "modified": "2026-10-09T15:13:10.166316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2bd85ed717dce397c5271e52436bfd8d2ac95b733b2ed065d62e1e7d56e4641']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.166316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d385fdcc-da97-4c86-8798-9648b19f4b8f", "created": "2026-10-09T15:13:10.166897Z", "modified": "2026-10-09T15:13:10.166897Z", "relationship_type": "indicates", "source_ref": "indicator--e7252dff-78ca-4a7b-85c6-7d6018460330", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56829316-2b60-4ae2-8864-bb2f1dcbe4fd", "created": "2026-10-09T15:13:10.167023Z", "modified": "2026-10-09T15:13:10.167023Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4861f15690f2dfb68e73b1ffdbe8aa4c93cc63ea85bc7269595a5964f6e4d653']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.167023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2d1d37b-d6ed-4d55-9bef-0b75d55e157f", "created": "2026-10-09T15:13:10.167635Z", "modified": "2026-10-09T15:13:10.167635Z", "relationship_type": "indicates", "source_ref": "indicator--56829316-2b60-4ae2-8864-bb2f1dcbe4fd", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46931bf2-4640-450f-a650-5c75e1892e5e", "created": "2026-10-09T15:13:10.167761Z", "modified": "2026-10-09T15:13:10.167761Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cldprotect']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.167761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7308588-9638-4b2c-b84c-49046ea7f701", "created": "2026-10-09T15:13:10.168213Z", "modified": "2026-10-09T15:13:10.168213Z", "relationship_type": "indicates", "source_ref": "indicator--46931bf2-4640-450f-a650-5c75e1892e5e", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2d4e4d-3d11-4d54-a921-f25d83420946", "created": "2026-10-09T15:13:10.168346Z", "modified": "2026-10-09T15:13:10.168346Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.mobile.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.168346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33e44f0b-7c37-4ee7-8726-2586b272c346", "created": "2026-10-09T15:13:10.168801Z", "modified": "2026-10-09T15:13:10.168801Z", "relationship_type": "indicates", "source_ref": "indicator--3f2d4e4d-3d11-4d54-a921-f25d83420946", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdcacf2-0586-46f7-98a0-25fa50ee02d1", "created": "2026-10-09T15:13:10.168918Z", "modified": "2026-10-09T15:13:10.168918Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.saxfamqvxj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.168918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--978eee8d-4529-408b-ac73-70a0befd7b92", "created": "2026-10-09T15:13:10.169378Z", "modified": "2026-10-09T15:13:10.169378Z", "relationship_type": "indicates", "source_ref": "indicator--dfdcacf2-0586-46f7-98a0-25fa50ee02d1", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67241cc-843d-49e1-aa12-12ffd3fbc88c", "created": "2026-10-09T15:13:10.169498Z", "modified": "2026-10-09T15:13:10.169498Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.safesecureservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.169498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8fe334b-bd3c-4f31-ba36-0d69b4a50cce", "created": "2026-10-09T15:13:10.170051Z", "modified": "2026-10-09T15:13:10.170051Z", "relationship_type": "indicates", "source_ref": "indicator--e67241cc-843d-49e1-aa12-12ffd3fbc88c", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6eacea-5a2a-42d6-bf3a-3e1519b04c87", "created": "2026-10-09T15:13:10.17017Z", "modified": "2026-10-09T15:13:10.17017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.myappspqwddeexo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.17017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19fbfea1-418a-4b03-97a8-3a4adf0d43b5", "created": "2026-10-09T15:13:10.170638Z", "modified": "2026-10-09T15:13:10.170638Z", "relationship_type": "indicates", "source_ref": "indicator--8a6eacea-5a2a-42d6-bf3a-3e1519b04c87", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac85fa08-3753-4d74-8369-beebd38da460", "created": "2026-10-09T15:13:10.17076Z", "modified": "2026-10-09T15:13:10.17076Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.yurpdpvxnybmlgh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.17076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bd06741-e355-4b05-83a9-109cddce0387", "created": "2026-10-09T15:13:10.171217Z", "modified": "2026-10-09T15:13:10.171217Z", "relationship_type": "indicates", "source_ref": "indicator--ac85fa08-3753-4d74-8369-beebd38da460", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a81dc16-3d59-4a8d-b663-b61c88dba211", "created": "2026-10-09T15:13:10.171352Z", "modified": "2026-10-09T15:13:10.171352Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyhumanrev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.171352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bca05fd-3e38-4c5d-8260-910ded982de5", "created": "2026-10-09T15:13:10.171806Z", "modified": "2026-10-09T15:13:10.171806Z", "relationship_type": "indicates", "source_ref": "indicator--4a81dc16-3d59-4a8d-b663-b61c88dba211", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2b09ea-d443-4e32-bac2-15d178851167", "created": "2026-10-09T15:13:10.171925Z", "modified": "2026-10-09T15:13:10.171925Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='76F6C302533751BED738D40882AC219BAAD65E7B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.171925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cf70206-5456-4cca-b338-b5cb0c3acdbb", "created": "2026-10-09T15:13:10.172481Z", "modified": "2026-10-09T15:13:10.172481Z", "relationship_type": "indicates", "source_ref": "indicator--ac2b09ea-d443-4e32-bac2-15d178851167", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25816160-c7b1-4695-aef2-967baf19ca18", "created": "2026-10-09T15:13:10.172604Z", "modified": "2026-10-09T15:13:10.172604Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F9265164219A1C5DEE4A76D66BEA0C35A1FD6032']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.172604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--221162ed-b4c5-4604-b5a6-60b381166d29", "created": "2026-10-09T15:13:10.173152Z", "modified": "2026-10-09T15:13:10.173152Z", "relationship_type": "indicates", "source_ref": "indicator--25816160-c7b1-4695-aef2-967baf19ca18", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e133688-7d53-4139-a679-0c77cc749899", "created": "2026-10-09T15:13:10.173283Z", "modified": "2026-10-09T15:13:10.173283Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='597C0169D8C27DE7C6B62C2C252F9ECAC0E562C4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.173283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79c8379a-31a9-4d75-9762-65d69cbf4e15", "created": "2026-10-09T15:13:10.173827Z", "modified": "2026-10-09T15:13:10.173827Z", "relationship_type": "indicates", "source_ref": "indicator--5e133688-7d53-4139-a679-0c77cc749899", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25158d4b-3116-4268-895e-d432392035ff", "created": "2026-10-09T15:13:10.173949Z", "modified": "2026-10-09T15:13:10.173949Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E2AC495C52B9FBD49B83CFAE0C167878A2F796A5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.173949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce403398-73d2-4819-af02-7db1906e5b3b", "created": "2026-10-09T15:13:10.174509Z", "modified": "2026-10-09T15:13:10.174509Z", "relationship_type": "indicates", "source_ref": "indicator--25158d4b-3116-4268-895e-d432392035ff", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27cbe57-5be4-435a-8648-664b74f375a3", "created": "2026-10-09T15:13:10.174632Z", "modified": "2026-10-09T15:13:10.174632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E169250B134E5C46C3064F166E457CDBFCC16524']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.174632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5261495-3bc1-4a31-b260-f12efbc709d1", "created": "2026-10-09T15:13:10.175174Z", "modified": "2026-10-09T15:13:10.175174Z", "relationship_type": "indicates", "source_ref": "indicator--f27cbe57-5be4-435a-8648-664b74f375a3", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33266d6c-3d7c-49f3-99ce-a566e0b9ad9a", "created": "2026-10-09T15:13:10.175311Z", "modified": "2026-10-09T15:13:10.175311Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C270531A6D75EB4EA2AA0F4D6DF2980AFB494CB3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.175311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae4399fa-0630-41bf-b2a4-8abddd70e9a0", "created": "2026-10-09T15:13:10.175959Z", "modified": "2026-10-09T15:13:10.175959Z", "relationship_type": "indicates", "source_ref": "indicator--33266d6c-3d7c-49f3-99ce-a566e0b9ad9a", "target_ref": "malware--d62df853-34bc-484c-b603-fd212a913276"}, {"type": "malware", "spec_version": "2.1", "id": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b", "created": "2026-10-09T15:13:10.176083Z", "modified": "2026-10-09T15:13:10.176083Z", "name": "uMobix", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625498f8-21db-4a42-846d-189f763913c5", "created": "2026-10-09T15:13:10.176201Z", "modified": "2026-10-09T15:13:10.176201Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-api.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.176201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9735389-2f1e-4e84-8351-314c0a39f7e7", "created": "2026-10-09T15:13:10.176692Z", "modified": "2026-10-09T15:13:10.176692Z", "relationship_type": "indicates", "source_ref": "indicator--625498f8-21db-4a42-846d-189f763913c5", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b9766a-4338-449d-89d8-37b631c574f8", "created": "2026-10-09T15:13:10.176813Z", "modified": "2026-10-09T15:13:10.176813Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.176813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--760e8f62-dc48-4da7-a803-d34b99dd08ed", "created": "2026-10-09T15:13:10.17728Z", "modified": "2026-10-09T15:13:10.17728Z", "relationship_type": "indicates", "source_ref": "indicator--57b9766a-4338-449d-89d8-37b631c574f8", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4211b3e-f659-4892-83ee-45f8c7d06e39", "created": "2026-10-09T15:13:10.177404Z", "modified": "2026-10-09T15:13:10.177404Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.177404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3e7dd0b-8bbc-49d5-be54-6585817c2ab5", "created": "2026-10-09T15:13:10.177866Z", "modified": "2026-10-09T15:13:10.177866Z", "relationship_type": "indicates", "source_ref": "indicator--b4211b3e-f659-4892-83ee-45f8c7d06e39", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5bd03e-b98d-4647-92a5-920bf3a4a1a5", "created": "2026-10-09T15:13:10.177985Z", "modified": "2026-10-09T15:13:10.177985Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='n.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.177985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9db92d09-007a-4439-9e49-b5a4586549f5", "created": "2026-10-09T15:13:10.178458Z", "modified": "2026-10-09T15:13:10.178458Z", "relationship_type": "indicates", "source_ref": "indicator--bd5bd03e-b98d-4647-92a5-920bf3a4a1a5", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8758369-60d0-4328-8a18-b5e2a652c462", "created": "2026-10-09T15:13:10.178583Z", "modified": "2026-10-09T15:13:10.178583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tt.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.178583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b922915-9d97-461c-860c-1cdc120c08da", "created": "2026-10-09T15:13:10.179054Z", "modified": "2026-10-09T15:13:10.179054Z", "relationship_type": "indicates", "source_ref": "indicator--c8758369-60d0-4328-8a18-b5e2a652c462", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b232e5b-1acd-4784-97b0-d5ed51f7c863", "created": "2026-10-09T15:13:10.17917Z", "modified": "2026-10-09T15:13:10.17917Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyfer.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.17917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f8f17e2-1a80-4a8f-874f-642ae0767dde", "created": "2026-10-09T15:13:10.179656Z", "modified": "2026-10-09T15:13:10.179656Z", "relationship_type": "indicates", "source_ref": "indicator--8b232e5b-1acd-4784-97b0-d5ed51f7c863", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e3c795-60f2-49d9-b005-0b94e77bcf2b", "created": "2026-10-09T15:13:10.179774Z", "modified": "2026-10-09T15:13:10.179774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='surveillance-enfants.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.179774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04e7011f-fdae-4bb1-a136-51182863abfa", "created": "2026-10-09T15:13:10.180254Z", "modified": "2026-10-09T15:13:10.180254Z", "relationship_type": "indicates", "source_ref": "indicator--f2e3c795-60f2-49d9-b005-0b94e77bcf2b", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833280bf-8637-4d26-bd2f-c48b6c896595", "created": "2026-10-09T15:13:10.180388Z", "modified": "2026-10-09T15:13:10.180388Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15175706fef839d9d913389420ec133905ea30feb6baf064a2eafa37f4b8496a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.180388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67ca74d0-aff8-4752-8fee-ea855e0f154b", "created": "2026-10-09T15:13:10.180985Z", "modified": "2026-10-09T15:13:10.180985Z", "relationship_type": "indicates", "source_ref": "indicator--833280bf-8637-4d26-bd2f-c48b6c896595", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fa1970-ebf8-44f2-b955-5d9b20c66363", "created": "2026-10-09T15:13:10.181106Z", "modified": "2026-10-09T15:13:10.181106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b44246c402445eea943dceabef5a87535333a219a87c1c57e06d44f79194412']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.181106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--899af5e1-5ff1-4f95-910b-ba084b13806c", "created": "2026-10-09T15:13:10.181792Z", "modified": "2026-10-09T15:13:10.181792Z", "relationship_type": "indicates", "source_ref": "indicator--42fa1970-ebf8-44f2-b955-5d9b20c66363", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d71a618-fb88-4a5b-9671-d3bad47b60f7", "created": "2026-10-09T15:13:10.181918Z", "modified": "2026-10-09T15:13:10.181918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3427cd043c913d318eda4167294848518ed18dffb791c3c44599c246ca603eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.181918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12472b68-c42e-4a42-a576-986ca11f4915", "created": "2026-10-09T15:13:10.182516Z", "modified": "2026-10-09T15:13:10.182516Z", "relationship_type": "indicates", "source_ref": "indicator--5d71a618-fb88-4a5b-9671-d3bad47b60f7", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4d244f-fa12-479e-926b-e51aba706eb8", "created": "2026-10-09T15:13:10.182644Z", "modified": "2026-10-09T15:13:10.182644Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='445b039865b8d8ebe9708eaf665c3ca23dacbbe5bc818c9df15b3c9848ba7ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.182644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--391709ca-2a4f-45bf-aaee-f2a8a742e2e2", "created": "2026-10-09T15:13:10.183228Z", "modified": "2026-10-09T15:13:10.183228Z", "relationship_type": "indicates", "source_ref": "indicator--9d4d244f-fa12-479e-926b-e51aba706eb8", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78bd46f-4162-4238-990b-2bf90168349e", "created": "2026-10-09T15:13:10.183401Z", "modified": "2026-10-09T15:13:10.183401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fbdc384094cc89a6905d13ed8df8c0064e89e9cfdcaf80d000a366ea5d10b76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.183401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8da8bd71-0c69-4caf-9d39-a8b9ffd92dd6", "created": "2026-10-09T15:13:10.183984Z", "modified": "2026-10-09T15:13:10.183984Z", "relationship_type": "indicates", "source_ref": "indicator--e78bd46f-4162-4238-990b-2bf90168349e", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7828ac-b803-40b9-ad54-ffbde42d9701", "created": "2026-10-09T15:13:10.184104Z", "modified": "2026-10-09T15:13:10.184104Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tuner.funnelwebview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.184104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ec830fc-bb85-4236-9cd1-a2df183cadae", "created": "2026-10-09T15:13:10.184572Z", "modified": "2026-10-09T15:13:10.184572Z", "relationship_type": "indicates", "source_ref": "indicator--bd7828ac-b803-40b9-ad54-ffbde42d9701", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f106aff6-efb7-46ec-80de-0b7acc58973a", "created": "2026-10-09T15:13:10.184692Z", "modified": "2026-10-09T15:13:10.184692Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.system.user']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.184692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8f51f5e-e88c-4faa-b2f9-58fca3b1a176", "created": "2026-10-09T15:13:10.185146Z", "modified": "2026-10-09T15:13:10.185146Z", "relationship_type": "indicates", "source_ref": "indicator--f106aff6-efb7-46ec-80de-0b7acc58973a", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c836fb7c-3a84-4f09-89db-e500355ff4cd", "created": "2026-10-09T15:13:10.185277Z", "modified": "2026-10-09T15:13:10.185277Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.play.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.185277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d8328e5-4be7-4a35-9e8d-fa922533ad9a", "created": "2026-10-09T15:13:10.18573Z", "modified": "2026-10-09T15:13:10.18573Z", "relationship_type": "indicates", "source_ref": "indicator--c836fb7c-3a84-4f09-89db-e500355ff4cd", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba7d58b-93a5-49ea-9ddf-13ddf92dd371", "created": "2026-10-09T15:13:10.185847Z", "modified": "2026-10-09T15:13:10.185847Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='575F8E8A04A5967E78BC5B5A3E31FDACF42F4FB1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.185847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af623fd0-6086-471a-8737-cdb68348f9e6", "created": "2026-10-09T15:13:10.186406Z", "modified": "2026-10-09T15:13:10.186406Z", "relationship_type": "indicates", "source_ref": "indicator--dba7d58b-93a5-49ea-9ddf-13ddf92dd371", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc1111f-44e8-4e47-ae07-11df0b5aea62", "created": "2026-10-09T15:13:10.18653Z", "modified": "2026-10-09T15:13:10.18653Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6696449AA96EBA57CDF4707F0F84274958BE4523']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.18653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdc94059-24e0-4fb2-af81-071341306b66", "created": "2026-10-09T15:13:10.187076Z", "modified": "2026-10-09T15:13:10.187076Z", "relationship_type": "indicates", "source_ref": "indicator--3cc1111f-44e8-4e47-ae07-11df0b5aea62", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeadd0b3-ff4a-40df-aa4b-ccbb4fdd5fb5", "created": "2026-10-09T15:13:10.187196Z", "modified": "2026-10-09T15:13:10.187196Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F4E6DA34F0071AEB70010EBB69875E5212D69140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.187196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--865d6dcc-e93c-4db7-8350-abc3566b2c8e", "created": "2026-10-09T15:13:10.187845Z", "modified": "2026-10-09T15:13:10.187845Z", "relationship_type": "indicates", "source_ref": "indicator--aeadd0b3-ff4a-40df-aa4b-ccbb4fdd5fb5", "target_ref": "malware--eb8e2213-5e41-4402-8e9e-60a05c9af16b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b", "created": "2026-10-09T15:13:10.187967Z", "modified": "2026-10-09T15:13:10.187967Z", "name": "Spymie", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13459be5-c574-48b0-bd5b-66a836251525", "created": "2026-10-09T15:13:10.188082Z", "modified": "2026-10-09T15:13:10.188082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='816c1eba8e7597d4e0ca19f039d92e28d2e3122c7444949d59577384f874a573']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.188082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e04a96a3-f7bc-427e-b36f-21f50452c6fa", "created": "2026-10-09T15:13:10.188677Z", "modified": "2026-10-09T15:13:10.188677Z", "relationship_type": "indicates", "source_ref": "indicator--13459be5-c574-48b0-bd5b-66a836251525", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967b7e50-0833-430e-92a6-b910d53ef81b", "created": "2026-10-09T15:13:10.188801Z", "modified": "2026-10-09T15:13:10.188801Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0afb0b4d44f36eed6f214d468defb2beda5cc689f890a64c5b258783714628c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.188801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--470018ab-36a8-4a1b-bea5-bea359aede78", "created": "2026-10-09T15:13:10.189411Z", "modified": "2026-10-09T15:13:10.189411Z", "relationship_type": "indicates", "source_ref": "indicator--967b7e50-0833-430e-92a6-b910d53ef81b", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745820fa-3149-42a4-97b7-61b4d74f67f0", "created": "2026-10-09T15:13:10.189533Z", "modified": "2026-10-09T15:13:10.189533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5b24ea08a84efd89c4a245a8c9b617097884a75dfb05e3e73679f9c80347855']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.189533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--577a1e56-c603-4020-93d7-df73d66d21da", "created": "2026-10-09T15:13:10.190111Z", "modified": "2026-10-09T15:13:10.190111Z", "relationship_type": "indicates", "source_ref": "indicator--745820fa-3149-42a4-97b7-61b4d74f67f0", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd08b22-f0bf-4032-b1f8-d25a2e87f5e7", "created": "2026-10-09T15:13:10.190229Z", "modified": "2026-10-09T15:13:10.190229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3e857546e5ab6765fcc89c144f50eb2b35cef7270f7de7b0d790cf40375fe7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.190229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d20938de-b02b-4143-899c-c115be4a1b29", "created": "2026-10-09T15:13:10.190824Z", "modified": "2026-10-09T15:13:10.190824Z", "relationship_type": "indicates", "source_ref": "indicator--2bd08b22-f0bf-4032-b1f8-d25a2e87f5e7", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d6e3f1-075b-4340-9b5b-45d6ed8b16ed", "created": "2026-10-09T15:13:10.190944Z", "modified": "2026-10-09T15:13:10.190944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8a3f9704dd11f4a0a035477cd7f461babd0f47c3bb5757294cc7d1c6b98e3cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.190944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a684a45b-5dee-498a-b1cf-881083046820", "created": "2026-10-09T15:13:10.191531Z", "modified": "2026-10-09T15:13:10.191531Z", "relationship_type": "indicates", "source_ref": "indicator--98d6e3f1-075b-4340-9b5b-45d6ed8b16ed", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b623de-78c3-4905-b798-b002b97232dc", "created": "2026-10-09T15:13:10.191653Z", "modified": "2026-10-09T15:13:10.191653Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ant.spymie.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.191653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--550fee03-03d5-4771-8428-bff67d7aa35d", "created": "2026-10-09T15:13:10.192111Z", "modified": "2026-10-09T15:13:10.192111Z", "relationship_type": "indicates", "source_ref": "indicator--91b623de-78c3-4905-b798-b002b97232dc", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08554ae3-27ec-49ef-abec-094c64abe12e", "created": "2026-10-09T15:13:10.19223Z", "modified": "2026-10-09T15:13:10.19223Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='05B23C7E9156A4C55768DA27936FF2D7AF09BB8F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.19223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1120695-32a4-4ae2-ae62-69eaa753b8f2", "created": "2026-10-09T15:13:10.192781Z", "modified": "2026-10-09T15:13:10.192781Z", "relationship_type": "indicates", "source_ref": "indicator--08554ae3-27ec-49ef-abec-094c64abe12e", "target_ref": "malware--88e98f96-0bc0-452f-8c21-f5d63544498b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3", "created": "2026-10-09T15:13:10.192901Z", "modified": "2026-10-09T15:13:10.192901Z", "name": "TheOneSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e45b34-97fb-4258-8d12-97168637fb4f", "created": "2026-10-09T15:13:10.193013Z", "modified": "2026-10-09T15:13:10.193013Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.ogymogy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.193013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98b7fc09-5686-4555-b969-46bd1a46cdfe", "created": "2026-10-09T15:13:10.193496Z", "modified": "2026-10-09T15:13:10.193496Z", "relationship_type": "indicates", "source_ref": "indicator--71e45b34-97fb-4258-8d12-97168637fb4f", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b94367-9457-4d0d-8291-16e05725428d", "created": "2026-10-09T15:13:10.193617Z", "modified": "2026-10-09T15:13:10.193617Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lb.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.193617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2652f7b-d765-4e8d-beba-1a5444c6e1d6", "created": "2026-10-09T15:13:10.194184Z", "modified": "2026-10-09T15:13:10.194184Z", "relationship_type": "indicates", "source_ref": "indicator--94b94367-9457-4d0d-8291-16e05725428d", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1878c3-bd5e-4480-95ef-7ceb69a27277", "created": "2026-10-09T15:13:10.194319Z", "modified": "2026-10-09T15:13:10.194319Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='im.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.194319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04588373-b056-4c51-8be7-c12232c260ac", "created": "2026-10-09T15:13:10.194792Z", "modified": "2026-10-09T15:13:10.194792Z", "relationship_type": "indicates", "source_ref": "indicator--5a1878c3-bd5e-4480-95ef-7ceb69a27277", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5757922-0f64-4777-80f9-2c55239bdf64", "created": "2026-10-09T15:13:10.194914Z", "modified": "2026-10-09T15:13:10.194914Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node-api.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.194914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aecf9f22-4d23-431d-80d1-d15ae1bb334e", "created": "2026-10-09T15:13:10.1954Z", "modified": "2026-10-09T15:13:10.1954Z", "relationship_type": "indicates", "source_ref": "indicator--c5757922-0f64-4777-80f9-2c55239bdf64", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf96b03-dbb0-483d-890e-3a8ef26fd35b", "created": "2026-10-09T15:13:10.195522Z", "modified": "2026-10-09T15:13:10.195522Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node1.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.195522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cebac695-1bc2-4cc1-9d97-36cdd025f790", "created": "2026-10-09T15:13:10.196003Z", "modified": "2026-10-09T15:13:10.196003Z", "relationship_type": "indicates", "source_ref": "indicator--dbf96b03-dbb0-483d-890e-3a8ef26fd35b", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3841beda-c7b0-4a64-8969-b37933ce6717", "created": "2026-10-09T15:13:10.19613Z", "modified": "2026-10-09T15:13:10.19613Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node2.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.19613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76d39fce-da5b-4ec4-ad09-e73da7ff2253", "created": "2026-10-09T15:13:10.196618Z", "modified": "2026-10-09T15:13:10.196618Z", "relationship_type": "indicates", "source_ref": "indicator--3841beda-c7b0-4a64-8969-b37933ce6717", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda512f4-adfc-4b3c-8fe5-54287bfee612", "created": "2026-10-09T15:13:10.19674Z", "modified": "2026-10-09T15:13:10.19674Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node3.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.19674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cad900f-604c-47c6-827c-795f09ab5bbe", "created": "2026-10-09T15:13:10.197212Z", "modified": "2026-10-09T15:13:10.197212Z", "relationship_type": "indicates", "source_ref": "indicator--eda512f4-adfc-4b3c-8fe5-54287bfee612", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6614d3af-82b5-4c8a-b84e-7f7950163c3b", "created": "2026-10-09T15:13:10.197347Z", "modified": "2026-10-09T15:13:10.197347Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node4.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.197347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20ec1fcf-1bbb-43f7-a166-8e5584c3ce60", "created": "2026-10-09T15:13:10.197823Z", "modified": "2026-10-09T15:13:10.197823Z", "relationship_type": "indicates", "source_ref": "indicator--6614d3af-82b5-4c8a-b84e-7f7950163c3b", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c05ae83-6315-45db-8c78-e283a10c1cdb", "created": "2026-10-09T15:13:10.197941Z", "modified": "2026-10-09T15:13:10.197941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node5.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.197941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c52fe464-a847-49cf-946c-89cc63dad456", "created": "2026-10-09T15:13:10.198434Z", "modified": "2026-10-09T15:13:10.198434Z", "relationship_type": "indicates", "source_ref": "indicator--6c05ae83-6315-45db-8c78-e283a10c1cdb", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbba582e-d27b-4f3e-b286-268ba3042567", "created": "2026-10-09T15:13:10.198557Z", "modified": "2026-10-09T15:13:10.198557Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ogymoggy.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.198557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36363756-c3c5-421e-a641-15156e53b4dc", "created": "2026-10-09T15:13:10.199036Z", "modified": "2026-10-09T15:13:10.199036Z", "relationship_type": "indicates", "source_ref": "indicator--bbba582e-d27b-4f3e-b286-268ba3042567", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a79c307-b650-4fe4-823e-1acd327ca85c", "created": "2026-10-09T15:13:10.199153Z", "modified": "2026-10-09T15:13:10.199153Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.199153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68fd0e88-119d-4815-910a-0f772c1f4355", "created": "2026-10-09T15:13:10.199725Z", "modified": "2026-10-09T15:13:10.199725Z", "relationship_type": "indicates", "source_ref": "indicator--8a79c307-b650-4fe4-823e-1acd327ca85c", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae19c03-7f49-4982-8e9d-68dda433c051", "created": "2026-10-09T15:13:10.199852Z", "modified": "2026-10-09T15:13:10.199852Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ogymogy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.199852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f715574e-ecc0-4944-ba3d-17ff137c2ef3", "created": "2026-10-09T15:13:10.200332Z", "modified": "2026-10-09T15:13:10.200332Z", "relationship_type": "indicates", "source_ref": "indicator--4ae19c03-7f49-4982-8e9d-68dda433c051", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df2fffb-8284-43d0-a94a-8771534467e5", "created": "2026-10-09T15:13:10.200461Z", "modified": "2026-10-09T15:13:10.200461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.200461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ece55db-5db3-4cf9-b4bf-75f0957cc87a", "created": "2026-10-09T15:13:10.200932Z", "modified": "2026-10-09T15:13:10.200932Z", "relationship_type": "indicates", "source_ref": "indicator--5df2fffb-8284-43d0-a94a-8771534467e5", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14d300c-4aef-463d-afa1-05b43a4b51f8", "created": "2026-10-09T15:13:10.201052Z", "modified": "2026-10-09T15:13:10.201052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.ogymogy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.201052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18f284a5-0a70-4a22-8028-aad4b35c5cb2", "created": "2026-10-09T15:13:10.201535Z", "modified": "2026-10-09T15:13:10.201535Z", "relationship_type": "indicates", "source_ref": "indicator--d14d300c-4aef-463d-afa1-05b43a4b51f8", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0893d44-2646-4ae4-9dda-f1a14a0da142", "created": "2026-10-09T15:13:10.201655Z", "modified": "2026-10-09T15:13:10.201655Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tos-assigned-build.sfo2.digitaloceanspaces.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.201655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82079251-7154-45b3-934d-c991d303b913", "created": "2026-10-09T15:13:10.20216Z", "modified": "2026-10-09T15:13:10.20216Z", "relationship_type": "indicates", "source_ref": "indicator--a0893d44-2646-4ae4-9dda-f1a14a0da142", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ffe03c-509f-4a1c-a91b-52c01f3f8475", "created": "2026-10-09T15:13:10.202287Z", "modified": "2026-10-09T15:13:10.202287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ef1465816dedc8aa073eb532ef10ec984263352e5e9899d74bb1ffb668bd402']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.202287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7ddb868-f25e-4fee-8fff-4bc5624de54b", "created": "2026-10-09T15:13:10.202874Z", "modified": "2026-10-09T15:13:10.202874Z", "relationship_type": "indicates", "source_ref": "indicator--63ffe03c-509f-4a1c-a91b-52c01f3f8475", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb731b7f-335c-435d-a21e-45feebeddeda", "created": "2026-10-09T15:13:10.202992Z", "modified": "2026-10-09T15:13:10.202992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cc3bb5f510f39abb65925dabff7cca7580edf265af592f93f0e19f4ae343651']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.202992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42d61d76-d5d1-42a0-a617-80a218e2af52", "created": "2026-10-09T15:13:10.203588Z", "modified": "2026-10-09T15:13:10.203588Z", "relationship_type": "indicates", "source_ref": "indicator--fb731b7f-335c-435d-a21e-45feebeddeda", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1445fd49-b17d-4143-b141-1d1d20a44257", "created": "2026-10-09T15:13:10.203714Z", "modified": "2026-10-09T15:13:10.203714Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='941b0c08acdcde91c3cc2da81c8149474150d49e629640d3a301af991a739333']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.203714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a3d04ca-9b58-4ab8-bc13-257a1b2b601a", "created": "2026-10-09T15:13:10.204312Z", "modified": "2026-10-09T15:13:10.204312Z", "relationship_type": "indicates", "source_ref": "indicator--1445fd49-b17d-4143-b141-1d1d20a44257", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd02fa5-d564-48ea-b905-2bca0e62da44", "created": "2026-10-09T15:13:10.204434Z", "modified": "2026-10-09T15:13:10.204434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b63fe1ecad9f894d7de2f11240989b882cc021647b27ef644d4798dd2d4a175b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.204434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--910f3321-8eea-4184-886d-8f6f45bdd92b", "created": "2026-10-09T15:13:10.205014Z", "modified": "2026-10-09T15:13:10.205014Z", "relationship_type": "indicates", "source_ref": "indicator--afd02fa5-d564-48ea-b905-2bca0e62da44", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b9be1c-d027-4b9b-ae72-3b49b4d9ef51", "created": "2026-10-09T15:13:10.205134Z", "modified": "2026-10-09T15:13:10.205134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01e36ccb585f44b70ec8bb6c25c721b47c6fb801570c65c3187d3ab21b397640']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.205134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34b3ad60-375f-49be-bcd4-725cec5e6b6e", "created": "2026-10-09T15:13:10.206141Z", "modified": "2026-10-09T15:13:10.206141Z", "relationship_type": "indicates", "source_ref": "indicator--03b9be1c-d027-4b9b-ae72-3b49b4d9ef51", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cab4e4d-dfca-4127-bff3-9dc5dc69afdf", "created": "2026-10-09T15:13:10.206285Z", "modified": "2026-10-09T15:13:10.206285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1888ca6e593bff1fd3fc00f7a4a2c9a5c5a405bc5399666fc264d52d540c7c86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.206285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f235c55-591e-49a7-bb4d-b2f74eb9a9e8", "created": "2026-10-09T15:13:10.20688Z", "modified": "2026-10-09T15:13:10.20688Z", "relationship_type": "indicates", "source_ref": "indicator--1cab4e4d-dfca-4127-bff3-9dc5dc69afdf", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa9fc96-e943-4255-9018-854cab6e51c3", "created": "2026-10-09T15:13:10.207001Z", "modified": "2026-10-09T15:13:10.207001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f628f3df8e15f7ccc35f5e72683a09eaf3cb48adc5f46f4323537b4302f09f42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.207001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d4b47bc-c30f-4b13-9b71-c09f1f70ac44", "created": "2026-10-09T15:13:10.207603Z", "modified": "2026-10-09T15:13:10.207603Z", "relationship_type": "indicates", "source_ref": "indicator--bfa9fc96-e943-4255-9018-854cab6e51c3", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d67a46b-7935-43fb-a13a-eeca6ee9d6e4", "created": "2026-10-09T15:13:10.207731Z", "modified": "2026-10-09T15:13:10.207731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b23b0dbf6998492f5bc1f13568d04fc454b8f33c9dea979c00e234a5e19869ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.207731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34b40b04-cd13-4688-b820-d2a09f0c57cf", "created": "2026-10-09T15:13:10.208321Z", "modified": "2026-10-09T15:13:10.208321Z", "relationship_type": "indicates", "source_ref": "indicator--9d67a46b-7935-43fb-a13a-eeca6ee9d6e4", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d6a6f9-521f-4984-8389-51ac6399b8d3", "created": "2026-10-09T15:13:10.208444Z", "modified": "2026-10-09T15:13:10.208444Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.208444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd51ec88-e6be-440b-9719-e5122978b7e4", "created": "2026-10-09T15:13:10.208899Z", "modified": "2026-10-09T15:13:10.208899Z", "relationship_type": "indicates", "source_ref": "indicator--27d6a6f9-521f-4984-8389-51ac6399b8d3", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b471b7-d817-4b75-abe2-aac2ac62ff09", "created": "2026-10-09T15:13:10.209017Z", "modified": "2026-10-09T15:13:10.209017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.omg']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.209017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27ca524c-0529-4a5c-bff7-6c364bf50fef", "created": "2026-10-09T15:13:10.209477Z", "modified": "2026-10-09T15:13:10.209477Z", "relationship_type": "indicates", "source_ref": "indicator--44b471b7-d817-4b75-abe2-aac2ac62ff09", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36ba9d3-5c73-48de-bfce-7da320b3b4ff", "created": "2026-10-09T15:13:10.209599Z", "modified": "2026-10-09T15:13:10.209599Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D46492F02F25877E9F5D6CFFA4CE99DAC64D981A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.209599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--526c0ccd-adeb-44ab-bf5e-dbfd6661b75d", "created": "2026-10-09T15:13:10.210133Z", "modified": "2026-10-09T15:13:10.210133Z", "relationship_type": "indicates", "source_ref": "indicator--d36ba9d3-5c73-48de-bfce-7da320b3b4ff", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b494cd6b-586f-4b47-8651-8a8b5cf0fb29", "created": "2026-10-09T15:13:10.210251Z", "modified": "2026-10-09T15:13:10.210251Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9DE8D6C6757152EC819C1A09F5665B77F72493A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.210251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c3b2df4-d853-4921-9d86-0ee604311c60", "created": "2026-10-09T15:13:10.210809Z", "modified": "2026-10-09T15:13:10.210809Z", "relationship_type": "indicates", "source_ref": "indicator--b494cd6b-586f-4b47-8651-8a8b5cf0fb29", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50e9ce8-f813-479a-9d0d-9d60d6c3880e", "created": "2026-10-09T15:13:10.210932Z", "modified": "2026-10-09T15:13:10.210932Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B6D2D36C75931CCA18538B79C5DE3A04EF4AF777']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.210932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dadb3153-a46d-48e8-8fc3-43d9d0eb00f0", "created": "2026-10-09T15:13:10.21149Z", "modified": "2026-10-09T15:13:10.21149Z", "relationship_type": "indicates", "source_ref": "indicator--d50e9ce8-f813-479a-9d0d-9d60d6c3880e", "target_ref": "malware--d7c3c3c8-4b93-4893-b052-f2df046d8fd3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e", "created": "2026-10-09T15:13:10.211615Z", "modified": "2026-10-09T15:13:10.211615Z", "name": "ClevGuard", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff98d8f-bcd0-4081-b645-9a53485fbf86", "created": "2026-10-09T15:13:10.211733Z", "modified": "2026-10-09T15:13:10.211733Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.211733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--457433bd-fcbd-4de6-b1c9-592ef8488447", "created": "2026-10-09T15:13:10.212335Z", "modified": "2026-10-09T15:13:10.212335Z", "relationship_type": "indicates", "source_ref": "indicator--bff98d8f-bcd0-4081-b645-9a53485fbf86", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bae09a-7724-483d-9cf4-e1f5e2cfbfa0", "created": "2026-10-09T15:13:10.212465Z", "modified": "2026-10-09T15:13:10.212465Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsguard-6c6a9.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.212465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa3e74b8-dd2d-497c-8b4f-ac0894ed654f", "created": "2026-10-09T15:13:10.212959Z", "modified": "2026-10-09T15:13:10.212959Z", "relationship_type": "indicates", "source_ref": "indicator--a5bae09a-7724-483d-9cf4-e1f5e2cfbfa0", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd653805-3599-4ff8-b08e-478ddf6fa042", "created": "2026-10-09T15:13:10.213081Z", "modified": "2026-10-09T15:13:10.213081Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clevguard.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.213081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02cd5846-40b5-4d21-aa63-4af9699d3375", "created": "2026-10-09T15:13:10.213567Z", "modified": "2026-10-09T15:13:10.213567Z", "relationship_type": "indicates", "source_ref": "indicator--fd653805-3599-4ff8-b08e-478ddf6fa042", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af26ec0e-d761-43bd-86c6-567d3e515ff7", "created": "2026-10-09T15:13:10.213695Z", "modified": "2026-10-09T15:13:10.213695Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clevguard.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.213695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87988d13-da91-49a8-94c5-f985b6b728bf", "created": "2026-10-09T15:13:10.214167Z", "modified": "2026-10-09T15:13:10.214167Z", "relationship_type": "indicates", "source_ref": "indicator--af26ec0e-d761-43bd-86c6-567d3e515ff7", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353a0597-ea4c-44c4-8b7d-0c2a8c4b864e", "created": "2026-10-09T15:13:10.2143Z", "modified": "2026-10-09T15:13:10.2143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.2143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3fca0de-08a5-4aa4-a92e-26c795c362f9", "created": "2026-10-09T15:13:10.214772Z", "modified": "2026-10-09T15:13:10.214772Z", "relationship_type": "indicates", "source_ref": "indicator--353a0597-ea4c-44c4-8b7d-0c2a8c4b864e", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c612b10-9d25-44db-a1a3-92dc64461c56", "created": "2026-10-09T15:13:10.214889Z", "modified": "2026-10-09T15:13:10.214889Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.214889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--480bb26a-6cff-4742-8746-69be3d4b9507", "created": "2026-10-09T15:13:10.215443Z", "modified": "2026-10-09T15:13:10.215443Z", "relationship_type": "indicates", "source_ref": "indicator--5c612b10-9d25-44db-a1a3-92dc64461c56", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cec553-5792-4cd5-b181-e258e9306dd0", "created": "2026-10-09T15:13:10.215572Z", "modified": "2026-10-09T15:13:10.215572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.215572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dafe5f46-275f-41a8-899e-2a92076e883a", "created": "2026-10-09T15:13:10.216045Z", "modified": "2026-10-09T15:13:10.216045Z", "relationship_type": "indicates", "source_ref": "indicator--97cec553-5792-4cd5-b181-e258e9306dd0", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522b3d64-2d9f-477e-b111-ad29df96ac85", "created": "2026-10-09T15:13:10.216164Z", "modified": "2026-10-09T15:13:10.216164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e7830a079ad9f90bc8c6d249f77613695a14869bb0c635c376b2235beb3f41c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.216164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b93a0da3-97ed-49aa-b048-1d469d23d58a", "created": "2026-10-09T15:13:10.216768Z", "modified": "2026-10-09T15:13:10.216768Z", "relationship_type": "indicates", "source_ref": "indicator--522b3d64-2d9f-477e-b111-ad29df96ac85", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4961d65f-dbcc-4908-b113-ca26a3604c16", "created": "2026-10-09T15:13:10.216891Z", "modified": "2026-10-09T15:13:10.216891Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='075d6d9d905014bd07da1d97ad50e18b8d028460d7378ef460d69a2786ee179d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.216891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af53d2c6-e0e9-44f3-bbd8-3dc8c6b219b4", "created": "2026-10-09T15:13:10.217496Z", "modified": "2026-10-09T15:13:10.217496Z", "relationship_type": "indicates", "source_ref": "indicator--4961d65f-dbcc-4908-b113-ca26a3604c16", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3afbc52-faaf-42dc-a534-6c7f4b2d3a44", "created": "2026-10-09T15:13:10.21762Z", "modified": "2026-10-09T15:13:10.21762Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kids.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.21762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92f61fe2-76c1-40c5-b245-598cbc941172", "created": "2026-10-09T15:13:10.218179Z", "modified": "2026-10-09T15:13:10.218179Z", "relationship_type": "indicates", "source_ref": "indicator--e3afbc52-faaf-42dc-a534-6c7f4b2d3a44", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfa3ebb-89f7-451f-ba8d-7443dd830afe", "created": "2026-10-09T15:13:10.218316Z", "modified": "2026-10-09T15:13:10.218316Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kids.whatsapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.218316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fe22b1a-6bc0-449f-bc0c-9283096a4955", "created": "2026-10-09T15:13:10.218777Z", "modified": "2026-10-09T15:13:10.218777Z", "relationship_type": "indicates", "source_ref": "indicator--6bfa3ebb-89f7-451f-ba8d-7443dd830afe", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3e403f-2d66-4f15-99a5-69fc85139edc", "created": "2026-10-09T15:13:10.218901Z", "modified": "2026-10-09T15:13:10.218901Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CCE55D4C3E844E8A7542036D40BFBB4AA98B89D7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.218901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0b0f54f-4510-48d2-a5d5-7161d862837e", "created": "2026-10-09T15:13:10.219453Z", "modified": "2026-10-09T15:13:10.219453Z", "relationship_type": "indicates", "source_ref": "indicator--9f3e403f-2d66-4f15-99a5-69fc85139edc", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca728ab-211c-45e6-a79a-944b00a6721e", "created": "2026-10-09T15:13:10.219576Z", "modified": "2026-10-09T15:13:10.219576Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E48C6714DBFD2AB6E5CF85C87EFD05BD8E11E6FB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.219576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19158cec-89ad-4457-9502-e870be61aeec", "created": "2026-10-09T15:13:10.220112Z", "modified": "2026-10-09T15:13:10.220112Z", "relationship_type": "indicates", "source_ref": "indicator--7ca728ab-211c-45e6-a79a-944b00a6721e", "target_ref": "malware--aa3de5c5-5c1c-41e3-a5a4-78a9d5093c7e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--daa01e0b-9545-4001-a587-4194354881e1", "created": "2026-10-09T15:13:10.220234Z", "modified": "2026-10-09T15:13:10.220234Z", "name": "EasyPhoneTrack", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02131eea-f375-4cbe-9ac4-319beb547494", "created": "2026-10-09T15:13:10.220364Z", "modified": "2026-10-09T15:13:10.220364Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cell-phones-tracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.220364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e7a1c93-794f-4966-ac11-a8b4e1d682c5", "created": "2026-10-09T15:13:10.220847Z", "modified": "2026-10-09T15:13:10.220847Z", "relationship_type": "indicates", "source_ref": "indicator--02131eea-f375-4cbe-9ac4-319beb547494", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4e5ddc-e08b-4789-86c4-2dd6af092c73", "created": "2026-10-09T15:13:10.220965Z", "modified": "2026-10-09T15:13:10.220965Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celltracker.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.220965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04b88205-f597-4653-af46-7a15e471d162", "created": "2026-10-09T15:13:10.221444Z", "modified": "2026-10-09T15:13:10.221444Z", "relationship_type": "indicates", "source_ref": "indicator--dc4e5ddc-e08b-4789-86c4-2dd6af092c73", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1d32bb-5afd-44e9-b665-eda19231d034", "created": "2026-10-09T15:13:10.221564Z", "modified": "2026-10-09T15:13:10.221564Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easyphonetrack.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.221564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c38a8f8-9fc0-4443-a0dd-ec722e4258cf", "created": "2026-10-09T15:13:10.222044Z", "modified": "2026-10-09T15:13:10.222044Z", "relationship_type": "indicates", "source_ref": "indicator--dd1d32bb-5afd-44e9-b665-eda19231d034", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b54651-f922-4b67-b064-45122fda41d1", "created": "2026-10-09T15:13:10.222166Z", "modified": "2026-10-09T15:13:10.222166Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetrack.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.222166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4aacb436-6a81-4843-80f4-fb2156678e0c", "created": "2026-10-09T15:13:10.222652Z", "modified": "2026-10-09T15:13:10.222652Z", "relationship_type": "indicates", "source_ref": "indicator--15b54651-f922-4b67-b064-45122fda41d1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6034d995-263c-4522-b688-116dcf05f972", "created": "2026-10-09T15:13:10.222774Z", "modified": "2026-10-09T15:13:10.222774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy-datacenter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.222774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f971ff5-678e-4e7e-ba69-fa9c27854dcf", "created": "2026-10-09T15:13:10.223249Z", "modified": "2026-10-09T15:13:10.223249Z", "relationship_type": "indicates", "source_ref": "indicator--6034d995-263c-4522-b688-116dcf05f972", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ea6e2a-6470-482b-b21a-6280b86e509d", "created": "2026-10-09T15:13:10.223382Z", "modified": "2026-10-09T15:13:10.223382Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='studio11-7e288.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.223382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2435d07-a6d9-4d15-82de-bfc94c89ad3b", "created": "2026-10-09T15:13:10.223975Z", "modified": "2026-10-09T15:13:10.223975Z", "relationship_type": "indicates", "source_ref": "indicator--41ea6e2a-6470-482b-b21a-6280b86e509d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b601ccba-e4b0-4c66-aaad-e9a7d272a567", "created": "2026-10-09T15:13:10.224098Z", "modified": "2026-10-09T15:13:10.224098Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmy.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.224098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d4e6fdb-6b1b-4eb4-91ed-0a0c9eaaab4f", "created": "2026-10-09T15:13:10.22458Z", "modified": "2026-10-09T15:13:10.22458Z", "relationship_type": "indicates", "source_ref": "indicator--b601ccba-e4b0-4c66-aaad-e9a7d272a567", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cd0d73-f6ed-4fa2-883b-3179997a3e29", "created": "2026-10-09T15:13:10.224704Z", "modified": "2026-10-09T15:13:10.224704Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spy-datacenter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.224704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5586d010-d6f7-4697-92b4-f2beb88cbf2b", "created": "2026-10-09T15:13:10.225184Z", "modified": "2026-10-09T15:13:10.225184Z", "relationship_type": "indicates", "source_ref": "indicator--23cd0d73-f6ed-4fa2-883b-3179997a3e29", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e6d120-2973-486f-ab15-e7bd7e7088ca", "created": "2026-10-09T15:13:10.225316Z", "modified": "2026-10-09T15:13:10.225316Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spappmonitoring.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.225316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7b30f88-8917-4f73-b21f-e8c4ad417356", "created": "2026-10-09T15:13:10.225797Z", "modified": "2026-10-09T15:13:10.225797Z", "relationship_type": "indicates", "source_ref": "indicator--40e6d120-2973-486f-ab15-e7bd7e7088ca", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625f1a19-c44f-48d1-96ad-b0935ce50956", "created": "2026-10-09T15:13:10.22592Z", "modified": "2026-10-09T15:13:10.22592Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spappmonitoring.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.22592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6ffd171-50e8-47ef-a4ed-8c853192e568", "created": "2026-10-09T15:13:10.226424Z", "modified": "2026-10-09T15:13:10.226424Z", "relationship_type": "indicates", "source_ref": "indicator--625f1a19-c44f-48d1-96ad-b0935ce50956", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a1ba47-7896-4b48-b07f-bf7b33d011b3", "created": "2026-10-09T15:13:10.226551Z", "modified": "2026-10-09T15:13:10.226551Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobil-kem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.226551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da5245e2-3c95-4393-bff5-af21bb89d69b", "created": "2026-10-09T15:13:10.227029Z", "modified": "2026-10-09T15:13:10.227029Z", "relationship_type": "indicates", "source_ref": "indicator--f2a1ba47-7896-4b48-b07f-bf7b33d011b3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6ebd3c-0453-46f7-bdd4-244194821f80", "created": "2026-10-09T15:13:10.227148Z", "modified": "2026-10-09T15:13:10.227148Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easyphonetrack.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.227148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf6baed7-ff6f-4bb3-85c0-901c9d0eb5ee", "created": "2026-10-09T15:13:10.227633Z", "modified": "2026-10-09T15:13:10.227633Z", "relationship_type": "indicates", "source_ref": "indicator--5f6ebd3c-0453-46f7-bdd4-244194821f80", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eae542-473c-4077-a7ba-6ef9ea6a4426", "created": "2026-10-09T15:13:10.227758Z", "modified": "2026-10-09T15:13:10.227758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9145f2248ebb3a7bbfad88da09fd7a0a9ed58455418376cefa530887ebb1d000']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.227758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26be138b-55a5-477b-a207-345f155bdab4", "created": "2026-10-09T15:13:10.228349Z", "modified": "2026-10-09T15:13:10.228349Z", "relationship_type": "indicates", "source_ref": "indicator--a4eae542-473c-4077-a7ba-6ef9ea6a4426", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8d162a-ade7-4a0a-98e2-793dd0b901b3", "created": "2026-10-09T15:13:10.228476Z", "modified": "2026-10-09T15:13:10.228476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea39df6e6d68aadeedbf3058e50d3dedd388c1ce5b580e0a1afd90156ed10c73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.228476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de5f0982-95d2-490a-8856-b6f6c9374d72", "created": "2026-10-09T15:13:10.229062Z", "modified": "2026-10-09T15:13:10.229062Z", "relationship_type": "indicates", "source_ref": "indicator--cd8d162a-ade7-4a0a-98e2-793dd0b901b3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419aae11-03fd-4b8d-8df6-32f1301ef1b2", "created": "2026-10-09T15:13:10.229184Z", "modified": "2026-10-09T15:13:10.229184Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc00da3101f237d1354af1be897fff7c03578637d8151c863efcc26c613de95a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.229184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc3ca475-654a-439b-a582-b8cd5bc92644", "created": "2026-10-09T15:13:10.229883Z", "modified": "2026-10-09T15:13:10.229883Z", "relationship_type": "indicates", "source_ref": "indicator--419aae11-03fd-4b8d-8df6-32f1301ef1b2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accfc355-5587-4256-9982-41c3bca8cd5d", "created": "2026-10-09T15:13:10.230009Z", "modified": "2026-10-09T15:13:10.230009Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05af721cc21d3e7e2e03255652ba248521a9a0296857d95d4b22edbbdae3996e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.230009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6b69e49-2620-4a73-97b9-68ab0e9bf088", "created": "2026-10-09T15:13:10.230607Z", "modified": "2026-10-09T15:13:10.230607Z", "relationship_type": "indicates", "source_ref": "indicator--accfc355-5587-4256-9982-41c3bca8cd5d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a40df1a-0226-400f-a321-0b7a3796588f", "created": "2026-10-09T15:13:10.230735Z", "modified": "2026-10-09T15:13:10.230735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8ba715d1dbdca8365d9708b44c3b5fa6345fede8941597cdd61eb49361380c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.230735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8597fe3f-2f16-465d-9f9c-c8aa425c6736", "created": "2026-10-09T15:13:10.231327Z", "modified": "2026-10-09T15:13:10.231327Z", "relationship_type": "indicates", "source_ref": "indicator--4a40df1a-0226-400f-a321-0b7a3796588f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f77161-994e-4ed3-bd42-9d0b13ec1da9", "created": "2026-10-09T15:13:10.231449Z", "modified": "2026-10-09T15:13:10.231449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43fdbd49d1f197ef8a083c13ba9ef93bfd215cb03c172a70c1218c638131cf31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.231449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe55ae88-d1a9-43cc-aa68-d6262151b05f", "created": "2026-10-09T15:13:10.232032Z", "modified": "2026-10-09T15:13:10.232032Z", "relationship_type": "indicates", "source_ref": "indicator--49f77161-994e-4ed3-bd42-9d0b13ec1da9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168fa805-540d-4685-a257-29756442c595", "created": "2026-10-09T15:13:10.23215Z", "modified": "2026-10-09T15:13:10.23215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='795c87b2b71e3d2f1bc0368ae16e0b830007bc5a880e5605dbb7683e9636f7f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.23215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7a5247-7b5a-4b33-b424-2054e036e53b", "created": "2026-10-09T15:13:10.23274Z", "modified": "2026-10-09T15:13:10.23274Z", "relationship_type": "indicates", "source_ref": "indicator--168fa805-540d-4685-a257-29756442c595", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ed03ac-5281-478f-abdb-36716d727009", "created": "2026-10-09T15:13:10.232861Z", "modified": "2026-10-09T15:13:10.232861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e90dfb63ed8cd79ceb4ea4b3a95d561afa95cafbf80d0d75029a50faca535f53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.232861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43f20f62-af00-4aa1-9e4f-a91caa27f93e", "created": "2026-10-09T15:13:10.233462Z", "modified": "2026-10-09T15:13:10.233462Z", "relationship_type": "indicates", "source_ref": "indicator--89ed03ac-5281-478f-abdb-36716d727009", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c898b621-4dce-4091-bb87-62b32a4243fb", "created": "2026-10-09T15:13:10.233584Z", "modified": "2026-10-09T15:13:10.233584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb850d4de49c9fc53a0e48087cca852cafb6ef21125e7cb54d680283f6740d9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.233584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--381d0038-73d3-49d3-a7d7-6bca98551311", "created": "2026-10-09T15:13:10.234166Z", "modified": "2026-10-09T15:13:10.234166Z", "relationship_type": "indicates", "source_ref": "indicator--c898b621-4dce-4091-bb87-62b32a4243fb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce9c01b-f969-4acf-810f-341de905bafc", "created": "2026-10-09T15:13:10.234296Z", "modified": "2026-10-09T15:13:10.234296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52957703e8152f9fdf84b58ee0a2f82e9003c038b33898e91553245df207a9f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.234296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0550877e-7ea3-4f01-b5dd-be42605c5c37", "created": "2026-10-09T15:13:10.234888Z", "modified": "2026-10-09T15:13:10.234888Z", "relationship_type": "indicates", "source_ref": "indicator--5ce9c01b-f969-4acf-810f-341de905bafc", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3409a783-97c9-4f82-ad70-f20f56a66522", "created": "2026-10-09T15:13:10.235012Z", "modified": "2026-10-09T15:13:10.235012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fca1c6dc20e0ab59b143ffcdec2baa15288292167b1cf985551c3f83fd737140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.235012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0482add1-f15b-4328-a9ab-6218dca6ed5b", "created": "2026-10-09T15:13:10.23561Z", "modified": "2026-10-09T15:13:10.23561Z", "relationship_type": "indicates", "source_ref": "indicator--3409a783-97c9-4f82-ad70-f20f56a66522", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f54d0d-3018-4ca7-b484-0872553c5995", "created": "2026-10-09T15:13:10.235738Z", "modified": "2026-10-09T15:13:10.235738Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d53918204ee54a09693f29d40aecc2b07e6deeb7c905713a60feaff39c6dedc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.235738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc798081-cdc1-46ef-aae5-6121faed3e30", "created": "2026-10-09T15:13:10.236431Z", "modified": "2026-10-09T15:13:10.236431Z", "relationship_type": "indicates", "source_ref": "indicator--b3f54d0d-3018-4ca7-b484-0872553c5995", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5a10e3-94e1-4913-8cf7-734f7472e852", "created": "2026-10-09T15:13:10.236555Z", "modified": "2026-10-09T15:13:10.236555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5348ea91af006dc2f9aaab7ffbbf37433fcb48e939d4af5dec4707f662242db3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.236555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b111980-ea5e-4968-bbaf-989b55732531", "created": "2026-10-09T15:13:10.237142Z", "modified": "2026-10-09T15:13:10.237142Z", "relationship_type": "indicates", "source_ref": "indicator--3f5a10e3-94e1-4913-8cf7-734f7472e852", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570e9535-d20c-4eb4-9c76-7f766f453482", "created": "2026-10-09T15:13:10.237262Z", "modified": "2026-10-09T15:13:10.237262Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62c7a19ae381667b5e9a05381b0ae26f93d7065340a4bbdd6035173373609be7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.237262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--945c02a0-bd09-4c89-88ac-78fac7c8e279", "created": "2026-10-09T15:13:10.237856Z", "modified": "2026-10-09T15:13:10.237856Z", "relationship_type": "indicates", "source_ref": "indicator--570e9535-d20c-4eb4-9c76-7f766f453482", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b2c0bf-cff3-426d-9c05-d1a7865377e9", "created": "2026-10-09T15:13:10.237975Z", "modified": "2026-10-09T15:13:10.237975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77c99ba1700015d0c449bb50df336ebe003bb271037eac9603cbd1dfdb8219af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.237975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d6f84b6-a29d-457f-998f-cecdab1aa2fb", "created": "2026-10-09T15:13:10.238566Z", "modified": "2026-10-09T15:13:10.238566Z", "relationship_type": "indicates", "source_ref": "indicator--d9b2c0bf-cff3-426d-9c05-d1a7865377e9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e43d9b-247b-4d0d-8b5c-43d05a992e40", "created": "2026-10-09T15:13:10.238692Z", "modified": "2026-10-09T15:13:10.238692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c35bbabda056857c859b9fe74d89f80e5f5459d8985ed392d0bd9857879e8eb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.238692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afb19791-4d3f-49c3-8856-90e56bd09053", "created": "2026-10-09T15:13:10.239284Z", "modified": "2026-10-09T15:13:10.239284Z", "relationship_type": "indicates", "source_ref": "indicator--41e43d9b-247b-4d0d-8b5c-43d05a992e40", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1df31a-a3f4-4a84-99f1-bfb3a0519568", "created": "2026-10-09T15:13:10.239409Z", "modified": "2026-10-09T15:13:10.239409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1bca5899d9136bad875cf6fd52bc45a6e2df28434d7f9e8c99315b299771df3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.239409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62579797-6e46-442b-8cfd-c45f5e6e5483", "created": "2026-10-09T15:13:10.239986Z", "modified": "2026-10-09T15:13:10.239986Z", "relationship_type": "indicates", "source_ref": "indicator--da1df31a-a3f4-4a84-99f1-bfb3a0519568", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc6c351-c112-431f-9e68-436bcea4a36e", "created": "2026-10-09T15:13:10.240108Z", "modified": "2026-10-09T15:13:10.240108Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de9c15401ebe87721c3bfc31ee1c8550a3c74810fb8a76d449835c72997a4744']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.240108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20dd14a5-f08c-4ec5-82a6-d78fc7863ef7", "created": "2026-10-09T15:13:10.240702Z", "modified": "2026-10-09T15:13:10.240702Z", "relationship_type": "indicates", "source_ref": "indicator--adc6c351-c112-431f-9e68-436bcea4a36e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e60411-e96f-4476-ac5d-291f0cd7ac4f", "created": "2026-10-09T15:13:10.240825Z", "modified": "2026-10-09T15:13:10.240825Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0079ae7c362d6a5a50696144670238df84d33a24e66b82ca055d508dab90a535']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.240825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aec5508e-4a4e-4c99-9573-eb0ca15825d4", "created": "2026-10-09T15:13:10.241424Z", "modified": "2026-10-09T15:13:10.241424Z", "relationship_type": "indicates", "source_ref": "indicator--29e60411-e96f-4476-ac5d-291f0cd7ac4f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34365d89-cedc-496d-a9f4-d15fcf58fc47", "created": "2026-10-09T15:13:10.241546Z", "modified": "2026-10-09T15:13:10.241546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75c510ac2a06e776aa06ebf5f90bf2f64a57776e6fb9686e1f421f9545a0f5f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.241546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--001d614b-1d6c-43b9-9d36-db7800f6fb6f", "created": "2026-10-09T15:13:10.242128Z", "modified": "2026-10-09T15:13:10.242128Z", "relationship_type": "indicates", "source_ref": "indicator--34365d89-cedc-496d-a9f4-d15fcf58fc47", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0204516d-7a61-4435-8455-08ecbe6168ec", "created": "2026-10-09T15:13:10.242247Z", "modified": "2026-10-09T15:13:10.242247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58d07a6a0b7318a9c44e4bb1f8d4a6b7b10c3db67661d91310be03dd86fd0a69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.242247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ace02b4-98b7-4c66-950a-947762dcbd3a", "created": "2026-10-09T15:13:10.242952Z", "modified": "2026-10-09T15:13:10.242952Z", "relationship_type": "indicates", "source_ref": "indicator--0204516d-7a61-4435-8455-08ecbe6168ec", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcd3348-8024-4184-ab46-18afa57171f2", "created": "2026-10-09T15:13:10.243074Z", "modified": "2026-10-09T15:13:10.243074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='691044d89ec772196fb1909b458b73281995ebcd497cdc6fd0c8113527ed4402']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.243074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db90ce13-2545-4793-9f33-1158307d6b28", "created": "2026-10-09T15:13:10.243671Z", "modified": "2026-10-09T15:13:10.243671Z", "relationship_type": "indicates", "source_ref": "indicator--adcd3348-8024-4184-ab46-18afa57171f2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075345b1-6c9f-409b-90c2-39829e4699f0", "created": "2026-10-09T15:13:10.243794Z", "modified": "2026-10-09T15:13:10.243794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3eb30b454ce08240f0ddf1c91da97e1370c5e6aa90ea94055cfcc1132b41bed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.243794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9bdaa9f-3618-4a87-9a0f-ae6aa35183ff", "created": "2026-10-09T15:13:10.244386Z", "modified": "2026-10-09T15:13:10.244386Z", "relationship_type": "indicates", "source_ref": "indicator--075345b1-6c9f-409b-90c2-39829e4699f0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c7e657-b730-4c89-ab1e-fb17967bd6f9", "created": "2026-10-09T15:13:10.244509Z", "modified": "2026-10-09T15:13:10.244509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8316c3cada6a7dfb8cd564727ca17a8059d4abbad53858e3fe5206428d6a6139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.244509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abd1c742-1fab-4e4a-8e3d-b80d63bd92b3", "created": "2026-10-09T15:13:10.245082Z", "modified": "2026-10-09T15:13:10.245082Z", "relationship_type": "indicates", "source_ref": "indicator--71c7e657-b730-4c89-ab1e-fb17967bd6f9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3784ab-3b4c-464a-8664-ea852df3d314", "created": "2026-10-09T15:13:10.2452Z", "modified": "2026-10-09T15:13:10.2452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='000495e16975af33575bd1b17f1ca7ac34cf5b8fd59cae00729b4917903a1c7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.2452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b82c84eb-c5f1-4bc5-b3df-6aa251976f47", "created": "2026-10-09T15:13:10.24579Z", "modified": "2026-10-09T15:13:10.24579Z", "relationship_type": "indicates", "source_ref": "indicator--fb3784ab-3b4c-464a-8664-ea852df3d314", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7303e15d-ea91-45e7-8b0a-efed7fe8ed49", "created": "2026-10-09T15:13:10.245914Z", "modified": "2026-10-09T15:13:10.245914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='030fb136b810b70d242540a628b537f567ac32ee95d0a81c8001eeecf3ee2670']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.245914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--787bbb78-b8f7-4db1-a393-6dcaaa584f60", "created": "2026-10-09T15:13:10.246506Z", "modified": "2026-10-09T15:13:10.246506Z", "relationship_type": "indicates", "source_ref": "indicator--7303e15d-ea91-45e7-8b0a-efed7fe8ed49", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c77cd4-3c2d-4df6-acef-191508bdebe0", "created": "2026-10-09T15:13:10.246635Z", "modified": "2026-10-09T15:13:10.246635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c7d8e7df1ede04018b9ec36fc512d0566cc314f375daa6d7823edd1f559ce29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.246635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1f38587-a77f-46d2-90d2-22d8bb2a8eb5", "created": "2026-10-09T15:13:10.247219Z", "modified": "2026-10-09T15:13:10.247219Z", "relationship_type": "indicates", "source_ref": "indicator--64c77cd4-3c2d-4df6-acef-191508bdebe0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8132bb67-1894-46e6-8078-f873a12e64fe", "created": "2026-10-09T15:13:10.247354Z", "modified": "2026-10-09T15:13:10.247354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5dc775518a877754e11e71e3fbd494db5721c729fc7b98af014ad64dea4f90c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.247354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87a96970-8437-40ca-95b1-8151d893853d", "created": "2026-10-09T15:13:10.24794Z", "modified": "2026-10-09T15:13:10.24794Z", "relationship_type": "indicates", "source_ref": "indicator--8132bb67-1894-46e6-8078-f873a12e64fe", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcba8b96-72f9-48a4-810c-c1fed6e6be98", "created": "2026-10-09T15:13:10.248059Z", "modified": "2026-10-09T15:13:10.248059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f1b3f4f49477a4c3296c6fd78aa4f77bb6480a6b0233377fbe40c3f70e9f343']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.248059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59239c3d-2030-46c8-9924-7e5a6d9f8556", "created": "2026-10-09T15:13:10.248746Z", "modified": "2026-10-09T15:13:10.248746Z", "relationship_type": "indicates", "source_ref": "indicator--fcba8b96-72f9-48a4-810c-c1fed6e6be98", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eebb133-75a1-4ce3-b889-62f572649997", "created": "2026-10-09T15:13:10.248872Z", "modified": "2026-10-09T15:13:10.248872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c13432bc075debc27fa85dc71919b940c127706a37384b7304c49ef15f1e260']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.248872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0e557c0-cec2-47c4-8ae4-b580d3034661", "created": "2026-10-09T15:13:10.249474Z", "modified": "2026-10-09T15:13:10.249474Z", "relationship_type": "indicates", "source_ref": "indicator--5eebb133-75a1-4ce3-b889-62f572649997", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d474310-584c-4745-b147-c37b82ba23d7", "created": "2026-10-09T15:13:10.2496Z", "modified": "2026-10-09T15:13:10.2496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27e8e68e258485ff87c695791b21f6523992f438eda39682eff8bf2cf78f77d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.2496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8c32b95-17f3-4305-a5f8-9b77d1c95877", "created": "2026-10-09T15:13:10.250192Z", "modified": "2026-10-09T15:13:10.250192Z", "relationship_type": "indicates", "source_ref": "indicator--3d474310-584c-4745-b147-c37b82ba23d7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e698a326-d706-4724-81d1-e78a46faa1a7", "created": "2026-10-09T15:13:10.250324Z", "modified": "2026-10-09T15:13:10.250324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea39dabcd601407d10389f9924f82e3b6f0cbf78f07f202eb6007369bcc21d53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.250324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b89763d9-83ed-44a3-8853-6ab3b2c47748", "created": "2026-10-09T15:13:10.250907Z", "modified": "2026-10-09T15:13:10.250907Z", "relationship_type": "indicates", "source_ref": "indicator--e698a326-d706-4724-81d1-e78a46faa1a7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77902ad-eb1f-4d37-9d47-6d84a07d92dd", "created": "2026-10-09T15:13:10.251026Z", "modified": "2026-10-09T15:13:10.251026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='179209f54755ddfb0310287abf2a5b23cd6bf651da4a7c17119844a954c3bc1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.251026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43891921-066f-4ae1-be3f-cfff40dc63c9", "created": "2026-10-09T15:13:10.251625Z", "modified": "2026-10-09T15:13:10.251625Z", "relationship_type": "indicates", "source_ref": "indicator--c77902ad-eb1f-4d37-9d47-6d84a07d92dd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6262bae-3c1a-4be3-bae1-7d2fcaf07a5f", "created": "2026-10-09T15:13:10.251749Z", "modified": "2026-10-09T15:13:10.251749Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='746a328f0176c0b0bcd8d9529946977cb31a85bf2fc9776c2f11cac3176a25dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.251749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--baaf2d3a-1cd0-443d-9715-f45220e62e26", "created": "2026-10-09T15:13:10.252352Z", "modified": "2026-10-09T15:13:10.252352Z", "relationship_type": "indicates", "source_ref": "indicator--a6262bae-3c1a-4be3-bae1-7d2fcaf07a5f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2792e6d-a0b3-4b2d-a81b-6f4a4f0fb1eb", "created": "2026-10-09T15:13:10.25248Z", "modified": "2026-10-09T15:13:10.25248Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f82a411b43762d4143d8586582d8c2432b08c5ef43493d99733fc9848f56c0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.25248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e193739-69b4-41d1-82a3-83f1a109046a", "created": "2026-10-09T15:13:10.253062Z", "modified": "2026-10-09T15:13:10.253062Z", "relationship_type": "indicates", "source_ref": "indicator--e2792e6d-a0b3-4b2d-a81b-6f4a4f0fb1eb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda7dc9e-e3d7-47e7-9fb7-8930dab47891", "created": "2026-10-09T15:13:10.253182Z", "modified": "2026-10-09T15:13:10.253182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aca47dc2efdf562646215b65e27ef6b67a5b2ce907884ad876ce4c98c871e067']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.253182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef1c4c31-faa5-48af-a46c-375a68af859a", "created": "2026-10-09T15:13:10.2538Z", "modified": "2026-10-09T15:13:10.2538Z", "relationship_type": "indicates", "source_ref": "indicator--dda7dc9e-e3d7-47e7-9fb7-8930dab47891", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d16f22-b211-4eaa-9f4c-c8b052da35c4", "created": "2026-10-09T15:13:10.253921Z", "modified": "2026-10-09T15:13:10.253921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4dd850ad75d318839e823f7ea90ce6b4505022a9eea69a027850b05b6ceda299']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.253921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--311ebe29-d6f5-42a4-8425-cefa25d1c765", "created": "2026-10-09T15:13:10.254524Z", "modified": "2026-10-09T15:13:10.254524Z", "relationship_type": "indicates", "source_ref": "indicator--73d16f22-b211-4eaa-9f4c-c8b052da35c4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc169a44-f172-49a4-a935-a9a695a9b178", "created": "2026-10-09T15:13:10.254646Z", "modified": "2026-10-09T15:13:10.254646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='063adbcaa46f9273e58ac4840f0b5a362f0b35b77abb3b05458295dec5944281']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.254646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--216f5399-a3a0-4cf3-92cf-bdd9559cd235", "created": "2026-10-09T15:13:10.25534Z", "modified": "2026-10-09T15:13:10.25534Z", "relationship_type": "indicates", "source_ref": "indicator--bc169a44-f172-49a4-a935-a9a695a9b178", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a323cd89-52bd-433a-a85f-d0ca7d05a21f", "created": "2026-10-09T15:13:10.25547Z", "modified": "2026-10-09T15:13:10.25547Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73bd967166f9ad284bc688fae581a9331ea5404cbcbbb5f3b0dbfe412163f89d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.25547Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0e63d26-53cb-47c4-ad72-05bf2fb17b4a", "created": "2026-10-09T15:13:10.256072Z", "modified": "2026-10-09T15:13:10.256072Z", "relationship_type": "indicates", "source_ref": "indicator--a323cd89-52bd-433a-a85f-d0ca7d05a21f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03330028-8cc5-4123-b58a-ca8cfe26bf03", "created": "2026-10-09T15:13:10.2562Z", "modified": "2026-10-09T15:13:10.2562Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='094bd694fbab7b564090b817a8f6725e7d2c537a5d0e2258a882b2be6fc4ec08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.2562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72c0c9a8-1e83-4196-9cc7-fc554e5d5766", "created": "2026-10-09T15:13:10.256808Z", "modified": "2026-10-09T15:13:10.256808Z", "relationship_type": "indicates", "source_ref": "indicator--03330028-8cc5-4123-b58a-ca8cfe26bf03", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d8739e-a184-4715-a6dd-2720a71f600f", "created": "2026-10-09T15:13:10.256938Z", "modified": "2026-10-09T15:13:10.256938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d307581534d775ad5c10fc8d228d58710ef3b13af296d1aff0c79350d3eb939']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.256938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1877bb78-a69f-4d5c-b783-f51377898c95", "created": "2026-10-09T15:13:10.257532Z", "modified": "2026-10-09T15:13:10.257532Z", "relationship_type": "indicates", "source_ref": "indicator--90d8739e-a184-4715-a6dd-2720a71f600f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c6d563-dfb4-43db-a330-f1abc52b3003", "created": "2026-10-09T15:13:10.257654Z", "modified": "2026-10-09T15:13:10.257654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='699937805f079f81daf9ae3b94d375776c10ff9472f8f2492a9458239e0bc8e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.257654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e3c87f9-20d5-4634-81c5-01ee06c98fbe", "created": "2026-10-09T15:13:10.258245Z", "modified": "2026-10-09T15:13:10.258245Z", "relationship_type": "indicates", "source_ref": "indicator--58c6d563-dfb4-43db-a330-f1abc52b3003", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4365a3b2-bad8-4530-b6b3-6e33d739e0a5", "created": "2026-10-09T15:13:10.258379Z", "modified": "2026-10-09T15:13:10.258379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66061074802c19ec95b0f7e29a2c457a88f44fcf7ff6ba0d488a21967c25d94b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.258379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcad8d19-2908-46a6-a320-cfe67ddad935", "created": "2026-10-09T15:13:10.258961Z", "modified": "2026-10-09T15:13:10.258961Z", "relationship_type": "indicates", "source_ref": "indicator--4365a3b2-bad8-4530-b6b3-6e33d739e0a5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359446e5-ce8d-4da5-9e64-bb26d3e769df", "created": "2026-10-09T15:13:10.25908Z", "modified": "2026-10-09T15:13:10.25908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb9a7fcb48b029f436ab85d81328150e9173a83bfbba051549d3283afb339a0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.25908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5712fe1b-5156-4fa4-949d-fd3e8f4f525d", "created": "2026-10-09T15:13:10.259677Z", "modified": "2026-10-09T15:13:10.259677Z", "relationship_type": "indicates", "source_ref": "indicator--359446e5-ce8d-4da5-9e64-bb26d3e769df", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0326c6c3-ed15-4054-8135-eac5cc28fc4d", "created": "2026-10-09T15:13:10.259802Z", "modified": "2026-10-09T15:13:10.259802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22fe6b0b2ce6df645ac15e2deada4acb7592e2a3a2c3072e090e49c865ee1c7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.259802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--604fd5f0-d6d5-4ce3-a63a-4fdf23d7efe9", "created": "2026-10-09T15:13:10.260407Z", "modified": "2026-10-09T15:13:10.260407Z", "relationship_type": "indicates", "source_ref": "indicator--0326c6c3-ed15-4054-8135-eac5cc28fc4d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ad6ebc-4583-4535-81ea-ba962a1b35a1", "created": "2026-10-09T15:13:10.260533Z", "modified": "2026-10-09T15:13:10.260533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2ebb54c6eb37acf50ab7519e2d3a6e626c3a441aa91dadcefc3cf1e86918cdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.260533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adf1f00a-005a-438f-87e7-c25a0be89685", "created": "2026-10-09T15:13:10.261125Z", "modified": "2026-10-09T15:13:10.261125Z", "relationship_type": "indicates", "source_ref": "indicator--06ad6ebc-4583-4535-81ea-ba962a1b35a1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11e2e9b-132e-4c10-9140-5d0ffb4abaf5", "created": "2026-10-09T15:13:10.261247Z", "modified": "2026-10-09T15:13:10.261247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e23e63e90e7e28e8d11ffc4737e1e4eb57a1f12b1b870238e2b55e9f7e84f351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.261247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34b3ba5b-5186-4644-82be-3d2e1ba09d9b", "created": "2026-10-09T15:13:10.26195Z", "modified": "2026-10-09T15:13:10.26195Z", "relationship_type": "indicates", "source_ref": "indicator--d11e2e9b-132e-4c10-9140-5d0ffb4abaf5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb480f4-7ce0-4952-8b39-c34222e81e16", "created": "2026-10-09T15:13:10.262072Z", "modified": "2026-10-09T15:13:10.262072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33cef8e720777aab12c73aee039d2713a051cf1b3a52253925f99ab45676ea35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.262072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce6d73a7-c0a8-4ba0-950b-2ee9f61094d0", "created": "2026-10-09T15:13:10.262665Z", "modified": "2026-10-09T15:13:10.262665Z", "relationship_type": "indicates", "source_ref": "indicator--0fb480f4-7ce0-4952-8b39-c34222e81e16", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d95bae58-4c7a-4cde-958f-3c514b99678d", "created": "2026-10-09T15:13:10.262788Z", "modified": "2026-10-09T15:13:10.262788Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f053b9b516fc4b03180e7da2aec5dfe4c8ebe159bf3d2ba7ed5bd63ee16eb14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.262788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8655ec2-c0b0-4265-bfdf-1c0015c63dec", "created": "2026-10-09T15:13:10.263385Z", "modified": "2026-10-09T15:13:10.263385Z", "relationship_type": "indicates", "source_ref": "indicator--d95bae58-4c7a-4cde-958f-3c514b99678d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b512b50e-2152-458a-8649-b25f8874802e", "created": "2026-10-09T15:13:10.263509Z", "modified": "2026-10-09T15:13:10.263509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4855a825bbf817f59295ae27a729e0694697c816c21fc78485dd0db706c73745']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.263509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fb336b1-bbba-4a66-8fba-ffb7df8124e1", "created": "2026-10-09T15:13:10.264091Z", "modified": "2026-10-09T15:13:10.264091Z", "relationship_type": "indicates", "source_ref": "indicator--b512b50e-2152-458a-8649-b25f8874802e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104f7c8e-3b6d-4b4d-b50e-506e1a47ec88", "created": "2026-10-09T15:13:10.264209Z", "modified": "2026-10-09T15:13:10.264209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65aa15695a0a7fbec98e8164c07a71838cd5a6cf4fd54c4abc0df6d4dd9f3d1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.264209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9e41d31-b801-4805-93db-9ad27eeb82b1", "created": "2026-10-09T15:13:10.264809Z", "modified": "2026-10-09T15:13:10.264809Z", "relationship_type": "indicates", "source_ref": "indicator--104f7c8e-3b6d-4b4d-b50e-506e1a47ec88", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5831dbd8-51fa-4398-8940-9d7dfc2d9973", "created": "2026-10-09T15:13:10.264932Z", "modified": "2026-10-09T15:13:10.264932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59e04f912f12bae1ae97596d3bfae4033cf9761b0e39f700010941f4ea86f0fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.264932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a014670-77cb-4fbb-b70e-e8369e9f5532", "created": "2026-10-09T15:13:10.265526Z", "modified": "2026-10-09T15:13:10.265526Z", "relationship_type": "indicates", "source_ref": "indicator--5831dbd8-51fa-4398-8940-9d7dfc2d9973", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4739e8cd-9769-41c6-ae78-495a97681cb2", "created": "2026-10-09T15:13:10.265655Z", "modified": "2026-10-09T15:13:10.265655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='889a7a40ae025f9367adde8f24136e771764986d46c32efaa27bc6e670bc36e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.265655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2666375b-a9de-4324-9661-e07d57187b97", "created": "2026-10-09T15:13:10.266238Z", "modified": "2026-10-09T15:13:10.266238Z", "relationship_type": "indicates", "source_ref": "indicator--4739e8cd-9769-41c6-ae78-495a97681cb2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e67f67-32fe-45c1-8e95-3c074c5c7e77", "created": "2026-10-09T15:13:10.266381Z", "modified": "2026-10-09T15:13:10.266381Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b870031727fa75c54e412ed2555337c2ad64e17c5d3a7cc9c5a64e5eac302cf1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.266381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17b5a1d3-f4b9-493e-9823-610d0f96fefe", "created": "2026-10-09T15:13:10.266975Z", "modified": "2026-10-09T15:13:10.266975Z", "relationship_type": "indicates", "source_ref": "indicator--39e67f67-32fe-45c1-8e95-3c074c5c7e77", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d5a95f-a4c3-469f-bc57-a11c1f3dbc0d", "created": "2026-10-09T15:13:10.267096Z", "modified": "2026-10-09T15:13:10.267096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f177397044a6db88316fd65eb09b70ea9e2ce0de3462d32585d86903125a44f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.267096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cc98d4d-4086-4fa8-a222-aa822ddde752", "created": "2026-10-09T15:13:10.267797Z", "modified": "2026-10-09T15:13:10.267797Z", "relationship_type": "indicates", "source_ref": "indicator--b0d5a95f-a4c3-469f-bc57-a11c1f3dbc0d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c400b5a5-581c-4604-a0ae-5446fcdb9cb8", "created": "2026-10-09T15:13:10.267924Z", "modified": "2026-10-09T15:13:10.267924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34bd975ff82df67173e7b09ab1cfb4202460c4d855a5eafcb1e017abbc0adb79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.267924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--611d3b0f-2fe2-4be0-a4ed-ed7ed720ce5f", "created": "2026-10-09T15:13:10.26852Z", "modified": "2026-10-09T15:13:10.26852Z", "relationship_type": "indicates", "source_ref": "indicator--c400b5a5-581c-4604-a0ae-5446fcdb9cb8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38711e37-7c03-4cc8-a07e-3791469e12fc", "created": "2026-10-09T15:13:10.268645Z", "modified": "2026-10-09T15:13:10.268645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65f49b8e40888aa2ac46d9d82539ba0abdfcb3923937988664ed472816ee2cc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.268645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60c7ae69-6502-4759-8fd2-8314ace66568", "created": "2026-10-09T15:13:10.269229Z", "modified": "2026-10-09T15:13:10.269229Z", "relationship_type": "indicates", "source_ref": "indicator--38711e37-7c03-4cc8-a07e-3791469e12fc", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524e91d1-30c9-4b1f-9eb0-f6625ebe35ef", "created": "2026-10-09T15:13:10.269366Z", "modified": "2026-10-09T15:13:10.269366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce0077cadbd80e76292a96c1236102f5633cb992c10fd1b9419968bfcbccd826']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.269366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea6541e2-e3ce-4ba8-a354-1a2c06e8b53e", "created": "2026-10-09T15:13:10.269956Z", "modified": "2026-10-09T15:13:10.269956Z", "relationship_type": "indicates", "source_ref": "indicator--524e91d1-30c9-4b1f-9eb0-f6625ebe35ef", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2076165e-2fe9-44aa-9465-cd24936e7c6b", "created": "2026-10-09T15:13:10.27008Z", "modified": "2026-10-09T15:13:10.27008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ff0984bde36d11d1c533fd23d0132405d5679444ad812439f7928756e5559d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.27008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a85806f5-6c96-4b04-8a2e-de3361871da1", "created": "2026-10-09T15:13:10.270685Z", "modified": "2026-10-09T15:13:10.270685Z", "relationship_type": "indicates", "source_ref": "indicator--2076165e-2fe9-44aa-9465-cd24936e7c6b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bad9a2b-4708-4788-86a5-72ae17403349", "created": "2026-10-09T15:13:10.270809Z", "modified": "2026-10-09T15:13:10.270809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6688fc2d774c9282055b90036d5fed6a31b4bf08526becb2b90af14b1ac0a61e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.270809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b31570c-550c-45b2-94c2-cf3f754995c6", "created": "2026-10-09T15:13:10.271403Z", "modified": "2026-10-09T15:13:10.271403Z", "relationship_type": "indicates", "source_ref": "indicator--8bad9a2b-4708-4788-86a5-72ae17403349", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ee6a39-ee89-4c57-ad91-ea86fd473a35", "created": "2026-10-09T15:13:10.271525Z", "modified": "2026-10-09T15:13:10.271525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a44cf392d5df17ef62abbcfa93d06169261e836ef0a67f4683694af5d6cb031a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.271525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c99b61de-f7fc-4a36-81ee-dac75969d470", "created": "2026-10-09T15:13:10.272101Z", "modified": "2026-10-09T15:13:10.272101Z", "relationship_type": "indicates", "source_ref": "indicator--98ee6a39-ee89-4c57-ad91-ea86fd473a35", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3fe297-1b7b-403f-a690-24c73f31d3f6", "created": "2026-10-09T15:13:10.272219Z", "modified": "2026-10-09T15:13:10.272219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7166dac8b98567d6b7fb21f96bdd31a106a734aae00524ac54bd6468d55e1397']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.272219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2438650e-981d-428d-a2b2-a9bcc18ce4e3", "created": "2026-10-09T15:13:10.272816Z", "modified": "2026-10-09T15:13:10.272816Z", "relationship_type": "indicates", "source_ref": "indicator--ee3fe297-1b7b-403f-a690-24c73f31d3f6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea2c386-5426-44c1-9e96-f12864546acc", "created": "2026-10-09T15:13:10.272938Z", "modified": "2026-10-09T15:13:10.272938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc892d305a344bb4499d37e42aebb14eb2c41d8efae723860f25310559203cf0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.272938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--398949ec-deaf-4665-ada3-7c071270055c", "created": "2026-10-09T15:13:10.273533Z", "modified": "2026-10-09T15:13:10.273533Z", "relationship_type": "indicates", "source_ref": "indicator--6ea2c386-5426-44c1-9e96-f12864546acc", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37b4eee-1585-454d-9d9c-0f14b68680ab", "created": "2026-10-09T15:13:10.273657Z", "modified": "2026-10-09T15:13:10.273657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d885eadb2b760b80901cb8ec78e81f8194ac1c63f11406548797c49fba486969']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.273657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2d2b2f7-db54-4af1-9d56-d3aba4cde96b", "created": "2026-10-09T15:13:10.274356Z", "modified": "2026-10-09T15:13:10.274356Z", "relationship_type": "indicates", "source_ref": "indicator--d37b4eee-1585-454d-9d9c-0f14b68680ab", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded103ac-5a74-4940-9dfd-8e3c65556677", "created": "2026-10-09T15:13:10.274483Z", "modified": "2026-10-09T15:13:10.274483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8329429d0c260f342aeaa9bb46a862f62f5c4ab8f93549fbd682e99d285fc1e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.274483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3028f795-2f77-4bd2-bd71-654efb17a85a", "created": "2026-10-09T15:13:10.275071Z", "modified": "2026-10-09T15:13:10.275071Z", "relationship_type": "indicates", "source_ref": "indicator--ded103ac-5a74-4940-9dfd-8e3c65556677", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba7404a-2fcf-4c9b-b762-f1a4036b01ed", "created": "2026-10-09T15:13:10.275203Z", "modified": "2026-10-09T15:13:10.275203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fa174b5abbca955983e91b7ac2028cfe557cda18c31d989d463338ad9b2c0a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.275203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e14044f7-1f55-4ea6-b5fa-98d81136466a", "created": "2026-10-09T15:13:10.275803Z", "modified": "2026-10-09T15:13:10.275803Z", "relationship_type": "indicates", "source_ref": "indicator--bba7404a-2fcf-4c9b-b762-f1a4036b01ed", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80e2eae-91d8-40c2-a0e3-74ed11d2bb7a", "created": "2026-10-09T15:13:10.27593Z", "modified": "2026-10-09T15:13:10.27593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e75af7b6c9b13e3c2ec71ad5468c901dbd8f262affbedef3b3372101859b4a3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.27593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2baefdd6-998e-467e-bf81-766b610300b9", "created": "2026-10-09T15:13:10.276531Z", "modified": "2026-10-09T15:13:10.276531Z", "relationship_type": "indicates", "source_ref": "indicator--b80e2eae-91d8-40c2-a0e3-74ed11d2bb7a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4483f3-3653-4550-a532-c10d0f7b8148", "created": "2026-10-09T15:13:10.276669Z", "modified": "2026-10-09T15:13:10.276669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad8d0ce4e319e040e6b934e20c55c8c5f92b59ee261e55911aa2494fcdd2cccc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.276669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1de5b6e9-c9ed-440c-8166-b1afff177643", "created": "2026-10-09T15:13:10.277259Z", "modified": "2026-10-09T15:13:10.277259Z", "relationship_type": "indicates", "source_ref": "indicator--5b4483f3-3653-4550-a532-c10d0f7b8148", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090d3832-3d36-4327-9834-32919688ef62", "created": "2026-10-09T15:13:10.277391Z", "modified": "2026-10-09T15:13:10.277391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d307fcb74218842623ce48fcf0ff41767ee56982e3ea8e7a94b9fcb1885de06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.277391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--164d1525-4b85-4bf2-a7b9-d3dd63ec3cb9", "created": "2026-10-09T15:13:10.277974Z", "modified": "2026-10-09T15:13:10.277974Z", "relationship_type": "indicates", "source_ref": "indicator--090d3832-3d36-4327-9834-32919688ef62", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba2e693-d420-475d-8c73-583080e7ca32", "created": "2026-10-09T15:13:10.278092Z", "modified": "2026-10-09T15:13:10.278092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79b0a0b73290ed87deadfb7c696b22c4748bf9d6695f50fb1d8cf932840d2d80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.278092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--274eb38a-b32f-442c-8aaa-d8278925e052", "created": "2026-10-09T15:13:10.278694Z", "modified": "2026-10-09T15:13:10.278694Z", "relationship_type": "indicates", "source_ref": "indicator--2ba2e693-d420-475d-8c73-583080e7ca32", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7889b8df-e217-4142-a360-5b111a07aba8", "created": "2026-10-09T15:13:10.27882Z", "modified": "2026-10-09T15:13:10.27882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a77a6280a534a9ffc98996cdca81a5e2d950b9d566299f398d641b5ba0853d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.27882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f3efed4-47b6-4b86-b25c-29da27dc69d5", "created": "2026-10-09T15:13:10.279419Z", "modified": "2026-10-09T15:13:10.279419Z", "relationship_type": "indicates", "source_ref": "indicator--7889b8df-e217-4142-a360-5b111a07aba8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c592d4fc-2117-4048-8768-4705f6677f0d", "created": "2026-10-09T15:13:10.279544Z", "modified": "2026-10-09T15:13:10.279544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37d72bd21da473d9cc556a5dfd5a9bb7330e651dc90aeae1f549ff2db728fe43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.279544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e71ce1b6-448e-4122-9c28-59eb9cea7895", "created": "2026-10-09T15:13:10.280135Z", "modified": "2026-10-09T15:13:10.280135Z", "relationship_type": "indicates", "source_ref": "indicator--c592d4fc-2117-4048-8768-4705f6677f0d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4b9bc2-b4ac-4cde-9dc2-4a3b13521c54", "created": "2026-10-09T15:13:10.280256Z", "modified": "2026-10-09T15:13:10.280256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96a297295e4ad49dd7749d98c6040b6e25d6296a07640f5bd0d6b74281f74c05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.280256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1c97b52-3745-4dfb-8862-873f64de6e70", "created": "2026-10-09T15:13:10.281233Z", "modified": "2026-10-09T15:13:10.281233Z", "relationship_type": "indicates", "source_ref": "indicator--7f4b9bc2-b4ac-4cde-9dc2-4a3b13521c54", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a0ed6a-0167-4d2d-b87f-8de8f8f6fe11", "created": "2026-10-09T15:13:10.281371Z", "modified": "2026-10-09T15:13:10.281371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34bb1a47a7893d5dff59a36bb8ac11d2c5354cd618e25f8609e5844d555c67a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.281371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7b1d585-190c-4356-8c6b-80318f483893", "created": "2026-10-09T15:13:10.281967Z", "modified": "2026-10-09T15:13:10.281967Z", "relationship_type": "indicates", "source_ref": "indicator--34a0ed6a-0167-4d2d-b87f-8de8f8f6fe11", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec227520-6092-4b45-8c57-2e310953b956", "created": "2026-10-09T15:13:10.282089Z", "modified": "2026-10-09T15:13:10.282089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea8782a6ee011850462fa374bb014477dc7dd7f569c3da7424920d7aaf9b9e3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.282089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1004570c-9287-47d9-a8a8-e29892196a90", "created": "2026-10-09T15:13:10.282683Z", "modified": "2026-10-09T15:13:10.282683Z", "relationship_type": "indicates", "source_ref": "indicator--ec227520-6092-4b45-8c57-2e310953b956", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bbf4f7-ce18-4e88-87dd-2b98ce9d8df8", "created": "2026-10-09T15:13:10.282805Z", "modified": "2026-10-09T15:13:10.282805Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be99fd2e473d6fa4284fbd30bb1cfe8b004ed9ad7647c5ea312b9ba7334d2ab4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.282805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5abe6fd5-2176-4a9d-8ee2-06297c5f710f", "created": "2026-10-09T15:13:10.283395Z", "modified": "2026-10-09T15:13:10.283395Z", "relationship_type": "indicates", "source_ref": "indicator--28bbf4f7-ce18-4e88-87dd-2b98ce9d8df8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9939764-0ac4-452b-b158-4db23fc3e4a7", "created": "2026-10-09T15:13:10.283519Z", "modified": "2026-10-09T15:13:10.283519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fb165c856a50491452058bbcf758e4e047cc70d74928b4229dc3241bd7f5615']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.283519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ceff467-21d4-4411-a496-5414a37285ab", "created": "2026-10-09T15:13:10.284108Z", "modified": "2026-10-09T15:13:10.284108Z", "relationship_type": "indicates", "source_ref": "indicator--b9939764-0ac4-452b-b158-4db23fc3e4a7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ff501f-65de-4be1-bfd4-46deddf9f9b4", "created": "2026-10-09T15:13:10.284231Z", "modified": "2026-10-09T15:13:10.284231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4aec0c6f000a9a3efd31a068ac8147071f5cd643158e1e12b9dbe76079523e8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.284231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3bd072b-f7ad-4ed7-b8e5-d8d3761ed4ae", "created": "2026-10-09T15:13:10.284825Z", "modified": "2026-10-09T15:13:10.284825Z", "relationship_type": "indicates", "source_ref": "indicator--69ff501f-65de-4be1-bfd4-46deddf9f9b4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f90f88-3bb8-4da4-87ee-16ab09e4cf00", "created": "2026-10-09T15:13:10.28495Z", "modified": "2026-10-09T15:13:10.28495Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4859f1e98bdc7e02d7170099b09bb1cf90dbd7686e95a5a3661b10086976308c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.28495Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--222fc674-8cb5-4348-b549-daa4e8e0029b", "created": "2026-10-09T15:13:10.28554Z", "modified": "2026-10-09T15:13:10.28554Z", "relationship_type": "indicates", "source_ref": "indicator--a5f90f88-3bb8-4da4-87ee-16ab09e4cf00", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d8edf0-d38b-4593-8ee7-ab2dc788f75a", "created": "2026-10-09T15:13:10.28566Z", "modified": "2026-10-09T15:13:10.28566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33879d80457a1e345b9b46359667bdc531c66190c32aa725522295049d03e1e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.28566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ed66c45-7a77-4978-942d-e28940db7e9e", "created": "2026-10-09T15:13:10.286234Z", "modified": "2026-10-09T15:13:10.286234Z", "relationship_type": "indicates", "source_ref": "indicator--64d8edf0-d38b-4593-8ee7-ab2dc788f75a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59414820-cc5d-4364-96f2-afbb59faaf57", "created": "2026-10-09T15:13:10.286364Z", "modified": "2026-10-09T15:13:10.286364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3067369d294e3e2f163b1f9947efe38a9eb330e2fbf021d03cae8318bb9bfad3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.286364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ce0f77d-e18c-4b70-85eb-224949942207", "created": "2026-10-09T15:13:10.286947Z", "modified": "2026-10-09T15:13:10.286947Z", "relationship_type": "indicates", "source_ref": "indicator--59414820-cc5d-4364-96f2-afbb59faaf57", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b068b047-c2a8-4e68-9bc5-dba7cee242bf", "created": "2026-10-09T15:13:10.287066Z", "modified": "2026-10-09T15:13:10.287066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43ee3624363465d2bde6c2e9da04ebc42ef295bc920a335f833f9393c806ec9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.287066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c582dc6d-ed84-4181-8a84-aaea033e44f5", "created": "2026-10-09T15:13:10.312346Z", "modified": "2026-10-09T15:13:10.312346Z", "relationship_type": "indicates", "source_ref": "indicator--b068b047-c2a8-4e68-9bc5-dba7cee242bf", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5251d44-95bb-4ab4-8baa-73fa6e0b97fb", "created": "2026-10-09T15:13:10.312552Z", "modified": "2026-10-09T15:13:10.312552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4ff7453ea26e5afe1979d4b747a3217e8971a86c2807582f257610bd884e693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.312552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d29b1eb9-923d-4635-9335-7a4f71945fb0", "created": "2026-10-09T15:13:10.313188Z", "modified": "2026-10-09T15:13:10.313188Z", "relationship_type": "indicates", "source_ref": "indicator--d5251d44-95bb-4ab4-8baa-73fa6e0b97fb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af97c84-f591-41c3-8111-7eaa808ff355", "created": "2026-10-09T15:13:10.313332Z", "modified": "2026-10-09T15:13:10.313332Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1e08ee27df652dfc750868f39d3b45c4eb3915b817e2eafdf641b5f2e7adbfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.313332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd2815ce-59a6-416d-876d-52c1fb93d569", "created": "2026-10-09T15:13:10.313927Z", "modified": "2026-10-09T15:13:10.313927Z", "relationship_type": "indicates", "source_ref": "indicator--1af97c84-f591-41c3-8111-7eaa808ff355", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2ac1c3-23c8-44f3-a7b7-59ebcb636a6c", "created": "2026-10-09T15:13:10.314052Z", "modified": "2026-10-09T15:13:10.314052Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3076f6af45e2d720ab4f5c3c38ef3ea3e9afad3ab7ca68876264418a3b54a977']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.314052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13247c47-f9d5-4874-b908-50d8d7983703", "created": "2026-10-09T15:13:10.314649Z", "modified": "2026-10-09T15:13:10.314649Z", "relationship_type": "indicates", "source_ref": "indicator--8d2ac1c3-23c8-44f3-a7b7-59ebcb636a6c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b373b480-c0f0-4b7b-a338-e7a1d986538b", "created": "2026-10-09T15:13:10.314774Z", "modified": "2026-10-09T15:13:10.314774Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7edb964e827d0a7d994a228b364f9bfe63a30cb02407b88895c45dc15377cbea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.314774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca3b0bba-8ce1-49e3-aae5-6a3fc5d289fe", "created": "2026-10-09T15:13:10.315371Z", "modified": "2026-10-09T15:13:10.315371Z", "relationship_type": "indicates", "source_ref": "indicator--b373b480-c0f0-4b7b-a338-e7a1d986538b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3d92c5-7810-4cba-96d3-b729ef600551", "created": "2026-10-09T15:13:10.315496Z", "modified": "2026-10-09T15:13:10.315496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0e9abf69a032b9410e2fb5435a746281a03106798b9ebf5ee4c16179ebcb8cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.315496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b22dd96-bcc8-4257-978c-ca6d422fea4d", "created": "2026-10-09T15:13:10.316077Z", "modified": "2026-10-09T15:13:10.316077Z", "relationship_type": "indicates", "source_ref": "indicator--4d3d92c5-7810-4cba-96d3-b729ef600551", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f587fc3c-f884-43ea-8b37-a237e9dd68c8", "created": "2026-10-09T15:13:10.316195Z", "modified": "2026-10-09T15:13:10.316195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a980d929c516072f203533d556d14305e19b10668ceb3acb0a322016024da10b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.316195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6d243e8-ea9e-4fa8-9018-5fedcb67e139", "created": "2026-10-09T15:13:10.316791Z", "modified": "2026-10-09T15:13:10.316791Z", "relationship_type": "indicates", "source_ref": "indicator--f587fc3c-f884-43ea-8b37-a237e9dd68c8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d443f2b-2389-46d2-b810-9c812a6fe02b", "created": "2026-10-09T15:13:10.316913Z", "modified": "2026-10-09T15:13:10.316913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77b6f31aae8fe2b07cd157d429cbd1c0f837628016feb67fad617d49ef9c3385']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.316913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31126bb4-1514-4496-b11f-9ddaea467087", "created": "2026-10-09T15:13:10.317599Z", "modified": "2026-10-09T15:13:10.317599Z", "relationship_type": "indicates", "source_ref": "indicator--5d443f2b-2389-46d2-b810-9c812a6fe02b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdd2d75-e2d8-4244-9b08-c162912a0b14", "created": "2026-10-09T15:13:10.31773Z", "modified": "2026-10-09T15:13:10.31773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce6532d06c6aabddcbafc0061030edea5acb33cd6246346695b8996ea44242ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.31773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--638d3e31-1998-4f1c-b5f5-96a9556de549", "created": "2026-10-09T15:13:10.318328Z", "modified": "2026-10-09T15:13:10.318328Z", "relationship_type": "indicates", "source_ref": "indicator--1cdd2d75-e2d8-4244-9b08-c162912a0b14", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39172e44-e1ef-4870-adb6-c58aa1a7ae1a", "created": "2026-10-09T15:13:10.318454Z", "modified": "2026-10-09T15:13:10.318454Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94dbfb884b6c61e97534b7ae0bc20d9bb45040f661f1f6c49fafbffd411e0201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.318454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e323e0a9-cabc-4028-8bb7-409fa90e79ad", "created": "2026-10-09T15:13:10.319036Z", "modified": "2026-10-09T15:13:10.319036Z", "relationship_type": "indicates", "source_ref": "indicator--39172e44-e1ef-4870-adb6-c58aa1a7ae1a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22fd5ed-0b9a-42dd-83c1-1f5bf2c24373", "created": "2026-10-09T15:13:10.31916Z", "modified": "2026-10-09T15:13:10.31916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c499c5281bf3984546ae71e0d63cb1f66850b350e76ab4504f4832a6025562d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.31916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd4deacf-a2ee-429e-8635-9aa87056c3e4", "created": "2026-10-09T15:13:10.319754Z", "modified": "2026-10-09T15:13:10.319754Z", "relationship_type": "indicates", "source_ref": "indicator--d22fd5ed-0b9a-42dd-83c1-1f5bf2c24373", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54d4a2b-54e6-4726-b237-eb7a8816fb4d", "created": "2026-10-09T15:13:10.319878Z", "modified": "2026-10-09T15:13:10.319878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9a1b725e2906f21354a8b90bf411ebb585a5ad486feb185912a9609127f4a1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.319878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35620010-13b6-4513-b812-3f4d7f148f60", "created": "2026-10-09T15:13:10.320482Z", "modified": "2026-10-09T15:13:10.320482Z", "relationship_type": "indicates", "source_ref": "indicator--a54d4a2b-54e6-4726-b237-eb7a8816fb4d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c6cf88-c8d4-43ab-b026-2d04db3717a6", "created": "2026-10-09T15:13:10.320607Z", "modified": "2026-10-09T15:13:10.320607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c5e12558f44e583e111d86e19b2895e61f4b7075ee4381cdeb31c3db30045e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.320607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75a552af-9bbe-4795-a741-c4d7981bba30", "created": "2026-10-09T15:13:10.32119Z", "modified": "2026-10-09T15:13:10.32119Z", "relationship_type": "indicates", "source_ref": "indicator--32c6cf88-c8d4-43ab-b026-2d04db3717a6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da2b7e4-711f-48c7-a05a-732d3596ec02", "created": "2026-10-09T15:13:10.321322Z", "modified": "2026-10-09T15:13:10.321322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c3a1f6f315067f4b17fe0002979356cd214f1eb9885bd86e5d66acc8f1638df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.321322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--148bc81a-f8da-48d8-8ff2-201368afb500", "created": "2026-10-09T15:13:10.321923Z", "modified": "2026-10-09T15:13:10.321923Z", "relationship_type": "indicates", "source_ref": "indicator--0da2b7e4-711f-48c7-a05a-732d3596ec02", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8903baf8-185e-4253-9985-7fdfd7ed8f9c", "created": "2026-10-09T15:13:10.322044Z", "modified": "2026-10-09T15:13:10.322044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c043700e76721f0807d6ca882fe5e268fc561fb45e159e95253771c97c6d4d04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.322044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e5e50dc-d3c7-456a-89f0-b59baaafd8b9", "created": "2026-10-09T15:13:10.322644Z", "modified": "2026-10-09T15:13:10.322644Z", "relationship_type": "indicates", "source_ref": "indicator--8903baf8-185e-4253-9985-7fdfd7ed8f9c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f4a19a-c73a-4d10-a609-db87816fcd80", "created": "2026-10-09T15:13:10.322768Z", "modified": "2026-10-09T15:13:10.322768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d182efcf3897d00e844e748246ec746b7bf8eb69b0af444cfeef4df7c8e8e4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.322768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dfade9d-e36c-4fe5-a3a5-568441f7d761", "created": "2026-10-09T15:13:10.323465Z", "modified": "2026-10-09T15:13:10.323465Z", "relationship_type": "indicates", "source_ref": "indicator--46f4a19a-c73a-4d10-a609-db87816fcd80", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dfc8dd-5d85-455c-8b1d-d21f62bf6bbb", "created": "2026-10-09T15:13:10.323593Z", "modified": "2026-10-09T15:13:10.323593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37a07d490b07e95f433c04882f16282aa940b8c5d55438e8a69045fa65a5e943']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.323593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a80f5b45-08d4-490e-a5cd-2cdd4b72212a", "created": "2026-10-09T15:13:10.324182Z", "modified": "2026-10-09T15:13:10.324182Z", "relationship_type": "indicates", "source_ref": "indicator--a5dfc8dd-5d85-455c-8b1d-d21f62bf6bbb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0a09c6-533d-4f18-bc4f-535fbf9ec23c", "created": "2026-10-09T15:13:10.32433Z", "modified": "2026-10-09T15:13:10.32433Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2bc5c88d184829fc3addc8c085e8b0135e8b9a612aefb52630037ec3efe4460']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.32433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5381f094-618a-411b-b78a-98d8a7c86c2b", "created": "2026-10-09T15:13:10.32492Z", "modified": "2026-10-09T15:13:10.32492Z", "relationship_type": "indicates", "source_ref": "indicator--3a0a09c6-533d-4f18-bc4f-535fbf9ec23c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a67294-824b-4e7d-9de8-970508ea70a1", "created": "2026-10-09T15:13:10.325046Z", "modified": "2026-10-09T15:13:10.325046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4076323296ffa0b025e11d271f11b92db3dda5cbc8969fa0aea1b105c3bc03fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.325046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb84df3c-06c6-4e6d-ad18-e69f16d9bb09", "created": "2026-10-09T15:13:10.325638Z", "modified": "2026-10-09T15:13:10.325638Z", "relationship_type": "indicates", "source_ref": "indicator--36a67294-824b-4e7d-9de8-970508ea70a1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a23aee-0d24-4fa6-add6-c86e1a75eed3", "created": "2026-10-09T15:13:10.32576Z", "modified": "2026-10-09T15:13:10.32576Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21f6c21f2711657788f3c21ddde7908a4aeae1a184bc99312b5e53e4aae5e387']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.32576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04e049ea-f55b-4591-bc94-1021fa5c598c", "created": "2026-10-09T15:13:10.326349Z", "modified": "2026-10-09T15:13:10.326349Z", "relationship_type": "indicates", "source_ref": "indicator--b8a23aee-0d24-4fa6-add6-c86e1a75eed3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be87f4-d63e-46fe-83ae-9f6e0a6e72e3", "created": "2026-10-09T15:13:10.326473Z", "modified": "2026-10-09T15:13:10.326473Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38a0c2554d39f68d9269d96cafa20d2216593cc7df65afefa9472204ae97f1dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.326473Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9310d81-5ceb-4941-9af4-8080499e59fb", "created": "2026-10-09T15:13:10.327059Z", "modified": "2026-10-09T15:13:10.327059Z", "relationship_type": "indicates", "source_ref": "indicator--e9be87f4-d63e-46fe-83ae-9f6e0a6e72e3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0ef7c9-a308-4a5f-a3ca-e1a0bf38e098", "created": "2026-10-09T15:13:10.327178Z", "modified": "2026-10-09T15:13:10.327178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb63a800759e3ef4328654e19765912fb7f20eac6a88f3779c5a89cc63541931']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.327178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2aab141e-595e-4b5d-921e-e97f3c18bcd0", "created": "2026-10-09T15:13:10.327769Z", "modified": "2026-10-09T15:13:10.327769Z", "relationship_type": "indicates", "source_ref": "indicator--cc0ef7c9-a308-4a5f-a3ca-e1a0bf38e098", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181a657d-3cda-4ec0-89ea-f2470ee3bd62", "created": "2026-10-09T15:13:10.327892Z", "modified": "2026-10-09T15:13:10.327892Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1f4692d9cbcefefbfe1b92705a08cce408a6881da227b7b7d739bf2aa2cfb46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.327892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21e75f9f-694f-4cd5-a028-157768931812", "created": "2026-10-09T15:13:10.328493Z", "modified": "2026-10-09T15:13:10.328493Z", "relationship_type": "indicates", "source_ref": "indicator--181a657d-3cda-4ec0-89ea-f2470ee3bd62", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300de029-649e-4d47-82c0-7b267fdd20cf", "created": "2026-10-09T15:13:10.328614Z", "modified": "2026-10-09T15:13:10.328614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a774189b1f2fdd739b44496c45af6ad34217631d66761c5a5f3f19ccf126e28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.328614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e4e2452-be15-4e74-803e-fa1355da87e3", "created": "2026-10-09T15:13:10.329206Z", "modified": "2026-10-09T15:13:10.329206Z", "relationship_type": "indicates", "source_ref": "indicator--300de029-649e-4d47-82c0-7b267fdd20cf", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6772417-4d62-4d88-9c77-1bcbd1bebad7", "created": "2026-10-09T15:13:10.32934Z", "modified": "2026-10-09T15:13:10.32934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e636d97d015a677110826d93ddbaa3fc6ede7d11f404777e4d65694f7db61f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.32934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c69651b9-6417-4c42-ae84-e70290c1841c", "created": "2026-10-09T15:13:10.330031Z", "modified": "2026-10-09T15:13:10.330031Z", "relationship_type": "indicates", "source_ref": "indicator--e6772417-4d62-4d88-9c77-1bcbd1bebad7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333ddf8b-8909-44b6-8af4-a729e1e1795f", "created": "2026-10-09T15:13:10.330157Z", "modified": "2026-10-09T15:13:10.330157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c0a45388c27e9820eacc8e14c29672f64cb47c87089fb9996f23926099b4dba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.330157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1939901f-f439-41b8-87f0-21bffae82d3c", "created": "2026-10-09T15:13:10.330753Z", "modified": "2026-10-09T15:13:10.330753Z", "relationship_type": "indicates", "source_ref": "indicator--333ddf8b-8909-44b6-8af4-a729e1e1795f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf459129-2508-477a-8043-4104318fdf98", "created": "2026-10-09T15:13:10.330878Z", "modified": "2026-10-09T15:13:10.330878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='127b364902fc97fb6cabc3cfbfec068bf9b918d8832774fd776f2794407a3c80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.330878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a30f8ae7-91ae-45d8-9b5f-79ebce98e565", "created": "2026-10-09T15:13:10.331477Z", "modified": "2026-10-09T15:13:10.331477Z", "relationship_type": "indicates", "source_ref": "indicator--cf459129-2508-477a-8043-4104318fdf98", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a1077e-6271-4407-86aa-31995d899012", "created": "2026-10-09T15:13:10.331604Z", "modified": "2026-10-09T15:13:10.331604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d313c47097568ad7bd2c9b3a0c8cf2e879d5d0ec66588a3751432551286f6a6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.331604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--756db767-85c5-40ea-82d4-2f0b133089f0", "created": "2026-10-09T15:13:10.332188Z", "modified": "2026-10-09T15:13:10.332188Z", "relationship_type": "indicates", "source_ref": "indicator--30a1077e-6271-4407-86aa-31995d899012", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69e352f-9bb2-48a9-9fef-e176dbe7931e", "created": "2026-10-09T15:13:10.332324Z", "modified": "2026-10-09T15:13:10.332324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6bbf82f4c49a54814d5b2f0531ba3db08e38f098afa633dfcf275cac9109757']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.332324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--430bf851-c30f-4dd3-8adb-172135b3e6a3", "created": "2026-10-09T15:13:10.332906Z", "modified": "2026-10-09T15:13:10.332906Z", "relationship_type": "indicates", "source_ref": "indicator--b69e352f-9bb2-48a9-9fef-e176dbe7931e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44e2917-0936-4721-8a26-5c8230a182d4", "created": "2026-10-09T15:13:10.333026Z", "modified": "2026-10-09T15:13:10.333026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1461934e90e9d85235c560c7fd6cba63d164ad3131637887c26a11fa072e44eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.333026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a655f84-8bb7-49c0-bbf3-8d44f32de5aa", "created": "2026-10-09T15:13:10.333631Z", "modified": "2026-10-09T15:13:10.333631Z", "relationship_type": "indicates", "source_ref": "indicator--c44e2917-0936-4721-8a26-5c8230a182d4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a2cef6-4036-4984-8e94-7261148fa87d", "created": "2026-10-09T15:13:10.333764Z", "modified": "2026-10-09T15:13:10.333764Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87610a79b296570d4e6791e18fa05aa7f737f1e1e676e1beee37259515ab092b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.333764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43bb8d5a-0159-4feb-8f74-44dd50fb3367", "created": "2026-10-09T15:13:10.334374Z", "modified": "2026-10-09T15:13:10.334374Z", "relationship_type": "indicates", "source_ref": "indicator--94a2cef6-4036-4984-8e94-7261148fa87d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c679d38-c01d-43fb-8f30-4f33b3ae7088", "created": "2026-10-09T15:13:10.334509Z", "modified": "2026-10-09T15:13:10.334509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b76cc7754a21347701446a4331e571bcb1a4a71cebea712b53553bfa4026232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.334509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7720f2f-6e75-4880-a0af-dace3eb0cb75", "created": "2026-10-09T15:13:10.335094Z", "modified": "2026-10-09T15:13:10.335094Z", "relationship_type": "indicates", "source_ref": "indicator--6c679d38-c01d-43fb-8f30-4f33b3ae7088", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7478d816-e82e-4165-af12-56266be48364", "created": "2026-10-09T15:13:10.335215Z", "modified": "2026-10-09T15:13:10.335215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd61a3adb5bdf9542ff6c076d76d53243beb01a85f3d98e6ab4147b9252629a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.335215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--555a4a8f-987a-41b7-addf-2ae793574280", "created": "2026-10-09T15:13:10.335821Z", "modified": "2026-10-09T15:13:10.335821Z", "relationship_type": "indicates", "source_ref": "indicator--7478d816-e82e-4165-af12-56266be48364", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb82bc63-1c07-4b0f-8c70-b6e414b6bc88", "created": "2026-10-09T15:13:10.335943Z", "modified": "2026-10-09T15:13:10.335943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aae91cb530612d8ecb4ee6cf681e1cd69638c62898c8c956a651db3bce2b0ec1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.335943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10c309b5-d9b9-4190-93bb-76f8195207d0", "created": "2026-10-09T15:13:10.336665Z", "modified": "2026-10-09T15:13:10.336665Z", "relationship_type": "indicates", "source_ref": "indicator--bb82bc63-1c07-4b0f-8c70-b6e414b6bc88", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad634dcd-e82f-4100-8846-b05141c181b0", "created": "2026-10-09T15:13:10.336791Z", "modified": "2026-10-09T15:13:10.336791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a304272b070238e90a46b469981c1d202266ef92e14077a40a2649001240f4d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.336791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a3015d5-6293-4f3c-8ba8-9b56195a556d", "created": "2026-10-09T15:13:10.33739Z", "modified": "2026-10-09T15:13:10.33739Z", "relationship_type": "indicates", "source_ref": "indicator--ad634dcd-e82f-4100-8846-b05141c181b0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5790d7-77b1-4459-95fd-695afe8426de", "created": "2026-10-09T15:13:10.337515Z", "modified": "2026-10-09T15:13:10.337515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b6e24fc8652b016267c2f7f448cfa2a0f4b1ce84a2f2db72baf206a3287b9a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.337515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae8dc9f4-5ef5-46f7-8e87-90e0ee136b50", "created": "2026-10-09T15:13:10.338103Z", "modified": "2026-10-09T15:13:10.338103Z", "relationship_type": "indicates", "source_ref": "indicator--0b5790d7-77b1-4459-95fd-695afe8426de", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f60f921-3409-410d-999e-2e53422b0c05", "created": "2026-10-09T15:13:10.338222Z", "modified": "2026-10-09T15:13:10.338222Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ea85bbd75306210e4bd8494c934d2c1b9e016d9f11a2b502b9c9a08e2acc5a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.338222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db8723d0-f454-42d8-8504-5ef0f6490df0", "created": "2026-10-09T15:13:10.338819Z", "modified": "2026-10-09T15:13:10.338819Z", "relationship_type": "indicates", "source_ref": "indicator--8f60f921-3409-410d-999e-2e53422b0c05", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc994fa-920c-4532-a792-c8736374a2ff", "created": "2026-10-09T15:13:10.338939Z", "modified": "2026-10-09T15:13:10.338939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e0515add0a382f4dbc901506798b9a8a61ac67814633ff7c5499210442d5142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.338939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f64f200a-a936-439a-87c7-82cc62fc79b2", "created": "2026-10-09T15:13:10.339539Z", "modified": "2026-10-09T15:13:10.339539Z", "relationship_type": "indicates", "source_ref": "indicator--4bc994fa-920c-4532-a792-c8736374a2ff", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32afb4d-a89a-4562-8667-389b888841c9", "created": "2026-10-09T15:13:10.339663Z", "modified": "2026-10-09T15:13:10.339663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04abe757b1cac8e9d61010906b8067e6bcf2530f8dc1d7a5a9004ee2b02ce546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.339663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--466db256-ad6b-419a-8f19-795c1f8d6053", "created": "2026-10-09T15:13:10.340243Z", "modified": "2026-10-09T15:13:10.340243Z", "relationship_type": "indicates", "source_ref": "indicator--c32afb4d-a89a-4562-8667-389b888841c9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ea0a3f-64d1-4659-a89a-8df881ad08c3", "created": "2026-10-09T15:13:10.340374Z", "modified": "2026-10-09T15:13:10.340374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6daef6c4b551daf5d319274a8f7dddf5ade40cc27ef65fe12ebd0f8f6a02af2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.340374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09ab3e1c-7746-48df-8a3d-6a8babe4fdba", "created": "2026-10-09T15:13:10.340965Z", "modified": "2026-10-09T15:13:10.340965Z", "relationship_type": "indicates", "source_ref": "indicator--39ea0a3f-64d1-4659-a89a-8df881ad08c3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16a2340-7a8d-483c-aa36-f82fbaea3992", "created": "2026-10-09T15:13:10.341088Z", "modified": "2026-10-09T15:13:10.341088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20b7571f705f9e5c073b8cb558505d06366f5b4d71b0a634abe1ea7292931e83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.341088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41ae1606-f96b-43d5-a7d7-3e563eb4e97d", "created": "2026-10-09T15:13:10.341691Z", "modified": "2026-10-09T15:13:10.341691Z", "relationship_type": "indicates", "source_ref": "indicator--d16a2340-7a8d-483c-aa36-f82fbaea3992", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35f5729-0b63-4288-8d1d-da8bcda7d785", "created": "2026-10-09T15:13:10.341814Z", "modified": "2026-10-09T15:13:10.341814Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99f0740005c3aa3ee140879867898728be3a06a5e6df68b4da9f387a09a9f01b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.341814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82fcd3fd-cdd0-4c4a-a2d2-e7b4db4506b5", "created": "2026-10-09T15:13:10.342524Z", "modified": "2026-10-09T15:13:10.342524Z", "relationship_type": "indicates", "source_ref": "indicator--c35f5729-0b63-4288-8d1d-da8bcda7d785", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d732a-a7ba-44cb-b0e3-0ad909f54058", "created": "2026-10-09T15:13:10.342654Z", "modified": "2026-10-09T15:13:10.342654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c478df25642ef866dc69779f52bd7c72e6f1f85256f30d958beb7fa321c2511']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.342654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2250063-7e42-43cc-b74b-7adb0adbdf44", "created": "2026-10-09T15:13:10.34324Z", "modified": "2026-10-09T15:13:10.34324Z", "relationship_type": "indicates", "source_ref": "indicator--3e6d732a-a7ba-44cb-b0e3-0ad909f54058", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ae6f29-e831-4f4c-804c-178dd6ba9769", "created": "2026-10-09T15:13:10.343376Z", "modified": "2026-10-09T15:13:10.343376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60b7bf65a51125c2addb017ae12089425ef554d4552e2d0f9d29c882d47b623b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.343376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ccc258f-ae23-48b5-9fc9-be40ffd72300", "created": "2026-10-09T15:13:10.343962Z", "modified": "2026-10-09T15:13:10.343962Z", "relationship_type": "indicates", "source_ref": "indicator--b9ae6f29-e831-4f4c-804c-178dd6ba9769", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c612a4-8fa5-4c45-926b-a13c64db2ff9", "created": "2026-10-09T15:13:10.344086Z", "modified": "2026-10-09T15:13:10.344086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2863db2fc37341d56cd482bb8cc4dbd8a82dc986383ddb810816319852803c40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.344086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c82d14e-4f28-4c2d-936b-ecb501f51172", "created": "2026-10-09T15:13:10.344679Z", "modified": "2026-10-09T15:13:10.344679Z", "relationship_type": "indicates", "source_ref": "indicator--93c612a4-8fa5-4c45-926b-a13c64db2ff9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cb5d85-8f4c-4b9a-8c3c-6932edd6f969", "created": "2026-10-09T15:13:10.344801Z", "modified": "2026-10-09T15:13:10.344801Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0164550f14e9dec6e7d9444f13fecacefd7fd520f1ad51abb2ac81f81a954672']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.344801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75d30206-c068-434a-bcd9-f67024e68efe", "created": "2026-10-09T15:13:10.345386Z", "modified": "2026-10-09T15:13:10.345386Z", "relationship_type": "indicates", "source_ref": "indicator--49cb5d85-8f4c-4b9a-8c3c-6932edd6f969", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98180be-d9d5-47b0-abdb-72d95cedfadb", "created": "2026-10-09T15:13:10.345508Z", "modified": "2026-10-09T15:13:10.345508Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55152b6eaa7fea9dab42a0e5cf210d823a788c03fea27c53c5516ee9c99ab4e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.345508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3919906-d817-4681-aa50-ab4611fdafba", "created": "2026-10-09T15:13:10.346092Z", "modified": "2026-10-09T15:13:10.346092Z", "relationship_type": "indicates", "source_ref": "indicator--b98180be-d9d5-47b0-abdb-72d95cedfadb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf35a642-f9c5-4939-a693-7275848ec588", "created": "2026-10-09T15:13:10.346223Z", "modified": "2026-10-09T15:13:10.346223Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c2d3161d2198c99ce6966a4bacfec842ed90872eee17a183f5c2b326afeaed3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.346223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e72e55-2888-4e3d-b54f-cae62084e720", "created": "2026-10-09T15:13:10.34683Z", "modified": "2026-10-09T15:13:10.34683Z", "relationship_type": "indicates", "source_ref": "indicator--cf35a642-f9c5-4939-a693-7275848ec588", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ddbaeb6-df61-481a-9eaf-fa12aa848b4e", "created": "2026-10-09T15:13:10.34695Z", "modified": "2026-10-09T15:13:10.34695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='606b00397a93e198be1103d8fcbfac6a4ad9e2b0f92259a0efb6462a86e73d15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.34695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86f0745b-f30b-4a97-9554-2030e0e27cb2", "created": "2026-10-09T15:13:10.347549Z", "modified": "2026-10-09T15:13:10.347549Z", "relationship_type": "indicates", "source_ref": "indicator--1ddbaeb6-df61-481a-9eaf-fa12aa848b4e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dd6fe8-4bbc-43af-8801-a0a500724a0f", "created": "2026-10-09T15:13:10.34767Z", "modified": "2026-10-09T15:13:10.34767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc13bcd3fadc30737f2ad032730122ef7f7f504cd0c422764f8dee29d49c4874']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.34767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--754e262a-5ca8-4a39-a0bd-0fc155bbbd28", "created": "2026-10-09T15:13:10.34825Z", "modified": "2026-10-09T15:13:10.34825Z", "relationship_type": "indicates", "source_ref": "indicator--68dd6fe8-4bbc-43af-8801-a0a500724a0f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c618b701-c8ce-45f7-be34-68cbd8a2b9ff", "created": "2026-10-09T15:13:10.348384Z", "modified": "2026-10-09T15:13:10.348384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adbce8d4ffac225f726ee42bb25b1a9a0661b5ff2ae53f45f4e4417ceec0349d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.348384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b27d4f5-465e-4534-b680-2a3e10074e10", "created": "2026-10-09T15:13:10.349101Z", "modified": "2026-10-09T15:13:10.349101Z", "relationship_type": "indicates", "source_ref": "indicator--c618b701-c8ce-45f7-be34-68cbd8a2b9ff", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6393eb24-e9d8-4e29-8436-d47aa4109cd9", "created": "2026-10-09T15:13:10.349228Z", "modified": "2026-10-09T15:13:10.349228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbfffb70081d7415e446453b5839ea07939ec683aaff58da6b20cdcf5e2b649e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.349228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bea2dc4-276d-4c01-a6c3-315d1da78b49", "created": "2026-10-09T15:13:10.349828Z", "modified": "2026-10-09T15:13:10.349828Z", "relationship_type": "indicates", "source_ref": "indicator--6393eb24-e9d8-4e29-8436-d47aa4109cd9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f3d780-cc97-4133-8b94-ec2753f09074", "created": "2026-10-09T15:13:10.349951Z", "modified": "2026-10-09T15:13:10.349951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84844503f75810fc187976bc38128729b7f3ae60d613e99702e899d12af1f006']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.349951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff5ca172-5908-4506-8746-826f3a6038db", "created": "2026-10-09T15:13:10.350542Z", "modified": "2026-10-09T15:13:10.350542Z", "relationship_type": "indicates", "source_ref": "indicator--88f3d780-cc97-4133-8b94-ec2753f09074", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d1c07b-e887-4fd7-bd61-cda541b8e6cf", "created": "2026-10-09T15:13:10.350663Z", "modified": "2026-10-09T15:13:10.350663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1a626fa763e2459c767090d6f8cdbb138f2318e62541d4a9fe36819b09c1464']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.350663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b3012d6-c4fb-4b2c-a2a8-04089f997400", "created": "2026-10-09T15:13:10.351246Z", "modified": "2026-10-09T15:13:10.351246Z", "relationship_type": "indicates", "source_ref": "indicator--11d1c07b-e887-4fd7-bd61-cda541b8e6cf", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a39690-a446-4d1e-8986-7dae6bca60bf", "created": "2026-10-09T15:13:10.351382Z", "modified": "2026-10-09T15:13:10.351382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc7ea52c74c764f8208a4c7dee31a52b9e4ac694d1e61b02b5174b5ff983dd15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.351382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62cc97d7-74e6-4562-8ebd-6133dc5316e4", "created": "2026-10-09T15:13:10.351971Z", "modified": "2026-10-09T15:13:10.351971Z", "relationship_type": "indicates", "source_ref": "indicator--86a39690-a446-4d1e-8986-7dae6bca60bf", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee738a6-8dab-4c3b-bcf8-08c072e804a8", "created": "2026-10-09T15:13:10.352092Z", "modified": "2026-10-09T15:13:10.352092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67d81c5e1cd237314e5fc327c3063fe6647d803ecebf3728ee8508f1f4088938']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.352092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3a89539-47a8-4a5e-b437-3e2632d8a31e", "created": "2026-10-09T15:13:10.352693Z", "modified": "2026-10-09T15:13:10.352693Z", "relationship_type": "indicates", "source_ref": "indicator--1ee738a6-8dab-4c3b-bcf8-08c072e804a8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9323529-1ab6-441c-af1e-233297ec24ca", "created": "2026-10-09T15:13:10.352817Z", "modified": "2026-10-09T15:13:10.352817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d835e22aacfa5934d6ebd84e58006dde2811d80330ed19a738dfee2f006132b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.352817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e515a57b-cdfa-4303-b6af-d59710c54102", "created": "2026-10-09T15:13:10.35342Z", "modified": "2026-10-09T15:13:10.35342Z", "relationship_type": "indicates", "source_ref": "indicator--b9323529-1ab6-441c-af1e-233297ec24ca", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1d6d01-5638-471d-9e7f-6f76f6a093dd", "created": "2026-10-09T15:13:10.353546Z", "modified": "2026-10-09T15:13:10.353546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1258bfeec7ca454c47ea9081c8fdce415eeb2287cc16675fd0818ab6e8128dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.353546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6e8fb43-a5e6-404e-b227-589d16b9b3c1", "created": "2026-10-09T15:13:10.354146Z", "modified": "2026-10-09T15:13:10.354146Z", "relationship_type": "indicates", "source_ref": "indicator--bb1d6d01-5638-471d-9e7f-6f76f6a093dd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0b78bc-d668-4234-8733-19b8dec178b7", "created": "2026-10-09T15:13:10.354282Z", "modified": "2026-10-09T15:13:10.354282Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ad54dd356c77d70e5463eb4abdff4b152e494e74a59292c5200453980b1bcb3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.354282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b26bd124-b5f0-46b5-ace1-d43805ef37f2", "created": "2026-10-09T15:13:10.354882Z", "modified": "2026-10-09T15:13:10.354882Z", "relationship_type": "indicates", "source_ref": "indicator--7f0b78bc-d668-4234-8733-19b8dec178b7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e6702c-7e3e-4479-8b69-7e3c92ceb257", "created": "2026-10-09T15:13:10.355001Z", "modified": "2026-10-09T15:13:10.355001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a46c576479689a9c165d1b1c95a478740bfce0b6629f30f5cf427b33a025b1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.355001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b3ed448-e1d6-426a-986c-5ffd1d36bad2", "created": "2026-10-09T15:13:10.355692Z", "modified": "2026-10-09T15:13:10.355692Z", "relationship_type": "indicates", "source_ref": "indicator--06e6702c-7e3e-4479-8b69-7e3c92ceb257", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33b26a3-4b64-4a9e-bb21-938a01aed986", "created": "2026-10-09T15:13:10.355816Z", "modified": "2026-10-09T15:13:10.355816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6ae9663d1b19c24535aeaaab2e30850127678156714c5ecfa57de344c6bc587']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.355816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a464d5f-8bf4-4875-9de6-b3690aa0f0f7", "created": "2026-10-09T15:13:10.356411Z", "modified": "2026-10-09T15:13:10.356411Z", "relationship_type": "indicates", "source_ref": "indicator--f33b26a3-4b64-4a9e-bb21-938a01aed986", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220a1198-046f-4836-8eea-1c246abb410d", "created": "2026-10-09T15:13:10.356537Z", "modified": "2026-10-09T15:13:10.356537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42792d85d613c2187b879fc6991cef2d385a9837e93727d7dc6466d1ff759b53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.356537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac437c64-6070-4b46-a440-1c0565314eec", "created": "2026-10-09T15:13:10.357133Z", "modified": "2026-10-09T15:13:10.357133Z", "relationship_type": "indicates", "source_ref": "indicator--220a1198-046f-4836-8eea-1c246abb410d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2e1430-c155-4c87-82f4-5420f52d75d2", "created": "2026-10-09T15:13:10.357262Z", "modified": "2026-10-09T15:13:10.357262Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3764cd2c6d131a38e94ad14604e80249116bb135547d1a46f3b0ca3f6b4bcbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.357262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93e9328d-4ed9-4352-a77d-71ac62a97fbe", "created": "2026-10-09T15:13:10.35786Z", "modified": "2026-10-09T15:13:10.35786Z", "relationship_type": "indicates", "source_ref": "indicator--9b2e1430-c155-4c87-82f4-5420f52d75d2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d9303f-99be-40c3-a6ad-413cbda88c6e", "created": "2026-10-09T15:13:10.357982Z", "modified": "2026-10-09T15:13:10.357982Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65ae3fc73af0553b21c96a5525f0437976907e5a004f534e23cd7fcc64167cfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.357982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22c55574-c74f-498a-b051-295995758a76", "created": "2026-10-09T15:13:10.358588Z", "modified": "2026-10-09T15:13:10.358588Z", "relationship_type": "indicates", "source_ref": "indicator--d3d9303f-99be-40c3-a6ad-413cbda88c6e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa17e25-d57e-4199-87e5-c37b6c2aa1e8", "created": "2026-10-09T15:13:10.358711Z", "modified": "2026-10-09T15:13:10.358711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='034305be6dd08950069e3d3b0d93c43328350a9c86ddba310084d86eb44427aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.358711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9004aa27-8f8e-4d9b-bf89-f37c3cfd9320", "created": "2026-10-09T15:13:10.359312Z", "modified": "2026-10-09T15:13:10.359312Z", "relationship_type": "indicates", "source_ref": "indicator--7aa17e25-d57e-4199-87e5-c37b6c2aa1e8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59dbf9f2-7475-4e85-b066-4b85db8022c9", "created": "2026-10-09T15:13:10.359435Z", "modified": "2026-10-09T15:13:10.359435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51e07b4092892b661b3873fe55ec622efcea9d942bf1dbe0b3d92035ddf48c53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.359435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba8ae4bf-c32f-43fd-bec9-0a0b6677e9db", "created": "2026-10-09T15:13:10.360028Z", "modified": "2026-10-09T15:13:10.360028Z", "relationship_type": "indicates", "source_ref": "indicator--59dbf9f2-7475-4e85-b066-4b85db8022c9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c126e1c5-3719-484b-bb15-bd851a2ceb5c", "created": "2026-10-09T15:13:10.360153Z", "modified": "2026-10-09T15:13:10.360153Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04c560ef6a701d50893c86f7bafbef50784a396ee0a92055a9efaf9925f5fe04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.360153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d32df1e2-2f08-473f-9a1d-f24a8f3d0ee9", "created": "2026-10-09T15:13:10.360757Z", "modified": "2026-10-09T15:13:10.360757Z", "relationship_type": "indicates", "source_ref": "indicator--c126e1c5-3719-484b-bb15-bd851a2ceb5c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--271d9c51-e7a3-45a4-889f-b1e396cb75b5", "created": "2026-10-09T15:13:10.36088Z", "modified": "2026-10-09T15:13:10.36088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26bd56b34e54c8349794c71f569bf84c631694700805882ff07ca09fad35afc7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.36088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92e389c2-93f5-4c0b-9050-f2aed269f583", "created": "2026-10-09T15:13:10.361588Z", "modified": "2026-10-09T15:13:10.361588Z", "relationship_type": "indicates", "source_ref": "indicator--271d9c51-e7a3-45a4-889f-b1e396cb75b5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5467076-9b56-4283-ad54-a53d5e0ce480", "created": "2026-10-09T15:13:10.361718Z", "modified": "2026-10-09T15:13:10.361718Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37ab5e7cb66400d16430bdefbc091374cbf3746f7505b4878d9c095239a29723']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.361718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32d73f30-d40d-4ab7-a0b6-ee2a7494415d", "created": "2026-10-09T15:13:10.362327Z", "modified": "2026-10-09T15:13:10.362327Z", "relationship_type": "indicates", "source_ref": "indicator--a5467076-9b56-4283-ad54-a53d5e0ce480", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382200ba-c645-4fe9-bd94-760eb4a3589e", "created": "2026-10-09T15:13:10.362454Z", "modified": "2026-10-09T15:13:10.362454Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='760be7b18bf7f6f9632deba03ee26d7e9691438ac5d05ab0b6b4b3684f67997a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.362454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--731a14f2-8b9d-4fef-85b3-bf777864270c", "created": "2026-10-09T15:13:10.363048Z", "modified": "2026-10-09T15:13:10.363048Z", "relationship_type": "indicates", "source_ref": "indicator--382200ba-c645-4fe9-bd94-760eb4a3589e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70acecd-7e03-406e-988b-cce01a5c6304", "created": "2026-10-09T15:13:10.36317Z", "modified": "2026-10-09T15:13:10.36317Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56da18be2d94cb7de04a528f4cd4aa7274278e36a931f8f513f6573ae5298d25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.36317Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11f13185-7dad-40df-bea8-73849e80a221", "created": "2026-10-09T15:13:10.363768Z", "modified": "2026-10-09T15:13:10.363768Z", "relationship_type": "indicates", "source_ref": "indicator--a70acecd-7e03-406e-988b-cce01a5c6304", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7104ac2-3d23-43d0-bac0-266821b0c380", "created": "2026-10-09T15:13:10.363901Z", "modified": "2026-10-09T15:13:10.363901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d3deefa89c7bcb856826e4f56b23fd58645ac69e1e5acbd72290ce5a525206f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.363901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--776cde14-0f49-4639-8e39-d4d83fb838e0", "created": "2026-10-09T15:13:10.364507Z", "modified": "2026-10-09T15:13:10.364507Z", "relationship_type": "indicates", "source_ref": "indicator--c7104ac2-3d23-43d0-bac0-266821b0c380", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c2a6bc-0949-46f9-b36d-d4b126eba823", "created": "2026-10-09T15:13:10.36463Z", "modified": "2026-10-09T15:13:10.36463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c023042671eb96c219e5239ebd5b4f4f848b01dc56f70407ea3aec1c81dffbb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.36463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07f81d4b-7f31-47fb-ab7f-75e43c997771", "created": "2026-10-09T15:13:10.365244Z", "modified": "2026-10-09T15:13:10.365244Z", "relationship_type": "indicates", "source_ref": "indicator--53c2a6bc-0949-46f9-b36d-d4b126eba823", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caa0c0c-0973-4e37-8ec7-89aa834acdee", "created": "2026-10-09T15:13:10.365387Z", "modified": "2026-10-09T15:13:10.365387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf66c6a2d374f6a92efb23851ea186ea2ebe119a62124a8bdceb7e9c5ade68ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.365387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3dd13ea1-b4fc-4e36-bbe8-debac3bf6ec2", "created": "2026-10-09T15:13:10.365977Z", "modified": "2026-10-09T15:13:10.365977Z", "relationship_type": "indicates", "source_ref": "indicator--7caa0c0c-0973-4e37-8ec7-89aa834acdee", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb03962-5559-4e77-ab90-67d75501b53e", "created": "2026-10-09T15:13:10.366099Z", "modified": "2026-10-09T15:13:10.366099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='381219902afac8d8007275a64a99c1012e82521086e8db1fad5ecd30290bb531']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.366099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f96e1692-6c04-48c4-a189-4bcd32874e82", "created": "2026-10-09T15:13:10.366714Z", "modified": "2026-10-09T15:13:10.366714Z", "relationship_type": "indicates", "source_ref": "indicator--1bb03962-5559-4e77-ab90-67d75501b53e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9a6461-9b0d-4072-adcf-c756bf9c1f76", "created": "2026-10-09T15:13:10.366839Z", "modified": "2026-10-09T15:13:10.366839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa7cde8b5274189351a23180949d8e8eeadc8ec3dd5099088d617ca71d94dab8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.366839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5302116-e4ef-4d64-9029-5378c5144fde", "created": "2026-10-09T15:13:10.367435Z", "modified": "2026-10-09T15:13:10.367435Z", "relationship_type": "indicates", "source_ref": "indicator--1b9a6461-9b0d-4072-adcf-c756bf9c1f76", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01dfeb0-15b5-4493-bebf-6b98f66c7530", "created": "2026-10-09T15:13:10.367561Z", "modified": "2026-10-09T15:13:10.367561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6c797286880d0215deb0fae7c51f785034ea8b28dcce407a2cea2ded81ea396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.367561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0e881af-6f23-4c73-b4dd-1bc53f0c9532", "created": "2026-10-09T15:13:10.368254Z", "modified": "2026-10-09T15:13:10.368254Z", "relationship_type": "indicates", "source_ref": "indicator--e01dfeb0-15b5-4493-bebf-6b98f66c7530", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff25418-c537-468b-8b33-80bdf3623f40", "created": "2026-10-09T15:13:10.368396Z", "modified": "2026-10-09T15:13:10.368396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54336cdba02838a3804ecbd512ba99a4dcf11a84367b10083438f83c0a7040f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.368396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bfc20df-0678-47c7-a964-3527a7ef5add", "created": "2026-10-09T15:13:10.368989Z", "modified": "2026-10-09T15:13:10.368989Z", "relationship_type": "indicates", "source_ref": "indicator--9ff25418-c537-468b-8b33-80bdf3623f40", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9486de4c-da5b-477b-936b-3c4d946d092c", "created": "2026-10-09T15:13:10.369116Z", "modified": "2026-10-09T15:13:10.369116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca3e9753a1d65c23a597accb972f8e77914623e66d6b00b40b2bcf671d65650a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.369116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb6c856e-3914-423e-aa36-655bdb869440", "created": "2026-10-09T15:13:10.369714Z", "modified": "2026-10-09T15:13:10.369714Z", "relationship_type": "indicates", "source_ref": "indicator--9486de4c-da5b-477b-936b-3c4d946d092c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36db5d1-5ee4-4d7c-be91-64078911c693", "created": "2026-10-09T15:13:10.369838Z", "modified": "2026-10-09T15:13:10.369838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fb450daa54a6133a313644aa9695965ee3c8c15cbfb60edfc3e13f4e9c0931c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.369838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c9191f5-ff75-41e1-8758-91242adb64a5", "created": "2026-10-09T15:13:10.370431Z", "modified": "2026-10-09T15:13:10.370431Z", "relationship_type": "indicates", "source_ref": "indicator--c36db5d1-5ee4-4d7c-be91-64078911c693", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f3b83d-4503-42fe-aad4-d7e9fa8b274c", "created": "2026-10-09T15:13:10.370552Z", "modified": "2026-10-09T15:13:10.370552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a866315ced21a133b792e1159933be6242364f87aeca8dc73053e02f0b923f11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.370552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--106a3c10-b127-4497-8329-7be76b5fcafb", "created": "2026-10-09T15:13:10.371142Z", "modified": "2026-10-09T15:13:10.371142Z", "relationship_type": "indicates", "source_ref": "indicator--c4f3b83d-4503-42fe-aad4-d7e9fa8b274c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570335b8-0dbb-4482-9928-62610f42d5ef", "created": "2026-10-09T15:13:10.371278Z", "modified": "2026-10-09T15:13:10.371278Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d6cf144b9271318dc6ff69f816b1146d4a98df1fde683cf094f56643fe303a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.371278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cc99918-09f1-41cd-8031-7611ada995ca", "created": "2026-10-09T15:13:10.371869Z", "modified": "2026-10-09T15:13:10.371869Z", "relationship_type": "indicates", "source_ref": "indicator--570335b8-0dbb-4482-9928-62610f42d5ef", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394d0bed-d4e9-4c7b-a795-9a50c7779011", "created": "2026-10-09T15:13:10.371992Z", "modified": "2026-10-09T15:13:10.371992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5f5bb223fadef66c77296512c8bed72654fa1f53289e6bf9e1d1bbb6a6e252e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.371992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8262cce-302c-405a-94ab-6b5b94c75fa9", "created": "2026-10-09T15:13:10.372598Z", "modified": "2026-10-09T15:13:10.372598Z", "relationship_type": "indicates", "source_ref": "indicator--394d0bed-d4e9-4c7b-a795-9a50c7779011", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c1cec7-32d2-4485-86b3-b1694db39952", "created": "2026-10-09T15:13:10.372727Z", "modified": "2026-10-09T15:13:10.372727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='406baa9efd3223891eb32796154d91d65e9d0903ee5a4f1c7ee78b8a41c21496']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.372727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb9a5103-ab37-4de5-b97d-7507a0b7fbb2", "created": "2026-10-09T15:13:10.373342Z", "modified": "2026-10-09T15:13:10.373342Z", "relationship_type": "indicates", "source_ref": "indicator--77c1cec7-32d2-4485-86b3-b1694db39952", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8334b9-8d05-44e0-911e-6e279b18825a", "created": "2026-10-09T15:13:10.373466Z", "modified": "2026-10-09T15:13:10.373466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19d290b4cd197f099953e7b4b1ec57078f9f1bf467297c7d50720765b10ba7c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.373466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faace42b-1c33-40de-b74f-e73cd3ad6d43", "created": "2026-10-09T15:13:10.374061Z", "modified": "2026-10-09T15:13:10.374061Z", "relationship_type": "indicates", "source_ref": "indicator--0a8334b9-8d05-44e0-911e-6e279b18825a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc59821-3646-4f63-b472-3d81a9aea2b1", "created": "2026-10-09T15:13:10.374181Z", "modified": "2026-10-09T15:13:10.374181Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3c3bbb80b8da68d981239f2d011524b30418d77cb9946f7ed2f2644adaa8d5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.374181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f0f9cd8-97b0-43f8-8e97-f570f2c69c0f", "created": "2026-10-09T15:13:10.374887Z", "modified": "2026-10-09T15:13:10.374887Z", "relationship_type": "indicates", "source_ref": "indicator--5fc59821-3646-4f63-b472-3d81a9aea2b1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68b9cf3-0803-4098-9865-ebd9c329b2a9", "created": "2026-10-09T15:13:10.375014Z", "modified": "2026-10-09T15:13:10.375014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01f4f2d69a3c046da1faa6f228e80d0cbca88d86888e15945dc10feb4f3570a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.375014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27a9e710-f2d2-44ed-aac7-6b2c489eb9c4", "created": "2026-10-09T15:13:10.375629Z", "modified": "2026-10-09T15:13:10.375629Z", "relationship_type": "indicates", "source_ref": "indicator--c68b9cf3-0803-4098-9865-ebd9c329b2a9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc3dda9-7d30-4662-98b4-3b98bbb6f494", "created": "2026-10-09T15:13:10.375757Z", "modified": "2026-10-09T15:13:10.375757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d36e3bfa5183b8bd6a1c5e9f76ec42a3094167c9be24a428d6e496721bbb64f4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.375757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff20f84a-05fd-4d03-967f-55a3d928eea2", "created": "2026-10-09T15:13:10.376356Z", "modified": "2026-10-09T15:13:10.376356Z", "relationship_type": "indicates", "source_ref": "indicator--2dc3dda9-7d30-4662-98b4-3b98bbb6f494", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a32206c-4860-4b8c-82ee-820776a57ec9", "created": "2026-10-09T15:13:10.376483Z", "modified": "2026-10-09T15:13:10.376483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffac75e8020fcb44db4354d59d7fb8674709f28c52142215ec7c68c0667ba3a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.376483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2948f2ac-2e0e-4d04-9cbb-74e640266aea", "created": "2026-10-09T15:13:10.377081Z", "modified": "2026-10-09T15:13:10.377081Z", "relationship_type": "indicates", "source_ref": "indicator--0a32206c-4860-4b8c-82ee-820776a57ec9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1178779f-1cce-4605-adb3-b00b5b861473", "created": "2026-10-09T15:13:10.377214Z", "modified": "2026-10-09T15:13:10.377214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73a8aafaff910334bed846ada3d68116d6fa5b136ab3d4091151dff89b77923f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.377214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d18ac8a-a8c5-4241-9b5c-504bf955b466", "created": "2026-10-09T15:13:10.377825Z", "modified": "2026-10-09T15:13:10.377825Z", "relationship_type": "indicates", "source_ref": "indicator--1178779f-1cce-4605-adb3-b00b5b861473", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1be82a-bcae-4a92-a058-a2078babc8cb", "created": "2026-10-09T15:13:10.37795Z", "modified": "2026-10-09T15:13:10.37795Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='642bdc30ebad0bebff4923886c7cb734f866a14fb6f1f4d304ae20b122bcc3f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.37795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fb41a10-5555-4b90-905a-0c12ea8f1a67", "created": "2026-10-09T15:13:10.378553Z", "modified": "2026-10-09T15:13:10.378553Z", "relationship_type": "indicates", "source_ref": "indicator--3c1be82a-bcae-4a92-a058-a2078babc8cb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c928eeea-8c62-45fd-9052-436ce1088915", "created": "2026-10-09T15:13:10.378676Z", "modified": "2026-10-09T15:13:10.378676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2234c4bacb02b05960cf94782567f20c2161a509763109415b0c86bc85f6ea66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.378676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55547aee-def2-4a83-9b9e-7e4e60ec1dde", "created": "2026-10-09T15:13:10.379287Z", "modified": "2026-10-09T15:13:10.379287Z", "relationship_type": "indicates", "source_ref": "indicator--c928eeea-8c62-45fd-9052-436ce1088915", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789b24ba-1e8c-4374-924c-964e665e6e14", "created": "2026-10-09T15:13:10.379421Z", "modified": "2026-10-09T15:13:10.379421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10c50638a54606799f8d8ce310a9dec9dc131f8675aff8f6f161db90f19c0709']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.379421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1ccb16d-45e8-4bfc-8112-2f98ebe53cf1", "created": "2026-10-09T15:13:10.380009Z", "modified": "2026-10-09T15:13:10.380009Z", "relationship_type": "indicates", "source_ref": "indicator--789b24ba-1e8c-4374-924c-964e665e6e14", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c5ccd8-8895-4feb-9e1d-33104770685f", "created": "2026-10-09T15:13:10.380129Z", "modified": "2026-10-09T15:13:10.380129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e9608176088fad14802ea68fd60c4985c586f97b73efce9cc34228001770820']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.380129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1870a38e-00e8-448a-9c67-728ae8decd49", "created": "2026-10-09T15:13:10.380831Z", "modified": "2026-10-09T15:13:10.380831Z", "relationship_type": "indicates", "source_ref": "indicator--d9c5ccd8-8895-4feb-9e1d-33104770685f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8215977d-70c4-4733-9961-e4e08f342911", "created": "2026-10-09T15:13:10.38096Z", "modified": "2026-10-09T15:13:10.38096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b96c8a5c8cd05f22f709c2cc91e4518fec319c251c24e1c64358bbe21c4a19f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.38096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0820e7e-31cd-478d-a364-f6ec44d818ff", "created": "2026-10-09T15:13:10.381568Z", "modified": "2026-10-09T15:13:10.381568Z", "relationship_type": "indicates", "source_ref": "indicator--8215977d-70c4-4733-9961-e4e08f342911", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29de4d5f-ec71-4394-9209-8a6f1b4c09e2", "created": "2026-10-09T15:13:10.381695Z", "modified": "2026-10-09T15:13:10.381695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b336a74a85635956783e20b2546df1629b82777eacac25c42de6232aff46623']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.381695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2580bfbf-cae8-4674-9dc0-0f7b76be6c6c", "created": "2026-10-09T15:13:10.382294Z", "modified": "2026-10-09T15:13:10.382294Z", "relationship_type": "indicates", "source_ref": "indicator--29de4d5f-ec71-4394-9209-8a6f1b4c09e2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3b4885-a02e-47c7-922a-3fe6cfd8acba", "created": "2026-10-09T15:13:10.382418Z", "modified": "2026-10-09T15:13:10.382418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f02287d99b38f82880a6e36f671538be7bdc1961798b309d36158343837c586']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.382418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e8cdb53-138c-4819-89b0-0c6a7a49142e", "created": "2026-10-09T15:13:10.383018Z", "modified": "2026-10-09T15:13:10.383018Z", "relationship_type": "indicates", "source_ref": "indicator--bb3b4885-a02e-47c7-922a-3fe6cfd8acba", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723a26df-d99f-4364-b906-1df570073822", "created": "2026-10-09T15:13:10.383147Z", "modified": "2026-10-09T15:13:10.383147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20fafd15c2f2551f2bf73fbcb1ca4f782e9c9ba9d19f1433fde482324f965826']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.383147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40bee8c7-d0b3-43bc-8811-e3c86b025724", "created": "2026-10-09T15:13:10.38383Z", "modified": "2026-10-09T15:13:10.38383Z", "relationship_type": "indicates", "source_ref": "indicator--723a26df-d99f-4364-b906-1df570073822", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baff8921-750b-4051-961b-f8e95de3a522", "created": "2026-10-09T15:13:10.383963Z", "modified": "2026-10-09T15:13:10.383963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0af347fa7253923d267ccf9f24006c9bfd16e5023ecc0c601cc3bcebeda9691']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.383963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bf23f35-39f7-438c-847f-08ecbe10c65b", "created": "2026-10-09T15:13:10.384603Z", "modified": "2026-10-09T15:13:10.384603Z", "relationship_type": "indicates", "source_ref": "indicator--baff8921-750b-4051-961b-f8e95de3a522", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7565801-91b2-43f2-804d-d0bc181da541", "created": "2026-10-09T15:13:10.384748Z", "modified": "2026-10-09T15:13:10.384748Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ee8fdf725ba44f16b8a45b826ef02d35580c9f1cb02bbe19695a097f4e2c9da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.384748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a98206ad-b099-45ad-aa5b-56352299c527", "created": "2026-10-09T15:13:10.385371Z", "modified": "2026-10-09T15:13:10.385371Z", "relationship_type": "indicates", "source_ref": "indicator--f7565801-91b2-43f2-804d-d0bc181da541", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383c29c5-1bc8-4037-bd9f-e3ff8f3564fb", "created": "2026-10-09T15:13:10.385501Z", "modified": "2026-10-09T15:13:10.385501Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3050ed7208a32e1602422a3460c5d74536c806c37020150546b5bb20a6be46e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.385501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c081134c-a876-4652-9f89-ce6ad12e4a2b", "created": "2026-10-09T15:13:10.386096Z", "modified": "2026-10-09T15:13:10.386096Z", "relationship_type": "indicates", "source_ref": "indicator--383c29c5-1bc8-4037-bd9f-e3ff8f3564fb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d27861-ad3e-4033-bd8d-d778af200bcc", "created": "2026-10-09T15:13:10.386218Z", "modified": "2026-10-09T15:13:10.386218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3dc8b5aa1df931f2a9dc9d8ad860854f8d94a9b08ab9c1139704b763aecd54ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.386218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b87bf108-91cf-4851-af24-b99a6db8d870", "created": "2026-10-09T15:13:10.38684Z", "modified": "2026-10-09T15:13:10.38684Z", "relationship_type": "indicates", "source_ref": "indicator--38d27861-ad3e-4033-bd8d-d778af200bcc", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e70ded0-a5cf-41bb-82d1-ef1cfb5d6d33", "created": "2026-10-09T15:13:10.386972Z", "modified": "2026-10-09T15:13:10.386972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41c4421c73d06e7295bafd788e5f654c6caa7fcc5db4042bdf49a1bc00c790cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.386972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd58e14c-709f-4191-9ccf-4d7203e8d541", "created": "2026-10-09T15:13:10.388042Z", "modified": "2026-10-09T15:13:10.388042Z", "relationship_type": "indicates", "source_ref": "indicator--0e70ded0-a5cf-41bb-82d1-ef1cfb5d6d33", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcba58dd-cdb0-4a8f-ae15-6e0bb86703cb", "created": "2026-10-09T15:13:10.388185Z", "modified": "2026-10-09T15:13:10.388185Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd2e841a648a331d08b51a9353ae42710375ea31812f61ec3afe4fdd8903cb96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.388185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26354903-03f8-4e6c-896c-3144fc8ef75c", "created": "2026-10-09T15:13:10.388809Z", "modified": "2026-10-09T15:13:10.388809Z", "relationship_type": "indicates", "source_ref": "indicator--fcba58dd-cdb0-4a8f-ae15-6e0bb86703cb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdfe77e-29a9-48e1-a5e8-cd15796ae1ee", "created": "2026-10-09T15:13:10.388937Z", "modified": "2026-10-09T15:13:10.388937Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b55fd3b1c5f4a561d4e17c3b67de23b9677c0a8556717a7dc5c77703bd0aecb2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.388937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e130ae81-e13e-4ec1-b9e4-ef63554a0176", "created": "2026-10-09T15:13:10.389558Z", "modified": "2026-10-09T15:13:10.389558Z", "relationship_type": "indicates", "source_ref": "indicator--ecdfe77e-29a9-48e1-a5e8-cd15796ae1ee", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4783eea-d707-4fa6-a448-b0da80da761e", "created": "2026-10-09T15:13:10.389686Z", "modified": "2026-10-09T15:13:10.389686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3b1ac81e5a34052d1848632fd2a6a7ceb548d34306236d8bd5e8b67989b4a3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.389686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6fa84eb-1bb2-4fe5-a7b6-118fb1888b48", "created": "2026-10-09T15:13:10.390299Z", "modified": "2026-10-09T15:13:10.390299Z", "relationship_type": "indicates", "source_ref": "indicator--e4783eea-d707-4fa6-a448-b0da80da761e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdc1aa2-38ea-43b2-b20c-2b352cc281e1", "created": "2026-10-09T15:13:10.390426Z", "modified": "2026-10-09T15:13:10.390426Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19ad56b2db7f6aa36c07a1528cbd5fb0db32115d7b15a6bc46b1049628480c8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.390426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4551314-73b2-4965-ae0d-a40dd0bacce1", "created": "2026-10-09T15:13:10.391024Z", "modified": "2026-10-09T15:13:10.391024Z", "relationship_type": "indicates", "source_ref": "indicator--efdc1aa2-38ea-43b2-b20c-2b352cc281e1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be24d9a5-5124-4d2e-9319-139cd503464a", "created": "2026-10-09T15:13:10.391148Z", "modified": "2026-10-09T15:13:10.391148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eef3ec88d673971aaea091f470bc5f4b1d905e3973cabf95ad7855fd544e46c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.391148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3930288d-ecd6-4f4b-a253-f33e8d6cd957", "created": "2026-10-09T15:13:10.391742Z", "modified": "2026-10-09T15:13:10.391742Z", "relationship_type": "indicates", "source_ref": "indicator--be24d9a5-5124-4d2e-9319-139cd503464a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b282c0-6ddb-485d-b8bf-0d9f53c7b08e", "created": "2026-10-09T15:13:10.391865Z", "modified": "2026-10-09T15:13:10.391865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cd9b30463e655bf19cbe85af02328e09fa88e8d1d19a42be6656c58c403e573']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.391865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef57812b-7a6e-40dd-8712-292131eebc92", "created": "2026-10-09T15:13:10.392459Z", "modified": "2026-10-09T15:13:10.392459Z", "relationship_type": "indicates", "source_ref": "indicator--77b282c0-6ddb-485d-b8bf-0d9f53c7b08e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742b4c61-762b-40b4-a60f-e1ae621a48ec", "created": "2026-10-09T15:13:10.392581Z", "modified": "2026-10-09T15:13:10.392581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38be0f005972cc07cc79064389dd21b47058571c9bfc31f3e87e0d8df3dc7378']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.392581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8dd08cc-ffaf-40d5-9be7-ce9e256ca58a", "created": "2026-10-09T15:13:10.393162Z", "modified": "2026-10-09T15:13:10.393162Z", "relationship_type": "indicates", "source_ref": "indicator--742b4c61-762b-40b4-a60f-e1ae621a48ec", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0667a4-2e2c-41eb-aa94-9ff7b9345ad0", "created": "2026-10-09T15:13:10.393291Z", "modified": "2026-10-09T15:13:10.393291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='296e2b1013ffdb4ca9e1f2aeac43cdb616bf21ca4db89dd365e55a41c9a97d8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.393291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--531f6a20-7371-4483-9800-5fec2ac35c4a", "created": "2026-10-09T15:13:10.393876Z", "modified": "2026-10-09T15:13:10.393876Z", "relationship_type": "indicates", "source_ref": "indicator--1a0667a4-2e2c-41eb-aa94-9ff7b9345ad0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ebc347-0e61-46db-8cb4-b57d5fdefbde", "created": "2026-10-09T15:13:10.393995Z", "modified": "2026-10-09T15:13:10.393995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aab56075fc070e71a5a2ae628341d3896b95b6ddd5bfb1942e7de53775514172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.393995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8395ab55-d34e-479a-9303-d549bd394db8", "created": "2026-10-09T15:13:10.394749Z", "modified": "2026-10-09T15:13:10.394749Z", "relationship_type": "indicates", "source_ref": "indicator--68ebc347-0e61-46db-8cb4-b57d5fdefbde", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fed7de-07cb-42cb-b781-bd1c9d194bf0", "created": "2026-10-09T15:13:10.394886Z", "modified": "2026-10-09T15:13:10.394886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3ad570197d34d0ca84ab49cd56061bb97ff44b0d6c041674b74bfb49892feac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.394886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deb787f9-4df8-4a69-902d-710e4eb20fa6", "created": "2026-10-09T15:13:10.395513Z", "modified": "2026-10-09T15:13:10.395513Z", "relationship_type": "indicates", "source_ref": "indicator--42fed7de-07cb-42cb-b781-bd1c9d194bf0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed4db12-9c2a-4694-88ea-17ec2d6288b2", "created": "2026-10-09T15:13:10.395645Z", "modified": "2026-10-09T15:13:10.395645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f63417b981cd71e74b30e3dd5fc3081c59daf4421f7aff0c41292d59cc00042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.395645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72a84ea0-25f9-494e-b727-98eb016f1464", "created": "2026-10-09T15:13:10.396237Z", "modified": "2026-10-09T15:13:10.396237Z", "relationship_type": "indicates", "source_ref": "indicator--eed4db12-9c2a-4694-88ea-17ec2d6288b2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a05225-a88e-47b8-a2c1-d0dc4c254b4e", "created": "2026-10-09T15:13:10.396378Z", "modified": "2026-10-09T15:13:10.396378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8209d35af1c5d3d5eed3ae5318506894d7c71fb0a20d082a65be8391200b02f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.396378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8127ff2-4f35-40d9-83bd-aa90cc6f9fd5", "created": "2026-10-09T15:13:10.396975Z", "modified": "2026-10-09T15:13:10.396975Z", "relationship_type": "indicates", "source_ref": "indicator--25a05225-a88e-47b8-a2c1-d0dc4c254b4e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b60b30-6962-4758-bd0c-c4777a636ef2", "created": "2026-10-09T15:13:10.397096Z", "modified": "2026-10-09T15:13:10.397096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2586e31cbf5a15b90fd0222924d65d91cdb6cf9bbc6f217fd296fef374148904']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.397096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea89ae8f-1237-45c9-b835-74b4476bf720", "created": "2026-10-09T15:13:10.397692Z", "modified": "2026-10-09T15:13:10.397692Z", "relationship_type": "indicates", "source_ref": "indicator--17b60b30-6962-4758-bd0c-c4777a636ef2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fd998e-4ead-4e3d-bd0e-4e7c9b583c68", "created": "2026-10-09T15:13:10.397814Z", "modified": "2026-10-09T15:13:10.397814Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39c0a1d76e258019c166fcdcfba06a99d8a3071a0dd2f453a6f314ffbd5023fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.397814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ba96099-0311-40a3-94b0-0fd723626107", "created": "2026-10-09T15:13:10.398401Z", "modified": "2026-10-09T15:13:10.398401Z", "relationship_type": "indicates", "source_ref": "indicator--79fd998e-4ead-4e3d-bd0e-4e7c9b583c68", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92c90f5-5b34-4497-83bc-d476cbe741df", "created": "2026-10-09T15:13:10.398523Z", "modified": "2026-10-09T15:13:10.398523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0332a94883a7dfc09ac83e116e87547c71eed80bf05c0f5f58751374fa2bc35c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.398523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--630a9e65-fa8d-42f4-a657-af81a72fdeeb", "created": "2026-10-09T15:13:10.399113Z", "modified": "2026-10-09T15:13:10.399113Z", "relationship_type": "indicates", "source_ref": "indicator--d92c90f5-5b34-4497-83bc-d476cbe741df", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8a373e-fa9a-4ffb-9967-39aa191ab5f9", "created": "2026-10-09T15:13:10.399233Z", "modified": "2026-10-09T15:13:10.399233Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0214d5c4e90196540b51d5cbf4cbfeece955b5c8c79e62dc80e8b663dafa4daa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.399233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--524844bd-19b7-4da0-9faa-8c2037b33399", "created": "2026-10-09T15:13:10.399828Z", "modified": "2026-10-09T15:13:10.399828Z", "relationship_type": "indicates", "source_ref": "indicator--5c8a373e-fa9a-4ffb-9967-39aa191ab5f9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb012eb5-b37a-4eda-9c99-cf36a3d036ec", "created": "2026-10-09T15:13:10.399947Z", "modified": "2026-10-09T15:13:10.399947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='303c176194263051c4fd10c646cd5dc154474fd294d93530343f39add00c3c3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.399947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d8cc067-a87c-4df3-b14b-db9e49eb9026", "created": "2026-10-09T15:13:10.400537Z", "modified": "2026-10-09T15:13:10.400537Z", "relationship_type": "indicates", "source_ref": "indicator--bb012eb5-b37a-4eda-9c99-cf36a3d036ec", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9c5cab-3c80-45ba-aad2-6484b78687d5", "created": "2026-10-09T15:13:10.400657Z", "modified": "2026-10-09T15:13:10.400657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09359f6b5b02e1265d455f24eb231346ac0efc9706aa76e7eafff8b505051d55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.400657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23213d97-a9a6-4c01-836d-7a987c7a4009", "created": "2026-10-09T15:13:10.401368Z", "modified": "2026-10-09T15:13:10.401368Z", "relationship_type": "indicates", "source_ref": "indicator--3a9c5cab-3c80-45ba-aad2-6484b78687d5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600398d7-0f02-41b7-8364-f4910d629b4b", "created": "2026-10-09T15:13:10.401494Z", "modified": "2026-10-09T15:13:10.401494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9eb502f6e2f4ae428996d2b5c10b30185df5e0733b8df07e6b8076f03674ef1f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.401494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f357441-1652-47f9-ae03-a69c74dda047", "created": "2026-10-09T15:13:10.402078Z", "modified": "2026-10-09T15:13:10.402078Z", "relationship_type": "indicates", "source_ref": "indicator--600398d7-0f02-41b7-8364-f4910d629b4b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e274aa-784e-4de4-ba6d-75f072a38ad8", "created": "2026-10-09T15:13:10.4022Z", "modified": "2026-10-09T15:13:10.4022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b39cb99bb65c871f3f757b1e2c2e1bff2809315f66922860480fa3f7c21e7334']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.4022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3456d56-14b0-4983-8acf-3f842699877d", "created": "2026-10-09T15:13:10.402795Z", "modified": "2026-10-09T15:13:10.402795Z", "relationship_type": "indicates", "source_ref": "indicator--52e274aa-784e-4de4-ba6d-75f072a38ad8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46484379-777f-4386-91ba-d17f876c2db0", "created": "2026-10-09T15:13:10.402917Z", "modified": "2026-10-09T15:13:10.402917Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3789a93366736cd64a9e39b21d132835cb8c19294c8fd38718771c7a24934768']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.402917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db3a09af-d6f2-4039-afa1-47a7abe5dce5", "created": "2026-10-09T15:13:10.403509Z", "modified": "2026-10-09T15:13:10.403509Z", "relationship_type": "indicates", "source_ref": "indicator--46484379-777f-4386-91ba-d17f876c2db0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58329bb-7796-4f9a-958c-fbb0cd96489c", "created": "2026-10-09T15:13:10.403631Z", "modified": "2026-10-09T15:13:10.403631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c2e365d6dd85c4ed51c36f54dc7d2fb391d1e6c7586f15ca3e1dcccf61cc499']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.403631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--203dd360-d844-4cf1-b8ab-cd71874cd23f", "created": "2026-10-09T15:13:10.404213Z", "modified": "2026-10-09T15:13:10.404213Z", "relationship_type": "indicates", "source_ref": "indicator--f58329bb-7796-4f9a-958c-fbb0cd96489c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a330669d-2bd1-4789-8ca5-751cafaa6884", "created": "2026-10-09T15:13:10.404345Z", "modified": "2026-10-09T15:13:10.404345Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e4354851a8f1d5d2c083a9263eb0ad71896f7800bdcfea74dfd4d8a458a2e23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.404345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca3dd9af-7b20-4f73-9809-ae38904b7e5d", "created": "2026-10-09T15:13:10.404924Z", "modified": "2026-10-09T15:13:10.404924Z", "relationship_type": "indicates", "source_ref": "indicator--a330669d-2bd1-4789-8ca5-751cafaa6884", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70a9836-de07-4626-8b7f-65d75e4f63c7", "created": "2026-10-09T15:13:10.405046Z", "modified": "2026-10-09T15:13:10.405046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6938f4eb11b9d33b6edf1a720a23575662658c492cdf44b94b2cae70507e77a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.405046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea59e723-fe8b-4721-89b2-ebc4c3a61e32", "created": "2026-10-09T15:13:10.405636Z", "modified": "2026-10-09T15:13:10.405636Z", "relationship_type": "indicates", "source_ref": "indicator--a70a9836-de07-4626-8b7f-65d75e4f63c7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5563bf69-21f3-4e6e-8dc6-e83ea645480d", "created": "2026-10-09T15:13:10.405762Z", "modified": "2026-10-09T15:13:10.405762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d94dc59ee70e7be0ef363e9719761c0635df8d30af82a9465f00093b0f8d64d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.405762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0348e6dc-2899-4442-8e94-f2927fa2ee71", "created": "2026-10-09T15:13:10.406367Z", "modified": "2026-10-09T15:13:10.406367Z", "relationship_type": "indicates", "source_ref": "indicator--5563bf69-21f3-4e6e-8dc6-e83ea645480d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e3ab46-f6de-430a-a6fd-a059d4b2bf9e", "created": "2026-10-09T15:13:10.406493Z", "modified": "2026-10-09T15:13:10.406493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='888f9787cd5800e8558a2601467f344bf99cb62708ca93b665a54922ef617b1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.406493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13e52c1e-548e-4ade-b5bb-e3b4687a6358", "created": "2026-10-09T15:13:10.407074Z", "modified": "2026-10-09T15:13:10.407074Z", "relationship_type": "indicates", "source_ref": "indicator--f5e3ab46-f6de-430a-a6fd-a059d4b2bf9e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a49084a-67db-442e-949e-a5f9af55fe3a", "created": "2026-10-09T15:13:10.407195Z", "modified": "2026-10-09T15:13:10.407195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9df64068aebebfba3359e2241d3ecbcf857c4e5c072eba9771fffc9745df1fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.407195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c433cb0e-b573-428e-ac02-404c8d1c71e4", "created": "2026-10-09T15:13:10.407892Z", "modified": "2026-10-09T15:13:10.407892Z", "relationship_type": "indicates", "source_ref": "indicator--9a49084a-67db-442e-949e-a5f9af55fe3a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce45969f-7426-44b0-858f-336c22f06326", "created": "2026-10-09T15:13:10.408014Z", "modified": "2026-10-09T15:13:10.408014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f390cae3d742be8db686dbbb095e3bf41bd212992d3370fd5345735f95ce3376']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.408014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d367730-2fe0-4335-b21a-42e20108a961", "created": "2026-10-09T15:13:10.408604Z", "modified": "2026-10-09T15:13:10.408604Z", "relationship_type": "indicates", "source_ref": "indicator--ce45969f-7426-44b0-858f-336c22f06326", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd12a68d-89d6-45a3-bbb0-700459615f03", "created": "2026-10-09T15:13:10.408729Z", "modified": "2026-10-09T15:13:10.408729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a7cfc132c31e15de202a6386f4ef61187a31ffce31d38a7fff8b10a71ad7d92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.408729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf2eb495-4834-4de3-9ec0-0ce6f55844bc", "created": "2026-10-09T15:13:10.409316Z", "modified": "2026-10-09T15:13:10.409316Z", "relationship_type": "indicates", "source_ref": "indicator--cd12a68d-89d6-45a3-bbb0-700459615f03", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d171d98-09da-403a-8cb7-2b8d0a7cc1f9", "created": "2026-10-09T15:13:10.409437Z", "modified": "2026-10-09T15:13:10.409437Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb3c6ff48850500fb4ddcac25f93f2ed3591c5bed41ae41221d9cd2f56d40cb3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.409437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9cadffe-e966-471d-b37a-d383eaa84d29", "created": "2026-10-09T15:13:10.410015Z", "modified": "2026-10-09T15:13:10.410015Z", "relationship_type": "indicates", "source_ref": "indicator--0d171d98-09da-403a-8cb7-2b8d0a7cc1f9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e9e7ee-c86d-4b0a-a1d9-e7487bee6a36", "created": "2026-10-09T15:13:10.410136Z", "modified": "2026-10-09T15:13:10.410136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4cf3c62d3ffc4b765b2ac35c9bd23d13cbaf126c6052cb1991c27a152c1cb02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.410136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e8df317-dd3a-47bc-b5a6-e5bb1d7c6853", "created": "2026-10-09T15:13:10.410731Z", "modified": "2026-10-09T15:13:10.410731Z", "relationship_type": "indicates", "source_ref": "indicator--44e9e7ee-c86d-4b0a-a1d9-e7487bee6a36", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc38179-520b-42e5-a791-12f69c8f8e70", "created": "2026-10-09T15:13:10.410853Z", "modified": "2026-10-09T15:13:10.410853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e2384f3d31a1e7c1de6981c12f161c394f847d5f4aa30f18d57303858486b62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.410853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cab0bf4a-bcd1-45ac-9680-6cd7823027b0", "created": "2026-10-09T15:13:10.411444Z", "modified": "2026-10-09T15:13:10.411444Z", "relationship_type": "indicates", "source_ref": "indicator--bbc38179-520b-42e5-a791-12f69c8f8e70", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ffbbb1-7bf1-4ae1-bd9d-94abdf7fa676", "created": "2026-10-09T15:13:10.411565Z", "modified": "2026-10-09T15:13:10.411565Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='88997c10e8a844e834bf0febff9614ba63f8802d40e863c40fba760b7340524f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.411565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eaf6747-1b12-4a30-96bb-e48a8adc2a50", "created": "2026-10-09T15:13:10.412144Z", "modified": "2026-10-09T15:13:10.412144Z", "relationship_type": "indicates", "source_ref": "indicator--32ffbbb1-7bf1-4ae1-bd9d-94abdf7fa676", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4111338c-53b9-4a8c-82dd-54e5f6c6f53b", "created": "2026-10-09T15:13:10.4123Z", "modified": "2026-10-09T15:13:10.4123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fefb027306a82a227d1d33675ec33f0458769ae24a38f3a22781219035bc18db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.4123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d445aa27-bfb1-4fd2-9c5c-08487b74cddc", "created": "2026-10-09T15:13:10.4129Z", "modified": "2026-10-09T15:13:10.4129Z", "relationship_type": "indicates", "source_ref": "indicator--4111338c-53b9-4a8c-82dd-54e5f6c6f53b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290b01e8-c303-4ff4-8c8b-dcead499e78b", "created": "2026-10-09T15:13:10.41302Z", "modified": "2026-10-09T15:13:10.41302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff9dd3707cb58fdda6049a6678eef56cb47595616dda38b2c5b3c24c49b16147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.41302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--189e50cc-9909-446b-a877-c024b0ab1fd5", "created": "2026-10-09T15:13:10.413718Z", "modified": "2026-10-09T15:13:10.413718Z", "relationship_type": "indicates", "source_ref": "indicator--290b01e8-c303-4ff4-8c8b-dcead499e78b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8334a9-5d63-487f-b7ff-ac639e2d0615", "created": "2026-10-09T15:13:10.413845Z", "modified": "2026-10-09T15:13:10.413845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f1d64d8b0cbc30930b182f350d27ed1becd6a7a0473a7d86283bb4da3da143b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.413845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fb9d174-ab2f-4c3c-ab58-fd4076fa5e2c", "created": "2026-10-09T15:13:10.414443Z", "modified": "2026-10-09T15:13:10.414443Z", "relationship_type": "indicates", "source_ref": "indicator--1f8334a9-5d63-487f-b7ff-ac639e2d0615", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be271ef-d1f0-4dab-aaea-0bb2b5417e27", "created": "2026-10-09T15:13:10.414569Z", "modified": "2026-10-09T15:13:10.414569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='146684cebab862629bc9c5714001fef50ad9525deb7bab9b8afb40e6cbc130a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.414569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--438f94a5-4289-47b9-94ec-0f7100f5c31f", "created": "2026-10-09T15:13:10.415149Z", "modified": "2026-10-09T15:13:10.415149Z", "relationship_type": "indicates", "source_ref": "indicator--4be271ef-d1f0-4dab-aaea-0bb2b5417e27", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25d87dd-8f86-41dc-8bb2-eb1b13b648e4", "created": "2026-10-09T15:13:10.415288Z", "modified": "2026-10-09T15:13:10.415288Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c33b687048e9956deccdf126c60d1ecdfae11da0f41bac012960cea5f87a1017']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.415288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ea06267-155a-43d5-80e0-3afc0514ebcc", "created": "2026-10-09T15:13:10.415868Z", "modified": "2026-10-09T15:13:10.415868Z", "relationship_type": "indicates", "source_ref": "indicator--b25d87dd-8f86-41dc-8bb2-eb1b13b648e4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5909323c-44ab-4280-bd82-99fb2d41367f", "created": "2026-10-09T15:13:10.415992Z", "modified": "2026-10-09T15:13:10.415992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99a71fb4c0293e3fd35a4ab3fd4ba31ccdd818642fd8a6d3b88c3b6c3bd9d09c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.415992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb52d334-0cba-4fb1-8c97-f9025ff8637b", "created": "2026-10-09T15:13:10.416585Z", "modified": "2026-10-09T15:13:10.416585Z", "relationship_type": "indicates", "source_ref": "indicator--5909323c-44ab-4280-bd82-99fb2d41367f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e19d6a-7b81-4d35-a205-5f8aaa931a90", "created": "2026-10-09T15:13:10.416713Z", "modified": "2026-10-09T15:13:10.416713Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef70e55216a3a9bd3782e02a3d7fe9d97a52e7caf62ffa7b49a3b0c50b6ce1d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.416713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d22ee08-4d93-44a2-b02b-b25ba9faaace", "created": "2026-10-09T15:13:10.417306Z", "modified": "2026-10-09T15:13:10.417306Z", "relationship_type": "indicates", "source_ref": "indicator--b5e19d6a-7b81-4d35-a205-5f8aaa931a90", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95b4deb-20a5-4b01-bf5f-6b38d130096a", "created": "2026-10-09T15:13:10.417431Z", "modified": "2026-10-09T15:13:10.417431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd22e41762bb73dfba7b781457d4d4351984d7e0f451e7e10f6dc23745f67537']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.417431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21da3760-5580-47cd-a635-a82f58e48a06", "created": "2026-10-09T15:13:10.418026Z", "modified": "2026-10-09T15:13:10.418026Z", "relationship_type": "indicates", "source_ref": "indicator--c95b4deb-20a5-4b01-bf5f-6b38d130096a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11437e99-1254-4874-940e-2cf43ab63139", "created": "2026-10-09T15:13:10.418146Z", "modified": "2026-10-09T15:13:10.418146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b7e67bc048811ec30efcdf7fef67c4f16799185ebd1e4ce2d9bcc4381baed17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.418146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5da80ba0-b65f-43a1-a870-ce640152672f", "created": "2026-10-09T15:13:10.418751Z", "modified": "2026-10-09T15:13:10.418751Z", "relationship_type": "indicates", "source_ref": "indicator--11437e99-1254-4874-940e-2cf43ab63139", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b168371-88ad-4bac-8608-00502fc62294", "created": "2026-10-09T15:13:10.418871Z", "modified": "2026-10-09T15:13:10.418871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7f907c58ee650acccb28feadeec573004333865973f695038e640e836e1566f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.418871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbafe452-7b1e-401e-b13c-7d3e65d59b44", "created": "2026-10-09T15:13:10.419479Z", "modified": "2026-10-09T15:13:10.419479Z", "relationship_type": "indicates", "source_ref": "indicator--7b168371-88ad-4bac-8608-00502fc62294", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e76647-c7c0-40a7-a60b-5392002d55bf", "created": "2026-10-09T15:13:10.419603Z", "modified": "2026-10-09T15:13:10.419603Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36c9d7149af2dadfacaa0c34b7b5992dbe6aaa05f008d5f3536e14590a903cbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.419603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83a10a67-a5e4-45af-ab40-6b85b4b90e78", "created": "2026-10-09T15:13:10.420317Z", "modified": "2026-10-09T15:13:10.420317Z", "relationship_type": "indicates", "source_ref": "indicator--f2e76647-c7c0-40a7-a60b-5392002d55bf", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4945ae-a022-4cc7-85d0-6cd3af3fcf51", "created": "2026-10-09T15:13:10.420449Z", "modified": "2026-10-09T15:13:10.420449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d08adb83e47cffb0aa54e11937eb020d9b7afff068c7d46600acaef0560b102d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.420449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--544cb47c-4272-4a95-bcbd-bda12c76c52a", "created": "2026-10-09T15:13:10.421036Z", "modified": "2026-10-09T15:13:10.421036Z", "relationship_type": "indicates", "source_ref": "indicator--6e4945ae-a022-4cc7-85d0-6cd3af3fcf51", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f06d82b-e4c7-4194-93ad-73f125a58cd9", "created": "2026-10-09T15:13:10.421159Z", "modified": "2026-10-09T15:13:10.421159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1ce7584aa4b56164853d0d93ce377ada7e55f0a87487eb7cad4978d2fd2a32b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.421159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7ca9797-f759-4c10-a77b-b4dbb7c2be92", "created": "2026-10-09T15:13:10.421751Z", "modified": "2026-10-09T15:13:10.421751Z", "relationship_type": "indicates", "source_ref": "indicator--8f06d82b-e4c7-4194-93ad-73f125a58cd9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ad617f-6dcd-41fc-8dec-2717459b1310", "created": "2026-10-09T15:13:10.421879Z", "modified": "2026-10-09T15:13:10.421879Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c94c6c7602208bd54bb3ac379799bdb742d25cfc434ac2d395945509d7e376e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.421879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--374d3b94-79ab-4105-bb66-53a430f349cb", "created": "2026-10-09T15:13:10.422471Z", "modified": "2026-10-09T15:13:10.422471Z", "relationship_type": "indicates", "source_ref": "indicator--69ad617f-6dcd-41fc-8dec-2717459b1310", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcde2bd-8a98-46b0-81d4-f12992f9ce38", "created": "2026-10-09T15:13:10.422593Z", "modified": "2026-10-09T15:13:10.422593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fb2a9ffe8ce6638b37deece47306004057b4f579c3acc1e52831f474205de75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.422593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e10691bd-43d9-47d8-8d50-d15e267c76e7", "created": "2026-10-09T15:13:10.423182Z", "modified": "2026-10-09T15:13:10.423182Z", "relationship_type": "indicates", "source_ref": "indicator--7dcde2bd-8a98-46b0-81d4-f12992f9ce38", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487aa040-9498-4c59-8b75-68be7d9c9134", "created": "2026-10-09T15:13:10.423338Z", "modified": "2026-10-09T15:13:10.423338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='182121c89d9964f7c006f1033baeac832c84494f3351705379231baa3e790af0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.423338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6fcdf00-b22a-41e6-b94c-e5454f7f956a", "created": "2026-10-09T15:13:10.423936Z", "modified": "2026-10-09T15:13:10.423936Z", "relationship_type": "indicates", "source_ref": "indicator--487aa040-9498-4c59-8b75-68be7d9c9134", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b5519a-2084-4c1c-91a3-9d377ff31da2", "created": "2026-10-09T15:13:10.424058Z", "modified": "2026-10-09T15:13:10.424058Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f331bced99ab2c557d9e0ed88c650651926768fa0eec894273991f78352bc9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.424058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fc567de-e47d-41d4-b67a-0b1811255d9e", "created": "2026-10-09T15:13:10.424679Z", "modified": "2026-10-09T15:13:10.424679Z", "relationship_type": "indicates", "source_ref": "indicator--d5b5519a-2084-4c1c-91a3-9d377ff31da2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13924cfa-f16e-4252-8d03-813e22d37489", "created": "2026-10-09T15:13:10.424811Z", "modified": "2026-10-09T15:13:10.424811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fab561bbc37225394bed700a591bb5a031256dc2407877069c33a77d251639db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.424811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9012ce4-c58d-4e18-91da-8dd8de4f5af3", "created": "2026-10-09T15:13:10.425418Z", "modified": "2026-10-09T15:13:10.425418Z", "relationship_type": "indicates", "source_ref": "indicator--13924cfa-f16e-4252-8d03-813e22d37489", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff858017-fae4-47e9-bbbf-a7b1bfe2c5a5", "created": "2026-10-09T15:13:10.425545Z", "modified": "2026-10-09T15:13:10.425545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8758c685f4b96377b74d71bc3049498517d55fa1b059a516125162fbc1edd18b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.425545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cb620b8-5902-41cb-ab12-bd0bbab4ee64", "created": "2026-10-09T15:13:10.42613Z", "modified": "2026-10-09T15:13:10.42613Z", "relationship_type": "indicates", "source_ref": "indicator--ff858017-fae4-47e9-bbbf-a7b1bfe2c5a5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e758403-3c9a-4f59-8ff8-5337fb8e3f84", "created": "2026-10-09T15:13:10.426258Z", "modified": "2026-10-09T15:13:10.426258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04dd2e4d0011e42aee32f3dcfa0cc41e3ac03f845f3948aad1c590739960cfab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.426258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd374daf-2ef8-4921-92d8-0172a3208292", "created": "2026-10-09T15:13:10.426966Z", "modified": "2026-10-09T15:13:10.426966Z", "relationship_type": "indicates", "source_ref": "indicator--0e758403-3c9a-4f59-8ff8-5337fb8e3f84", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7423d73f-2ef0-48c5-acca-1002856c9e14", "created": "2026-10-09T15:13:10.42709Z", "modified": "2026-10-09T15:13:10.42709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55254d5e91fd4c3ae69adc269c5723f864ca94bb8c346cce663d2ff583e47598']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.42709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af117111-f052-4841-aedd-abd2d8634b98", "created": "2026-10-09T15:13:10.427684Z", "modified": "2026-10-09T15:13:10.427684Z", "relationship_type": "indicates", "source_ref": "indicator--7423d73f-2ef0-48c5-acca-1002856c9e14", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be30a07-a1e1-4c63-96c4-64c021c3a7df", "created": "2026-10-09T15:13:10.427812Z", "modified": "2026-10-09T15:13:10.427812Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa6f421c9af6f27f683923f1b3d7cf72dabaab2b68aa84fcc511aaaeab4dfda4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.427812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--644da9b9-7bdb-468f-a7be-a271389c1bb9", "created": "2026-10-09T15:13:10.428406Z", "modified": "2026-10-09T15:13:10.428406Z", "relationship_type": "indicates", "source_ref": "indicator--3be30a07-a1e1-4c63-96c4-64c021c3a7df", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8062927-e7c6-417f-856f-25dfc654ccbb", "created": "2026-10-09T15:13:10.428528Z", "modified": "2026-10-09T15:13:10.428528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d7e92f04e032d07e446b5146fdb6719ba571b954f89ee28425e82d277f76132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.428528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67dc19db-73f3-4aff-9013-c0b228fe2e02", "created": "2026-10-09T15:13:10.429107Z", "modified": "2026-10-09T15:13:10.429107Z", "relationship_type": "indicates", "source_ref": "indicator--b8062927-e7c6-417f-856f-25dfc654ccbb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8747cf15-1c24-48bd-9440-f0e40348c416", "created": "2026-10-09T15:13:10.429225Z", "modified": "2026-10-09T15:13:10.429225Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23cb760d891e09ad1877cc12282e3ca095fc70b66709dfe68c4c5429dd0ab46d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.429225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91aea295-788c-4ccc-b861-3d9c8535768e", "created": "2026-10-09T15:13:10.429823Z", "modified": "2026-10-09T15:13:10.429823Z", "relationship_type": "indicates", "source_ref": "indicator--8747cf15-1c24-48bd-9440-f0e40348c416", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4d8dbe-62c0-4c8e-9d69-4b6414c7796b", "created": "2026-10-09T15:13:10.429945Z", "modified": "2026-10-09T15:13:10.429945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d3dcf99a83ec253a07e02ead39675446a20f66403b241d7a7aff24a65a7af8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.429945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4af0c26-d634-40da-b3b6-df33088df4d7", "created": "2026-10-09T15:13:10.43054Z", "modified": "2026-10-09T15:13:10.43054Z", "relationship_type": "indicates", "source_ref": "indicator--bf4d8dbe-62c0-4c8e-9d69-4b6414c7796b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5445846f-92ac-431b-8dee-8581fffe8f78", "created": "2026-10-09T15:13:10.430663Z", "modified": "2026-10-09T15:13:10.430663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbd776c7f0fffba0b7fc308c19ae5e135e0480dd68e8b1678fa317653bade712']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.430663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9f829da-6ef4-45c2-88a4-1060341005fa", "created": "2026-10-09T15:13:10.431242Z", "modified": "2026-10-09T15:13:10.431242Z", "relationship_type": "indicates", "source_ref": "indicator--5445846f-92ac-431b-8dee-8581fffe8f78", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa665b9-dc8b-4bc1-bd6e-1db50780ac54", "created": "2026-10-09T15:13:10.431383Z", "modified": "2026-10-09T15:13:10.431383Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9f948b73717ded8700c77bd775a375fd7db6f5a133108589399d3c1ec1becf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.431383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cafc213-4593-4c2c-98a1-95555af263aa", "created": "2026-10-09T15:13:10.431962Z", "modified": "2026-10-09T15:13:10.431962Z", "relationship_type": "indicates", "source_ref": "indicator--6aa665b9-dc8b-4bc1-bd6e-1db50780ac54", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a09b110-c09b-4796-8a74-7b29b3daaa78", "created": "2026-10-09T15:13:10.43208Z", "modified": "2026-10-09T15:13:10.43208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eeb8cd56ac99ce268e4c145af20f30fd7b955ed1a67e1bd97ecfd6a8961c937a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.43208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eac20044-22c7-4dbb-a097-92f20ade4608", "created": "2026-10-09T15:13:10.432797Z", "modified": "2026-10-09T15:13:10.432797Z", "relationship_type": "indicates", "source_ref": "indicator--9a09b110-c09b-4796-8a74-7b29b3daaa78", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8acba73-44d4-4b9d-b3eb-2d2992d73cff", "created": "2026-10-09T15:13:10.432933Z", "modified": "2026-10-09T15:13:10.432933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c341e34f9c38afe6db3310caa8bcce72361193c45b411e59d992c6d395dd2ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.432933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--907db4a2-74f3-444d-be8e-cbf7f75607c5", "created": "2026-10-09T15:13:10.433541Z", "modified": "2026-10-09T15:13:10.433541Z", "relationship_type": "indicates", "source_ref": "indicator--e8acba73-44d4-4b9d-b3eb-2d2992d73cff", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84a7c5e-0c2f-4fb6-a32f-75b28492855c", "created": "2026-10-09T15:13:10.433669Z", "modified": "2026-10-09T15:13:10.433669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c60e35243c48ecbb1e3f0125b919939cd9d20757e1fd59b876fc93185e31f36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.433669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec2f7b1d-5ef3-4f95-ad55-c2943f3011f4", "created": "2026-10-09T15:13:10.434249Z", "modified": "2026-10-09T15:13:10.434249Z", "relationship_type": "indicates", "source_ref": "indicator--d84a7c5e-0c2f-4fb6-a32f-75b28492855c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857c04c3-f589-4780-9928-a50c6b2cce44", "created": "2026-10-09T15:13:10.434387Z", "modified": "2026-10-09T15:13:10.434387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2d207a6a069119ea3456f5510d660279d737a35e559af68d0ce384484507daf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.434387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4de66ba1-f99c-4250-9d78-eb2f537f8466", "created": "2026-10-09T15:13:10.434973Z", "modified": "2026-10-09T15:13:10.434973Z", "relationship_type": "indicates", "source_ref": "indicator--857c04c3-f589-4780-9928-a50c6b2cce44", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc3dd32-3469-4574-99ee-44418b917f9d", "created": "2026-10-09T15:13:10.435098Z", "modified": "2026-10-09T15:13:10.435098Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='561291c0484cf0058ecf5b0df0fd853fe8056217c788cc785ae304e41b2a1224']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.435098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d43d984-9867-4950-94e4-257b4dcb2eb4", "created": "2026-10-09T15:13:10.435692Z", "modified": "2026-10-09T15:13:10.435692Z", "relationship_type": "indicates", "source_ref": "indicator--adc3dd32-3469-4574-99ee-44418b917f9d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae9c312-972b-42bc-82c7-117dd30515f4", "created": "2026-10-09T15:13:10.435817Z", "modified": "2026-10-09T15:13:10.435817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d67c9d81f6ee7d343cdae10a836f3e8b80790def50c0d11966f66e069a50205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.435817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b8285c0-616a-4fc0-b9ce-51a817aac364", "created": "2026-10-09T15:13:10.436402Z", "modified": "2026-10-09T15:13:10.436402Z", "relationship_type": "indicates", "source_ref": "indicator--cae9c312-972b-42bc-82c7-117dd30515f4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b451ea9-a1c7-41a6-887e-eb9587f4554e", "created": "2026-10-09T15:13:10.436523Z", "modified": "2026-10-09T15:13:10.436523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='408524777b2f32cf95ee37494383a587adc1007de008eb12946d1e4d1a3ff9bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.436523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6deb17b9-7ef4-4d47-8389-d516944bfbe2", "created": "2026-10-09T15:13:10.43711Z", "modified": "2026-10-09T15:13:10.43711Z", "relationship_type": "indicates", "source_ref": "indicator--3b451ea9-a1c7-41a6-887e-eb9587f4554e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d263540-5c78-4617-aaff-f7947ad3ef97", "created": "2026-10-09T15:13:10.43723Z", "modified": "2026-10-09T15:13:10.43723Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96e1d8a20a9efb64e492a02cdabd3fc967237c12418c1e0441271be2e2307c36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.43723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4408f47-18e5-4328-b289-bce922f8fb25", "created": "2026-10-09T15:13:10.437826Z", "modified": "2026-10-09T15:13:10.437826Z", "relationship_type": "indicates", "source_ref": "indicator--9d263540-5c78-4617-aaff-f7947ad3ef97", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84be32da-1d03-47ee-93eb-6a24a7764f88", "created": "2026-10-09T15:13:10.437946Z", "modified": "2026-10-09T15:13:10.437946Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5efd374cfa16e22b98dae9dcb7271f2fa6ef7ea2dd9bfc4aca69c63316598b67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.437946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f68f21f-0b70-4de2-b879-3fb18d9f1a61", "created": "2026-10-09T15:13:10.438563Z", "modified": "2026-10-09T15:13:10.438563Z", "relationship_type": "indicates", "source_ref": "indicator--84be32da-1d03-47ee-93eb-6a24a7764f88", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8750c8-e016-4798-80a3-3a1fde4e2b7f", "created": "2026-10-09T15:13:10.438688Z", "modified": "2026-10-09T15:13:10.438688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e29098919f23b41b95bb363224d7cc5bc388571fa6ba069262f7e858a29d4127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.438688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bc19c09-711b-4262-b1d2-bac7868ff580", "created": "2026-10-09T15:13:10.439388Z", "modified": "2026-10-09T15:13:10.439388Z", "relationship_type": "indicates", "source_ref": "indicator--0c8750c8-e016-4798-80a3-3a1fde4e2b7f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f568a108-f69b-4006-8289-d39598e96fef", "created": "2026-10-09T15:13:10.439513Z", "modified": "2026-10-09T15:13:10.439513Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed1d5029db8345fda2abee2056fed8659324578f6be4b4662c108ebf9f51e6e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.439513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c700fc40-30ec-4d66-9a01-f1731b8e2ce9", "created": "2026-10-09T15:13:10.440093Z", "modified": "2026-10-09T15:13:10.440093Z", "relationship_type": "indicates", "source_ref": "indicator--f568a108-f69b-4006-8289-d39598e96fef", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094644da-29f0-4b73-bac3-be61521e1804", "created": "2026-10-09T15:13:10.440211Z", "modified": "2026-10-09T15:13:10.440211Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae34ef4c4ebcc0c9ac71d3849890fa4b5029f5180b90292becd19a7e24b20df5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.440211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--787799b0-b507-472f-9334-01bd3af1a1f2", "created": "2026-10-09T15:13:10.440812Z", "modified": "2026-10-09T15:13:10.440812Z", "relationship_type": "indicates", "source_ref": "indicator--094644da-29f0-4b73-bac3-be61521e1804", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011fb3e1-8e31-4382-829e-3b9def79cac9", "created": "2026-10-09T15:13:10.440936Z", "modified": "2026-10-09T15:13:10.440936Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0b2bede8b38c50c90b5978f1156eec32cfe2bfa7b488d3fedda5d34114e2bd3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.440936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f1d2e37-4f7f-4188-a197-b1c2b092bb80", "created": "2026-10-09T15:13:10.441541Z", "modified": "2026-10-09T15:13:10.441541Z", "relationship_type": "indicates", "source_ref": "indicator--011fb3e1-8e31-4382-829e-3b9def79cac9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5074fc-9ff9-4262-8ecb-5aca27d61a84", "created": "2026-10-09T15:13:10.441663Z", "modified": "2026-10-09T15:13:10.441663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c888c1d8c326aead99264bff007477199acd67dabd2d50a45d0f2e75fee99ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.441663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e94efa9d-5dc9-4ce1-bb1a-c387661c6e63", "created": "2026-10-09T15:13:10.442243Z", "modified": "2026-10-09T15:13:10.442243Z", "relationship_type": "indicates", "source_ref": "indicator--7e5074fc-9ff9-4262-8ecb-5aca27d61a84", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a5f7ad-1b3e-4b15-b1c3-f27ea3123310", "created": "2026-10-09T15:13:10.442377Z", "modified": "2026-10-09T15:13:10.442377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93fdc1971e3527e41f98eefbec17db75d462907b1c04d69fbb7e1073c476ce51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.442377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcd1365a-b416-4723-a86b-ca51ab610d3b", "created": "2026-10-09T15:13:10.442957Z", "modified": "2026-10-09T15:13:10.442957Z", "relationship_type": "indicates", "source_ref": "indicator--b9a5f7ad-1b3e-4b15-b1c3-f27ea3123310", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc0f6c2-4b29-44f7-bef7-456d465e5e76", "created": "2026-10-09T15:13:10.443077Z", "modified": "2026-10-09T15:13:10.443077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab938bcfffde58bd145e6bb1e265c9ea1f81db35d4376839f074c4551059bd2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.443077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e0b1850-fe91-4160-bb9a-e09efa6d8139", "created": "2026-10-09T15:13:10.443672Z", "modified": "2026-10-09T15:13:10.443672Z", "relationship_type": "indicates", "source_ref": "indicator--cbc0f6c2-4b29-44f7-bef7-456d465e5e76", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53391a42-4b68-49f5-aa44-524a1f6363f2", "created": "2026-10-09T15:13:10.4438Z", "modified": "2026-10-09T15:13:10.4438Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8ae8875dce34565f229e521c2f1cd02d272342d0dc4dbafbd9cd5a1b5caf7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.4438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--302cdc30-410f-4e08-bfda-e2ec1baaab48", "created": "2026-10-09T15:13:10.444396Z", "modified": "2026-10-09T15:13:10.444396Z", "relationship_type": "indicates", "source_ref": "indicator--53391a42-4b68-49f5-aa44-524a1f6363f2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d73a342-d4b4-48f0-9384-02b2271ca089", "created": "2026-10-09T15:13:10.444525Z", "modified": "2026-10-09T15:13:10.444525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e86acd9f88cdd1cfb985867d89bf9ae60966561fc8e8d4dbd5feed09a5b03edf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.444525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e76608ed-4896-442d-a557-6ec520bbd728", "created": "2026-10-09T15:13:10.44511Z", "modified": "2026-10-09T15:13:10.44511Z", "relationship_type": "indicates", "source_ref": "indicator--1d73a342-d4b4-48f0-9384-02b2271ca089", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31324e6-badb-4939-a6dd-568d04c18d3a", "created": "2026-10-09T15:13:10.445231Z", "modified": "2026-10-09T15:13:10.445231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5316d09ab58704857dbf4a94c928edb9880cba704be929c9e1040e0e0d76a0dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.445231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96ddbe3c-5f93-4d2b-addc-a41377c56a27", "created": "2026-10-09T15:13:10.445928Z", "modified": "2026-10-09T15:13:10.445928Z", "relationship_type": "indicates", "source_ref": "indicator--c31324e6-badb-4939-a6dd-568d04c18d3a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345fb222-a7fd-4e5a-8873-1e4ba65cfd8c", "created": "2026-10-09T15:13:10.446052Z", "modified": "2026-10-09T15:13:10.446052Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1496e08ba26522563eb1529ba213ad2de6c4e25ce35cc5e851efbcc36c2d223f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.446052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65d6fc91-48b9-4502-a60c-04d7c576f881", "created": "2026-10-09T15:13:10.446659Z", "modified": "2026-10-09T15:13:10.446659Z", "relationship_type": "indicates", "source_ref": "indicator--345fb222-a7fd-4e5a-8873-1e4ba65cfd8c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17039e5-7d8c-46fb-b6d2-a469df1dc4d6", "created": "2026-10-09T15:13:10.446784Z", "modified": "2026-10-09T15:13:10.446784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9cdc9649966c22d20412c3ff0e42f2b781b1f723289867b2dc4e5d9232430bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.446784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8da02bb1-afe4-4d36-af7c-f6013bc18c3d", "created": "2026-10-09T15:13:10.447381Z", "modified": "2026-10-09T15:13:10.447381Z", "relationship_type": "indicates", "source_ref": "indicator--b17039e5-7d8c-46fb-b6d2-a469df1dc4d6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab34335-0732-43bf-a56d-9be76108b57d", "created": "2026-10-09T15:13:10.447504Z", "modified": "2026-10-09T15:13:10.447504Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d632f671ba2e4a596e5b439aaa2178c394474695633b1a0fb99ab9238c0866f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.447504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a23c484-faf5-49c8-9e40-4bfb759387a1", "created": "2026-10-09T15:13:10.448093Z", "modified": "2026-10-09T15:13:10.448093Z", "relationship_type": "indicates", "source_ref": "indicator--9ab34335-0732-43bf-a56d-9be76108b57d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50785942-3bee-4ced-95b5-0602f2b5356e", "created": "2026-10-09T15:13:10.448217Z", "modified": "2026-10-09T15:13:10.448217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94e18a9df302aa032db37fc26035c86d830425f54c14cf7439112827fb27211a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.448217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed0d684b-3919-4fa2-9383-20fddd134efc", "created": "2026-10-09T15:13:10.44881Z", "modified": "2026-10-09T15:13:10.44881Z", "relationship_type": "indicates", "source_ref": "indicator--50785942-3bee-4ced-95b5-0602f2b5356e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c21d11-dff7-4423-b0e8-68daf82e93a1", "created": "2026-10-09T15:13:10.448929Z", "modified": "2026-10-09T15:13:10.448929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbe9d4009a3cef482dfb53aa9fa0e62a335225976cef1bedc014e6c8697661a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.448929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--756f11db-5107-4564-845b-f4c0dc848511", "created": "2026-10-09T15:13:10.449528Z", "modified": "2026-10-09T15:13:10.449528Z", "relationship_type": "indicates", "source_ref": "indicator--e4c21d11-dff7-4423-b0e8-68daf82e93a1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b958119-4b0b-4f7d-a340-cc512729412f", "created": "2026-10-09T15:13:10.449653Z", "modified": "2026-10-09T15:13:10.449653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e06961253eb21c6b3fa27b95af94bcfc065ea6026c587878006fd35bf5c4680']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.449653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c246766c-a6c9-44db-83ce-2cc0f07b6098", "created": "2026-10-09T15:13:10.450233Z", "modified": "2026-10-09T15:13:10.450233Z", "relationship_type": "indicates", "source_ref": "indicator--7b958119-4b0b-4f7d-a340-cc512729412f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ba52c9-76e8-4cbc-90d9-7ec0af888cc6", "created": "2026-10-09T15:13:10.450366Z", "modified": "2026-10-09T15:13:10.450366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77c71585adb1425ad64981b609116d97901d6523c41f91a0d6b9a3d9dd458da0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.450366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34d30d3b-b8c1-40fd-9f5c-c9e9a4381217", "created": "2026-10-09T15:13:10.450961Z", "modified": "2026-10-09T15:13:10.450961Z", "relationship_type": "indicates", "source_ref": "indicator--c0ba52c9-76e8-4cbc-90d9-7ec0af888cc6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0871a1f7-fad8-4c68-851c-2d8cefce8b0f", "created": "2026-10-09T15:13:10.451079Z", "modified": "2026-10-09T15:13:10.451079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='07743812754dbe7c41fd0a9b706126285c4f4dc33747a9e7933fd6150a14c77b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.451079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68d25a34-ff5b-4467-a0fd-63ab3ef1d976", "created": "2026-10-09T15:13:10.451779Z", "modified": "2026-10-09T15:13:10.451779Z", "relationship_type": "indicates", "source_ref": "indicator--0871a1f7-fad8-4c68-851c-2d8cefce8b0f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb60130-88c6-4801-9aae-f844a2e9d669", "created": "2026-10-09T15:13:10.451905Z", "modified": "2026-10-09T15:13:10.451905Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='927a692155b548bc38b0fac64e9a760f68ed64b5a4bc0837a1502c0f653a30e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.451905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50b73cfa-d769-45aa-adca-ede11e21589d", "created": "2026-10-09T15:13:10.452506Z", "modified": "2026-10-09T15:13:10.452506Z", "relationship_type": "indicates", "source_ref": "indicator--bbb60130-88c6-4801-9aae-f844a2e9d669", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3391e2e4-d138-40b8-b888-49e58e4e5dc9", "created": "2026-10-09T15:13:10.452632Z", "modified": "2026-10-09T15:13:10.452632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b43fea62b338d2121019668c43887d31370b46f0f16e6385dc08d761cb268809']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.452632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a818a2e-3566-4700-ad5e-3f0413b0f373", "created": "2026-10-09T15:13:10.453215Z", "modified": "2026-10-09T15:13:10.453215Z", "relationship_type": "indicates", "source_ref": "indicator--3391e2e4-d138-40b8-b888-49e58e4e5dc9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e81823-7611-4527-9941-e5b436ee3d47", "created": "2026-10-09T15:13:10.453361Z", "modified": "2026-10-09T15:13:10.453361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38c3ab08039cd92aa861f58398d96c8af1cbcad6d7df8692379ce4d92591d04f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.453361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d00e556b-e535-4541-9ac0-4965791a5c01", "created": "2026-10-09T15:13:10.453941Z", "modified": "2026-10-09T15:13:10.453941Z", "relationship_type": "indicates", "source_ref": "indicator--30e81823-7611-4527-9941-e5b436ee3d47", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808ec0f3-0eba-4c71-810c-d5eff9727cc9", "created": "2026-10-09T15:13:10.45406Z", "modified": "2026-10-09T15:13:10.45406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c96c5b31bf47184da6b54e033882db875daf90a9b4567b115245dc438ef5c0a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.45406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbf6334-5bde-4c7a-9180-fcaa537d7ab0", "created": "2026-10-09T15:13:10.454656Z", "modified": "2026-10-09T15:13:10.454656Z", "relationship_type": "indicates", "source_ref": "indicator--808ec0f3-0eba-4c71-810c-d5eff9727cc9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19eb91d-5278-4fd6-8058-0b4d6fead1b3", "created": "2026-10-09T15:13:10.45478Z", "modified": "2026-10-09T15:13:10.45478Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ee8775190e2a867db7a53622ad7da40039bcc2ee67ea82ac9f053674ac26a57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.45478Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac00fe34-564f-47ce-a617-60df3d782b4e", "created": "2026-10-09T15:13:10.455378Z", "modified": "2026-10-09T15:13:10.455378Z", "relationship_type": "indicates", "source_ref": "indicator--b19eb91d-5278-4fd6-8058-0b4d6fead1b3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0a473f-cd85-4984-9d5d-52402048d465", "created": "2026-10-09T15:13:10.455501Z", "modified": "2026-10-09T15:13:10.455501Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8905ebaf922c371624800306e39b9e6b227183db4eeaaa0c892c1284516e1b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.455501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3d3dc91-a9fa-406e-b38b-a5a775cf4061", "created": "2026-10-09T15:13:10.456097Z", "modified": "2026-10-09T15:13:10.456097Z", "relationship_type": "indicates", "source_ref": "indicator--0f0a473f-cd85-4984-9d5d-52402048d465", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fe98ae-a0e9-4060-9eaf-829ef9532aca", "created": "2026-10-09T15:13:10.456221Z", "modified": "2026-10-09T15:13:10.456221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21ae4d2d711f8e43d9c6c392eb500fb4e50ebe3619374fdcaca5f4bcf0d80097']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.456221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fec37cb0-bec6-4079-8804-98d90439618f", "created": "2026-10-09T15:13:10.456817Z", "modified": "2026-10-09T15:13:10.456817Z", "relationship_type": "indicates", "source_ref": "indicator--65fe98ae-a0e9-4060-9eaf-829ef9532aca", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41a4a66-82ce-47ba-b3da-7cc30e09330b", "created": "2026-10-09T15:13:10.456938Z", "modified": "2026-10-09T15:13:10.456938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40eee1116b999dad2563bbe76aac3802ce960c48697bc12cee9bc54dfe0eb0e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.456938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3d2ced5-eccb-4f0b-a206-a54a3d196490", "created": "2026-10-09T15:13:10.457527Z", "modified": "2026-10-09T15:13:10.457527Z", "relationship_type": "indicates", "source_ref": "indicator--e41a4a66-82ce-47ba-b3da-7cc30e09330b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53bc395-ec68-4b1a-8c4f-fd842de4aff6", "created": "2026-10-09T15:13:10.457654Z", "modified": "2026-10-09T15:13:10.457654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e53687abb8896380e0ed3f8d24b6ee06b4e54bdeb9ec44d20cf9cba0437c59d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.457654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53b1b071-8b46-41c1-9ae2-4fd5b2e76ea3", "created": "2026-10-09T15:13:10.458364Z", "modified": "2026-10-09T15:13:10.458364Z", "relationship_type": "indicates", "source_ref": "indicator--e53bc395-ec68-4b1a-8c4f-fd842de4aff6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfe6373-2262-47c7-bae9-a08e40ef1607", "created": "2026-10-09T15:13:10.458489Z", "modified": "2026-10-09T15:13:10.458489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fa2daf9a232b9848c19174b4709caf2be8dad84cb532b5b5ba03feacd62daa7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.458489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ecc8e5a-9dc1-4e34-91db-c4893a1c4bf0", "created": "2026-10-09T15:13:10.459072Z", "modified": "2026-10-09T15:13:10.459072Z", "relationship_type": "indicates", "source_ref": "indicator--6bfe6373-2262-47c7-bae9-a08e40ef1607", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9d5251-0d09-4439-b09d-81a8f28ae962", "created": "2026-10-09T15:13:10.459192Z", "modified": "2026-10-09T15:13:10.459192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08dda0f5cde18f13678e5a49c993a31f8497da14dde2bc61a515c0ca4bceaf34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.459192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98011240-abc5-4948-847b-9e5cce86b70f", "created": "2026-10-09T15:13:10.4598Z", "modified": "2026-10-09T15:13:10.4598Z", "relationship_type": "indicates", "source_ref": "indicator--ae9d5251-0d09-4439-b09d-81a8f28ae962", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0f4f2d-471d-41ea-a7c2-d8fb0c280967", "created": "2026-10-09T15:13:10.459925Z", "modified": "2026-10-09T15:13:10.459925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='557adab50bd78627bca0cc31784de498f384e6eb1a09dcc6c273b1ed00ba7ccd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.459925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e77e5527-063f-4d91-9f48-76fc16ac9664", "created": "2026-10-09T15:13:10.460524Z", "modified": "2026-10-09T15:13:10.460524Z", "relationship_type": "indicates", "source_ref": "indicator--0e0f4f2d-471d-41ea-a7c2-d8fb0c280967", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d7c69d-c107-4284-a254-755f6ac82aea", "created": "2026-10-09T15:13:10.460649Z", "modified": "2026-10-09T15:13:10.460649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed50b3cba42d9ededdb86a7c4465df0db40a7551b4da4b3b609961ba8c22d00a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.460649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cccc8841-effd-4d49-aed7-11c966e95f4d", "created": "2026-10-09T15:13:10.461238Z", "modified": "2026-10-09T15:13:10.461238Z", "relationship_type": "indicates", "source_ref": "indicator--d2d7c69d-c107-4284-a254-755f6ac82aea", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374579d5-3f4f-45b0-b374-b636197ee96f", "created": "2026-10-09T15:13:10.461376Z", "modified": "2026-10-09T15:13:10.461376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cc3806e3c4a4e1ade6354cca446cad5b19e9df849240df66efab79ea9383cd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.461376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c78c9b6b-c74b-45f5-8c34-3d84598e5485", "created": "2026-10-09T15:13:10.46196Z", "modified": "2026-10-09T15:13:10.46196Z", "relationship_type": "indicates", "source_ref": "indicator--374579d5-3f4f-45b0-b374-b636197ee96f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1ca2ce-ac9d-474d-af21-b1e656832642", "created": "2026-10-09T15:13:10.462081Z", "modified": "2026-10-09T15:13:10.462081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37921be90c512bb77cdfe27424008ede319551b4f76d62618ab01fd661342775']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.462081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37c9609b-6e36-4763-999c-4f2439552003", "created": "2026-10-09T15:13:10.462678Z", "modified": "2026-10-09T15:13:10.462678Z", "relationship_type": "indicates", "source_ref": "indicator--ad1ca2ce-ac9d-474d-af21-b1e656832642", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b20ba1-0faa-4eeb-a703-75cc002c2913", "created": "2026-10-09T15:13:10.462806Z", "modified": "2026-10-09T15:13:10.462806Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36f51eb821052396c0bc16b19614ab479566c448abe5d26d425096d83bcc18fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.462806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2f14245-ae30-46ff-975e-5fa6e401bd63", "created": "2026-10-09T15:13:10.463413Z", "modified": "2026-10-09T15:13:10.463413Z", "relationship_type": "indicates", "source_ref": "indicator--87b20ba1-0faa-4eeb-a703-75cc002c2913", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd56a24f-e3db-4843-877f-7aa51e5dff1f", "created": "2026-10-09T15:13:10.463535Z", "modified": "2026-10-09T15:13:10.463535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d183fc9b7d51daf326fe97b6f6f455f21919c58686afd9da13c43cede10cc9fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.463535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6129cd12-67d4-4526-aaba-078cd7cac316", "created": "2026-10-09T15:13:10.464121Z", "modified": "2026-10-09T15:13:10.464121Z", "relationship_type": "indicates", "source_ref": "indicator--dd56a24f-e3db-4843-877f-7aa51e5dff1f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfdd404-1c08-4cfb-bf66-e4425b465e8c", "created": "2026-10-09T15:13:10.464244Z", "modified": "2026-10-09T15:13:10.464244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63275b2086bba6c999735a3908e884daf495533109d0ab90562de4fbbe78eaca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.464244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b10c2f47-62f6-4052-83d6-546c5b9b08df", "created": "2026-10-09T15:13:10.46528Z", "modified": "2026-10-09T15:13:10.46528Z", "relationship_type": "indicates", "source_ref": "indicator--6bfdd404-1c08-4cfb-bf66-e4425b465e8c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f831946-5a65-46a3-9872-e598aa83e477", "created": "2026-10-09T15:13:10.46542Z", "modified": "2026-10-09T15:13:10.46542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='787e0401672c7470b4c9f4dcc3531d26256c94aa38c5f781d12e7d2971607b51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.46542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78ea10cd-5bd8-47ed-bf58-1e8b183c1f9f", "created": "2026-10-09T15:13:10.466023Z", "modified": "2026-10-09T15:13:10.466023Z", "relationship_type": "indicates", "source_ref": "indicator--9f831946-5a65-46a3-9872-e598aa83e477", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c33475-c2a8-4098-b4a7-4d2d660af486", "created": "2026-10-09T15:13:10.466148Z", "modified": "2026-10-09T15:13:10.466148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f81a732fba79f56a4e625a843fd67c3159f93afb5045d9781d2dfa2a9ba18f22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.466148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49f2e103-a0c2-4a0a-adef-a4ad056c5112", "created": "2026-10-09T15:13:10.466748Z", "modified": "2026-10-09T15:13:10.466748Z", "relationship_type": "indicates", "source_ref": "indicator--21c33475-c2a8-4098-b4a7-4d2d660af486", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a94f0a4-baaf-420b-9709-3cd117014e62", "created": "2026-10-09T15:13:10.466872Z", "modified": "2026-10-09T15:13:10.466872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c37b209b057203da8f37e4530399752d13ece45e2c7d37b72616267b5e569a18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.466872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fed4e8af-233c-4c53-8a08-e18730e4c91a", "created": "2026-10-09T15:13:10.467472Z", "modified": "2026-10-09T15:13:10.467472Z", "relationship_type": "indicates", "source_ref": "indicator--4a94f0a4-baaf-420b-9709-3cd117014e62", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03d7995-f293-408c-b2af-942b6cb97bf8", "created": "2026-10-09T15:13:10.467595Z", "modified": "2026-10-09T15:13:10.467595Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90004b2490a72e626787feaec13233a5f8d25d0fd85055292a7d441d06937418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.467595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea3156b2-727f-4f5e-bc97-d3b9400c7a8a", "created": "2026-10-09T15:13:10.468174Z", "modified": "2026-10-09T15:13:10.468174Z", "relationship_type": "indicates", "source_ref": "indicator--a03d7995-f293-408c-b2af-942b6cb97bf8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1151b804-a73e-4663-8a59-3346fd0c6ee5", "created": "2026-10-09T15:13:10.468307Z", "modified": "2026-10-09T15:13:10.468307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55cff1b05b3a83b3d3945a45cc05117920d80b19c8013a7c8131c3fe728fcb53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.468307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8f8f6be-431a-41d5-b41f-c58047b0d6be", "created": "2026-10-09T15:13:10.468893Z", "modified": "2026-10-09T15:13:10.468893Z", "relationship_type": "indicates", "source_ref": "indicator--1151b804-a73e-4663-8a59-3346fd0c6ee5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713291a5-47b4-4059-bfdf-1591ac9704e3", "created": "2026-10-09T15:13:10.469014Z", "modified": "2026-10-09T15:13:10.469014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d16d292e090d7ee9762ffdb09c9e5c5739937db387b3c36e358817d5b320b9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.469014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eb41115-3da1-47cf-abfe-5336f7cdcf94", "created": "2026-10-09T15:13:10.469607Z", "modified": "2026-10-09T15:13:10.469607Z", "relationship_type": "indicates", "source_ref": "indicator--713291a5-47b4-4059-bfdf-1591ac9704e3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae90d0f-7db4-4a6e-ab1c-b85d7711c0e9", "created": "2026-10-09T15:13:10.469728Z", "modified": "2026-10-09T15:13:10.469728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cd5c8754b36c4fa8444d8e6463b7fa67462222944bf5d272484028ad2c05539']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.469728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87654239-6d03-42c3-a41e-a7b2503727ea", "created": "2026-10-09T15:13:10.470321Z", "modified": "2026-10-09T15:13:10.470321Z", "relationship_type": "indicates", "source_ref": "indicator--6ae90d0f-7db4-4a6e-ab1c-b85d7711c0e9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f3eb12-521b-47f3-aedc-5f515f1265b4", "created": "2026-10-09T15:13:10.470445Z", "modified": "2026-10-09T15:13:10.470445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bcbe9db3960691a7c91d911b94e4fd1eaf862e4e0965c3b738cfe0c1837aa35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.470445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00bcb179-3da0-492c-a3c4-3bfb125e0561", "created": "2026-10-09T15:13:10.471028Z", "modified": "2026-10-09T15:13:10.471028Z", "relationship_type": "indicates", "source_ref": "indicator--24f3eb12-521b-47f3-aedc-5f515f1265b4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c181a6-52b8-4775-9b39-e2599450cbc3", "created": "2026-10-09T15:13:10.471148Z", "modified": "2026-10-09T15:13:10.471148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ad5fa60ab2d8748d456167b844246f5cbbb7758cff71894ae78b0e37cc82b1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.471148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3f123df-3781-47ef-a57d-e7bcd5d3b96e", "created": "2026-10-09T15:13:10.471853Z", "modified": "2026-10-09T15:13:10.471853Z", "relationship_type": "indicates", "source_ref": "indicator--97c181a6-52b8-4775-9b39-e2599450cbc3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854139f7-5219-4b33-920f-4d2ade75cb4d", "created": "2026-10-09T15:13:10.47198Z", "modified": "2026-10-09T15:13:10.47198Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eadc38555fac1ee82cc56ca02b651da95c670bfec717c03fa59ef593d209337c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.47198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--768916ef-5152-43ab-bf83-998a5e668009", "created": "2026-10-09T15:13:10.472585Z", "modified": "2026-10-09T15:13:10.472585Z", "relationship_type": "indicates", "source_ref": "indicator--854139f7-5219-4b33-920f-4d2ade75cb4d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3e88d4-efb7-44e0-bde9-a054552a2784", "created": "2026-10-09T15:13:10.472712Z", "modified": "2026-10-09T15:13:10.472712Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d99a6d20932e7af87c3bcdfad5140eae9ce8c762e4b96bb990cef4edea09b52d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.472712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--daf41caf-ea97-42e9-97a8-9995ae7217fa", "created": "2026-10-09T15:13:10.473315Z", "modified": "2026-10-09T15:13:10.473315Z", "relationship_type": "indicates", "source_ref": "indicator--ce3e88d4-efb7-44e0-bde9-a054552a2784", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0b021a-1470-4f13-be30-81b70b5cf57d", "created": "2026-10-09T15:13:10.47344Z", "modified": "2026-10-09T15:13:10.47344Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='353263db1e90be8aacc7b990f53943888de945698fab9d3afae8733fff0d831b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.47344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80a2b7a4-fe99-42d5-8a68-2f2f8d641347", "created": "2026-10-09T15:13:10.47403Z", "modified": "2026-10-09T15:13:10.47403Z", "relationship_type": "indicates", "source_ref": "indicator--9e0b021a-1470-4f13-be30-81b70b5cf57d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcf7c89-a56a-4a66-a7e9-5b051ae8f7c3", "created": "2026-10-09T15:13:10.474184Z", "modified": "2026-10-09T15:13:10.474184Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='499de21830f6e03001446af6900364a670f3ee92347aa5a0f7023d94b1b2806e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.474184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5bd7746-4ad3-41a8-a55e-8a0be015ff64", "created": "2026-10-09T15:13:10.474785Z", "modified": "2026-10-09T15:13:10.474785Z", "relationship_type": "indicates", "source_ref": "indicator--bbcf7c89-a56a-4a66-a7e9-5b051ae8f7c3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2095e2-e8a4-4fc6-86d1-6c4ba31803b1", "created": "2026-10-09T15:13:10.474906Z", "modified": "2026-10-09T15:13:10.474906Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e9c0d7d0639dc0a7b6ce62add35c09766916a45b70f7867a7a03ca85bafc0a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.474906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31758a9a-3468-4476-bc87-2a66b670b44a", "created": "2026-10-09T15:13:10.475505Z", "modified": "2026-10-09T15:13:10.475505Z", "relationship_type": "indicates", "source_ref": "indicator--cc2095e2-e8a4-4fc6-86d1-6c4ba31803b1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479254d9-81ba-4309-8b5e-511b68f14f27", "created": "2026-10-09T15:13:10.475628Z", "modified": "2026-10-09T15:13:10.475628Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fbbd5ad30ac6baf5ca5221157a1697c94d733c387196619eab25fadc010f8ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.475628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--166b8539-5ff3-4cde-904f-a187e73e7386", "created": "2026-10-09T15:13:10.476209Z", "modified": "2026-10-09T15:13:10.476209Z", "relationship_type": "indicates", "source_ref": "indicator--479254d9-81ba-4309-8b5e-511b68f14f27", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47aa90d6-e340-47d0-972b-a33d844ebda4", "created": "2026-10-09T15:13:10.476371Z", "modified": "2026-10-09T15:13:10.476371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e43e24373749fc62fe1934fe5bda69e0ab7198c27a32c5fc8161078248f5df7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.476371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a76a09a2-7e56-45b8-a39f-c8421abc1e04", "created": "2026-10-09T15:13:10.476971Z", "modified": "2026-10-09T15:13:10.476971Z", "relationship_type": "indicates", "source_ref": "indicator--47aa90d6-e340-47d0-972b-a33d844ebda4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d05c60b-e8a3-42a0-9a95-48e0125954ad", "created": "2026-10-09T15:13:10.477092Z", "modified": "2026-10-09T15:13:10.477092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74f9f34a8ee53bbeefca63c17a198602b5115ebb7227826dc1240ad7a21be0e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.477092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--454786f5-1e79-4aef-aee9-c5e4a41b1d25", "created": "2026-10-09T15:13:10.477689Z", "modified": "2026-10-09T15:13:10.477689Z", "relationship_type": "indicates", "source_ref": "indicator--5d05c60b-e8a3-42a0-9a95-48e0125954ad", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a371b742-4ea6-4a85-979e-5ebad7a351f3", "created": "2026-10-09T15:13:10.477816Z", "modified": "2026-10-09T15:13:10.477816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08539a1c6b48a5b5a080f9bc74dcd6a473a1f94dfd478705f5a385f667178e4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.477816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5518a404-bd85-4899-90f0-83d8c2e3e03d", "created": "2026-10-09T15:13:10.478534Z", "modified": "2026-10-09T15:13:10.478534Z", "relationship_type": "indicates", "source_ref": "indicator--a371b742-4ea6-4a85-979e-5ebad7a351f3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dbc8f12-2979-409c-9cc7-39fa6eeabfd8", "created": "2026-10-09T15:13:10.478672Z", "modified": "2026-10-09T15:13:10.478672Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbabc6599de4d321f584c858f8214fa0f78c5eeb94209b02978f45ab1f61739c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.478672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89793d3d-8720-4779-a2ca-726a5906bf12", "created": "2026-10-09T15:13:10.479263Z", "modified": "2026-10-09T15:13:10.479263Z", "relationship_type": "indicates", "source_ref": "indicator--2dbc8f12-2979-409c-9cc7-39fa6eeabfd8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106a1fb2-26f2-4f7f-9a07-3f96e2e4b25c", "created": "2026-10-09T15:13:10.479399Z", "modified": "2026-10-09T15:13:10.479399Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bb114baa7e01701b0cffb499127b6bd9dfe39f4183fbb3e0d8000cd1d001147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.479399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba6b5c6e-72b1-46f9-8bd5-b09c7dfc2bff", "created": "2026-10-09T15:13:10.479982Z", "modified": "2026-10-09T15:13:10.479982Z", "relationship_type": "indicates", "source_ref": "indicator--106a1fb2-26f2-4f7f-9a07-3f96e2e4b25c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a091df5e-e6de-4d7a-9efd-5844014930be", "created": "2026-10-09T15:13:10.480102Z", "modified": "2026-10-09T15:13:10.480102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca2382d2dc9a479a12c52e92247f16087f557713d379ae02a251f6a1448b3dd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.480102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--785de0e0-dc5c-41e0-8729-6e7b6c482cb2", "created": "2026-10-09T15:13:10.480699Z", "modified": "2026-10-09T15:13:10.480699Z", "relationship_type": "indicates", "source_ref": "indicator--a091df5e-e6de-4d7a-9efd-5844014930be", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db9d597-e172-483e-b324-0a1157162999", "created": "2026-10-09T15:13:10.48082Z", "modified": "2026-10-09T15:13:10.48082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e25c5b688fa10f5271c991458549f84503e88e5a73dba4899d60beda2bac91e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.48082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--901fde3b-c896-4410-b798-aa7ab9790f66", "created": "2026-10-09T15:13:10.481412Z", "modified": "2026-10-09T15:13:10.481412Z", "relationship_type": "indicates", "source_ref": "indicator--1db9d597-e172-483e-b324-0a1157162999", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b460143-9ba7-495c-ac6c-2dc11f3b7287", "created": "2026-10-09T15:13:10.481532Z", "modified": "2026-10-09T15:13:10.481532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b2961b5fb0ddbd70ef6745c0fc7708a32d6576c964b5e05628e5b6dd4b1ad40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.481532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9384e0b1-d8e1-4d1a-b18d-8c0db26f9498", "created": "2026-10-09T15:13:10.482113Z", "modified": "2026-10-09T15:13:10.482113Z", "relationship_type": "indicates", "source_ref": "indicator--7b460143-9ba7-495c-ac6c-2dc11f3b7287", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01acd85b-f403-4f22-b1ff-6520e15830f8", "created": "2026-10-09T15:13:10.482236Z", "modified": "2026-10-09T15:13:10.482236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a8e5aaa90bd6bda0a70d7596d4488a7207b177fbfd4c227975140b020196f66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.482236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b260cc6-962c-40f3-bdad-adddf4d3fe0d", "created": "2026-10-09T15:13:10.482828Z", "modified": "2026-10-09T15:13:10.482828Z", "relationship_type": "indicates", "source_ref": "indicator--01acd85b-f403-4f22-b1ff-6520e15830f8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22937023-42c8-4ed5-a9aa-de88d7185f16", "created": "2026-10-09T15:13:10.48295Z", "modified": "2026-10-09T15:13:10.48295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2ff365818fa63576435843da88215be9d29cf5681f0243fa3121c6093a74eb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.48295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b19a22f-a959-427c-8c5d-adc95ca5a3e8", "created": "2026-10-09T15:13:10.483549Z", "modified": "2026-10-09T15:13:10.483549Z", "relationship_type": "indicates", "source_ref": "indicator--22937023-42c8-4ed5-a9aa-de88d7185f16", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8959709-760c-4851-b567-1b99c6cc741e", "created": "2026-10-09T15:13:10.483681Z", "modified": "2026-10-09T15:13:10.483681Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd98ecf65137cdc0976e7ac148e6534d9a35ba35b80c29355fb61e1268f1e3b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.483681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9ecda46-9fad-4a9a-a8d6-8bb085cca2d8", "created": "2026-10-09T15:13:10.484384Z", "modified": "2026-10-09T15:13:10.484384Z", "relationship_type": "indicates", "source_ref": "indicator--c8959709-760c-4851-b567-1b99c6cc741e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdc435c-490a-47b0-9302-0b1d4d6b1c8b", "created": "2026-10-09T15:13:10.484516Z", "modified": "2026-10-09T15:13:10.484516Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b29d29ed9adddc41f8cf452c2307ae13f544d8eeadb5896968d32ef9cdf6c739']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.484516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bbf49a2-7045-44f9-af4d-937c03ea8265", "created": "2026-10-09T15:13:10.485108Z", "modified": "2026-10-09T15:13:10.485108Z", "relationship_type": "indicates", "source_ref": "indicator--5bdc435c-490a-47b0-9302-0b1d4d6b1c8b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b52ddc-4726-436b-a5d1-942ee8960ea3", "created": "2026-10-09T15:13:10.48523Z", "modified": "2026-10-09T15:13:10.48523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c1666d714f893b601358d37e81a3a4fcfbd7c6cb28fcbc27fccdbb449ae66c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.48523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78dccc03-66d5-4da4-89dc-99d72ef3497a", "created": "2026-10-09T15:13:10.485831Z", "modified": "2026-10-09T15:13:10.485831Z", "relationship_type": "indicates", "source_ref": "indicator--75b52ddc-4726-436b-a5d1-942ee8960ea3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8f18a3-982b-45ca-b958-d7820c51d942", "created": "2026-10-09T15:13:10.485955Z", "modified": "2026-10-09T15:13:10.485955Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1d9ac7935b969851f8e4cefeddff92d10b80e2cb20b59f392298e45b614bb98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.485955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4d2f4b2-c25b-4125-ba6c-848ab738e452", "created": "2026-10-09T15:13:10.486558Z", "modified": "2026-10-09T15:13:10.486558Z", "relationship_type": "indicates", "source_ref": "indicator--bb8f18a3-982b-45ca-b958-d7820c51d942", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2949a10e-b426-4063-944f-44d212e398a3", "created": "2026-10-09T15:13:10.486689Z", "modified": "2026-10-09T15:13:10.486689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed35de1346634a83394b5cfdaa79fecc59bcdbeea742efb7022b3f606e19fbeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.486689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62f598c6-6026-46b1-aa70-d9a1ef6c153c", "created": "2026-10-09T15:13:10.487291Z", "modified": "2026-10-09T15:13:10.487291Z", "relationship_type": "indicates", "source_ref": "indicator--2949a10e-b426-4063-944f-44d212e398a3", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d43de7-8f61-440a-b9f2-0a5f4955f75d", "created": "2026-10-09T15:13:10.487414Z", "modified": "2026-10-09T15:13:10.487414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20fd84cf4f1becfb13a569d9864c4036f3c548dbaaa3448c7a456611523c9e35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.487414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--877b7458-7e2c-48c7-83e2-c97d9690197d", "created": "2026-10-09T15:13:10.487997Z", "modified": "2026-10-09T15:13:10.487997Z", "relationship_type": "indicates", "source_ref": "indicator--67d43de7-8f61-440a-b9f2-0a5f4955f75d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd37c39a-79ba-49dc-befb-d8f1da14d722", "created": "2026-10-09T15:13:10.488116Z", "modified": "2026-10-09T15:13:10.488116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f672683b687edecc8022639c7884b20f9b211cc5ca1b04893a65377c7e5af0d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.488116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70def4f2-f470-4109-aa9b-91e9eaee256b", "created": "2026-10-09T15:13:10.48872Z", "modified": "2026-10-09T15:13:10.48872Z", "relationship_type": "indicates", "source_ref": "indicator--cd37c39a-79ba-49dc-befb-d8f1da14d722", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c771549-96fa-4230-bdeb-343ddc0ac357", "created": "2026-10-09T15:13:10.488844Z", "modified": "2026-10-09T15:13:10.488844Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3bfbba550cc1e342d822e4bb5f617bfd4a90f7210fc293f7743333cff617fb44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.488844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aec3e240-d310-4b36-98d5-0e90400f9940", "created": "2026-10-09T15:13:10.48944Z", "modified": "2026-10-09T15:13:10.48944Z", "relationship_type": "indicates", "source_ref": "indicator--4c771549-96fa-4230-bdeb-343ddc0ac357", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ef9e4a-222c-4721-a6b0-09a492c4c6ef", "created": "2026-10-09T15:13:10.489561Z", "modified": "2026-10-09T15:13:10.489561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca70975da016eab694816eca008e401df221f3102cb5aa84277346f452f414f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.489561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02cea32d-eaea-4c15-b116-9054bf1ec387", "created": "2026-10-09T15:13:10.490145Z", "modified": "2026-10-09T15:13:10.490145Z", "relationship_type": "indicates", "source_ref": "indicator--85ef9e4a-222c-4721-a6b0-09a492c4c6ef", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5b7175-20d7-4b1b-9c3d-3c351f05791a", "created": "2026-10-09T15:13:10.490273Z", "modified": "2026-10-09T15:13:10.490273Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61552e1b86c655b9396266b57dd53367610db4a84915d928490e201bc3da17ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.490273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81e6da0a-5bb1-4ffe-ad77-fc7aa1f46655", "created": "2026-10-09T15:13:10.490973Z", "modified": "2026-10-09T15:13:10.490973Z", "relationship_type": "indicates", "source_ref": "indicator--bf5b7175-20d7-4b1b-9c3d-3c351f05791a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936fdcc6-a154-449e-b070-62d7a51315fa", "created": "2026-10-09T15:13:10.491096Z", "modified": "2026-10-09T15:13:10.491096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5840208d279346be5eee45d37974ac84b0544ba4ab5bf33cf43fc2856229532d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.491096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--065a95fb-bcf7-4766-b725-dc940f7cacba", "created": "2026-10-09T15:13:10.491689Z", "modified": "2026-10-09T15:13:10.491689Z", "relationship_type": "indicates", "source_ref": "indicator--936fdcc6-a154-449e-b070-62d7a51315fa", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ce9752-18ad-4ef4-949d-66ede5d06b8b", "created": "2026-10-09T15:13:10.491816Z", "modified": "2026-10-09T15:13:10.491816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbce138d2b08f52091d925cdcf9490bcd850785338a1f377e94caaf09fe21aeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.491816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--042068fa-2864-43e6-a3ee-386db7c09c21", "created": "2026-10-09T15:13:10.492414Z", "modified": "2026-10-09T15:13:10.492414Z", "relationship_type": "indicates", "source_ref": "indicator--85ce9752-18ad-4ef4-949d-66ede5d06b8b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe363162-34ce-4100-8e8f-94a1c55f1909", "created": "2026-10-09T15:13:10.492541Z", "modified": "2026-10-09T15:13:10.492541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3feeb95c3b497ccaf7f6e2cd1d71e5e9ce178e64c0069165a6831995c0fe634a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.492541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e053148e-a3bf-4a79-816e-91cea55153a1", "created": "2026-10-09T15:13:10.493134Z", "modified": "2026-10-09T15:13:10.493134Z", "relationship_type": "indicates", "source_ref": "indicator--fe363162-34ce-4100-8e8f-94a1c55f1909", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590f9cf5-c2df-403e-a046-1b64faab5cdc", "created": "2026-10-09T15:13:10.493257Z", "modified": "2026-10-09T15:13:10.493257Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ded982e6848816f165f816e9b964ccdb8189cac669063be7d0e6c29c8179be66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.493257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23c39d32-403a-4121-a4d1-3bbdc84afd68", "created": "2026-10-09T15:13:10.493856Z", "modified": "2026-10-09T15:13:10.493856Z", "relationship_type": "indicates", "source_ref": "indicator--590f9cf5-c2df-403e-a046-1b64faab5cdc", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ceae56-8783-43af-b4c6-50922568a880", "created": "2026-10-09T15:13:10.493983Z", "modified": "2026-10-09T15:13:10.493983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='637587d5016c125b3c3e9fbe6f8bbf2f1281c229cef448a1079bf2a6c9ce8678']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.493983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45c196f0-709f-4e92-a71b-34177d1b6fa2", "created": "2026-10-09T15:13:10.494584Z", "modified": "2026-10-09T15:13:10.494584Z", "relationship_type": "indicates", "source_ref": "indicator--20ceae56-8783-43af-b4c6-50922568a880", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35486b9-fa8d-4935-af03-fa18f7146ac0", "created": "2026-10-09T15:13:10.494706Z", "modified": "2026-10-09T15:13:10.494706Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='645575cce8fab323c471d4c750f1f502a1cc18287ba81a54a68f7645c177a63b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.494706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e48543d-df94-4722-a554-d278d53c11e2", "created": "2026-10-09T15:13:10.495298Z", "modified": "2026-10-09T15:13:10.495298Z", "relationship_type": "indicates", "source_ref": "indicator--c35486b9-fa8d-4935-af03-fa18f7146ac0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a672ea3-6500-499e-95fa-c70a02d29108", "created": "2026-10-09T15:13:10.495419Z", "modified": "2026-10-09T15:13:10.495419Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60a51597403d38eb461348d812074730d832d1b99e1184a6618c19a2a4d2ab99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.495419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b31d4586-71c8-4bc2-b98d-42d6ea36af08", "created": "2026-10-09T15:13:10.496009Z", "modified": "2026-10-09T15:13:10.496009Z", "relationship_type": "indicates", "source_ref": "indicator--7a672ea3-6500-499e-95fa-c70a02d29108", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3379b2cb-f298-4824-a821-466eaf8d9e24", "created": "2026-10-09T15:13:10.496128Z", "modified": "2026-10-09T15:13:10.496128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c5017868c917f6bc7208328095d46e45c34ce3a19d94127e91bd819ff3d204c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.496128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--639dde9b-6273-4596-bdb5-62f06e026605", "created": "2026-10-09T15:13:10.496814Z", "modified": "2026-10-09T15:13:10.496814Z", "relationship_type": "indicates", "source_ref": "indicator--3379b2cb-f298-4824-a821-466eaf8d9e24", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbaa27c-cb38-4a2d-a293-e356f4854d19", "created": "2026-10-09T15:13:10.496952Z", "modified": "2026-10-09T15:13:10.496952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3e804ed9238263c7ab1398402ee37f121adbe69b33feb86219c30f3b80b3204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.496952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1b500cb-70f4-449b-a498-4083de72538d", "created": "2026-10-09T15:13:10.497672Z", "modified": "2026-10-09T15:13:10.497672Z", "relationship_type": "indicates", "source_ref": "indicator--fbbaa27c-cb38-4a2d-a293-e356f4854d19", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c148cfa-af25-4e0a-ab2a-76a81e26e51b", "created": "2026-10-09T15:13:10.4978Z", "modified": "2026-10-09T15:13:10.4978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af2db574ad76f630c6c8b4022b35ca883cc36d6739e64c155b2369373b38c40a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.4978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4e82273-0aec-4206-a1dc-623adf39dd3f", "created": "2026-10-09T15:13:10.498401Z", "modified": "2026-10-09T15:13:10.498401Z", "relationship_type": "indicates", "source_ref": "indicator--3c148cfa-af25-4e0a-ab2a-76a81e26e51b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891f5aaa-6039-46e3-be95-8fa540cf052d", "created": "2026-10-09T15:13:10.498527Z", "modified": "2026-10-09T15:13:10.498527Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a361de33a47ca78bb19bfff26990ffcb6a432acf0533afd319a975127fe31e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.498527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7551b524-b9f0-413e-851b-9704d003e783", "created": "2026-10-09T15:13:10.499113Z", "modified": "2026-10-09T15:13:10.499113Z", "relationship_type": "indicates", "source_ref": "indicator--891f5aaa-6039-46e3-be95-8fa540cf052d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1246ad9-7639-4c4d-9020-92b7f1ceffd5", "created": "2026-10-09T15:13:10.499234Z", "modified": "2026-10-09T15:13:10.499234Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cf967ebb0a57c49db8d2e87d1a685ae2662f4f6ba68f892bcdde5a2304cc71b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.499234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faefdb0b-9984-4547-bc77-0dddc1be092e", "created": "2026-10-09T15:13:10.49983Z", "modified": "2026-10-09T15:13:10.49983Z", "relationship_type": "indicates", "source_ref": "indicator--d1246ad9-7639-4c4d-9020-92b7f1ceffd5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0231c53c-122d-410a-b3cd-d155aa22cd05", "created": "2026-10-09T15:13:10.49995Z", "modified": "2026-10-09T15:13:10.49995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d69ac38434dddea5a2d9775007bca4889654fc06a61d81e081de398214ba1130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.49995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--723e16e0-7f69-48b3-9d9f-6c4a86c08988", "created": "2026-10-09T15:13:10.500545Z", "modified": "2026-10-09T15:13:10.500545Z", "relationship_type": "indicates", "source_ref": "indicator--0231c53c-122d-410a-b3cd-d155aa22cd05", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2a8e8b-d817-4ac3-9f34-23e6b835c2df", "created": "2026-10-09T15:13:10.500665Z", "modified": "2026-10-09T15:13:10.500665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eaab7396e895936d1cd05e8afafd6cb5f45261cca14f2860518b798e06b2c3a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.500665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c3569c3-564c-45bb-9190-f4bf3e8c1419", "created": "2026-10-09T15:13:10.501256Z", "modified": "2026-10-09T15:13:10.501256Z", "relationship_type": "indicates", "source_ref": "indicator--1b2a8e8b-d817-4ac3-9f34-23e6b835c2df", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38034d72-252e-4ca2-81e3-340e56b82657", "created": "2026-10-09T15:13:10.501388Z", "modified": "2026-10-09T15:13:10.501388Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bb4d82a06d99680bce6406826cb212368bddc603fae947c288a59fc49221b6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.501388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed3ec35d-a70c-4e90-9a6e-28c4d341af07", "created": "2026-10-09T15:13:10.501983Z", "modified": "2026-10-09T15:13:10.501983Z", "relationship_type": "indicates", "source_ref": "indicator--38034d72-252e-4ca2-81e3-340e56b82657", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4a6c92-dea7-47ab-b547-6410cf81fe1e", "created": "2026-10-09T15:13:10.502127Z", "modified": "2026-10-09T15:13:10.502127Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='634461e4ad76964922ced08828d9625532a5eaa6f6fe1e4c6d7f1cd365350c74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.502127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80565379-981c-442f-8c47-a2ca040a6ca0", "created": "2026-10-09T15:13:10.502727Z", "modified": "2026-10-09T15:13:10.502727Z", "relationship_type": "indicates", "source_ref": "indicator--ac4a6c92-dea7-47ab-b547-6410cf81fe1e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48f28e5-cdaa-4a1f-bd24-66e149106d3f", "created": "2026-10-09T15:13:10.502851Z", "modified": "2026-10-09T15:13:10.502851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b87b363dbd9f90f088e32b86a8c8a04058b18daf2ed27fdda83b42104a30279']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.502851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d86a6785-0b71-40f7-8d83-cf9882858c55", "created": "2026-10-09T15:13:10.50356Z", "modified": "2026-10-09T15:13:10.50356Z", "relationship_type": "indicates", "source_ref": "indicator--a48f28e5-cdaa-4a1f-bd24-66e149106d3f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5531f132-6433-4c3d-b375-481c47963bc8", "created": "2026-10-09T15:13:10.503689Z", "modified": "2026-10-09T15:13:10.503689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bfb7418dd56c05708b905b6b85e0109fd4ef0121d0938cca6ecdb69760a41808']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.503689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--799f4930-e188-4152-b079-bbd59ed6d12e", "created": "2026-10-09T15:13:10.504293Z", "modified": "2026-10-09T15:13:10.504293Z", "relationship_type": "indicates", "source_ref": "indicator--5531f132-6433-4c3d-b375-481c47963bc8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea9a23f-0b25-426b-8d5b-cd2ee41273ee", "created": "2026-10-09T15:13:10.504422Z", "modified": "2026-10-09T15:13:10.504422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91fb519a20789b5b1d1b567a888c28bd1820cecd35c198c6600de2e4e8b568b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.504422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54edd6bb-36a2-45bf-8efe-14af334b6721", "created": "2026-10-09T15:13:10.505009Z", "modified": "2026-10-09T15:13:10.505009Z", "relationship_type": "indicates", "source_ref": "indicator--aea9a23f-0b25-426b-8d5b-cd2ee41273ee", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a080575-c8a0-454b-bdf7-8d46a5404d2f", "created": "2026-10-09T15:13:10.50513Z", "modified": "2026-10-09T15:13:10.50513Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fc6215c588649523c4a6dcbd361fcbe167da4c25959cacb7e58ccc04c653f2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.50513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f948a657-df72-437b-90f3-bacfa021b70a", "created": "2026-10-09T15:13:10.50572Z", "modified": "2026-10-09T15:13:10.50572Z", "relationship_type": "indicates", "source_ref": "indicator--9a080575-c8a0-454b-bdf7-8d46a5404d2f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fba25e8-120a-4917-95f7-f6674f190f02", "created": "2026-10-09T15:13:10.505844Z", "modified": "2026-10-09T15:13:10.505844Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e142f71c7c0b0a367bde4f8b6a146739345e6618bca4166a91982779a595ee26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.505844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6385d2e0-9354-408d-875e-c420fa6b174d", "created": "2026-10-09T15:13:10.506442Z", "modified": "2026-10-09T15:13:10.506442Z", "relationship_type": "indicates", "source_ref": "indicator--0fba25e8-120a-4917-95f7-f6674f190f02", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e0efcd-507d-4164-81c8-55f7e8fd8a13", "created": "2026-10-09T15:13:10.506563Z", "modified": "2026-10-09T15:13:10.506563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='377fc8fd59a7ced2eac1b992198d45ce28069a972ba054dfd1d6acc29c261d26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.506563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0eb0586-f3b2-441a-b7d2-d7b16a590786", "created": "2026-10-09T15:13:10.507151Z", "modified": "2026-10-09T15:13:10.507151Z", "relationship_type": "indicates", "source_ref": "indicator--c8e0efcd-507d-4164-81c8-55f7e8fd8a13", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01fee41-709f-487b-85ff-1f261ef07b55", "created": "2026-10-09T15:13:10.507281Z", "modified": "2026-10-09T15:13:10.507281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd4bf12105b2fa82f9e503eb716c840e9b0c46e9af056c2f494e93bacf17f8c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.507281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a61da8ed-8dc4-4636-8751-a1f31907a993", "created": "2026-10-09T15:13:10.507867Z", "modified": "2026-10-09T15:13:10.507867Z", "relationship_type": "indicates", "source_ref": "indicator--d01fee41-709f-487b-85ff-1f261ef07b55", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42f7ab5-4df2-4ee6-8c53-f4d384f80e38", "created": "2026-10-09T15:13:10.507988Z", "modified": "2026-10-09T15:13:10.507988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7340232f6574f9b56126fb1a919dcb7ae506c7303794561fe4a50a93e9d084c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.507988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1df89225-6b8b-4ffb-a0e6-59f1e77fba87", "created": "2026-10-09T15:13:10.508582Z", "modified": "2026-10-09T15:13:10.508582Z", "relationship_type": "indicates", "source_ref": "indicator--a42f7ab5-4df2-4ee6-8c53-f4d384f80e38", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ac1478-af23-4c1e-9cb1-a2c9839983d8", "created": "2026-10-09T15:13:10.50871Z", "modified": "2026-10-09T15:13:10.50871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd1e8aff7cd92fd8d002a0f4edefea78846cf23c867c5bd05a7f5f41b3196a6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.50871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c07f48d6-eee5-4756-bc1f-d0b4fc4dcac3", "created": "2026-10-09T15:13:10.50931Z", "modified": "2026-10-09T15:13:10.50931Z", "relationship_type": "indicates", "source_ref": "indicator--08ac1478-af23-4c1e-9cb1-a2c9839983d8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a980330-32ea-4734-b5ab-9d59879bb653", "created": "2026-10-09T15:13:10.509432Z", "modified": "2026-10-09T15:13:10.509432Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8faa900b48d6978504e7a3088e8cee47c11e5addd6c75f4aafd9fbfc3d3a6650']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.509432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f98a7b72-4d46-4f10-987f-fa7a3307f706", "created": "2026-10-09T15:13:10.510119Z", "modified": "2026-10-09T15:13:10.510119Z", "relationship_type": "indicates", "source_ref": "indicator--2a980330-32ea-4734-b5ab-9d59879bb653", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c76333c-0339-4f23-8458-9d33feb053c9", "created": "2026-10-09T15:13:10.510249Z", "modified": "2026-10-09T15:13:10.510249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a8a013f6a8569ddf7c7f031f6fe23871808c946861448258b063325bbd06827']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.510249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce4b8079-a831-44ed-87ff-3c1034d4f52f", "created": "2026-10-09T15:13:10.510842Z", "modified": "2026-10-09T15:13:10.510842Z", "relationship_type": "indicates", "source_ref": "indicator--3c76333c-0339-4f23-8458-9d33feb053c9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5ae782-936f-4a3a-b001-e1ae3fc10a12", "created": "2026-10-09T15:13:10.510969Z", "modified": "2026-10-09T15:13:10.510969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23ae1191f4d119ecb777b6a8b3c5e0345f1060811ad41f6d679c1c513c98031c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.510969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb97b6a2-b352-4ffe-9255-72c236b98078", "created": "2026-10-09T15:13:10.511558Z", "modified": "2026-10-09T15:13:10.511558Z", "relationship_type": "indicates", "source_ref": "indicator--7d5ae782-936f-4a3a-b001-e1ae3fc10a12", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7289562-993e-4cf3-94ed-ebd4b02bac3c", "created": "2026-10-09T15:13:10.51168Z", "modified": "2026-10-09T15:13:10.51168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5daaed2f68988eee55c824524bdf6cbc139f8f567ffb745aae4e897df4059a8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.51168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09c079a8-ab19-4ba6-b6d6-7744137dd10f", "created": "2026-10-09T15:13:10.512261Z", "modified": "2026-10-09T15:13:10.512261Z", "relationship_type": "indicates", "source_ref": "indicator--c7289562-993e-4cf3-94ed-ebd4b02bac3c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b850e161-07a6-4934-8658-73dfcba080ca", "created": "2026-10-09T15:13:10.512395Z", "modified": "2026-10-09T15:13:10.512395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0abedcadd7f451207b2f43a3b3953239a192dfee0623e0510ebe47abd1d9e4cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.512395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b054775-81a4-4ee6-846a-a67c51b36075", "created": "2026-10-09T15:13:10.512984Z", "modified": "2026-10-09T15:13:10.512984Z", "relationship_type": "indicates", "source_ref": "indicator--b850e161-07a6-4934-8658-73dfcba080ca", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2283a1-03a8-4a85-896d-1898381edaa4", "created": "2026-10-09T15:13:10.51311Z", "modified": "2026-10-09T15:13:10.51311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='533c4200b72a2441567ac3cd687acab8d27ac99ff66a46aaed5905ecfffb9bfe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.51311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7431fc-d9e0-4746-aa82-8cb08227f1a9", "created": "2026-10-09T15:13:10.513706Z", "modified": "2026-10-09T15:13:10.513706Z", "relationship_type": "indicates", "source_ref": "indicator--0f2283a1-03a8-4a85-896d-1898381edaa4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba8e2ef-4121-475b-96f9-e57cdc90bc31", "created": "2026-10-09T15:13:10.513827Z", "modified": "2026-10-09T15:13:10.513827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='239dbce4da6af63cd5611ac6e1492ae4afdd3ecc3ac598502ba1a99c62221bd4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.513827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9001976-95f3-460e-827e-ffcc13bc700b", "created": "2026-10-09T15:13:10.51443Z", "modified": "2026-10-09T15:13:10.51443Z", "relationship_type": "indicates", "source_ref": "indicator--6ba8e2ef-4121-475b-96f9-e57cdc90bc31", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d78e18b-2cc2-4f56-b82a-ad52b173967d", "created": "2026-10-09T15:13:10.514553Z", "modified": "2026-10-09T15:13:10.514553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4abe6d883fde6edbc61112d9f52c75dfccfaba24cb901a5592358e1876f6b63c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.514553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2577188f-352d-4ea7-9c15-b5961133d6e8", "created": "2026-10-09T15:13:10.515131Z", "modified": "2026-10-09T15:13:10.515131Z", "relationship_type": "indicates", "source_ref": "indicator--9d78e18b-2cc2-4f56-b82a-ad52b173967d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54602512-6213-4236-8bd1-65631c925579", "created": "2026-10-09T15:13:10.515248Z", "modified": "2026-10-09T15:13:10.515248Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63abe59172b8a43d7ecdd9aee350254c9ab169276c618bb5fe5f370821a753c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.515248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--070e5bc7-3fcc-48ce-b3c7-cb3e73c27327", "created": "2026-10-09T15:13:10.51585Z", "modified": "2026-10-09T15:13:10.51585Z", "relationship_type": "indicates", "source_ref": "indicator--54602512-6213-4236-8bd1-65631c925579", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d9b766-8e00-47d0-9e72-6316305f48d1", "created": "2026-10-09T15:13:10.515973Z", "modified": "2026-10-09T15:13:10.515973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f1d4da89c8c0f5374f433c50509171260a4b9850d57af5bf36bf3fdb3a0c0bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.515973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f9d24a7-8993-4175-b74b-063e1505a3ba", "created": "2026-10-09T15:13:10.516694Z", "modified": "2026-10-09T15:13:10.516694Z", "relationship_type": "indicates", "source_ref": "indicator--d4d9b766-8e00-47d0-9e72-6316305f48d1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9a8986-52cf-41b6-8f4a-21ab7a303747", "created": "2026-10-09T15:13:10.516827Z", "modified": "2026-10-09T15:13:10.516827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ff171f92a7d436f7a35cb0b7105b265568da8acb23370a2850b5c265f483a4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.516827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e977f7f6-475c-4ef0-856d-332ebc6c90fc", "created": "2026-10-09T15:13:10.517433Z", "modified": "2026-10-09T15:13:10.517433Z", "relationship_type": "indicates", "source_ref": "indicator--8f9a8986-52cf-41b6-8f4a-21ab7a303747", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87ad7c1-fdef-4e8f-841f-a4a677fe4865", "created": "2026-10-09T15:13:10.51756Z", "modified": "2026-10-09T15:13:10.51756Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87705e036769ef87784195ccede0dc2fcc650e25835d8f160eff5080e4fec47a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.51756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4873cafd-1cef-446c-9178-a96d5cb7605e", "created": "2026-10-09T15:13:10.518144Z", "modified": "2026-10-09T15:13:10.518144Z", "relationship_type": "indicates", "source_ref": "indicator--a87ad7c1-fdef-4e8f-841f-a4a677fe4865", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a43bf2-a294-40c6-86bc-04494e28f4fd", "created": "2026-10-09T15:13:10.518279Z", "modified": "2026-10-09T15:13:10.518279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3575ab63de1d2e74fc4f293fc53ab7a36df358ddf30689d5084fd1fa0751b6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.518279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5580080d-369f-487b-b7b5-7536c1908065", "created": "2026-10-09T15:13:10.518865Z", "modified": "2026-10-09T15:13:10.518865Z", "relationship_type": "indicates", "source_ref": "indicator--78a43bf2-a294-40c6-86bc-04494e28f4fd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c514562-79d2-4e83-bcaa-e2640086a719", "created": "2026-10-09T15:13:10.518985Z", "modified": "2026-10-09T15:13:10.518985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fef1e2bb2a80e28750490b1c9aea09e8a62a06c667268e3b7d732fdd78f9ccb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.518985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a83e6fda-434c-4eec-bb36-6c1ac9346ddb", "created": "2026-10-09T15:13:10.519591Z", "modified": "2026-10-09T15:13:10.519591Z", "relationship_type": "indicates", "source_ref": "indicator--8c514562-79d2-4e83-bcaa-e2640086a719", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54648743-846c-490e-b064-4f10a3f13e48", "created": "2026-10-09T15:13:10.519716Z", "modified": "2026-10-09T15:13:10.519716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccba6153005cde4e21a7f6ef61b539e5aa54e6ac1124f5aa53ac78f44eb0d9b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.519716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bcbeb8a-5760-4a87-abc2-a46635eaf102", "created": "2026-10-09T15:13:10.520305Z", "modified": "2026-10-09T15:13:10.520305Z", "relationship_type": "indicates", "source_ref": "indicator--54648743-846c-490e-b064-4f10a3f13e48", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecb6acd-277e-4662-a4eb-b9bc83ca94fd", "created": "2026-10-09T15:13:10.520431Z", "modified": "2026-10-09T15:13:10.520431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4378359371a780e7b92e0b447887092ce4f10b116dd0a2eec358e7b3519bd4a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.520431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38efd58f-9df7-469e-9386-1a2ff6f74bf3", "created": "2026-10-09T15:13:10.521014Z", "modified": "2026-10-09T15:13:10.521014Z", "relationship_type": "indicates", "source_ref": "indicator--eecb6acd-277e-4662-a4eb-b9bc83ca94fd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ed7589-b41c-4dd7-a0f0-30a14620ec3b", "created": "2026-10-09T15:13:10.521132Z", "modified": "2026-10-09T15:13:10.521132Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a8f775f0d589663fbe6b2b4b98056f5ea6bab9273425dfed58281234e429d17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.521132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff4c887c-e7aa-4aa3-b69d-926e5f152832", "created": "2026-10-09T15:13:10.521733Z", "modified": "2026-10-09T15:13:10.521733Z", "relationship_type": "indicates", "source_ref": "indicator--b2ed7589-b41c-4dd7-a0f0-30a14620ec3b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e688b5c-a96f-48e3-ac9f-6f11c980c12d", "created": "2026-10-09T15:13:10.521853Z", "modified": "2026-10-09T15:13:10.521853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc3aba522087a99df5fdf8eec8bdfb628ed9e4e763d9f9240ec3f903f6a48339']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.521853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9e85396-b9fb-4474-9a96-b51594c1c67b", "created": "2026-10-09T15:13:10.522568Z", "modified": "2026-10-09T15:13:10.522568Z", "relationship_type": "indicates", "source_ref": "indicator--9e688b5c-a96f-48e3-ac9f-6f11c980c12d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ecf268-0795-4291-addb-3d59f03973d2", "created": "2026-10-09T15:13:10.522696Z", "modified": "2026-10-09T15:13:10.522696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d51aa5d0821fbd9a011b681dc02cb1e606e5b62a80575dfade8dc70a6492646d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.522696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f453b64-d662-43fd-893a-7ed9be328890", "created": "2026-10-09T15:13:10.523301Z", "modified": "2026-10-09T15:13:10.523301Z", "relationship_type": "indicates", "source_ref": "indicator--32ecf268-0795-4291-addb-3d59f03973d2", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb392d9-a212-4c4d-82fa-d86623741570", "created": "2026-10-09T15:13:10.523422Z", "modified": "2026-10-09T15:13:10.523422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f45e01efdd8fb3541468a7e11d0db42f8b8aa78b5c8d889b6177c18f9778e287']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.523422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f340f91a-931b-41cb-bf7e-9740f9c23002", "created": "2026-10-09T15:13:10.524Z", "modified": "2026-10-09T15:13:10.524Z", "relationship_type": "indicates", "source_ref": "indicator--edb392d9-a212-4c4d-82fa-d86623741570", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2637b46-9722-4a91-af37-f76748bd7653", "created": "2026-10-09T15:13:10.52412Z", "modified": "2026-10-09T15:13:10.52412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='234158ab8cb8969ac6199bc5e9caebb98f1c07f418824262bfa08ea4872b0503']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.52412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a70aa5bb-2a80-4f1b-aadb-c06b083e7988", "created": "2026-10-09T15:13:10.524714Z", "modified": "2026-10-09T15:13:10.524714Z", "relationship_type": "indicates", "source_ref": "indicator--c2637b46-9722-4a91-af37-f76748bd7653", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dd1039-01f2-4821-9e16-5c2bb5ef7cf8", "created": "2026-10-09T15:13:10.524843Z", "modified": "2026-10-09T15:13:10.524843Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76f39e72a82d16eec9ca3d5e950a8bfc2909cc96d034e3490485dc5d0de23846']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.524843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45ee2e1e-149c-4504-8a1f-6aa01768ec9b", "created": "2026-10-09T15:13:10.525435Z", "modified": "2026-10-09T15:13:10.525435Z", "relationship_type": "indicates", "source_ref": "indicator--26dd1039-01f2-4821-9e16-5c2bb5ef7cf8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc35f6bd-d48d-4a9b-a57a-affccd6ed2e4", "created": "2026-10-09T15:13:10.525556Z", "modified": "2026-10-09T15:13:10.525556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1d8691e3756806f5acfad6e80996ad01627492e231f0df5672d917f322fbccc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.525556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4dbb7280-83eb-449a-b02f-a39e885858d6", "created": "2026-10-09T15:13:10.526137Z", "modified": "2026-10-09T15:13:10.526137Z", "relationship_type": "indicates", "source_ref": "indicator--dc35f6bd-d48d-4a9b-a57a-affccd6ed2e4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff958875-041b-4228-8901-9f1a94660671", "created": "2026-10-09T15:13:10.526253Z", "modified": "2026-10-09T15:13:10.526253Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b541150bd9b5634ba5ca91df8c5ac04181d56afd3de8f21bbc33d37e4b0b7084']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.526253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bec5310-735f-44fb-b3ee-fb57b17bca24", "created": "2026-10-09T15:13:10.526845Z", "modified": "2026-10-09T15:13:10.526845Z", "relationship_type": "indicates", "source_ref": "indicator--ff958875-041b-4228-8901-9f1a94660671", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db669c4-1af8-4977-85db-9f2c275bdb4d", "created": "2026-10-09T15:13:10.526964Z", "modified": "2026-10-09T15:13:10.526964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c174af86a5cd60e1b6869c596eca0e7e41056736c6834b73799983ce5da3dd15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.526964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b8f5dfd-54d1-41b3-b7d7-1e4515907daf", "created": "2026-10-09T15:13:10.527558Z", "modified": "2026-10-09T15:13:10.527558Z", "relationship_type": "indicates", "source_ref": "indicator--4db669c4-1af8-4977-85db-9f2c275bdb4d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa0d65a-7252-4301-b789-cfb0d41d5e0c", "created": "2026-10-09T15:13:10.52768Z", "modified": "2026-10-09T15:13:10.52768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9871cb36269ba18f2a0b80ee0e3a01843b2ac190ea2be8e1b582af515295dfd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.52768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeaadc43-2978-4439-ba64-79596d29a432", "created": "2026-10-09T15:13:10.528262Z", "modified": "2026-10-09T15:13:10.528262Z", "relationship_type": "indicates", "source_ref": "indicator--5fa0d65a-7252-4301-b789-cfb0d41d5e0c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e17d945-32e7-4577-b346-14a0b1c68e38", "created": "2026-10-09T15:13:10.528395Z", "modified": "2026-10-09T15:13:10.528395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='736d3e9a4094acfddd0fc2f90325a3acec4d945e46244e20362d3fda27d51411']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.528395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f98a3009-05fd-4f12-b6b1-67a4b3d22b20", "created": "2026-10-09T15:13:10.529085Z", "modified": "2026-10-09T15:13:10.529085Z", "relationship_type": "indicates", "source_ref": "indicator--8e17d945-32e7-4577-b346-14a0b1c68e38", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ef2c68-1137-4320-8458-80532669ccc9", "created": "2026-10-09T15:13:10.529208Z", "modified": "2026-10-09T15:13:10.529208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6e91913493baf331a9c308b38d1571001b3794bd150138b87742b0dfea0b26d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.529208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1002bcf8-9613-4aa4-97c4-76cd80e3cac6", "created": "2026-10-09T15:13:10.529799Z", "modified": "2026-10-09T15:13:10.529799Z", "relationship_type": "indicates", "source_ref": "indicator--78ef2c68-1137-4320-8458-80532669ccc9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8603f951-0eee-43ca-ae70-4691f52d8178", "created": "2026-10-09T15:13:10.529926Z", "modified": "2026-10-09T15:13:10.529926Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ffc2fa4bc91a575905ea9979bb2f5ddd76d3148101d5d60456b7f2c27e63847']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.529926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--869e0f78-341c-4dd6-aca9-3964f2c8fdfb", "created": "2026-10-09T15:13:10.53053Z", "modified": "2026-10-09T15:13:10.53053Z", "relationship_type": "indicates", "source_ref": "indicator--8603f951-0eee-43ca-ae70-4691f52d8178", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb40255-c445-48cc-a6f2-f00eb65d0a7c", "created": "2026-10-09T15:13:10.530657Z", "modified": "2026-10-09T15:13:10.530657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='171b69637f68af1a9a094e74fda224b1631a87cf76af8fa6f949305d02f34910']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.530657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fe7d7e9-fcba-4d39-bb1c-00a8f5838db5", "created": "2026-10-09T15:13:10.531247Z", "modified": "2026-10-09T15:13:10.531247Z", "relationship_type": "indicates", "source_ref": "indicator--abb40255-c445-48cc-a6f2-f00eb65d0a7c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488bbdf9-8a89-4da8-8c7e-64641b3b6f2d", "created": "2026-10-09T15:13:10.531381Z", "modified": "2026-10-09T15:13:10.531381Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e6d2fc66305c4dc9573e4e8128abf4a83c4df4825b323c26cebd076258552bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.531381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee47542-83ce-4cc3-9af4-da87b6862bec", "created": "2026-10-09T15:13:10.531975Z", "modified": "2026-10-09T15:13:10.531975Z", "relationship_type": "indicates", "source_ref": "indicator--488bbdf9-8a89-4da8-8c7e-64641b3b6f2d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc84f1c7-4340-4645-90ac-fea35526c185", "created": "2026-10-09T15:13:10.532098Z", "modified": "2026-10-09T15:13:10.532098Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba7200a969fca1315d24f798eaabf0710ea33947ea338b27f39390c6f0819e9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.532098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7e2db9f-7e45-4309-8ced-e702818d313e", "created": "2026-10-09T15:13:10.532716Z", "modified": "2026-10-09T15:13:10.532716Z", "relationship_type": "indicates", "source_ref": "indicator--cc84f1c7-4340-4645-90ac-fea35526c185", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4362775f-2edf-4b5f-860d-8e7753e1056f", "created": "2026-10-09T15:13:10.532841Z", "modified": "2026-10-09T15:13:10.532841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54347a279f595270f5f88247b1f3cba62559489f4f4200ca6738352412dd8c7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.532841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc0d1dfc-a18c-45d5-838a-462be4cad27a", "created": "2026-10-09T15:13:10.533445Z", "modified": "2026-10-09T15:13:10.533445Z", "relationship_type": "indicates", "source_ref": "indicator--4362775f-2edf-4b5f-860d-8e7753e1056f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24424b7-eea1-4665-982f-f66b96e56d91", "created": "2026-10-09T15:13:10.533566Z", "modified": "2026-10-09T15:13:10.533566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cea29a8f5b3531dbdc2b9c9ac71ac1475ca695545a3a5074728ad567316e518e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.533566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00062176-2f41-4853-aed7-98ffc4266f8a", "created": "2026-10-09T15:13:10.53415Z", "modified": "2026-10-09T15:13:10.53415Z", "relationship_type": "indicates", "source_ref": "indicator--c24424b7-eea1-4665-982f-f66b96e56d91", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fec7f2c7-5d5e-4860-b935-3cb916768075", "created": "2026-10-09T15:13:10.534286Z", "modified": "2026-10-09T15:13:10.534286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b9979b601de3c9ae83cd6f7671e161f1ebdda7761a4086a93d53210c33310f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.534286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79ec3632-7935-4a7a-b2c0-6499bb0c2785", "created": "2026-10-09T15:13:10.534868Z", "modified": "2026-10-09T15:13:10.534868Z", "relationship_type": "indicates", "source_ref": "indicator--fec7f2c7-5d5e-4860-b935-3cb916768075", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dadff28-c975-4696-b7ae-b8a9bd4131ed", "created": "2026-10-09T15:13:10.534986Z", "modified": "2026-10-09T15:13:10.534986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e1dcaa681acd6620e1639c2bf8304742a531c2489a40e19601305bba004fe62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.534986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70dbd1f8-6b9c-4b01-88c8-0a8c09350d08", "created": "2026-10-09T15:13:10.535689Z", "modified": "2026-10-09T15:13:10.535689Z", "relationship_type": "indicates", "source_ref": "indicator--2dadff28-c975-4696-b7ae-b8a9bd4131ed", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8333fa53-5281-4f4e-9770-b6392491186a", "created": "2026-10-09T15:13:10.535814Z", "modified": "2026-10-09T15:13:10.535814Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17dbdaa0b17821cf041a32c198841c28d7b591a737a8784577f3129017803e4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.535814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f1f1a35-baa0-4e2c-88b8-571cc023ca1b", "created": "2026-10-09T15:13:10.536411Z", "modified": "2026-10-09T15:13:10.536411Z", "relationship_type": "indicates", "source_ref": "indicator--8333fa53-5281-4f4e-9770-b6392491186a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e7137c-b0d9-44a9-9766-cf23c5b9cfc0", "created": "2026-10-09T15:13:10.536536Z", "modified": "2026-10-09T15:13:10.536536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b03583bcd534de7c33b8108ab879e4f87bb612dda3f28f86e927929ad29b64e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.536536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--488b7197-75ab-4c77-a4bc-95f4fd6cbf68", "created": "2026-10-09T15:13:10.537123Z", "modified": "2026-10-09T15:13:10.537123Z", "relationship_type": "indicates", "source_ref": "indicator--78e7137c-b0d9-44a9-9766-cf23c5b9cfc0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ae777b-c24c-4b1f-8b2a-3c04b92d3727", "created": "2026-10-09T15:13:10.537245Z", "modified": "2026-10-09T15:13:10.537245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8912d83c93fbe88c96884e66653e4ad95d3ccd9ba6939de5cbdb246854e3c49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.537245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d21ea81-9551-408e-a2f0-6181bf68c7cc", "created": "2026-10-09T15:13:10.537837Z", "modified": "2026-10-09T15:13:10.537837Z", "relationship_type": "indicates", "source_ref": "indicator--f6ae777b-c24c-4b1f-8b2a-3c04b92d3727", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7461fe7b-9be6-42e5-8077-bfd294821229", "created": "2026-10-09T15:13:10.537958Z", "modified": "2026-10-09T15:13:10.537958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a01634521ba9419bc4b0e593110a8e5d9acab61e0e25b9758038e40ce215372']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.537958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aeb012d-9be6-465f-8d3f-b1172c5359d4", "created": "2026-10-09T15:13:10.538558Z", "modified": "2026-10-09T15:13:10.538558Z", "relationship_type": "indicates", "source_ref": "indicator--7461fe7b-9be6-42e5-8077-bfd294821229", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2710e93-fed6-4eb7-acea-f8beebfee71a", "created": "2026-10-09T15:13:10.538682Z", "modified": "2026-10-09T15:13:10.538682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3608b243fe48ff4506688f5ac1bada2a955a9ce31f85ff7abac26257af48453a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.538682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8043a1a3-3b40-4bb4-b404-b79bf8da5dfc", "created": "2026-10-09T15:13:10.539276Z", "modified": "2026-10-09T15:13:10.539276Z", "relationship_type": "indicates", "source_ref": "indicator--e2710e93-fed6-4eb7-acea-f8beebfee71a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c905055-a18b-4e99-aa11-8f9ca3e36192", "created": "2026-10-09T15:13:10.539405Z", "modified": "2026-10-09T15:13:10.539405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e6bd874ec39b692e59dccc334ff6f047030c4bc3843ab7003bc6088ca720639c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.539405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--592df322-f533-43f9-aca4-f58657def2a7", "created": "2026-10-09T15:13:10.539997Z", "modified": "2026-10-09T15:13:10.539997Z", "relationship_type": "indicates", "source_ref": "indicator--0c905055-a18b-4e99-aa11-8f9ca3e36192", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da14c3a-ada6-43ac-8828-3110632725f7", "created": "2026-10-09T15:13:10.540129Z", "modified": "2026-10-09T15:13:10.540129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03568c7c92c144516816bbdf4eaa504a399a6a78c0a1cc0c9ed20c859cad8539']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.540129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62fddf98-4974-4bc6-b808-77cd59847bb8", "created": "2026-10-09T15:13:10.540728Z", "modified": "2026-10-09T15:13:10.540728Z", "relationship_type": "indicates", "source_ref": "indicator--0da14c3a-ada6-43ac-8828-3110632725f7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7119b97-705b-4acd-b4ec-0c107fb19e03", "created": "2026-10-09T15:13:10.540852Z", "modified": "2026-10-09T15:13:10.540852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5754e39685ee1fd32e5ade10febf1915758a52eb96e8cb3a21e0e7e78c50430f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.540852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1106148d-df8e-4aef-b348-e3352f0abb78", "created": "2026-10-09T15:13:10.541873Z", "modified": "2026-10-09T15:13:10.541873Z", "relationship_type": "indicates", "source_ref": "indicator--f7119b97-705b-4acd-b4ec-0c107fb19e03", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea73517-6f79-498f-8e6e-402913879b8a", "created": "2026-10-09T15:13:10.542005Z", "modified": "2026-10-09T15:13:10.542005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4795eab2c6fcafbf12b7bf4b20bad8adbf92571f4c492239ceb33bd5fba18759']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.542005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--588aa289-e64b-43da-ab35-cae84fd836b9", "created": "2026-10-09T15:13:10.54261Z", "modified": "2026-10-09T15:13:10.54261Z", "relationship_type": "indicates", "source_ref": "indicator--fea73517-6f79-498f-8e6e-402913879b8a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22ab46b-2c69-47f5-8bd6-d9cf9e7ed45c", "created": "2026-10-09T15:13:10.542736Z", "modified": "2026-10-09T15:13:10.542736Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8c615971da21464145f4ce476a85d6514a6e8fb07fd35f37162fbc9abd1f6b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.542736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90f662ba-31d7-4621-a9f0-132eabbff4df", "created": "2026-10-09T15:13:10.543332Z", "modified": "2026-10-09T15:13:10.543332Z", "relationship_type": "indicates", "source_ref": "indicator--c22ab46b-2c69-47f5-8bd6-d9cf9e7ed45c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647f8d73-7f41-46af-ba04-f3d8059e7630", "created": "2026-10-09T15:13:10.543462Z", "modified": "2026-10-09T15:13:10.543462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fd57ba73cf80bdaa5b21bb37aec1247e52843838553d639a56379542b5bcd76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.543462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90dca30f-575f-400e-b8dd-c2341d3c3b87", "created": "2026-10-09T15:13:10.544055Z", "modified": "2026-10-09T15:13:10.544055Z", "relationship_type": "indicates", "source_ref": "indicator--647f8d73-7f41-46af-ba04-f3d8059e7630", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce150cc-b521-4289-96dd-4bec152be87b", "created": "2026-10-09T15:13:10.544178Z", "modified": "2026-10-09T15:13:10.544178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc95484a97d0635f33a606a3796886765af788f95d4982230dc070bee29e6e25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.544178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c12065d3-be11-49ed-bebd-73292b53b78c", "created": "2026-10-09T15:13:10.54477Z", "modified": "2026-10-09T15:13:10.54477Z", "relationship_type": "indicates", "source_ref": "indicator--7ce150cc-b521-4289-96dd-4bec152be87b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495ac15f-58a3-43fe-adfd-460e0cdb78ba", "created": "2026-10-09T15:13:10.544894Z", "modified": "2026-10-09T15:13:10.544894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e42916197982c3201f29fb9e9ac8e671c2c1fb6deaea6f036f21b6fcb6434ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.544894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e463951-0ec5-4f09-83c8-05ad65e031a2", "created": "2026-10-09T15:13:10.545494Z", "modified": "2026-10-09T15:13:10.545494Z", "relationship_type": "indicates", "source_ref": "indicator--495ac15f-58a3-43fe-adfd-460e0cdb78ba", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c43a95-16ca-48b8-9d5f-70c82b2d522f", "created": "2026-10-09T15:13:10.545618Z", "modified": "2026-10-09T15:13:10.545618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c74f73f8d7ac1f548af9d9bff635c6856ec8820aa58a8fdb4c8672b43308db02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.545618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51477f62-1baf-4d12-8622-5605170d209b", "created": "2026-10-09T15:13:10.54621Z", "modified": "2026-10-09T15:13:10.54621Z", "relationship_type": "indicates", "source_ref": "indicator--a7c43a95-16ca-48b8-9d5f-70c82b2d522f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849acff8-f61a-4faf-b534-9c73e33d1c90", "created": "2026-10-09T15:13:10.546342Z", "modified": "2026-10-09T15:13:10.546342Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='046a837cffe19580034be1cb421545e02b173f8d5a091f7e6d69b7c0c559c468']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.546342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--872a000f-9115-4112-bd07-a4cac4bd0fdd", "created": "2026-10-09T15:13:10.54695Z", "modified": "2026-10-09T15:13:10.54695Z", "relationship_type": "indicates", "source_ref": "indicator--849acff8-f61a-4faf-b534-9c73e33d1c90", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cddf456-753e-4016-b7ef-3dd7eab96723", "created": "2026-10-09T15:13:10.547076Z", "modified": "2026-10-09T15:13:10.547076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e5d183427459595f40fb0409c7126aad3b2f5127b46b5f3d6211c1d0c9e62d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.547076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c9cda0f-e069-4e48-899f-45f6e55c5659", "created": "2026-10-09T15:13:10.547677Z", "modified": "2026-10-09T15:13:10.547677Z", "relationship_type": "indicates", "source_ref": "indicator--9cddf456-753e-4016-b7ef-3dd7eab96723", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23732cba-01a4-4a07-94b5-18e75cded7b4", "created": "2026-10-09T15:13:10.547803Z", "modified": "2026-10-09T15:13:10.547803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49bcab232df65d16130c28b86a4930c1a3545f434db68476f7e5c491a903a98f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.547803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a6decdd-6173-4f94-8048-a11f9abdffa6", "created": "2026-10-09T15:13:10.548523Z", "modified": "2026-10-09T15:13:10.548523Z", "relationship_type": "indicates", "source_ref": "indicator--23732cba-01a4-4a07-94b5-18e75cded7b4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a5ce13-12a8-4f7e-b081-ff0d20fd1e9a", "created": "2026-10-09T15:13:10.548653Z", "modified": "2026-10-09T15:13:10.548653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d01c3f0408fb1762a15517276d73f362ab64461f58242f4066da883bb2b95c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.548653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fa95163-04ec-4489-9763-537fb361ba61", "created": "2026-10-09T15:13:10.549243Z", "modified": "2026-10-09T15:13:10.549243Z", "relationship_type": "indicates", "source_ref": "indicator--f4a5ce13-12a8-4f7e-b081-ff0d20fd1e9a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3f0f57-43ed-4c1e-8ff5-f3a7f156c755", "created": "2026-10-09T15:13:10.549389Z", "modified": "2026-10-09T15:13:10.549389Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='569686b2405f58cefe0e4caa057740e9afde7a9d87e14507e740541242284dec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.549389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82c49a01-7f3c-412e-809f-e0d4383fe361", "created": "2026-10-09T15:13:10.549982Z", "modified": "2026-10-09T15:13:10.549982Z", "relationship_type": "indicates", "source_ref": "indicator--2f3f0f57-43ed-4c1e-8ff5-f3a7f156c755", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a349833a-507f-4a8e-945d-15afc7b7bcc4", "created": "2026-10-09T15:13:10.550104Z", "modified": "2026-10-09T15:13:10.550104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2c82d96a1598fe621d5afc427393b940d4e0c1ec7b5c421e01ef1c96caf74d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.550104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7549988d-1abe-4c66-9508-1eecfedde444", "created": "2026-10-09T15:13:10.550696Z", "modified": "2026-10-09T15:13:10.550696Z", "relationship_type": "indicates", "source_ref": "indicator--a349833a-507f-4a8e-945d-15afc7b7bcc4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61330e85-fb10-4db3-abd5-caae81a445d0", "created": "2026-10-09T15:13:10.550819Z", "modified": "2026-10-09T15:13:10.550819Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='180a8385d40084cfc30b149289f63bbb1ce1a26ae39b7116546bf03d0bb5d20c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.550819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--147a641c-3778-48aa-bd16-e1de697419fb", "created": "2026-10-09T15:13:10.551421Z", "modified": "2026-10-09T15:13:10.551421Z", "relationship_type": "indicates", "source_ref": "indicator--61330e85-fb10-4db3-abd5-caae81a445d0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d780e4-89eb-42e7-b09f-c3d9248b217b", "created": "2026-10-09T15:13:10.551542Z", "modified": "2026-10-09T15:13:10.551542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00bafdcf83a2de713df75cde140d004176baa836ee397f90f22b3324c763d853']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.551542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf595898-bdd0-4528-94fc-f58e58e22027", "created": "2026-10-09T15:13:10.552138Z", "modified": "2026-10-09T15:13:10.552138Z", "relationship_type": "indicates", "source_ref": "indicator--a4d780e4-89eb-42e7-b09f-c3d9248b217b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d8ef00-afc5-43f2-97b6-0fb26daa0f21", "created": "2026-10-09T15:13:10.552258Z", "modified": "2026-10-09T15:13:10.552258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91f3435971395cbc2cd95760b1520de2d4ca0202e77abfc40b464d079fb87944']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.552258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--277abcfc-f01b-4d1a-9455-957f097f37c7", "created": "2026-10-09T15:13:10.552866Z", "modified": "2026-10-09T15:13:10.552866Z", "relationship_type": "indicates", "source_ref": "indicator--62d8ef00-afc5-43f2-97b6-0fb26daa0f21", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18be7048-f95a-477d-b525-34dd098c9ec5", "created": "2026-10-09T15:13:10.552989Z", "modified": "2026-10-09T15:13:10.552989Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='661f9fd1e9466d9673cb3c4b25e3122cbc5899873966c0680bb8ff496f7a6b0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.552989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f15be3c3-2bf1-4d4f-9706-03e0a898270b", "created": "2026-10-09T15:13:10.553594Z", "modified": "2026-10-09T15:13:10.553594Z", "relationship_type": "indicates", "source_ref": "indicator--18be7048-f95a-477d-b525-34dd098c9ec5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e7f5c0-1b26-40b7-9f36-7dea95a85607", "created": "2026-10-09T15:13:10.553715Z", "modified": "2026-10-09T15:13:10.553715Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e1bf2d14177f8a2f6a741a7c10dde10cf1b978dba5348d5a3c833063324a8da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.553715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bf34236-1685-4bdc-9e1a-8231b3077aef", "created": "2026-10-09T15:13:10.554312Z", "modified": "2026-10-09T15:13:10.554312Z", "relationship_type": "indicates", "source_ref": "indicator--58e7f5c0-1b26-40b7-9f36-7dea95a85607", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7e4cf7-1e98-4022-899f-f6090ed5312c", "created": "2026-10-09T15:13:10.554435Z", "modified": "2026-10-09T15:13:10.554435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27bcaa966f298d423e6914893bf3209186c272d5bc60d1f8cb8a3416b1cbee3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.554435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13514b6f-654a-4938-af3d-9df38e28318f", "created": "2026-10-09T15:13:10.55514Z", "modified": "2026-10-09T15:13:10.55514Z", "relationship_type": "indicates", "source_ref": "indicator--1e7e4cf7-1e98-4022-899f-f6090ed5312c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf7b0f3-aa95-4164-8dd9-7374b8f18849", "created": "2026-10-09T15:13:10.555276Z", "modified": "2026-10-09T15:13:10.555276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fbf61398603583e1306fca94af0363b35427129487b0928bd1b291f5e591c7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.555276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e483a2c5-08a4-4a04-888d-ed4dfe54363d", "created": "2026-10-09T15:13:10.55587Z", "modified": "2026-10-09T15:13:10.55587Z", "relationship_type": "indicates", "source_ref": "indicator--cbf7b0f3-aa95-4164-8dd9-7374b8f18849", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc7b927-1d38-47ab-825a-ea472363954d", "created": "2026-10-09T15:13:10.555992Z", "modified": "2026-10-09T15:13:10.555992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66d235680510108e24bc46a9fcba2cbf0def62e3260af9c4a0e632290977dfa9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.555992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2fc290c-8386-405b-82d7-3228bd932856", "created": "2026-10-09T15:13:10.556585Z", "modified": "2026-10-09T15:13:10.556585Z", "relationship_type": "indicates", "source_ref": "indicator--8bc7b927-1d38-47ab-825a-ea472363954d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba964865-0090-4efb-8785-cb968114834f", "created": "2026-10-09T15:13:10.556711Z", "modified": "2026-10-09T15:13:10.556711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e792756be17a0c5dd2258ae9a9c614f53cb06d7991e2388c8ad810b55423003']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.556711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ddb740e-4fe8-45fc-8bca-2cda79b2722a", "created": "2026-10-09T15:13:10.55732Z", "modified": "2026-10-09T15:13:10.55732Z", "relationship_type": "indicates", "source_ref": "indicator--ba964865-0090-4efb-8785-cb968114834f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7349fbbf-961b-45c8-ba64-91a57010b4ae", "created": "2026-10-09T15:13:10.557448Z", "modified": "2026-10-09T15:13:10.557448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50e227bdc728d0ff8e012adb43fb198b36a4b1cb65f09f8fabcec909cd6bbc16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.557448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00106444-f77d-45ec-9cb7-e7a10a59e476", "created": "2026-10-09T15:13:10.558034Z", "modified": "2026-10-09T15:13:10.558034Z", "relationship_type": "indicates", "source_ref": "indicator--7349fbbf-961b-45c8-ba64-91a57010b4ae", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c91343-de7b-42f4-9778-04b5e2c111ae", "created": "2026-10-09T15:13:10.558163Z", "modified": "2026-10-09T15:13:10.558163Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6443a4d618a84a9f9b1d71a25794a2b0f52c3889a0ce1b681018e944d9ed1374']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.558163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70cb0b60-55d8-4133-b7bf-e87810cefe55", "created": "2026-10-09T15:13:10.558766Z", "modified": "2026-10-09T15:13:10.558766Z", "relationship_type": "indicates", "source_ref": "indicator--70c91343-de7b-42f4-9778-04b5e2c111ae", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34686618-bcfd-46ff-a72b-385a1c50d121", "created": "2026-10-09T15:13:10.558893Z", "modified": "2026-10-09T15:13:10.558893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c214d170a86ac57e486785f290bc88e561bbc1ded1127ddbf7bf5c0cd77f7c1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.558893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--546d32c6-10dc-4a28-a6c1-112da18ea3c6", "created": "2026-10-09T15:13:10.559495Z", "modified": "2026-10-09T15:13:10.559495Z", "relationship_type": "indicates", "source_ref": "indicator--34686618-bcfd-46ff-a72b-385a1c50d121", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90354522-1deb-495a-835c-97124fa88cc8", "created": "2026-10-09T15:13:10.559623Z", "modified": "2026-10-09T15:13:10.559623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7aa0e75673f0ad17b1e5bdb63651bb04f4f86c43ab41a309939588016dfafdba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.559623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d96b00ad-a151-4d74-9c41-105ac38e74b3", "created": "2026-10-09T15:13:10.56021Z", "modified": "2026-10-09T15:13:10.56021Z", "relationship_type": "indicates", "source_ref": "indicator--90354522-1deb-495a-835c-97124fa88cc8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8486b7-c17a-43c7-81e1-d798eb1ecc29", "created": "2026-10-09T15:13:10.56034Z", "modified": "2026-10-09T15:13:10.56034Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69f66fdc7d210dee6bf8cdc8a3dfb1dba7210babf881a52df5aff330a7da6add']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.56034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7ff706a-d047-4db5-b5a3-e3f239b9a954", "created": "2026-10-09T15:13:10.560936Z", "modified": "2026-10-09T15:13:10.560936Z", "relationship_type": "indicates", "source_ref": "indicator--0a8486b7-c17a-43c7-81e1-d798eb1ecc29", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beac47ee-fed0-4ef6-a5d1-71754c47baaa", "created": "2026-10-09T15:13:10.561054Z", "modified": "2026-10-09T15:13:10.561054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b70565df8148c3003bf185accc4b51ed49e4c06f3f0f04bfb3f2a56bace794e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.561054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e256d147-7f14-4c4e-b7e1-465673279639", "created": "2026-10-09T15:13:10.561755Z", "modified": "2026-10-09T15:13:10.561755Z", "relationship_type": "indicates", "source_ref": "indicator--beac47ee-fed0-4ef6-a5d1-71754c47baaa", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02de886e-4b51-4145-b428-a8d84843cf25", "created": "2026-10-09T15:13:10.56188Z", "modified": "2026-10-09T15:13:10.56188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8b8c3c427964b36e09d94177b40f1ea7df84f7883622f03936445617c6bb6d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.56188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eaf9df2-2b38-46b0-806f-67cdda4d16ee", "created": "2026-10-09T15:13:10.56248Z", "modified": "2026-10-09T15:13:10.56248Z", "relationship_type": "indicates", "source_ref": "indicator--02de886e-4b51-4145-b428-a8d84843cf25", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0740a50e-e3ba-4614-a660-e5f948087cbd", "created": "2026-10-09T15:13:10.562641Z", "modified": "2026-10-09T15:13:10.562641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a383edd42b333ffa1a9a8475c0e2534b8f37d329886cc5d4e67c3da8b2ae2d9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.562641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--770d4e69-6dec-4085-88af-c9e810424588", "created": "2026-10-09T15:13:10.563373Z", "modified": "2026-10-09T15:13:10.563373Z", "relationship_type": "indicates", "source_ref": "indicator--0740a50e-e3ba-4614-a660-e5f948087cbd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c09b51-46c8-4b02-ab7c-66966fd93652", "created": "2026-10-09T15:13:10.563509Z", "modified": "2026-10-09T15:13:10.563509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56c445a581b29c776d0770a18a8b3681df618b3bfe3752fdc0f7c5f3fc46879b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.563509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7c307c8-d485-4f25-a9d5-dc57d2e8ba49", "created": "2026-10-09T15:13:10.564109Z", "modified": "2026-10-09T15:13:10.564109Z", "relationship_type": "indicates", "source_ref": "indicator--a9c09b51-46c8-4b02-ab7c-66966fd93652", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6665e4d-4142-4d4c-b732-02622ed95aa1", "created": "2026-10-09T15:13:10.564232Z", "modified": "2026-10-09T15:13:10.564232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d337e9957cec08e56bd1ac1e97b675c286d0d8292e972d24f7f6dad0738bf3ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.564232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9b1e643-5ce5-44bb-b3aa-0833fc84f8c1", "created": "2026-10-09T15:13:10.564839Z", "modified": "2026-10-09T15:13:10.564839Z", "relationship_type": "indicates", "source_ref": "indicator--c6665e4d-4142-4d4c-b732-02622ed95aa1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc2b52-9cac-48f4-9b2f-ba287d072808", "created": "2026-10-09T15:13:10.564962Z", "modified": "2026-10-09T15:13:10.564962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2f426ba2bf79b40ff9a7c420439fa005d104eea04f67385aacae64e77836127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.564962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04fa6ca3-cc20-43eb-b76d-9d501b457eaf", "created": "2026-10-09T15:13:10.565562Z", "modified": "2026-10-09T15:13:10.565562Z", "relationship_type": "indicates", "source_ref": "indicator--58dc2b52-9cac-48f4-9b2f-ba287d072808", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dd968c-f6ab-49c4-a6d3-faf2c6f59741", "created": "2026-10-09T15:13:10.565689Z", "modified": "2026-10-09T15:13:10.565689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c7361891f99343f09120f259c27de9e961606737b31c989054a150acc1e4096']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.565689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd57f6f5-8231-4d53-b1c9-2069790d4d3e", "created": "2026-10-09T15:13:10.566278Z", "modified": "2026-10-09T15:13:10.566278Z", "relationship_type": "indicates", "source_ref": "indicator--90dd968c-f6ab-49c4-a6d3-faf2c6f59741", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52175880-cf56-4676-a42c-170a544145a8", "created": "2026-10-09T15:13:10.566398Z", "modified": "2026-10-09T15:13:10.566398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e8e0f67fc90f457b5f5ab6f90577a506af1e34f2119f5c9b25e8643e0c57322']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.566398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f20e211-f8fc-4348-a4b4-7da3f03c0f23", "created": "2026-10-09T15:13:10.566993Z", "modified": "2026-10-09T15:13:10.566993Z", "relationship_type": "indicates", "source_ref": "indicator--52175880-cf56-4676-a42c-170a544145a8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5492ad61-2f44-4257-b530-7f232ec10b0b", "created": "2026-10-09T15:13:10.567116Z", "modified": "2026-10-09T15:13:10.567116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85707c14853a499961197ba8d2a07434a42c31e863d54287c3d8cae94b6e1a2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.567116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87cab0e4-e1fa-4b51-b699-e8932d0a3f7a", "created": "2026-10-09T15:13:10.567834Z", "modified": "2026-10-09T15:13:10.567834Z", "relationship_type": "indicates", "source_ref": "indicator--5492ad61-2f44-4257-b530-7f232ec10b0b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e64d68-ce8c-4015-987f-43197df4be69", "created": "2026-10-09T15:13:10.567963Z", "modified": "2026-10-09T15:13:10.567963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b1ed5b560acf5097b5ad94f295eefdd04462ad7b81195a19d235a3764f68dbf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.567963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70d4d2dd-953d-4f79-a06f-fdbab4545d9e", "created": "2026-10-09T15:13:10.568557Z", "modified": "2026-10-09T15:13:10.568557Z", "relationship_type": "indicates", "source_ref": "indicator--b8e64d68-ce8c-4015-987f-43197df4be69", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c7f972-c0c3-4322-8ada-33ae5ddf5ef7", "created": "2026-10-09T15:13:10.568679Z", "modified": "2026-10-09T15:13:10.568679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d765bf6a1ba2b84965120cea904aaea94e6bd339bc789e4c326823fe07bba5e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.568679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--708da8fb-2334-4f83-a16c-f99a9a6e1fac", "created": "2026-10-09T15:13:10.569256Z", "modified": "2026-10-09T15:13:10.569256Z", "relationship_type": "indicates", "source_ref": "indicator--55c7f972-c0c3-4322-8ada-33ae5ddf5ef7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c107cc9b-6c97-49eb-9bef-bce276e5a1d6", "created": "2026-10-09T15:13:10.569387Z", "modified": "2026-10-09T15:13:10.569387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29cc4d3ffe3d463da88e4f754b9493a95803ae4fbfa3fef923a3462b6ff6edcc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.569387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60e1d7cc-eaaf-4d78-8d5e-70a10cd92134", "created": "2026-10-09T15:13:10.569981Z", "modified": "2026-10-09T15:13:10.569981Z", "relationship_type": "indicates", "source_ref": "indicator--c107cc9b-6c97-49eb-9bef-bce276e5a1d6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deaad1b1-961a-41d7-bbec-25fed7fbc8d5", "created": "2026-10-09T15:13:10.570101Z", "modified": "2026-10-09T15:13:10.570101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3d5caa2e70d930416e5140cf0fca20a2c26e7766b3f2daadef3e509b4ff58db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.570101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9e07c2e-2e3c-4c15-8021-f01dd928ef76", "created": "2026-10-09T15:13:10.570696Z", "modified": "2026-10-09T15:13:10.570696Z", "relationship_type": "indicates", "source_ref": "indicator--deaad1b1-961a-41d7-bbec-25fed7fbc8d5", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e908744f-bfc4-4eb9-8baf-0b21a0b38ed9", "created": "2026-10-09T15:13:10.570817Z", "modified": "2026-10-09T15:13:10.570817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69a483676741f0f8e8cf20b3f674d4f08d40bb1f53438f414d93bb148c31bad2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.570817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3455d263-01b8-4058-b6bd-e1e7a88fb7ff", "created": "2026-10-09T15:13:10.571412Z", "modified": "2026-10-09T15:13:10.571412Z", "relationship_type": "indicates", "source_ref": "indicator--e908744f-bfc4-4eb9-8baf-0b21a0b38ed9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89c4b37-95b3-4a24-9a89-f53c2ff69f67", "created": "2026-10-09T15:13:10.571533Z", "modified": "2026-10-09T15:13:10.571533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='182ba41d9930c78bfff28e5e7fda9fda85d99331864e5bff5b646dd6209ae7a7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.571533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50735b1c-425d-4637-8e9b-773715bba9cc", "created": "2026-10-09T15:13:10.572114Z", "modified": "2026-10-09T15:13:10.572114Z", "relationship_type": "indicates", "source_ref": "indicator--f89c4b37-95b3-4a24-9a89-f53c2ff69f67", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da825807-0873-4bc3-941f-96f386f39c62", "created": "2026-10-09T15:13:10.572243Z", "modified": "2026-10-09T15:13:10.572243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32575e207ac94065d198e9c3240f008c59d7c8ecb334211ee10f030ea91a62b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.572243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d5cbac3-0142-423c-b3e5-2ef729c25a0d", "created": "2026-10-09T15:13:10.57284Z", "modified": "2026-10-09T15:13:10.57284Z", "relationship_type": "indicates", "source_ref": "indicator--da825807-0873-4bc3-941f-96f386f39c62", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e093d86-26b5-441f-9195-abb8d68128ca", "created": "2026-10-09T15:13:10.572961Z", "modified": "2026-10-09T15:13:10.572961Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35e81a20d78741cd201cdb2f7475590a01f5bdc1fb86dc600ceac80753d74714']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.572961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eecfc978-2ac6-445d-8f72-87391e9ae575", "created": "2026-10-09T15:13:10.573564Z", "modified": "2026-10-09T15:13:10.573564Z", "relationship_type": "indicates", "source_ref": "indicator--8e093d86-26b5-441f-9195-abb8d68128ca", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce8aee9-1be1-41c5-82fd-69cf9395457e", "created": "2026-10-09T15:13:10.573687Z", "modified": "2026-10-09T15:13:10.573687Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='307673aceb86f12d2edfcce8a642eafa000c2eca9625aea17c38397f7a11f804']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.573687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8689ed66-a607-4c77-8853-6f649fda7304", "created": "2026-10-09T15:13:10.574395Z", "modified": "2026-10-09T15:13:10.574395Z", "relationship_type": "indicates", "source_ref": "indicator--9ce8aee9-1be1-41c5-82fd-69cf9395457e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e13b0-8cc6-4e03-9d52-3ce2140f0038", "created": "2026-10-09T15:13:10.57452Z", "modified": "2026-10-09T15:13:10.57452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2102e5a12741c12ed963e52a12b17b854e9482d2d473cf1913d90583039d9a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.57452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--654a20d2-4a45-4ba3-aca0-2a49d00f7cde", "created": "2026-10-09T15:13:10.575104Z", "modified": "2026-10-09T15:13:10.575104Z", "relationship_type": "indicates", "source_ref": "indicator--2c6e13b0-8cc6-4e03-9d52-3ce2140f0038", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5da3bd-64de-4166-9c25-33b90a61921e", "created": "2026-10-09T15:13:10.575223Z", "modified": "2026-10-09T15:13:10.575223Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3f1719faac2f90a2ee1c93142e371cca8dea878b719595d9782e0abaaa18efa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.575223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbae2a10-92c0-4ece-9b53-6f7e7bc0712c", "created": "2026-10-09T15:13:10.575818Z", "modified": "2026-10-09T15:13:10.575818Z", "relationship_type": "indicates", "source_ref": "indicator--0f5da3bd-64de-4166-9c25-33b90a61921e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f9d651-5919-465b-aee9-749d529b5ffd", "created": "2026-10-09T15:13:10.575941Z", "modified": "2026-10-09T15:13:10.575941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e85f080ad48882a3fd4ba3299bb63ec9a78fd280cdc5c449aa2641870dec6cc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.575941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5b08546-7a5d-410d-8331-df473b30c194", "created": "2026-10-09T15:13:10.576542Z", "modified": "2026-10-09T15:13:10.576542Z", "relationship_type": "indicates", "source_ref": "indicator--c1f9d651-5919-465b-aee9-749d529b5ffd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273f9bc3-f31a-48c1-aaea-2fd4a6ebed0d", "created": "2026-10-09T15:13:10.57667Z", "modified": "2026-10-09T15:13:10.57667Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdc71e5343eb64330b6ebd3a779941c39498b3cae42445d38032d1ebd0b6d5e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.57667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c803414-33c7-439d-8f26-024773d01a44", "created": "2026-10-09T15:13:10.577254Z", "modified": "2026-10-09T15:13:10.577254Z", "relationship_type": "indicates", "source_ref": "indicator--273f9bc3-f31a-48c1-aaea-2fd4a6ebed0d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfad60fd-903e-445b-b215-b14b0544ded4", "created": "2026-10-09T15:13:10.577386Z", "modified": "2026-10-09T15:13:10.577386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3518d11ddc3a58720ae78bd727842cf1b3830968fee8da1617b04ca3deae8e64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.577386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfb4073b-8bd4-4915-b5bb-fc03aa8b5a2c", "created": "2026-10-09T15:13:10.577973Z", "modified": "2026-10-09T15:13:10.577973Z", "relationship_type": "indicates", "source_ref": "indicator--bfad60fd-903e-445b-b215-b14b0544ded4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fad0ea0-ce17-4cfd-9aba-94f5e5116ebd", "created": "2026-10-09T15:13:10.578095Z", "modified": "2026-10-09T15:13:10.578095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='130767496a5214ae3635db5fe8abda1c464502355b2dcb261aeb719bbd7efc45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.578095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9e1068e-ff08-4e15-beae-366ee791afb1", "created": "2026-10-09T15:13:10.578694Z", "modified": "2026-10-09T15:13:10.578694Z", "relationship_type": "indicates", "source_ref": "indicator--1fad0ea0-ce17-4cfd-9aba-94f5e5116ebd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0fdeab-cc68-493a-b0fd-436eecb30a18", "created": "2026-10-09T15:13:10.578819Z", "modified": "2026-10-09T15:13:10.578819Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3dc91ef223977927b1f294f5d3d62a882413cf4c875b009a65963752c33bdd0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.578819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38ce7c35-2f38-45c1-8b94-eee3cab03cce", "created": "2026-10-09T15:13:10.579423Z", "modified": "2026-10-09T15:13:10.579423Z", "relationship_type": "indicates", "source_ref": "indicator--6c0fdeab-cc68-493a-b0fd-436eecb30a18", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdd3cae-5267-4984-be17-f21994a0e2c8", "created": "2026-10-09T15:13:10.579544Z", "modified": "2026-10-09T15:13:10.579544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5965beb9234bc5f13f23e523f938f28bfdc963d2abc6b9df2764e52e57485be6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.579544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ea68a86-03d0-4ea5-99eb-cf75e29e3646", "created": "2026-10-09T15:13:10.580128Z", "modified": "2026-10-09T15:13:10.580128Z", "relationship_type": "indicates", "source_ref": "indicator--3cdd3cae-5267-4984-be17-f21994a0e2c8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145bde46-1e56-4697-a459-76a57ab4ec68", "created": "2026-10-09T15:13:10.580247Z", "modified": "2026-10-09T15:13:10.580247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dffac6948985ec7f2aebbe2b4e5f39f2ce847707d4e7ab0cff3694cf916e603']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.580247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3344934b-6177-4ae6-8dce-5dc5aa761b3f", "created": "2026-10-09T15:13:10.580948Z", "modified": "2026-10-09T15:13:10.580948Z", "relationship_type": "indicates", "source_ref": "indicator--145bde46-1e56-4697-a459-76a57ab4ec68", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a175c5-09fc-4396-a53e-045f58c34cc9", "created": "2026-10-09T15:13:10.581071Z", "modified": "2026-10-09T15:13:10.581071Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bb4414e4c0a2d5beab99e0a9add2c4f9e49f5623ce3031d92abb68dc565c6e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.581071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bb3a59e-bd6b-4e95-b5c6-421faba75638", "created": "2026-10-09T15:13:10.581672Z", "modified": "2026-10-09T15:13:10.581672Z", "relationship_type": "indicates", "source_ref": "indicator--38a175c5-09fc-4396-a53e-045f58c34cc9", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a72f3f-b195-486b-9650-3d6cf98d9188", "created": "2026-10-09T15:13:10.581796Z", "modified": "2026-10-09T15:13:10.581796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f19ee3003436f36b46aed94f076f5ead7b0439dc4a6dba909758f85b6d1e296b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.581796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89c21428-c5ae-4823-bdc0-7731d9d2bd1e", "created": "2026-10-09T15:13:10.582388Z", "modified": "2026-10-09T15:13:10.582388Z", "relationship_type": "indicates", "source_ref": "indicator--73a72f3f-b195-486b-9650-3d6cf98d9188", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4eae6b-75a0-47c9-8948-ec18b055ad01", "created": "2026-10-09T15:13:10.582511Z", "modified": "2026-10-09T15:13:10.582511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fd292152669ac42d67cfb11d73ea721edd6639e07bbbaafcd8f744b0b31c9a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.582511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7272ea45-fb33-4fab-8be4-da87a6cade03", "created": "2026-10-09T15:13:10.583091Z", "modified": "2026-10-09T15:13:10.583091Z", "relationship_type": "indicates", "source_ref": "indicator--1c4eae6b-75a0-47c9-8948-ec18b055ad01", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be271f5c-905d-4e4a-bb26-4a7303c3b04b", "created": "2026-10-09T15:13:10.583211Z", "modified": "2026-10-09T15:13:10.583211Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15b87ccca0ee58b8fecde2ec6af68a1cdeb1732894004a0afc51a0d28c8aa68b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.583211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cddbfad1-9ded-4ee2-be45-0b2efa410cae", "created": "2026-10-09T15:13:10.5838Z", "modified": "2026-10-09T15:13:10.5838Z", "relationship_type": "indicates", "source_ref": "indicator--be271f5c-905d-4e4a-bb26-4a7303c3b04b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab59c847-fb01-49c9-8d46-9cc8871df56c", "created": "2026-10-09T15:13:10.583919Z", "modified": "2026-10-09T15:13:10.583919Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4b3f2287959ca5691c322ffb81f91ced2a44fc08a274d7ca12b053eb91d5700']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.583919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e5b78a3-edcd-4a9f-94d3-88722bff6d5e", "created": "2026-10-09T15:13:10.584525Z", "modified": "2026-10-09T15:13:10.584525Z", "relationship_type": "indicates", "source_ref": "indicator--ab59c847-fb01-49c9-8d46-9cc8871df56c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50ee39d-5c53-4f9a-b2b2-ee4200df1046", "created": "2026-10-09T15:13:10.58465Z", "modified": "2026-10-09T15:13:10.58465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03f016b0d6aae365d81529018f7f5ad917b92cf24d14d9448c13b2215c5fe4f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.58465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da147e3a-a4f8-4bc0-82c5-0b55a3e8c92e", "created": "2026-10-09T15:13:10.585236Z", "modified": "2026-10-09T15:13:10.585236Z", "relationship_type": "indicates", "source_ref": "indicator--c50ee39d-5c53-4f9a-b2b2-ee4200df1046", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbae616-3445-490e-a92c-f0da9ef76c7e", "created": "2026-10-09T15:13:10.585378Z", "modified": "2026-10-09T15:13:10.585378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c42f0f95516195ff77951a3e91f42ecee67c499017909d357092f85bcdcd046']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.585378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--602e3f81-1188-49f0-8b44-2c7f5f5e5397", "created": "2026-10-09T15:13:10.585975Z", "modified": "2026-10-09T15:13:10.585975Z", "relationship_type": "indicates", "source_ref": "indicator--4dbae616-3445-490e-a92c-f0da9ef76c7e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8793b12-e12f-4c9b-8138-2d26e0a0b189", "created": "2026-10-09T15:13:10.586101Z", "modified": "2026-10-09T15:13:10.586101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5d855f2a34009f120fbf9497492e41d7f5bd0a27565687670ef55d539614311']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.586101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--530d0983-d161-4181-875f-f4a27d46f924", "created": "2026-10-09T15:13:10.586805Z", "modified": "2026-10-09T15:13:10.586805Z", "relationship_type": "indicates", "source_ref": "indicator--b8793b12-e12f-4c9b-8138-2d26e0a0b189", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb03365-78f3-4131-a5ce-c74b02de9a86", "created": "2026-10-09T15:13:10.586932Z", "modified": "2026-10-09T15:13:10.586932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d67e3f792cd1e22e6e07d26e31eca0094aeba376145849abaf4dc79b168c952']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.586932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--319c17b8-c5a4-4159-87ec-d49fba00717a", "created": "2026-10-09T15:13:10.587544Z", "modified": "2026-10-09T15:13:10.587544Z", "relationship_type": "indicates", "source_ref": "indicator--6fb03365-78f3-4131-a5ce-c74b02de9a86", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2da749-5e83-44cd-8974-eb73e8fa1462", "created": "2026-10-09T15:13:10.587678Z", "modified": "2026-10-09T15:13:10.587678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e35d62604b673c4c99d8717042a25761ca31c2d61af34ee6ffdcc12bb59f6269']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.587678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7be337c-13e8-4ed5-9d61-d7c1888212d5", "created": "2026-10-09T15:13:10.58828Z", "modified": "2026-10-09T15:13:10.58828Z", "relationship_type": "indicates", "source_ref": "indicator--dc2da749-5e83-44cd-8974-eb73e8fa1462", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68f15a0-3c14-420b-bd7d-db69320cbe6c", "created": "2026-10-09T15:13:10.588412Z", "modified": "2026-10-09T15:13:10.588412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e9c50936b2011590c981be8e78c029cabed4b7f5a8d2fb880070c57e875d090b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.588412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddff136c-de2f-4d5a-a935-b4dc40d54476", "created": "2026-10-09T15:13:10.588998Z", "modified": "2026-10-09T15:13:10.588998Z", "relationship_type": "indicates", "source_ref": "indicator--e68f15a0-3c14-420b-bd7d-db69320cbe6c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4232c301-91f6-4340-bb74-721d57242e79", "created": "2026-10-09T15:13:10.589117Z", "modified": "2026-10-09T15:13:10.589117Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3026851071062c290424bc25e1d4677d828cd997e593af4448252865cfb88769']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.589117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1273ce2a-b338-4ab3-bdd2-d40fcb5b4ab2", "created": "2026-10-09T15:13:10.589712Z", "modified": "2026-10-09T15:13:10.589712Z", "relationship_type": "indicates", "source_ref": "indicator--4232c301-91f6-4340-bb74-721d57242e79", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efaa8b1-23de-4fb1-ac71-92d8ea50739c", "created": "2026-10-09T15:13:10.589836Z", "modified": "2026-10-09T15:13:10.589836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cc126ea05fb7b3a39d95303176ca42f19fd3c8bb0a53f1d5ac913842e91e70e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.589836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33dfca8c-1451-43f9-b564-2a2369eb9713", "created": "2026-10-09T15:13:10.590435Z", "modified": "2026-10-09T15:13:10.590435Z", "relationship_type": "indicates", "source_ref": "indicator--3efaa8b1-23de-4fb1-ac71-92d8ea50739c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ea3fd7-7f39-4a3f-8b9e-c4e038e1b9a6", "created": "2026-10-09T15:13:10.590559Z", "modified": "2026-10-09T15:13:10.590559Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13af57edaec6b0eb16cfed80563bda07f4e03fce787f56a851b7bc2d8322e9ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.590559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--096d45e8-82aa-4731-9d3c-5f6308addd2e", "created": "2026-10-09T15:13:10.591153Z", "modified": "2026-10-09T15:13:10.591153Z", "relationship_type": "indicates", "source_ref": "indicator--e1ea3fd7-7f39-4a3f-8b9e-c4e038e1b9a6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a210bbaa-aa7f-4fa3-aefe-999140fb298b", "created": "2026-10-09T15:13:10.591288Z", "modified": "2026-10-09T15:13:10.591288Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea4be8ec8260770961734dafb3b0c5cdfe37cd3d1f4edee10cd2fc858ddd91bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.591288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4501dc90-f722-42f4-b2ae-bd89fc94ce56", "created": "2026-10-09T15:13:10.591878Z", "modified": "2026-10-09T15:13:10.591878Z", "relationship_type": "indicates", "source_ref": "indicator--a210bbaa-aa7f-4fa3-aefe-999140fb298b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc0ffaa-aef1-49cb-af48-232a3739c3d1", "created": "2026-10-09T15:13:10.591998Z", "modified": "2026-10-09T15:13:10.591998Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35c461700a9c10c2590c3ef4849308193a30213ddc997a2d2032e7e8a6e0b6b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.591998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88cd96bd-4978-42fd-aba4-395ad980a6db", "created": "2026-10-09T15:13:10.592593Z", "modified": "2026-10-09T15:13:10.592593Z", "relationship_type": "indicates", "source_ref": "indicator--8bc0ffaa-aef1-49cb-af48-232a3739c3d1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901fbb42-e04a-479e-a722-235dbec209ef", "created": "2026-10-09T15:13:10.592716Z", "modified": "2026-10-09T15:13:10.592716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9f727d24e1c692c9b66176e9521b95bd39343b5abbeff5cd37544764c5b9bed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.592716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2f72b72-0402-4f04-b2c2-d486e7c5367a", "created": "2026-10-09T15:13:10.593429Z", "modified": "2026-10-09T15:13:10.593429Z", "relationship_type": "indicates", "source_ref": "indicator--901fbb42-e04a-479e-a722-235dbec209ef", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b8d052-1c2a-4396-a75a-98730d7ac3e1", "created": "2026-10-09T15:13:10.593558Z", "modified": "2026-10-09T15:13:10.593558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1945b2911a078227c9035503754de19d83f4c716da98924293fc289cb1975628']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.593558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f0885b8-2dca-4ef7-b4c5-2f44b43134fe", "created": "2026-10-09T15:13:10.594146Z", "modified": "2026-10-09T15:13:10.594146Z", "relationship_type": "indicates", "source_ref": "indicator--d6b8d052-1c2a-4396-a75a-98730d7ac3e1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd5e6f2-cafd-4303-b8f1-e9fe7c154236", "created": "2026-10-09T15:13:10.594286Z", "modified": "2026-10-09T15:13:10.594286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d998b2405935560a16213001b1eccb0e10f4d2ed0790c282bdc91aa5d78bae2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.594286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ad07f5a-6767-4499-ace4-368ea6c9a897", "created": "2026-10-09T15:13:10.594868Z", "modified": "2026-10-09T15:13:10.594868Z", "relationship_type": "indicates", "source_ref": "indicator--0cd5e6f2-cafd-4303-b8f1-e9fe7c154236", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71767238-46d8-42dc-a4c7-0ec21aa9105d", "created": "2026-10-09T15:13:10.594988Z", "modified": "2026-10-09T15:13:10.594988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1b57fad2928ea3bf56b8636bb13f3defa2e6744fc0b1c3a3208b22d84bcdbe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.594988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c31b887-67e3-4d53-b8e4-8a0a136ad4f4", "created": "2026-10-09T15:13:10.595577Z", "modified": "2026-10-09T15:13:10.595577Z", "relationship_type": "indicates", "source_ref": "indicator--71767238-46d8-42dc-a4c7-0ec21aa9105d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbe0519-d05d-4255-a33b-5ee128ec6ea7", "created": "2026-10-09T15:13:10.5957Z", "modified": "2026-10-09T15:13:10.5957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e74e4a4b4602e2fb140176da799b0a8b6d8aa334f331d41341f6597fb0dacef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.5957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fcd0254-74aa-4b92-8ff6-7124e92f7e40", "created": "2026-10-09T15:13:10.596303Z", "modified": "2026-10-09T15:13:10.596303Z", "relationship_type": "indicates", "source_ref": "indicator--dcbe0519-d05d-4255-a33b-5ee128ec6ea7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad63298-8247-4ae6-98e6-9868742a9fdd", "created": "2026-10-09T15:13:10.596427Z", "modified": "2026-10-09T15:13:10.596427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a22a028a905acf5e23979be83e0b70e329de2e58e61b0e2a436f42a395126e13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.596427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51a278ea-716f-4c06-bcaa-d3359367f3f0", "created": "2026-10-09T15:13:10.597022Z", "modified": "2026-10-09T15:13:10.597022Z", "relationship_type": "indicates", "source_ref": "indicator--1ad63298-8247-4ae6-98e6-9868742a9fdd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0dd04a-2674-4ade-a631-d9cee4a44085", "created": "2026-10-09T15:13:10.597148Z", "modified": "2026-10-09T15:13:10.597148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85f268850edb49fd3b652f9ee0daacccc10b876cd9263d8233326d7a7546dfc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.597148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5fb23b6-93d6-4ce5-930c-3482d0626611", "created": "2026-10-09T15:13:10.597742Z", "modified": "2026-10-09T15:13:10.597742Z", "relationship_type": "indicates", "source_ref": "indicator--7a0dd04a-2674-4ade-a631-d9cee4a44085", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ad55e1-875d-4bad-bb65-029a05bb36d6", "created": "2026-10-09T15:13:10.59787Z", "modified": "2026-10-09T15:13:10.59787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3804206a56eb2de7c19d867f09763cc8e9953516a101319454b2564ee0a1ad5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.59787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d31a11fb-c802-4ca8-ad11-bd5f016f43b9", "created": "2026-10-09T15:13:10.598464Z", "modified": "2026-10-09T15:13:10.598464Z", "relationship_type": "indicates", "source_ref": "indicator--52ad55e1-875d-4bad-bb65-029a05bb36d6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0587301-d208-4b8d-b666-a1bdcc90d132", "created": "2026-10-09T15:13:10.598585Z", "modified": "2026-10-09T15:13:10.598585Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a27d496eea2238ceb99b4b2b6bb4318fc50a4b866333cefc93536160593569b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.598585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0325aafc-c294-4c44-b17c-db2df2cb23c6", "created": "2026-10-09T15:13:10.599174Z", "modified": "2026-10-09T15:13:10.599174Z", "relationship_type": "indicates", "source_ref": "indicator--a0587301-d208-4b8d-b666-a1bdcc90d132", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90de35e-cd39-4e98-8ee9-bdf686638f22", "created": "2026-10-09T15:13:10.599305Z", "modified": "2026-10-09T15:13:10.599305Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6030d118246c2c71ab37599f2bdd95eb56915cd115edae5b30456d987945d55d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.599305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbda884e-aaad-49c3-8863-970bddb86135", "created": "2026-10-09T15:13:10.599993Z", "modified": "2026-10-09T15:13:10.599993Z", "relationship_type": "indicates", "source_ref": "indicator--c90de35e-cd39-4e98-8ee9-bdf686638f22", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff34ca3-17db-4548-abea-5de550782d7e", "created": "2026-10-09T15:13:10.600114Z", "modified": "2026-10-09T15:13:10.600114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71c45ae9a11ad8d137597466235da80a5cc934b36f2756797ad545c7aa50481d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.600114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41ff0e93-cde3-4be9-96dd-634abe26cd43", "created": "2026-10-09T15:13:10.600709Z", "modified": "2026-10-09T15:13:10.600709Z", "relationship_type": "indicates", "source_ref": "indicator--dff34ca3-17db-4548-abea-5de550782d7e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0648791e-9460-48a2-b3cb-27667a869044", "created": "2026-10-09T15:13:10.600836Z", "modified": "2026-10-09T15:13:10.600836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ca1d73777daae74434554bacc4117aab2e8f59f23a2da27abf28b9fa3eff70c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.600836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbf290cc-e695-4923-afc9-502d558af799", "created": "2026-10-09T15:13:10.601431Z", "modified": "2026-10-09T15:13:10.601431Z", "relationship_type": "indicates", "source_ref": "indicator--0648791e-9460-48a2-b3cb-27667a869044", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dbc8d7-7812-4401-91a8-a7f60b101063", "created": "2026-10-09T15:13:10.601551Z", "modified": "2026-10-09T15:13:10.601551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4adb375bee81c52f1ebf73dcc55525aaba65d1d1486a6815c7f32f93ffb9a400']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.601551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4daa9827-5913-4e3a-a79f-7eee286c064d", "created": "2026-10-09T15:13:10.602136Z", "modified": "2026-10-09T15:13:10.602136Z", "relationship_type": "indicates", "source_ref": "indicator--d5dbc8d7-7812-4401-91a8-a7f60b101063", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d45bc4-136b-4bf9-8b2d-671b0d75154e", "created": "2026-10-09T15:13:10.602255Z", "modified": "2026-10-09T15:13:10.602255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b39744abd0e18d0add341168afd09d6835de13d9ccd3ba29a820e8141aabca6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.602255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6abd3580-a39d-4dcb-9ff1-0dfbf3c8d137", "created": "2026-10-09T15:13:10.602849Z", "modified": "2026-10-09T15:13:10.602849Z", "relationship_type": "indicates", "source_ref": "indicator--23d45bc4-136b-4bf9-8b2d-671b0d75154e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc10218c-4b5a-4d41-a2ea-ce137d328ac8", "created": "2026-10-09T15:13:10.602969Z", "modified": "2026-10-09T15:13:10.602969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='605f76b007462720ef62df00e8a9b6aa20db90d7ab2e59d4653a1f352c5482a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.602969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35198e64-c875-436a-a039-f5d98d8ef5d2", "created": "2026-10-09T15:13:10.603569Z", "modified": "2026-10-09T15:13:10.603569Z", "relationship_type": "indicates", "source_ref": "indicator--bc10218c-4b5a-4d41-a2ea-ce137d328ac8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7717c3f3-fce3-42ec-9034-b9b025cb883a", "created": "2026-10-09T15:13:10.60369Z", "modified": "2026-10-09T15:13:10.60369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cb20c4a392e092082b773cddc4c4f2de95c1b000dc8bd81b060a38be0c9d7c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.60369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0380b51-db56-47ce-a3f2-752e2c3b7dda", "created": "2026-10-09T15:13:10.604298Z", "modified": "2026-10-09T15:13:10.604298Z", "relationship_type": "indicates", "source_ref": "indicator--7717c3f3-fce3-42ec-9034-b9b025cb883a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26102044-4c87-47bb-801b-579bd23545cd", "created": "2026-10-09T15:13:10.604426Z", "modified": "2026-10-09T15:13:10.604426Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='768718652efda9215b4102fa7baadbfbd6a5e655d42a9064a3a47a74adc9ac34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.604426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faeffc39-79c7-492c-a8c6-5146162a0f9e", "created": "2026-10-09T15:13:10.605013Z", "modified": "2026-10-09T15:13:10.605013Z", "relationship_type": "indicates", "source_ref": "indicator--26102044-4c87-47bb-801b-579bd23545cd", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e1e690-bb02-4b6b-ae1f-dae54ffb3912", "created": "2026-10-09T15:13:10.605137Z", "modified": "2026-10-09T15:13:10.605137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='caa2da2ec151ea5e674fb5d9c164b4eacf6479bb39592c8d3afba3a8adfede5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.605137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6530593d-bbab-4c75-a064-d3b406dbd7ef", "created": "2026-10-09T15:13:10.605837Z", "modified": "2026-10-09T15:13:10.605837Z", "relationship_type": "indicates", "source_ref": "indicator--89e1e690-bb02-4b6b-ae1f-dae54ffb3912", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e660be3-3cf3-4e2e-b0be-c771b8a463d8", "created": "2026-10-09T15:13:10.605963Z", "modified": "2026-10-09T15:13:10.605963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e6141f894baeabe75731b4a9ff20cfee32bd5c94cc9ac1250978c5344eaa5669']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.605963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1eaca82e-a310-4ad7-b88c-917734ee1a90", "created": "2026-10-09T15:13:10.606573Z", "modified": "2026-10-09T15:13:10.606573Z", "relationship_type": "indicates", "source_ref": "indicator--8e660be3-3cf3-4e2e-b0be-c771b8a463d8", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99113b11-447c-4460-8ae6-471c17eb612e", "created": "2026-10-09T15:13:10.606708Z", "modified": "2026-10-09T15:13:10.606708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0217728c4c9872a3d704bcd28787d72b4a309d4d1f90c284040c172d87259db1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.606708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ca28121-33cf-430f-b2f8-babe6b80e3fa", "created": "2026-10-09T15:13:10.60731Z", "modified": "2026-10-09T15:13:10.60731Z", "relationship_type": "indicates", "source_ref": "indicator--99113b11-447c-4460-8ae6-471c17eb612e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e623ebc3-31ff-4f29-808c-f910261b6b19", "created": "2026-10-09T15:13:10.607434Z", "modified": "2026-10-09T15:13:10.607434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd1e3425f0e2d6197267a8f12750c32be908386ad4159176ce37c547a00bed2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.607434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a689d0b-0ef2-4504-b916-495aa5b4931c", "created": "2026-10-09T15:13:10.608023Z", "modified": "2026-10-09T15:13:10.608023Z", "relationship_type": "indicates", "source_ref": "indicator--e623ebc3-31ff-4f29-808c-f910261b6b19", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34c9114-cded-401f-b5ee-773788af856f", "created": "2026-10-09T15:13:10.608142Z", "modified": "2026-10-09T15:13:10.608142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20d23614f89fd772a624e0a92a1408250b2bbe0e78e67d42d3d1fce830a7c12a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.608142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a207a679-4939-4aec-8ebf-cdde4d394a02", "created": "2026-10-09T15:13:10.608738Z", "modified": "2026-10-09T15:13:10.608738Z", "relationship_type": "indicates", "source_ref": "indicator--f34c9114-cded-401f-b5ee-773788af856f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507453bf-bdfe-42c3-a0c9-c720f0a5ff68", "created": "2026-10-09T15:13:10.60886Z", "modified": "2026-10-09T15:13:10.60886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7f9e394324f0782cdf0a3c9ec3e7e687e011f0f1001589a3c9d0fbacb12ec3d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.60886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ae408a4-19e1-47ff-87d9-3505f84c8e5e", "created": "2026-10-09T15:13:10.609453Z", "modified": "2026-10-09T15:13:10.609453Z", "relationship_type": "indicates", "source_ref": "indicator--507453bf-bdfe-42c3-a0c9-c720f0a5ff68", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5200ab87-6f74-44a1-89c0-c45b0701e552", "created": "2026-10-09T15:13:10.609573Z", "modified": "2026-10-09T15:13:10.609573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='717367f0edc134d00f14298469a24cd8222ed0bafe15485eba59c10e542a7ce1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.609573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4930af2f-c954-41a6-b71d-1966d6a63c23", "created": "2026-10-09T15:13:10.610154Z", "modified": "2026-10-09T15:13:10.610154Z", "relationship_type": "indicates", "source_ref": "indicator--5200ab87-6f74-44a1-89c0-c45b0701e552", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30bbf6f-d1d5-4062-b361-cb1884fde14f", "created": "2026-10-09T15:13:10.610284Z", "modified": "2026-10-09T15:13:10.610284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='548ee47f11e4f5effa9bec1a8eae3cc265189d7312d176e4976670483184524d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.610284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7559fde-a568-43a8-beea-2855606555b2", "created": "2026-10-09T15:13:10.610875Z", "modified": "2026-10-09T15:13:10.610875Z", "relationship_type": "indicates", "source_ref": "indicator--c30bbf6f-d1d5-4062-b361-cb1884fde14f", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9329de4-1430-492b-8dd1-7f58529b7f6e", "created": "2026-10-09T15:13:10.610997Z", "modified": "2026-10-09T15:13:10.610997Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='baa00d3080831e5026661a0324004cf977000cf97d4b9cff8daa30953a65f9e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.610997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29cf7413-3f10-4530-881f-963f71385339", "created": "2026-10-09T15:13:10.611594Z", "modified": "2026-10-09T15:13:10.611594Z", "relationship_type": "indicates", "source_ref": "indicator--b9329de4-1430-492b-8dd1-7f58529b7f6e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12112b14-5be0-4459-89ed-5ac034b85a74", "created": "2026-10-09T15:13:10.611714Z", "modified": "2026-10-09T15:13:10.611714Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f74c8fb055f13616b25bf0d8e2c0f31b2636fd981e61fdd7ceb863b90160cf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.611714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9028c821-cb22-4cb3-a91d-9a9f806f8e20", "created": "2026-10-09T15:13:10.612405Z", "modified": "2026-10-09T15:13:10.612405Z", "relationship_type": "indicates", "source_ref": "indicator--12112b14-5be0-4459-89ed-5ac034b85a74", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3531a5-21ed-46b1-a4c1-a67bed01853d", "created": "2026-10-09T15:13:10.612529Z", "modified": "2026-10-09T15:13:10.612529Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a8217e1de107a32e386a9f79f75244a615350fb0a7cd390cf2a5780e4e3ca89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.612529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49d4f74b-adac-4869-b665-e41cd5d07b21", "created": "2026-10-09T15:13:10.613108Z", "modified": "2026-10-09T15:13:10.613108Z", "relationship_type": "indicates", "source_ref": "indicator--9b3531a5-21ed-46b1-a4c1-a67bed01853d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3162c503-b559-4f47-92e9-542e5829f3f1", "created": "2026-10-09T15:13:10.613229Z", "modified": "2026-10-09T15:13:10.613229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='647fbae1912fc58278fa03a5753360223aea974e54b924d750edc2738298dd74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.613229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47be3439-f71a-4b52-970b-5fa111680794", "created": "2026-10-09T15:13:10.613826Z", "modified": "2026-10-09T15:13:10.613826Z", "relationship_type": "indicates", "source_ref": "indicator--3162c503-b559-4f47-92e9-542e5829f3f1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2456179-bddb-40db-a89c-0a8d78049d8c", "created": "2026-10-09T15:13:10.613947Z", "modified": "2026-10-09T15:13:10.613947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3df6e61bfea5cac005163c3428685c5140fb975a1ec674e79db1a2e00e816f79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.613947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f962958a-e6e3-479e-88f0-04befeb269c2", "created": "2026-10-09T15:13:10.614542Z", "modified": "2026-10-09T15:13:10.614542Z", "relationship_type": "indicates", "source_ref": "indicator--d2456179-bddb-40db-a89c-0a8d78049d8c", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a1f632-aa16-49e0-8d8f-7ef8023f3330", "created": "2026-10-09T15:13:10.614666Z", "modified": "2026-10-09T15:13:10.614666Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='058e356571251488f0e238c11ba3ab2aa2adbe1ec955f5f284bc86a21fc131da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.614666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2f4f1cf-e075-4ff6-ab9a-4ddbaf0c4480", "created": "2026-10-09T15:13:10.615246Z", "modified": "2026-10-09T15:13:10.615246Z", "relationship_type": "indicates", "source_ref": "indicator--63a1f632-aa16-49e0-8d8f-7ef8023f3330", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0082eb03-d77e-401e-8527-2535f1daad84", "created": "2026-10-09T15:13:10.615377Z", "modified": "2026-10-09T15:13:10.615377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='68480ed3ec94e8d4d3bee024c9deaf6976ac8c22e307e03ed5b3dc64ba327996']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.615377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5526b42-c095-4701-8625-7e568ec0b8ca", "created": "2026-10-09T15:13:10.615974Z", "modified": "2026-10-09T15:13:10.615974Z", "relationship_type": "indicates", "source_ref": "indicator--0082eb03-d77e-401e-8527-2535f1daad84", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9e9a4a-efca-4603-a16a-d3fb04a4758b", "created": "2026-10-09T15:13:10.616097Z", "modified": "2026-10-09T15:13:10.616097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1477676b1041fe049d39dd7cb1e8eff3ee4b5ebfd65597982f1844e4e7b712d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.616097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa7bf8fa-220d-401f-9f93-71aceebc3015", "created": "2026-10-09T15:13:10.616702Z", "modified": "2026-10-09T15:13:10.616702Z", "relationship_type": "indicates", "source_ref": "indicator--cd9e9a4a-efca-4603-a16a-d3fb04a4758b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c621b69d-007a-479a-97e7-9bef7e381247", "created": "2026-10-09T15:13:10.616831Z", "modified": "2026-10-09T15:13:10.616831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49ace4f595a1452a99b0aee6b3f8a9d5a8b873da72075efd21a7b677e727d465']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.616831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2a7fab2-a0f2-4ce6-89cc-28bea639ba5b", "created": "2026-10-09T15:13:10.617417Z", "modified": "2026-10-09T15:13:10.617417Z", "relationship_type": "indicates", "source_ref": "indicator--c621b69d-007a-479a-97e7-9bef7e381247", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf63108a-3ce2-40bc-94cb-ddf2fe71a602", "created": "2026-10-09T15:13:10.617541Z", "modified": "2026-10-09T15:13:10.617541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48ab101be2db649e79189f674f21cbcd30622a4cb09a64970aec14617e78f2aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.617541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5862c6ad-df98-418e-addd-20a557640d33", "created": "2026-10-09T15:13:10.618123Z", "modified": "2026-10-09T15:13:10.618123Z", "relationship_type": "indicates", "source_ref": "indicator--cf63108a-3ce2-40bc-94cb-ddf2fe71a602", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91733c6a-e2f3-4fc0-a108-d3bc82696a89", "created": "2026-10-09T15:13:10.61824Z", "modified": "2026-10-09T15:13:10.61824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='708976ba66421e4fe8086d077efc2d7bea2c7c34f74bfc4ca4132aa18a66309a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.61824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45929fda-4cc2-4462-9e81-5e58554eb74e", "created": "2026-10-09T15:13:10.619275Z", "modified": "2026-10-09T15:13:10.619275Z", "relationship_type": "indicates", "source_ref": "indicator--91733c6a-e2f3-4fc0-a108-d3bc82696a89", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ca4e8c-41a6-4cb7-aa47-51d3e31d97f0", "created": "2026-10-09T15:13:10.619402Z", "modified": "2026-10-09T15:13:10.619402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9016616e016c21f87dc55069670caadd0f5ebb6835e5b7d4b7ef13d3c0cb13f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.619402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6641adbe-16d8-4c0c-8ba8-f169902c6000", "created": "2026-10-09T15:13:10.61999Z", "modified": "2026-10-09T15:13:10.61999Z", "relationship_type": "indicates", "source_ref": "indicator--a8ca4e8c-41a6-4cb7-aa47-51d3e31d97f0", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f7ad60a-8819-4ac3-a11d-2c6344be05c6", "created": "2026-10-09T15:13:10.620111Z", "modified": "2026-10-09T15:13:10.620111Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ebf31fc49291f5ef492bf9945f76dc17aee2e8bda550f4177f757dd731ec9524']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.620111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fc27932-fc38-400c-82f4-0995691a84c5", "created": "2026-10-09T15:13:10.620714Z", "modified": "2026-10-09T15:13:10.620714Z", "relationship_type": "indicates", "source_ref": "indicator--7f7ad60a-8819-4ac3-a11d-2c6344be05c6", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c9efb9-9df8-4a19-949b-e34952e888e4", "created": "2026-10-09T15:13:10.620839Z", "modified": "2026-10-09T15:13:10.620839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d966c90a4cfe44bf37cbcba09903eec9bdf9dc07453d479a9eb041bb26cebfe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.620839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--793af9a1-8b44-46af-9462-b14b7ccf5b0a", "created": "2026-10-09T15:13:10.621434Z", "modified": "2026-10-09T15:13:10.621434Z", "relationship_type": "indicates", "source_ref": "indicator--c4c9efb9-9df8-4a19-949b-e34952e888e4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf5ebda-ecda-407a-a02e-ac84cf344636", "created": "2026-10-09T15:13:10.621558Z", "modified": "2026-10-09T15:13:10.621558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b29bd3e09155d7a49813fa8af702a1f1f844269d9b83ec143a060da9661654e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.621558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65c0c150-3fb5-4329-84e6-06864581dbae", "created": "2026-10-09T15:13:10.622137Z", "modified": "2026-10-09T15:13:10.622137Z", "relationship_type": "indicates", "source_ref": "indicator--ebf5ebda-ecda-407a-a02e-ac84cf344636", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce62e1f4-2460-47df-8957-a07ad70f198e", "created": "2026-10-09T15:13:10.622258Z", "modified": "2026-10-09T15:13:10.622258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7920df89c7c2da25b8708b78fb05129eb23281f28c94ff6961dfa80950ef866a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.622258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e99bfc9d-ee72-48df-b784-50bcf6f03f08", "created": "2026-10-09T15:13:10.622854Z", "modified": "2026-10-09T15:13:10.622854Z", "relationship_type": "indicates", "source_ref": "indicator--ce62e1f4-2460-47df-8957-a07ad70f198e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc53e94b-0777-4be7-bf1c-31e489b6699d", "created": "2026-10-09T15:13:10.622975Z", "modified": "2026-10-09T15:13:10.622975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cef0bc1d7964274a9bf3974ba21dda7a8bbf0a18c955b0d494882bd656cb9f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.622975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2eb93a9-22dd-4910-8c2d-74975831e13d", "created": "2026-10-09T15:13:10.62357Z", "modified": "2026-10-09T15:13:10.62357Z", "relationship_type": "indicates", "source_ref": "indicator--fc53e94b-0777-4be7-bf1c-31e489b6699d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e87496-ffdf-48ec-a623-4c063ead2c4a", "created": "2026-10-09T15:13:10.623691Z", "modified": "2026-10-09T15:13:10.623691Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26313cde7a803b322793edf848c53d73beb4516ac439cc2d5e5dee5c593b7f31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.623691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c201befa-0e7a-436c-97f9-bb16ef41e400", "created": "2026-10-09T15:13:10.624281Z", "modified": "2026-10-09T15:13:10.624281Z", "relationship_type": "indicates", "source_ref": "indicator--41e87496-ffdf-48ec-a623-4c063ead2c4a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1450ac-d6d2-4d33-a4da-06245b042d75", "created": "2026-10-09T15:13:10.624403Z", "modified": "2026-10-09T15:13:10.624403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d47c8dea59b28cf7a102eb7f8619bf78575b44647ac4d03592683f75ff562370']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.624403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2271976-a717-4eb6-95f6-422c04bc6603", "created": "2026-10-09T15:13:10.625092Z", "modified": "2026-10-09T15:13:10.625092Z", "relationship_type": "indicates", "source_ref": "indicator--7c1450ac-d6d2-4d33-a4da-06245b042d75", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806ffa71-226d-4f66-9d66-89ee782a7063", "created": "2026-10-09T15:13:10.625217Z", "modified": "2026-10-09T15:13:10.625217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bcfa73ca0eb5ca0b041246eae9318e655d3a0062a6910912c57aa8e5e18fd32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.625217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3268bb67-ef41-4c93-ae5d-cce7623de6b9", "created": "2026-10-09T15:13:10.625823Z", "modified": "2026-10-09T15:13:10.625823Z", "relationship_type": "indicates", "source_ref": "indicator--806ffa71-226d-4f66-9d66-89ee782a7063", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dfc8a8-37e7-41e3-84ef-f9cd2e040c50", "created": "2026-10-09T15:13:10.625948Z", "modified": "2026-10-09T15:13:10.625948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='255c13be70626dffe5465155c13717a275ad2982b2d863dcd8ff45b4544476b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.625948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4a51711-4c10-4716-832d-993e0702104f", "created": "2026-10-09T15:13:10.626544Z", "modified": "2026-10-09T15:13:10.626544Z", "relationship_type": "indicates", "source_ref": "indicator--78dfc8a8-37e7-41e3-84ef-f9cd2e040c50", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c805c5a3-5d90-48a8-8234-b39c8839a410", "created": "2026-10-09T15:13:10.626678Z", "modified": "2026-10-09T15:13:10.626678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac18d94ff99daa1a1ea85da44b707c7953a71c871ff9ae8d3725adb90f650022']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.626678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1f72185-3183-4e2b-bf91-d570aeec3f82", "created": "2026-10-09T15:13:10.627262Z", "modified": "2026-10-09T15:13:10.627262Z", "relationship_type": "indicates", "source_ref": "indicator--c805c5a3-5d90-48a8-8234-b39c8839a410", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e94635b-22f4-4fa7-827a-3160a84b1588", "created": "2026-10-09T15:13:10.627397Z", "modified": "2026-10-09T15:13:10.627397Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d50b5551bc53f712681b8308e8c50a2433bfd9a346e052b68e01e2f6ffdf7845']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.627397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36b80994-de9e-4cb5-a991-0640552f62ef", "created": "2026-10-09T15:13:10.627992Z", "modified": "2026-10-09T15:13:10.627992Z", "relationship_type": "indicates", "source_ref": "indicator--7e94635b-22f4-4fa7-827a-3160a84b1588", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc8d231-9a91-49bb-accb-2a3e91ef9212", "created": "2026-10-09T15:13:10.628114Z", "modified": "2026-10-09T15:13:10.628114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a76c939219a8d201abdb791d8c96ce1bcfd88755471de039f1497749a2d5e39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.628114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de4ec194-a478-4828-8d9a-d8a89c87b61b", "created": "2026-10-09T15:13:10.628705Z", "modified": "2026-10-09T15:13:10.628705Z", "relationship_type": "indicates", "source_ref": "indicator--cdc8d231-9a91-49bb-accb-2a3e91ef9212", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff7790c-1465-411c-8d97-136a9d0642cc", "created": "2026-10-09T15:13:10.628825Z", "modified": "2026-10-09T15:13:10.628825Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='946c1caf95131f5743f070e8cbdc07d8386df739754dc15026dcb0d03103a66d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.628825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47a7ef1f-c6a4-4a2d-9a54-cfa9ae3aa85a", "created": "2026-10-09T15:13:10.62941Z", "modified": "2026-10-09T15:13:10.62941Z", "relationship_type": "indicates", "source_ref": "indicator--4ff7790c-1465-411c-8d97-136a9d0642cc", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acc3d52-01be-45fc-b722-ad4a287c73a1", "created": "2026-10-09T15:13:10.62953Z", "modified": "2026-10-09T15:13:10.62953Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7377788e2ca1975c6f2cdc8654832533232f1863a76bf2cfba9f2e63b285580']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.62953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a3ae563-d24c-4cb1-95d5-b17147f2925d", "created": "2026-10-09T15:13:10.630111Z", "modified": "2026-10-09T15:13:10.630111Z", "relationship_type": "indicates", "source_ref": "indicator--8acc3d52-01be-45fc-b722-ad4a287c73a1", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff8f96c-f47d-44c0-bdda-0355d1ac0a3e", "created": "2026-10-09T15:13:10.630229Z", "modified": "2026-10-09T15:13:10.630229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='68db5698a81f61afe367ab7f9cf423c12f974571e00eea4e7e135694d35b8abb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.630229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71b399b8-3758-4465-a1a3-1a667160aa68", "created": "2026-10-09T15:13:10.630848Z", "modified": "2026-10-09T15:13:10.630848Z", "relationship_type": "indicates", "source_ref": "indicator--8ff8f96c-f47d-44c0-bdda-0355d1ac0a3e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e17f0f-0d87-44eb-9877-750825e04a8d", "created": "2026-10-09T15:13:10.630969Z", "modified": "2026-10-09T15:13:10.630969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03635184546ac7d8304edc2e4dc68f7a21a97bdfeffeb0fb1b5a06244902a046']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.630969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1a97372-af48-4ee3-b7e8-036e5dd74bf7", "created": "2026-10-09T15:13:10.631688Z", "modified": "2026-10-09T15:13:10.631688Z", "relationship_type": "indicates", "source_ref": "indicator--53e17f0f-0d87-44eb-9877-750825e04a8d", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf797fee-f036-4079-b9bf-887f1da71650", "created": "2026-10-09T15:13:10.631816Z", "modified": "2026-10-09T15:13:10.631816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d230e77465ddce1510fb6f337ec7b69cd99430de3dd7a221d5306f4546eabe95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.631816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f72f39b-c2c5-4f22-9334-85203327dd6c", "created": "2026-10-09T15:13:10.632423Z", "modified": "2026-10-09T15:13:10.632423Z", "relationship_type": "indicates", "source_ref": "indicator--cf797fee-f036-4079-b9bf-887f1da71650", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10d8b51-d07d-4956-80e1-2f9ad40f663b", "created": "2026-10-09T15:13:10.632551Z", "modified": "2026-10-09T15:13:10.632551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74f4ef7aeb79df11b972d369f18dd15c67c3cb63473f8cd99321b5953dfdc3ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.632551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--336e227b-948f-4ad8-b6c2-bbff74ab032e", "created": "2026-10-09T15:13:10.633138Z", "modified": "2026-10-09T15:13:10.633138Z", "relationship_type": "indicates", "source_ref": "indicator--a10d8b51-d07d-4956-80e1-2f9ad40f663b", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a2ed8e-28bf-45c6-915b-cc99f20c53f4", "created": "2026-10-09T15:13:10.633262Z", "modified": "2026-10-09T15:13:10.633262Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63049630438d289affdeb4bf03c2b0a234857eb1d646aa7e6b654cb21840cc3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.633262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--049d3b69-0ffb-4b9e-b2fa-0f67bdad9c6f", "created": "2026-10-09T15:13:10.633868Z", "modified": "2026-10-09T15:13:10.633868Z", "relationship_type": "indicates", "source_ref": "indicator--06a2ed8e-28bf-45c6-915b-cc99f20c53f4", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2813d6-7cff-4352-9298-6b2690c72201", "created": "2026-10-09T15:13:10.633991Z", "modified": "2026-10-09T15:13:10.633991Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6dae39f366fa6f5063b0767da755485ca3fa30ebc7d164f89fe328cb0f5c7979']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.633991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48c0d125-e941-4545-8d10-6160751a4da8", "created": "2026-10-09T15:13:10.634576Z", "modified": "2026-10-09T15:13:10.634576Z", "relationship_type": "indicates", "source_ref": "indicator--0c2813d6-7cff-4352-9298-6b2690c72201", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534282b2-34ec-45e7-9c7e-0c9d5d98810a", "created": "2026-10-09T15:13:10.634696Z", "modified": "2026-10-09T15:13:10.634696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e027d400899ace8c01964fb7a9056ffc3dadd321ad1b4db4edcb812c290d2097']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.634696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdd6ffe6-8a04-4643-a1c4-e6693fa573e5", "created": "2026-10-09T15:13:10.635286Z", "modified": "2026-10-09T15:13:10.635286Z", "relationship_type": "indicates", "source_ref": "indicator--534282b2-34ec-45e7-9c7e-0c9d5d98810a", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889574e8-904b-41ac-8e95-88eeda42a890", "created": "2026-10-09T15:13:10.635411Z", "modified": "2026-10-09T15:13:10.635411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62e3cafac27bbbfad3ae5a702823187eb5497ed7674578081612f627a12e3ce5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.635411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--538ef1de-0be9-4f05-af07-647018509a02", "created": "2026-10-09T15:13:10.636005Z", "modified": "2026-10-09T15:13:10.636005Z", "relationship_type": "indicates", "source_ref": "indicator--889574e8-904b-41ac-8e95-88eeda42a890", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a876469-99aa-4a94-921d-2e21374b3dae", "created": "2026-10-09T15:13:10.636125Z", "modified": "2026-10-09T15:13:10.636125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ddc1d342dbee8468b0a88cc1cafcfd6990704be172ebae0564ffb970d85cd64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.636125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a92ba7e-f1c4-4270-a0ef-57a7a3eff06f", "created": "2026-10-09T15:13:10.636756Z", "modified": "2026-10-09T15:13:10.636756Z", "relationship_type": "indicates", "source_ref": "indicator--2a876469-99aa-4a94-921d-2e21374b3dae", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b069008-368d-4cb0-a673-750777f7b678", "created": "2026-10-09T15:13:10.636887Z", "modified": "2026-10-09T15:13:10.636887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b035c10d9b384e9b80164ef142b9038862775fe2c78ed361257eb6ad02d75bf5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.636887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b1d20ce-2515-48ba-876e-6220729a882f", "created": "2026-10-09T15:13:10.637489Z", "modified": "2026-10-09T15:13:10.637489Z", "relationship_type": "indicates", "source_ref": "indicator--0b069008-368d-4cb0-a673-750777f7b678", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a5a328-5b9a-483f-b035-4506c4a00c10", "created": "2026-10-09T15:13:10.637614Z", "modified": "2026-10-09T15:13:10.637614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10f2bfae246c6cf2490757d2f0cb5776a1ce32728eee4c0a8c1a824dc208c710']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.637614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc69baf2-d47d-4127-bb38-295ccc8aa351", "created": "2026-10-09T15:13:10.638331Z", "modified": "2026-10-09T15:13:10.638331Z", "relationship_type": "indicates", "source_ref": "indicator--53a5a328-5b9a-483f-b035-4506c4a00c10", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23641266-ca44-4b2f-a1ef-13b258b50600", "created": "2026-10-09T15:13:10.638458Z", "modified": "2026-10-09T15:13:10.638458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f6dd220e294b24fb07cd6d83cbaa22c95843d53bf42dac3171c718b4a54a2b6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.638458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4c36b5e-3823-4494-941d-dd1591603018", "created": "2026-10-09T15:13:10.639048Z", "modified": "2026-10-09T15:13:10.639048Z", "relationship_type": "indicates", "source_ref": "indicator--23641266-ca44-4b2f-a1ef-13b258b50600", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40138c3d-6d7f-42bc-84fa-08bb94aa0456", "created": "2026-10-09T15:13:10.639173Z", "modified": "2026-10-09T15:13:10.639173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='889f3a02114ddaf13744814e8c2dbbd2a09763233ce7a7d754a0e81522e63a21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.639173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0be49c3f-fcdc-4645-bc78-46a7beb0c3d2", "created": "2026-10-09T15:13:10.639776Z", "modified": "2026-10-09T15:13:10.639776Z", "relationship_type": "indicates", "source_ref": "indicator--40138c3d-6d7f-42bc-84fa-08bb94aa0456", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b867548-5b43-4b0d-bcf5-0265f406d435", "created": "2026-10-09T15:13:10.639901Z", "modified": "2026-10-09T15:13:10.639901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e09db4f4b440124f948564ca08cb625d23d61f28f7e2ef8b8f33a46c07bd289']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.639901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96d76873-f327-40d2-b612-03520fc97ad2", "created": "2026-10-09T15:13:10.640496Z", "modified": "2026-10-09T15:13:10.640496Z", "relationship_type": "indicates", "source_ref": "indicator--3b867548-5b43-4b0d-bcf5-0265f406d435", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69489c2b-3ef0-44e8-a37a-dbfd1d37ecee", "created": "2026-10-09T15:13:10.640618Z", "modified": "2026-10-09T15:13:10.640618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8ddfb75a8481f27c13b8397469225420bfd819ee0f6b6bfad1f54feca0874f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.640618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4527556f-7aed-4e5a-9732-7457a97175db", "created": "2026-10-09T15:13:10.641206Z", "modified": "2026-10-09T15:13:10.641206Z", "relationship_type": "indicates", "source_ref": "indicator--69489c2b-3ef0-44e8-a37a-dbfd1d37ecee", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3db67d-da80-4efc-82dc-293a17a712fb", "created": "2026-10-09T15:13:10.641342Z", "modified": "2026-10-09T15:13:10.641342Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93a6dcbfbad555c6f750f103fcd971aa74c5c5bb482f528e81ef645691d4c7cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.641342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dc06783-7643-49a0-883c-a4e79e43cc2c", "created": "2026-10-09T15:13:10.64193Z", "modified": "2026-10-09T15:13:10.64193Z", "relationship_type": "indicates", "source_ref": "indicator--8e3db67d-da80-4efc-82dc-293a17a712fb", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03140dce-ab6c-4247-add9-5166d83dd129", "created": "2026-10-09T15:13:10.642054Z", "modified": "2026-10-09T15:13:10.642054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='abe0f911850cc3bd67f6c2679461cf86cbe4b970075d9bbdfca8ecdba91f365f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.642054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--712247de-3987-4b06-9527-3fe198b35d96", "created": "2026-10-09T15:13:10.642662Z", "modified": "2026-10-09T15:13:10.642662Z", "relationship_type": "indicates", "source_ref": "indicator--03140dce-ab6c-4247-add9-5166d83dd129", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52910e6-2938-45b1-8d4e-177adb2e6e89", "created": "2026-10-09T15:13:10.642784Z", "modified": "2026-10-09T15:13:10.642784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b24256be131fd2c3a6147bcb0f55d686caf7b5c9c65c992cbc9aa6ffeadda0fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.642784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef082750-b928-44d4-b0e4-18976db3fe8d", "created": "2026-10-09T15:13:10.643387Z", "modified": "2026-10-09T15:13:10.643387Z", "relationship_type": "indicates", "source_ref": "indicator--d52910e6-2938-45b1-8d4e-177adb2e6e89", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51df9bf4-0e3c-4c80-975a-7cbc944381f7", "created": "2026-10-09T15:13:10.643509Z", "modified": "2026-10-09T15:13:10.643509Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spappm_mondow.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.643509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c625a320-12d6-4e85-9068-db0283b1a218", "created": "2026-10-09T15:13:10.643973Z", "modified": "2026-10-09T15:13:10.643973Z", "relationship_type": "indicates", "source_ref": "indicator--51df9bf4-0e3c-4c80-975a-7cbc944381f7", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14288ebf-de73-4ddb-8adb-a3b0d26f6903", "created": "2026-10-09T15:13:10.644089Z", "modified": "2026-10-09T15:13:10.644089Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.monspap.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.644089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96d69c29-7026-43bd-ade7-8a84b2d7ecce", "created": "2026-10-09T15:13:10.644664Z", "modified": "2026-10-09T15:13:10.644664Z", "relationship_type": "indicates", "source_ref": "indicator--14288ebf-de73-4ddb-8adb-a3b0d26f6903", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fc2a8f-3ef3-4991-85ff-c12abb34df9e", "created": "2026-10-09T15:13:10.644792Z", "modified": "2026-10-09T15:13:10.644792Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.snapchat.trmonap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.644792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e43da41-26cd-49f7-bd6c-f86824470ba4", "created": "2026-10-09T15:13:10.645258Z", "modified": "2026-10-09T15:13:10.645258Z", "relationship_type": "indicates", "source_ref": "indicator--12fc2a8f-3ef3-4991-85ff-c12abb34df9e", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9f7287-7274-41b4-9914-a5a2314a9763", "created": "2026-10-09T15:13:10.645393Z", "modified": "2026-10-09T15:13:10.645393Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.snapch.monabcab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.645393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4851528-ed13-4594-a78a-8d307a294a91", "created": "2026-10-09T15:13:10.645857Z", "modified": "2026-10-09T15:13:10.645857Z", "relationship_type": "indicates", "source_ref": "indicator--5f9f7287-7274-41b4-9914-a5a2314a9763", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197ce85c-845d-472b-ab24-7a28f636fd03", "created": "2026-10-09T15:13:10.645979Z", "modified": "2026-10-09T15:13:10.645979Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4A3742E0C96AFB91954D613AAA637076750E5A0B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.645979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc822150-be1d-411a-8bcf-9a86bea9c7cf", "created": "2026-10-09T15:13:10.646533Z", "modified": "2026-10-09T15:13:10.646533Z", "relationship_type": "indicates", "source_ref": "indicator--197ce85c-845d-472b-ab24-7a28f636fd03", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a29757-1e81-494c-995d-adf5972da438", "created": "2026-10-09T15:13:10.646662Z", "modified": "2026-10-09T15:13:10.646662Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FC5A4AD10F0686AA8EAE2C08BA13CC451CBD6037']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.646662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a73a73b-fae3-422d-bd23-4fadb5c8701b", "created": "2026-10-09T15:13:10.647212Z", "modified": "2026-10-09T15:13:10.647212Z", "relationship_type": "indicates", "source_ref": "indicator--86a29757-1e81-494c-995d-adf5972da438", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78abaaaf-5757-4ccf-8b65-48120a78d6ca", "created": "2026-10-09T15:13:10.647349Z", "modified": "2026-10-09T15:13:10.647349Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='892C4F172AD3262EC398B40BBF8130C6421040A1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.647349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c9f54e0-51f2-43dd-b56c-15e46c51251c", "created": "2026-10-09T15:13:10.647889Z", "modified": "2026-10-09T15:13:10.647889Z", "relationship_type": "indicates", "source_ref": "indicator--78abaaaf-5757-4ccf-8b65-48120a78d6ca", "target_ref": "malware--daa01e0b-9545-4001-a587-4194354881e1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8", "created": "2026-10-09T15:13:10.648006Z", "modified": "2026-10-09T15:13:10.648006Z", "name": "bark", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80f0567-ac4d-4bd4-bb67-8dec4be43b9d", "created": "2026-10-09T15:13:10.648125Z", "modified": "2026-10-09T15:13:10.648125Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bark-android-media.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.648125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab90c416-0a28-452d-8384-d598f8c7fc49", "created": "2026-10-09T15:13:10.648638Z", "modified": "2026-10-09T15:13:10.648638Z", "relationship_type": "indicates", "source_ref": "indicator--b80f0567-ac4d-4bd4-bb67-8dec4be43b9d", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ba59a9-1f52-4bac-acf2-bdd673766f76", "created": "2026-10-09T15:13:10.648758Z", "modified": "2026-10-09T15:13:10.648758Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.bark.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.648758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab9e29de-8bc4-49e8-937d-660edaee03f9", "created": "2026-10-09T15:13:10.649223Z", "modified": "2026-10-09T15:13:10.649223Z", "relationship_type": "indicates", "source_ref": "indicator--15ba59a9-1f52-4bac-acf2-bdd673766f76", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--887bd5e2-85cb-4f2b-ae02-e38a8a7fcdff", "created": "2026-10-09T15:13:10.649359Z", "modified": "2026-10-09T15:13:10.649359Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bark.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.649359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--932a8a14-e94b-48fd-94b0-74b82d432d27", "created": "2026-10-09T15:13:10.649824Z", "modified": "2026-10-09T15:13:10.649824Z", "relationship_type": "indicates", "source_ref": "indicator--887bd5e2-85cb-4f2b-ae02-e38a8a7fcdff", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4ff1c6-9de1-4a5f-bb96-a7bbfe8b4e47", "created": "2026-10-09T15:13:10.649941Z", "modified": "2026-10-09T15:13:10.649941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.bark.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.649941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6956bcef-dcb9-4631-b989-71b71f6594d5", "created": "2026-10-09T15:13:10.650536Z", "modified": "2026-10-09T15:13:10.650536Z", "relationship_type": "indicates", "source_ref": "indicator--ee4ff1c6-9de1-4a5f-bb96-a7bbfe8b4e47", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fa11d2-4d4f-47c6-8567-6fcedd4e0aab", "created": "2026-10-09T15:13:10.650662Z", "modified": "2026-10-09T15:13:10.650662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15e1f4f4aba5f8b7a6a7240e8b4de60457ba98deb148d8173b52dba85970bee3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.650662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af8363b7-7797-4b4b-b093-fa1ae587e563", "created": "2026-10-09T15:13:10.651254Z", "modified": "2026-10-09T15:13:10.651254Z", "relationship_type": "indicates", "source_ref": "indicator--73fa11d2-4d4f-47c6-8567-6fcedd4e0aab", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9496e1e8-00ec-44ba-9b66-de20b0cd5a7b", "created": "2026-10-09T15:13:10.651396Z", "modified": "2026-10-09T15:13:10.651396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='835514ca64e0930f805eaf1d815ebef083d3ae20db42909f0ea4f8763d1a1db5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.651396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ab5a0ce-019a-4980-bab2-e34dd98cce53", "created": "2026-10-09T15:13:10.65198Z", "modified": "2026-10-09T15:13:10.65198Z", "relationship_type": "indicates", "source_ref": "indicator--9496e1e8-00ec-44ba-9b66-de20b0cd5a7b", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a526a9dd-f93f-4087-a92a-38ed7e74799a", "created": "2026-10-09T15:13:10.652099Z", "modified": "2026-10-09T15:13:10.652099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='718b0cb36352f59b4749b26e7851978f1dc0fe24228711ae4f21fe62a41b314a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.652099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52a9d428-c1f7-48f9-bc2c-693151bded00", "created": "2026-10-09T15:13:10.652691Z", "modified": "2026-10-09T15:13:10.652691Z", "relationship_type": "indicates", "source_ref": "indicator--a526a9dd-f93f-4087-a92a-38ed7e74799a", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c47a47f-fb9b-4abe-b7f3-75df5e161cbe", "created": "2026-10-09T15:13:10.652817Z", "modified": "2026-10-09T15:13:10.652817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b574045c8983e1ca4c9a0a0103844296994ecc304cada4d9830cd3427d270b54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.652817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1272ef7-a15c-4bba-9415-8d8101be132d", "created": "2026-10-09T15:13:10.653413Z", "modified": "2026-10-09T15:13:10.653413Z", "relationship_type": "indicates", "source_ref": "indicator--2c47a47f-fb9b-4abe-b7f3-75df5e161cbe", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1575f2e9-295d-46a7-8cdf-3fc945e0c159", "created": "2026-10-09T15:13:10.653537Z", "modified": "2026-10-09T15:13:10.653537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='056214972afaad012b421bbf196b8f2252e99563b7c32c0ba326b2f0989c5b47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.653537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01d2b33f-0422-4195-b615-027adeaa1728", "created": "2026-10-09T15:13:10.654121Z", "modified": "2026-10-09T15:13:10.654121Z", "relationship_type": "indicates", "source_ref": "indicator--1575f2e9-295d-46a7-8cdf-3fc945e0c159", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b974d44-4ae7-4443-a5d3-fbb52472fe20", "created": "2026-10-09T15:13:10.654242Z", "modified": "2026-10-09T15:13:10.654242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb381588f8d94518930f0cfd4f2b70810eddc1e0cff2bfd1e5981f5615d7a0a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.654242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e255e4d-cae4-4b3c-a87c-f7befa71c37f", "created": "2026-10-09T15:13:10.65484Z", "modified": "2026-10-09T15:13:10.65484Z", "relationship_type": "indicates", "source_ref": "indicator--7b974d44-4ae7-4443-a5d3-fbb52472fe20", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddd6300-8976-4588-a1e3-3f8bd0b7e6c0", "created": "2026-10-09T15:13:10.654959Z", "modified": "2026-10-09T15:13:10.654959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d36a693ab2b8de1049231e3e69238a9834dd4b5a2658ed672f8a94e971cdac0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.654959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19f44886-cc8a-43f1-a32b-6e840a3dcd67", "created": "2026-10-09T15:13:10.655565Z", "modified": "2026-10-09T15:13:10.655565Z", "relationship_type": "indicates", "source_ref": "indicator--0ddd6300-8976-4588-a1e3-3f8bd0b7e6c0", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45bd93f-5f50-4b3c-bdc5-60d96b18d84a", "created": "2026-10-09T15:13:10.655686Z", "modified": "2026-10-09T15:13:10.655686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6429aea12fce67d62396222506b8b1b02ad18b14eaf78e10a00d836d9fe8954a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.655686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00d05f0a-7e2b-4fd0-bf06-3e66f419bff8", "created": "2026-10-09T15:13:10.656285Z", "modified": "2026-10-09T15:13:10.656285Z", "relationship_type": "indicates", "source_ref": "indicator--d45bd93f-5f50-4b3c-bdc5-60d96b18d84a", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb998f5a-ca2a-441b-a959-789d03f81f41", "created": "2026-10-09T15:13:10.656409Z", "modified": "2026-10-09T15:13:10.656409Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.pt.bark']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.656409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa06d758-d1fa-4bc3-a1e5-f14e0f774698", "created": "2026-10-09T15:13:10.656968Z", "modified": "2026-10-09T15:13:10.656968Z", "relationship_type": "indicates", "source_ref": "indicator--bb998f5a-ca2a-441b-a959-789d03f81f41", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95481334-7038-4fb4-8bfd-e6841da9dfe2", "created": "2026-10-09T15:13:10.657091Z", "modified": "2026-10-09T15:13:10.657091Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='473F919A69BBAD3457AF2F0E3AFC34E513F103F1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.657091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03589eff-5a68-48dc-a414-e116fec597a3", "created": "2026-10-09T15:13:10.657644Z", "modified": "2026-10-09T15:13:10.657644Z", "relationship_type": "indicates", "source_ref": "indicator--95481334-7038-4fb4-8bfd-e6841da9dfe2", "target_ref": "malware--969906dd-36bb-4c59-8a7c-959f3c4e7ca8"}, {"type": "malware", "spec_version": "2.1", "id": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1", "created": "2026-10-09T15:13:10.657765Z", "modified": "2026-10-09T15:13:10.657765Z", "name": "SpyLive360", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be7cefd-30dc-4cee-8091-789ec55dd5da", "created": "2026-10-09T15:13:10.657883Z", "modified": "2026-10-09T15:13:10.657883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s1.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.657883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f13cf6a1-84ae-486b-b30a-2cbd624a33d2", "created": "2026-10-09T15:13:10.658369Z", "modified": "2026-10-09T15:13:10.658369Z", "relationship_type": "indicates", "source_ref": "indicator--0be7cefd-30dc-4cee-8091-789ec55dd5da", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3936c615-31f5-424f-a0c8-d8cf5ec513b3", "created": "2026-10-09T15:13:10.658491Z", "modified": "2026-10-09T15:13:10.658491Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s2.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.658491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f690537-711d-4044-8dac-6ad0d739d0cb", "created": "2026-10-09T15:13:10.65896Z", "modified": "2026-10-09T15:13:10.65896Z", "relationship_type": "indicates", "source_ref": "indicator--3936c615-31f5-424f-a0c8-d8cf5ec513b3", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6061000a-b29e-4fb5-8d69-5e451940f716", "created": "2026-10-09T15:13:10.659075Z", "modified": "2026-10-09T15:13:10.659075Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s3.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.659075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70c3dee0-159a-457c-a05d-a722d21f1235", "created": "2026-10-09T15:13:10.659559Z", "modified": "2026-10-09T15:13:10.659559Z", "relationship_type": "indicates", "source_ref": "indicator--6061000a-b29e-4fb5-8d69-5e451940f716", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802d3ee5-8b6e-49bb-bf71-4745b361b73b", "created": "2026-10-09T15:13:10.659679Z", "modified": "2026-10-09T15:13:10.659679Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.659679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04704d4f-58f4-45d6-80e7-c2d49ac39e70", "created": "2026-10-09T15:13:10.660145Z", "modified": "2026-10-09T15:13:10.660145Z", "relationship_type": "indicates", "source_ref": "indicator--802d3ee5-8b6e-49bb-bf71-4745b361b73b", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee24b194-4101-4e9d-858a-ca5b376400f1", "created": "2026-10-09T15:13:10.660263Z", "modified": "2026-10-09T15:13:10.660263Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sl360-7ba65.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.660263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--692d0432-5fef-4c47-bb95-d6bcb233fa5b", "created": "2026-10-09T15:13:10.660765Z", "modified": "2026-10-09T15:13:10.660765Z", "relationship_type": "indicates", "source_ref": "indicator--ee24b194-4101-4e9d-858a-ca5b376400f1", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5fe8ae-c08a-4962-804c-35612d985bcb", "created": "2026-10-09T15:13:10.660889Z", "modified": "2026-10-09T15:13:10.660889Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.660889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b71de5d-ef8a-4385-922d-df4f7f897cd8", "created": "2026-10-09T15:13:10.661368Z", "modified": "2026-10-09T15:13:10.661368Z", "relationship_type": "indicates", "source_ref": "indicator--3c5fe8ae-c08a-4962-804c-35612d985bcb", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e91efd-5353-4a77-af72-e21eb14fb90a", "created": "2026-10-09T15:13:10.661487Z", "modified": "2026-10-09T15:13:10.661487Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.661487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62be4914-41eb-45fd-8b54-e5751115fa1d", "created": "2026-10-09T15:13:10.66196Z", "modified": "2026-10-09T15:13:10.66196Z", "relationship_type": "indicates", "source_ref": "indicator--74e91efd-5353-4a77-af72-e21eb14fb90a", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f84354c-b3c1-476d-9359-9763fd801e93", "created": "2026-10-09T15:13:10.662076Z", "modified": "2026-10-09T15:13:10.662076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffa1751b7677a762d006f4c8fed57253cbf592db98e1914c252965a8de621cb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.662076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1af35810-6c6f-4c2b-a0f6-66985704f62f", "created": "2026-10-09T15:13:10.662775Z", "modified": "2026-10-09T15:13:10.662775Z", "relationship_type": "indicates", "source_ref": "indicator--5f84354c-b3c1-476d-9359-9763fd801e93", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43bbfc6-c0d7-4bba-91e2-1228f45580ff", "created": "2026-10-09T15:13:10.6629Z", "modified": "2026-10-09T15:13:10.6629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe3b4aa318a7f9c16c9afb8dda2d20fa92ce3c2e16573bffb5b7c21c4330e71f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.6629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bde75b83-de2a-48af-aa7b-f815bda91314", "created": "2026-10-09T15:13:10.663504Z", "modified": "2026-10-09T15:13:10.663504Z", "relationship_type": "indicates", "source_ref": "indicator--d43bbfc6-c0d7-4bba-91e2-1228f45580ff", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6037c9-34d1-4f29-a17c-0a710b964e8b", "created": "2026-10-09T15:13:10.663627Z", "modified": "2026-10-09T15:13:10.663627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac4d5c7dc1bfd8cb544360da6b48530d69f784132ed76e340f27d7f6c93db42d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.663627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2108917d-1f4c-4d18-8084-836a00057871", "created": "2026-10-09T15:13:10.664215Z", "modified": "2026-10-09T15:13:10.664215Z", "relationship_type": "indicates", "source_ref": "indicator--6c6037c9-34d1-4f29-a17c-0a710b964e8b", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539ac314-233a-4bba-8dc4-ec8f12f0bf89", "created": "2026-10-09T15:13:10.664349Z", "modified": "2026-10-09T15:13:10.664349Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sl360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.664349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edbde928-19a5-4dc9-b513-b2971530ec12", "created": "2026-10-09T15:13:10.664794Z", "modified": "2026-10-09T15:13:10.664794Z", "relationship_type": "indicates", "source_ref": "indicator--539ac314-233a-4bba-8dc4-ec8f12f0bf89", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc6f01b-e706-44b6-9121-a381a35b2762", "created": "2026-10-09T15:13:10.664913Z", "modified": "2026-10-09T15:13:10.664913Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.itqredn8dzrl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.664913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6f1fbd7-5254-4277-9d6a-fdc9819e24dc", "created": "2026-10-09T15:13:10.665372Z", "modified": "2026-10-09T15:13:10.665372Z", "relationship_type": "indicates", "source_ref": "indicator--5fc6f01b-e706-44b6-9121-a381a35b2762", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c6a03d-b7be-4a5e-8214-b4ae1a4cfde6", "created": "2026-10-09T15:13:10.665492Z", "modified": "2026-10-09T15:13:10.665492Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wifi0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.665492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e150d87-f150-4598-b07c-9040586f73fd", "created": "2026-10-09T15:13:10.665939Z", "modified": "2026-10-09T15:13:10.665939Z", "relationship_type": "indicates", "source_ref": "indicator--55c6a03d-b7be-4a5e-8214-b4ae1a4cfde6", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa7ef52-d01a-4818-a93b-43e8bef84979", "created": "2026-10-09T15:13:10.666058Z", "modified": "2026-10-09T15:13:10.666058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.w0f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.666058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4aebfd8-02c4-4dcd-91bf-f68735c61ef5", "created": "2026-10-09T15:13:10.666507Z", "modified": "2026-10-09T15:13:10.666507Z", "relationship_type": "indicates", "source_ref": "indicator--aaa7ef52-d01a-4818-a93b-43e8bef84979", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c325d1b8-7270-4210-a3a7-a727727eca47", "created": "2026-10-09T15:13:10.666626Z", "modified": "2026-10-09T15:13:10.666626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.w1f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.666626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cde360b-4808-4ca5-b174-f65a1d8285f3", "created": "2026-10-09T15:13:10.667073Z", "modified": "2026-10-09T15:13:10.667073Z", "relationship_type": "indicates", "source_ref": "indicator--c325d1b8-7270-4210-a3a7-a727727eca47", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc4d5d2-dc1b-41fc-804a-a120735d882c", "created": "2026-10-09T15:13:10.667194Z", "modified": "2026-10-09T15:13:10.667194Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='73BF44A503427F7682C7136B109631E3BE4114DE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.667194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c802bc0-eb2d-42f1-ae0e-e693e52a51ae", "created": "2026-10-09T15:13:10.667745Z", "modified": "2026-10-09T15:13:10.667745Z", "relationship_type": "indicates", "source_ref": "indicator--9dc4d5d2-dc1b-41fc-804a-a120735d882c", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84c841b-ba5c-4ab7-8ce9-c19f758d28c5", "created": "2026-10-09T15:13:10.667865Z", "modified": "2026-10-09T15:13:10.667865Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='630BB83172B184A6571126229E2B2DCA2EB4123F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.667865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78dfb050-975a-436e-a572-e8853210545a", "created": "2026-10-09T15:13:10.668522Z", "modified": "2026-10-09T15:13:10.668522Z", "relationship_type": "indicates", "source_ref": "indicator--b84c841b-ba5c-4ab7-8ce9-c19f758d28c5", "target_ref": "malware--da70abfa-659c-4b90-b7ed-102ca1521ff1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5", "created": "2026-10-09T15:13:10.668646Z", "modified": "2026-10-09T15:13:10.668646Z", "name": "XNSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc53795-93c1-4ee2-8850-fe54efb3f0d7", "created": "2026-10-09T15:13:10.668769Z", "modified": "2026-10-09T15:13:10.668769Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.668769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d057301b-1adb-42c0-adfc-67a073d7a1e5", "created": "2026-10-09T15:13:10.669239Z", "modified": "2026-10-09T15:13:10.669239Z", "relationship_type": "indicates", "source_ref": "indicator--fcc53795-93c1-4ee2-8850-fe54efb3f0d7", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5138e9c6-d6a3-45ea-b5aa-24968e07f42b", "created": "2026-10-09T15:13:10.669377Z", "modified": "2026-10-09T15:13:10.669377Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync.xiz4me.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.669377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d17aa5d-9016-4069-ad92-c813359b197c", "created": "2026-10-09T15:13:10.669856Z", "modified": "2026-10-09T15:13:10.669856Z", "relationship_type": "indicates", "source_ref": "indicator--5138e9c6-d6a3-45ea-b5aa-24968e07f42b", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea87742-9f8a-484d-b094-a428e042c0c0", "created": "2026-10-09T15:13:10.669979Z", "modified": "2026-10-09T15:13:10.669979Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alert.xiz4me.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.669979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94e009ed-a008-4fda-9115-ce92b5ab3c3e", "created": "2026-10-09T15:13:10.670462Z", "modified": "2026-10-09T15:13:10.670462Z", "relationship_type": "indicates", "source_ref": "indicator--aea87742-9f8a-484d-b094-a428e042c0c0", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344e3d59-6c29-42e6-a25c-1ede595e0824", "created": "2026-10-09T15:13:10.670583Z", "modified": "2026-10-09T15:13:10.670583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mydwnd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.670583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e8d432d-1f0d-4415-8382-23dc8dea4d22", "created": "2026-10-09T15:13:10.671045Z", "modified": "2026-10-09T15:13:10.671045Z", "relationship_type": "indicates", "source_ref": "indicator--344e3d59-6c29-42e6-a25c-1ede595e0824", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4679a8-a5b0-4d7d-818f-6f749c92c748", "created": "2026-10-09T15:13:10.671163Z", "modified": "2026-10-09T15:13:10.671163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mydwnd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.671163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a22b0d9-81f0-46fb-af53-9f670125dc36", "created": "2026-10-09T15:13:10.671649Z", "modified": "2026-10-09T15:13:10.671649Z", "relationship_type": "indicates", "source_ref": "indicator--1e4679a8-a5b0-4d7d-818f-6f749c92c748", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18f92f4-a744-43f8-af5e-778dfbb33b4e", "created": "2026-10-09T15:13:10.67177Z", "modified": "2026-10-09T15:13:10.67177Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brilliant-flame-585.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.67177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bb54dcb-7735-4aeb-abd4-ebfaf6866f3b", "created": "2026-10-09T15:13:10.672257Z", "modified": "2026-10-09T15:13:10.672257Z", "relationship_type": "indicates", "source_ref": "indicator--c18f92f4-a744-43f8-af5e-778dfbb33b4e", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4517fce-11d7-4ef1-968b-e6413d1e3490", "created": "2026-10-09T15:13:10.672388Z", "modified": "2026-10-09T15:13:10.672388Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='true-truck-86810.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.672388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecfa2c3b-b85c-4602-bb76-99629e186637", "created": "2026-10-09T15:13:10.672874Z", "modified": "2026-10-09T15:13:10.672874Z", "relationship_type": "indicates", "source_ref": "indicator--c4517fce-11d7-4ef1-968b-e6413d1e3490", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2431e278-4391-4e30-87be-3588b7a984e1", "created": "2026-10-09T15:13:10.67299Z", "modified": "2026-10-09T15:13:10.67299Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync.bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.67299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--366c4a01-98a4-4655-9ec3-1cc096cbfc06", "created": "2026-10-09T15:13:10.673476Z", "modified": "2026-10-09T15:13:10.673476Z", "relationship_type": "indicates", "source_ref": "indicator--2431e278-4391-4e30-87be-3588b7a984e1", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c644d993-9695-4186-a3af-2758c9f37dde", "created": "2026-10-09T15:13:10.673598Z", "modified": "2026-10-09T15:13:10.673598Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='asset.bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.673598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70ba6ee4-962d-4e2e-b87c-c8337f35779f", "created": "2026-10-09T15:13:10.674159Z", "modified": "2026-10-09T15:13:10.674159Z", "relationship_type": "indicates", "source_ref": "indicator--c644d993-9695-4186-a3af-2758c9f37dde", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a62e9a-4067-4a9a-8c92-337484e1759f", "created": "2026-10-09T15:13:10.67429Z", "modified": "2026-10-09T15:13:10.67429Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alert.bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.67429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7018cb18-b4b1-4153-93b9-719454b0d8de", "created": "2026-10-09T15:13:10.674761Z", "modified": "2026-10-09T15:13:10.674761Z", "relationship_type": "indicates", "source_ref": "indicator--b9a62e9a-4067-4a9a-8c92-337484e1759f", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9824cc4e-5c19-40d7-9b21-41a1f3fba33f", "created": "2026-10-09T15:13:10.674878Z", "modified": "2026-10-09T15:13:10.674878Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.674878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5384504b-9d20-4c66-9bcf-53d9c77e297b", "created": "2026-10-09T15:13:10.675347Z", "modified": "2026-10-09T15:13:10.675347Z", "relationship_type": "indicates", "source_ref": "indicator--9824cc4e-5c19-40d7-9b21-41a1f3fba33f", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a112acc6-69db-4eb0-a494-5f11e606716a", "created": "2026-10-09T15:13:10.675468Z", "modified": "2026-10-09T15:13:10.675468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wppspy.tech']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.675468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bc2a3ee-c5e3-41fc-8725-121f93f03d28", "created": "2026-10-09T15:13:10.675936Z", "modified": "2026-10-09T15:13:10.675936Z", "relationship_type": "indicates", "source_ref": "indicator--a112acc6-69db-4eb0-a494-5f11e606716a", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe8dac8-b974-47b5-98d7-51ee34fce055", "created": "2026-10-09T15:13:10.676057Z", "modified": "2026-10-09T15:13:10.676057Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.676057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--975b1d5a-16d3-4ab8-97f4-5db2de3bebbd", "created": "2026-10-09T15:13:10.676527Z", "modified": "2026-10-09T15:13:10.676527Z", "relationship_type": "indicates", "source_ref": "indicator--cfe8dac8-b974-47b5-98d7-51ee34fce055", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f651649-0034-469a-a9b2-98830b2633da", "created": "2026-10-09T15:13:10.67665Z", "modified": "2026-10-09T15:13:10.67665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.xnspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.67665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fc8dd4f-027f-4ffc-b8a7-b32b5e9112df", "created": "2026-10-09T15:13:10.677126Z", "modified": "2026-10-09T15:13:10.677126Z", "relationship_type": "indicates", "source_ref": "indicator--2f651649-0034-469a-a9b2-98830b2633da", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f79033-4323-46f0-b952-066472c4bbf5", "created": "2026-10-09T15:13:10.67725Z", "modified": "2026-10-09T15:13:10.67725Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c5feab2d8e94bff833f60281f10b22b2c08ec23ce1eb2a3f125f6cf268268d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.67725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5cab6a3-c1c4-4478-ae17-00670ba85b97", "created": "2026-10-09T15:13:10.677851Z", "modified": "2026-10-09T15:13:10.677851Z", "relationship_type": "indicates", "source_ref": "indicator--d0f79033-4323-46f0-b952-066472c4bbf5", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e57183c-fcf1-4296-af95-c572c2789cdb", "created": "2026-10-09T15:13:10.677972Z", "modified": "2026-10-09T15:13:10.677972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9114e561c42ea19b183ef5d8a36e743f2b873874e43d805b11e3753035c7900d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.677972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bba5ca09-72d6-4049-86be-7874e0fda52c", "created": "2026-10-09T15:13:10.678573Z", "modified": "2026-10-09T15:13:10.678573Z", "relationship_type": "indicates", "source_ref": "indicator--9e57183c-fcf1-4296-af95-c572c2789cdb", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72946a63-79b0-4efd-8739-71b0a8e5070f", "created": "2026-10-09T15:13:10.678697Z", "modified": "2026-10-09T15:13:10.678697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f23f1638a083b6f2a44cfe766cad2f703b4396b2dab9a0706292583f20b0579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.678697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbfb9c40-3e49-4353-954e-c1b53a589f9a", "created": "2026-10-09T15:13:10.679287Z", "modified": "2026-10-09T15:13:10.679287Z", "relationship_type": "indicates", "source_ref": "indicator--72946a63-79b0-4efd-8739-71b0a8e5070f", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e834da-728e-4927-a717-c12a63efd742", "created": "2026-10-09T15:13:10.679409Z", "modified": "2026-10-09T15:13:10.679409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71bb5bdba97dda0d31f800d806474cde6bc048046e04c7fcb4ac45160eb20632']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.679409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8eacd866-b3cd-4188-bb30-d92a0c6fd5f6", "created": "2026-10-09T15:13:10.680093Z", "modified": "2026-10-09T15:13:10.680093Z", "relationship_type": "indicates", "source_ref": "indicator--05e834da-728e-4927-a717-c12a63efd742", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29627146-f4f3-40c3-846f-e48d3b53a7d7", "created": "2026-10-09T15:13:10.680218Z", "modified": "2026-10-09T15:13:10.680218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8454811237761ef9998e9826a596afffb6d07506c7d7c78168135b4f3387e4c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.680218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bda9046-8ef1-46d0-b0e4-cfd17f8c2f53", "created": "2026-10-09T15:13:10.680809Z", "modified": "2026-10-09T15:13:10.680809Z", "relationship_type": "indicates", "source_ref": "indicator--29627146-f4f3-40c3-846f-e48d3b53a7d7", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9918e26d-79c1-4daa-a8c4-1be3b26b0a0b", "created": "2026-10-09T15:13:10.680932Z", "modified": "2026-10-09T15:13:10.680932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5117edc8842b8790506923c1e43516b7d7e2d2a0ef47ddd30e3cce145632f97c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.680932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ee7e6f3-f01d-44b0-807b-47ce0466ccf9", "created": "2026-10-09T15:13:10.681527Z", "modified": "2026-10-09T15:13:10.681527Z", "relationship_type": "indicates", "source_ref": "indicator--9918e26d-79c1-4daa-a8c4-1be3b26b0a0b", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a215d52-0f5e-4fc3-9b66-1339dd6b5975", "created": "2026-10-09T15:13:10.681654Z", "modified": "2026-10-09T15:13:10.681654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bf9399f29e7d1a551a2a1c5f1072046b94096bd7ea8ccb359db2ad0642a2718']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.681654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9151d728-7333-44f1-a866-0e2abb25c0aa", "created": "2026-10-09T15:13:10.682239Z", "modified": "2026-10-09T15:13:10.682239Z", "relationship_type": "indicates", "source_ref": "indicator--3a215d52-0f5e-4fc3-9b66-1339dd6b5975", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e1aa74-8455-4204-8503-8aa940894f31", "created": "2026-10-09T15:13:10.682372Z", "modified": "2026-10-09T15:13:10.682372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='532a61d269dd1e19d7ff75db2b6b35f1bb8a67b3bf219a1f63520e87737e79bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.682372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59c35a01-f58c-47a2-88a7-3aa34bf597e9", "created": "2026-10-09T15:13:10.682952Z", "modified": "2026-10-09T15:13:10.682952Z", "relationship_type": "indicates", "source_ref": "indicator--d5e1aa74-8455-4204-8503-8aa940894f31", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84b6cb8-6ecb-4269-a682-4d0d2825b421", "created": "2026-10-09T15:13:10.683072Z", "modified": "2026-10-09T15:13:10.683072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53f8d8f3aed24c4775d45b6a39a74f56a1711a874f76a57f1e2f454d09cca2ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.683072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a79d18f3-fc0c-446e-915a-374981821aa7", "created": "2026-10-09T15:13:10.683672Z", "modified": "2026-10-09T15:13:10.683672Z", "relationship_type": "indicates", "source_ref": "indicator--d84b6cb8-6ecb-4269-a682-4d0d2825b421", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e031f7-4e54-4786-8c3d-af8f86b494e6", "created": "2026-10-09T15:13:10.683794Z", "modified": "2026-10-09T15:13:10.683794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52687bd196db137bb7faa99d84c104dc9eb48f2fbfb69af3f5ed3d713095fd65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.683794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfe2948e-31af-449e-9538-e8d34c66eec5", "created": "2026-10-09T15:13:10.684406Z", "modified": "2026-10-09T15:13:10.684406Z", "relationship_type": "indicates", "source_ref": "indicator--97e031f7-4e54-4786-8c3d-af8f86b494e6", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abf82a7-5e19-4ee4-919e-eba448435794", "created": "2026-10-09T15:13:10.684529Z", "modified": "2026-10-09T15:13:10.684529Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='291ab79d3b98067b3a2374df1d12e09b3f46076caa698366b0b443c0f1cca1a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.684529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2def960-f45d-4613-b345-195de997bccb", "created": "2026-10-09T15:13:10.685129Z", "modified": "2026-10-09T15:13:10.685129Z", "relationship_type": "indicates", "source_ref": "indicator--0abf82a7-5e19-4ee4-919e-eba448435794", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a16ee85-e482-4795-a461-1333bab73f23", "created": "2026-10-09T15:13:10.685257Z", "modified": "2026-10-09T15:13:10.685257Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.system.task']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.685257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5af89a4a-9a71-4a64-b702-bfb035ac6443", "created": "2026-10-09T15:13:10.685725Z", "modified": "2026-10-09T15:13:10.685725Z", "relationship_type": "indicates", "source_ref": "indicator--9a16ee85-e482-4795-a461-1333bab73f23", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef434c87-a833-464f-b5eb-42ea4bcbcc7d", "created": "2026-10-09T15:13:10.685849Z", "modified": "2026-10-09T15:13:10.685849Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.map.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.685849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dbbb44e-4cd4-4f30-ac9d-74110acf374f", "created": "2026-10-09T15:13:10.686413Z", "modified": "2026-10-09T15:13:10.686413Z", "relationship_type": "indicates", "source_ref": "indicator--ef434c87-a833-464f-b5eb-42ea4bcbcc7d", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5b0874-78c0-4d4e-a83e-ff99bc5b49b3", "created": "2026-10-09T15:13:10.68654Z", "modified": "2026-10-09T15:13:10.68654Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.xnspy.dashboard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.68654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2fc588e-64c6-4159-afa4-5cc2ffdcbca3", "created": "2026-10-09T15:13:10.687Z", "modified": "2026-10-09T15:13:10.687Z", "relationship_type": "indicates", "source_ref": "indicator--6e5b0874-78c0-4d4e-a83e-ff99bc5b49b3", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3691b5-f958-4305-ac38-cb22438d1bc1", "created": "2026-10-09T15:13:10.687122Z", "modified": "2026-10-09T15:13:10.687122Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C276C3B087207C9D3CEEDA766C01E0BDEF7EAC71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.687122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49058893-002b-477b-ba6e-15cdda55b2d7", "created": "2026-10-09T15:13:10.687673Z", "modified": "2026-10-09T15:13:10.687673Z", "relationship_type": "indicates", "source_ref": "indicator--ae3691b5-f958-4305-ac38-cb22438d1bc1", "target_ref": "malware--6cb50882-0ca3-4476-b9b9-b772a165bce5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5eada6b4-a371-479b-8a42-6e59399f4858", "created": "2026-10-09T15:13:10.687795Z", "modified": "2026-10-09T15:13:10.687795Z", "name": "MobiSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fecc43-178e-48d7-962d-887c471d8b2b", "created": "2026-10-09T15:13:10.687913Z", "modified": "2026-10-09T15:13:10.687913Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mobispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.687913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12a83109-d7e1-46f5-8b76-81ad951dbf3d", "created": "2026-10-09T15:13:10.688391Z", "modified": "2026-10-09T15:13:10.688391Z", "relationship_type": "indicates", "source_ref": "indicator--20fecc43-178e-48d7-962d-887c471d8b2b", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5591913-394c-4cb7-b792-61c9bdecae63", "created": "2026-10-09T15:13:10.688511Z", "modified": "2026-10-09T15:13:10.688511Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.688511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6daeff61-6318-4f78-bec5-2908e3a768c5", "created": "2026-10-09T15:13:10.68898Z", "modified": "2026-10-09T15:13:10.68898Z", "relationship_type": "indicates", "source_ref": "indicator--b5591913-394c-4cb7-b792-61c9bdecae63", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb2bb07-bae0-40c4-af86-cbcc00d444d7", "created": "2026-10-09T15:13:10.689103Z", "modified": "2026-10-09T15:13:10.689103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf12b594f12d9146b488da9083a9f2937aaff6e74a89c269727a73907d2e8ac1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.689103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--696d300c-aadd-400a-a294-95ff267b9321", "created": "2026-10-09T15:13:10.689706Z", "modified": "2026-10-09T15:13:10.689706Z", "relationship_type": "indicates", "source_ref": "indicator--fbb2bb07-bae0-40c4-af86-cbcc00d444d7", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f52927-1199-4770-b322-b544466b4f6f", "created": "2026-10-09T15:13:10.689826Z", "modified": "2026-10-09T15:13:10.689826Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83415b4623010d1c8c724b9e3a55514dc869dc491bdfb0e114259ccca9ed4a81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.689826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22a47b3f-305f-4a24-9720-f82302034fde", "created": "2026-10-09T15:13:10.690421Z", "modified": "2026-10-09T15:13:10.690421Z", "relationship_type": "indicates", "source_ref": "indicator--45f52927-1199-4770-b322-b544466b4f6f", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be74507-179a-420a-ab6a-7616bbb25b6c", "created": "2026-10-09T15:13:10.690542Z", "modified": "2026-10-09T15:13:10.690542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f864889f6e2759e3ffb59cc875fbd0a2e5530a709a77efbdd28bae920890b55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.690542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c93e8806-ad38-4868-8d97-ad2207ed6327", "created": "2026-10-09T15:13:10.691131Z", "modified": "2026-10-09T15:13:10.691131Z", "relationship_type": "indicates", "source_ref": "indicator--9be74507-179a-420a-ab6a-7616bbb25b6c", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63055785-34d4-496e-8008-becdba211f1e", "created": "2026-10-09T15:13:10.691252Z", "modified": "2026-10-09T15:13:10.691252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='57bc00fd1672eb98ac23c43ac6d1c93db4ccfe0fa99a3971a4b5c7b4b87e3020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.691252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--391bd22d-c9c7-4bdd-baaf-828ab7afec56", "created": "2026-10-09T15:13:10.69187Z", "modified": "2026-10-09T15:13:10.69187Z", "relationship_type": "indicates", "source_ref": "indicator--63055785-34d4-496e-8008-becdba211f1e", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f76dbc-3e71-497c-a932-8564cbcd7e74", "created": "2026-10-09T15:13:10.691993Z", "modified": "2026-10-09T15:13:10.691993Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.psac.a.processservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.691993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86522a13-c384-4253-a3d7-8c078f353633", "created": "2026-10-09T15:13:10.69289Z", "modified": "2026-10-09T15:13:10.69289Z", "relationship_type": "indicates", "source_ref": "indicator--f5f76dbc-3e71-497c-a932-8564cbcd7e74", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba64012-d59e-4511-8d6e-1d8be26094f6", "created": "2026-10-09T15:13:10.69302Z", "modified": "2026-10-09T15:13:10.69302Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B5075AB201EE483C8ECADE1BC4FC711293D6932B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.69302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7540e32-a0fe-4d94-84d9-1e53a262413c", "created": "2026-10-09T15:13:10.693572Z", "modified": "2026-10-09T15:13:10.693572Z", "relationship_type": "indicates", "source_ref": "indicator--fba64012-d59e-4511-8d6e-1d8be26094f6", "target_ref": "malware--5eada6b4-a371-479b-8a42-6e59399f4858"}, {"type": "malware", "spec_version": "2.1", "id": "malware--bff7a801-2446-4015-892f-f5c436d63164", "created": "2026-10-09T15:13:10.693692Z", "modified": "2026-10-09T15:13:10.693692Z", "name": "NeoSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721f6a90-60f0-4444-b022-4c184d7edb14", "created": "2026-10-09T15:13:10.693816Z", "modified": "2026-10-09T15:13:10.693816Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i6.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.693816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed51ecff-917a-4236-8168-4264179fc764", "created": "2026-10-09T15:13:10.694312Z", "modified": "2026-10-09T15:13:10.694312Z", "relationship_type": "indicates", "source_ref": "indicator--721f6a90-60f0-4444-b022-4c184d7edb14", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5aeb62b-7ae5-413a-963f-e0b372dc6b58", "created": "2026-10-09T15:13:10.694435Z", "modified": "2026-10-09T15:13:10.694435Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i7.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.694435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40d018ee-6d8e-432f-812f-513bb21e8b7e", "created": "2026-10-09T15:13:10.694906Z", "modified": "2026-10-09T15:13:10.694906Z", "relationship_type": "indicates", "source_ref": "indicator--e5aeb62b-7ae5-413a-963f-e0b372dc6b58", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa24e710-0131-4b0b-b027-4f9b8f212b7c", "created": "2026-10-09T15:13:10.695024Z", "modified": "2026-10-09T15:13:10.695024Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i8.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.695024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fa2e919-4876-44dc-b590-69d8be9688a3", "created": "2026-10-09T15:13:10.695504Z", "modified": "2026-10-09T15:13:10.695504Z", "relationship_type": "indicates", "source_ref": "indicator--aa24e710-0131-4b0b-b027-4f9b8f212b7c", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2429451b-314a-4fff-9626-f11612675482", "created": "2026-10-09T15:13:10.695624Z", "modified": "2026-10-09T15:13:10.695624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i9.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.695624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e287904-b5a6-490e-91c5-791836da8018", "created": "2026-10-09T15:13:10.696106Z", "modified": "2026-10-09T15:13:10.696106Z", "relationship_type": "indicates", "source_ref": "indicator--2429451b-314a-4fff-9626-f11612675482", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd226e6-730f-4d29-aa2f-b43c1554ae25", "created": "2026-10-09T15:13:10.696232Z", "modified": "2026-10-09T15:13:10.696232Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i10.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.696232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dfd3858-261b-4eff-a8d8-2eac247f55cf", "created": "2026-10-09T15:13:10.696724Z", "modified": "2026-10-09T15:13:10.696724Z", "relationship_type": "indicates", "source_ref": "indicator--9bd226e6-730f-4d29-aa2f-b43c1554ae25", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65600346-f24d-4a87-ad46-3422a716ec15", "created": "2026-10-09T15:13:10.696847Z", "modified": "2026-10-09T15:13:10.696847Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i11.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.696847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71fbfc21-396f-44ff-9c21-4a4bf49ec80e", "created": "2026-10-09T15:13:10.697332Z", "modified": "2026-10-09T15:13:10.697332Z", "relationship_type": "indicates", "source_ref": "indicator--65600346-f24d-4a87-ad46-3422a716ec15", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3680d0-9a74-41c0-8a3d-5626330c68a4", "created": "2026-10-09T15:13:10.697452Z", "modified": "2026-10-09T15:13:10.697452Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i12.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.697452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebe651bf-35af-4b42-bc19-c5eef89cf225", "created": "2026-10-09T15:13:10.697927Z", "modified": "2026-10-09T15:13:10.697927Z", "relationship_type": "indicates", "source_ref": "indicator--2b3680d0-9a74-41c0-8a3d-5626330c68a4", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4051e940-8b1f-4db5-a701-be7b93f888e5", "created": "2026-10-09T15:13:10.698044Z", "modified": "2026-10-09T15:13:10.698044Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i13.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.698044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c3bd2ec-1476-4148-8d88-36c46fbcab67", "created": "2026-10-09T15:13:10.698652Z", "modified": "2026-10-09T15:13:10.698652Z", "relationship_type": "indicates", "source_ref": "indicator--4051e940-8b1f-4db5-a701-be7b93f888e5", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1582e95b-a44b-45ee-a407-bb64daf8aef9", "created": "2026-10-09T15:13:10.698778Z", "modified": "2026-10-09T15:13:10.698778Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.698778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--380e109b-7895-4fa6-943f-1c7976f65081", "created": "2026-10-09T15:13:10.699255Z", "modified": "2026-10-09T15:13:10.699255Z", "relationship_type": "indicates", "source_ref": "indicator--1582e95b-a44b-45ee-a407-bb64daf8aef9", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe44693-03e0-48bd-90ec-e9095ad585b9", "created": "2026-10-09T15:13:10.699391Z", "modified": "2026-10-09T15:13:10.699391Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neospy.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.699391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--daace34a-91ef-4ab4-9dc1-8a0c3b913ebe", "created": "2026-10-09T15:13:10.699875Z", "modified": "2026-10-09T15:13:10.699875Z", "relationship_type": "indicates", "source_ref": "indicator--2fe44693-03e0-48bd-90ec-e9095ad585b9", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78242e93-09df-48c2-82fd-ff0b1065169c", "created": "2026-10-09T15:13:10.699999Z", "modified": "2026-10-09T15:13:10.699999Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.699999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a8ffdc9-ae5b-475e-b5d5-df30d5436735", "created": "2026-10-09T15:13:10.700469Z", "modified": "2026-10-09T15:13:10.700469Z", "relationship_type": "indicates", "source_ref": "indicator--78242e93-09df-48c2-82fd-ff0b1065169c", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2788326c-335f-4df4-a2b7-5a3f03b69843", "created": "2026-10-09T15:13:10.700589Z", "modified": "2026-10-09T15:13:10.700589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neospy.tech']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.700589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ef8d865-787e-4a41-829e-d88809d189f2", "created": "2026-10-09T15:13:10.701046Z", "modified": "2026-10-09T15:13:10.701046Z", "relationship_type": "indicates", "source_ref": "indicator--2788326c-335f-4df4-a2b7-5a3f03b69843", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9099a5ea-1c80-487b-849d-85742068852d", "created": "2026-10-09T15:13:10.701162Z", "modified": "2026-10-09T15:13:10.701162Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ru.neospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.701162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c68c6ede-3a2a-4e88-abcc-62239e7b6e4e", "created": "2026-10-09T15:13:10.701638Z", "modified": "2026-10-09T15:13:10.701638Z", "relationship_type": "indicates", "source_ref": "indicator--9099a5ea-1c80-487b-849d-85742068852d", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ad2654-520e-484e-a99f-95f01666c27a", "created": "2026-10-09T15:13:10.701757Z", "modified": "2026-10-09T15:13:10.701757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95d8489172374df3d47f2aedb07cd16ec6d436e17e2811d11a423af7be6c9be7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.701757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f949600-b6aa-49dd-bdc6-cd2b25513dee", "created": "2026-10-09T15:13:10.702355Z", "modified": "2026-10-09T15:13:10.702355Z", "relationship_type": "indicates", "source_ref": "indicator--77ad2654-520e-484e-a99f-95f01666c27a", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7466439f-de98-4568-9ce9-96a39454b0cb", "created": "2026-10-09T15:13:10.702476Z", "modified": "2026-10-09T15:13:10.702476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8c2754c97133074db23009dddcaee9de93f1933342d627d29c141682702e186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.702476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab01bfea-974e-4a71-92c9-1e249d8babd4", "created": "2026-10-09T15:13:10.703057Z", "modified": "2026-10-09T15:13:10.703057Z", "relationship_type": "indicates", "source_ref": "indicator--7466439f-de98-4568-9ce9-96a39454b0cb", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305d08e0-eb17-4123-8ab1-b762897e3b6f", "created": "2026-10-09T15:13:10.703175Z", "modified": "2026-10-09T15:13:10.703175Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='416d36e38c3bd4e07a70b5b9f99de5c30f56d4d92052c04d6a9ea0b4cacfe5fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.703175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e17f6c93-1fc5-4870-93bc-f003b049d4e8", "created": "2026-10-09T15:13:10.703768Z", "modified": "2026-10-09T15:13:10.703768Z", "relationship_type": "indicates", "source_ref": "indicator--305d08e0-eb17-4123-8ab1-b762897e3b6f", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5956a5-a5d1-4ccf-84c2-840f0e606b9f", "created": "2026-10-09T15:13:10.703887Z", "modified": "2026-10-09T15:13:10.703887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44477a6274931fe6780d4b8b3931e65e7e1acf2032ca67125c68dcdb2bdfd4a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.703887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86ec9cc4-052e-4302-a830-fa1d83656c56", "created": "2026-10-09T15:13:10.704594Z", "modified": "2026-10-09T15:13:10.704594Z", "relationship_type": "indicates", "source_ref": "indicator--aa5956a5-a5d1-4ccf-84c2-840f0e606b9f", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05494213-2521-47ec-9126-7e8572db93be", "created": "2026-10-09T15:13:10.704724Z", "modified": "2026-10-09T15:13:10.704724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2a8eb751d2c0dba78ec40c582c27ab9a85d89ba5169aac80cbaafa22b4abb2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.704724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5eee3aa9-b2c0-4144-b9c5-f74c4078249f", "created": "2026-10-09T15:13:10.705329Z", "modified": "2026-10-09T15:13:10.705329Z", "relationship_type": "indicates", "source_ref": "indicator--05494213-2521-47ec-9126-7e8572db93be", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ada12e9-1372-4c50-b4ab-5b820e7c1141", "created": "2026-10-09T15:13:10.705458Z", "modified": "2026-10-09T15:13:10.705458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='236c8ce2feeabce9e90144dd05f7aae51e38ad0654ca1589481b2880a1eb8368']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.705458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bd49be4-6689-4809-9c85-b80f3454786b", "created": "2026-10-09T15:13:10.706044Z", "modified": "2026-10-09T15:13:10.706044Z", "relationship_type": "indicates", "source_ref": "indicator--8ada12e9-1372-4c50-b4ab-5b820e7c1141", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155e0774-d530-4ac7-8e47-42365fe720a8", "created": "2026-10-09T15:13:10.706166Z", "modified": "2026-10-09T15:13:10.706166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2aee2a87dd94516072c9d385d33928e01f3d3a2ce885189f56b3cae94be7a9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.706166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fae00ca-7fb6-4cb7-a367-f3d050b19ae0", "created": "2026-10-09T15:13:10.706768Z", "modified": "2026-10-09T15:13:10.706768Z", "relationship_type": "indicates", "source_ref": "indicator--155e0774-d530-4ac7-8e47-42365fe720a8", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59c2850-52f6-4253-b9c3-9610eb0d0e33", "created": "2026-10-09T15:13:10.706889Z", "modified": "2026-10-09T15:13:10.706889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1b9c82d6a94407cec3bf70ec24f0a8dcc762e6128e9bb982571d971e6ee9790']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.706889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a464419-c467-448b-adc3-496133b9774f", "created": "2026-10-09T15:13:10.707483Z", "modified": "2026-10-09T15:13:10.707483Z", "relationship_type": "indicates", "source_ref": "indicator--c59c2850-52f6-4253-b9c3-9610eb0d0e33", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c38a11-a2c8-4e0e-8904-42ba92c82cc2", "created": "2026-10-09T15:13:10.707612Z", "modified": "2026-10-09T15:13:10.707612Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28574a65287da00c18f5c50e08720d1ab6d4e49448ad2774ab5ac53dc7263b94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.707612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d967590-6f2e-4848-8310-3b9ec6a69d4c", "created": "2026-10-09T15:13:10.708193Z", "modified": "2026-10-09T15:13:10.708193Z", "relationship_type": "indicates", "source_ref": "indicator--f9c38a11-a2c8-4e0e-8904-42ba92c82cc2", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bc5e96-0e8e-429a-8e3c-ea0841bba4d4", "created": "2026-10-09T15:13:10.708325Z", "modified": "2026-10-09T15:13:10.708325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87afab88c771c27e1f30776066573f1e0db84f647bee6d8701ca012f0db4f256']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.708325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd79d949-e03c-4a48-94ac-af11fc11135c", "created": "2026-10-09T15:13:10.70891Z", "modified": "2026-10-09T15:13:10.70891Z", "relationship_type": "indicates", "source_ref": "indicator--d5bc5e96-0e8e-429a-8e3c-ea0841bba4d4", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5bec43-03dd-4026-8716-3e8ce91d6e32", "created": "2026-10-09T15:13:10.709028Z", "modified": "2026-10-09T15:13:10.709028Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f923f59957b05842df426236b2408bcd5172e3c2d6ccb2fde9a1c4dce8a2955c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.709028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd36a106-7c4b-4378-b998-6de66051f1e5", "created": "2026-10-09T15:13:10.709619Z", "modified": "2026-10-09T15:13:10.709619Z", "relationship_type": "indicates", "source_ref": "indicator--0a5bec43-03dd-4026-8716-3e8ce91d6e32", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a50b463-c6cf-4b5f-b56f-352bb5eeed13", "created": "2026-10-09T15:13:10.709745Z", "modified": "2026-10-09T15:13:10.709745Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f97788f7559124ced1a9eed679ebbab0e9f20527bae78274d035eb51d3952b5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.709745Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0802ceca-1b70-492c-a4f2-fec0a29b0813", "created": "2026-10-09T15:13:10.710341Z", "modified": "2026-10-09T15:13:10.710341Z", "relationship_type": "indicates", "source_ref": "indicator--4a50b463-c6cf-4b5f-b56f-352bb5eeed13", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ed96cb-d043-4961-81d0-b2f23ff79940", "created": "2026-10-09T15:13:10.710463Z", "modified": "2026-10-09T15:13:10.710463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f75796c604bd9da8b280d4c0d7b96476e0846c0b4b5c02f5b553f8404c1e0dc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.710463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f7fb2f1-911b-48ff-973b-ec744dce9f9a", "created": "2026-10-09T15:13:10.711153Z", "modified": "2026-10-09T15:13:10.711153Z", "relationship_type": "indicates", "source_ref": "indicator--05ed96cb-d043-4961-81d0-b2f23ff79940", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312ce1ff-c9ea-40f2-9bf1-b1128a927010", "created": "2026-10-09T15:13:10.711289Z", "modified": "2026-10-09T15:13:10.711289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83a85cd1b9ad46cb2005afe3f488004468e7b1cfc61c75a350369c59fcbbc5a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.711289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f501604b-40ba-41f0-9988-670cc45e8330", "created": "2026-10-09T15:13:10.711889Z", "modified": "2026-10-09T15:13:10.711889Z", "relationship_type": "indicates", "source_ref": "indicator--312ce1ff-c9ea-40f2-9bf1-b1128a927010", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e384e5-417a-4645-ae19-9422ceee3067", "created": "2026-10-09T15:13:10.712014Z", "modified": "2026-10-09T15:13:10.712014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8073cfab22f3a700345ce0d6352e4dbd6d0ef6466a1a0d8a4bea34bbca01c7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.712014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a8438c2-6784-434d-8cd7-7dff07694646", "created": "2026-10-09T15:13:10.712613Z", "modified": "2026-10-09T15:13:10.712613Z", "relationship_type": "indicates", "source_ref": "indicator--c9e384e5-417a-4645-ae19-9422ceee3067", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9846cd7-e504-4cae-8d01-d9caa1710837", "created": "2026-10-09T15:13:10.712737Z", "modified": "2026-10-09T15:13:10.712737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='565904a90bac551601d50468d2d9c7d2ea09f76edfae0c696d716bc0932bb343']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.712737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d3e3c21-52db-4c96-8f3d-2d50775c0de6", "created": "2026-10-09T15:13:10.71333Z", "modified": "2026-10-09T15:13:10.71333Z", "relationship_type": "indicates", "source_ref": "indicator--e9846cd7-e504-4cae-8d01-d9caa1710837", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d148b14-4b3e-4688-89c9-506ddea2a663", "created": "2026-10-09T15:13:10.713454Z", "modified": "2026-10-09T15:13:10.713454Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e30482e964523c47eee6077f013e07b7a4e8776bd6031fef17193b5c287af180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.713454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2906b1f9-5ef3-452c-9581-389a03e6e3f0", "created": "2026-10-09T15:13:10.714035Z", "modified": "2026-10-09T15:13:10.714035Z", "relationship_type": "indicates", "source_ref": "indicator--0d148b14-4b3e-4688-89c9-506ddea2a663", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959433b5-4335-473a-bf3c-fae7058bed16", "created": "2026-10-09T15:13:10.714155Z", "modified": "2026-10-09T15:13:10.714155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c439ebc00aa2bffa2d09ed54236ddba33a59bcda8aed2bb19e8ad5a2656d4f6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.714155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa1dd9dd-0e76-49eb-a194-67b7ce297702", "created": "2026-10-09T15:13:10.71475Z", "modified": "2026-10-09T15:13:10.71475Z", "relationship_type": "indicates", "source_ref": "indicator--959433b5-4335-473a-bf3c-fae7058bed16", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2572402d-05ea-4edb-a8da-7067ea6c78ca", "created": "2026-10-09T15:13:10.71488Z", "modified": "2026-10-09T15:13:10.71488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c59ab687a265e9e6b7244713c352ce325a0c007bbd8b07dfe451af10075147c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.71488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1bab8f0-af40-4577-80a9-684a959a3942", "created": "2026-10-09T15:13:10.715492Z", "modified": "2026-10-09T15:13:10.715492Z", "relationship_type": "indicates", "source_ref": "indicator--2572402d-05ea-4edb-a8da-7067ea6c78ca", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8483f1b0-a159-46ae-87b7-f2bdb7adb5cb", "created": "2026-10-09T15:13:10.715617Z", "modified": "2026-10-09T15:13:10.715617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71c0e407e87d2e932404a604047a83ed0529e397f16b1e3d90fc9cfd9f47c988']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.715617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afd9054b-d250-4714-8437-b6c5d753b4be", "created": "2026-10-09T15:13:10.716206Z", "modified": "2026-10-09T15:13:10.716206Z", "relationship_type": "indicates", "source_ref": "indicator--8483f1b0-a159-46ae-87b7-f2bdb7adb5cb", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b99f0e-cc4f-4bc8-abb3-54a5b8385229", "created": "2026-10-09T15:13:10.716339Z", "modified": "2026-10-09T15:13:10.716339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a380f48bd7879692015bc71be978d546a06667e0bf1e2f970291dc41b1a35908']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.716339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bca5f791-c646-4fe4-81b8-4dd480395853", "created": "2026-10-09T15:13:10.716934Z", "modified": "2026-10-09T15:13:10.716934Z", "relationship_type": "indicates", "source_ref": "indicator--15b99f0e-cc4f-4bc8-abb3-54a5b8385229", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5147894-10c1-4419-a0c6-5481abdd6f3f", "created": "2026-10-09T15:13:10.717055Z", "modified": "2026-10-09T15:13:10.717055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0aa5814549c2aeea043c8f1274820e82f8286741f7e7f0075af293d470f3a4f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.717055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74a7bca5-6042-4984-94c9-9a565ef0f090", "created": "2026-10-09T15:13:10.717763Z", "modified": "2026-10-09T15:13:10.717763Z", "relationship_type": "indicates", "source_ref": "indicator--b5147894-10c1-4419-a0c6-5481abdd6f3f", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752e2cb4-111d-4840-8145-8b42be6a2f8c", "created": "2026-10-09T15:13:10.717889Z", "modified": "2026-10-09T15:13:10.717889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00028565c848d277e82cae6a06212bd2bb30f25ab6b5e34f8e5af60e175cfe56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.717889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c39338d2-e08c-4723-8322-ae823de189b6", "created": "2026-10-09T15:13:10.718485Z", "modified": "2026-10-09T15:13:10.718485Z", "relationship_type": "indicates", "source_ref": "indicator--752e2cb4-111d-4840-8145-8b42be6a2f8c", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1adbc147-3f4a-45e3-975b-9659b6a7b055", "created": "2026-10-09T15:13:10.71861Z", "modified": "2026-10-09T15:13:10.71861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56ba521bb81719f0f725cf4bcd7dad94e35897e074b67cb235f1ea748da0ff49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.71861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4692e7d-0178-4dce-8872-60aa0a9fd5d9", "created": "2026-10-09T15:13:10.719198Z", "modified": "2026-10-09T15:13:10.719198Z", "relationship_type": "indicates", "source_ref": "indicator--1adbc147-3f4a-45e3-975b-9659b6a7b055", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a7fec5-d2f3-4929-b50a-ca2f1f2a1fcd", "created": "2026-10-09T15:13:10.71933Z", "modified": "2026-10-09T15:13:10.71933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed7abe2be74c19b2cd6547126d54f9a2e883c0d4ba7d65212639133add54bccf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.71933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--118e83dc-7701-4b29-91c8-41f3b9e1ca71", "created": "2026-10-09T15:13:10.719918Z", "modified": "2026-10-09T15:13:10.719918Z", "relationship_type": "indicates", "source_ref": "indicator--f5a7fec5-d2f3-4929-b50a-ca2f1f2a1fcd", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7c7c08-8921-4f2e-a82b-da39d71d0870", "created": "2026-10-09T15:13:10.720038Z", "modified": "2026-10-09T15:13:10.720038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56c683661e0c6e654a09f64c233834f8e43b08fa9a2dfa0ec3cc59719e1a8ac5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.720038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fdf9b85-f5ac-4adc-92fa-29f2452ada90", "created": "2026-10-09T15:13:10.720636Z", "modified": "2026-10-09T15:13:10.720636Z", "relationship_type": "indicates", "source_ref": "indicator--3e7c7c08-8921-4f2e-a82b-da39d71d0870", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45436865-5ba2-4d82-9ca6-8c857a689c5e", "created": "2026-10-09T15:13:10.720761Z", "modified": "2026-10-09T15:13:10.720761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8719517cd9d6bfadf4cf2eddfe18014479ec67a4ada72e8cab12aa7d23a40b90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.720761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--223987d2-c5f4-4b63-a894-07c728c5905e", "created": "2026-10-09T15:13:10.721359Z", "modified": "2026-10-09T15:13:10.721359Z", "relationship_type": "indicates", "source_ref": "indicator--45436865-5ba2-4d82-9ca6-8c857a689c5e", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0119969-efaf-4d5f-8030-446598b53f82", "created": "2026-10-09T15:13:10.72148Z", "modified": "2026-10-09T15:13:10.72148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2399ba8758f0b52c82b452c4f85d48642da8e9e37eac6018168783858ee12403']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.72148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c94cfe60-1185-47eb-b6f5-5d92e13d0888", "created": "2026-10-09T15:13:10.722136Z", "modified": "2026-10-09T15:13:10.722136Z", "relationship_type": "indicates", "source_ref": "indicator--d0119969-efaf-4d5f-8030-446598b53f82", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4b3b63-bd75-4b7e-93fc-9fcf9d36324c", "created": "2026-10-09T15:13:10.722284Z", "modified": "2026-10-09T15:13:10.722284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a937eb632ffb438205521964d99ac1a91a13179487de2a36a0568bb217a0c8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.722284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fa291e5-5350-4a51-b99a-d41cae917d8f", "created": "2026-10-09T15:13:10.72288Z", "modified": "2026-10-09T15:13:10.72288Z", "relationship_type": "indicates", "source_ref": "indicator--be4b3b63-bd75-4b7e-93fc-9fcf9d36324c", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76fd091-2b62-47d5-9960-9c5095c42f92", "created": "2026-10-09T15:13:10.723013Z", "modified": "2026-10-09T15:13:10.723013Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a234d0408429ab569735f9a02a5490e25bd02d5daff74bb9fe5f28988ce50cbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.723013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dc4aded-54b2-4dd0-a75e-ed07449729fb", "created": "2026-10-09T15:13:10.723721Z", "modified": "2026-10-09T15:13:10.723721Z", "relationship_type": "indicates", "source_ref": "indicator--d76fd091-2b62-47d5-9960-9c5095c42f92", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0173eca8-6496-4ad1-afc7-dbd864b7e3c5", "created": "2026-10-09T15:13:10.723848Z", "modified": "2026-10-09T15:13:10.723848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec28d480130f225855cca7de283b004fac4a9338afad01e48234a5c49d32e033']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.723848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--420b3fe3-bdef-47c0-8ad0-a5a05801a5b8", "created": "2026-10-09T15:13:10.724448Z", "modified": "2026-10-09T15:13:10.724448Z", "relationship_type": "indicates", "source_ref": "indicator--0173eca8-6496-4ad1-afc7-dbd864b7e3c5", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b79113-5ce9-4ff4-8052-fa36c3ef7229", "created": "2026-10-09T15:13:10.724572Z", "modified": "2026-10-09T15:13:10.724572Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ec672b865c303b61afbdc9133d790ca39440e1c3f515cc55c4d7c6334c6478a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.724572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51a325f2-61eb-4e08-acb6-9e12f730fd3e", "created": "2026-10-09T15:13:10.725157Z", "modified": "2026-10-09T15:13:10.725157Z", "relationship_type": "indicates", "source_ref": "indicator--77b79113-5ce9-4ff4-8052-fa36c3ef7229", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f742ca-4e86-47bd-9d85-650229af9ba6", "created": "2026-10-09T15:13:10.725291Z", "modified": "2026-10-09T15:13:10.725291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2494c9169489f369ded620f77e4b8500dd3e5fe0d2f613090ed6632aa2058b3d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.725291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63d9f65e-4d25-4eb1-b66d-9c44001f7d55", "created": "2026-10-09T15:13:10.725879Z", "modified": "2026-10-09T15:13:10.725879Z", "relationship_type": "indicates", "source_ref": "indicator--43f742ca-4e86-47bd-9d85-650229af9ba6", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa46a41-34b9-459c-ab0a-01c475eee190", "created": "2026-10-09T15:13:10.725999Z", "modified": "2026-10-09T15:13:10.725999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='581560a4f4d657d611ae8998d8eae0a0c8b9b275f9d04d271f7c43c44ed3c038']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.725999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a95aee03-8bc6-4d7f-b96b-c96933530ca6", "created": "2026-10-09T15:13:10.726604Z", "modified": "2026-10-09T15:13:10.726604Z", "relationship_type": "indicates", "source_ref": "indicator--4aa46a41-34b9-459c-ab0a-01c475eee190", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe0009c-d191-4e2c-94f9-136f0f705574", "created": "2026-10-09T15:13:10.726731Z", "modified": "2026-10-09T15:13:10.726731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='271a23036a6b645c7d998745c0f0a516cc4846f3f6cc63a617f63836ff6bfa5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.726731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bd0c92b-53a3-4ce1-94ee-ae5b8a959a2d", "created": "2026-10-09T15:13:10.727325Z", "modified": "2026-10-09T15:13:10.727325Z", "relationship_type": "indicates", "source_ref": "indicator--dfe0009c-d191-4e2c-94f9-136f0f705574", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3553a9-1e05-46c1-8ec9-612aa992a3ea", "created": "2026-10-09T15:13:10.727452Z", "modified": "2026-10-09T15:13:10.727452Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ns.antapp.module']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.727452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f78d5649-c86c-49e5-85b0-f47138a44492", "created": "2026-10-09T15:13:10.727906Z", "modified": "2026-10-09T15:13:10.727906Z", "relationship_type": "indicates", "source_ref": "indicator--fa3553a9-1e05-46c1-8ec9-612aa992a3ea", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d8e99d-5e42-4f72-968f-acd494c349b3", "created": "2026-10-09T15:13:10.728025Z", "modified": "2026-10-09T15:13:10.728025Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.nsmon.guard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.728025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14ef36f6-9fb8-4222-9dd5-139df9f10827", "created": "2026-10-09T15:13:10.728491Z", "modified": "2026-10-09T15:13:10.728491Z", "relationship_type": "indicates", "source_ref": "indicator--35d8e99d-5e42-4f72-968f-acd494c349b3", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9a1354-5520-4183-a212-83c2000114a1", "created": "2026-10-09T15:13:10.728612Z", "modified": "2026-10-09T15:13:10.728612Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9ED8DD944D3EB545E1EEEEEC1D8174772CF37C07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.728612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e19599d-e2ad-498d-a141-a90e5e88494a", "created": "2026-10-09T15:13:10.729164Z", "modified": "2026-10-09T15:13:10.729164Z", "relationship_type": "indicates", "source_ref": "indicator--0a9a1354-5520-4183-a212-83c2000114a1", "target_ref": "malware--bff7a801-2446-4015-892f-f5c436d63164"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6", "created": "2026-10-09T15:13:10.729322Z", "modified": "2026-10-09T15:13:10.729322Z", "name": "AllTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59543498-90fb-4b90-aef0-370a0a11d38b", "created": "2026-10-09T15:13:10.729459Z", "modified": "2026-10-09T15:13:10.729459Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='4-dot-all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.729459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28f96a6f-0adf-4b18-afab-a7079848a0e2", "created": "2026-10-09T15:13:10.730075Z", "modified": "2026-10-09T15:13:10.730075Z", "relationship_type": "indicates", "source_ref": "indicator--59543498-90fb-4b90-aef0-370a0a11d38b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e63a21d-6494-416a-986a-6bf3a043e3c4", "created": "2026-10-09T15:13:10.730202Z", "modified": "2026-10-09T15:13:10.730202Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='6-dot-all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.730202Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45e3b2b0-17eb-4317-85c2-40f030d15117", "created": "2026-10-09T15:13:10.730728Z", "modified": "2026-10-09T15:13:10.730728Z", "relationship_type": "indicates", "source_ref": "indicator--1e63a21d-6494-416a-986a-6bf3a043e3c4", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e141d26-8075-4faa-860b-00e36757c43c", "created": "2026-10-09T15:13:10.730856Z", "modified": "2026-10-09T15:13:10.730856Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.730856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3014720f-118f-42de-ae6b-641d902cfd33", "created": "2026-10-09T15:13:10.731349Z", "modified": "2026-10-09T15:13:10.731349Z", "relationship_type": "indicates", "source_ref": "indicator--7e141d26-8075-4faa-860b-00e36757c43c", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406ecf3e-c542-4636-8204-69688a0c6ade", "created": "2026-10-09T15:13:10.731471Z", "modified": "2026-10-09T15:13:10.731471Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='all-tracker.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.731471Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf63414f-065e-4142-9702-4c34d789d22d", "created": "2026-10-09T15:13:10.731959Z", "modified": "2026-10-09T15:13:10.731959Z", "relationship_type": "indicates", "source_ref": "indicator--406ecf3e-c542-4636-8204-69688a0c6ade", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b834a7-7a2b-45e9-a6c0-28b4fdb2470a", "created": "2026-10-09T15:13:10.732078Z", "modified": "2026-10-09T15:13:10.732078Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alltracker.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.732078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81cf33f3-edfa-48ae-9d13-ae5392e5e49b", "created": "2026-10-09T15:13:10.732583Z", "modified": "2026-10-09T15:13:10.732583Z", "relationship_type": "indicates", "source_ref": "indicator--17b834a7-7a2b-45e9-a6c0-28b4fdb2470a", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d32608-4eff-4701-b63b-370a50fdf3cb", "created": "2026-10-09T15:13:10.73271Z", "modified": "2026-10-09T15:13:10.73271Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='staging-all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.73271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6550b437-7169-432f-8387-ed993ad4d70f", "created": "2026-10-09T15:13:10.733202Z", "modified": "2026-10-09T15:13:10.733202Z", "relationship_type": "indicates", "source_ref": "indicator--b6d32608-4eff-4701-b63b-370a50fdf3cb", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b6017b-1c95-4bd3-91ab-74d1b88dcc06", "created": "2026-10-09T15:13:10.733333Z", "modified": "2026-10-09T15:13:10.733333Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alltracker.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.733333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53abf2bb-58ff-44fb-bf9d-eae310f39cd7", "created": "2026-10-09T15:13:10.733807Z", "modified": "2026-10-09T15:13:10.733807Z", "relationship_type": "indicates", "source_ref": "indicator--63b6017b-1c95-4bd3-91ab-74d1b88dcc06", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e17e1e-8d92-484b-b8d2-00916bf35a53", "created": "2026-10-09T15:13:10.733926Z", "modified": "2026-10-09T15:13:10.733926Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c25567012c3c626a6b97bc8f335d8776f219592ddc29b1100359ec4b4cd8a3df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.733926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fdcdf0f-29a8-4ccf-abd4-125f779473dc", "created": "2026-10-09T15:13:10.734525Z", "modified": "2026-10-09T15:13:10.734525Z", "relationship_type": "indicates", "source_ref": "indicator--d0e17e1e-8d92-484b-b8d2-00916bf35a53", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5165b1b0-51c6-4c22-bb49-14abe65bc9b7", "created": "2026-10-09T15:13:10.734648Z", "modified": "2026-10-09T15:13:10.734648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c897bdf61ad8b5457f7f8fd59a55c191c2ed51d404dcf3b9ae057092a9d832e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.734648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d730bc7-9a66-4a98-8757-79678b859865", "created": "2026-10-09T15:13:10.735227Z", "modified": "2026-10-09T15:13:10.735227Z", "relationship_type": "indicates", "source_ref": "indicator--5165b1b0-51c6-4c22-bb49-14abe65bc9b7", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f112e2-a2fd-4e43-b9a6-8d8fce80bc9b", "created": "2026-10-09T15:13:10.735358Z", "modified": "2026-10-09T15:13:10.735358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f0ffae5d334c0fed88e772750a675f4d3c66fb116e8c9fbbdb444ba679366bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.735358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3a96358-63a5-4d8f-8fa3-3abf64a6cf75", "created": "2026-10-09T15:13:10.736052Z", "modified": "2026-10-09T15:13:10.736052Z", "relationship_type": "indicates", "source_ref": "indicator--21f112e2-a2fd-4e43-b9a6-8d8fce80bc9b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27a9f85-e7bc-41b4-96fa-9b8099cea941", "created": "2026-10-09T15:13:10.736176Z", "modified": "2026-10-09T15:13:10.736176Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e0cee5d3ec493faecddb1d312b1215e586ac12a5613d67be337c71b8bbc2ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.736176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4e10599-60b8-47f2-a58d-cf6c933c3d90", "created": "2026-10-09T15:13:10.736778Z", "modified": "2026-10-09T15:13:10.736778Z", "relationship_type": "indicates", "source_ref": "indicator--b27a9f85-e7bc-41b4-96fa-9b8099cea941", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0cc0aa-d082-47aa-b47a-5068e1da19e7", "created": "2026-10-09T15:13:10.7369Z", "modified": "2026-10-09T15:13:10.7369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47b4005037da0dd5110b1165e4ced99e0108b2c1965c91b3e0fe23dfd77adf23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.7369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9209c456-8950-4830-8581-89e485798fe5", "created": "2026-10-09T15:13:10.737493Z", "modified": "2026-10-09T15:13:10.737493Z", "relationship_type": "indicates", "source_ref": "indicator--8e0cc0aa-d082-47aa-b47a-5068e1da19e7", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61de42d6-f8d1-4292-9af3-0f48f5004653", "created": "2026-10-09T15:13:10.737613Z", "modified": "2026-10-09T15:13:10.737613Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59a58144f5b6fd868dc49a099b537bf32d686d105e3fcab360d6dd5af3b3b400']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.737613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4dc6ddc8-e8cf-4b1c-8021-c15f0229413c", "created": "2026-10-09T15:13:10.738195Z", "modified": "2026-10-09T15:13:10.738195Z", "relationship_type": "indicates", "source_ref": "indicator--61de42d6-f8d1-4292-9af3-0f48f5004653", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cdeb9d-369a-44ec-96e5-ffe88440d158", "created": "2026-10-09T15:13:10.738331Z", "modified": "2026-10-09T15:13:10.738331Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e2b515af81a4b3048b66cbd0a9822f34850ba77173c6d8a34303b52dba0023f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.738331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa28156c-ce3d-42cc-9886-d4e398f2968d", "created": "2026-10-09T15:13:10.738918Z", "modified": "2026-10-09T15:13:10.738918Z", "relationship_type": "indicates", "source_ref": "indicator--c2cdeb9d-369a-44ec-96e5-ffe88440d158", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf2c190-a78c-433d-9a0b-1bb2f86a890a", "created": "2026-10-09T15:13:10.739039Z", "modified": "2026-10-09T15:13:10.739039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='789043331b3f55a1a0ce52371e875f929663e13501c476a340fafaff2dbd836f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.739039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1b2c530-b9a0-4305-8fd0-d74b6837b7e2", "created": "2026-10-09T15:13:10.739637Z", "modified": "2026-10-09T15:13:10.739637Z", "relationship_type": "indicates", "source_ref": "indicator--fdf2c190-a78c-433d-9a0b-1bb2f86a890a", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073d73ba-d1cd-4ca6-bc1f-29f4ba185980", "created": "2026-10-09T15:13:10.739758Z", "modified": "2026-10-09T15:13:10.739758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ae57e06794429609c74943bf4725f3d71cbef34cbcfa2ca00a5284a672c6693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.739758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abcaf728-f8cb-4d4a-80fe-f1cbf0b51fcc", "created": "2026-10-09T15:13:10.740364Z", "modified": "2026-10-09T15:13:10.740364Z", "relationship_type": "indicates", "source_ref": "indicator--073d73ba-d1cd-4ca6-bc1f-29f4ba185980", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0e0b53-1c8f-46a3-8d6f-00d9ea245940", "created": "2026-10-09T15:13:10.740494Z", "modified": "2026-10-09T15:13:10.740494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14bb7783317ae3ce9009a93ae19fbafd20b8e21f106fcb5b018f331dbfab710d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.740494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5f0eff9-f8ff-4262-89d3-45eedb35a71e", "created": "2026-10-09T15:13:10.741091Z", "modified": "2026-10-09T15:13:10.741091Z", "relationship_type": "indicates", "source_ref": "indicator--6d0e0b53-1c8f-46a3-8d6f-00d9ea245940", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a3a4e6-41db-429b-9180-37b5f7fbbc20", "created": "2026-10-09T15:13:10.741212Z", "modified": "2026-10-09T15:13:10.741212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d521e56654fbe96b0ac38da6b339a3183da370b59bd66ea62a2645637d13182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.741212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bc11ce4-d24b-45ab-b02a-d2745495527f", "created": "2026-10-09T15:13:10.741813Z", "modified": "2026-10-09T15:13:10.741813Z", "relationship_type": "indicates", "source_ref": "indicator--89a3a4e6-41db-429b-9180-37b5f7fbbc20", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400594cd-ad8d-4c25-a4d4-18de3cd8e4b2", "created": "2026-10-09T15:13:10.741933Z", "modified": "2026-10-09T15:13:10.741933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7227da0e85765e5e67972b5d41bab7230040b7f8af62fd7115dfdc361c749674']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.741933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b6a8ce5-5db9-49bc-aa46-430469849790", "created": "2026-10-09T15:13:10.742636Z", "modified": "2026-10-09T15:13:10.742636Z", "relationship_type": "indicates", "source_ref": "indicator--400594cd-ad8d-4c25-a4d4-18de3cd8e4b2", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2cc422-6673-4ac8-b7b6-cc987a465621", "created": "2026-10-09T15:13:10.742762Z", "modified": "2026-10-09T15:13:10.742762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72748f121d9975e5f5c3e4854b90e0057443dcc38e6424389a2f31199511cdd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.742762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--119ddf78-2873-48a6-a1c6-ae41c46c2949", "created": "2026-10-09T15:13:10.743362Z", "modified": "2026-10-09T15:13:10.743362Z", "relationship_type": "indicates", "source_ref": "indicator--cc2cc422-6673-4ac8-b7b6-cc987a465621", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ac65c0-58f1-4e5a-8d17-a8f3074cffdd", "created": "2026-10-09T15:13:10.743484Z", "modified": "2026-10-09T15:13:10.743484Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0475d101795c8b78bda318a568de8e8ee17bdf3a23d83f3701a381fe0235384']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.743484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2efeb2e-9aa3-4474-9fe9-17a052f42983", "created": "2026-10-09T15:13:10.744068Z", "modified": "2026-10-09T15:13:10.744068Z", "relationship_type": "indicates", "source_ref": "indicator--22ac65c0-58f1-4e5a-8d17-a8f3074cffdd", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936f2596-59ee-4f7b-86de-82f530c9b376", "created": "2026-10-09T15:13:10.744186Z", "modified": "2026-10-09T15:13:10.744186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87d920c67040c74e5836e54c20d0e61ce7e6d076c6e2a45971ae90d920d11b74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.744186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e308554-327a-4fac-9a22-5549a74a18b5", "created": "2026-10-09T15:13:10.744792Z", "modified": "2026-10-09T15:13:10.744792Z", "relationship_type": "indicates", "source_ref": "indicator--936f2596-59ee-4f7b-86de-82f530c9b376", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8754d1c-90a4-46b3-bc45-d8c72e00a3ce", "created": "2026-10-09T15:13:10.744916Z", "modified": "2026-10-09T15:13:10.744916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='657d04f1c74ef6b6eb55ef3f63652987464c37c1b9f18089eba4e043d17e666d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.744916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b218943-4a6e-496f-a846-87662d6c209c", "created": "2026-10-09T15:13:10.745517Z", "modified": "2026-10-09T15:13:10.745517Z", "relationship_type": "indicates", "source_ref": "indicator--c8754d1c-90a4-46b3-bc45-d8c72e00a3ce", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ea8035-75a5-4699-98c0-57e9c86db0dc", "created": "2026-10-09T15:13:10.745639Z", "modified": "2026-10-09T15:13:10.745639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19e43023d8bd7fc446041fdac8123b356405b4d41a2140d791af5e9d908efe65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.745639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9e64380-dc27-4859-a608-c48d6ffe47ab", "created": "2026-10-09T15:13:10.746225Z", "modified": "2026-10-09T15:13:10.746225Z", "relationship_type": "indicates", "source_ref": "indicator--f8ea8035-75a5-4699-98c0-57e9c86db0dc", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d40b187-d0ef-4962-ac79-51db3eeb6bcb", "created": "2026-10-09T15:13:10.746368Z", "modified": "2026-10-09T15:13:10.746368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d13f821731d3346fb84cf6a22f41f1886a2cc216c59d4f463bc0d800d95105f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.746368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e95520d5-ea9f-4cb9-b82d-62a75b311fd3", "created": "2026-10-09T15:13:10.74697Z", "modified": "2026-10-09T15:13:10.74697Z", "relationship_type": "indicates", "source_ref": "indicator--1d40b187-d0ef-4962-ac79-51db3eeb6bcb", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9036d7ca-ffbb-41b2-9dcf-e07a19d91cd1", "created": "2026-10-09T15:13:10.747094Z", "modified": "2026-10-09T15:13:10.747094Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2aef1d2e9d77df98fe856bd749baae9fb2548f46b30f06edbedd09ea26c8f691']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.747094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3843180-1416-46e9-9884-0db4eefc400d", "created": "2026-10-09T15:13:10.747691Z", "modified": "2026-10-09T15:13:10.747691Z", "relationship_type": "indicates", "source_ref": "indicator--9036d7ca-ffbb-41b2-9dcf-e07a19d91cd1", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cb1042-70db-42bd-93c6-fc4d0ed446db", "created": "2026-10-09T15:13:10.747817Z", "modified": "2026-10-09T15:13:10.747817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b65de3b3ab3775efa6ec3a2caab9476a26625a8c22debcda505f07151c8fdbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.747817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea2cdf28-7942-472f-9295-686a6cd5ed40", "created": "2026-10-09T15:13:10.748422Z", "modified": "2026-10-09T15:13:10.748422Z", "relationship_type": "indicates", "source_ref": "indicator--f0cb1042-70db-42bd-93c6-fc4d0ed446db", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d17eada-10a3-4ebd-9b9f-89707cdffe7e", "created": "2026-10-09T15:13:10.748549Z", "modified": "2026-10-09T15:13:10.748549Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8078b5b023bcc128626adb4848ca2223a7962dcefa1d803f3b8f632a9feaa04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.748549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d28f70a-4dee-4000-833e-7fa1bbca8b4d", "created": "2026-10-09T15:13:10.749235Z", "modified": "2026-10-09T15:13:10.749235Z", "relationship_type": "indicates", "source_ref": "indicator--2d17eada-10a3-4ebd-9b9f-89707cdffe7e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd07274-dda9-4578-9559-86ad9e57a037", "created": "2026-10-09T15:13:10.749371Z", "modified": "2026-10-09T15:13:10.749371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e439a57f66751605bddb539b98b4d846c0dabfa6a3a851f62c8a3d45935b4569']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.749371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08c3d9ad-9b2d-420a-84aa-7a97e5ea9470", "created": "2026-10-09T15:13:10.749956Z", "modified": "2026-10-09T15:13:10.749956Z", "relationship_type": "indicates", "source_ref": "indicator--8fd07274-dda9-4578-9559-86ad9e57a037", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed50468-37c3-4c0b-9af4-6100a3b1d6ba", "created": "2026-10-09T15:13:10.750077Z", "modified": "2026-10-09T15:13:10.750077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73d198f13c598ef5088571805ab0ea012ee3ee6786b680d8e8ffc88e25a81647']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.750077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1ecea97-5198-48b4-b71f-fb741f2e622d", "created": "2026-10-09T15:13:10.750671Z", "modified": "2026-10-09T15:13:10.750671Z", "relationship_type": "indicates", "source_ref": "indicator--7ed50468-37c3-4c0b-9af4-6100a3b1d6ba", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8886b15a-87ee-4c79-99c1-f815d751a8a1", "created": "2026-10-09T15:13:10.750793Z", "modified": "2026-10-09T15:13:10.750793Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41bc7afbb4a6c410f6d9d70a5a12447c0f052ed80424ae12dd2c03189182c115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.750793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e71dc27-262c-4ab4-9928-f9cf17e06695", "created": "2026-10-09T15:13:10.751379Z", "modified": "2026-10-09T15:13:10.751379Z", "relationship_type": "indicates", "source_ref": "indicator--8886b15a-87ee-4c79-99c1-f815d751a8a1", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e168628-8588-4c19-bb5b-49f273e7da0e", "created": "2026-10-09T15:13:10.751499Z", "modified": "2026-10-09T15:13:10.751499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e73bbfd60330424b93869884aadf6a17b576e49f240c080c187a3d73fef8302']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.751499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ede9965-daa1-4818-a61f-f5ba48baefed", "created": "2026-10-09T15:13:10.752083Z", "modified": "2026-10-09T15:13:10.752083Z", "relationship_type": "indicates", "source_ref": "indicator--8e168628-8588-4c19-bb5b-49f273e7da0e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8acc0ce-f482-4038-b62c-514c5311d31d", "created": "2026-10-09T15:13:10.752201Z", "modified": "2026-10-09T15:13:10.752201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4a74d5e2935e503d11457fd13263eef49e629213bec5bcef9c42aee75bca7c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.752201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7561bc6a-9efc-4627-94be-8753d9c2c387", "created": "2026-10-09T15:13:10.7528Z", "modified": "2026-10-09T15:13:10.7528Z", "relationship_type": "indicates", "source_ref": "indicator--e8acc0ce-f482-4038-b62c-514c5311d31d", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dae170-879c-471e-82b2-d571dd7e2bbb", "created": "2026-10-09T15:13:10.752924Z", "modified": "2026-10-09T15:13:10.752924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='933538d63eea0a89bb7c38d8e454fa3a502b8b6f733720e6dbced6c9ddd95f8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.752924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f80f334-cc1d-4b34-802f-694ba710122f", "created": "2026-10-09T15:13:10.753532Z", "modified": "2026-10-09T15:13:10.753532Z", "relationship_type": "indicates", "source_ref": "indicator--96dae170-879c-471e-82b2-d571dd7e2bbb", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82cc95f-baf1-4598-9af8-34c8d958cbcc", "created": "2026-10-09T15:13:10.753657Z", "modified": "2026-10-09T15:13:10.753657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='687056ee6576f3f860173e85f46d3313c7353b6bed2a245690320a74c031530d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.753657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--503fff9b-f2b5-4032-aaaa-3f4f3f0e7351", "created": "2026-10-09T15:13:10.754289Z", "modified": "2026-10-09T15:13:10.754289Z", "relationship_type": "indicates", "source_ref": "indicator--b82cc95f-baf1-4598-9af8-34c8d958cbcc", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5279e0a8-9e9b-497b-8859-5148dee7ae69", "created": "2026-10-09T15:13:10.754418Z", "modified": "2026-10-09T15:13:10.754418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cc3067d419e8346e5115da8dedf846843dc52402cac41326fbf1d1c610d0184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.754418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d36fd8dd-0324-4bc1-8562-4cc7aa249e2e", "created": "2026-10-09T15:13:10.755107Z", "modified": "2026-10-09T15:13:10.755107Z", "relationship_type": "indicates", "source_ref": "indicator--5279e0a8-9e9b-497b-8859-5148dee7ae69", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c15be6-c22a-4519-abff-ba2647942d07", "created": "2026-10-09T15:13:10.755231Z", "modified": "2026-10-09T15:13:10.755231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08938fc634c293560834aa6b2188f4dac07ed35b1198b18b186972ea93aa7ece']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.755231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36b60f05-c3d2-4efd-9aeb-c94afce8dc55", "created": "2026-10-09T15:13:10.755838Z", "modified": "2026-10-09T15:13:10.755838Z", "relationship_type": "indicates", "source_ref": "indicator--a0c15be6-c22a-4519-abff-ba2647942d07", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939270ed-4edc-440c-855f-51948ad6b69c", "created": "2026-10-09T15:13:10.75596Z", "modified": "2026-10-09T15:13:10.75596Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e8133c6e9d7d77e8e8e1b226e430a96a73a2edf6b065d6f1caf262120827026']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.75596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc0a7549-1556-4c55-bd72-f762e31624d3", "created": "2026-10-09T15:13:10.756558Z", "modified": "2026-10-09T15:13:10.756558Z", "relationship_type": "indicates", "source_ref": "indicator--939270ed-4edc-440c-855f-51948ad6b69c", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4eec9b-073d-409d-b251-7d2ba709eeee", "created": "2026-10-09T15:13:10.756683Z", "modified": "2026-10-09T15:13:10.756683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b70cf946ed1e42fa1db427ee83bf74054aba56ecad4332680e63d945f42ad7ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.756683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba497607-d007-4e1f-97a4-c7c2d7ce8837", "created": "2026-10-09T15:13:10.757278Z", "modified": "2026-10-09T15:13:10.757278Z", "relationship_type": "indicates", "source_ref": "indicator--eb4eec9b-073d-409d-b251-7d2ba709eeee", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58f2378-83a2-4a81-b129-161c824af68e", "created": "2026-10-09T15:13:10.757403Z", "modified": "2026-10-09T15:13:10.757403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0bce46e00204797ad4eb3d92d8579559ad3f20243816521647231fc1ca02ab6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.757403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e11cc56d-26f9-4fd6-a2de-65f7ed117704", "created": "2026-10-09T15:13:10.757992Z", "modified": "2026-10-09T15:13:10.757992Z", "relationship_type": "indicates", "source_ref": "indicator--d58f2378-83a2-4a81-b129-161c824af68e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c86ff10-248b-43e4-9c55-382f0d4e55e3", "created": "2026-10-09T15:13:10.758113Z", "modified": "2026-10-09T15:13:10.758113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dad778b97ccb0457cadf9fc91f70cfabcc8086d0b25fceb9f9d81aa160c6b187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.758113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e100197b-27e6-4a6d-a142-94a2c0cc28eb", "created": "2026-10-09T15:13:10.758711Z", "modified": "2026-10-09T15:13:10.758711Z", "relationship_type": "indicates", "source_ref": "indicator--8c86ff10-248b-43e4-9c55-382f0d4e55e3", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7913e8-eac3-4d62-9612-5c34831ddd57", "created": "2026-10-09T15:13:10.758833Z", "modified": "2026-10-09T15:13:10.758833Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80be1fb12eaaf5374d56c7b09cd6abd213be69e90ad8b264e3c31411cbcaf24b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.758833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19799553-b21e-4723-95e7-9bf7e3de6685", "created": "2026-10-09T15:13:10.759433Z", "modified": "2026-10-09T15:13:10.759433Z", "relationship_type": "indicates", "source_ref": "indicator--ef7913e8-eac3-4d62-9612-5c34831ddd57", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7605a4d6-e686-4262-99f5-eb9840377e55", "created": "2026-10-09T15:13:10.759557Z", "modified": "2026-10-09T15:13:10.759557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='237c6815f2a4c64fbeeb30205ab9097f1439985cc4acc558ec7d4000e8d5fed0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.759557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd91f062-51a5-41cd-b1d3-6591de97f5fe", "created": "2026-10-09T15:13:10.760145Z", "modified": "2026-10-09T15:13:10.760145Z", "relationship_type": "indicates", "source_ref": "indicator--7605a4d6-e686-4262-99f5-eb9840377e55", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfa2ca7-e7cb-47ee-8cc4-e5c090003cde", "created": "2026-10-09T15:13:10.760277Z", "modified": "2026-10-09T15:13:10.760277Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3275e39a4e24ce11f826ff59be82848b3c19b10481ca1c41ca226752a5dcbe50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.760277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a141a169-da82-420b-a2e9-19b721dca0d3", "created": "2026-10-09T15:13:10.760865Z", "modified": "2026-10-09T15:13:10.760865Z", "relationship_type": "indicates", "source_ref": "indicator--9dfa2ca7-e7cb-47ee-8cc4-e5c090003cde", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fefcaea-55b4-4902-bef1-97583b0dc3e3", "created": "2026-10-09T15:13:10.76099Z", "modified": "2026-10-09T15:13:10.76099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41d1e4544ad4f6b01cae9ef7990b946f77d2bdf5ec2c76883a1e6952a193cf0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.76099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62e28962-3e99-41f8-8d74-5c78e31d3a8f", "created": "2026-10-09T15:13:10.761689Z", "modified": "2026-10-09T15:13:10.761689Z", "relationship_type": "indicates", "source_ref": "indicator--1fefcaea-55b4-4902-bef1-97583b0dc3e3", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5337b00b-86e9-4373-b702-210179bea0e6", "created": "2026-10-09T15:13:10.761813Z", "modified": "2026-10-09T15:13:10.761813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26cfe77dcefd4ce3e771e02f039b1e71f41397e318cf5bbd528c5fcecd4547a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.761813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb329f2a-053e-4089-bea7-a00a421ea625", "created": "2026-10-09T15:13:10.76242Z", "modified": "2026-10-09T15:13:10.76242Z", "relationship_type": "indicates", "source_ref": "indicator--5337b00b-86e9-4373-b702-210179bea0e6", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3d1165-d77e-4da0-9093-0c10755722e7", "created": "2026-10-09T15:13:10.762543Z", "modified": "2026-10-09T15:13:10.762543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='699f50bcba47a86f1c85621f4cc3a1035bca0fbda851e8ae7b1f6cd81709bd6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.762543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--973a0f43-9a68-472d-a5da-687c66ced5bc", "created": "2026-10-09T15:13:10.763118Z", "modified": "2026-10-09T15:13:10.763118Z", "relationship_type": "indicates", "source_ref": "indicator--0a3d1165-d77e-4da0-9093-0c10755722e7", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a3a5ff-58db-448a-b13f-f20a872f340a", "created": "2026-10-09T15:13:10.763236Z", "modified": "2026-10-09T15:13:10.763236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c9a65cdbeda09530b695e19eb8f334b9a30d7a4bcccf31ad226ceb034a92e87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.763236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0ada63f-4e95-419d-b5bd-2b63d6e64aee", "created": "2026-10-09T15:13:10.763834Z", "modified": "2026-10-09T15:13:10.763834Z", "relationship_type": "indicates", "source_ref": "indicator--a9a3a5ff-58db-448a-b13f-f20a872f340a", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f784d61-0b2a-4249-8707-795db3f4dc55", "created": "2026-10-09T15:13:10.763955Z", "modified": "2026-10-09T15:13:10.763955Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87d4e281b968e3c61dbce08fc8fa19a871d730b431fbbe2217902c07dae3cde9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.763955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86f4795d-0610-474c-a206-59f34362aef4", "created": "2026-10-09T15:13:10.764553Z", "modified": "2026-10-09T15:13:10.764553Z", "relationship_type": "indicates", "source_ref": "indicator--6f784d61-0b2a-4249-8707-795db3f4dc55", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed13845-07f5-44f8-8fde-442bb5394f2e", "created": "2026-10-09T15:13:10.764681Z", "modified": "2026-10-09T15:13:10.764681Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b331c63e09ad7f2924ec7cda9edbf65177ad5c868057eb2cbb1ba85184372c7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.764681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--371e5c55-2a07-4b2c-9131-25a85aca3de1", "created": "2026-10-09T15:13:10.765276Z", "modified": "2026-10-09T15:13:10.765276Z", "relationship_type": "indicates", "source_ref": "indicator--bed13845-07f5-44f8-8fde-442bb5394f2e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bba7c2-26dc-4b90-9ea4-484814d7e40d", "created": "2026-10-09T15:13:10.765397Z", "modified": "2026-10-09T15:13:10.765397Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dce589fdac0fc35e2c7224c6eaabc999453124ab1ed16974cf5aec7757b17257']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.765397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e7ca1b5-0035-4eb6-89de-1416593b5e64", "created": "2026-10-09T15:13:10.76598Z", "modified": "2026-10-09T15:13:10.76598Z", "relationship_type": "indicates", "source_ref": "indicator--c1bba7c2-26dc-4b90-9ea4-484814d7e40d", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16dd9e8-d4ce-44d1-ac6d-ae9c59d627fd", "created": "2026-10-09T15:13:10.766099Z", "modified": "2026-10-09T15:13:10.766099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c6718833cdfb07c7870e243296ab4a755caedf06946c26a12f759c06238f0da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.766099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1310bd7-48d3-4929-9109-9594e16daf0c", "created": "2026-10-09T15:13:10.766692Z", "modified": "2026-10-09T15:13:10.766692Z", "relationship_type": "indicates", "source_ref": "indicator--b16dd9e8-d4ce-44d1-ac6d-ae9c59d627fd", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff1a04d-1ab3-49c0-b33c-6402537863da", "created": "2026-10-09T15:13:10.76682Z", "modified": "2026-10-09T15:13:10.76682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09b58d844b7c6cfb97f75efb2aa59ad10127fe33b178573260ee0032b5ef8791']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.76682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f58040f8-4657-4d83-bdc9-4abac396719e", "created": "2026-10-09T15:13:10.767423Z", "modified": "2026-10-09T15:13:10.767423Z", "relationship_type": "indicates", "source_ref": "indicator--cff1a04d-1ab3-49c0-b33c-6402537863da", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef33a592-5d04-4cb0-859a-dab2e2331a1f", "created": "2026-10-09T15:13:10.767548Z", "modified": "2026-10-09T15:13:10.767548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48808ad0c3775ca6b8958fc2cfcce3336524c13128fb9c3b7ae806f486ec054a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.767548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02549156-3972-4315-b437-0a36a1585835", "created": "2026-10-09T15:13:10.768585Z", "modified": "2026-10-09T15:13:10.768585Z", "relationship_type": "indicates", "source_ref": "indicator--ef33a592-5d04-4cb0-859a-dab2e2331a1f", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d893100-b5ae-4398-8814-364ad138e063", "created": "2026-10-09T15:13:10.768715Z", "modified": "2026-10-09T15:13:10.768715Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0c82497403759f73c7d51086a75e80f8556d3786bc8e0de77fb7f6e02e9cd3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.768715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e354d875-ac0b-4721-a469-499813010ef2", "created": "2026-10-09T15:13:10.76932Z", "modified": "2026-10-09T15:13:10.76932Z", "relationship_type": "indicates", "source_ref": "indicator--6d893100-b5ae-4398-8814-364ad138e063", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9f457b-2209-4e23-bbc4-6e9698ea14c5", "created": "2026-10-09T15:13:10.769445Z", "modified": "2026-10-09T15:13:10.769445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='418fb40741803d03f096e3bbacb5ca1e4328436e4a1b933badb580a7f68f792e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.769445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0002aab7-929b-48b5-977c-259031b6b52c", "created": "2026-10-09T15:13:10.770028Z", "modified": "2026-10-09T15:13:10.770028Z", "relationship_type": "indicates", "source_ref": "indicator--eb9f457b-2209-4e23-bbc4-6e9698ea14c5", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f098b0c2-7a77-48ba-bb36-16a3d84a7995", "created": "2026-10-09T15:13:10.770149Z", "modified": "2026-10-09T15:13:10.770149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3c578a7211aec09ed87a2903c34a22a2731d63bbc4b27a2431b69bd16fb564f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.770149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7fe5e3a-9655-432d-938a-eb3cc3a73502", "created": "2026-10-09T15:13:10.770739Z", "modified": "2026-10-09T15:13:10.770739Z", "relationship_type": "indicates", "source_ref": "indicator--f098b0c2-7a77-48ba-bb36-16a3d84a7995", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcd8ea6-10b0-4a0f-b664-a77c1df04f5b", "created": "2026-10-09T15:13:10.770901Z", "modified": "2026-10-09T15:13:10.770901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='535534d3558fe8b403ee4abebee3207d8d7e4aafa301c524389a1c168b6b31b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.770901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a454a5e1-fd18-448c-93db-17918e7241cd", "created": "2026-10-09T15:13:10.771505Z", "modified": "2026-10-09T15:13:10.771505Z", "relationship_type": "indicates", "source_ref": "indicator--dbcd8ea6-10b0-4a0f-b664-a77c1df04f5b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce45e4aa-05df-4b7a-bfcd-2866372772c9", "created": "2026-10-09T15:13:10.771629Z", "modified": "2026-10-09T15:13:10.771629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45796047ce057280b20f83345682f4065282db9dfbed4d85daa110385f3dbf0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.771629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad550cd2-fc39-42e1-b41f-6f1ee581ecee", "created": "2026-10-09T15:13:10.772208Z", "modified": "2026-10-09T15:13:10.772208Z", "relationship_type": "indicates", "source_ref": "indicator--ce45e4aa-05df-4b7a-bfcd-2866372772c9", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b9756-ed92-4587-b57e-ca9c4541569e", "created": "2026-10-09T15:13:10.772341Z", "modified": "2026-10-09T15:13:10.772341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4bc17c972a4baf2b5a75a35c00287d37d69cb46a13bc2a4c01e7ac2fae0a3d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.772341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9c34ce1-e558-463e-a441-87d521921d81", "created": "2026-10-09T15:13:10.772925Z", "modified": "2026-10-09T15:13:10.772925Z", "relationship_type": "indicates", "source_ref": "indicator--b05b9756-ed92-4587-b57e-ca9c4541569e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e84d8de-46a6-47c6-9e68-e791c2f41bc6", "created": "2026-10-09T15:13:10.773045Z", "modified": "2026-10-09T15:13:10.773045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51af8a022a29df350e1f6287c25ccd9a50cfdba33cfa3d8ac946298046e0b8be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.773045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc060b94-2a64-4355-b131-639e71fe7493", "created": "2026-10-09T15:13:10.773642Z", "modified": "2026-10-09T15:13:10.773642Z", "relationship_type": "indicates", "source_ref": "indicator--2e84d8de-46a6-47c6-9e68-e791c2f41bc6", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2778059e-3567-43a5-b35b-d2e55ea194ff", "created": "2026-10-09T15:13:10.773765Z", "modified": "2026-10-09T15:13:10.773765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8b107b73dcb93507e1bfa102b032666038b5c938b079b60b47b1dcd67335247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.773765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4747d2ed-c96b-4ce7-be36-62be97b0cf2c", "created": "2026-10-09T15:13:10.774364Z", "modified": "2026-10-09T15:13:10.774364Z", "relationship_type": "indicates", "source_ref": "indicator--2778059e-3567-43a5-b35b-d2e55ea194ff", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6287e2a-90c3-44c1-aef5-58f183e14801", "created": "2026-10-09T15:13:10.77449Z", "modified": "2026-10-09T15:13:10.77449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c84e4a6d28b988d33b6761d8ea6a04c277c9379d262d7a9a8d4bf88fd716f6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.77449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c55029e8-0f37-45a6-a41f-eb0fc02a770a", "created": "2026-10-09T15:13:10.775184Z", "modified": "2026-10-09T15:13:10.775184Z", "relationship_type": "indicates", "source_ref": "indicator--d6287e2a-90c3-44c1-aef5-58f183e14801", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ab1026-e407-40f1-83ae-0a33c080f478", "created": "2026-10-09T15:13:10.775321Z", "modified": "2026-10-09T15:13:10.775321Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c4fb64a3166c39cccc9363a93ac1dfecc32e27d70539dce595b00ec78749e69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.775321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17c9a095-6de8-47bc-8cf3-dcbbb5ab1cb2", "created": "2026-10-09T15:13:10.775904Z", "modified": "2026-10-09T15:13:10.775904Z", "relationship_type": "indicates", "source_ref": "indicator--a2ab1026-e407-40f1-83ae-0a33c080f478", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0525d4-b36b-4f71-a130-ed7f65aa39bb", "created": "2026-10-09T15:13:10.776025Z", "modified": "2026-10-09T15:13:10.776025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5571c1e45261d36472dd5bca2a51cbabe647480e9af35532e36ebf246f07f070']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.776025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c1bd994-50d2-4301-95c5-1ab67b4ba8b4", "created": "2026-10-09T15:13:10.776623Z", "modified": "2026-10-09T15:13:10.776623Z", "relationship_type": "indicates", "source_ref": "indicator--4d0525d4-b36b-4f71-a130-ed7f65aa39bb", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce887bba-9d47-48dd-9967-bb1bbb1d83a2", "created": "2026-10-09T15:13:10.776759Z", "modified": "2026-10-09T15:13:10.776759Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a73808b195ea07139d634547d2b30a10cf56d7e9784d7fd2bafdf0efd5772475']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.776759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0dd30b9-f2fb-4fab-b51f-ba9f375c803e", "created": "2026-10-09T15:13:10.777351Z", "modified": "2026-10-09T15:13:10.777351Z", "relationship_type": "indicates", "source_ref": "indicator--ce887bba-9d47-48dd-9967-bb1bbb1d83a2", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16fe0aa-6ce4-4c1e-b00c-57c970f3a66a", "created": "2026-10-09T15:13:10.777475Z", "modified": "2026-10-09T15:13:10.777475Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c06f9e06f7398c491fc4bed26621c81e18ba9938f40d1354241a9cebcd0b67d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.777475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c21ef9e2-24db-4cc9-8a90-72cce90f0bcc", "created": "2026-10-09T15:13:10.778052Z", "modified": "2026-10-09T15:13:10.778052Z", "relationship_type": "indicates", "source_ref": "indicator--e16fe0aa-6ce4-4c1e-b00c-57c970f3a66a", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9119bce6-c115-4bfc-8f9b-2d6d9e5f694e", "created": "2026-10-09T15:13:10.778168Z", "modified": "2026-10-09T15:13:10.778168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73f5c41df593a66e9c53ca908688957ef6721fdc02412f27eb40929b680429d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.778168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed6fc46e-a285-4b5b-97d0-36d3c8798998", "created": "2026-10-09T15:13:10.778756Z", "modified": "2026-10-09T15:13:10.778756Z", "relationship_type": "indicates", "source_ref": "indicator--9119bce6-c115-4bfc-8f9b-2d6d9e5f694e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e1c51a-529c-423b-9b46-0f85cdc42b1c", "created": "2026-10-09T15:13:10.778876Z", "modified": "2026-10-09T15:13:10.778876Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b43df2e11179e4abf6dc6980e73258f48e41a21bb216e3aed645c772e5b0307']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.778876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfa2d3ac-0950-4cbd-aa67-e084d6311442", "created": "2026-10-09T15:13:10.779468Z", "modified": "2026-10-09T15:13:10.779468Z", "relationship_type": "indicates", "source_ref": "indicator--67e1c51a-529c-423b-9b46-0f85cdc42b1c", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69b43c8-2659-4d44-98d6-50e93e04f60e", "created": "2026-10-09T15:13:10.77959Z", "modified": "2026-10-09T15:13:10.77959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a58bc4aa70a511a8427e6fe2885436e30a07b1cc2bb87599d5460f1ff808b1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.77959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fe450fa-a9e0-4a58-913a-a999c614ce06", "created": "2026-10-09T15:13:10.780171Z", "modified": "2026-10-09T15:13:10.780171Z", "relationship_type": "indicates", "source_ref": "indicator--d69b43c8-2659-4d44-98d6-50e93e04f60e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673f965a-b47c-45dc-99b1-937c192a2364", "created": "2026-10-09T15:13:10.780305Z", "modified": "2026-10-09T15:13:10.780305Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2aa01a5501073cb42bba7f36c63b57981783e10287e625eda71247cd6e72170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.780305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80d5d794-f050-464d-8ac9-4c608efb119c", "created": "2026-10-09T15:13:10.780891Z", "modified": "2026-10-09T15:13:10.780891Z", "relationship_type": "indicates", "source_ref": "indicator--673f965a-b47c-45dc-99b1-937c192a2364", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f05a835-49c6-4198-ab7b-578ea4e72c9f", "created": "2026-10-09T15:13:10.781009Z", "modified": "2026-10-09T15:13:10.781009Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fe44faf1707301911a9d1bc92e03b808cc2deacb322d2919346be866e7d8730']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.781009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a539621f-0188-4ff4-b89a-fb346ecbaf3d", "created": "2026-10-09T15:13:10.781708Z", "modified": "2026-10-09T15:13:10.781708Z", "relationship_type": "indicates", "source_ref": "indicator--4f05a835-49c6-4198-ab7b-578ea4e72c9f", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5532fc-7bfb-413e-8b90-1b57c8b5acef", "created": "2026-10-09T15:13:10.781835Z", "modified": "2026-10-09T15:13:10.781835Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7ee7b26ec75ca139a47651cbdce8a527fb802b929cd852f703dcf8393af3b3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.781835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12cc155b-59b0-4d4b-8289-081dd2bcae1c", "created": "2026-10-09T15:13:10.782434Z", "modified": "2026-10-09T15:13:10.782434Z", "relationship_type": "indicates", "source_ref": "indicator--7d5532fc-7bfb-413e-8b90-1b57c8b5acef", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41373e61-c7c9-4791-ac70-a8e87dc378a0", "created": "2026-10-09T15:13:10.782557Z", "modified": "2026-10-09T15:13:10.782557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ee81c8a45cd12c8389212485afbd3e63fc89e3dbf6e075b367d65b63bd3311d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.782557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57a6af6d-0422-43cf-975a-6eddb2711b0b", "created": "2026-10-09T15:13:10.783148Z", "modified": "2026-10-09T15:13:10.783148Z", "relationship_type": "indicates", "source_ref": "indicator--41373e61-c7c9-4791-ac70-a8e87dc378a0", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a70877-017e-4677-9210-c8dd9cb3468f", "created": "2026-10-09T15:13:10.783278Z", "modified": "2026-10-09T15:13:10.783278Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccb7f587989ea6acda25c913029f2eee533290ee51e3df1a5353aec2cf18a634']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.783278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c88a7f59-5ea0-4c4d-a7f8-0e66cd09846f", "created": "2026-10-09T15:13:10.783866Z", "modified": "2026-10-09T15:13:10.783866Z", "relationship_type": "indicates", "source_ref": "indicator--58a70877-017e-4677-9210-c8dd9cb3468f", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf63439-749e-482f-94a5-25980b95eeb4", "created": "2026-10-09T15:13:10.783991Z", "modified": "2026-10-09T15:13:10.783991Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a748db885f24cf94cdc68d1e5fbdd09c4523b34a100d128b9bf3a8cfeb03f996']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.783991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98d201eb-79ab-4a5f-8aa4-a827833e0ea7", "created": "2026-10-09T15:13:10.784593Z", "modified": "2026-10-09T15:13:10.784593Z", "relationship_type": "indicates", "source_ref": "indicator--ebf63439-749e-482f-94a5-25980b95eeb4", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fc6a4f-31cf-497e-a142-a0ef352d79ce", "created": "2026-10-09T15:13:10.784712Z", "modified": "2026-10-09T15:13:10.784712Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6adaf17462a23c966009297fd8c367bde7cb7e357659b96a4622060496cf04e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.784712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05e8be61-0baa-4f96-b184-aa891d9053a6", "created": "2026-10-09T15:13:10.785309Z", "modified": "2026-10-09T15:13:10.785309Z", "relationship_type": "indicates", "source_ref": "indicator--f7fc6a4f-31cf-497e-a142-a0ef352d79ce", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5bd2f3-7e2f-427a-b1d9-44453daefda5", "created": "2026-10-09T15:13:10.785431Z", "modified": "2026-10-09T15:13:10.785431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c209580b91f1ef1a82613030735bc8f62c3a929579594bd5f26c763dd891831']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.785431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ee9f721-80f1-493e-ba53-0bf4a210e34f", "created": "2026-10-09T15:13:10.78601Z", "modified": "2026-10-09T15:13:10.78601Z", "relationship_type": "indicates", "source_ref": "indicator--ae5bd2f3-7e2f-427a-b1d9-44453daefda5", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6c1580-d5ad-4ee2-a943-2aa55df7b19b", "created": "2026-10-09T15:13:10.786129Z", "modified": "2026-10-09T15:13:10.786129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72558262a74c9969fff0acd29ec1e31545938347ec09268aadabc61424581e14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.786129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3df8b282-1df4-4a89-8322-0874f8fbe33c", "created": "2026-10-09T15:13:10.786721Z", "modified": "2026-10-09T15:13:10.786721Z", "relationship_type": "indicates", "source_ref": "indicator--7d6c1580-d5ad-4ee2-a943-2aa55df7b19b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a085b1b4-afe6-46d8-bcd0-58ccebc76691", "created": "2026-10-09T15:13:10.786845Z", "modified": "2026-10-09T15:13:10.786845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6bfe958c84508a86879509c6c1df0f17d27ac9310457cea34f28b673e606344']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.786845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--200322c5-d55a-4a1a-be39-e83539e5a1d8", "created": "2026-10-09T15:13:10.787539Z", "modified": "2026-10-09T15:13:10.787539Z", "relationship_type": "indicates", "source_ref": "indicator--a085b1b4-afe6-46d8-bcd0-58ccebc76691", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27a8166-0f49-4dfc-8e75-98874e502793", "created": "2026-10-09T15:13:10.787662Z", "modified": "2026-10-09T15:13:10.787662Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89b679292734df69ce35224f2e49206dbb9e4708cb822f96dcc16ddd881f6e5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.787662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d97192c0-55db-4c63-b905-bb9f4ebad25a", "created": "2026-10-09T15:13:10.788247Z", "modified": "2026-10-09T15:13:10.788247Z", "relationship_type": "indicates", "source_ref": "indicator--f27a8166-0f49-4dfc-8e75-98874e502793", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43421e82-2f29-4a71-a630-1858a42f254b", "created": "2026-10-09T15:13:10.788382Z", "modified": "2026-10-09T15:13:10.788382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b292b99df19ca036d2715a864ce1c777aa46fc54c5c1046881268731d1dbb621']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.788382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--395dd1b7-3a03-4353-b60a-e66cbd82d713", "created": "2026-10-09T15:13:10.788966Z", "modified": "2026-10-09T15:13:10.788966Z", "relationship_type": "indicates", "source_ref": "indicator--43421e82-2f29-4a71-a630-1858a42f254b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4a9d4c-849c-4753-b1aa-e95e8cd7ab4c", "created": "2026-10-09T15:13:10.789087Z", "modified": "2026-10-09T15:13:10.789087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63542c55379492ce3c63cd5e488da279fa92c00ccb6c078dcbc4f509de313d20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.789087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4daa0d4f-2537-4bf5-8ccc-58e1b6019d2a", "created": "2026-10-09T15:13:10.789678Z", "modified": "2026-10-09T15:13:10.789678Z", "relationship_type": "indicates", "source_ref": "indicator--4f4a9d4c-849c-4753-b1aa-e95e8cd7ab4c", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9286fb34-775e-4b5b-98c7-84a952fe23a0", "created": "2026-10-09T15:13:10.789798Z", "modified": "2026-10-09T15:13:10.789798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32d8cba77a144a9c871fe00747d2a98c5dfe6fdec28f330827fc2a199ea40185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.789798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04f2a812-bc59-43c9-a276-e9886e68e141", "created": "2026-10-09T15:13:10.790395Z", "modified": "2026-10-09T15:13:10.790395Z", "relationship_type": "indicates", "source_ref": "indicator--9286fb34-775e-4b5b-98c7-84a952fe23a0", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c84f39-7ddf-458b-809e-9bb5c842c922", "created": "2026-10-09T15:13:10.790519Z", "modified": "2026-10-09T15:13:10.790519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='16df130f595dfc8fded1ea8860e131bf5f1122c65ed798aa6ac9ad0e6b6ba032']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.790519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a257fb1-7adb-4005-8458-7e665bab7bff", "created": "2026-10-09T15:13:10.791106Z", "modified": "2026-10-09T15:13:10.791106Z", "relationship_type": "indicates", "source_ref": "indicator--15c84f39-7ddf-458b-809e-9bb5c842c922", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e445ab-4530-44e2-97c1-4a42a92a23f0", "created": "2026-10-09T15:13:10.791228Z", "modified": "2026-10-09T15:13:10.791228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32e9aafdae7d8fb2a99d52b82dc38d164d89d9b45c87bc38ad877f45beb95de0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.791228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6b53aa4-331c-46f3-a09c-f628b470a246", "created": "2026-10-09T15:13:10.791834Z", "modified": "2026-10-09T15:13:10.791834Z", "relationship_type": "indicates", "source_ref": "indicator--90e445ab-4530-44e2-97c1-4a42a92a23f0", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b92f26-6302-42f2-976c-39d322bc92a2", "created": "2026-10-09T15:13:10.791956Z", "modified": "2026-10-09T15:13:10.791956Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e84e623505f0cf2064f58c7134fb22ad2e21db12768ad4aa4c815b81b1acfd7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.791956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deba92f3-65fd-4d2c-bb65-360c9bb314b2", "created": "2026-10-09T15:13:10.792556Z", "modified": "2026-10-09T15:13:10.792556Z", "relationship_type": "indicates", "source_ref": "indicator--c7b92f26-6302-42f2-976c-39d322bc92a2", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69615fd-68f8-4148-83a5-b1bca6a84935", "created": "2026-10-09T15:13:10.792678Z", "modified": "2026-10-09T15:13:10.792678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a72f4b1b7555fd6b2c07211ff04618f9dc474640bc641b76753a98b4f08c849d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.792678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc746fa4-4773-460c-a713-d3b1b258d5a0", "created": "2026-10-09T15:13:10.793253Z", "modified": "2026-10-09T15:13:10.793253Z", "relationship_type": "indicates", "source_ref": "indicator--d69615fd-68f8-4148-83a5-b1bca6a84935", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75fbae1-f033-4e7a-a2ff-654f88d633cc", "created": "2026-10-09T15:13:10.793391Z", "modified": "2026-10-09T15:13:10.793391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3d87b0943d8713204b40c6a99eaf18599217f04d003cdee732bd4d97fe08aac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.793391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33fbf59c-834e-4caf-9a01-e7396df17150", "created": "2026-10-09T15:13:10.794081Z", "modified": "2026-10-09T15:13:10.794081Z", "relationship_type": "indicates", "source_ref": "indicator--a75fbae1-f033-4e7a-a2ff-654f88d633cc", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f26fcaf-0e27-4bad-aac8-4f0c11a2252b", "created": "2026-10-09T15:13:10.794205Z", "modified": "2026-10-09T15:13:10.794205Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='city.russ.alltrackercorp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.794205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6fab90b-4065-401e-9755-3cb33645dc1f", "created": "2026-10-09T15:13:10.794679Z", "modified": "2026-10-09T15:13:10.794679Z", "relationship_type": "indicates", "source_ref": "indicator--1f26fcaf-0e27-4bad-aac8-4f0c11a2252b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4559d78b-0cb5-440b-a73d-cc46c59264cc", "created": "2026-10-09T15:13:10.7948Z", "modified": "2026-10-09T15:13:10.7948Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='city.russ.alltrackerfamily']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.7948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03fc5173-1ebd-4dff-827c-1d29b05b9a01", "created": "2026-10-09T15:13:10.795261Z", "modified": "2026-10-09T15:13:10.795261Z", "relationship_type": "indicates", "source_ref": "indicator--4559d78b-0cb5-440b-a73d-cc46c59264cc", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0afee9-23ef-4756-a500-f26950c7c731", "created": "2026-10-09T15:13:10.795404Z", "modified": "2026-10-09T15:13:10.795404Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='city.russ.alltrackerinstaller']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.795404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ba4e864-81aa-43d9-bbd6-16ec0b4bda6b", "created": "2026-10-09T15:13:10.795884Z", "modified": "2026-10-09T15:13:10.795884Z", "relationship_type": "indicates", "source_ref": "indicator--fb0afee9-23ef-4756-a500-f26950c7c731", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59c7015-0ba3-4059-a0f0-9f3f2a33f356", "created": "2026-10-09T15:13:10.796006Z", "modified": "2026-10-09T15:13:10.796006Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.alltracker.security']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.796006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fba557b-a21e-4b50-84a0-3e5c492622de", "created": "2026-10-09T15:13:10.796487Z", "modified": "2026-10-09T15:13:10.796487Z", "relationship_type": "indicates", "source_ref": "indicator--d59c7015-0ba3-4059-a0f0-9f3f2a33f356", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d53c3f-8113-49f6-b0e0-718d1c0a262e", "created": "2026-10-09T15:13:10.79661Z", "modified": "2026-10-09T15:13:10.79661Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='219D2D7FEC2B2DA6E25693A75FC15D2C6F4F6E67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.79661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0b7e502-a942-4601-bf3e-869cda5dc8e6", "created": "2026-10-09T15:13:10.797157Z", "modified": "2026-10-09T15:13:10.797157Z", "relationship_type": "indicates", "source_ref": "indicator--a9d53c3f-8113-49f6-b0e0-718d1c0a262e", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac92b31-76f1-4d3c-9102-b0d65da99799", "created": "2026-10-09T15:13:10.797291Z", "modified": "2026-10-09T15:13:10.797291Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='43D45CE7BEE36E449434C14973B7D285209414C7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.797291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91ebe77a-675e-46dc-8673-9bcab9a80173", "created": "2026-10-09T15:13:10.797834Z", "modified": "2026-10-09T15:13:10.797834Z", "relationship_type": "indicates", "source_ref": "indicator--8ac92b31-76f1-4d3c-9102-b0d65da99799", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd4066e-51e8-4e96-b0e2-be738d3eb31b", "created": "2026-10-09T15:13:10.797953Z", "modified": "2026-10-09T15:13:10.797953Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6C4E74FD002AEC131F8D05852566055C349E0A54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.797953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--907ae7cf-9414-4a8a-9d31-880e797adf8a", "created": "2026-10-09T15:13:10.798511Z", "modified": "2026-10-09T15:13:10.798511Z", "relationship_type": "indicates", "source_ref": "indicator--2bd4066e-51e8-4e96-b0e2-be738d3eb31b", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99e2540-a909-41b6-9504-8745a488c048", "created": "2026-10-09T15:13:10.798634Z", "modified": "2026-10-09T15:13:10.798634Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B6A744B0E8AE049AC0C20402EBC137B1192699A9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.798634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c461f65-db2c-465c-93dc-946284fd504b", "created": "2026-10-09T15:13:10.799183Z", "modified": "2026-10-09T15:13:10.799183Z", "relationship_type": "indicates", "source_ref": "indicator--e99e2540-a909-41b6-9504-8745a488c048", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f25bb7-d79d-438d-b6b3-b9bb441d95a0", "created": "2026-10-09T15:13:10.799314Z", "modified": "2026-10-09T15:13:10.799314Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F1912CEE4B5D6C1EA4070B53B440E2F660FFCBBD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.799314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--851dc4ca-c2fb-4d3b-942d-e15e9b347cd8", "created": "2026-10-09T15:13:10.799969Z", "modified": "2026-10-09T15:13:10.799969Z", "relationship_type": "indicates", "source_ref": "indicator--89f25bb7-d79d-438d-b6b3-b9bb441d95a0", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c45a52-d74c-477e-bae7-690c71c66bd1", "created": "2026-10-09T15:13:10.80009Z", "modified": "2026-10-09T15:13:10.80009Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F7871F09D6E58B9BEA5913FB2FA879E5427725E3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.80009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82fe47d9-4747-4f78-936c-9e5d7516cdfd", "created": "2026-10-09T15:13:10.800646Z", "modified": "2026-10-09T15:13:10.800646Z", "relationship_type": "indicates", "source_ref": "indicator--94c45a52-d74c-477e-bae7-690c71c66bd1", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9b7070-b62a-4bb0-8e35-c7767fbb6866", "created": "2026-10-09T15:13:10.800768Z", "modified": "2026-10-09T15:13:10.800768Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6EF8C27EBCF808FFA377A391DB9892B997AF16C9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.800768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f90fda4d-6461-4060-9ca5-4cce5d5e168f", "created": "2026-10-09T15:13:10.801318Z", "modified": "2026-10-09T15:13:10.801318Z", "relationship_type": "indicates", "source_ref": "indicator--8c9b7070-b62a-4bb0-8e35-c7767fbb6866", "target_ref": "malware--5bc6f657-98e7-40ed-9935-dd02890c3ec6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8", "created": "2026-10-09T15:13:10.801444Z", "modified": "2026-10-09T15:13:10.801444Z", "name": "SpyPhoneApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e9c8f77-c39d-4886-8d1e-1b256213fe86", "created": "2026-10-09T15:13:10.801572Z", "modified": "2026-10-09T15:13:10.801572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spy-phone-app.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.801572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68510b9a-22e7-4f52-8b52-ff52efd4a886", "created": "2026-10-09T15:13:10.802062Z", "modified": "2026-10-09T15:13:10.802062Z", "relationship_type": "indicates", "source_ref": "indicator--1e9c8f77-c39d-4886-8d1e-1b256213fe86", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc3a2a8-a8bb-4c6c-8ce4-8e63b072985d", "created": "2026-10-09T15:13:10.802185Z", "modified": "2026-10-09T15:13:10.802185Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spappmonitoring.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.802185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31b8e86b-a445-4241-ad81-94df7146b2d1", "created": "2026-10-09T15:13:10.802677Z", "modified": "2026-10-09T15:13:10.802677Z", "relationship_type": "indicates", "source_ref": "indicator--efc3a2a8-a8bb-4c6c-8ce4-8e63b072985d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a41d561-7576-48e7-8727-01c31f985cb0", "created": "2026-10-09T15:13:10.802796Z", "modified": "2026-10-09T15:13:10.802796Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobil-kem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.802796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--706e50ba-f8f3-404e-bb1e-6d5c2ffd3810", "created": "2026-10-09T15:13:10.803263Z", "modified": "2026-10-09T15:13:10.803263Z", "relationship_type": "indicates", "source_ref": "indicator--0a41d561-7576-48e7-8727-01c31f985cb0", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ca38b5-0646-4e0c-bdea-8e2b3744a391", "created": "2026-10-09T15:13:10.803397Z", "modified": "2026-10-09T15:13:10.803397Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.app-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.803397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a6ce1f0-e7e4-4e30-b51a-9c934a92b655", "created": "2026-10-09T15:13:10.803876Z", "modified": "2026-10-09T15:13:10.803876Z", "relationship_type": "indicates", "source_ref": "indicator--32ca38b5-0646-4e0c-bdea-8e2b3744a391", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f0f47f-8b8e-48d3-ad99-d133d61a6d3c", "created": "2026-10-09T15:13:10.804003Z", "modified": "2026-10-09T15:13:10.804003Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3512ba4341d0ec9a6365ed00310cbc9808c49325f37fb6356b9f6fe135c5085']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.804003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e509c2-57c6-4851-a220-39e580f2adc4", "created": "2026-10-09T15:13:10.804608Z", "modified": "2026-10-09T15:13:10.804608Z", "relationship_type": "indicates", "source_ref": "indicator--e0f0f47f-8b8e-48d3-ad99-d133d61a6d3c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126fa8c7-3580-429c-8d56-ed18ceed830e", "created": "2026-10-09T15:13:10.804734Z", "modified": "2026-10-09T15:13:10.804734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81e5760591786510e8828ca988b429209ebc3a0feeb8a20555fe76c6bb91a142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.804734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b596df82-f230-459b-bf6a-8409263e71a4", "created": "2026-10-09T15:13:10.805336Z", "modified": "2026-10-09T15:13:10.805336Z", "relationship_type": "indicates", "source_ref": "indicator--126fa8c7-3580-429c-8d56-ed18ceed830e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6645be-263a-4df6-86d8-52b1db5bdd67", "created": "2026-10-09T15:13:10.805458Z", "modified": "2026-10-09T15:13:10.805458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cf5f78109ff842af53b425b0f4843b6e4cb14e54d690b4ac32f36356d5eb2f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.805458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71cb7e46-66fd-4ee2-a337-033988478df0", "created": "2026-10-09T15:13:10.806152Z", "modified": "2026-10-09T15:13:10.806152Z", "relationship_type": "indicates", "source_ref": "indicator--cb6645be-263a-4df6-86d8-52b1db5bdd67", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58ad380-0936-4289-9960-e8abbd6e1b4b", "created": "2026-10-09T15:13:10.806285Z", "modified": "2026-10-09T15:13:10.806285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1df055fd523073863d664421b311a01c4343d4f5587027425ed6644d62e6babc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.806285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3ec46a5-02af-4483-ad51-eadf92abd3c3", "created": "2026-10-09T15:13:10.806879Z", "modified": "2026-10-09T15:13:10.806879Z", "relationship_type": "indicates", "source_ref": "indicator--a58ad380-0936-4289-9960-e8abbd6e1b4b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcfcbf0-d75e-45d0-9e08-d14b98589fd5", "created": "2026-10-09T15:13:10.807003Z", "modified": "2026-10-09T15:13:10.807003Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b0f927fa0f3253aaac7c15499c477d22b1d8b5e69f443d16abbf16441a5549e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.807003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a7d0043-3b9d-44fd-9ee9-bce7c4e369b1", "created": "2026-10-09T15:13:10.807595Z", "modified": "2026-10-09T15:13:10.807595Z", "relationship_type": "indicates", "source_ref": "indicator--efcfcbf0-d75e-45d0-9e08-d14b98589fd5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf63495e-1174-42f1-af7c-83f0c85ef6ec", "created": "2026-10-09T15:13:10.807717Z", "modified": "2026-10-09T15:13:10.807717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0112940541de66530817ba9656182b5ed49f3ae0e50df6cd4e354548386071d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.807717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b382fe0d-ee2b-42f6-aa02-2b0987a86e3a", "created": "2026-10-09T15:13:10.808307Z", "modified": "2026-10-09T15:13:10.808307Z", "relationship_type": "indicates", "source_ref": "indicator--bf63495e-1174-42f1-af7c-83f0c85ef6ec", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808df9e7-0c7b-48a7-ad7b-9020ffd54249", "created": "2026-10-09T15:13:10.808427Z", "modified": "2026-10-09T15:13:10.808427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87fe2d97ea733bf50ac80035b83bfc0472e0e998cd4c5c7652b75aa68fff85f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.808427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--409afc28-46cc-4eb2-85e7-258299c653c2", "created": "2026-10-09T15:13:10.809012Z", "modified": "2026-10-09T15:13:10.809012Z", "relationship_type": "indicates", "source_ref": "indicator--808df9e7-0c7b-48a7-ad7b-9020ffd54249", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd64643-193d-4957-a149-47a98b245917", "created": "2026-10-09T15:13:10.809134Z", "modified": "2026-10-09T15:13:10.809134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cbb22309a0f76a60ca6e2c586b182b758b57463a3731900687eaeddb86ef540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.809134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1f0147b-0e98-439b-8dfa-1c2ebaf00601", "created": "2026-10-09T15:13:10.809738Z", "modified": "2026-10-09T15:13:10.809738Z", "relationship_type": "indicates", "source_ref": "indicator--2dd64643-193d-4957-a149-47a98b245917", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917ceceb-6523-4565-bae4-509a5dcdfa65", "created": "2026-10-09T15:13:10.80986Z", "modified": "2026-10-09T15:13:10.80986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e622fa66a216b80611144c0970acfa5cafd8b58afa9bca572cfd0f6f2f713a5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.80986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a892c23-7e9e-4b57-af22-c7724aff08f6", "created": "2026-10-09T15:13:10.810472Z", "modified": "2026-10-09T15:13:10.810472Z", "relationship_type": "indicates", "source_ref": "indicator--917ceceb-6523-4565-bae4-509a5dcdfa65", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dcea3a-2bca-4254-8d6a-cba08b793d0d", "created": "2026-10-09T15:13:10.810597Z", "modified": "2026-10-09T15:13:10.810597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89ec89ec8859545437beec1c3e07e4c15723d0df0b79fdd4c67a6f327f558a8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.810597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79b62aa7-1d22-4dc3-b721-9d0079621fe4", "created": "2026-10-09T15:13:10.811183Z", "modified": "2026-10-09T15:13:10.811183Z", "relationship_type": "indicates", "source_ref": "indicator--f2dcea3a-2bca-4254-8d6a-cba08b793d0d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11903d8e-a28f-4038-a9bf-5be8c37da96d", "created": "2026-10-09T15:13:10.811316Z", "modified": "2026-10-09T15:13:10.811316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba95c43e0ed63cdc74b9c359258bb9b1071778ee1ac61d1507bd1b3e0d9438df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.811316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9747def3-46b6-41aa-b387-76927e65d916", "created": "2026-10-09T15:13:10.811909Z", "modified": "2026-10-09T15:13:10.811909Z", "relationship_type": "indicates", "source_ref": "indicator--11903d8e-a28f-4038-a9bf-5be8c37da96d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d22748-24f1-4be9-8d38-0427d1bc2266", "created": "2026-10-09T15:13:10.812031Z", "modified": "2026-10-09T15:13:10.812031Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76995bb264e10568116dc46136cca89ede77d915bdb0e469926afa7a6f1dc696']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.812031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e08a90d-c251-4438-8486-ba91d88525fa", "created": "2026-10-09T15:13:10.812742Z", "modified": "2026-10-09T15:13:10.812742Z", "relationship_type": "indicates", "source_ref": "indicator--77d22748-24f1-4be9-8d38-0427d1bc2266", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e71f42-6e81-4405-af2f-922ac06ad2d9", "created": "2026-10-09T15:13:10.812871Z", "modified": "2026-10-09T15:13:10.812871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1709bac275ac6e89607756c2d5591bcd6c91d769fd88b98753f806ec2b40ecd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.812871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db869d89-0cf8-4a6b-929f-3967a324f415", "created": "2026-10-09T15:13:10.813478Z", "modified": "2026-10-09T15:13:10.813478Z", "relationship_type": "indicates", "source_ref": "indicator--b9e71f42-6e81-4405-af2f-922ac06ad2d9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf09e99f-6b2f-4ede-9f5d-bbbfa4bdf908", "created": "2026-10-09T15:13:10.813604Z", "modified": "2026-10-09T15:13:10.813604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d9a193f6a9067b21032db11b8c1db2e2c8c32099d763f7ec96acc65f00f7286']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.813604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c27ed6d-efbe-47ae-b84d-009eef0f11ff", "created": "2026-10-09T15:13:10.814191Z", "modified": "2026-10-09T15:13:10.814191Z", "relationship_type": "indicates", "source_ref": "indicator--bf09e99f-6b2f-4ede-9f5d-bbbfa4bdf908", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142b3340-592c-4452-a5f7-1d6216b6f6ad", "created": "2026-10-09T15:13:10.814324Z", "modified": "2026-10-09T15:13:10.814324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0e1939bead0f2bc4c8095aa4726d2f7f9ee5ad51ee358ea7582991bebbc28b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.814324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88e3c039-63f5-4621-b26a-7a2071d0247e", "created": "2026-10-09T15:13:10.814918Z", "modified": "2026-10-09T15:13:10.814918Z", "relationship_type": "indicates", "source_ref": "indicator--142b3340-592c-4452-a5f7-1d6216b6f6ad", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c522479-9b9c-4b2a-86e4-62f7ffcee7c2", "created": "2026-10-09T15:13:10.815046Z", "modified": "2026-10-09T15:13:10.815046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba5904684801434db9ee1fbf510c36ac8b4384e089b42b8fd2acc548c8f93b0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.815046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--153533e2-bd0e-4d1a-86eb-63d8c682ca6f", "created": "2026-10-09T15:13:10.815651Z", "modified": "2026-10-09T15:13:10.815651Z", "relationship_type": "indicates", "source_ref": "indicator--2c522479-9b9c-4b2a-86e4-62f7ffcee7c2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566f2e79-29c9-48c3-b181-0edd06c22f79", "created": "2026-10-09T15:13:10.815775Z", "modified": "2026-10-09T15:13:10.815775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='205bb401ec90c70fe39da655aa306ae01ed74fd496692e19aac3b787b7596d8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.815775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4786ed72-c3c3-4f9d-acf2-74a98f9422e3", "created": "2026-10-09T15:13:10.816371Z", "modified": "2026-10-09T15:13:10.816371Z", "relationship_type": "indicates", "source_ref": "indicator--566f2e79-29c9-48c3-b181-0edd06c22f79", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3662d1f1-3547-4839-8c0b-d56e94828e95", "created": "2026-10-09T15:13:10.816497Z", "modified": "2026-10-09T15:13:10.816497Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bdfed5002e08698d298b57ffaef71b1b2cf35f56c8a03c4b584cb5bc1496fc53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.816497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f3d4d47-a855-48fa-8f42-2238a41bc284", "created": "2026-10-09T15:13:10.817092Z", "modified": "2026-10-09T15:13:10.817092Z", "relationship_type": "indicates", "source_ref": "indicator--3662d1f1-3547-4839-8c0b-d56e94828e95", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c10a609-bd03-4d8b-968b-e8ae362c8eee", "created": "2026-10-09T15:13:10.817215Z", "modified": "2026-10-09T15:13:10.817215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adcba2cac74787de4c38f42c2be04717725d5f85eb5d4a693717acc750fe65a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.817215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--833d6c5c-1404-4e4c-a210-f533128d6568", "created": "2026-10-09T15:13:10.817819Z", "modified": "2026-10-09T15:13:10.817819Z", "relationship_type": "indicates", "source_ref": "indicator--5c10a609-bd03-4d8b-968b-e8ae362c8eee", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74aee94-3249-4ed2-8331-eacd822a6ecf", "created": "2026-10-09T15:13:10.81794Z", "modified": "2026-10-09T15:13:10.81794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eed1bbe50c15fc351c0b36d3d114beada5da5fd79c3d1cddee369bd07fd33b33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.81794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33e5466b-7f8f-4fbf-92b6-5911f349cb44", "created": "2026-10-09T15:13:10.818642Z", "modified": "2026-10-09T15:13:10.818642Z", "relationship_type": "indicates", "source_ref": "indicator--c74aee94-3249-4ed2-8331-eacd822a6ecf", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eaf379-655d-4353-9046-11b8a8dad6aa", "created": "2026-10-09T15:13:10.818768Z", "modified": "2026-10-09T15:13:10.818768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbac144cac26439c9293f2bb1489957dca1351e8918ae2373b53040b9a9a4faa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.818768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a188f87-8127-487b-9900-51e29e665feb", "created": "2026-10-09T15:13:10.819368Z", "modified": "2026-10-09T15:13:10.819368Z", "relationship_type": "indicates", "source_ref": "indicator--40eaf379-655d-4353-9046-11b8a8dad6aa", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0919c97e-1f2c-4ca4-9049-44a743b7c12c", "created": "2026-10-09T15:13:10.81949Z", "modified": "2026-10-09T15:13:10.81949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='321d8c52eef9357a646606b171cac0afc9f06b2f2323ce0a55b19645dfe15879']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.81949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3e73665-f4fb-4110-b857-14dbb37f6c73", "created": "2026-10-09T15:13:10.820071Z", "modified": "2026-10-09T15:13:10.820071Z", "relationship_type": "indicates", "source_ref": "indicator--0919c97e-1f2c-4ca4-9049-44a743b7c12c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aa3029-7cda-4e9c-af25-243540c95726", "created": "2026-10-09T15:13:10.82019Z", "modified": "2026-10-09T15:13:10.82019Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0ac8392d33f7596c2c182279ad603ca7a42d47f9f3e5cd48f8196cfd5dce159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.82019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50d5a4b0-e02e-46e2-8aea-2a90d6eedacb", "created": "2026-10-09T15:13:10.820777Z", "modified": "2026-10-09T15:13:10.820777Z", "relationship_type": "indicates", "source_ref": "indicator--72aa3029-7cda-4e9c-af25-243540c95726", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d096390-3b9c-4871-8544-cbf840388824", "created": "2026-10-09T15:13:10.820898Z", "modified": "2026-10-09T15:13:10.820898Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ca1649945cd99e0b45e2ab2587cca9fa6f9d0779b530aca2c035f84c1524a1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.820898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcf88918-7582-47ef-b17b-d4f117d9a53b", "created": "2026-10-09T15:13:10.821489Z", "modified": "2026-10-09T15:13:10.821489Z", "relationship_type": "indicates", "source_ref": "indicator--2d096390-3b9c-4871-8544-cbf840388824", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8f3306-e0d1-40e2-be1c-18a61122f7cd", "created": "2026-10-09T15:13:10.821611Z", "modified": "2026-10-09T15:13:10.821611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1fff53defe2fb4180b3af985bada0692302c66e0f16e1c5550161d3ca6906a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.821611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80b7bf24-b8e9-47e4-a1af-2bde58948b73", "created": "2026-10-09T15:13:10.822195Z", "modified": "2026-10-09T15:13:10.822195Z", "relationship_type": "indicates", "source_ref": "indicator--ad8f3306-e0d1-40e2-be1c-18a61122f7cd", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81d4b1e-c2a0-47e2-88b1-f2628785a274", "created": "2026-10-09T15:13:10.822329Z", "modified": "2026-10-09T15:13:10.822329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f28176e25d402c46f0a9a4099a9c8fdbe684607bb4843ac58f8812e7cb4a86e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.822329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--534b7ff6-ff38-40e4-911b-5f83e4110eaa", "created": "2026-10-09T15:13:10.822919Z", "modified": "2026-10-09T15:13:10.822919Z", "relationship_type": "indicates", "source_ref": "indicator--c81d4b1e-c2a0-47e2-88b1-f2628785a274", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e80ff7-584b-4936-80d4-1529a76764ef", "created": "2026-10-09T15:13:10.823036Z", "modified": "2026-10-09T15:13:10.823036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1262145ffeed61d340e61a97043ccad4e1eb1c6eb9e1e8c374bb148dce5931e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.823036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--944d95ac-ab9c-481e-9d64-f585eeea851d", "created": "2026-10-09T15:13:10.82364Z", "modified": "2026-10-09T15:13:10.82364Z", "relationship_type": "indicates", "source_ref": "indicator--67e80ff7-584b-4936-80d4-1529a76764ef", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5424f624-96fc-492c-b76e-eef06d82e024", "created": "2026-10-09T15:13:10.82376Z", "modified": "2026-10-09T15:13:10.82376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2928168521a5058942eab3fcbcf202178f0e7620919f914da111e867b3c03a21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.82376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dff134a5-43a4-4756-9ed2-9c3ec0f81a9d", "created": "2026-10-09T15:13:10.824387Z", "modified": "2026-10-09T15:13:10.824387Z", "relationship_type": "indicates", "source_ref": "indicator--5424f624-96fc-492c-b76e-eef06d82e024", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555f2e1d-13be-40ca-a41f-a03eabaf09fb", "created": "2026-10-09T15:13:10.824511Z", "modified": "2026-10-09T15:13:10.824511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a92083d1a0ef2520b6177d640b8fa9107b3e3019e4b4c02e4838b74ab6a881ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.824511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8cde917-12b8-4e3c-944b-ee2cd5373e65", "created": "2026-10-09T15:13:10.825199Z", "modified": "2026-10-09T15:13:10.825199Z", "relationship_type": "indicates", "source_ref": "indicator--555f2e1d-13be-40ca-a41f-a03eabaf09fb", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4fec6f-ed4b-4b31-b2b5-c3a967ccfadf", "created": "2026-10-09T15:13:10.825335Z", "modified": "2026-10-09T15:13:10.825335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11a7de1a0cadd32e4678416255291e458c741351158230830860734d2d64d679']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.825335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1b19b38-d586-4afa-8963-a290868f5083", "created": "2026-10-09T15:13:10.825919Z", "modified": "2026-10-09T15:13:10.825919Z", "relationship_type": "indicates", "source_ref": "indicator--4b4fec6f-ed4b-4b31-b2b5-c3a967ccfadf", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45e5d30-734c-4553-b3fb-f56718564683", "created": "2026-10-09T15:13:10.826038Z", "modified": "2026-10-09T15:13:10.826038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00dbf6f340048b3ebd087b3b34b582f2875b4fd8ba9b16361db0cd07e7021232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.826038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b1312ce-aac5-4af5-bacf-ae9d7acac936", "created": "2026-10-09T15:13:10.826629Z", "modified": "2026-10-09T15:13:10.826629Z", "relationship_type": "indicates", "source_ref": "indicator--b45e5d30-734c-4553-b3fb-f56718564683", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1894cda-0d0d-478b-80a8-b9781bf67605", "created": "2026-10-09T15:13:10.826757Z", "modified": "2026-10-09T15:13:10.826757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53c08379c24b331d404eb640e81366776d815c5eaa63a1e3f8e0c67e331fef2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.826757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84ac47ce-4878-489a-870d-8d4d000afae9", "created": "2026-10-09T15:13:10.827357Z", "modified": "2026-10-09T15:13:10.827357Z", "relationship_type": "indicates", "source_ref": "indicator--d1894cda-0d0d-478b-80a8-b9781bf67605", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de48df3f-7bd3-4519-9795-c9e727715393", "created": "2026-10-09T15:13:10.82748Z", "modified": "2026-10-09T15:13:10.82748Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e876dc2c58359989f61369bd107ef792bd11d19d74023296300f2799a8a8a30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.82748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c29ba74-3869-45f7-881b-f8e3e46a5270", "created": "2026-10-09T15:13:10.828064Z", "modified": "2026-10-09T15:13:10.828064Z", "relationship_type": "indicates", "source_ref": "indicator--de48df3f-7bd3-4519-9795-c9e727715393", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a769a5c7-772f-4ff7-82e2-8fc60ecf8923", "created": "2026-10-09T15:13:10.828187Z", "modified": "2026-10-09T15:13:10.828187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20a6671a0b5afde14124863de5f6ed10331beb7bebb5edcd991c8865f0d7c456']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.828187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4dbeb93-05d1-40eb-8421-d3b03eab0d8a", "created": "2026-10-09T15:13:10.828804Z", "modified": "2026-10-09T15:13:10.828804Z", "relationship_type": "indicates", "source_ref": "indicator--a769a5c7-772f-4ff7-82e2-8fc60ecf8923", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a6716c-41ba-4897-a3eb-f628787666b2", "created": "2026-10-09T15:13:10.828928Z", "modified": "2026-10-09T15:13:10.828928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e5fb4a6d873e12ecef387d2c2b0fa6cb1ed022dcf4fecf73c76e305344fa6d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.828928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e17c2ee0-3008-4abe-91af-c1c5f41dae6a", "created": "2026-10-09T15:13:10.82953Z", "modified": "2026-10-09T15:13:10.82953Z", "relationship_type": "indicates", "source_ref": "indicator--34a6716c-41ba-4897-a3eb-f628787666b2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a48199-2136-4e06-bdc1-e919968d9e1c", "created": "2026-10-09T15:13:10.829655Z", "modified": "2026-10-09T15:13:10.829655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49c49f29b891dbb58efca0330a60d4b58b324794a3f4d48f764198eff7f3e7e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.829655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e122696-fe1a-4da0-9705-63f802416306", "created": "2026-10-09T15:13:10.830246Z", "modified": "2026-10-09T15:13:10.830246Z", "relationship_type": "indicates", "source_ref": "indicator--04a48199-2136-4e06-bdc1-e919968d9e1c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e515beaa-3dec-46de-85df-199350774d21", "created": "2026-10-09T15:13:10.830384Z", "modified": "2026-10-09T15:13:10.830384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8cdd4accc4bac8606a4095fcd05b357455606bf445d79ded87d427aa31a9b02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.830384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94358a17-e877-490c-9af2-8f22c82b02cc", "created": "2026-10-09T15:13:10.83097Z", "modified": "2026-10-09T15:13:10.83097Z", "relationship_type": "indicates", "source_ref": "indicator--e515beaa-3dec-46de-85df-199350774d21", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08601c46-bdd4-4cff-9b5f-2c4fa5a35046", "created": "2026-10-09T15:13:10.831097Z", "modified": "2026-10-09T15:13:10.831097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='151caa8573da4d9a9d90d62066b777d66444ea4fff8728275aaed79285d5bacc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.831097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b0be276-36c8-4401-8594-b46d003a528f", "created": "2026-10-09T15:13:10.83181Z", "modified": "2026-10-09T15:13:10.83181Z", "relationship_type": "indicates", "source_ref": "indicator--08601c46-bdd4-4cff-9b5f-2c4fa5a35046", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a624f65a-d279-497e-91f5-839e10656fe6", "created": "2026-10-09T15:13:10.83194Z", "modified": "2026-10-09T15:13:10.83194Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c548cf4c04595df7ceb97df200761129f015b79f492ec113cffb65c4fa5f959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.83194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3dc01d6-95c9-4420-89db-f99d3655e0b1", "created": "2026-10-09T15:13:10.832542Z", "modified": "2026-10-09T15:13:10.832542Z", "relationship_type": "indicates", "source_ref": "indicator--a624f65a-d279-497e-91f5-839e10656fe6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db4f4fb-cc20-484d-bf9b-bfce44d60f3f", "created": "2026-10-09T15:13:10.832666Z", "modified": "2026-10-09T15:13:10.832666Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0db82562f4412a248751b2392bd32dcb91bb55f31d0d54e354a172e4430b84fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.832666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56bb9942-7c5f-4a25-8ed2-203ac98bd88b", "created": "2026-10-09T15:13:10.833248Z", "modified": "2026-10-09T15:13:10.833248Z", "relationship_type": "indicates", "source_ref": "indicator--4db4f4fb-cc20-484d-bf9b-bfce44d60f3f", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c007ced-a0f9-4adb-91b8-480af3224ef5", "created": "2026-10-09T15:13:10.83338Z", "modified": "2026-10-09T15:13:10.83338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4afbec9afda9b56b0762a2a6a0e8e37d5110e7095b7453c8bf4ac012ea331bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.83338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f3abf96-52aa-4a86-869e-0ef665ab834f", "created": "2026-10-09T15:13:10.83396Z", "modified": "2026-10-09T15:13:10.83396Z", "relationship_type": "indicates", "source_ref": "indicator--9c007ced-a0f9-4adb-91b8-480af3224ef5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1c54d2-e17d-4359-9fe9-c0290672de7a", "created": "2026-10-09T15:13:10.834079Z", "modified": "2026-10-09T15:13:10.834079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2aed477e002318fd9e0c1a7304f2f1124060af66175722aa7d67e932ef77687d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.834079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f006f79d-24bd-4b07-bb9c-89681efe0fad", "created": "2026-10-09T15:13:10.83467Z", "modified": "2026-10-09T15:13:10.83467Z", "relationship_type": "indicates", "source_ref": "indicator--3e1c54d2-e17d-4359-9fe9-c0290672de7a", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2f2062-e3d9-4e27-9690-5f5cd0f26ed0", "created": "2026-10-09T15:13:10.834794Z", "modified": "2026-10-09T15:13:10.834794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e650f370cd0b02dfdee4b3b1479f62d28ddce7611751db3af6811b5fbb4389ef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.834794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0268a32-8f99-4226-993c-3989e6b54a1c", "created": "2026-10-09T15:13:10.835387Z", "modified": "2026-10-09T15:13:10.835387Z", "relationship_type": "indicates", "source_ref": "indicator--3d2f2062-e3d9-4e27-9690-5f5cd0f26ed0", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517bdd92-a6fe-442a-932a-caa0506f8deb", "created": "2026-10-09T15:13:10.835511Z", "modified": "2026-10-09T15:13:10.835511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3c1e03e976b4751ae711e33999d3cb933ae4a39e8da2397850c099fb525312e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.835511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d72c7fc-3367-495a-b2bf-c7291a3f45cc", "created": "2026-10-09T15:13:10.836093Z", "modified": "2026-10-09T15:13:10.836093Z", "relationship_type": "indicates", "source_ref": "indicator--517bdd92-a6fe-442a-932a-caa0506f8deb", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce2fbe4-a811-4707-a366-3bb220647ec2", "created": "2026-10-09T15:13:10.836215Z", "modified": "2026-10-09T15:13:10.836215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d77c3e748a0520c399f5a403d3fee0cb57740497bacd285a80cb48159778488d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.836215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bec4911-2127-4dca-8af0-07c919b0608c", "created": "2026-10-09T15:13:10.836821Z", "modified": "2026-10-09T15:13:10.836821Z", "relationship_type": "indicates", "source_ref": "indicator--dce2fbe4-a811-4707-a366-3bb220647ec2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbfa6de-16e5-40a5-9b84-7ed2988c9d60", "created": "2026-10-09T15:13:10.836942Z", "modified": "2026-10-09T15:13:10.836942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9608d8f4e240e5e46d58bc41d754fd05624925cdda8cdbfe088dcf86f71e1038']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.836942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98f45289-775d-42e7-b924-8860a9a928dd", "created": "2026-10-09T15:13:10.837646Z", "modified": "2026-10-09T15:13:10.837646Z", "relationship_type": "indicates", "source_ref": "indicator--bbbfa6de-16e5-40a5-9b84-7ed2988c9d60", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a220fe31-fbd1-4603-a898-617ca1ad4733", "created": "2026-10-09T15:13:10.837784Z", "modified": "2026-10-09T15:13:10.837784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b67f2545922e2c6af5919656af4ceb106db98127465eb1deac726d6214639576']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.837784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e5a50bb-3139-4f8f-8add-db00b7e98961", "created": "2026-10-09T15:13:10.838389Z", "modified": "2026-10-09T15:13:10.838389Z", "relationship_type": "indicates", "source_ref": "indicator--a220fe31-fbd1-4603-a898-617ca1ad4733", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7c71b4-8d92-41cb-af6e-87ad44fab330", "created": "2026-10-09T15:13:10.838512Z", "modified": "2026-10-09T15:13:10.838512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31175b492bfcce407d165fbcf3e9e220411d14a84e928aa6b26404876f214a21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.838512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8c45015-1716-474f-95c6-179fb76f4277", "created": "2026-10-09T15:13:10.83909Z", "modified": "2026-10-09T15:13:10.83909Z", "relationship_type": "indicates", "source_ref": "indicator--cc7c71b4-8d92-41cb-af6e-87ad44fab330", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd613e50-7c1c-4393-b390-e95a031042d0", "created": "2026-10-09T15:13:10.839207Z", "modified": "2026-10-09T15:13:10.839207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b196afa9834363920e62b421c7d9bf9695b274b4eebaa7edbb9cd650d2cb952e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.839207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22eb9d73-829f-410b-9828-b0d83344abbd", "created": "2026-10-09T15:13:10.839809Z", "modified": "2026-10-09T15:13:10.839809Z", "relationship_type": "indicates", "source_ref": "indicator--cd613e50-7c1c-4393-b390-e95a031042d0", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28355e4a-e252-48ee-889c-887a497b78e4", "created": "2026-10-09T15:13:10.839933Z", "modified": "2026-10-09T15:13:10.839933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1245b4b95500a6a4aaee171df1c7c523ece54e8d5f4165cea78930ab144ab1e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.839933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7be120e-ee16-408e-8b1b-7b0c86e20ee6", "created": "2026-10-09T15:13:10.840535Z", "modified": "2026-10-09T15:13:10.840535Z", "relationship_type": "indicates", "source_ref": "indicator--28355e4a-e252-48ee-889c-887a497b78e4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8365346b-a127-480b-962e-68e73583a892", "created": "2026-10-09T15:13:10.84066Z", "modified": "2026-10-09T15:13:10.84066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b932f64bfa8b42d53c3fd8b6e2891181b7b22ee8c0494effb637105228191c9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.84066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d3d5186-cc48-4de4-947b-afaba41f1b76", "created": "2026-10-09T15:13:10.841249Z", "modified": "2026-10-09T15:13:10.841249Z", "relationship_type": "indicates", "source_ref": "indicator--8365346b-a127-480b-962e-68e73583a892", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cfdb56-f6d7-423b-8e64-c9ef85c06eff", "created": "2026-10-09T15:13:10.841386Z", "modified": "2026-10-09T15:13:10.841386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b70317cbb1e0149108b78b2da741f0dc1283c0c55a4e83e3601e4feb8147b5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.841386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a478a91-3957-4205-ad29-81795e692e18", "created": "2026-10-09T15:13:10.841976Z", "modified": "2026-10-09T15:13:10.841976Z", "relationship_type": "indicates", "source_ref": "indicator--c2cfdb56-f6d7-423b-8e64-c9ef85c06eff", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef813f5f-f0ce-4112-bcd1-cb188f7ffad6", "created": "2026-10-09T15:13:10.842101Z", "modified": "2026-10-09T15:13:10.842101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b826dbf34d15d5ab8ed95b84e318b33fcc51130d6345d0d4a0b7b8c9ed889078']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.842101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--417458b2-1fc4-4fb3-a86b-fc8c1822c0a1", "created": "2026-10-09T15:13:10.842693Z", "modified": "2026-10-09T15:13:10.842693Z", "relationship_type": "indicates", "source_ref": "indicator--ef813f5f-f0ce-4112-bcd1-cb188f7ffad6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aae0bca-10c4-4112-bd17-affa51365ec9", "created": "2026-10-09T15:13:10.842813Z", "modified": "2026-10-09T15:13:10.842813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='317138c6c9ac61f4ea897af38a1564d3dcd30880020ca7dacc78b70bd397ebc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.842813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2a000e0-083a-4f57-8855-5ae5a8ea1a92", "created": "2026-10-09T15:13:10.843415Z", "modified": "2026-10-09T15:13:10.843415Z", "relationship_type": "indicates", "source_ref": "indicator--1aae0bca-10c4-4112-bd17-affa51365ec9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65762581-dea8-4337-bad0-85b0af2bae6c", "created": "2026-10-09T15:13:10.843538Z", "modified": "2026-10-09T15:13:10.843538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0411cfd7e4c579dfb7561304264ec3e789cdd1ffb68fdf03791a3e5cf4179dc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.843538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19ebdca3-5133-443c-9aed-baba15f41ef5", "created": "2026-10-09T15:13:10.844561Z", "modified": "2026-10-09T15:13:10.844561Z", "relationship_type": "indicates", "source_ref": "indicator--65762581-dea8-4337-bad0-85b0af2bae6c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3577b92-bcfc-4ff3-9d31-c6521dbc991d", "created": "2026-10-09T15:13:10.844689Z", "modified": "2026-10-09T15:13:10.844689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3a207a9ad86169183f2222ccaac898ed2d88ee29dcbbfde24f821c1cf324e39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.844689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b7ad4dd-8776-45ce-9a42-70ae62b1feb5", "created": "2026-10-09T15:13:10.845291Z", "modified": "2026-10-09T15:13:10.845291Z", "relationship_type": "indicates", "source_ref": "indicator--b3577b92-bcfc-4ff3-9d31-c6521dbc991d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea480a7-65d1-49c0-8cd1-b80ee383e278", "created": "2026-10-09T15:13:10.845418Z", "modified": "2026-10-09T15:13:10.845418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14b38aa028242947962da976198da300b7b0af4876da97f068098f93f314769a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.845418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72b72984-accf-405c-858d-4e6a57878fc4", "created": "2026-10-09T15:13:10.846008Z", "modified": "2026-10-09T15:13:10.846008Z", "relationship_type": "indicates", "source_ref": "indicator--fea480a7-65d1-49c0-8cd1-b80ee383e278", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b806b4-1c68-4320-8b50-baa2fbbe2187", "created": "2026-10-09T15:13:10.846132Z", "modified": "2026-10-09T15:13:10.846132Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fc4bc56da6f6be23a94972cfe1f6deb018ed88d45479d148c3752922ee5efe4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.846132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45b3f8a1-89b0-4ad7-a9e1-ced3d20b3b0d", "created": "2026-10-09T15:13:10.846736Z", "modified": "2026-10-09T15:13:10.846736Z", "relationship_type": "indicates", "source_ref": "indicator--b9b806b4-1c68-4320-8b50-baa2fbbe2187", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ddaa7-a613-4570-8d54-99942d9dcd9c", "created": "2026-10-09T15:13:10.846861Z", "modified": "2026-10-09T15:13:10.846861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c9d8441d0635e9b63aa25eaf2f1b7859bbd0e7ed83ef033d40d26add116a676']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.846861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c82d299-6627-44fc-8d68-2bf16571f833", "created": "2026-10-09T15:13:10.847457Z", "modified": "2026-10-09T15:13:10.847457Z", "relationship_type": "indicates", "source_ref": "indicator--7a6ddaa7-a613-4570-8d54-99942d9dcd9c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fab130-40cf-4685-ab36-2878dc504e6c", "created": "2026-10-09T15:13:10.847581Z", "modified": "2026-10-09T15:13:10.847581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e36337275d56f7b6246811a00e4c8f2299b1ce8e61babca980d49f7e0b318742']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.847581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3817511-9fd1-4952-b078-0f91fe4e623e", "created": "2026-10-09T15:13:10.84817Z", "modified": "2026-10-09T15:13:10.84817Z", "relationship_type": "indicates", "source_ref": "indicator--43fab130-40cf-4685-ab36-2878dc504e6c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283f9e22-be78-4d15-af49-1e9eecd7e93b", "created": "2026-10-09T15:13:10.848302Z", "modified": "2026-10-09T15:13:10.848302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df05cab15423d5ffb9ecca54815dcd7282690ca7236c38af27ee561d7ba50606']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.848302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab24ee45-19ca-4053-9215-44bf10690de5", "created": "2026-10-09T15:13:10.848895Z", "modified": "2026-10-09T15:13:10.848895Z", "relationship_type": "indicates", "source_ref": "indicator--283f9e22-be78-4d15-af49-1e9eecd7e93b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84abade3-3716-4b7e-909f-11760fe720e9", "created": "2026-10-09T15:13:10.849016Z", "modified": "2026-10-09T15:13:10.849016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f6eaeba4fd9f4b0ba71960eddb8909eb500cfe0792270510924956fac6fccb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.849016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07a433a4-d667-4d90-a075-30e57fc72236", "created": "2026-10-09T15:13:10.84961Z", "modified": "2026-10-09T15:13:10.84961Z", "relationship_type": "indicates", "source_ref": "indicator--84abade3-3716-4b7e-909f-11760fe720e9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4e5c9b-ac4d-4ce8-a417-83270363ba9b", "created": "2026-10-09T15:13:10.849734Z", "modified": "2026-10-09T15:13:10.849734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70537eabca1944ec239221466d1fb0ccead13fe6cedc6b18f637fa927bd9d1ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.849734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14ca49a0-e400-4646-b4d1-6dfa5df90efb", "created": "2026-10-09T15:13:10.850333Z", "modified": "2026-10-09T15:13:10.850333Z", "relationship_type": "indicates", "source_ref": "indicator--0d4e5c9b-ac4d-4ce8-a417-83270363ba9b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bc942d-b360-44f3-8cc3-8ff95e3a1263", "created": "2026-10-09T15:13:10.850455Z", "modified": "2026-10-09T15:13:10.850455Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='103168909a5e5b626b1d77eff4c3a7262f48ed93915c96496c1eb56af669e921']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.850455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0964303-370f-4bb7-9dae-dd1c9a0855c7", "created": "2026-10-09T15:13:10.851149Z", "modified": "2026-10-09T15:13:10.851149Z", "relationship_type": "indicates", "source_ref": "indicator--14bc942d-b360-44f3-8cc3-8ff95e3a1263", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fc8d29-d9f9-4725-87cb-06b5350abe5f", "created": "2026-10-09T15:13:10.851287Z", "modified": "2026-10-09T15:13:10.851287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45116bbc5ee3bd43ead04f4d24ea43f57c4f6040520ddb6cf3b0ef6406e672d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.851287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d23be23-5229-4379-be4e-61acb6d72e58", "created": "2026-10-09T15:13:10.851878Z", "modified": "2026-10-09T15:13:10.851878Z", "relationship_type": "indicates", "source_ref": "indicator--40fc8d29-d9f9-4725-87cb-06b5350abe5f", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea88d24-5464-412b-8ef7-62d55cf15b4a", "created": "2026-10-09T15:13:10.852Z", "modified": "2026-10-09T15:13:10.852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32c8d7d418badddbdb30bd4917138d7f21f1920233f3f67d2f4f0b6476d02e59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e3d543d-24e9-4667-a3e7-861dae244b99", "created": "2026-10-09T15:13:10.852599Z", "modified": "2026-10-09T15:13:10.852599Z", "relationship_type": "indicates", "source_ref": "indicator--9ea88d24-5464-412b-8ef7-62d55cf15b4a", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5aa131-00a6-4088-8056-e5142060af73", "created": "2026-10-09T15:13:10.852727Z", "modified": "2026-10-09T15:13:10.852727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e41a3ddd8a52d5c6f3e8896df74b5ea81f27b83dad1e79dd49e32910306b816']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.852727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7fa67af-5989-4ad8-806b-539cb81012e4", "created": "2026-10-09T15:13:10.853327Z", "modified": "2026-10-09T15:13:10.853327Z", "relationship_type": "indicates", "source_ref": "indicator--dc5aa131-00a6-4088-8056-e5142060af73", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a65b8f-d1b2-4bc5-992d-6fae54d1e395", "created": "2026-10-09T15:13:10.85345Z", "modified": "2026-10-09T15:13:10.85345Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd1e9250b890860c58b26553cf87cdf8defe59bb12ca928009b43227b2c988cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.85345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60fb8709-275a-44d2-a956-c58b5faf32a3", "created": "2026-10-09T15:13:10.854028Z", "modified": "2026-10-09T15:13:10.854028Z", "relationship_type": "indicates", "source_ref": "indicator--d5a65b8f-d1b2-4bc5-992d-6fae54d1e395", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2ac46d-7cc6-4d8b-9525-7d66c912255c", "created": "2026-10-09T15:13:10.854149Z", "modified": "2026-10-09T15:13:10.854149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70143655cc7708c79f29ff9b9a3f89c2183d4276a3515ea0d8c75c93e60a236c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.854149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f867941a-009b-45fd-a1a1-52da23e8b422", "created": "2026-10-09T15:13:10.854749Z", "modified": "2026-10-09T15:13:10.854749Z", "relationship_type": "indicates", "source_ref": "indicator--6e2ac46d-7cc6-4d8b-9525-7d66c912255c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa38618-db85-4669-b954-4c345c2a7641", "created": "2026-10-09T15:13:10.854868Z", "modified": "2026-10-09T15:13:10.854868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8377e4e20e1c2e2076f3422e804101cf6b13a88af1a89c47cd582d32919e0360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.854868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f6fffc2-fafd-45f1-94b6-f866fc73758b", "created": "2026-10-09T15:13:10.855463Z", "modified": "2026-10-09T15:13:10.855463Z", "relationship_type": "indicates", "source_ref": "indicator--6fa38618-db85-4669-b954-4c345c2a7641", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fd27cc-6e4f-4bda-ac40-6c80668bcdd6", "created": "2026-10-09T15:13:10.855584Z", "modified": "2026-10-09T15:13:10.855584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90e0558a36685d8aa7344c0cf61909792ed2f15eb982e2609c2a7f255989c8ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.855584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92edc6cd-dba7-4dc9-bdd4-e7ff01bc310a", "created": "2026-10-09T15:13:10.856168Z", "modified": "2026-10-09T15:13:10.856168Z", "relationship_type": "indicates", "source_ref": "indicator--25fd27cc-6e4f-4bda-ac40-6c80668bcdd6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7767d69-42f6-4bf8-821a-f9759bd62fca", "created": "2026-10-09T15:13:10.856297Z", "modified": "2026-10-09T15:13:10.856297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='338cfbc4732e77a47b434ac899e57388e5b70737ab40ad6323197c98fd6db2c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.856297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b61de1b5-da42-4c14-b163-0362294080a2", "created": "2026-10-09T15:13:10.85689Z", "modified": "2026-10-09T15:13:10.85689Z", "relationship_type": "indicates", "source_ref": "indicator--e7767d69-42f6-4bf8-821a-f9759bd62fca", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5f2efd-36be-449b-86b9-9b84a3f777cd", "created": "2026-10-09T15:13:10.857011Z", "modified": "2026-10-09T15:13:10.857011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='918613502256a1e72261abaf392c1b19720d6667fdb5eabfd937c8a2a3411e29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.857011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f0c63fa-2a62-475c-9b9b-b065bcd5a03f", "created": "2026-10-09T15:13:10.857709Z", "modified": "2026-10-09T15:13:10.857709Z", "relationship_type": "indicates", "source_ref": "indicator--ef5f2efd-36be-449b-86b9-9b84a3f777cd", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e81e21-ae43-4db1-9b06-47d0d8a7eaea", "created": "2026-10-09T15:13:10.857834Z", "modified": "2026-10-09T15:13:10.857834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be4e8761608e9436c78988a3d288312b4ca733179c22ef504218bf7e3032b36b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.857834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67902859-88de-459a-999b-9cb4e6acb316", "created": "2026-10-09T15:13:10.858444Z", "modified": "2026-10-09T15:13:10.858444Z", "relationship_type": "indicates", "source_ref": "indicator--32e81e21-ae43-4db1-9b06-47d0d8a7eaea", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe481cf-59ef-4c54-8917-12a26c322633", "created": "2026-10-09T15:13:10.85857Z", "modified": "2026-10-09T15:13:10.85857Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e2050490ac0140780984c528dd0d05fbd82f2e90a18cda2e54b4ed3dbd45865']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.85857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2076b08c-3815-4701-ab00-5440b8f5c5d3", "created": "2026-10-09T15:13:10.859152Z", "modified": "2026-10-09T15:13:10.859152Z", "relationship_type": "indicates", "source_ref": "indicator--9fe481cf-59ef-4c54-8917-12a26c322633", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e00a9ce-deb7-4161-9bff-029da0adaac6", "created": "2026-10-09T15:13:10.859283Z", "modified": "2026-10-09T15:13:10.859283Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53e6e0d302a98f49c324a8f49a2ab0950b1a496bb6cff2a5bca385bae1c370ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.859283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abe2f196-7ee4-4d2c-b56f-a2da563d969a", "created": "2026-10-09T15:13:10.859868Z", "modified": "2026-10-09T15:13:10.859868Z", "relationship_type": "indicates", "source_ref": "indicator--7e00a9ce-deb7-4161-9bff-029da0adaac6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f8457f-0c55-4666-9994-3a4443e1a263", "created": "2026-10-09T15:13:10.859987Z", "modified": "2026-10-09T15:13:10.859987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6d66d2ad6f762a59ddffbdb11f580c8a4a5a679453e305152b1b9d53328bb179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.859987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee5fcf73-062c-4cd6-80a9-f779b212e630", "created": "2026-10-09T15:13:10.860628Z", "modified": "2026-10-09T15:13:10.860628Z", "relationship_type": "indicates", "source_ref": "indicator--02f8457f-0c55-4666-9994-3a4443e1a263", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e42fcf1-7139-49f0-9dbe-8226ac7bd879", "created": "2026-10-09T15:13:10.86076Z", "modified": "2026-10-09T15:13:10.86076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a640c6c7f7f8b73f0abb63072c95a67b6b84250deeaeed6b98c7b2422169657e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.86076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4843399b-e61c-4daa-b2ec-dee073a50b53", "created": "2026-10-09T15:13:10.861363Z", "modified": "2026-10-09T15:13:10.861363Z", "relationship_type": "indicates", "source_ref": "indicator--9e42fcf1-7139-49f0-9dbe-8226ac7bd879", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6581bb3d-6d70-4140-9ee1-8b4e3eb7af4b", "created": "2026-10-09T15:13:10.86149Z", "modified": "2026-10-09T15:13:10.86149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='958fe889b34ff4ff8d867eb1a8fc7aac7e80cd920cb2d03ca68c40a41f15837d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.86149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--123f1193-60a6-4a2e-8f8d-d0fc0111db9d", "created": "2026-10-09T15:13:10.862074Z", "modified": "2026-10-09T15:13:10.862074Z", "relationship_type": "indicates", "source_ref": "indicator--6581bb3d-6d70-4140-9ee1-8b4e3eb7af4b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff6db81-a470-4280-9561-e0d6a2a884d8", "created": "2026-10-09T15:13:10.862193Z", "modified": "2026-10-09T15:13:10.862193Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e25096a15acde0e653d476069529485e54c936539c316ac6d27f5666e01a29c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.862193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b483d530-cf7f-4611-9e99-fb563b1698cf", "created": "2026-10-09T15:13:10.86279Z", "modified": "2026-10-09T15:13:10.86279Z", "relationship_type": "indicates", "source_ref": "indicator--0ff6db81-a470-4280-9561-e0d6a2a884d8", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437c7814-eab8-4f75-a937-c7105b2502df", "created": "2026-10-09T15:13:10.86291Z", "modified": "2026-10-09T15:13:10.86291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18ede40421c034aaa6a9bd065358a4583a2b7ac0dba384222b4390a9af366042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.86291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de4759ee-550f-4f6f-9cb5-7a42815cfbf0", "created": "2026-10-09T15:13:10.86351Z", "modified": "2026-10-09T15:13:10.86351Z", "relationship_type": "indicates", "source_ref": "indicator--437c7814-eab8-4f75-a937-c7105b2502df", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6ae36a-efea-4c09-9c78-e2463bba998d", "created": "2026-10-09T15:13:10.863636Z", "modified": "2026-10-09T15:13:10.863636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='86a321cf03e78e6f00da9407c9f3550c24dab0a441e8b17cf672e81edff8bb88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.863636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60d68927-4bbd-4395-b18d-295278d37fa7", "created": "2026-10-09T15:13:10.864342Z", "modified": "2026-10-09T15:13:10.864342Z", "relationship_type": "indicates", "source_ref": "indicator--4d6ae36a-efea-4c09-9c78-e2463bba998d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0c9f83-7c8b-4ed0-b68a-db0eb4c0fcc6", "created": "2026-10-09T15:13:10.864471Z", "modified": "2026-10-09T15:13:10.864471Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3183b3583892fc88ca0df08db257f1000034f0b8b05c8ae90d14515808a2d759']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.864471Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47d89a2d-b5dd-4ab6-93a0-0ae8e391b9a6", "created": "2026-10-09T15:13:10.865059Z", "modified": "2026-10-09T15:13:10.865059Z", "relationship_type": "indicates", "source_ref": "indicator--7c0c9f83-7c8b-4ed0-b68a-db0eb4c0fcc6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8abba8-3ed7-4e0d-a6e9-37694531356e", "created": "2026-10-09T15:13:10.86518Z", "modified": "2026-10-09T15:13:10.86518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2599a54cd2ddb160bd266f6fe07d8e9ec30026f539f0c6d28e584fca7752c5fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.86518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a3e7745-0a29-419c-87d6-1e812b04a717", "created": "2026-10-09T15:13:10.865776Z", "modified": "2026-10-09T15:13:10.865776Z", "relationship_type": "indicates", "source_ref": "indicator--bc8abba8-3ed7-4e0d-a6e9-37694531356e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f247a3a-76c6-4d09-aaa8-4076e83499e8", "created": "2026-10-09T15:13:10.865899Z", "modified": "2026-10-09T15:13:10.865899Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c92917e6f6e15e65d0c3d7a36b584abb9e8ec9da45bba7a3816e039439bae38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.865899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5fbf4f7-cbd1-44ae-8fb4-ad228e93de80", "created": "2026-10-09T15:13:10.866502Z", "modified": "2026-10-09T15:13:10.866502Z", "relationship_type": "indicates", "source_ref": "indicator--3f247a3a-76c6-4d09-aaa8-4076e83499e8", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b01dbbb-bc52-4f8f-9b45-f68773b3d6f0", "created": "2026-10-09T15:13:10.866628Z", "modified": "2026-10-09T15:13:10.866628Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4631a0be146eef461b07e69e6319ac70cccb7cebf3631187b6e2ebc22c1d938c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.866628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d9a2d3e-1d4a-4bd4-9c3e-81cdc7300daa", "created": "2026-10-09T15:13:10.86722Z", "modified": "2026-10-09T15:13:10.86722Z", "relationship_type": "indicates", "source_ref": "indicator--3b01dbbb-bc52-4f8f-9b45-f68773b3d6f0", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0822278f-34b5-4bbf-821f-52d05d8bafb9", "created": "2026-10-09T15:13:10.867354Z", "modified": "2026-10-09T15:13:10.867354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3439c51463259c43d2898efdbad2fe7b01e1931bbad572441e1080fe643d00b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.867354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76ae517d-fd1b-4b00-8487-6b37f9264dc0", "created": "2026-10-09T15:13:10.867948Z", "modified": "2026-10-09T15:13:10.867948Z", "relationship_type": "indicates", "source_ref": "indicator--0822278f-34b5-4bbf-821f-52d05d8bafb9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06464da9-7423-44d7-8da8-71d8a0daf442", "created": "2026-10-09T15:13:10.868075Z", "modified": "2026-10-09T15:13:10.868075Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06f0398d3336b156fe9fea954f5d46342dff31b9c6d5799cd8fce548f06f06f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.868075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0522d5c-fddc-411a-bf54-752b51fef8f5", "created": "2026-10-09T15:13:10.868668Z", "modified": "2026-10-09T15:13:10.868668Z", "relationship_type": "indicates", "source_ref": "indicator--06464da9-7423-44d7-8da8-71d8a0daf442", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa3db09-3472-44e7-a201-33655da7903b", "created": "2026-10-09T15:13:10.868788Z", "modified": "2026-10-09T15:13:10.868788Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='945bc3dc8faffba440e79d2778d3e994ee2362dac5c6cd852d6e88c02380c694']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.868788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f26c4a0-0c98-4bfd-a66c-2fc0b90a636a", "created": "2026-10-09T15:13:10.869388Z", "modified": "2026-10-09T15:13:10.869388Z", "relationship_type": "indicates", "source_ref": "indicator--5aa3db09-3472-44e7-a201-33655da7903b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe08a64-22ef-4a8e-a4cb-6a1bccd41625", "created": "2026-10-09T15:13:10.869507Z", "modified": "2026-10-09T15:13:10.869507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87de51d23823614324bf81bb3f161c9df9ad4125248c750f670eb085682a2fe1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.869507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3e7c589-b236-4d85-b891-49c51d68b2db", "created": "2026-10-09T15:13:10.870204Z", "modified": "2026-10-09T15:13:10.870204Z", "relationship_type": "indicates", "source_ref": "indicator--5fe08a64-22ef-4a8e-a4cb-6a1bccd41625", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7d4412-ac62-4b27-ae99-1af715058086", "created": "2026-10-09T15:13:10.870343Z", "modified": "2026-10-09T15:13:10.870343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12c17b6e4486259f25d5adab4ff6b825b2993a7de7315d2dce5dcfee00e718ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.870343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0cc7ebd-755e-44a5-969a-243fca7e7dd6", "created": "2026-10-09T15:13:10.870935Z", "modified": "2026-10-09T15:13:10.870935Z", "relationship_type": "indicates", "source_ref": "indicator--ab7d4412-ac62-4b27-ae99-1af715058086", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c237b9-db3f-48fa-b10f-ed6b4bef514b", "created": "2026-10-09T15:13:10.871057Z", "modified": "2026-10-09T15:13:10.871057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e1e42209e42031aeeee27f45f0173efc7da0b0d7784cb09f078ba275a73da70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.871057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ad0b01e-e502-4812-a041-6da249b996c8", "created": "2026-10-09T15:13:10.871652Z", "modified": "2026-10-09T15:13:10.871652Z", "relationship_type": "indicates", "source_ref": "indicator--22c237b9-db3f-48fa-b10f-ed6b4bef514b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa94c48c-a6b9-4486-bb13-8dcea7c2df28", "created": "2026-10-09T15:13:10.871775Z", "modified": "2026-10-09T15:13:10.871775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b65ae109aded97d82dfe6c7f7af2c128efc8ce12b240ae429a135eaabb2c13dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.871775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eab4600e-9218-455d-bea8-e8c899b104f6", "created": "2026-10-09T15:13:10.872381Z", "modified": "2026-10-09T15:13:10.872381Z", "relationship_type": "indicates", "source_ref": "indicator--aa94c48c-a6b9-4486-bb13-8dcea7c2df28", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9159bca-7c8a-44f6-bec9-ef984a1f9a20", "created": "2026-10-09T15:13:10.872505Z", "modified": "2026-10-09T15:13:10.872505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b2ecb53eed14e4129c08bfbe477b9478221f5bda481a6a39f7b2d8daa888458']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.872505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f5c52a0-aa14-439a-9fb3-ba3efc280628", "created": "2026-10-09T15:13:10.873085Z", "modified": "2026-10-09T15:13:10.873085Z", "relationship_type": "indicates", "source_ref": "indicator--d9159bca-7c8a-44f6-bec9-ef984a1f9a20", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdf7cfe-d2db-4396-933e-5dfdacbf4f64", "created": "2026-10-09T15:13:10.873205Z", "modified": "2026-10-09T15:13:10.873205Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='703fbfca4675a382ca95bf218408f3b80356cf02bd22b13535e317b54e5f8a64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.873205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24f82e8f-eff8-4f1a-900c-4cb4c4dad522", "created": "2026-10-09T15:13:10.873799Z", "modified": "2026-10-09T15:13:10.873799Z", "relationship_type": "indicates", "source_ref": "indicator--fbdf7cfe-d2db-4396-933e-5dfdacbf4f64", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408c4fc2-d769-4d18-835f-311a1249a7a5", "created": "2026-10-09T15:13:10.873918Z", "modified": "2026-10-09T15:13:10.873918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5934f112c69e2ac72522b2e45f907533ec747a9f4bdd9d9d68431a6f520eeb0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.873918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1b282f2-74f9-4a63-9e60-a93ce5d3fa38", "created": "2026-10-09T15:13:10.874519Z", "modified": "2026-10-09T15:13:10.874519Z", "relationship_type": "indicates", "source_ref": "indicator--408c4fc2-d769-4d18-835f-311a1249a7a5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765b3057-38a9-487e-aacc-abb2862405bb", "created": "2026-10-09T15:13:10.874641Z", "modified": "2026-10-09T15:13:10.874641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5767f69b110a2c2900f6a307002b661d8868934e082dd0114a141da315f142f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.874641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96b7fe34-948a-4548-a5b8-5291bf653da7", "created": "2026-10-09T15:13:10.875223Z", "modified": "2026-10-09T15:13:10.875223Z", "relationship_type": "indicates", "source_ref": "indicator--765b3057-38a9-487e-aacc-abb2862405bb", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f11b5a-c698-49f9-a8c0-1e293672e2c4", "created": "2026-10-09T15:13:10.875354Z", "modified": "2026-10-09T15:13:10.875354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='535b0e944d4495f9494e5c914594f3b5b6b71a9f9d5fded0f0b36ed8b2c7c8d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.875354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--136ec47c-57d8-4deb-94c1-7c89dbfcc2fd", "created": "2026-10-09T15:13:10.875949Z", "modified": "2026-10-09T15:13:10.875949Z", "relationship_type": "indicates", "source_ref": "indicator--24f11b5a-c698-49f9-a8c0-1e293672e2c4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67de1379-3d48-4b77-904a-0891b64f3639", "created": "2026-10-09T15:13:10.876071Z", "modified": "2026-10-09T15:13:10.876071Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37360f260a1bc248256889b1c679367f74167451f18caccda3573b7ea304b50a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.876071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72a8ecd6-a7c8-488c-8fd1-0beb13154d2e", "created": "2026-10-09T15:13:10.876788Z", "modified": "2026-10-09T15:13:10.876788Z", "relationship_type": "indicates", "source_ref": "indicator--67de1379-3d48-4b77-904a-0891b64f3639", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889a6fb0-8905-42f8-bb32-40b21b4f35e4", "created": "2026-10-09T15:13:10.876918Z", "modified": "2026-10-09T15:13:10.876918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4acd6f5bc13eb8b987e11cdbc60e448dbec2bba7448360776bbd3375389b3349']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.876918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4a7f371-671b-4dbe-8989-6e72bc961a2a", "created": "2026-10-09T15:13:10.877515Z", "modified": "2026-10-09T15:13:10.877515Z", "relationship_type": "indicates", "source_ref": "indicator--889a6fb0-8905-42f8-bb32-40b21b4f35e4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ef8963-7556-4d54-8046-8caca275610d", "created": "2026-10-09T15:13:10.877639Z", "modified": "2026-10-09T15:13:10.877639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1739099d7bb4027a10102840e38cedef13227d57d9db553656f430cbd279fdef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.877639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a990429-1dcc-492d-a88d-1ceec44c40fe", "created": "2026-10-09T15:13:10.878226Z", "modified": "2026-10-09T15:13:10.878226Z", "relationship_type": "indicates", "source_ref": "indicator--b7ef8963-7556-4d54-8046-8caca275610d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2016d4cf-4fdb-4c75-8a4c-84219dadf9b7", "created": "2026-10-09T15:13:10.878358Z", "modified": "2026-10-09T15:13:10.878358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e16b4af407118a5f0256cbd9a5d271f9aa4420bca01b7d9eccbe4ae6f3685198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.878358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dba71861-0788-4a3c-8cfd-44fbaccf36d7", "created": "2026-10-09T15:13:10.878945Z", "modified": "2026-10-09T15:13:10.878945Z", "relationship_type": "indicates", "source_ref": "indicator--2016d4cf-4fdb-4c75-8a4c-84219dadf9b7", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cc64d0-3f05-4a05-acf0-bcb0296efa27", "created": "2026-10-09T15:13:10.879066Z", "modified": "2026-10-09T15:13:10.879066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acd51f141d10b99bc46b00e010162f95f2065f39174c1df1da1041b7e27d425c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.879066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7f0e437-76cf-4e4a-9d2f-df079d613d23", "created": "2026-10-09T15:13:10.879677Z", "modified": "2026-10-09T15:13:10.879677Z", "relationship_type": "indicates", "source_ref": "indicator--e3cc64d0-3f05-4a05-acf0-bcb0296efa27", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d720f08-ca2d-4b1e-8a61-3f590e0512d8", "created": "2026-10-09T15:13:10.879809Z", "modified": "2026-10-09T15:13:10.879809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='946bb191f66732fe679ef8288479be63976148e3d980ca2987ddc6661f0e5c47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.879809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ab1e4ad-06f5-43d4-97e8-764759f8447d", "created": "2026-10-09T15:13:10.880406Z", "modified": "2026-10-09T15:13:10.880406Z", "relationship_type": "indicates", "source_ref": "indicator--5d720f08-ca2d-4b1e-8a61-3f590e0512d8", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d39d09-b246-407a-aeb4-372d3dae02b5", "created": "2026-10-09T15:13:10.880529Z", "modified": "2026-10-09T15:13:10.880529Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9052d13a25d78f8f0236c6af6034a8406973ed0349d41a51b2478afcf7260f60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.880529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bda2cd4-08e9-4665-b1bc-284763847b3e", "created": "2026-10-09T15:13:10.881116Z", "modified": "2026-10-09T15:13:10.881116Z", "relationship_type": "indicates", "source_ref": "indicator--89d39d09-b246-407a-aeb4-372d3dae02b5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3764da-929a-4a02-9c07-86ade7039a77", "created": "2026-10-09T15:13:10.881235Z", "modified": "2026-10-09T15:13:10.881235Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be2443d5b3f28feeafd6ecaee6947e6e7079f71d32b3b7debe6a91bf8c726fbf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.881235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--744737cb-1238-4036-87a7-dacf277e0b82", "created": "2026-10-09T15:13:10.881837Z", "modified": "2026-10-09T15:13:10.881837Z", "relationship_type": "indicates", "source_ref": "indicator--6f3764da-929a-4a02-9c07-86ade7039a77", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce972857-65f1-4312-9e4d-39eae9fd771c", "created": "2026-10-09T15:13:10.881957Z", "modified": "2026-10-09T15:13:10.881957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79397d86c27b9a48f7e63f52561907b06b8f63e099cc552b885be4efd6a6caa5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.881957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8687cd72-0db7-44bc-9777-32b590fe19b4", "created": "2026-10-09T15:13:10.882566Z", "modified": "2026-10-09T15:13:10.882566Z", "relationship_type": "indicates", "source_ref": "indicator--ce972857-65f1-4312-9e4d-39eae9fd771c", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba60677-5c7e-4cec-9152-308411e811c7", "created": "2026-10-09T15:13:10.88269Z", "modified": "2026-10-09T15:13:10.88269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d843f6cb10c8d5014a108a3e066e958b99b27acd1abdcc0a349d7fb8dc0739e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.88269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceb784e4-3571-450d-8ec1-14dc3118a2d8", "created": "2026-10-09T15:13:10.88348Z", "modified": "2026-10-09T15:13:10.88348Z", "relationship_type": "indicates", "source_ref": "indicator--bba60677-5c7e-4cec-9152-308411e811c7", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4821305c-4e21-4258-8ac8-0ac98b62d47b", "created": "2026-10-09T15:13:10.883626Z", "modified": "2026-10-09T15:13:10.883626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cefce4824352ae240a0b2d381a6c8a5ef0bd20a51a23c9c8420bf70a17c54de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.883626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ed9f91b-79be-422d-a154-e5fbdfa0cbfa", "created": "2026-10-09T15:13:10.884232Z", "modified": "2026-10-09T15:13:10.884232Z", "relationship_type": "indicates", "source_ref": "indicator--4821305c-4e21-4258-8ac8-0ac98b62d47b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229dbdd6-9beb-4775-9915-582173c70cd9", "created": "2026-10-09T15:13:10.884372Z", "modified": "2026-10-09T15:13:10.884372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff1bef0286f4c8ec2dba5c11c3e7292ba94de7f42226b137da291113c7887905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.884372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--158b2fb4-2c90-407f-a31b-8dfd457023d5", "created": "2026-10-09T15:13:10.884965Z", "modified": "2026-10-09T15:13:10.884965Z", "relationship_type": "indicates", "source_ref": "indicator--229dbdd6-9beb-4775-9915-582173c70cd9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cda202e-0f98-4482-8aea-e77d9d1584c5", "created": "2026-10-09T15:13:10.885089Z", "modified": "2026-10-09T15:13:10.885089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98d8d433d6714bd6baedf5717fc6775d7aebd4cfb72e07dde1a4e136c483e24b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.885089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a8121ca-288d-48ab-afd7-8f55f396b54a", "created": "2026-10-09T15:13:10.885705Z", "modified": "2026-10-09T15:13:10.885705Z", "relationship_type": "indicates", "source_ref": "indicator--6cda202e-0f98-4482-8aea-e77d9d1584c5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f30964-e9f2-4ee2-b0fb-982dbb522a23", "created": "2026-10-09T15:13:10.885831Z", "modified": "2026-10-09T15:13:10.885831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac1f4e10496781bb5e2ee76e5f4872f0dacf0b1de7ff28fce647c296db58e68a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.885831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e421f542-8c1e-4fb5-a581-d047ce8882e1", "created": "2026-10-09T15:13:10.88643Z", "modified": "2026-10-09T15:13:10.88643Z", "relationship_type": "indicates", "source_ref": "indicator--73f30964-e9f2-4ee2-b0fb-982dbb522a23", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b897e4c0-29c0-4208-8ee8-7b7c001db586", "created": "2026-10-09T15:13:10.886552Z", "modified": "2026-10-09T15:13:10.886552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74934adf14c2d3230b074e5f88da27fc0b3e149c56ee2edf721fa9eb32bf10ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.886552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ae3d88f-eef4-49db-9f8e-29e853992db3", "created": "2026-10-09T15:13:10.887146Z", "modified": "2026-10-09T15:13:10.887146Z", "relationship_type": "indicates", "source_ref": "indicator--b897e4c0-29c0-4208-8ee8-7b7c001db586", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59e3864-4381-4648-8061-99de5bd807ed", "created": "2026-10-09T15:13:10.887277Z", "modified": "2026-10-09T15:13:10.887277Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ae0373c2ae106c51526a075cec95f3a409d06254354c009ddd954ae570b6c4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.887277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d455deb-84fa-4d17-8f36-ae579a966fd9", "created": "2026-10-09T15:13:10.887869Z", "modified": "2026-10-09T15:13:10.887869Z", "relationship_type": "indicates", "source_ref": "indicator--e59e3864-4381-4648-8061-99de5bd807ed", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37e1681-ce3c-41cf-8976-c8dc187815f2", "created": "2026-10-09T15:13:10.887987Z", "modified": "2026-10-09T15:13:10.887987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a53df9fc7e33bec85c7c592da63245864335f4d133c820513570c4463d9bcb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.887987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1db927c-3018-4c09-b30c-934f2d3496a6", "created": "2026-10-09T15:13:10.888582Z", "modified": "2026-10-09T15:13:10.888582Z", "relationship_type": "indicates", "source_ref": "indicator--b37e1681-ce3c-41cf-8976-c8dc187815f2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc936467-2f1c-42ec-ba7a-25c2e967fca8", "created": "2026-10-09T15:13:10.888704Z", "modified": "2026-10-09T15:13:10.888704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2eecd6550df9851dd0564b1fa3a4d76d04edf17f20344724d847d8c691405598']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.888704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--687bd690-808a-4152-91f2-c8c95bd886c2", "created": "2026-10-09T15:13:10.889407Z", "modified": "2026-10-09T15:13:10.889407Z", "relationship_type": "indicates", "source_ref": "indicator--fc936467-2f1c-42ec-ba7a-25c2e967fca8", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1892b3a6-0e61-4670-978b-d363c4dd72f9", "created": "2026-10-09T15:13:10.88954Z", "modified": "2026-10-09T15:13:10.88954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e609321129db484b58dd632df2493af11791517ff7f49aee8b061f50542fe31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.88954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0e14df8-b173-449a-a45a-ef197cfabbc2", "created": "2026-10-09T15:13:10.890136Z", "modified": "2026-10-09T15:13:10.890136Z", "relationship_type": "indicates", "source_ref": "indicator--1892b3a6-0e61-4670-978b-d363c4dd72f9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1900dfc-c123-47a1-8b35-2c3dfc8d4274", "created": "2026-10-09T15:13:10.890262Z", "modified": "2026-10-09T15:13:10.890262Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1791a3325085fdcc7714ee4ecb3cbe269558e0bb7e63ecfbd481310672471036']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.890262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8249acab-52b9-4d5f-b969-da0358f140a2", "created": "2026-10-09T15:13:10.890862Z", "modified": "2026-10-09T15:13:10.890862Z", "relationship_type": "indicates", "source_ref": "indicator--d1900dfc-c123-47a1-8b35-2c3dfc8d4274", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c442461-d60b-46ab-ba46-95d06a0e707f", "created": "2026-10-09T15:13:10.890988Z", "modified": "2026-10-09T15:13:10.890988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad36bf9006aaa05e9f46591d4ad0cf78971726d1c93a02d59512090a9134b20c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.890988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--030be43f-3ea5-462b-a687-a501ee9ed4a4", "created": "2026-10-09T15:13:10.891573Z", "modified": "2026-10-09T15:13:10.891573Z", "relationship_type": "indicates", "source_ref": "indicator--1c442461-d60b-46ab-ba46-95d06a0e707f", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716c3f7c-5119-46cb-97f9-d94e55669d67", "created": "2026-10-09T15:13:10.891694Z", "modified": "2026-10-09T15:13:10.891694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba8d5fa4a1b42023eb2e88836d3b5deaa7db0625222b057e2f96f775e2140ea1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.891694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e71e9891-754b-4139-ab1b-3fdb70e55022", "created": "2026-10-09T15:13:10.89228Z", "modified": "2026-10-09T15:13:10.89228Z", "relationship_type": "indicates", "source_ref": "indicator--716c3f7c-5119-46cb-97f9-d94e55669d67", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37e768f-2c5f-4d3a-961a-a482b5d29e03", "created": "2026-10-09T15:13:10.8924Z", "modified": "2026-10-09T15:13:10.8924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f61b082a1ba7ca18c915ec0ba7bc2fb5a925264147314ed694d0fbdd62568153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.8924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdb1d837-4119-4e6b-aee2-05211ea965e9", "created": "2026-10-09T15:13:10.892982Z", "modified": "2026-10-09T15:13:10.892982Z", "relationship_type": "indicates", "source_ref": "indicator--a37e768f-2c5f-4d3a-961a-a482b5d29e03", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e66009-009d-4831-a4e1-b856747e3a65", "created": "2026-10-09T15:13:10.8931Z", "modified": "2026-10-09T15:13:10.8931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ff99c6053fa88560857581143a3a25dee2d1e9096aa60618bfc00aa3f747e3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.8931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--829d70ac-f40a-458d-b822-8f7c4a406e09", "created": "2026-10-09T15:13:10.893691Z", "modified": "2026-10-09T15:13:10.893691Z", "relationship_type": "indicates", "source_ref": "indicator--76e66009-009d-4831-a4e1-b856747e3a65", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56f94af-15bd-4a9d-9771-5830f891005a", "created": "2026-10-09T15:13:10.893817Z", "modified": "2026-10-09T15:13:10.893817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7621c99fef651d4106366f9c40dfc088105c92c6deeba15ca0dabdb4f8a55d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.893817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c55d2ff-0784-4393-836f-335765e94761", "created": "2026-10-09T15:13:10.894426Z", "modified": "2026-10-09T15:13:10.894426Z", "relationship_type": "indicates", "source_ref": "indicator--b56f94af-15bd-4a9d-9771-5830f891005a", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c9f054-ec87-422e-8773-b37c1b40cf8e", "created": "2026-10-09T15:13:10.894578Z", "modified": "2026-10-09T15:13:10.894578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4200f119e4adaa23436dd6ea25571aa51309457a21fad3f9816ef2e537a8245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.894578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1151afb9-676a-488a-9a2d-098854820ad7", "created": "2026-10-09T15:13:10.895167Z", "modified": "2026-10-09T15:13:10.895167Z", "relationship_type": "indicates", "source_ref": "indicator--f0c9f054-ec87-422e-8773-b37c1b40cf8e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164455d5-180f-4d5c-84cb-b03e00c228c3", "created": "2026-10-09T15:13:10.895298Z", "modified": "2026-10-09T15:13:10.895298Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3238aaf009f9450cf0da78861e56bf824b4f329d469a13f26b808977f8f2c00f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.895298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5a05b4d-02b9-4429-a618-ec3042c26711", "created": "2026-10-09T15:13:10.895993Z", "modified": "2026-10-09T15:13:10.895993Z", "relationship_type": "indicates", "source_ref": "indicator--164455d5-180f-4d5c-84cb-b03e00c228c3", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab9da0e-d201-4650-b76f-04851224f589", "created": "2026-10-09T15:13:10.896116Z", "modified": "2026-10-09T15:13:10.896116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c617b714eacf8626c4bfb6688a29cdcce5e68d71fd66ad41f12f23a481368ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.896116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f059713-c44f-4dd2-8d20-9ef921ce1d28", "created": "2026-10-09T15:13:10.896717Z", "modified": "2026-10-09T15:13:10.896717Z", "relationship_type": "indicates", "source_ref": "indicator--7ab9da0e-d201-4650-b76f-04851224f589", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241c9fe4-0f62-4c4a-8c21-f10bb2954ad5", "created": "2026-10-09T15:13:10.896847Z", "modified": "2026-10-09T15:13:10.896847Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c18d0a056192f42cddf1439e729a4ae352302f765ebd711804925d7bfe742c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.896847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d407ddc-6f85-4528-ae83-4f3928e3821c", "created": "2026-10-09T15:13:10.897447Z", "modified": "2026-10-09T15:13:10.897447Z", "relationship_type": "indicates", "source_ref": "indicator--241c9fe4-0f62-4c4a-8c21-f10bb2954ad5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a47304-b19a-4104-bc68-968648eb2aef", "created": "2026-10-09T15:13:10.897572Z", "modified": "2026-10-09T15:13:10.897572Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84c6dcc255c7315b6c173d11d25dddad465329336d2be61204b6ded44ae58418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.897572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c60e570-d53b-4c27-b221-4838cfff194e", "created": "2026-10-09T15:13:10.898159Z", "modified": "2026-10-09T15:13:10.898159Z", "relationship_type": "indicates", "source_ref": "indicator--68a47304-b19a-4104-bc68-968648eb2aef", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a709bd06-de65-43d2-992d-86c143b95f64", "created": "2026-10-09T15:13:10.898292Z", "modified": "2026-10-09T15:13:10.898292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fbfd0d6b01c4fc8e6760a37b47fc960236448171b11cac1f17ee7229b51fb44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.898292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dadc15a-034f-4a74-a7d9-dca75c9fd300", "created": "2026-10-09T15:13:10.898894Z", "modified": "2026-10-09T15:13:10.898894Z", "relationship_type": "indicates", "source_ref": "indicator--a709bd06-de65-43d2-992d-86c143b95f64", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751b4f30-e0ce-4e5c-811e-f835295229d2", "created": "2026-10-09T15:13:10.899023Z", "modified": "2026-10-09T15:13:10.899023Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5d7104647d90441d6cf147ab943e5d9cff8361a4eaae5f5031f1c3cf8648abd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.899023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36cb952f-0bfd-428c-a490-3d1b76c237f2", "created": "2026-10-09T15:13:10.899612Z", "modified": "2026-10-09T15:13:10.899612Z", "relationship_type": "indicates", "source_ref": "indicator--751b4f30-e0ce-4e5c-811e-f835295229d2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c75e47-2860-4740-8c46-316e3bc5a620", "created": "2026-10-09T15:13:10.899736Z", "modified": "2026-10-09T15:13:10.899736Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a25522eb8d356bcb2a98dd2f013002e76795f41ffc3dff7cc2ebb542b5919cf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.899736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8af57a5f-a4c7-4f9a-b221-b7b873c04225", "created": "2026-10-09T15:13:10.900326Z", "modified": "2026-10-09T15:13:10.900326Z", "relationship_type": "indicates", "source_ref": "indicator--04c75e47-2860-4740-8c46-316e3bc5a620", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc69a3d1-29ee-439f-9681-9132aee341bf", "created": "2026-10-09T15:13:10.900445Z", "modified": "2026-10-09T15:13:10.900445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77acc2ea27e3c5f6628355a28cf79f946769d1891cd6e87f26817dd466e7616e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.900445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a31f60db-7329-49f5-8ebf-d07c0754c583", "created": "2026-10-09T15:13:10.901033Z", "modified": "2026-10-09T15:13:10.901033Z", "relationship_type": "indicates", "source_ref": "indicator--fc69a3d1-29ee-439f-9681-9132aee341bf", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e874ade4-de2a-46ce-9837-d7605088e263", "created": "2026-10-09T15:13:10.901151Z", "modified": "2026-10-09T15:13:10.901151Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7b9a4f380f85dbbab3d7548db29cd841811752708ff447e0d2e1674cc7c81af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.901151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6bb13cc-1d31-4ff1-859a-0d803b194aba", "created": "2026-10-09T15:13:10.901753Z", "modified": "2026-10-09T15:13:10.901753Z", "relationship_type": "indicates", "source_ref": "indicator--e874ade4-de2a-46ce-9837-d7605088e263", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6502a66b-b6f2-4e37-9f7a-7199e0abc6d7", "created": "2026-10-09T15:13:10.901873Z", "modified": "2026-10-09T15:13:10.901873Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6536299186ffc8652c757a02baad87d96d8a2642282e962528e63a407781d89b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.901873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfb57a1e-0777-4886-970a-c617cb6185e6", "created": "2026-10-09T15:13:10.902563Z", "modified": "2026-10-09T15:13:10.902563Z", "relationship_type": "indicates", "source_ref": "indicator--6502a66b-b6f2-4e37-9f7a-7199e0abc6d7", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b115f6-60eb-4ab6-9a63-8c47cd8666b9", "created": "2026-10-09T15:13:10.902685Z", "modified": "2026-10-09T15:13:10.902685Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e4c545a76aa8ac403f288480e1fec578f699e24bb88e26e6c43614bf32dd6c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.902685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b5906b2-abb6-4e7a-ad63-01d24d7b3997", "created": "2026-10-09T15:13:10.903282Z", "modified": "2026-10-09T15:13:10.903282Z", "relationship_type": "indicates", "source_ref": "indicator--82b115f6-60eb-4ab6-9a63-8c47cd8666b9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cabefa-a863-4e9e-aee3-8be5372e1cba", "created": "2026-10-09T15:13:10.903408Z", "modified": "2026-10-09T15:13:10.903408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee72fe4b278fcf70f54decb15a318bedb743bed5576d6f784f574827c1b08939']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.903408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--296db9fb-f172-4aa8-ae9c-5f3e9d17b99a", "created": "2026-10-09T15:13:10.903992Z", "modified": "2026-10-09T15:13:10.903992Z", "relationship_type": "indicates", "source_ref": "indicator--38cabefa-a863-4e9e-aee3-8be5372e1cba", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1e02a0-d7d2-4b5d-86cd-69061ec3ee2e", "created": "2026-10-09T15:13:10.904114Z", "modified": "2026-10-09T15:13:10.904114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f078e3e9b7a96be811ab5c12d766ebefdc76ab9b5c02a38acbc91c0455258c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.904114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a73420d-09f6-441e-8fa8-a9dbe62a7ab8", "created": "2026-10-09T15:13:10.904702Z", "modified": "2026-10-09T15:13:10.904702Z", "relationship_type": "indicates", "source_ref": "indicator--ea1e02a0-d7d2-4b5d-86cd-69061ec3ee2e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4145bbf-670d-44e1-a51f-0bb9759c51ae", "created": "2026-10-09T15:13:10.904823Z", "modified": "2026-10-09T15:13:10.904823Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='564496e1ecd19ca1ff23818e4255117189402407c7151c88f297e8de0f68d765']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.904823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e0538c1-efc4-4b55-9b9f-4cf077620e3d", "created": "2026-10-09T15:13:10.905413Z", "modified": "2026-10-09T15:13:10.905413Z", "relationship_type": "indicates", "source_ref": "indicator--d4145bbf-670d-44e1-a51f-0bb9759c51ae", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18923395-fe51-41aa-9634-e3b41fc3df74", "created": "2026-10-09T15:13:10.905537Z", "modified": "2026-10-09T15:13:10.905537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f28a68d14631d70b3d463a196e3d007e96853b57f62cfeb646884c7bb46bcb7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.905537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--370f26bf-c523-49c5-b02c-f32cd4cfdfb1", "created": "2026-10-09T15:13:10.906122Z", "modified": "2026-10-09T15:13:10.906122Z", "relationship_type": "indicates", "source_ref": "indicator--18923395-fe51-41aa-9634-e3b41fc3df74", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7c0ce7-d1e0-46d8-9a50-5286fbf1a348", "created": "2026-10-09T15:13:10.906243Z", "modified": "2026-10-09T15:13:10.906243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2139e569cac6a34d417bf07d1fd118081675d85e1f4eba751a5ed539729988be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.906243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19a2ae94-ffd5-4247-b4fa-8c882f0c6d67", "created": "2026-10-09T15:13:10.906839Z", "modified": "2026-10-09T15:13:10.906839Z", "relationship_type": "indicates", "source_ref": "indicator--1c7c0ce7-d1e0-46d8-9a50-5286fbf1a348", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fb94c6-0616-448d-a217-6f9b7d00ecc7", "created": "2026-10-09T15:13:10.906959Z", "modified": "2026-10-09T15:13:10.906959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e61328b18e6e0284fdcc0ae7ba590d1dc7cb69606eedbbd6ee1bfa82e55d8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.906959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--715cff75-2ae0-47b2-b181-4a013febd70a", "created": "2026-10-09T15:13:10.907552Z", "modified": "2026-10-09T15:13:10.907552Z", "relationship_type": "indicates", "source_ref": "indicator--34fb94c6-0616-448d-a217-6f9b7d00ecc7", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5982de-5e4a-49cf-a85b-7a4ae94731ad", "created": "2026-10-09T15:13:10.907679Z", "modified": "2026-10-09T15:13:10.907679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81da4710cac6d81fa3a34af3a095a265107e4d49d5596a830c769679ad8a8457']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.907679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a23cbbe-8e10-47d8-9ded-5e1fc2b0abe4", "created": "2026-10-09T15:13:10.908386Z", "modified": "2026-10-09T15:13:10.908386Z", "relationship_type": "indicates", "source_ref": "indicator--fb5982de-5e4a-49cf-a85b-7a4ae94731ad", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4986fc2-4529-43d0-9f7b-44cd99dc1d09", "created": "2026-10-09T15:13:10.908518Z", "modified": "2026-10-09T15:13:10.908518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='844880a3c36cad107868a516861df2be60dcd9747c0a364e6d2512ab0e33afa2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.908518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41d99f66-665a-4be2-acd7-c96cd3a75f8a", "created": "2026-10-09T15:13:10.909106Z", "modified": "2026-10-09T15:13:10.909106Z", "relationship_type": "indicates", "source_ref": "indicator--c4986fc2-4529-43d0-9f7b-44cd99dc1d09", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c5dca0-0de6-4cbf-85c1-d752820a1135", "created": "2026-10-09T15:13:10.909226Z", "modified": "2026-10-09T15:13:10.909226Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cfd949b8cd102676ce9f5e6fccf49fa0902e833df962568f4cf1784269cf00c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.909226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93131ff9-3590-4196-afc8-fa1abc53fe72", "created": "2026-10-09T15:13:10.90982Z", "modified": "2026-10-09T15:13:10.90982Z", "relationship_type": "indicates", "source_ref": "indicator--b1c5dca0-0de6-4cbf-85c1-d752820a1135", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d826fd57-709b-497a-be7a-9fc53d1c92ec", "created": "2026-10-09T15:13:10.909943Z", "modified": "2026-10-09T15:13:10.909943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c86e08eb26492a6934174981e4abdfb32f823446f50ec418e4613dbf95fd6a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.909943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a94f9969-1bc4-4701-8ce2-a2f5436e4579", "created": "2026-10-09T15:13:10.910535Z", "modified": "2026-10-09T15:13:10.910535Z", "relationship_type": "indicates", "source_ref": "indicator--d826fd57-709b-497a-be7a-9fc53d1c92ec", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de42fa1-7056-4454-9bed-2c96e53f2c67", "created": "2026-10-09T15:13:10.910663Z", "modified": "2026-10-09T15:13:10.910663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='629d3d4c64c644583a1a35cb162843625c7dcbf4911bcb3cbe319e4685304a8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.910663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e25ab0e9-330e-4abe-925f-5df52acc1b4a", "created": "2026-10-09T15:13:10.911241Z", "modified": "2026-10-09T15:13:10.911241Z", "relationship_type": "indicates", "source_ref": "indicator--3de42fa1-7056-4454-9bed-2c96e53f2c67", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8199fba-72c0-4e8e-ad9e-c0f40afc0e54", "created": "2026-10-09T15:13:10.911373Z", "modified": "2026-10-09T15:13:10.911373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d81f411939f76641bcfc03d01cacdf98195db9386589c45bd80ad0e29dbc7a86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.911373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fc567f0-e802-4291-abc5-965afccfbff8", "created": "2026-10-09T15:13:10.91195Z", "modified": "2026-10-09T15:13:10.91195Z", "relationship_type": "indicates", "source_ref": "indicator--e8199fba-72c0-4e8e-ad9e-c0f40afc0e54", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e713b32-50e3-41cd-98b6-ee795d70a6f4", "created": "2026-10-09T15:13:10.91207Z", "modified": "2026-10-09T15:13:10.91207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91f0518802ae099336383e00360188544b5dda2461ad5c957b1521961f73d7bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.91207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e1a108a-d3f8-400b-ac4a-5100d149cc84", "created": "2026-10-09T15:13:10.912671Z", "modified": "2026-10-09T15:13:10.912671Z", "relationship_type": "indicates", "source_ref": "indicator--9e713b32-50e3-41cd-98b6-ee795d70a6f4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768fdd31-98c9-42a7-8601-3564750edcbc", "created": "2026-10-09T15:13:10.912796Z", "modified": "2026-10-09T15:13:10.912796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ac161c2ade0ab256c3f5854fcf45264048c050417f488741b1c1d9ffb9ea98f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.912796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebdf3c0e-5f84-4094-aab2-93d8c77c6316", "created": "2026-10-09T15:13:10.913399Z", "modified": "2026-10-09T15:13:10.913399Z", "relationship_type": "indicates", "source_ref": "indicator--768fdd31-98c9-42a7-8601-3564750edcbc", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f11a09b-3b13-4d0e-9f13-09e812dd7703", "created": "2026-10-09T15:13:10.913524Z", "modified": "2026-10-09T15:13:10.913524Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f47e23ab070335c456242be99382fd0e4a210b4fa2f48abe798b032e1893abd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.913524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d10bef3a-bf0a-420b-9c01-4fb58b79dc65", "created": "2026-10-09T15:13:10.914111Z", "modified": "2026-10-09T15:13:10.914111Z", "relationship_type": "indicates", "source_ref": "indicator--3f11a09b-3b13-4d0e-9f13-09e812dd7703", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a886a08-9ec0-4d05-a849-3559f8ced216", "created": "2026-10-09T15:13:10.914231Z", "modified": "2026-10-09T15:13:10.914231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58e38a769eb9710251042b9a15b70e8f2cd476170e22fff63c97ba8cca263418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.914231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e6a4d0e-182c-4a03-9ca5-959c28758d1b", "created": "2026-10-09T15:13:10.914923Z", "modified": "2026-10-09T15:13:10.914923Z", "relationship_type": "indicates", "source_ref": "indicator--7a886a08-9ec0-4d05-a849-3559f8ced216", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42520fcd-b57a-43aa-8e1f-e378c2d790d0", "created": "2026-10-09T15:13:10.915045Z", "modified": "2026-10-09T15:13:10.915045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b34db953db61ba6e49607e0cb36dcbe36993f423cf096309cc857147ac44542']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.915045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--360648b9-8978-4566-9058-e977f716a767", "created": "2026-10-09T15:13:10.915642Z", "modified": "2026-10-09T15:13:10.915642Z", "relationship_type": "indicates", "source_ref": "indicator--42520fcd-b57a-43aa-8e1f-e378c2d790d0", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d702ddb-f1a0-411d-bced-07168d36b78b", "created": "2026-10-09T15:13:10.915765Z", "modified": "2026-10-09T15:13:10.915765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='034f7f129ae80267e94678a5a9c5b5333075100b1464994b14ef13a93769e232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.915765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7fde843-ed51-4c13-a07a-6bf46f8c2ad5", "created": "2026-10-09T15:13:10.91637Z", "modified": "2026-10-09T15:13:10.91637Z", "relationship_type": "indicates", "source_ref": "indicator--9d702ddb-f1a0-411d-bced-07168d36b78b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868a7f65-36c2-4fd5-8e8f-6d6171576667", "created": "2026-10-09T15:13:10.916494Z", "modified": "2026-10-09T15:13:10.916494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f50bee9ace6b951a8fe2f0a8eb77ff693ec66b53fac992ad32b45d29eb95f63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.916494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5b8fdb-3278-40ca-b260-48085525a8c1", "created": "2026-10-09T15:13:10.917079Z", "modified": "2026-10-09T15:13:10.917079Z", "relationship_type": "indicates", "source_ref": "indicator--868a7f65-36c2-4fd5-8e8f-6d6171576667", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5284fb9f-33c4-4c48-adaf-ebd3b9ef18d1", "created": "2026-10-09T15:13:10.9172Z", "modified": "2026-10-09T15:13:10.9172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6fc2a8dc9fd413e35b09f25f7125fc1c3fdd1e7aa8117701c5bba704f846553']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.9172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9636d4d-ce15-4882-b3d0-9889601fb620", "created": "2026-10-09T15:13:10.917793Z", "modified": "2026-10-09T15:13:10.917793Z", "relationship_type": "indicates", "source_ref": "indicator--5284fb9f-33c4-4c48-adaf-ebd3b9ef18d1", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b191b2-6656-4680-b272-b704d0d8f89b", "created": "2026-10-09T15:13:10.917918Z", "modified": "2026-10-09T15:13:10.917918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47bd745481f7fb660750d1ae807ba75e0438208a1ae52e3478dacb78e9da0006']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.917918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfe19fdb-589d-4113-8c54-70dbfbbfad0b", "created": "2026-10-09T15:13:10.918513Z", "modified": "2026-10-09T15:13:10.918513Z", "relationship_type": "indicates", "source_ref": "indicator--b2b191b2-6656-4680-b272-b704d0d8f89b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8121281b-2ac3-4cce-9b54-73dbdf5f192a", "created": "2026-10-09T15:13:10.918636Z", "modified": "2026-10-09T15:13:10.918636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08a61ce334fb22ad0fb6ff828e11bcbc4969950dae9532bf24d63a23b4141c6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.918636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c0243b8-392b-4c76-8af0-5600efe5b498", "created": "2026-10-09T15:13:10.919226Z", "modified": "2026-10-09T15:13:10.919226Z", "relationship_type": "indicates", "source_ref": "indicator--8121281b-2ac3-4cce-9b54-73dbdf5f192a", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3905758f-8389-4258-877c-45a44f195778", "created": "2026-10-09T15:13:10.919358Z", "modified": "2026-10-09T15:13:10.919358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a5b1e848f4412007cf7b0c306f658aea967557a1f8647d86d670373d872a66c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.919358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f04e52f-8f20-4265-b2a3-0e6e190f6b8d", "created": "2026-10-09T15:13:10.919939Z", "modified": "2026-10-09T15:13:10.919939Z", "relationship_type": "indicates", "source_ref": "indicator--3905758f-8389-4258-877c-45a44f195778", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--595705d1-924c-4aaa-93df-be02f1e02b96", "created": "2026-10-09T15:13:10.920062Z", "modified": "2026-10-09T15:13:10.920062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a003d405f17a8b2693be99bf80f1765e13b8b0e98d7bde994e1390c5b758319']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.920062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4043e5c5-a964-4c7b-818e-a7585d3c2b39", "created": "2026-10-09T15:13:10.920663Z", "modified": "2026-10-09T15:13:10.920663Z", "relationship_type": "indicates", "source_ref": "indicator--595705d1-924c-4aaa-93df-be02f1e02b96", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a609e51-c900-4fa1-98ab-ce49d4ae2708", "created": "2026-10-09T15:13:10.920784Z", "modified": "2026-10-09T15:13:10.920784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6862e54ad16d6cfe8682504a1397d5f129a35455062fb18fdd2d06abc54d65a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.920784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91748bf4-21bb-4eb0-ac2b-bd4b43c0778c", "created": "2026-10-09T15:13:10.9218Z", "modified": "2026-10-09T15:13:10.9218Z", "relationship_type": "indicates", "source_ref": "indicator--8a609e51-c900-4fa1-98ab-ce49d4ae2708", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78513055-be94-4110-adb6-bf92afccecb6", "created": "2026-10-09T15:13:10.921933Z", "modified": "2026-10-09T15:13:10.921933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26c0cb46a5dda9d2828a1727a0b92e1fc576924dec69b0495785ff0ac34c437f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.921933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c58c07a-d2d3-4712-b9d0-9ab242ac62b1", "created": "2026-10-09T15:13:10.92253Z", "modified": "2026-10-09T15:13:10.92253Z", "relationship_type": "indicates", "source_ref": "indicator--78513055-be94-4110-adb6-bf92afccecb6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1439ed35-c9e7-4b2d-8071-a26bdc6aaef4", "created": "2026-10-09T15:13:10.922654Z", "modified": "2026-10-09T15:13:10.922654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='870f9b6681b9fc5f865c4c2af7770f956d7c301160f7520f6abd0523ba0c0f3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.922654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b46998b-c9f2-45c4-a415-48ffb9a71cd4", "created": "2026-10-09T15:13:10.923241Z", "modified": "2026-10-09T15:13:10.923241Z", "relationship_type": "indicates", "source_ref": "indicator--1439ed35-c9e7-4b2d-8071-a26bdc6aaef4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4393e0-eb13-4124-9934-d8dbbc38a695", "created": "2026-10-09T15:13:10.923378Z", "modified": "2026-10-09T15:13:10.923378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='064f43dc9458038f8d96d6cf456e508dd00fb893940e98022ef19da9670adaed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.923378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d24a006-1304-41bc-b3cf-f4707b7b1f87", "created": "2026-10-09T15:13:10.923967Z", "modified": "2026-10-09T15:13:10.923967Z", "relationship_type": "indicates", "source_ref": "indicator--6f4393e0-eb13-4124-9934-d8dbbc38a695", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5446c4-42f1-4d21-acd8-c4d7775b4b58", "created": "2026-10-09T15:13:10.924095Z", "modified": "2026-10-09T15:13:10.924095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5436de45b447aa918fcf0bd9c7889e3b8ba67f35ba84674a98852809d5b25a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.924095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fef43b61-f899-4ad6-8af5-672d8b9ff101", "created": "2026-10-09T15:13:10.924729Z", "modified": "2026-10-09T15:13:10.924729Z", "relationship_type": "indicates", "source_ref": "indicator--df5446c4-42f1-4d21-acd8-c4d7775b4b58", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840a5d91-385e-4d68-897c-2da26d9ce2c7", "created": "2026-10-09T15:13:10.924858Z", "modified": "2026-10-09T15:13:10.924858Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2abb35cb341e9d3fa0eccc5046047fc8c2a720bdff96345660c7510e7f3ed82e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.924858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96e0c415-48bf-4360-83c1-fdea3d7f620a", "created": "2026-10-09T15:13:10.925458Z", "modified": "2026-10-09T15:13:10.925458Z", "relationship_type": "indicates", "source_ref": "indicator--840a5d91-385e-4d68-897c-2da26d9ce2c7", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a326151-a3c8-4096-9e6c-7d728f6758de", "created": "2026-10-09T15:13:10.925579Z", "modified": "2026-10-09T15:13:10.925579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93df66bac396653bbb529b8aae87a3cacfd0153c0dade097cf7ba8095f0a1e51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.925579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41f79472-5345-4f7d-9fe5-1ecaf1a0894a", "created": "2026-10-09T15:13:10.926159Z", "modified": "2026-10-09T15:13:10.926159Z", "relationship_type": "indicates", "source_ref": "indicator--8a326151-a3c8-4096-9e6c-7d728f6758de", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525fcac2-a137-4338-ace5-d83e23950a48", "created": "2026-10-09T15:13:10.92629Z", "modified": "2026-10-09T15:13:10.92629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b01b24f660ab4d03c3f4a5eeeab83b17215a544c0044b39110abacfc29c7c206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.92629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bd655aa-574c-4129-b64d-e69cba8b89a9", "created": "2026-10-09T15:13:10.926877Z", "modified": "2026-10-09T15:13:10.926877Z", "relationship_type": "indicates", "source_ref": "indicator--525fcac2-a137-4338-ace5-d83e23950a48", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a904bd1f-349f-429a-993b-5fc2f4576615", "created": "2026-10-09T15:13:10.926998Z", "modified": "2026-10-09T15:13:10.926998Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='845d1df7ca94493f746d5d1bbe702de5635143ad32b6a106d0e0c66e78313729']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.926998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98ad2024-70f8-4048-a77d-a2fdf66971dc", "created": "2026-10-09T15:13:10.927606Z", "modified": "2026-10-09T15:13:10.927606Z", "relationship_type": "indicates", "source_ref": "indicator--a904bd1f-349f-429a-993b-5fc2f4576615", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823d7606-608b-49ab-a66d-d20b8a4cb643", "created": "2026-10-09T15:13:10.927735Z", "modified": "2026-10-09T15:13:10.927735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b440e8ed6d0696e50a070030a64900a2881c285cff118ddd3bbe75d66203262']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.927735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--941b3f36-134f-4907-8ec2-36e12dab2076", "created": "2026-10-09T15:13:10.928444Z", "modified": "2026-10-09T15:13:10.928444Z", "relationship_type": "indicates", "source_ref": "indicator--823d7606-608b-49ab-a66d-d20b8a4cb643", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf8f79f-564d-4c0f-85b5-58de894f6da6", "created": "2026-10-09T15:13:10.928568Z", "modified": "2026-10-09T15:13:10.928568Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96c5e525d2f1e64c060c657b3b2c19bd7258b69eee12d00b7182790c9608127b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.928568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--056bbffe-2a85-4e64-ad36-0d59fa8af948", "created": "2026-10-09T15:13:10.929157Z", "modified": "2026-10-09T15:13:10.929157Z", "relationship_type": "indicates", "source_ref": "indicator--fdf8f79f-564d-4c0f-85b5-58de894f6da6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c26ae3-41b0-4ad8-8e5e-ac1ade7f3007", "created": "2026-10-09T15:13:10.929293Z", "modified": "2026-10-09T15:13:10.929293Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59ab0cc5b1a9df07c14a01356ea0973ff3559edbefc0b5c295cd97cac067270e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.929293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23dc7ef1-be20-41d1-a734-1e584cc8d979", "created": "2026-10-09T15:13:10.929879Z", "modified": "2026-10-09T15:13:10.929879Z", "relationship_type": "indicates", "source_ref": "indicator--38c26ae3-41b0-4ad8-8e5e-ac1ade7f3007", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1043c8f-2efa-45f2-995e-c5db9c6a14f2", "created": "2026-10-09T15:13:10.930001Z", "modified": "2026-10-09T15:13:10.930001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dc422284737eef623f759955d55ced95f32454e076347e8cd41778fd8058cb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.930001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--525489fa-9b64-4417-9524-c421d2f2dcfe", "created": "2026-10-09T15:13:10.930602Z", "modified": "2026-10-09T15:13:10.930602Z", "relationship_type": "indicates", "source_ref": "indicator--c1043c8f-2efa-45f2-995e-c5db9c6a14f2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d40001-f6c5-4c28-9978-4466207972c0", "created": "2026-10-09T15:13:10.930727Z", "modified": "2026-10-09T15:13:10.930727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79d64a009b634761d747ad566ed740f5f656e99112380b02b590035dc3faa2c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.930727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2975b43f-e06c-4edc-ad3d-68dfed0a967e", "created": "2026-10-09T15:13:10.931324Z", "modified": "2026-10-09T15:13:10.931324Z", "relationship_type": "indicates", "source_ref": "indicator--74d40001-f6c5-4c28-9978-4466207972c0", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d946e1e-747d-4692-bb38-9f8fc12a2c53", "created": "2026-10-09T15:13:10.931447Z", "modified": "2026-10-09T15:13:10.931447Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7c3d3ce0b1f56fce9a4dce38c69df0377c7e5c5f2440335a4108f9a9c33d3d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.931447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2663fa08-57ec-4606-bea0-78fab6554233", "created": "2026-10-09T15:13:10.932038Z", "modified": "2026-10-09T15:13:10.932038Z", "relationship_type": "indicates", "source_ref": "indicator--0d946e1e-747d-4692-bb38-9f8fc12a2c53", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ff9d4d-6de7-49b8-b0fd-3a67331494c5", "created": "2026-10-09T15:13:10.93216Z", "modified": "2026-10-09T15:13:10.93216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cfdbae49c7ce9891cec42dfc398177ae96209ba56dca89c6f1da4129070cdd93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.93216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b61b854-854d-4843-8cef-5a7926c7f3fe", "created": "2026-10-09T15:13:10.932758Z", "modified": "2026-10-09T15:13:10.932758Z", "relationship_type": "indicates", "source_ref": "indicator--45ff9d4d-6de7-49b8-b0fd-3a67331494c5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c065a03-1a9c-417c-be6b-e061401813e1", "created": "2026-10-09T15:13:10.932879Z", "modified": "2026-10-09T15:13:10.932879Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93885d2f83497ad7b6114f0f0a7e148911e867d4c51618cd4dca6fd326b918e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.932879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--511557cd-2e45-494e-ae1c-303a96b09a9e", "created": "2026-10-09T15:13:10.933479Z", "modified": "2026-10-09T15:13:10.933479Z", "relationship_type": "indicates", "source_ref": "indicator--4c065a03-1a9c-417c-be6b-e061401813e1", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bbc268-8046-486b-bc6c-d58562d4dca5", "created": "2026-10-09T15:13:10.933602Z", "modified": "2026-10-09T15:13:10.933602Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ef36ee6bce11c71e3052499d2a270bb772f6f151fb642e0880130587b11d9b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.933602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ff4275a-7426-4b86-bcd5-ee117c8c3f44", "created": "2026-10-09T15:13:10.934189Z", "modified": "2026-10-09T15:13:10.934189Z", "relationship_type": "indicates", "source_ref": "indicator--56bbc268-8046-486b-bc6c-d58562d4dca5", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1e340a-c0a2-44ce-9925-bd5c545c5c45", "created": "2026-10-09T15:13:10.934322Z", "modified": "2026-10-09T15:13:10.934322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df07566ebdc1021800a7639e3ad660d2341abe7f0be0c5796a37ad69b1596448']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.934322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8182dec-395e-416a-adee-de0b1258a79d", "created": "2026-10-09T15:13:10.935011Z", "modified": "2026-10-09T15:13:10.935011Z", "relationship_type": "indicates", "source_ref": "indicator--4e1e340a-c0a2-44ce-9925-bd5c545c5c45", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f902ec-4e77-4ed3-84c2-6d39593958a1", "created": "2026-10-09T15:13:10.935135Z", "modified": "2026-10-09T15:13:10.935135Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c400b4ed590df2279e51f80a121469ccdeb607b172493d9be4e5e416cb861924']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.935135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--819457c2-022a-475e-9f75-65224f8c39ab", "created": "2026-10-09T15:13:10.935739Z", "modified": "2026-10-09T15:13:10.935739Z", "relationship_type": "indicates", "source_ref": "indicator--e0f902ec-4e77-4ed3-84c2-6d39593958a1", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211a4210-a8e4-4d74-9353-e7418d237b20", "created": "2026-10-09T15:13:10.935864Z", "modified": "2026-10-09T15:13:10.935864Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='940523a4581857a3db71ee79a00e54dbac37ea3e778748573c0e6fda31a97e80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.935864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--845509a4-05bb-4d82-bdbe-07729f5ed43f", "created": "2026-10-09T15:13:10.936455Z", "modified": "2026-10-09T15:13:10.936455Z", "relationship_type": "indicates", "source_ref": "indicator--211a4210-a8e4-4d74-9353-e7418d237b20", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54708dc3-73ef-4fec-88db-ad905680fc66", "created": "2026-10-09T15:13:10.936581Z", "modified": "2026-10-09T15:13:10.936581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e19f6b265f4e42b3dbd98f11cbeaf366739f6b2f75509d01162266ffac9e6ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.936581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2281eae2-bf4d-41d7-8ae8-e3d64fb9fff7", "created": "2026-10-09T15:13:10.937183Z", "modified": "2026-10-09T15:13:10.937183Z", "relationship_type": "indicates", "source_ref": "indicator--54708dc3-73ef-4fec-88db-ad905680fc66", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c219aa37-8846-4936-b3c2-b10c63187b0d", "created": "2026-10-09T15:13:10.937323Z", "modified": "2026-10-09T15:13:10.937323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43f121b66bf5f0cab6940ef24491340de6efd027725ef63d7ea6cfa7cc0ec160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.937323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e96d6547-a785-4ec2-8724-2c64e9d57bb6", "created": "2026-10-09T15:13:10.937912Z", "modified": "2026-10-09T15:13:10.937912Z", "relationship_type": "indicates", "source_ref": "indicator--c219aa37-8846-4936-b3c2-b10c63187b0d", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed737f4f-ea80-44fc-a96a-7524ecfae642", "created": "2026-10-09T15:13:10.938041Z", "modified": "2026-10-09T15:13:10.938041Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15cc5fc4ae8df156d3b394bd426172f4a207a6de862751209b515b8e27de077d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.938041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22c28f3a-6914-4dae-8c78-fb9eac2898c5", "created": "2026-10-09T15:13:10.938645Z", "modified": "2026-10-09T15:13:10.938645Z", "relationship_type": "indicates", "source_ref": "indicator--ed737f4f-ea80-44fc-a96a-7524ecfae642", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33db4e46-21c5-4feb-af37-17eb8e61ba21", "created": "2026-10-09T15:13:10.938771Z", "modified": "2026-10-09T15:13:10.938771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ee3060ca4c7a9606cbd67fdbe3a9c41ba5e41bfac2718674610c0ed9a156afb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.938771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67cc76bd-3336-4412-8e6b-3e81afd6c96c", "created": "2026-10-09T15:13:10.939366Z", "modified": "2026-10-09T15:13:10.939366Z", "relationship_type": "indicates", "source_ref": "indicator--33db4e46-21c5-4feb-af37-17eb8e61ba21", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48fba79-2d33-458f-8488-c1c250488e93", "created": "2026-10-09T15:13:10.939493Z", "modified": "2026-10-09T15:13:10.939493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59b518619cc8c141be7834ea6ee17f251a5dd01c6b2fef5b11e307b47252192a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.939493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4ffeff8-17d5-4e17-8ee0-071401ee4274", "created": "2026-10-09T15:13:10.940072Z", "modified": "2026-10-09T15:13:10.940072Z", "relationship_type": "indicates", "source_ref": "indicator--f48fba79-2d33-458f-8488-c1c250488e93", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166ee183-9367-43b6-97b2-844286220d3e", "created": "2026-10-09T15:13:10.940191Z", "modified": "2026-10-09T15:13:10.940191Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a7edf9c1f471583e1e93dbefc175f3b42c33b059d3d28b938b207b6de998660']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.940191Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b171b600-ab44-42c9-87e9-0b8cb402764d", "created": "2026-10-09T15:13:10.940888Z", "modified": "2026-10-09T15:13:10.940888Z", "relationship_type": "indicates", "source_ref": "indicator--166ee183-9367-43b6-97b2-844286220d3e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dd1cf34-590c-4a44-90a9-191933099a67", "created": "2026-10-09T15:13:10.941015Z", "modified": "2026-10-09T15:13:10.941015Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1bce7bf45a0e2bb33c7d2b34858427d574935b88768fe2342c944f77797b9a9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.941015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7f1d6f1-0962-4034-afa2-b9a75a7fac70", "created": "2026-10-09T15:13:10.941619Z", "modified": "2026-10-09T15:13:10.941619Z", "relationship_type": "indicates", "source_ref": "indicator--5dd1cf34-590c-4a44-90a9-191933099a67", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83954475-7877-437a-90f6-a6ccb4b67274", "created": "2026-10-09T15:13:10.941745Z", "modified": "2026-10-09T15:13:10.941745Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c95f211dfd1fce7214b46fa2a70c699d136eb7249f5889b9c960b1c400862adf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.941745Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1be1f5f-1f5c-49a2-b67c-da3690183169", "created": "2026-10-09T15:13:10.942341Z", "modified": "2026-10-09T15:13:10.942341Z", "relationship_type": "indicates", "source_ref": "indicator--83954475-7877-437a-90f6-a6ccb4b67274", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcccd95-c2bc-4249-bf06-eadd90d6ee6e", "created": "2026-10-09T15:13:10.942468Z", "modified": "2026-10-09T15:13:10.942468Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31c8e60d8cbe5a82e86d28a43829659f212e0d40a7fed4c4997714240452edc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.942468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c75bddb9-d8ee-4859-9ccf-824a92c2ee12", "created": "2026-10-09T15:13:10.943051Z", "modified": "2026-10-09T15:13:10.943051Z", "relationship_type": "indicates", "source_ref": "indicator--ffcccd95-c2bc-4249-bf06-eadd90d6ee6e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47da7f23-9d27-4019-b2ea-2d41b4430045", "created": "2026-10-09T15:13:10.943173Z", "modified": "2026-10-09T15:13:10.943173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='503c6d96d8a31c05aadd8b28574e191065584fd06416b497b6e5681cfb7e536e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.943173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08885227-c12b-440d-a095-28f9827cf05c", "created": "2026-10-09T15:13:10.94377Z", "modified": "2026-10-09T15:13:10.94377Z", "relationship_type": "indicates", "source_ref": "indicator--47da7f23-9d27-4019-b2ea-2d41b4430045", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--654e0423-6637-4438-85dc-d78f90336652", "created": "2026-10-09T15:13:10.943895Z", "modified": "2026-10-09T15:13:10.943895Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83fbd26daccf396f265aeeeab7f96d96f316f4a2fa720142f436b63d6a1e3259']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.943895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cb6ea6c-1e3e-48a5-8dd9-d21f960b09a6", "created": "2026-10-09T15:13:10.944497Z", "modified": "2026-10-09T15:13:10.944497Z", "relationship_type": "indicates", "source_ref": "indicator--654e0423-6637-4438-85dc-d78f90336652", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2d1c07-81e8-4bb8-943a-2dd4ffdaa1ec", "created": "2026-10-09T15:13:10.944625Z", "modified": "2026-10-09T15:13:10.944625Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='541b5294186230462b8898b2cacd97eb9170109f1bc3098ac1696852a5732720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.944625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33091fd1-5863-4a23-b625-e0af7d6c44fb", "created": "2026-10-09T15:13:10.945218Z", "modified": "2026-10-09T15:13:10.945218Z", "relationship_type": "indicates", "source_ref": "indicator--9f2d1c07-81e8-4bb8-943a-2dd4ffdaa1ec", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e28bab-266a-4b77-b83f-f79577674207", "created": "2026-10-09T15:13:10.945353Z", "modified": "2026-10-09T15:13:10.945353Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1b5e337030f6919678f45177ce8962da9e07fca1ef92b0633b75c77acc86d4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.945353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--383a9b9a-bd91-4cf1-8932-0b81f4ce1685", "created": "2026-10-09T15:13:10.945947Z", "modified": "2026-10-09T15:13:10.945947Z", "relationship_type": "indicates", "source_ref": "indicator--60e28bab-266a-4b77-b83f-f79577674207", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9480e59-02a4-4c05-97f5-dc0dc2812da2", "created": "2026-10-09T15:13:10.946071Z", "modified": "2026-10-09T15:13:10.946071Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e5ae8c92eefa4444bcf0b54d895829797eff18a73f8ca8d49079a8d65559a612']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.946071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--707823d7-1fc4-4354-bbbe-c63e2cc40baa", "created": "2026-10-09T15:13:10.946672Z", "modified": "2026-10-09T15:13:10.946672Z", "relationship_type": "indicates", "source_ref": "indicator--c9480e59-02a4-4c05-97f5-dc0dc2812da2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8b2944-e86d-471a-aa43-580bfd597284", "created": "2026-10-09T15:13:10.946804Z", "modified": "2026-10-09T15:13:10.946804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35f8ccce467f18a0fefda35010a9695a00e3120cc77fd77461826f9c592e8ba0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.946804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d9bb94b-dfc6-4d1a-a51a-5323bb9def21", "created": "2026-10-09T15:13:10.947509Z", "modified": "2026-10-09T15:13:10.947509Z", "relationship_type": "indicates", "source_ref": "indicator--ad8b2944-e86d-471a-aa43-580bfd597284", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af52cb5a-e393-40cc-961a-898a46aada51", "created": "2026-10-09T15:13:10.947642Z", "modified": "2026-10-09T15:13:10.947642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa7e7a4af9d27088f579e79029ad68bfced4305bc1bff3e9a7b27fe71d1fa666']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.947642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53974aa2-c5de-476e-946e-3ae42e6143cf", "created": "2026-10-09T15:13:10.948233Z", "modified": "2026-10-09T15:13:10.948233Z", "relationship_type": "indicates", "source_ref": "indicator--af52cb5a-e393-40cc-961a-898a46aada51", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4953936c-8097-4835-b580-affa386be6c4", "created": "2026-10-09T15:13:10.948383Z", "modified": "2026-10-09T15:13:10.948383Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae908a5055c5e0d858645bab25ece364d6930031ab3975155d6c09526dd0f11b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.948383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2b78af8-3aab-47a1-97cb-517ed20eaebd", "created": "2026-10-09T15:13:10.948984Z", "modified": "2026-10-09T15:13:10.948984Z", "relationship_type": "indicates", "source_ref": "indicator--4953936c-8097-4835-b580-affa386be6c4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81de033b-aeb2-4bcf-a532-7400c82369ef", "created": "2026-10-09T15:13:10.949107Z", "modified": "2026-10-09T15:13:10.949107Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec3cfd829d6579edb1b3ce4cc944442c6a52473da0ef52b82565a3da5a5d7e47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.949107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48ad9867-6288-47f5-b820-9ca8d93a2679", "created": "2026-10-09T15:13:10.949708Z", "modified": "2026-10-09T15:13:10.949708Z", "relationship_type": "indicates", "source_ref": "indicator--81de033b-aeb2-4bcf-a532-7400c82369ef", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf99907b-49f0-44f2-ae8c-0494b02f2fbf", "created": "2026-10-09T15:13:10.949832Z", "modified": "2026-10-09T15:13:10.949832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb494962c3f69a08bf24eaee626284dd72afb4cbed9e2b206ca9106928fb2c71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.949832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02078096-6773-49e2-a5cd-957403f99fef", "created": "2026-10-09T15:13:10.950431Z", "modified": "2026-10-09T15:13:10.950431Z", "relationship_type": "indicates", "source_ref": "indicator--cf99907b-49f0-44f2-ae8c-0494b02f2fbf", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d32425-efe8-433e-bd63-bb31d74e0047", "created": "2026-10-09T15:13:10.950556Z", "modified": "2026-10-09T15:13:10.950556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c82a7f8f31f38dcbda4c632f42489385b523bfebdc6a959a61b9a38b8d36bf42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.950556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9e40d0b-79a3-405f-ac20-af72172a6b06", "created": "2026-10-09T15:13:10.951145Z", "modified": "2026-10-09T15:13:10.951145Z", "relationship_type": "indicates", "source_ref": "indicator--87d32425-efe8-433e-bd63-bb31d74e0047", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1708a8-5788-4f9f-aa08-49f6d37d71fe", "created": "2026-10-09T15:13:10.951276Z", "modified": "2026-10-09T15:13:10.951276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83961bc4a51c96da4c34c36abecc33cdebca69ddda8ae42447c9877b2159d16e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.951276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49d71c23-7c49-4679-bb65-a8f56d89d8cf", "created": "2026-10-09T15:13:10.951868Z", "modified": "2026-10-09T15:13:10.951868Z", "relationship_type": "indicates", "source_ref": "indicator--4c1708a8-5788-4f9f-aa08-49f6d37d71fe", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a82d640-6943-4b91-b517-35c8dd90250b", "created": "2026-10-09T15:13:10.951994Z", "modified": "2026-10-09T15:13:10.951994Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa6a6bcb6cd0fe2f2b38bf25f07230b25318d1a5b03e2e4c532511065aa320a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.951994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffd50dac-5c60-45fb-86a0-7323d14e6efe", "created": "2026-10-09T15:13:10.952595Z", "modified": "2026-10-09T15:13:10.952595Z", "relationship_type": "indicates", "source_ref": "indicator--7a82d640-6943-4b91-b517-35c8dd90250b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6506cf4e-05d3-4d36-b435-a0412ee7309f", "created": "2026-10-09T15:13:10.952718Z", "modified": "2026-10-09T15:13:10.952718Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='373685763d14dc7361a745ed2f75c50c8f52f07ced615a2c98434016dd766451']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.952718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1debccc3-c01a-444d-964a-49025d1b4428", "created": "2026-10-09T15:13:10.953318Z", "modified": "2026-10-09T15:13:10.953318Z", "relationship_type": "indicates", "source_ref": "indicator--6506cf4e-05d3-4d36-b435-a0412ee7309f", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309bd5b2-92a1-4edf-ae92-5615be558463", "created": "2026-10-09T15:13:10.953443Z", "modified": "2026-10-09T15:13:10.953443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='215ad5f337c1b753f5ba4b00b7dfe71976d2f7a781cd0eb7dd778e625298b101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.953443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b48714d7-404a-433c-b4da-54f6710ba481", "created": "2026-10-09T15:13:10.954142Z", "modified": "2026-10-09T15:13:10.954142Z", "relationship_type": "indicates", "source_ref": "indicator--309bd5b2-92a1-4edf-ae92-5615be558463", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53a2446-2c36-4cd7-8589-03fa2be4ba35", "created": "2026-10-09T15:13:10.954277Z", "modified": "2026-10-09T15:13:10.954277Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e2a7536f5a094b4bf415ff766313f3ccd8ec147ae73f677690f533a12f79e55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.954277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee4781e-374e-45eb-892c-1213b1f21f5a", "created": "2026-10-09T15:13:10.954866Z", "modified": "2026-10-09T15:13:10.954866Z", "relationship_type": "indicates", "source_ref": "indicator--e53a2446-2c36-4cd7-8589-03fa2be4ba35", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b740f47e-e2f1-4cd4-9298-969aab89bb1e", "created": "2026-10-09T15:13:10.954988Z", "modified": "2026-10-09T15:13:10.954988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc3c22871c3b6874f109c123b6023edccf771db86d7ed2ee7db60b56f54c63f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.954988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--806e3d6e-8270-44d3-bfc7-6609fe66b475", "created": "2026-10-09T15:13:10.955589Z", "modified": "2026-10-09T15:13:10.955589Z", "relationship_type": "indicates", "source_ref": "indicator--b740f47e-e2f1-4cd4-9298-969aab89bb1e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff3f06a-48c2-4e41-8294-665247b175ad", "created": "2026-10-09T15:13:10.955711Z", "modified": "2026-10-09T15:13:10.955711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44eae4482460f0de30ded0605c3da8c24b09cada7d63dba34430b4e71a561089']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.955711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df9d026d-7990-4200-9757-21f94e24d73d", "created": "2026-10-09T15:13:10.956306Z", "modified": "2026-10-09T15:13:10.956306Z", "relationship_type": "indicates", "source_ref": "indicator--eff3f06a-48c2-4e41-8294-665247b175ad", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e80e625-d047-4753-9e88-ecbe485038ba", "created": "2026-10-09T15:13:10.956435Z", "modified": "2026-10-09T15:13:10.956435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a95ec284092542620ecd963ce38d90b251165bcd9574130843fce4a6f857de4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.956435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c74191cc-c445-47be-977e-911dffff0716", "created": "2026-10-09T15:13:10.957027Z", "modified": "2026-10-09T15:13:10.957027Z", "relationship_type": "indicates", "source_ref": "indicator--8e80e625-d047-4753-9e88-ecbe485038ba", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fdc2ca-32d5-453e-b016-060d7ea79de9", "created": "2026-10-09T15:13:10.957149Z", "modified": "2026-10-09T15:13:10.957149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17920cc7a6376e196144994341b4821f48fc39b0cf131dc574c5c3f504ea2d8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.957149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c534df18-f0d1-438d-a2cf-5619db60ef66", "created": "2026-10-09T15:13:10.957745Z", "modified": "2026-10-09T15:13:10.957745Z", "relationship_type": "indicates", "source_ref": "indicator--a7fdc2ca-32d5-453e-b016-060d7ea79de9", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456eeeff-a8a1-4afe-acb3-0fb4a09b8a46", "created": "2026-10-09T15:13:10.957866Z", "modified": "2026-10-09T15:13:10.957866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70b6efec4008204b14118253ed9357add27dea0404c468c417bf02b86159ae08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.957866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cea83e1-7db8-4bde-a619-88901df63f7b", "created": "2026-10-09T15:13:10.958462Z", "modified": "2026-10-09T15:13:10.958462Z", "relationship_type": "indicates", "source_ref": "indicator--456eeeff-a8a1-4afe-acb3-0fb4a09b8a46", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d414f922-ee46-4269-8c28-6bf1c6ce7d32", "created": "2026-10-09T15:13:10.958594Z", "modified": "2026-10-09T15:13:10.958594Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e0987bcefdf439fe6a841768db67f219179693f7068cf4b74d553b06f987707']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.958594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e3a5988-0466-4205-8d23-8cba9ad670d4", "created": "2026-10-09T15:13:10.959179Z", "modified": "2026-10-09T15:13:10.959179Z", "relationship_type": "indicates", "source_ref": "indicator--d414f922-ee46-4269-8c28-6bf1c6ce7d32", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa789fb7-808d-4962-b51c-fa6eb22420f1", "created": "2026-10-09T15:13:10.959311Z", "modified": "2026-10-09T15:13:10.959311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b2473541272180ee6d6b311e093cebfd9ae63dda4e640297b425c15963d2f21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.959311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13d1a315-40af-4e8e-9175-b85beea5d5d4", "created": "2026-10-09T15:13:10.960006Z", "modified": "2026-10-09T15:13:10.960006Z", "relationship_type": "indicates", "source_ref": "indicator--fa789fb7-808d-4962-b51c-fa6eb22420f1", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9ade6c-ef68-4192-a63b-2765d673df14", "created": "2026-10-09T15:13:10.960132Z", "modified": "2026-10-09T15:13:10.960132Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fad7714b6b63cb84be42add573fda861811d4087e6cbf3fa687d156beddbb0ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.960132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--041d89df-8774-4622-8a0d-3b9d2172a53d", "created": "2026-10-09T15:13:10.960736Z", "modified": "2026-10-09T15:13:10.960736Z", "relationship_type": "indicates", "source_ref": "indicator--5e9ade6c-ef68-4192-a63b-2765d673df14", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e8b1bb-c231-416f-b765-6904891429c2", "created": "2026-10-09T15:13:10.960861Z", "modified": "2026-10-09T15:13:10.960861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b75f4ffe1267e2b0d0da7a9703669a631b1152e952519c3d1bd35d92e2a61607']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.960861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d2785d9-cd56-46ca-bfbb-dbae3320b7c1", "created": "2026-10-09T15:13:10.961455Z", "modified": "2026-10-09T15:13:10.961455Z", "relationship_type": "indicates", "source_ref": "indicator--34e8b1bb-c231-416f-b765-6904891429c2", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45085092-8c89-45fd-8c93-c1fe53dec8cd", "created": "2026-10-09T15:13:10.961578Z", "modified": "2026-10-09T15:13:10.961578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81b66d6cf555055361d8f797a31d2c21a9848479d8bffefd75302abb52c74ec9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.961578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--923e3ecd-953a-4de6-b2ee-6e2057939184", "created": "2026-10-09T15:13:10.962164Z", "modified": "2026-10-09T15:13:10.962164Z", "relationship_type": "indicates", "source_ref": "indicator--45085092-8c89-45fd-8c93-c1fe53dec8cd", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b0f901-5430-4529-8d92-06173ba0de73", "created": "2026-10-09T15:13:10.962296Z", "modified": "2026-10-09T15:13:10.962296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb059a134929016e67ecdf414866cc3c4e88bf5e50dcfbbe842fe99187b49375']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.962296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--095e97b1-20a1-4dd8-9d89-4b170301a76b", "created": "2026-10-09T15:13:10.962883Z", "modified": "2026-10-09T15:13:10.962883Z", "relationship_type": "indicates", "source_ref": "indicator--39b0f901-5430-4529-8d92-06173ba0de73", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec7309e-36fc-4db4-ae78-6de920e7018e", "created": "2026-10-09T15:13:10.963004Z", "modified": "2026-10-09T15:13:10.963004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab08badfcb47ea0a9f9cb9d501f0b1b4a222c99f90730303d19c781e8b61c791']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.963004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e80625b-97da-47b4-a7af-fea6197f0dc7", "created": "2026-10-09T15:13:10.963607Z", "modified": "2026-10-09T15:13:10.963607Z", "relationship_type": "indicates", "source_ref": "indicator--1ec7309e-36fc-4db4-ae78-6de920e7018e", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535c97d0-e249-45e0-8fdc-3aa9c2cd6396", "created": "2026-10-09T15:13:10.963737Z", "modified": "2026-10-09T15:13:10.963737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5b647bad40dbb2bda2b4afa8a4764434b86bca4771c417a88f287309b19026d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.963737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03573990-a32c-458e-8af1-ba8e5f09eeb0", "created": "2026-10-09T15:13:10.964363Z", "modified": "2026-10-09T15:13:10.964363Z", "relationship_type": "indicates", "source_ref": "indicator--535c97d0-e249-45e0-8fdc-3aa9c2cd6396", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669a9acd-7aa5-480e-98a1-fffb332448b1", "created": "2026-10-09T15:13:10.964492Z", "modified": "2026-10-09T15:13:10.964492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ddc1acc748d908bfbc04ee792c2e3cd07795f8528bf9229a0350b6627c33e848']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.964492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90e3e155-a0ec-4718-85f2-c8b7502b54c8", "created": "2026-10-09T15:13:10.965082Z", "modified": "2026-10-09T15:13:10.965082Z", "relationship_type": "indicates", "source_ref": "indicator--669a9acd-7aa5-480e-98a1-fffb332448b1", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7598cd-737b-4e48-8483-150cc63f2065", "created": "2026-10-09T15:13:10.965199Z", "modified": "2026-10-09T15:13:10.965199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9802fbe92d73d608ce6702b825174c29d28b1e2112bb3362fb228ab38fada137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.965199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--617c8827-6db5-4ea2-850e-27835fae560d", "created": "2026-10-09T15:13:10.965796Z", "modified": "2026-10-09T15:13:10.965796Z", "relationship_type": "indicates", "source_ref": "indicator--bf7598cd-737b-4e48-8483-150cc63f2065", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8c0490-6fac-42d9-b3c6-b494eb7d30f4", "created": "2026-10-09T15:13:10.96592Z", "modified": "2026-10-09T15:13:10.96592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c84b2d12099e881a008814c4a3504e97fef91a555aa5ba4f69dc690d8a1bb12b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.96592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f63408b-c591-4963-adfb-f54a73febd04", "created": "2026-10-09T15:13:10.966624Z", "modified": "2026-10-09T15:13:10.966624Z", "relationship_type": "indicates", "source_ref": "indicator--af8c0490-6fac-42d9-b3c6-b494eb7d30f4", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec56c17-b75b-41ed-9ea2-f019991ae24b", "created": "2026-10-09T15:13:10.966754Z", "modified": "2026-10-09T15:13:10.966754Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spappm_mondow.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.966754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa0dd2d5-4a3c-424c-a205-e9f6823cc002", "created": "2026-10-09T15:13:10.967227Z", "modified": "2026-10-09T15:13:10.967227Z", "relationship_type": "indicates", "source_ref": "indicator--8ec56c17-b75b-41ed-9ea2-f019991ae24b", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eb8a79-2757-4704-8da3-9886f3ef434f", "created": "2026-10-09T15:13:10.967363Z", "modified": "2026-10-09T15:13:10.967363Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spapptrakapp.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.967363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0afc51a-9fb8-407b-88da-ecf040da0c36", "created": "2026-10-09T15:13:10.967832Z", "modified": "2026-10-09T15:13:10.967832Z", "relationship_type": "indicates", "source_ref": "indicator--41eb8a79-2757-4704-8da3-9886f3ef434f", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882be11a-ccd8-4826-b0a9-777128bef699", "created": "2026-10-09T15:13:10.967952Z", "modified": "2026-10-09T15:13:10.967952Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spatrakappp.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.967952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b1646ba-e084-4d29-987c-2057296006a9", "created": "2026-10-09T15:13:10.968422Z", "modified": "2026-10-09T15:13:10.968422Z", "relationship_type": "indicates", "source_ref": "indicator--882be11a-ccd8-4826-b0a9-777128bef699", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17ca47e-d68f-4e97-a162-9cd8a182a9f6", "created": "2026-10-09T15:13:10.968549Z", "modified": "2026-10-09T15:13:10.968549Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8C017FDB2A81807EC879A8E30F4AB05D5CA02034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.968549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d63094c1-5177-4bfe-bb05-786925eebee8", "created": "2026-10-09T15:13:10.969091Z", "modified": "2026-10-09T15:13:10.969091Z", "relationship_type": "indicates", "source_ref": "indicator--c17ca47e-d68f-4e97-a162-9cd8a182a9f6", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3815153b-aa42-4264-b55f-fb071e8e2c13", "created": "2026-10-09T15:13:10.969212Z", "modified": "2026-10-09T15:13:10.969212Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9477420001BC79500623374EC586B054AAC97BF9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.969212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e296e642-85f5-4b53-acc2-8ecb44f2c63b", "created": "2026-10-09T15:13:10.969773Z", "modified": "2026-10-09T15:13:10.969773Z", "relationship_type": "indicates", "source_ref": "indicator--3815153b-aa42-4264-b55f-fb071e8e2c13", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce6cc5a-3bb5-41f7-a591-d82d98fdb4c8", "created": "2026-10-09T15:13:10.969896Z", "modified": "2026-10-09T15:13:10.969896Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='26AF8554EE338D6969FAC51BF4DAC3186098056E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.969896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebd6a9ad-bd1a-4677-b41a-3ff5c6056656", "created": "2026-10-09T15:13:10.970451Z", "modified": "2026-10-09T15:13:10.970451Z", "relationship_type": "indicates", "source_ref": "indicator--bce6cc5a-3bb5-41f7-a591-d82d98fdb4c8", "target_ref": "malware--992c6dbc-03ce-4c43-8111-1402591f11d8"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5", "created": "2026-10-09T15:13:10.970571Z", "modified": "2026-10-09T15:13:10.970571Z", "name": "AndroidMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb8178e-378d-4d14-a223-51fbc839f7b7", "created": "2026-10-09T15:13:10.970694Z", "modified": "2026-10-09T15:13:10.970694Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='server.androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.970694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d385ec0e-55c9-499c-ac47-798731e979ba", "created": "2026-10-09T15:13:10.971188Z", "modified": "2026-10-09T15:13:10.971188Z", "relationship_type": "indicates", "source_ref": "indicator--5fb8178e-378d-4d14-a223-51fbc839f7b7", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207e94bf-da0c-401c-86b4-eaa5e77fd0da", "created": "2026-10-09T15:13:10.971318Z", "modified": "2026-10-09T15:13:10.971318Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.971318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e45525fa-babb-4cba-befe-7f23ccce0270", "created": "2026-10-09T15:13:10.971804Z", "modified": "2026-10-09T15:13:10.971804Z", "relationship_type": "indicates", "source_ref": "indicator--207e94bf-da0c-401c-86b4-eaa5e77fd0da", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13aa5a7e-4f44-4eeb-9846-70220d2ad3fe", "created": "2026-10-09T15:13:10.97192Z", "modified": "2026-10-09T15:13:10.97192Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.ultimatephonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.97192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb12e802-2716-495b-bbe9-59b0fa383835", "created": "2026-10-09T15:13:10.972508Z", "modified": "2026-10-09T15:13:10.972508Z", "relationship_type": "indicates", "source_ref": "indicator--13aa5a7e-4f44-4eeb-9846-70220d2ad3fe", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1623ee-0f91-4588-ab88-0beb9e5e95b2", "created": "2026-10-09T15:13:10.97263Z", "modified": "2026-10-09T15:13:10.97263Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ultimatephonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.97263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--512a700b-76c3-4b03-8f3f-7d74e28daa76", "created": "2026-10-09T15:13:10.973111Z", "modified": "2026-10-09T15:13:10.973111Z", "relationship_type": "indicates", "source_ref": "indicator--5c1623ee-0f91-4588-ab88-0beb9e5e95b2", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a565d281-4a57-4198-8254-c8398f3f5594", "created": "2026-10-09T15:13:10.973233Z", "modified": "2026-10-09T15:13:10.973233Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.973233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76721d83-bdf3-4673-b758-c02429c7683b", "created": "2026-10-09T15:13:10.973725Z", "modified": "2026-10-09T15:13:10.973725Z", "relationship_type": "indicates", "source_ref": "indicator--a565d281-4a57-4198-8254-c8398f3f5594", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45960be-d6af-4465-a1d7-e39780a4c9d9", "created": "2026-10-09T15:13:10.973849Z", "modified": "2026-10-09T15:13:10.973849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.973849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86ebc225-45f0-4c12-832c-4888f637f0b1", "created": "2026-10-09T15:13:10.974336Z", "modified": "2026-10-09T15:13:10.974336Z", "relationship_type": "indicates", "source_ref": "indicator--d45960be-d6af-4465-a1d7-e39780a4c9d9", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70872106-fcbd-4e71-aae4-131297cd7223", "created": "2026-10-09T15:13:10.974461Z", "modified": "2026-10-09T15:13:10.974461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='installam.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.974461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b411acee-a655-463e-a16e-9a0c07c86b46", "created": "2026-10-09T15:13:10.974928Z", "modified": "2026-10-09T15:13:10.974928Z", "relationship_type": "indicates", "source_ref": "indicator--70872106-fcbd-4e71-aae4-131297cd7223", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ddf1f1-216f-4ee5-8607-51d91b792f0d", "created": "2026-10-09T15:13:10.975051Z", "modified": "2026-10-09T15:13:10.975051Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ea97385a1ba2fcff5adae16eb63e2efd06ad215883e1775d2caeda886e61eeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.975051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f566ae39-17ce-4bf8-b63a-8e787c1491fd", "created": "2026-10-09T15:13:10.975644Z", "modified": "2026-10-09T15:13:10.975644Z", "relationship_type": "indicates", "source_ref": "indicator--c1ddf1f1-216f-4ee5-8607-51d91b792f0d", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3698c4ab-f8f4-42da-bc6d-36506a28c0c2", "created": "2026-10-09T15:13:10.975765Z", "modified": "2026-10-09T15:13:10.975765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c891584b9f9cb410a6ce81b239d88a340e5566ddb4768a1db28f2430f60b509']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.975765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3200441-999f-4899-ac78-1710513bc392", "created": "2026-10-09T15:13:10.976356Z", "modified": "2026-10-09T15:13:10.976356Z", "relationship_type": "indicates", "source_ref": "indicator--3698c4ab-f8f4-42da-bc6d-36506a28c0c2", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9224308d-c245-455d-bd63-b465d35272f8", "created": "2026-10-09T15:13:10.976475Z", "modified": "2026-10-09T15:13:10.976475Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7f39de38173248c9e76a0555f486d989e29f7638d4ecfbb4136115bc15d20c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.976475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a05b1a12-febb-4efb-bebd-0adf3a9c6627", "created": "2026-10-09T15:13:10.977065Z", "modified": "2026-10-09T15:13:10.977065Z", "relationship_type": "indicates", "source_ref": "indicator--9224308d-c245-455d-bd63-b465d35272f8", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9df8c1-1762-493a-89e0-c444dc23b6e5", "created": "2026-10-09T15:13:10.977289Z", "modified": "2026-10-09T15:13:10.977289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fdacaff9f4bb261737ee16d4b8937c437a2ccc21d058fe7ae8815aa47f19ab6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.977289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b89eb193-c5c6-430d-b375-9fe8a69ab0e4", "created": "2026-10-09T15:13:10.977882Z", "modified": "2026-10-09T15:13:10.977882Z", "relationship_type": "indicates", "source_ref": "indicator--7d9df8c1-1762-493a-89e0-c444dc23b6e5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b599e1d-2a72-4736-ac52-455453302a00", "created": "2026-10-09T15:13:10.978003Z", "modified": "2026-10-09T15:13:10.978003Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85edce966c0592c85ac0cef3ea15df2d6dd345873be0dcf94f64943586e85714']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.978003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfcfebc9-55a5-4757-900a-37cbaa0f3e94", "created": "2026-10-09T15:13:10.978712Z", "modified": "2026-10-09T15:13:10.978712Z", "relationship_type": "indicates", "source_ref": "indicator--2b599e1d-2a72-4736-ac52-455453302a00", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730558e3-24f8-4622-b158-c5e6f24edf96", "created": "2026-10-09T15:13:10.978837Z", "modified": "2026-10-09T15:13:10.978837Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cedf11a9589344f4d2f5b5a1aafef39b543d3e5c390c831d407c47e5f6e4b3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.978837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d59d73c7-7273-4d24-b82a-78a366307ac5", "created": "2026-10-09T15:13:10.979432Z", "modified": "2026-10-09T15:13:10.979432Z", "relationship_type": "indicates", "source_ref": "indicator--730558e3-24f8-4622-b158-c5e6f24edf96", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd2464e-d873-410e-a4a3-f98c932990fe", "created": "2026-10-09T15:13:10.979555Z", "modified": "2026-10-09T15:13:10.979555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cad4a1af2a33044c816848d8027ef2d170efcedef06590a63f04b4f309715be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.979555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e6b1fba-c06e-4baa-bb31-cc90f8eac2be", "created": "2026-10-09T15:13:10.980134Z", "modified": "2026-10-09T15:13:10.980134Z", "relationship_type": "indicates", "source_ref": "indicator--7dd2464e-d873-410e-a4a3-f98c932990fe", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a0e79d-8c63-4ebe-880b-61d2d32cf3e9", "created": "2026-10-09T15:13:10.980252Z", "modified": "2026-10-09T15:13:10.980252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a76f01c4496299978d366c6b814173a347f05d05f19177cbaa23ad283bbfffc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.980252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84cf0a92-867d-4e3f-a25c-395b83cc3f08", "created": "2026-10-09T15:13:10.980851Z", "modified": "2026-10-09T15:13:10.980851Z", "relationship_type": "indicates", "source_ref": "indicator--d2a0e79d-8c63-4ebe-880b-61d2d32cf3e9", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a560c3-261c-4d7f-a9ae-d378c7e85735", "created": "2026-10-09T15:13:10.980972Z", "modified": "2026-10-09T15:13:10.980972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ee532b687c89d91d4e0b9b59f3056666fdabbbedc5e6e6ec0831d21b72f9814']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.980972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9da5a91-53ce-4b5a-bc9e-45997443ebcd", "created": "2026-10-09T15:13:10.981571Z", "modified": "2026-10-09T15:13:10.981571Z", "relationship_type": "indicates", "source_ref": "indicator--b8a560c3-261c-4d7f-a9ae-d378c7e85735", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66e74aa-833b-4284-b6ac-f819a25b3613", "created": "2026-10-09T15:13:10.981693Z", "modified": "2026-10-09T15:13:10.981693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0a0fb3246ca7ad43026ea6f6d37c87679cab459e28e4da5231f76f1a86d8f54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.981693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a2899e0-b36b-44f1-b972-c1d061ac692c", "created": "2026-10-09T15:13:10.982285Z", "modified": "2026-10-09T15:13:10.982285Z", "relationship_type": "indicates", "source_ref": "indicator--d66e74aa-833b-4284-b6ac-f819a25b3613", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84b9cc7-4db2-4f7c-8bd7-aabf3bcfbea5", "created": "2026-10-09T15:13:10.982408Z", "modified": "2026-10-09T15:13:10.982408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fb9df0af4ff6e1e5b950c06959837c50adc85bbeec59db663affa83d0517495']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.982408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c3fd925-3fbc-4478-9510-1e76801df678", "created": "2026-10-09T15:13:10.982998Z", "modified": "2026-10-09T15:13:10.982998Z", "relationship_type": "indicates", "source_ref": "indicator--e84b9cc7-4db2-4f7c-8bd7-aabf3bcfbea5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449b8958-d7e7-4231-ab73-286eadddc35e", "created": "2026-10-09T15:13:10.983121Z", "modified": "2026-10-09T15:13:10.983121Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='401fcf44aa8f89fe7fb2d6d090ae4499279ddeef7c43092fd0cb690bc7fdff07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.983121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50e01d51-2637-40b9-aad7-e70aa70a5aac", "created": "2026-10-09T15:13:10.983722Z", "modified": "2026-10-09T15:13:10.983722Z", "relationship_type": "indicates", "source_ref": "indicator--449b8958-d7e7-4231-ab73-286eadddc35e", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0df1198-cabd-40c3-b1bd-155884eb44be", "created": "2026-10-09T15:13:10.983848Z", "modified": "2026-10-09T15:13:10.983848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9b3c311ff86d3d32c08776f5237997410b42f926529a851fef2c8d2c5b6192c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.983848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fea1a73-bfe8-49b1-9719-dc2530672b92", "created": "2026-10-09T15:13:10.984455Z", "modified": "2026-10-09T15:13:10.984455Z", "relationship_type": "indicates", "source_ref": "indicator--b0df1198-cabd-40c3-b1bd-155884eb44be", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c35f3b1-11fd-4c35-b09e-e35da0f645f5", "created": "2026-10-09T15:13:10.984577Z", "modified": "2026-10-09T15:13:10.984577Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47c5ab71da50ce7f2c26204dc9e00efc32ab501c5b7b185fe14e763c717708f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.984577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d021455-ddcd-4e2b-ba36-cf58d49a5186", "created": "2026-10-09T15:13:10.985277Z", "modified": "2026-10-09T15:13:10.985277Z", "relationship_type": "indicates", "source_ref": "indicator--4c35f3b1-11fd-4c35-b09e-e35da0f645f5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac6bf34-0ea6-48e8-9a49-f417021c6f4e", "created": "2026-10-09T15:13:10.985402Z", "modified": "2026-10-09T15:13:10.985402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b06ba3a861c4a9b238460543d20c2817c6f0f1fccf2cb50de360655660f7bb04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.985402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba07532a-e19f-4f1f-a242-a5b7e0f85b00", "created": "2026-10-09T15:13:10.985989Z", "modified": "2026-10-09T15:13:10.985989Z", "relationship_type": "indicates", "source_ref": "indicator--2ac6bf34-0ea6-48e8-9a49-f417021c6f4e", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8936e8-2993-4778-bc5d-3c600aa04a20", "created": "2026-10-09T15:13:10.986109Z", "modified": "2026-10-09T15:13:10.986109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0da28f868563dbbc53b53f3361c87701a4b1e71641d48c5cb86d39f6fd46444']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.986109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b9e3ac7-d026-486b-8988-b354414b04bc", "created": "2026-10-09T15:13:10.986708Z", "modified": "2026-10-09T15:13:10.986708Z", "relationship_type": "indicates", "source_ref": "indicator--9f8936e8-2993-4778-bc5d-3c600aa04a20", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b23a22-7f8c-457c-8b1d-5d956bd8b0f3", "created": "2026-10-09T15:13:10.986834Z", "modified": "2026-10-09T15:13:10.986834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46787188d2e7077cb6872e0a0c7ff4b43b7e6c1b5d22659953288c9c863583ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.986834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1108fe70-e4a2-462f-93ac-ca9557b7da4d", "created": "2026-10-09T15:13:10.987429Z", "modified": "2026-10-09T15:13:10.987429Z", "relationship_type": "indicates", "source_ref": "indicator--f9b23a22-7f8c-457c-8b1d-5d956bd8b0f3", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79f5ed3-c5b9-4225-9b92-60c6f91cd946", "created": "2026-10-09T15:13:10.987548Z", "modified": "2026-10-09T15:13:10.987548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f57686e7341f5c1f6e301d5e6eed2bd5048d56d14e5bae568370526107d0814']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.987548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--606e2f50-8472-443c-9cb4-bd300ef66b51", "created": "2026-10-09T15:13:10.988133Z", "modified": "2026-10-09T15:13:10.988133Z", "relationship_type": "indicates", "source_ref": "indicator--a79f5ed3-c5b9-4225-9b92-60c6f91cd946", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d19155c-ec1a-41e4-a1c9-b5f3db302fa5", "created": "2026-10-09T15:13:10.988251Z", "modified": "2026-10-09T15:13:10.988251Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='440cd74c1010ad0f1d2becb5453c0bf2869087c2993522866590db9a77273d3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.988251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59c32dba-c81e-41d5-b4c6-076f23b81505", "created": "2026-10-09T15:13:10.988892Z", "modified": "2026-10-09T15:13:10.988892Z", "relationship_type": "indicates", "source_ref": "indicator--0d19155c-ec1a-41e4-a1c9-b5f3db302fa5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92578bc7-d41c-49c7-98aa-5a5377675e21", "created": "2026-10-09T15:13:10.989016Z", "modified": "2026-10-09T15:13:10.989016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e738c526c14227efbd897e819babcc8d0b734ef6da6486d5c20ad13713421f6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.989016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce09390e-d1f2-4a9f-904a-865e4f805728", "created": "2026-10-09T15:13:10.989617Z", "modified": "2026-10-09T15:13:10.989617Z", "relationship_type": "indicates", "source_ref": "indicator--92578bc7-d41c-49c7-98aa-5a5377675e21", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78249896-cdce-4752-8a18-88adb35b7d1b", "created": "2026-10-09T15:13:10.989739Z", "modified": "2026-10-09T15:13:10.989739Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='514f4d6272678b21151b8d5bff99ad110b585a2662acaf55c53ec120ff45bbd5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.989739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--016d5957-dde0-48d6-95a8-922e494ef70b", "created": "2026-10-09T15:13:10.990335Z", "modified": "2026-10-09T15:13:10.990335Z", "relationship_type": "indicates", "source_ref": "indicator--78249896-cdce-4752-8a18-88adb35b7d1b", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ef38a8c-b449-4014-8499-bcdeb84d13bd", "created": "2026-10-09T15:13:10.990458Z", "modified": "2026-10-09T15:13:10.990458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29429319ecc7c736262af7425edaab70f7d9cbe10ea9cf2eeca9ea7da5410427']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.990458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87891cd4-635b-4f9e-80ff-331cf0752cde", "created": "2026-10-09T15:13:10.991149Z", "modified": "2026-10-09T15:13:10.991149Z", "relationship_type": "indicates", "source_ref": "indicator--4ef38a8c-b449-4014-8499-bcdeb84d13bd", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d363f5-a683-45e8-a360-eac31870b3b9", "created": "2026-10-09T15:13:10.991289Z", "modified": "2026-10-09T15:13:10.991289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a2a6a648667f5a0ab6a281c2e7af7e7f0cbcbd4ea00652f7d40ec206784faf34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.991289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6979411-c64b-4876-ad9a-de27da74b986", "created": "2026-10-09T15:13:10.991881Z", "modified": "2026-10-09T15:13:10.991881Z", "relationship_type": "indicates", "source_ref": "indicator--12d363f5-a683-45e8-a360-eac31870b3b9", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726054c9-32b4-4b7c-9931-3966af5961b3", "created": "2026-10-09T15:13:10.992001Z", "modified": "2026-10-09T15:13:10.992001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b77cf9c9867d4b52b12c0071b84909119371cea3486eda63ef32b520a204b43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.992001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cc94084-a2c5-4a85-b35e-67e91dd977d3", "created": "2026-10-09T15:13:10.992607Z", "modified": "2026-10-09T15:13:10.992607Z", "relationship_type": "indicates", "source_ref": "indicator--726054c9-32b4-4b7c-9931-3966af5961b3", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4115c29e-2aa7-425e-a9ac-0688df817e15", "created": "2026-10-09T15:13:10.992729Z", "modified": "2026-10-09T15:13:10.992729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cafd13c1feb924f1d19dd5120b485a2df52edc1b6fa2199d06dacbcad3a9835']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.992729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3783f60-ffbd-4b5d-b246-c4d4e05bf72b", "created": "2026-10-09T15:13:10.993338Z", "modified": "2026-10-09T15:13:10.993338Z", "relationship_type": "indicates", "source_ref": "indicator--4115c29e-2aa7-425e-a9ac-0688df817e15", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bfbebc-a531-4274-a65c-3449e853fde5", "created": "2026-10-09T15:13:10.993465Z", "modified": "2026-10-09T15:13:10.993465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c54cd930231b60b2c0f7d49c5cc730d22cab0b2cc115f33e3724d0a9adbc786']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.993465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83f8beb5-6d66-4b63-bf64-c952f2318600", "created": "2026-10-09T15:13:10.994086Z", "modified": "2026-10-09T15:13:10.994086Z", "relationship_type": "indicates", "source_ref": "indicator--17bfbebc-a531-4274-a65c-3449e853fde5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78479ad-9d04-4251-9b38-88d34e10dfc2", "created": "2026-10-09T15:13:10.994241Z", "modified": "2026-10-09T15:13:10.994241Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='decae43fdfdb6ff0099ce4afd5c225e9052c37aa25be05287172cffc468122e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.994241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31dd23b6-f517-4edd-9c7c-701a41b0cd83", "created": "2026-10-09T15:13:10.994856Z", "modified": "2026-10-09T15:13:10.994856Z", "relationship_type": "indicates", "source_ref": "indicator--f78479ad-9d04-4251-9b38-88d34e10dfc2", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9012f28b-05e7-4929-b53b-a0bb200dea81", "created": "2026-10-09T15:13:10.99498Z", "modified": "2026-10-09T15:13:10.99498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03369a8fd9321aabff4d1f68ea1a1afa881074c6301427469f8cb6743d769ba4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.99498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f070f3a0-5747-4eb0-b398-f2daf44f5f13", "created": "2026-10-09T15:13:10.995581Z", "modified": "2026-10-09T15:13:10.995581Z", "relationship_type": "indicates", "source_ref": "indicator--9012f28b-05e7-4929-b53b-a0bb200dea81", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6f07a4-c911-4957-8087-49f106287e65", "created": "2026-10-09T15:13:10.995705Z", "modified": "2026-10-09T15:13:10.995705Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='696b78ea404c56571aef1e57f33eb8651fcd70f791bb6ebf09122d9cd0131a69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.995705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--830f7735-afa6-4f77-8ffe-2b3108fd917c", "created": "2026-10-09T15:13:10.996306Z", "modified": "2026-10-09T15:13:10.996306Z", "relationship_type": "indicates", "source_ref": "indicator--2d6f07a4-c911-4957-8087-49f106287e65", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6686261b-0a40-4724-8a43-f6886b350583", "created": "2026-10-09T15:13:10.99643Z", "modified": "2026-10-09T15:13:10.99643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7b9bf2d08c64d6dcbddf28003903e08e4672e1f4c32dcbcd3a76d48ce9f6164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.99643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d5cfa91-65b6-40d1-8b69-6728c90df428", "created": "2026-10-09T15:13:10.997029Z", "modified": "2026-10-09T15:13:10.997029Z", "relationship_type": "indicates", "source_ref": "indicator--6686261b-0a40-4724-8a43-f6886b350583", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3710c32-baed-4df9-8e69-5573b7534ce8", "created": "2026-10-09T15:13:10.997168Z", "modified": "2026-10-09T15:13:10.997168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0de4d427a919ee9568e873c730703a3a70e4cdcc976f15b86a77f0e7d9e0adeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.997168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a12f6c7-49aa-40f2-aae9-8279dc21b354", "created": "2026-10-09T15:13:10.998286Z", "modified": "2026-10-09T15:13:10.998286Z", "relationship_type": "indicates", "source_ref": "indicator--a3710c32-baed-4df9-8e69-5573b7534ce8", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016119bb-2859-430c-ab8c-2c88a5e742b5", "created": "2026-10-09T15:13:10.998424Z", "modified": "2026-10-09T15:13:10.998424Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='264e99bc7820f344934308b237ec7fee109be3d09ccde154b0e7c39d75e09c7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.998424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17734b43-7a04-4cee-9a3b-41f576c5f1e9", "created": "2026-10-09T15:13:10.999023Z", "modified": "2026-10-09T15:13:10.999023Z", "relationship_type": "indicates", "source_ref": "indicator--016119bb-2859-430c-ab8c-2c88a5e742b5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99961fd-beca-4b7e-9bfa-a9e09a2d37e8", "created": "2026-10-09T15:13:10.999146Z", "modified": "2026-10-09T15:13:10.999146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c27aa0e302e2986db9edb3bef46ae2fb5acef73e40606f83fd3ee6893e20163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.999146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f7ebca5-754d-4d9d-ab49-2fd5266f3207", "created": "2026-10-09T15:13:10.999751Z", "modified": "2026-10-09T15:13:10.999751Z", "relationship_type": "indicates", "source_ref": "indicator--a99961fd-beca-4b7e-9bfa-a9e09a2d37e8", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b188923-540e-4d0c-bf29-d29d95ea57ee", "created": "2026-10-09T15:13:10.999877Z", "modified": "2026-10-09T15:13:10.999877Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8983e9a874a3f457b2de3d4022a3a303b47a010876fbfa6a73086a936f16aaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:10.999877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09d6b579-f56c-4287-b4d4-acd8bb3985c9", "created": "2026-10-09T15:13:11.000482Z", "modified": "2026-10-09T15:13:11.000482Z", "relationship_type": "indicates", "source_ref": "indicator--3b188923-540e-4d0c-bf29-d29d95ea57ee", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2d9e8b-2ded-4e49-8f5c-f65946f5de8a", "created": "2026-10-09T15:13:11.000609Z", "modified": "2026-10-09T15:13:11.000609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='240dd787247bac93e6e8ef1becaf1edac2684ae4bae59cb56861b997dc0156a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.000609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--034226fe-fda8-4bd3-add5-d26bea5bc785", "created": "2026-10-09T15:13:11.0012Z", "modified": "2026-10-09T15:13:11.0012Z", "relationship_type": "indicates", "source_ref": "indicator--0a2d9e8b-2ded-4e49-8f5c-f65946f5de8a", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4c1854-a19a-4e18-8321-cfd010fe9da0", "created": "2026-10-09T15:13:11.001337Z", "modified": "2026-10-09T15:13:11.001337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='907def04e5331061e27dbb06b7fafbf60c5e895d0d899a258c49de3779bb9103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.001337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--976e8c7d-4cc5-40ad-9498-88af72ef0b65", "created": "2026-10-09T15:13:11.001927Z", "modified": "2026-10-09T15:13:11.001927Z", "relationship_type": "indicates", "source_ref": "indicator--6c4c1854-a19a-4e18-8321-cfd010fe9da0", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99f2c0b-2cb8-42ac-9dbe-b8a7040289f1", "created": "2026-10-09T15:13:11.002051Z", "modified": "2026-10-09T15:13:11.002051Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='837237c6fde628eafbd00a737ced265648ee8ab0688e0b4b64fe99f8c7153f2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.002051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fb01e39-d89c-4537-a8a7-cf06b1df9174", "created": "2026-10-09T15:13:11.002645Z", "modified": "2026-10-09T15:13:11.002645Z", "relationship_type": "indicates", "source_ref": "indicator--a99f2c0b-2cb8-42ac-9dbe-b8a7040289f1", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f853f03f-7b0a-4dfd-adac-6598b6274cc7", "created": "2026-10-09T15:13:11.002773Z", "modified": "2026-10-09T15:13:11.002773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51c71773cb0c32953149b5389e90d4be40e58ab985d7c190193a1f2c7b1b47ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.002773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6116d492-6f5c-419e-abc7-181282a79ff0", "created": "2026-10-09T15:13:11.003365Z", "modified": "2026-10-09T15:13:11.003365Z", "relationship_type": "indicates", "source_ref": "indicator--f853f03f-7b0a-4dfd-adac-6598b6274cc7", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c685b6-0ea4-43f4-91d9-8cd4d8f43255", "created": "2026-10-09T15:13:11.003487Z", "modified": "2026-10-09T15:13:11.003487Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1aa87fa0e6413cd4d196feb41a1d4a9f91cdecca86663a10c30069748c9e03de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.003487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c02cc4f-7cdb-46ec-8a8c-202e386cfb82", "created": "2026-10-09T15:13:11.004074Z", "modified": "2026-10-09T15:13:11.004074Z", "relationship_type": "indicates", "source_ref": "indicator--c1c685b6-0ea4-43f4-91d9-8cd4d8f43255", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b672dd92-7641-41ca-83b6-84d2c7d377f5", "created": "2026-10-09T15:13:11.004194Z", "modified": "2026-10-09T15:13:11.004194Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70d3cb60122e2995f5511c0d6ba05e7c5114d88437685ddf00a6fd80e606c1bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.004194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1625a0d2-a3d3-4e06-a8f1-ff9710f20d02", "created": "2026-10-09T15:13:11.004917Z", "modified": "2026-10-09T15:13:11.004917Z", "relationship_type": "indicates", "source_ref": "indicator--b672dd92-7641-41ca-83b6-84d2c7d377f5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117078ec-475a-423d-bea1-d19a448dc90f", "created": "2026-10-09T15:13:11.005045Z", "modified": "2026-10-09T15:13:11.005045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d32ca5a51a080fa130956732c7285724f62109a351da35b1775e0432067b7d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.005045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f16b71f6-631b-4278-876f-9403b1822844", "created": "2026-10-09T15:13:11.005658Z", "modified": "2026-10-09T15:13:11.005658Z", "relationship_type": "indicates", "source_ref": "indicator--117078ec-475a-423d-bea1-d19a448dc90f", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34989e5-6a95-4e61-8c21-3fa872eaecab", "created": "2026-10-09T15:13:11.005795Z", "modified": "2026-10-09T15:13:11.005795Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c44e8fba94b134f73ca6be0cfbe8778b9ff72201c7ddcfaf4a69a53118ef990']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.005795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--261055d9-bebb-43e9-87b5-fca30bba492c", "created": "2026-10-09T15:13:11.006406Z", "modified": "2026-10-09T15:13:11.006406Z", "relationship_type": "indicates", "source_ref": "indicator--e34989e5-6a95-4e61-8c21-3fa872eaecab", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07741e05-7d63-46dc-a8f0-346e935c9f97", "created": "2026-10-09T15:13:11.006536Z", "modified": "2026-10-09T15:13:11.006536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5829380cf2134da8b65a85fdfabc1dc41e87c51c09944e91768f7165588a3470']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.006536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd8da6da-3f2f-4614-a5b4-fc680a17f938", "created": "2026-10-09T15:13:11.007127Z", "modified": "2026-10-09T15:13:11.007127Z", "relationship_type": "indicates", "source_ref": "indicator--07741e05-7d63-46dc-a8f0-346e935c9f97", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425caf54-2302-40df-be98-1ac285a017c1", "created": "2026-10-09T15:13:11.00725Z", "modified": "2026-10-09T15:13:11.00725Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b99b0499d81078ddba81a35e5fd87d62e1491ee6161ee9f4c59936a9732dbcf8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.00725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a01363b-19e7-441a-8830-7d4e9c7699df", "created": "2026-10-09T15:13:11.007859Z", "modified": "2026-10-09T15:13:11.007859Z", "relationship_type": "indicates", "source_ref": "indicator--425caf54-2302-40df-be98-1ac285a017c1", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d136c64-38bb-4a35-b8b3-09f85225fcd5", "created": "2026-10-09T15:13:11.007983Z", "modified": "2026-10-09T15:13:11.007983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18e399c7038bdc97af4afb8a9b9b3f0cd46149235669be6587b094c5b8218e69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.007983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb94a5ac-6d2a-4020-a7dd-cc71cbc91c97", "created": "2026-10-09T15:13:11.008578Z", "modified": "2026-10-09T15:13:11.008578Z", "relationship_type": "indicates", "source_ref": "indicator--5d136c64-38bb-4a35-b8b3-09f85225fcd5", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128c7830-637a-430d-aa3f-e7422debc5e8", "created": "2026-10-09T15:13:11.008701Z", "modified": "2026-10-09T15:13:11.008701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='971a2a5f84f91f8b59a52af0781e0d0b0a1297ae57211c846d358287e198cf81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.008701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18e314ba-5906-4f5d-b80b-a1947b3f2177", "created": "2026-10-09T15:13:11.009299Z", "modified": "2026-10-09T15:13:11.009299Z", "relationship_type": "indicates", "source_ref": "indicator--128c7830-637a-430d-aa3f-e7422debc5e8", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb099ff1-2b19-4252-b791-e06a5dd3bd27", "created": "2026-10-09T15:13:11.009421Z", "modified": "2026-10-09T15:13:11.009421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13d5a01a6699f421f6e41e4e3c8d8620d6cff9874087eb2aa741b2d6e065dd71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.009421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--feaaae2a-96fb-49f9-a2cc-1d7f70680e4c", "created": "2026-10-09T15:13:11.010019Z", "modified": "2026-10-09T15:13:11.010019Z", "relationship_type": "indicates", "source_ref": "indicator--cb099ff1-2b19-4252-b791-e06a5dd3bd27", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77d824f-8f6a-43fa-880b-87598b9ba441", "created": "2026-10-09T15:13:11.010144Z", "modified": "2026-10-09T15:13:11.010144Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a27000eedc04f11e3e450001dcf762e407342b761e27f84ce353890a7bb3fbca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.010144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2a6c1d5-72f7-4170-96ad-ae77426a8819", "created": "2026-10-09T15:13:11.010738Z", "modified": "2026-10-09T15:13:11.010738Z", "relationship_type": "indicates", "source_ref": "indicator--d77d824f-8f6a-43fa-880b-87598b9ba441", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8b42d3-fbff-4db2-9812-245d3efaf250", "created": "2026-10-09T15:13:11.010868Z", "modified": "2026-10-09T15:13:11.010868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9bf6c7e4b3b6f2c2fae7a8e459c67264a59e7b2b1f24acfb8156460d372f687']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.010868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fb32c20-cd4b-41e0-9fea-532112d5fcee", "created": "2026-10-09T15:13:11.01158Z", "modified": "2026-10-09T15:13:11.01158Z", "relationship_type": "indicates", "source_ref": "indicator--fb8b42d3-fbff-4db2-9812-245d3efaf250", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b85520-fdfc-4426-8ace-ee75e8c3fde3", "created": "2026-10-09T15:13:11.011709Z", "modified": "2026-10-09T15:13:11.011709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f44e0a6ac19c2214aa3c5dbc1c70afdfe219a7ea893954c67bfb232d9d825da1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.011709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f251263-12d7-465b-8ff0-64be11c1390d", "created": "2026-10-09T15:13:11.012311Z", "modified": "2026-10-09T15:13:11.012311Z", "relationship_type": "indicates", "source_ref": "indicator--07b85520-fdfc-4426-8ace-ee75e8c3fde3", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa8c35a-ef3d-491f-bdf4-febf35aedc93", "created": "2026-10-09T15:13:11.012438Z", "modified": "2026-10-09T15:13:11.012438Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52b3bf5ff42494894fa5a6e8858c68e1a31258117224292ace387e4e52a1ea48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.012438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68018e34-88c0-448b-9126-7a086344aa8f", "created": "2026-10-09T15:13:11.013036Z", "modified": "2026-10-09T15:13:11.013036Z", "relationship_type": "indicates", "source_ref": "indicator--7aa8c35a-ef3d-491f-bdf4-febf35aedc93", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccee67d-4321-4a31-ad7a-3003dcf7b9dd", "created": "2026-10-09T15:13:11.013161Z", "modified": "2026-10-09T15:13:11.013161Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='973981d0d5ba516618f9a10514200e3553cfdd014c3761cd22c859544b6c8d3d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.013161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--831467be-c97b-4182-b467-b770a195199b", "created": "2026-10-09T15:13:11.013757Z", "modified": "2026-10-09T15:13:11.013757Z", "relationship_type": "indicates", "source_ref": "indicator--3ccee67d-4321-4a31-ad7a-3003dcf7b9dd", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59ebeda-70e0-4195-8bab-a5a3fe505d01", "created": "2026-10-09T15:13:11.013882Z", "modified": "2026-10-09T15:13:11.013882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0513e57f568f487a52c482fb59041445f486a92bd2c4a322b17032281a815ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.013882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f1ee6b4-02ee-4f9a-8c09-6181cd6765ac", "created": "2026-10-09T15:13:11.014491Z", "modified": "2026-10-09T15:13:11.014491Z", "relationship_type": "indicates", "source_ref": "indicator--b59ebeda-70e0-4195-8bab-a5a3fe505d01", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80dd4514-8e12-4f99-a8ea-e406d371185b", "created": "2026-10-09T15:13:11.014618Z", "modified": "2026-10-09T15:13:11.014618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a85549682a145c166a457837ac2898993e6c87a9dae50872e51e07a0691d77e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.014618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b97b33b-fd3b-4c61-b1ba-ab2be58ea9a1", "created": "2026-10-09T15:13:11.015212Z", "modified": "2026-10-09T15:13:11.015212Z", "relationship_type": "indicates", "source_ref": "indicator--80dd4514-8e12-4f99-a8ea-e406d371185b", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8a1a3a-cacb-432c-9913-b0304e4565d8", "created": "2026-10-09T15:13:11.015351Z", "modified": "2026-10-09T15:13:11.015351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28b14f4131858b499c1d7eefc4d2e60c6ede317541b2a8fec665d49413ba739e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.015351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf714281-a406-4abd-a322-050e1c922e8e", "created": "2026-10-09T15:13:11.015949Z", "modified": "2026-10-09T15:13:11.015949Z", "relationship_type": "indicates", "source_ref": "indicator--0c8a1a3a-cacb-432c-9913-b0304e4565d8", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9617bd-a8e7-4171-8cab-70eb798000f8", "created": "2026-10-09T15:13:11.016073Z", "modified": "2026-10-09T15:13:11.016073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02b7f8f8bcde28780306a64c08d07dec4b568b049f7b0ee716db018e1f3f34bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.016073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--940d2b78-abc5-476c-be62-b1ed3cf99c22", "created": "2026-10-09T15:13:11.016675Z", "modified": "2026-10-09T15:13:11.016675Z", "relationship_type": "indicates", "source_ref": "indicator--ba9617bd-a8e7-4171-8cab-70eb798000f8", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a105f2e-6d6d-45c2-a64d-a2a8f96bf0ce", "created": "2026-10-09T15:13:11.016803Z", "modified": "2026-10-09T15:13:11.016803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08c23b74046637728787fd611584db345701c124987fbeb165fbea65c29c0c7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.016803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7770057-24df-4850-b931-25e1816b936c", "created": "2026-10-09T15:13:11.017508Z", "modified": "2026-10-09T15:13:11.017508Z", "relationship_type": "indicates", "source_ref": "indicator--6a105f2e-6d6d-45c2-a64d-a2a8f96bf0ce", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f0a80e-1eb0-49de-b5f9-7511ab93e69a", "created": "2026-10-09T15:13:11.017637Z", "modified": "2026-10-09T15:13:11.017637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3aeb15c4a0bfa4789a1c6eabe0058ad4acf0bae00a65ee3a5a6e21aba04f0905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.017637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15b2e782-7f08-4771-992a-760ed0f3f9c0", "created": "2026-10-09T15:13:11.018234Z", "modified": "2026-10-09T15:13:11.018234Z", "relationship_type": "indicates", "source_ref": "indicator--27f0a80e-1eb0-49de-b5f9-7511ab93e69a", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ccf813-5855-4c21-b49c-4c7e288a0b07", "created": "2026-10-09T15:13:11.018371Z", "modified": "2026-10-09T15:13:11.018371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fd7d3615a94cf25b46722e864adc69a1089cf9c31424b5a318e9bd739ca6daa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.018371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3015d252-df85-4ef1-ab85-2356279f9555", "created": "2026-10-09T15:13:11.01896Z", "modified": "2026-10-09T15:13:11.01896Z", "relationship_type": "indicates", "source_ref": "indicator--01ccf813-5855-4c21-b49c-4c7e288a0b07", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7692b17-8a62-4884-840e-a8a335aa426e", "created": "2026-10-09T15:13:11.019081Z", "modified": "2026-10-09T15:13:11.019081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbfa23a975a012d0d111de48923db2f7e2276696678305c75a0799992a333e1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.019081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c1d434c-9753-4b09-b8fc-6b141f766bd0", "created": "2026-10-09T15:13:11.019679Z", "modified": "2026-10-09T15:13:11.019679Z", "relationship_type": "indicates", "source_ref": "indicator--f7692b17-8a62-4884-840e-a8a335aa426e", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983a8ee7-751f-4b89-90f7-6518ff711d0c", "created": "2026-10-09T15:13:11.019802Z", "modified": "2026-10-09T15:13:11.019802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b7b6d73b18155b6d3a0c63b3799c88105a0fde33bbf96bf78cd6208df2b5e66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.019802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44de0db3-c7b3-4b37-b57d-c0c3c54b9018", "created": "2026-10-09T15:13:11.020395Z", "modified": "2026-10-09T15:13:11.020395Z", "relationship_type": "indicates", "source_ref": "indicator--983a8ee7-751f-4b89-90f7-6518ff711d0c", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4736fc1d-b9fd-4aa7-b5c5-925c8d0cedc1", "created": "2026-10-09T15:13:11.020518Z", "modified": "2026-10-09T15:13:11.020518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84bfb3773b04e4298f92bac9c67bb26b827b81cea83e8b33f9b46c3ee01a5c73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.020518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e653db74-e784-43a2-83d0-35ffd2f80c1c", "created": "2026-10-09T15:13:11.021123Z", "modified": "2026-10-09T15:13:11.021123Z", "relationship_type": "indicates", "source_ref": "indicator--4736fc1d-b9fd-4aa7-b5c5-925c8d0cedc1", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211beffe-b778-4430-b0f6-c9b0affc6586", "created": "2026-10-09T15:13:11.021244Z", "modified": "2026-10-09T15:13:11.021244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a54fa05e5b6a856ea55ced361faa72e13789ceb2d90e28f911ba586bd43ff937']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.021244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1551c230-05e3-4b52-9cc5-7169056ad2ff", "created": "2026-10-09T15:13:11.021843Z", "modified": "2026-10-09T15:13:11.021843Z", "relationship_type": "indicates", "source_ref": "indicator--211beffe-b778-4430-b0f6-c9b0affc6586", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e4852d-12b3-4546-95e3-a28cc09ee95c", "created": "2026-10-09T15:13:11.021968Z", "modified": "2026-10-09T15:13:11.021968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c21d11eced9f4f5ff2606530046f45fd20ff1087fbf914b44918a690ac7d556']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.021968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a303827-e2b4-4b8f-bd2a-7d5837d00b8a", "created": "2026-10-09T15:13:11.022567Z", "modified": "2026-10-09T15:13:11.022567Z", "relationship_type": "indicates", "source_ref": "indicator--45e4852d-12b3-4546-95e3-a28cc09ee95c", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248dd83a-fdf4-4479-9dd4-4d9b1070b6a3", "created": "2026-10-09T15:13:11.022696Z", "modified": "2026-10-09T15:13:11.022696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28e92a52070ec1d55e8ffe8a74c4499c05faf9942816f6c1efc495e2939439d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.022696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--113a756b-a303-4396-a51f-a18cd1db7653", "created": "2026-10-09T15:13:11.023296Z", "modified": "2026-10-09T15:13:11.023296Z", "relationship_type": "indicates", "source_ref": "indicator--248dd83a-fdf4-4479-9dd4-4d9b1070b6a3", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2f62ee-107d-40f1-879e-c5950f29a561", "created": "2026-10-09T15:13:11.02342Z", "modified": "2026-10-09T15:13:11.02342Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08476cc59371b4cf91cdb60e7eb947f088b8ae90f8db011e98cbe9ae4110f1c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.02342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9630e4f-a951-4328-96c0-2556c78995e6", "created": "2026-10-09T15:13:11.024101Z", "modified": "2026-10-09T15:13:11.024101Z", "relationship_type": "indicates", "source_ref": "indicator--be2f62ee-107d-40f1-879e-c5950f29a561", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b339e90-4be3-447b-8d73-90cc9d9447c3", "created": "2026-10-09T15:13:11.024222Z", "modified": "2026-10-09T15:13:11.024222Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32cc4cd60db6e1740aff1bce327580c19b1b7704572bb308ade39e19c982c0b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.024222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19147265-fd67-4ab2-b7ac-1030d771aff7", "created": "2026-10-09T15:13:11.024863Z", "modified": "2026-10-09T15:13:11.024863Z", "relationship_type": "indicates", "source_ref": "indicator--2b339e90-4be3-447b-8d73-90cc9d9447c3", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b77ec0-6149-4cb3-8a52-ee02cd000c9a", "created": "2026-10-09T15:13:11.024995Z", "modified": "2026-10-09T15:13:11.024995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f46743fcc63705c337912f831944ff3d7572bf2b5c69e354f95a8401702ba54b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.024995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4248da17-07dd-495b-a07e-392a1e54d35d", "created": "2026-10-09T15:13:11.025653Z", "modified": "2026-10-09T15:13:11.025653Z", "relationship_type": "indicates", "source_ref": "indicator--17b77ec0-6149-4cb3-8a52-ee02cd000c9a", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55301c80-ac2c-4acf-9b78-7cdac637069c", "created": "2026-10-09T15:13:11.025833Z", "modified": "2026-10-09T15:13:11.025833Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3c5bb39e48e777fb32ebf8bf72a338379ab900b450f33087fc4caf3673074ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.025833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8a952a4-8a1c-4e9b-af28-6727dcf38273", "created": "2026-10-09T15:13:11.026545Z", "modified": "2026-10-09T15:13:11.026545Z", "relationship_type": "indicates", "source_ref": "indicator--55301c80-ac2c-4acf-9b78-7cdac637069c", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f493ac0-882b-4979-be4b-bf76728f7542", "created": "2026-10-09T15:13:11.026679Z", "modified": "2026-10-09T15:13:11.026679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb8ce7df08a5dd151f741adce7bc28f05787d50260b79055900f624a04568c5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.026679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5b18532-2025-4b3d-badf-bf4b6799dff8", "created": "2026-10-09T15:13:11.027294Z", "modified": "2026-10-09T15:13:11.027294Z", "relationship_type": "indicates", "source_ref": "indicator--6f493ac0-882b-4979-be4b-bf76728f7542", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726c7674-19e9-4eb9-8e94-ec255287078e", "created": "2026-10-09T15:13:11.027422Z", "modified": "2026-10-09T15:13:11.027422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90fd50cdbc2fb8add2379d58bac5ed191f19e2557083206efc036273c749e0d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.027422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ea1d98e-16e5-4278-8476-6b4dfd082667", "created": "2026-10-09T15:13:11.028006Z", "modified": "2026-10-09T15:13:11.028006Z", "relationship_type": "indicates", "source_ref": "indicator--726c7674-19e9-4eb9-8e94-ec255287078e", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7421ba7d-1526-471f-b172-e7b407268d31", "created": "2026-10-09T15:13:11.028128Z", "modified": "2026-10-09T15:13:11.028128Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ibm.fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.028128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfc82831-151c-4d27-b5d7-2927f38a9cd4", "created": "2026-10-09T15:13:11.02859Z", "modified": "2026-10-09T15:13:11.02859Z", "relationship_type": "indicates", "source_ref": "indicator--7421ba7d-1526-471f-b172-e7b407268d31", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6378c13-fb26-4aa5-9b11-0b221440c29f", "created": "2026-10-09T15:13:11.028738Z", "modified": "2026-10-09T15:13:11.028738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='92EBDB7D7C18A34705A6918B5F327DDB0E8C8452']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.028738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd9e9322-327c-4139-b91e-4b243cf834de", "created": "2026-10-09T15:13:11.029302Z", "modified": "2026-10-09T15:13:11.029302Z", "relationship_type": "indicates", "source_ref": "indicator--a6378c13-fb26-4aa5-9b11-0b221440c29f", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df93d787-bedd-4d06-8e36-3dcba19828f9", "created": "2026-10-09T15:13:11.029428Z", "modified": "2026-10-09T15:13:11.029428Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='558765849658A3821FE4054ED2C1FF6E28B4B8A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.029428Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dd11470-01ef-4a35-a4f5-37f8d79e1848", "created": "2026-10-09T15:13:11.029983Z", "modified": "2026-10-09T15:13:11.029983Z", "relationship_type": "indicates", "source_ref": "indicator--df93d787-bedd-4d06-8e36-3dcba19828f9", "target_ref": "malware--8bc7fb39-2990-4a5a-952c-7c3417ac58c5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787", "created": "2026-10-09T15:13:11.030108Z", "modified": "2026-10-09T15:13:11.030108Z", "name": "TalkLog", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7637d17-ee5e-4d97-ad49-268a23bb66c0", "created": "2026-10-09T15:13:11.030228Z", "modified": "2026-10-09T15:13:11.030228Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='talklog.tools']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.030228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f2f5c54-e4d3-44f3-8fb9-ca41e0dd3ae0", "created": "2026-10-09T15:13:11.030827Z", "modified": "2026-10-09T15:13:11.030827Z", "relationship_type": "indicates", "source_ref": "indicator--d7637d17-ee5e-4d97-ad49-268a23bb66c0", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f575fd-1c54-45ca-b20e-b1ee2939c82b", "created": "2026-10-09T15:13:11.030954Z", "modified": "2026-10-09T15:13:11.030954Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tchsrvce.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.030954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--644be60d-a3cc-4dc8-825c-ba54f8738efc", "created": "2026-10-09T15:13:11.031433Z", "modified": "2026-10-09T15:13:11.031433Z", "relationship_type": "indicates", "source_ref": "indicator--d8f575fd-1c54-45ca-b20e-b1ee2939c82b", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424ddf76-ed2a-4501-a24e-d77ea9311932", "created": "2026-10-09T15:13:11.031559Z", "modified": "2026-10-09T15:13:11.031559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='talklog.tools']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.031559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7561f90-92f8-42c8-b47e-b7cda64c5f5b", "created": "2026-10-09T15:13:11.032026Z", "modified": "2026-10-09T15:13:11.032026Z", "relationship_type": "indicates", "source_ref": "indicator--424ddf76-ed2a-4501-a24e-d77ea9311932", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dae842-f679-43cd-b946-f621147b4136", "created": "2026-10-09T15:13:11.032145Z", "modified": "2026-10-09T15:13:11.032145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='955144eb270f4fc675ef26574e993481759a998c4ba1a578902620601d02ba47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.032145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63ef451c-3f95-4aaf-bd69-b471d63ab056", "created": "2026-10-09T15:13:11.032748Z", "modified": "2026-10-09T15:13:11.032748Z", "relationship_type": "indicates", "source_ref": "indicator--f0dae842-f679-43cd-b946-f621147b4136", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c662efb-692a-4db1-b3ca-723f8df079e4", "created": "2026-10-09T15:13:11.03287Z", "modified": "2026-10-09T15:13:11.03287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09d82667d9d72e8980e78c17898430d05a1419f2e432ee46fae1e40056df1801']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.03287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29a9573c-e7a2-48bd-9865-6a9ef8604a2e", "created": "2026-10-09T15:13:11.033572Z", "modified": "2026-10-09T15:13:11.033572Z", "relationship_type": "indicates", "source_ref": "indicator--6c662efb-692a-4db1-b3ca-723f8df079e4", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09f1387-7aa2-407d-bcb5-72e0ae3c680f", "created": "2026-10-09T15:13:11.033792Z", "modified": "2026-10-09T15:13:11.033792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7b4eae905d4c9a685c97ef0740a23f8228da77f4be0a708034a77cf5252b7f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.033792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eca63e2f-080a-4457-b3ca-2d45b84fe132", "created": "2026-10-09T15:13:11.034792Z", "modified": "2026-10-09T15:13:11.034792Z", "relationship_type": "indicates", "source_ref": "indicator--b09f1387-7aa2-407d-bcb5-72e0ae3c680f", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d735dad-c3dc-4e45-989c-8870d3082fa4", "created": "2026-10-09T15:13:11.035005Z", "modified": "2026-10-09T15:13:11.035005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34751c3eed1420a90320c73b98aa423cde110d873fff9f71fa05476f2abf365d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.035005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae8fdc7b-2c7b-45e2-a62b-fc31f8bf379a", "created": "2026-10-09T15:13:11.035933Z", "modified": "2026-10-09T15:13:11.035933Z", "relationship_type": "indicates", "source_ref": "indicator--5d735dad-c3dc-4e45-989c-8870d3082fa4", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d1f1ae-dd8e-41e8-adb5-9b48a249daea", "created": "2026-10-09T15:13:11.036088Z", "modified": "2026-10-09T15:13:11.036088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83181f0799d197f96d1098fe33d769431ab88f2bb4454e3c4c19a0407e1fbac4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.036088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c6ca8d5-0923-43c6-975c-aca7b31ad730", "created": "2026-10-09T15:13:11.036739Z", "modified": "2026-10-09T15:13:11.036739Z", "relationship_type": "indicates", "source_ref": "indicator--99d1f1ae-dd8e-41e8-adb5-9b48a249daea", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d25d93-ce82-4fa5-9f50-6d95a5dc9a99", "created": "2026-10-09T15:13:11.036876Z", "modified": "2026-10-09T15:13:11.036876Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d578a21430e6ef89019974813b797809375fa2297b35df08175167a2bad96aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.036876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e2990c3-3317-47aa-8123-1ae08b049fe4", "created": "2026-10-09T15:13:11.037768Z", "modified": "2026-10-09T15:13:11.037768Z", "relationship_type": "indicates", "source_ref": "indicator--67d25d93-ce82-4fa5-9f50-6d95a5dc9a99", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1aad4b-d8f4-4963-9dfc-baf6d8966bb0", "created": "2026-10-09T15:13:11.037984Z", "modified": "2026-10-09T15:13:11.037984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06ca308a9b0a6fbbe20d59aa0bece1f5a7c71825e65da83e8069e4c16b82933e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.037984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6768bc48-ebbd-4005-84d1-b46348a0df0b", "created": "2026-10-09T15:13:11.038704Z", "modified": "2026-10-09T15:13:11.038704Z", "relationship_type": "indicates", "source_ref": "indicator--aa1aad4b-d8f4-4963-9dfc-baf6d8966bb0", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e79374d-2296-40a0-bcda-19550b8c5566", "created": "2026-10-09T15:13:11.038837Z", "modified": "2026-10-09T15:13:11.038837Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tech.logsettings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.038837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--785fc9fd-c46f-4aeb-b39b-d67ffdbffcee", "created": "2026-10-09T15:13:11.039319Z", "modified": "2026-10-09T15:13:11.039319Z", "relationship_type": "indicates", "source_ref": "indicator--7e79374d-2296-40a0-bcda-19550b8c5566", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106c77cd-a8f0-400c-a529-826f34e6bbe0", "created": "2026-10-09T15:13:11.039448Z", "modified": "2026-10-09T15:13:11.039448Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='t.tools.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.039448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5e2c2c7-c376-47e2-8868-bb562d71d7f9", "created": "2026-10-09T15:13:11.0399Z", "modified": "2026-10-09T15:13:11.0399Z", "relationship_type": "indicates", "source_ref": "indicator--106c77cd-a8f0-400c-a529-826f34e6bbe0", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55d5e04-adda-4e4a-99ae-51bb28ec2ad5", "created": "2026-10-09T15:13:11.040021Z", "modified": "2026-10-09T15:13:11.040021Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='technic.settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.040021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4be28de-e71c-4abd-b870-e9a4940d44b6", "created": "2026-10-09T15:13:11.040503Z", "modified": "2026-10-09T15:13:11.040503Z", "relationship_type": "indicates", "source_ref": "indicator--a55d5e04-adda-4e4a-99ae-51bb28ec2ad5", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e561eeca-d0fa-4f8b-bde4-b4bd00b9b397", "created": "2026-10-09T15:13:11.04063Z", "modified": "2026-10-09T15:13:11.04063Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='08ACB92D02487EBC0CEA42B672A631BA7EA59ADF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.04063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb61c103-1ca1-409f-91e9-a8d7f0209f73", "created": "2026-10-09T15:13:11.041179Z", "modified": "2026-10-09T15:13:11.041179Z", "relationship_type": "indicates", "source_ref": "indicator--e561eeca-d0fa-4f8b-bde4-b4bd00b9b397", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d948645c-13aa-40ba-b7d3-225f77a125ed", "created": "2026-10-09T15:13:11.041336Z", "modified": "2026-10-09T15:13:11.041336Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AF821DD021558AEDF49730D2892063BD502DEA14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.041336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c4f9d12-e5e4-4e55-be6a-b15651d3a6a6", "created": "2026-10-09T15:13:11.041912Z", "modified": "2026-10-09T15:13:11.041912Z", "relationship_type": "indicates", "source_ref": "indicator--d948645c-13aa-40ba-b7d3-225f77a125ed", "target_ref": "malware--eb0d12b2-b8c0-4abd-8e40-987f2c866787"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32", "created": "2026-10-09T15:13:11.042033Z", "modified": "2026-10-09T15:13:11.042033Z", "name": "SpyMasterPro", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fe73c0-6f59-4516-897c-6a05a8a80925", "created": "2026-10-09T15:13:11.04215Z", "modified": "2026-10-09T15:13:11.04215Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cpcalendars.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.04215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--613a04a3-f07c-437a-826b-a51bcd8b1cf3", "created": "2026-10-09T15:13:11.042659Z", "modified": "2026-10-09T15:13:11.042659Z", "relationship_type": "indicates", "source_ref": "indicator--98fe73c0-6f59-4516-897c-6a05a8a80925", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29be166b-e4b4-4804-99df-95e40605db81", "created": "2026-10-09T15:13:11.04278Z", "modified": "2026-10-09T15:13:11.04278Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cpcontacts.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.04278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4bcdc33-ac3c-4d0b-8c50-590e12ffe964", "created": "2026-10-09T15:13:11.04326Z", "modified": "2026-10-09T15:13:11.04326Z", "relationship_type": "indicates", "source_ref": "indicator--29be166b-e4b4-4804-99df-95e40605db81", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd8fc13-76c7-431e-a8c8-e5c09fdb48cd", "created": "2026-10-09T15:13:11.043395Z", "modified": "2026-10-09T15:13:11.043395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imobispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.043395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a8e7a2a-3f1b-4f72-b3b2-4289b87a9e3d", "created": "2026-10-09T15:13:11.043967Z", "modified": "2026-10-09T15:13:11.043967Z", "relationship_type": "indicates", "source_ref": "indicator--0fd8fc13-76c7-431e-a8c8-e5c09fdb48cd", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd677111-2ee7-45fa-9ba4-7940f99ee6cd", "created": "2026-10-09T15:13:11.044091Z", "modified": "2026-10-09T15:13:11.044091Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='senseye.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.044091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e141457b-26fc-4fc2-8f94-88e4bc6aed1b", "created": "2026-10-09T15:13:11.044584Z", "modified": "2026-10-09T15:13:11.044584Z", "relationship_type": "indicates", "source_ref": "indicator--bd677111-2ee7-45fa-9ba4-7940f99ee6cd", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d4cd9d-bdf2-47e5-ace3-9760d73f42f2", "created": "2026-10-09T15:13:11.044703Z", "modified": "2026-10-09T15:13:11.044703Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spymaster-e535b.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.044703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d277058-3ef0-406e-b544-87238399d67e", "created": "2026-10-09T15:13:11.045189Z", "modified": "2026-10-09T15:13:11.045189Z", "relationship_type": "indicates", "source_ref": "indicator--43d4cd9d-bdf2-47e5-ace3-9760d73f42f2", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55be1fb-8dc9-49cf-8560-185f4844eef2", "created": "2026-10-09T15:13:11.045319Z", "modified": "2026-10-09T15:13:11.045319Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.045319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bb5ecae-ef3e-489a-a42d-3c7d033a25ee", "created": "2026-10-09T15:13:11.045787Z", "modified": "2026-10-09T15:13:11.045787Z", "relationship_type": "indicates", "source_ref": "indicator--a55be1fb-8dc9-49cf-8560-185f4844eef2", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f5beaa-fa87-47d1-9222-692263bea718", "created": "2026-10-09T15:13:11.045915Z", "modified": "2026-10-09T15:13:11.045915Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.045915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1e9200f-9867-4fab-a378-619853297b48", "created": "2026-10-09T15:13:11.046395Z", "modified": "2026-10-09T15:13:11.046395Z", "relationship_type": "indicates", "source_ref": "indicator--21f5beaa-fa87-47d1-9222-692263bea718", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47751dde-8f22-4921-9dcc-8c156e60005f", "created": "2026-10-09T15:13:11.046515Z", "modified": "2026-10-09T15:13:11.046515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99480cb79e0e6a18d18d9c04b329349a582912d50b0f97ce55dad5dcd8fc18ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.046515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a613c23-7de4-4172-827a-b6858cb45cf5", "created": "2026-10-09T15:13:11.047108Z", "modified": "2026-10-09T15:13:11.047108Z", "relationship_type": "indicates", "source_ref": "indicator--47751dde-8f22-4921-9dcc-8c156e60005f", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d9c64c-0904-4cd0-83a4-5d16963ba73c", "created": "2026-10-09T15:13:11.047229Z", "modified": "2026-10-09T15:13:11.047229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1960b6d2b896f2c1178d9556e7c487361c5d5bf2411f78a848d8964adffe0975']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.047229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f46470dd-690d-4c04-9505-4898c9ed456b", "created": "2026-10-09T15:13:11.047847Z", "modified": "2026-10-09T15:13:11.047847Z", "relationship_type": "indicates", "source_ref": "indicator--e3d9c64c-0904-4cd0-83a4-5d16963ba73c", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def11ad2-b5b7-47e0-b8a2-3b47559a8086", "created": "2026-10-09T15:13:11.047971Z", "modified": "2026-10-09T15:13:11.047971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc3da15651bc456152f26f76509e024b690618d1d06886e5d0c0a6d573245dfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.047971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a902ba8c-0ce1-47ec-9917-e9598cfc91b6", "created": "2026-10-09T15:13:11.048567Z", "modified": "2026-10-09T15:13:11.048567Z", "relationship_type": "indicates", "source_ref": "indicator--def11ad2-b5b7-47e0-b8a2-3b47559a8086", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470d449f-5cc6-4883-a623-f1ec644f98e0", "created": "2026-10-09T15:13:11.048688Z", "modified": "2026-10-09T15:13:11.048688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21d3cf611dd719a096b06e5536eb1b93c87fbd0f53f1e70c7010abca73b07e46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.048688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed89a32b-70c4-4b42-a207-6f7172b4cef4", "created": "2026-10-09T15:13:11.049279Z", "modified": "2026-10-09T15:13:11.049279Z", "relationship_type": "indicates", "source_ref": "indicator--470d449f-5cc6-4883-a623-f1ec644f98e0", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2979a8cf-734c-4aa1-9676-5337e89d903c", "created": "2026-10-09T15:13:11.049403Z", "modified": "2026-10-09T15:13:11.049403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ce679c93d4fc3d16bd896c3724365d405e4e610983c728c0b96a1c2f86607db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.049403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc996f88-6bde-455d-a18d-08fb09ae8a99", "created": "2026-10-09T15:13:11.050095Z", "modified": "2026-10-09T15:13:11.050095Z", "relationship_type": "indicates", "source_ref": "indicator--2979a8cf-734c-4aa1-9676-5337e89d903c", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873e451c-6b9d-4ad6-8674-38f5a5d6f0b5", "created": "2026-10-09T15:13:11.050222Z", "modified": "2026-10-09T15:13:11.050222Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce7ee8f073f101eb56e2a6467a9c1e68eb54594a0925ee007359db7db8fbab3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.050222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1695f85c-db62-49ee-8b65-c8a3460adefc", "created": "2026-10-09T15:13:11.050819Z", "modified": "2026-10-09T15:13:11.050819Z", "relationship_type": "indicates", "source_ref": "indicator--873e451c-6b9d-4ad6-8674-38f5a5d6f0b5", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133a2e88-e9c5-451c-9799-4ef4ae637588", "created": "2026-10-09T15:13:11.050947Z", "modified": "2026-10-09T15:13:11.050947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fbd7995982f96211b3b3b1bc9dda0e3bdcfca6dce8fd5e5e1095517cfebdc9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.050947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0e0d558-7fa1-4cb7-a863-095ce0c98a7f", "created": "2026-10-09T15:13:11.051562Z", "modified": "2026-10-09T15:13:11.051562Z", "relationship_type": "indicates", "source_ref": "indicator--133a2e88-e9c5-451c-9799-4ef4ae637588", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5c2093-a443-423f-8f0a-f65e3ad5f860", "created": "2026-10-09T15:13:11.051691Z", "modified": "2026-10-09T15:13:11.051691Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='iqual.calculadora.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.051691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b390caa7-c932-4a37-925a-d54b027f7d1a", "created": "2026-10-09T15:13:11.05215Z", "modified": "2026-10-09T15:13:11.05215Z", "relationship_type": "indicates", "source_ref": "indicator--2c5c2093-a443-423f-8f0a-f65e3ad5f860", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a9666d-6e94-428e-81b8-c5c212f8adaa", "created": "2026-10-09T15:13:11.0523Z", "modified": "2026-10-09T15:13:11.0523Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.semantic.childcontrol']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.0523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--617c0bf5-5a22-4d60-9c6a-7030daf2b985", "created": "2026-10-09T15:13:11.052782Z", "modified": "2026-10-09T15:13:11.052782Z", "relationship_type": "indicates", "source_ref": "indicator--58a9666d-6e94-428e-81b8-c5c212f8adaa", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8611c0b8-ef10-43d7-bc2a-472472ec6920", "created": "2026-10-09T15:13:11.052906Z", "modified": "2026-10-09T15:13:11.052906Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8AD595A53B76014B7B919ED231DB372096D358E7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.052906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8783d7fd-c2e3-4972-b28c-3ff6371fc0d1", "created": "2026-10-09T15:13:11.053465Z", "modified": "2026-10-09T15:13:11.053465Z", "relationship_type": "indicates", "source_ref": "indicator--8611c0b8-ef10-43d7-bc2a-472472ec6920", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8137cc4e-ce2d-4cb1-9fb0-d4fc9f0fff19", "created": "2026-10-09T15:13:11.053594Z", "modified": "2026-10-09T15:13:11.053594Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C8BAE63357CA1DCD9B084BCC99399C96A5B67D49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.053594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac0fe2cf-b733-4234-b0df-106146ac7aa3", "created": "2026-10-09T15:13:11.054129Z", "modified": "2026-10-09T15:13:11.054129Z", "relationship_type": "indicates", "source_ref": "indicator--8137cc4e-ce2d-4cb1-9fb0-d4fc9f0fff19", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ef6170-2b72-4754-a9ff-d7fcd8a21c10", "created": "2026-10-09T15:13:11.054249Z", "modified": "2026-10-09T15:13:11.054249Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B07A93BC509C0AE614AEAFFCD6B56797CD02166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.054249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7d4e42f-3a0e-4623-adee-698367a70064", "created": "2026-10-09T15:13:11.054802Z", "modified": "2026-10-09T15:13:11.054802Z", "relationship_type": "indicates", "source_ref": "indicator--36ef6170-2b72-4754-a9ff-d7fcd8a21c10", "target_ref": "malware--0aab2656-f01a-4d0a-ad92-f25a1544fe32"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a", "created": "2026-10-09T15:13:11.054921Z", "modified": "2026-10-09T15:13:11.054921Z", "name": "FreeAndroidSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff2e5c6-8000-4aa7-9335-8064f195237f", "created": "2026-10-09T15:13:11.055042Z", "modified": "2026-10-09T15:13:11.055042Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='server.freeandroidspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.055042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--869e081d-46f4-488b-bed5-ce3056b04f34", "created": "2026-10-09T15:13:11.05555Z", "modified": "2026-10-09T15:13:11.05555Z", "relationship_type": "indicates", "source_ref": "indicator--5ff2e5c6-8000-4aa7-9335-8064f195237f", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508f6371-f14e-4e7c-9de4-2f13fbd1f8ac", "created": "2026-10-09T15:13:11.05567Z", "modified": "2026-10-09T15:13:11.05567Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spysetup.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.05567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62b518fe-f692-4945-acdc-72d6b726f172", "created": "2026-10-09T15:13:11.05624Z", "modified": "2026-10-09T15:13:11.05624Z", "relationship_type": "indicates", "source_ref": "indicator--508f6371-f14e-4e7c-9de4-2f13fbd1f8ac", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d6f14b-5d42-49d6-ad9b-e55d0cf8e8ca", "created": "2026-10-09T15:13:11.056434Z", "modified": "2026-10-09T15:13:11.056434Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freeandroidspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.056434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a01a662b-a444-43f7-90ef-e2e0bb560e8c", "created": "2026-10-09T15:13:11.056935Z", "modified": "2026-10-09T15:13:11.056935Z", "relationship_type": "indicates", "source_ref": "indicator--72d6f14b-5d42-49d6-ad9b-e55d0cf8e8ca", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe3ad6f-3162-4c0f-8944-101fea3f5dd1", "created": "2026-10-09T15:13:11.057058Z", "modified": "2026-10-09T15:13:11.057058Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e895a03867bcda5c6771e2dd981bd07e78d69fc47f8253c9bc733f3f0d431bc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.057058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e0d21b1-e32f-4413-92d2-5f067474ce5e", "created": "2026-10-09T15:13:11.057662Z", "modified": "2026-10-09T15:13:11.057662Z", "relationship_type": "indicates", "source_ref": "indicator--fbe3ad6f-3162-4c0f-8944-101fea3f5dd1", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22272d8-0a29-4fac-8f8d-92afe1ee5c8e", "created": "2026-10-09T15:13:11.057792Z", "modified": "2026-10-09T15:13:11.057792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5386637ed1ae2f5b3a4fdb2bb6d59230edaf023d5ae7a50f7552b9dc1c4d904f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.057792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22425919-ccaf-4b2f-9da5-d786ac480687", "created": "2026-10-09T15:13:11.058397Z", "modified": "2026-10-09T15:13:11.058397Z", "relationship_type": "indicates", "source_ref": "indicator--a22272d8-0a29-4fac-8f8d-92afe1ee5c8e", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb786ce-6efd-4666-b58a-230108dcc922", "created": "2026-10-09T15:13:11.058528Z", "modified": "2026-10-09T15:13:11.058528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6d5f8471274537c6e1ecd9c53fb4e7c1d06e7e6b586e6ac95dd9096eee07b9b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.058528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9f70d02-9ec1-4164-9d45-f91e291834cf", "created": "2026-10-09T15:13:11.059115Z", "modified": "2026-10-09T15:13:11.059115Z", "relationship_type": "indicates", "source_ref": "indicator--adb786ce-6efd-4666-b58a-230108dcc922", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b95699-987e-4472-bd26-7e8c01f22eff", "created": "2026-10-09T15:13:11.059243Z", "modified": "2026-10-09T15:13:11.059243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='749667bea97d371734259404b9b4a1557dad9fb5596660d3dbe323c83f157b49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.059243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3084a3e-5c6b-47c9-84e9-f032f09de117", "created": "2026-10-09T15:13:11.059852Z", "modified": "2026-10-09T15:13:11.059852Z", "relationship_type": "indicates", "source_ref": "indicator--d2b95699-987e-4472-bd26-7e8c01f22eff", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01ed35a-8060-4700-9472-992483a74de1", "created": "2026-10-09T15:13:11.059971Z", "modified": "2026-10-09T15:13:11.059971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9fdd914ac9c092a2ddc81b201366b7aee38e1f497e4414ca5e188f916f5c3e5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.059971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f60d224c-5699-4aee-81b7-17c415ce91f1", "created": "2026-10-09T15:13:11.060566Z", "modified": "2026-10-09T15:13:11.060566Z", "relationship_type": "indicates", "source_ref": "indicator--d01ed35a-8060-4700-9472-992483a74de1", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8510c4ee-89d9-4998-8810-684d419140a5", "created": "2026-10-09T15:13:11.060686Z", "modified": "2026-10-09T15:13:11.060686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0ccb71872cbffced0b37f086f8931ac85fff069fb007e85070040a474506fa6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.060686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db43e8c6-7a21-44df-b0b0-a3e26daddd3e", "created": "2026-10-09T15:13:11.061289Z", "modified": "2026-10-09T15:13:11.061289Z", "relationship_type": "indicates", "source_ref": "indicator--8510c4ee-89d9-4998-8810-684d419140a5", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bba111-05f8-4967-97f8-770e7edd2472", "created": "2026-10-09T15:13:11.061411Z", "modified": "2026-10-09T15:13:11.061411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85dca8977149b67f508d0d71a7b39d2f08ebbce35c2d20d3df181f4f69736a67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.061411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7597fefd-3f7d-46f9-8e09-b50798748055", "created": "2026-10-09T15:13:11.061999Z", "modified": "2026-10-09T15:13:11.061999Z", "relationship_type": "indicates", "source_ref": "indicator--09bba111-05f8-4967-97f8-770e7edd2472", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac1b43a-a08e-402e-985e-c9a8c7b5fa17", "created": "2026-10-09T15:13:11.06213Z", "modified": "2026-10-09T15:13:11.06213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e9d6591f478a2d052c5115e9e419e601f08dfa1f7e79c99400bda76f344fba27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.06213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d75715ee-bb7a-423c-b1d6-c3371fc3a174", "created": "2026-10-09T15:13:11.062848Z", "modified": "2026-10-09T15:13:11.062848Z", "relationship_type": "indicates", "source_ref": "indicator--cac1b43a-a08e-402e-985e-c9a8c7b5fa17", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f536a5c-9dfd-4621-a73a-95ade03c565c", "created": "2026-10-09T15:13:11.062975Z", "modified": "2026-10-09T15:13:11.062975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d88b78792588653d1fec3ac5d5c8c2fc48d1b45f4a43e13516efd28b9d369b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.062975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19a3a007-2b75-412d-bdaa-778fc3f2ffc0", "created": "2026-10-09T15:13:11.063578Z", "modified": "2026-10-09T15:13:11.063578Z", "relationship_type": "indicates", "source_ref": "indicator--0f536a5c-9dfd-4621-a73a-95ade03c565c", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf14bb8c-d88a-4405-8624-6aa2db630c3c", "created": "2026-10-09T15:13:11.0637Z", "modified": "2026-10-09T15:13:11.0637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96fa9419cfc95046327bf9d991a27dbc554f59de768221a246dfd6aa45a8fdf3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.0637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--237a1456-e1f0-4a7f-804e-1e17141b4df4", "created": "2026-10-09T15:13:11.06429Z", "modified": "2026-10-09T15:13:11.06429Z", "relationship_type": "indicates", "source_ref": "indicator--cf14bb8c-d88a-4405-8624-6aa2db630c3c", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccc407f-aa68-49bc-9eca-f25b052d3721", "created": "2026-10-09T15:13:11.064413Z", "modified": "2026-10-09T15:13:11.064413Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8118ec1cf205de9f55d04651dbb6b57e24bf9e24df01bfef2b2e973c291e5472']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.064413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9690c718-285f-4b16-9076-2cde3dead7f0", "created": "2026-10-09T15:13:11.065002Z", "modified": "2026-10-09T15:13:11.065002Z", "relationship_type": "indicates", "source_ref": "indicator--5ccc407f-aa68-49bc-9eca-f25b052d3721", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd046558-af1b-4fd0-95bb-12bc664b63e7", "created": "2026-10-09T15:13:11.065121Z", "modified": "2026-10-09T15:13:11.065121Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee06a32ffc5c6d3295aa951065cb330c2d8f45366ef3078929fc3c25f31a1f77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.065121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--871f40de-7f7d-4dd1-812e-f010be554d0c", "created": "2026-10-09T15:13:11.065726Z", "modified": "2026-10-09T15:13:11.065726Z", "relationship_type": "indicates", "source_ref": "indicator--dd046558-af1b-4fd0-95bb-12bc664b63e7", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b21b05-cb4c-46e8-bfbb-5fd812efd2c3", "created": "2026-10-09T15:13:11.065851Z", "modified": "2026-10-09T15:13:11.065851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='873524677903fb69a7838ef1a9c1852fe46db32fb667a2167d95c2ccfd4ae099']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.065851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa21bf8e-674c-41d9-8a5e-e7dfcec21d29", "created": "2026-10-09T15:13:11.066454Z", "modified": "2026-10-09T15:13:11.066454Z", "relationship_type": "indicates", "source_ref": "indicator--e9b21b05-cb4c-46e8-bfbb-5fd812efd2c3", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d30c90-c3db-43f3-a8c1-e2c096487be3", "created": "2026-10-09T15:13:11.066583Z", "modified": "2026-10-09T15:13:11.066583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b23f43efa5f44647551affd92d6ccd60fae79b8a682b7d60bc16ef5913b55f9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.066583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51e20c1b-0963-4df7-906e-92656441f2f1", "created": "2026-10-09T15:13:11.067185Z", "modified": "2026-10-09T15:13:11.067185Z", "relationship_type": "indicates", "source_ref": "indicator--89d30c90-c3db-43f3-a8c1-e2c096487be3", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c7cb08-358c-4279-bd73-711336d8543d", "created": "2026-10-09T15:13:11.067324Z", "modified": "2026-10-09T15:13:11.067324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fbdfc5f2d2342c520076c273db0ae794a61263ea810ec2165e2dd19c836fb1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.067324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ba4fb3f-2404-4c78-8601-d3de8109629c", "created": "2026-10-09T15:13:11.067908Z", "modified": "2026-10-09T15:13:11.067908Z", "relationship_type": "indicates", "source_ref": "indicator--75c7cb08-358c-4279-bd73-711336d8543d", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbce2ef-fea8-48fc-a211-849bdfab3433", "created": "2026-10-09T15:13:11.068027Z", "modified": "2026-10-09T15:13:11.068027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0007d207f49016472ed3581fabd1eadf472429aa451db4fc305cef4cfe3cd601']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.068027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--814b7df1-08fb-434f-8c13-f0cc3e2dd26d", "created": "2026-10-09T15:13:11.068628Z", "modified": "2026-10-09T15:13:11.068628Z", "relationship_type": "indicates", "source_ref": "indicator--afbce2ef-fea8-48fc-a211-849bdfab3433", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e5aeb3-bded-4085-8c7c-9520d5e0b648", "created": "2026-10-09T15:13:11.068749Z", "modified": "2026-10-09T15:13:11.068749Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cfa9148c3b2b17de4531404b398ae9b2ebbc210aeef1ca5d68dd2f5c3c3341b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.068749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--303ad117-9b51-4c5f-98b5-7a1dc7bb5d63", "created": "2026-10-09T15:13:11.069446Z", "modified": "2026-10-09T15:13:11.069446Z", "relationship_type": "indicates", "source_ref": "indicator--b0e5aeb3-bded-4085-8c7c-9520d5e0b648", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d13274-2832-4d03-a166-0b46e14d863e", "created": "2026-10-09T15:13:11.06957Z", "modified": "2026-10-09T15:13:11.06957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a399c37514b718bb5bd4b483dd5537c5558427562c3e525952dfada49674ddee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.06957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9055cae3-2d6d-479e-8b6d-bce8bd5ea773", "created": "2026-10-09T15:13:11.070153Z", "modified": "2026-10-09T15:13:11.070153Z", "relationship_type": "indicates", "source_ref": "indicator--42d13274-2832-4d03-a166-0b46e14d863e", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56856bc-31cb-408e-a282-c5d6eed9a0b8", "created": "2026-10-09T15:13:11.070284Z", "modified": "2026-10-09T15:13:11.070284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38e4279786f5ff98b1194dc76c51488b71767e553a37d681d1d90c31d54a34f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.070284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a0b1abf-c67c-4aa5-a6a8-421a75d0b541", "created": "2026-10-09T15:13:11.070875Z", "modified": "2026-10-09T15:13:11.070875Z", "relationship_type": "indicates", "source_ref": "indicator--a56856bc-31cb-408e-a282-c5d6eed9a0b8", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73e3678-f57f-40f3-906b-535c5c42dd07", "created": "2026-10-09T15:13:11.070995Z", "modified": "2026-10-09T15:13:11.070995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06c8650d84a7862fc8bc520578a7f3a5ca754d165d020c07a041af81577f9d8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.070995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9444c245-f800-4fa1-9ac3-1e8070e16ff5", "created": "2026-10-09T15:13:11.071585Z", "modified": "2026-10-09T15:13:11.071585Z", "relationship_type": "indicates", "source_ref": "indicator--b73e3678-f57f-40f3-906b-535c5c42dd07", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b5ea12-a88d-4859-a12b-c8822a371bff", "created": "2026-10-09T15:13:11.071705Z", "modified": "2026-10-09T15:13:11.071705Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3f7090fcb11816cab2b5bd0f495da8cf017575cb52c8f57da9964693eb63a91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.071705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e0bd261-3d5e-46a9-83f1-c4b2685cfe79", "created": "2026-10-09T15:13:11.07229Z", "modified": "2026-10-09T15:13:11.07229Z", "relationship_type": "indicates", "source_ref": "indicator--79b5ea12-a88d-4859-a12b-c8822a371bff", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8caf1cf-ee78-4556-b2a9-f3fa6c2742d7", "created": "2026-10-09T15:13:11.072409Z", "modified": "2026-10-09T15:13:11.072409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c0d5a7f4f9c1453f80c38ea73d1f905030423cf607be8e6092e5629fe807fe8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.072409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b17e4d9-1d18-4e09-b03b-b7b1f946d7c1", "created": "2026-10-09T15:13:11.072986Z", "modified": "2026-10-09T15:13:11.072986Z", "relationship_type": "indicates", "source_ref": "indicator--a8caf1cf-ee78-4556-b2a9-f3fa6c2742d7", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff25e78-eeef-4da3-a874-27d0e26f3a67", "created": "2026-10-09T15:13:11.073109Z", "modified": "2026-10-09T15:13:11.073109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4788449e69d489ad965d1535964f60ddfd71102696fbb7df6f8d2f415f38c755']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.073109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e68e2d0-2440-4c66-8801-ec7a24bdde4f", "created": "2026-10-09T15:13:11.073696Z", "modified": "2026-10-09T15:13:11.073696Z", "relationship_type": "indicates", "source_ref": "indicator--6ff25e78-eeef-4da3-a874-27d0e26f3a67", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5933f11-c4c4-4e1f-a37a-2a33ba971afa", "created": "2026-10-09T15:13:11.073817Z", "modified": "2026-10-09T15:13:11.073817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='faae13d358c47a1d581e4b60f7bcdd46d4483e4ab455a38488237e899d744a8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.073817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e217e368-cbfe-4721-90aa-1c15ac2c78bc", "created": "2026-10-09T15:13:11.074404Z", "modified": "2026-10-09T15:13:11.074404Z", "relationship_type": "indicates", "source_ref": "indicator--b5933f11-c4c4-4e1f-a37a-2a33ba971afa", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14645f4e-eb38-4e4e-a594-205e14877dc0", "created": "2026-10-09T15:13:11.074527Z", "modified": "2026-10-09T15:13:11.074527Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='169c9e2ecc84db4f4728569ef4739d8e7f1fe698f548d7ecd1380729ac16b1cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.074527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a34ca7bd-4a8a-455a-8ed0-b60a370091c6", "created": "2026-10-09T15:13:11.075578Z", "modified": "2026-10-09T15:13:11.075578Z", "relationship_type": "indicates", "source_ref": "indicator--14645f4e-eb38-4e4e-a594-205e14877dc0", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807a6811-c3eb-46b8-ad18-d83a27aa6bdd", "created": "2026-10-09T15:13:11.075708Z", "modified": "2026-10-09T15:13:11.075708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d77c5dbcf3d4c076aeadd456d589ebe292c6a0560e48b29a4eba9bdc6232bab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.075708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4955b627-0517-47e5-ba30-0119698a3a58", "created": "2026-10-09T15:13:11.076306Z", "modified": "2026-10-09T15:13:11.076306Z", "relationship_type": "indicates", "source_ref": "indicator--807a6811-c3eb-46b8-ad18-d83a27aa6bdd", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3500d3-3263-47d1-a8a3-b94e367aa1ee", "created": "2026-10-09T15:13:11.076431Z", "modified": "2026-10-09T15:13:11.076431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69445f64ff1a4fd92cfbe5f0db84aa084c6d6ef7212410c101b9a750777a47a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.076431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4d5ed81-b796-49f6-b7af-788064c083aa", "created": "2026-10-09T15:13:11.077018Z", "modified": "2026-10-09T15:13:11.077018Z", "relationship_type": "indicates", "source_ref": "indicator--6f3500d3-3263-47d1-a8a3-b94e367aa1ee", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daba5ace-96da-4227-90c7-6c6148d1b1e2", "created": "2026-10-09T15:13:11.077145Z", "modified": "2026-10-09T15:13:11.077145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48393781bbbab26778a14371dbb30ce1d36a42efe420b376f9df41c85fb14d0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.077145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c7769ff-2ca0-46c9-bfc3-25f46e9e63fa", "created": "2026-10-09T15:13:11.077743Z", "modified": "2026-10-09T15:13:11.077743Z", "relationship_type": "indicates", "source_ref": "indicator--daba5ace-96da-4227-90c7-6c6148d1b1e2", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a0cc36-1c90-4501-aae9-a4c8b91d147a", "created": "2026-10-09T15:13:11.077869Z", "modified": "2026-10-09T15:13:11.077869Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1894d7f1610cdfb98680c84358ee64565eb2ff6944b17517e8f7b7fe5ec9057c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.077869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cbd3a05-ff3f-4b3b-ae9e-7e243efe6856", "created": "2026-10-09T15:13:11.078473Z", "modified": "2026-10-09T15:13:11.078473Z", "relationship_type": "indicates", "source_ref": "indicator--35a0cc36-1c90-4501-aae9-a4c8b91d147a", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d8e5c3-ab31-4e3a-aba4-3412e1140657", "created": "2026-10-09T15:13:11.078598Z", "modified": "2026-10-09T15:13:11.078598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf2ff3e87634115f53a42c705529b2b4155f2a9a29a22fb1188674cba567a158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.078598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab057e00-1495-459b-881d-4bcc2cb5ffda", "created": "2026-10-09T15:13:11.079183Z", "modified": "2026-10-09T15:13:11.079183Z", "relationship_type": "indicates", "source_ref": "indicator--b9d8e5c3-ab31-4e3a-aba4-3412e1140657", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67083816-7ec4-40bc-83ee-b663839bb34e", "created": "2026-10-09T15:13:11.079313Z", "modified": "2026-10-09T15:13:11.079313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7563435e4d86add1c11e66212228cd7b8aea93e612368811ea67f295159906c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.079313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2709c299-80f5-4f78-8e43-f4bff00bc3d5", "created": "2026-10-09T15:13:11.079893Z", "modified": "2026-10-09T15:13:11.079893Z", "relationship_type": "indicates", "source_ref": "indicator--67083816-7ec4-40bc-83ee-b663839bb34e", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d997f14-4d7a-49b3-a1ef-a1078461e6cd", "created": "2026-10-09T15:13:11.080012Z", "modified": "2026-10-09T15:13:11.080012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5d3bc0c7fe63f67c451aa938a42ab0fae873d499d97f9b43106c871481f3481']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.080012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--266ac0db-1eff-4324-8fb4-e2c3a91f68c4", "created": "2026-10-09T15:13:11.080604Z", "modified": "2026-10-09T15:13:11.080604Z", "relationship_type": "indicates", "source_ref": "indicator--4d997f14-4d7a-49b3-a1ef-a1078461e6cd", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc837c9-c498-4f7f-aafc-cbc7b6361889", "created": "2026-10-09T15:13:11.080728Z", "modified": "2026-10-09T15:13:11.080728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da94945e6ac3b147aa513a97a0f1d5eeb6ecd2c44acd924d8daf33b145e01217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.080728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8337e6e-adee-4cc8-8050-2076c5812364", "created": "2026-10-09T15:13:11.081323Z", "modified": "2026-10-09T15:13:11.081323Z", "relationship_type": "indicates", "source_ref": "indicator--4fc837c9-c498-4f7f-aafc-cbc7b6361889", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a431b226-7399-40fb-8b2a-dec205d991bf", "created": "2026-10-09T15:13:11.081445Z", "modified": "2026-10-09T15:13:11.081445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='674e55e45785f58ac50bb3fa497763ba0c227a1918b11f75fc9c14db9ee57d1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.081445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d14e138f-1a85-4d36-ba0d-c74fe5b80458", "created": "2026-10-09T15:13:11.082145Z", "modified": "2026-10-09T15:13:11.082145Z", "relationship_type": "indicates", "source_ref": "indicator--a431b226-7399-40fb-8b2a-dec205d991bf", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c746b2-2533-4500-99d3-6ad44b366dd8", "created": "2026-10-09T15:13:11.082279Z", "modified": "2026-10-09T15:13:11.082279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9153ecfdd76002e66315a4b18374bf3862a887090b6220b2c6bcbb6a05d1d27e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.082279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3689656-15fe-4393-b1c4-1ccf3e5b2d7a", "created": "2026-10-09T15:13:11.082864Z", "modified": "2026-10-09T15:13:11.082864Z", "relationship_type": "indicates", "source_ref": "indicator--a1c746b2-2533-4500-99d3-6ad44b366dd8", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67f01dc-35b2-4541-b3f0-b9c7a2f273bd", "created": "2026-10-09T15:13:11.082985Z", "modified": "2026-10-09T15:13:11.082985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85ad148ef303574ffd6c7e3d98bec0f92db9666a1453dba00616518d3ac39905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.082985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74a469fb-a368-484f-b59a-cbbe8bcbe60a", "created": "2026-10-09T15:13:11.083576Z", "modified": "2026-10-09T15:13:11.083576Z", "relationship_type": "indicates", "source_ref": "indicator--c67f01dc-35b2-4541-b3f0-b9c7a2f273bd", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9443c06e-5b35-4158-aad3-b964b63fa666", "created": "2026-10-09T15:13:11.083699Z", "modified": "2026-10-09T15:13:11.083699Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a9e222a1c9a13ede9f5b7a0a58fea50aa90884702c0ee82ea6f94548d7b117f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.083699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--060a2a89-9c5a-4e6b-9537-66639d1efeb3", "created": "2026-10-09T15:13:11.08429Z", "modified": "2026-10-09T15:13:11.08429Z", "relationship_type": "indicates", "source_ref": "indicator--9443c06e-5b35-4158-aad3-b964b63fa666", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacf0c70-2b1d-45c4-bb7f-d67800836553", "created": "2026-10-09T15:13:11.084412Z", "modified": "2026-10-09T15:13:11.084412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3950f6aa3054901e2ce3baf83aea7fabef9c0e3af68e35e1a4b25b84d7f4a44c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.084412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c709f9e-a537-4629-a644-734b7c65a10c", "created": "2026-10-09T15:13:11.084999Z", "modified": "2026-10-09T15:13:11.084999Z", "relationship_type": "indicates", "source_ref": "indicator--bacf0c70-2b1d-45c4-bb7f-d67800836553", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98520b31-ab7c-4801-aac5-6caffdf0dfee", "created": "2026-10-09T15:13:11.08512Z", "modified": "2026-10-09T15:13:11.08512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7efdb2d71c6fa3484eee91e3be14b24b48a4927d3c48f6e883209bd19c9cf0c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.08512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a5e5fcd-bc65-4fce-a892-db88938e3699", "created": "2026-10-09T15:13:11.085717Z", "modified": "2026-10-09T15:13:11.085717Z", "relationship_type": "indicates", "source_ref": "indicator--98520b31-ab7c-4801-aac5-6caffdf0dfee", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84199447-a17e-4873-af6b-df22fe22303f", "created": "2026-10-09T15:13:11.085838Z", "modified": "2026-10-09T15:13:11.085838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f590b372192b570bf7b9f93dcf221c65c5ae709b50752c761368fb27c3d85852']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.085838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6b3c35f-9d63-4580-aa52-ff249e2d0f5c", "created": "2026-10-09T15:13:11.086432Z", "modified": "2026-10-09T15:13:11.086432Z", "relationship_type": "indicates", "source_ref": "indicator--84199447-a17e-4873-af6b-df22fe22303f", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a116d94-7abf-4039-af89-6da49e6ff5ad", "created": "2026-10-09T15:13:11.086558Z", "modified": "2026-10-09T15:13:11.086558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ebd145afe76b4b97c4ceb512791913392607d4e612c6fd556f49b289017a28e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.086558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0727673-a0cb-4bc1-b149-0cd511d63bc0", "created": "2026-10-09T15:13:11.087155Z", "modified": "2026-10-09T15:13:11.087155Z", "relationship_type": "indicates", "source_ref": "indicator--5a116d94-7abf-4039-af89-6da49e6ff5ad", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71ce34e-a980-48c6-9b9f-865c7a8200eb", "created": "2026-10-09T15:13:11.08729Z", "modified": "2026-10-09T15:13:11.08729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b945aa55a1ce51d7677a802683bde9de97f185cf14b82a73eb23c02e76233efd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.08729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17ab2eb3-bc84-4776-8243-4c46c853b049", "created": "2026-10-09T15:13:11.087872Z", "modified": "2026-10-09T15:13:11.087872Z", "relationship_type": "indicates", "source_ref": "indicator--d71ce34e-a980-48c6-9b9f-865c7a8200eb", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bbea3f-2fa6-4225-9e7c-7fb38b368538", "created": "2026-10-09T15:13:11.087991Z", "modified": "2026-10-09T15:13:11.087991Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hp.vd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.087991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e481a8d-64e6-4228-8b1e-51c872a60229", "created": "2026-10-09T15:13:11.088557Z", "modified": "2026-10-09T15:13:11.088557Z", "relationship_type": "indicates", "source_ref": "indicator--26bbea3f-2fa6-4225-9e7c-7fb38b368538", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f275ce-0c9d-48d9-a26e-7aec2e42d92e", "created": "2026-10-09T15:13:11.088682Z", "modified": "2026-10-09T15:13:11.088682Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hp.vc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.088682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--296d40f6-888c-48e6-b990-fdf397faee05", "created": "2026-10-09T15:13:11.089126Z", "modified": "2026-10-09T15:13:11.089126Z", "relationship_type": "indicates", "source_ref": "indicator--86f275ce-0c9d-48d9-a26e-7aec2e42d92e", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c1d60a-fd8d-41df-b5be-e3876182b694", "created": "2026-10-09T15:13:11.089252Z", "modified": "2026-10-09T15:13:11.089252Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E0103BF20E95E826920A3F0F7B3BD03A899127D7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.089252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c96c7f1f-a00d-4dc8-8b0d-9cf25372aeed", "created": "2026-10-09T15:13:11.089821Z", "modified": "2026-10-09T15:13:11.089821Z", "relationship_type": "indicates", "source_ref": "indicator--24c1d60a-fd8d-41df-b5be-e3876182b694", "target_ref": "malware--0f07fc98-b051-4f81-8f2d-bf554191608a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048", "created": "2026-10-09T15:13:11.089946Z", "modified": "2026-10-09T15:13:11.089946Z", "name": "NetSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fb54c9-f929-4c58-b343-7b2e19287ab6", "created": "2026-10-09T15:13:11.090069Z", "modified": "2026-10-09T15:13:11.090069Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='netspy-7b8ec.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.090069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71a00c70-229b-42fd-92f4-bf674fc32008", "created": "2026-10-09T15:13:11.090564Z", "modified": "2026-10-09T15:13:11.090564Z", "relationship_type": "indicates", "source_ref": "indicator--78fb54c9-f929-4c58-b343-7b2e19287ab6", "target_ref": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72b966a-2a67-40b7-b72a-9ca893bcdc44", "created": "2026-10-09T15:13:11.090685Z", "modified": "2026-10-09T15:13:11.090685Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.netspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.090685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e406e033-b7e2-4c06-b380-ca151626b722", "created": "2026-10-09T15:13:11.091145Z", "modified": "2026-10-09T15:13:11.091145Z", "relationship_type": "indicates", "source_ref": "indicator--a72b966a-2a67-40b7-b72a-9ca893bcdc44", "target_ref": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a9f577-779c-4519-abc0-a5e324fbaac3", "created": "2026-10-09T15:13:11.091262Z", "modified": "2026-10-09T15:13:11.091262Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='netspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.091262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08ca49e3-7f3d-4750-bc30-9197fc6d78bd", "created": "2026-10-09T15:13:11.091755Z", "modified": "2026-10-09T15:13:11.091755Z", "relationship_type": "indicates", "source_ref": "indicator--42a9f577-779c-4519-abc0-a5e324fbaac3", "target_ref": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4131d2-cfe6-44f8-abec-ce202dad279b", "created": "2026-10-09T15:13:11.091877Z", "modified": "2026-10-09T15:13:11.091877Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5dc4f281c4def955616c97402dae29d3d4fc7ac6b63d4e54c21f6baf2d36c35c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.091877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30c6f776-9b07-49cd-ac44-32f8d12b800f", "created": "2026-10-09T15:13:11.092485Z", "modified": "2026-10-09T15:13:11.092485Z", "relationship_type": "indicates", "source_ref": "indicator--2b4131d2-cfe6-44f8-abec-ce202dad279b", "target_ref": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72798007-2bca-4885-b582-a78e045cee92", "created": "2026-10-09T15:13:11.092611Z", "modified": "2026-10-09T15:13:11.092611Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.googleplay.settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.092611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f3797e1-051b-4455-a581-052754c21e41", "created": "2026-10-09T15:13:11.093075Z", "modified": "2026-10-09T15:13:11.093075Z", "relationship_type": "indicates", "source_ref": "indicator--72798007-2bca-4885-b582-a78e045cee92", "target_ref": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7941242-e408-4172-8a49-4cb899ee664d", "created": "2026-10-09T15:13:11.093197Z", "modified": "2026-10-09T15:13:11.093197Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A4E169AAF0068A1FC5F7900B7F59A438B833364C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.093197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6f8d04b-8f07-4ea4-9a1e-a5d4814ae2bd", "created": "2026-10-09T15:13:11.093749Z", "modified": "2026-10-09T15:13:11.093749Z", "relationship_type": "indicates", "source_ref": "indicator--d7941242-e408-4172-8a49-4cb899ee664d", "target_ref": "malware--54ba5e17-0997-4cc8-b70b-268d43c03048"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0dbd0028-75a7-4342-bf67-504683eea0b1", "created": "2026-10-09T15:13:11.093868Z", "modified": "2026-10-09T15:13:11.093868Z", "name": "Spyier", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6ec7d1-84cf-4cef-8e6f-f5012e9d68f8", "created": "2026-10-09T15:13:11.094008Z", "modified": "2026-10-09T15:13:11.094008Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyier.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.094008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f3192a5-990a-4803-b4c6-b9ea9da38d49", "created": "2026-10-09T15:13:11.094599Z", "modified": "2026-10-09T15:13:11.094599Z", "relationship_type": "indicates", "source_ref": "indicator--9f6ec7d1-84cf-4cef-8e6f-f5012e9d68f8", "target_ref": "malware--0dbd0028-75a7-4342-bf67-504683eea0b1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889b9f56-49ca-4987-aa7c-6a826b2390fe", "created": "2026-10-09T15:13:11.094721Z", "modified": "2026-10-09T15:13:11.094721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='v4vw4ytvo4.execute-api.us-east-2.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.094721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a4ac803-6d31-4495-8e09-127730c31418", "created": "2026-10-09T15:13:11.095232Z", "modified": "2026-10-09T15:13:11.095232Z", "relationship_type": "indicates", "source_ref": "indicator--889b9f56-49ca-4987-aa7c-6a826b2390fe", "target_ref": "malware--0dbd0028-75a7-4342-bf67-504683eea0b1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64cc469-730d-43a3-b9b4-cb0e8eee0bd8", "created": "2026-10-09T15:13:11.095365Z", "modified": "2026-10-09T15:13:11.095365Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyier.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.095365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4251b916-526c-4399-9763-ed00b02c7850", "created": "2026-10-09T15:13:11.095832Z", "modified": "2026-10-09T15:13:11.095832Z", "relationship_type": "indicates", "source_ref": "indicator--e64cc469-730d-43a3-b9b4-cb0e8eee0bd8", "target_ref": "malware--0dbd0028-75a7-4342-bf67-504683eea0b1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aef81b7-81bf-4449-8a8a-a70586a88e7e", "created": "2026-10-09T15:13:11.095951Z", "modified": "2026-10-09T15:13:11.095951Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyier.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.095951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b867ec9f-d23e-4abb-9c33-542099b91984", "created": "2026-10-09T15:13:11.096415Z", "modified": "2026-10-09T15:13:11.096415Z", "relationship_type": "indicates", "source_ref": "indicator--1aef81b7-81bf-4449-8a8a-a70586a88e7e", "target_ref": "malware--0dbd0028-75a7-4342-bf67-504683eea0b1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346", "created": "2026-10-09T15:13:11.096535Z", "modified": "2026-10-09T15:13:11.096535Z", "name": "CouplerTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c895e2e-876b-4362-917f-541c5ba63e0f", "created": "2026-10-09T15:13:11.096647Z", "modified": "2026-10-09T15:13:11.096647Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.bytepioner.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.096647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01336da2-776c-4130-b7bb-4ee007bbfaaa", "created": "2026-10-09T15:13:11.097133Z", "modified": "2026-10-09T15:13:11.097133Z", "relationship_type": "indicates", "source_ref": "indicator--3c895e2e-876b-4362-917f-541c5ba63e0f", "target_ref": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1245fe25-3aa4-41d1-be10-6791307ded35", "created": "2026-10-09T15:13:11.097254Z", "modified": "2026-10-09T15:13:11.097254Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='coupletracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.097254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22da007f-5a41-47f3-9f5c-60eab4817607", "created": "2026-10-09T15:13:11.097739Z", "modified": "2026-10-09T15:13:11.097739Z", "relationship_type": "indicates", "source_ref": "indicator--1245fe25-3aa4-41d1-be10-6791307ded35", "target_ref": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd19c4e2-5ccc-427a-9223-e9662133185c", "created": "2026-10-09T15:13:11.097862Z", "modified": "2026-10-09T15:13:11.097862Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bettertomorrowapps.spyyourlovefree']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.097862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d39d7405-6774-4402-89e1-6d99725fc46c", "created": "2026-10-09T15:13:11.098354Z", "modified": "2026-10-09T15:13:11.098354Z", "relationship_type": "indicates", "source_ref": "indicator--bd19c4e2-5ccc-427a-9223-e9662133185c", "target_ref": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f6b8c8-e582-4e0d-a78a-3464e6d09845", "created": "2026-10-09T15:13:11.098477Z", "modified": "2026-10-09T15:13:11.098477Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bytepioneers.coupletracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.098477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84083c89-bae6-43ba-b8ab-96d6a8f83134", "created": "2026-10-09T15:13:11.098944Z", "modified": "2026-10-09T15:13:11.098944Z", "relationship_type": "indicates", "source_ref": "indicator--55f6b8c8-e582-4e0d-a78a-3464e6d09845", "target_ref": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9c63ac-8412-4c9f-8db3-9fb8ad3d43e8", "created": "2026-10-09T15:13:11.099057Z", "modified": "2026-10-09T15:13:11.099057Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='18CD402CC43DF0BC03E9951B0F843DC4B1552DC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.099057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a4ca911-d3ba-4af9-b456-191e8a396228", "created": "2026-10-09T15:13:11.099623Z", "modified": "2026-10-09T15:13:11.099623Z", "relationship_type": "indicates", "source_ref": "indicator--ec9c63ac-8412-4c9f-8db3-9fb8ad3d43e8", "target_ref": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c16ff4-b4d5-444b-9bed-dde9f9c0ddc9", "created": "2026-10-09T15:13:11.099746Z", "modified": "2026-10-09T15:13:11.099746Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BC53CC2A9996DE47BF72348F2A592DC0EBDAF06B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.099746Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebf664dc-c8c3-4813-85db-5a7be300ee67", "created": "2026-10-09T15:13:11.100403Z", "modified": "2026-10-09T15:13:11.100403Z", "relationship_type": "indicates", "source_ref": "indicator--80c16ff4-b4d5-444b-9bed-dde9f9c0ddc9", "target_ref": "malware--17e16a1b-a92b-4e8f-8ff9-bcd9aa704346"}, {"type": "malware", "spec_version": "2.1", "id": "malware--51e26143-d15f-468d-baa2-970613dc1185", "created": "2026-10-09T15:13:11.100527Z", "modified": "2026-10-09T15:13:11.100527Z", "name": "GPSTrackerLoki", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9481e00-1961-4c1c-9ec1-559108f94890", "created": "2026-10-09T15:13:11.100639Z", "modified": "2026-10-09T15:13:11.100639Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='asgard-f8c53.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.100639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00425c10-648a-4aa8-9fe0-03cff87c5b55", "created": "2026-10-09T15:13:11.101118Z", "modified": "2026-10-09T15:13:11.101118Z", "relationship_type": "indicates", "source_ref": "indicator--d9481e00-1961-4c1c-9ec1-559108f94890", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bba28f-a101-418c-bfee-1bb77a55c9d9", "created": "2026-10-09T15:13:11.101242Z", "modified": "2026-10-09T15:13:11.101242Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.asgardtech.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.101242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28c3b61e-8e9a-4823-978d-c55d60bc3733", "created": "2026-10-09T15:13:11.101724Z", "modified": "2026-10-09T15:13:11.101724Z", "relationship_type": "indicates", "source_ref": "indicator--16bba28f-a101-418c-bfee-1bb77a55c9d9", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95fe864-07e9-4ca0-99c1-c91e4c9132d1", "created": "2026-10-09T15:13:11.101844Z", "modified": "2026-10-09T15:13:11.101844Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='asgardtech.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.101844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c5e2d89-b989-4666-88a2-16a8532733c7", "created": "2026-10-09T15:13:11.102317Z", "modified": "2026-10-09T15:13:11.102317Z", "relationship_type": "indicates", "source_ref": "indicator--e95fe864-07e9-4ca0-99c1-c91e4c9132d1", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d9ed29-40f5-4529-89c6-1d1c5443d78f", "created": "2026-10-09T15:13:11.102439Z", "modified": "2026-10-09T15:13:11.102439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75c76fe253a9347427793638b8a73f36a880d320fd440dcb156c9d9308459a9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.102439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--873a54dd-864c-4394-a3ce-722abb4b05b1", "created": "2026-10-09T15:13:11.103023Z", "modified": "2026-10-09T15:13:11.103023Z", "relationship_type": "indicates", "source_ref": "indicator--93d9ed29-40f5-4529-89c6-1d1c5443d78f", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af90315-2825-4657-b0b5-6c5afa97c105", "created": "2026-10-09T15:13:11.103143Z", "modified": "2026-10-09T15:13:11.103143Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.loki']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.103143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3994023-463e-48c9-82b1-c78abf202c48", "created": "2026-10-09T15:13:11.103609Z", "modified": "2026-10-09T15:13:11.103609Z", "relationship_type": "indicates", "source_ref": "indicator--8af90315-2825-4657-b0b5-6c5afa97c105", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4eebaf-45e4-4e49-81f5-e031c02fe11a", "created": "2026-10-09T15:13:11.103734Z", "modified": "2026-10-09T15:13:11.103734Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.asgard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.103734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ba41581-eeb7-4e26-a895-7fd1585877e8", "created": "2026-10-09T15:13:11.104185Z", "modified": "2026-10-09T15:13:11.104185Z", "relationship_type": "indicates", "source_ref": "indicator--6c4eebaf-45e4-4e49-81f5-e031c02fe11a", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93998b4c-a4ca-46fd-bdc0-914aef298ff0", "created": "2026-10-09T15:13:11.104311Z", "modified": "2026-10-09T15:13:11.104311Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6156DB551938BB4560D4643B54527E4F169ED44F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.104311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9402dcf-a783-48e0-932d-b70b46dfe987", "created": "2026-10-09T15:13:11.104862Z", "modified": "2026-10-09T15:13:11.104862Z", "relationship_type": "indicates", "source_ref": "indicator--93998b4c-a4ca-46fd-bdc0-914aef298ff0", "target_ref": "malware--51e26143-d15f-468d-baa2-970613dc1185"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c76526d9-f294-489b-9709-ecbca5ba9fdb", "created": "2026-10-09T15:13:11.10499Z", "modified": "2026-10-09T15:13:11.10499Z", "name": "SpyApp247", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e0311b-5990-4eff-a0dc-f9e8d8e5bf5f", "created": "2026-10-09T15:13:11.105102Z", "modified": "2026-10-09T15:13:11.105102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab8c4e659356a2f3b0299e1052122b7f9578e2e1bd7f9f642fa0b23be75d2c14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.105102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5009018b-67cf-4bd2-bc32-74f1b3b7f486", "created": "2026-10-09T15:13:11.105705Z", "modified": "2026-10-09T15:13:11.105705Z", "relationship_type": "indicates", "source_ref": "indicator--d4e0311b-5990-4eff-a0dc-f9e8d8e5bf5f", "target_ref": "malware--c76526d9-f294-489b-9709-ecbca5ba9fdb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a3a8cc-ac63-43b6-b2ab-ccbf88cec6b6", "created": "2026-10-09T15:13:11.105826Z", "modified": "2026-10-09T15:13:11.105826Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba88c8df9fdfd3fd67cec515b1bfa79ece4ca696681f2671462ba9c7ac7245b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.105826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066f9a1a-09bb-49f5-a359-b3b93906753d", "created": "2026-10-09T15:13:11.106518Z", "modified": "2026-10-09T15:13:11.106518Z", "relationship_type": "indicates", "source_ref": "indicator--24a3a8cc-ac63-43b6-b2ab-ccbf88cec6b6", "target_ref": "malware--c76526d9-f294-489b-9709-ecbca5ba9fdb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4aeeaeb-8716-4b33-b4ee-618e8ed2587c", "created": "2026-10-09T15:13:11.106643Z", "modified": "2026-10-09T15:13:11.106643Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyapp247.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.106643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e4a23a9-62b3-4918-b58d-e1c975055d39", "created": "2026-10-09T15:13:11.10711Z", "modified": "2026-10-09T15:13:11.10711Z", "relationship_type": "indicates", "source_ref": "indicator--e4aeeaeb-8716-4b33-b4ee-618e8ed2587c", "target_ref": "malware--c76526d9-f294-489b-9709-ecbca5ba9fdb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ba89fefc-7777-4157-aeba-681819f1621f", "created": "2026-10-09T15:13:11.107285Z", "modified": "2026-10-09T15:13:11.107285Z", "name": "SpyMug", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674fb7bd-a414-4a36-b045-f5c03b9a1214", "created": "2026-10-09T15:13:11.107405Z", "modified": "2026-10-09T15:13:11.107405Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.service.mug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.107405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfef696c-d813-4841-94c7-0390a100c547", "created": "2026-10-09T15:13:11.107857Z", "modified": "2026-10-09T15:13:11.107857Z", "relationship_type": "indicates", "source_ref": "indicator--674fb7bd-a414-4a36-b045-f5c03b9a1214", "target_ref": "malware--ba89fefc-7777-4157-aeba-681819f1621f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2c89f5-e747-4951-b2fc-f4cc29815de4", "created": "2026-10-09T15:13:11.107977Z", "modified": "2026-10-09T15:13:11.107977Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='56C8FA19250EDBA1A91A37F500DA91FBC0657B1F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.107977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5ce444c-bb3d-4ccf-aa00-78d59ce3c352", "created": "2026-10-09T15:13:11.108528Z", "modified": "2026-10-09T15:13:11.108528Z", "relationship_type": "indicates", "source_ref": "indicator--ad2c89f5-e747-4951-b2fc-f4cc29815de4", "target_ref": "malware--ba89fefc-7777-4157-aeba-681819f1621f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80", "created": "2026-10-09T15:13:11.108652Z", "modified": "2026-10-09T15:13:11.108652Z", "name": "WtSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0d3ba0-c929-4ff3-9cbf-84ff08e55044", "created": "2026-10-09T15:13:11.108768Z", "modified": "2026-10-09T15:13:11.108768Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wt-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.108768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2ee5ca0-0ab3-4105-82c7-1a9b8243c49d", "created": "2026-10-09T15:13:11.109236Z", "modified": "2026-10-09T15:13:11.109236Z", "relationship_type": "indicates", "source_ref": "indicator--af0d3ba0-c929-4ff3-9cbf-84ff08e55044", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04389981-c6ff-4d77-863c-c19a5a896693", "created": "2026-10-09T15:13:11.10937Z", "modified": "2026-10-09T15:13:11.10937Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='146a952efd566f847b8b4b095215f5551f7c048d214fedef41b2ccf882385a6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.10937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70babc92-0726-46a1-8e2e-4e06fa80ef64", "created": "2026-10-09T15:13:11.10996Z", "modified": "2026-10-09T15:13:11.10996Z", "relationship_type": "indicates", "source_ref": "indicator--04389981-c6ff-4d77-863c-c19a5a896693", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64842bb-8e21-4bd7-9340-2a6c8af63d40", "created": "2026-10-09T15:13:11.110078Z", "modified": "2026-10-09T15:13:11.110078Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f544e9ad16c329b091dabfa735508105025bc37be93bfac4e6871a644c562b09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.110078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66dcf1e4-f6a6-4286-8b50-6bf0e4f2f267", "created": "2026-10-09T15:13:11.110686Z", "modified": "2026-10-09T15:13:11.110686Z", "relationship_type": "indicates", "source_ref": "indicator--d64842bb-8e21-4bd7-9340-2a6c8af63d40", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf58e28-3305-4d74-9b2b-a1dfa4902f57", "created": "2026-10-09T15:13:11.110807Z", "modified": "2026-10-09T15:13:11.110807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8188dec9de61221629b646ed78f125d507384bc993bc4188e1cb1b68810f77d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.110807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1eeb9dd-531a-491f-93a2-b710074ad600", "created": "2026-10-09T15:13:11.111401Z", "modified": "2026-10-09T15:13:11.111401Z", "relationship_type": "indicates", "source_ref": "indicator--adf58e28-3305-4d74-9b2b-a1dfa4902f57", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e31773-4021-40b6-9f5e-fc8d1c3026af", "created": "2026-10-09T15:13:11.111525Z", "modified": "2026-10-09T15:13:11.111525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb769147546c76292e6ab2c78742f8910db40d8f14d7a7ed40d30dbecb259a5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.111525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a86d84c-e6cc-4b51-99d8-7a378e71004c", "created": "2026-10-09T15:13:11.112108Z", "modified": "2026-10-09T15:13:11.112108Z", "relationship_type": "indicates", "source_ref": "indicator--21e31773-4021-40b6-9f5e-fc8d1c3026af", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53342df9-192b-4aea-8585-0ef960b7f8e6", "created": "2026-10-09T15:13:11.112227Z", "modified": "2026-10-09T15:13:11.112227Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73c1f9b8d9a7926a87d23ed43a4cccced9fbcaa8afba464138b0041f5feb7405']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.112227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8b0a7c9-36f9-42d3-b51d-ae1aa5e3733e", "created": "2026-10-09T15:13:11.112916Z", "modified": "2026-10-09T15:13:11.112916Z", "relationship_type": "indicates", "source_ref": "indicator--53342df9-192b-4aea-8585-0ef960b7f8e6", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca5bb50-9e74-4bb7-8d58-882608912d5c", "created": "2026-10-09T15:13:11.113039Z", "modified": "2026-10-09T15:13:11.113039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6beb22b8cda1d24e0859b1bd912b60e652ee812db830f2e33192d9530240731']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.113039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97860ed1-991c-4b5c-b516-523473ea702c", "created": "2026-10-09T15:13:11.113635Z", "modified": "2026-10-09T15:13:11.113635Z", "relationship_type": "indicates", "source_ref": "indicator--6ca5bb50-9e74-4bb7-8d58-882608912d5c", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7049b055-92d0-400e-9753-a22009a4414e", "created": "2026-10-09T15:13:11.113756Z", "modified": "2026-10-09T15:13:11.113756Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wwtspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.113756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83b22a10-ec81-491a-bc45-790d9ac8b981", "created": "2026-10-09T15:13:11.114196Z", "modified": "2026-10-09T15:13:11.114196Z", "relationship_type": "indicates", "source_ref": "indicator--7049b055-92d0-400e-9753-a22009a4414e", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b220a099-53c8-4e3b-b030-162efd7f2982", "created": "2026-10-09T15:13:11.114327Z", "modified": "2026-10-09T15:13:11.114327Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wtspy.apps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.114327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbc87b0f-763b-49f2-8037-1bc277d64066", "created": "2026-10-09T15:13:11.114776Z", "modified": "2026-10-09T15:13:11.114776Z", "relationship_type": "indicates", "source_ref": "indicator--b220a099-53c8-4e3b-b030-162efd7f2982", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef27758-6a9b-4e12-a7d3-c929cac97e7a", "created": "2026-10-09T15:13:11.114894Z", "modified": "2026-10-09T15:13:11.114894Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BB5E2C0E8DFDC54730C1E9B48754977E7DBCCCF9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.114894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5916d818-4072-43e8-975f-dd172f381975", "created": "2026-10-09T15:13:11.115448Z", "modified": "2026-10-09T15:13:11.115448Z", "relationship_type": "indicates", "source_ref": "indicator--cef27758-6a9b-4e12-a7d3-c929cac97e7a", "target_ref": "malware--fe1c1490-6213-4330-a73d-6d0ba6396b80"}, {"type": "malware", "spec_version": "2.1", "id": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac", "created": "2026-10-09T15:13:11.115574Z", "modified": "2026-10-09T15:13:11.115574Z", "name": "Xnore", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84e6f11-7942-4ab9-9163-f6cc4c2f8c6b", "created": "2026-10-09T15:13:11.115688Z", "modified": "2026-10-09T15:13:11.115688Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.115688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8af252d-dc8c-4146-8c19-2d3bf315c1f1", "created": "2026-10-09T15:13:11.116158Z", "modified": "2026-10-09T15:13:11.116158Z", "relationship_type": "indicates", "source_ref": "indicator--f84e6f11-7942-4ab9-9163-f6cc4c2f8c6b", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6443907c-0c25-4986-8425-b659eb94882e", "created": "2026-10-09T15:13:11.116326Z", "modified": "2026-10-09T15:13:11.116326Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnore.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.116326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2687f6b-761c-4db9-b159-e3c097272117", "created": "2026-10-09T15:13:11.116808Z", "modified": "2026-10-09T15:13:11.116808Z", "relationship_type": "indicates", "source_ref": "indicator--6443907c-0c25-4986-8425-b659eb94882e", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d771bf-846f-4ea0-a06f-1d286e117656", "created": "2026-10-09T15:13:11.116933Z", "modified": "2026-10-09T15:13:11.116933Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnore.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.116933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--545b5701-456c-4496-8397-0bb66a0fecaf", "created": "2026-10-09T15:13:11.117408Z", "modified": "2026-10-09T15:13:11.117408Z", "relationship_type": "indicates", "source_ref": "indicator--b3d771bf-846f-4ea0-a06f-1d286e117656", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7912e2-1f61-4edf-8179-5a2ebeb9013b", "created": "2026-10-09T15:13:11.117532Z", "modified": "2026-10-09T15:13:11.117532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ca9a8bed0a17375d6d6d07c20248d0847caae06fdc288533f5748943593c686']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.117532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a22988ce-c00d-4b23-abc6-3529df382f1b", "created": "2026-10-09T15:13:11.118113Z", "modified": "2026-10-09T15:13:11.118113Z", "relationship_type": "indicates", "source_ref": "indicator--8a7912e2-1f61-4edf-8179-5a2ebeb9013b", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755dc152-369c-4b8d-a384-e5606fe6fa54", "created": "2026-10-09T15:13:11.118234Z", "modified": "2026-10-09T15:13:11.118234Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c6ac542bbc8af52e2fb36a4e2a9b6fb83458821b9fd24865ae1efebbdff4931']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.118234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--458828ad-07b3-4460-9b80-267c9302e1ab", "created": "2026-10-09T15:13:11.118932Z", "modified": "2026-10-09T15:13:11.118932Z", "relationship_type": "indicates", "source_ref": "indicator--755dc152-369c-4b8d-a384-e5606fe6fa54", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00da121a-1756-4d49-ae2e-a0f730ebecf9", "created": "2026-10-09T15:13:11.119054Z", "modified": "2026-10-09T15:13:11.119054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f9b4a9fa6fab111284dde6834428eab3e1c2c9218c742197fbfd6a7c436eee7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.119054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3000c663-d48c-48bd-ad6f-ecab6383c5fe", "created": "2026-10-09T15:13:11.119651Z", "modified": "2026-10-09T15:13:11.119651Z", "relationship_type": "indicates", "source_ref": "indicator--00da121a-1756-4d49-ae2e-a0f730ebecf9", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b085ae4f-f507-44f7-97a9-a2ddca36a12b", "created": "2026-10-09T15:13:11.119773Z", "modified": "2026-10-09T15:13:11.119773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='24743a29eb173d5674d0f45bc10c92492a730f37b2d558c34e48e22bc740ca4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.119773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef668f2b-aa38-469e-8d94-e43d154de761", "created": "2026-10-09T15:13:11.120375Z", "modified": "2026-10-09T15:13:11.120375Z", "relationship_type": "indicates", "source_ref": "indicator--b085ae4f-f507-44f7-97a9-a2ddca36a12b", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a914dc-49f7-4e9d-b554-d6ac873572e2", "created": "2026-10-09T15:13:11.120497Z", "modified": "2026-10-09T15:13:11.120497Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35fa07d5a39c670c2143718b6cedf713f32f61d93bc264939439748f6a835cc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.120497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d28e3a82-5893-47aa-9e53-fb0edee7a19b", "created": "2026-10-09T15:13:11.121075Z", "modified": "2026-10-09T15:13:11.121075Z", "relationship_type": "indicates", "source_ref": "indicator--37a914dc-49f7-4e9d-b554-d6ac873572e2", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7a4bb0-4277-431f-9505-c9fd00d0e5f9", "created": "2026-10-09T15:13:11.121194Z", "modified": "2026-10-09T15:13:11.121194Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.xno.systemservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.121194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a626ae1f-5981-4ab5-b8dc-09230e1169f7", "created": "2026-10-09T15:13:11.12166Z", "modified": "2026-10-09T15:13:11.12166Z", "relationship_type": "indicates", "source_ref": "indicator--ba7a4bb0-4277-431f-9505-c9fd00d0e5f9", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1dc74a-a2e8-4fed-9087-2221a542c01a", "created": "2026-10-09T15:13:11.121783Z", "modified": "2026-10-09T15:13:11.121783Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9BCE25527FF174A4AD6CDE233B17038641A5EEF9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.121783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f93f7ef-8d7f-4cab-b31f-5f72eae3ef12", "created": "2026-10-09T15:13:11.12233Z", "modified": "2026-10-09T15:13:11.12233Z", "relationship_type": "indicates", "source_ref": "indicator--8c1dc74a-a2e8-4fed-9087-2221a542c01a", "target_ref": "malware--568db95b-3c3a-4ee1-8904-6e2a735cb6ac"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63", "created": "2026-10-09T15:13:11.122448Z", "modified": "2026-10-09T15:13:11.122448Z", "name": "EspiaoAndroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba716c6-9480-4115-b177-3f0a0df7cd88", "created": "2026-10-09T15:13:11.122559Z", "modified": "2026-10-09T15:13:11.122559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aovivo.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.122559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa373651-9eff-4b49-8aec-63a25642cf0d", "created": "2026-10-09T15:13:11.123036Z", "modified": "2026-10-09T15:13:11.123036Z", "relationship_type": "indicates", "source_ref": "indicator--0ba716c6-9480-4115-b177-3f0a0df7cd88", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbf5f64-e3be-456d-9a11-b13ae6048eb3", "created": "2026-10-09T15:13:11.123153Z", "modified": "2026-10-09T15:13:11.123153Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api007.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.123153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c16feed2-fc0a-4c88-9195-4af45957b601", "created": "2026-10-09T15:13:11.123654Z", "modified": "2026-10-09T15:13:11.123654Z", "relationship_type": "indicates", "source_ref": "indicator--cbbf5f64-e3be-456d-9a11-b13ae6048eb3", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ddad46-6ece-480b-abb6-3325c217f612", "created": "2026-10-09T15:13:11.123777Z", "modified": "2026-10-09T15:13:11.123777Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.123777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3499e21f-f053-4ea0-8bda-c70fb8a5f2ba", "created": "2026-10-09T15:13:11.12425Z", "modified": "2026-10-09T15:13:11.12425Z", "relationship_type": "indicates", "source_ref": "indicator--f3ddad46-6ece-480b-abb6-3325c217f612", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209f3f0a-f2fe-4f00-9ecb-b020ba5608c7", "created": "2026-10-09T15:13:11.12439Z", "modified": "2026-10-09T15:13:11.12439Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celular007.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.12439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61902cbe-f740-4596-982e-cc57d3f14381", "created": "2026-10-09T15:13:11.124968Z", "modified": "2026-10-09T15:13:11.124968Z", "relationship_type": "indicates", "source_ref": "indicator--209f3f0a-f2fe-4f00-9ecb-b020ba5608c7", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd69151-c39e-419d-a827-65cabc5ec202", "created": "2026-10-09T15:13:11.125089Z", "modified": "2026-10-09T15:13:11.125089Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remoto.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.125089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c46287e-c3d8-4937-aace-77c31cebdd10", "created": "2026-10-09T15:13:11.125579Z", "modified": "2026-10-09T15:13:11.125579Z", "relationship_type": "indicates", "source_ref": "indicator--1bd69151-c39e-419d-a827-65cabc5ec202", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a436c5b-f5fd-4bc6-90d3-1212bcff82bd", "created": "2026-10-09T15:13:11.1257Z", "modified": "2026-10-09T15:13:11.1257Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.1257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c5cef5d-a9d3-4ecb-ad30-2530a421304c", "created": "2026-10-09T15:13:11.126171Z", "modified": "2026-10-09T15:13:11.126171Z", "relationship_type": "indicates", "source_ref": "indicator--7a436c5b-f5fd-4bc6-90d3-1212bcff82bd", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ce1eec-4775-444a-9bdd-024caaad4aa7", "created": "2026-10-09T15:13:11.126306Z", "modified": "2026-10-09T15:13:11.126306Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7dc624758c0afa2fbc1dea4c21067fb6ca975f31a01a5b181e4b0b3c5b0fe2b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.126306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02e93a5d-67f8-4d19-935e-ea0ff3af7e0f", "created": "2026-10-09T15:13:11.126898Z", "modified": "2026-10-09T15:13:11.126898Z", "relationship_type": "indicates", "source_ref": "indicator--90ce1eec-4775-444a-9bdd-024caaad4aa7", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30da3e4-c88f-4de3-aed4-4a58ec6ba267", "created": "2026-10-09T15:13:11.12702Z", "modified": "2026-10-09T15:13:11.12702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='551f10c25847ce9932efe180e48fe46954744e1951f974a20a838a64f061d075']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.12702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dcaf223-db29-4e1a-a45a-163b6b53be1d", "created": "2026-10-09T15:13:11.127614Z", "modified": "2026-10-09T15:13:11.127614Z", "relationship_type": "indicates", "source_ref": "indicator--f30da3e4-c88f-4de3-aed4-4a58ec6ba267", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327d33de-7580-4b90-b0e2-df1b20fb1220", "created": "2026-10-09T15:13:11.127739Z", "modified": "2026-10-09T15:13:11.127739Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e18cb58c46500b046805f494d261b0c43ff5e74865d0e57fdff4c9b44f214b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.127739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07268329-58d4-4c5f-bfbe-6f7d1bd52f17", "created": "2026-10-09T15:13:11.128336Z", "modified": "2026-10-09T15:13:11.128336Z", "relationship_type": "indicates", "source_ref": "indicator--327d33de-7580-4b90-b0e2-df1b20fb1220", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a55ae5f-83de-4f21-a6df-61fcfb2d95e6", "created": "2026-10-09T15:13:11.128459Z", "modified": "2026-10-09T15:13:11.128459Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5bfa6f8ba7cf4b2be9c11c2b88811ddc0917a71325633fce246cf65245b184e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.128459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02e2c320-70e7-4737-83ca-44ec0731decc", "created": "2026-10-09T15:13:11.129044Z", "modified": "2026-10-09T15:13:11.129044Z", "relationship_type": "indicates", "source_ref": "indicator--8a55ae5f-83de-4f21-a6df-61fcfb2d95e6", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56acfc91-3f80-478e-a555-5508f24aa295", "created": "2026-10-09T15:13:11.129163Z", "modified": "2026-10-09T15:13:11.129163Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f3ccb51c19613dd53ea9db449d01f0699ef9c68a74d4f0bed1f33f56e711a49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.129163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2c568e3-b95e-4650-b317-6cbbb691c1e3", "created": "2026-10-09T15:13:11.129759Z", "modified": "2026-10-09T15:13:11.129759Z", "relationship_type": "indicates", "source_ref": "indicator--56acfc91-3f80-478e-a555-5508f24aa295", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aceb93a4-6e92-4213-b9c7-966d689f85ff", "created": "2026-10-09T15:13:11.12988Z", "modified": "2026-10-09T15:13:11.12988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0fe1f6c1c7eb8bed9ec446abf66b8ad3ff58fe785902044eba275ca11cdb22f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.12988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aabe14e7-396f-48e7-920a-e20ce5823358", "created": "2026-10-09T15:13:11.130482Z", "modified": "2026-10-09T15:13:11.130482Z", "relationship_type": "indicates", "source_ref": "indicator--aceb93a4-6e92-4213-b9c7-966d689f85ff", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bb8113-98d8-4420-9005-d5e6cdaeada6", "created": "2026-10-09T15:13:11.130602Z", "modified": "2026-10-09T15:13:11.130602Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5f1d1ecbf70f66c606ead243e60230040a9e29f7fdfeeb0849d22367cb4e9f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.130602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79e66dc0-e590-4e75-b6d9-bc2aea482da2", "created": "2026-10-09T15:13:11.131293Z", "modified": "2026-10-09T15:13:11.131293Z", "relationship_type": "indicates", "source_ref": "indicator--d1bb8113-98d8-4420-9005-d5e6cdaeada6", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87419925-acc7-4d90-b0e9-3f60415b4d89", "created": "2026-10-09T15:13:11.131414Z", "modified": "2026-10-09T15:13:11.131414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1bafc8bdacb75babe72eaef99d143b50c1ca7a49ed5d5eacb1f8b9dc0581c0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.131414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4ed27ed-35b5-4488-9f67-85eede3ea2ed", "created": "2026-10-09T15:13:11.132007Z", "modified": "2026-10-09T15:13:11.132007Z", "relationship_type": "indicates", "source_ref": "indicator--87419925-acc7-4d90-b0e9-3f60415b4d89", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8636a8-37e3-4975-8eda-a346e25fc002", "created": "2026-10-09T15:13:11.132129Z", "modified": "2026-10-09T15:13:11.132129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8dcb8f4dda2fea9dd6c56fa767a122067e1fab937839945103b8ef5abbf4dfa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.132129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--479f99a5-12c4-4311-9942-c96fe86a4962", "created": "2026-10-09T15:13:11.132728Z", "modified": "2026-10-09T15:13:11.132728Z", "relationship_type": "indicates", "source_ref": "indicator--ad8636a8-37e3-4975-8eda-a346e25fc002", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5d1898-05fd-4bab-b094-9cc35d7a4fe2", "created": "2026-10-09T15:13:11.132854Z", "modified": "2026-10-09T15:13:11.132854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='429e81dd4c1bb54d390281010c37c60383076f1559a577590c26e4d4baeb2698']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.132854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59c124b3-3bfe-44fe-847b-5dd03e2bac68", "created": "2026-10-09T15:13:11.13345Z", "modified": "2026-10-09T15:13:11.13345Z", "relationship_type": "indicates", "source_ref": "indicator--ac5d1898-05fd-4bab-b094-9cc35d7a4fe2", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61add355-8be8-47a9-a1a5-124e9f4e868d", "created": "2026-10-09T15:13:11.133577Z", "modified": "2026-10-09T15:13:11.133577Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2524e3aef6b4971782b11670e6474b10510795adf65d34ad4495078eb98c4b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.133577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49cd32be-89c9-49fc-87b0-7b494fbffdd3", "created": "2026-10-09T15:13:11.134165Z", "modified": "2026-10-09T15:13:11.134165Z", "relationship_type": "indicates", "source_ref": "indicator--61add355-8be8-47a9-a1a5-124e9f4e868d", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b02651c-b7de-4428-a375-3254409283dd", "created": "2026-10-09T15:13:11.134297Z", "modified": "2026-10-09T15:13:11.134297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ee8934d85e2bc263bbe91bae8c202f6ff634c69f77e001eb98b3f7be05d8336']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.134297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fdf7b3c-361e-4544-ae36-3ed844ef7569", "created": "2026-10-09T15:13:11.134901Z", "modified": "2026-10-09T15:13:11.134901Z", "relationship_type": "indicates", "source_ref": "indicator--4b02651c-b7de-4428-a375-3254409283dd", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d734a72-e211-4e12-ba27-9cfb8596db60", "created": "2026-10-09T15:13:11.135022Z", "modified": "2026-10-09T15:13:11.135022Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kfhdha.fkjfgjdi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.135022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2997904-90d7-4348-b2a6-92ab66a9fbb1", "created": "2026-10-09T15:13:11.135501Z", "modified": "2026-10-09T15:13:11.135501Z", "relationship_type": "indicates", "source_ref": "indicator--9d734a72-e211-4e12-ba27-9cfb8596db60", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2446b59f-b082-43c3-8fe7-b5c65c839d2d", "created": "2026-10-09T15:13:11.13563Z", "modified": "2026-10-09T15:13:11.13563Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='60DA6A5B04C0100DFCE1213C850EFBDEB0D1E8D7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.13563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4d81615-6c1b-4e21-a573-7dab149c2a08", "created": "2026-10-09T15:13:11.136173Z", "modified": "2026-10-09T15:13:11.136173Z", "relationship_type": "indicates", "source_ref": "indicator--2446b59f-b082-43c3-8fe7-b5c65c839d2d", "target_ref": "malware--9bd1e436-3a61-420b-ade5-0675ce804a63"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec", "created": "2026-10-09T15:13:11.136303Z", "modified": "2026-10-09T15:13:11.136303Z", "name": "pcTattletale", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e335e2b6-ce34-47ee-8457-ce5b3be9a3fd", "created": "2026-10-09T15:13:11.136418Z", "modified": "2026-10-09T15:13:11.136418Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pctattletalev2.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.136418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c7fe83d-7465-4ff0-829b-2d05e8e5c515", "created": "2026-10-09T15:13:11.137023Z", "modified": "2026-10-09T15:13:11.137023Z", "relationship_type": "indicates", "source_ref": "indicator--e335e2b6-ce34-47ee-8457-ce5b3be9a3fd", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383efd9d-a8fc-4ce9-bf19-035564993bfc", "created": "2026-10-09T15:13:11.137152Z", "modified": "2026-10-09T15:13:11.137152Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pctattletale.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.137152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4065c37-048d-43b1-8725-a1ed49cf97a0", "created": "2026-10-09T15:13:11.13765Z", "modified": "2026-10-09T15:13:11.13765Z", "relationship_type": "indicates", "source_ref": "indicator--383efd9d-a8fc-4ce9-bf19-035564993bfc", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d27d59-b309-47b2-9812-72c30b40c661", "created": "2026-10-09T15:13:11.137776Z", "modified": "2026-10-09T15:13:11.137776Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='truewebmedia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.137776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e5157ba-8df7-4aaf-87d3-fc7b949ccd36", "created": "2026-10-09T15:13:11.138249Z", "modified": "2026-10-09T15:13:11.138249Z", "relationship_type": "indicates", "source_ref": "indicator--b6d27d59-b309-47b2-9812-72c30b40c661", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4140252-0b2a-463a-a0d5-58d83354f294", "created": "2026-10-09T15:13:11.138382Z", "modified": "2026-10-09T15:13:11.138382Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.pctattletale.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.138382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--176ebf23-469d-4466-b3f2-979211dfc2e5", "created": "2026-10-09T15:13:11.138857Z", "modified": "2026-10-09T15:13:11.138857Z", "relationship_type": "indicates", "source_ref": "indicator--a4140252-0b2a-463a-a0d5-58d83354f294", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3386730e-e2e3-44c9-9b55-dd64f0928e63", "created": "2026-10-09T15:13:11.138977Z", "modified": "2026-10-09T15:13:11.138977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='337d2ed78480e9ceb789e2e9dc7a6268b166ff1c5252ae77f3bf2b392df97354']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.138977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65f49dc5-4291-4dbd-80c0-e32b4823040d", "created": "2026-10-09T15:13:11.139581Z", "modified": "2026-10-09T15:13:11.139581Z", "relationship_type": "indicates", "source_ref": "indicator--3386730e-e2e3-44c9-9b55-dd64f0928e63", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f65bf7c-bcb2-4993-962d-d749ad84e47c", "created": "2026-10-09T15:13:11.139703Z", "modified": "2026-10-09T15:13:11.139703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c40f1df2185f6a19126230eb474ad04ce4766c34d2184a9ef7f7f8b2822abd6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.139703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be05a26a-8dc7-4769-b1fa-e71cb176fdc5", "created": "2026-10-09T15:13:11.140299Z", "modified": "2026-10-09T15:13:11.140299Z", "relationship_type": "indicates", "source_ref": "indicator--5f65bf7c-bcb2-4993-962d-d749ad84e47c", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed15798-f3e2-4120-8e5e-6ee0e306d078", "created": "2026-10-09T15:13:11.140425Z", "modified": "2026-10-09T15:13:11.140425Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dabed7f7bd653c61e7cbfd49f2d3b4eb12080189269daf2001db860dbd9de9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.140425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae3ddba1-603c-4d29-9e58-c4359d474842", "created": "2026-10-09T15:13:11.14101Z", "modified": "2026-10-09T15:13:11.14101Z", "relationship_type": "indicates", "source_ref": "indicator--aed15798-f3e2-4120-8e5e-6ee0e306d078", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2e9712-278d-49d1-b176-7ab1a874e1e4", "created": "2026-10-09T15:13:11.141129Z", "modified": "2026-10-09T15:13:11.141129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de577c798f72a9ecef67fe1d7408fb92764f852df2e5914de8357e7200740619']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.141129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--364860ea-0e21-4cc7-b79c-0753b3a18d98", "created": "2026-10-09T15:13:11.14173Z", "modified": "2026-10-09T15:13:11.14173Z", "relationship_type": "indicates", "source_ref": "indicator--6e2e9712-278d-49d1-b176-7ab1a874e1e4", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a01c66-e9ef-48f8-a19b-553b4ffe5ab7", "created": "2026-10-09T15:13:11.141853Z", "modified": "2026-10-09T15:13:11.141853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f05760daf6cd5c2faa86fc1bded533401fc22871720b4fba63e9f787f94dc720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.141853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69b105e9-7dcc-4c3f-851e-f004997809a4", "created": "2026-10-09T15:13:11.142448Z", "modified": "2026-10-09T15:13:11.142448Z", "relationship_type": "indicates", "source_ref": "indicator--21a01c66-e9ef-48f8-a19b-553b4ffe5ab7", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de90cb11-d107-4383-88b4-89415f2c8991", "created": "2026-10-09T15:13:11.14257Z", "modified": "2026-10-09T15:13:11.14257Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5d5b3f514583e4a269a5c296af2239bdb10058dea7a11abb1edd132bc4f562c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.14257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e503dc7-d3c2-4592-abed-a6512ac4833a", "created": "2026-10-09T15:13:11.143254Z", "modified": "2026-10-09T15:13:11.143254Z", "relationship_type": "indicates", "source_ref": "indicator--de90cb11-d107-4383-88b4-89415f2c8991", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ef3387-3075-404a-93ee-89bc86aa1d8c", "created": "2026-10-09T15:13:11.14339Z", "modified": "2026-10-09T15:13:11.14339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d444c7cfd6714ad070444b7ba0ea997c743cf9cecdc0adb7c5263505849b504a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.14339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12277819-d9b5-4ea5-ada0-ee83ef1d1423", "created": "2026-10-09T15:13:11.143975Z", "modified": "2026-10-09T15:13:11.143975Z", "relationship_type": "indicates", "source_ref": "indicator--65ef3387-3075-404a-93ee-89bc86aa1d8c", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c281ce0-8e2e-4bc8-87ec-4d7a62e688f0", "created": "2026-10-09T15:13:11.144093Z", "modified": "2026-10-09T15:13:11.144093Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b233688b1c67f2909eee0ced113fac20a97734bbc10192d32d84318a94b1276']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.144093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87e5efb7-f913-40be-93d4-4a169927afde", "created": "2026-10-09T15:13:11.144682Z", "modified": "2026-10-09T15:13:11.144682Z", "relationship_type": "indicates", "source_ref": "indicator--9c281ce0-8e2e-4bc8-87ec-4d7a62e688f0", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434dc321-594f-40b3-898c-86331132d99e", "created": "2026-10-09T15:13:11.144803Z", "modified": "2026-10-09T15:13:11.144803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a54dbdbb9c7ea0e68625ddfc8cdc9c253fa149babb26c2f08bb8a7a91c6a452']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.144803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ddc210c-ab8d-4c38-b857-ca713ddf6c0a", "created": "2026-10-09T15:13:11.145399Z", "modified": "2026-10-09T15:13:11.145399Z", "relationship_type": "indicates", "source_ref": "indicator--434dc321-594f-40b3-898c-86331132d99e", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eadbc49-74b0-45b8-afbe-f190df1ab197", "created": "2026-10-09T15:13:11.145528Z", "modified": "2026-10-09T15:13:11.145528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18787bb139de7c434e54cc401b1a56fb984fa0c2d07dc5fa81469f92fa7b156f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.145528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d6c7af2-f7fe-4d90-9c69-18db30c6da77", "created": "2026-10-09T15:13:11.146111Z", "modified": "2026-10-09T15:13:11.146111Z", "relationship_type": "indicates", "source_ref": "indicator--4eadbc49-74b0-45b8-afbe-f190df1ab197", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0235fd-7f4c-44d4-b6f2-8d294525c8ef", "created": "2026-10-09T15:13:11.14624Z", "modified": "2026-10-09T15:13:11.14624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54d53ff4baf1efd654a2e3463cf551d06337146db516142aab1bee8fa901489e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.14624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6444e20e-d647-4200-b3b2-34e9c1acdb3f", "created": "2026-10-09T15:13:11.14684Z", "modified": "2026-10-09T15:13:11.14684Z", "relationship_type": "indicates", "source_ref": "indicator--cf0235fd-7f4c-44d4-b6f2-8d294525c8ef", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da97e638-f7fa-41c6-aa19-6908909a11a6", "created": "2026-10-09T15:13:11.14696Z", "modified": "2026-10-09T15:13:11.14696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ace73e27ad81f3c7599031468e8c6e8bcf5080c7dd8e1d802d8028f954b57ff3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.14696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--812f177c-216e-4d43-b950-1e701edbed5a", "created": "2026-10-09T15:13:11.147558Z", "modified": "2026-10-09T15:13:11.147558Z", "relationship_type": "indicates", "source_ref": "indicator--da97e638-f7fa-41c6-aa19-6908909a11a6", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cfd5fb-3645-498c-bf22-304b2f21f830", "created": "2026-10-09T15:13:11.147679Z", "modified": "2026-10-09T15:13:11.147679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fcfc726360791fb1e2548d0ef5a467750a6dc515b31219616b83b9f956440169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.147679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c75168e9-94a6-4fff-9097-a12a6e728c24", "created": "2026-10-09T15:13:11.148274Z", "modified": "2026-10-09T15:13:11.148274Z", "relationship_type": "indicates", "source_ref": "indicator--e9cfd5fb-3645-498c-bf22-304b2f21f830", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5c1968-46aa-4350-85e5-45b5b2ef0eca", "created": "2026-10-09T15:13:11.148398Z", "modified": "2026-10-09T15:13:11.148398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db8911d08712e906a6b038de5a5c23e4ced587621a881487acbc1216bdbecb8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.148398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6e770bc-ac74-42b2-be58-db4394f1e13d", "created": "2026-10-09T15:13:11.149011Z", "modified": "2026-10-09T15:13:11.149011Z", "relationship_type": "indicates", "source_ref": "indicator--1d5c1968-46aa-4350-85e5-45b5b2ef0eca", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0591c47-3821-4698-930a-f41f84d0f594", "created": "2026-10-09T15:13:11.149133Z", "modified": "2026-10-09T15:13:11.149133Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6764aa0373ee0e54a05cc977cd9fcce2b8d364a7013d613b07ae0381b0e49feb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.149133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a45afa4-08c0-4582-9fe7-29925a6b83de", "created": "2026-10-09T15:13:11.150171Z", "modified": "2026-10-09T15:13:11.150171Z", "relationship_type": "indicates", "source_ref": "indicator--b0591c47-3821-4698-930a-f41f84d0f594", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24e0af0-21bf-4d95-89f0-c2497dac7f93", "created": "2026-10-09T15:13:11.150313Z", "modified": "2026-10-09T15:13:11.150313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2a1fe6ae32e87d095f2cfbef6e7bfc54d05a6671729c19c5965389e7417607c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.150313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c5f38f7-62ec-4809-b1e0-5217f4ba72bc", "created": "2026-10-09T15:13:11.150918Z", "modified": "2026-10-09T15:13:11.150918Z", "relationship_type": "indicates", "source_ref": "indicator--a24e0af0-21bf-4d95-89f0-c2497dac7f93", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a80ba9-d1c4-4290-a0e9-72622401aa65", "created": "2026-10-09T15:13:11.151042Z", "modified": "2026-10-09T15:13:11.151042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3eb6413aeddd59f61e12a3d84ae393ef036150eb0467aadabfacf50dae917a48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.151042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f98343aa-b0c8-4c27-a033-4598aac79799", "created": "2026-10-09T15:13:11.151644Z", "modified": "2026-10-09T15:13:11.151644Z", "relationship_type": "indicates", "source_ref": "indicator--71a80ba9-d1c4-4290-a0e9-72622401aa65", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb63b08-ff08-4b8a-b312-e0f18ee48f46", "created": "2026-10-09T15:13:11.151776Z", "modified": "2026-10-09T15:13:11.151776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a370cb4a508251ad062d9bdc87f037f9e955c61dcd41a69f46c1fd93bb36b8a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.151776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f0fc7ad-50df-4a4a-b4c3-2900fe1c187c", "created": "2026-10-09T15:13:11.152375Z", "modified": "2026-10-09T15:13:11.152375Z", "relationship_type": "indicates", "source_ref": "indicator--dbb63b08-ff08-4b8a-b312-e0f18ee48f46", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f234ceac-ea7a-40bc-89dd-12e5804d1227", "created": "2026-10-09T15:13:11.1525Z", "modified": "2026-10-09T15:13:11.1525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c228b408acf05f57efe581f8996530ced61d72fc4e1e0262e286fe8d52fc6c11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.1525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c16db7fa-7cf7-4b7c-9721-1e8605c3daa4", "created": "2026-10-09T15:13:11.153087Z", "modified": "2026-10-09T15:13:11.153087Z", "relationship_type": "indicates", "source_ref": "indicator--f234ceac-ea7a-40bc-89dd-12e5804d1227", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a5b84c-4aa4-4391-8de7-eda50e2fbbcb", "created": "2026-10-09T15:13:11.153209Z", "modified": "2026-10-09T15:13:11.153209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='282c7b2e46f72ce844bb26f8359e34b5256800e55550c52cd912131bd7b2e423']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.153209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--677be7a2-a9f7-4927-9602-9d5a3fb84390", "created": "2026-10-09T15:13:11.153811Z", "modified": "2026-10-09T15:13:11.153811Z", "relationship_type": "indicates", "source_ref": "indicator--64a5b84c-4aa4-4391-8de7-eda50e2fbbcb", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7234e53-182e-4403-93e0-162d4e5505ee", "created": "2026-10-09T15:13:11.153929Z", "modified": "2026-10-09T15:13:11.153929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41b8f5707750a0524d0d4b7bd94b20beae73335de5bf4cfcb925821068a6b43c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.153929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1002f99a-276b-4454-be9e-2484220c88b5", "created": "2026-10-09T15:13:11.154524Z", "modified": "2026-10-09T15:13:11.154524Z", "relationship_type": "indicates", "source_ref": "indicator--f7234e53-182e-4403-93e0-162d4e5505ee", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274abac4-9bbd-47e8-9eaf-cc251f878942", "created": "2026-10-09T15:13:11.154648Z", "modified": "2026-10-09T15:13:11.154648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fdb676f418421ef66be57bbf7f6ebdfef49a58a9b649735c85dc314c48db8c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.154648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f273e6a-1a4f-46be-bbc6-00950f92eeb9", "created": "2026-10-09T15:13:11.155239Z", "modified": "2026-10-09T15:13:11.155239Z", "relationship_type": "indicates", "source_ref": "indicator--274abac4-9bbd-47e8-9eaf-cc251f878942", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd8900b-bd97-4924-a34c-fd7911239cef", "created": "2026-10-09T15:13:11.155373Z", "modified": "2026-10-09T15:13:11.155373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='078ed0071ab1121777a13570b05e3c0fafc40bf3e2ef625975888b7dd42b495d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.155373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5a60913-8762-42d3-874b-872a47bafe0c", "created": "2026-10-09T15:13:11.15596Z", "modified": "2026-10-09T15:13:11.15596Z", "relationship_type": "indicates", "source_ref": "indicator--bfd8900b-bd97-4924-a34c-fd7911239cef", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c334d3d1-8ece-481a-930f-5916bc27d6e9", "created": "2026-10-09T15:13:11.156079Z", "modified": "2026-10-09T15:13:11.156079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1ac97df184e79dffa9b13e32fe0b32131a3fd1470247bb916a549358f8cde21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.156079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a15e0df-0139-4f2c-8cda-a97445e809c0", "created": "2026-10-09T15:13:11.156808Z", "modified": "2026-10-09T15:13:11.156808Z", "relationship_type": "indicates", "source_ref": "indicator--c334d3d1-8ece-481a-930f-5916bc27d6e9", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75fdee9-4523-4e8a-90f6-c4a7db884210", "created": "2026-10-09T15:13:11.15694Z", "modified": "2026-10-09T15:13:11.15694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5a6411655cd5b06d8c961b7f86c109bc4897c50fcad8b569ec6bc43c1e450b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.15694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--653684d6-131a-4d36-adc7-1107a0224067", "created": "2026-10-09T15:13:11.157545Z", "modified": "2026-10-09T15:13:11.157545Z", "relationship_type": "indicates", "source_ref": "indicator--f75fdee9-4523-4e8a-90f6-c4a7db884210", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124517d0-7467-44e3-8b4e-f06dd2ddb95e", "created": "2026-10-09T15:13:11.15767Z", "modified": "2026-10-09T15:13:11.15767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='109987db1430dffd3ca2fe114ee5a5a743de43b428a5853641fc89ba4250235f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.15767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a280e599-56f5-4d3d-9127-4ca5bc8cdc1f", "created": "2026-10-09T15:13:11.158258Z", "modified": "2026-10-09T15:13:11.158258Z", "relationship_type": "indicates", "source_ref": "indicator--124517d0-7467-44e3-8b4e-f06dd2ddb95e", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a94e98-9ef3-49ef-af9a-4e7f8e40c902", "created": "2026-10-09T15:13:11.158398Z", "modified": "2026-10-09T15:13:11.158398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1a368c93dd5827b4c0ea9594f909428110617e2f4d95dc72108b9c64aeba43b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.158398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a39dda8-094c-4493-bff7-8b8ac908aff5", "created": "2026-10-09T15:13:11.158984Z", "modified": "2026-10-09T15:13:11.158984Z", "relationship_type": "indicates", "source_ref": "indicator--96a94e98-9ef3-49ef-af9a-4e7f8e40c902", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a78d2b1-00b7-404f-bea8-e1b97e3bc6e7", "created": "2026-10-09T15:13:11.159104Z", "modified": "2026-10-09T15:13:11.159104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94241c0144747f61440a6d7c540c8d0f4e9b833efab100b36526b4bde92aed5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.159104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--957c9f6d-32a2-4174-adb9-99d19aba4f10", "created": "2026-10-09T15:13:11.159701Z", "modified": "2026-10-09T15:13:11.159701Z", "relationship_type": "indicates", "source_ref": "indicator--9a78d2b1-00b7-404f-bea8-e1b97e3bc6e7", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e14fce-7c26-4103-9fa1-fa1f95fdfb2a", "created": "2026-10-09T15:13:11.159828Z", "modified": "2026-10-09T15:13:11.159828Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eea25e003c15a23d73894c5e86e1599b35f14874a084bac21665c5aa906d89cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.159828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d180a6b1-2b92-466d-a09d-310839ba2a11", "created": "2026-10-09T15:13:11.160425Z", "modified": "2026-10-09T15:13:11.160425Z", "relationship_type": "indicates", "source_ref": "indicator--23e14fce-7c26-4103-9fa1-fa1f95fdfb2a", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b464bbf3-b5c8-42f3-9f70-0d9c540b51c0", "created": "2026-10-09T15:13:11.160547Z", "modified": "2026-10-09T15:13:11.160547Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70dd3c4cff86c5b0dcfdca0cdc2270fd30bf2e364c9c21316d14600154815044']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.160547Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46d45587-f386-4096-98f8-ee6309647946", "created": "2026-10-09T15:13:11.16113Z", "modified": "2026-10-09T15:13:11.16113Z", "relationship_type": "indicates", "source_ref": "indicator--b464bbf3-b5c8-42f3-9f70-0d9c540b51c0", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f9ebe9-fa9c-468d-940b-b1dbb14d2555", "created": "2026-10-09T15:13:11.161252Z", "modified": "2026-10-09T15:13:11.161252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='719ecce6eac26cc407a00ddf4a4394d108fcc0dd45353bfd8ba9a123aba59ebd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.161252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e79e2fb0-eaf1-41eb-babc-872ad1c4acaa", "created": "2026-10-09T15:13:11.161849Z", "modified": "2026-10-09T15:13:11.161849Z", "relationship_type": "indicates", "source_ref": "indicator--d5f9ebe9-fa9c-468d-940b-b1dbb14d2555", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74addd7-8fab-421d-a302-c4b135a6f19d", "created": "2026-10-09T15:13:11.161967Z", "modified": "2026-10-09T15:13:11.161967Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc0c9112d1722f5597800c176ed49fa4603895dd294cedf8fdebe3ace1b65fb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.161967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77e1ee1e-c7b5-4227-826c-0c4a0f0ad501", "created": "2026-10-09T15:13:11.162569Z", "modified": "2026-10-09T15:13:11.162569Z", "relationship_type": "indicates", "source_ref": "indicator--b74addd7-8fab-421d-a302-c4b135a6f19d", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fc8e3a-d790-4816-b441-6267955beb2c", "created": "2026-10-09T15:13:11.162692Z", "modified": "2026-10-09T15:13:11.162692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65bcc5dd6d2e4b5175e8f1110a327c685d081d1fec8b2d26c562407abe334528']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.162692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d85891a5-a592-4917-9f09-45588a1a4666", "created": "2026-10-09T15:13:11.163391Z", "modified": "2026-10-09T15:13:11.163391Z", "relationship_type": "indicates", "source_ref": "indicator--03fc8e3a-d790-4816-b441-6267955beb2c", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84059c6-0702-4233-b453-d2ebc2438c99", "created": "2026-10-09T15:13:11.163513Z", "modified": "2026-10-09T15:13:11.163513Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1d6bb84d938981a3bfcee8490b02672227428ff278cee66675892d560d2c4d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.163513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bae51a80-1a57-4d66-845f-0b9dfac1aa46", "created": "2026-10-09T15:13:11.164091Z", "modified": "2026-10-09T15:13:11.164091Z", "relationship_type": "indicates", "source_ref": "indicator--b84059c6-0702-4233-b453-d2ebc2438c99", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75c1e0e-ff20-4842-b351-0a43019d54c2", "created": "2026-10-09T15:13:11.164211Z", "modified": "2026-10-09T15:13:11.164211Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc73bd23b40a522a79d8a7ba002c9bc4ee7f92e9055e2c97b233a875e63690d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.164211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5356e1e8-7e8c-485b-bf73-acb8a46d152a", "created": "2026-10-09T15:13:11.164808Z", "modified": "2026-10-09T15:13:11.164808Z", "relationship_type": "indicates", "source_ref": "indicator--c75c1e0e-ff20-4842-b351-0a43019d54c2", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58ff775-d320-4557-8317-54f9ff991d8c", "created": "2026-10-09T15:13:11.164931Z", "modified": "2026-10-09T15:13:11.164931Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.avi.scbase']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.164931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e89ae3cb-5912-4c6f-bbe6-b29e0d182b45", "created": "2026-10-09T15:13:11.165404Z", "modified": "2026-10-09T15:13:11.165404Z", "relationship_type": "indicates", "source_ref": "indicator--c58ff775-d320-4557-8317-54f9ff991d8c", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e6d563-c8ce-4160-84dc-18403754a52e", "created": "2026-10-09T15:13:11.165527Z", "modified": "2026-10-09T15:13:11.165527Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20F092BEC76C406223A7943371A1DBBB5BF66C13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.165527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15b8fabd-2821-4d66-b3c4-59c75b00caa9", "created": "2026-10-09T15:13:11.166065Z", "modified": "2026-10-09T15:13:11.166065Z", "relationship_type": "indicates", "source_ref": "indicator--11e6d563-c8ce-4160-84dc-18403754a52e", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55155d7-1e59-4014-ac01-68751aea3036", "created": "2026-10-09T15:13:11.166183Z", "modified": "2026-10-09T15:13:11.166183Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='934A3C0DC8912C4F2F8620F666FC7621BD7B97B8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.166183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21a53cec-4362-4509-ae02-03dfa6be4a89", "created": "2026-10-09T15:13:11.166731Z", "modified": "2026-10-09T15:13:11.166731Z", "relationship_type": "indicates", "source_ref": "indicator--a55155d7-1e59-4014-ac01-68751aea3036", "target_ref": "malware--6b70c590-a63b-43f8-b37b-b39a658c16ec"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9bfbce93-929b-4022-9158-48c7c9a69068", "created": "2026-10-09T15:13:11.16686Z", "modified": "2026-10-09T15:13:11.16686Z", "name": "SpyEra", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8feed2-b77a-4ca8-9cd3-83df8893db34", "created": "2026-10-09T15:13:11.166979Z", "modified": "2026-10-09T15:13:11.166979Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.166979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52b831f2-2e5d-45e3-a9ac-8e787585a885", "created": "2026-10-09T15:13:11.167464Z", "modified": "2026-10-09T15:13:11.167464Z", "relationship_type": "indicates", "source_ref": "indicator--fe8feed2-b77a-4ca8-9cd3-83df8893db34", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc322eb1-c713-40f9-992a-3127416cbb86", "created": "2026-10-09T15:13:11.167584Z", "modified": "2026-10-09T15:13:11.167584Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyera.postaffiliatepro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.167584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5f5c1cc-b2cd-4cba-9242-ac8fed91e07a", "created": "2026-10-09T15:13:11.168074Z", "modified": "2026-10-09T15:13:11.168074Z", "relationship_type": "indicates", "source_ref": "indicator--bc322eb1-c713-40f9-992a-3127416cbb86", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fea62f-58d4-47be-b33e-00ced725ff04", "created": "2026-10-09T15:13:11.168193Z", "modified": "2026-10-09T15:13:11.168193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyera.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.168193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce344ff8-6598-41fa-a880-b0e6dd9751b0", "created": "2026-10-09T15:13:11.168679Z", "modified": "2026-10-09T15:13:11.168679Z", "relationship_type": "indicates", "source_ref": "indicator--a3fea62f-58d4-47be-b33e-00ced725ff04", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72634fef-b4e8-419f-a3c7-9299d6ace26f", "created": "2026-10-09T15:13:11.168799Z", "modified": "2026-10-09T15:13:11.168799Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.spylogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.168799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1cc2aef-90a7-48e3-ad01-411eeb492fcc", "created": "2026-10-09T15:13:11.169391Z", "modified": "2026-10-09T15:13:11.169391Z", "relationship_type": "indicates", "source_ref": "indicator--72634fef-b4e8-419f-a3c7-9299d6ace26f", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b31f5a-4998-4518-a547-7670da4aa0e5", "created": "2026-10-09T15:13:11.169518Z", "modified": "2026-10-09T15:13:11.169518Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.spyera.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.169518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d386e54-b15a-463e-8621-a362fcfe042a", "created": "2026-10-09T15:13:11.169993Z", "modified": "2026-10-09T15:13:11.169993Z", "relationship_type": "indicates", "source_ref": "indicator--e1b31f5a-4998-4518-a547-7670da4aa0e5", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55ca968-1278-4210-9814-6a0baa2d2181", "created": "2026-10-09T15:13:11.170112Z", "modified": "2026-10-09T15:13:11.170112Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='affiliate.spyera.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.170112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f78a5e91-65de-44f1-b1e7-bea990c945a3", "created": "2026-10-09T15:13:11.170592Z", "modified": "2026-10-09T15:13:11.170592Z", "relationship_type": "indicates", "source_ref": "indicator--c55ca968-1278-4210-9814-6a0baa2d2181", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ca67e3-c4b6-42b4-9b0b-3324b4a667e5", "created": "2026-10-09T15:13:11.170714Z", "modified": "2026-10-09T15:13:11.170714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wSpyEra']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.170714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adcbac99-23ed-4672-ad36-5f717ba6d35a", "created": "2026-10-09T15:13:11.171262Z", "modified": "2026-10-09T15:13:11.171262Z", "relationship_type": "indicates", "source_ref": "indicator--87ca67e3-c4b6-42b4-9b0b-3324b4a667e5", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b808df70-c6e4-42c2-92ce-e1700f5bef97", "created": "2026-10-09T15:13:11.171398Z", "modified": "2026-10-09T15:13:11.171398Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='813A3AD37D87AA36120DFEC64146C311DB5F4CA9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.171398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e11f00f9-8407-49af-ac82-d3b66b54f341", "created": "2026-10-09T15:13:11.171944Z", "modified": "2026-10-09T15:13:11.171944Z", "relationship_type": "indicates", "source_ref": "indicator--b808df70-c6e4-42c2-92ce-e1700f5bef97", "target_ref": "malware--9bfbce93-929b-4022-9158-48c7c9a69068"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d241755f-4073-4592-bed4-17851176881e", "created": "2026-10-09T15:13:11.172066Z", "modified": "2026-10-09T15:13:11.172066Z", "name": "AntiFurtoDroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2ac093-61c1-4a70-a4db-c7655dcb1e64", "created": "2026-10-09T15:13:11.172185Z", "modified": "2026-10-09T15:13:11.172185Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.antifurtodroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.172185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17fdff31-96fb-40fa-adbc-1ea2b0d2a2e4", "created": "2026-10-09T15:13:11.172683Z", "modified": "2026-10-09T15:13:11.172683Z", "relationship_type": "indicates", "source_ref": "indicator--0c2ac093-61c1-4a70-a4db-c7655dcb1e64", "target_ref": "malware--d241755f-4073-4592-bed4-17851176881e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eec14f-39f5-48e5-ab61-f5971c41f0ff", "created": "2026-10-09T15:13:11.172804Z", "modified": "2026-10-09T15:13:11.172804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='antifurtodroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.172804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d4fa6b8-3e5d-4ba3-865c-02def5b540c2", "created": "2026-10-09T15:13:11.173291Z", "modified": "2026-10-09T15:13:11.173291Z", "relationship_type": "indicates", "source_ref": "indicator--87eec14f-39f5-48e5-ab61-f5971c41f0ff", "target_ref": "malware--d241755f-4073-4592-bed4-17851176881e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc76ab8c-3a67-4755-84b9-a39585a9a181", "created": "2026-10-09T15:13:11.173414Z", "modified": "2026-10-09T15:13:11.173414Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.maceda.android.antifurtow']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.173414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06dd29f0-02f8-492e-bd9d-e876ac941d41", "created": "2026-10-09T15:13:11.173902Z", "modified": "2026-10-09T15:13:11.173902Z", "relationship_type": "indicates", "source_ref": "indicator--cc76ab8c-3a67-4755-84b9-a39585a9a181", "target_ref": "malware--d241755f-4073-4592-bed4-17851176881e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238db939-6e38-4250-bfde-1b1ab77fa6d2", "created": "2026-10-09T15:13:11.174023Z", "modified": "2026-10-09T15:13:11.174023Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CE94B8512390676F62F3EC61BECEDDDE9AB5519F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.174023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8134b8a5-f42f-4653-8745-8547cf909f9f", "created": "2026-10-09T15:13:11.174584Z", "modified": "2026-10-09T15:13:11.174584Z", "relationship_type": "indicates", "source_ref": "indicator--238db939-6e38-4250-bfde-1b1ab77fa6d2", "target_ref": "malware--d241755f-4073-4592-bed4-17851176881e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--44839438-75bf-4094-8910-dd9563e1179a", "created": "2026-10-09T15:13:11.174707Z", "modified": "2026-10-09T15:13:11.174707Z", "name": "CallSMSTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f15b77b-55c0-4dfd-99d1-3f8a6de3d83a", "created": "2026-10-09T15:13:11.174819Z", "modified": "2026-10-09T15:13:11.174819Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.174819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee65e64d-5b4d-497c-917a-1883cb534dff", "created": "2026-10-09T15:13:11.175423Z", "modified": "2026-10-09T15:13:11.175423Z", "relationship_type": "indicates", "source_ref": "indicator--5f15b77b-55c0-4dfd-99d1-3f8a6de3d83a", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de9459a-5838-4334-8d77-3f7de5d4292a", "created": "2026-10-09T15:13:11.17555Z", "modified": "2026-10-09T15:13:11.17555Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='messages01.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.17555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e729c27c-46f7-4f66-b52b-d574f271bd6f", "created": "2026-10-09T15:13:11.176037Z", "modified": "2026-10-09T15:13:11.176037Z", "relationship_type": "indicates", "source_ref": "indicator--6de9459a-5838-4334-8d77-3f7de5d4292a", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6025e745-e18f-4b75-83d1-ea5a19502978", "created": "2026-10-09T15:13:11.176165Z", "modified": "2026-10-09T15:13:11.176165Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='messages02.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.176165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc754b7e-1ee4-44e3-8403-194100625230", "created": "2026-10-09T15:13:11.176672Z", "modified": "2026-10-09T15:13:11.176672Z", "relationship_type": "indicates", "source_ref": "indicator--6025e745-e18f-4b75-83d1-ea5a19502978", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff893bc6-daf3-4395-894c-46320218f47e", "created": "2026-10-09T15:13:11.176801Z", "modified": "2026-10-09T15:13:11.176801Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='staging.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.176801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a0c7a78-a8cf-447d-a2e1-3261221383a1", "created": "2026-10-09T15:13:11.177291Z", "modified": "2026-10-09T15:13:11.177291Z", "relationship_type": "indicates", "source_ref": "indicator--ff893bc6-daf3-4395-894c-46320218f47e", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbebe1e0-6caf-4f24-8598-cfd09d50d816", "created": "2026-10-09T15:13:11.177419Z", "modified": "2026-10-09T15:13:11.177419Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='callsmstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.177419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b147675-aa53-467d-bee8-ec0d019778d2", "created": "2026-10-09T15:13:11.177894Z", "modified": "2026-10-09T15:13:11.177894Z", "relationship_type": "indicates", "source_ref": "indicator--cbebe1e0-6caf-4f24-8598-cfd09d50d816", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40152b52-386d-433c-a1ad-3eddeeba3020", "created": "2026-10-09T15:13:11.178012Z", "modified": "2026-10-09T15:13:11.178012Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hiddensmstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.178012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08ab2faa-b3d3-4572-b755-c008d3a17605", "created": "2026-10-09T15:13:11.178503Z", "modified": "2026-10-09T15:13:11.178503Z", "relationship_type": "indicates", "source_ref": "indicator--40152b52-386d-433c-a1ad-3eddeeba3020", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96e287b-2953-4752-9c45-63882a3f6095", "created": "2026-10-09T15:13:11.178624Z", "modified": "2026-10-09T15:13:11.178624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hiddensystemhealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.178624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--290bb361-51a7-4ccd-afae-92a9725ce22b", "created": "2026-10-09T15:13:11.179098Z", "modified": "2026-10-09T15:13:11.179098Z", "relationship_type": "indicates", "source_ref": "indicator--c96e287b-2953-4752-9c45-63882a3f6095", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99940c1-ebbf-43c4-918f-bbe1b3c55e54", "created": "2026-10-09T15:13:11.179218Z", "modified": "2026-10-09T15:13:11.179218Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='registrations.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.179218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d92d41d1-f28a-4c45-953a-ca2eb1edf3e8", "created": "2026-10-09T15:13:11.179718Z", "modified": "2026-10-09T15:13:11.179718Z", "relationship_type": "indicates", "source_ref": "indicator--d99940c1-ebbf-43c4-918f-bbe1b3c55e54", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc58722d-d603-4749-989e-bed3c53b9ab3", "created": "2026-10-09T15:13:11.179835Z", "modified": "2026-10-09T15:13:11.179835Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.179835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffc44b1f-ffab-4b7c-9597-a064493e27e5", "created": "2026-10-09T15:13:11.180318Z", "modified": "2026-10-09T15:13:11.180318Z", "relationship_type": "indicates", "source_ref": "indicator--fc58722d-d603-4749-989e-bed3c53b9ab3", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd7bdcc-dc5d-4441-91dd-d388fdab8d2f", "created": "2026-10-09T15:13:11.180437Z", "modified": "2026-10-09T15:13:11.180437Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smstrackerweb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.180437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2b01d67-62f5-4b27-9878-bce63836c3ba", "created": "2026-10-09T15:13:11.181014Z", "modified": "2026-10-09T15:13:11.181014Z", "relationship_type": "indicates", "source_ref": "indicator--3dd7bdcc-dc5d-4441-91dd-d388fdab8d2f", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63b1edf-52ed-4fb0-aa9f-336b1117cea6", "created": "2026-10-09T15:13:11.181138Z", "modified": "2026-10-09T15:13:11.181138Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.hiddensmstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.181138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dcd2a7d-e4a8-4a34-8997-31c676d2f44c", "created": "2026-10-09T15:13:11.181632Z", "modified": "2026-10-09T15:13:11.181632Z", "relationship_type": "indicates", "source_ref": "indicator--b63b1edf-52ed-4fb0-aa9f-336b1117cea6", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef9e798-f73b-40e7-8348-41b88e4fc126", "created": "2026-10-09T15:13:11.181756Z", "modified": "2026-10-09T15:13:11.181756Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.hiddensystemhealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.181756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--962a8241-777c-4eb2-9448-12efa4486327", "created": "2026-10-09T15:13:11.18224Z", "modified": "2026-10-09T15:13:11.18224Z", "relationship_type": "indicates", "source_ref": "indicator--7ef9e798-f73b-40e7-8348-41b88e4fc126", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c23a0c0-85a6-4988-8daa-ba1c7d3903c5", "created": "2026-10-09T15:13:11.182375Z", "modified": "2026-10-09T15:13:11.182375Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.smstrackerweb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.182375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fd23dec-6c5a-4f79-887d-4807a4fdf20d", "created": "2026-10-09T15:13:11.182852Z", "modified": "2026-10-09T15:13:11.182852Z", "relationship_type": "indicates", "source_ref": "indicator--0c23a0c0-85a6-4988-8daa-ba1c7d3903c5", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219beb45-abc7-412d-8847-24f5c04dcf3b", "created": "2026-10-09T15:13:11.182969Z", "modified": "2026-10-09T15:13:11.182969Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_sms_tracker.updated']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.182969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa70e8a5-9ca8-4bfa-a6ea-c8921b133225", "created": "2026-10-09T15:13:11.183454Z", "modified": "2026-10-09T15:13:11.183454Z", "relationship_type": "indicates", "source_ref": "indicator--219beb45-abc7-412d-8847-24f5c04dcf3b", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a490c21d-d13c-4ed5-b4f6-f61a0c0192df", "created": "2026-10-09T15:13:11.183576Z", "modified": "2026-10-09T15:13:11.183576Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gizmoquip.smstracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.183576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44d0d823-7a8b-499e-ac91-adcafb340a36", "created": "2026-10-09T15:13:11.184044Z", "modified": "2026-10-09T15:13:11.184044Z", "relationship_type": "indicates", "source_ref": "indicator--a490c21d-d13c-4ed5-b4f6-f61a0c0192df", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e66eb6b-1130-42b0-a7e6-3b10df89fa05", "created": "2026-10-09T15:13:11.184166Z", "modified": "2026-10-09T15:13:11.184166Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0C01AEB7346C700D02613EBA513BD40E87A182F8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.184166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99a3193f-a654-45c1-943e-a0df452fe7a0", "created": "2026-10-09T15:13:11.184724Z", "modified": "2026-10-09T15:13:11.184724Z", "relationship_type": "indicates", "source_ref": "indicator--8e66eb6b-1130-42b0-a7e6-3b10df89fa05", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c6308a-b1a6-430b-933d-b67546fd1eaf", "created": "2026-10-09T15:13:11.184848Z", "modified": "2026-10-09T15:13:11.184848Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8F576BEEB71EA74E5F27764917BFF5B508017B68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.184848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff61fd9e-3a79-48a0-83ee-ec4d6f95f09d", "created": "2026-10-09T15:13:11.185402Z", "modified": "2026-10-09T15:13:11.185402Z", "relationship_type": "indicates", "source_ref": "indicator--01c6308a-b1a6-430b-933d-b67546fd1eaf", "target_ref": "malware--44839438-75bf-4094-8910-dd9563e1179a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c", "created": "2026-10-09T15:13:11.185523Z", "modified": "2026-10-09T15:13:11.185523Z", "name": "AiSpyer", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa03f7c-3aef-475a-827a-b9d6842771bc", "created": "2026-10-09T15:13:11.185638Z", "modified": "2026-10-09T15:13:11.185638Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ioi.life']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.185638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--900ac302-030f-48d5-804c-bac95e325b1d", "created": "2026-10-09T15:13:11.1861Z", "modified": "2026-10-09T15:13:11.1861Z", "relationship_type": "indicates", "source_ref": "indicator--cfa03f7c-3aef-475a-827a-b9d6842771bc", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff935d9d-4fad-404e-82d0-d86864977531", "created": "2026-10-09T15:13:11.186216Z", "modified": "2026-10-09T15:13:11.186216Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.corn-cob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.186216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f719a6a7-74e0-4499-b4b7-1400aff3beaf", "created": "2026-10-09T15:13:11.186803Z", "modified": "2026-10-09T15:13:11.186803Z", "relationship_type": "indicates", "source_ref": "indicator--ff935d9d-4fad-404e-82d0-d86864977531", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19ce6d1-1a46-4a7f-9d64-236fde40778d", "created": "2026-10-09T15:13:11.186926Z", "modified": "2026-10-09T15:13:11.186926Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='corn-cob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.186926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1976050d-3688-4919-b33c-c6aa77d25327", "created": "2026-10-09T15:13:11.187411Z", "modified": "2026-10-09T15:13:11.187411Z", "relationship_type": "indicates", "source_ref": "indicator--f19ce6d1-1a46-4a7f-9d64-236fde40778d", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845ed043-461b-4524-95b6-c5ec0c6b9cb7", "created": "2026-10-09T15:13:11.187534Z", "modified": "2026-10-09T15:13:11.187534Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.corn-cob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.187534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b526b4ed-b368-4cd8-9f21-5441921b57d9", "created": "2026-10-09T15:13:11.188007Z", "modified": "2026-10-09T15:13:11.188007Z", "relationship_type": "indicates", "source_ref": "indicator--845ed043-461b-4524-95b6-c5ec0c6b9cb7", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c14e08a-534c-4a6b-8472-e07b9c763c30", "created": "2026-10-09T15:13:11.188124Z", "modified": "2026-10-09T15:13:11.188124Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracksp.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.188124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ad986b8-df0b-4676-8a93-45912f94c043", "created": "2026-10-09T15:13:11.188599Z", "modified": "2026-10-09T15:13:11.188599Z", "relationship_type": "indicates", "source_ref": "indicator--9c14e08a-534c-4a6b-8472-e07b9c763c30", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dee1ae9-dc97-4ef6-ac93-0dd062be1e39", "created": "2026-10-09T15:13:11.188723Z", "modified": "2026-10-09T15:13:11.188723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.aispyer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.188723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2d40555-b9ab-4550-9349-45370205b64b", "created": "2026-10-09T15:13:11.189199Z", "modified": "2026-10-09T15:13:11.189199Z", "relationship_type": "indicates", "source_ref": "indicator--3dee1ae9-dc97-4ef6-ac93-0dd062be1e39", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c42f39-c908-4ddc-b0e9-50d64b97362d", "created": "2026-10-09T15:13:11.189329Z", "modified": "2026-10-09T15:13:11.189329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracksp-7743c.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.189329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a307b8e-c958-4ae3-b6a0-63316667d4f9", "created": "2026-10-09T15:13:11.189814Z", "modified": "2026-10-09T15:13:11.189814Z", "relationship_type": "indicates", "source_ref": "indicator--83c42f39-c908-4ddc-b0e9-50d64b97362d", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563c201b-090c-4213-997e-03fa05725c10", "created": "2026-10-09T15:13:11.189933Z", "modified": "2026-10-09T15:13:11.189933Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.ioi.life']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.189933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2882a80-540b-4119-a46b-70bf94f03f2a", "created": "2026-10-09T15:13:11.190402Z", "modified": "2026-10-09T15:13:11.190402Z", "relationship_type": "indicates", "source_ref": "indicator--563c201b-090c-4213-997e-03fa05725c10", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c11769b-ce77-43df-a991-743d2cc8b005", "created": "2026-10-09T15:13:11.190521Z", "modified": "2026-10-09T15:13:11.190521Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aivideoedit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.190521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a775ca75-ba51-413d-8d95-db21d2b22375", "created": "2026-10-09T15:13:11.190997Z", "modified": "2026-10-09T15:13:11.190997Z", "relationship_type": "indicates", "source_ref": "indicator--7c11769b-ce77-43df-a991-743d2cc8b005", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f6372-d71b-4361-88aa-c680a3b656a4", "created": "2026-10-09T15:13:11.191115Z", "modified": "2026-10-09T15:13:11.191115Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aispyer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.191115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bfaed03-0e64-4926-9387-17fcc578e1a8", "created": "2026-10-09T15:13:11.191592Z", "modified": "2026-10-09T15:13:11.191592Z", "relationship_type": "indicates", "source_ref": "indicator--755f6372-d71b-4361-88aa-c680a3b656a4", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f199b926-f506-4c85-a114-599920bcbecf", "created": "2026-10-09T15:13:11.191716Z", "modified": "2026-10-09T15:13:11.191716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.aispyer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.191716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--454840d9-a1c8-474a-a3ad-67823968d60a", "created": "2026-10-09T15:13:11.192294Z", "modified": "2026-10-09T15:13:11.192294Z", "relationship_type": "indicates", "source_ref": "indicator--f199b926-f506-4c85-a114-599920bcbecf", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dfe72d-e27b-49c7-9f13-84203deadc8f", "created": "2026-10-09T15:13:11.192423Z", "modified": "2026-10-09T15:13:11.192423Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aif.tracksp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.192423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9df3329-82a2-4e2d-8c44-30d64fa2246d", "created": "2026-10-09T15:13:11.192885Z", "modified": "2026-10-09T15:13:11.192885Z", "relationship_type": "indicates", "source_ref": "indicator--45dfe72d-e27b-49c7-9f13-84203deadc8f", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5daf6a66-edb5-444c-ba54-3475d8569e43", "created": "2026-10-09T15:13:11.193008Z", "modified": "2026-10-09T15:13:11.193008Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F038CD90AFEA9C037A801FFAE67DF55A870879C4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.193008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--370c1d75-a681-48da-8ae7-d1729ea0ae9e", "created": "2026-10-09T15:13:11.193574Z", "modified": "2026-10-09T15:13:11.193574Z", "relationship_type": "indicates", "source_ref": "indicator--5daf6a66-edb5-444c-ba54-3475d8569e43", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3455a18-6568-4918-9275-9b29cb4bd12d", "created": "2026-10-09T15:13:11.193695Z", "modified": "2026-10-09T15:13:11.193695Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BCA2BCB87F6E28FB403CED643311B135CA0DC0A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.193695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--719ec198-0be9-46b6-b021-785f1a5af991", "created": "2026-10-09T15:13:11.194231Z", "modified": "2026-10-09T15:13:11.194231Z", "relationship_type": "indicates", "source_ref": "indicator--d3455a18-6568-4918-9275-9b29cb4bd12d", "target_ref": "malware--2684e369-3c9d-4e88-8b8b-1138db76cd3c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--667219e0-2e36-4336-9d0d-708602611dcc", "created": "2026-10-09T15:13:11.194368Z", "modified": "2026-10-09T15:13:11.194368Z", "name": "SpyToApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2045cc-460b-4f12-9af5-3b1322c3646d", "created": "2026-10-09T15:13:11.194489Z", "modified": "2026-10-09T15:13:11.194489Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.194489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4a70b26-c54e-4dbf-a425-0750af7c3172", "created": "2026-10-09T15:13:11.194973Z", "modified": "2026-10-09T15:13:11.194973Z", "relationship_type": "indicates", "source_ref": "indicator--ec2045cc-460b-4f12-9af5-3b1322c3646d", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a8251b-1609-43f6-8fe2-de0112d68ae9", "created": "2026-10-09T15:13:11.195092Z", "modified": "2026-10-09T15:13:11.195092Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk01.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.195092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a30d819-66b1-4349-ace3-16adec9967bd", "created": "2026-10-09T15:13:11.195579Z", "modified": "2026-10-09T15:13:11.195579Z", "relationship_type": "indicates", "source_ref": "indicator--b6a8251b-1609-43f6-8fe2-de0112d68ae9", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794259a1-241c-431a-bff9-c5f671b07424", "created": "2026-10-09T15:13:11.195698Z", "modified": "2026-10-09T15:13:11.195698Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk02.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.195698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58e8d4bb-2870-42e7-8cc2-d04d1572bf3c", "created": "2026-10-09T15:13:11.196173Z", "modified": "2026-10-09T15:13:11.196173Z", "relationship_type": "indicates", "source_ref": "indicator--794259a1-241c-431a-bff9-c5f671b07424", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f944b20-e0ae-4166-90a3-059b855bacea", "created": "2026-10-09T15:13:11.196303Z", "modified": "2026-10-09T15:13:11.196303Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk03.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.196303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41d1b3f2-0cc1-461b-851a-59a43eb8292d", "created": "2026-10-09T15:13:11.196788Z", "modified": "2026-10-09T15:13:11.196788Z", "relationship_type": "indicates", "source_ref": "indicator--5f944b20-e0ae-4166-90a3-059b855bacea", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66d60e3-8f0c-45ca-ba50-b80086857f7e", "created": "2026-10-09T15:13:11.196915Z", "modified": "2026-10-09T15:13:11.196915Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk04.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.196915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cb6a8b1-8cc8-4d72-9007-adaf548821f3", "created": "2026-10-09T15:13:11.197402Z", "modified": "2026-10-09T15:13:11.197402Z", "relationship_type": "indicates", "source_ref": "indicator--f66d60e3-8f0c-45ca-ba50-b80086857f7e", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32628ec3-8845-4d83-88a7-0aa2206d3c7d", "created": "2026-10-09T15:13:11.197521Z", "modified": "2026-10-09T15:13:11.197521Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='downapk.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.197521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d0c7432-5999-44a7-9dcb-c8a27fc007f7", "created": "2026-10-09T15:13:11.198093Z", "modified": "2026-10-09T15:13:11.198093Z", "relationship_type": "indicates", "source_ref": "indicator--32628ec3-8845-4d83-88a7-0aa2206d3c7d", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3113cac7-92e2-4d78-adae-d52caeb1ab31", "created": "2026-10-09T15:13:11.198213Z", "modified": "2026-10-09T15:13:11.198213Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='services.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.198213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--292849fc-1d2f-48ca-8f77-59b5f26471b9", "created": "2026-10-09T15:13:11.198714Z", "modified": "2026-10-09T15:13:11.198714Z", "relationship_type": "indicates", "source_ref": "indicator--3113cac7-92e2-4d78-adae-d52caeb1ab31", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941de72c-c842-421c-946a-a42eabd849fb", "created": "2026-10-09T15:13:11.19884Z", "modified": "2026-10-09T15:13:11.19884Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.19884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--325c6e9f-7206-4020-99fa-3aa6f0770fe7", "created": "2026-10-09T15:13:11.199317Z", "modified": "2026-10-09T15:13:11.199317Z", "relationship_type": "indicates", "source_ref": "indicator--941de72c-c842-421c-946a-a42eabd849fb", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0633dc57-04d6-4803-8c97-c6fa4a6ce9fe", "created": "2026-10-09T15:13:11.19944Z", "modified": "2026-10-09T15:13:11.19944Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spytoapp.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.19944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--407da5ff-5c8a-4da3-8180-ef56a35b7d1f", "created": "2026-10-09T15:13:11.19989Z", "modified": "2026-10-09T15:13:11.19989Z", "relationship_type": "indicates", "source_ref": "indicator--0633dc57-04d6-4803-8c97-c6fa4a6ce9fe", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8c58e3-e658-49fb-89b5-67f30b7a8ba1", "created": "2026-10-09T15:13:11.200011Z", "modified": "2026-10-09T15:13:11.200011Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6F93929AB60AC760000E873CD7C56BA79A9E6CAD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.200011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fceeb23d-cb20-4d91-b208-da790b13f4b3", "created": "2026-10-09T15:13:11.200564Z", "modified": "2026-10-09T15:13:11.200564Z", "relationship_type": "indicates", "source_ref": "indicator--df8c58e3-e658-49fb-89b5-67f30b7a8ba1", "target_ref": "malware--667219e0-2e36-4336-9d0d-708602611dcc"}, {"type": "malware", "spec_version": "2.1", "id": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf", "created": "2026-10-09T15:13:11.200682Z", "modified": "2026-10-09T15:13:11.200682Z", "name": "BlurSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f391d780-460a-4fb5-8fce-c1a7e333fc18", "created": "2026-10-09T15:13:11.200807Z", "modified": "2026-10-09T15:13:11.200807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp-8916f.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.200807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8951789-75f0-4b5a-9df0-f107661d59c3", "created": "2026-10-09T15:13:11.2013Z", "modified": "2026-10-09T15:13:11.2013Z", "relationship_type": "indicates", "source_ref": "indicator--f391d780-460a-4fb5-8fce-c1a7e333fc18", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d26a43-2039-4a32-b9a3-4415f37c66e5", "created": "2026-10-09T15:13:11.201424Z", "modified": "2026-10-09T15:13:11.201424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='blurspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.201424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97bfda3b-4212-41fe-ba59-8a8794988a3e", "created": "2026-10-09T15:13:11.201886Z", "modified": "2026-10-09T15:13:11.201886Z", "relationship_type": "indicates", "source_ref": "indicator--c4d26a43-2039-4a32-b9a3-4415f37c66e5", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d937aa02-e3d7-423a-994c-7e2e8b95c62c", "created": "2026-10-09T15:13:11.202003Z", "modified": "2026-10-09T15:13:11.202003Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='8916f.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.202003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3db9e605-d041-46f8-8f34-26a754acb5ed", "created": "2026-10-09T15:13:11.202492Z", "modified": "2026-10-09T15:13:11.202492Z", "relationship_type": "indicates", "source_ref": "indicator--d937aa02-e3d7-423a-994c-7e2e8b95c62c", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b519585-b87c-459a-8db2-e5bfe5db16ef", "created": "2026-10-09T15:13:11.20261Z", "modified": "2026-10-09T15:13:11.20261Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.blurspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.20261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0f351ca-df9b-4136-87c4-d828a173698e", "created": "2026-10-09T15:13:11.203082Z", "modified": "2026-10-09T15:13:11.203082Z", "relationship_type": "indicates", "source_ref": "indicator--5b519585-b87c-459a-8db2-e5bfe5db16ef", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02a488b-8659-4579-ac30-e0330f02f31f", "created": "2026-10-09T15:13:11.203198Z", "modified": "2026-10-09T15:13:11.203198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='blurspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.203198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19fd89e8-fc61-4212-ba55-9f81882f1c12", "created": "2026-10-09T15:13:11.203769Z", "modified": "2026-10-09T15:13:11.203769Z", "relationship_type": "indicates", "source_ref": "indicator--e02a488b-8659-4579-ac30-e0330f02f31f", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba488be-2ca4-440f-ab24-a7fb933eb8c8", "created": "2026-10-09T15:13:11.203898Z", "modified": "2026-10-09T15:13:11.203898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xoxospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.203898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb23ad0e-9bec-45ad-a1c9-01e87001e6e1", "created": "2026-10-09T15:13:11.204383Z", "modified": "2026-10-09T15:13:11.204383Z", "relationship_type": "indicates", "source_ref": "indicator--eba488be-2ca4-440f-ab24-a7fb933eb8c8", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c655cccf-0ff7-4059-b8cd-0ccbc94802ff", "created": "2026-10-09T15:13:11.204505Z", "modified": "2026-10-09T15:13:11.204505Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.saloomughal.spyapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.204505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10837095-e5f8-473f-9b18-ea5c73184880", "created": "2026-10-09T15:13:11.204962Z", "modified": "2026-10-09T15:13:11.204962Z", "relationship_type": "indicates", "source_ref": "indicator--c655cccf-0ff7-4059-b8cd-0ccbc94802ff", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dbee53-7ea4-41df-a111-2ce94e8ac8c7", "created": "2026-10-09T15:13:11.205079Z", "modified": "2026-10-09T15:13:11.205079Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4CACA12EB37B7A7F07AE380C7E1741D2C36531DF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.205079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--336035ac-b7f2-4318-a1a5-4e74bad7aa3e", "created": "2026-10-09T15:13:11.205638Z", "modified": "2026-10-09T15:13:11.205638Z", "relationship_type": "indicates", "source_ref": "indicator--69dbee53-7ea4-41df-a111-2ce94e8ac8c7", "target_ref": "malware--70fc6f38-a16e-4b9d-b95b-1d1d2ed3e8bf"}, {"type": "malware", "spec_version": "2.1", "id": "malware--cc670f75-422e-497e-8057-eff8abc93008", "created": "2026-10-09T15:13:11.205763Z", "modified": "2026-10-09T15:13:11.205763Z", "name": "AppMia", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c10567-c3fe-4dec-831d-b4695e378488", "created": "2026-10-09T15:13:11.205888Z", "modified": "2026-10-09T15:13:11.205888Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tr.appmia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.205888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02afc5eb-fbc4-425c-9261-33d3f1ad4faf", "created": "2026-10-09T15:13:11.206372Z", "modified": "2026-10-09T15:13:11.206372Z", "relationship_type": "indicates", "source_ref": "indicator--80c10567-c3fe-4dec-831d-b4695e378488", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f07942b-aa5d-420f-b1bd-0131dbb9ca11", "created": "2026-10-09T15:13:11.206496Z", "modified": "2026-10-09T15:13:11.206496Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.206496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9f01d27-e78c-4c8a-8f61-dcf0a2c62d05", "created": "2026-10-09T15:13:11.206963Z", "modified": "2026-10-09T15:13:11.206963Z", "relationship_type": "indicates", "source_ref": "indicator--8f07942b-aa5d-420f-b1bd-0131dbb9ca11", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e46fa6-f2e7-4fa9-a50d-59af6a01ff90", "created": "2026-10-09T15:13:11.207083Z", "modified": "2026-10-09T15:13:11.207083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.com.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.207083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ab2c14d-bf8e-4afd-9ce7-6bad5259a5c1", "created": "2026-10-09T15:13:11.207561Z", "modified": "2026-10-09T15:13:11.207561Z", "relationship_type": "indicates", "source_ref": "indicator--33e46fa6-f2e7-4fa9-a50d-59af6a01ff90", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988b7c01-6860-4844-a7c5-8f382fd36ca4", "created": "2026-10-09T15:13:11.20768Z", "modified": "2026-10-09T15:13:11.20768Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.20768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a283b9c-b5d7-4876-b225-aa291e0db59d", "created": "2026-10-09T15:13:11.208147Z", "modified": "2026-10-09T15:13:11.208147Z", "relationship_type": "indicates", "source_ref": "indicator--988b7c01-6860-4844-a7c5-8f382fd36ca4", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0216a3d-9844-4a14-9e30-3bed051fb0f4", "created": "2026-10-09T15:13:11.208278Z", "modified": "2026-10-09T15:13:11.208278Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.208278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c2c1c82-75fa-473f-b61f-bf8f08edf97d", "created": "2026-10-09T15:13:11.208742Z", "modified": "2026-10-09T15:13:11.208742Z", "relationship_type": "indicates", "source_ref": "indicator--e0216a3d-9844-4a14-9e30-3bed051fb0f4", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd7bdb7-89a1-41bb-a925-e5d272838213", "created": "2026-10-09T15:13:11.208859Z", "modified": "2026-10-09T15:13:11.208859Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.appmia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.208859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5759e26f-0e35-47c3-85ce-f3f188f04e2b", "created": "2026-10-09T15:13:11.209454Z", "modified": "2026-10-09T15:13:11.209454Z", "relationship_type": "indicates", "source_ref": "indicator--1cd7bdb7-89a1-41bb-a925-e5d272838213", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd34a79f-6c7b-46e2-a1c5-fb9e59e22085", "created": "2026-10-09T15:13:11.209578Z", "modified": "2026-10-09T15:13:11.209578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.system.devicelogs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.209578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8192cb13-34e7-49c9-ad66-9a7ccafdf9fb", "created": "2026-10-09T15:13:11.210051Z", "modified": "2026-10-09T15:13:11.210051Z", "relationship_type": "indicates", "source_ref": "indicator--dd34a79f-6c7b-46e2-a1c5-fb9e59e22085", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a609a4-3e37-4305-a274-1ad520d7400c", "created": "2026-10-09T15:13:11.210172Z", "modified": "2026-10-09T15:13:11.210172Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C51C36FE4F1DFC0C5B8CD55F74773135C1C1E1E5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.210172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9521f086-5f7b-43b9-aa69-08d5551fc9cd", "created": "2026-10-09T15:13:11.210729Z", "modified": "2026-10-09T15:13:11.210729Z", "relationship_type": "indicates", "source_ref": "indicator--02a609a4-3e37-4305-a274-1ad520d7400c", "target_ref": "malware--cc670f75-422e-497e-8057-eff8abc93008"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3f2cf0a0-7459-4f34-86fe-37ab1627d20e", "created": "2026-10-09T15:13:11.210849Z", "modified": "2026-10-09T15:13:11.210849Z", "name": "SecretCamRecorder", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03469ec7-3aee-4d86-88d1-4ff8580ba242", "created": "2026-10-09T15:13:11.210965Z", "modified": "2026-10-09T15:13:11.210965Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tools.secretcamcorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.210965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d33a3621-4361-41bc-a146-6d66471c1c28", "created": "2026-10-09T15:13:11.21144Z", "modified": "2026-10-09T15:13:11.21144Z", "relationship_type": "indicates", "source_ref": "indicator--03469ec7-3aee-4d86-88d1-4ff8580ba242", "target_ref": "malware--3f2cf0a0-7459-4f34-86fe-37ab1627d20e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22", "created": "2026-10-09T15:13:11.211559Z", "modified": "2026-10-09T15:13:11.211559Z", "name": "Unisafe", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77162c59-2502-4d15-ae32-4a41a9da09d6", "created": "2026-10-09T15:13:11.211671Z", "modified": "2026-10-09T15:13:11.211671Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a342f.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.211671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60875119-5d77-4816-9979-659cf95517a0", "created": "2026-10-09T15:13:11.212145Z", "modified": "2026-10-09T15:13:11.212145Z", "relationship_type": "indicates", "source_ref": "indicator--77162c59-2502-4d15-ae32-4a41a9da09d6", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d150f967-ad89-444e-91dc-41c496b7eb2a", "created": "2026-10-09T15:13:11.212275Z", "modified": "2026-10-09T15:13:11.212275Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='unisafe-a342f.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.212275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34541520-eb22-496a-b92e-c7744eb850c9", "created": "2026-10-09T15:13:11.212767Z", "modified": "2026-10-09T15:13:11.212767Z", "relationship_type": "indicates", "source_ref": "indicator--d150f967-ad89-444e-91dc-41c496b7eb2a", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab8d9c9-324b-442b-b7f8-a5df4c4a036d", "created": "2026-10-09T15:13:11.212885Z", "modified": "2026-10-09T15:13:11.212885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='usafe-ca594.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.212885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--025acb58-306e-4308-b138-712092d3a34f", "created": "2026-10-09T15:13:11.213386Z", "modified": "2026-10-09T15:13:11.213386Z", "relationship_type": "indicates", "source_ref": "indicator--dab8d9c9-324b-442b-b7f8-a5df4c4a036d", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb86dfa-56d3-43f0-801b-adea8f7aafca", "created": "2026-10-09T15:13:11.21351Z", "modified": "2026-10-09T15:13:11.21351Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='usafe.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.21351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b9e31ca-ed0a-4b28-a606-c6412a4c2e3e", "created": "2026-10-09T15:13:11.213977Z", "modified": "2026-10-09T15:13:11.213977Z", "relationship_type": "indicates", "source_ref": "indicator--beb86dfa-56d3-43f0-801b-adea8f7aafca", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af99775a-ccb9-48e4-ad0a-7d8eacfeaa40", "created": "2026-10-09T15:13:11.214103Z", "modified": "2026-10-09T15:13:11.214103Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='usafe.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.214103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae618622-ff10-47c9-998e-39a399904e29", "created": "2026-10-09T15:13:11.214625Z", "modified": "2026-10-09T15:13:11.214625Z", "relationship_type": "indicates", "source_ref": "indicator--af99775a-ccb9-48e4-ad0a-7d8eacfeaa40", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f082bd5-f88f-43c4-b950-1ca0b69008a5", "created": "2026-10-09T15:13:11.214776Z", "modified": "2026-10-09T15:13:11.214776Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='unisafe.su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.214776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6d2939-d04e-4632-8f52-b8de5d01da7c", "created": "2026-10-09T15:13:11.215369Z", "modified": "2026-10-09T15:13:11.215369Z", "relationship_type": "indicates", "source_ref": "indicator--7f082bd5-f88f-43c4-b950-1ca0b69008a5", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783a4b2e-f526-4740-95e4-fd0f57270331", "created": "2026-10-09T15:13:11.215496Z", "modified": "2026-10-09T15:13:11.215496Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='unisafe.techmas.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.215496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1a9b333-1110-4ab2-83b4-b045d14b6c17", "created": "2026-10-09T15:13:11.215984Z", "modified": "2026-10-09T15:13:11.215984Z", "relationship_type": "indicates", "source_ref": "indicator--783a4b2e-f526-4740-95e4-fd0f57270331", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c726d0f-fb7c-4f5e-bd87-fa67833cc42b", "created": "2026-10-09T15:13:11.216112Z", "modified": "2026-10-09T15:13:11.216112Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ru.usafe.u_safe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.216112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--263b12d1-5a9e-4f13-b5c1-b2435ac196b8", "created": "2026-10-09T15:13:11.216577Z", "modified": "2026-10-09T15:13:11.216577Z", "relationship_type": "indicates", "source_ref": "indicator--2c726d0f-fb7c-4f5e-bd87-fa67833cc42b", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9e8de0-619d-48da-ab7e-e11e45ad0f10", "created": "2026-10-09T15:13:11.216699Z", "modified": "2026-10-09T15:13:11.216699Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ru.usafe.usafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.216699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02c95dca-85d5-4682-aa78-92a2817ac6bb", "created": "2026-10-09T15:13:11.217151Z", "modified": "2026-10-09T15:13:11.217151Z", "relationship_type": "indicates", "source_ref": "indicator--9a9e8de0-619d-48da-ab7e-e11e45ad0f10", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91847c1-887c-4925-87cb-99196f121191", "created": "2026-10-09T15:13:11.217282Z", "modified": "2026-10-09T15:13:11.217282Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ru.usafe.kid.unisafekids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.217282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f1a5661-0c1f-491c-89d0-7a51b69cb729", "created": "2026-10-09T15:13:11.217753Z", "modified": "2026-10-09T15:13:11.217753Z", "relationship_type": "indicates", "source_ref": "indicator--b91847c1-887c-4925-87cb-99196f121191", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce4ed59-ddce-4115-88f1-a500b347f09f", "created": "2026-10-09T15:13:11.217874Z", "modified": "2026-10-09T15:13:11.217874Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='su.unisafe.unisafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.217874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f14f380-94ea-4634-aa83-73ca0b558f46", "created": "2026-10-09T15:13:11.218342Z", "modified": "2026-10-09T15:13:11.218342Z", "relationship_type": "indicates", "source_ref": "indicator--3ce4ed59-ddce-4115-88f1-a500b347f09f", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7cf3e4-c709-4913-b4bb-0df7ddf84f19", "created": "2026-10-09T15:13:11.218464Z", "modified": "2026-10-09T15:13:11.218464Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20AB40ACC2822A34EC199622CDCA9D7A63BB302B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.218464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9511155d-27ff-4265-a1df-9af4b1e14203", "created": "2026-10-09T15:13:11.219026Z", "modified": "2026-10-09T15:13:11.219026Z", "relationship_type": "indicates", "source_ref": "indicator--ed7cf3e4-c709-4913-b4bb-0df7ddf84f19", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e351f533-9e88-4e93-883c-5b3d61ca2060", "created": "2026-10-09T15:13:11.219147Z", "modified": "2026-10-09T15:13:11.219147Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='41862C48D4BBC2A83DB3CE6EBA0D0C53E3D882B6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.219147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51973c95-20fa-4195-b9a8-bf91a91b1592", "created": "2026-10-09T15:13:11.21971Z", "modified": "2026-10-09T15:13:11.21971Z", "relationship_type": "indicates", "source_ref": "indicator--e351f533-9e88-4e93-883c-5b3d61ca2060", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7d68ba-dbf0-4d4b-a3ab-241b7e33c9d2", "created": "2026-10-09T15:13:11.219834Z", "modified": "2026-10-09T15:13:11.219834Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A519EF2B8C4E73A097065B322687C9D38DED610C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.219834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bae8d656-f114-4201-adf2-856374564084", "created": "2026-10-09T15:13:11.220394Z", "modified": "2026-10-09T15:13:11.220394Z", "relationship_type": "indicates", "source_ref": "indicator--1f7d68ba-dbf0-4d4b-a3ab-241b7e33c9d2", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecded96d-6576-46d3-980d-345b3a40871c", "created": "2026-10-09T15:13:11.220516Z", "modified": "2026-10-09T15:13:11.220516Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B5895930053256D408DE74B66BA132B73CB21527']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.220516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14c5c5ed-85d8-471c-b6e0-4bd3883216f2", "created": "2026-10-09T15:13:11.221528Z", "modified": "2026-10-09T15:13:11.221528Z", "relationship_type": "indicates", "source_ref": "indicator--ecded96d-6576-46d3-980d-345b3a40871c", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce241c3c-9384-4fcd-ab83-df15bd5d62b4", "created": "2026-10-09T15:13:11.221666Z", "modified": "2026-10-09T15:13:11.221666Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FCB6F780EA8F2FE7249F66C6348572BDBD54F576']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.221666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea28fa3c-2d76-42da-8c5b-cf58917d30c9", "created": "2026-10-09T15:13:11.222228Z", "modified": "2026-10-09T15:13:11.222228Z", "relationship_type": "indicates", "source_ref": "indicator--ce241c3c-9384-4fcd-ab83-df15bd5d62b4", "target_ref": "malware--2dad53f9-27fe-4fbb-9128-a0c989f44d22"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895", "created": "2026-10-09T15:13:11.222359Z", "modified": "2026-10-09T15:13:11.222359Z", "name": "TrackView", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0f2a02-2446-4c77-a83a-c6080e9aedf4", "created": "2026-10-09T15:13:11.22248Z", "modified": "2026-10-09T15:13:11.22248Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='analytics.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.22248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1aed676a-298c-42ee-b01f-69e608ed6ac2", "created": "2026-10-09T15:13:11.222967Z", "modified": "2026-10-09T15:13:11.222967Z", "relationship_type": "indicates", "source_ref": "indicator--0b0f2a02-2446-4c77-a83a-c6080e9aedf4", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ee6a79-1a49-4045-90d4-85e1611522ff", "created": "2026-10-09T15:13:11.223087Z", "modified": "2026-10-09T15:13:11.223087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api-project-285519687053.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.223087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0651a239-8408-468a-8525-f2a2450787b8", "created": "2026-10-09T15:13:11.223616Z", "modified": "2026-10-09T15:13:11.223616Z", "relationship_type": "indicates", "source_ref": "indicator--f8ee6a79-1a49-4045-90d4-85e1611522ff", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e9a9a3-4046-46bd-aff7-0b35ec57a629", "created": "2026-10-09T15:13:11.223742Z", "modified": "2026-10-09T15:13:11.223742Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.223742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fdd1684-5c1b-460a-b80b-c1b75bfde424", "created": "2026-10-09T15:13:11.224225Z", "modified": "2026-10-09T15:13:11.224225Z", "relationship_type": "indicates", "source_ref": "indicator--48e9a9a3-4046-46bd-aff7-0b35ec57a629", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab73514-1916-414b-9b4c-7fec881b5159", "created": "2026-10-09T15:13:11.22436Z", "modified": "2026-10-09T15:13:11.22436Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.trackview.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.22436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cb525a0-b3b2-4609-b67c-b648a9752996", "created": "2026-10-09T15:13:11.224853Z", "modified": "2026-10-09T15:13:11.224853Z", "relationship_type": "indicates", "source_ref": "indicator--7ab73514-1916-414b-9b4c-7fec881b5159", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1637b3fc-95a7-4011-a17b-662769d9c3f6", "created": "2026-10-09T15:13:11.224974Z", "modified": "2026-10-09T15:13:11.224974Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cnapi.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.224974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--310abfbc-e3b0-4561-8f19-36f6bcd7c6b0", "created": "2026-10-09T15:13:11.225465Z", "modified": "2026-10-09T15:13:11.225465Z", "relationship_type": "indicates", "source_ref": "indicator--1637b3fc-95a7-4011-a17b-662769d9c3f6", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be672500-33c4-4395-9acd-31773133c605", "created": "2026-10-09T15:13:11.225589Z", "modified": "2026-10-09T15:13:11.225589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lifecircle-223805.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.225589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--443816c5-f25f-4a0f-8ff4-423e304a67ab", "created": "2026-10-09T15:13:11.226085Z", "modified": "2026-10-09T15:13:11.226085Z", "relationship_type": "indicates", "source_ref": "indicator--be672500-33c4-4395-9acd-31773133c605", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064db35b-6306-4c0d-9170-018ce0711bfb", "created": "2026-10-09T15:13:11.226202Z", "modified": "2026-10-09T15:13:11.226202Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.226202Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff3ea8e0-bf25-4293-9c2c-a01dfe657ece", "created": "2026-10-09T15:13:11.22668Z", "modified": "2026-10-09T15:13:11.22668Z", "relationship_type": "indicates", "source_ref": "indicator--064db35b-6306-4c0d-9170-018ce0711bfb", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea09657-5b41-4510-ada8-db13cab2ee95", "created": "2026-10-09T15:13:11.226804Z", "modified": "2026-10-09T15:13:11.226804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rc-api.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.226804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0c1776a-fb55-4f22-a0e2-c9fd79a29761", "created": "2026-10-09T15:13:11.227403Z", "modified": "2026-10-09T15:13:11.227403Z", "relationship_type": "indicates", "source_ref": "indicator--7ea09657-5b41-4510-ada8-db13cab2ee95", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa76877-eeab-462f-bd38-324e122d60b1", "created": "2026-10-09T15:13:11.22753Z", "modified": "2026-10-09T15:13:11.22753Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.22753Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8eecf551-5e6b-44cd-8bab-c4c6912d0c2f", "created": "2026-10-09T15:13:11.228003Z", "modified": "2026-10-09T15:13:11.228003Z", "relationship_type": "indicates", "source_ref": "indicator--4fa76877-eeab-462f-bd38-324e122d60b1", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d333f1-7cca-4d00-8d71-e1765313a956", "created": "2026-10-09T15:13:11.228122Z", "modified": "2026-10-09T15:13:11.228122Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us-central1-api-project-285519687053.cloudfunctions.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.228122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a84fc5d5-ca14-44d6-9bf3-0b136f784e29", "created": "2026-10-09T15:13:11.228653Z", "modified": "2026-10-09T15:13:11.228653Z", "relationship_type": "indicates", "source_ref": "indicator--30d333f1-7cca-4d00-8d71-e1765313a956", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8ba460-9f97-449d-ba32-b23a167716a4", "created": "2026-10-09T15:13:11.228778Z", "modified": "2026-10-09T15:13:11.228778Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.228778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c359bb2a-8aef-40b9-87dc-6c59916e6b81", "created": "2026-10-09T15:13:11.229257Z", "modified": "2026-10-09T15:13:11.229257Z", "relationship_type": "indicates", "source_ref": "indicator--0a8ba460-9f97-449d-ba32-b23a167716a4", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111514f0-2094-484e-b731-80d578917b9d", "created": "2026-10-09T15:13:11.229391Z", "modified": "2026-10-09T15:13:11.229391Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user2.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.229391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbaac76e-f277-4643-b195-a644b71f1d77", "created": "2026-10-09T15:13:11.229868Z", "modified": "2026-10-09T15:13:11.229868Z", "relationship_type": "indicates", "source_ref": "indicator--111514f0-2094-484e-b731-80d578917b9d", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1609ee-5af2-4e30-bbcb-d80e2c2f3ad7", "created": "2026-10-09T15:13:11.229985Z", "modified": "2026-10-09T15:13:11.229985Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='relay1.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.229985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f523cf4-c0e9-4cba-8bae-e8f4f16a1dc9", "created": "2026-10-09T15:13:11.230489Z", "modified": "2026-10-09T15:13:11.230489Z", "relationship_type": "indicates", "source_ref": "indicator--fc1609ee-5af2-4e30-bbcb-d80e2c2f3ad7", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287dddfc-54b2-4618-b1c9-1642318ad10a", "created": "2026-10-09T15:13:11.230617Z", "modified": "2026-10-09T15:13:11.230617Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='chome.zstone.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.230617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27bf46b4-98f2-4f8a-8934-a9a94278f240", "created": "2026-10-09T15:13:11.231091Z", "modified": "2026-10-09T15:13:11.231091Z", "relationship_type": "indicates", "source_ref": "indicator--287dddfc-54b2-4618-b1c9-1642318ad10a", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1ab9bb-6d03-4ea8-931b-a362a619f08c", "created": "2026-10-09T15:13:11.23121Z", "modified": "2026-10-09T15:13:11.23121Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.23121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b536b352-ad75-4f7c-9fab-fbaad60a13f5", "created": "2026-10-09T15:13:11.231709Z", "modified": "2026-10-09T15:13:11.231709Z", "relationship_type": "indicates", "source_ref": "indicator--ce1ab9bb-6d03-4ea8-931b-a362a619f08c", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081986d1-fefc-404c-a8ee-d9f123c50383", "created": "2026-10-09T15:13:11.231827Z", "modified": "2026-10-09T15:13:11.231827Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.231827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97a3a5a2-6b31-449e-bfe2-0a697c890cba", "created": "2026-10-09T15:13:11.232314Z", "modified": "2026-10-09T15:13:11.232314Z", "relationship_type": "indicates", "source_ref": "indicator--081986d1-fefc-404c-a8ee-d9f123c50383", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c28bb08-82b6-4ba6-b0d7-e472bde6db3d", "created": "2026-10-09T15:13:11.232436Z", "modified": "2026-10-09T15:13:11.232436Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackview.recurly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.232436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--023a99eb-b63a-4b82-97b0-3e16d75461bb", "created": "2026-10-09T15:13:11.232923Z", "modified": "2026-10-09T15:13:11.232923Z", "relationship_type": "indicates", "source_ref": "indicator--7c28bb08-82b6-4ba6-b0d7-e472bde6db3d", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de0c214-8822-46a2-932f-06a9f41b3313", "created": "2026-10-09T15:13:11.233041Z", "modified": "2026-10-09T15:13:11.233041Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c2405e04fc52f07816c9795fd1a7cecf6596e765d3070bab1b33f3a84f2b115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.233041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23b64e90-081f-4d0a-8c48-4abccf0eb671", "created": "2026-10-09T15:13:11.233762Z", "modified": "2026-10-09T15:13:11.233762Z", "relationship_type": "indicates", "source_ref": "indicator--3de0c214-8822-46a2-932f-06a9f41b3313", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee06ba71-1e5d-4e26-946e-ab59dc570b06", "created": "2026-10-09T15:13:11.233887Z", "modified": "2026-10-09T15:13:11.233887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b5c0d9653e2335b4aaf7ec061cb496eb1334543afd01df032cb3cd751c41c73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.233887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06961670-8d7b-4961-8a4d-21cdd8d5978c", "created": "2026-10-09T15:13:11.234488Z", "modified": "2026-10-09T15:13:11.234488Z", "relationship_type": "indicates", "source_ref": "indicator--ee06ba71-1e5d-4e26-946e-ab59dc570b06", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb79008-cf19-43d9-b2c4-9ffdc266da9d", "created": "2026-10-09T15:13:11.234616Z", "modified": "2026-10-09T15:13:11.234616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b418fa0e2b1945c266876821c872e22dcceafd99370bbe9f4df398f0a4f4eaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.234616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--753c792e-c9bc-43af-aac4-c3ec9522d529", "created": "2026-10-09T15:13:11.235218Z", "modified": "2026-10-09T15:13:11.235218Z", "relationship_type": "indicates", "source_ref": "indicator--3eb79008-cf19-43d9-b2c4-9ffdc266da9d", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d93bc91-8fe3-4986-bdcb-5ac815cc5165", "created": "2026-10-09T15:13:11.235354Z", "modified": "2026-10-09T15:13:11.235354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eac441660df55c3eeed1b091edd8b4be54d1bef625646f92ae6228fcd6c5c5f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.235354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab1a82cc-6de4-4204-ae5d-2a4e9fa658a3", "created": "2026-10-09T15:13:11.235948Z", "modified": "2026-10-09T15:13:11.235948Z", "relationship_type": "indicates", "source_ref": "indicator--9d93bc91-8fe3-4986-bdcb-5ac815cc5165", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fb484d-db6b-463c-a169-79db4e26bd30", "created": "2026-10-09T15:13:11.236069Z", "modified": "2026-10-09T15:13:11.236069Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a5ffa547d183b28055e5a06436339a01917733675ebe838a1807ee6e71a038e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.236069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cb24b65-9ba6-41b4-9c8c-211d43339497", "created": "2026-10-09T15:13:11.236675Z", "modified": "2026-10-09T15:13:11.236675Z", "relationship_type": "indicates", "source_ref": "indicator--f1fb484d-db6b-463c-a169-79db4e26bd30", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f01dcad-bdfb-4bf9-b3c3-94360670fe4b", "created": "2026-10-09T15:13:11.2368Z", "modified": "2026-10-09T15:13:11.2368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.2368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--491d3c29-dd5d-47d7-a454-97b248f0fd86", "created": "2026-10-09T15:13:11.237391Z", "modified": "2026-10-09T15:13:11.237391Z", "relationship_type": "indicates", "source_ref": "indicator--8f01dcad-bdfb-4bf9-b3c3-94360670fe4b", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a8d34b-ef51-4dfc-b516-4b72be96583e", "created": "2026-10-09T15:13:11.237516Z", "modified": "2026-10-09T15:13:11.237516Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40fbff552a9f4eb15f780bc4a7eba5db8a5aa167b4ec07e82593ce4aa56dcc19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.237516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d59f56b5-86cd-4fa2-a430-d83e19948cb2", "created": "2026-10-09T15:13:11.238106Z", "modified": "2026-10-09T15:13:11.238106Z", "relationship_type": "indicates", "source_ref": "indicator--66a8d34b-ef51-4dfc-b516-4b72be96583e", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555b8910-00f5-4ad9-bf4c-7558fbf09a81", "created": "2026-10-09T15:13:11.238223Z", "modified": "2026-10-09T15:13:11.238223Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ff63d76dd3867b5b500331e32a5e5444ae4fa8578d690edfc24ab2b87708d86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.238223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73efa79b-b3b2-4d71-96a2-3273a3054c5e", "created": "2026-10-09T15:13:11.238823Z", "modified": "2026-10-09T15:13:11.238823Z", "relationship_type": "indicates", "source_ref": "indicator--555b8910-00f5-4ad9-bf4c-7558fbf09a81", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd13dde6-8459-4cae-a909-7357b03e4ba3", "created": "2026-10-09T15:13:11.238942Z", "modified": "2026-10-09T15:13:11.238942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7fc24cd57718395ac45c0e529098cee1041e866c5504277f5ab9a02c2824e5b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.238942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f634ca61-cb3f-4242-b4e0-322ded7948aa", "created": "2026-10-09T15:13:11.239648Z", "modified": "2026-10-09T15:13:11.239648Z", "relationship_type": "indicates", "source_ref": "indicator--cd13dde6-8459-4cae-a909-7357b03e4ba3", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da91188-81d5-46e9-8492-ee3578b38134", "created": "2026-10-09T15:13:11.239779Z", "modified": "2026-10-09T15:13:11.239779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='267db01a354384d06d3108c8c7122e1dab03bf2364a3493b3b2f1a92a1e7d9ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.239779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08725735-e021-4cd7-9477-aa2ab23319af", "created": "2026-10-09T15:13:11.24038Z", "modified": "2026-10-09T15:13:11.24038Z", "relationship_type": "indicates", "source_ref": "indicator--3da91188-81d5-46e9-8492-ee3578b38134", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebf9e43-7ac7-4746-94f5-bcfed2c6087b", "created": "2026-10-09T15:13:11.240505Z", "modified": "2026-10-09T15:13:11.240505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de9e773f9c03d53aab271188c5b317bec45d1049a06e0b8c167e5527a92ad7e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.240505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fa39caa-79e2-4849-b8e1-a5952fe44cba", "created": "2026-10-09T15:13:11.241089Z", "modified": "2026-10-09T15:13:11.241089Z", "relationship_type": "indicates", "source_ref": "indicator--4ebf9e43-7ac7-4746-94f5-bcfed2c6087b", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec22d56c-c2bf-4a6c-951a-fb203d0d5513", "created": "2026-10-09T15:13:11.241209Z", "modified": "2026-10-09T15:13:11.241209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='200cf6e828ceecf44add627d97c0a893a517d8e318047b760c339b1572a0b303']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.241209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3ee4795-028c-4710-80fe-e86ff4ec8705", "created": "2026-10-09T15:13:11.241805Z", "modified": "2026-10-09T15:13:11.241805Z", "relationship_type": "indicates", "source_ref": "indicator--ec22d56c-c2bf-4a6c-951a-fb203d0d5513", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ef3f1f-560a-4d43-90ef-6c697aec02dd", "created": "2026-10-09T15:13:11.241925Z", "modified": "2026-10-09T15:13:11.241925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7011276fac608fc992c53424155de6df6bb2be48fb5273d82bf3b6fe5f958231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.241925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1005245c-c9d0-4e4e-ac8b-e75151963744", "created": "2026-10-09T15:13:11.24252Z", "modified": "2026-10-09T15:13:11.24252Z", "relationship_type": "indicates", "source_ref": "indicator--69ef3f1f-560a-4d43-90ef-6c697aec02dd", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cf9bc3-9472-49d0-83f3-a0e662e69807", "created": "2026-10-09T15:13:11.242644Z", "modified": "2026-10-09T15:13:11.242644Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74e9fc0b284376675e3646f7503c131802afcc1d70c245d1c668ed3b25c158fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.242644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd64fe4c-90b6-44d2-93e2-e36954744ddb", "created": "2026-10-09T15:13:11.243241Z", "modified": "2026-10-09T15:13:11.243241Z", "relationship_type": "indicates", "source_ref": "indicator--91cf9bc3-9472-49d0-83f3-a0e662e69807", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0e60bb-2d2d-4d3f-ac10-601910346bb6", "created": "2026-10-09T15:13:11.243374Z", "modified": "2026-10-09T15:13:11.243374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53a15a6b11b22fddc10302414bbbf82eb66278c1801e359d25fc8778b4288dd8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.243374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75473222-bbcb-41b1-a7be-5a6aa09a5ae4", "created": "2026-10-09T15:13:11.243967Z", "modified": "2026-10-09T15:13:11.243967Z", "relationship_type": "indicates", "source_ref": "indicator--2e0e60bb-2d2d-4d3f-ac10-601910346bb6", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd42c92-7c1e-4c29-bea1-979610f6db0d", "created": "2026-10-09T15:13:11.24409Z", "modified": "2026-10-09T15:13:11.24409Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvieo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.24409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1793577-0a15-4c4a-92ab-066f27487193", "created": "2026-10-09T15:13:11.244566Z", "modified": "2026-10-09T15:13:11.244566Z", "relationship_type": "indicates", "source_ref": "indicator--9dd42c92-7c1e-4c29-bea1-979610f6db0d", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f2b69a-6bec-4a18-a648-71148b35c4e9", "created": "2026-10-09T15:13:11.244687Z", "modified": "2026-10-09T15:13:11.244687Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviep']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.244687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff337026-0008-40e2-8467-6c8f27ee409e", "created": "2026-10-09T15:13:11.245158Z", "modified": "2026-10-09T15:13:11.245158Z", "relationship_type": "indicates", "source_ref": "indicator--89f2b69a-6bec-4a18-a648-71148b35c4e9", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4d4eaa-d165-4516-ac03-fd28a39f00c3", "created": "2026-10-09T15:13:11.245289Z", "modified": "2026-10-09T15:13:11.245289Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvieq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.245289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f4ed196-691d-493f-8039-fc35dc71ba8f", "created": "2026-10-09T15:13:11.245861Z", "modified": "2026-10-09T15:13:11.245861Z", "relationship_type": "indicates", "source_ref": "indicator--aa4d4eaa-d165-4516-ac03-fd28a39f00c3", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3f3b0a-db6d-48b0-9f38-5c54cb929f53", "created": "2026-10-09T15:13:11.245982Z", "modified": "2026-10-09T15:13:11.245982Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvier']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.245982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a00ccb13-f99a-4a4b-b603-bc816df76a19", "created": "2026-10-09T15:13:11.246456Z", "modified": "2026-10-09T15:13:11.246456Z", "relationship_type": "indicates", "source_ref": "indicator--9a3f3b0a-db6d-48b0-9f38-5c54cb929f53", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9c8b50-790e-41f9-823b-d5bb4490e010", "created": "2026-10-09T15:13:11.246578Z", "modified": "2026-10-09T15:13:11.246578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvies']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.246578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e93128e-cb87-4830-b025-b1dee92932c5", "created": "2026-10-09T15:13:11.247044Z", "modified": "2026-10-09T15:13:11.247044Z", "relationship_type": "indicates", "source_ref": "indicator--6b9c8b50-790e-41f9-823b-d5bb4490e010", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3d4a78-658f-425f-b03e-2bccb5d9f3ab", "created": "2026-10-09T15:13:11.247163Z", "modified": "2026-10-09T15:13:11.247163Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviet']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.247163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3886b04-7fe3-4c19-a65b-c29f003854e5", "created": "2026-10-09T15:13:11.247638Z", "modified": "2026-10-09T15:13:11.247638Z", "relationship_type": "indicates", "source_ref": "indicator--fb3d4a78-658f-425f-b03e-2bccb5d9f3ab", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ea8a64-f8f3-45c7-9e44-f24d7e692d11", "created": "2026-10-09T15:13:11.247762Z", "modified": "2026-10-09T15:13:11.247762Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvieu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.247762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcb2aedd-a369-4112-8b2d-686cf889dea3", "created": "2026-10-09T15:13:11.248224Z", "modified": "2026-10-09T15:13:11.248224Z", "relationship_type": "indicates", "source_ref": "indicator--43ea8a64-f8f3-45c7-9e44-f24d7e692d11", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c4974d-8a1c-49e8-9167-a63ec16ac4f7", "created": "2026-10-09T15:13:11.248361Z", "modified": "2026-10-09T15:13:11.248361Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.248361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ac042aa-d7fe-4abb-a007-5063c1e59f8e", "created": "2026-10-09T15:13:11.248825Z", "modified": "2026-10-09T15:13:11.248825Z", "relationship_type": "indicates", "source_ref": "indicator--f3c4974d-8a1c-49e8-9167-a63ec16ac4f7", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186ce608-06e9-44e3-9a04-0d61d62f2284", "created": "2026-10-09T15:13:11.248946Z", "modified": "2026-10-09T15:13:11.248946Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.248946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d181ecab-3d9f-4410-a9df-d53e9b53a120", "created": "2026-10-09T15:13:11.249424Z", "modified": "2026-10-09T15:13:11.249424Z", "relationship_type": "indicates", "source_ref": "indicator--186ce608-06e9-44e3-9a04-0d61d62f2284", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e0b707-9f8d-4735-83bf-ef7536d07c7d", "created": "2026-10-09T15:13:11.249546Z", "modified": "2026-10-09T15:13:11.249546Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviex']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.249546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8038a55a-7f01-4b53-b8bf-4607c72a97f3", "created": "2026-10-09T15:13:11.25001Z", "modified": "2026-10-09T15:13:11.25001Z", "relationship_type": "indicates", "source_ref": "indicator--b2e0b707-9f8d-4735-83bf-ef7536d07c7d", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f60adf-0142-4d89-b18c-071edb82e652", "created": "2026-10-09T15:13:11.250128Z", "modified": "2026-10-09T15:13:11.250128Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviey']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.250128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15c21912-33e1-4d90-89b6-519304acf6b5", "created": "2026-10-09T15:13:11.250607Z", "modified": "2026-10-09T15:13:11.250607Z", "relationship_type": "indicates", "source_ref": "indicator--f0f60adf-0142-4d89-b18c-071edb82e652", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a013661-9463-4060-b7c3-2dd16aebf603", "created": "2026-10-09T15:13:11.250728Z", "modified": "2026-10-09T15:13:11.250728Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviez']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.250728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11706474-2788-465e-8e54-73ff26d2d69b", "created": "2026-10-09T15:13:11.251293Z", "modified": "2026-10-09T15:13:11.251293Z", "relationship_type": "indicates", "source_ref": "indicator--4a013661-9463-4060-b7c3-2dd16aebf603", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7c3fcd-b340-48a9-9663-ae03a152fb1b", "created": "2026-10-09T15:13:11.251418Z", "modified": "2026-10-09T15:13:11.251418Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trustserv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.251418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bf60805-4a76-419c-88d2-303d6efd140f", "created": "2026-10-09T15:13:11.251881Z", "modified": "2026-10-09T15:13:11.251881Z", "relationship_type": "indicates", "source_ref": "indicator--7c7c3fcd-b340-48a9-9663-ae03a152fb1b", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2a06c7-1a96-4945-b01e-e5743365912b", "created": "2026-10-09T15:13:11.252001Z", "modified": "2026-10-09T15:13:11.252001Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.lifecircle']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.252001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddbf2f10-87dd-4936-9a7e-e82deb837a87", "created": "2026-10-09T15:13:11.252466Z", "modified": "2026-10-09T15:13:11.252466Z", "relationship_type": "indicates", "source_ref": "indicator--4c2a06c7-1a96-4945-b01e-e5743365912b", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e7eece-30a2-4b29-a9b2-3d778e34cbdb", "created": "2026-10-09T15:13:11.252588Z", "modified": "2026-10-09T15:13:11.252588Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.252588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f5c59ba-97c2-4df3-b08f-f4ce6eff70a9", "created": "2026-10-09T15:13:11.25303Z", "modified": "2026-10-09T15:13:11.25303Z", "relationship_type": "indicates", "source_ref": "indicator--b1e7eece-30a2-4b29-a9b2-3d778e34cbdb", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1457c0fd-e101-4474-a089-92c03b5a7436", "created": "2026-10-09T15:13:11.253146Z", "modified": "2026-10-09T15:13:11.253146Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.trackview.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.253146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86741671-e59e-43dd-aa6e-fe3c4a9c9f17", "created": "2026-10-09T15:13:11.253616Z", "modified": "2026-10-09T15:13:11.253616Z", "relationship_type": "indicates", "source_ref": "indicator--1457c0fd-e101-4474-a089-92c03b5a7436", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae8e294-a2b4-42c1-b57e-ff35ddb719a3", "created": "2026-10-09T15:13:11.253739Z", "modified": "2026-10-09T15:13:11.253739Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='cn.trackview.shentan']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.253739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8256f443-4f37-4024-a95f-7472eaf6e170", "created": "2026-10-09T15:13:11.254208Z", "modified": "2026-10-09T15:13:11.254208Z", "relationship_type": "indicates", "source_ref": "indicator--1ae8e294-a2b4-42c1-b57e-ff35ddb719a3", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7714ba9a-f3ff-42b5-9624-6e389161f42f", "created": "2026-10-09T15:13:11.254339Z", "modified": "2026-10-09T15:13:11.254339Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.254339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78b86e87-95e0-4647-80be-b10b24da0a52", "created": "2026-10-09T15:13:11.254795Z", "modified": "2026-10-09T15:13:11.254795Z", "relationship_type": "indicates", "source_ref": "indicator--7714ba9a-f3ff-42b5-9624-6e389161f42f", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8151f1-6645-4d59-a4cf-6b504fedcc47", "created": "2026-10-09T15:13:11.254916Z", "modified": "2026-10-09T15:13:11.254916Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='cybrook.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.254916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e936a1d3-2bfb-4aa1-8b65-7fdafe00036b", "created": "2026-10-09T15:13:11.255376Z", "modified": "2026-10-09T15:13:11.255376Z", "relationship_type": "indicates", "source_ref": "indicator--ba8151f1-6645-4d59-a4cf-6b504fedcc47", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4bd19c-3d12-45b1-926d-d254d0a97809", "created": "2026-10-09T15:13:11.255494Z", "modified": "2026-10-09T15:13:11.255494Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvieo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.255494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3a9c46c-c6e7-4301-a8d7-08f73ef43f23", "created": "2026-10-09T15:13:11.255952Z", "modified": "2026-10-09T15:13:11.255952Z", "relationship_type": "indicates", "source_ref": "indicator--ae4bd19c-3d12-45b1-926d-d254d0a97809", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728986ea-f8dd-4233-a01b-ddb8426eea8f", "created": "2026-10-09T15:13:11.256072Z", "modified": "2026-10-09T15:13:11.256072Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviep']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.256072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34b7a3c7-74ac-4194-be46-43ecf1f91716", "created": "2026-10-09T15:13:11.256637Z", "modified": "2026-10-09T15:13:11.256637Z", "relationship_type": "indicates", "source_ref": "indicator--728986ea-f8dd-4233-a01b-ddb8426eea8f", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788e2224-be22-4d5d-baa0-3c2d614dd586", "created": "2026-10-09T15:13:11.256765Z", "modified": "2026-10-09T15:13:11.256765Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvieq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.256765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0930bf0-08a2-4787-b637-d6146cd6a43a", "created": "2026-10-09T15:13:11.25724Z", "modified": "2026-10-09T15:13:11.25724Z", "relationship_type": "indicates", "source_ref": "indicator--788e2224-be22-4d5d-baa0-3c2d614dd586", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2760eff-d2ad-4e94-8e1b-57693ede95eb", "created": "2026-10-09T15:13:11.257377Z", "modified": "2026-10-09T15:13:11.257377Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvier']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.257377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c51abccb-e06c-4a9b-a1c9-abd673055ff7", "created": "2026-10-09T15:13:11.257848Z", "modified": "2026-10-09T15:13:11.257848Z", "relationship_type": "indicates", "source_ref": "indicator--b2760eff-d2ad-4e94-8e1b-57693ede95eb", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d95bdd-61c1-4bba-847e-df09304e628b", "created": "2026-10-09T15:13:11.257972Z", "modified": "2026-10-09T15:13:11.257972Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvies']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.257972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5944126-d7b1-4908-af39-58f3cbf720ba", "created": "2026-10-09T15:13:11.258448Z", "modified": "2026-10-09T15:13:11.258448Z", "relationship_type": "indicates", "source_ref": "indicator--60d95bdd-61c1-4bba-847e-df09304e628b", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6172ce50-2894-4b2b-95c0-4d033c9d6825", "created": "2026-10-09T15:13:11.258572Z", "modified": "2026-10-09T15:13:11.258572Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviet']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.258572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--802ea2ba-bb2a-46e8-bc04-2c4d753fd2d0", "created": "2026-10-09T15:13:11.259031Z", "modified": "2026-10-09T15:13:11.259031Z", "relationship_type": "indicates", "source_ref": "indicator--6172ce50-2894-4b2b-95c0-4d033c9d6825", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef7e3b4-8beb-4c9b-8bfd-390d6849c713", "created": "2026-10-09T15:13:11.259149Z", "modified": "2026-10-09T15:13:11.259149Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvieu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.259149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bb73f32-c662-4a3a-92c9-e8a90af4f18c", "created": "2026-10-09T15:13:11.259629Z", "modified": "2026-10-09T15:13:11.259629Z", "relationship_type": "indicates", "source_ref": "indicator--8ef7e3b4-8beb-4c9b-8bfd-390d6849c713", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917836af-e610-4263-b66e-71d8b6230e17", "created": "2026-10-09T15:13:11.25975Z", "modified": "2026-10-09T15:13:11.25975Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.25975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03e3ca95-8458-4ddc-9eef-7781af6c1d48", "created": "2026-10-09T15:13:11.26021Z", "modified": "2026-10-09T15:13:11.26021Z", "relationship_type": "indicates", "source_ref": "indicator--917836af-e610-4263-b66e-71d8b6230e17", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799ee36b-18e9-493c-85b6-9927c7b0e322", "created": "2026-10-09T15:13:11.260341Z", "modified": "2026-10-09T15:13:11.260341Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.260341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--308a5783-da32-49ac-81b2-68aff82b98ed", "created": "2026-10-09T15:13:11.260804Z", "modified": "2026-10-09T15:13:11.260804Z", "relationship_type": "indicates", "source_ref": "indicator--799ee36b-18e9-493c-85b6-9927c7b0e322", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5662866a-2a85-48ea-8e14-bfea5c0deab7", "created": "2026-10-09T15:13:11.260923Z", "modified": "2026-10-09T15:13:11.260923Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviex']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.260923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33dc6522-81b6-4eb9-8f33-156b4513f220", "created": "2026-10-09T15:13:11.261398Z", "modified": "2026-10-09T15:13:11.261398Z", "relationship_type": "indicates", "source_ref": "indicator--5662866a-2a85-48ea-8e14-bfea5c0deab7", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177bdddd-ec13-460b-b98f-1614bd16916f", "created": "2026-10-09T15:13:11.261517Z", "modified": "2026-10-09T15:13:11.261517Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviey']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.261517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b482e7c-7ade-4b6f-a6ef-d66f8629b157", "created": "2026-10-09T15:13:11.26207Z", "modified": "2026-10-09T15:13:11.26207Z", "relationship_type": "indicates", "source_ref": "indicator--177bdddd-ec13-460b-b98f-1614bd16916f", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b81107f-bcb6-4437-95f1-368909611efa", "created": "2026-10-09T15:13:11.262192Z", "modified": "2026-10-09T15:13:11.262192Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviez']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.262192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--760723b1-ce41-4701-8776-84ad442b1dd0", "created": "2026-10-09T15:13:11.262669Z", "modified": "2026-10-09T15:13:11.262669Z", "relationship_type": "indicates", "source_ref": "indicator--4b81107f-bcb6-4437-95f1-368909611efa", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2539c28b-49b9-48b3-bba6-b04de0ce6b60", "created": "2026-10-09T15:13:11.262786Z", "modified": "2026-10-09T15:13:11.262786Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trustserv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.262786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b207e3d0-a209-4286-975d-05a0c97a1350", "created": "2026-10-09T15:13:11.263243Z", "modified": "2026-10-09T15:13:11.263243Z", "relationship_type": "indicates", "source_ref": "indicator--2539c28b-49b9-48b3-bba6-b04de0ce6b60", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e1e441-5842-4a96-a6dd-2317e8821b30", "created": "2026-10-09T15:13:11.263371Z", "modified": "2026-10-09T15:13:11.263371Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.homesafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.263371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df39b338-887f-4697-8d84-852e41a4e7b7", "created": "2026-10-09T15:13:11.263826Z", "modified": "2026-10-09T15:13:11.263826Z", "relationship_type": "indicates", "source_ref": "indicator--28e1e441-5842-4a96-a6dd-2317e8821b30", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270baf94-61d0-448c-a397-10510813b71f", "created": "2026-10-09T15:13:11.26395Z", "modified": "2026-10-09T15:13:11.26395Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.26395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e217ba36-ad29-4612-888c-d23a67dda134", "created": "2026-10-09T15:13:11.264419Z", "modified": "2026-10-09T15:13:11.264419Z", "relationship_type": "indicates", "source_ref": "indicator--270baf94-61d0-448c-a397-10510813b71f", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea7aa45-ce88-42c6-b7c4-27b53fd14a72", "created": "2026-10-09T15:13:11.264541Z", "modified": "2026-10-09T15:13:11.264541Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.trackview.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.264541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--730d0003-292c-4336-9bd5-c64926c78726", "created": "2026-10-09T15:13:11.264998Z", "modified": "2026-10-09T15:13:11.264998Z", "relationship_type": "indicates", "source_ref": "indicator--1ea7aa45-ce88-42c6-b7c4-27b53fd14a72", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3195f40-7d63-4c6a-8b4e-a0ccdb472d16", "created": "2026-10-09T15:13:11.26512Z", "modified": "2026-10-09T15:13:11.26512Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tv.familynk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.26512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25a44ce1-7e3e-456d-bd5a-86ef83c1e6d2", "created": "2026-10-09T15:13:11.265584Z", "modified": "2026-10-09T15:13:11.265584Z", "relationship_type": "indicates", "source_ref": "indicator--f3195f40-7d63-4c6a-8b4e-a0ccdb472d16", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d3df67-3385-4b9c-9f0d-bfe807b8acd0", "created": "2026-10-09T15:13:11.265705Z", "modified": "2026-10-09T15:13:11.265705Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tv.familynl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.265705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11732e44-1f3e-4cd8-be90-dc19495c632e", "created": "2026-10-09T15:13:11.266152Z", "modified": "2026-10-09T15:13:11.266152Z", "relationship_type": "indicates", "source_ref": "indicator--68d3df67-3385-4b9c-9f0d-bfe807b8acd0", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf2fba3-7ab9-4d2a-a01a-ee72867fb8d0", "created": "2026-10-09T15:13:11.266293Z", "modified": "2026-10-09T15:13:11.266293Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='us.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.266293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4518cce8-3d5e-4f6f-9a9d-f3d47103d953", "created": "2026-10-09T15:13:11.266753Z", "modified": "2026-10-09T15:13:11.266753Z", "relationship_type": "indicates", "source_ref": "indicator--4cf2fba3-7ab9-4d2a-a01a-ee72867fb8d0", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9092f8c9-42b9-4d21-a961-6b72519382a1", "created": "2026-10-09T15:13:11.266878Z", "modified": "2026-10-09T15:13:11.266878Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CB97E71AFA4665D6D28697B9197046C81E5E5D6C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.266878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fbd0b56-59e5-4d19-8bbd-5882c5c5c75f", "created": "2026-10-09T15:13:11.267571Z", "modified": "2026-10-09T15:13:11.267571Z", "relationship_type": "indicates", "source_ref": "indicator--9092f8c9-42b9-4d21-a961-6b72519382a1", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df701e6-6112-42c0-bc03-3f9d2616ca24", "created": "2026-10-09T15:13:11.267701Z", "modified": "2026-10-09T15:13:11.267701Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B14E50E56D5D483031137FD247D4A5466D0E61B4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.267701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0b61d99-a1ac-4998-87ad-6c16fdf70728", "created": "2026-10-09T15:13:11.268254Z", "modified": "2026-10-09T15:13:11.268254Z", "relationship_type": "indicates", "source_ref": "indicator--6df701e6-6112-42c0-bc03-3f9d2616ca24", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4587352-071d-403e-ac5f-808e545bd0f9", "created": "2026-10-09T15:13:11.268391Z", "modified": "2026-10-09T15:13:11.268391Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='96A1F635F940D8D154FD42D550B6201B60692744']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.268391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--670a3f7c-5cd6-438f-ad28-3df228be8bd5", "created": "2026-10-09T15:13:11.268933Z", "modified": "2026-10-09T15:13:11.268933Z", "relationship_type": "indicates", "source_ref": "indicator--b4587352-071d-403e-ac5f-808e545bd0f9", "target_ref": "malware--9e02948d-59eb-4e5b-97fb-1498a8abd895"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4de02b6e-86e6-45d4-8276-f473b2849617", "created": "2026-10-09T15:13:11.269051Z", "modified": "2026-10-09T15:13:11.269051Z", "name": "TrackingSmartphone", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4dd6cf-cb5a-4bba-b208-b11913087226", "created": "2026-10-09T15:13:11.269171Z", "modified": "2026-10-09T15:13:11.269171Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackingsmartphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.269171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b1fbd82-92fe-4924-9694-32f8da0b9f03", "created": "2026-10-09T15:13:11.269662Z", "modified": "2026-10-09T15:13:11.269662Z", "relationship_type": "indicates", "source_ref": "indicator--df4dd6cf-cb5a-4bba-b208-b11913087226", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee4d529-c9b0-4591-a3d7-ceba5408a989", "created": "2026-10-09T15:13:11.269783Z", "modified": "2026-10-09T15:13:11.269783Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinefundb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.269783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--215d8133-6c99-418f-ba3a-22a84093029b", "created": "2026-10-09T15:13:11.270254Z", "modified": "2026-10-09T15:13:11.270254Z", "relationship_type": "indicates", "source_ref": "indicator--8ee4d529-c9b0-4591-a3d7-ceba5408a989", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2185b4c-1663-4e9c-a3a9-5ec9b6e752d1", "created": "2026-10-09T15:13:11.270386Z", "modified": "2026-10-09T15:13:11.270386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracking-smartphone.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.270386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f956f12c-ccb7-4ecb-ad50-947813d264e7", "created": "2026-10-09T15:13:11.270891Z", "modified": "2026-10-09T15:13:11.270891Z", "relationship_type": "indicates", "source_ref": "indicator--a2185b4c-1663-4e9c-a3a9-5ec9b6e752d1", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6813235e-8297-4cb9-82ad-0cbaad5b270a", "created": "2026-10-09T15:13:11.271009Z", "modified": "2026-10-09T15:13:11.271009Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackingsmartphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.271009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a38ee46-7b5c-4a8c-8c4e-6afb37f15667", "created": "2026-10-09T15:13:11.271509Z", "modified": "2026-10-09T15:13:11.271509Z", "relationship_type": "indicates", "source_ref": "indicator--6813235e-8297-4cb9-82ad-0cbaad5b270a", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4199cf18-88ca-4504-8700-d1d666b161bb", "created": "2026-10-09T15:13:11.271635Z", "modified": "2026-10-09T15:13:11.271635Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackingsmartphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.271635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e3abca0-e678-43e2-9db7-3a56063bf258", "created": "2026-10-09T15:13:11.272118Z", "modified": "2026-10-09T15:13:11.272118Z", "relationship_type": "indicates", "source_ref": "indicator--4199cf18-88ca-4504-8700-d1d666b161bb", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dbbb80-0c22-4296-b90b-dfb3c5af5b77", "created": "2026-10-09T15:13:11.272234Z", "modified": "2026-10-09T15:13:11.272234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinefundb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.272234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42edbfcd-4cf4-4841-930b-8c8b572aae65", "created": "2026-10-09T15:13:11.272732Z", "modified": "2026-10-09T15:13:11.272732Z", "relationship_type": "indicates", "source_ref": "indicator--65dbbb80-0c22-4296-b90b-dfb3c5af5b77", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d613ab4-89e5-4df3-927f-3d9c23b6e278", "created": "2026-10-09T15:13:11.272858Z", "modified": "2026-10-09T15:13:11.272858Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tracking_smartphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.272858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--603e52e9-af22-4107-8ac8-99b93ca11b8e", "created": "2026-10-09T15:13:11.273442Z", "modified": "2026-10-09T15:13:11.273442Z", "relationship_type": "indicates", "source_ref": "indicator--3d613ab4-89e5-4df3-927f-3d9c23b6e278", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9721079-8e22-492f-9fe1-b7ed29686038", "created": "2026-10-09T15:13:11.273567Z", "modified": "2026-10-09T15:13:11.273567Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.remote_control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.273567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7049c510-819b-4d84-8b1b-ee8d38e351e9", "created": "2026-10-09T15:13:11.274031Z", "modified": "2026-10-09T15:13:11.274031Z", "relationship_type": "indicates", "source_ref": "indicator--c9721079-8e22-492f-9fe1-b7ed29686038", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705309ca-9d95-4b58-82af-a1c09545702a", "created": "2026-10-09T15:13:11.274154Z", "modified": "2026-10-09T15:13:11.274154Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ts_settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.274154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4361a9c-5898-4d07-a30a-f36e58e9950b", "created": "2026-10-09T15:13:11.274616Z", "modified": "2026-10-09T15:13:11.274616Z", "relationship_type": "indicates", "source_ref": "indicator--705309ca-9d95-4b58-82af-a1c09545702a", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61643be4-205d-43e4-ac2d-f2f07d81fb07", "created": "2026-10-09T15:13:11.274736Z", "modified": "2026-10-09T15:13:11.274736Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1DB0D66C1D21DD4B185D03B13D6CF620E4FACBAA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.274736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d7ddd4f-9fc3-4e2e-96c5-e53be01f0abd", "created": "2026-10-09T15:13:11.27529Z", "modified": "2026-10-09T15:13:11.27529Z", "relationship_type": "indicates", "source_ref": "indicator--61643be4-205d-43e4-ac2d-f2f07d81fb07", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d56ab51-4192-4043-9a4b-fb1963423e08", "created": "2026-10-09T15:13:11.275412Z", "modified": "2026-10-09T15:13:11.275412Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='603881E46350999FF7A5CBD68FE6A5897C50CEDE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.275412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--364e861d-ff5c-4c38-9383-55e1f76d34d3", "created": "2026-10-09T15:13:11.275961Z", "modified": "2026-10-09T15:13:11.275961Z", "relationship_type": "indicates", "source_ref": "indicator--6d56ab51-4192-4043-9a4b-fb1963423e08", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3961a1-8b6d-46dc-b8f7-b16facba1402", "created": "2026-10-09T15:13:11.27608Z", "modified": "2026-10-09T15:13:11.27608Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='665D624FD53E4D538DFE9F7A87087C513CB40506']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.27608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56aeec0e-2bc8-4ea9-8066-924b68e5ca6b", "created": "2026-10-09T15:13:11.276635Z", "modified": "2026-10-09T15:13:11.276635Z", "relationship_type": "indicates", "source_ref": "indicator--7a3961a1-8b6d-46dc-b8f7-b16facba1402", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ebb650-2ae6-48b8-8655-13cb45eff617", "created": "2026-10-09T15:13:11.276756Z", "modified": "2026-10-09T15:13:11.276756Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='86D94A8CE736F82D834FA588F34106AE7B69D325']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.276756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d018b71-8ee4-4eb2-9881-f58e2bb49a40", "created": "2026-10-09T15:13:11.277319Z", "modified": "2026-10-09T15:13:11.277319Z", "relationship_type": "indicates", "source_ref": "indicator--a5ebb650-2ae6-48b8-8655-13cb45eff617", "target_ref": "malware--4de02b6e-86e6-45d4-8276-f473b2849617"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91", "created": "2026-10-09T15:13:11.277442Z", "modified": "2026-10-09T15:13:11.277442Z", "name": "SpyphoneMobileTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68ffd9e-37cc-4c6a-926c-ede8989068fc", "created": "2026-10-09T15:13:11.277559Z", "modified": "2026-10-09T15:13:11.277559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.277559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5211f09-aa2f-4869-8b32-50d3eec85557", "created": "2026-10-09T15:13:11.278039Z", "modified": "2026-10-09T15:13:11.278039Z", "relationship_type": "indicates", "source_ref": "indicator--e68ffd9e-37cc-4c6a-926c-ede8989068fc", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacb9d8c-39cb-4a7d-be80-291e88adbd30", "created": "2026-10-09T15:13:11.278157Z", "modified": "2026-10-09T15:13:11.278157Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracker95gpsonly.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.278157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0bb0000-4b89-41dc-bbed-f57049c0a66c", "created": "2026-10-09T15:13:11.278686Z", "modified": "2026-10-09T15:13:11.278686Z", "relationship_type": "indicates", "source_ref": "indicator--eacb9d8c-39cb-4a7d-be80-291e88adbd30", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b724b8-908e-4c11-b87d-185a366e9694", "created": "2026-10-09T15:13:11.27881Z", "modified": "2026-10-09T15:13:11.27881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.27881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcf0e186-e663-425d-a97b-dfcb05f3f363", "created": "2026-10-09T15:13:11.279401Z", "modified": "2026-10-09T15:13:11.279401Z", "relationship_type": "indicates", "source_ref": "indicator--49b724b8-908e-4c11-b87d-185a366e9694", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ed765a-5d07-4dab-a530-8c9a9fac861a", "created": "2026-10-09T15:13:11.279526Z", "modified": "2026-10-09T15:13:11.279526Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.279526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4eb76c0-7a51-42f5-a951-16e65ca3c468", "created": "2026-10-09T15:13:11.280002Z", "modified": "2026-10-09T15:13:11.280002Z", "relationship_type": "indicates", "source_ref": "indicator--45ed765a-5d07-4dab-a530-8c9a9fac861a", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d95d8d7-e913-4022-b671-4b5a1ba74b56", "created": "2026-10-09T15:13:11.280119Z", "modified": "2026-10-09T15:13:11.280119Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyfone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.280119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49a347e6-1d68-4c8d-9018-c883f5e1d070", "created": "2026-10-09T15:13:11.280603Z", "modified": "2026-10-09T15:13:11.280603Z", "relationship_type": "indicates", "source_ref": "indicator--9d95d8d7-e913-4022-b671-4b5a1ba74b56", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72244a2-a1dc-44bb-a450-9d0c571c2418", "created": "2026-10-09T15:13:11.280725Z", "modified": "2026-10-09T15:13:11.280725Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.280725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ba800dd-e516-48ff-a940-3ed67fcfda06", "created": "2026-10-09T15:13:11.281196Z", "modified": "2026-10-09T15:13:11.281196Z", "relationship_type": "indicates", "source_ref": "indicator--c72244a2-a1dc-44bb-a450-9d0c571c2418", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b635f6d-1c35-4696-b2a9-197adfa3a567", "created": "2026-10-09T15:13:11.281328Z", "modified": "2026-10-09T15:13:11.281328Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.281328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ea5c92c-f682-42f9-b696-6fe591610bc6", "created": "2026-10-09T15:13:11.281805Z", "modified": "2026-10-09T15:13:11.281805Z", "relationship_type": "indicates", "source_ref": "indicator--0b635f6d-1c35-4696-b2a9-197adfa3a567", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d9745f-f3ba-4fe5-9298-d03225019779", "created": "2026-10-09T15:13:11.281923Z", "modified": "2026-10-09T15:13:11.281923Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy-phone-app.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.281923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e73f2dd9-868d-42ee-9240-a4e00df64b32", "created": "2026-10-09T15:13:11.282406Z", "modified": "2026-10-09T15:13:11.282406Z", "relationship_type": "indicates", "source_ref": "indicator--e2d9745f-f3ba-4fe5-9298-d03225019779", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc21352d-f967-4082-a6cb-2355bcb3d843", "created": "2026-10-09T15:13:11.282527Z", "modified": "2026-10-09T15:13:11.282527Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phonetrackerofficial']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.282527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da0341d7-29c2-49cc-aa8b-e353d001d1f2", "created": "2026-10-09T15:13:11.282991Z", "modified": "2026-10-09T15:13:11.282991Z", "relationship_type": "indicates", "source_ref": "indicator--dc21352d-f967-4082-a6cb-2355bcb3d843", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89311fe3-5f7e-4ba3-9b2d-d956012c99aa", "created": "2026-10-09T15:13:11.283109Z", "modified": "2026-10-09T15:13:11.283109Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phonetrackerofficial1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.283109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a1e364a-72a3-414a-b281-3b4bcab03470", "created": "2026-10-09T15:13:11.283586Z", "modified": "2026-10-09T15:13:11.283586Z", "relationship_type": "indicates", "source_ref": "indicator--89311fe3-5f7e-4ba3-9b2d-d956012c99aa", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5c19ba-b51e-4caf-b83f-6781d2100416", "created": "2026-10-09T15:13:11.283707Z", "modified": "2026-10-09T15:13:11.283707Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5F61BEB9591ADBDF9DA5B141A1EF35CDC0944C8C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.283707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dae63410-c613-49c9-93c1-0c0da0d72a04", "created": "2026-10-09T15:13:11.284256Z", "modified": "2026-10-09T15:13:11.284256Z", "relationship_type": "indicates", "source_ref": "indicator--6d5c19ba-b51e-4caf-b83f-6781d2100416", "target_ref": "malware--1840b2ce-e95d-4d34-a5c1-67d01c842e91"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d6f75a4f-3a4c-467e-b777-8087eb83a029", "created": "2026-10-09T15:13:11.284387Z", "modified": "2026-10-09T15:13:11.284387Z", "name": "OneLocator", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61c1e92-792c-4336-880d-d5a5579521ca", "created": "2026-10-09T15:13:11.284503Z", "modified": "2026-10-09T15:13:11.284503Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='locatorprivacy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.284503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--295ab812-61cc-4337-8393-254e563dbe9f", "created": "2026-10-09T15:13:11.285075Z", "modified": "2026-10-09T15:13:11.285075Z", "relationship_type": "indicates", "source_ref": "indicator--a61c1e92-792c-4336-880d-d5a5579521ca", "target_ref": "malware--d6f75a4f-3a4c-467e-b777-8087eb83a029"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af37a15-a86b-4572-bf16-38a176e5ec9d", "created": "2026-10-09T15:13:11.285197Z", "modified": "2026-10-09T15:13:11.285197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='locatorprivacy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.285197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bad58770-3f96-42c6-bef6-c04c3edb0e4c", "created": "2026-10-09T15:13:11.285686Z", "modified": "2026-10-09T15:13:11.285686Z", "relationship_type": "indicates", "source_ref": "indicator--8af37a15-a86b-4572-bf16-38a176e5ec9d", "target_ref": "malware--d6f75a4f-3a4c-467e-b777-8087eb83a029"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb19313-764a-4ad1-974e-80fa3444068d", "created": "2026-10-09T15:13:11.285805Z", "modified": "2026-10-09T15:13:11.285805Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onelocator.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.285805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08b97d5c-807e-479c-838c-f93f71001a7b", "created": "2026-10-09T15:13:11.28629Z", "modified": "2026-10-09T15:13:11.28629Z", "relationship_type": "indicates", "source_ref": "indicator--2fb19313-764a-4ad1-974e-80fa3444068d", "target_ref": "malware--d6f75a4f-3a4c-467e-b777-8087eb83a029"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5763a7-347a-47b0-ba44-00146f964ee6", "created": "2026-10-09T15:13:11.286412Z", "modified": "2026-10-09T15:13:11.286412Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mg.locations.track5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.286412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7a71638-5b65-4474-9521-3ca8afa4624b", "created": "2026-10-09T15:13:11.28687Z", "modified": "2026-10-09T15:13:11.28687Z", "relationship_type": "indicates", "source_ref": "indicator--8c5763a7-347a-47b0-ba44-00146f964ee6", "target_ref": "malware--d6f75a4f-3a4c-467e-b777-8087eb83a029"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d217447a-2360-4c7e-98bb-d38186fb42a9", "created": "2026-10-09T15:13:11.286993Z", "modified": "2026-10-09T15:13:11.286993Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E43B5671CBA3F48619BF00D6E380BBC2F02A5DCA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.286993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adf24667-8235-4fdc-ac23-79c2fb0ac102", "created": "2026-10-09T15:13:11.287546Z", "modified": "2026-10-09T15:13:11.287546Z", "relationship_type": "indicates", "source_ref": "indicator--d217447a-2360-4c7e-98bb-d38186fb42a9", "target_ref": "malware--d6f75a4f-3a4c-467e-b777-8087eb83a029"}, {"type": "malware", "spec_version": "2.1", "id": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41", "created": "2026-10-09T15:13:11.287668Z", "modified": "2026-10-09T15:13:11.287668Z", "name": "EvaSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4333b00-c473-4364-9f0f-fe4264118e76", "created": "2026-10-09T15:13:11.287782Z", "modified": "2026-10-09T15:13:11.287782Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.287782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24c563e8-457e-446a-b17d-5fb5c9bdf602", "created": "2026-10-09T15:13:11.288281Z", "modified": "2026-10-09T15:13:11.288281Z", "relationship_type": "indicates", "source_ref": "indicator--e4333b00-c473-4364-9f0f-fe4264118e76", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948ac4d4-bd03-43f7-83af-d00942edf6c3", "created": "2026-10-09T15:13:11.28841Z", "modified": "2026-10-09T15:13:11.28841Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ub.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.28841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d958d77-850f-4828-901f-7512e9aea343", "created": "2026-10-09T15:13:11.288883Z", "modified": "2026-10-09T15:13:11.288883Z", "relationship_type": "indicates", "source_ref": "indicator--948ac4d4-bd03-43f7-83af-d00942edf6c3", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dd5792-6b27-4385-9825-81b3804faa86", "created": "2026-10-09T15:13:11.289004Z", "modified": "2026-10-09T15:13:11.289004Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uc.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.289004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fe50428-181c-4001-a977-d9021cddb83d", "created": "2026-10-09T15:13:11.289483Z", "modified": "2026-10-09T15:13:11.289483Z", "relationship_type": "indicates", "source_ref": "indicator--57dd5792-6b27-4385-9825-81b3804faa86", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06134be2-6a27-49b7-845d-627c8cd3f6c0", "created": "2026-10-09T15:13:11.289603Z", "modified": "2026-10-09T15:13:11.289603Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ud.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.289603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ff32acd-4381-46a8-88d6-b3b08c29b6aa", "created": "2026-10-09T15:13:11.290071Z", "modified": "2026-10-09T15:13:11.290071Z", "relationship_type": "indicates", "source_ref": "indicator--06134be2-6a27-49b7-845d-627c8cd3f6c0", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b9de11-bfc0-4590-938c-48187da37d4c", "created": "2026-10-09T15:13:11.290188Z", "modified": "2026-10-09T15:13:11.290188Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ue.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.290188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09f72015-2800-4a81-a7dd-9e66c46c93c4", "created": "2026-10-09T15:13:11.291074Z", "modified": "2026-10-09T15:13:11.291074Z", "relationship_type": "indicates", "source_ref": "indicator--b4b9de11-bfc0-4590-938c-48187da37d4c", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb0c4cb-b1b2-4ede-acf2-6d138e7b1bc2", "created": "2026-10-09T15:13:11.291202Z", "modified": "2026-10-09T15:13:11.291202Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.291202Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31ab081a-b14f-4b99-97a4-b37648672ba7", "created": "2026-10-09T15:13:11.291693Z", "modified": "2026-10-09T15:13:11.291693Z", "relationship_type": "indicates", "source_ref": "indicator--5bb0c4cb-b1b2-4ede-acf2-6d138e7b1bc2", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc12603a-3e83-4bb7-8459-16412ece3566", "created": "2026-10-09T15:13:11.291815Z", "modified": "2026-10-09T15:13:11.291815Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ug.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.291815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8b72721-a601-4f0e-ad8e-39adc00cf4e9", "created": "2026-10-09T15:13:11.292293Z", "modified": "2026-10-09T15:13:11.292293Z", "relationship_type": "indicates", "source_ref": "indicator--bc12603a-3e83-4bb7-8459-16412ece3566", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38b4937-8890-487e-a4f5-39ab77eedc9f", "created": "2026-10-09T15:13:11.292416Z", "modified": "2026-10-09T15:13:11.292416Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uh.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.292416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec6ec475-c19e-44c3-a58f-1c902b3f9491", "created": "2026-10-09T15:13:11.292885Z", "modified": "2026-10-09T15:13:11.292885Z", "relationship_type": "indicates", "source_ref": "indicator--e38b4937-8890-487e-a4f5-39ab77eedc9f", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae423e7c-a811-4a57-bf24-27cb45c1d5d9", "created": "2026-10-09T15:13:11.293006Z", "modified": "2026-10-09T15:13:11.293006Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ui.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.293006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4c310b7-8221-48c7-9604-8bc5e8b0866e", "created": "2026-10-09T15:13:11.293484Z", "modified": "2026-10-09T15:13:11.293484Z", "relationship_type": "indicates", "source_ref": "indicator--ae423e7c-a811-4a57-bf24-27cb45c1d5d9", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d771d93d-1ed2-4d2b-9269-9315f1d478a1", "created": "2026-10-09T15:13:11.293608Z", "modified": "2026-10-09T15:13:11.293608Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uj.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.293608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1e3d3ac-db57-494f-8c7a-e2910c0343b3", "created": "2026-10-09T15:13:11.294076Z", "modified": "2026-10-09T15:13:11.294076Z", "relationship_type": "indicates", "source_ref": "indicator--d771d93d-1ed2-4d2b-9269-9315f1d478a1", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5889b725-6b18-46ba-87ae-2cc8a0ae0701", "created": "2026-10-09T15:13:11.294196Z", "modified": "2026-10-09T15:13:11.294196Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uk.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.294196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0446091-f074-4cc4-89a3-4e30152b7154", "created": "2026-10-09T15:13:11.294679Z", "modified": "2026-10-09T15:13:11.294679Z", "relationship_type": "indicates", "source_ref": "indicator--5889b725-6b18-46ba-87ae-2cc8a0ae0701", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540dabf7-6f0a-4a34-a981-8759a172edf2", "created": "2026-10-09T15:13:11.294801Z", "modified": "2026-10-09T15:13:11.294801Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ul.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.294801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c44d5a7-0eef-431c-bc94-a1bfef2897b2", "created": "2026-10-09T15:13:11.295275Z", "modified": "2026-10-09T15:13:11.295275Z", "relationship_type": "indicates", "source_ref": "indicator--540dabf7-6f0a-4a34-a981-8759a172edf2", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19ff622-149d-4c9b-b6e7-871aa362f688", "created": "2026-10-09T15:13:11.295395Z", "modified": "2026-10-09T15:13:11.295395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='um.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.295395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c5735cb-3304-4186-b9bb-8a851b467e64", "created": "2026-10-09T15:13:11.295873Z", "modified": "2026-10-09T15:13:11.295873Z", "relationship_type": "indicates", "source_ref": "indicator--d19ff622-149d-4c9b-b6e7-871aa362f688", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4bb1bb-8fb4-4a58-a1e6-e183f49e2c20", "created": "2026-10-09T15:13:11.29599Z", "modified": "2026-10-09T15:13:11.29599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='un.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.29599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19a6d0de-1da4-49de-b310-e790890cc33a", "created": "2026-10-09T15:13:11.296469Z", "modified": "2026-10-09T15:13:11.296469Z", "relationship_type": "indicates", "source_ref": "indicator--3f4bb1bb-8fb4-4a58-a1e6-e183f49e2c20", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554e0bc1-3ab4-47d8-a07a-177e1e848e97", "created": "2026-10-09T15:13:11.296588Z", "modified": "2026-10-09T15:13:11.296588Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uo.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.296588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a2c157a-ca21-4ccb-aeb3-4981c58ef7bd", "created": "2026-10-09T15:13:11.35007Z", "modified": "2026-10-09T15:13:11.35007Z", "relationship_type": "indicates", "source_ref": "indicator--554e0bc1-3ab4-47d8-a07a-177e1e848e97", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69346cd1-1ed8-4e80-9794-8dc266e41bc8", "created": "2026-10-09T15:13:11.350359Z", "modified": "2026-10-09T15:13:11.350359Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='up.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.350359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63442a8e-1bf5-472f-88a1-5c8bfc419e54", "created": "2026-10-09T15:13:11.351043Z", "modified": "2026-10-09T15:13:11.351043Z", "relationship_type": "indicates", "source_ref": "indicator--69346cd1-1ed8-4e80-9794-8dc266e41bc8", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46daffb7-ab20-47d4-9707-32fdfc7b3352", "created": "2026-10-09T15:13:11.351206Z", "modified": "2026-10-09T15:13:11.351206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uq.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.351206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42a83abe-e51f-4bbf-812d-e64af02bebeb", "created": "2026-10-09T15:13:11.351785Z", "modified": "2026-10-09T15:13:11.351785Z", "relationship_type": "indicates", "source_ref": "indicator--46daffb7-ab20-47d4-9707-32fdfc7b3352", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3142eb0-72e8-427d-b010-f7bdd7b462bb", "created": "2026-10-09T15:13:11.351926Z", "modified": "2026-10-09T15:13:11.351926Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ur.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.351926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31cfa0fb-28c7-4586-a894-db2e75a32c3e", "created": "2026-10-09T15:13:11.352461Z", "modified": "2026-10-09T15:13:11.352461Z", "relationship_type": "indicates", "source_ref": "indicator--a3142eb0-72e8-427d-b010-f7bdd7b462bb", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a94689-f048-4c1f-9559-0433f65abc77", "created": "2026-10-09T15:13:11.352599Z", "modified": "2026-10-09T15:13:11.352599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.352599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0636c3b-7a45-4389-8f62-3ef9ad1f92d7", "created": "2026-10-09T15:13:11.353096Z", "modified": "2026-10-09T15:13:11.353096Z", "relationship_type": "indicates", "source_ref": "indicator--65a94689-f048-4c1f-9559-0433f65abc77", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3bd7765-2561-4943-a037-eeca8ad47a7b", "created": "2026-10-09T15:13:11.353226Z", "modified": "2026-10-09T15:13:11.353226Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.353226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24a03ebd-c382-4d89-9651-e2c4d7079352", "created": "2026-10-09T15:13:11.353741Z", "modified": "2026-10-09T15:13:11.353741Z", "relationship_type": "indicates", "source_ref": "indicator--b3bd7765-2561-4943-a037-eeca8ad47a7b", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ca466d-03ff-46d0-8419-31e3778b6f3e", "created": "2026-10-09T15:13:11.353867Z", "modified": "2026-10-09T15:13:11.353867Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyrix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.353867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7b03efd-f7c2-4d77-b01a-cc928ab028eb", "created": "2026-10-09T15:13:11.35436Z", "modified": "2026-10-09T15:13:11.35436Z", "relationship_type": "indicates", "source_ref": "indicator--80ca466d-03ff-46d0-8419-31e3778b6f3e", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314a2da0-5397-4727-8c0b-5c902ed11652", "created": "2026-10-09T15:13:11.354489Z", "modified": "2026-10-09T15:13:11.354489Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyrix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.354489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af954342-d4a9-4f62-b337-984b527abc5e", "created": "2026-10-09T15:13:11.355078Z", "modified": "2026-10-09T15:13:11.355078Z", "relationship_type": "indicates", "source_ref": "indicator--314a2da0-5397-4727-8c0b-5c902ed11652", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f28463-4177-4fa5-a80e-e20de25e8dfd", "created": "2026-10-09T15:13:11.355208Z", "modified": "2026-10-09T15:13:11.355208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shuch6ba0w.spyrixweb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.355208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a76c1d6-55bc-4bcf-9d96-828ffb0b1c7f", "created": "2026-10-09T15:13:11.355724Z", "modified": "2026-10-09T15:13:11.355724Z", "relationship_type": "indicates", "source_ref": "indicator--c0f28463-4177-4fa5-a80e-e20de25e8dfd", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c88708d-904c-4a10-baca-07c1fcc58c61", "created": "2026-10-09T15:13:11.355849Z", "modified": "2026-10-09T15:13:11.355849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sxde-download.spyrix-sfk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.355849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c758159-8d8a-4c7b-8304-e1f563904225", "created": "2026-10-09T15:13:11.356356Z", "modified": "2026-10-09T15:13:11.356356Z", "relationship_type": "indicates", "source_ref": "indicator--0c88708d-904c-4a10-baca-07c1fcc58c61", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903e3a05-149f-44f4-98b9-2c8ec5e42e15", "created": "2026-10-09T15:13:11.356486Z", "modified": "2026-10-09T15:13:11.356486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyrix-sfk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.356486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6a003b3-dcff-4ea4-a032-a3b7471ed5b3", "created": "2026-10-09T15:13:11.356977Z", "modified": "2026-10-09T15:13:11.356977Z", "relationship_type": "indicates", "source_ref": "indicator--903e3a05-149f-44f4-98b9-2c8ec5e42e15", "target_ref": "malware--35407e73-f409-4ccb-96e4-27fdfef7ae41"}, {"type": "malware", "spec_version": "2.1", "id": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de", "created": "2026-10-09T15:13:11.357103Z", "modified": "2026-10-09T15:13:11.357103Z", "name": "RealtimeSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818da418-8fc5-41d4-aabd-7f5f780aeb73", "created": "2026-10-09T15:13:11.357228Z", "modified": "2026-10-09T15:13:11.357228Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='realtime-spy-mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.357228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d737483c-2dce-47ea-b9ec-fa2f0a604cb7", "created": "2026-10-09T15:13:11.357734Z", "modified": "2026-10-09T15:13:11.357734Z", "relationship_type": "indicates", "source_ref": "indicator--818da418-8fc5-41d4-aabd-7f5f780aeb73", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c437c6b-a382-4908-bbe3-a555d0647764", "created": "2026-10-09T15:13:11.357861Z", "modified": "2026-10-09T15:13:11.357861Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spytech-web.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.357861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76d1b446-6eee-4723-95c4-4752eb71179f", "created": "2026-10-09T15:13:11.358359Z", "modified": "2026-10-09T15:13:11.358359Z", "relationship_type": "indicates", "source_ref": "indicator--5c437c6b-a382-4908-bbe3-a555d0647764", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bee4b28-7aa9-4c28-9a55-3f6942ae8cec", "created": "2026-10-09T15:13:11.358484Z", "modified": "2026-10-09T15:13:11.358484Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytech-web.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.358484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f61889b8-dfb8-43e8-99d4-c817e9d9650a", "created": "2026-10-09T15:13:11.358963Z", "modified": "2026-10-09T15:13:11.358963Z", "relationship_type": "indicates", "source_ref": "indicator--1bee4b28-7aa9-4c28-9a55-3f6942ae8cec", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9c5510-09c1-42c3-adb8-e37c0ff5e43b", "created": "2026-10-09T15:13:11.359083Z", "modified": "2026-10-09T15:13:11.359083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='realtime-spy-mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.359083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50f96d0f-e079-42a1-b564-0ab98d7a0b27", "created": "2026-10-09T15:13:11.359587Z", "modified": "2026-10-09T15:13:11.359587Z", "relationship_type": "indicates", "source_ref": "indicator--bb9c5510-09c1-42c3-adb8-e37c0ff5e43b", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a60c54-a5ba-4d93-95f4-f7ab1a835538", "created": "2026-10-09T15:13:11.359711Z", "modified": "2026-10-09T15:13:11.359711Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.realtime-spy-mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.359711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e8072e2-882f-4f37-a476-dad0184c63b2", "created": "2026-10-09T15:13:11.360205Z", "modified": "2026-10-09T15:13:11.360205Z", "relationship_type": "indicates", "source_ref": "indicator--80a60c54-a5ba-4d93-95f4-f7ab1a835538", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a893ae-ea61-4506-a3fc-326fc9f7d1de", "created": "2026-10-09T15:13:11.360342Z", "modified": "2026-10-09T15:13:11.360342Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.realtime.spyapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.360342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59d81ee1-1f78-4658-8d8b-c693376ab695", "created": "2026-10-09T15:13:11.360955Z", "modified": "2026-10-09T15:13:11.360955Z", "relationship_type": "indicates", "source_ref": "indicator--57a893ae-ea61-4506-a3fc-326fc9f7d1de", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3715c1c9-29e1-4af8-8b3d-352f3439f254", "created": "2026-10-09T15:13:11.361082Z", "modified": "2026-10-09T15:13:11.361082Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8CD8FB235EA7F9B0FC308C1A59AB561C3869878C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.361082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4be6ef29-8ef1-4f15-852f-3aa8f3b80d66", "created": "2026-10-09T15:13:11.361665Z", "modified": "2026-10-09T15:13:11.361665Z", "relationship_type": "indicates", "source_ref": "indicator--3715c1c9-29e1-4af8-8b3d-352f3439f254", "target_ref": "malware--cbee0b71-7c6d-4ecd-bcfd-3abe410f24de"}, {"type": "malware", "spec_version": "2.1", "id": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593", "created": "2026-10-09T15:13:11.36179Z", "modified": "2026-10-09T15:13:11.36179Z", "name": "jjspy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b8306f-667e-46a2-8f7d-c54e0f85d49b", "created": "2026-10-09T15:13:11.361912Z", "modified": "2026-10-09T15:13:11.361912Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.361912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba9e6ba8-d1d9-4de1-918b-84f3c81f75e6", "created": "2026-10-09T15:13:11.36241Z", "modified": "2026-10-09T15:13:11.36241Z", "relationship_type": "indicates", "source_ref": "indicator--07b8306f-667e-46a2-8f7d-c54e0f85d49b", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909ac9ea-2b86-46dd-8f8d-913747856d36", "created": "2026-10-09T15:13:11.362542Z", "modified": "2026-10-09T15:13:11.362542Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cloud.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.362542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2174f33b-72f0-4124-86bd-6e811f352905", "created": "2026-10-09T15:13:11.363021Z", "modified": "2026-10-09T15:13:11.363021Z", "relationship_type": "indicates", "source_ref": "indicator--909ac9ea-2b86-46dd-8f8d-913747856d36", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917897d4-0aaa-4c0f-b824-e1443012bc09", "created": "2026-10-09T15:13:11.363142Z", "modified": "2026-10-09T15:13:11.363142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='jjspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.363142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccc1e99a-c118-408c-947f-e541cb0c1151", "created": "2026-10-09T15:13:11.363627Z", "modified": "2026-10-09T15:13:11.363627Z", "relationship_type": "indicates", "source_ref": "indicator--917897d4-0aaa-4c0f-b824-e1443012bc09", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7980442-1abb-4fc8-beb3-cdf4dd8b90fe", "created": "2026-10-09T15:13:11.363758Z", "modified": "2026-10-09T15:13:11.363758Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='jjspy.ml']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.363758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba82d435-31d6-4261-8748-14f0c4b16bf3", "created": "2026-10-09T15:13:11.36422Z", "modified": "2026-10-09T15:13:11.36422Z", "relationship_type": "indicates", "source_ref": "indicator--f7980442-1abb-4fc8-beb3-cdf4dd8b90fe", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4e9cf8-6a12-466c-9df5-0f72a7da2f6b", "created": "2026-10-09T15:13:11.364389Z", "modified": "2026-10-09T15:13:11.364389Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.jjspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.364389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43e1309e-bf09-408f-9508-f355b166255e", "created": "2026-10-09T15:13:11.364879Z", "modified": "2026-10-09T15:13:11.364879Z", "relationship_type": "indicates", "source_ref": "indicator--dd4e9cf8-6a12-466c-9df5-0f72a7da2f6b", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6555bb3-9223-4a06-b6d0-067e132fc9ef", "created": "2026-10-09T15:13:11.365002Z", "modified": "2026-10-09T15:13:11.365002Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phone-backup-service.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.365002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98207f69-4f89-4d32-ba4e-984a28f65c63", "created": "2026-10-09T15:13:11.365524Z", "modified": "2026-10-09T15:13:11.365524Z", "relationship_type": "indicates", "source_ref": "indicator--b6555bb3-9223-4a06-b6d0-067e132fc9ef", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a780c020-10f1-45fb-8108-78e0e3c47999", "created": "2026-10-09T15:13:11.365648Z", "modified": "2026-10-09T15:13:11.365648Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rrspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.365648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72f75389-f461-4990-b177-0e42d3c403a1", "created": "2026-10-09T15:13:11.36612Z", "modified": "2026-10-09T15:13:11.36612Z", "relationship_type": "indicates", "source_ref": "indicator--a780c020-10f1-45fb-8108-78e0e3c47999", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc94303-a629-46f0-bbfe-1157dfdebfbd", "created": "2026-10-09T15:13:11.36624Z", "modified": "2026-10-09T15:13:11.36624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rtc.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.36624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bab7104-7212-4117-93cf-5638924c0b28", "created": "2026-10-09T15:13:11.366851Z", "modified": "2026-10-09T15:13:11.366851Z", "relationship_type": "indicates", "source_ref": "indicator--3cc94303-a629-46f0-bbfe-1157dfdebfbd", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff8c1fb-6a6d-4e44-9684-4f28c6d945fa", "created": "2026-10-09T15:13:11.366983Z", "modified": "2026-10-09T15:13:11.366983Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='service.n.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.366983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d2d448a-26d5-420b-8b0b-07fb9cbe4361", "created": "2026-10-09T15:13:11.367488Z", "modified": "2026-10-09T15:13:11.367488Z", "relationship_type": "indicates", "source_ref": "indicator--1ff8c1fb-6a6d-4e44-9684-4f28c6d945fa", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319c458a-3224-4186-8186-753ff1636438", "created": "2026-10-09T15:13:11.367619Z", "modified": "2026-10-09T15:13:11.367619Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='service.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.367619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--507fa89d-5f59-43ec-961d-e916caaf0ac7", "created": "2026-10-09T15:13:11.368104Z", "modified": "2026-10-09T15:13:11.368104Z", "relationship_type": "indicates", "source_ref": "indicator--319c458a-3224-4186-8186-753ff1636438", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec56c4fc-7bb1-45ef-a569-b874f5fc53cb", "created": "2026-10-09T15:13:11.368229Z", "modified": "2026-10-09T15:13:11.368229Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttjj.ga']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.368229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc2ffa4b-e18d-4487-a10e-db76ae0d739e", "created": "2026-10-09T15:13:11.368702Z", "modified": "2026-10-09T15:13:11.368702Z", "relationship_type": "indicates", "source_ref": "indicator--ec56c4fc-7bb1-45ef-a569-b874f5fc53cb", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96826ef8-099e-45f8-b86b-8b4078f0b28c", "created": "2026-10-09T15:13:11.368821Z", "modified": "2026-10-09T15:13:11.368821Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttjj.tk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.368821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9fb4900-687e-4d3f-83f9-a8b82d7cc587", "created": "2026-10-09T15:13:11.369291Z", "modified": "2026-10-09T15:13:11.369291Z", "relationship_type": "indicates", "source_ref": "indicator--96826ef8-099e-45f8-b86b-8b4078f0b28c", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3160cdcc-9e6b-4ea3-bf87-2d1fb441dc03", "created": "2026-10-09T15:13:11.369413Z", "modified": "2026-10-09T15:13:11.369413Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttjj.ml']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.369413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2217c5c8-331e-4b1c-bc34-7c87a623ec3f", "created": "2026-10-09T15:13:11.369877Z", "modified": "2026-10-09T15:13:11.369877Z", "relationship_type": "indicates", "source_ref": "indicator--3160cdcc-9e6b-4ea3-bf87-2d1fb441dc03", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc73234-0629-4b0b-9e3e-407efbd9deca", "created": "2026-10-09T15:13:11.369995Z", "modified": "2026-10-09T15:13:11.369995Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.369995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffd8031d-80c8-4bc8-b6a4-b6277f87ab26", "created": "2026-10-09T15:13:11.37047Z", "modified": "2026-10-09T15:13:11.37047Z", "relationship_type": "indicates", "source_ref": "indicator--cbc73234-0629-4b0b-9e3e-407efbd9deca", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725f3f18-7239-436f-8c08-196cb361def6", "created": "2026-10-09T15:13:11.370589Z", "modified": "2026-10-09T15:13:11.370589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.370589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--291e5b30-b1dd-4f29-889a-2d251d5a4c4c", "created": "2026-10-09T15:13:11.371062Z", "modified": "2026-10-09T15:13:11.371062Z", "relationship_type": "indicates", "source_ref": "indicator--725f3f18-7239-436f-8c08-196cb361def6", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0101a7b5-ba43-4eaf-8a79-5019b4887d15", "created": "2026-10-09T15:13:11.371181Z", "modified": "2026-10-09T15:13:11.371181Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttspy.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.371181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1726c9d-940c-4c93-a2c6-72c277cac95b", "created": "2026-10-09T15:13:11.371668Z", "modified": "2026-10-09T15:13:11.371668Z", "relationship_type": "indicates", "source_ref": "indicator--0101a7b5-ba43-4eaf-8a79-5019b4887d15", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2899b151-6c5f-42fc-8450-e93fa54efef5", "created": "2026-10-09T15:13:11.371791Z", "modified": "2026-10-09T15:13:11.371791Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='upload.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.371791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6d30026-b6ef-414f-b36d-d18cb61e1ebf", "created": "2026-10-09T15:13:11.372402Z", "modified": "2026-10-09T15:13:11.372402Z", "relationship_type": "indicates", "source_ref": "indicator--2899b151-6c5f-42fc-8450-e93fa54efef5", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebc902c-0bd0-47b6-b535-dffb768bb41a", "created": "2026-10-09T15:13:11.372532Z", "modified": "2026-10-09T15:13:11.372532Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ws.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.372532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d40175a-da28-4106-bb70-78d382b3d24f", "created": "2026-10-09T15:13:11.373003Z", "modified": "2026-10-09T15:13:11.373003Z", "relationship_type": "indicates", "source_ref": "indicator--bebc902c-0bd0-47b6-b535-dffb768bb41a", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c158c81-5616-4da5-830a-ed7771464499", "created": "2026-10-09T15:13:11.373122Z", "modified": "2026-10-09T15:13:11.373122Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.ttjj.tk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.373122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01868a0f-09f8-43cd-a01b-5808e64e901f", "created": "2026-10-09T15:13:11.373605Z", "modified": "2026-10-09T15:13:11.373605Z", "relationship_type": "indicates", "source_ref": "indicator--4c158c81-5616-4da5-830a-ed7771464499", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d2c684-72cb-4d1d-a7c8-fd128c05b06d", "created": "2026-10-09T15:13:11.37373Z", "modified": "2026-10-09T15:13:11.37373Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wx.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.37373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e129fd5-40ad-4d5f-90d6-a9758ed19328", "created": "2026-10-09T15:13:11.374204Z", "modified": "2026-10-09T15:13:11.374204Z", "relationship_type": "indicates", "source_ref": "indicator--82d2c684-72cb-4d1d-a7c8-fd128c05b06d", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b13ad3b-1f22-4c2b-bb1c-3d0b604c8e27", "created": "2026-10-09T15:13:11.374338Z", "modified": "2026-10-09T15:13:11.374338Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.jjspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.374338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a399251-6bd1-4089-ba27-b5a66c979ee0", "created": "2026-10-09T15:13:11.374804Z", "modified": "2026-10-09T15:13:11.374804Z", "relationship_type": "indicates", "source_ref": "indicator--7b13ad3b-1f22-4c2b-bb1c-3d0b604c8e27", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a1d3f6-c263-4980-bdba-b9c36df44576", "created": "2026-10-09T15:13:11.374922Z", "modified": "2026-10-09T15:13:11.374922Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.374922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3dcd829-3866-474f-9da4-c3a7ea2243bc", "created": "2026-10-09T15:13:11.375404Z", "modified": "2026-10-09T15:13:11.375404Z", "relationship_type": "indicates", "source_ref": "indicator--10a1d3f6-c263-4980-bdba-b9c36df44576", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17aa47a-8f29-4c7c-91a0-88dcc3cb1765", "created": "2026-10-09T15:13:11.375523Z", "modified": "2026-10-09T15:13:11.375523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9067b08afe27a6e6afc939ed441e3c3575b7566698e59c647cd89ffc813169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.375523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1eb687c-ecdd-4542-82dd-2eb3bb277f7d", "created": "2026-10-09T15:13:11.37614Z", "modified": "2026-10-09T15:13:11.37614Z", "relationship_type": "indicates", "source_ref": "indicator--a17aa47a-8f29-4c7c-91a0-88dcc3cb1765", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce83fd8-b7cb-438f-878b-466b8fb5c6c5", "created": "2026-10-09T15:13:11.376263Z", "modified": "2026-10-09T15:13:11.376263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5668ce93a99eff4dea6366619e70904efb8d61082c3adf89020fc7582f14d9ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.376263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28d7f75e-f6ab-428d-adfd-21ca95d4a0f0", "created": "2026-10-09T15:13:11.376891Z", "modified": "2026-10-09T15:13:11.376891Z", "relationship_type": "indicates", "source_ref": "indicator--bce83fd8-b7cb-438f-878b-466b8fb5c6c5", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789c756e-f9b4-498a-881b-8bcaf48e4b24", "created": "2026-10-09T15:13:11.377016Z", "modified": "2026-10-09T15:13:11.377016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='011b3e70ea3bec4e59cc5f4acb6ad1a88b9b0feb856dc25b3eceaf39bbddb38a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.377016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63b2f473-a96d-421f-94ab-b6be1d475a02", "created": "2026-10-09T15:13:11.377641Z", "modified": "2026-10-09T15:13:11.377641Z", "relationship_type": "indicates", "source_ref": "indicator--789c756e-f9b4-498a-881b-8bcaf48e4b24", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0eaa2cc-27d3-4433-b8fa-9a386f3509f9", "created": "2026-10-09T15:13:11.377767Z", "modified": "2026-10-09T15:13:11.377767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66c01bf7ce0c8c90b4f63ece8c024876360ac50e5cf0c2bdb166e30d0b52cad2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.377767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c4f45e2-c198-45de-9a57-29661f6bebe6", "created": "2026-10-09T15:13:11.378496Z", "modified": "2026-10-09T15:13:11.378496Z", "relationship_type": "indicates", "source_ref": "indicator--f0eaa2cc-27d3-4433-b8fa-9a386f3509f9", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a285f25d-45be-4a95-b0bc-cf0c1f3c41f9", "created": "2026-10-09T15:13:11.378625Z", "modified": "2026-10-09T15:13:11.378625Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.backup.tt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.378625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c599d670-bef9-425c-b68f-a11e5598291b", "created": "2026-10-09T15:13:11.379081Z", "modified": "2026-10-09T15:13:11.379081Z", "relationship_type": "indicates", "source_ref": "indicator--a285f25d-45be-4a95-b0bc-cf0c1f3c41f9", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527a802d-5e36-46ea-9e25-cfa5d1332c73", "created": "2026-10-09T15:13:11.379209Z", "modified": "2026-10-09T15:13:11.379209Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='002DD372C94E80600C7C60192CBD701A3C3B87EE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.379209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8847f234-e8ad-4b0b-9b69-b7e50aa60c88", "created": "2026-10-09T15:13:11.37977Z", "modified": "2026-10-09T15:13:11.37977Z", "relationship_type": "indicates", "source_ref": "indicator--527a802d-5e36-46ea-9e25-cfa5d1332c73", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166e6d99-d077-45c6-972b-d05b9994f78e", "created": "2026-10-09T15:13:11.379893Z", "modified": "2026-10-09T15:13:11.379893Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4AF16661FC885F7CC84358CCB8F272308436D5E3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.379893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66da19db-4497-42d8-8080-0ea6d32c9d08", "created": "2026-10-09T15:13:11.380463Z", "modified": "2026-10-09T15:13:11.380463Z", "relationship_type": "indicates", "source_ref": "indicator--166e6d99-d077-45c6-972b-d05b9994f78e", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada31673-1b3f-4722-a0dd-a9f825cd144c", "created": "2026-10-09T15:13:11.380592Z", "modified": "2026-10-09T15:13:11.380592Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6DFB725019C7784B400D940DAAEDAED18C5B898B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.380592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0311c044-f549-480d-85b3-66e5e1925553", "created": "2026-10-09T15:13:11.38114Z", "modified": "2026-10-09T15:13:11.38114Z", "relationship_type": "indicates", "source_ref": "indicator--ada31673-1b3f-4722-a0dd-a9f825cd144c", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2776dc65-bab2-4a19-928c-ee2568d5db8e", "created": "2026-10-09T15:13:11.381261Z", "modified": "2026-10-09T15:13:11.381261Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D3E6A092741CBA59BE9308FBA72DF887EAB184FD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.381261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2266f65-6e0c-41b6-b550-a3f4aeea4487", "created": "2026-10-09T15:13:11.381827Z", "modified": "2026-10-09T15:13:11.381827Z", "relationship_type": "indicates", "source_ref": "indicator--2776dc65-bab2-4a19-928c-ee2568d5db8e", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8f21e3-d88d-48c0-ba85-81d1c05ddd62", "created": "2026-10-09T15:13:11.381948Z", "modified": "2026-10-09T15:13:11.381948Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D8418B279414687729D37B34E53AB75D502B9F73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.381948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbe68a49-2116-4ad6-a1e4-acac48e97886", "created": "2026-10-09T15:13:11.382509Z", "modified": "2026-10-09T15:13:11.382509Z", "relationship_type": "indicates", "source_ref": "indicator--cd8f21e3-d88d-48c0-ba85-81d1c05ddd62", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e540164-cba0-44ea-9ad7-8db3930fcd2c", "created": "2026-10-09T15:13:11.382632Z", "modified": "2026-10-09T15:13:11.382632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EE35E2740576480486307C991C762A3FBA8DA46D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.382632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efb22e24-5afb-4aac-8082-6de41da73e23", "created": "2026-10-09T15:13:11.383282Z", "modified": "2026-10-09T15:13:11.383282Z", "relationship_type": "indicates", "source_ref": "indicator--1e540164-cba0-44ea-9ad7-8db3930fcd2c", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d69702-94e6-4fb7-a4bc-a9cb814414af", "created": "2026-10-09T15:13:11.383413Z", "modified": "2026-10-09T15:13:11.383413Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8FCBCA563B1CD0E79CAC595002422C2E54072B7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.383413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1812d7b-9a4a-4a06-a221-5c68f54c4456", "created": "2026-10-09T15:13:11.383983Z", "modified": "2026-10-09T15:13:11.383983Z", "relationship_type": "indicates", "source_ref": "indicator--c0d69702-94e6-4fb7-a4bc-a9cb814414af", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1bedd1-3dbe-4ec9-9b68-6a8813e71bb5", "created": "2026-10-09T15:13:11.384107Z", "modified": "2026-10-09T15:13:11.384107Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CF627144481D3F1DCFBB6CF12291C540AE325FBE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.384107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5acfe9c9-3ad9-402d-8e61-9f794655bfd2", "created": "2026-10-09T15:13:11.384828Z", "modified": "2026-10-09T15:13:11.384828Z", "relationship_type": "indicates", "source_ref": "indicator--9a1bedd1-3dbe-4ec9-9b68-6a8813e71bb5", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c256feb-fa38-47bc-9314-15f019a3c394", "created": "2026-10-09T15:13:11.38497Z", "modified": "2026-10-09T15:13:11.38497Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='34B791B5D35A874D189202EEA1FA99188F58A4C1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.38497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--919d7455-edd5-4bbf-a511-d0e7982be82d", "created": "2026-10-09T15:13:11.385533Z", "modified": "2026-10-09T15:13:11.385533Z", "relationship_type": "indicates", "source_ref": "indicator--4c256feb-fa38-47bc-9314-15f019a3c394", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5737b2c5-f00d-48ee-a358-097c7b9b550e", "created": "2026-10-09T15:13:11.38566Z", "modified": "2026-10-09T15:13:11.38566Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='933C19015525266982AC6D830CB6B3D25079777B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.38566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a51b8a59-26ff-49cf-9b0c-b50f3c413867", "created": "2026-10-09T15:13:11.386206Z", "modified": "2026-10-09T15:13:11.386206Z", "relationship_type": "indicates", "source_ref": "indicator--5737b2c5-f00d-48ee-a358-097c7b9b550e", "target_ref": "malware--07780bf5-aafe-4dc9-bf1b-5c2021295593"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b", "created": "2026-10-09T15:13:11.38634Z", "modified": "2026-10-09T15:13:11.38634Z", "name": "AndroidSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da5d162-bbf6-4048-951d-7c9a03915ac3", "created": "2026-10-09T15:13:11.386468Z", "modified": "2026-10-09T15:13:11.386468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.386468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16f6e6cc-0b61-4c18-b8ec-14c028f423c5", "created": "2026-10-09T15:13:11.386948Z", "modified": "2026-10-09T15:13:11.386948Z", "relationship_type": "indicates", "source_ref": "indicator--4da5d162-bbf6-4048-951d-7c9a03915ac3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a368a7a7-4b1a-40f9-a92d-513643f5eeb5", "created": "2026-10-09T15:13:11.387068Z", "modified": "2026-10-09T15:13:11.387068Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.387068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59594545-1390-4815-bba8-adfe1c13954f", "created": "2026-10-09T15:13:11.387562Z", "modified": "2026-10-09T15:13:11.387562Z", "relationship_type": "indicates", "source_ref": "indicator--a368a7a7-4b1a-40f9-a92d-513643f5eeb5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a908944-39af-4a13-b24b-3fe7b40f6a4a", "created": "2026-10-09T15:13:11.387688Z", "modified": "2026-10-09T15:13:11.387688Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='klg.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.387688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80912872-1f7c-4ed5-8c6b-713f39fd487a", "created": "2026-10-09T15:13:11.388161Z", "modified": "2026-10-09T15:13:11.388161Z", "relationship_type": "indicates", "source_ref": "indicator--3a908944-39af-4a13-b24b-3fe7b40f6a4a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dedfd90-de62-4363-8105-ffa623431a2f", "created": "2026-10-09T15:13:11.388293Z", "modified": "2026-10-09T15:13:11.388293Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.388293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6c812a5-15b2-4097-8361-3b66d99081b5", "created": "2026-10-09T15:13:11.388775Z", "modified": "2026-10-09T15:13:11.388775Z", "relationship_type": "indicates", "source_ref": "indicator--7dedfd90-de62-4363-8105-ffa623431a2f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a14bee-abe1-40bd-9660-96f210cb4cc3", "created": "2026-10-09T15:13:11.388899Z", "modified": "2026-10-09T15:13:11.388899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.388899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10eebe7e-2bfb-4197-b908-2739829d6229", "created": "2026-10-09T15:13:11.389375Z", "modified": "2026-10-09T15:13:11.389375Z", "relationship_type": "indicates", "source_ref": "indicator--f7a14bee-abe1-40bd-9660-96f210cb4cc3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1b2094-2854-47d3-96a7-e8422e345a4b", "created": "2026-10-09T15:13:11.389505Z", "modified": "2026-10-09T15:13:11.389505Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.389505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1e809bc-8aa3-42c2-b3fa-79f4fa9e1637", "created": "2026-10-09T15:13:11.389981Z", "modified": "2026-10-09T15:13:11.389981Z", "relationship_type": "indicates", "source_ref": "indicator--ed1b2094-2854-47d3-96a7-e8422e345a4b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0591eb-c9fe-48f7-b914-ab79f2ed8c06", "created": "2026-10-09T15:13:11.390103Z", "modified": "2026-10-09T15:13:11.390103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='087f903099d2bf890efff80eb59062c0ae5e1c99c46ed35dbe6134d5cd5faef8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.390103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a31441f-cadd-44c4-9a8a-1ba63e80c55d", "created": "2026-10-09T15:13:11.39081Z", "modified": "2026-10-09T15:13:11.39081Z", "relationship_type": "indicates", "source_ref": "indicator--7b0591eb-c9fe-48f7-b914-ab79f2ed8c06", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b098d16-ec74-4019-8813-1b8c8f31c1e3", "created": "2026-10-09T15:13:11.391002Z", "modified": "2026-10-09T15:13:11.391002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e015afbb4504d581f3442351aeb44b9df2228ea6a0b0cbe6061363c58b13825c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.391002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff059570-eeba-4bae-a4e9-97bb1c5bb55a", "created": "2026-10-09T15:13:11.39164Z", "modified": "2026-10-09T15:13:11.39164Z", "relationship_type": "indicates", "source_ref": "indicator--5b098d16-ec74-4019-8813-1b8c8f31c1e3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1049d36-a422-4133-be00-3b911963e2df", "created": "2026-10-09T15:13:11.391769Z", "modified": "2026-10-09T15:13:11.391769Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f6766a972d53e78eaff4939f3a0bbb7d5b5fe07c3779ff4a2cfa3bbd34d96de2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.391769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb32ff33-54f1-42e3-b10d-e2e2a070bd74", "created": "2026-10-09T15:13:11.392368Z", "modified": "2026-10-09T15:13:11.392368Z", "relationship_type": "indicates", "source_ref": "indicator--a1049d36-a422-4133-be00-3b911963e2df", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476a8b62-ef49-4d00-b379-a274556c7c53", "created": "2026-10-09T15:13:11.392491Z", "modified": "2026-10-09T15:13:11.392491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9529b931208bc5cce2ea20c291f2f8e7c575eaa5b541d389fdaa5f69b4f06785']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.392491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b0f09ca-9548-4fcf-a5db-f38a486e98c9", "created": "2026-10-09T15:13:11.393081Z", "modified": "2026-10-09T15:13:11.393081Z", "relationship_type": "indicates", "source_ref": "indicator--476a8b62-ef49-4d00-b379-a274556c7c53", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa6b6dd-e71e-477b-8977-01b375e0bea4", "created": "2026-10-09T15:13:11.393201Z", "modified": "2026-10-09T15:13:11.393201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01864a375f3086a7d061693a78ef0233fdff3c13131cd36f6cf84a104548e167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.393201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f91d7112-a110-4835-baa0-81f4ccecd64d", "created": "2026-10-09T15:13:11.393811Z", "modified": "2026-10-09T15:13:11.393811Z", "relationship_type": "indicates", "source_ref": "indicator--dfa6b6dd-e71e-477b-8977-01b375e0bea4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b223bc-2f1b-4c0c-bb2f-d70cb2f78df0", "created": "2026-10-09T15:13:11.393935Z", "modified": "2026-10-09T15:13:11.393935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5237e7f8e8c867bfe71c8882590592bdf4dd9a9e25569b58988d074bc55df8b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.393935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d17fac22-fee5-473b-9d17-3ca3bf412f02", "created": "2026-10-09T15:13:11.394567Z", "modified": "2026-10-09T15:13:11.394567Z", "relationship_type": "indicates", "source_ref": "indicator--c1b223bc-2f1b-4c0c-bb2f-d70cb2f78df0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d53a0a-0f4f-460e-8198-833e60037c8e", "created": "2026-10-09T15:13:11.394698Z", "modified": "2026-10-09T15:13:11.394698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62171632cd788f7f7a7ceaef01a10d33641fce5d8839d71f3fbe5100673d56e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.394698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00310e36-0b68-49f8-aa16-2eb2f59ceb5d", "created": "2026-10-09T15:13:11.395313Z", "modified": "2026-10-09T15:13:11.395313Z", "relationship_type": "indicates", "source_ref": "indicator--b9d53a0a-0f4f-460e-8198-833e60037c8e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6761ce4-b81b-416a-a66e-c3dd0016d8aa", "created": "2026-10-09T15:13:11.39544Z", "modified": "2026-10-09T15:13:11.39544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba88fa93ce34c2a84c635bc589825a86ab39efb1dd8fa125d2d1472d264f6bdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.39544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f4d2d46-63f6-4b36-96d1-f06b7e453084", "created": "2026-10-09T15:13:11.396029Z", "modified": "2026-10-09T15:13:11.396029Z", "relationship_type": "indicates", "source_ref": "indicator--b6761ce4-b81b-416a-a66e-c3dd0016d8aa", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39ac4df-69c1-4d70-a03c-2de496874f9c", "created": "2026-10-09T15:13:11.396155Z", "modified": "2026-10-09T15:13:11.396155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cce9ade8e59c990a3071bf4c93e15cfe7c5398fdcdd850bc1b915b43c24cb7e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.396155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2c5d964-13e0-4f3f-ad7f-aeaed0bb28c7", "created": "2026-10-09T15:13:11.396781Z", "modified": "2026-10-09T15:13:11.396781Z", "relationship_type": "indicates", "source_ref": "indicator--f39ac4df-69c1-4d70-a03c-2de496874f9c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b86f52-4697-4e7b-8e38-f4782095d8c6", "created": "2026-10-09T15:13:11.396916Z", "modified": "2026-10-09T15:13:11.396916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f873aad766a4706bc1d3c2eb0cfa3b5e1efc9477d96e50a2571b133526109c6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.396916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2972a45d-1d7e-4a07-b647-8a119d19c178", "created": "2026-10-09T15:13:11.397642Z", "modified": "2026-10-09T15:13:11.397642Z", "relationship_type": "indicates", "source_ref": "indicator--74b86f52-4697-4e7b-8e38-f4782095d8c6", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9afa03-d704-4a1d-8af8-c469571b8fbc", "created": "2026-10-09T15:13:11.397772Z", "modified": "2026-10-09T15:13:11.397772Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c59502bfc036d3c9c0c7cd63cbc4d62f8228d22df3cc737fc3f235d42e495a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.397772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3028129b-e5f2-43e2-9977-469a3c6471d9", "created": "2026-10-09T15:13:11.398389Z", "modified": "2026-10-09T15:13:11.398389Z", "relationship_type": "indicates", "source_ref": "indicator--ce9afa03-d704-4a1d-8af8-c469571b8fbc", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfddd43-8990-48f1-bc47-0f7c84f895e2", "created": "2026-10-09T15:13:11.398519Z", "modified": "2026-10-09T15:13:11.398519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac7f5c78730fe12be6752dc3840ed0355359e545286b2472d41f5f6c29c0b1b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.398519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d985314-5aa3-4546-b366-0c0a077b732a", "created": "2026-10-09T15:13:11.399109Z", "modified": "2026-10-09T15:13:11.399109Z", "relationship_type": "indicates", "source_ref": "indicator--4cfddd43-8990-48f1-bc47-0f7c84f895e2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff11f4f3-3e55-4b9f-a7a8-3e0492c03a8d", "created": "2026-10-09T15:13:11.399231Z", "modified": "2026-10-09T15:13:11.399231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c47a89b804823af14c552664f04d2abc641831615c75707158874a40112400e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.399231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df010ca9-5f57-4692-bbcd-4292ad048ac1", "created": "2026-10-09T15:13:11.399839Z", "modified": "2026-10-09T15:13:11.399839Z", "relationship_type": "indicates", "source_ref": "indicator--ff11f4f3-3e55-4b9f-a7a8-3e0492c03a8d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cbcfb8-5e79-4e97-ba25-0018b63a2e1b", "created": "2026-10-09T15:13:11.399961Z", "modified": "2026-10-09T15:13:11.399961Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3113f84f6eaf1a3a48fa07f8d33cf47fb3507261493de75c412474fc946ab10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.399961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84c4c734-b02e-4c22-bc7d-a722e3053ae9", "created": "2026-10-09T15:13:11.400558Z", "modified": "2026-10-09T15:13:11.400558Z", "relationship_type": "indicates", "source_ref": "indicator--21cbcfb8-5e79-4e97-ba25-0018b63a2e1b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61fa6f78-6823-4aac-9038-5a5a3f20ed31", "created": "2026-10-09T15:13:11.400679Z", "modified": "2026-10-09T15:13:11.400679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fded8fa103e1e6be7e771d223c68f87b6ee89f38bb5269b4b642d1a06d3ec0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.400679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b87c554-9720-44fa-aaae-066f904da135", "created": "2026-10-09T15:13:11.401277Z", "modified": "2026-10-09T15:13:11.401277Z", "relationship_type": "indicates", "source_ref": "indicator--61fa6f78-6823-4aac-9038-5a5a3f20ed31", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e5a9bf-1481-4397-b189-5e0ea12d966b", "created": "2026-10-09T15:13:11.401398Z", "modified": "2026-10-09T15:13:11.401398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fada242bdadcf7eb96a21e9efb50c6bdcf5b4a3dd0069cb95877f8685ef53d66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.401398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f55318eb-e046-499a-857a-525fe55afff6", "created": "2026-10-09T15:13:11.401988Z", "modified": "2026-10-09T15:13:11.401988Z", "relationship_type": "indicates", "source_ref": "indicator--78e5a9bf-1481-4397-b189-5e0ea12d966b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4292016-f681-45ee-a37f-7d447361cd5c", "created": "2026-10-09T15:13:11.402106Z", "modified": "2026-10-09T15:13:11.402106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d83934d50bab05ec2ae753c39b7c95af4aeb8718368ff9b03f4d56d7457b94ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.402106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad3a94af-e1cf-4cae-b182-0fa479c297a9", "created": "2026-10-09T15:13:11.402718Z", "modified": "2026-10-09T15:13:11.402718Z", "relationship_type": "indicates", "source_ref": "indicator--b4292016-f681-45ee-a37f-7d447361cd5c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fa0e2c-b925-41c0-bfdf-e904e9156272", "created": "2026-10-09T15:13:11.402849Z", "modified": "2026-10-09T15:13:11.402849Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9005c6c48c36ac87466a12096fa80d52fa07cbe096bc2feff91154199d1485b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.402849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4edac402-b20c-4c63-a969-845dbcef9bb6", "created": "2026-10-09T15:13:11.403457Z", "modified": "2026-10-09T15:13:11.403457Z", "relationship_type": "indicates", "source_ref": "indicator--32fa0e2c-b925-41c0-bfdf-e904e9156272", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f7500a-bd88-42ac-aa8b-694f9548f649", "created": "2026-10-09T15:13:11.403578Z", "modified": "2026-10-09T15:13:11.403578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67dbf8bcae8f09742d2cb122889878fa16fa1dd3618d0a64f8bd0574bc10e732']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.403578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f03b2db0-a9ff-4e49-83aa-83bc06af19c3", "created": "2026-10-09T15:13:11.404299Z", "modified": "2026-10-09T15:13:11.404299Z", "relationship_type": "indicates", "source_ref": "indicator--12f7500a-bd88-42ac-aa8b-694f9548f649", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85475ce7-cd13-4f73-a0b3-b19381c8a307", "created": "2026-10-09T15:13:11.404427Z", "modified": "2026-10-09T15:13:11.404427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22e424e0b5c056e56ad6fd1109668be9233f06cff0a23aed5fdfa7cbda65e971']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.404427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--318465c1-66f1-4b6b-8132-2de13b20aaf8", "created": "2026-10-09T15:13:11.405015Z", "modified": "2026-10-09T15:13:11.405015Z", "relationship_type": "indicates", "source_ref": "indicator--85475ce7-cd13-4f73-a0b3-b19381c8a307", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4542bbdd-68f2-4bd8-a31c-80a130a033b5", "created": "2026-10-09T15:13:11.405138Z", "modified": "2026-10-09T15:13:11.405138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f6ca4c78de852036ad0ec8681e14faf93254655a6ac07b6091bf2c1fec45794f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.405138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62d0a1ce-fb8d-49b7-88c5-a4b7aac21bbe", "created": "2026-10-09T15:13:11.40574Z", "modified": "2026-10-09T15:13:11.40574Z", "relationship_type": "indicates", "source_ref": "indicator--4542bbdd-68f2-4bd8-a31c-80a130a033b5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18146470-b756-4f09-9e26-6c168364a48f", "created": "2026-10-09T15:13:11.405865Z", "modified": "2026-10-09T15:13:11.405865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a930038b58a345303dd55e1c4cc9e25b2e6da91bcf591b00c0a2c04aa7e5478']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.405865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4343d7d9-2e5d-4d92-b05f-4faac8393171", "created": "2026-10-09T15:13:11.406458Z", "modified": "2026-10-09T15:13:11.406458Z", "relationship_type": "indicates", "source_ref": "indicator--18146470-b756-4f09-9e26-6c168364a48f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf858db-644a-487a-8d4b-65df9ac61c81", "created": "2026-10-09T15:13:11.40658Z", "modified": "2026-10-09T15:13:11.40658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92f73fc7049cfa73b7a5886432a05cf506d9ff1f86435cd4f5ec17045a34fbfc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.40658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab8d423d-43c8-4d37-ac23-6153fc5e27d0", "created": "2026-10-09T15:13:11.407166Z", "modified": "2026-10-09T15:13:11.407166Z", "relationship_type": "indicates", "source_ref": "indicator--aaf858db-644a-487a-8d4b-65df9ac61c81", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f645bb-67ec-4268-90b3-fd6032ac49c9", "created": "2026-10-09T15:13:11.407296Z", "modified": "2026-10-09T15:13:11.407296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b569d9f9c1d4cdf68df8043a0d5b7c9ac66629bc146d04557027e9796fb862dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.407296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1c069aa-1f0d-4bf8-9a5b-5d84acedcec2", "created": "2026-10-09T15:13:11.407885Z", "modified": "2026-10-09T15:13:11.407885Z", "relationship_type": "indicates", "source_ref": "indicator--44f645bb-67ec-4268-90b3-fd6032ac49c9", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac6160a-9997-4ec3-91ea-8b032da57a57", "created": "2026-10-09T15:13:11.408005Z", "modified": "2026-10-09T15:13:11.408005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='476b3fc96057c6c236fedf64cfc456acd5d435c226eecc02433746bea458fa55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.408005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--102772c0-fbb5-4a3d-a475-417e207f28e3", "created": "2026-10-09T15:13:11.408603Z", "modified": "2026-10-09T15:13:11.408603Z", "relationship_type": "indicates", "source_ref": "indicator--aac6160a-9997-4ec3-91ea-8b032da57a57", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5bd655-24e4-4593-9178-e130c9079505", "created": "2026-10-09T15:13:11.408727Z", "modified": "2026-10-09T15:13:11.408727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8954a8b4faea49ea62fddc4086d3a7d69392fdaa47626d4451b7423df812922e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.408727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--116babea-f88c-434e-8199-df82c114c19d", "created": "2026-10-09T15:13:11.409331Z", "modified": "2026-10-09T15:13:11.409331Z", "relationship_type": "indicates", "source_ref": "indicator--eb5bd655-24e4-4593-9178-e130c9079505", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74084d3a-f446-4f5d-b236-3f0bc523b140", "created": "2026-10-09T15:13:11.40946Z", "modified": "2026-10-09T15:13:11.40946Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29fa73875010aba30ec9b6ffb4ed58a373d907b2127771fd331ad28b5091a5ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.40946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2338c445-a9ca-4ef9-bbc8-b0446114b079", "created": "2026-10-09T15:13:11.410152Z", "modified": "2026-10-09T15:13:11.410152Z", "relationship_type": "indicates", "source_ref": "indicator--74084d3a-f446-4f5d-b236-3f0bc523b140", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85276a37-f0f7-4fa1-bb41-43edad57fbff", "created": "2026-10-09T15:13:11.410287Z", "modified": "2026-10-09T15:13:11.410287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d9ed4a56f234984c529eec821eb2ce42d93a2c11201c52a789da8a87ce81b21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.410287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cccc338-923f-4123-bd54-2a3458dcc372", "created": "2026-10-09T15:13:11.410883Z", "modified": "2026-10-09T15:13:11.410883Z", "relationship_type": "indicates", "source_ref": "indicator--85276a37-f0f7-4fa1-bb41-43edad57fbff", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d50b1f3-3d84-47ff-b0ed-a4283c58aeae", "created": "2026-10-09T15:13:11.411008Z", "modified": "2026-10-09T15:13:11.411008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6dbc63cd15602bb616003142f9925984d39ef24feb894e4e47318946fbc8e8be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.411008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d05c339-e092-4ada-b793-dd0c7ccf4ed0", "created": "2026-10-09T15:13:11.411607Z", "modified": "2026-10-09T15:13:11.411607Z", "relationship_type": "indicates", "source_ref": "indicator--0d50b1f3-3d84-47ff-b0ed-a4283c58aeae", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9d33c0-417a-42be-b117-78817ba69f7f", "created": "2026-10-09T15:13:11.411731Z", "modified": "2026-10-09T15:13:11.411731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef432d6367dba74684bf4bc5d995df547203874bb7033eb65c6904929c747034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.411731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2334c502-542e-4223-834b-b1c96792333f", "created": "2026-10-09T15:13:11.412327Z", "modified": "2026-10-09T15:13:11.412327Z", "relationship_type": "indicates", "source_ref": "indicator--4f9d33c0-417a-42be-b117-78817ba69f7f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0cfaec-6cc4-4db1-99a7-5cd9e50e10e4", "created": "2026-10-09T15:13:11.412448Z", "modified": "2026-10-09T15:13:11.412448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='093a6a5b44ca478d4bb620948752357331cf54a7bd6de6f3f9a781c5fcbdaa2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.412448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c86f1de-3b4e-49f9-9c76-246fa333c887", "created": "2026-10-09T15:13:11.413028Z", "modified": "2026-10-09T15:13:11.413028Z", "relationship_type": "indicates", "source_ref": "indicator--eb0cfaec-6cc4-4db1-99a7-5cd9e50e10e4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4c153f-6aea-420a-a8e8-6450e204c5c1", "created": "2026-10-09T15:13:11.413146Z", "modified": "2026-10-09T15:13:11.413146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='372678745c12a32231ccae60ba119a2a502c99e9b6dd276995b7346a4048845f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.413146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5aa19c8-d836-44c6-b989-8d4b4fd3d173", "created": "2026-10-09T15:13:11.413742Z", "modified": "2026-10-09T15:13:11.413742Z", "relationship_type": "indicates", "source_ref": "indicator--3b4c153f-6aea-420a-a8e8-6450e204c5c1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f058e53-02a4-4d8e-a2a5-6e5e1a79d1ff", "created": "2026-10-09T15:13:11.413862Z", "modified": "2026-10-09T15:13:11.413862Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d7e6aacd444ed4c8ff685cc0cb0939a7125c5ba4db70acbc7576f35c90c9d49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.413862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--797a2129-d592-48c1-8b12-1f1fbd2fd580", "created": "2026-10-09T15:13:11.414458Z", "modified": "2026-10-09T15:13:11.414458Z", "relationship_type": "indicates", "source_ref": "indicator--0f058e53-02a4-4d8e-a2a5-6e5e1a79d1ff", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ea923a-5b3d-484b-8f1c-a3c807a33f80", "created": "2026-10-09T15:13:11.41458Z", "modified": "2026-10-09T15:13:11.41458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94c18926233df8d3b525bbfa082579b2b7d9ff36c61fc71b37747231ed38c8d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.41458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26ee73ce-00b6-4592-bf0d-e6af049a9eba", "created": "2026-10-09T15:13:11.41516Z", "modified": "2026-10-09T15:13:11.41516Z", "relationship_type": "indicates", "source_ref": "indicator--30ea923a-5b3d-484b-8f1c-a3c807a33f80", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1effc9e-46f0-4bb4-8757-c1059ef93845", "created": "2026-10-09T15:13:11.415294Z", "modified": "2026-10-09T15:13:11.415294Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8478b52b4112382277b40d8145ff028ae3e758f3bb953df7454ce00b83fd7863']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.415294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8889f394-b637-4441-b937-bad288dbd22f", "created": "2026-10-09T15:13:11.415884Z", "modified": "2026-10-09T15:13:11.415884Z", "relationship_type": "indicates", "source_ref": "indicator--b1effc9e-46f0-4bb4-8757-c1059ef93845", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73635834-e6af-459f-9726-4e0d28795d6b", "created": "2026-10-09T15:13:11.416005Z", "modified": "2026-10-09T15:13:11.416005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1cba9a36a4d5a9945689f089aa37e9d1495f408c5426bce235a370c6005475e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.416005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c2638d7-c068-4804-ab8f-e87e188c6a22", "created": "2026-10-09T15:13:11.416719Z", "modified": "2026-10-09T15:13:11.416719Z", "relationship_type": "indicates", "source_ref": "indicator--73635834-e6af-459f-9726-4e0d28795d6b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0e0cae-d8e2-48e8-9426-2cf116663590", "created": "2026-10-09T15:13:11.416849Z", "modified": "2026-10-09T15:13:11.416849Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='754ad5cf8e430ebff8c3a0de85dd21b7407fef331c367ad42e7f32a38402b4e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.416849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5bba97d-9635-4e7c-842d-69c175dcead4", "created": "2026-10-09T15:13:11.417447Z", "modified": "2026-10-09T15:13:11.417447Z", "relationship_type": "indicates", "source_ref": "indicator--5c0e0cae-d8e2-48e8-9426-2cf116663590", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd044e0-4f87-4b5f-a96d-fb715e6aa970", "created": "2026-10-09T15:13:11.417576Z", "modified": "2026-10-09T15:13:11.417576Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3367e16d1dc62d7ffd71bbe32670d8dca3915db4a71a3f592fe66528e1123a46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.417576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3e30b4c-5181-45ff-8f79-287de5a15d6f", "created": "2026-10-09T15:13:11.418156Z", "modified": "2026-10-09T15:13:11.418156Z", "relationship_type": "indicates", "source_ref": "indicator--0fd044e0-4f87-4b5f-a96d-fb715e6aa970", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba60a725-7bc3-4d88-a2a9-cba68d727b8b", "created": "2026-10-09T15:13:11.418286Z", "modified": "2026-10-09T15:13:11.418286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c537e696a559c645ad3d195603f8bcd4d98862537a60f5884134ff4113c20139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.418286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb52fe6f-739e-4e4c-ab42-74c58bc6a141", "created": "2026-10-09T15:13:11.418866Z", "modified": "2026-10-09T15:13:11.418866Z", "relationship_type": "indicates", "source_ref": "indicator--ba60a725-7bc3-4d88-a2a9-cba68d727b8b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff190bc-b20c-48f5-ab8c-5701afa701a8", "created": "2026-10-09T15:13:11.418985Z", "modified": "2026-10-09T15:13:11.418985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2cb211022dea05b7f104255049e552fec0c762217887c1dc75681d99da2087c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.418985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c8c44fa-197d-4935-977d-b842ca0c21fd", "created": "2026-10-09T15:13:11.41958Z", "modified": "2026-10-09T15:13:11.41958Z", "relationship_type": "indicates", "source_ref": "indicator--9ff190bc-b20c-48f5-ab8c-5701afa701a8", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4103dd-b5f7-43d1-9e65-ef5b86285e65", "created": "2026-10-09T15:13:11.419704Z", "modified": "2026-10-09T15:13:11.419704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78bcd659fd5e86f043d514cdfdfefddf534f36b4c57da357998a74cfa3b6d922']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.419704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd80b3fc-a3f3-44de-8d06-012359ba76b3", "created": "2026-10-09T15:13:11.420301Z", "modified": "2026-10-09T15:13:11.420301Z", "relationship_type": "indicates", "source_ref": "indicator--be4103dd-b5f7-43d1-9e65-ef5b86285e65", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9383f12d-f858-470e-a122-6bc700fa3fad", "created": "2026-10-09T15:13:11.420423Z", "modified": "2026-10-09T15:13:11.420423Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40324bee3275ed7517abc1445dc96932bf7ac31483fead7911a2bce17b9254bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.420423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a588809-00db-47e5-91e6-70d03ec0a6bc", "created": "2026-10-09T15:13:11.421005Z", "modified": "2026-10-09T15:13:11.421005Z", "relationship_type": "indicates", "source_ref": "indicator--9383f12d-f858-470e-a122-6bc700fa3fad", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b7a13e-217d-4559-bd40-dba3de4d53a4", "created": "2026-10-09T15:13:11.421121Z", "modified": "2026-10-09T15:13:11.421121Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8704cbafdf1bb0dda892f66e69ed22b5183dfbe309c361c6915758404004d35e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.421121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3993813f-492e-4de6-8882-a62afdbde3d8", "created": "2026-10-09T15:13:11.421713Z", "modified": "2026-10-09T15:13:11.421713Z", "relationship_type": "indicates", "source_ref": "indicator--71b7a13e-217d-4559-bd40-dba3de4d53a4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a569db2-8ea6-4d92-b1fc-a8d4e1a2e2c4", "created": "2026-10-09T15:13:11.421834Z", "modified": "2026-10-09T15:13:11.421834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b227b7be8dce591e4a9508857f953b860d3a5cfd8ae84074ad364e3b8b5afe9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.421834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83ea5f8a-c509-487c-961c-8fb31e74dc24", "created": "2026-10-09T15:13:11.422425Z", "modified": "2026-10-09T15:13:11.422425Z", "relationship_type": "indicates", "source_ref": "indicator--1a569db2-8ea6-4d92-b1fc-a8d4e1a2e2c4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83014137-a5ee-43b3-95a5-d38e9de8d203", "created": "2026-10-09T15:13:11.422543Z", "modified": "2026-10-09T15:13:11.422543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff9cc0102e39440f9c765341236a644f490c6e6000713b1c5b522a39a9a36cd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.422543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa1feb8b-4bcb-487c-aee6-9c3ba3dea057", "created": "2026-10-09T15:13:11.423605Z", "modified": "2026-10-09T15:13:11.423605Z", "relationship_type": "indicates", "source_ref": "indicator--83014137-a5ee-43b3-95a5-d38e9de8d203", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f70f31-6ec2-4652-83a2-3992b7a467ec", "created": "2026-10-09T15:13:11.423732Z", "modified": "2026-10-09T15:13:11.423732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c9b15b6cf9984ab939cded0686ef8a126cacbc94a8ff358e5d3558b9cada017']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.423732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc72f1e1-b535-4ce1-b973-bb732f188ae9", "created": "2026-10-09T15:13:11.424327Z", "modified": "2026-10-09T15:13:11.424327Z", "relationship_type": "indicates", "source_ref": "indicator--41f70f31-6ec2-4652-83a2-3992b7a467ec", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0635a95-35d8-49a5-abf2-df5dc7a5a7f1", "created": "2026-10-09T15:13:11.42445Z", "modified": "2026-10-09T15:13:11.42445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a31e9226b912923275c14d5e6f4e813b04b7985b348052de8f0e8c1e808ac5e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.42445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--480649ed-0a9d-4a43-a26e-ce06511775f9", "created": "2026-10-09T15:13:11.425035Z", "modified": "2026-10-09T15:13:11.425035Z", "relationship_type": "indicates", "source_ref": "indicator--c0635a95-35d8-49a5-abf2-df5dc7a5a7f1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1178ab-854c-48c4-bce3-1c01b6832c73", "created": "2026-10-09T15:13:11.425157Z", "modified": "2026-10-09T15:13:11.425157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84963d460700950f519e0331f14655fefd0f7041914a66449787c97f48df36ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.425157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4827d612-8e83-4e0b-b490-7945610e41d1", "created": "2026-10-09T15:13:11.425757Z", "modified": "2026-10-09T15:13:11.425757Z", "relationship_type": "indicates", "source_ref": "indicator--0a1178ab-854c-48c4-bce3-1c01b6832c73", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfbf2b8-0c15-456d-ab4f-fc2a860d74e5", "created": "2026-10-09T15:13:11.425887Z", "modified": "2026-10-09T15:13:11.425887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bc550b4ff4dedb3f3a408da36a4343da2f2ba33baec1e33ab495daf227007a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.425887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d3013f-9583-412d-b63e-d81a20e0d0e2", "created": "2026-10-09T15:13:11.42649Z", "modified": "2026-10-09T15:13:11.42649Z", "relationship_type": "indicates", "source_ref": "indicator--8cfbf2b8-0c15-456d-ab4f-fc2a860d74e5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81915b92-f691-4a6d-a9c5-fe91edc78826", "created": "2026-10-09T15:13:11.426616Z", "modified": "2026-10-09T15:13:11.426616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29eb9ff6230478614b0ce817413383cfc7810195d6f3e8adf33fa1a852dc0958']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.426616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4d6ce8a-f968-40d1-aa33-fcb1ec51669b", "created": "2026-10-09T15:13:11.427213Z", "modified": "2026-10-09T15:13:11.427213Z", "relationship_type": "indicates", "source_ref": "indicator--81915b92-f691-4a6d-a9c5-fe91edc78826", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255d6461-e674-4961-85cd-038d91ec0492", "created": "2026-10-09T15:13:11.427351Z", "modified": "2026-10-09T15:13:11.427351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df50e21d0ce2d6f5cc861b3228991e13b8e2230ec8a3fd9a57921f29b4261069']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.427351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e2bb1e3-d0a0-4322-a762-54c9838e346b", "created": "2026-10-09T15:13:11.427948Z", "modified": "2026-10-09T15:13:11.427948Z", "relationship_type": "indicates", "source_ref": "indicator--255d6461-e674-4961-85cd-038d91ec0492", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e8a4c2-b9cb-48c6-901f-1dfb3b059920", "created": "2026-10-09T15:13:11.42807Z", "modified": "2026-10-09T15:13:11.42807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b253d01965e277f92f33504e05f41cde373fe0ee4030fa5dd4950e6dbca750e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.42807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a37f2303-aaca-4b2e-bad5-17c47cada144", "created": "2026-10-09T15:13:11.428678Z", "modified": "2026-10-09T15:13:11.428678Z", "relationship_type": "indicates", "source_ref": "indicator--11e8a4c2-b9cb-48c6-901f-1dfb3b059920", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3489a4-291a-4ba2-a51f-e191fc5fee32", "created": "2026-10-09T15:13:11.428799Z", "modified": "2026-10-09T15:13:11.428799Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cbe89a91cc25e4acc4b06cc25150c7530639859c600113a64e9f3082f7dcf00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.428799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--952261dd-ae38-4080-819d-c4c96221d45d", "created": "2026-10-09T15:13:11.429391Z", "modified": "2026-10-09T15:13:11.429391Z", "relationship_type": "indicates", "source_ref": "indicator--ce3489a4-291a-4ba2-a51f-e191fc5fee32", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1087bbb-697e-40fd-aa86-4d9ef1e5bb15", "created": "2026-10-09T15:13:11.42951Z", "modified": "2026-10-09T15:13:11.42951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53b19ac8f2422e7dc96c66bbad435a0ad7f661ce173d813896d47d5616ca2c11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.42951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eb390b4-6352-40cb-8bad-4ba172492fd9", "created": "2026-10-09T15:13:11.430212Z", "modified": "2026-10-09T15:13:11.430212Z", "relationship_type": "indicates", "source_ref": "indicator--a1087bbb-697e-40fd-aa86-4d9ef1e5bb15", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16940f1e-11f3-4ad0-b272-6b7a76b715b6", "created": "2026-10-09T15:13:11.43036Z", "modified": "2026-10-09T15:13:11.43036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51f32678cdbd55a312e1822d636eb9b3d6f5421988ff030de1c0c101a0a50638']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.43036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b10e322-15d3-452a-85e6-0c7ea9cf804b", "created": "2026-10-09T15:13:11.430958Z", "modified": "2026-10-09T15:13:11.430958Z", "relationship_type": "indicates", "source_ref": "indicator--16940f1e-11f3-4ad0-b272-6b7a76b715b6", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4701cc-b189-42af-a3c4-63446553b58a", "created": "2026-10-09T15:13:11.43108Z", "modified": "2026-10-09T15:13:11.43108Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4bb6849e044abe72d342360fdded96b70c694c74b5e19de15c0988f8891c264']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.43108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--182a3319-e8ff-4a16-9552-70c4af0f0b10", "created": "2026-10-09T15:13:11.431685Z", "modified": "2026-10-09T15:13:11.431685Z", "relationship_type": "indicates", "source_ref": "indicator--fe4701cc-b189-42af-a3c4-63446553b58a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23aef5d1-f766-448b-a8d7-02761d451eba", "created": "2026-10-09T15:13:11.431811Z", "modified": "2026-10-09T15:13:11.431811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8734e5c75f505d9d314f3a53b440461d3cad43addfa142493b17c86b24925f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.431811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5eb5c2a0-7f9c-413a-b201-772c97f237c7", "created": "2026-10-09T15:13:11.432408Z", "modified": "2026-10-09T15:13:11.432408Z", "relationship_type": "indicates", "source_ref": "indicator--23aef5d1-f766-448b-a8d7-02761d451eba", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5137df-3322-4235-81d0-7a84ea24594a", "created": "2026-10-09T15:13:11.432535Z", "modified": "2026-10-09T15:13:11.432535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1446cbce4ac3eb004bf347d524302b2672a5981a9365f2536e6376f5b5b41b26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.432535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8f76713-bab5-4e39-bde8-d88f7fa1d267", "created": "2026-10-09T15:13:11.433124Z", "modified": "2026-10-09T15:13:11.433124Z", "relationship_type": "indicates", "source_ref": "indicator--9d5137df-3322-4235-81d0-7a84ea24594a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7302f154-6e75-4d9d-a69a-9acef0b4b9c5", "created": "2026-10-09T15:13:11.433245Z", "modified": "2026-10-09T15:13:11.433245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45b3a79222220d6e1756ad97859d3b77a9387e06cdf1fea4bfb396a18327ea3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.433245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92d7337f-4709-49a9-9742-619a15382173", "created": "2026-10-09T15:13:11.433847Z", "modified": "2026-10-09T15:13:11.433847Z", "relationship_type": "indicates", "source_ref": "indicator--7302f154-6e75-4d9d-a69a-9acef0b4b9c5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ed6f61-db46-4122-9527-31c6c0fc1f27", "created": "2026-10-09T15:13:11.433969Z", "modified": "2026-10-09T15:13:11.433969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5761037870a1d7e41da7993f39d6b50567e2aae25efd014c9f14faf2c3493b5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.433969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a985dd14-71f2-486d-b21d-320c38cedd94", "created": "2026-10-09T15:13:11.434574Z", "modified": "2026-10-09T15:13:11.434574Z", "relationship_type": "indicates", "source_ref": "indicator--57ed6f61-db46-4122-9527-31c6c0fc1f27", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df05a08b-db65-45f8-90ee-f14793a9e2f4", "created": "2026-10-09T15:13:11.434698Z", "modified": "2026-10-09T15:13:11.434698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c9f66270fd165352394ce6182f9e4215f90477bca128e8c600025545ebf6e67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.434698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a82469a-c827-4aca-b44f-8db8a8c66f9d", "created": "2026-10-09T15:13:11.435296Z", "modified": "2026-10-09T15:13:11.435296Z", "relationship_type": "indicates", "source_ref": "indicator--df05a08b-db65-45f8-90ee-f14793a9e2f4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9858a187-f87b-4872-bfd0-c7e06a8de577", "created": "2026-10-09T15:13:11.435417Z", "modified": "2026-10-09T15:13:11.435417Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e32ea81855b5fafd6c715064d112a5be303bbf125e8174738178cc33950477b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.435417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8188a740-bdbe-440c-953f-6b2e18d52713", "created": "2026-10-09T15:13:11.436008Z", "modified": "2026-10-09T15:13:11.436008Z", "relationship_type": "indicates", "source_ref": "indicator--9858a187-f87b-4872-bfd0-c7e06a8de577", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d08e06a-9827-4bbf-9578-0dd4cb70a947", "created": "2026-10-09T15:13:11.436128Z", "modified": "2026-10-09T15:13:11.436128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02c28a5b6fda3d54f213f7115b51f29e61d059046dcf6caedd418b5e83cc070c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.436128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5402c9e-0fdb-4fab-9cd9-dbf8ae81324d", "created": "2026-10-09T15:13:11.436838Z", "modified": "2026-10-09T15:13:11.436838Z", "relationship_type": "indicates", "source_ref": "indicator--3d08e06a-9827-4bbf-9578-0dd4cb70a947", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a48140-bc2b-436f-9a42-8c3325b5fed3", "created": "2026-10-09T15:13:11.436963Z", "modified": "2026-10-09T15:13:11.436963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad17e68289fdaacb75de6f77fefd4838f142bbb61351314526be86bce61b7f25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.436963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de9c66ca-98d2-41b3-ba9a-f57948e2449c", "created": "2026-10-09T15:13:11.437557Z", "modified": "2026-10-09T15:13:11.437557Z", "relationship_type": "indicates", "source_ref": "indicator--a1a48140-bc2b-436f-9a42-8c3325b5fed3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1453e1d-a5c0-4df3-b514-74a6afdf2c88", "created": "2026-10-09T15:13:11.437683Z", "modified": "2026-10-09T15:13:11.437683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15bc3c77c0858bbb3c0b7fe46103b0b8c87b98fa8a41c64dd80e5a3e60819eec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.437683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bad3b3b9-068e-4c0e-a57b-b6b0aab4bd05", "created": "2026-10-09T15:13:11.438286Z", "modified": "2026-10-09T15:13:11.438286Z", "relationship_type": "indicates", "source_ref": "indicator--c1453e1d-a5c0-4df3-b514-74a6afdf2c88", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7cbd08-59bd-42dd-a65b-8ad5e2b72042", "created": "2026-10-09T15:13:11.43841Z", "modified": "2026-10-09T15:13:11.43841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb7aac7ddef18e8c4f324bf7b4f337a35ab342860b3b1b4a009a4b3b8e94a803']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.43841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de5b6a53-a827-41d7-ab3b-05e61656be0e", "created": "2026-10-09T15:13:11.438995Z", "modified": "2026-10-09T15:13:11.438995Z", "relationship_type": "indicates", "source_ref": "indicator--0a7cbd08-59bd-42dd-a65b-8ad5e2b72042", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51539bb-dd7d-4324-91ee-a8e5e807a7b2", "created": "2026-10-09T15:13:11.439114Z", "modified": "2026-10-09T15:13:11.439114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10768d3d87dc6a19ee5d8b1cdb442e11ad422038fe9f8cd58dcc44818a961192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.439114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ab7c4bb-60ee-4e58-9ba0-b3e91ac7c0fd", "created": "2026-10-09T15:13:11.439721Z", "modified": "2026-10-09T15:13:11.439721Z", "relationship_type": "indicates", "source_ref": "indicator--e51539bb-dd7d-4324-91ee-a8e5e807a7b2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b34ae8c-6cb5-42dd-8dd7-409aaa152f65", "created": "2026-10-09T15:13:11.439842Z", "modified": "2026-10-09T15:13:11.439842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8bc63b6d38cae0c22b280ced6af8e540c23bd6f6edd761ec501cc1af3ee62069']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.439842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d84c7bc-34bf-4f24-a8f4-5e3b9434e3ff", "created": "2026-10-09T15:13:11.440439Z", "modified": "2026-10-09T15:13:11.440439Z", "relationship_type": "indicates", "source_ref": "indicator--2b34ae8c-6cb5-42dd-8dd7-409aaa152f65", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12739d41-eeb0-4c48-a440-e20b9ff4190a", "created": "2026-10-09T15:13:11.440561Z", "modified": "2026-10-09T15:13:11.440561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='881251350b631b924c8c165b191117eb7e3bcb679168419dca93b96fc7d085e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.440561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--704419f3-6ffa-482d-8ac5-fc88afd5792a", "created": "2026-10-09T15:13:11.441157Z", "modified": "2026-10-09T15:13:11.441157Z", "relationship_type": "indicates", "source_ref": "indicator--12739d41-eeb0-4c48-a440-e20b9ff4190a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85e8ef8-ae33-4743-954e-3764edea9bcd", "created": "2026-10-09T15:13:11.441288Z", "modified": "2026-10-09T15:13:11.441288Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c49209c1b7c693aceb31eb5dd8e9aef127e722f8c3c02dca1c55a488e7353f85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.441288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df955b47-a4a5-497f-bf9b-f2afee1cd0f8", "created": "2026-10-09T15:13:11.441879Z", "modified": "2026-10-09T15:13:11.441879Z", "relationship_type": "indicates", "source_ref": "indicator--e85e8ef8-ae33-4743-954e-3764edea9bcd", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373171dd-ce5c-40d1-b824-efa377725943", "created": "2026-10-09T15:13:11.442007Z", "modified": "2026-10-09T15:13:11.442007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab810fd9cccd0639d3e67eec3b1604fe48d200dd3f03b6b8eebf42b227036d75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.442007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01d557dc-416e-4504-b875-77b8d09754ef", "created": "2026-10-09T15:13:11.44272Z", "modified": "2026-10-09T15:13:11.44272Z", "relationship_type": "indicates", "source_ref": "indicator--373171dd-ce5c-40d1-b824-efa377725943", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd4174f-11a0-4e0d-afc8-2ee9376ef699", "created": "2026-10-09T15:13:11.442848Z", "modified": "2026-10-09T15:13:11.442848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d7cdf97a118714ae41acae54e98e424d2437d3f92c0bc56e35e33d510b78966']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.442848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa4fef90-45e8-4ab5-af17-4413d23c38df", "created": "2026-10-09T15:13:11.44346Z", "modified": "2026-10-09T15:13:11.44346Z", "relationship_type": "indicates", "source_ref": "indicator--0dd4174f-11a0-4e0d-afc8-2ee9376ef699", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e79404-99b4-42b4-af8f-d19f5fb15293", "created": "2026-10-09T15:13:11.443584Z", "modified": "2026-10-09T15:13:11.443584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8536ff99d831e67bf4defc9ae52253ca5d791b4ec95f260d61f4358e307f8de0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.443584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--858594d8-ad00-4925-b254-5d315bf38c82", "created": "2026-10-09T15:13:11.444169Z", "modified": "2026-10-09T15:13:11.444169Z", "relationship_type": "indicates", "source_ref": "indicator--c0e79404-99b4-42b4-af8f-d19f5fb15293", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f5bfab-dc97-419c-999f-99495a36cb3b", "created": "2026-10-09T15:13:11.4443Z", "modified": "2026-10-09T15:13:11.4443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2261ed8337a781af5c06d5443958c0fde81cac8599537f9f8c1958ce251c31a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.4443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1599507b-eeae-45fa-848d-46a4fdda0412", "created": "2026-10-09T15:13:11.444886Z", "modified": "2026-10-09T15:13:11.444886Z", "relationship_type": "indicates", "source_ref": "indicator--27f5bfab-dc97-419c-999f-99495a36cb3b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54986e3a-f2c5-4e74-ae5d-3a14babb8454", "created": "2026-10-09T15:13:11.445005Z", "modified": "2026-10-09T15:13:11.445005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f826b735ba3bf4986734daf8947249f9108214936aee4512b86c09278a28f2a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.445005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1895d5e-b82f-46f3-8567-0f3b7f429c96", "created": "2026-10-09T15:13:11.445605Z", "modified": "2026-10-09T15:13:11.445605Z", "relationship_type": "indicates", "source_ref": "indicator--54986e3a-f2c5-4e74-ae5d-3a14babb8454", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1682f150-120d-4ef8-b6e8-69e047a40ea3", "created": "2026-10-09T15:13:11.445727Z", "modified": "2026-10-09T15:13:11.445727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fc0b1c21e56b4462be4613aa68bf2e480f89f93ef701aafeb87afd1fcbc6e47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.445727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--babf7337-f0b3-4497-b003-3ce839e6e99c", "created": "2026-10-09T15:13:11.446331Z", "modified": "2026-10-09T15:13:11.446331Z", "relationship_type": "indicates", "source_ref": "indicator--1682f150-120d-4ef8-b6e8-69e047a40ea3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94394271-25ba-4134-b2e4-209ce7575f53", "created": "2026-10-09T15:13:11.446458Z", "modified": "2026-10-09T15:13:11.446458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2079ce214cae234ce01dc00d3a7b08c8e08886506fd150edf192931c6372b758']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.446458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59d4998b-5255-4d6b-a7e9-5a10d105c6cf", "created": "2026-10-09T15:13:11.447053Z", "modified": "2026-10-09T15:13:11.447053Z", "relationship_type": "indicates", "source_ref": "indicator--94394271-25ba-4134-b2e4-209ce7575f53", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871b8d1e-80ea-48a5-a8dc-53495fce9c6b", "created": "2026-10-09T15:13:11.447174Z", "modified": "2026-10-09T15:13:11.447174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22b70c63a7d874748a2b26c688e5f469bdcbba598d256fd53e8a7740c9d86836']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.447174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10578ac8-b08a-45ec-8b13-aeafccef6e6d", "created": "2026-10-09T15:13:11.447777Z", "modified": "2026-10-09T15:13:11.447777Z", "relationship_type": "indicates", "source_ref": "indicator--871b8d1e-80ea-48a5-a8dc-53495fce9c6b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50ef295-5e3f-4722-a269-681ffc1be158", "created": "2026-10-09T15:13:11.447898Z", "modified": "2026-10-09T15:13:11.447898Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e63cb8b46a62d079b1bb986950006f1d91cb3f7bfc8dac432393208c00fa2a6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.447898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b555cf1a-8d9d-478d-9b93-d6e4cd440f21", "created": "2026-10-09T15:13:11.448504Z", "modified": "2026-10-09T15:13:11.448504Z", "relationship_type": "indicates", "source_ref": "indicator--e50ef295-5e3f-4722-a269-681ffc1be158", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10273a7-fd5c-41ea-9250-420eed9dd51b", "created": "2026-10-09T15:13:11.448627Z", "modified": "2026-10-09T15:13:11.448627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79eb6262f7f9d5a72b170614fe1c3e99a7a95d0e9dfa6b5586cb52c67c9d2406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.448627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b110607a-4a6c-4622-b295-c8422cb84028", "created": "2026-10-09T15:13:11.449325Z", "modified": "2026-10-09T15:13:11.449325Z", "relationship_type": "indicates", "source_ref": "indicator--b10273a7-fd5c-41ea-9250-420eed9dd51b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db37355d-ad56-4992-a9d7-c8116048a862", "created": "2026-10-09T15:13:11.449449Z", "modified": "2026-10-09T15:13:11.449449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0927c8c306910d853ed973a86b461ccef9880645d201b8aa632577957a06a484']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.449449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85696729-5ea1-4af5-996f-4cb04108d0c9", "created": "2026-10-09T15:13:11.450035Z", "modified": "2026-10-09T15:13:11.450035Z", "relationship_type": "indicates", "source_ref": "indicator--db37355d-ad56-4992-a9d7-c8116048a862", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3468b1-d47c-44c2-9dde-7dd5e5baeee2", "created": "2026-10-09T15:13:11.450155Z", "modified": "2026-10-09T15:13:11.450155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a949825e0374aee319c68cb1d9cd0d022e04ebcb89af6993b6af6588be3e53af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.450155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5f21a12-2d77-4887-80fa-a3de79cca34f", "created": "2026-10-09T15:13:11.450747Z", "modified": "2026-10-09T15:13:11.450747Z", "relationship_type": "indicates", "source_ref": "indicator--fb3468b1-d47c-44c2-9dde-7dd5e5baeee2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be94ec43-0027-4f8d-a28f-240525a689b8", "created": "2026-10-09T15:13:11.45087Z", "modified": "2026-10-09T15:13:11.45087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28abe0e7369f04bef80e253542147d7e1ce2183b2809248359083900285f64ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.45087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d7fa12e-bef1-4e66-8550-72bae4afe286", "created": "2026-10-09T15:13:11.451466Z", "modified": "2026-10-09T15:13:11.451466Z", "relationship_type": "indicates", "source_ref": "indicator--be94ec43-0027-4f8d-a28f-240525a689b8", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff6e390-1aea-4d08-8fd1-eda8163466d6", "created": "2026-10-09T15:13:11.45159Z", "modified": "2026-10-09T15:13:11.45159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de9fb3c95cb41326f0461302deb541fdb2c9444d435b56f53457175e4927311b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.45159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14e62de0-fbcf-4f92-ba50-bb6aadef9631", "created": "2026-10-09T15:13:11.452172Z", "modified": "2026-10-09T15:13:11.452172Z", "relationship_type": "indicates", "source_ref": "indicator--5ff6e390-1aea-4d08-8fd1-eda8163466d6", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72b6776-92f2-4b23-a91b-ccee7ac21f48", "created": "2026-10-09T15:13:11.452303Z", "modified": "2026-10-09T15:13:11.452303Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='713b526526b8ffce849ca52334dbf212831f257216363bb2b77bd74497b7b85c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.452303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d094d15-be06-499e-b6a8-343deed725ce", "created": "2026-10-09T15:13:11.452891Z", "modified": "2026-10-09T15:13:11.452891Z", "relationship_type": "indicates", "source_ref": "indicator--f72b6776-92f2-4b23-a91b-ccee7ac21f48", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd52b9bd-c882-4cfa-a32b-fc9f58c3b172", "created": "2026-10-09T15:13:11.45301Z", "modified": "2026-10-09T15:13:11.45301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3c146c49e3c5ea8e6e6699992c4566bf0867dda199a5667610db803beb85ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.45301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48307ca1-8a26-48db-a71d-1c886092bef5", "created": "2026-10-09T15:13:11.453611Z", "modified": "2026-10-09T15:13:11.453611Z", "relationship_type": "indicates", "source_ref": "indicator--cd52b9bd-c882-4cfa-a32b-fc9f58c3b172", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15170a0f-9553-4748-b946-ff3b5046a136", "created": "2026-10-09T15:13:11.453734Z", "modified": "2026-10-09T15:13:11.453734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1017df8c9c8bd13b6256d46f7e43cd708a4fbd5f8074199e5ab19ad331eb812f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.453734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--358c354d-1e2e-425e-9c64-a8aeedbbd11b", "created": "2026-10-09T15:13:11.454335Z", "modified": "2026-10-09T15:13:11.454335Z", "relationship_type": "indicates", "source_ref": "indicator--15170a0f-9553-4748-b946-ff3b5046a136", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bbc3f8-c8a1-4590-ada0-ad32ed066a61", "created": "2026-10-09T15:13:11.454457Z", "modified": "2026-10-09T15:13:11.454457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c524423f809a3acd9bd1d2343340bedfe6022e80b3d656c8cdd974254921801b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.454457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bf9d240-e233-48c0-8e6e-fb04ba25e34e", "created": "2026-10-09T15:13:11.455054Z", "modified": "2026-10-09T15:13:11.455054Z", "relationship_type": "indicates", "source_ref": "indicator--e0bbc3f8-c8a1-4590-ada0-ad32ed066a61", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c01a56a-2760-49fc-95af-bcc5c3e3e530", "created": "2026-10-09T15:13:11.455175Z", "modified": "2026-10-09T15:13:11.455175Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9574107d79c130b8084d17687d43b81130e1c72f9f3de2c17da0c63ec98ca4f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.455175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe1c194e-66d0-45e0-a75c-fdfbb9a030c8", "created": "2026-10-09T15:13:11.455888Z", "modified": "2026-10-09T15:13:11.455888Z", "relationship_type": "indicates", "source_ref": "indicator--4c01a56a-2760-49fc-95af-bcc5c3e3e530", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84218514-c6f4-47f1-a2e0-7a7dbbbe8579", "created": "2026-10-09T15:13:11.456027Z", "modified": "2026-10-09T15:13:11.456027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7497b32718ce587d3a6e92a021b4d849232f2a96ea6a1af2fca8d76bd331db8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.456027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5202c0cb-0e10-456a-b8dd-98ff301dadd5", "created": "2026-10-09T15:13:11.456632Z", "modified": "2026-10-09T15:13:11.456632Z", "relationship_type": "indicates", "source_ref": "indicator--84218514-c6f4-47f1-a2e0-7a7dbbbe8579", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e001e493-6687-4508-b480-6a2ce02b10c9", "created": "2026-10-09T15:13:11.456755Z", "modified": "2026-10-09T15:13:11.456755Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85981ad1184bce0a92c675da03042a77ea942c0e5d08eca23908e9464979c8fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.456755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d986774-a4b9-4b2f-a0f0-8b67394eb723", "created": "2026-10-09T15:13:11.457357Z", "modified": "2026-10-09T15:13:11.457357Z", "relationship_type": "indicates", "source_ref": "indicator--e001e493-6687-4508-b480-6a2ce02b10c9", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba54367-71f8-4359-828a-db9e29b0a934", "created": "2026-10-09T15:13:11.45748Z", "modified": "2026-10-09T15:13:11.45748Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='640559b7735553888d95c6cde030bc7c76c5db01d1cf7eab9b993c4b3e186498']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.45748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9bbe9d8-4c20-457a-a466-53163ebbc023", "created": "2026-10-09T15:13:11.458062Z", "modified": "2026-10-09T15:13:11.458062Z", "relationship_type": "indicates", "source_ref": "indicator--bba54367-71f8-4359-828a-db9e29b0a934", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9c60bd-12c8-43b9-8a62-3e49799c38de", "created": "2026-10-09T15:13:11.458189Z", "modified": "2026-10-09T15:13:11.458189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f758377416120831cd1c2be67441f89ea9f54a6335d43e12b64201b637b81d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.458189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--175ed05b-556d-4ae5-ba7f-6a6dc1a8e005", "created": "2026-10-09T15:13:11.458797Z", "modified": "2026-10-09T15:13:11.458797Z", "relationship_type": "indicates", "source_ref": "indicator--5a9c60bd-12c8-43b9-8a62-3e49799c38de", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5672d0-ca4e-4638-a60d-ea41b2d17d56", "created": "2026-10-09T15:13:11.458922Z", "modified": "2026-10-09T15:13:11.458922Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5dae867d3ac8fd8fb8278ce81ff03334b8fb5480679d084673ca261b78bd6fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.458922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe565fd0-e3fe-4b9e-b0e1-0d0b3419e4cb", "created": "2026-10-09T15:13:11.459528Z", "modified": "2026-10-09T15:13:11.459528Z", "relationship_type": "indicates", "source_ref": "indicator--1b5672d0-ca4e-4638-a60d-ea41b2d17d56", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334fb825-94fb-4aa0-b94c-59699fa8e072", "created": "2026-10-09T15:13:11.459652Z", "modified": "2026-10-09T15:13:11.459652Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f3878516a0df2404499e613b6c5cc05b5a7b1a2a802260d47e6b1fbb5784893']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.459652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a65a63d-e24d-49ba-af25-d83bfd53fa0a", "created": "2026-10-09T15:13:11.460245Z", "modified": "2026-10-09T15:13:11.460245Z", "relationship_type": "indicates", "source_ref": "indicator--334fb825-94fb-4aa0-b94c-59699fa8e072", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8475fc-3bf0-443e-aa05-5bc625a846bd", "created": "2026-10-09T15:13:11.460379Z", "modified": "2026-10-09T15:13:11.460379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e966115b948f6747901270bce7a940e986ff9d0e0086e2bd9ae4d42873348d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.460379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b07c6012-d04c-4b4a-8d09-848697c8dda4", "created": "2026-10-09T15:13:11.460975Z", "modified": "2026-10-09T15:13:11.460975Z", "relationship_type": "indicates", "source_ref": "indicator--4f8475fc-3bf0-443e-aa05-5bc625a846bd", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b7a1db-ab6d-41b7-8e05-56633312d442", "created": "2026-10-09T15:13:11.461095Z", "modified": "2026-10-09T15:13:11.461095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='452fe4c7e587b6bf93562d34215b8996be51b6e652a85a5adee5a1c781c81669']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.461095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7727e944-3f34-46f3-b8f4-16fbd4439ad8", "created": "2026-10-09T15:13:11.461794Z", "modified": "2026-10-09T15:13:11.461794Z", "relationship_type": "indicates", "source_ref": "indicator--77b7a1db-ab6d-41b7-8e05-56633312d442", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc138b16-9713-4994-9fd2-377d1ce7dd36", "created": "2026-10-09T15:13:11.461921Z", "modified": "2026-10-09T15:13:11.461921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c707f2e9b1e0db3729dfa912554d640654c4be6d5ec964ddc62fe5d7cf50bee7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.461921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--036fdd62-4d21-4ce2-b776-f7ce734bb72f", "created": "2026-10-09T15:13:11.462524Z", "modified": "2026-10-09T15:13:11.462524Z", "relationship_type": "indicates", "source_ref": "indicator--cc138b16-9713-4994-9fd2-377d1ce7dd36", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2b1b137-73f3-4fcd-8c4a-b10dd20bc9ff", "created": "2026-10-09T15:13:11.46265Z", "modified": "2026-10-09T15:13:11.46265Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9de6edb6e605426b296c6342297fb16e797c662fc1af48f859177101b1d82500']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.46265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b87d05d3-505f-4586-aeab-1dcb83185eaa", "created": "2026-10-09T15:13:11.463241Z", "modified": "2026-10-09T15:13:11.463241Z", "relationship_type": "indicates", "source_ref": "indicator--f2b1b137-73f3-4fcd-8c4a-b10dd20bc9ff", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5330b2f0-b682-4295-baeb-98209a2b80e4", "created": "2026-10-09T15:13:11.463389Z", "modified": "2026-10-09T15:13:11.463389Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c59ebe5512e018a458b9c04d7640cf938c6538806ca93092793e66e8eb012c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.463389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29ed08a5-7d21-4bf6-9349-439342667630", "created": "2026-10-09T15:13:11.463983Z", "modified": "2026-10-09T15:13:11.463983Z", "relationship_type": "indicates", "source_ref": "indicator--5330b2f0-b682-4295-baeb-98209a2b80e4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fccc4f-adc6-4c08-bee2-2913662fc60b", "created": "2026-10-09T15:13:11.464105Z", "modified": "2026-10-09T15:13:11.464105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4b758e6b6e39f351ff7bdfef806e7c6d51c6f5734c1f4ae61e6d60939f50b62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.464105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--359eebb8-0bd5-4b98-a84a-491f2d20e591", "created": "2026-10-09T15:13:11.464707Z", "modified": "2026-10-09T15:13:11.464707Z", "relationship_type": "indicates", "source_ref": "indicator--e5fccc4f-adc6-4c08-bee2-2913662fc60b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71005ac7-6183-4fd6-9861-56fe16d64bc0", "created": "2026-10-09T15:13:11.464829Z", "modified": "2026-10-09T15:13:11.464829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a91aa4910eb7de49dcd247d040dcbc426d3b2bfcf5750cdae061fa67931b79fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.464829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc9f803a-1174-4647-b93b-f696a552b887", "created": "2026-10-09T15:13:11.465427Z", "modified": "2026-10-09T15:13:11.465427Z", "relationship_type": "indicates", "source_ref": "indicator--71005ac7-6183-4fd6-9861-56fe16d64bc0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c728d478-4b02-4024-9a93-f33d3e22b7ba", "created": "2026-10-09T15:13:11.46555Z", "modified": "2026-10-09T15:13:11.46555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08087db4cd8d719f878f3d9e2f08d6e3f7c5cb84e8805bc522b1d0c5848b7fc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.46555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc324727-9a20-4308-9668-be2379bfe9fe", "created": "2026-10-09T15:13:11.466131Z", "modified": "2026-10-09T15:13:11.466131Z", "relationship_type": "indicates", "source_ref": "indicator--c728d478-4b02-4024-9a93-f33d3e22b7ba", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9527bc99-5581-443e-ab3e-e884b66ddde6", "created": "2026-10-09T15:13:11.466256Z", "modified": "2026-10-09T15:13:11.466256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aabc9bcd301eca228afa4d3d246bc3e2a981392b24fe27fc2ac4237f1519bb82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.466256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70aeebea-04df-4799-93a1-4a67538c9c73", "created": "2026-10-09T15:13:11.466855Z", "modified": "2026-10-09T15:13:11.466855Z", "relationship_type": "indicates", "source_ref": "indicator--9527bc99-5581-443e-ab3e-e884b66ddde6", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0502b37e-2793-4ee3-a6ae-06ea235110b7", "created": "2026-10-09T15:13:11.466976Z", "modified": "2026-10-09T15:13:11.466976Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a519370fd9fa8ed64a266e8aaddcd4feadcb85d8384e8c3c3c6db819bcd0bf4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.466976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4232a8ba-ef45-4dfc-a766-5e19774e1ff2", "created": "2026-10-09T15:13:11.46761Z", "modified": "2026-10-09T15:13:11.46761Z", "relationship_type": "indicates", "source_ref": "indicator--0502b37e-2793-4ee3-a6ae-06ea235110b7", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d44d31-9c3c-4a67-afd9-6a1e32964f00", "created": "2026-10-09T15:13:11.467744Z", "modified": "2026-10-09T15:13:11.467744Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0241d5311000dd4d6624be88c0366f37d0d1307979b583a4c4dd8f2929985860']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.467744Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3098ba23-2cf8-4252-aba6-b4d0efdc88d5", "created": "2026-10-09T15:13:11.468456Z", "modified": "2026-10-09T15:13:11.468456Z", "relationship_type": "indicates", "source_ref": "indicator--b9d44d31-9c3c-4a67-afd9-6a1e32964f00", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe35112-5f16-4d5d-83de-f663369248b0", "created": "2026-10-09T15:13:11.468579Z", "modified": "2026-10-09T15:13:11.468579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5cc13bfc9e59723327e7ba227ec4c34608822be3527c145a30a1017dd4d57ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.468579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7b81866-fd92-4e99-b2cc-6bb3011b95c5", "created": "2026-10-09T15:13:11.46916Z", "modified": "2026-10-09T15:13:11.46916Z", "relationship_type": "indicates", "source_ref": "indicator--bfe35112-5f16-4d5d-83de-f663369248b0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d72c4c-c338-4b39-b406-ec6e88decc0d", "created": "2026-10-09T15:13:11.469293Z", "modified": "2026-10-09T15:13:11.469293Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='400cd0177031ff54f37f78be50f171dd40b303e59d4836b53ea4e20d0640e043']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.469293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03170d2c-9080-41e4-bb35-6dc116ad7794", "created": "2026-10-09T15:13:11.469884Z", "modified": "2026-10-09T15:13:11.469884Z", "relationship_type": "indicates", "source_ref": "indicator--06d72c4c-c338-4b39-b406-ec6e88decc0d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461e9750-bc7d-447f-8266-6b8dd955f04f", "created": "2026-10-09T15:13:11.470005Z", "modified": "2026-10-09T15:13:11.470005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fa167c6c1bc1f114960245b21c64358418790c6ecf74433e04163a10e900048']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.470005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a146bce-28d8-4843-bdad-5395c77ea978", "created": "2026-10-09T15:13:11.4706Z", "modified": "2026-10-09T15:13:11.4706Z", "relationship_type": "indicates", "source_ref": "indicator--461e9750-bc7d-447f-8266-6b8dd955f04f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e933b65-cfdc-462e-b895-81746f0258d4", "created": "2026-10-09T15:13:11.470724Z", "modified": "2026-10-09T15:13:11.470724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3525f4164d2af5e52c9f343e34101710d1144d9904a57324deaa204feb695b85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.470724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6149e88a-a853-491f-87e6-de016c389d6d", "created": "2026-10-09T15:13:11.471325Z", "modified": "2026-10-09T15:13:11.471325Z", "relationship_type": "indicates", "source_ref": "indicator--1e933b65-cfdc-462e-b895-81746f0258d4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfa4810-bf2c-4f6b-acde-fc2573c05803", "created": "2026-10-09T15:13:11.471456Z", "modified": "2026-10-09T15:13:11.471456Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84dae2b659d84f90d02530ed8c18fe2eea3520fcebdf38b9fbe7c239644e5cce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.471456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85395250-6cdc-457e-b2fa-87c156985264", "created": "2026-10-09T15:13:11.472053Z", "modified": "2026-10-09T15:13:11.472053Z", "relationship_type": "indicates", "source_ref": "indicator--8cfa4810-bf2c-4f6b-acde-fc2573c05803", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ba19d1-c08e-4f1d-a352-c99afedc1a9e", "created": "2026-10-09T15:13:11.472178Z", "modified": "2026-10-09T15:13:11.472178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ed0be8ba70335b34dd5c1ad5d88df618dba7974f98511ecaba7b3042e6e518c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.472178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ebb9019-752b-4e96-93b3-1eadf2916b61", "created": "2026-10-09T15:13:11.472782Z", "modified": "2026-10-09T15:13:11.472782Z", "relationship_type": "indicates", "source_ref": "indicator--b3ba19d1-c08e-4f1d-a352-c99afedc1a9e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582cb654-3be5-47e2-bdb4-4eb5e23663a1", "created": "2026-10-09T15:13:11.472907Z", "modified": "2026-10-09T15:13:11.472907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15ecbcf4a1c0a4339178b393661f6a400478d2efc995a65029d620ec6d75ce8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.472907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a04c6df1-a483-4ecc-99a2-e1e614b88e85", "created": "2026-10-09T15:13:11.473519Z", "modified": "2026-10-09T15:13:11.473519Z", "relationship_type": "indicates", "source_ref": "indicator--582cb654-3be5-47e2-bdb4-4eb5e23663a1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3781485-004c-4245-86b0-5159b2912319", "created": "2026-10-09T15:13:11.473647Z", "modified": "2026-10-09T15:13:11.473647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10ab29b677caf0fdfeaa4410b87b603cf89425e7148147055183e1cabaacbf08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.473647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92cf8714-e573-4c0b-be2f-3295fb9f3e1a", "created": "2026-10-09T15:13:11.474239Z", "modified": "2026-10-09T15:13:11.474239Z", "relationship_type": "indicates", "source_ref": "indicator--b3781485-004c-4245-86b0-5159b2912319", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9948c5-51a7-4ed7-9755-4172955385bc", "created": "2026-10-09T15:13:11.47437Z", "modified": "2026-10-09T15:13:11.47437Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e5488520e48355fa863180d160d08418cb6513778f8e72d2b7857e145348351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.47437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f27c5e75-aabf-4844-8514-cbbe1ec68590", "created": "2026-10-09T15:13:11.475057Z", "modified": "2026-10-09T15:13:11.475057Z", "relationship_type": "indicates", "source_ref": "indicator--1b9948c5-51a7-4ed7-9755-4172955385bc", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da873c0-3486-44d8-ba3a-205f869f234a", "created": "2026-10-09T15:13:11.475182Z", "modified": "2026-10-09T15:13:11.475182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5bb14591c3f60e5ac11fd1587b9ef7c27622efe487d5d3a4791fdb6ad50c48a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.475182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--406b7c7e-c2b7-49e3-a79c-cec439ef8f02", "created": "2026-10-09T15:13:11.475788Z", "modified": "2026-10-09T15:13:11.475788Z", "relationship_type": "indicates", "source_ref": "indicator--9da873c0-3486-44d8-ba3a-205f869f234a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9f199b-e223-4285-b612-16c073a2a193", "created": "2026-10-09T15:13:11.475912Z", "modified": "2026-10-09T15:13:11.475912Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='684427d0f76883b8001837f9886257c495519e8bc5dca33e9018f0cf023add0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.475912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f52653ed-752f-43e7-9b87-2e26abf69c62", "created": "2026-10-09T15:13:11.476508Z", "modified": "2026-10-09T15:13:11.476508Z", "relationship_type": "indicates", "source_ref": "indicator--8b9f199b-e223-4285-b612-16c073a2a193", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597aace2-dd20-4284-8f51-09d7e66b2484", "created": "2026-10-09T15:13:11.476631Z", "modified": "2026-10-09T15:13:11.476631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6320f7ff139cdd2636e2a34810c83a95b2fe86173c0650c92e93fd0a5a5956f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.476631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4274518a-0f21-4232-927a-2b20da6bd684", "created": "2026-10-09T15:13:11.477226Z", "modified": "2026-10-09T15:13:11.477226Z", "relationship_type": "indicates", "source_ref": "indicator--597aace2-dd20-4284-8f51-09d7e66b2484", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11713ae1-c60a-430a-b5bd-8b4752532fba", "created": "2026-10-09T15:13:11.477358Z", "modified": "2026-10-09T15:13:11.477358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72b28f37e38c0fe6d3150c275c4edeb143600de4a7d5a2c8f8de53622a047a06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.477358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aaccc3d9-3055-4bd6-afdf-a9fcf96abbb7", "created": "2026-10-09T15:13:11.477945Z", "modified": "2026-10-09T15:13:11.477945Z", "relationship_type": "indicates", "source_ref": "indicator--11713ae1-c60a-430a-b5bd-8b4752532fba", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8670d217-f391-4ee5-8973-73a2135d6ee2", "created": "2026-10-09T15:13:11.478062Z", "modified": "2026-10-09T15:13:11.478062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='192124ba11153a69f99ba4392eb56fc44ee907d068d5d6f3dd76066d21ac8eba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.478062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a646de5a-7ef1-4979-86bd-d3b2e961b9e0", "created": "2026-10-09T15:13:11.478663Z", "modified": "2026-10-09T15:13:11.478663Z", "relationship_type": "indicates", "source_ref": "indicator--8670d217-f391-4ee5-8973-73a2135d6ee2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4468af1d-1677-4a42-89fc-759a1e05af27", "created": "2026-10-09T15:13:11.478785Z", "modified": "2026-10-09T15:13:11.478785Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa0477c14b4fdfa8c358e202e107c0b68fa6b42c58c85c8ee507c25b81d41285']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.478785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea0f4851-c3a9-4859-8589-2a019cb03bea", "created": "2026-10-09T15:13:11.479387Z", "modified": "2026-10-09T15:13:11.479387Z", "relationship_type": "indicates", "source_ref": "indicator--4468af1d-1677-4a42-89fc-759a1e05af27", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210ca658-158a-4002-ae5f-1059511fca03", "created": "2026-10-09T15:13:11.479508Z", "modified": "2026-10-09T15:13:11.479508Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4653d09650e00a3f44706788fc45f404f126d990b0dfcc56095333c9e8556eb0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.479508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33e05210-42de-43ee-86a2-02a6453ba68f", "created": "2026-10-09T15:13:11.480093Z", "modified": "2026-10-09T15:13:11.480093Z", "relationship_type": "indicates", "source_ref": "indicator--210ca658-158a-4002-ae5f-1059511fca03", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988d3e56-bbd9-4b41-a810-6ab8b6d34e88", "created": "2026-10-09T15:13:11.480215Z", "modified": "2026-10-09T15:13:11.480215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b295dad44cac2843626d17cd8e49a587c4be154f8004254f947fdf6aeea19cc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.480215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93f029d1-d07e-42ab-8124-4bf407934068", "created": "2026-10-09T15:13:11.480919Z", "modified": "2026-10-09T15:13:11.480919Z", "relationship_type": "indicates", "source_ref": "indicator--988d3e56-bbd9-4b41-a810-6ab8b6d34e88", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f5d504-81a9-4a89-acb5-da955c7baab8", "created": "2026-10-09T15:13:11.481047Z", "modified": "2026-10-09T15:13:11.481047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5560c003a01a4b1e02047171ef3c2dca68f4ce05fc6a31d29502e39df1c08043']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.481047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c694c463-6e48-4d42-943b-b5e49696216d", "created": "2026-10-09T15:13:11.481653Z", "modified": "2026-10-09T15:13:11.481653Z", "relationship_type": "indicates", "source_ref": "indicator--62f5d504-81a9-4a89-acb5-da955c7baab8", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f311bdf-7bc6-4dbf-aad0-ee613b3b88ec", "created": "2026-10-09T15:13:11.481775Z", "modified": "2026-10-09T15:13:11.481775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01bb0c41dd056ddbcbcb213372af6622d8f7496a090372b683a7f0ac68426690']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.481775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cf86d9b-e5c4-4c46-885c-d62ea683ed93", "created": "2026-10-09T15:13:11.482381Z", "modified": "2026-10-09T15:13:11.482381Z", "relationship_type": "indicates", "source_ref": "indicator--2f311bdf-7bc6-4dbf-aad0-ee613b3b88ec", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a104939-466e-4a4a-944a-810109733293", "created": "2026-10-09T15:13:11.482507Z", "modified": "2026-10-09T15:13:11.482507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0158de2c831a778074d11c391eada93c772512f95af4c6cee6aded53bfa99c66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.482507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4713b2c5-e573-4ed0-b545-53ad2c3add50", "created": "2026-10-09T15:13:11.483103Z", "modified": "2026-10-09T15:13:11.483103Z", "relationship_type": "indicates", "source_ref": "indicator--7a104939-466e-4a4a-944a-810109733293", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f8c53d-79b0-460e-8996-2c069dcd0d5a", "created": "2026-10-09T15:13:11.483227Z", "modified": "2026-10-09T15:13:11.483227Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='337c939f39d206e8d3c6b24c6b7ac7de8783b65aa5ff9e8cab55f898db8b9dfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.483227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de9044e1-116c-4ff9-872d-b19598cbb158", "created": "2026-10-09T15:13:11.483831Z", "modified": "2026-10-09T15:13:11.483831Z", "relationship_type": "indicates", "source_ref": "indicator--b6f8c53d-79b0-460e-8996-2c069dcd0d5a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a137e79-afa5-45b9-b215-5668721031a2", "created": "2026-10-09T15:13:11.483952Z", "modified": "2026-10-09T15:13:11.483952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='575db15804d3b2f5bc3bb57aa040ec425ee97d9dcae75026f58ab6c89da37dba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.483952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75fa7202-9cfa-4484-abf3-441b4305118f", "created": "2026-10-09T15:13:11.484553Z", "modified": "2026-10-09T15:13:11.484553Z", "relationship_type": "indicates", "source_ref": "indicator--2a137e79-afa5-45b9-b215-5668721031a2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea17de2-4be3-43d2-a6bf-a955ae452bb0", "created": "2026-10-09T15:13:11.484678Z", "modified": "2026-10-09T15:13:11.484678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dddba184d877d8b35a85f17a707ce81af49d9a01bdd30dc33a0830f15e4669ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.484678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4b0c96d-fa83-4954-946a-5169ebd4bb58", "created": "2026-10-09T15:13:11.485276Z", "modified": "2026-10-09T15:13:11.485276Z", "relationship_type": "indicates", "source_ref": "indicator--7ea17de2-4be3-43d2-a6bf-a955ae452bb0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25436f1d-b09e-4c77-9b22-92d012a6c877", "created": "2026-10-09T15:13:11.485403Z", "modified": "2026-10-09T15:13:11.485403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91eabce374745e5f906e5febe0ed805c9408c204ca97b4c49fd5f5f6ea1ed9b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.485403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e812fb34-8be0-4c87-b980-1e870218c393", "created": "2026-10-09T15:13:11.485995Z", "modified": "2026-10-09T15:13:11.485995Z", "relationship_type": "indicates", "source_ref": "indicator--25436f1d-b09e-4c77-9b22-92d012a6c877", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ceabc9-ec8f-494b-bcf4-4afd3a4c2113", "created": "2026-10-09T15:13:11.486116Z", "modified": "2026-10-09T15:13:11.486116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db8542cb5d70056f0f8f8c0c1f5d2f5a1a8f159c5364be544181850200873241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.486116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58c3f31f-d54f-49ae-a0f1-c6589547fd47", "created": "2026-10-09T15:13:11.486725Z", "modified": "2026-10-09T15:13:11.486725Z", "relationship_type": "indicates", "source_ref": "indicator--e1ceabc9-ec8f-494b-bcf4-4afd3a4c2113", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf91f3b-0e0c-4241-906c-cae7dfd0e796", "created": "2026-10-09T15:13:11.486855Z", "modified": "2026-10-09T15:13:11.486855Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7749c9d7dfa4aa791f5a146ad4ac58d3ff66a3633bca96ad442f350118f45d7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.486855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5df426d-925e-4283-88ae-545d12d90ecc", "created": "2026-10-09T15:13:11.487561Z", "modified": "2026-10-09T15:13:11.487561Z", "relationship_type": "indicates", "source_ref": "indicator--0cf91f3b-0e0c-4241-906c-cae7dfd0e796", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395ebbc8-ab5e-4468-8280-7cb6b6baf82f", "created": "2026-10-09T15:13:11.487686Z", "modified": "2026-10-09T15:13:11.487686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fadbb63bfcc36772da2ed4aceeae7936b34421982d10c19c5e13464a19c8834c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.487686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcd176f8-c7ac-4413-9249-30f591b8f8f6", "created": "2026-10-09T15:13:11.488283Z", "modified": "2026-10-09T15:13:11.488283Z", "relationship_type": "indicates", "source_ref": "indicator--395ebbc8-ab5e-4468-8280-7cb6b6baf82f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77655502-4a9d-4493-9cbf-8d65bc0eaf92", "created": "2026-10-09T15:13:11.488405Z", "modified": "2026-10-09T15:13:11.488405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5db4c5203510ff94d687936eda80167738367ee870d9d9ccd819225b4b7dfd89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.488405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0840e630-8346-4f22-bd37-3603003b39ac", "created": "2026-10-09T15:13:11.48899Z", "modified": "2026-10-09T15:13:11.48899Z", "relationship_type": "indicates", "source_ref": "indicator--77655502-4a9d-4493-9cbf-8d65bc0eaf92", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d87dc9b-11f6-4544-a850-ce3d4e8824f2", "created": "2026-10-09T15:13:11.489115Z", "modified": "2026-10-09T15:13:11.489115Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6433856b6eca35b1011818ecf2f795e0055f17f7abc7ab4e9adbe53a9fcd9789']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.489115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2ecc439-fde4-4413-a894-4f59ca6e5938", "created": "2026-10-09T15:13:11.489719Z", "modified": "2026-10-09T15:13:11.489719Z", "relationship_type": "indicates", "source_ref": "indicator--6d87dc9b-11f6-4544-a850-ce3d4e8824f2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab41a18-4bda-423a-8f64-5c1142f4a3cf", "created": "2026-10-09T15:13:11.489846Z", "modified": "2026-10-09T15:13:11.489846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6300a115fe783279e0a0ff334c0128287efb09afcb3bd293488a3a3d4ffd5b18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.489846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2425d24-5169-429f-b63d-93b430a02fdb", "created": "2026-10-09T15:13:11.490444Z", "modified": "2026-10-09T15:13:11.490444Z", "relationship_type": "indicates", "source_ref": "indicator--4ab41a18-4bda-423a-8f64-5c1142f4a3cf", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f14d3b9-67c2-4b42-bb8a-3f185c477d8b", "created": "2026-10-09T15:13:11.490567Z", "modified": "2026-10-09T15:13:11.490567Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ed5c05fecb8157c2a3fea81b5e77cedf4ff8be303adc15beb8baae71dad4b8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.490567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--358695b5-f18a-4f6e-a2c5-5301c4ff28f6", "created": "2026-10-09T15:13:11.491149Z", "modified": "2026-10-09T15:13:11.491149Z", "relationship_type": "indicates", "source_ref": "indicator--1f14d3b9-67c2-4b42-bb8a-3f185c477d8b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9efe68-ee6e-4639-94d4-070d33ff7873", "created": "2026-10-09T15:13:11.491276Z", "modified": "2026-10-09T15:13:11.491276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca8fe950fce88ba05f4b6d888f97c2e362e52bc0c37481106d00bfce92063263']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.491276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98a8312a-8ebe-41c4-b626-cf9d4c96e784", "created": "2026-10-09T15:13:11.491864Z", "modified": "2026-10-09T15:13:11.491864Z", "relationship_type": "indicates", "source_ref": "indicator--4f9efe68-ee6e-4639-94d4-070d33ff7873", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71467b0a-1849-4a58-91fa-8877a508b729", "created": "2026-10-09T15:13:11.491981Z", "modified": "2026-10-09T15:13:11.491981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5764941bf640711c4be21b92571b437b58bb7e7048cd571be0aba667e9f076e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.491981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e2a1d61-bb49-4aaf-9666-24d63d4b3cbb", "created": "2026-10-09T15:13:11.492584Z", "modified": "2026-10-09T15:13:11.492584Z", "relationship_type": "indicates", "source_ref": "indicator--71467b0a-1849-4a58-91fa-8877a508b729", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4fed3a-59b7-43f0-ac37-06004577835f", "created": "2026-10-09T15:13:11.492711Z", "modified": "2026-10-09T15:13:11.492711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64872ce12800db9ad84c383f2e7df4ca75f88baa202a8bc5831a8ef80fe39e02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.492711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a85f0157-104a-4e5f-80f4-6664cae82de7", "created": "2026-10-09T15:13:11.493309Z", "modified": "2026-10-09T15:13:11.493309Z", "relationship_type": "indicates", "source_ref": "indicator--1f4fed3a-59b7-43f0-ac37-06004577835f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6386ea9-4719-40ae-a0a5-2f597d2e611e", "created": "2026-10-09T15:13:11.493433Z", "modified": "2026-10-09T15:13:11.493433Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e8f2510cc7f842a4594431f3a16fbb3af15576190993484d55e7098b07f69ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.493433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fe825cd-ab16-4d23-9411-8a55a6ce0bde", "created": "2026-10-09T15:13:11.494119Z", "modified": "2026-10-09T15:13:11.494119Z", "relationship_type": "indicates", "source_ref": "indicator--e6386ea9-4719-40ae-a0a5-2f597d2e611e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeafb0e3-d701-46c3-badf-486eab35b95f", "created": "2026-10-09T15:13:11.494244Z", "modified": "2026-10-09T15:13:11.494244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c12b1a8fa2f8e0413f144ec45ea9864c181849b9a6a8a79f10ee13d8e17c0db2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.494244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bc9e8a2-e474-4007-a636-f00bf0595fc7", "created": "2026-10-09T15:13:11.49484Z", "modified": "2026-10-09T15:13:11.49484Z", "relationship_type": "indicates", "source_ref": "indicator--aeafb0e3-d701-46c3-badf-486eab35b95f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed2e296-f248-455c-810c-7d80ae7cc587", "created": "2026-10-09T15:13:11.494962Z", "modified": "2026-10-09T15:13:11.494962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='077c4808fb564c3365a25164a8d317ef291d92f260752a4864fd74926192b79c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.494962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e46cd4c-90a9-4093-8c10-a0070bd71d4c", "created": "2026-10-09T15:13:11.495555Z", "modified": "2026-10-09T15:13:11.495555Z", "relationship_type": "indicates", "source_ref": "indicator--bed2e296-f248-455c-810c-7d80ae7cc587", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23de2acc-eb24-4e2b-8131-39418442c26f", "created": "2026-10-09T15:13:11.495678Z", "modified": "2026-10-09T15:13:11.495678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17920bffb4cab77d4581a086d6ff1570cee179480e3d8c29048d7579cc261d49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.495678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4060419-d457-49c0-8707-5f7d7997a478", "created": "2026-10-09T15:13:11.496262Z", "modified": "2026-10-09T15:13:11.496262Z", "relationship_type": "indicates", "source_ref": "indicator--23de2acc-eb24-4e2b-8131-39418442c26f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bedb136-fdcc-4feb-b68c-97af6490d62d", "created": "2026-10-09T15:13:11.496405Z", "modified": "2026-10-09T15:13:11.496405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cc852269bf9cd1665b20a46a7e2847a709344c398fc8b4e876d85354c8310e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.496405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8b4c3f6-4e01-4771-b781-cdbc8c5eecd8", "created": "2026-10-09T15:13:11.496991Z", "modified": "2026-10-09T15:13:11.496991Z", "relationship_type": "indicates", "source_ref": "indicator--4bedb136-fdcc-4feb-b68c-97af6490d62d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926e1648-597b-4baf-a5d1-96ca457ce62a", "created": "2026-10-09T15:13:11.497179Z", "modified": "2026-10-09T15:13:11.497179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8452292a6befb0537c30e42237feed44e876372411385aadfdd222c951de3a55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.497179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da3a67d2-c316-41f9-a548-095c09a9bb4a", "created": "2026-10-09T15:13:11.497815Z", "modified": "2026-10-09T15:13:11.497815Z", "relationship_type": "indicates", "source_ref": "indicator--926e1648-597b-4baf-a5d1-96ca457ce62a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef59bc2-d29d-4078-b798-0d64aa1fd653", "created": "2026-10-09T15:13:11.497942Z", "modified": "2026-10-09T15:13:11.497942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b35fba576b4077be566f96678127e152bce19fbcac24b13bbf1b6a3c30a479ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.497942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bbf0315-a48c-460f-bbb2-8e33be2de783", "created": "2026-10-09T15:13:11.498557Z", "modified": "2026-10-09T15:13:11.498557Z", "relationship_type": "indicates", "source_ref": "indicator--6ef59bc2-d29d-4078-b798-0d64aa1fd653", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bab676c-3a99-44d5-825f-33d8bf17edc0", "created": "2026-10-09T15:13:11.498683Z", "modified": "2026-10-09T15:13:11.498683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4821f568fb003c98425581686f79cbe92eb790f5c5696a9048e1caad56af070']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.498683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe4380a1-3088-4bdd-b630-140769d6863b", "created": "2026-10-09T15:13:11.499288Z", "modified": "2026-10-09T15:13:11.499288Z", "relationship_type": "indicates", "source_ref": "indicator--4bab676c-3a99-44d5-825f-33d8bf17edc0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e418026-3034-4871-8c9b-7f2a85761015", "created": "2026-10-09T15:13:11.499412Z", "modified": "2026-10-09T15:13:11.499412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d69a446d4827b36ae5f34514428c9d73fc02107513e830df90c0bbdc1d0a0be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.499412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--886301f6-3cc3-4b97-9f04-1c85a87ae09a", "created": "2026-10-09T15:13:11.500437Z", "modified": "2026-10-09T15:13:11.500437Z", "relationship_type": "indicates", "source_ref": "indicator--5e418026-3034-4871-8c9b-7f2a85761015", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5d10fa-acb3-4d58-ac76-6212aa79e3c5", "created": "2026-10-09T15:13:11.500573Z", "modified": "2026-10-09T15:13:11.500573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='905d877e1ceaaf1cfa1978c6271e831c23c6c07c771af458faa41da7153e3172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.500573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--737e6165-fe18-42b0-99d0-810b13227178", "created": "2026-10-09T15:13:11.501178Z", "modified": "2026-10-09T15:13:11.501178Z", "relationship_type": "indicates", "source_ref": "indicator--6b5d10fa-acb3-4d58-ac76-6212aa79e3c5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762fe029-9642-4553-98f6-7809f339bc6c", "created": "2026-10-09T15:13:11.501312Z", "modified": "2026-10-09T15:13:11.501312Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c64ce16f2e668bb71d18048dd00316841c32fb78a4f9eb6623ebcecf847253d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.501312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9706d234-97f4-4f13-a878-91d64c30a241", "created": "2026-10-09T15:13:11.501899Z", "modified": "2026-10-09T15:13:11.501899Z", "relationship_type": "indicates", "source_ref": "indicator--762fe029-9642-4553-98f6-7809f339bc6c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaceddf5-248d-46d8-a0a6-bdcdb7d36b5c", "created": "2026-10-09T15:13:11.502023Z", "modified": "2026-10-09T15:13:11.502023Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27dca0a794ac5c9d901201022e105af630ae83278ea71a08d9620737cceba80b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.502023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7d58948-1a2b-4f37-9f58-223b4a9b400e", "created": "2026-10-09T15:13:11.502627Z", "modified": "2026-10-09T15:13:11.502627Z", "relationship_type": "indicates", "source_ref": "indicator--aaceddf5-248d-46d8-a0a6-bdcdb7d36b5c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9fd733-58de-41ee-b3a9-52dfae6c94c4", "created": "2026-10-09T15:13:11.502754Z", "modified": "2026-10-09T15:13:11.502754Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60b4911d10ca74f7736624390450070ab0d3a29a496b779ccf8d67c43a074aa6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.502754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bbb51a1-b3b2-46ba-b1e7-d3f1be53ee6b", "created": "2026-10-09T15:13:11.503344Z", "modified": "2026-10-09T15:13:11.503344Z", "relationship_type": "indicates", "source_ref": "indicator--bc9fd733-58de-41ee-b3a9-52dfae6c94c4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c855c736-4e67-4dff-900b-28931b23db83", "created": "2026-10-09T15:13:11.503468Z", "modified": "2026-10-09T15:13:11.503468Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28f58ced78bf6b3c372dc4d296d691e3c2468666824af930b3ab38ee7f52ab18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.503468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca232b5e-dc9e-40be-b355-9637078da082", "created": "2026-10-09T15:13:11.504044Z", "modified": "2026-10-09T15:13:11.504044Z", "relationship_type": "indicates", "source_ref": "indicator--c855c736-4e67-4dff-900b-28931b23db83", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c84455d-6bc0-4b6f-9910-b69ed412520e", "created": "2026-10-09T15:13:11.504171Z", "modified": "2026-10-09T15:13:11.504171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c9ab956e1bd535dfd126b08aaf625bc6385a0cb64086b643f4edc11a28e98e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.504171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7dc1346-ac9d-48dc-9944-c55009330cf4", "created": "2026-10-09T15:13:11.504769Z", "modified": "2026-10-09T15:13:11.504769Z", "relationship_type": "indicates", "source_ref": "indicator--2c84455d-6bc0-4b6f-9910-b69ed412520e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d51c2e8b-383a-4c41-b346-8e5628bf5321", "created": "2026-10-09T15:13:11.504888Z", "modified": "2026-10-09T15:13:11.504888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbe6cdd6523789c3988435f3a3becd2a463321200fe79053c7b9670cc35093bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.504888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d586c10-d7b9-4517-b4c0-6f30c7229916", "created": "2026-10-09T15:13:11.505483Z", "modified": "2026-10-09T15:13:11.505483Z", "relationship_type": "indicates", "source_ref": "indicator--d51c2e8b-383a-4c41-b346-8e5628bf5321", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c622c34e-6270-4e2e-81f0-7a7592683868", "created": "2026-10-09T15:13:11.505611Z", "modified": "2026-10-09T15:13:11.505611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe2b7821aa93ea48b15f3c3e126809cf2c9440edbcc4040e5437595384f54e24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.505611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2fb65d4-c848-4b08-b274-b8a7f7c3859c", "created": "2026-10-09T15:13:11.506197Z", "modified": "2026-10-09T15:13:11.506197Z", "relationship_type": "indicates", "source_ref": "indicator--c622c34e-6270-4e2e-81f0-7a7592683868", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dd05ff-7fc3-4f6a-93e5-aea883cb1c1b", "created": "2026-10-09T15:13:11.506331Z", "modified": "2026-10-09T15:13:11.506331Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f687492609ffb3d8311814fe532d00810897d7a8ad6069d7e267976210cd4862']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.506331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebf6591f-38ca-4a35-9165-e1dbbb9f3ef2", "created": "2026-10-09T15:13:11.507029Z", "modified": "2026-10-09T15:13:11.507029Z", "relationship_type": "indicates", "source_ref": "indicator--09dd05ff-7fc3-4f6a-93e5-aea883cb1c1b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe25d46-1b4b-4606-aad3-40aad5d99f8c", "created": "2026-10-09T15:13:11.507153Z", "modified": "2026-10-09T15:13:11.507153Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49cb8e6b951afb451a5843757623ab623bb34273d675cba648c41247899852d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.507153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06053061-7169-49a7-8607-72fa4cd63266", "created": "2026-10-09T15:13:11.507749Z", "modified": "2026-10-09T15:13:11.507749Z", "relationship_type": "indicates", "source_ref": "indicator--dfe25d46-1b4b-4606-aad3-40aad5d99f8c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978996be-e583-4da7-ae65-6065ad7523db", "created": "2026-10-09T15:13:11.507872Z", "modified": "2026-10-09T15:13:11.507872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bbfc637e153e5eb177c15d8949ef08eb903abc50d2662be8bab1357d70dc7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.507872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b54d951-9bfb-4199-be1a-c929dfc3cf03", "created": "2026-10-09T15:13:11.508468Z", "modified": "2026-10-09T15:13:11.508468Z", "relationship_type": "indicates", "source_ref": "indicator--978996be-e583-4da7-ae65-6065ad7523db", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f979bf06-34fc-4b64-ab58-107d65e333bd", "created": "2026-10-09T15:13:11.508591Z", "modified": "2026-10-09T15:13:11.508591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80e9af59197f256558807e0bcb5ea3ed592a9606883370bf291740e3bfd19306']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.508591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2facdeea-40f5-430b-a7a7-bc2fdbfbf6a3", "created": "2026-10-09T15:13:11.509179Z", "modified": "2026-10-09T15:13:11.509179Z", "relationship_type": "indicates", "source_ref": "indicator--f979bf06-34fc-4b64-ab58-107d65e333bd", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f5e47c-19ec-44e2-acba-53fae530d522", "created": "2026-10-09T15:13:11.509316Z", "modified": "2026-10-09T15:13:11.509316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ce852bbf9630cdb3f304a5ec70364a6e257b591751fa23ad49a63c7c2fbc4d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.509316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f79e0041-3e84-478f-b3bb-20f53032effa", "created": "2026-10-09T15:13:11.509922Z", "modified": "2026-10-09T15:13:11.509922Z", "relationship_type": "indicates", "source_ref": "indicator--a6f5e47c-19ec-44e2-acba-53fae530d522", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd587ea8-f79d-4337-b598-585305be0f3a", "created": "2026-10-09T15:13:11.510047Z", "modified": "2026-10-09T15:13:11.510047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a12bdec94ccba20eab7f0193c4964eb31e11ab0b71ca99baf7280d453a203bca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.510047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29506637-1110-48f5-a940-8645fbaa2d75", "created": "2026-10-09T15:13:11.510643Z", "modified": "2026-10-09T15:13:11.510643Z", "relationship_type": "indicates", "source_ref": "indicator--cd587ea8-f79d-4337-b598-585305be0f3a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d729be-4c3a-4ece-8103-60a1602d96e8", "created": "2026-10-09T15:13:11.510764Z", "modified": "2026-10-09T15:13:11.510764Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2620d09502d6509a4e6ad0d909de22401b97b5d540bb427af3a521d758a8518d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.510764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e14dd2b-f628-4fd6-9d14-53d1f5adc1fa", "created": "2026-10-09T15:13:11.511361Z", "modified": "2026-10-09T15:13:11.511361Z", "relationship_type": "indicates", "source_ref": "indicator--d8d729be-4c3a-4ece-8103-60a1602d96e8", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2797104-51c4-45b4-b88e-93af0761b1af", "created": "2026-10-09T15:13:11.511485Z", "modified": "2026-10-09T15:13:11.511485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b6cd48e3a79c4b9ddf366fdfa1217b885876daa2d74aca5c9d35b70c04ad44b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.511485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63605c48-f9ee-487a-b72f-fda7fb794e88", "created": "2026-10-09T15:13:11.51208Z", "modified": "2026-10-09T15:13:11.51208Z", "relationship_type": "indicates", "source_ref": "indicator--e2797104-51c4-45b4-b88e-93af0761b1af", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c582a6c6-f8f5-4db3-9832-c6ad4c1d1b7c", "created": "2026-10-09T15:13:11.512204Z", "modified": "2026-10-09T15:13:11.512204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b2c6dbe4b3c2a540375de69e1acc568f7d79f017fe7e3bd3b63203921aacdc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.512204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dd19382-2011-49bc-ad3b-fc15c9314013", "created": "2026-10-09T15:13:11.512801Z", "modified": "2026-10-09T15:13:11.512801Z", "relationship_type": "indicates", "source_ref": "indicator--c582a6c6-f8f5-4db3-9832-c6ad4c1d1b7c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bd4cbf-17f2-4131-9bf6-fd40325e159e", "created": "2026-10-09T15:13:11.512921Z", "modified": "2026-10-09T15:13:11.512921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff53566829a9f9feb723966d94954573d6d3dd5573592694ffcd06727d3eff93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.512921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2d09493-08ad-433b-99b0-9089c4dd10f5", "created": "2026-10-09T15:13:11.513628Z", "modified": "2026-10-09T15:13:11.513628Z", "relationship_type": "indicates", "source_ref": "indicator--74bd4cbf-17f2-4131-9bf6-fd40325e159e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066b7743-f403-4ee7-bb06-2deadcb1b414", "created": "2026-10-09T15:13:11.51376Z", "modified": "2026-10-09T15:13:11.51376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33a0c64c98a0fc2dc9856c78c11b01124b75667b876ca75c62dd90c4951e7e18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.51376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--778bf3c3-b763-4852-8cd4-6e269d9d658e", "created": "2026-10-09T15:13:11.514365Z", "modified": "2026-10-09T15:13:11.514365Z", "relationship_type": "indicates", "source_ref": "indicator--066b7743-f403-4ee7-bb06-2deadcb1b414", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14330de-ed9e-48de-8e69-51833090ec37", "created": "2026-10-09T15:13:11.51449Z", "modified": "2026-10-09T15:13:11.51449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59080f2b1ab53e72887ec930ba7bf40ba2b47fbb0b35ef14a620ca1b3380796f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.51449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82b9a73a-8585-4bed-ae5f-9e5bb253c146", "created": "2026-10-09T15:13:11.515076Z", "modified": "2026-10-09T15:13:11.515076Z", "relationship_type": "indicates", "source_ref": "indicator--b14330de-ed9e-48de-8e69-51833090ec37", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8b50cb-dc67-452d-ad4f-22bc8b96388b", "created": "2026-10-09T15:13:11.515196Z", "modified": "2026-10-09T15:13:11.515196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e2f44d463934b3bab71e39014c79d147064be9fdf08dd229c9960553baea2a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.515196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ab54d50-77d6-4366-bfdb-dd9aa550b65a", "created": "2026-10-09T15:13:11.515792Z", "modified": "2026-10-09T15:13:11.515792Z", "relationship_type": "indicates", "source_ref": "indicator--3e8b50cb-dc67-452d-ad4f-22bc8b96388b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794a5168-fd6c-4ef2-b4da-1313bd5c5919", "created": "2026-10-09T15:13:11.515962Z", "modified": "2026-10-09T15:13:11.515962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42c85edca79a0013f613342a45ebcb83a48943f4b95e5701405194c56c90f0d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.515962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a1ecd11-f734-47b8-9fda-d30d66a31c7f", "created": "2026-10-09T15:13:11.516569Z", "modified": "2026-10-09T15:13:11.516569Z", "relationship_type": "indicates", "source_ref": "indicator--794a5168-fd6c-4ef2-b4da-1313bd5c5919", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1138c882-66de-4f96-a6ad-d1796cb95d61", "created": "2026-10-09T15:13:11.516692Z", "modified": "2026-10-09T15:13:11.516692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12809638d99a3c1f11b96d4f9d1fbe8c2592201b7534a70391246395a7508cba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.516692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a17c87f9-8c20-4b64-93af-bf44461c976c", "created": "2026-10-09T15:13:11.517293Z", "modified": "2026-10-09T15:13:11.517293Z", "relationship_type": "indicates", "source_ref": "indicator--1138c882-66de-4f96-a6ad-d1796cb95d61", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560382bf-1ee6-46df-909d-cbdb73b9a34f", "created": "2026-10-09T15:13:11.517418Z", "modified": "2026-10-09T15:13:11.517418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9679d816e0f42832ecedc2a3c9b197fa44c9d50150af660c702a205c4a27cdf4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.517418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e43ac66d-4569-4187-af3c-af7ede2b9e88", "created": "2026-10-09T15:13:11.518008Z", "modified": "2026-10-09T15:13:11.518008Z", "relationship_type": "indicates", "source_ref": "indicator--560382bf-1ee6-46df-909d-cbdb73b9a34f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28668a7-9429-4452-a618-95df3c1b853b", "created": "2026-10-09T15:13:11.518129Z", "modified": "2026-10-09T15:13:11.518129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aacf7b89b0fbc3ec2e46d621baef214610e9f39a74892430087d156c4394dc2c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.518129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--082e553f-0539-44f9-af93-5f896372e371", "created": "2026-10-09T15:13:11.518734Z", "modified": "2026-10-09T15:13:11.518734Z", "relationship_type": "indicates", "source_ref": "indicator--c28668a7-9429-4452-a618-95df3c1b853b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcc3181-44af-4a73-9196-27ce5c5a66f4", "created": "2026-10-09T15:13:11.518857Z", "modified": "2026-10-09T15:13:11.518857Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ca004876a7fa62c24378102bcda638c68bb5a4005f27835005d669996f25f32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.518857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97d26660-fbcb-4063-918a-856ec4dd01e2", "created": "2026-10-09T15:13:11.51945Z", "modified": "2026-10-09T15:13:11.51945Z", "relationship_type": "indicates", "source_ref": "indicator--0dcc3181-44af-4a73-9196-27ce5c5a66f4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a162ffcf-ea03-4844-bdfd-0615ea0e28d1", "created": "2026-10-09T15:13:11.519571Z", "modified": "2026-10-09T15:13:11.519571Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='274a7a5ac2a554e664ab121dbfc9cb45bf15a1a1cc152ca739bfea3464cc82ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.519571Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a694b85-c090-4c63-beda-43f00b2b3790", "created": "2026-10-09T15:13:11.520275Z", "modified": "2026-10-09T15:13:11.520275Z", "relationship_type": "indicates", "source_ref": "indicator--a162ffcf-ea03-4844-bdfd-0615ea0e28d1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f3a227-76c9-4c20-beba-0a3c36b9d3b1", "created": "2026-10-09T15:13:11.520398Z", "modified": "2026-10-09T15:13:11.520398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28f53ee1836d0197906ba0ab1834a5b45cc2611c1f0d1944ee225a9cc36873fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.520398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ea20ff9-4777-4ac1-9565-7475f2da6298", "created": "2026-10-09T15:13:11.520979Z", "modified": "2026-10-09T15:13:11.520979Z", "relationship_type": "indicates", "source_ref": "indicator--c9f3a227-76c9-4c20-beba-0a3c36b9d3b1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce82708-3e95-4ff4-9873-ff0e89cb3119", "created": "2026-10-09T15:13:11.521101Z", "modified": "2026-10-09T15:13:11.521101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f7de2fd40dc98775b89c9b3152d5423bf53cd560c0eb345830097420c51fd3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.521101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63004da2-9754-4ae9-b92e-451326994523", "created": "2026-10-09T15:13:11.521695Z", "modified": "2026-10-09T15:13:11.521695Z", "relationship_type": "indicates", "source_ref": "indicator--fce82708-3e95-4ff4-9873-ff0e89cb3119", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2e9ee4-26d2-4f1b-b446-0eb2e7e18edf", "created": "2026-10-09T15:13:11.521821Z", "modified": "2026-10-09T15:13:11.521821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26b7d2ce57163528bf6eb6dc6c60d3785e1891be10b2ce4532379e6d9e19b24e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.521821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16c79e7c-2bcb-4d36-b938-d11cb114ec71", "created": "2026-10-09T15:13:11.522413Z", "modified": "2026-10-09T15:13:11.522413Z", "relationship_type": "indicates", "source_ref": "indicator--5c2e9ee4-26d2-4f1b-b446-0eb2e7e18edf", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9915c198-0afc-4de5-aae1-e6e12062bde9", "created": "2026-10-09T15:13:11.522534Z", "modified": "2026-10-09T15:13:11.522534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26599627b6f25c78efb1e58601487b4feb0bb601169d25eb49cc329fc1cd8d20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.522534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b573d50b-bba7-4f84-bd01-f1f5e2704025", "created": "2026-10-09T15:13:11.523119Z", "modified": "2026-10-09T15:13:11.523119Z", "relationship_type": "indicates", "source_ref": "indicator--9915c198-0afc-4de5-aae1-e6e12062bde9", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15789a89-3a50-4caa-aef1-224387d21200", "created": "2026-10-09T15:13:11.523237Z", "modified": "2026-10-09T15:13:11.523237Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='828b26c467763ce3c7722bc635de26cc6829b2e0fb7bfe48e271e0620384343b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.523237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--565e76da-e545-4070-82fe-83651e2abb06", "created": "2026-10-09T15:13:11.52385Z", "modified": "2026-10-09T15:13:11.52385Z", "relationship_type": "indicates", "source_ref": "indicator--15789a89-3a50-4caa-aef1-224387d21200", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d149de30-4307-444c-ae35-ab80cf77a11c", "created": "2026-10-09T15:13:11.52397Z", "modified": "2026-10-09T15:13:11.52397Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a2281c70dd162ca92f448139c2594efae21865a3ced2abde37970e58c648700']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.52397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6ced7d7-f25b-4c3a-ad81-b5c488d34b43", "created": "2026-10-09T15:13:11.52457Z", "modified": "2026-10-09T15:13:11.52457Z", "relationship_type": "indicates", "source_ref": "indicator--d149de30-4307-444c-ae35-ab80cf77a11c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b910318-84c7-4f6e-8dac-73b1cb3d9730", "created": "2026-10-09T15:13:11.524693Z", "modified": "2026-10-09T15:13:11.524693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dfdb40fb8cdb40074f753c3d7821f7bd3a49351ee879861349b2d5f4379d981']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.524693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dd5f712-b07b-4982-acec-4dd6ea5b4772", "created": "2026-10-09T15:13:11.525297Z", "modified": "2026-10-09T15:13:11.525297Z", "relationship_type": "indicates", "source_ref": "indicator--8b910318-84c7-4f6e-8dac-73b1cb3d9730", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabfbc60-3c7a-4d97-8eea-689fb4b345b2", "created": "2026-10-09T15:13:11.525419Z", "modified": "2026-10-09T15:13:11.525419Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c8e0c2ba01d8d1d8f0f69bb8e5d8c18d5b0c421eb9b235cd1caefdeddeb5c84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.525419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8a4c6e3-60d3-436d-a681-3cfa7dc3d8a7", "created": "2026-10-09T15:13:11.52612Z", "modified": "2026-10-09T15:13:11.52612Z", "relationship_type": "indicates", "source_ref": "indicator--eabfbc60-3c7a-4d97-8eea-689fb4b345b2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbde5970-9135-49aa-9fa0-798dbf011990", "created": "2026-10-09T15:13:11.526246Z", "modified": "2026-10-09T15:13:11.526246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bccbca3e6d271a55f4d273ff007130c1e816e21be3b9acc78dad5a5ba711131f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.526246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f385a4a0-84b1-45f7-9650-6a906516b4e5", "created": "2026-10-09T15:13:11.526861Z", "modified": "2026-10-09T15:13:11.526861Z", "relationship_type": "indicates", "source_ref": "indicator--bbde5970-9135-49aa-9fa0-798dbf011990", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec84eb8-e9bb-43ee-bfb2-a717676ea2e8", "created": "2026-10-09T15:13:11.526986Z", "modified": "2026-10-09T15:13:11.526986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3db9abf47363c5a2d9bc9eb573c411b814dfbfca370a84bf7a1c546a8fe0f5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.526986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45663c62-66e7-44df-bace-9e46ec4907a8", "created": "2026-10-09T15:13:11.527581Z", "modified": "2026-10-09T15:13:11.527581Z", "relationship_type": "indicates", "source_ref": "indicator--7ec84eb8-e9bb-43ee-bfb2-a717676ea2e8", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b06a547-317e-46f0-bc33-26bd78bdd069", "created": "2026-10-09T15:13:11.527702Z", "modified": "2026-10-09T15:13:11.527702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='840b9360055ae9fe25b916d424d625aa98bfe2aa4ddb5be0f51848683eff3d22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.527702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1c06f31-1f8f-4edf-8fcf-bd029d71736c", "created": "2026-10-09T15:13:11.52829Z", "modified": "2026-10-09T15:13:11.52829Z", "relationship_type": "indicates", "source_ref": "indicator--3b06a547-317e-46f0-bc33-26bd78bdd069", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80db58bd-9903-4d0e-9491-8d914614d7ad", "created": "2026-10-09T15:13:11.52841Z", "modified": "2026-10-09T15:13:11.52841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53b73b0a302c91120d53e4882e3d17c421b9e13694a8d22021d67bb08928c7d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.52841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd0f11d9-3cbc-4ae6-8933-1078aa186410", "created": "2026-10-09T15:13:11.528996Z", "modified": "2026-10-09T15:13:11.528996Z", "relationship_type": "indicates", "source_ref": "indicator--80db58bd-9903-4d0e-9491-8d914614d7ad", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375cd6c5-6684-4901-899d-c3f32c6a9182", "created": "2026-10-09T15:13:11.529117Z", "modified": "2026-10-09T15:13:11.529117Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b4c6f0e6a283acf4c9c56d063aa8892b02b758096abd7c0473d1e3cf233767d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.529117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a00cec5f-b5b3-4646-b170-a413bc2f8d51", "created": "2026-10-09T15:13:11.529719Z", "modified": "2026-10-09T15:13:11.529719Z", "relationship_type": "indicates", "source_ref": "indicator--375cd6c5-6684-4901-899d-c3f32c6a9182", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43536dc1-6017-4788-88c5-6e64d0a0f46d", "created": "2026-10-09T15:13:11.52984Z", "modified": "2026-10-09T15:13:11.52984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34ca540ffec82f1a235e2b956f54e0db1a585acdbf3dce0bb862e0638513a8e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.52984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab1f381a-451b-469b-88dc-6749b830a2df", "created": "2026-10-09T15:13:11.530443Z", "modified": "2026-10-09T15:13:11.530443Z", "relationship_type": "indicates", "source_ref": "indicator--43536dc1-6017-4788-88c5-6e64d0a0f46d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbe0bd4-e553-4dd4-aa44-69e6ce888252", "created": "2026-10-09T15:13:11.53057Z", "modified": "2026-10-09T15:13:11.53057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba3b45b2f76e67aade080d02b8d64fe2137e3de5ed2b03687eaefd93665a3d1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.53057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--699f31ea-bf17-418e-ad14-45361213a306", "created": "2026-10-09T15:13:11.531158Z", "modified": "2026-10-09T15:13:11.531158Z", "relationship_type": "indicates", "source_ref": "indicator--3cbe0bd4-e553-4dd4-aa44-69e6ce888252", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a55b54c-68f3-47f6-83fc-79c703aea3bb", "created": "2026-10-09T15:13:11.531286Z", "modified": "2026-10-09T15:13:11.531286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8c41bc25b5881b407e800f0c737e87656f92d53f50b7505a9013a45c15893ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.531286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--468932cc-f24e-4106-be77-2f9a889805ba", "created": "2026-10-09T15:13:11.531875Z", "modified": "2026-10-09T15:13:11.531875Z", "relationship_type": "indicates", "source_ref": "indicator--7a55b54c-68f3-47f6-83fc-79c703aea3bb", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e89b5c-2fc9-4e59-99a3-ff80f19e7052", "created": "2026-10-09T15:13:11.531993Z", "modified": "2026-10-09T15:13:11.531993Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='175b3c427a7f9008a978ccae38336e5cc8af427bf84d9706a9957d2587fc249f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.531993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e6eb8b1-4aad-4f3b-83ea-f50b2485c3ba", "created": "2026-10-09T15:13:11.532694Z", "modified": "2026-10-09T15:13:11.532694Z", "relationship_type": "indicates", "source_ref": "indicator--e4e89b5c-2fc9-4e59-99a3-ff80f19e7052", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8b7966-27ec-44a7-a89d-5ec7248c3c72", "created": "2026-10-09T15:13:11.532845Z", "modified": "2026-10-09T15:13:11.532845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4186cbba5d231f55d142eeb66a9abfbb2bdbb41b0f01ac6dda0fcc29b34e5ad8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.532845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5b206d-6d64-4bde-bec4-362f2326d11f", "created": "2026-10-09T15:13:11.533442Z", "modified": "2026-10-09T15:13:11.533442Z", "relationship_type": "indicates", "source_ref": "indicator--fc8b7966-27ec-44a7-a89d-5ec7248c3c72", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01a4bf3-c3c1-4701-9ec7-71f489fd7c09", "created": "2026-10-09T15:13:11.533563Z", "modified": "2026-10-09T15:13:11.533563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='844f38fcd50de413c639bf007a3dc6531a47052a29b35f245f7515b53a4ddd30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.533563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae140d56-2840-4252-a30b-095cf4d624e2", "created": "2026-10-09T15:13:11.534144Z", "modified": "2026-10-09T15:13:11.534144Z", "relationship_type": "indicates", "source_ref": "indicator--a01a4bf3-c3c1-4701-9ec7-71f489fd7c09", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc96d851-fd9e-4082-b91a-233e215bf591", "created": "2026-10-09T15:13:11.534276Z", "modified": "2026-10-09T15:13:11.534276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20806c9c454dab6e6b90872ee536cfec96d2d19b31b43f4ccd8ea2ea80c82bc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.534276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--944471c8-bfd8-4b23-9999-e227049485c5", "created": "2026-10-09T15:13:11.53486Z", "modified": "2026-10-09T15:13:11.53486Z", "relationship_type": "indicates", "source_ref": "indicator--bc96d851-fd9e-4082-b91a-233e215bf591", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b182760c-7728-4d76-bdca-7c5ec6abca38", "created": "2026-10-09T15:13:11.53498Z", "modified": "2026-10-09T15:13:11.53498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8866993065527bdd6537ae9e8f6aac7d50f55a487125cedf675e784f25aa6e86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.53498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72e0150f-14d4-4a2e-b07e-1da43711c4eb", "created": "2026-10-09T15:13:11.535573Z", "modified": "2026-10-09T15:13:11.535573Z", "relationship_type": "indicates", "source_ref": "indicator--b182760c-7728-4d76-bdca-7c5ec6abca38", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86176ee6-1fe3-4432-8d10-aa63df4f9ff3", "created": "2026-10-09T15:13:11.535695Z", "modified": "2026-10-09T15:13:11.535695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7f9c1e865757d98a74c86eaab07996a2da22d911f6532e7868b7e533511a17f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.535695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--157ba1ac-1b4e-43a6-87f3-eb241b884db4", "created": "2026-10-09T15:13:11.536291Z", "modified": "2026-10-09T15:13:11.536291Z", "relationship_type": "indicates", "source_ref": "indicator--86176ee6-1fe3-4432-8d10-aa63df4f9ff3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fff5aa-5b1f-4f92-8ad9-85eb17224e82", "created": "2026-10-09T15:13:11.53642Z", "modified": "2026-10-09T15:13:11.53642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8b47448bd29d8ca137cb613cc4735698a09a52c5955228bb4e5c3a52aea3075']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.53642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec9cdc47-0be5-46c2-940b-f3880bdf6038", "created": "2026-10-09T15:13:11.537015Z", "modified": "2026-10-09T15:13:11.537015Z", "relationship_type": "indicates", "source_ref": "indicator--17fff5aa-5b1f-4f92-8ad9-85eb17224e82", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981d44fc-57db-4722-b850-c2195b61898e", "created": "2026-10-09T15:13:11.537135Z", "modified": "2026-10-09T15:13:11.537135Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b47f33b706c1fdb43169d2ae8c50782a44840032bc9037f075c737c39f2ae6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.537135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c804f06-b713-4c9a-bafb-996e19aa9831", "created": "2026-10-09T15:13:11.537731Z", "modified": "2026-10-09T15:13:11.537731Z", "relationship_type": "indicates", "source_ref": "indicator--981d44fc-57db-4722-b850-c2195b61898e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccad89cb-7d89-4c84-b5cf-e2dddf76217f", "created": "2026-10-09T15:13:11.537852Z", "modified": "2026-10-09T15:13:11.537852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e6119e030430b55108b35adf221e2f13115515fff0521583cefcfe93328fb9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.537852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2a9dafe-5e61-4193-a6b1-6be1f8cf7be6", "created": "2026-10-09T15:13:11.538451Z", "modified": "2026-10-09T15:13:11.538451Z", "relationship_type": "indicates", "source_ref": "indicator--ccad89cb-7d89-4c84-b5cf-e2dddf76217f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1de3761-239e-47d5-a400-7897ae6858de", "created": "2026-10-09T15:13:11.538572Z", "modified": "2026-10-09T15:13:11.538572Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7072e173dc3bb135e4ac78398c896d40407e291478539a116eeb812f30a581ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.538572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--310678cc-1861-45d1-874a-d54ce6920729", "created": "2026-10-09T15:13:11.539256Z", "modified": "2026-10-09T15:13:11.539256Z", "relationship_type": "indicates", "source_ref": "indicator--b1de3761-239e-47d5-a400-7897ae6858de", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34149207-4b9e-4f0c-a3e5-e59fbab46c87", "created": "2026-10-09T15:13:11.539391Z", "modified": "2026-10-09T15:13:11.539391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3907cabfb9f405210632c57e44acbaebf0196ad9e9ff6552ed2c741c016c470d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.539391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22f3bf28-299c-4238-8f6e-300abd6afecd", "created": "2026-10-09T15:13:11.539987Z", "modified": "2026-10-09T15:13:11.539987Z", "relationship_type": "indicates", "source_ref": "indicator--34149207-4b9e-4f0c-a3e5-e59fbab46c87", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089ac612-688f-4e20-bdd7-2f7776ebaedb", "created": "2026-10-09T15:13:11.540114Z", "modified": "2026-10-09T15:13:11.540114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09889746e01e3e3e59e7f693bb1c8ae525c101cb2e8b198f6705078cdbca3d5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.540114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45da8e56-b695-4fee-85bc-b30e8d21194d", "created": "2026-10-09T15:13:11.54071Z", "modified": "2026-10-09T15:13:11.54071Z", "relationship_type": "indicates", "source_ref": "indicator--089ac612-688f-4e20-bdd7-2f7776ebaedb", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60df85d-0831-4fb7-b9a6-0a532d0b73a0", "created": "2026-10-09T15:13:11.54083Z", "modified": "2026-10-09T15:13:11.54083Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1dc5e68de9bc3bb7d44e3b377784eb53ec831bcc29be58f4adf5458ec29b264']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.54083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be317a46-eed9-4be1-be51-a580cb806d87", "created": "2026-10-09T15:13:11.541423Z", "modified": "2026-10-09T15:13:11.541423Z", "relationship_type": "indicates", "source_ref": "indicator--d60df85d-0831-4fb7-b9a6-0a532d0b73a0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c40968d-8705-464b-b347-ec5dafdcb754", "created": "2026-10-09T15:13:11.541543Z", "modified": "2026-10-09T15:13:11.541543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='066a02b14ff5c1e29fafdafa649fd4358b6132de6850629172ef884cb6cda6ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.541543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8de22d98-631f-4d21-b1e7-0d32c4e51fed", "created": "2026-10-09T15:13:11.542127Z", "modified": "2026-10-09T15:13:11.542127Z", "relationship_type": "indicates", "source_ref": "indicator--5c40968d-8705-464b-b347-ec5dafdcb754", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c01e60-295a-4e9f-9fc9-3c5edb0ff12b", "created": "2026-10-09T15:13:11.542247Z", "modified": "2026-10-09T15:13:11.542247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c56539b1787d799ddff879675cabe603cbe168ec9989d3cdfe15802efd33fb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.542247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c53b6045-1fb1-4974-90ab-38d579fdef32", "created": "2026-10-09T15:13:11.542843Z", "modified": "2026-10-09T15:13:11.542843Z", "relationship_type": "indicates", "source_ref": "indicator--23c01e60-295a-4e9f-9fc9-3c5edb0ff12b", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbbad6c-e658-4797-bfe9-f0a12c5ce37d", "created": "2026-10-09T15:13:11.542965Z", "modified": "2026-10-09T15:13:11.542965Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f06b5825a0bf7672a65dd04c44fece642e5dce43a3e34d71c1009ebd1b8831ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.542965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--905e16e9-5d58-47ed-a446-ebfb871f889f", "created": "2026-10-09T15:13:11.543563Z", "modified": "2026-10-09T15:13:11.543563Z", "relationship_type": "indicates", "source_ref": "indicator--0fbbad6c-e658-4797-bfe9-f0a12c5ce37d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3598c9a3-0dea-4708-9079-2de96cc432c2", "created": "2026-10-09T15:13:11.543689Z", "modified": "2026-10-09T15:13:11.543689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da5fe10fc93190cdf41700ff0381ee87133e87ea107403ba2f1e387e9ffb38a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.543689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ccbaa59-edbf-4e77-9602-c239d97357ea", "created": "2026-10-09T15:13:11.544286Z", "modified": "2026-10-09T15:13:11.544286Z", "relationship_type": "indicates", "source_ref": "indicator--3598c9a3-0dea-4708-9079-2de96cc432c2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fa36de-860e-44ba-8aea-b1151a83eecb", "created": "2026-10-09T15:13:11.544407Z", "modified": "2026-10-09T15:13:11.544407Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5658fc9a0847a71aff4265b5ed54134926b800d136c296e58ab421b0228dcddf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.544407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--249786e5-2790-4d69-b9fc-a60ca1bd8fca", "created": "2026-10-09T15:13:11.545093Z", "modified": "2026-10-09T15:13:11.545093Z", "relationship_type": "indicates", "source_ref": "indicator--94fa36de-860e-44ba-8aea-b1151a83eecb", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31f48f8-3a33-4a9d-a11c-d66a3ec7d4fc", "created": "2026-10-09T15:13:11.545219Z", "modified": "2026-10-09T15:13:11.545219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cc566bcd658f03c8a778465e211066b7d62e795bdbd6d490ca4f0133bc2e358']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.545219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90664cf4-8182-4c4c-965c-e0f483dfe84c", "created": "2026-10-09T15:13:11.545827Z", "modified": "2026-10-09T15:13:11.545827Z", "relationship_type": "indicates", "source_ref": "indicator--c31f48f8-3a33-4a9d-a11c-d66a3ec7d4fc", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff16234a-b85b-47a7-9474-4e55b3b87ff4", "created": "2026-10-09T15:13:11.545951Z", "modified": "2026-10-09T15:13:11.545951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9148a33ed6e1da348108ba39b6bbb21c38a8152fe51fa4a2ce352956142c5f4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.545951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f92bc006-e616-4299-914e-8fa37132c325", "created": "2026-10-09T15:13:11.546547Z", "modified": "2026-10-09T15:13:11.546547Z", "relationship_type": "indicates", "source_ref": "indicator--ff16234a-b85b-47a7-9474-4e55b3b87ff4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5fa0e5-c9b2-4b83-a396-b0096d174c71", "created": "2026-10-09T15:13:11.546669Z", "modified": "2026-10-09T15:13:11.546669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e5f026a32a3c7b50dcef60e541c4638bcfdc37c6c51ddf73110dce7de179ec0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.546669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0470fd76-7e82-41ab-a250-acc616de84a4", "created": "2026-10-09T15:13:11.547262Z", "modified": "2026-10-09T15:13:11.547262Z", "relationship_type": "indicates", "source_ref": "indicator--0a5fa0e5-c9b2-4b83-a396-b0096d174c71", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6da0640-ad3a-40d1-8b86-4f220f7f2356", "created": "2026-10-09T15:13:11.547394Z", "modified": "2026-10-09T15:13:11.547394Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5efd520420774463339efb751fda0d0b201fe281d96dbb5dc07b994796637f68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.547394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1289da8-1dae-458a-84d9-3a308492890e", "created": "2026-10-09T15:13:11.547979Z", "modified": "2026-10-09T15:13:11.547979Z", "relationship_type": "indicates", "source_ref": "indicator--b6da0640-ad3a-40d1-8b86-4f220f7f2356", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ac682b-e800-437c-bef3-e2aac3f3212f", "created": "2026-10-09T15:13:11.548096Z", "modified": "2026-10-09T15:13:11.548096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cc66c222cfe99fc92cb03f5cf91b6c37e027f1cf144779ea5cc3c385a41f358']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.548096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20b89666-be07-4dda-9a4e-e372417d2d9a", "created": "2026-10-09T15:13:11.54869Z", "modified": "2026-10-09T15:13:11.54869Z", "relationship_type": "indicates", "source_ref": "indicator--17ac682b-e800-437c-bef3-e2aac3f3212f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d135a619-3d1f-4cfa-940a-20513ac7ef18", "created": "2026-10-09T15:13:11.548813Z", "modified": "2026-10-09T15:13:11.548813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b6e97ee5825ab74bdd97ea9b8d4422ee87393ad24ee2cff2e5f34dc7e458bd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.548813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8f95e5d-5610-4b84-a8e6-0119ec406518", "created": "2026-10-09T15:13:11.549414Z", "modified": "2026-10-09T15:13:11.549414Z", "relationship_type": "indicates", "source_ref": "indicator--d135a619-3d1f-4cfa-940a-20513ac7ef18", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e60d680-5982-4920-89b9-6fb332db849a", "created": "2026-10-09T15:13:11.549533Z", "modified": "2026-10-09T15:13:11.549533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='789ce95dc74ab19b309dc0687a8b9883ed968370ab53d3394346690c151859e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.549533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6076bc5-7395-49b0-9545-20ba2c8e4353", "created": "2026-10-09T15:13:11.550118Z", "modified": "2026-10-09T15:13:11.550118Z", "relationship_type": "indicates", "source_ref": "indicator--8e60d680-5982-4920-89b9-6fb332db849a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b817b58-2324-448e-9d71-eb672e228aa2", "created": "2026-10-09T15:13:11.550236Z", "modified": "2026-10-09T15:13:11.550236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e9333aa7f8321307f384a67a602bea3fec89b8e41683264ce6076c73967675b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.550236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--850d39e3-dcc4-4236-9f7a-38a4bfbfc2de", "created": "2026-10-09T15:13:11.550823Z", "modified": "2026-10-09T15:13:11.550823Z", "relationship_type": "indicates", "source_ref": "indicator--7b817b58-2324-448e-9d71-eb672e228aa2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaf8b1a-2777-457a-a51f-70e40fde8672", "created": "2026-10-09T15:13:11.550949Z", "modified": "2026-10-09T15:13:11.550949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53c3d374a7accc9ff3cbccacb96102aa0a4cb06d60a2658c7572075872d11355']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.550949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef9dadf7-d1c5-4681-8533-e83bfcdc5c8b", "created": "2026-10-09T15:13:11.551671Z", "modified": "2026-10-09T15:13:11.551671Z", "relationship_type": "indicates", "source_ref": "indicator--cdaf8b1a-2777-457a-a51f-70e40fde8672", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da7a057-de6a-41d7-816c-f6f713a0bf64", "created": "2026-10-09T15:13:11.551811Z", "modified": "2026-10-09T15:13:11.551811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f629f0cff6edb68ef94665e5a3f1d86c5f0fe1617f14b29ebd0cc4a6184b0cc7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.551811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57cc72d6-d0e5-4797-961e-ced775578bfd", "created": "2026-10-09T15:13:11.552421Z", "modified": "2026-10-09T15:13:11.552421Z", "relationship_type": "indicates", "source_ref": "indicator--9da7a057-de6a-41d7-816c-f6f713a0bf64", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d45fa1-7655-47d2-8115-e862f29a3c54", "created": "2026-10-09T15:13:11.552548Z", "modified": "2026-10-09T15:13:11.552548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f894c31ba1c834d4aa43d58728d9b787f354237aab0f736568198028ca1db09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.552548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9499e9c-2993-4367-a74e-a894d2bf2be7", "created": "2026-10-09T15:13:11.55314Z", "modified": "2026-10-09T15:13:11.55314Z", "relationship_type": "indicates", "source_ref": "indicator--b6d45fa1-7655-47d2-8115-e862f29a3c54", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b930c72f-3642-47b5-a9c5-66127ff5de3f", "created": "2026-10-09T15:13:11.553259Z", "modified": "2026-10-09T15:13:11.553259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a357beab5b4f8b5afb7a9de48dde2f2a4a278c72d64e96224a62fc391780ec1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.553259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41496fc8-a8d3-42d4-a914-07d92c7b1385", "created": "2026-10-09T15:13:11.553859Z", "modified": "2026-10-09T15:13:11.553859Z", "relationship_type": "indicates", "source_ref": "indicator--b930c72f-3642-47b5-a9c5-66127ff5de3f", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9f94d8-6997-444b-9dd6-407a3cad4d44", "created": "2026-10-09T15:13:11.55398Z", "modified": "2026-10-09T15:13:11.55398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce951fd243b73b11bec0fc11f674670ce860ef813af7a5ca1460cd3a8a0be3dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.55398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29938260-5b0b-42a0-aa50-f64d5f758d97", "created": "2026-10-09T15:13:11.554589Z", "modified": "2026-10-09T15:13:11.554589Z", "relationship_type": "indicates", "source_ref": "indicator--bb9f94d8-6997-444b-9dd6-407a3cad4d44", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d8800d-1ff7-48b5-8379-ff5ce45bd1fa", "created": "2026-10-09T15:13:11.554715Z", "modified": "2026-10-09T15:13:11.554715Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='473ece1324d0560e668a3ffaf751b385043ff962c2a7553060bb2eee6b20cf46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.554715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63ab99d3-121b-484c-9993-41a30b75ea16", "created": "2026-10-09T15:13:11.555313Z", "modified": "2026-10-09T15:13:11.555313Z", "relationship_type": "indicates", "source_ref": "indicator--b8d8800d-1ff7-48b5-8379-ff5ce45bd1fa", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d46d64b-3d11-483c-9d1e-fa12314184e3", "created": "2026-10-09T15:13:11.55544Z", "modified": "2026-10-09T15:13:11.55544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43bc8191de7a878c793d494a11aadb48b6e52f01bb8db1321b9704ba3556aa01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.55544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92c480ff-5595-4f0d-a0dd-000c0882b027", "created": "2026-10-09T15:13:11.556032Z", "modified": "2026-10-09T15:13:11.556032Z", "relationship_type": "indicates", "source_ref": "indicator--2d46d64b-3d11-483c-9d1e-fa12314184e3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bbc035-c785-4272-84ce-a839c27f22e3", "created": "2026-10-09T15:13:11.556152Z", "modified": "2026-10-09T15:13:11.556152Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='189afde793754f6b6265bde54719ec83fe2b810387b1a8cb582ee4e2dd1a119f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.556152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a2b0d1f-fead-4f71-9e61-93f649d6705d", "created": "2026-10-09T15:13:11.556757Z", "modified": "2026-10-09T15:13:11.556757Z", "relationship_type": "indicates", "source_ref": "indicator--81bbc035-c785-4272-84ce-a839c27f22e3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2761cc5-2859-4311-b956-92fdd8e7d241", "created": "2026-10-09T15:13:11.556888Z", "modified": "2026-10-09T15:13:11.556888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61702c0d31768e152ccc03aad79b764534ccfa2ff5e8cddc19fd6e5518bc6aaa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.556888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60d7e037-568d-4813-96b4-f31725697fe1", "created": "2026-10-09T15:13:11.557499Z", "modified": "2026-10-09T15:13:11.557499Z", "relationship_type": "indicates", "source_ref": "indicator--e2761cc5-2859-4311-b956-92fdd8e7d241", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1067753-679a-4445-b432-ec02651b61d1", "created": "2026-10-09T15:13:11.557633Z", "modified": "2026-10-09T15:13:11.557633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e69e1cc740f15d1a293ec39a5c1cb46a195ef074b3d2a634ee681a3331ef1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.557633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9735cb6-3c2d-45ab-9e91-c4870537074a", "created": "2026-10-09T15:13:11.558334Z", "modified": "2026-10-09T15:13:11.558334Z", "relationship_type": "indicates", "source_ref": "indicator--c1067753-679a-4445-b432-ec02651b61d1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44d6035-8f72-4dd8-ab1b-3cd85146e25e", "created": "2026-10-09T15:13:11.55846Z", "modified": "2026-10-09T15:13:11.55846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e146efe2256044dd9df7b9479c7144d1fb9f06ec59e7aa535bb506762deeeac6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.55846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1e25a21-0fde-45de-a181-08f75875ba7c", "created": "2026-10-09T15:13:11.559049Z", "modified": "2026-10-09T15:13:11.559049Z", "relationship_type": "indicates", "source_ref": "indicator--b44d6035-8f72-4dd8-ab1b-3cd85146e25e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4575b65-bd93-4a9a-8d01-16e7cdd4fc1d", "created": "2026-10-09T15:13:11.55917Z", "modified": "2026-10-09T15:13:11.55917Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dce19c019d3efc7de8179477a31456e2a1f3ec9af184e8c8cd85c0c4195b9aea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.55917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c37f1279-0d4e-462a-94ae-24a5b368d748", "created": "2026-10-09T15:13:11.559771Z", "modified": "2026-10-09T15:13:11.559771Z", "relationship_type": "indicates", "source_ref": "indicator--b4575b65-bd93-4a9a-8d01-16e7cdd4fc1d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bf4d18-5bb8-4571-8758-76cd93b44be0", "created": "2026-10-09T15:13:11.559894Z", "modified": "2026-10-09T15:13:11.559894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8a703ebc1aca9f44c8876eb28e07b48ee31039676d1ff21ef15881ce3edd341']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.559894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec7b262c-0f32-44f5-9122-ace0a1dd48ea", "created": "2026-10-09T15:13:11.560493Z", "modified": "2026-10-09T15:13:11.560493Z", "relationship_type": "indicates", "source_ref": "indicator--91bf4d18-5bb8-4571-8758-76cd93b44be0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b5dd48-d5bc-49ee-9db3-65d9dd5691b7", "created": "2026-10-09T15:13:11.56062Z", "modified": "2026-10-09T15:13:11.56062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f08a5c6bd8d82543e4e33e4e5a52d3be288d09ab56e2fe5531eb0575edaa4ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.56062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2480043-ed0a-4417-b0aa-334f3cccbc15", "created": "2026-10-09T15:13:11.561215Z", "modified": "2026-10-09T15:13:11.561215Z", "relationship_type": "indicates", "source_ref": "indicator--30b5dd48-d5bc-49ee-9db3-65d9dd5691b7", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b43d926-22cc-454c-a133-7c1a849031ea", "created": "2026-10-09T15:13:11.561351Z", "modified": "2026-10-09T15:13:11.561351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8aa8b289de2b82b3f344d30a9d144c4e8773afc69027e83701eae7e46d0660c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.561351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b567e3c-7daa-4140-801e-93cf68ce0e65", "created": "2026-10-09T15:13:11.561939Z", "modified": "2026-10-09T15:13:11.561939Z", "relationship_type": "indicates", "source_ref": "indicator--2b43d926-22cc-454c-a133-7c1a849031ea", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab115ae7-dd63-4144-b62f-b62dfbcff111", "created": "2026-10-09T15:13:11.562065Z", "modified": "2026-10-09T15:13:11.562065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eda4895582042476d58bb96ae5179def40bed1c5daa08846ff3c1045ee04ec9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.562065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--802f36b4-a2f4-4049-91a1-bde301c81409", "created": "2026-10-09T15:13:11.562675Z", "modified": "2026-10-09T15:13:11.562675Z", "relationship_type": "indicates", "source_ref": "indicator--ab115ae7-dd63-4144-b62f-b62dfbcff111", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ce7ad1-9db6-4eaf-8838-4f123c6e72bd", "created": "2026-10-09T15:13:11.5628Z", "modified": "2026-10-09T15:13:11.5628Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c8ddf2d2207de01bcbc2eb2866164274567da9e1d959e3c495e08e716cab327']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.5628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20baa3b7-0ef7-4f30-a032-1091bc900194", "created": "2026-10-09T15:13:11.563529Z", "modified": "2026-10-09T15:13:11.563529Z", "relationship_type": "indicates", "source_ref": "indicator--d6ce7ad1-9db6-4eaf-8838-4f123c6e72bd", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba402e5d-f00d-4c0f-903c-cf929164a50c", "created": "2026-10-09T15:13:11.563689Z", "modified": "2026-10-09T15:13:11.563689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fe64fbc6132864a942f5d20a7980268f3a7829009ccc9dbe4f0e165a684c838']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.563689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2451c182-ddb2-44de-a875-1f09cec7fbaa", "created": "2026-10-09T15:13:11.564419Z", "modified": "2026-10-09T15:13:11.564419Z", "relationship_type": "indicates", "source_ref": "indicator--ba402e5d-f00d-4c0f-903c-cf929164a50c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ba25a0-d7cf-42be-9607-a748d6d20de3", "created": "2026-10-09T15:13:11.564553Z", "modified": "2026-10-09T15:13:11.564553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bdb1411e77d49e02dff33e724bfaa116241814e42ce11ffa25112dfce1d9cfc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.564553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20b176f2-677f-4cbe-94ac-a0c3474ef3c2", "created": "2026-10-09T15:13:11.565151Z", "modified": "2026-10-09T15:13:11.565151Z", "relationship_type": "indicates", "source_ref": "indicator--e0ba25a0-d7cf-42be-9607-a748d6d20de3", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4889551d-733a-4e7f-94ea-f7ad5771b746", "created": "2026-10-09T15:13:11.565291Z", "modified": "2026-10-09T15:13:11.565291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ade5e5f13a0ce10f979e6db973c0202330d0c2f5d4e9798ff18d8b89df83dc4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.565291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--486e12aa-401a-4843-bbd6-bf58951b2901", "created": "2026-10-09T15:13:11.565886Z", "modified": "2026-10-09T15:13:11.565886Z", "relationship_type": "indicates", "source_ref": "indicator--4889551d-733a-4e7f-94ea-f7ad5771b746", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09e6f8-82f5-4897-ae0f-39734bb23ac2", "created": "2026-10-09T15:13:11.566008Z", "modified": "2026-10-09T15:13:11.566008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4a2ab6f7a88aa83100c965560b1c445f1cd2c5ba82535242316df150a3038b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.566008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5491af34-c5b0-4fbb-adfb-b087716c89f8", "created": "2026-10-09T15:13:11.566616Z", "modified": "2026-10-09T15:13:11.566616Z", "relationship_type": "indicates", "source_ref": "indicator--ba09e6f8-82f5-4897-ae0f-39734bb23ac2", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf62354-cf60-40f1-8936-4d67db61587e", "created": "2026-10-09T15:13:11.566741Z", "modified": "2026-10-09T15:13:11.566741Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8dc5ad6713e2a9cd1cffbc00d2f656f31c22c4c94a565e8fa920fc91bbef7661']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.566741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53c0088f-7628-49af-88b4-a4e90f9b8bbe", "created": "2026-10-09T15:13:11.567343Z", "modified": "2026-10-09T15:13:11.567343Z", "relationship_type": "indicates", "source_ref": "indicator--3cf62354-cf60-40f1-8936-4d67db61587e", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf41a40-ffa6-410e-ac89-d8a24e7fe1db", "created": "2026-10-09T15:13:11.567472Z", "modified": "2026-10-09T15:13:11.567472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17ab53e2981edce20244659e13f5271801a4907c521b11b1252bdab20028bc61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.567472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2abc6478-7741-4960-a8cf-ac36fc64c3a1", "created": "2026-10-09T15:13:11.56806Z", "modified": "2026-10-09T15:13:11.56806Z", "relationship_type": "indicates", "source_ref": "indicator--aaf41a40-ffa6-410e-ac89-d8a24e7fe1db", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc02c286-3978-40d5-bf32-548ff5556b97", "created": "2026-10-09T15:13:11.568177Z", "modified": "2026-10-09T15:13:11.568177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e805253f87ff9f48e7b0de6ec1bd02e6f27a19df8fcc2a02d9617816d0ed4f33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.568177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1d35010-4a6a-41b1-8565-00c816b8e9a0", "created": "2026-10-09T15:13:11.568777Z", "modified": "2026-10-09T15:13:11.568777Z", "relationship_type": "indicates", "source_ref": "indicator--cc02c286-3978-40d5-bf32-548ff5556b97", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe19db5f-7edc-4148-9446-854f15ce4351", "created": "2026-10-09T15:13:11.568901Z", "modified": "2026-10-09T15:13:11.568901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f9476ca78ca10e5c221594599366e68c6c83a56f5755e4c5b4d61548f0ddda2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.568901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81c0216f-dffe-4686-a942-d50d0161b111", "created": "2026-10-09T15:13:11.56951Z", "modified": "2026-10-09T15:13:11.56951Z", "relationship_type": "indicates", "source_ref": "indicator--fe19db5f-7edc-4148-9446-854f15ce4351", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35be7a7-26a7-4543-bad1-f34edff5c85a", "created": "2026-10-09T15:13:11.569632Z", "modified": "2026-10-09T15:13:11.569632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='368b990d0d3eb4fe96e98dd6841bf927d42160d5f9f4d29666da836d761a0f82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.569632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--088733fd-d3b9-4bff-ad15-7c2a078d5b3e", "created": "2026-10-09T15:13:11.570221Z", "modified": "2026-10-09T15:13:11.570221Z", "relationship_type": "indicates", "source_ref": "indicator--f35be7a7-26a7-4543-bad1-f34edff5c85a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220d2474-db8f-49c6-b182-4d085f97a263", "created": "2026-10-09T15:13:11.570359Z", "modified": "2026-10-09T15:13:11.570359Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6f17d27832bcf4a8c8a47a7a2a6ccf9c03f529b62b346878859957ed9a331b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.570359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61f75779-3585-4b84-bff7-198970ba823a", "created": "2026-10-09T15:13:11.571059Z", "modified": "2026-10-09T15:13:11.571059Z", "relationship_type": "indicates", "source_ref": "indicator--220d2474-db8f-49c6-b182-4d085f97a263", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6175258-a27b-4add-8303-2db9ec2c6087", "created": "2026-10-09T15:13:11.571189Z", "modified": "2026-10-09T15:13:11.571189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a612a93e9af50d44012814b71a92869b090a7a225132f2bb33cb780c6104d16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.571189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d99a377-4439-47cb-b09f-b1182320f825", "created": "2026-10-09T15:13:11.571791Z", "modified": "2026-10-09T15:13:11.571791Z", "relationship_type": "indicates", "source_ref": "indicator--d6175258-a27b-4add-8303-2db9ec2c6087", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01534479-ef4e-4688-85f8-744e5849aafe", "created": "2026-10-09T15:13:11.571911Z", "modified": "2026-10-09T15:13:11.571911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9f5c26b14a01a9bf33b305a94cb0fd9a0f48ebe5f8ea742b96962451bcbdb08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.571911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f1c7823-70f4-4816-b8b8-598d17bab665", "created": "2026-10-09T15:13:11.572523Z", "modified": "2026-10-09T15:13:11.572523Z", "relationship_type": "indicates", "source_ref": "indicator--01534479-ef4e-4688-85f8-744e5849aafe", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8376e949-66d5-466d-84e4-3b8a293d5e0c", "created": "2026-10-09T15:13:11.572649Z", "modified": "2026-10-09T15:13:11.572649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c61114662418554f333b445c27740a101b36de5ff1f5bb075218e60dee9ffab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.572649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05bbd352-724a-4e60-b2d3-fa8f008a4f4f", "created": "2026-10-09T15:13:11.573248Z", "modified": "2026-10-09T15:13:11.573248Z", "relationship_type": "indicates", "source_ref": "indicator--8376e949-66d5-466d-84e4-3b8a293d5e0c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8d7f13-7cef-4231-81b4-9349146b97bc", "created": "2026-10-09T15:13:11.573382Z", "modified": "2026-10-09T15:13:11.573382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b7d8176b69663c747dab0cd64404e9071a623e8c4637d8f8222074854926dd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.573382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9ac5587-25f8-43b1-bec3-e5ce0ed57001", "created": "2026-10-09T15:13:11.573978Z", "modified": "2026-10-09T15:13:11.573978Z", "relationship_type": "indicates", "source_ref": "indicator--9e8d7f13-7cef-4231-81b4-9349146b97bc", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773346b7-1fdb-4a55-9394-97cc5fa04988", "created": "2026-10-09T15:13:11.574096Z", "modified": "2026-10-09T15:13:11.574096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13f63dae6e0837ffc8996247c8aa837da260059a3694e6adf4b5f98df0246dcd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.574096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--942bbe41-a62f-45c5-8711-9b319dd2cb78", "created": "2026-10-09T15:13:11.574691Z", "modified": "2026-10-09T15:13:11.574691Z", "relationship_type": "indicates", "source_ref": "indicator--773346b7-1fdb-4a55-9394-97cc5fa04988", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58e1ad5-7f15-4125-8044-b37a0f09d18c", "created": "2026-10-09T15:13:11.574816Z", "modified": "2026-10-09T15:13:11.574816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ffea474b10345ae5c88476c4631002644fdc1f53acdb135273bd89dd2832d40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.574816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--506de40e-2171-4fae-b241-543a7a3fbbf2", "created": "2026-10-09T15:13:11.575416Z", "modified": "2026-10-09T15:13:11.575416Z", "relationship_type": "indicates", "source_ref": "indicator--d58e1ad5-7f15-4125-8044-b37a0f09d18c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117b1b83-911b-4c75-a276-55153fb6f6eb", "created": "2026-10-09T15:13:11.575537Z", "modified": "2026-10-09T15:13:11.575537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5e2deaf99e5e4d45ab36d69f1a36984e27d077918b864ae8f92e1c60e922a97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.575537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80408fef-b280-4586-9bc8-8b46f4595063", "created": "2026-10-09T15:13:11.57612Z", "modified": "2026-10-09T15:13:11.57612Z", "relationship_type": "indicates", "source_ref": "indicator--117b1b83-911b-4c75-a276-55153fb6f6eb", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336bd2fa-4d2a-4517-971b-12e75c3d72d5", "created": "2026-10-09T15:13:11.57624Z", "modified": "2026-10-09T15:13:11.57624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee0e33551d7d03f33f616224381f00f8d04e32e41245c1f8594199e7af94a197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.57624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72d80f78-899e-4895-bee8-bd452e716ab5", "created": "2026-10-09T15:13:11.57684Z", "modified": "2026-10-09T15:13:11.57684Z", "relationship_type": "indicates", "source_ref": "indicator--336bd2fa-4d2a-4517-971b-12e75c3d72d5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35211b1-16ad-40ff-88d4-e7a8dd2f486a", "created": "2026-10-09T15:13:11.576963Z", "modified": "2026-10-09T15:13:11.576963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0d7856b7d7b2a56bab36ff9e1f477bba3d63a30e1c390ee07ad5c17553a3c87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.576963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f34a0e2-3158-4a0c-9938-85a4b27b5a6b", "created": "2026-10-09T15:13:11.577988Z", "modified": "2026-10-09T15:13:11.577988Z", "relationship_type": "indicates", "source_ref": "indicator--d35211b1-16ad-40ff-88d4-e7a8dd2f486a", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971c87ff-ff94-4855-81ea-89644d52e0c0", "created": "2026-10-09T15:13:11.578116Z", "modified": "2026-10-09T15:13:11.578116Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.screenshotrecorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.578116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ba0bb2f-5181-4a76-9ec6-03217f9dbcc6", "created": "2026-10-09T15:13:11.578593Z", "modified": "2026-10-09T15:13:11.578593Z", "relationship_type": "indicates", "source_ref": "indicator--971c87ff-ff94-4855-81ea-89644d52e0c0", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98c9141-4b3c-4e6c-9123-ab76a24c50d7", "created": "2026-10-09T15:13:11.578714Z", "modified": "2026-10-09T15:13:11.578714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.578714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb7d34eb-b52c-45b6-8b73-8e7351fc5c1d", "created": "2026-10-09T15:13:11.579166Z", "modified": "2026-10-09T15:13:11.579166Z", "relationship_type": "indicates", "source_ref": "indicator--f98c9141-4b3c-4e6c-9123-ab76a24c50d7", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae8148e-1f60-4050-917d-355fe6188e97", "created": "2026-10-09T15:13:11.579295Z", "modified": "2026-10-09T15:13:11.579295Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.kgl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.579295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ccd3645-42f0-4416-bcc1-08feff179a65", "created": "2026-10-09T15:13:11.579737Z", "modified": "2026-10-09T15:13:11.579737Z", "relationship_type": "indicates", "source_ref": "indicator--0ae8148e-1f60-4050-917d-355fe6188e97", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14774308-b909-4e64-bf66-a08b9f39ea2c", "created": "2026-10-09T15:13:11.579857Z", "modified": "2026-10-09T15:13:11.579857Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.kwoapsnde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.579857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70232087-1003-4d16-96e4-f79f563fc5f5", "created": "2026-10-09T15:13:11.580321Z", "modified": "2026-10-09T15:13:11.580321Z", "relationship_type": "indicates", "source_ref": "indicator--14774308-b909-4e64-bf66-a08b9f39ea2c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99db84fe-5b1a-4cbb-8b34-ea7cb112abc9", "created": "2026-10-09T15:13:11.580443Z", "modified": "2026-10-09T15:13:11.580443Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.clipboardmanager']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.580443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce63b60c-7072-4dfb-bcf9-11e98623e85d", "created": "2026-10-09T15:13:11.580905Z", "modified": "2026-10-09T15:13:11.580905Z", "relationship_type": "indicates", "source_ref": "indicator--99db84fe-5b1a-4cbb-8b34-ea7cb112abc9", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9dbc45-f640-4a86-8dac-7cc8317810ba", "created": "2026-10-09T15:13:11.581023Z", "modified": "2026-10-09T15:13:11.581023Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.facecapture']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.581023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b269679-c3f8-405e-90c5-e81b9b58d190", "created": "2026-10-09T15:13:11.581482Z", "modified": "2026-10-09T15:13:11.581482Z", "relationship_type": "indicates", "source_ref": "indicator--1b9dbc45-f640-4a86-8dac-7cc8317810ba", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355f77a5-2762-4c9d-b455-0cafa7007e6d", "created": "2026-10-09T15:13:11.581602Z", "modified": "2026-10-09T15:13:11.581602Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.gpstracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.581602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f95887f-c81e-4956-b85b-4f9a6a5e7752", "created": "2026-10-09T15:13:11.582053Z", "modified": "2026-10-09T15:13:11.582053Z", "relationship_type": "indicates", "source_ref": "indicator--355f77a5-2762-4c9d-b455-0cafa7007e6d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdb9947-7509-440e-876c-01666453d25d", "created": "2026-10-09T15:13:11.582168Z", "modified": "2026-10-09T15:13:11.582168Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.582168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e214ab0c-2cae-4f50-829a-74865385c39f", "created": "2026-10-09T15:13:11.582636Z", "modified": "2026-10-09T15:13:11.582636Z", "relationship_type": "indicates", "source_ref": "indicator--2cdb9947-7509-440e-876c-01666453d25d", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8264e91c-5d1b-4bba-9027-28b8d8822ad1", "created": "2026-10-09T15:13:11.582757Z", "modified": "2026-10-09T15:13:11.582757Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.keylogger2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.582757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfe08f6d-5350-4110-8a35-f169bc58aff0", "created": "2026-10-09T15:13:11.583338Z", "modified": "2026-10-09T15:13:11.583338Z", "relationship_type": "indicates", "source_ref": "indicator--8264e91c-5d1b-4bba-9027-28b8d8822ad1", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553e81fe-fa96-4dbc-bf98-c99ac8a0e43c", "created": "2026-10-09T15:13:11.583464Z", "modified": "2026-10-09T15:13:11.583464Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.klogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.583464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38827ecb-b8cd-42dc-991a-37e19a6ff26e", "created": "2026-10-09T15:13:11.583915Z", "modified": "2026-10-09T15:13:11.583915Z", "relationship_type": "indicates", "source_ref": "indicator--553e81fe-fa96-4dbc-bf98-c99ac8a0e43c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d77642-2814-4b8b-8022-c2a9408c7cb4", "created": "2026-10-09T15:13:11.584035Z", "modified": "2026-10-09T15:13:11.584035Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.screenrecorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.584035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed660f2b-3b63-47f6-a4d1-94c0ffe649ae", "created": "2026-10-09T15:13:11.584513Z", "modified": "2026-10-09T15:13:11.584513Z", "relationship_type": "indicates", "source_ref": "indicator--74d77642-2814-4b8b-8022-c2a9408c7cb4", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dc10ce-beb8-4496-a94b-f9e66b6822b5", "created": "2026-10-09T15:13:11.584637Z", "modified": "2026-10-09T15:13:11.584637Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.urllogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.584637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49e06c10-238d-494c-a9eb-c1d2c971e4c3", "created": "2026-10-09T15:13:11.585093Z", "modified": "2026-10-09T15:13:11.585093Z", "relationship_type": "indicates", "source_ref": "indicator--e5dc10ce-beb8-4496-a94b-f9e66b6822b5", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2c160e-27f0-41dd-b80d-f9c8e86cd7ea", "created": "2026-10-09T15:13:11.585217Z", "modified": "2026-10-09T15:13:11.585217Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9F6F25AB4EB39CA27BBB22465E6FDC1FC3791C85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.585217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fc074e2-362b-4741-bbff-4576ecc0da98", "created": "2026-10-09T15:13:11.585777Z", "modified": "2026-10-09T15:13:11.585777Z", "relationship_type": "indicates", "source_ref": "indicator--8f2c160e-27f0-41dd-b80d-f9c8e86cd7ea", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1eade3-d97f-4982-9ba4-04484ccc9b8c", "created": "2026-10-09T15:13:11.585898Z", "modified": "2026-10-09T15:13:11.585898Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AA0458B6C035E767E61DB7456CBCA89CC4D42090']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.585898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3ec4a70-41e0-45f2-ae4a-3a1e25ddb8d2", "created": "2026-10-09T15:13:11.586447Z", "modified": "2026-10-09T15:13:11.586447Z", "relationship_type": "indicates", "source_ref": "indicator--da1eade3-d97f-4982-9ba4-04484ccc9b8c", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f17b0a-d38d-4d67-bb25-2f208f10d2a7", "created": "2026-10-09T15:13:11.586567Z", "modified": "2026-10-09T15:13:11.586567Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='56BD8EB8A20904E4766D99F6D38D87466C44B114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.586567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--015836ca-60db-4963-b043-3861ca1e1787", "created": "2026-10-09T15:13:11.587105Z", "modified": "2026-10-09T15:13:11.587105Z", "relationship_type": "indicates", "source_ref": "indicator--13f17b0a-d38d-4d67-bb25-2f208f10d2a7", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60083e6-b567-4c3d-844f-e0c09b33bedd", "created": "2026-10-09T15:13:11.587229Z", "modified": "2026-10-09T15:13:11.587229Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='839FBBE6F3DF8153BB6582247DBBC2A42864A87D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.587229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20d1ddb4-6cdd-4b7f-993e-1999ebbc5d59", "created": "2026-10-09T15:13:11.587779Z", "modified": "2026-10-09T15:13:11.587779Z", "relationship_type": "indicates", "source_ref": "indicator--d60083e6-b567-4c3d-844f-e0c09b33bedd", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5746de17-467c-434c-ac03-c3ce2edfd622", "created": "2026-10-09T15:13:11.587901Z", "modified": "2026-10-09T15:13:11.587901Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7BB744C68FD6EB4C49298E7506BED53DC4773FF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.587901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c10b5cf-f2b2-4ac7-b742-ab066e549a6c", "created": "2026-10-09T15:13:11.588458Z", "modified": "2026-10-09T15:13:11.588458Z", "relationship_type": "indicates", "source_ref": "indicator--5746de17-467c-434c-ac03-c3ce2edfd622", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84b9cc7-ff83-41c6-ace1-93e26ef7a091", "created": "2026-10-09T15:13:11.588583Z", "modified": "2026-10-09T15:13:11.588583Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C863D800B89648724CD483911FBF756F36497CC9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.588583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--896071e7-f8da-4eea-8455-7fdf396f067b", "created": "2026-10-09T15:13:11.589229Z", "modified": "2026-10-09T15:13:11.589229Z", "relationship_type": "indicates", "source_ref": "indicator--b84b9cc7-ff83-41c6-ace1-93e26ef7a091", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018e87ba-3915-408d-af48-228980c8c970", "created": "2026-10-09T15:13:11.589366Z", "modified": "2026-10-09T15:13:11.589366Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F57CACB890BE22907709DDE69ED3887F6943734E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.589366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db7848ca-876e-443c-ae14-124a02d1b656", "created": "2026-10-09T15:13:11.589915Z", "modified": "2026-10-09T15:13:11.589915Z", "relationship_type": "indicates", "source_ref": "indicator--018e87ba-3915-408d-af48-228980c8c970", "target_ref": "malware--e8b8fa35-3ebe-42fa-9d43-c64a1065eb0b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b", "created": "2026-10-09T15:13:11.590035Z", "modified": "2026-10-09T15:13:11.590035Z", "name": "AndroidPolice", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0401b3-5e99-4a9f-924c-fe5a06c90320", "created": "2026-10-09T15:13:11.590154Z", "modified": "2026-10-09T15:13:11.590154Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.590154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00379280-aa71-4d77-9856-cb39b0cc638c", "created": "2026-10-09T15:13:11.590649Z", "modified": "2026-10-09T15:13:11.590649Z", "relationship_type": "indicates", "source_ref": "indicator--fe0401b3-5e99-4a9f-924c-fe5a06c90320", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f87854-7ac5-4126-9a68-3257f30cc3f4", "created": "2026-10-09T15:13:11.590771Z", "modified": "2026-10-09T15:13:11.590771Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.590771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fa7f18e-acd8-4d11-a713-cbba69faa732", "created": "2026-10-09T15:13:11.59125Z", "modified": "2026-10-09T15:13:11.59125Z", "relationship_type": "indicates", "source_ref": "indicator--63f87854-7ac5-4126-9a68-3257f30cc3f4", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef13ec4-2490-4674-9eef-5ee505f2791b", "created": "2026-10-09T15:13:11.591381Z", "modified": "2026-10-09T15:13:11.591381Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='andmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.591381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5327c82-e7ba-4166-8760-59d94beb0e0f", "created": "2026-10-09T15:13:11.591848Z", "modified": "2026-10-09T15:13:11.591848Z", "relationship_type": "indicates", "source_ref": "indicator--7ef13ec4-2490-4674-9eef-5ee505f2791b", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fd7f1e-ef91-457b-8dc6-48e2968b6f14", "created": "2026-10-09T15:13:11.59197Z", "modified": "2026-10-09T15:13:11.59197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-apk.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.59197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d432701-d7cd-4652-8b28-d206a7df65a4", "created": "2026-10-09T15:13:11.592477Z", "modified": "2026-10-09T15:13:11.592477Z", "relationship_type": "indicates", "source_ref": "indicator--03fd7f1e-ef91-457b-8dc6-48e2968b6f14", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310a7aee-6a77-4c67-881b-50e16c3c8968", "created": "2026-10-09T15:13:11.592599Z", "modified": "2026-10-09T15:13:11.592599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.592599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7462d5-76c9-48eb-9c60-8477121fdff2", "created": "2026-10-09T15:13:11.593102Z", "modified": "2026-10-09T15:13:11.593102Z", "relationship_type": "indicates", "source_ref": "indicator--310a7aee-6a77-4c67-881b-50e16c3c8968", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7848029f-ac38-4486-b41c-e2ac47e7dae0", "created": "2026-10-09T15:13:11.593222Z", "modified": "2026-10-09T15:13:11.593222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.593222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1492335-052b-4b9d-8ee6-8423df837732", "created": "2026-10-09T15:13:11.593741Z", "modified": "2026-10-09T15:13:11.593741Z", "relationship_type": "indicates", "source_ref": "indicator--7848029f-ac38-4486-b41c-e2ac47e7dae0", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd302536-e623-4449-a67b-42aa447b9406", "created": "2026-10-09T15:13:11.593868Z", "modified": "2026-10-09T15:13:11.593868Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.593868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fe994aa-831d-4143-b212-ac7bf703ffbd", "created": "2026-10-09T15:13:11.594357Z", "modified": "2026-10-09T15:13:11.594357Z", "relationship_type": "indicates", "source_ref": "indicator--fd302536-e623-4449-a67b-42aa447b9406", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6996f6-0ed5-40ea-aaad-e86f4519b607", "created": "2026-10-09T15:13:11.594476Z", "modified": "2026-10-09T15:13:11.594476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.594476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cfdf1de-92be-4c30-8a41-cab5a2c59a79", "created": "2026-10-09T15:13:11.595052Z", "modified": "2026-10-09T15:13:11.595052Z", "relationship_type": "indicates", "source_ref": "indicator--cb6996f6-0ed5-40ea-aaad-e86f4519b607", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b3d64b-05d4-4249-a810-3a07883beb12", "created": "2026-10-09T15:13:11.595177Z", "modified": "2026-10-09T15:13:11.595177Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.595177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--380b7608-50ad-4e7d-b312-fe6fa85a5a07", "created": "2026-10-09T15:13:11.595665Z", "modified": "2026-10-09T15:13:11.595665Z", "relationship_type": "indicates", "source_ref": "indicator--10b3d64b-05d4-4249-a810-3a07883beb12", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc0a631-784e-4c16-8e23-cb2471ce0ad1", "created": "2026-10-09T15:13:11.595789Z", "modified": "2026-10-09T15:13:11.595789Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.595789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61b4a719-1a85-4cd0-8032-6f603943fb86", "created": "2026-10-09T15:13:11.596255Z", "modified": "2026-10-09T15:13:11.596255Z", "relationship_type": "indicates", "source_ref": "indicator--9bc0a631-784e-4c16-8e23-cb2471ce0ad1", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6d40aa-79fe-4f60-a562-569bba14ca75", "created": "2026-10-09T15:13:11.596405Z", "modified": "2026-10-09T15:13:11.596405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.596405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8e35a41-9abd-482f-8909-cddb7974f257", "created": "2026-10-09T15:13:11.596878Z", "modified": "2026-10-09T15:13:11.596878Z", "relationship_type": "indicates", "source_ref": "indicator--5e6d40aa-79fe-4f60-a562-569bba14ca75", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9814e619-2849-4fe3-8a61-95f463442105", "created": "2026-10-09T15:13:11.597Z", "modified": "2026-10-09T15:13:11.597Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45f3a945-d0d5-4a93-99ce-570e550ad228", "created": "2026-10-09T15:13:11.597496Z", "modified": "2026-10-09T15:13:11.597496Z", "relationship_type": "indicates", "source_ref": "indicator--9814e619-2849-4fe3-8a61-95f463442105", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e3f3b7-8c5b-4a24-a399-d4f784921159", "created": "2026-10-09T15:13:11.597618Z", "modified": "2026-10-09T15:13:11.597618Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='droimon20.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.597618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3d09ace-2b1c-4d05-a28c-a258e96d96ce", "created": "2026-10-09T15:13:11.598087Z", "modified": "2026-10-09T15:13:11.598087Z", "relationship_type": "indicates", "source_ref": "indicator--74e3f3b7-8c5b-4a24-a399-d4f784921159", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cbaccb-0d05-4dc8-97ac-ffdcf59b086e", "created": "2026-10-09T15:13:11.598208Z", "modified": "2026-10-09T15:13:11.598208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitor-android.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.598208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b902513c-6701-438b-bdc4-a773d1129128", "created": "2026-10-09T15:13:11.598721Z", "modified": "2026-10-09T15:13:11.598721Z", "relationship_type": "indicates", "source_ref": "indicator--a0cbaccb-0d05-4dc8-97ac-ffdcf59b086e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1c8a08-193a-468e-a41a-1ac585ed3e12", "created": "2026-10-09T15:13:11.598842Z", "modified": "2026-10-09T15:13:11.598842Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.598842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd6a8b58-da13-49ae-888c-afda2bcb1021", "created": "2026-10-09T15:13:11.599341Z", "modified": "2026-10-09T15:13:11.599341Z", "relationship_type": "indicates", "source_ref": "indicator--fe1c8a08-193a-468e-a41a-1ac585ed3e12", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a0c16b-0ba5-4d23-beeb-62828adf5e5c", "created": "2026-10-09T15:13:11.599488Z", "modified": "2026-10-09T15:13:11.599488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.599488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d9c9c7f-4b33-4972-8ca3-0dbc24b360cc", "created": "2026-10-09T15:13:11.599967Z", "modified": "2026-10-09T15:13:11.599967Z", "relationship_type": "indicates", "source_ref": "indicator--75a0c16b-0ba5-4d23-beeb-62828adf5e5c", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d66615-bfc2-4589-af62-3380a1edc9bf", "created": "2026-10-09T15:13:11.600086Z", "modified": "2026-10-09T15:13:11.600086Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.600086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec7fb4d2-9d7f-49b1-9368-f3301026b6bc", "created": "2026-10-09T15:13:11.600677Z", "modified": "2026-10-09T15:13:11.600677Z", "relationship_type": "indicates", "source_ref": "indicator--c7d66615-bfc2-4589-af62-3380a1edc9bf", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbfcab6-8459-4bc2-bc16-4460ae354c8d", "created": "2026-10-09T15:13:11.600801Z", "modified": "2026-10-09T15:13:11.600801Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.600801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a4c2627-34c6-464e-a6b9-382f1d492056", "created": "2026-10-09T15:13:11.601294Z", "modified": "2026-10-09T15:13:11.601294Z", "relationship_type": "indicates", "source_ref": "indicator--4dbfcab6-8459-4bc2-bc16-4460ae354c8d", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943aa939-7bc1-4d59-a582-ea78fd533739", "created": "2026-10-09T15:13:11.601424Z", "modified": "2026-10-09T15:13:11.601424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.601424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63437d09-ade0-4a6d-94d7-e80d3ccb9229", "created": "2026-10-09T15:13:11.601903Z", "modified": "2026-10-09T15:13:11.601903Z", "relationship_type": "indicates", "source_ref": "indicator--943aa939-7bc1-4d59-a582-ea78fd533739", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9372554-8087-49b7-9702-66e3e98a7dd3", "created": "2026-10-09T15:13:11.602023Z", "modified": "2026-10-09T15:13:11.602023Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.602023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfa82e59-9706-4db7-b423-a24a487f6922", "created": "2026-10-09T15:13:11.602516Z", "modified": "2026-10-09T15:13:11.602516Z", "relationship_type": "indicates", "source_ref": "indicator--c9372554-8087-49b7-9702-66e3e98a7dd3", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071737e3-b204-451a-9434-aa89b1646182", "created": "2026-10-09T15:13:11.602637Z", "modified": "2026-10-09T15:13:11.602637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='andmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.602637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50c85a4b-f67b-4849-814a-b6bffd0e04b9", "created": "2026-10-09T15:13:11.6031Z", "modified": "2026-10-09T15:13:11.6031Z", "relationship_type": "indicates", "source_ref": "indicator--071737e3-b204-451a-9434-aa89b1646182", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0083db-0ed5-467e-88df-e395eaa7651a", "created": "2026-10-09T15:13:11.60322Z", "modified": "2026-10-09T15:13:11.60322Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-apk.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.60322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dad6773d-c710-4173-8c6a-a08cbafb4f49", "created": "2026-10-09T15:13:11.603722Z", "modified": "2026-10-09T15:13:11.603722Z", "relationship_type": "indicates", "source_ref": "indicator--8d0083db-0ed5-467e-88df-e395eaa7651a", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1173a5a-2e1a-495b-b770-653bae8b0b03", "created": "2026-10-09T15:13:11.603844Z", "modified": "2026-10-09T15:13:11.603844Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.603844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8a3e273-bb77-47e6-9b69-569863e43ca6", "created": "2026-10-09T15:13:11.604337Z", "modified": "2026-10-09T15:13:11.604337Z", "relationship_type": "indicates", "source_ref": "indicator--d1173a5a-2e1a-495b-b770-653bae8b0b03", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46756b6-9f7c-4d96-b178-f00f516ac233", "created": "2026-10-09T15:13:11.604466Z", "modified": "2026-10-09T15:13:11.604466Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.604466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b434247-a09c-4bcc-9baa-d2a183781a89", "created": "2026-10-09T15:13:11.604957Z", "modified": "2026-10-09T15:13:11.604957Z", "relationship_type": "indicates", "source_ref": "indicator--d46756b6-9f7c-4d96-b178-f00f516ac233", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f10d336-0774-44fa-9312-da0ba9d65a6a", "created": "2026-10-09T15:13:11.605078Z", "modified": "2026-10-09T15:13:11.605078Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.605078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c88effb1-61d3-43bb-8495-5d001b2d4873", "created": "2026-10-09T15:13:11.605578Z", "modified": "2026-10-09T15:13:11.605578Z", "relationship_type": "indicates", "source_ref": "indicator--8f10d336-0774-44fa-9312-da0ba9d65a6a", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ec64bd-6876-4f2b-aed2-8b759caef805", "created": "2026-10-09T15:13:11.605698Z", "modified": "2026-10-09T15:13:11.605698Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.605698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0d8181d-29be-46f8-ab20-4a687b29127f", "created": "2026-10-09T15:13:11.606281Z", "modified": "2026-10-09T15:13:11.606281Z", "relationship_type": "indicates", "source_ref": "indicator--b6ec64bd-6876-4f2b-aed2-8b759caef805", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9ed0fd-51b4-44d8-af73-255aa78b61ef", "created": "2026-10-09T15:13:11.606404Z", "modified": "2026-10-09T15:13:11.606404Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.606404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2f28033-30b0-4fc2-b103-b875ad1f2697", "created": "2026-10-09T15:13:11.606886Z", "modified": "2026-10-09T15:13:11.606886Z", "relationship_type": "indicates", "source_ref": "indicator--4e9ed0fd-51b4-44d8-af73-255aa78b61ef", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535ef78a-85f5-43ea-89f3-e5d353445df0", "created": "2026-10-09T15:13:11.607004Z", "modified": "2026-10-09T15:13:11.607004Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.607004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b2e155f-ae75-4f88-a5e5-dc831b1497e2", "created": "2026-10-09T15:13:11.607479Z", "modified": "2026-10-09T15:13:11.607479Z", "relationship_type": "indicates", "source_ref": "indicator--535ef78a-85f5-43ea-89f3-e5d353445df0", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e2535f-d7a2-45be-854d-5e5e01d7113e", "created": "2026-10-09T15:13:11.607599Z", "modified": "2026-10-09T15:13:11.607599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.607599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f62f50c9-1086-40d2-91f7-0da877462435", "created": "2026-10-09T15:13:11.608056Z", "modified": "2026-10-09T15:13:11.608056Z", "relationship_type": "indicates", "source_ref": "indicator--f0e2535f-d7a2-45be-854d-5e5e01d7113e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e670a84d-8f60-4bd5-b5ff-5492de6c43ca", "created": "2026-10-09T15:13:11.608174Z", "modified": "2026-10-09T15:13:11.608174Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.608174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7ce96b3-c0ac-49ac-a987-0b7b10f00414", "created": "2026-10-09T15:13:11.608656Z", "modified": "2026-10-09T15:13:11.608656Z", "relationship_type": "indicates", "source_ref": "indicator--e670a84d-8f60-4bd5-b5ff-5492de6c43ca", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4862fdab-776a-4bb5-9de7-ed9f6839ebfc", "created": "2026-10-09T15:13:11.608778Z", "modified": "2026-10-09T15:13:11.608778Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.608778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e99e4ab8-ef69-462a-ad1b-5625074515ab", "created": "2026-10-09T15:13:11.609279Z", "modified": "2026-10-09T15:13:11.609279Z", "relationship_type": "indicates", "source_ref": "indicator--4862fdab-776a-4bb5-9de7-ed9f6839ebfc", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526a1de4-3fc8-40a2-a164-f47624e484db", "created": "2026-10-09T15:13:11.609399Z", "modified": "2026-10-09T15:13:11.609399Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='droimon20.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.609399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43dc1e8d-1949-455e-948e-deb9b573bbf0", "created": "2026-10-09T15:13:11.609867Z", "modified": "2026-10-09T15:13:11.609867Z", "relationship_type": "indicates", "source_ref": "indicator--526a1de4-3fc8-40a2-a164-f47624e484db", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4780cdd7-47b5-4435-b04a-019b9143d7fb", "created": "2026-10-09T15:13:11.609984Z", "modified": "2026-10-09T15:13:11.609984Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitor-android.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.609984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13df4900-e612-42f8-aa8a-90acc43a4386", "created": "2026-10-09T15:13:11.61049Z", "modified": "2026-10-09T15:13:11.61049Z", "relationship_type": "indicates", "source_ref": "indicator--4780cdd7-47b5-4435-b04a-019b9143d7fb", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a181d55f-1f86-493c-90be-3dcbbbb1416b", "created": "2026-10-09T15:13:11.610612Z", "modified": "2026-10-09T15:13:11.610612Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.610612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74107f6f-6f0f-4af0-99d8-5fc3afd7bcc3", "created": "2026-10-09T15:13:11.611098Z", "modified": "2026-10-09T15:13:11.611098Z", "relationship_type": "indicates", "source_ref": "indicator--a181d55f-1f86-493c-90be-3dcbbbb1416b", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2c0e09-a77c-4d6c-903b-0f3448b07d7e", "created": "2026-10-09T15:13:11.611219Z", "modified": "2026-10-09T15:13:11.611219Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.611219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49a93daf-b1bb-48a1-8066-b6daed30e8d0", "created": "2026-10-09T15:13:11.611794Z", "modified": "2026-10-09T15:13:11.611794Z", "relationship_type": "indicates", "source_ref": "indicator--cb2c0e09-a77c-4d6c-903b-0f3448b07d7e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d936e05c-b1a8-4c03-83e0-3f722050cf6a", "created": "2026-10-09T15:13:11.611915Z", "modified": "2026-10-09T15:13:11.611915Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.611915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e5df676-cb8e-4f72-ae61-d1f8665c8dfd", "created": "2026-10-09T15:13:11.612403Z", "modified": "2026-10-09T15:13:11.612403Z", "relationship_type": "indicates", "source_ref": "indicator--d936e05c-b1a8-4c03-83e0-3f722050cf6a", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1ce7a1-ed6d-4f39-9cec-23dfcc6b84c9", "created": "2026-10-09T15:13:11.612525Z", "modified": "2026-10-09T15:13:11.612525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a01ec2878fa433c773e0e27636b5ddf14793eb5b33be4abe2cd840281064d6cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.612525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1da1ef4d-ce9d-4588-b56a-fafd58b437bc", "created": "2026-10-09T15:13:11.613137Z", "modified": "2026-10-09T15:13:11.613137Z", "relationship_type": "indicates", "source_ref": "indicator--bb1ce7a1-ed6d-4f39-9cec-23dfcc6b84c9", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0830d5c2-9f52-41f1-a92c-fcc3840d182f", "created": "2026-10-09T15:13:11.613259Z", "modified": "2026-10-09T15:13:11.613259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f830ca263271deb676bc8ba77d7ecc5cd3c0731f7e01b9050fbe6f20066c47b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.613259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--315023b0-c252-4447-93b6-b3844aef2033", "created": "2026-10-09T15:13:11.613863Z", "modified": "2026-10-09T15:13:11.613863Z", "relationship_type": "indicates", "source_ref": "indicator--0830d5c2-9f52-41f1-a92c-fcc3840d182f", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b8c1f7-1ee4-4cce-bbbe-03a336fbf76e", "created": "2026-10-09T15:13:11.613983Z", "modified": "2026-10-09T15:13:11.613983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='270d497ee41c6864c0a48dadc8e5552b236cb3caf75d963c23cc8a446de49464']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.613983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eb35ee6-6f92-4c1d-948b-8a48558e52b4", "created": "2026-10-09T15:13:11.614585Z", "modified": "2026-10-09T15:13:11.614585Z", "relationship_type": "indicates", "source_ref": "indicator--45b8c1f7-1ee4-4cce-bbbe-03a336fbf76e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3ffb47-0cf5-46d9-b129-6d24dabea813", "created": "2026-10-09T15:13:11.614708Z", "modified": "2026-10-09T15:13:11.614708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='265a0c96a6289c3273d24fec06d674ea07c7b729301b9ff3bbf2748c15777e4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.614708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4cc6737-d07c-4621-871c-9eabfb3b441a", "created": "2026-10-09T15:13:11.6153Z", "modified": "2026-10-09T15:13:11.6153Z", "relationship_type": "indicates", "source_ref": "indicator--7c3ffb47-0cf5-46d9-b129-6d24dabea813", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d2d201-c798-4a7e-80e6-4f9a99f223c0", "created": "2026-10-09T15:13:11.615421Z", "modified": "2026-10-09T15:13:11.615421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f5c8ab957c6ff931c48b01a9615f1461b32c07885dfd6353947b7560300b162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.615421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c85506ee-142e-4afd-ad8a-f60756f6f356", "created": "2026-10-09T15:13:11.616002Z", "modified": "2026-10-09T15:13:11.616002Z", "relationship_type": "indicates", "source_ref": "indicator--a3d2d201-c798-4a7e-80e6-4f9a99f223c0", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0853b17e-cf9f-42f4-822d-633af142d216", "created": "2026-10-09T15:13:11.616118Z", "modified": "2026-10-09T15:13:11.616118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36c88f69c322dbd254d3bc450233c0cb4da2d9ad9e612d77aa11187020275129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.616118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fab8e06c-3470-4abe-bdc9-7edd5c5cdef9", "created": "2026-10-09T15:13:11.61671Z", "modified": "2026-10-09T15:13:11.61671Z", "relationship_type": "indicates", "source_ref": "indicator--0853b17e-cf9f-42f4-822d-633af142d216", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a740a03b-f8fd-4406-8c88-0d7b66dcf56e", "created": "2026-10-09T15:13:11.61683Z", "modified": "2026-10-09T15:13:11.61683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2833508b73244a5c6be1d0f047037951edf3f50719bbdcc9e3fa593211061b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.61683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce898891-b0fa-4a0c-9add-7a84dfa818ef", "created": "2026-10-09T15:13:11.617432Z", "modified": "2026-10-09T15:13:11.617432Z", "relationship_type": "indicates", "source_ref": "indicator--a740a03b-f8fd-4406-8c88-0d7b66dcf56e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa495733-ad3b-454b-a9be-0bcceddad696", "created": "2026-10-09T15:13:11.617557Z", "modified": "2026-10-09T15:13:11.617557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='081b0b7663883932114e0007fcce08c1460375e38568149c5f635cf075af6a88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.617557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70a20ef8-dd22-45d0-ae15-94e79c46d67a", "created": "2026-10-09T15:13:11.618243Z", "modified": "2026-10-09T15:13:11.618243Z", "relationship_type": "indicates", "source_ref": "indicator--fa495733-ad3b-454b-a9be-0bcceddad696", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c672367-d360-443d-86ff-10cd9eadfd12", "created": "2026-10-09T15:13:11.618378Z", "modified": "2026-10-09T15:13:11.618378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b38232db89ffc202f41fee493a84b056f1115339439efb6635d170e05bfa85b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.618378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ae43e0c-8f93-444c-8c93-7c0bb590745d", "created": "2026-10-09T15:13:11.618963Z", "modified": "2026-10-09T15:13:11.618963Z", "relationship_type": "indicates", "source_ref": "indicator--6c672367-d360-443d-86ff-10cd9eadfd12", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d0316-5e73-4662-ad99-5a67cfce0305", "created": "2026-10-09T15:13:11.619086Z", "modified": "2026-10-09T15:13:11.619086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e17feb1ff96b3b2f5992f29e008b5581b44d3c16a1c742cd93d15971a587ff4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.619086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25cd8c48-94bc-4b82-b5c5-972cc270d95f", "created": "2026-10-09T15:13:11.61968Z", "modified": "2026-10-09T15:13:11.61968Z", "relationship_type": "indicates", "source_ref": "indicator--d70d0316-5e73-4662-ad99-5a67cfce0305", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f65d929-36d4-468b-943f-6242ed1f3b8c", "created": "2026-10-09T15:13:11.619803Z", "modified": "2026-10-09T15:13:11.619803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b9ce40a5db59d489387d2f0cf3ef0a058b5a7cccb1dfeca54e4d1f30e46dd1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.619803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b643201b-1ee4-4186-89f7-8e7023850c32", "created": "2026-10-09T15:13:11.620395Z", "modified": "2026-10-09T15:13:11.620395Z", "relationship_type": "indicates", "source_ref": "indicator--6f65d929-36d4-468b-943f-6242ed1f3b8c", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00cd505-b5de-4e32-aa4c-a3043eb39361", "created": "2026-10-09T15:13:11.620517Z", "modified": "2026-10-09T15:13:11.620517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9a177389a41397c1bdc0f772caf9da6ec201b0a8ec72a0314dd1c936093e708']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.620517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8156c246-ba79-4912-9cd9-85b7799b0057", "created": "2026-10-09T15:13:11.621096Z", "modified": "2026-10-09T15:13:11.621096Z", "relationship_type": "indicates", "source_ref": "indicator--b00cd505-b5de-4e32-aa4c-a3043eb39361", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0424cdc9-f994-43de-b3df-c17943440f36", "created": "2026-10-09T15:13:11.621213Z", "modified": "2026-10-09T15:13:11.621213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69260764e600edd5fbcde910809edea7d4f3f07840464b357a38ddaf2b73922d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.621213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36c867cb-ef2f-4a45-a49b-d9ac584a70f0", "created": "2026-10-09T15:13:11.621809Z", "modified": "2026-10-09T15:13:11.621809Z", "relationship_type": "indicates", "source_ref": "indicator--0424cdc9-f994-43de-b3df-c17943440f36", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e727a6f3-6647-4afd-a35f-859b4ec78be2", "created": "2026-10-09T15:13:11.621937Z", "modified": "2026-10-09T15:13:11.621937Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34bf0057814bd39e2f4a2f1a7c5215753404e7268c28ea912278d0a144b68418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.621937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43e05707-171a-4999-b8ce-16afdfc12d1f", "created": "2026-10-09T15:13:11.622534Z", "modified": "2026-10-09T15:13:11.622534Z", "relationship_type": "indicates", "source_ref": "indicator--e727a6f3-6647-4afd-a35f-859b4ec78be2", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1066925b-2d1e-4f6f-a0ad-06f4efd8b6fd", "created": "2026-10-09T15:13:11.622656Z", "modified": "2026-10-09T15:13:11.622656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d8b5e70442a337f546e149aa4393ec8f561daa323fb17c3b9c3faa8071a6639']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.622656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29b8d355-8b8c-4110-a1a8-e50d57672b38", "created": "2026-10-09T15:13:11.623245Z", "modified": "2026-10-09T15:13:11.623245Z", "relationship_type": "indicates", "source_ref": "indicator--1066925b-2d1e-4f6f-a0ad-06f4efd8b6fd", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cff349-543a-45b5-800c-ed49a11c6528", "created": "2026-10-09T15:13:11.62338Z", "modified": "2026-10-09T15:13:11.62338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9e95e417b98d02bcb5544051d03e01e047c048cab9ee3c2241c820b36ba6772']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.62338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75da5705-91e1-4afb-bf7f-a359bbf86f1e", "created": "2026-10-09T15:13:11.623975Z", "modified": "2026-10-09T15:13:11.623975Z", "relationship_type": "indicates", "source_ref": "indicator--43cff349-543a-45b5-800c-ed49a11c6528", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc61fa90-4ea0-44f7-86c0-f6d3bb9dc1ef", "created": "2026-10-09T15:13:11.624103Z", "modified": "2026-10-09T15:13:11.624103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a311e0267409c0a8035d8b030eb97ce6ec7d750f231ed394db595aeee528c2fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.624103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75e2854f-9599-42cf-b7a1-188a728eb5f3", "created": "2026-10-09T15:13:11.624799Z", "modified": "2026-10-09T15:13:11.624799Z", "relationship_type": "indicates", "source_ref": "indicator--fc61fa90-4ea0-44f7-86c0-f6d3bb9dc1ef", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9f415a-fac3-4050-8613-e1640c9d5e85", "created": "2026-10-09T15:13:11.624921Z", "modified": "2026-10-09T15:13:11.624921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b40adeb96e1a73e51ff035ae28b26dfe9e4376f49bf57d3d19d44a8bbf91746']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.624921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--052059d5-a122-4648-8a5e-624f92a860d9", "created": "2026-10-09T15:13:11.625513Z", "modified": "2026-10-09T15:13:11.625513Z", "relationship_type": "indicates", "source_ref": "indicator--0b9f415a-fac3-4050-8613-e1640c9d5e85", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc618a50-6713-46dc-8137-cdd6a9ffc548", "created": "2026-10-09T15:13:11.625638Z", "modified": "2026-10-09T15:13:11.625638Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e619e7596d747b075a50380ac7face47632ab0fa4d12cafb3fc8781f5bd396d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.625638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9265068-f6d9-429f-b9ad-8b2d28ec0ded", "created": "2026-10-09T15:13:11.626221Z", "modified": "2026-10-09T15:13:11.626221Z", "relationship_type": "indicates", "source_ref": "indicator--bc618a50-6713-46dc-8137-cdd6a9ffc548", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043efced-3701-44b0-bbb5-b73ee664be97", "created": "2026-10-09T15:13:11.626354Z", "modified": "2026-10-09T15:13:11.626354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='450173140bbdc6f8ba40d8e2c29b42a93c189c34c19829881097e8f0d56ac760']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.626354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4abeefd-bb57-4e23-a0a9-72a3e95d4e07", "created": "2026-10-09T15:13:11.626949Z", "modified": "2026-10-09T15:13:11.626949Z", "relationship_type": "indicates", "source_ref": "indicator--043efced-3701-44b0-bbb5-b73ee664be97", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230a49c1-8f60-467b-944b-22f4ebfd9ad4", "created": "2026-10-09T15:13:11.62707Z", "modified": "2026-10-09T15:13:11.62707Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='afs.hbmoczc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.62707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8803253-b0a0-42d9-add1-b332a7143071", "created": "2026-10-09T15:13:11.627538Z", "modified": "2026-10-09T15:13:11.627538Z", "relationship_type": "indicates", "source_ref": "indicator--230a49c1-8f60-467b-944b-22f4ebfd9ad4", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a613cec4-ceb6-419c-a054-5062b5d5cbfa", "created": "2026-10-09T15:13:11.62766Z", "modified": "2026-10-09T15:13:11.62766Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='bv.vemzye']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.62766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b667ecc-fe15-4a0a-9c3f-824e03234672", "created": "2026-10-09T15:13:11.628105Z", "modified": "2026-10-09T15:13:11.628105Z", "relationship_type": "indicates", "source_ref": "indicator--a613cec4-ceb6-419c-a054-5062b5d5cbfa", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dadb0b-b5da-4bf5-87a9-74f578f62063", "created": "2026-10-09T15:13:11.628221Z", "modified": "2026-10-09T15:13:11.628221Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.amon']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.628221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50405e77-bf5b-4b93-a747-3d133acc3ff3", "created": "2026-10-09T15:13:11.62877Z", "modified": "2026-10-09T15:13:11.62877Z", "relationship_type": "indicates", "source_ref": "indicator--68dadb0b-b5da-4bf5-87a9-74f578f62063", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64c8530-4c61-4023-b1ec-0badf0c9ffae", "created": "2026-10-09T15:13:11.628897Z", "modified": "2026-10-09T15:13:11.628897Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.monitorchecker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.628897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d54a6a9-2b06-4cf0-a98d-b4670831758e", "created": "2026-10-09T15:13:11.629368Z", "modified": "2026-10-09T15:13:11.629368Z", "relationship_type": "indicates", "source_ref": "indicator--e64c8530-4c61-4023-b1ec-0badf0c9ffae", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce18e044-2003-427d-9d5b-8e2e6243813c", "created": "2026-10-09T15:13:11.629495Z", "modified": "2026-10-09T15:13:11.629495Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='fod.loqpf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.629495Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f687f771-f125-4c5b-8256-e207d149019a", "created": "2026-10-09T15:13:11.629943Z", "modified": "2026-10-09T15:13:11.629943Z", "relationship_type": "indicates", "source_ref": "indicator--ce18e044-2003-427d-9d5b-8e2e6243813c", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcfb7d0-b936-4678-a356-c0a1461cc2ed", "created": "2026-10-09T15:13:11.630059Z", "modified": "2026-10-09T15:13:11.630059Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ifk.ghumlh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.630059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1f734a5-54c0-414c-b08e-c9311ede2b55", "created": "2026-10-09T15:13:11.630622Z", "modified": "2026-10-09T15:13:11.630622Z", "relationship_type": "indicates", "source_ref": "indicator--9fcfb7d0-b936-4678-a356-c0a1461cc2ed", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--831c2b4f-8159-4fbe-a3ec-0e38f3761a2e", "created": "2026-10-09T15:13:11.630749Z", "modified": "2026-10-09T15:13:11.630749Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mhu.bylbcwc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.630749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac877f2d-bb7c-4eb7-af2e-70c36203e9e8", "created": "2026-10-09T15:13:11.631195Z", "modified": "2026-10-09T15:13:11.631195Z", "relationship_type": "indicates", "source_ref": "indicator--831c2b4f-8159-4fbe-a3ec-0e38f3761a2e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67eaa0e-09d8-465a-8e52-c16a7b4a3be5", "created": "2026-10-09T15:13:11.631324Z", "modified": "2026-10-09T15:13:11.631324Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='oo.ptkqyawh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.631324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db85f924-fcde-4e26-b911-84a16d2b0e2e", "created": "2026-10-09T15:13:11.63177Z", "modified": "2026-10-09T15:13:11.63177Z", "relationship_type": "indicates", "source_ref": "indicator--f67eaa0e-09d8-465a-8e52-c16a7b4a3be5", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2f8d22-a28a-4158-ad8e-70e3e1534685", "created": "2026-10-09T15:13:11.631895Z", "modified": "2026-10-09T15:13:11.631895Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='sy.slvzccd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.631895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f37331a-a90c-4ef6-a940-db8b85e87613", "created": "2026-10-09T15:13:11.63235Z", "modified": "2026-10-09T15:13:11.63235Z", "relationship_type": "indicates", "source_ref": "indicator--1d2f8d22-a28a-4158-ad8e-70e3e1534685", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db91fd3-3951-41d9-a86c-97a59b7835eb", "created": "2026-10-09T15:13:11.632473Z", "modified": "2026-10-09T15:13:11.632473Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='vmf.uxytqgrl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.632473Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e89c9f4d-7540-415b-b61a-5c3ccfd46c91", "created": "2026-10-09T15:13:11.632919Z", "modified": "2026-10-09T15:13:11.632919Z", "relationship_type": "indicates", "source_ref": "indicator--8db91fd3-3951-41d9-a86c-97a59b7835eb", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d592902d-4317-46cb-9a68-d026845923b5", "created": "2026-10-09T15:13:11.633037Z", "modified": "2026-10-09T15:13:11.633037Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='vn.ehkfqgvn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.633037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb867e0f-8d8d-4b5e-8331-281b30b89161", "created": "2026-10-09T15:13:11.633489Z", "modified": "2026-10-09T15:13:11.633489Z", "relationship_type": "indicates", "source_ref": "indicator--d592902d-4317-46cb-9a68-d026845923b5", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d8b138-9286-49d8-84a6-d36ad50d861d", "created": "2026-10-09T15:13:11.633609Z", "modified": "2026-10-09T15:13:11.633609Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='yr.tubjypbl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.633609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--747afa41-0807-4e42-8f28-0c354e6ddc40", "created": "2026-10-09T15:13:11.634052Z", "modified": "2026-10-09T15:13:11.634052Z", "relationship_type": "indicates", "source_ref": "indicator--c9d8b138-9286-49d8-84a6-d36ad50d861d", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e96cb13-e6ca-463a-b5d8-32348ae95d3d", "created": "2026-10-09T15:13:11.634168Z", "modified": "2026-10-09T15:13:11.634168Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dromon']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.634168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d38db443-d210-44d0-bd62-daf982831446", "created": "2026-10-09T15:13:11.634628Z", "modified": "2026-10-09T15:13:11.634628Z", "relationship_type": "indicates", "source_ref": "indicator--9e96cb13-e6ca-463a-b5d8-32348ae95d3d", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c2566f-5cdb-401a-ac6a-84b47f29af8d", "created": "2026-10-09T15:13:11.634747Z", "modified": "2026-10-09T15:13:11.634747Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='kenkbltcf.pwpwkvdwmjk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.634747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73d63cd1-7012-45c9-9a8f-e5a46e626154", "created": "2026-10-09T15:13:11.635207Z", "modified": "2026-10-09T15:13:11.635207Z", "relationship_type": "indicates", "source_ref": "indicator--58c2566f-5cdb-401a-ac6a-84b47f29af8d", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d78f2e-1dee-4bd2-a104-23bbccaf2e9c", "created": "2026-10-09T15:13:11.635335Z", "modified": "2026-10-09T15:13:11.635335Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='iiw.orqjtwbkx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.635335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2a78460-084b-43a7-839d-11dc9cce2168", "created": "2026-10-09T15:13:11.635879Z", "modified": "2026-10-09T15:13:11.635879Z", "relationship_type": "indicates", "source_ref": "indicator--e1d78f2e-1dee-4bd2-a104-23bbccaf2e9c", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105e4bf6-cae1-4a4d-b180-11a1804885de", "created": "2026-10-09T15:13:11.636003Z", "modified": "2026-10-09T15:13:11.636003Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='efexmsz.mzuooelftl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.636003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36338cf3-0982-4fb6-b16d-c03b8d3902f3", "created": "2026-10-09T15:13:11.636473Z", "modified": "2026-10-09T15:13:11.636473Z", "relationship_type": "indicates", "source_ref": "indicator--105e4bf6-cae1-4a4d-b180-11a1804885de", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f10ab1f-e697-4fc4-9c0f-df2a9c71739a", "created": "2026-10-09T15:13:11.636594Z", "modified": "2026-10-09T15:13:11.636594Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='fka.ugsonrqogw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.636594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--468fae7b-b798-4971-86aa-db79c1234626", "created": "2026-10-09T15:13:11.637051Z", "modified": "2026-10-09T15:13:11.637051Z", "relationship_type": "indicates", "source_ref": "indicator--6f10ab1f-e697-4fc4-9c0f-df2a9c71739a", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1d9222-0cc0-470b-a2fe-7a46c812f4df", "created": "2026-10-09T15:13:11.637171Z", "modified": "2026-10-09T15:13:11.637171Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4591BD0E4CBE86FD7510F1427BA6538BB269AE4D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.637171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--caeaf709-a885-4238-87b4-a14ff3ecf996", "created": "2026-10-09T15:13:11.637726Z", "modified": "2026-10-09T15:13:11.637726Z", "relationship_type": "indicates", "source_ref": "indicator--0d1d9222-0cc0-470b-a2fe-7a46c812f4df", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734c6523-5f18-467e-86f9-cc65298f4703", "created": "2026-10-09T15:13:11.637846Z", "modified": "2026-10-09T15:13:11.637846Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1CD94B411B5D4D2F5F525D775876FF0993B4B716']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.637846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a499639-270b-48bc-9934-d1d4befd8a60", "created": "2026-10-09T15:13:11.638399Z", "modified": "2026-10-09T15:13:11.638399Z", "relationship_type": "indicates", "source_ref": "indicator--734c6523-5f18-467e-86f9-cc65298f4703", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e747eb84-2a35-42f1-9fa0-bae251ca48a2", "created": "2026-10-09T15:13:11.638528Z", "modified": "2026-10-09T15:13:11.638528Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5C77395F77E17F293CC8C4E3E1FDD48296EE4B28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.638528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff525cdc-f9ab-4c27-8310-929613c4100f", "created": "2026-10-09T15:13:11.63907Z", "modified": "2026-10-09T15:13:11.63907Z", "relationship_type": "indicates", "source_ref": "indicator--e747eb84-2a35-42f1-9fa0-bae251ca48a2", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f428f9-493c-4a66-9ed5-45989af24d3e", "created": "2026-10-09T15:13:11.639193Z", "modified": "2026-10-09T15:13:11.639193Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6A610D0211E543113EFE1A82CC4D270B6A45C526']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.639193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db4d1ae6-8f89-4196-bbb5-9f1accf766d9", "created": "2026-10-09T15:13:11.639761Z", "modified": "2026-10-09T15:13:11.639761Z", "relationship_type": "indicates", "source_ref": "indicator--10f428f9-493c-4a66-9ed5-45989af24d3e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4ce852-7287-407e-b622-5b894f15b484", "created": "2026-10-09T15:13:11.639886Z", "modified": "2026-10-09T15:13:11.639886Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6CC6FB667F4D178DF4E9111FE96BE9AEAEE485EF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.639886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d69471f-94d1-4d12-91c3-77264b4bf0e7", "created": "2026-10-09T15:13:11.640446Z", "modified": "2026-10-09T15:13:11.640446Z", "relationship_type": "indicates", "source_ref": "indicator--cf4ce852-7287-407e-b622-5b894f15b484", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16c7674-2f4a-44f8-9cd8-5fb7e77a6255", "created": "2026-10-09T15:13:11.640567Z", "modified": "2026-10-09T15:13:11.640567Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='85A4C4F357A99888725862C351119FBB12C45695']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.640567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d263990-33dc-4e5e-bd12-aa96272fe33a", "created": "2026-10-09T15:13:11.641117Z", "modified": "2026-10-09T15:13:11.641117Z", "relationship_type": "indicates", "source_ref": "indicator--e16c7674-2f4a-44f8-9cd8-5fb7e77a6255", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1aaa1a-a5db-44b7-bded-b49955a16bc9", "created": "2026-10-09T15:13:11.641234Z", "modified": "2026-10-09T15:13:11.641234Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='970B463F5103B36326AF8C8349A4106F6932835B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.641234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdc7234f-7eff-479c-91c5-58f420048b21", "created": "2026-10-09T15:13:11.641885Z", "modified": "2026-10-09T15:13:11.641885Z", "relationship_type": "indicates", "source_ref": "indicator--3c1aaa1a-a5db-44b7-bded-b49955a16bc9", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a532506-cdd4-4a0e-aebf-53ec4b2ecd44", "created": "2026-10-09T15:13:11.64201Z", "modified": "2026-10-09T15:13:11.64201Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B57FAAB701E26B4C92972442D3A428881E18441A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.64201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a9ed06c-8c4a-4d6f-a41f-58bdaab03414", "created": "2026-10-09T15:13:11.642562Z", "modified": "2026-10-09T15:13:11.642562Z", "relationship_type": "indicates", "source_ref": "indicator--9a532506-cdd4-4a0e-aebf-53ec4b2ecd44", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2205d5-22ad-49e6-a861-05a8d678867b", "created": "2026-10-09T15:13:11.642684Z", "modified": "2026-10-09T15:13:11.642684Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E0FCD3E782FB859F7388E4F44A44A5D694114968']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.642684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1c14500-44bd-4547-9cf5-2e86c00262c1", "created": "2026-10-09T15:13:11.643222Z", "modified": "2026-10-09T15:13:11.643222Z", "relationship_type": "indicates", "source_ref": "indicator--de2205d5-22ad-49e6-a861-05a8d678867b", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1443a7d7-740b-43f4-9c8c-6a2bd191f747", "created": "2026-10-09T15:13:11.643354Z", "modified": "2026-10-09T15:13:11.643354Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EAD44242A3C0A73DEF7976C56AC10A4530E8F67A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.643354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4c27967-c841-42f2-8333-f6025e4ab11e", "created": "2026-10-09T15:13:11.643896Z", "modified": "2026-10-09T15:13:11.643896Z", "relationship_type": "indicates", "source_ref": "indicator--1443a7d7-740b-43f4-9c8c-6a2bd191f747", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbf80b6-d6f4-42bb-ae0c-d16c3853fdd6", "created": "2026-10-09T15:13:11.644014Z", "modified": "2026-10-09T15:13:11.644014Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='ED5BADBC20B1B027F5858D29DAFBF66535C46DB9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.644014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6014fd2d-9ebf-4332-82eb-3edaef3ed49a", "created": "2026-10-09T15:13:11.644574Z", "modified": "2026-10-09T15:13:11.644574Z", "relationship_type": "indicates", "source_ref": "indicator--adbf80b6-d6f4-42bb-ae0c-d16c3853fdd6", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b33a6b-faa3-47ff-9b5e-009e57ec77ba", "created": "2026-10-09T15:13:11.644698Z", "modified": "2026-10-09T15:13:11.644698Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='339B5C1746A1CDEA945D51BBE967C1320AE73CC4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.644698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b16416e6-d765-4e6d-9b03-61a65b223afa", "created": "2026-10-09T15:13:11.645251Z", "modified": "2026-10-09T15:13:11.645251Z", "relationship_type": "indicates", "source_ref": "indicator--65b33a6b-faa3-47ff-9b5e-009e57ec77ba", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4250f6-91c5-405f-ae41-c9ea0549e64e", "created": "2026-10-09T15:13:11.645385Z", "modified": "2026-10-09T15:13:11.645385Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BEF28CC19ADFBEADC95137A2BD5035B6046666E9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.645385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a49012b-066e-4a3d-8484-dc496edaf0fd", "created": "2026-10-09T15:13:11.645937Z", "modified": "2026-10-09T15:13:11.645937Z", "relationship_type": "indicates", "source_ref": "indicator--fa4250f6-91c5-405f-ae41-c9ea0549e64e", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c18a186-f199-4453-91ac-1ad95e390f47", "created": "2026-10-09T15:13:11.646055Z", "modified": "2026-10-09T15:13:11.646055Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='16226330EBB138A5D47913151827A86567AD9CD4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.646055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d10a1acd-8da7-4e23-90e2-4e806e14be96", "created": "2026-10-09T15:13:11.646601Z", "modified": "2026-10-09T15:13:11.646601Z", "relationship_type": "indicates", "source_ref": "indicator--3c18a186-f199-4453-91ac-1ad95e390f47", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4420900-dad8-4f71-a2ad-c0d998a83061", "created": "2026-10-09T15:13:11.646726Z", "modified": "2026-10-09T15:13:11.646726Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3BA583488F36C708025C078D9EB4BEDC3918B098']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.646726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d20b5353-b1be-4af8-b1b3-d3d4941067a0", "created": "2026-10-09T15:13:11.647284Z", "modified": "2026-10-09T15:13:11.647284Z", "relationship_type": "indicates", "source_ref": "indicator--a4420900-dad8-4f71-a2ad-c0d998a83061", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3b9a9c-aa07-4cbf-b381-acfb9f6038fb", "created": "2026-10-09T15:13:11.64741Z", "modified": "2026-10-09T15:13:11.64741Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DDE822BAF53EF55C49096E866A995464CECB8B1C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.64741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b8efec4-8102-448e-b706-ce69b4f2319d", "created": "2026-10-09T15:13:11.648403Z", "modified": "2026-10-09T15:13:11.648403Z", "relationship_type": "indicates", "source_ref": "indicator--4a3b9a9c-aa07-4cbf-b381-acfb9f6038fb", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9b3fa2-9750-4d47-b905-3bde1d658611", "created": "2026-10-09T15:13:11.648537Z", "modified": "2026-10-09T15:13:11.648537Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E6F85CAB3903304DC16197B7EDA8F67ED6D65A1A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.648537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52413d1c-e607-4edc-a0c0-e23bf0f47aa3", "created": "2026-10-09T15:13:11.649086Z", "modified": "2026-10-09T15:13:11.649086Z", "relationship_type": "indicates", "source_ref": "indicator--4b9b3fa2-9750-4d47-b905-3bde1d658611", "target_ref": "malware--0c2681b4-cb68-4c42-83eb-98d7ceacab4b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa", "created": "2026-10-09T15:13:11.649208Z", "modified": "2026-10-09T15:13:11.649208Z", "name": "FindMyPhone", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc28b64-57dd-433c-9b82-c7e3aabecdfc", "created": "2026-10-09T15:13:11.649343Z", "modified": "2026-10-09T15:13:11.649343Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='find-my-phone-prod.herokuapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.649343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f97a850-1de3-438b-8d89-a0221179ccf6", "created": "2026-10-09T15:13:11.649843Z", "modified": "2026-10-09T15:13:11.649843Z", "relationship_type": "indicates", "source_ref": "indicator--0dc28b64-57dd-433c-9b82-c7e3aabecdfc", "target_ref": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530baf13-b292-4c91-a175-bd62408c5945", "created": "2026-10-09T15:13:11.649964Z", "modified": "2026-10-09T15:13:11.649964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='findmyphone.mangobird.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.649964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--588c5cdf-e9e5-40ff-b3a2-4b2acfcc15a2", "created": "2026-10-09T15:13:11.650472Z", "modified": "2026-10-09T15:13:11.650472Z", "relationship_type": "indicates", "source_ref": "indicator--530baf13-b292-4c91-a175-bd62408c5945", "target_ref": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9205adc6-3b61-423e-9886-f3ff0705e8f8", "created": "2026-10-09T15:13:11.6506Z", "modified": "2026-10-09T15:13:11.6506Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='find-myphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.6506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8a9f3c8-d3a6-48bb-9dcc-e08412264e8e", "created": "2026-10-09T15:13:11.651076Z", "modified": "2026-10-09T15:13:11.651076Z", "relationship_type": "indicates", "source_ref": "indicator--9205adc6-3b61-423e-9886-f3ff0705e8f8", "target_ref": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ae3b47-1669-49fa-a77e-75f92f45375d", "created": "2026-10-09T15:13:11.651201Z", "modified": "2026-10-09T15:13:11.651201Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mango.findmyphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.651201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33851e90-c278-4880-883c-03dcbb701fa2", "created": "2026-10-09T15:13:11.651676Z", "modified": "2026-10-09T15:13:11.651676Z", "relationship_type": "indicates", "source_ref": "indicator--b6ae3b47-1669-49fa-a77e-75f92f45375d", "target_ref": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0965b7c-99c2-4aac-810b-9036d19fd551", "created": "2026-10-09T15:13:11.651797Z", "modified": "2026-10-09T15:13:11.651797Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mango.findmyphone2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.651797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3885349-157a-4b2c-9c60-fed47cacd127", "created": "2026-10-09T15:13:11.652275Z", "modified": "2026-10-09T15:13:11.652275Z", "relationship_type": "indicates", "source_ref": "indicator--b0965b7c-99c2-4aac-810b-9036d19fd551", "target_ref": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b633ac7-7def-4054-b837-9e120766846d", "created": "2026-10-09T15:13:11.652397Z", "modified": "2026-10-09T15:13:11.652397Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mango.findmyphone3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.652397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37c86946-eefa-47f1-b1fb-db576f0555a8", "created": "2026-10-09T15:13:11.652858Z", "modified": "2026-10-09T15:13:11.652858Z", "relationship_type": "indicates", "source_ref": "indicator--8b633ac7-7def-4054-b837-9e120766846d", "target_ref": "malware--ec019f70-29ee-4041-b41a-14107aeb13fa"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a", "created": "2026-10-09T15:13:11.652975Z", "modified": "2026-10-09T15:13:11.652975Z", "name": "Bulgok", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b6c7ac-f040-4b03-9867-1a86b31fa582", "created": "2026-10-09T15:13:11.653087Z", "modified": "2026-10-09T15:13:11.653087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c-phone.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.653087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f00bffd6-cbc4-4d96-85fd-c5d82fc477d0", "created": "2026-10-09T15:13:11.653567Z", "modified": "2026-10-09T15:13:11.653567Z", "relationship_type": "indicates", "source_ref": "indicator--e7b6c7ac-f040-4b03-9867-1a86b31fa582", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b648a3-c669-4614-862a-6f3d1cd73dd8", "created": "2026-10-09T15:13:11.653687Z", "modified": "2026-10-09T15:13:11.653687Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='control-phone-a05a3.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.653687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ec347b3-5ef3-4c80-a7b4-d766f26ba143", "created": "2026-10-09T15:13:11.654296Z", "modified": "2026-10-09T15:13:11.654296Z", "relationship_type": "indicates", "source_ref": "indicator--05b648a3-c669-4614-862a-6f3d1cd73dd8", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d5c9ac-bb66-4e98-b141-64b4347f5468", "created": "2026-10-09T15:13:11.654423Z", "modified": "2026-10-09T15:13:11.654423Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='q95294fs.beget.tech']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.654423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57b2daf0-8fd8-4722-bfe8-71d8563c1be6", "created": "2026-10-09T15:13:11.654915Z", "modified": "2026-10-09T15:13:11.654915Z", "relationship_type": "indicates", "source_ref": "indicator--f4d5c9ac-bb66-4e98-b141-64b4347f5468", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab12e5d-b639-4917-9119-795567d9063d", "created": "2026-10-09T15:13:11.65504Z", "modified": "2026-10-09T15:13:11.65504Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c-phone.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.65504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a7f27a1-fa7c-4c82-9ab1-5f615b6f78cf", "created": "2026-10-09T15:13:11.655516Z", "modified": "2026-10-09T15:13:11.655516Z", "relationship_type": "indicates", "source_ref": "indicator--5ab12e5d-b639-4917-9119-795567d9063d", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d490be6-f178-4e5f-9275-07d5c29a615d", "created": "2026-10-09T15:13:11.655665Z", "modified": "2026-10-09T15:13:11.655665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db0e8d833e9c1f09e240df7add910e526ed7e32a48c4a3add8921bd90dbfbe77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.655665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acda2ee3-0eb0-4488-a921-9aca0262cd43", "created": "2026-10-09T15:13:11.656259Z", "modified": "2026-10-09T15:13:11.656259Z", "relationship_type": "indicates", "source_ref": "indicator--7d490be6-f178-4e5f-9275-07d5c29a615d", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f43ce2-beed-40ec-8ad6-e0e4e9501a4a", "created": "2026-10-09T15:13:11.656396Z", "modified": "2026-10-09T15:13:11.656396Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bulgakov.controlphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.656396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--035e9704-e5fc-4b32-9b07-2719031d5ddc", "created": "2026-10-09T15:13:11.65687Z", "modified": "2026-10-09T15:13:11.65687Z", "relationship_type": "indicates", "source_ref": "indicator--96f43ce2-beed-40ec-8ad6-e0e4e9501a4a", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c9acf2-9b46-416f-bee2-17b9d57e7f30", "created": "2026-10-09T15:13:11.656988Z", "modified": "2026-10-09T15:13:11.656988Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bulgakov.bug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.656988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85dc9a6f-1f56-4963-97b9-8e77024f964e", "created": "2026-10-09T15:13:11.657447Z", "modified": "2026-10-09T15:13:11.657447Z", "relationship_type": "indicates", "source_ref": "indicator--f4c9acf2-9b46-416f-bee2-17b9d57e7f30", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bd8ab2-ad5d-4ba3-b2bd-584bbd8b5f86", "created": "2026-10-09T15:13:11.657566Z", "modified": "2026-10-09T15:13:11.657566Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bul.b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.657566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--616e528b-6d9e-43e1-9872-274d44705cab", "created": "2026-10-09T15:13:11.65801Z", "modified": "2026-10-09T15:13:11.65801Z", "relationship_type": "indicates", "source_ref": "indicator--c2bd8ab2-ad5d-4ba3-b2bd-584bbd8b5f86", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa5dee3-fc05-421d-be9c-5342e10a8708", "created": "2026-10-09T15:13:11.65813Z", "modified": "2026-10-09T15:13:11.65813Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='71AD1F579C3DCF32AA1E00E02245D359F80C260B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.65813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f9defa2-1304-4fb5-aa77-d24c7fd71bd6", "created": "2026-10-09T15:13:11.658682Z", "modified": "2026-10-09T15:13:11.658682Z", "relationship_type": "indicates", "source_ref": "indicator--3aa5dee3-fc05-421d-be9c-5342e10a8708", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd5b021-17ce-4358-b26f-681aa5e7c2bc", "created": "2026-10-09T15:13:11.658804Z", "modified": "2026-10-09T15:13:11.658804Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FD5E1BBC94E5609F366DD4816C975C1CF4003F40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.658804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62d6c169-eec4-4bd8-a134-24d4e091fd2c", "created": "2026-10-09T15:13:11.659361Z", "modified": "2026-10-09T15:13:11.659361Z", "relationship_type": "indicates", "source_ref": "indicator--cbd5b021-17ce-4358-b26f-681aa5e7c2bc", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f84797-58d1-4286-9891-a3abe8992080", "created": "2026-10-09T15:13:11.65948Z", "modified": "2026-10-09T15:13:11.65948Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DBC4B607C3B07C48F40F9D184DE443D651436CA5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.65948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57734eac-121d-45aa-b8c6-4384d7d2ebca", "created": "2026-10-09T15:13:11.660116Z", "modified": "2026-10-09T15:13:11.660116Z", "relationship_type": "indicates", "source_ref": "indicator--55f84797-58d1-4286-9891-a3abe8992080", "target_ref": "malware--4542f35b-d1b4-40b8-9db9-2623d119987a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1", "created": "2026-10-09T15:13:11.660237Z", "modified": "2026-10-09T15:13:11.660237Z", "name": "Tracku", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a05ae2-2f37-4339-a3a0-d93093514255", "created": "2026-10-09T15:13:11.660362Z", "modified": "2026-10-09T15:13:11.660362Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk7.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.660362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9def5868-3cc2-4609-a51b-ba04ff9e4f4c", "created": "2026-10-09T15:13:11.660822Z", "modified": "2026-10-09T15:13:11.660822Z", "relationship_type": "indicates", "source_ref": "indicator--31a05ae2-2f37-4339-a3a0-d93093514255", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c91e11-404e-4964-8d7e-b062fa3a510b", "created": "2026-10-09T15:13:11.660944Z", "modified": "2026-10-09T15:13:11.660944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clues.link']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.660944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8629805b-2d6f-4f9a-98c8-cddadc484859", "created": "2026-10-09T15:13:11.661431Z", "modified": "2026-10-09T15:13:11.661431Z", "relationship_type": "indicates", "source_ref": "indicator--29c91e11-404e-4964-8d7e-b062fa3a510b", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13806762-3ace-4219-a969-5e4e70a26377", "created": "2026-10-09T15:13:11.661556Z", "modified": "2026-10-09T15:13:11.661556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clues4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.661556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9b09ef3-ff95-4a41-b6a1-ab7e813d11cc", "created": "2026-10-09T15:13:11.662018Z", "modified": "2026-10-09T15:13:11.662018Z", "relationship_type": "indicates", "source_ref": "indicator--13806762-3ace-4219-a969-5e4e70a26377", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d077b2c6-8da1-45a3-be23-529ee6a419ba", "created": "2026-10-09T15:13:11.662135Z", "modified": "2026-10-09T15:13:11.662135Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cluestr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.662135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--972c70c8-ffd5-4c79-a66c-7964cc95dc30", "created": "2026-10-09T15:13:11.662607Z", "modified": "2026-10-09T15:13:11.662607Z", "relationship_type": "indicates", "source_ref": "indicator--d077b2c6-8da1-45a3-be23-529ee6a419ba", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea230b1-dc81-4ac0-8556-9ff974cb1e52", "created": "2026-10-09T15:13:11.662731Z", "modified": "2026-10-09T15:13:11.662731Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.662731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bd27caa-dc3b-48f3-995e-2758498bfa60", "created": "2026-10-09T15:13:11.663185Z", "modified": "2026-10-09T15:13:11.663185Z", "relationship_type": "indicates", "source_ref": "indicator--0ea230b1-dc81-4ac0-8556-9ff974cb1e52", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd75f01-0341-4204-97b4-216da7f5da6d", "created": "2026-10-09T15:13:11.663322Z", "modified": "2026-10-09T15:13:11.663322Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.663322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e75981b-88e3-4db6-9602-1d3d04203b0f", "created": "2026-10-09T15:13:11.663783Z", "modified": "2026-10-09T15:13:11.663783Z", "relationship_type": "indicates", "source_ref": "indicator--0fd75f01-0341-4204-97b4-216da7f5da6d", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d9705c-412f-4790-8cf8-62493e2f153f", "created": "2026-10-09T15:13:11.663899Z", "modified": "2026-10-09T15:13:11.663899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='izapk.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.663899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3372dc04-19b7-48a4-b93d-c5492b67c68e", "created": "2026-10-09T15:13:11.664368Z", "modified": "2026-10-09T15:13:11.664368Z", "relationship_type": "indicates", "source_ref": "indicator--52d9705c-412f-4790-8cf8-62493e2f153f", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fc5d0f-11af-420d-9604-d84db61d3a41", "created": "2026-10-09T15:13:11.664486Z", "modified": "2026-10-09T15:13:11.664486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='izspy-1313.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.664486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71ad8569-6bf3-4aad-9c93-34d541a19db5", "created": "2026-10-09T15:13:11.664969Z", "modified": "2026-10-09T15:13:11.664969Z", "relationship_type": "indicates", "source_ref": "indicator--f2fc5d0f-11af-420d-9604-d84db61d3a41", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a37d11b-c2f5-40d9-9e43-54b99b4da59d", "created": "2026-10-09T15:13:11.665086Z", "modified": "2026-10-09T15:13:11.665086Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msafe.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.665086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--946963aa-68b4-473f-941c-e1650114b154", "created": "2026-10-09T15:13:11.66565Z", "modified": "2026-10-09T15:13:11.66565Z", "relationship_type": "indicates", "source_ref": "indicator--0a37d11b-c2f5-40d9-9e43-54b99b4da59d", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3eddc7b-cd77-46fc-b3d6-cde561c5668e", "created": "2026-10-09T15:13:11.665776Z", "modified": "2026-10-09T15:13:11.665776Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.apk7.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.665776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69fca815-6af3-4241-842e-e678b16937a7", "created": "2026-10-09T15:13:11.666241Z", "modified": "2026-10-09T15:13:11.666241Z", "relationship_type": "indicates", "source_ref": "indicator--d3eddc7b-cd77-46fc-b3d6-cde561c5668e", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fd6c0e-e52d-4065-9681-7e403259825f", "created": "2026-10-09T15:13:11.666372Z", "modified": "2026-10-09T15:13:11.666372Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.666372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0c98929-437f-45e2-bd90-aa1b2769ac02", "created": "2026-10-09T15:13:11.66684Z", "modified": "2026-10-09T15:13:11.66684Z", "relationship_type": "indicates", "source_ref": "indicator--78fd6c0e-e52d-4065-9681-7e403259825f", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f892bf4a-23f8-45af-b261-405b10c8b110", "created": "2026-10-09T15:13:11.666963Z", "modified": "2026-10-09T15:13:11.666963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.msafe.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.666963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3fd41fa-fabc-43ee-ae53-3873014a4781", "created": "2026-10-09T15:13:11.667444Z", "modified": "2026-10-09T15:13:11.667444Z", "relationship_type": "indicates", "source_ref": "indicator--f892bf4a-23f8-45af-b261-405b10c8b110", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e25a01-f2f6-4635-8dd6-9111a207c5f2", "created": "2026-10-09T15:13:11.667568Z", "modified": "2026-10-09T15:13:11.667568Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='2mata.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.667568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cadcc21b-403a-4372-a3b2-1fdf2883c40e", "created": "2026-10-09T15:13:11.668031Z", "modified": "2026-10-09T15:13:11.668031Z", "relationship_type": "indicates", "source_ref": "indicator--26e25a01-f2f6-4635-8dd6-9111a207c5f2", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a775b57-1a1c-49fd-87ce-73a20c21edd9", "created": "2026-10-09T15:13:11.668151Z", "modified": "2026-10-09T15:13:11.668151Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clues4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.668151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6be35200-1ee3-4a64-ab96-30a8514899b1", "created": "2026-10-09T15:13:11.668634Z", "modified": "2026-10-09T15:13:11.668634Z", "relationship_type": "indicates", "source_ref": "indicator--6a775b57-1a1c-49fd-87ce-73a20c21edd9", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a50e3d-d2e0-40ad-b790-840e941f8548", "created": "2026-10-09T15:13:11.668754Z", "modified": "2026-10-09T15:13:11.668754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cluestr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.668754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc831aaf-8f19-4aaa-89eb-4bd445a23ccb", "created": "2026-10-09T15:13:11.66922Z", "modified": "2026-10-09T15:13:11.66922Z", "relationship_type": "indicates", "source_ref": "indicator--87a50e3d-d2e0-40ad-b790-840e941f8548", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb229543-47f6-4485-b32b-d812566c6d74", "created": "2026-10-09T15:13:11.669349Z", "modified": "2026-10-09T15:13:11.669349Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.669349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a574ae1-a164-4cee-af0e-4e61516056ff", "created": "2026-10-09T15:13:11.669809Z", "modified": "2026-10-09T15:13:11.669809Z", "relationship_type": "indicates", "source_ref": "indicator--eb229543-47f6-4485-b32b-d812566c6d74", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74959afb-16c3-4870-8d68-45a5bfb102a4", "created": "2026-10-09T15:13:11.669929Z", "modified": "2026-10-09T15:13:11.669929Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hike.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.669929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6f084bb-0480-4085-a464-d79fde398ccd", "created": "2026-10-09T15:13:11.670404Z", "modified": "2026-10-09T15:13:11.670404Z", "relationship_type": "indicates", "source_ref": "indicator--74959afb-16c3-4870-8d68-45a5bfb102a4", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075ad256-bc57-4415-85dc-b991a48479b1", "created": "2026-10-09T15:13:11.670531Z", "modified": "2026-10-09T15:13:11.670531Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='izkid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.670531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08666269-6d31-4edd-ae7e-a8a2db23f4ff", "created": "2026-10-09T15:13:11.671085Z", "modified": "2026-10-09T15:13:11.671085Z", "relationship_type": "indicates", "source_ref": "indicator--075ad256-bc57-4415-85dc-b991a48479b1", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85d9e90-51ae-49dd-810d-4dc67272438d", "created": "2026-10-09T15:13:11.671208Z", "modified": "2026-10-09T15:13:11.671208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.671208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99619265-a616-4490-aae5-380b5ba8d520", "created": "2026-10-09T15:13:11.671684Z", "modified": "2026-10-09T15:13:11.671684Z", "relationship_type": "indicates", "source_ref": "indicator--d85d9e90-51ae-49dd-810d-4dc67272438d", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2b7c79-8b80-4713-b818-8b00f5e26ef6", "created": "2026-10-09T15:13:11.671803Z", "modified": "2026-10-09T15:13:11.671803Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.izkid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.671803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5bbd819-8f5d-46f9-b0b7-f501877f817f", "created": "2026-10-09T15:13:11.67228Z", "modified": "2026-10-09T15:13:11.67228Z", "relationship_type": "indicates", "source_ref": "indicator--8e2b7c79-8b80-4713-b818-8b00f5e26ef6", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597fbc39-316f-4cb6-8743-d3ef0cd6b65a", "created": "2026-10-09T15:13:11.672402Z", "modified": "2026-10-09T15:13:11.672402Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.672402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af3e7cf3-9e06-4855-92d4-95a03e0a57c2", "created": "2026-10-09T15:13:11.672863Z", "modified": "2026-10-09T15:13:11.672863Z", "relationship_type": "indicates", "source_ref": "indicator--597fbc39-316f-4cb6-8743-d3ef0cd6b65a", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c118a5b5-d06a-4a75-a1ee-2c339562fcf8", "created": "2026-10-09T15:13:11.672981Z", "modified": "2026-10-09T15:13:11.672981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b95c23a70e9c71313db73af0d4b8a283cbd6575caae99c46d59da3a1d6695fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.672981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1402282e-6ab6-46da-803c-d54db9e13034", "created": "2026-10-09T15:13:11.673586Z", "modified": "2026-10-09T15:13:11.673586Z", "relationship_type": "indicates", "source_ref": "indicator--c118a5b5-d06a-4a75-a1ee-2c339562fcf8", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a96ce5-a7de-469a-a417-0abaf24712bf", "created": "2026-10-09T15:13:11.673709Z", "modified": "2026-10-09T15:13:11.673709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bdd2fbd0ee1ef1ae88db3bd540aa3fd4bfd3d091aedfb4b60a2aa330e88af2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.673709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8967a22d-8599-440f-a688-b4ce18fb7164", "created": "2026-10-09T15:13:11.674307Z", "modified": "2026-10-09T15:13:11.674307Z", "relationship_type": "indicates", "source_ref": "indicator--33a96ce5-a7de-469a-a417-0abaf24712bf", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81126347-4690-47f7-90d8-a3682ef94e12", "created": "2026-10-09T15:13:11.674427Z", "modified": "2026-10-09T15:13:11.674427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89611aecf4d3780526391bafa07cea6f3588f30ddd587e7e239075e832778e5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.674427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78d587a1-a534-4126-b555-67cdd289b485", "created": "2026-10-09T15:13:11.675006Z", "modified": "2026-10-09T15:13:11.675006Z", "relationship_type": "indicates", "source_ref": "indicator--81126347-4690-47f7-90d8-a3682ef94e12", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb1d48f-61af-4f80-9bb2-a8c59165da5d", "created": "2026-10-09T15:13:11.675123Z", "modified": "2026-10-09T15:13:11.675123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8c2ac89c53954caf0fe4f80d69e4459fb2b1fe5eebf5153aac74c62930b2aef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.675123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1196a85-5f2a-4248-89c2-eebc864f2f85", "created": "2026-10-09T15:13:11.675725Z", "modified": "2026-10-09T15:13:11.675725Z", "relationship_type": "indicates", "source_ref": "indicator--9cb1d48f-61af-4f80-9bb2-a8c59165da5d", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4366d859-a9a3-410c-a02b-28ba04ce0c85", "created": "2026-10-09T15:13:11.675846Z", "modified": "2026-10-09T15:13:11.675846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='582e49883ee6aed53f5a7f423ac910c1b1f18f9eb19d07507c7b32d303d32c24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.675846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5d72c04-fcf7-4fcc-aae5-41660b394bc9", "created": "2026-10-09T15:13:11.676448Z", "modified": "2026-10-09T15:13:11.676448Z", "relationship_type": "indicates", "source_ref": "indicator--4366d859-a9a3-410c-a02b-28ba04ce0c85", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39de893-828b-44de-8c7a-03b3c0f9f92a", "created": "2026-10-09T15:13:11.676569Z", "modified": "2026-10-09T15:13:11.676569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd13bb71747ded1984563dd50e237ebb51f3887c83b748d1751e33e683d8b19f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.676569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b08c9c92-6957-4709-bd7f-2844e1ce7adc", "created": "2026-10-09T15:13:11.677259Z", "modified": "2026-10-09T15:13:11.677259Z", "relationship_type": "indicates", "source_ref": "indicator--c39de893-828b-44de-8c7a-03b3c0f9f92a", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21407878-df9c-4f9d-9c91-b33733f70f2f", "created": "2026-10-09T15:13:11.677396Z", "modified": "2026-10-09T15:13:11.677396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b41f6dfb115e0bdf3fd8e860036b4e04432f1af43ecb9cccea78539e701c03a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.677396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec9018ec-a723-466b-95db-71a53ec998b6", "created": "2026-10-09T15:13:11.677995Z", "modified": "2026-10-09T15:13:11.677995Z", "relationship_type": "indicates", "source_ref": "indicator--21407878-df9c-4f9d-9c91-b33733f70f2f", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348d6b3a-fc0f-414f-96f2-69d5db94fb12", "created": "2026-10-09T15:13:11.67812Z", "modified": "2026-10-09T15:13:11.67812Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0bf4bdb37d25bf92a1b76817e4f89c0b38c2146a116bdec836d588875cd36383']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.67812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a9859bf-e4ca-4b11-a12d-87e148bd3230", "created": "2026-10-09T15:13:11.678716Z", "modified": "2026-10-09T15:13:11.678716Z", "relationship_type": "indicates", "source_ref": "indicator--348d6b3a-fc0f-414f-96f2-69d5db94fb12", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d50a650-3a38-4d05-b897-0cde617fc53e", "created": "2026-10-09T15:13:11.678839Z", "modified": "2026-10-09T15:13:11.678839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9bbaf4c8717e7dd0a034eeaa961b284d51667a5a85dfef8684a233097d5e441']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.678839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--918c07e1-4b5e-4228-9df8-899085ba69ef", "created": "2026-10-09T15:13:11.679436Z", "modified": "2026-10-09T15:13:11.679436Z", "relationship_type": "indicates", "source_ref": "indicator--6d50a650-3a38-4d05-b897-0cde617fc53e", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4339f5-a8b1-4a5f-8e60-a4662ecfb5d0", "created": "2026-10-09T15:13:11.679564Z", "modified": "2026-10-09T15:13:11.679564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7345afb1644c57c16fa2a024a8e951c064ea194476e278e9fa6069720fe7e4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.679564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74ef5e9f-ec40-43fb-83d8-424114b18698", "created": "2026-10-09T15:13:11.680152Z", "modified": "2026-10-09T15:13:11.680152Z", "relationship_type": "indicates", "source_ref": "indicator--ba4339f5-a8b1-4a5f-8e60-a4662ecfb5d0", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd5f4b4-a47a-4e0b-9b87-5d934871fbcf", "created": "2026-10-09T15:13:11.68029Z", "modified": "2026-10-09T15:13:11.68029Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9e7510882e75011edf12d6a3350fb679e84ff29774e767ac1721d92dd11954c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.68029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd7e9cea-8a6c-48d7-8b32-de371ded23c3", "created": "2026-10-09T15:13:11.680877Z", "modified": "2026-10-09T15:13:11.680877Z", "relationship_type": "indicates", "source_ref": "indicator--3bd5f4b4-a47a-4e0b-9b87-5d934871fbcf", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d688305f-88b0-40b3-9e41-a6d033924abd", "created": "2026-10-09T15:13:11.680997Z", "modified": "2026-10-09T15:13:11.680997Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0eb6c3e7fbc28493979d2d55b37b6f2246e48ba46cd990efd5fbdcb84c52e7b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.680997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b272d91a-47bf-4e75-a4c1-f36e4d52b843", "created": "2026-10-09T15:13:11.681598Z", "modified": "2026-10-09T15:13:11.681598Z", "relationship_type": "indicates", "source_ref": "indicator--d688305f-88b0-40b3-9e41-a6d033924abd", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a15e42-b629-459d-be28-db43e70e3160", "created": "2026-10-09T15:13:11.68172Z", "modified": "2026-10-09T15:13:11.68172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3cce10706722566b937caddf515ca33092ab3ce30dbb57b15053ff11a884b14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.68172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78db1a75-b966-47cf-9f83-4b7809e77e0c", "created": "2026-10-09T15:13:11.682322Z", "modified": "2026-10-09T15:13:11.682322Z", "relationship_type": "indicates", "source_ref": "indicator--08a15e42-b629-459d-be28-db43e70e3160", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c814ab1-e297-49ef-b112-04cebed09d73", "created": "2026-10-09T15:13:11.682444Z", "modified": "2026-10-09T15:13:11.682444Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.fystem.maps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.682444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7cd01e7-0490-46b5-bd86-1fc1a11ba348", "created": "2026-10-09T15:13:11.682901Z", "modified": "2026-10-09T15:13:11.682901Z", "relationship_type": "indicates", "source_ref": "indicator--1c814ab1-e297-49ef-b112-04cebed09d73", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f90609-bf31-4cb6-945c-1336291ef3fc", "created": "2026-10-09T15:13:11.683017Z", "modified": "2026-10-09T15:13:11.683017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.system.maps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.683017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e822763-d3bd-4cda-9ab5-cf82612ac003", "created": "2026-10-09T15:13:11.683594Z", "modified": "2026-10-09T15:13:11.683594Z", "relationship_type": "indicates", "source_ref": "indicator--c3f90609-bf31-4cb6-945c-1336291ef3fc", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6c367a-ee3a-4395-a2f9-1d6d3699922f", "created": "2026-10-09T15:13:11.683718Z", "modified": "2026-10-09T15:13:11.683718Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.google.android.bacfup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.683718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7e581fd-8149-4291-8c57-6560078ef9a7", "created": "2026-10-09T15:13:11.684185Z", "modified": "2026-10-09T15:13:11.684185Z", "relationship_type": "indicates", "source_ref": "indicator--3c6c367a-ee3a-4395-a2f9-1d6d3699922f", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6eadc8-bd89-4a13-a0cd-3f3ea7acbd1e", "created": "2026-10-09T15:13:11.684316Z", "modified": "2026-10-09T15:13:11.684316Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.google.android.safe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.684316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21dce42a-f1b2-472f-bc4a-09ff4bd125cd", "created": "2026-10-09T15:13:11.684776Z", "modified": "2026-10-09T15:13:11.684776Z", "relationship_type": "indicates", "source_ref": "indicator--fb6eadc8-bd89-4a13-a0cd-3f3ea7acbd1e", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a33e03-8536-4e37-b65d-6b3d4849f186", "created": "2026-10-09T15:13:11.684896Z", "modified": "2026-10-09T15:13:11.684896Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wzogle.zndroid.yacfup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.684896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8acb45ea-cf39-4d68-9ea5-dea4b515877e", "created": "2026-10-09T15:13:11.685373Z", "modified": "2026-10-09T15:13:11.685373Z", "relationship_type": "indicates", "source_ref": "indicator--b3a33e03-8536-4e37-b65d-6b3d4849f186", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b58163-a5e3-4b31-afcf-d04dfc63dd0a", "created": "2026-10-09T15:13:11.685498Z", "modified": "2026-10-09T15:13:11.685498Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qzogle.xndroid.jacfup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.685498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1576838c-57e8-411a-8ca9-1f00fce4c7be", "created": "2026-10-09T15:13:11.685962Z", "modified": "2026-10-09T15:13:11.685962Z", "relationship_type": "indicates", "source_ref": "indicator--66b58163-a5e3-4b31-afcf-d04dfc63dd0a", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba719da-b508-4317-b3a6-bb8acdb0b589", "created": "2026-10-09T15:13:11.686081Z", "modified": "2026-10-09T15:13:11.686081Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qzogle.xndroid.jacfut']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.686081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d81ef7ad-91ce-4717-8bc4-6a7fa8090da2", "created": "2026-10-09T15:13:11.686564Z", "modified": "2026-10-09T15:13:11.686564Z", "relationship_type": "indicates", "source_ref": "indicator--6ba719da-b508-4317-b3a6-bb8acdb0b589", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a95392-e7d3-4790-85cc-66c40a07ed22", "created": "2026-10-09T15:13:11.686687Z", "modified": "2026-10-09T15:13:11.686687Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qzogle.android.jacfut']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.686687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91ec580f-d03b-4e46-875b-50ba6e17a13f", "created": "2026-10-09T15:13:11.687155Z", "modified": "2026-10-09T15:13:11.687155Z", "relationship_type": "indicates", "source_ref": "indicator--d2a95392-e7d3-4790-85cc-66c40a07ed22", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918cf506-bb84-4647-b0cc-bff5ceeed655", "created": "2026-10-09T15:13:11.687287Z", "modified": "2026-10-09T15:13:11.687287Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='01EFA0C8FAE43215125ACA78308EFB1768FB4049']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.687287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e03adf1-3551-4e5a-9623-faced8cdae62", "created": "2026-10-09T15:13:11.687831Z", "modified": "2026-10-09T15:13:11.687831Z", "relationship_type": "indicates", "source_ref": "indicator--918cf506-bb84-4647-b0cc-bff5ceeed655", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bfb3b0-136a-45bd-b78f-bf80515c49c3", "created": "2026-10-09T15:13:11.687956Z", "modified": "2026-10-09T15:13:11.687956Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2A1C74FFFE33C7D867C7B284FFDBBA4DDD024450']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.687956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a48a4f59-42b1-4654-88ec-9f2364294f36", "created": "2026-10-09T15:13:11.688512Z", "modified": "2026-10-09T15:13:11.688512Z", "relationship_type": "indicates", "source_ref": "indicator--a6bfb3b0-136a-45bd-b78f-bf80515c49c3", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4cf863-8835-4df1-831b-4e45fb2b961a", "created": "2026-10-09T15:13:11.688636Z", "modified": "2026-10-09T15:13:11.688636Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5407E1CC26F28D6024E0384693045AEA2B24C5DA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.688636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ab81c3-c52e-4dfd-b706-c0d98b34bd49", "created": "2026-10-09T15:13:11.689288Z", "modified": "2026-10-09T15:13:11.689288Z", "relationship_type": "indicates", "source_ref": "indicator--3c4cf863-8835-4df1-831b-4e45fb2b961a", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b660fbf-3ead-4295-ba2c-617eb419740b", "created": "2026-10-09T15:13:11.689411Z", "modified": "2026-10-09T15:13:11.689411Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7D0F4308B87223AEEFFA65060F0F752E84D363BE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.689411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--857e50ab-34b7-4d2c-8758-6e0db8198f94", "created": "2026-10-09T15:13:11.689954Z", "modified": "2026-10-09T15:13:11.689954Z", "relationship_type": "indicates", "source_ref": "indicator--7b660fbf-3ead-4295-ba2c-617eb419740b", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30235ece-bf38-46a1-8344-4b557b9ee870", "created": "2026-10-09T15:13:11.690073Z", "modified": "2026-10-09T15:13:11.690073Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9427212B33E9D3636970EAB73E2845E0DC59B5AA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.690073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d27c6cf-436a-4895-bbae-5549a0e7e984", "created": "2026-10-09T15:13:11.690619Z", "modified": "2026-10-09T15:13:11.690619Z", "relationship_type": "indicates", "source_ref": "indicator--30235ece-bf38-46a1-8344-4b557b9ee870", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6bcc0d-4c1d-48b0-a86a-ec99233a3fd6", "created": "2026-10-09T15:13:11.690738Z", "modified": "2026-10-09T15:13:11.690738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A9A302C9606AF4BE4468A4FC74F7873DDADA2AB0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.690738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--304a2315-69b6-417a-8a57-34703fc889f8", "created": "2026-10-09T15:13:11.691298Z", "modified": "2026-10-09T15:13:11.691298Z", "relationship_type": "indicates", "source_ref": "indicator--7b6bcc0d-4c1d-48b0-a86a-ec99233a3fd6", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233eedb2-6ea7-44dc-9df6-14bdf66afa13", "created": "2026-10-09T15:13:11.691422Z", "modified": "2026-10-09T15:13:11.691422Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BD3986483D9B962B029D65BF34BF4B7C568FF204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.691422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d07e84f6-442e-4bae-aadc-a8b07eb70e1d", "created": "2026-10-09T15:13:11.691965Z", "modified": "2026-10-09T15:13:11.691965Z", "relationship_type": "indicates", "source_ref": "indicator--233eedb2-6ea7-44dc-9df6-14bdf66afa13", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa231d46-4086-4cd1-af6a-626da0da607d", "created": "2026-10-09T15:13:11.692085Z", "modified": "2026-10-09T15:13:11.692085Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4474D3395029E6C6744A470EE5F2107DBAEF16A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.692085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86e37e27-5a61-44ef-8e46-c67ff9c590d5", "created": "2026-10-09T15:13:11.692639Z", "modified": "2026-10-09T15:13:11.692639Z", "relationship_type": "indicates", "source_ref": "indicator--aa231d46-4086-4cd1-af6a-626da0da607d", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c7af86-1f5e-4899-9838-1af6e115afcd", "created": "2026-10-09T15:13:11.692762Z", "modified": "2026-10-09T15:13:11.692762Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6F1FDA1889463BFA646A950E49E121B7829A884D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.692762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49a281ca-05fa-4b1d-bfc5-1939e7f78069", "created": "2026-10-09T15:13:11.69332Z", "modified": "2026-10-09T15:13:11.69332Z", "relationship_type": "indicates", "source_ref": "indicator--20c7af86-1f5e-4899-9838-1af6e115afcd", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84219a37-5b39-4d2c-a7a5-2c87cafa4e1e", "created": "2026-10-09T15:13:11.693441Z", "modified": "2026-10-09T15:13:11.693441Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5051413BB7C4931F5CD25260FFF173739CBE0F3A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.693441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e8ccc09-7e97-4b98-8288-557733edca8f", "created": "2026-10-09T15:13:11.693993Z", "modified": "2026-10-09T15:13:11.693993Z", "relationship_type": "indicates", "source_ref": "indicator--84219a37-5b39-4d2c-a7a5-2c87cafa4e1e", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac8ccf7-9061-49fa-b6b9-8fb3873d4b49", "created": "2026-10-09T15:13:11.694113Z", "modified": "2026-10-09T15:13:11.694113Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4140120093B5655CF559B2A786269CF3F82E3AE9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.694113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27b8144f-e1b3-4e69-82ed-19bee9ccf98c", "created": "2026-10-09T15:13:11.694677Z", "modified": "2026-10-09T15:13:11.694677Z", "relationship_type": "indicates", "source_ref": "indicator--fac8ccf7-9061-49fa-b6b9-8fb3873d4b49", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91e4be8-1171-42f7-a2b1-8f9832c75479", "created": "2026-10-09T15:13:11.694799Z", "modified": "2026-10-09T15:13:11.694799Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7A55C057800823F710BF32A7D9865B300777E2D5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.694799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f951422-9634-4415-8c03-cc696358acf2", "created": "2026-10-09T15:13:11.695456Z", "modified": "2026-10-09T15:13:11.695456Z", "relationship_type": "indicates", "source_ref": "indicator--b91e4be8-1171-42f7-a2b1-8f9832c75479", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361fbe5e-d322-458d-9699-63f2344d26a9", "created": "2026-10-09T15:13:11.695578Z", "modified": "2026-10-09T15:13:11.695578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FEEF07EA18BA2EF7B75AD311F45A45AB4C1E8F0E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.695578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c62049c-3953-4ce7-a11b-f63e57db4a91", "created": "2026-10-09T15:13:11.696114Z", "modified": "2026-10-09T15:13:11.696114Z", "relationship_type": "indicates", "source_ref": "indicator--361fbe5e-d322-458d-9699-63f2344d26a9", "target_ref": "malware--d4804cfc-f5e2-44c2-940d-94cdd65984a1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3916c1ab-cd71-4587-94df-707048900a66", "created": "2026-10-09T15:13:11.696232Z", "modified": "2026-10-09T15:13:11.696232Z", "name": "KidsShield", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d9c68f-1f0f-45e9-b1d3-5661a553432f", "created": "2026-10-09T15:13:11.696366Z", "modified": "2026-10-09T15:13:11.696366Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apprtc.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.696366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cde9f250-c65a-4d0b-9920-1ca915ecdc92", "created": "2026-10-09T15:13:11.696845Z", "modified": "2026-10-09T15:13:11.696845Z", "relationship_type": "indicates", "source_ref": "indicator--f4d9c68f-1f0f-45e9-b1d3-5661a553432f", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05caa5b-c0c3-4234-9753-1051df6b2ff5", "created": "2026-10-09T15:13:11.696971Z", "modified": "2026-10-09T15:13:11.696971Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.696971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8412adb8-f399-4a30-941d-a6737b6149cf", "created": "2026-10-09T15:13:11.69745Z", "modified": "2026-10-09T15:13:11.69745Z", "relationship_type": "indicates", "source_ref": "indicator--c05caa5b-c0c3-4234-9753-1051df6b2ff5", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171f56f9-785f-4ea4-b59c-53e3fab4b393", "created": "2026-10-09T15:13:11.697572Z", "modified": "2026-10-09T15:13:11.697572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.697572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d8e5245-352a-4f7e-8015-c928923dc960", "created": "2026-10-09T15:13:11.69804Z", "modified": "2026-10-09T15:13:11.69804Z", "relationship_type": "indicates", "source_ref": "indicator--171f56f9-785f-4ea4-b59c-53e3fab4b393", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8127510b-7e3b-49f2-be78-f30328ff6faa", "created": "2026-10-09T15:13:11.698158Z", "modified": "2026-10-09T15:13:11.698158Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsshield.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.698158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27b59054-fd1e-4ef9-afde-5dca0a375633", "created": "2026-10-09T15:13:11.698652Z", "modified": "2026-10-09T15:13:11.698652Z", "relationship_type": "indicates", "source_ref": "indicator--8127510b-7e3b-49f2-be78-f30328ff6faa", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc73bf0-2d9f-42a3-af4e-43741d2b787a", "created": "2026-10-09T15:13:11.698775Z", "modified": "2026-10-09T15:13:11.698775Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.quanly24h.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.698775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b807dc7-3103-4a07-a8f4-a3f267b5bb65", "created": "2026-10-09T15:13:11.699259Z", "modified": "2026-10-09T15:13:11.699259Z", "relationship_type": "indicates", "source_ref": "indicator--acc73bf0-2d9f-42a3-af4e-43741d2b787a", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76b015c-fd80-4113-984f-865930d6773e", "created": "2026-10-09T15:13:11.69939Z", "modified": "2026-10-09T15:13:11.69939Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.backupsoft.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.69939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20ab4d46-5908-4e4a-a64a-a30baa673897", "created": "2026-10-09T15:13:11.699858Z", "modified": "2026-10-09T15:13:11.699858Z", "relationship_type": "indicates", "source_ref": "indicator--e76b015c-fd80-4113-984f-865930d6773e", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823fd8a8-79cd-4dd3-93cc-2e84dca990ef", "created": "2026-10-09T15:13:11.699981Z", "modified": "2026-10-09T15:13:11.699981Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.699981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d781a9fa-1f45-4177-932c-87c6c8ef035e", "created": "2026-10-09T15:13:11.700468Z", "modified": "2026-10-09T15:13:11.700468Z", "relationship_type": "indicates", "source_ref": "indicator--823fd8a8-79cd-4dd3-93cc-2e84dca990ef", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca226aa7-dcda-46fa-9df9-9964d99630b6", "created": "2026-10-09T15:13:11.700589Z", "modified": "2026-10-09T15:13:11.700589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.700589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dca503a-d135-4796-8bb2-e2f30bcef8c4", "created": "2026-10-09T15:13:11.701162Z", "modified": "2026-10-09T15:13:11.701162Z", "relationship_type": "indicates", "source_ref": "indicator--ca226aa7-dcda-46fa-9df9-9964d99630b6", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae32814a-982a-4e9a-a320-5e51e2d87eb4", "created": "2026-10-09T15:13:11.701294Z", "modified": "2026-10-09T15:13:11.701294Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.viptelefonprogrami.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.701294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6e87cd3-22f0-4e0e-a14a-f337f2d2fc07", "created": "2026-10-09T15:13:11.701777Z", "modified": "2026-10-09T15:13:11.701777Z", "relationship_type": "indicates", "source_ref": "indicator--ae32814a-982a-4e9a-a320-5e51e2d87eb4", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018fa58a-8713-4ee8-af3c-5a3f07f4b492", "created": "2026-10-09T15:13:11.701898Z", "modified": "2026-10-09T15:13:11.701898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='quanly24h.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.701898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d520718-df65-4675-828f-cd66101a5f18", "created": "2026-10-09T15:13:11.702373Z", "modified": "2026-10-09T15:13:11.702373Z", "relationship_type": "indicates", "source_ref": "indicator--018fa58a-8713-4ee8-af3c-5a3f07f4b492", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb2c3b7-0746-4842-962b-637c093f6c60", "created": "2026-10-09T15:13:11.702493Z", "modified": "2026-10-09T15:13:11.702493Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyt.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.702493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5544f1bf-16ca-4f13-93c2-05a961e6b798", "created": "2026-10-09T15:13:11.702945Z", "modified": "2026-10-09T15:13:11.702945Z", "relationship_type": "indicates", "source_ref": "indicator--6eb2c3b7-0746-4842-962b-637c093f6c60", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f83c431-5ad7-419b-9ce1-cf8a3f6c6374", "created": "2026-10-09T15:13:11.703066Z", "modified": "2026-10-09T15:13:11.703066Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytrac-app1.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.703066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a0a2bd9-7186-4909-b040-aa9762e8c00d", "created": "2026-10-09T15:13:11.703569Z", "modified": "2026-10-09T15:13:11.703569Z", "relationship_type": "indicates", "source_ref": "indicator--6f83c431-5ad7-419b-9ce1-cf8a3f6c6374", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bef89d4-4f9f-4673-b84b-f9c7e2355ebf", "created": "2026-10-09T15:13:11.70369Z", "modified": "2026-10-09T15:13:11.70369Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='theodoi24h.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.70369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47e68ecc-eb31-454e-b4f9-41d3316d2883", "created": "2026-10-09T15:13:11.704161Z", "modified": "2026-10-09T15:13:11.704161Z", "relationship_type": "indicates", "source_ref": "indicator--0bef89d4-4f9f-4673-b84b-f9c7e2355ebf", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd6183d-fc5f-49a5-9996-93d82fa21759", "created": "2026-10-09T15:13:11.704295Z", "modified": "2026-10-09T15:13:11.704295Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.704295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3582f25d-8967-4fde-9ef5-1a77a9e121b0", "created": "2026-10-09T15:13:11.704761Z", "modified": "2026-10-09T15:13:11.704761Z", "relationship_type": "indicates", "source_ref": "indicator--4dd6183d-fc5f-49a5-9996-93d82fa21759", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3b4261-4f77-4134-bb38-97ee844cf26c", "created": "2026-10-09T15:13:11.704879Z", "modified": "2026-10-09T15:13:11.704879Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.704879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b69d4354-b0fb-4a1b-98f5-d8abcc4bdb30", "created": "2026-10-09T15:13:11.705358Z", "modified": "2026-10-09T15:13:11.705358Z", "relationship_type": "indicates", "source_ref": "indicator--2b3b4261-4f77-4134-bb38-97ee844cf26c", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ac7895-f6b3-4d10-912d-6cc6526e363e", "created": "2026-10-09T15:13:11.70548Z", "modified": "2026-10-09T15:13:11.70548Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptelefonprogrami.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.70548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--430bdd5b-83b5-4aa6-a785-c0c67c094a97", "created": "2026-10-09T15:13:11.705957Z", "modified": "2026-10-09T15:13:11.705957Z", "relationship_type": "indicates", "source_ref": "indicator--84ac7895-f6b3-4d10-912d-6cc6526e363e", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e680c98-b53b-48c2-8d0a-0b1ffd9bc9b1", "created": "2026-10-09T15:13:11.706074Z", "modified": "2026-10-09T15:13:11.706074Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='backupsoft.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.706074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--034bf75c-f2af-4211-9ee7-ab58f5636906", "created": "2026-10-09T15:13:11.706647Z", "modified": "2026-10-09T15:13:11.706647Z", "relationship_type": "indicates", "source_ref": "indicator--5e680c98-b53b-48c2-8d0a-0b1ffd9bc9b1", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fb5397-0997-4ced-a117-51b279a7ca4b", "created": "2026-10-09T15:13:11.706772Z", "modified": "2026-10-09T15:13:11.706772Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.706772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28ef65f6-5ec5-4a87-afc8-556a95517cac", "created": "2026-10-09T15:13:11.707247Z", "modified": "2026-10-09T15:13:11.707247Z", "relationship_type": "indicates", "source_ref": "indicator--b0fb5397-0997-4ced-a117-51b279a7ca4b", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864e95fa-8bb5-43f1-8a92-fe9b488d6410", "created": "2026-10-09T15:13:11.70738Z", "modified": "2026-10-09T15:13:11.70738Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidlogger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.70738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48b2f076-80f9-43ed-bee0-7bc3ffe3b7d9", "created": "2026-10-09T15:13:11.707854Z", "modified": "2026-10-09T15:13:11.707854Z", "relationship_type": "indicates", "source_ref": "indicator--864e95fa-8bb5-43f1-8a92-fe9b488d6410", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7cd6b3-16ba-42f2-a120-ec1de3d58373", "created": "2026-10-09T15:13:11.707976Z", "modified": "2026-10-09T15:13:11.707976Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsshield.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.707976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fefdff7c-527d-4de3-8816-3ab51146e55f", "created": "2026-10-09T15:13:11.708457Z", "modified": "2026-10-09T15:13:11.708457Z", "relationship_type": "indicates", "source_ref": "indicator--0a7cd6b3-16ba-42f2-a120-ec1de3d58373", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2a8978-dd72-499f-83a6-22b51c087e35", "created": "2026-10-09T15:13:11.708575Z", "modified": "2026-10-09T15:13:11.708575Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitorminor.com.tr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.708575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--700a7659-9db1-44c1-b3eb-98e5f7835f3d", "created": "2026-10-09T15:13:11.709045Z", "modified": "2026-10-09T15:13:11.709045Z", "relationship_type": "indicates", "source_ref": "indicator--aa2a8978-dd72-499f-83a6-22b51c087e35", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd260846-21c3-44ae-ae5c-243478a114b8", "created": "2026-10-09T15:13:11.709163Z", "modified": "2026-10-09T15:13:11.709163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.709163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d1e3894-396a-4e0f-9bd9-ae5e632f8b19", "created": "2026-10-09T15:13:11.709645Z", "modified": "2026-10-09T15:13:11.709645Z", "relationship_type": "indicates", "source_ref": "indicator--dd260846-21c3-44ae-ae5c-243478a114b8", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfac43eb-371a-408d-9ee8-b7841f2bddc4", "created": "2026-10-09T15:13:11.709762Z", "modified": "2026-10-09T15:13:11.709762Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.709762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7aba299-cc8a-4e49-9e22-776fa07d7e0d", "created": "2026-10-09T15:13:11.710231Z", "modified": "2026-10-09T15:13:11.710231Z", "relationship_type": "indicates", "source_ref": "indicator--bfac43eb-371a-408d-9ee8-b7841f2bddc4", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb89b83a-601e-4049-8a4e-15c9e27fc076", "created": "2026-10-09T15:13:11.710359Z", "modified": "2026-10-09T15:13:11.710359Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.710359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc3eb475-a66d-48ae-9f46-799181105e60", "created": "2026-10-09T15:13:11.710821Z", "modified": "2026-10-09T15:13:11.710821Z", "relationship_type": "indicates", "source_ref": "indicator--cb89b83a-601e-4049-8a4e-15c9e27fc076", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0390cd-642e-49c2-9a5a-d301fa25bac5", "created": "2026-10-09T15:13:11.710937Z", "modified": "2026-10-09T15:13:11.710937Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytrac.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.710937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f90f251-d680-4888-9801-10be25497626", "created": "2026-10-09T15:13:11.711413Z", "modified": "2026-10-09T15:13:11.711413Z", "relationship_type": "indicates", "source_ref": "indicator--fb0390cd-642e-49c2-9a5a-d301fa25bac5", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e923c1-7bc0-43c5-bbfe-44d2255e5210", "created": "2026-10-09T15:13:11.711531Z", "modified": "2026-10-09T15:13:11.711531Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='techinnovative.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.711531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a0423de-bbea-4f70-ae00-6b0d36aa409b", "created": "2026-10-09T15:13:11.712108Z", "modified": "2026-10-09T15:13:11.712108Z", "relationship_type": "indicates", "source_ref": "indicator--31e923c1-7bc0-43c5-bbfe-44d2255e5210", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c990b70-10ca-47aa-be6e-38425edc355d", "created": "2026-10-09T15:13:11.712253Z", "modified": "2026-10-09T15:13:11.712253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tifamily.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.712253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1607e44-832e-4824-9e1d-547720199ddb", "created": "2026-10-09T15:13:11.712735Z", "modified": "2026-10-09T15:13:11.712735Z", "relationship_type": "indicates", "source_ref": "indicator--4c990b70-10ca-47aa-be6e-38425edc355d", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f699d4-133a-4462-9e59-03631d09c769", "created": "2026-10-09T15:13:11.712854Z", "modified": "2026-10-09T15:13:11.712854Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.712854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--182ccfc5-264d-4183-8356-d53c480052e2", "created": "2026-10-09T15:13:11.713321Z", "modified": "2026-10-09T15:13:11.713321Z", "relationship_type": "indicates", "source_ref": "indicator--33f699d4-133a-4462-9e59-03631d09c769", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e17ce3-c9d5-4a72-bbee-b651071625c1", "created": "2026-10-09T15:13:11.71344Z", "modified": "2026-10-09T15:13:11.71344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracerspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.71344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d568d17-aa50-4aa1-adcf-ebeeb29563a5", "created": "2026-10-09T15:13:11.713906Z", "modified": "2026-10-09T15:13:11.713906Z", "relationship_type": "indicates", "source_ref": "indicator--12e17ce3-c9d5-4a72-bbee-b651071625c1", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed9033a-22a1-4eb7-a09e-23f86604329b", "created": "2026-10-09T15:13:11.714024Z", "modified": "2026-10-09T15:13:11.714024Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.714024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be7fb3a8-63a5-41fe-8605-024423101633", "created": "2026-10-09T15:13:11.714495Z", "modified": "2026-10-09T15:13:11.714495Z", "relationship_type": "indicates", "source_ref": "indicator--8ed9033a-22a1-4eb7-a09e-23f86604329b", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2785c6d-8fdb-47d0-a48b-ac848b9cf361", "created": "2026-10-09T15:13:11.714613Z", "modified": "2026-10-09T15:13:11.714613Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptelefonprogrami.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.714613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51a9537e-9fcb-4f76-ba0e-b826ea49c877", "created": "2026-10-09T15:13:11.715086Z", "modified": "2026-10-09T15:13:11.715086Z", "relationship_type": "indicates", "source_ref": "indicator--a2785c6d-8fdb-47d0-a48b-ac848b9cf361", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e022a6-48ed-432e-b117-8404402786dc", "created": "2026-10-09T15:13:11.715205Z", "modified": "2026-10-09T15:13:11.715205Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.kidlogger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.715205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a71fc2a-0221-45d4-8b8b-185648c707d9", "created": "2026-10-09T15:13:11.715689Z", "modified": "2026-10-09T15:13:11.715689Z", "relationship_type": "indicates", "source_ref": "indicator--e2e022a6-48ed-432e-b117-8404402786dc", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1661f65c-b713-4fa4-bbce-a177d6d712e3", "created": "2026-10-09T15:13:11.715811Z", "modified": "2026-10-09T15:13:11.715811Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.715811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9a379d8-c784-4745-95a2-7bdad9779641", "created": "2026-10-09T15:13:11.716293Z", "modified": "2026-10-09T15:13:11.716293Z", "relationship_type": "indicates", "source_ref": "indicator--1661f65c-b713-4fa4-bbce-a177d6d712e3", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b028f4-707a-43b3-96fb-9e622230d32d", "created": "2026-10-09T15:13:11.716415Z", "modified": "2026-10-09T15:13:11.716415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.tispy.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.716415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2375142-ff7a-43e4-93c4-ff2a65ab119b", "created": "2026-10-09T15:13:11.716888Z", "modified": "2026-10-09T15:13:11.716888Z", "relationship_type": "indicates", "source_ref": "indicator--24b028f4-707a-43b3-96fb-9e622230d32d", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c929e9f-04fe-4c7d-9a41-bc3ff452b0dd", "created": "2026-10-09T15:13:11.717009Z", "modified": "2026-10-09T15:13:11.717009Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyt.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.717009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5254bfee-9703-4b06-a5cf-5226c7dc8480", "created": "2026-10-09T15:13:11.71789Z", "modified": "2026-10-09T15:13:11.71789Z", "relationship_type": "indicates", "source_ref": "indicator--5c929e9f-04fe-4c7d-9a41-bc3ff452b0dd", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2bc160-39e4-4968-98fb-1916e97f60b6", "created": "2026-10-09T15:13:11.718018Z", "modified": "2026-10-09T15:13:11.718018Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsshield.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.718018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--038dbc05-e2a0-4a23-9b65-2a2660be560d", "created": "2026-10-09T15:13:11.718502Z", "modified": "2026-10-09T15:13:11.718502Z", "relationship_type": "indicates", "source_ref": "indicator--ae2bc160-39e4-4968-98fb-1916e97f60b6", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daf6896-ae64-410f-8969-6615c1ecf5cc", "created": "2026-10-09T15:13:11.718624Z", "modified": "2026-10-09T15:13:11.718624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3540915b4d51619ac361012d1dc9065da85d713adc14bd9ce82bf92a16921c83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.718624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d20d5f7d-d0da-4d40-b860-1c34df848d84", "created": "2026-10-09T15:13:11.719216Z", "modified": "2026-10-09T15:13:11.719216Z", "relationship_type": "indicates", "source_ref": "indicator--8daf6896-ae64-410f-8969-6615c1ecf5cc", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c936fcf-25ab-47ba-8b0b-a74e291ca8cb", "created": "2026-10-09T15:13:11.719346Z", "modified": "2026-10-09T15:13:11.719346Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7734bef11d2f3e168d5333671b6db69a8caea54eee2843a1b885f37b3aa80fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.719346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d171231-0aa4-40fd-848b-ed11365535ba", "created": "2026-10-09T15:13:11.719937Z", "modified": "2026-10-09T15:13:11.719937Z", "relationship_type": "indicates", "source_ref": "indicator--7c936fcf-25ab-47ba-8b0b-a74e291ca8cb", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0d929b-006d-4fe1-a9f1-81c90ad9c124", "created": "2026-10-09T15:13:11.720062Z", "modified": "2026-10-09T15:13:11.720062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='260fd6458a4bef8c2a6075e70cedd745500cb08e249596f69499c6d8062d30fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.720062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0199c5a-b06d-4cce-b8ce-323c4983755b", "created": "2026-10-09T15:13:11.720664Z", "modified": "2026-10-09T15:13:11.720664Z", "relationship_type": "indicates", "source_ref": "indicator--1f0d929b-006d-4fe1-a9f1-81c90ad9c124", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b5d7b6-e7aa-4dc0-85e3-f61df72fc4ce", "created": "2026-10-09T15:13:11.72079Z", "modified": "2026-10-09T15:13:11.72079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d8befa2d86f456dcaea8e14ed3d3d84fb3f523eb1168530660027be6bbc516f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.72079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59650b8c-74de-41e2-8ef9-818a937e09ec", "created": "2026-10-09T15:13:11.721383Z", "modified": "2026-10-09T15:13:11.721383Z", "relationship_type": "indicates", "source_ref": "indicator--82b5d7b6-e7aa-4dc0-85e3-f61df72fc4ce", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c439b753-a990-44bf-b18e-ba484fbfb2c5", "created": "2026-10-09T15:13:11.721506Z", "modified": "2026-10-09T15:13:11.721506Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='020d95aff3bbdc311a4b7301aab866de1be4aed53b67bfd73c1dfed9503dbc3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.721506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fcb0649-c056-474e-a5c2-38596d5f1376", "created": "2026-10-09T15:13:11.72209Z", "modified": "2026-10-09T15:13:11.72209Z", "relationship_type": "indicates", "source_ref": "indicator--c439b753-a990-44bf-b18e-ba484fbfb2c5", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf90781-6c06-4d29-83ae-95faf4d87b92", "created": "2026-10-09T15:13:11.72221Z", "modified": "2026-10-09T15:13:11.72221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0d800da07e8fe628e28b428cf07910dfc4975e76d6120e7eab3ae0ca77d178e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.72221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d06e674-932d-4530-b6eb-e6500e3fd883", "created": "2026-10-09T15:13:11.72281Z", "modified": "2026-10-09T15:13:11.72281Z", "relationship_type": "indicates", "source_ref": "indicator--dcf90781-6c06-4d29-83ae-95faf4d87b92", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2795bd-b8c4-4171-b0d5-8e2e5e96a2ca", "created": "2026-10-09T15:13:11.722932Z", "modified": "2026-10-09T15:13:11.722932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c77e0e7ebcc9ee4e2869de81b711fd1531f5c2e59ca63d5a31180d6b8867c83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.722932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e24903fb-c16a-49f7-8d4f-d3d5987926cf", "created": "2026-10-09T15:13:11.723534Z", "modified": "2026-10-09T15:13:11.723534Z", "relationship_type": "indicates", "source_ref": "indicator--3c2795bd-b8c4-4171-b0d5-8e2e5e96a2ca", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114ad136-4051-4dca-8ede-77ffcf96dcb4", "created": "2026-10-09T15:13:11.723657Z", "modified": "2026-10-09T15:13:11.723657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6036c7a66bfc662470d6cf33890a4b8921fa0cb373dedb398c11b7ebe4d35d46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.723657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04d013b6-51a0-4821-aca1-cb5619b5c0eb", "created": "2026-10-09T15:13:11.72436Z", "modified": "2026-10-09T15:13:11.72436Z", "relationship_type": "indicates", "source_ref": "indicator--114ad136-4051-4dca-8ede-77ffcf96dcb4", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6449f2f-cc4b-46ed-ba4a-b5e7607c6b50", "created": "2026-10-09T15:13:11.724489Z", "modified": "2026-10-09T15:13:11.724489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='352070d3b4149fb4b28b030acfd60da0d143650eb643fd58ff12ddfc904f23c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.724489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf5f9d08-32cf-4ec8-b9e4-2fe992fbff17", "created": "2026-10-09T15:13:11.72509Z", "modified": "2026-10-09T15:13:11.72509Z", "relationship_type": "indicates", "source_ref": "indicator--a6449f2f-cc4b-46ed-ba4a-b5e7607c6b50", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a59c56f-2c91-42f3-9495-021e3b5e4432", "created": "2026-10-09T15:13:11.725231Z", "modified": "2026-10-09T15:13:11.725231Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db0d35258209a923bdc690786d0833c1498723a87dab94ec2ba3e7147de073a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.725231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65b297f0-255b-45a9-bb54-f389da7b1d5b", "created": "2026-10-09T15:13:11.72591Z", "modified": "2026-10-09T15:13:11.72591Z", "relationship_type": "indicates", "source_ref": "indicator--5a59c56f-2c91-42f3-9495-021e3b5e4432", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3decac-5232-4a2b-a37e-09e29eb7a386", "created": "2026-10-09T15:13:11.726039Z", "modified": "2026-10-09T15:13:11.726039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4329a83ac3ee06380b6e938561b66ec344aa7f2f10184732086324a60096de3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.726039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73785168-05a6-4296-be14-d4a9fb846b67", "created": "2026-10-09T15:13:11.726655Z", "modified": "2026-10-09T15:13:11.726655Z", "relationship_type": "indicates", "source_ref": "indicator--0b3decac-5232-4a2b-a37e-09e29eb7a386", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a4589a-66d8-4132-844e-a401d85c035c", "created": "2026-10-09T15:13:11.726783Z", "modified": "2026-10-09T15:13:11.726783Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42c8b1ecc6d2928cff2206c1a7d5ab6360767ea8d75aa5dc837f9c58cf81e38c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.726783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25f1133c-7829-4bb0-a33e-03994ea86dee", "created": "2026-10-09T15:13:11.72739Z", "modified": "2026-10-09T15:13:11.72739Z", "relationship_type": "indicates", "source_ref": "indicator--76a4589a-66d8-4132-844e-a401d85c035c", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728f1a42-8613-4d41-b98f-3732cec6f231", "created": "2026-10-09T15:13:11.727515Z", "modified": "2026-10-09T15:13:11.727515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21bd09751a26551ada2579be19ad3d935897a7496a61d2aa9a3e0d8f746e0bfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.727515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23b18c78-9987-4476-af06-0ca1c5ed4a7d", "created": "2026-10-09T15:13:11.728107Z", "modified": "2026-10-09T15:13:11.728107Z", "relationship_type": "indicates", "source_ref": "indicator--728f1a42-8613-4d41-b98f-3732cec6f231", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4d8af0-5d8b-497f-a3bb-60c72105542a", "created": "2026-10-09T15:13:11.728229Z", "modified": "2026-10-09T15:13:11.728229Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.protect']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.728229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39c29bd1-1f5d-432a-9874-3f1e3286791e", "created": "2026-10-09T15:13:11.728686Z", "modified": "2026-10-09T15:13:11.728686Z", "relationship_type": "indicates", "source_ref": "indicator--0f4d8af0-5d8b-497f-a3bb-60c72105542a", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c79dc6f-c14f-49a8-8f86-c8dccad864f8", "created": "2026-10-09T15:13:11.728805Z", "modified": "2026-10-09T15:13:11.728805Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aixlunro.uqfhkagb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.728805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed2f482b-24ba-4363-80d7-75a8e64299b9", "created": "2026-10-09T15:13:11.729258Z", "modified": "2026-10-09T15:13:11.729258Z", "relationship_type": "indicates", "source_ref": "indicator--3c79dc6f-c14f-49a8-8f86-c8dccad864f8", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b91b0c-d6b6-48a5-9b45-cd2fe9b304e0", "created": "2026-10-09T15:13:11.729418Z", "modified": "2026-10-09T15:13:11.729418Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bzbqbkya.hgozttiu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.729418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc7f3ffc-8a07-4620-a957-e0876d56e683", "created": "2026-10-09T15:13:11.729885Z", "modified": "2026-10-09T15:13:11.729885Z", "relationship_type": "indicates", "source_ref": "indicator--95b91b0c-d6b6-48a5-9b45-cd2fe9b304e0", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1161eb-2d44-4ba2-92de-f74985b6e3d1", "created": "2026-10-09T15:13:11.73001Z", "modified": "2026-10-09T15:13:11.73001Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gzomoyig.qwgawtaz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.73001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ff540ab-1225-4b3f-9577-5af75a7a8d97", "created": "2026-10-09T15:13:11.730591Z", "modified": "2026-10-09T15:13:11.730591Z", "relationship_type": "indicates", "source_ref": "indicator--da1161eb-2d44-4ba2-92de-f74985b6e3d1", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23eb78fb-7f6c-4ecb-8569-206520042cd6", "created": "2026-10-09T15:13:11.730718Z", "modified": "2026-10-09T15:13:11.730718Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.inputmethod.latinmy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.730718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--935719bf-52e1-4e88-a7b8-37778e3abb89", "created": "2026-10-09T15:13:11.731195Z", "modified": "2026-10-09T15:13:11.731195Z", "relationship_type": "indicates", "source_ref": "indicator--23eb78fb-7f6c-4ecb-8569-206520042cd6", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e9f2a-1d5c-490b-a72e-722e084b206e", "created": "2026-10-09T15:13:11.731328Z", "modified": "2026-10-09T15:13:11.731328Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ntckdlhc.oifhnjwp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.731328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--844ca002-0389-4925-838c-bbb6e8c03dfb", "created": "2026-10-09T15:13:11.731783Z", "modified": "2026-10-09T15:13:11.731783Z", "relationship_type": "indicates", "source_ref": "indicator--e46e9f2a-1d5c-490b-a72e-722e084b206e", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92070f7-3878-4e89-b547-fa4324abd144", "created": "2026-10-09T15:13:11.731901Z", "modified": "2026-10-09T15:13:11.731901Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.selgdg.febgdsra']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.731901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cfba8fc-a233-4674-b93a-cfbe698ecef3", "created": "2026-10-09T15:13:11.732376Z", "modified": "2026-10-09T15:13:11.732376Z", "relationship_type": "indicates", "source_ref": "indicator--c92070f7-3878-4e89-b547-fa4324abd144", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fe8b45-e170-4b1a-ac5b-cd923e0d5f81", "created": "2026-10-09T15:13:11.732499Z", "modified": "2026-10-09T15:13:11.732499Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.selgdg.mardsdaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.732499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--071b4d64-8acf-4581-99f7-83e522118b49", "created": "2026-10-09T15:13:11.732952Z", "modified": "2026-10-09T15:13:11.732952Z", "relationship_type": "indicates", "source_ref": "indicator--05fe8b45-e170-4b1a-ac5b-cd923e0d5f81", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dfcf07-a8a6-47fe-9656-85f72099bfa4", "created": "2026-10-09T15:13:11.73307Z", "modified": "2026-10-09T15:13:11.73307Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sepfsp.jasend']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.73307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7701f8b-aeb6-4714-a212-5c1fa97a290d", "created": "2026-10-09T15:13:11.733535Z", "modified": "2026-10-09T15:13:11.733535Z", "relationship_type": "indicates", "source_ref": "indicator--b3dfcf07-a8a6-47fe-9656-85f72099bfa4", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916cb08d-7e93-422e-87f6-be264281d53d", "created": "2026-10-09T15:13:11.733655Z", "modified": "2026-10-09T15:13:11.733655Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bnahrrbc.kwexsnhl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.733655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3edc15a-4e3b-407f-9246-73165e4ae1f9", "created": "2026-10-09T15:13:11.73412Z", "modified": "2026-10-09T15:13:11.73412Z", "relationship_type": "indicates", "source_ref": "indicator--916cb08d-7e93-422e-87f6-be264281d53d", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d80f272-c6dd-4b00-ba8d-bcf6b08e203c", "created": "2026-10-09T15:13:11.734242Z", "modified": "2026-10-09T15:13:11.734242Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tbntxear.vfmkjxme']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.734242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97a05704-2d9b-4dcc-8223-823cd9c276ea", "created": "2026-10-09T15:13:11.734712Z", "modified": "2026-10-09T15:13:11.734712Z", "relationship_type": "indicates", "source_ref": "indicator--7d80f272-c6dd-4b00-ba8d-bcf6b08e203c", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd170930-4da4-4c07-ba8c-ce8ead758925", "created": "2026-10-09T15:13:11.734832Z", "modified": "2026-10-09T15:13:11.734832Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fbhpdsej.gnuebduy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.734832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d7ff3ba-32f9-4496-927e-cefc86262b01", "created": "2026-10-09T15:13:11.735313Z", "modified": "2026-10-09T15:13:11.735313Z", "relationship_type": "indicates", "source_ref": "indicator--dd170930-4da4-4c07-ba8c-ce8ead758925", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2f0c9a-1104-48bb-8b00-6aa2ad951c34", "created": "2026-10-09T15:13:11.735437Z", "modified": "2026-10-09T15:13:11.735437Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.uxgbipup.pdtvcgzc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.735437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d920b0a-c079-4e8b-9c7f-52192d4474c6", "created": "2026-10-09T15:13:11.735997Z", "modified": "2026-10-09T15:13:11.735997Z", "relationship_type": "indicates", "source_ref": "indicator--bd2f0c9a-1104-48bb-8b00-6aa2ad951c34", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a1462a-00a4-4964-bcd7-f4d288cc60d4", "created": "2026-10-09T15:13:11.736117Z", "modified": "2026-10-09T15:13:11.736117Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.uzoifhzk.qmqnpwaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.736117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b47afc6e-2f76-4f64-ae00-e0d5c9aab9c8", "created": "2026-10-09T15:13:11.73659Z", "modified": "2026-10-09T15:13:11.73659Z", "relationship_type": "indicates", "source_ref": "indicator--13a1462a-00a4-4964-bcd7-f4d288cc60d4", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7613ca-3d49-4f85-965d-d38bdad1ccd0", "created": "2026-10-09T15:13:11.736711Z", "modified": "2026-10-09T15:13:11.736711Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.zkftwsel.fqnoquuv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.736711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d33ce47-adb2-470a-aecb-dfc8a7ce3d84", "created": "2026-10-09T15:13:11.737177Z", "modified": "2026-10-09T15:13:11.737177Z", "relationship_type": "indicates", "source_ref": "indicator--5d7613ca-3d49-4f85-965d-d38bdad1ccd0", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263a3c0c-fb43-4db0-bb42-cac186159f8e", "created": "2026-10-09T15:13:11.737307Z", "modified": "2026-10-09T15:13:11.737307Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mnwkvijy.wzyxgrft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.737307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7761288-e2a4-452f-bc03-cb4207c9d246", "created": "2026-10-09T15:13:11.737775Z", "modified": "2026-10-09T15:13:11.737775Z", "relationship_type": "indicates", "source_ref": "indicator--263a3c0c-fb43-4db0-bb42-cac186159f8e", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcd3ff2-c825-4597-a2c6-b226f82a8466", "created": "2026-10-09T15:13:11.737897Z", "modified": "2026-10-09T15:13:11.737897Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.kidlogger.kidlogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.737897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9a1f1c1-aab4-43ef-a59c-4ca80285f5b2", "created": "2026-10-09T15:13:11.738364Z", "modified": "2026-10-09T15:13:11.738364Z", "relationship_type": "indicates", "source_ref": "indicator--bbcd3ff2-c825-4597-a2c6-b226f82a8466", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419e9f36-6597-41c1-b837-6c788dc0940f", "created": "2026-10-09T15:13:11.738486Z", "modified": "2026-10-09T15:13:11.738486Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.teslineservice.kidl5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.738486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--925229f6-a2ac-465c-924c-5f1f809584d1", "created": "2026-10-09T15:13:11.73895Z", "modified": "2026-10-09T15:13:11.73895Z", "relationship_type": "indicates", "source_ref": "indicator--419e9f36-6597-41c1-b837-6c788dc0940f", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4076444-232b-45fe-b33e-c87c6635ec60", "created": "2026-10-09T15:13:11.739068Z", "modified": "2026-10-09T15:13:11.739068Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.someapp1.somecorp2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.739068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7772319-3f3a-455d-946f-04d6e53ebe28", "created": "2026-10-09T15:13:11.739542Z", "modified": "2026-10-09T15:13:11.739542Z", "relationship_type": "indicates", "source_ref": "indicator--f4076444-232b-45fe-b33e-c87c6635ec60", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011d4adf-4bb7-4ca0-b107-89ce9ebf75e0", "created": "2026-10-09T15:13:11.739663Z", "modified": "2026-10-09T15:13:11.739663Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fhekpqbq.otlzonjx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.739663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b744fac5-25ce-40b3-9e3b-cf5dab820fed", "created": "2026-10-09T15:13:11.740123Z", "modified": "2026-10-09T15:13:11.740123Z", "relationship_type": "indicates", "source_ref": "indicator--011d4adf-4bb7-4ca0-b107-89ce9ebf75e0", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d50ff55-53f7-4015-8311-a2160e64ab90", "created": "2026-10-09T15:13:11.740241Z", "modified": "2026-10-09T15:13:11.740241Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0D025A887A1546585D9BBA6F023F42B8BE0274E1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.740241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62d280f5-ef86-4fff-96b9-d638cc0a3caf", "created": "2026-10-09T15:13:11.740812Z", "modified": "2026-10-09T15:13:11.740812Z", "relationship_type": "indicates", "source_ref": "indicator--8d50ff55-53f7-4015-8311-a2160e64ab90", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90187dc-fea3-4a32-945a-0b5401c41abb", "created": "2026-10-09T15:13:11.740933Z", "modified": "2026-10-09T15:13:11.740933Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1A6D10E15280C6A938EED9BEF53A31DA0CEBA45A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.740933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97747587-5f31-4b33-8524-ac1438aff769", "created": "2026-10-09T15:13:11.741584Z", "modified": "2026-10-09T15:13:11.741584Z", "relationship_type": "indicates", "source_ref": "indicator--d90187dc-fea3-4a32-945a-0b5401c41abb", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358204c3-c30a-4dc7-aa8b-52efa0f31dcd", "created": "2026-10-09T15:13:11.74171Z", "modified": "2026-10-09T15:13:11.74171Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='272CD0BC357FA03AF87940644CB8FFDECD2FDDC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.74171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0acb2dff-3215-4232-bb9f-ad4716272182", "created": "2026-10-09T15:13:11.742262Z", "modified": "2026-10-09T15:13:11.742262Z", "relationship_type": "indicates", "source_ref": "indicator--358204c3-c30a-4dc7-aa8b-52efa0f31dcd", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878f5c95-a5ce-4c13-8d90-6aeeb2e00c08", "created": "2026-10-09T15:13:11.742397Z", "modified": "2026-10-09T15:13:11.742397Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3397C095EAD93B13CC5B9979D1F3B4FAEF1D194C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.742397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b17f07d1-568b-4445-93ca-4e87e9eba5e7", "created": "2026-10-09T15:13:11.742938Z", "modified": "2026-10-09T15:13:11.742938Z", "relationship_type": "indicates", "source_ref": "indicator--878f5c95-a5ce-4c13-8d90-6aeeb2e00c08", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fd16c7-59f4-41b4-859e-0f7109f28f8a", "created": "2026-10-09T15:13:11.743059Z", "modified": "2026-10-09T15:13:11.743059Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35D1DB3904A84793394FE5DF7B678E263B1B33A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.743059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d8303fa-3ea9-4a18-af8d-b58ed699bdb9", "created": "2026-10-09T15:13:11.743604Z", "modified": "2026-10-09T15:13:11.743604Z", "relationship_type": "indicates", "source_ref": "indicator--41fd16c7-59f4-41b4-859e-0f7109f28f8a", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1838c5ce-6d6f-47ad-9faf-38d545f6ed4a", "created": "2026-10-09T15:13:11.743723Z", "modified": "2026-10-09T15:13:11.743723Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5EF38D0143F601FD01AA39BFE9079E9927920208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.743723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea99e1c7-8c51-4601-9695-3da10f553227", "created": "2026-10-09T15:13:11.744258Z", "modified": "2026-10-09T15:13:11.744258Z", "relationship_type": "indicates", "source_ref": "indicator--1838c5ce-6d6f-47ad-9faf-38d545f6ed4a", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e267537e-5d9d-4e4f-a4fe-2b8bae763027", "created": "2026-10-09T15:13:11.744387Z", "modified": "2026-10-09T15:13:11.744387Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6CA8C06D7DAC5F5685E014AE5C4D2062F77B42D6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.744387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89e3e570-534f-4c45-a145-e6bc1af66796", "created": "2026-10-09T15:13:11.744932Z", "modified": "2026-10-09T15:13:11.744932Z", "relationship_type": "indicates", "source_ref": "indicator--e267537e-5d9d-4e4f-a4fe-2b8bae763027", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272495b4-db7c-4ae4-b8ed-a1ec13a39280", "created": "2026-10-09T15:13:11.745051Z", "modified": "2026-10-09T15:13:11.745051Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='789A24C1605F1BF2B6D64580C697BD38D9446A7E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.745051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70d2f221-cec5-4bc6-a950-bdfb4392a600", "created": "2026-10-09T15:13:11.745599Z", "modified": "2026-10-09T15:13:11.745599Z", "relationship_type": "indicates", "source_ref": "indicator--272495b4-db7c-4ae4-b8ed-a1ec13a39280", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b1d2df-05e2-43a2-8431-47d5afa08cbe", "created": "2026-10-09T15:13:11.745718Z", "modified": "2026-10-09T15:13:11.745718Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8AE2267AEEA0DBFF7D7CC1C82E54343B1B0CFA22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.745718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea1eeb3e-2cf4-4d22-94f8-5b454a7bc44a", "created": "2026-10-09T15:13:11.746257Z", "modified": "2026-10-09T15:13:11.746257Z", "relationship_type": "indicates", "source_ref": "indicator--36b1d2df-05e2-43a2-8431-47d5afa08cbe", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad428604-477b-4efa-bc41-364dc0010cdd", "created": "2026-10-09T15:13:11.746389Z", "modified": "2026-10-09T15:13:11.746389Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8B187B3EBEF7D1BC8E32BEC78D36CBF95505A1C1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.746389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbb76803-1404-46e0-893a-e69e5c65a8ea", "created": "2026-10-09T15:13:11.746949Z", "modified": "2026-10-09T15:13:11.746949Z", "relationship_type": "indicates", "source_ref": "indicator--ad428604-477b-4efa-bc41-364dc0010cdd", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f88b5cd-de80-4d2f-8439-ed2d2c84e39c", "created": "2026-10-09T15:13:11.747071Z", "modified": "2026-10-09T15:13:11.747071Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='95D589A90971992A2038E5961B39C8B6BC77CF19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.747071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cae9e36e-f7a4-41c2-ba1a-5473820db615", "created": "2026-10-09T15:13:11.747731Z", "modified": "2026-10-09T15:13:11.747731Z", "relationship_type": "indicates", "source_ref": "indicator--0f88b5cd-de80-4d2f-8439-ed2d2c84e39c", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3785b039-f1e8-4c71-a998-f2fc28fbbb7b", "created": "2026-10-09T15:13:11.747855Z", "modified": "2026-10-09T15:13:11.747855Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A2EBDD14E2AE17F52363BCB751CCBE15BE5A2F8D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.747855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e75bcecf-fa95-4465-b4ee-0f66bec994d3", "created": "2026-10-09T15:13:11.748408Z", "modified": "2026-10-09T15:13:11.748408Z", "relationship_type": "indicates", "source_ref": "indicator--3785b039-f1e8-4c71-a998-f2fc28fbbb7b", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6e30ff-faba-402a-a755-2aacacd01a27", "created": "2026-10-09T15:13:11.748533Z", "modified": "2026-10-09T15:13:11.748533Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AA4F85CD7C24116BB51FA733BE59290B7BB8C204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.748533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3939bd3c-5cba-49af-b08d-8f5e869392f5", "created": "2026-10-09T15:13:11.749074Z", "modified": "2026-10-09T15:13:11.749074Z", "relationship_type": "indicates", "source_ref": "indicator--7e6e30ff-faba-402a-a755-2aacacd01a27", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f77574-166b-4cd8-9e4d-26956e74ba81", "created": "2026-10-09T15:13:11.749191Z", "modified": "2026-10-09T15:13:11.749191Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F575CA9980D3075CF728F2081D9EC5F910CC17E8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.749191Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e88a7975-5a35-47cb-8696-684768080276", "created": "2026-10-09T15:13:11.749752Z", "modified": "2026-10-09T15:13:11.749752Z", "relationship_type": "indicates", "source_ref": "indicator--38f77574-166b-4cd8-9e4d-26956e74ba81", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246bb1c4-b092-47c7-aedf-633c9e35c29f", "created": "2026-10-09T15:13:11.749874Z", "modified": "2026-10-09T15:13:11.749874Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FD84821C80C1499A2446F6F7E13BF8BDA6A66402']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.749874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17249f17-e089-4e1d-a0ac-943b0a461576", "created": "2026-10-09T15:13:11.750433Z", "modified": "2026-10-09T15:13:11.750433Z", "relationship_type": "indicates", "source_ref": "indicator--246bb1c4-b092-47c7-aedf-633c9e35c29f", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2f3ba5-64b3-4574-b3c3-9c4971c040f4", "created": "2026-10-09T15:13:11.750557Z", "modified": "2026-10-09T15:13:11.750557Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77C411957F307F6B971C7C07825CA5EA06F0E36D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.750557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4f7872e-f3c0-4f15-97b6-9b2bbb17560f", "created": "2026-10-09T15:13:11.751103Z", "modified": "2026-10-09T15:13:11.751103Z", "relationship_type": "indicates", "source_ref": "indicator--1b2f3ba5-64b3-4574-b3c3-9c4971c040f4", "target_ref": "malware--3916c1ab-cd71-4587-94df-707048900a66"}, {"type": "malware", "spec_version": "2.1", "id": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b", "created": "2026-10-09T15:13:11.751219Z", "modified": "2026-10-09T15:13:11.751219Z", "name": "NemoSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba897c6-7f07-4285-8ef2-83a27fe2c2cc", "created": "2026-10-09T15:13:11.751347Z", "modified": "2026-10-09T15:13:11.751347Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.751347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50a691f6-7cfd-4e1c-b82d-c497f92ad320", "created": "2026-10-09T15:13:11.751818Z", "modified": "2026-10-09T15:13:11.751818Z", "relationship_type": "indicates", "source_ref": "indicator--2ba897c6-7f07-4285-8ef2-83a27fe2c2cc", "target_ref": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f23327d-620e-4d38-a740-a68124221a29", "created": "2026-10-09T15:13:11.751938Z", "modified": "2026-10-09T15:13:11.751938Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setup.nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.751938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae97fe42-1dda-4248-9320-27f9231e42a7", "created": "2026-10-09T15:13:11.752418Z", "modified": "2026-10-09T15:13:11.752418Z", "relationship_type": "indicates", "source_ref": "indicator--3f23327d-620e-4d38-a740-a68124221a29", "target_ref": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e89b4f-5260-49df-a753-78e3e4a3c269", "created": "2026-10-09T15:13:11.752542Z", "modified": "2026-10-09T15:13:11.752542Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.752542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b7a6ca3-8726-40bb-a28b-ab8528c0bacf", "created": "2026-10-09T15:13:11.753013Z", "modified": "2026-10-09T15:13:11.753013Z", "relationship_type": "indicates", "source_ref": "indicator--06e89b4f-5260-49df-a753-78e3e4a3c269", "target_ref": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67894048-6566-4eb0-8e12-9092222865b5", "created": "2026-10-09T15:13:11.753132Z", "modified": "2026-10-09T15:13:11.753132Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.753132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a42b8359-d08c-4bf7-8f71-907d713e2264", "created": "2026-10-09T15:13:11.753727Z", "modified": "2026-10-09T15:13:11.753727Z", "relationship_type": "indicates", "source_ref": "indicator--67894048-6566-4eb0-8e12-9092222865b5", "target_ref": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b12eff-f6b6-4d5e-b017-ac88ac51ddb5", "created": "2026-10-09T15:13:11.753853Z", "modified": "2026-10-09T15:13:11.753853Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E871393054ED858ACB5854C0DB9F674C42160344']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.753853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bfe720b-a2a5-498e-93f0-d9517d8f1bdb", "created": "2026-10-09T15:13:11.754414Z", "modified": "2026-10-09T15:13:11.754414Z", "relationship_type": "indicates", "source_ref": "indicator--35b12eff-f6b6-4d5e-b017-ac88ac51ddb5", "target_ref": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979a7f35-8302-4238-b7dd-65b40dbae07d", "created": "2026-10-09T15:13:11.754541Z", "modified": "2026-10-09T15:13:11.754541Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C7FBC97C3BD3949A6C19FF332E6CF2F2E5CEE561']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.754541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b2e1c5d-d78e-4ceb-8b83-e2c382fc91a6", "created": "2026-10-09T15:13:11.755082Z", "modified": "2026-10-09T15:13:11.755082Z", "relationship_type": "indicates", "source_ref": "indicator--979a7f35-8302-4238-b7dd-65b40dbae07d", "target_ref": "malware--954df2e1-a70f-46a1-9edc-deeeadd6821b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e52ae313-af54-406e-b513-cc096a517e91", "created": "2026-10-09T15:13:11.755201Z", "modified": "2026-10-09T15:13:11.755201Z", "name": "SpyKontrol", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb58727c-d507-4e12-b348-149f13f19f69", "created": "2026-10-09T15:13:11.755331Z", "modified": "2026-10-09T15:13:11.755331Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.spykontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.755331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cbb92e6-748f-46d0-8556-fd3b2dd6d996", "created": "2026-10-09T15:13:11.755808Z", "modified": "2026-10-09T15:13:11.755808Z", "relationship_type": "indicates", "source_ref": "indicator--fb58727c-d507-4e12-b348-149f13f19f69", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbfa2b4-43f8-43e4-8e42-eb8adf8e1327", "created": "2026-10-09T15:13:11.755928Z", "modified": "2026-10-09T15:13:11.755928Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidapk.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.755928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2aa215e2-6b58-4009-85a5-38bba8603af8", "created": "2026-10-09T15:13:11.756408Z", "modified": "2026-10-09T15:13:11.756408Z", "relationship_type": "indicates", "source_ref": "indicator--8cbfa2b4-43f8-43e4-8e42-eb8adf8e1327", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02eea90-bd95-4552-b277-4f66de301eaa", "created": "2026-10-09T15:13:11.75653Z", "modified": "2026-10-09T15:13:11.75653Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spykontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.75653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7aa38683-6952-47fa-8227-a4d05a3bf0a6", "created": "2026-10-09T15:13:11.757008Z", "modified": "2026-10-09T15:13:11.757008Z", "relationship_type": "indicates", "source_ref": "indicator--f02eea90-bd95-4552-b277-4f66de301eaa", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e10847-f4c0-4fc1-80ff-72304e08c9f4", "created": "2026-10-09T15:13:11.757129Z", "modified": "2026-10-09T15:13:11.757129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spykontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.757129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6851e8be-9bbc-417c-ab29-23061288233e", "created": "2026-10-09T15:13:11.757614Z", "modified": "2026-10-09T15:13:11.757614Z", "relationship_type": "indicates", "source_ref": "indicator--96e10847-f4c0-4fc1-80ff-72304e08c9f4", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40281535-f833-4431-ba86-e7e3f3946f55", "created": "2026-10-09T15:13:11.757739Z", "modified": "2026-10-09T15:13:11.757739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidapk.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.757739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a6b41d0-2161-4404-819c-fc65105ae258", "created": "2026-10-09T15:13:11.758213Z", "modified": "2026-10-09T15:13:11.758213Z", "relationship_type": "indicates", "source_ref": "indicator--40281535-f833-4431-ba86-e7e3f3946f55", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb408d3-2e5f-48e7-8712-e6138eaa86d2", "created": "2026-10-09T15:13:11.758356Z", "modified": "2026-10-09T15:13:11.758356Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ajygpxjy.bnthtjou']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.758356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98b44088-9c5b-4d26-9248-c1ca7a624b14", "created": "2026-10-09T15:13:11.758823Z", "modified": "2026-10-09T15:13:11.758823Z", "relationship_type": "indicates", "source_ref": "indicator--1eb408d3-2e5f-48e7-8712-e6138eaa86d2", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae61513-6ea3-4769-bc57-09b820f8014e", "created": "2026-10-09T15:13:11.758944Z", "modified": "2026-10-09T15:13:11.758944Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.udxlbuno.plwnnhop']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.758944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9a40a16-b5b8-4672-bb5d-3c54677bdbb3", "created": "2026-10-09T15:13:11.759512Z", "modified": "2026-10-09T15:13:11.759512Z", "relationship_type": "indicates", "source_ref": "indicator--3ae61513-6ea3-4769-bc57-09b820f8014e", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c6acbb-96df-4194-981e-26d221a05094", "created": "2026-10-09T15:13:11.759636Z", "modified": "2026-10-09T15:13:11.759636Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.igyluazm.iytdhsky']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.759636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e76f5941-b585-48b3-863e-9d3f1da67957", "created": "2026-10-09T15:13:11.760099Z", "modified": "2026-10-09T15:13:11.760099Z", "relationship_type": "indicates", "source_ref": "indicator--b7c6acbb-96df-4194-981e-26d221a05094", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d53b00-d661-428d-a098-4c1f4fda8ee0", "created": "2026-10-09T15:13:11.760222Z", "modified": "2026-10-09T15:13:11.760222Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FB8F23C57D0AFD255FD255B290B2EF6DBB2EAFD8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.760222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--816bd058-578d-47b8-a8ea-fd01bd7cdcd8", "created": "2026-10-09T15:13:11.760781Z", "modified": "2026-10-09T15:13:11.760781Z", "relationship_type": "indicates", "source_ref": "indicator--e6d53b00-d661-428d-a098-4c1f4fda8ee0", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3154258-a045-4bec-9b11-f2e48178767f", "created": "2026-10-09T15:13:11.760904Z", "modified": "2026-10-09T15:13:11.760904Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A36C70833A8A796F94CCD56B810D2A123F4F0485']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.760904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50b1d800-14e6-4683-9227-343725214b2c", "created": "2026-10-09T15:13:11.761461Z", "modified": "2026-10-09T15:13:11.761461Z", "relationship_type": "indicates", "source_ref": "indicator--d3154258-a045-4bec-9b11-f2e48178767f", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e39236-a82b-4d8e-a4eb-d6ebdabada42", "created": "2026-10-09T15:13:11.761586Z", "modified": "2026-10-09T15:13:11.761586Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EA35FC50B3B0E0A9E5405BAC2D7E58D7F9559FD0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.761586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d36e661b-ddca-4682-85d3-675e9950b196", "created": "2026-10-09T15:13:11.762137Z", "modified": "2026-10-09T15:13:11.762137Z", "relationship_type": "indicates", "source_ref": "indicator--a6e39236-a82b-4d8e-a4eb-d6ebdabada42", "target_ref": "malware--e52ae313-af54-406e-b513-cc096a517e91"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba", "created": "2026-10-09T15:13:11.762275Z", "modified": "2026-10-09T15:13:11.762275Z", "name": "Trackplus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960d2565-af7a-42ae-ada4-7655f42149ab", "created": "2026-10-09T15:13:11.762394Z", "modified": "2026-10-09T15:13:11.762394Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='12d60.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.762394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca33a73c-62fc-455b-a5f8-c2f2d7628d19", "created": "2026-10-09T15:13:11.762869Z", "modified": "2026-10-09T15:13:11.762869Z", "relationship_type": "indicates", "source_ref": "indicator--960d2565-af7a-42ae-ada4-7655f42149ab", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09cc36b-6ed3-4838-b9b3-e2d8d6b5830f", "created": "2026-10-09T15:13:11.762987Z", "modified": "2026-10-09T15:13:11.762987Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='12d60.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.762987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5903306-6748-4ea7-9913-87c8d10dea1a", "created": "2026-10-09T15:13:11.763484Z", "modified": "2026-10-09T15:13:11.763484Z", "relationship_type": "indicates", "source_ref": "indicator--e09cc36b-6ed3-4838-b9b3-e2d8d6b5830f", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1361b6-116c-47f5-9352-5e6f736510f5", "created": "2026-10-09T15:13:11.763608Z", "modified": "2026-10-09T15:13:11.763608Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='13-5.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.763608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54f888aa-c72e-4a42-89af-cfdaaca5b406", "created": "2026-10-09T15:13:11.764079Z", "modified": "2026-10-09T15:13:11.764079Z", "relationship_type": "indicates", "source_ref": "indicator--eb1361b6-116c-47f5-9352-5e6f736510f5", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385bdeae-7f89-4d81-9c4a-8477b1efaff3", "created": "2026-10-09T15:13:11.764203Z", "modified": "2026-10-09T15:13:11.764203Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='13-5.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.764203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d4d4bfd-3013-485c-a3eb-a0161a16c46c", "created": "2026-10-09T15:13:11.764686Z", "modified": "2026-10-09T15:13:11.764686Z", "relationship_type": "indicates", "source_ref": "indicator--385bdeae-7f89-4d81-9c4a-8477b1efaff3", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80dd853-f83d-441e-97be-b08133e5f2f8", "created": "2026-10-09T15:13:11.764807Z", "modified": "2026-10-09T15:13:11.764807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='89685.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.764807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58314a26-aa92-4291-9fe8-d247c7ea88e6", "created": "2026-10-09T15:13:11.765398Z", "modified": "2026-10-09T15:13:11.765398Z", "relationship_type": "indicates", "source_ref": "indicator--d80dd853-f83d-441e-97be-b08133e5f2f8", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea79a375-9d7e-47ff-ad5b-b90b03109a3b", "created": "2026-10-09T15:13:11.76552Z", "modified": "2026-10-09T15:13:11.76552Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.trackerplus.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.76552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b2f0d44-6d65-4b12-ace5-a43c510ec13e", "created": "2026-10-09T15:13:11.766001Z", "modified": "2026-10-09T15:13:11.766001Z", "relationship_type": "indicates", "source_ref": "indicator--ea79a375-9d7e-47ff-ad5b-b90b03109a3b", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c5a26f-1f04-4d9d-8706-42f7fbcc6cd0", "created": "2026-10-09T15:13:11.766122Z", "modified": "2026-10-09T15:13:11.766122Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='and.info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.766122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db13f88f-9f49-47b3-9756-b42a5de60fcd", "created": "2026-10-09T15:13:11.766608Z", "modified": "2026-10-09T15:13:11.766608Z", "relationship_type": "indicates", "source_ref": "indicator--b4c5a26f-1f04-4d9d-8706-42f7fbcc6cd0", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf1978c-b94d-4732-81c7-0a1a112f6a6d", "created": "2026-10-09T15:13:11.766729Z", "modified": "2026-10-09T15:13:11.766729Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='best-spy-apps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.766729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9328dd1e-e2a7-4c87-81f2-5d7f5fb20e96", "created": "2026-10-09T15:13:11.767203Z", "modified": "2026-10-09T15:13:11.767203Z", "relationship_type": "indicates", "source_ref": "indicator--edf1978c-b94d-4732-81c7-0a1a112f6a6d", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d4e66c-34d1-4ff7-ab72-758c65e73ad5", "created": "2026-10-09T15:13:11.767335Z", "modified": "2026-10-09T15:13:11.767335Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='edlnc255s2q.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.767335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01252650-15fb-477f-a5bd-5738b1fa58a3", "created": "2026-10-09T15:13:11.767823Z", "modified": "2026-10-09T15:13:11.767823Z", "relationship_type": "indicates", "source_ref": "indicator--e7d4e66c-34d1-4ff7-ab72-758c65e73ad5", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978882c0-2011-4bdb-a35e-1aa872087621", "created": "2026-10-09T15:13:11.767946Z", "modified": "2026-10-09T15:13:11.767946Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ftp.info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.767946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88327ac2-e83e-45f3-9ee9-ca7ecc22e77e", "created": "2026-10-09T15:13:11.768434Z", "modified": "2026-10-09T15:13:11.768434Z", "relationship_type": "indicates", "source_ref": "indicator--978882c0-2011-4bdb-a35e-1aa872087621", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f293c914-d0f3-4f8b-91ac-b0987fda5004", "created": "2026-10-09T15:13:11.768556Z", "modified": "2026-10-09T15:13:11.768556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.768556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--176045f2-d1b1-4ee7-9e6c-bbdbc908a285", "created": "2026-10-09T15:13:11.769033Z", "modified": "2026-10-09T15:13:11.769033Z", "relationship_type": "indicates", "source_ref": "indicator--f293c914-d0f3-4f8b-91ac-b0987fda5004", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcad7d0d-74f9-4071-8e00-daf4ac975fed", "created": "2026-10-09T15:13:11.769156Z", "modified": "2026-10-09T15:13:11.769156Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kokum.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.769156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb9d553d-d96b-4d62-bd6a-209b94882752", "created": "2026-10-09T15:13:11.769623Z", "modified": "2026-10-09T15:13:11.769623Z", "relationship_type": "indicates", "source_ref": "indicator--bcad7d0d-74f9-4071-8e00-daf4ac975fed", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb58b5f-f2ac-4279-8d42-447e442772f9", "created": "2026-10-09T15:13:11.769747Z", "modified": "2026-10-09T15:13:11.769747Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pi.info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.769747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23791830-1a41-4af7-8c16-28fb30fd9923", "created": "2026-10-09T15:13:11.770218Z", "modified": "2026-10-09T15:13:11.770218Z", "relationship_type": "indicates", "source_ref": "indicator--4fb58b5f-f2ac-4279-8d42-447e442772f9", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269577f0-fd01-428d-9a06-18b611c40d00", "created": "2026-10-09T15:13:11.770355Z", "modified": "2026-10-09T15:13:11.770355Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sap4mobile-89685.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.770355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb950481-7a7b-462c-89d5-9028a6b41c07", "created": "2026-10-09T15:13:11.770947Z", "modified": "2026-10-09T15:13:11.770947Z", "relationship_type": "indicates", "source_ref": "indicator--269577f0-fd01-428d-9a06-18b611c40d00", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc8a3cd-a825-455b-80b3-5d23455fb559", "created": "2026-10-09T15:13:11.771069Z", "modified": "2026-10-09T15:13:11.771069Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sap4mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.771069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d447d7b0-7bde-4e68-bd18-eb011afc3553", "created": "2026-10-09T15:13:11.771552Z", "modified": "2026-10-09T15:13:11.771552Z", "relationship_type": "indicates", "source_ref": "indicator--4cc8a3cd-a825-455b-80b3-5d23455fb559", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed088399-61c6-48e7-a32b-6b658b499000", "created": "2026-10-09T15:13:11.771673Z", "modified": "2026-10-09T15:13:11.771673Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smartback-12d60.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.771673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--958a17c0-75a0-4506-9884-92988aeff04e", "created": "2026-10-09T15:13:11.772158Z", "modified": "2026-10-09T15:13:11.772158Z", "relationship_type": "indicates", "source_ref": "indicator--ed088399-61c6-48e7-a32b-6b658b499000", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fa3717-e8be-4d1b-8150-fda650797f8e", "created": "2026-10-09T15:13:11.772287Z", "modified": "2026-10-09T15:13:11.772287Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smartback-12d60.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.772287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--806b8007-0e6f-4610-b7ea-b00f03b124ba", "created": "2026-10-09T15:13:11.772775Z", "modified": "2026-10-09T15:13:11.772775Z", "relationship_type": "indicates", "source_ref": "indicator--69fa3717-e8be-4d1b-8150-fda650797f8e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eab3d5d-ebb3-448c-8b59-ff6835cf6c3d", "created": "2026-10-09T15:13:11.772891Z", "modified": "2026-10-09T15:13:11.772891Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy2mobile-bb441.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.772891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa629198-98a3-4525-a196-1ff2c08b391b", "created": "2026-10-09T15:13:11.773392Z", "modified": "2026-10-09T15:13:11.773392Z", "relationship_type": "indicates", "source_ref": "indicator--3eab3d5d-ebb3-448c-8b59-ff6835cf6c3d", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af62c191-703c-41ec-a4c9-abbde11d1843", "created": "2026-10-09T15:13:11.773514Z", "modified": "2026-10-09T15:13:11.773514Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy2mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.773514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bc1886b-da89-4082-83e5-3f3a1e3ba467", "created": "2026-10-09T15:13:11.773983Z", "modified": "2026-10-09T15:13:11.773983Z", "relationship_type": "indicates", "source_ref": "indicator--af62c191-703c-41ec-a4c9-abbde11d1843", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66480fac-81ae-44e3-8b3c-ecc6f25baa04", "created": "2026-10-09T15:13:11.774102Z", "modified": "2026-10-09T15:13:11.774102Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.774102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc8149a5-9007-4a23-b160-66a9851cc007", "created": "2026-10-09T15:13:11.774577Z", "modified": "2026-10-09T15:13:11.774577Z", "relationship_type": "indicates", "source_ref": "indicator--66480fac-81ae-44e3-8b3c-ecc6f25baa04", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6ad5cd-a3e6-4db0-b20b-2576d3aefa52", "created": "2026-10-09T15:13:11.774696Z", "modified": "2026-10-09T15:13:11.774696Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tagdps.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.774696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0129450-71fe-4b05-80a0-4f2825648276", "created": "2026-10-09T15:13:11.775177Z", "modified": "2026-10-09T15:13:11.775177Z", "relationship_type": "indicates", "source_ref": "indicator--7f6ad5cd-a3e6-4db0-b20b-2576d3aefa52", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a408449c-3aba-40d7-8f83-41c907bbee86", "created": "2026-10-09T15:13:11.77531Z", "modified": "2026-10-09T15:13:11.77531Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tfk7r22klf8vtd8g90jq8qno1tpqhmpe.apps.googleusercontent.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.77531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d5fee5e-a58e-4827-abd7-9bd32d7323d3", "created": "2026-10-09T15:13:11.775845Z", "modified": "2026-10-09T15:13:11.775845Z", "relationship_type": "indicates", "source_ref": "indicator--a408449c-3aba-40d7-8f83-41c907bbee86", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f6d33f-3561-46b7-9465-0b8cedcda935", "created": "2026-10-09T15:13:11.775965Z", "modified": "2026-10-09T15:13:11.775965Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.775965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f283ce27-1e7a-41be-a619-80bdda93bee2", "created": "2026-10-09T15:13:11.776557Z", "modified": "2026-10-09T15:13:11.776557Z", "relationship_type": "indicates", "source_ref": "indicator--f1f6d33f-3561-46b7-9465-0b8cedcda935", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0bbef9-b6b2-427d-972b-8211613e52f0", "created": "2026-10-09T15:13:11.776683Z", "modified": "2026-10-09T15:13:11.776683Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='forum.spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.776683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef82677c-64ae-4580-9c6e-8657ec0b01a9", "created": "2026-10-09T15:13:11.777179Z", "modified": "2026-10-09T15:13:11.777179Z", "relationship_type": "indicates", "source_ref": "indicator--1f0bbef9-b6b2-427d-972b-8211613e52f0", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5daf655-788b-4ec2-829c-37a3802d19fe", "created": "2026-10-09T15:13:11.777314Z", "modified": "2026-10-09T15:13:11.777314Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy2mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.777314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef318adb-6330-45a3-a96b-c931ccaf1515", "created": "2026-10-09T15:13:11.777794Z", "modified": "2026-10-09T15:13:11.777794Z", "relationship_type": "indicates", "source_ref": "indicator--d5daf655-788b-4ec2-829c-37a3802d19fe", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f601c76d-4de5-4c9e-9d04-4820ed250a91", "created": "2026-10-09T15:13:11.777916Z", "modified": "2026-10-09T15:13:11.777916Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.777916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3cc8298-4fa9-4d95-b1f1-a620b90a416b", "created": "2026-10-09T15:13:11.778399Z", "modified": "2026-10-09T15:13:11.778399Z", "relationship_type": "indicates", "source_ref": "indicator--f601c76d-4de5-4c9e-9d04-4820ed250a91", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3209742-50de-4180-8a87-6374366559e3", "created": "2026-10-09T15:13:11.778523Z", "modified": "2026-10-09T15:13:11.778523Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackerplus.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.778523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d57ff35-49a1-4159-bbb2-83108c2f5ad9", "created": "2026-10-09T15:13:11.778996Z", "modified": "2026-10-09T15:13:11.778996Z", "relationship_type": "indicates", "source_ref": "indicator--a3209742-50de-4180-8a87-6374366559e3", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c497ab3d-a354-4300-ad1d-245235618bbc", "created": "2026-10-09T15:13:11.779114Z", "modified": "2026-10-09T15:13:11.779114Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spy2mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.779114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d76388d-2f34-4281-ba69-a147f63f36bc", "created": "2026-10-09T15:13:11.779599Z", "modified": "2026-10-09T15:13:11.779599Z", "relationship_type": "indicates", "source_ref": "indicator--c497ab3d-a354-4300-ad1d-245235618bbc", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec272ee-887f-41fd-ab59-dead2fb91cb0", "created": "2026-10-09T15:13:11.77972Z", "modified": "2026-10-09T15:13:11.77972Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.77972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e4a4622-7f76-4c77-8db3-1d0f713721d8", "created": "2026-10-09T15:13:11.780194Z", "modified": "2026-10-09T15:13:11.780194Z", "relationship_type": "indicates", "source_ref": "indicator--2ec272ee-887f-41fd-ab59-dead2fb91cb0", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa43970-2b98-4bbb-be6e-6b7a4eb49a75", "created": "2026-10-09T15:13:11.78034Z", "modified": "2026-10-09T15:13:11.78034Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d49534ccec0fa5fb02e0d906135e5407927ad4cd1ce899d796b1e03b387f0bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.78034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53512221-40aa-401c-bfba-8e9d6f8955b1", "created": "2026-10-09T15:13:11.780958Z", "modified": "2026-10-09T15:13:11.780958Z", "relationship_type": "indicates", "source_ref": "indicator--baa43970-2b98-4bbb-be6e-6b7a4eb49a75", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55957a54-ca1c-4d2a-906c-13f2cd38ecd8", "created": "2026-10-09T15:13:11.781082Z", "modified": "2026-10-09T15:13:11.781082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c8b36325f7f5f65d8eb481b26cd6f9eec79fbcf7711013344cdf496155d94dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.781082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbd9e8b7-0230-4dbb-a7f8-8f7a3f1b75fc", "created": "2026-10-09T15:13:11.781691Z", "modified": "2026-10-09T15:13:11.781691Z", "relationship_type": "indicates", "source_ref": "indicator--55957a54-ca1c-4d2a-906c-13f2cd38ecd8", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42d144e-5cdd-4276-84a7-9651cae1f6e1", "created": "2026-10-09T15:13:11.781813Z", "modified": "2026-10-09T15:13:11.781813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29a7cf29dbfa027888996c9b1529eb867069e6e138e811a252258a241ea3d0c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.781813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7615be67-f067-46a5-978c-f8f29f2d941a", "created": "2026-10-09T15:13:11.782514Z", "modified": "2026-10-09T15:13:11.782514Z", "relationship_type": "indicates", "source_ref": "indicator--f42d144e-5cdd-4276-84a7-9651cae1f6e1", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd3da34-9353-41f9-affa-fe57cb45a83e", "created": "2026-10-09T15:13:11.782646Z", "modified": "2026-10-09T15:13:11.782646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3eee8942aededa9c890c654bdf18130c6c9655455ee5b4241bb1214f7df7ed4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.782646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76a81b8b-31c2-4d91-be34-57623c5f603a", "created": "2026-10-09T15:13:11.783234Z", "modified": "2026-10-09T15:13:11.783234Z", "relationship_type": "indicates", "source_ref": "indicator--edd3da34-9353-41f9-affa-fe57cb45a83e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6027d9d9-b78f-47aa-88e5-770391378f53", "created": "2026-10-09T15:13:11.783368Z", "modified": "2026-10-09T15:13:11.783368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe1828f81394c182abb15899e28b9ddfdde0e905fd9024e94fd777ebadb80c2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.783368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f82d60c-8ef5-4da7-a023-89bd5faca15b", "created": "2026-10-09T15:13:11.783954Z", "modified": "2026-10-09T15:13:11.783954Z", "relationship_type": "indicates", "source_ref": "indicator--6027d9d9-b78f-47aa-88e5-770391378f53", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d12e66-0d92-488a-a366-cc1bba682889", "created": "2026-10-09T15:13:11.784077Z", "modified": "2026-10-09T15:13:11.784077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a62800805372232c609893024d45f959589606873c5ca6c8ce866b2e837bdce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.784077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82cd9213-cc5f-46e5-bf0f-91a0708128ce", "created": "2026-10-09T15:13:11.784686Z", "modified": "2026-10-09T15:13:11.784686Z", "relationship_type": "indicates", "source_ref": "indicator--68d12e66-0d92-488a-a366-cc1bba682889", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66f52d4-0235-45f9-9575-edd9c84909d9", "created": "2026-10-09T15:13:11.784811Z", "modified": "2026-10-09T15:13:11.784811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='790190cc8d7382798ec6d3c298b0d24b461b61ee07dd106f7453db5010056928']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.784811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92ba9d68-bf20-46bf-94fe-e25a81471028", "created": "2026-10-09T15:13:11.785408Z", "modified": "2026-10-09T15:13:11.785408Z", "relationship_type": "indicates", "source_ref": "indicator--b66f52d4-0235-45f9-9575-edd9c84909d9", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18dccf3-a877-4a10-b0c4-1e72f5b18b00", "created": "2026-10-09T15:13:11.785528Z", "modified": "2026-10-09T15:13:11.785528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b63afb0e1c375020bede72318c1c0f64084e88f9b2ab51893dfb3fd38ec19f50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.785528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2c485f6-97f8-46db-8e32-04fd9db0f8ec", "created": "2026-10-09T15:13:11.78611Z", "modified": "2026-10-09T15:13:11.78611Z", "relationship_type": "indicates", "source_ref": "indicator--c18dccf3-a877-4a10-b0c4-1e72f5b18b00", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e246e1e-587d-4c28-bb8d-8cc76b682cb6", "created": "2026-10-09T15:13:11.786232Z", "modified": "2026-10-09T15:13:11.786232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='441e2c5b683c2daec6dea2a31a2340579ffe34918e6206359c8ff14c9bdf4653']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.786232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--700dd4d0-fa9a-444e-ab33-f36241934834", "created": "2026-10-09T15:13:11.78684Z", "modified": "2026-10-09T15:13:11.78684Z", "relationship_type": "indicates", "source_ref": "indicator--5e246e1e-587d-4c28-bb8d-8cc76b682cb6", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5d4745-bc1f-4b41-8e0a-ebbc55a2b0aa", "created": "2026-10-09T15:13:11.786972Z", "modified": "2026-10-09T15:13:11.786972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d578d7215d9926610c794a73af486c44d3563a60c450f1c0c3921b43eb149fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.786972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be803ead-209f-4977-82a8-5a71161a770d", "created": "2026-10-09T15:13:11.787573Z", "modified": "2026-10-09T15:13:11.787573Z", "relationship_type": "indicates", "source_ref": "indicator--fe5d4745-bc1f-4b41-8e0a-ebbc55a2b0aa", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed39ada-d9d0-4566-b7a3-27c216c8dfb4", "created": "2026-10-09T15:13:11.787698Z", "modified": "2026-10-09T15:13:11.787698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fc63e8ccd84040059d0d81c7ed8dd94c4c2a9cf29160985fe80ba7aef9630ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.787698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22711f45-bae6-4204-a504-149b6dd39281", "created": "2026-10-09T15:13:11.7883Z", "modified": "2026-10-09T15:13:11.7883Z", "relationship_type": "indicates", "source_ref": "indicator--eed39ada-d9d0-4566-b7a3-27c216c8dfb4", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f41aa9b-1350-4372-8a60-1a26e6ad83ea", "created": "2026-10-09T15:13:11.788425Z", "modified": "2026-10-09T15:13:11.788425Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd6c5203e7b35467793567c8c994729248431081e01ed24f6bd3e5859f00182b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.788425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eb9025b-2616-4ea6-8513-b60cfbac7ef3", "created": "2026-10-09T15:13:11.789469Z", "modified": "2026-10-09T15:13:11.789469Z", "relationship_type": "indicates", "source_ref": "indicator--6f41aa9b-1350-4372-8a60-1a26e6ad83ea", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1aeef62-4b3d-45b5-92f0-d372eb33f0c4", "created": "2026-10-09T15:13:11.789597Z", "modified": "2026-10-09T15:13:11.789597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='708c1b154075b4c672864243fc04f508cd5c8b19df39359c1671591525db0b4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.789597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc59fd4a-868e-4fea-83d6-70fae0e19832", "created": "2026-10-09T15:13:11.790182Z", "modified": "2026-10-09T15:13:11.790182Z", "relationship_type": "indicates", "source_ref": "indicator--a1aeef62-4b3d-45b5-92f0-d372eb33f0c4", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70577fd8-4eea-4760-b486-178be4ba4fd4", "created": "2026-10-09T15:13:11.790316Z", "modified": "2026-10-09T15:13:11.790316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ce1cc5dacb30ae008dbad544ee15ae000b68eb1aba20b84d3d0dcc2033ea833']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.790316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54bc363a-3386-4454-9bd6-af7d25ec7374", "created": "2026-10-09T15:13:11.790906Z", "modified": "2026-10-09T15:13:11.790906Z", "relationship_type": "indicates", "source_ref": "indicator--70577fd8-4eea-4760-b486-178be4ba4fd4", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6533e3ba-91cb-4a8a-9d97-d91d5cd752ce", "created": "2026-10-09T15:13:11.791027Z", "modified": "2026-10-09T15:13:11.791027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='07bb94d0673e0e0902da383004c944c13a4aef71b82ed6c8f75a17c52eee9c9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.791027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e03c1090-9ec9-468b-8ace-73c9266761d5", "created": "2026-10-09T15:13:11.791632Z", "modified": "2026-10-09T15:13:11.791632Z", "relationship_type": "indicates", "source_ref": "indicator--6533e3ba-91cb-4a8a-9d97-d91d5cd752ce", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be57930a-47e1-4ef2-a0cf-1efd32f3ec3e", "created": "2026-10-09T15:13:11.791761Z", "modified": "2026-10-09T15:13:11.791761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51ac0d9c23e16c1c70ded6b1f0325cfead5c44d18e4408ab5cccb942e6cb2c27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.791761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85dbe9a0-94c0-496b-875a-ba20c2660879", "created": "2026-10-09T15:13:11.792364Z", "modified": "2026-10-09T15:13:11.792364Z", "relationship_type": "indicates", "source_ref": "indicator--be57930a-47e1-4ef2-a0cf-1efd32f3ec3e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5befb305-d791-4a62-b129-c4f8d58f3606", "created": "2026-10-09T15:13:11.792491Z", "modified": "2026-10-09T15:13:11.792491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cf52131706bc8d96cdb9fba28166b53b72c0510fd830f26efdb25150d26fa1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.792491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ea2ee7b-ccba-4492-8eba-8b8e39751ac2", "created": "2026-10-09T15:13:11.793071Z", "modified": "2026-10-09T15:13:11.793071Z", "relationship_type": "indicates", "source_ref": "indicator--5befb305-d791-4a62-b129-c4f8d58f3606", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df997904-fb26-43b8-998e-a313e8a83b97", "created": "2026-10-09T15:13:11.793194Z", "modified": "2026-10-09T15:13:11.793194Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6219e3d10f203cb3e7c94fa7b97c2f4b1ede084b986610aeddf97868e2fe533']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.793194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a62613da-0f02-4731-8b51-3b98e4036347", "created": "2026-10-09T15:13:11.793786Z", "modified": "2026-10-09T15:13:11.793786Z", "relationship_type": "indicates", "source_ref": "indicator--df997904-fb26-43b8-998e-a313e8a83b97", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c02293-c7d9-426f-839a-3deaebcc59b6", "created": "2026-10-09T15:13:11.793907Z", "modified": "2026-10-09T15:13:11.793907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35e1938d149db81c65e414f6c7754ff212e82f189cc0bb1c619b18e7c04cf8d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.793907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bde9391-e282-4b38-ba76-8cdfbf1bbfa3", "created": "2026-10-09T15:13:11.794504Z", "modified": "2026-10-09T15:13:11.794504Z", "relationship_type": "indicates", "source_ref": "indicator--05c02293-c7d9-426f-839a-3deaebcc59b6", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d031bb92-334a-406f-aecf-3b47104fda29", "created": "2026-10-09T15:13:11.794626Z", "modified": "2026-10-09T15:13:11.794626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19a8d63918f5cee7676228f4aeb47784fb89773ef2544ab06e85041fd65b1fe7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.794626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--981a502e-bd0d-4395-9af1-89870ff7a0d7", "created": "2026-10-09T15:13:11.79521Z", "modified": "2026-10-09T15:13:11.79521Z", "relationship_type": "indicates", "source_ref": "indicator--d031bb92-334a-406f-aecf-3b47104fda29", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53766f97-247b-4f2b-8ec2-f50629e39c54", "created": "2026-10-09T15:13:11.795343Z", "modified": "2026-10-09T15:13:11.795343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='489e656495e74a3a5c031a2988613ed3de18ec9358083fe5fa7281a25fd35e6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.795343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6db12ad2-143e-43b5-ab79-07649a47f71d", "created": "2026-10-09T15:13:11.796054Z", "modified": "2026-10-09T15:13:11.796054Z", "relationship_type": "indicates", "source_ref": "indicator--53766f97-247b-4f2b-8ec2-f50629e39c54", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da28a22c-47d1-41e6-926a-6dd10a95f2a2", "created": "2026-10-09T15:13:11.79618Z", "modified": "2026-10-09T15:13:11.79618Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.callhist.calltr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.79618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22f1bb6e-3c85-48d1-9f0f-581052db0508", "created": "2026-10-09T15:13:11.796658Z", "modified": "2026-10-09T15:13:11.796658Z", "relationship_type": "indicates", "source_ref": "indicator--da28a22c-47d1-41e6-926a-6dd10a95f2a2", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d936b7-2878-4d2d-9296-cd263e2c077c", "created": "2026-10-09T15:13:11.796784Z", "modified": "2026-10-09T15:13:11.796784Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.catrsy.jaluc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.796784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f291eff1-8364-4d7f-b24a-712f8fa880aa", "created": "2026-10-09T15:13:11.797243Z", "modified": "2026-10-09T15:13:11.797243Z", "relationship_type": "indicates", "source_ref": "indicator--d5d936b7-2878-4d2d-9296-cd263e2c077c", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a62ddf-d9c9-4673-9b34-20141a49acd5", "created": "2026-10-09T15:13:11.797377Z", "modified": "2026-10-09T15:13:11.797377Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cellph.montrb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.797377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e011f294-4c87-408d-8cdd-686b513d031a", "created": "2026-10-09T15:13:11.797833Z", "modified": "2026-10-09T15:13:11.797833Z", "relationship_type": "indicates", "source_ref": "indicator--e0a62ddf-d9c9-4673-9b34-20141a49acd5", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c8cd38-b471-4ccb-90c5-3b04cfcb3f5d", "created": "2026-10-09T15:13:11.797952Z", "modified": "2026-10-09T15:13:11.797952Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dbzbpr.skt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.797952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f053d789-ea6f-4b35-92c1-f6326341c5ee", "created": "2026-10-09T15:13:11.798407Z", "modified": "2026-10-09T15:13:11.798407Z", "relationship_type": "indicates", "source_ref": "indicator--b9c8cd38-b471-4ccb-90c5-3b04cfcb3f5d", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83882510-1739-4285-a0f2-7474f6bb780e", "created": "2026-10-09T15:13:11.798525Z", "modified": "2026-10-09T15:13:11.798525Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.elpatr.woac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.798525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c74a1c6a-9938-4639-b8d4-a457fd55e940", "created": "2026-10-09T15:13:11.79897Z", "modified": "2026-10-09T15:13:11.79897Z", "relationship_type": "indicates", "source_ref": "indicator--83882510-1739-4285-a0f2-7474f6bb780e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994d6197-1f1f-4166-9bfd-6307c59b1c80", "created": "2026-10-09T15:13:11.799089Z", "modified": "2026-10-09T15:13:11.799089Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ernell.thht']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.799089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b40b01d2-2861-4b8d-87f4-1c50621a6147", "created": "2026-10-09T15:13:11.799551Z", "modified": "2026-10-09T15:13:11.799551Z", "relationship_type": "indicates", "source_ref": "indicator--994d6197-1f1f-4166-9bfd-6307c59b1c80", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd20e63f-c9fb-4f54-b038-7f8a3c039256", "created": "2026-10-09T15:13:11.799677Z", "modified": "2026-10-09T15:13:11.799677Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gh.ob']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.799677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bd4a200-9da3-4bde-b291-c873589a1079", "created": "2026-10-09T15:13:11.800128Z", "modified": "2026-10-09T15:13:11.800128Z", "relationship_type": "indicates", "source_ref": "indicator--dd20e63f-c9fb-4f54-b038-7f8a3c039256", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4c9872-462c-4f5e-aa4e-4e598355b21d", "created": "2026-10-09T15:13:11.800247Z", "modified": "2026-10-09T15:13:11.800247Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.greatdata']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.800247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4329f2f6-46db-451d-84f9-e3cf66d9f80c", "created": "2026-10-09T15:13:11.800704Z", "modified": "2026-10-09T15:13:11.800704Z", "relationship_type": "indicates", "source_ref": "indicator--af4c9872-462c-4f5e-aa4e-4e598355b21d", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97130e97-fb2a-4f08-b7a4-6db32f7ca4b6", "created": "2026-10-09T15:13:11.800822Z", "modified": "2026-10-09T15:13:11.800822Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kidsmobmon']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.800822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--697d3243-f2b7-4ddb-9d57-b8a106e35b49", "created": "2026-10-09T15:13:11.801373Z", "modified": "2026-10-09T15:13:11.801373Z", "relationship_type": "indicates", "source_ref": "indicator--97130e97-fb2a-4f08-b7a4-6db32f7ca4b6", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ff0c4b-c36c-43a2-b2fe-801e9e53cd31", "created": "2026-10-09T15:13:11.801499Z", "modified": "2026-10-09T15:13:11.801499Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobitra.todv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.801499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64a89020-02de-4a83-985e-a44d1f1cca40", "created": "2026-10-09T15:13:11.801954Z", "modified": "2026-10-09T15:13:11.801954Z", "relationship_type": "indicates", "source_ref": "indicator--07ff0c4b-c36c-43a2-b2fe-801e9e53cd31", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23a3b41-86c3-49a6-a8dc-70e436599fcd", "created": "2026-10-09T15:13:11.802072Z", "modified": "2026-10-09T15:13:11.802072Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobphn.monit']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.802072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56d7120a-13b8-4a12-bcf8-536c06ebd2b4", "created": "2026-10-09T15:13:11.802543Z", "modified": "2026-10-09T15:13:11.802543Z", "relationship_type": "indicates", "source_ref": "indicator--c23a3b41-86c3-49a6-a8dc-70e436599fcd", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a368cc-d436-48b8-9dc4-d21f03039e9f", "created": "2026-10-09T15:13:11.802668Z", "modified": "2026-10-09T15:13:11.802668Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobtr.danbel']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.802668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20f68093-192b-4995-8c38-25b4e96ce743", "created": "2026-10-09T15:13:11.803121Z", "modified": "2026-10-09T15:13:11.803121Z", "relationship_type": "indicates", "source_ref": "indicator--29a368cc-d436-48b8-9dc4-d21f03039e9f", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ab4d93-720b-4277-a06a-5a6b2c2ed770", "created": "2026-10-09T15:13:11.803239Z", "modified": "2026-10-09T15:13:11.803239Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mophtr.td']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.803239Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c52cf5e-4284-4d06-856d-2e4b4d9d5844", "created": "2026-10-09T15:13:11.803709Z", "modified": "2026-10-09T15:13:11.803709Z", "relationship_type": "indicates", "source_ref": "indicator--f0ab4d93-720b-4277-a06a-5a6b2c2ed770", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd4723-fc78-4ab8-bd66-7beab5c24a9f", "created": "2026-10-09T15:13:11.803836Z", "modified": "2026-10-09T15:13:11.803836Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phone.tracker.smsb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.803836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dc7f999-168f-4dfb-b638-10da9723752d", "created": "2026-10-09T15:13:11.804307Z", "modified": "2026-10-09T15:13:11.804307Z", "relationship_type": "indicates", "source_ref": "indicator--16cd4723-fc78-4ab8-bd66-7beab5c24a9f", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d13da8f-f249-47d1-8b4a-6908d9336ce0", "created": "2026-10-09T15:13:11.80443Z", "modified": "2026-10-09T15:13:11.80443Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phtranlo.tifach']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.80443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb804d30-cb18-4b6e-a1e5-dc82770e6e7b", "created": "2026-10-09T15:13:11.804883Z", "modified": "2026-10-09T15:13:11.804883Z", "relationship_type": "indicates", "source_ref": "indicator--3d13da8f-f249-47d1-8b4a-6908d9336ce0", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db112919-aaa7-46cc-94b8-6559243dcea7", "created": "2026-10-09T15:13:11.805006Z", "modified": "2026-10-09T15:13:11.805006Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rephko.stha']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.805006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4f275fd-e9d2-49f3-9e7d-9c3fe6ab58ab", "created": "2026-10-09T15:13:11.805466Z", "modified": "2026-10-09T15:13:11.805466Z", "relationship_type": "indicates", "source_ref": "indicator--db112919-aaa7-46cc-94b8-6559243dcea7", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bbb7dd-3269-4b91-b2db-a4f90b10eaac", "created": "2026-10-09T15:13:11.80559Z", "modified": "2026-10-09T15:13:11.80559Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.s2m']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.80559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ae95e79-f879-4f04-825e-55ce1989d5f1", "created": "2026-10-09T15:13:11.806029Z", "modified": "2026-10-09T15:13:11.806029Z", "relationship_type": "indicates", "source_ref": "indicator--76bbb7dd-3269-4b91-b2db-a4f90b10eaac", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d602ca3-27d8-4086-bc9d-c31fbf7a2733", "created": "2026-10-09T15:13:11.806146Z", "modified": "2026-10-09T15:13:11.806146Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.s2m.seas']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.806146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7f425ec-a0e3-4b79-a175-0febdf8edf50", "created": "2026-10-09T15:13:11.806704Z", "modified": "2026-10-09T15:13:11.806704Z", "relationship_type": "indicates", "source_ref": "indicator--8d602ca3-27d8-4086-bc9d-c31fbf7a2733", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdfe1d5-91fa-4421-9563-2f71281b998e", "created": "2026-10-09T15:13:11.806829Z", "modified": "2026-10-09T15:13:11.806829Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sap4mobile']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.806829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d3dbb33-a5b1-4570-8a83-832a3125ec6b", "created": "2026-10-09T15:13:11.807305Z", "modified": "2026-10-09T15:13:11.807305Z", "relationship_type": "indicates", "source_ref": "indicator--afdfe1d5-91fa-4421-9563-2f71281b998e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3013b26-f4fb-4f04-95f1-1cfd7750c7b8", "created": "2026-10-09T15:13:11.807432Z", "modified": "2026-10-09T15:13:11.807432Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smart']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.807432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1241dc0f-d742-43ff-aebc-41844fbffe46", "created": "2026-10-09T15:13:11.807892Z", "modified": "2026-10-09T15:13:11.807892Z", "relationship_type": "indicates", "source_ref": "indicator--d3013b26-f4fb-4f04-95f1-1cfd7750c7b8", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c1c8ed-59c6-4634-b679-e8c58c5c132b", "created": "2026-10-09T15:13:11.808013Z", "modified": "2026-10-09T15:13:11.808013Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smartback']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.808013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b348fc5-6264-47b9-a51f-3f0fca4e2c28", "created": "2026-10-09T15:13:11.808474Z", "modified": "2026-10-09T15:13:11.808474Z", "relationship_type": "indicates", "source_ref": "indicator--e8c1c8ed-59c6-4634-b679-e8c58c5c132b", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027a6ce6-dcd1-4d2b-a1d1-4c9c425864b6", "created": "2026-10-09T15:13:11.808598Z", "modified": "2026-10-09T15:13:11.808598Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smstra.xanris']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.808598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea6a0f53-5924-40af-a150-3e936e26fb9c", "created": "2026-10-09T15:13:11.809054Z", "modified": "2026-10-09T15:13:11.809054Z", "relationship_type": "indicates", "source_ref": "indicator--027a6ce6-dcd1-4d2b-a1d1-4c9c425864b6", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746a04c2-5a45-4b8f-b6cf-f66d68ad8c5e", "created": "2026-10-09T15:13:11.809172Z", "modified": "2026-10-09T15:13:11.809172Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spy2mobile']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.809172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3f41aa6-a1f0-45b5-a945-781272b01288", "created": "2026-10-09T15:13:11.809643Z", "modified": "2026-10-09T15:13:11.809643Z", "relationship_type": "indicates", "source_ref": "indicator--746a04c2-5a45-4b8f-b6cf-f66d68ad8c5e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c59ac51-ff0f-4487-95db-6bcacf392b75", "created": "2026-10-09T15:13:11.809768Z", "modified": "2026-10-09T15:13:11.809768Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spy2mobile.light']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.809768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef28b69b-574c-4770-a24a-b3dcf9226b22", "created": "2026-10-09T15:13:11.810225Z", "modified": "2026-10-09T15:13:11.810225Z", "relationship_type": "indicates", "source_ref": "indicator--8c59ac51-ff0f-4487-95db-6bcacf392b75", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f6da97-6faf-4ba0-bbca-588a41abda32", "created": "2026-10-09T15:13:11.810356Z", "modified": "2026-10-09T15:13:11.810356Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.stmrsa.htxt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.810356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--835e3b7e-f655-4557-8669-b7d8e9598c11", "created": "2026-10-09T15:13:11.810819Z", "modified": "2026-10-09T15:13:11.810819Z", "relationship_type": "indicates", "source_ref": "indicator--08f6da97-6faf-4ba0-bbca-588a41abda32", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e880c344-0177-4ee6-9b03-96354882d39c", "created": "2026-10-09T15:13:11.810938Z", "modified": "2026-10-09T15:13:11.810938Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tccplos.spth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.810938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ba90914-79c6-4906-b4e7-6682312c83dd", "created": "2026-10-09T15:13:11.811407Z", "modified": "2026-10-09T15:13:11.811407Z", "relationship_type": "indicates", "source_ref": "indicator--e880c344-0177-4ee6-9b03-96354882d39c", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b458cf-1c34-431a-b1e5-a9969f8f32ac", "created": "2026-10-09T15:13:11.811527Z", "modified": "2026-10-09T15:13:11.811527Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tevi.walpi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.811527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce95f6ad-1444-4632-a044-3eada694ccba", "created": "2026-10-09T15:13:11.812067Z", "modified": "2026-10-09T15:13:11.812067Z", "relationship_type": "indicates", "source_ref": "indicator--16b458cf-1c34-431a-b1e5-a9969f8f32ac", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebc63fc-a1cb-4bef-b702-d5821c52ef88", "created": "2026-10-09T15:13:11.812196Z", "modified": "2026-10-09T15:13:11.812196Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tracker.sms.mobile']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.812196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--367952a5-dcac-47b4-90dc-125f162c0d07", "created": "2026-10-09T15:13:11.812671Z", "modified": "2026-10-09T15:13:11.812671Z", "relationship_type": "indicates", "source_ref": "indicator--8ebc63fc-a1cb-4bef-b702-d5821c52ef88", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f4c12c-242b-4c04-9f96-92e35b77e72f", "created": "2026-10-09T15:13:11.812794Z", "modified": "2026-10-09T15:13:11.812794Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackzone.kids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.812794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2532e02-8fe9-44c2-8819-32faee7e27be", "created": "2026-10-09T15:13:11.813251Z", "modified": "2026-10-09T15:13:11.813251Z", "relationship_type": "indicates", "source_ref": "indicator--e5f4c12c-242b-4c04-9f96-92e35b77e72f", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87035021-f9c3-4a90-bc4c-b175e98ac7a2", "created": "2026-10-09T15:13:11.813382Z", "modified": "2026-10-09T15:13:11.813382Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trandmon.tool']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.813382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--608dcce7-38d9-414a-bc40-6bc28b6f11df", "created": "2026-10-09T15:13:11.813833Z", "modified": "2026-10-09T15:13:11.813833Z", "relationship_type": "indicates", "source_ref": "indicator--87035021-f9c3-4a90-bc4c-b175e98ac7a2", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89c3812-c99f-415d-9e7f-8977749f6992", "created": "2026-10-09T15:13:11.813952Z", "modified": "2026-10-09T15:13:11.813952Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trphwhat.prob']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.813952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19bdcfad-131a-44f5-9e37-06c98ca1ecb1", "created": "2026-10-09T15:13:11.814419Z", "modified": "2026-10-09T15:13:11.814419Z", "relationship_type": "indicates", "source_ref": "indicator--e89c3812-c99f-415d-9e7f-8977749f6992", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52ee442-0bd7-41fc-8107-80ad82bee731", "created": "2026-10-09T15:13:11.814543Z", "modified": "2026-10-09T15:13:11.814543Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.viewcalls.rem']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.814543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4abdc273-f199-44a8-bee0-f0a0e2502de0", "created": "2026-10-09T15:13:11.815007Z", "modified": "2026-10-09T15:13:11.815007Z", "relationship_type": "indicates", "source_ref": "indicator--e52ee442-0bd7-41fc-8107-80ad82bee731", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459268c8-7956-4195-8974-9d6b3ceab4a9", "created": "2026-10-09T15:13:11.815131Z", "modified": "2026-10-09T15:13:11.815131Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.viewsms.remb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.815131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7e5a9bf-bf37-4423-8594-ec60a76cfb1e", "created": "2026-10-09T15:13:11.815595Z", "modified": "2026-10-09T15:13:11.815595Z", "relationship_type": "indicates", "source_ref": "indicator--459268c8-7956-4195-8974-9d6b3ceab4a9", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf587ec-69de-4a1d-9635-835f74f568fb", "created": "2026-10-09T15:13:11.815714Z", "modified": "2026-10-09T15:13:11.815714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.whtrack.monit']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.815714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d542e06a-038a-4392-b5cb-9b2007d93e21", "created": "2026-10-09T15:13:11.816165Z", "modified": "2026-10-09T15:13:11.816165Z", "relationship_type": "indicates", "source_ref": "indicator--ebf587ec-69de-4a1d-9635-835f74f568fb", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d0b8f-24cb-4d28-bfbf-2a0f53eef0de", "created": "2026-10-09T15:13:11.816294Z", "modified": "2026-10-09T15:13:11.816294Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0387135D057AEAA0F8BCFCE2AFA84D9BD1FA6F30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.816294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59beeb26-56b3-47db-bbcf-39f7e970229c", "created": "2026-10-09T15:13:11.816841Z", "modified": "2026-10-09T15:13:11.816841Z", "relationship_type": "indicates", "source_ref": "indicator--c31d0b8f-24cb-4d28-bfbf-2a0f53eef0de", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0545479b-5e40-43ed-b416-341bd18e3e87", "created": "2026-10-09T15:13:11.816965Z", "modified": "2026-10-09T15:13:11.816965Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0C5AB4D05A2C804D3A4D0472CEAC50B89833E6E4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.816965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe9926f1-8a27-4c94-bdf8-5add349b5d4d", "created": "2026-10-09T15:13:11.817634Z", "modified": "2026-10-09T15:13:11.817634Z", "relationship_type": "indicates", "source_ref": "indicator--0545479b-5e40-43ed-b416-341bd18e3e87", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dcf165-d068-4e95-81b1-f7aeffde7f1f", "created": "2026-10-09T15:13:11.817762Z", "modified": "2026-10-09T15:13:11.817762Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0F64B6EBB49849AC685FE5DF605908594623368E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.817762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af71df30-051e-4c1a-8f45-0b9ffeed36a8", "created": "2026-10-09T15:13:11.818328Z", "modified": "2026-10-09T15:13:11.818328Z", "relationship_type": "indicates", "source_ref": "indicator--46dcf165-d068-4e95-81b1-f7aeffde7f1f", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972c76ce-6f0e-4fa1-91b2-cab2fb13c985", "created": "2026-10-09T15:13:11.818456Z", "modified": "2026-10-09T15:13:11.818456Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='14EE7779B2E84A0FF1309DEA72881670D78E98AB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.818456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43bfe79e-e349-4861-b79b-17937da8b701", "created": "2026-10-09T15:13:11.818995Z", "modified": "2026-10-09T15:13:11.818995Z", "relationship_type": "indicates", "source_ref": "indicator--972c76ce-6f0e-4fa1-91b2-cab2fb13c985", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c59d986-088b-46f6-aab1-3ccc47acd28e", "created": "2026-10-09T15:13:11.819114Z", "modified": "2026-10-09T15:13:11.819114Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1BB7F1E962C35F00BE2EF97A64C753CCA0993637']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.819114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--282e2688-0d43-4bf5-8a22-64e24fc2a833", "created": "2026-10-09T15:13:11.81968Z", "modified": "2026-10-09T15:13:11.81968Z", "relationship_type": "indicates", "source_ref": "indicator--8c59d986-088b-46f6-aab1-3ccc47acd28e", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a46b46-f52f-499f-8e05-f68d45dd15ff", "created": "2026-10-09T15:13:11.819801Z", "modified": "2026-10-09T15:13:11.819801Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20948233C3EF1662E79850AE0AB959C4760114C2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.819801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a22d08e6-cc1f-46c1-931a-eaa5b1cab2c8", "created": "2026-10-09T15:13:11.820356Z", "modified": "2026-10-09T15:13:11.820356Z", "relationship_type": "indicates", "source_ref": "indicator--f0a46b46-f52f-499f-8e05-f68d45dd15ff", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d461d503-aa16-4061-9f0e-b4aff45c91d5", "created": "2026-10-09T15:13:11.820485Z", "modified": "2026-10-09T15:13:11.820485Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='26DDA9B261169FB0A63A6CEA5B682B7A190328B6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.820485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--265da47c-6dee-4ffe-8d21-2f7ee6896ebf", "created": "2026-10-09T15:13:11.821038Z", "modified": "2026-10-09T15:13:11.821038Z", "relationship_type": "indicates", "source_ref": "indicator--d461d503-aa16-4061-9f0e-b4aff45c91d5", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b638667-f6f1-4f4a-87c0-f955ea2a4822", "created": "2026-10-09T15:13:11.821158Z", "modified": "2026-10-09T15:13:11.821158Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='26FC20C25AF99E4B6C16ABAD8E8D76AFA55973BB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.821158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1386bae8-6554-4e4c-90c9-8b23975a312a", "created": "2026-10-09T15:13:11.821724Z", "modified": "2026-10-09T15:13:11.821724Z", "relationship_type": "indicates", "source_ref": "indicator--7b638667-f6f1-4f4a-87c0-f955ea2a4822", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd294bef-cf10-488c-b1bf-5471cb9edefc", "created": "2026-10-09T15:13:11.82185Z", "modified": "2026-10-09T15:13:11.82185Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='271CA9A77AF56B94F942EDA8F517E4B0FD44206C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.82185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6f977bd-856f-465b-9b5b-2cfdb4adfd92", "created": "2026-10-09T15:13:11.822409Z", "modified": "2026-10-09T15:13:11.822409Z", "relationship_type": "indicates", "source_ref": "indicator--dd294bef-cf10-488c-b1bf-5471cb9edefc", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75485306-52a1-40d4-94bb-f8c6e7b1ba0a", "created": "2026-10-09T15:13:11.822537Z", "modified": "2026-10-09T15:13:11.822537Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2919FF38F04D757BA6FE344F1729275739F43E89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.822537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e88f11d1-48af-4d48-b90c-42a02c67eba8", "created": "2026-10-09T15:13:11.823101Z", "modified": "2026-10-09T15:13:11.823101Z", "relationship_type": "indicates", "source_ref": "indicator--75485306-52a1-40d4-94bb-f8c6e7b1ba0a", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38071331-9ed3-41d8-9995-a69cfe99f070", "created": "2026-10-09T15:13:11.823225Z", "modified": "2026-10-09T15:13:11.823225Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2B02F9708FAD9017D9F709AB2C5C8B5BD0D29394']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.823225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b87f30ae-3a94-4a9b-9b47-e7474c402813", "created": "2026-10-09T15:13:11.823884Z", "modified": "2026-10-09T15:13:11.823884Z", "relationship_type": "indicates", "source_ref": "indicator--38071331-9ed3-41d8-9995-a69cfe99f070", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd859b2-e0a2-4384-bdcd-3fefdd66e612", "created": "2026-10-09T15:13:11.824007Z", "modified": "2026-10-09T15:13:11.824007Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='39DDEFD8261C1946E4F3160F6A9E200F59F06C11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.824007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ec2ed21-a7d5-4ca0-9fd5-8c244adad87c", "created": "2026-10-09T15:13:11.824573Z", "modified": "2026-10-09T15:13:11.824573Z", "relationship_type": "indicates", "source_ref": "indicator--bbd859b2-e0a2-4384-bdcd-3fefdd66e612", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387ee6f0-f6e3-48f9-91fb-306035eb69b6", "created": "2026-10-09T15:13:11.8247Z", "modified": "2026-10-09T15:13:11.8247Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3A041A8B1CF12E01AD4AA14779C1FCCA0701FE5C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.8247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8d11de0-8205-42cd-8497-42ee9158eb53", "created": "2026-10-09T15:13:11.825247Z", "modified": "2026-10-09T15:13:11.825247Z", "relationship_type": "indicates", "source_ref": "indicator--387ee6f0-f6e3-48f9-91fb-306035eb69b6", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed0df11-b6ea-4cb2-af30-bfb1886d2250", "created": "2026-10-09T15:13:11.82538Z", "modified": "2026-10-09T15:13:11.82538Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E4E5813CA5B9D9BB50B70FAD3C201FAA54B4FD5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.82538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fcb9456-0316-4b65-97cb-836899be62a8", "created": "2026-10-09T15:13:11.825922Z", "modified": "2026-10-09T15:13:11.825922Z", "relationship_type": "indicates", "source_ref": "indicator--aed0df11-b6ea-4cb2-af30-bfb1886d2250", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4706e2f-9798-4716-ba71-7b323348098a", "created": "2026-10-09T15:13:11.82604Z", "modified": "2026-10-09T15:13:11.82604Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4569A62308FA134A33A5DDCC065D6FDAE5653435']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.82604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--243267c9-4746-4004-aeee-c031f8326722", "created": "2026-10-09T15:13:11.826591Z", "modified": "2026-10-09T15:13:11.826591Z", "relationship_type": "indicates", "source_ref": "indicator--a4706e2f-9798-4716-ba71-7b323348098a", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39393337-2f78-45da-9d8c-966f907f0feb", "created": "2026-10-09T15:13:11.826713Z", "modified": "2026-10-09T15:13:11.826713Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4579E9E02465DAC399B7A47682813F5104E5D914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.826713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4d236f6-1860-4361-b0de-48723a877ed0", "created": "2026-10-09T15:13:11.827253Z", "modified": "2026-10-09T15:13:11.827253Z", "relationship_type": "indicates", "source_ref": "indicator--39393337-2f78-45da-9d8c-966f907f0feb", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0f198c-ad6d-465e-bc9e-012d44625b80", "created": "2026-10-09T15:13:11.827382Z", "modified": "2026-10-09T15:13:11.827382Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='54E4D1ACDA9E3071D27AA7B6470E23F75BF1380B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.827382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a064cd1-dbe7-41cc-a28a-71dc6a28e3a6", "created": "2026-10-09T15:13:11.827923Z", "modified": "2026-10-09T15:13:11.827923Z", "relationship_type": "indicates", "source_ref": "indicator--2b0f198c-ad6d-465e-bc9e-012d44625b80", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1f80a6-3b9c-4160-9317-d80208162b46", "created": "2026-10-09T15:13:11.828043Z", "modified": "2026-10-09T15:13:11.828043Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5C9031E2340478521630198F3F90E5C8D38D3B64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.828043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--155baea3-e298-4ce2-b9a4-dc1a329251ab", "created": "2026-10-09T15:13:11.828598Z", "modified": "2026-10-09T15:13:11.828598Z", "relationship_type": "indicates", "source_ref": "indicator--ca1f80a6-3b9c-4160-9317-d80208162b46", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fb5ec6-3a4b-472f-8a22-47649dede8a6", "created": "2026-10-09T15:13:11.828719Z", "modified": "2026-10-09T15:13:11.828719Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='76A90B5E41FA2AFE14478CDA24A0CA6B4F7FC5F3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.828719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53d14f82-ce35-46f8-85ce-086987e88557", "created": "2026-10-09T15:13:11.829263Z", "modified": "2026-10-09T15:13:11.829263Z", "relationship_type": "indicates", "source_ref": "indicator--35fb5ec6-3a4b-472f-8a22-47649dede8a6", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6ce190-b5c9-4573-91eb-34e372b339fb", "created": "2026-10-09T15:13:11.829391Z", "modified": "2026-10-09T15:13:11.829391Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7D9EDDE23B4D3D7AC459B06ECEBE8EA1350D4F8F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.829391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a975cd67-55fb-4b14-b2d5-6cba6fac936f", "created": "2026-10-09T15:13:11.830035Z", "modified": "2026-10-09T15:13:11.830035Z", "relationship_type": "indicates", "source_ref": "indicator--0e6ce190-b5c9-4573-91eb-34e372b339fb", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a4a1f8-d07d-4190-a6e6-53979070b086", "created": "2026-10-09T15:13:11.83016Z", "modified": "2026-10-09T15:13:11.83016Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7DED7756C3DBE351A23BE061E989273888414FE6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.83016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9293d23e-8b0f-4fee-ac26-cf23b67d8fc2", "created": "2026-10-09T15:13:11.830713Z", "modified": "2026-10-09T15:13:11.830713Z", "relationship_type": "indicates", "source_ref": "indicator--86a4a1f8-d07d-4190-a6e6-53979070b086", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120cf1d0-8c89-43cc-a760-87b9fe90704b", "created": "2026-10-09T15:13:11.830836Z", "modified": "2026-10-09T15:13:11.830836Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8C76B4444DAE08ECF578AF51D295836F0D9BADC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.830836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57deb384-37a4-4c70-a498-f0ff26ec5a77", "created": "2026-10-09T15:13:11.831388Z", "modified": "2026-10-09T15:13:11.831388Z", "relationship_type": "indicates", "source_ref": "indicator--120cf1d0-8c89-43cc-a760-87b9fe90704b", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8d07c5-fbd6-4384-939f-0d6e251920d0", "created": "2026-10-09T15:13:11.831509Z", "modified": "2026-10-09T15:13:11.831509Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8D7FEC36654F6B35FA89E079685D637CCEE27755']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.831509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--148ef623-9c49-46c2-9fcd-e53d1276a1c9", "created": "2026-10-09T15:13:11.832045Z", "modified": "2026-10-09T15:13:11.832045Z", "relationship_type": "indicates", "source_ref": "indicator--8f8d07c5-fbd6-4384-939f-0d6e251920d0", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2df87cd-238b-4eee-9088-45144f460f9f", "created": "2026-10-09T15:13:11.832164Z", "modified": "2026-10-09T15:13:11.832164Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9329632A70D41158EBAB6EED27B12D8CB0D47579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.832164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--239b1205-d235-44c6-91cd-dbea3a84aa9c", "created": "2026-10-09T15:13:11.832719Z", "modified": "2026-10-09T15:13:11.832719Z", "relationship_type": "indicates", "source_ref": "indicator--e2df87cd-238b-4eee-9088-45144f460f9f", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1752d50-0c7a-433d-8dd8-9b22fb584441", "created": "2026-10-09T15:13:11.832838Z", "modified": "2026-10-09T15:13:11.832838Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='98140CAE57F4D4CA53EF81F6521E7A0FD601F6E9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.832838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec05fab6-56c5-4e6b-b77d-5a525e76bdae", "created": "2026-10-09T15:13:11.833399Z", "modified": "2026-10-09T15:13:11.833399Z", "relationship_type": "indicates", "source_ref": "indicator--f1752d50-0c7a-433d-8dd8-9b22fb584441", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d155339-2cef-42a5-b4ee-05b76cc8de67", "created": "2026-10-09T15:13:11.833521Z", "modified": "2026-10-09T15:13:11.833521Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='986E5892EFB97E807772698BAC701F49CE9CAEA8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.833521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1929fa0c-1c08-420a-be6e-c2e7a29bfcef", "created": "2026-10-09T15:13:11.834069Z", "modified": "2026-10-09T15:13:11.834069Z", "relationship_type": "indicates", "source_ref": "indicator--5d155339-2cef-42a5-b4ee-05b76cc8de67", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db48f990-9270-4a7f-aeb8-cd7ca7c7f5ce", "created": "2026-10-09T15:13:11.834186Z", "modified": "2026-10-09T15:13:11.834186Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='98E76043B54DD7CB76E0E6E384A83646F1865BAE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.834186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05cb99ab-2998-4ae6-95d2-139ce32d2fab", "created": "2026-10-09T15:13:11.834742Z", "modified": "2026-10-09T15:13:11.834742Z", "relationship_type": "indicates", "source_ref": "indicator--db48f990-9270-4a7f-aeb8-cd7ca7c7f5ce", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8391c015-30a3-4bc5-8c4d-a6288923d053", "created": "2026-10-09T15:13:11.834862Z", "modified": "2026-10-09T15:13:11.834862Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A2CD01EE20E3C25575D2D9B9645A52A1FA8C36C6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.834862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebb3fca9-346b-4bee-9bd8-bd5358786a7d", "created": "2026-10-09T15:13:11.835508Z", "modified": "2026-10-09T15:13:11.835508Z", "relationship_type": "indicates", "source_ref": "indicator--8391c015-30a3-4bc5-8c4d-a6288923d053", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2aec4dc-2a8a-44dd-b9c9-1393c434a93d", "created": "2026-10-09T15:13:11.835633Z", "modified": "2026-10-09T15:13:11.835633Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A2CE290D98B66B577880F3D7807DC01EB7FCE01B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.835633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1436c45-c479-4fd4-bfed-a33a54bc57e8", "created": "2026-10-09T15:13:11.836175Z", "modified": "2026-10-09T15:13:11.836175Z", "relationship_type": "indicates", "source_ref": "indicator--a2aec4dc-2a8a-44dd-b9c9-1393c434a93d", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad6d46a-ab14-42c3-9ea1-e7b0e59e96be", "created": "2026-10-09T15:13:11.836312Z", "modified": "2026-10-09T15:13:11.836312Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='ADF393A6628366341BA488B85A5AE738793BFD17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.836312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7855cf17-f2e8-4327-b234-1741f6b6efde", "created": "2026-10-09T15:13:11.836858Z", "modified": "2026-10-09T15:13:11.836858Z", "relationship_type": "indicates", "source_ref": "indicator--cad6d46a-ab14-42c3-9ea1-e7b0e59e96be", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6660e3-a219-4c97-af96-0d5e19d6a1f3", "created": "2026-10-09T15:13:11.836984Z", "modified": "2026-10-09T15:13:11.836984Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8C908630D7D1ED52FA4E5AEC2A2BDA0414F8B3F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.836984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bec529e0-eda9-496e-af71-d299f02f6f1a", "created": "2026-10-09T15:13:11.837535Z", "modified": "2026-10-09T15:13:11.837535Z", "relationship_type": "indicates", "source_ref": "indicator--0b6660e3-a219-4c97-af96-0d5e19d6a1f3", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18254172-5132-46f3-8644-d6f5117cb20b", "created": "2026-10-09T15:13:11.837656Z", "modified": "2026-10-09T15:13:11.837656Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BB59FC701EAC40C51C9274EA6A8EE623F5002802']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.837656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--430c1d94-35fb-4275-a753-dbadf277ecb1", "created": "2026-10-09T15:13:11.838224Z", "modified": "2026-10-09T15:13:11.838224Z", "relationship_type": "indicates", "source_ref": "indicator--18254172-5132-46f3-8644-d6f5117cb20b", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbbc1a7-0a8c-4f1a-9d36-b577fd900914", "created": "2026-10-09T15:13:11.838365Z", "modified": "2026-10-09T15:13:11.838365Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BC682A41C2AA1EFFFD65CE42BBE3FA967A561EEC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.838365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f77e4941-a0c4-4ff0-9135-c80e0d83a3b7", "created": "2026-10-09T15:13:11.838907Z", "modified": "2026-10-09T15:13:11.838907Z", "relationship_type": "indicates", "source_ref": "indicator--afbbc1a7-0a8c-4f1a-9d36-b577fd900914", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac07a3bc-aa7a-465f-813b-8c0bb0def0a2", "created": "2026-10-09T15:13:11.839025Z", "modified": "2026-10-09T15:13:11.839025Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CA6F27DDCBE5D7929C82F42F63FF24703A352756']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.839025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39159673-28c1-477e-a97e-3e59e2a5f20a", "created": "2026-10-09T15:13:11.839581Z", "modified": "2026-10-09T15:13:11.839581Z", "relationship_type": "indicates", "source_ref": "indicator--ac07a3bc-aa7a-465f-813b-8c0bb0def0a2", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f49ec1-89ee-488b-8019-b479bdcf8856", "created": "2026-10-09T15:13:11.8397Z", "modified": "2026-10-09T15:13:11.8397Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E401C172FE10C4893A13B38B1FABAA43473E2900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.8397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe83c130-60d3-46f2-a17a-402086b12252", "created": "2026-10-09T15:13:11.840241Z", "modified": "2026-10-09T15:13:11.840241Z", "relationship_type": "indicates", "source_ref": "indicator--98f49ec1-89ee-488b-8019-b479bdcf8856", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3382dde4-cfe3-4c02-81b6-ff2d270a968d", "created": "2026-10-09T15:13:11.840371Z", "modified": "2026-10-09T15:13:11.840371Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EF8006163D09D176083936CFB068BB07A8918118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.840371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6b2b2f9-c1a2-4ae7-af71-03603c5ff8b4", "created": "2026-10-09T15:13:11.840916Z", "modified": "2026-10-09T15:13:11.840916Z", "relationship_type": "indicates", "source_ref": "indicator--3382dde4-cfe3-4c02-81b6-ff2d270a968d", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584d910a-e81f-4e03-a912-da59be683bab", "created": "2026-10-09T15:13:11.841033Z", "modified": "2026-10-09T15:13:11.841033Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F5EAEFDECAD39B93134E859BEDC7D3ED42FBE2B3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.841033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--143abc21-4f8c-474d-b4b1-09f62067ef21", "created": "2026-10-09T15:13:11.841702Z", "modified": "2026-10-09T15:13:11.841702Z", "relationship_type": "indicates", "source_ref": "indicator--584d910a-e81f-4e03-a912-da59be683bab", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a67bb85-6e5f-42f5-8725-1281f7f82173", "created": "2026-10-09T15:13:11.841827Z", "modified": "2026-10-09T15:13:11.841827Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FD4C2144DF6E431378A46EAEACC696AF94DE9D56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.841827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--993ad168-da44-44bd-8726-7150d914ed9b", "created": "2026-10-09T15:13:11.842381Z", "modified": "2026-10-09T15:13:11.842381Z", "relationship_type": "indicates", "source_ref": "indicator--7a67bb85-6e5f-42f5-8725-1281f7f82173", "target_ref": "malware--d51befb1-b2de-4b20-b842-38a51d63e2ba"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c", "created": "2026-10-09T15:13:11.842503Z", "modified": "2026-10-09T15:13:11.842503Z", "name": "MobileSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd8ea02-098d-43b6-90de-3e78a75c71c7", "created": "2026-10-09T15:13:11.842627Z", "modified": "2026-10-09T15:13:11.842627Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.842627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4c5c614-4985-475d-8bda-c3ce556eb242", "created": "2026-10-09T15:13:11.843111Z", "modified": "2026-10-09T15:13:11.843111Z", "relationship_type": "indicates", "source_ref": "indicator--1fd8ea02-098d-43b6-90de-3e78a75c71c7", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898a54e8-58c9-48f9-ab0b-cb6fd778fafa", "created": "2026-10-09T15:13:11.843232Z", "modified": "2026-10-09T15:13:11.843232Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='de.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.843232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56648ba4-ff13-4006-b751-1c52650e7554", "created": "2026-10-09T15:13:11.843716Z", "modified": "2026-10-09T15:13:11.843716Z", "relationship_type": "indicates", "source_ref": "indicator--898a54e8-58c9-48f9-ab0b-cb6fd778fafa", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2787074-f9a9-46a9-bd54-df3898428cb6", "created": "2026-10-09T15:13:11.843836Z", "modified": "2026-10-09T15:13:11.843836Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='es.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.843836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d5e59b2-61a7-4551-a105-371b4407f952", "created": "2026-10-09T15:13:11.844319Z", "modified": "2026-10-09T15:13:11.844319Z", "relationship_type": "indicates", "source_ref": "indicator--c2787074-f9a9-46a9-bd54-df3898428cb6", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d80df8-6c97-430b-b118-9d5bb5577e7e", "created": "2026-10-09T15:13:11.84444Z", "modified": "2026-10-09T15:13:11.84444Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fr.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.84444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e2be904-c79a-4ad1-9574-0737e129be98", "created": "2026-10-09T15:13:11.844914Z", "modified": "2026-10-09T15:13:11.844914Z", "relationship_type": "indicates", "source_ref": "indicator--52d80df8-6c97-430b-b118-9d5bb5577e7e", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3db3581-28ee-4b41-b515-4387b900666c", "created": "2026-10-09T15:13:11.845038Z", "modified": "2026-10-09T15:13:11.845038Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='it.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.845038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a5b86e4-47dc-4779-81a2-e2334c423324", "created": "2026-10-09T15:13:11.845525Z", "modified": "2026-10-09T15:13:11.845525Z", "relationship_type": "indicates", "source_ref": "indicator--e3db3581-28ee-4b41-b515-4387b900666c", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b688a0-f6a7-44e1-a768-2c95e0d6226f", "created": "2026-10-09T15:13:11.845647Z", "modified": "2026-10-09T15:13:11.845647Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.845647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a91e6af-fa2b-48e9-a030-b681b6be3125", "created": "2026-10-09T15:13:11.846125Z", "modified": "2026-10-09T15:13:11.846125Z", "relationship_type": "indicates", "source_ref": "indicator--50b688a0-f6a7-44e1-a768-2c95e0d6226f", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2085d9-95c7-46a4-9e3e-7d4074f60133", "created": "2026-10-09T15:13:11.846252Z", "modified": "2026-10-09T15:13:11.846252Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pt.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.846252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--322df1dc-1710-41c7-b88f-b99d98c98918", "created": "2026-10-09T15:13:11.846737Z", "modified": "2026-10-09T15:13:11.846737Z", "relationship_type": "indicates", "source_ref": "indicator--2d2085d9-95c7-46a4-9e3e-7d4074f60133", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdb647e-4d07-4f5c-b558-aee302ca00ff", "created": "2026-10-09T15:13:11.846857Z", "modified": "2026-10-09T15:13:11.846857Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ro.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.846857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ecf8213-06d2-4cc7-9c59-e0353cfe8cef", "created": "2026-10-09T15:13:11.847447Z", "modified": "2026-10-09T15:13:11.847447Z", "relationship_type": "indicates", "source_ref": "indicator--9cdb647e-4d07-4f5c-b558-aee302ca00ff", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543f1b61-4b77-47bb-a901-2e4a71bd3663", "created": "2026-10-09T15:13:11.847573Z", "modified": "2026-10-09T15:13:11.847573Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.847573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b79e2320-f0ba-4e5b-ad39-b3eeebc6edc2", "created": "2026-10-09T15:13:11.84805Z", "modified": "2026-10-09T15:13:11.84805Z", "relationship_type": "indicates", "source_ref": "indicator--543f1b61-4b77-47bb-a901-2e4a71bd3663", "target_ref": "malware--ab914684-bb26-4d7f-a725-3aa5a0c47e3c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c045782d-b733-4b88-a680-3b515862e67f", "created": "2026-10-09T15:13:11.848172Z", "modified": "2026-10-09T15:13:11.848172Z", "name": "WebWatcher", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012048ad-5396-48b7-9470-cf0373c5d29e", "created": "2026-10-09T15:13:11.848306Z", "modified": "2026-10-09T15:13:11.848306Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.awarenesstechnologies.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.848306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b57d4a55-4638-421e-9bf4-1dc6e82b9e30", "created": "2026-10-09T15:13:11.848802Z", "modified": "2026-10-09T15:13:11.848802Z", "relationship_type": "indicates", "source_ref": "indicator--012048ad-5396-48b7-9470-cf0373c5d29e", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267a7f00-7111-45cb-b719-879c6414c162", "created": "2026-10-09T15:13:11.848922Z", "modified": "2026-10-09T15:13:11.848922Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apitest.awarenesstechnologies.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.848922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99aeaed5-1b9a-433a-ba35-c9bc5e2c9191", "created": "2026-10-09T15:13:11.849425Z", "modified": "2026-10-09T15:13:11.849425Z", "relationship_type": "indicates", "source_ref": "indicator--267a7f00-7111-45cb-b719-879c6414c162", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f802eef-25b5-456b-8fea-22bce31376c7", "created": "2026-10-09T15:13:11.849543Z", "modified": "2026-10-09T15:13:11.849543Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-webwatcherdata-alb-1451089636.us-west-2.elb.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.849543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3421368-e788-46e1-9c83-16c346fb3c13", "created": "2026-10-09T15:13:11.850071Z", "modified": "2026-10-09T15:13:11.850071Z", "relationship_type": "indicates", "source_ref": "indicator--3f802eef-25b5-456b-8fea-22bce31376c7", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c7d2f0-fdc9-4090-99e2-af7783f2308a", "created": "2026-10-09T15:13:11.850189Z", "modified": "2026-10-09T15:13:11.850189Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.qa.webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.850189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a85965f2-7699-4e24-8a75-7fddab91b18a", "created": "2026-10-09T15:13:11.850682Z", "modified": "2026-10-09T15:13:11.850682Z", "relationship_type": "indicates", "source_ref": "indicator--a8c7d2f0-fdc9-4090-99e2-af7783f2308a", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cfa7f9-6126-44eb-b892-fbf0086c6d31", "created": "2026-10-09T15:13:11.850804Z", "modified": "2026-10-09T15:13:11.850804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.850804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e3714a1-9308-4d49-9982-58b62cb1e8b5", "created": "2026-10-09T15:13:11.851299Z", "modified": "2026-10-09T15:13:11.851299Z", "relationship_type": "indicates", "source_ref": "indicator--03cfa7f9-6126-44eb-b892-fbf0086c6d31", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c9eadc-8dc6-4347-9cd5-b752bfe5f546", "created": "2026-10-09T15:13:11.85142Z", "modified": "2026-10-09T15:13:11.85142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='download.webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.85142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10acfcae-0614-41fe-bf71-f686ac43b32f", "created": "2026-10-09T15:13:11.851907Z", "modified": "2026-10-09T15:13:11.851907Z", "relationship_type": "indicates", "source_ref": "indicator--d0c9eadc-8dc6-4347-9cd5-b752bfe5f546", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00826573-a812-4f6d-9800-208e8c7ac289", "created": "2026-10-09T15:13:11.852024Z", "modified": "2026-10-09T15:13:11.852024Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.webwatcher.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.852024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2983c3e-5b73-4c7a-8830-b073c7547a6c", "created": "2026-10-09T15:13:11.852514Z", "modified": "2026-10-09T15:13:11.852514Z", "relationship_type": "indicates", "source_ref": "indicator--00826573-a812-4f6d-9800-208e8c7ac289", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd03c08-d226-4b9b-8d41-54276403be40", "created": "2026-10-09T15:13:11.852633Z", "modified": "2026-10-09T15:13:11.852633Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rcomlogin.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.852633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5df9f6a4-d808-461f-aa23-c5c768c21ed1", "created": "2026-10-09T15:13:11.853203Z", "modified": "2026-10-09T15:13:11.853203Z", "relationship_type": "indicates", "source_ref": "indicator--0cd03c08-d226-4b9b-8d41-54276403be40", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedcde67-5bc8-4d98-ab4d-ef4302215088", "created": "2026-10-09T15:13:11.85334Z", "modified": "2026-10-09T15:13:11.85334Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='screentimelabs.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.85334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ca6afee-470f-477e-b713-9b495b3d3d50", "created": "2026-10-09T15:13:11.853828Z", "modified": "2026-10-09T15:13:11.853828Z", "relationship_type": "indicates", "source_ref": "indicator--cedcde67-5bc8-4d98-ab4d-ef4302215088", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4cd5f2-d6fb-477e-a4c5-26cb2056a6e6", "created": "2026-10-09T15:13:11.853949Z", "modified": "2026-10-09T15:13:11.853949Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatcher-child-app.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.853949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eab4b66e-bec4-4955-8803-ce1578a39a47", "created": "2026-10-09T15:13:11.854464Z", "modified": "2026-10-09T15:13:11.854464Z", "relationship_type": "indicates", "source_ref": "indicator--1b4cd5f2-d6fb-477e-a4c5-26cb2056a6e6", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d1648e-b973-4a93-9acc-6c5350de1a43", "created": "2026-10-09T15:13:11.854587Z", "modified": "2026-10-09T15:13:11.854587Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.854587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b722f90-a117-45c7-a8e2-52fa51cc8513", "created": "2026-10-09T15:13:11.855057Z", "modified": "2026-10-09T15:13:11.855057Z", "relationship_type": "indicates", "source_ref": "indicator--e0d1648e-b973-4a93-9acc-6c5350de1a43", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c7a4cd-e5f4-4d68-ab54-c15ccdb0d4f1", "created": "2026-10-09T15:13:11.855174Z", "modified": "2026-10-09T15:13:11.855174Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.webwatchernow.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.855174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17703024-200c-4719-90bd-3df2a7e3baeb", "created": "2026-10-09T15:13:11.855675Z", "modified": "2026-10-09T15:13:11.855675Z", "relationship_type": "indicates", "source_ref": "indicator--c7c7a4cd-e5f4-4d68-ab54-c15ccdb0d4f1", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7d1587-48da-4123-a60c-2f1472707539", "created": "2026-10-09T15:13:11.855795Z", "modified": "2026-10-09T15:13:11.855795Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatchernow.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.855795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a823a4f-f0bd-47a1-8514-d49db46bd2d6", "created": "2026-10-09T15:13:11.856285Z", "modified": "2026-10-09T15:13:11.856285Z", "relationship_type": "indicates", "source_ref": "indicator--5f7d1587-48da-4123-a60c-2f1472707539", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c428defe-a8d4-47ac-a8ae-4cdcbe1d025a", "created": "2026-10-09T15:13:11.856408Z", "modified": "2026-10-09T15:13:11.856408Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awarenesstechnologies.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.856408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e02e92fa-6076-43f2-a579-a0a8ad2ae3a9", "created": "2026-10-09T15:13:11.856887Z", "modified": "2026-10-09T15:13:11.856887Z", "relationship_type": "indicates", "source_ref": "indicator--c428defe-a8d4-47ac-a8ae-4cdcbe1d025a", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea307969-ccf3-4a0d-a1c7-e50c29861bed", "created": "2026-10-09T15:13:11.857008Z", "modified": "2026-10-09T15:13:11.857008Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='interguardsoftware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.857008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bcb3051-162b-4873-b58f-67db4c937b89", "created": "2026-10-09T15:13:11.857509Z", "modified": "2026-10-09T15:13:11.857509Z", "relationship_type": "indicates", "source_ref": "indicator--ea307969-ccf3-4a0d-a1c7-e50c29861bed", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debce6de-d884-4830-a531-64363a2198e8", "created": "2026-10-09T15:13:11.857631Z", "modified": "2026-10-09T15:13:11.857631Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='screentimelabs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.857631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ba6ab15-28b1-4c92-af8e-bf679bb94190", "created": "2026-10-09T15:13:11.858104Z", "modified": "2026-10-09T15:13:11.858104Z", "relationship_type": "indicates", "source_ref": "indicator--debce6de-d884-4830-a531-64363a2198e8", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b179c5-e578-4020-a5a8-9c6b1886e8e3", "created": "2026-10-09T15:13:11.858226Z", "modified": "2026-10-09T15:13:11.858226Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatcher.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.858226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a94b7a5c-05ff-4459-8024-6d199d929c93", "created": "2026-10-09T15:13:11.859139Z", "modified": "2026-10-09T15:13:11.859139Z", "relationship_type": "indicates", "source_ref": "indicator--08b179c5-e578-4020-a5a8-9c6b1886e8e3", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c3db21-fe7c-4b32-b91a-19c15e17b2ed", "created": "2026-10-09T15:13:11.859282Z", "modified": "2026-10-09T15:13:11.859282Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.webwatcher.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.859282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d31ceef7-3bf2-40f0-822c-6bd6208d77f7", "created": "2026-10-09T15:13:11.859772Z", "modified": "2026-10-09T15:13:11.859772Z", "relationship_type": "indicates", "source_ref": "indicator--a3c3db21-fe7c-4b32-b91a-19c15e17b2ed", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229a7030-0efd-4468-a231-a32078568314", "created": "2026-10-09T15:13:11.859894Z", "modified": "2026-10-09T15:13:11.859894Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.at.wwka']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.859894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50b1a979-ff6d-4fc1-a82d-c5b84f6b9f73", "created": "2026-10-09T15:13:11.860354Z", "modified": "2026-10-09T15:13:11.860354Z", "relationship_type": "indicates", "source_ref": "indicator--229a7030-0efd-4468-a231-a32078568314", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90449ef8-5386-4ce5-af4e-b53b8a483704", "created": "2026-10-09T15:13:11.860476Z", "modified": "2026-10-09T15:13:11.860476Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ati.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.860476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa3e4cb2-1f5b-451f-b23b-568496c8bc6b", "created": "2026-10-09T15:13:11.860928Z", "modified": "2026-10-09T15:13:11.860928Z", "relationship_type": "indicates", "source_ref": "indicator--90449ef8-5386-4ce5-af4e-b53b8a483704", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6772b3d6-4cf1-45e4-9ef4-7822c56f04e9", "created": "2026-10-09T15:13:11.861056Z", "modified": "2026-10-09T15:13:11.861056Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ati.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.861056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c64a2b39-fad1-468f-ac04-465cc0aadcea", "created": "2026-10-09T15:13:11.861518Z", "modified": "2026-10-09T15:13:11.861518Z", "relationship_type": "indicates", "source_ref": "indicator--6772b3d6-4cf1-45e4-9ef4-7822c56f04e9", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45aef59-9d5c-43d0-a6ba-1a35b175e22e", "created": "2026-10-09T15:13:11.86164Z", "modified": "2026-10-09T15:13:11.86164Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ati.webwatcherconsole']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.86164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6496af8-be34-4c79-82d3-9591ee97e0af", "created": "2026-10-09T15:13:11.862097Z", "modified": "2026-10-09T15:13:11.862097Z", "relationship_type": "indicates", "source_ref": "indicator--c45aef59-9d5c-43d0-a6ba-1a35b175e22e", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73565457-b2f8-4b42-a8d3-00af0abde698", "created": "2026-10-09T15:13:11.862217Z", "modified": "2026-10-09T15:13:11.862217Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.atinc.slcompanion']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.862217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4225ce6-4afb-4eca-bb82-5f383a25af37", "created": "2026-10-09T15:13:11.862683Z", "modified": "2026-10-09T15:13:11.862683Z", "relationship_type": "indicates", "source_ref": "indicator--73565457-b2f8-4b42-a8d3-00af0abde698", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ab99ca-874b-4b12-8ee7-03bc020fdcfb", "created": "2026-10-09T15:13:11.862802Z", "modified": "2026-10-09T15:13:11.862802Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.atiw.wc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.862802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7effde1c-9152-4d43-97a4-1a1e482033b1", "created": "2026-10-09T15:13:11.863241Z", "modified": "2026-10-09T15:13:11.863241Z", "relationship_type": "indicates", "source_ref": "indicator--84ab99ca-874b-4b12-8ee7-03bc020fdcfb", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa3d07e-79f2-4efd-b332-4c403a4d26d4", "created": "2026-10-09T15:13:11.863373Z", "modified": "2026-10-09T15:13:11.863373Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awarenesstech.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.863373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb489244-3dd4-4480-b536-52de5d303ede", "created": "2026-10-09T15:13:11.863834Z", "modified": "2026-10-09T15:13:11.863834Z", "relationship_type": "indicates", "source_ref": "indicator--8aa3d07e-79f2-4efd-b332-4c403a4d26d4", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854b588c-79fe-4414-b31c-589861a2a9fd", "created": "2026-10-09T15:13:11.863952Z", "modified": "2026-10-09T15:13:11.863952Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awarenesstech.wwpapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.863952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7041f14f-52d3-439a-933a-dd43fbb05f10", "created": "2026-10-09T15:13:11.864417Z", "modified": "2026-10-09T15:13:11.864417Z", "relationship_type": "indicates", "source_ref": "indicator--854b588c-79fe-4414-b31c-589861a2a9fd", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c4b76c-a60e-4d82-92d4-7b5ec3ca6215", "created": "2026-10-09T15:13:11.864536Z", "modified": "2026-10-09T15:13:11.864536Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awarenesstechnologies.sideloadedws']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.864536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b57bb51e-201c-47b3-8ce8-b83e948798f5", "created": "2026-10-09T15:13:11.865116Z", "modified": "2026-10-09T15:13:11.865116Z", "relationship_type": "indicates", "source_ref": "indicator--41c4b76c-a60e-4d82-92d4-7b5ec3ca6215", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ae6c80-068f-4e6d-b035-124436e64098", "created": "2026-10-09T15:13:11.865239Z", "modified": "2026-10-09T15:13:11.865239Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awti.slc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.865239Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22b22732-abd0-4a50-b4fd-b616433e7d35", "created": "2026-10-09T15:13:11.865706Z", "modified": "2026-10-09T15:13:11.865706Z", "relationship_type": "indicates", "source_ref": "indicator--b1ae6c80-068f-4e6d-b035-124436e64098", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d94cbd2-26dc-4c26-b72d-fab5da0e9080", "created": "2026-10-09T15:13:11.865828Z", "modified": "2026-10-09T15:13:11.865828Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.screentime']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.865828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ab05f6e-fd50-4bb1-bfc3-636ccedb6f78", "created": "2026-10-09T15:13:11.866295Z", "modified": "2026-10-09T15:13:11.866295Z", "relationship_type": "indicates", "source_ref": "indicator--0d94cbd2-26dc-4c26-b72d-fab5da0e9080", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a0330-e0f5-4622-80d3-0f9fae530d8d", "created": "2026-10-09T15:13:11.86642Z", "modified": "2026-10-09T15:13:11.86642Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ww.companion']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.86642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c22afe6-4401-4692-b812-840d09ff2587", "created": "2026-10-09T15:13:11.866874Z", "modified": "2026-10-09T15:13:11.866874Z", "relationship_type": "indicates", "source_ref": "indicator--020a0330-e0f5-4622-80d3-0f9fae530d8d", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c7528c-0804-44a0-8677-23f38c038d63", "created": "2026-10-09T15:13:11.866999Z", "modified": "2026-10-09T15:13:11.866999Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35E90A29262F1E6CC25B6E483DEC67161513DE30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.866999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe5d8e84-5bd5-4ca9-be07-d178ade39839", "created": "2026-10-09T15:13:11.867555Z", "modified": "2026-10-09T15:13:11.867555Z", "relationship_type": "indicates", "source_ref": "indicator--c4c7528c-0804-44a0-8677-23f38c038d63", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fc7b21-bda2-40b7-9096-56ccd296371f", "created": "2026-10-09T15:13:11.867675Z", "modified": "2026-10-09T15:13:11.867675Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4E6B680EF3B588EF53097BC7CEFB778833B8A475']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.867675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa9e3068-b13f-435e-a8fa-5e870229e13b", "created": "2026-10-09T15:13:11.86821Z", "modified": "2026-10-09T15:13:11.86821Z", "relationship_type": "indicates", "source_ref": "indicator--45fc7b21-bda2-40b7-9096-56ccd296371f", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90b5301-8d6d-4486-bcf4-245cb70d84e2", "created": "2026-10-09T15:13:11.868339Z", "modified": "2026-10-09T15:13:11.868339Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='60277E8CE202D8023F2ECC86F1726A50D9990576']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.868339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db09a6f3-7173-4ce2-a6c6-5317d37f2a78", "created": "2026-10-09T15:13:11.868875Z", "modified": "2026-10-09T15:13:11.868875Z", "relationship_type": "indicates", "source_ref": "indicator--c90b5301-8d6d-4486-bcf4-245cb70d84e2", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8655e516-c456-4e00-b35d-cd008fba2040", "created": "2026-10-09T15:13:11.868991Z", "modified": "2026-10-09T15:13:11.868991Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AD62CBB4BD298CF69CDA40997C3E5D70112D7161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.868991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d054647-2b95-4c48-be22-5ad86bafdc34", "created": "2026-10-09T15:13:11.869541Z", "modified": "2026-10-09T15:13:11.869541Z", "relationship_type": "indicates", "source_ref": "indicator--8655e516-c456-4e00-b35d-cd008fba2040", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56553032-fe93-4dc2-a6aa-66dac7be50d9", "created": "2026-10-09T15:13:11.869661Z", "modified": "2026-10-09T15:13:11.869661Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B9D5BAEDCF0C711317E8B6E54D60F0A5EDEE9517']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.869661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f51e93c5-ec1a-4cd2-a698-10bce7ac7854", "created": "2026-10-09T15:13:11.87021Z", "modified": "2026-10-09T15:13:11.87021Z", "relationship_type": "indicates", "source_ref": "indicator--56553032-fe93-4dc2-a6aa-66dac7be50d9", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2d0d63-a416-4b8b-a3be-cc3831abf6c5", "created": "2026-10-09T15:13:11.870343Z", "modified": "2026-10-09T15:13:11.870343Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E689432F7C2A39379BD64CB0BD2A6028F3A666DD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.870343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--661d6409-c59f-418b-b7ed-f9c52d4d0667", "created": "2026-10-09T15:13:11.870988Z", "modified": "2026-10-09T15:13:11.870988Z", "relationship_type": "indicates", "source_ref": "indicator--7e2d0d63-a416-4b8b-a3be-cc3831abf6c5", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db80cbe-a92b-49c9-b863-a364f4e33cc9", "created": "2026-10-09T15:13:11.871111Z", "modified": "2026-10-09T15:13:11.871111Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FC786B8F918655D45245C685A471BD57F02FB366']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.871111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98b6f50e-6463-4b5c-8d03-0591ca4394e9", "created": "2026-10-09T15:13:11.871667Z", "modified": "2026-10-09T15:13:11.871667Z", "relationship_type": "indicates", "source_ref": "indicator--9db80cbe-a92b-49c9-b863-a364f4e33cc9", "target_ref": "malware--c045782d-b733-4b88-a680-3b515862e67f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61", "created": "2026-10-09T15:13:11.87179Z", "modified": "2026-10-09T15:13:11.87179Z", "name": "NexSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0a1467-0948-42fc-8a42-c747b3d49a4c", "created": "2026-10-09T15:13:11.871908Z", "modified": "2026-10-09T15:13:11.871908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.nexspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.871908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acabf32f-2b53-4b15-aca6-041ec970aeb7", "created": "2026-10-09T15:13:11.872391Z", "modified": "2026-10-09T15:13:11.872391Z", "relationship_type": "indicates", "source_ref": "indicator--9a0a1467-0948-42fc-8a42-c747b3d49a4c", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10c190e-7ca3-479a-ba3c-e2e8badfc2d1", "created": "2026-10-09T15:13:11.872515Z", "modified": "2026-10-09T15:13:11.872515Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.mobilebackup.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.872515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28088c19-202c-4711-982e-d966489f6a76", "created": "2026-10-09T15:13:11.872994Z", "modified": "2026-10-09T15:13:11.872994Z", "relationship_type": "indicates", "source_ref": "indicator--e10c190e-7ca3-479a-ba3c-e2e8badfc2d1", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6269bb-a4c5-4a2e-b498-231f82fe6f12", "created": "2026-10-09T15:13:11.873113Z", "modified": "2026-10-09T15:13:11.873113Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='topzaloha.cz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.873113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eff45574-6085-4aff-8841-30ab0c25d04b", "created": "2026-10-09T15:13:11.873593Z", "modified": "2026-10-09T15:13:11.873593Z", "relationship_type": "indicates", "source_ref": "indicator--cc6269bb-a4c5-4a2e-b498-231f82fe6f12", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe684ecb-076e-4551-a829-f03b231bb250", "created": "2026-10-09T15:13:11.873715Z", "modified": "2026-10-09T15:13:11.873715Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nexspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.873715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1167b0c-8d55-4bda-81f2-bfbab712313a", "created": "2026-10-09T15:13:11.874178Z", "modified": "2026-10-09T15:13:11.874178Z", "relationship_type": "indicates", "source_ref": "indicator--fe684ecb-076e-4551-a829-f03b231bb250", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ae9ab0-1fad-48f8-8abd-35c99a8d6553", "created": "2026-10-09T15:13:11.874306Z", "modified": "2026-10-09T15:13:11.874306Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='oxy.nexspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.874306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74955625-a1c1-4d58-86e0-ee0b047d25d8", "created": "2026-10-09T15:13:11.87478Z", "modified": "2026-10-09T15:13:11.87478Z", "relationship_type": "indicates", "source_ref": "indicator--69ae9ab0-1fad-48f8-8abd-35c99a8d6553", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf3a35f-423c-4d57-9e87-73abcb950eb5", "created": "2026-10-09T15:13:11.874895Z", "modified": "2026-10-09T15:13:11.874895Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilebackup.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.874895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aef04598-9342-412b-ac67-47985c3ecb3c", "created": "2026-10-09T15:13:11.875372Z", "modified": "2026-10-09T15:13:11.875372Z", "relationship_type": "indicates", "source_ref": "indicator--daf3a35f-423c-4d57-9e87-73abcb950eb5", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ea4d44-fee0-4344-b901-3bd657c39487", "created": "2026-10-09T15:13:11.875492Z", "modified": "2026-10-09T15:13:11.875492Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.mobilebackup.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.875492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c7f878f-da17-4cbe-a073-bccd91654d14", "created": "2026-10-09T15:13:11.875978Z", "modified": "2026-10-09T15:13:11.875978Z", "relationship_type": "indicates", "source_ref": "indicator--e5ea4d44-fee0-4344-b901-3bd657c39487", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7617f08a-9cb2-46ba-a014-81f9563b4664", "created": "2026-10-09T15:13:11.876103Z", "modified": "2026-10-09T15:13:11.876103Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.topzaloha.cz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.876103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de2d2962-5bf7-4978-a8d0-ea5534989cc5", "created": "2026-10-09T15:13:11.876703Z", "modified": "2026-10-09T15:13:11.876703Z", "relationship_type": "indicates", "source_ref": "indicator--7617f08a-9cb2-46ba-a014-81f9563b4664", "target_ref": "malware--d7aeee63-32d1-41a8-8f2d-4e31c047db61"}, {"type": "malware", "spec_version": "2.1", "id": "malware--278d4b75-2294-43c4-86d9-da757b85746a", "created": "2026-10-09T15:13:11.876828Z", "modified": "2026-10-09T15:13:11.876828Z", "name": "juju", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c019335d-5ce2-4524-94dd-8c608b6b98a4", "created": "2026-10-09T15:13:11.876945Z", "modified": "2026-10-09T15:13:11.876945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.juju.co.ke']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.876945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--970502e6-2a39-4a53-9335-f4d64cd1ab05", "created": "2026-10-09T15:13:11.877425Z", "modified": "2026-10-09T15:13:11.877425Z", "relationship_type": "indicates", "source_ref": "indicator--c019335d-5ce2-4524-94dd-8c608b6b98a4", "target_ref": "malware--278d4b75-2294-43c4-86d9-da757b85746a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5c0d98-e39f-4335-9655-221a493afd66", "created": "2026-10-09T15:13:11.877548Z", "modified": "2026-10-09T15:13:11.877548Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='juju.co.ke']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.877548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0e00f39-9ecf-40e8-8060-5c0e8b1d1c2b", "created": "2026-10-09T15:13:11.878013Z", "modified": "2026-10-09T15:13:11.878013Z", "relationship_type": "indicates", "source_ref": "indicator--7d5c0d98-e39f-4335-9655-221a493afd66", "target_ref": "malware--278d4b75-2294-43c4-86d9-da757b85746a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f785d3b9-def7-4c56-bb8e-8b7a392e7454", "created": "2026-10-09T15:13:11.87813Z", "modified": "2026-10-09T15:13:11.87813Z", "name": "mSpyitaly", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b79c2f-b862-4696-9183-3a3eeb95f6b8", "created": "2026-10-09T15:13:11.878243Z", "modified": "2026-10-09T15:13:11.878243Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dc-407883c18502.mspyitaly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.878243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88ee936f-5cb1-4ed9-840f-ac489c214b04", "created": "2026-10-09T15:13:11.878754Z", "modified": "2026-10-09T15:13:11.878754Z", "relationship_type": "indicates", "source_ref": "indicator--71b79c2f-b862-4696-9183-3a3eeb95f6b8", "target_ref": "malware--f785d3b9-def7-4c56-bb8e-8b7a392e7454"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eb55aa-c37a-4fca-b2c6-a542a29eff39", "created": "2026-10-09T15:13:11.878872Z", "modified": "2026-10-09T15:13:11.878872Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyitaly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.878872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81e47808-1090-4a24-8ff7-dc7f9fec7baa", "created": "2026-10-09T15:13:11.879358Z", "modified": "2026-10-09T15:13:11.879358Z", "relationship_type": "indicates", "source_ref": "indicator--d5eb55aa-c37a-4fca-b2c6-a542a29eff39", "target_ref": "malware--f785d3b9-def7-4c56-bb8e-8b7a392e7454"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86799bf3-7b69-451d-8f96-a6b88a7587e1", "created": "2026-10-09T15:13:11.879479Z", "modified": "2026-10-09T15:13:11.879479Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspyitaly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.879479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03694c7b-2143-4767-89e5-2a257b6d8343", "created": "2026-10-09T15:13:11.87996Z", "modified": "2026-10-09T15:13:11.87996Z", "relationship_type": "indicates", "source_ref": "indicator--86799bf3-7b69-451d-8f96-a6b88a7587e1", "target_ref": "malware--f785d3b9-def7-4c56-bb8e-8b7a392e7454"}, {"type": "malware", "spec_version": "2.1", "id": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf", "created": "2026-10-09T15:13:11.880077Z", "modified": "2026-10-09T15:13:11.880077Z", "name": "MyCellSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf2f7ff-68cf-49b3-8dc6-2153e4d735b3", "created": "2026-10-09T15:13:11.880188Z", "modified": "2026-10-09T15:13:11.880188Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.mycellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.880188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42ed3910-2661-42cb-bd2c-3c458bf63cc9", "created": "2026-10-09T15:13:11.880681Z", "modified": "2026-10-09T15:13:11.880681Z", "relationship_type": "indicates", "source_ref": "indicator--ddf2f7ff-68cf-49b3-8dc6-2153e4d735b3", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60126a1-66a0-43ee-95a5-4434322567d0", "created": "2026-10-09T15:13:11.8808Z", "modified": "2026-10-09T15:13:11.8808Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.8808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61f56c0c-a32f-492a-a399-81fd036425bc", "created": "2026-10-09T15:13:11.881285Z", "modified": "2026-10-09T15:13:11.881285Z", "relationship_type": "indicates", "source_ref": "indicator--c60126a1-66a0-43ee-95a5-4434322567d0", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec53c1f-a36c-44c7-bb5e-5073b1c6fcf4", "created": "2026-10-09T15:13:11.881405Z", "modified": "2026-10-09T15:13:11.881405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cezz.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.881405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0be453a8-30af-419a-b8d8-b9d5ee0b906e", "created": "2026-10-09T15:13:11.882006Z", "modified": "2026-10-09T15:13:11.882006Z", "relationship_type": "indicates", "source_ref": "indicator--6ec53c1f-a36c-44c7-bb5e-5073b1c6fcf4", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e500f9d4-6fee-4a84-97fa-002631a77e59", "created": "2026-10-09T15:13:11.882206Z", "modified": "2026-10-09T15:13:11.882206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user.mycellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.882206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b131bc9d-fdb0-40e9-acfb-f96a0bf49915", "created": "2026-10-09T15:13:11.882826Z", "modified": "2026-10-09T15:13:11.882826Z", "relationship_type": "indicates", "source_ref": "indicator--e500f9d4-6fee-4a84-97fa-002631a77e59", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6134201-6e46-48c4-ac19-87f01d0ece9b", "created": "2026-10-09T15:13:11.883017Z", "modified": "2026-10-09T15:13:11.883017Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbcd604e4f1899845f9cb82295bb43a8ac91b5a2d42f5611f72e9cef55575ece']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.883017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ea4dec5-266d-4b31-a75b-0a036ae94cd8", "created": "2026-10-09T15:13:11.883739Z", "modified": "2026-10-09T15:13:11.883739Z", "relationship_type": "indicates", "source_ref": "indicator--e6134201-6e46-48c4-ac19-87f01d0ece9b", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb9461e-9fe4-48e3-a01a-03453f931cba", "created": "2026-10-09T15:13:11.883964Z", "modified": "2026-10-09T15:13:11.883964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f3156ccccf63487b34dc4e0e7916f47ed9be5783a6adefb57911df784fc412a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.883964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18a8a413-da59-4399-89fe-50ea71ceb6a2", "created": "2026-10-09T15:13:11.884875Z", "modified": "2026-10-09T15:13:11.884875Z", "relationship_type": "indicates", "source_ref": "indicator--6fb9461e-9fe4-48e3-a01a-03453f931cba", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4758b9bb-4441-4dc7-8453-8bbd27d93430", "created": "2026-10-09T15:13:11.885035Z", "modified": "2026-10-09T15:13:11.885035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08c352c93f8b61905635b02c344538631636562a395e8394e6cb569015036847']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.885035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dfe9ae8-99a1-420c-b3ca-4525e4c55827", "created": "2026-10-09T15:13:11.88567Z", "modified": "2026-10-09T15:13:11.88567Z", "relationship_type": "indicates", "source_ref": "indicator--4758b9bb-4441-4dc7-8453-8bbd27d93430", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25130921-dcea-4d16-9904-a3d2e87e70fb", "created": "2026-10-09T15:13:11.885809Z", "modified": "2026-10-09T15:13:11.885809Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cryzp.leplluln']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.885809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--193c1dd6-772f-4880-a4db-2dc2630c4b97", "created": "2026-10-09T15:13:11.8863Z", "modified": "2026-10-09T15:13:11.8863Z", "relationship_type": "indicates", "source_ref": "indicator--25130921-dcea-4d16-9904-a3d2e87e70fb", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50467836-97f5-4ce9-93e6-5bb112908ffe", "created": "2026-10-09T15:13:11.886429Z", "modified": "2026-10-09T15:13:11.886429Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.pser.sysutils']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.886429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--443a62fd-d69c-44d5-b628-dc12daa12c52", "created": "2026-10-09T15:13:11.886898Z", "modified": "2026-10-09T15:13:11.886898Z", "relationship_type": "indicates", "source_ref": "indicator--50467836-97f5-4ce9-93e6-5bb112908ffe", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27b9ab7-8219-4f4a-832f-f48e1ca39bcc", "created": "2026-10-09T15:13:11.887024Z", "modified": "2026-10-09T15:13:11.887024Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sev.android.systemdev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.887024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e8a48ba-7ac9-411c-a237-88967c35e132", "created": "2026-10-09T15:13:11.887519Z", "modified": "2026-10-09T15:13:11.887519Z", "relationship_type": "indicates", "source_ref": "indicator--a27b9ab7-8219-4f4a-832f-f48e1ca39bcc", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f8235f-83fa-4ea9-acd4-16edfab93c58", "created": "2026-10-09T15:13:11.88765Z", "modified": "2026-10-09T15:13:11.88765Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D09EE9D79FF75E737429DDE34FD13EDFDDA34E78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.88765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--847544bf-3592-44f2-b90e-3e066ef68bfc", "created": "2026-10-09T15:13:11.888242Z", "modified": "2026-10-09T15:13:11.888242Z", "relationship_type": "indicates", "source_ref": "indicator--72f8235f-83fa-4ea9-acd4-16edfab93c58", "target_ref": "malware--961a81e4-61b6-4446-b226-e0e171f2e6bf"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf", "created": "2026-10-09T15:13:11.888516Z", "modified": "2026-10-09T15:13:11.888516Z", "name": "Spylix", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8706d8-2058-4604-89e6-6af26e274bdf", "created": "2026-10-09T15:13:11.888739Z", "modified": "2026-10-09T15:13:11.888739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.888739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2426b524-4571-44aa-8aaa-39cf5ff1013f", "created": "2026-10-09T15:13:11.889359Z", "modified": "2026-10-09T15:13:11.889359Z", "relationship_type": "indicates", "source_ref": "indicator--8b8706d8-2058-4604-89e6-6af26e274bdf", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efbc65d7-c0cd-4e77-b8ef-ce1461efabbb", "created": "2026-10-09T15:13:11.889562Z", "modified": "2026-10-09T15:13:11.889562Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apidemo.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.889562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6986a10-2673-406f-a62d-5f04c1c21122", "created": "2026-10-09T15:13:11.8904Z", "modified": "2026-10-09T15:13:11.8904Z", "relationship_type": "indicates", "source_ref": "indicator--efbc65d7-c0cd-4e77-b8ef-ce1461efabbb", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b704485e-4481-4b58-8599-9897b359f21a", "created": "2026-10-09T15:13:11.890632Z", "modified": "2026-10-09T15:13:11.890632Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d2nipadu1fr4ne.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.890632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b22427e-da6a-4773-82b2-f48c956ca55f", "created": "2026-10-09T15:13:11.891345Z", "modified": "2026-10-09T15:13:11.891345Z", "relationship_type": "indicates", "source_ref": "indicator--b704485e-4481-4b58-8599-9897b359f21a", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281a0cf0-5b31-470c-ba47-f05e25a6b01c", "created": "2026-10-09T15:13:11.891501Z", "modified": "2026-10-09T15:13:11.891501Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getspylix.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.891501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d1eb2f1-6a3f-48d8-978a-f1c238fbcbe3", "created": "2026-10-09T15:13:11.891997Z", "modified": "2026-10-09T15:13:11.891997Z", "relationship_type": "indicates", "source_ref": "indicator--281a0cf0-5b31-470c-ba47-f05e25a6b01c", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb9904c-956f-45f4-8098-4edd51628a4a", "created": "2026-10-09T15:13:11.892123Z", "modified": "2026-10-09T15:13:11.892123Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.892123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5fe97f8-6ab1-476f-9c75-2ef78704a518", "created": "2026-10-09T15:13:11.892627Z", "modified": "2026-10-09T15:13:11.892627Z", "relationship_type": "indicates", "source_ref": "indicator--2fb9904c-956f-45f4-8098-4edd51628a4a", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ac43c0-f3d6-4740-886c-113dc845b2c5", "created": "2026-10-09T15:13:11.892754Z", "modified": "2026-10-09T15:13:11.892754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.892754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc68c592-53e8-4b0e-8cfa-63374aa35ad1", "created": "2026-10-09T15:13:11.893236Z", "modified": "2026-10-09T15:13:11.893236Z", "relationship_type": "indicates", "source_ref": "indicator--15ac43c0-f3d6-4740-886c-113dc845b2c5", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52e5a31-ac76-46e3-a4ec-f9dc084697f2", "created": "2026-10-09T15:13:11.893389Z", "modified": "2026-10-09T15:13:11.893389Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.893389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19274d08-d042-4fc4-926a-516f040f168c", "created": "2026-10-09T15:13:11.893898Z", "modified": "2026-10-09T15:13:11.893898Z", "relationship_type": "indicates", "source_ref": "indicator--c52e5a31-ac76-46e3-a4ec-f9dc084697f2", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dc00ae-d8f4-47f3-b5c0-c9bc68969c65", "created": "2026-10-09T15:13:11.894022Z", "modified": "2026-10-09T15:13:11.894022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adb2effde122c5784f0ff57974f33d03c5f78f40a32e9e45f55017ff7b2600c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.894022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--653df72f-6ba4-48e9-a5b0-1eac8cd38a1b", "created": "2026-10-09T15:13:11.894644Z", "modified": "2026-10-09T15:13:11.894644Z", "relationship_type": "indicates", "source_ref": "indicator--c4dc00ae-d8f4-47f3-b5c0-c9bc68969c65", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81a0cd8-0a5b-47c7-bd4b-e117a4c8c359", "created": "2026-10-09T15:13:11.894777Z", "modified": "2026-10-09T15:13:11.894777Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.chaoqi.spyapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.894777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--145bb98c-52c4-493c-b803-dfe7354ef1a9", "created": "2026-10-09T15:13:11.895238Z", "modified": "2026-10-09T15:13:11.895238Z", "relationship_type": "indicates", "source_ref": "indicator--d81a0cd8-0a5b-47c7-bd4b-e117a4c8c359", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e0f3d2-4998-474d-945d-8ace4e013ef5", "created": "2026-10-09T15:13:11.895383Z", "modified": "2026-10-09T15:13:11.895383Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2CF347EA59967F7799AA2C1FDB5D711B2B93D586']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.895383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be6eedbc-9784-4fcf-897d-b273d15fe46b", "created": "2026-10-09T15:13:11.895935Z", "modified": "2026-10-09T15:13:11.895935Z", "relationship_type": "indicates", "source_ref": "indicator--e2e0f3d2-4998-474d-945d-8ace4e013ef5", "target_ref": "malware--a7044c9b-978d-4b11-ae2a-c2dff84292bf"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1d7c3b83-312b-4674-923f-70144941409b", "created": "2026-10-09T15:13:11.896054Z", "modified": "2026-10-09T15:13:11.896054Z", "name": "MonitorUltra", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a87928-3463-4712-9447-78edd76ea05d", "created": "2026-10-09T15:13:11.896167Z", "modified": "2026-10-09T15:13:11.896167Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x1panel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.896167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73c1b4c8-d358-4555-b4f4-1bbc8fab3ba1", "created": "2026-10-09T15:13:11.896772Z", "modified": "2026-10-09T15:13:11.896772Z", "relationship_type": "indicates", "source_ref": "indicator--40a87928-3463-4712-9447-78edd76ea05d", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c751f584-6cd7-476e-8ebb-ea9c29ebb1c7", "created": "2026-10-09T15:13:11.8969Z", "modified": "2026-10-09T15:13:11.8969Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xpcpanel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.8969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--391d1731-0585-4fc3-a6b6-4daa73cc342a", "created": "2026-10-09T15:13:11.89741Z", "modified": "2026-10-09T15:13:11.89741Z", "relationship_type": "indicates", "source_ref": "indicator--c751f584-6cd7-476e-8ebb-ea9c29ebb1c7", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d203cbeb-0f78-4034-8f08-b2b0b0daf024", "created": "2026-10-09T15:13:11.89754Z", "modified": "2026-10-09T15:13:11.89754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitor-ultra.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.89754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79f07181-fd68-42ab-b66b-d7fd9ec0b874", "created": "2026-10-09T15:13:11.898021Z", "modified": "2026-10-09T15:13:11.898021Z", "relationship_type": "indicates", "source_ref": "indicator--d203cbeb-0f78-4034-8f08-b2b0b0daf024", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdf0b77-3f90-4593-9d11-a54e9ac0d6c8", "created": "2026-10-09T15:13:11.898143Z", "modified": "2026-10-09T15:13:11.898143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyequipmentuk.co.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.898143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9bb6797-8f33-45dc-931e-de4030d1c859", "created": "2026-10-09T15:13:11.89866Z", "modified": "2026-10-09T15:13:11.89866Z", "relationship_type": "indicates", "source_ref": "indicator--acdf0b77-3f90-4593-9d11-a54e9ac0d6c8", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a69f7c-46dc-4eab-a47c-3f0857d7adb9", "created": "2026-10-09T15:13:11.898787Z", "modified": "2026-10-09T15:13:11.898787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73a27b8b13e8ba34dd63f6e318fd37d6562a54a494591ad40e5ce3f72554ec22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.898787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08a41abc-712f-4300-be0b-e962fa96d8bf", "created": "2026-10-09T15:13:11.899395Z", "modified": "2026-10-09T15:13:11.899395Z", "relationship_type": "indicates", "source_ref": "indicator--30a69f7c-46dc-4eab-a47c-3f0857d7adb9", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450e31dc-0b4f-47f9-9ff0-4c50db481779", "created": "2026-10-09T15:13:11.89952Z", "modified": "2026-10-09T15:13:11.89952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='677b8600adf2c4e1f17963eaaf18d57881a6a0c2ef5323c7f145b113480040df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.89952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef612f02-59ec-4912-a024-bd3f741ff614", "created": "2026-10-09T15:13:11.900105Z", "modified": "2026-10-09T15:13:11.900105Z", "relationship_type": "indicates", "source_ref": "indicator--450e31dc-0b4f-47f9-9ff0-4c50db481779", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645a5c77-facb-44ba-9494-e45c44f7f8b5", "created": "2026-10-09T15:13:11.900225Z", "modified": "2026-10-09T15:13:11.900225Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='909faeaebf4a55a8e4a6141c1f385f2f7d038188ada376f22feaa6a09dc9ed8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.900225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dffdf0ef-efa0-4f3c-9c56-532f55337fe1", "created": "2026-10-09T15:13:11.900834Z", "modified": "2026-10-09T15:13:11.900834Z", "relationship_type": "indicates", "source_ref": "indicator--645a5c77-facb-44ba-9494-e45c44f7f8b5", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca6a071-5fc2-402f-8341-5fc7c9d034fc", "created": "2026-10-09T15:13:11.900964Z", "modified": "2026-10-09T15:13:11.900964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5eeace70bb735695e563191c85719782ae718f3699cd6c510ccb267def718da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.900964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2148cbb2-fabe-4101-aff2-3fa88f05d2df", "created": "2026-10-09T15:13:11.90161Z", "modified": "2026-10-09T15:13:11.90161Z", "relationship_type": "indicates", "source_ref": "indicator--aca6a071-5fc2-402f-8341-5fc7c9d034fc", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781cc7b5-c6b7-42ee-b69e-abdef2d7fec1", "created": "2026-10-09T15:13:11.901738Z", "modified": "2026-10-09T15:13:11.901738Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f0ae7dd7c5b955493475ded4f3e9dc9c597504192596129601954a722153ee5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.901738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81d12505-0ef5-4e28-9cf1-e15fa9abce0b", "created": "2026-10-09T15:13:11.902365Z", "modified": "2026-10-09T15:13:11.902365Z", "relationship_type": "indicates", "source_ref": "indicator--781cc7b5-c6b7-42ee-b69e-abdef2d7fec1", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af86bc60-5130-4d72-a0ec-d0c45ddcea2f", "created": "2026-10-09T15:13:11.902496Z", "modified": "2026-10-09T15:13:11.902496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23087de9decec4839758a8877d352c9607a8191724703f21cde6e6b2cb4cd04c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.902496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--583531ec-a00f-4921-95f3-19152a67157c", "created": "2026-10-09T15:13:11.903194Z", "modified": "2026-10-09T15:13:11.903194Z", "relationship_type": "indicates", "source_ref": "indicator--af86bc60-5130-4d72-a0ec-d0c45ddcea2f", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef3ceaa-ab7c-4747-91ba-920ec0a6477a", "created": "2026-10-09T15:13:11.903335Z", "modified": "2026-10-09T15:13:11.903335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba667c1adb22fdfed6b08584297adb677d5b937478e3052c4ea879ca01663f31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.903335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e429b56-9109-4519-93bf-62ae0109895f", "created": "2026-10-09T15:13:11.90393Z", "modified": "2026-10-09T15:13:11.90393Z", "relationship_type": "indicates", "source_ref": "indicator--1ef3ceaa-ab7c-4747-91ba-920ec0a6477a", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09f516f-6cef-4c84-bd01-a16afbd73772", "created": "2026-10-09T15:13:11.904054Z", "modified": "2026-10-09T15:13:11.904054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6c3e7044725e55bf5a030b1331b10a48dd607d7223c74cf4bc41d25d0a74c07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.904054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b7e061e-327e-4b16-af2f-dc73d1b3ae7d", "created": "2026-10-09T15:13:11.904651Z", "modified": "2026-10-09T15:13:11.904651Z", "relationship_type": "indicates", "source_ref": "indicator--e09f516f-6cef-4c84-bd01-a16afbd73772", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013447af-ad8f-4eb8-a4a2-e9c92079307e", "created": "2026-10-09T15:13:11.904777Z", "modified": "2026-10-09T15:13:11.904777Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e46d1e50ceebdc2675537167e9ee7a25d65c5667cd9c5edbfb9c01f721ca349c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.904777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e92e061-baad-458d-973a-370a857d28ed", "created": "2026-10-09T15:13:11.905375Z", "modified": "2026-10-09T15:13:11.905375Z", "relationship_type": "indicates", "source_ref": "indicator--013447af-ad8f-4eb8-a4a2-e9c92079307e", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc687d20-6e18-47d2-8b33-d50c06b02d13", "created": "2026-10-09T15:13:11.905497Z", "modified": "2026-10-09T15:13:11.905497Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f23a8fe48ede5a405bddbeedd7bcc62ff899f05f509e771a4252dbf2a6d62bbf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.905497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adc1c3d3-1afd-4a3d-8362-2a5bff2dd499", "created": "2026-10-09T15:13:11.906083Z", "modified": "2026-10-09T15:13:11.906083Z", "relationship_type": "indicates", "source_ref": "indicator--fc687d20-6e18-47d2-8b33-d50c06b02d13", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701a8ba0-9157-4b8e-ba22-75a4082738bc", "created": "2026-10-09T15:13:11.906204Z", "modified": "2026-10-09T15:13:11.906204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc137981085a51fe1a1dcbb9e90a4d1595dfcaec5cf1afeb737ad009dd1d4178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.906204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51a9952a-9fad-42d5-80f4-0e5a8f515dc1", "created": "2026-10-09T15:13:11.90681Z", "modified": "2026-10-09T15:13:11.90681Z", "relationship_type": "indicates", "source_ref": "indicator--701a8ba0-9157-4b8e-ba22-75a4082738bc", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be5d533-7def-4e94-9670-77c6379f43c6", "created": "2026-10-09T15:13:11.906939Z", "modified": "2026-10-09T15:13:11.906939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c48a5d50c826af0c118b31269e2ca2a945b8a9449336b509da1dc83e7506bcc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.906939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfcd8236-1d38-4745-93cf-9b773d48e86a", "created": "2026-10-09T15:13:11.907554Z", "modified": "2026-10-09T15:13:11.907554Z", "relationship_type": "indicates", "source_ref": "indicator--7be5d533-7def-4e94-9670-77c6379f43c6", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8002d9aa-8734-46d2-a1e1-837464a7107f", "created": "2026-10-09T15:13:11.907678Z", "modified": "2026-10-09T15:13:11.907678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12cd18d1262a8260deaa3e71336c322b77d0ef62a79272210c952596ef7a889e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.907678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb4a2d88-7fdf-4367-974e-13de996a1ec2", "created": "2026-10-09T15:13:11.908261Z", "modified": "2026-10-09T15:13:11.908261Z", "relationship_type": "indicates", "source_ref": "indicator--8002d9aa-8734-46d2-a1e1-837464a7107f", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd39a9a-bf40-42d7-a6fe-18e14c61aa80", "created": "2026-10-09T15:13:11.90844Z", "modified": "2026-10-09T15:13:11.90844Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1553112e4e158fdbb73bb698d222d49be9b13f98aeef543e9c5bee91f028fe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.90844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82c0d33f-b5b0-49c6-841d-f0fdbe611373", "created": "2026-10-09T15:13:11.909044Z", "modified": "2026-10-09T15:13:11.909044Z", "relationship_type": "indicates", "source_ref": "indicator--dbd39a9a-bf40-42d7-a6fe-18e14c61aa80", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf7e6ee-d693-4a1a-8e0e-1dacf2b16726", "created": "2026-10-09T15:13:11.909165Z", "modified": "2026-10-09T15:13:11.909165Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='307b23b32065b69dd2e7fd1ef1d74eb2923f717cff995c4884bde7c9b22b7c7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.909165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--691809c0-6375-4e85-b546-0c67dd9bd0b9", "created": "2026-10-09T15:13:11.909872Z", "modified": "2026-10-09T15:13:11.909872Z", "relationship_type": "indicates", "source_ref": "indicator--ddf7e6ee-d693-4a1a-8e0e-1dacf2b16726", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01bf696-e043-46ef-97f0-4adcbd0040f3", "created": "2026-10-09T15:13:11.909998Z", "modified": "2026-10-09T15:13:11.909998Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='763ef45d3cc1f7197c1ea6f2300b170ea7847de590b991e5944b4f9af4e770ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.909998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80cbaeae-e4aa-4326-b50c-24ffae22d5da", "created": "2026-10-09T15:13:11.910599Z", "modified": "2026-10-09T15:13:11.910599Z", "relationship_type": "indicates", "source_ref": "indicator--e01bf696-e043-46ef-97f0-4adcbd0040f3", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bc0b95-3ab8-4848-a559-4b0bbfbc7340", "created": "2026-10-09T15:13:11.910725Z", "modified": "2026-10-09T15:13:11.910725Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6d8eff1d75ef137a3375d2bee75e17a5a6a5903a243bb9d8739416ee35b4042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.910725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59f2d255-6d33-4ab0-9207-dcb421e50578", "created": "2026-10-09T15:13:11.911315Z", "modified": "2026-10-09T15:13:11.911315Z", "relationship_type": "indicates", "source_ref": "indicator--31bc0b95-3ab8-4848-a559-4b0bbfbc7340", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4341c90e-0d2e-4418-8d33-0867121134a6", "created": "2026-10-09T15:13:11.911436Z", "modified": "2026-10-09T15:13:11.911436Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bff05743c62f03c1483e454afb1fbefe31b79d18834435d61644b4138de0c50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.911436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5dbc19f-6b22-4417-a93f-fda53842fea7", "created": "2026-10-09T15:13:11.912015Z", "modified": "2026-10-09T15:13:11.912015Z", "relationship_type": "indicates", "source_ref": "indicator--4341c90e-0d2e-4418-8d33-0867121134a6", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9183c2f4-8dd1-4be6-a75c-b5a6c86867e0", "created": "2026-10-09T15:13:11.912132Z", "modified": "2026-10-09T15:13:11.912132Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='166fd3bbfd9902d2e2a4f422a58faf24a457823930bcfe7bed24d9896a1c0225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.912132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05926a5c-36a9-43a7-bd90-6452d423667b", "created": "2026-10-09T15:13:11.912726Z", "modified": "2026-10-09T15:13:11.912726Z", "relationship_type": "indicates", "source_ref": "indicator--9183c2f4-8dd1-4be6-a75c-b5a6c86867e0", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d04c9a-c674-487d-ba36-818403d8a8df", "created": "2026-10-09T15:13:11.912851Z", "modified": "2026-10-09T15:13:11.912851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d21b4957dae0be1341fa9ba8c8cff85fba31fe4e1af112e4b6c1befd6128e80d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.912851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14fc3d24-7b17-45d0-b6e6-6805bf1a8034", "created": "2026-10-09T15:13:11.913447Z", "modified": "2026-10-09T15:13:11.913447Z", "relationship_type": "indicates", "source_ref": "indicator--b7d04c9a-c674-487d-ba36-818403d8a8df", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284ec5e7-27c3-4f35-8f68-ba99ba2cb448", "created": "2026-10-09T15:13:11.91357Z", "modified": "2026-10-09T15:13:11.91357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7a056d30fb9b268ff71cc928cd240be77c173d2284187e792613ea146dc7307']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.91357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e71eec2-ed0e-4605-a56d-7c9e9084bf0a", "created": "2026-10-09T15:13:11.91415Z", "modified": "2026-10-09T15:13:11.91415Z", "relationship_type": "indicates", "source_ref": "indicator--284ec5e7-27c3-4f35-8f68-ba99ba2cb448", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fea144d-8da6-4f72-af99-c1a9aba1722e", "created": "2026-10-09T15:13:11.914279Z", "modified": "2026-10-09T15:13:11.914279Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.provider.mobile.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.914279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f72c97f-1afe-4239-9eb3-81f2aebf5add", "created": "2026-10-09T15:13:11.91475Z", "modified": "2026-10-09T15:13:11.91475Z", "relationship_type": "indicates", "source_ref": "indicator--1fea144d-8da6-4f72-af99-c1a9aba1722e", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2699ccea-429e-45a4-a134-edd3051d3be5", "created": "2026-10-09T15:13:11.914873Z", "modified": "2026-10-09T15:13:11.914873Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0DCD7C9CC6A76AD28D7D992C4EF3DF2F768EA473']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.914873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ebfa4e7-5c40-46f2-bc11-3f58094707f7", "created": "2026-10-09T15:13:11.915418Z", "modified": "2026-10-09T15:13:11.915418Z", "relationship_type": "indicates", "source_ref": "indicator--2699ccea-429e-45a4-a134-edd3051d3be5", "target_ref": "malware--1d7c3b83-312b-4674-923f-70144941409b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff", "created": "2026-10-09T15:13:11.915538Z", "modified": "2026-10-09T15:13:11.915538Z", "name": "SentryPC", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421a1db1-d607-4862-a87a-08de7c27c231", "created": "2026-10-09T15:13:11.915652Z", "modified": "2026-10-09T15:13:11.915652Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentrypc.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.915652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e364e2-f8c7-43d4-9d0e-3a25de714cba", "created": "2026-10-09T15:13:11.916236Z", "modified": "2026-10-09T15:13:11.916236Z", "relationship_type": "indicates", "source_ref": "indicator--421a1db1-d607-4862-a87a-08de7c27c231", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94acee44-fb7d-4f18-be39-d763f4a39b26", "created": "2026-10-09T15:13:11.91637Z", "modified": "2026-10-09T15:13:11.91637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spc-runtimes.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.91637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8548d448-0cc4-4c2d-80b5-223f6c803a9f", "created": "2026-10-09T15:13:11.916862Z", "modified": "2026-10-09T15:13:11.916862Z", "relationship_type": "indicates", "source_ref": "indicator--94acee44-fb7d-4f18-be39-d763f4a39b26", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930defa6-cdd8-4d80-a3e7-ffe37d3b8932", "created": "2026-10-09T15:13:11.916987Z", "modified": "2026-10-09T15:13:11.916987Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypconline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.916987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c3458c0-89fa-4e81-85c6-561d89c39873", "created": "2026-10-09T15:13:11.917484Z", "modified": "2026-10-09T15:13:11.917484Z", "relationship_type": "indicates", "source_ref": "indicator--930defa6-cdd8-4d80-a3e7-ffe37d3b8932", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ac4304-b837-4e9b-9abe-28553e43d647", "created": "2026-10-09T15:13:11.917606Z", "modified": "2026-10-09T15:13:11.917606Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypc.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.917606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71e5c95c-b339-4eb9-94fd-fc5b95efbf76", "created": "2026-10-09T15:13:11.918079Z", "modified": "2026-10-09T15:13:11.918079Z", "relationship_type": "indicates", "source_ref": "indicator--a5ac4304-b837-4e9b-9abe-28553e43d647", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e42e41-6f5e-4a0c-b161-69f10fd000fb", "created": "2026-10-09T15:13:11.918197Z", "modified": "2026-10-09T15:13:11.918197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spclogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.918197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c2d9778-cb36-473a-adb0-88f45d1d1c66", "created": "2026-10-09T15:13:11.918677Z", "modified": "2026-10-09T15:13:11.918677Z", "relationship_type": "indicates", "source_ref": "indicator--c4e42e41-6f5e-4a0c-b161-69f10fd000fb", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4224432-1294-4dc9-9bec-a3161430205f", "created": "2026-10-09T15:13:11.918795Z", "modified": "2026-10-09T15:13:11.918795Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypc.download']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.918795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eee033f9-6c05-4b45-ae13-7959d54ea9ab", "created": "2026-10-09T15:13:11.919283Z", "modified": "2026-10-09T15:13:11.919283Z", "relationship_type": "indicates", "source_ref": "indicator--d4224432-1294-4dc9-9bec-a3161430205f", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42419a98-0c59-4e49-9dca-e8b33ae7681b", "created": "2026-10-09T15:13:11.919403Z", "modified": "2026-10-09T15:13:11.919403Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.919403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73d104fc-027b-4947-91a6-18e5955b3cc3", "created": "2026-10-09T15:13:11.919871Z", "modified": "2026-10-09T15:13:11.919871Z", "relationship_type": "indicates", "source_ref": "indicator--42419a98-0c59-4e49-9dca-e8b33ae7681b", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4103009-3d8a-4512-ba05-69eb525da374", "created": "2026-10-09T15:13:11.919988Z", "modified": "2026-10-09T15:13:11.919988Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentrypc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.919988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c34fd35-dc6c-4797-a55e-377080c2ab02", "created": "2026-10-09T15:13:11.92047Z", "modified": "2026-10-09T15:13:11.92047Z", "relationship_type": "indicates", "source_ref": "indicator--c4103009-3d8a-4512-ba05-69eb525da374", "target_ref": "malware--48b33049-00f4-426e-92ce-691f6b6b8fff"}, {"type": "malware", "spec_version": "2.1", "id": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad", "created": "2026-10-09T15:13:11.920597Z", "modified": "2026-10-09T15:13:11.920597Z", "name": "TheWiSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ef94c5-89e6-4679-990a-b18179cb9a13", "created": "2026-10-09T15:13:11.920713Z", "modified": "2026-10-09T15:13:11.920713Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.thewispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.920713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d6ad39f-709b-4d7b-ac75-2e2dda7575f8", "created": "2026-10-09T15:13:11.921189Z", "modified": "2026-10-09T15:13:11.921189Z", "relationship_type": "indicates", "source_ref": "indicator--55ef94c5-89e6-4679-990a-b18179cb9a13", "target_ref": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b953cbc6-c31a-42d3-b85f-37163cf196b2", "created": "2026-10-09T15:13:11.921319Z", "modified": "2026-10-09T15:13:11.921319Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.thewispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.921319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eda456c6-0e6d-4e7c-9818-fad2afa64bfc", "created": "2026-10-09T15:13:11.921889Z", "modified": "2026-10-09T15:13:11.921889Z", "relationship_type": "indicates", "source_ref": "indicator--b953cbc6-c31a-42d3-b85f-37163cf196b2", "target_ref": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2b2f7f-8d45-4569-b3da-3a95f7732a1a", "created": "2026-10-09T15:13:11.922009Z", "modified": "2026-10-09T15:13:11.922009Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='childmonitoringsystem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.922009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3f3df3f-37f6-451a-96a8-51f688e9c90e", "created": "2026-10-09T15:13:11.922503Z", "modified": "2026-10-09T15:13:11.922503Z", "relationship_type": "indicates", "source_ref": "indicator--1c2b2f7f-8d45-4569-b3da-3a95f7732a1a", "target_ref": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880a7b31-1e27-46ab-bb81-c6cd2da88f57", "created": "2026-10-09T15:13:11.922625Z", "modified": "2026-10-09T15:13:11.922625Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1c210acafdae2b0ebbb4baf00d9ef523ed408c2fee782c91a0e3a63e7d3809d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.922625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--438627e3-4e7a-4285-abd6-1e9b08befadc", "created": "2026-10-09T15:13:11.923206Z", "modified": "2026-10-09T15:13:11.923206Z", "relationship_type": "indicates", "source_ref": "indicator--880a7b31-1e27-46ab-bb81-c6cd2da88f57", "target_ref": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59893c96-cfe1-41b2-bdb0-95b303e95ae7", "created": "2026-10-09T15:13:11.923341Z", "modified": "2026-10-09T15:13:11.923341Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thewispy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.923341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d5e70d1-546b-4fdd-9e2c-2f95ee83a296", "created": "2026-10-09T15:13:11.923788Z", "modified": "2026-10-09T15:13:11.923788Z", "relationship_type": "indicates", "source_ref": "indicator--59893c96-cfe1-41b2-bdb0-95b303e95ae7", "target_ref": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bbcbd3-59e2-4151-85f4-63e77b48f126", "created": "2026-10-09T15:13:11.923906Z", "modified": "2026-10-09T15:13:11.923906Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BFF94895A64AEB38B5278BC41B1DB242CD82DA62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.923906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff122cac-1a72-4678-b0b7-8a40dd980578", "created": "2026-10-09T15:13:11.924459Z", "modified": "2026-10-09T15:13:11.924459Z", "relationship_type": "indicates", "source_ref": "indicator--00bbcbd3-59e2-4151-85f4-63e77b48f126", "target_ref": "malware--84265792-0f00-482d-b4eb-cc5c8ab7fcad"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145", "created": "2026-10-09T15:13:11.92458Z", "modified": "2026-10-09T15:13:11.92458Z", "name": "Observer", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc31989b-fe1b-40b2-9198-8d4d2acfdcd5", "created": "2026-10-09T15:13:11.924694Z", "modified": "2026-10-09T15:13:11.924694Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='observer.back4app.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.924694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--891939e6-ee7d-4a04-8793-4355d5a7072a", "created": "2026-10-09T15:13:11.925173Z", "modified": "2026-10-09T15:13:11.925173Z", "relationship_type": "indicates", "source_ref": "indicator--fc31989b-fe1b-40b2-9198-8d4d2acfdcd5", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0937d8-04b4-4e1a-8956-f7d09b3850c0", "created": "2026-10-09T15:13:11.925305Z", "modified": "2026-10-09T15:13:11.925305Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.observer.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.925305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b04aa54-a154-487f-a718-783e5abfc786", "created": "2026-10-09T15:13:11.92578Z", "modified": "2026-10-09T15:13:11.92578Z", "relationship_type": "indicates", "source_ref": "indicator--9e0937d8-04b4-4e1a-8956-f7d09b3850c0", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990d65e3-8d27-43d1-8069-55d731c23e5f", "created": "2026-10-09T15:13:11.9259Z", "modified": "2026-10-09T15:13:11.9259Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='YWZiZDFjZTg2NTZlOGI4NDkyYWJjZDJjZDE5ZTM0Mjk.MzkwMmNhZGFiZGZhMjMyZjQzNTJkYmQ1ODg1ZjI1NzA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.9259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc2bedc7-b633-4be3-9dfb-a71063d32ae8", "created": "2026-10-09T15:13:11.926993Z", "modified": "2026-10-09T15:13:11.926993Z", "relationship_type": "indicates", "source_ref": "indicator--990d65e3-8d27-43d1-8069-55d731c23e5f", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00d58a9-43d5-4af1-9097-2fc55bb1f76f", "created": "2026-10-09T15:13:11.927124Z", "modified": "2026-10-09T15:13:11.927124Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.system.settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.927124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c3dae90-fcf1-4935-a239-afded5a7d880", "created": "2026-10-09T15:13:11.927605Z", "modified": "2026-10-09T15:13:11.927605Z", "relationship_type": "indicates", "source_ref": "indicator--a00d58a9-43d5-4af1-9097-2fc55bb1f76f", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f32ff2-1a73-498c-b764-d23fd28e03da", "created": "2026-10-09T15:13:11.92773Z", "modified": "2026-10-09T15:13:11.92773Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3D4D65F3584201E74B186A90C3333C468D3C6A09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.92773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5da94ae-0374-45dc-b235-96e7d0d98bb2", "created": "2026-10-09T15:13:11.928405Z", "modified": "2026-10-09T15:13:11.928405Z", "relationship_type": "indicates", "source_ref": "indicator--f7f32ff2-1a73-498c-b764-d23fd28e03da", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7244f509-e1eb-4655-872e-35896d32b0c1", "created": "2026-10-09T15:13:11.928538Z", "modified": "2026-10-09T15:13:11.928538Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='64AC17A447EB4BCAF556B57C5C66F232C489C7A7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.928538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52aec4b-c570-4650-8e56-a018de30f2f8", "created": "2026-10-09T15:13:11.929081Z", "modified": "2026-10-09T15:13:11.929081Z", "relationship_type": "indicates", "source_ref": "indicator--7244f509-e1eb-4655-872e-35896d32b0c1", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520f5cb6-cafa-4246-aef6-eb5c1fdec4b0", "created": "2026-10-09T15:13:11.929206Z", "modified": "2026-10-09T15:13:11.929206Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='85AF7A95F8A95541F6B6DE88A8EBC24FF1658E98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.929206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9883678-85e5-47cf-90b9-8adfc42d82b5", "created": "2026-10-09T15:13:11.929774Z", "modified": "2026-10-09T15:13:11.929774Z", "relationship_type": "indicates", "source_ref": "indicator--520f5cb6-cafa-4246-aef6-eb5c1fdec4b0", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fbed29-c441-4b33-8a00-a5d405ec7464", "created": "2026-10-09T15:13:11.929906Z", "modified": "2026-10-09T15:13:11.929906Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D44524FA0D7866F1798C41C28953DA899B46BE65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.929906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--317a6f32-ac3f-499a-adf8-bd2bb9c7e169", "created": "2026-10-09T15:13:11.930471Z", "modified": "2026-10-09T15:13:11.930471Z", "relationship_type": "indicates", "source_ref": "indicator--49fbed29-c441-4b33-8a00-a5d405ec7464", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebcd4fe-eb74-4ed1-b5ee-7f023596ed46", "created": "2026-10-09T15:13:11.930601Z", "modified": "2026-10-09T15:13:11.930601Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E906D462FA05007DE06423A10539C7E7EAB041CD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.930601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--759b4a0e-a84b-4bd8-9c4d-73f24844f276", "created": "2026-10-09T15:13:11.931139Z", "modified": "2026-10-09T15:13:11.931139Z", "relationship_type": "indicates", "source_ref": "indicator--bebcd4fe-eb74-4ed1-b5ee-7f023596ed46", "target_ref": "malware--a588c449-b73b-4d62-9cd0-0a1c12215145"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134", "created": "2026-10-09T15:13:11.931258Z", "modified": "2026-10-09T15:13:11.931258Z", "name": "Mrecorder", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ec005c-2d9a-4b4b-b188-03ac09d86aea", "created": "2026-10-09T15:13:11.931385Z", "modified": "2026-10-09T15:13:11.931385Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d1gslyvqtipqvi.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.931385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--478e8231-d479-4c19-9e86-777f16524bec", "created": "2026-10-09T15:13:11.931885Z", "modified": "2026-10-09T15:13:11.931885Z", "relationship_type": "indicates", "source_ref": "indicator--c5ec005c-2d9a-4b4b-b188-03ac09d86aea", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03a57a7-165e-46f1-9089-3c874d00a242", "created": "2026-10-09T15:13:11.93201Z", "modified": "2026-10-09T15:13:11.93201Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d24lo6rmha82nf.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.93201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c26eb8be-0312-444c-bdac-1b4197e439d2", "created": "2026-10-09T15:13:11.932515Z", "modified": "2026-10-09T15:13:11.932515Z", "relationship_type": "indicates", "source_ref": "indicator--d03a57a7-165e-46f1-9089-3c874d00a242", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b644303-779c-4a82-8ff0-44497519c9a3", "created": "2026-10-09T15:13:11.932638Z", "modified": "2026-10-09T15:13:11.932638Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d3g4zswpacwtfb.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.932638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afafabb7-d3d7-4ee7-8ecb-2d6f9fcc4169", "created": "2026-10-09T15:13:11.933133Z", "modified": "2026-10-09T15:13:11.933133Z", "relationship_type": "indicates", "source_ref": "indicator--9b644303-779c-4a82-8ff0-44497519c9a3", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5014388-1f3c-4427-9dbc-933d8b440b84", "created": "2026-10-09T15:13:11.933251Z", "modified": "2026-10-09T15:13:11.933251Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data240.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.933251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c904dcae-a810-42cc-8b4f-a966526f70d5", "created": "2026-10-09T15:13:11.933738Z", "modified": "2026-10-09T15:13:11.933738Z", "relationship_type": "indicates", "source_ref": "indicator--a5014388-1f3c-4427-9dbc-933d8b440b84", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629f417a-a86e-4df6-bfc8-c83c7f7cf97c", "created": "2026-10-09T15:13:11.933857Z", "modified": "2026-10-09T15:13:11.933857Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data241.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.933857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bfff1dd-6242-41e5-9d0d-b333ebb5e195", "created": "2026-10-09T15:13:11.934767Z", "modified": "2026-10-09T15:13:11.934767Z", "relationship_type": "indicates", "source_ref": "indicator--629f417a-a86e-4df6-bfc8-c83c7f7cf97c", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9a0644-866c-43cd-b8f9-815d65881589", "created": "2026-10-09T15:13:11.934898Z", "modified": "2026-10-09T15:13:11.934898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='disp2.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.934898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3ccc1e7-2f9e-4236-a39c-825dabbf14ee", "created": "2026-10-09T15:13:11.935404Z", "modified": "2026-10-09T15:13:11.935404Z", "relationship_type": "indicates", "source_ref": "indicator--7b9a0644-866c-43cd-b8f9-815d65881589", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f18750a-2832-4aa2-836d-d06b4ee47101", "created": "2026-10-09T15:13:11.93553Z", "modified": "2026-10-09T15:13:11.93553Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dispatcher.mrecorder.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.93553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fd92f36-5c51-4857-a9be-e923ce9c53f3", "created": "2026-10-09T15:13:11.936019Z", "modified": "2026-10-09T15:13:11.936019Z", "relationship_type": "indicates", "source_ref": "indicator--8f18750a-2832-4aa2-836d-d06b4ee47101", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad6e427-7332-4edc-af05-78ec2149d4cd", "created": "2026-10-09T15:13:11.936143Z", "modified": "2026-10-09T15:13:11.936143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobi22.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.936143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3404dd2-4c37-4ee0-be33-57c5c7c0cbf0", "created": "2026-10-09T15:13:11.936623Z", "modified": "2026-10-09T15:13:11.936623Z", "relationship_type": "indicates", "source_ref": "indicator--3ad6e427-7332-4edc-af05-78ec2149d4cd", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e7acf9-fc4b-483e-9b5d-9b1b01dd3862", "created": "2026-10-09T15:13:11.936746Z", "modified": "2026-10-09T15:13:11.936746Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilerecorder-1277.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.936746Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de45335a-c819-4a4d-a756-48889132af58", "created": "2026-10-09T15:13:11.937254Z", "modified": "2026-10-09T15:13:11.937254Z", "relationship_type": "indicates", "source_ref": "indicator--40e7acf9-fc4b-483e-9b5d-9b1b01dd3862", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadba8f1-d64f-49de-aa59-e644df16710d", "created": "2026-10-09T15:13:11.937391Z", "modified": "2026-10-09T15:13:11.937391Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.937391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1f43890-b8e2-45eb-bd2d-e0ac6fbcaaae", "created": "2026-10-09T15:13:11.937863Z", "modified": "2026-10-09T15:13:11.937863Z", "relationship_type": "indicates", "source_ref": "indicator--fadba8f1-d64f-49de-aa59-e644df16710d", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35ac98a-ead5-4cb8-94af-f81848a9cc56", "created": "2026-10-09T15:13:11.937984Z", "modified": "2026-10-09T15:13:11.937984Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.937984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bfb69ca-5837-4a3f-864f-0d0e1855d800", "created": "2026-10-09T15:13:11.93847Z", "modified": "2026-10-09T15:13:11.93847Z", "relationship_type": "indicates", "source_ref": "indicator--e35ac98a-ead5-4cb8-94af-f81848a9cc56", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e09b09-80ff-43a5-bcbb-9546a681c415", "created": "2026-10-09T15:13:11.938595Z", "modified": "2026-10-09T15:13:11.938595Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='package.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.938595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be54b8aa-d224-4a83-ac9a-b09111374cd4", "created": "2026-10-09T15:13:11.93907Z", "modified": "2026-10-09T15:13:11.93907Z", "relationship_type": "indicates", "source_ref": "indicator--10e09b09-80ff-43a5-bcbb-9546a681c415", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b687c2a-2965-43f0-8002-24dc426c1d23", "created": "2026-10-09T15:13:11.939189Z", "modified": "2026-10-09T15:13:11.939189Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='package2.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.939189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a624fe3e-19f6-4762-b988-1b64087d2c79", "created": "2026-10-09T15:13:11.939678Z", "modified": "2026-10-09T15:13:11.939678Z", "relationship_type": "indicates", "source_ref": "indicator--7b687c2a-2965-43f0-8002-24dc426c1d23", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f83267-da4d-4a71-97b8-daa3553ae39c", "created": "2026-10-09T15:13:11.939797Z", "modified": "2026-10-09T15:13:11.939797Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='project-7991479181228723357.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.939797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8f0367a-f630-4cc2-9267-61b6365ebeef", "created": "2026-10-09T15:13:11.940422Z", "modified": "2026-10-09T15:13:11.940422Z", "relationship_type": "indicates", "source_ref": "indicator--18f83267-da4d-4a71-97b8-daa3553ae39c", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ebed74-5ca2-4853-ae04-427524153dd9", "created": "2026-10-09T15:13:11.940553Z", "modified": "2026-10-09T15:13:11.940553Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilerecorder24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.940553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3002f0a7-e541-43aa-9d1f-ed2d105767b0", "created": "2026-10-09T15:13:11.94104Z", "modified": "2026-10-09T15:13:11.94104Z", "relationship_type": "indicates", "source_ref": "indicator--d6ebed74-5ca2-4853-ae04-427524153dd9", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d8c933-83c9-4f88-a122-20042564f0b6", "created": "2026-10-09T15:13:11.941164Z", "modified": "2026-10-09T15:13:11.941164Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mrecorder.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.941164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b888b202-7d4e-462e-b932-72d8845c4ea3", "created": "2026-10-09T15:13:11.941645Z", "modified": "2026-10-09T15:13:11.941645Z", "relationship_type": "indicates", "source_ref": "indicator--48d8c933-83c9-4f88-a122-20042564f0b6", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9ecb9a-27ac-4f6a-8cc5-356a8d97141a", "created": "2026-10-09T15:13:11.94177Z", "modified": "2026-10-09T15:13:11.94177Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobileservices2.synchronization']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.94177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33d97ab5-79e1-43f6-a7bb-91369ba1dfe9", "created": "2026-10-09T15:13:11.942259Z", "modified": "2026-10-09T15:13:11.942259Z", "relationship_type": "indicates", "source_ref": "indicator--9e9ecb9a-27ac-4f6a-8cc5-356a8d97141a", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cadb23-c4e4-4e08-8072-6a4a13fb4088", "created": "2026-10-09T15:13:11.942392Z", "modified": "2026-10-09T15:13:11.942392Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrecorder.callrecorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.942392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12dec488-3ca1-4ff0-979e-0e0b0e75d866", "created": "2026-10-09T15:13:11.942851Z", "modified": "2026-10-09T15:13:11.942851Z", "relationship_type": "indicates", "source_ref": "indicator--57cadb23-c4e4-4e08-8072-6a4a13fb4088", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018f67dd-6d9a-4fc0-b6a5-c24a16c8f30a", "created": "2026-10-09T15:13:11.942968Z", "modified": "2026-10-09T15:13:11.942968Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobileservice.sync']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.942968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f67e99a-fb50-43e0-88a4-e75881dc7c9d", "created": "2026-10-09T15:13:11.943441Z", "modified": "2026-10-09T15:13:11.943441Z", "relationship_type": "indicates", "source_ref": "indicator--018f67dd-6d9a-4fc0-b6a5-c24a16c8f30a", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b8cd85-7a88-4cde-b4d5-e3dfcd9a79a0", "created": "2026-10-09T15:13:11.94356Z", "modified": "2026-10-09T15:13:11.94356Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.connection.manager']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.94356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05ebd860-ad3b-46a9-81b1-8bdf59b95c31", "created": "2026-10-09T15:13:11.944022Z", "modified": "2026-10-09T15:13:11.944022Z", "relationship_type": "indicates", "source_ref": "indicator--e6b8cd85-7a88-4cde-b4d5-e3dfcd9a79a0", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a42bc8-5c17-4489-bd1c-99b1aad74ca9", "created": "2026-10-09T15:13:11.944141Z", "modified": "2026-10-09T15:13:11.944141Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='718F3191938DA39D3A4EAC0EF0F44C70F32B0989']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.944141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ef27310-7f7c-4885-81fd-cfb2acd9cb23", "created": "2026-10-09T15:13:11.9447Z", "modified": "2026-10-09T15:13:11.9447Z", "relationship_type": "indicates", "source_ref": "indicator--26a42bc8-5c17-4489-bd1c-99b1aad74ca9", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3317ff19-93e3-4e04-9c15-0b3f431b0625", "created": "2026-10-09T15:13:11.94483Z", "modified": "2026-10-09T15:13:11.94483Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77142DA3A865C256FCDD24E187FDCEBA1B4EC587']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.94483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9fd2bd8-e908-40e5-8eba-e3dcc53db3e5", "created": "2026-10-09T15:13:11.945399Z", "modified": "2026-10-09T15:13:11.945399Z", "relationship_type": "indicates", "source_ref": "indicator--3317ff19-93e3-4e04-9c15-0b3f431b0625", "target_ref": "malware--7137afb3-3ba9-4b2f-9d6a-dd31a5290134"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9b389e03-69fd-404c-be33-0397f575601b", "created": "2026-10-09T15:13:11.945522Z", "modified": "2026-10-09T15:13:11.945522Z", "name": "PhoneSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958bdb52-a831-4900-8e37-848dbb3c4b2b", "created": "2026-10-09T15:13:11.945634Z", "modified": "2026-10-09T15:13:11.945634Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phone-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.945634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--257e80e6-fd72-4c2f-92b7-a42e965f975e", "created": "2026-10-09T15:13:11.946208Z", "modified": "2026-10-09T15:13:11.946208Z", "relationship_type": "indicates", "source_ref": "indicator--958bdb52-a831-4900-8e37-848dbb3c4b2b", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e396c6-2f5a-433f-8746-ca3850641ac1", "created": "2026-10-09T15:13:11.946344Z", "modified": "2026-10-09T15:13:11.946344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phone-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.946344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab1dfce0-a43e-4a0e-8556-5bcae8456705", "created": "2026-10-09T15:13:11.946821Z", "modified": "2026-10-09T15:13:11.946821Z", "relationship_type": "indicates", "source_ref": "indicator--27e396c6-2f5a-433f-8746-ca3850641ac1", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143985f7-dd2f-4138-87d4-1392a1563617", "created": "2026-10-09T15:13:11.946945Z", "modified": "2026-10-09T15:13:11.946945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aksoft.gq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.946945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18900a11-adea-4587-9fb8-83ce64664954", "created": "2026-10-09T15:13:11.947422Z", "modified": "2026-10-09T15:13:11.947422Z", "relationship_type": "indicates", "source_ref": "indicator--143985f7-dd2f-4138-87d4-1392a1563617", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb6ca13-bbef-4c63-a33f-a84547918704", "created": "2026-10-09T15:13:11.947544Z", "modified": "2026-10-09T15:13:11.947544Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.popo.analyse']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.947544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63011d8e-4a1a-4e0e-bfdd-5718064e1eb3", "created": "2026-10-09T15:13:11.94799Z", "modified": "2026-10-09T15:13:11.94799Z", "relationship_type": "indicates", "source_ref": "indicator--3fb6ca13-bbef-4c63-a33f-a84547918704", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894b16c5-0ae8-41ed-b9b1-ebdf16933c4d", "created": "2026-10-09T15:13:11.948107Z", "modified": "2026-10-09T15:13:11.948107Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wlset.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.948107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--decfcb8b-e5cc-4724-90c6-bed2ef1f7214", "created": "2026-10-09T15:13:11.948569Z", "modified": "2026-10-09T15:13:11.948569Z", "relationship_type": "indicates", "source_ref": "indicator--894b16c5-0ae8-41ed-b9b1-ebdf16933c4d", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61adf625-4b59-49a4-8e5a-1131b59f3c0e", "created": "2026-10-09T15:13:11.948692Z", "modified": "2026-10-09T15:13:11.948692Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5EC970BC602D0EBB2F3C7A5135E24C330B71DE59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.948692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6b77b85-e3bc-4d84-879f-b0dfbfc3d25c", "created": "2026-10-09T15:13:11.949241Z", "modified": "2026-10-09T15:13:11.949241Z", "relationship_type": "indicates", "source_ref": "indicator--61adf625-4b59-49a4-8e5a-1131b59f3c0e", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7053676d-0586-4cc6-8c74-90c0e2aae5a9", "created": "2026-10-09T15:13:11.949378Z", "modified": "2026-10-09T15:13:11.949378Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FBC83FD67E3B534B8B03D3B341249DB3186374E2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.949378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3d7f838-a156-4c3a-af71-ad27f21ae9dd", "created": "2026-10-09T15:13:11.94993Z", "modified": "2026-10-09T15:13:11.94993Z", "relationship_type": "indicates", "source_ref": "indicator--7053676d-0586-4cc6-8c74-90c0e2aae5a9", "target_ref": "malware--9b389e03-69fd-404c-be33-0397f575601b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72", "created": "2026-10-09T15:13:11.950048Z", "modified": "2026-10-09T15:13:11.950048Z", "name": "ShadySpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba312df-12f7-49cd-acde-33d988cc4190", "created": "2026-10-09T15:13:11.950161Z", "modified": "2026-10-09T15:13:11.950161Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.950161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eab86230-6437-4633-865d-f7c360c89dc5", "created": "2026-10-09T15:13:11.950663Z", "modified": "2026-10-09T15:13:11.950663Z", "relationship_type": "indicates", "source_ref": "indicator--3ba312df-12f7-49cd-acde-33d988cc4190", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb186e7-b4cb-48bf-b0c9-12ab18d5022a", "created": "2026-10-09T15:13:11.950786Z", "modified": "2026-10-09T15:13:11.950786Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.950786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7326b5db-0714-43d0-bc10-bcee66904de8", "created": "2026-10-09T15:13:11.951261Z", "modified": "2026-10-09T15:13:11.951261Z", "relationship_type": "indicates", "source_ref": "indicator--beb186e7-b4cb-48bf-b0c9-12ab18d5022a", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869864b4-4c85-43bf-a385-dd69fdf99be6", "created": "2026-10-09T15:13:11.951392Z", "modified": "2026-10-09T15:13:11.951392Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.951392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d422fc69-9b0b-439d-81ce-a12a253abe96", "created": "2026-10-09T15:13:11.951957Z", "modified": "2026-10-09T15:13:11.951957Z", "relationship_type": "indicates", "source_ref": "indicator--869864b4-4c85-43bf-a385-dd69fdf99be6", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a6ca05-e21d-4eb3-bf1c-c3c0a04e62c7", "created": "2026-10-09T15:13:11.952084Z", "modified": "2026-10-09T15:13:11.952084Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.952084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ceccb9a-9d63-4b36-875c-34e7e89d01bd", "created": "2026-10-09T15:13:11.952559Z", "modified": "2026-10-09T15:13:11.952559Z", "relationship_type": "indicates", "source_ref": "indicator--77a6ca05-e21d-4eb3-bf1c-c3c0a04e62c7", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591fc607-2dd3-43a1-b539-5598798ff209", "created": "2026-10-09T15:13:11.952682Z", "modified": "2026-10-09T15:13:11.952682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.952682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3099dacd-a222-498f-8a97-3f6df68dd1d4", "created": "2026-10-09T15:13:11.953274Z", "modified": "2026-10-09T15:13:11.953274Z", "relationship_type": "indicates", "source_ref": "indicator--591fc607-2dd3-43a1-b539-5598798ff209", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa5f5c9-b2a4-497a-a5d0-306e27ec9131", "created": "2026-10-09T15:13:11.953398Z", "modified": "2026-10-09T15:13:11.953398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='144e86d35eb8d5f8d56dbb7a29d5d9c17726425bc639dec91c8ebaa80c15b120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.953398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b82b43a-285a-4394-a1d0-3feb417fec98", "created": "2026-10-09T15:13:11.953981Z", "modified": "2026-10-09T15:13:11.953981Z", "relationship_type": "indicates", "source_ref": "indicator--cfa5f5c9-b2a4-497a-a5d0-306e27ec9131", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b94dc3-4417-4d07-9c9d-137b7ee662c5", "created": "2026-10-09T15:13:11.954101Z", "modified": "2026-10-09T15:13:11.954101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e65a703f4d43dcabbe902e991fbad02b3eb4cd0e741528b1b50cc47347305103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.954101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d6061d1-eb86-4d8f-99ad-33a0b50b20d5", "created": "2026-10-09T15:13:11.954696Z", "modified": "2026-10-09T15:13:11.954696Z", "relationship_type": "indicates", "source_ref": "indicator--a2b94dc3-4417-4d07-9c9d-137b7ee662c5", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f81aa2e0-d3ce-4e6d-8816-23ac61597df8", "created": "2026-10-09T15:13:11.954817Z", "modified": "2026-10-09T15:13:11.954817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d2e139facfd7a455a7ae23db67b47e694e42db21bd7a4538b5f44a0a919058d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.954817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a00a6c2-aafd-429a-b743-6b2a30d71e4d", "created": "2026-10-09T15:13:11.955415Z", "modified": "2026-10-09T15:13:11.955415Z", "relationship_type": "indicates", "source_ref": "indicator--f81aa2e0-d3ce-4e6d-8816-23ac61597df8", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f67dff2-5059-4e62-90e9-834480a09013", "created": "2026-10-09T15:13:11.955536Z", "modified": "2026-10-09T15:13:11.955536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1e13d5848d621627dc6ca7b0194265cfc4e506860492747f08e853530443a54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.955536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc93a947-c203-430c-9aba-28dbc98c0c15", "created": "2026-10-09T15:13:11.956115Z", "modified": "2026-10-09T15:13:11.956115Z", "relationship_type": "indicates", "source_ref": "indicator--8f67dff2-5059-4e62-90e9-834480a09013", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e257faf2-7560-4337-b394-5f6e1147a592", "created": "2026-10-09T15:13:11.956233Z", "modified": "2026-10-09T15:13:11.956233Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.shadyspy.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.956233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cef8f459-15d6-40f0-b9ce-d6a797074193", "created": "2026-10-09T15:13:11.956705Z", "modified": "2026-10-09T15:13:11.956705Z", "relationship_type": "indicates", "source_ref": "indicator--e257faf2-7560-4337-b394-5f6e1147a592", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aba350-41f4-4f91-bceb-c35b78e737a4", "created": "2026-10-09T15:13:11.956825Z", "modified": "2026-10-09T15:13:11.956825Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='91ED4F75A763A63471E1D1D39BA012DF867550D4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.956825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--912109b5-d0fb-4ab3-a3e5-2a362f2b0966", "created": "2026-10-09T15:13:11.957374Z", "modified": "2026-10-09T15:13:11.957374Z", "relationship_type": "indicates", "source_ref": "indicator--53aba350-41f4-4f91-bceb-c35b78e737a4", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c1bbc7-330d-4442-83e0-843a0da79b56", "created": "2026-10-09T15:13:11.957494Z", "modified": "2026-10-09T15:13:11.957494Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C44894EE63F2E861A6960834A21EB27169150722']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.957494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df1e6441-4544-4e6b-ad30-107bc21f94e7", "created": "2026-10-09T15:13:11.958144Z", "modified": "2026-10-09T15:13:11.958144Z", "relationship_type": "indicates", "source_ref": "indicator--e3c1bbc7-330d-4442-83e0-843a0da79b56", "target_ref": "malware--60924d57-3b49-45c9-b8fa-23284a6c8e72"}, {"type": "malware", "spec_version": "2.1", "id": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890", "created": "2026-10-09T15:13:11.958262Z", "modified": "2026-10-09T15:13:11.958262Z", "name": "AbsoluTrack", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39eba66b-dd35-45f8-9804-e1645b6e0adc", "created": "2026-10-09T15:13:11.958389Z", "modified": "2026-10-09T15:13:11.958389Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.958389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a322846e-7d32-45e2-925c-23a918c5cd11", "created": "2026-10-09T15:13:11.958873Z", "modified": "2026-10-09T15:13:11.958873Z", "relationship_type": "indicates", "source_ref": "indicator--39eba66b-dd35-45f8-9804-e1645b6e0adc", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dff811c-ebbf-4457-8a3f-c70edeffbeda", "created": "2026-10-09T15:13:11.958992Z", "modified": "2026-10-09T15:13:11.958992Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ass.absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.958992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5f88ceb-e024-40f9-a988-db9375adefc6", "created": "2026-10-09T15:13:11.959484Z", "modified": "2026-10-09T15:13:11.959484Z", "relationship_type": "indicates", "source_ref": "indicator--6dff811c-ebbf-4457-8a3f-c70edeffbeda", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8650a07f-594d-4f01-816f-bd35151be38d", "created": "2026-10-09T15:13:11.959606Z", "modified": "2026-10-09T15:13:11.959606Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thiefguardbd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.959606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--103aa62f-6a48-4190-a735-e93e74a213bf", "created": "2026-10-09T15:13:11.960086Z", "modified": "2026-10-09T15:13:11.960086Z", "relationship_type": "indicates", "source_ref": "indicator--8650a07f-594d-4f01-816f-bd35151be38d", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f2c450-2b0d-45b3-b0c4-cb11bbe53e3c", "created": "2026-10-09T15:13:11.960214Z", "modified": "2026-10-09T15:13:11.960214Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='antitheft-88554.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.960214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cf9509b-8edd-4aba-bc1c-3cae8f9e3d4c", "created": "2026-10-09T15:13:11.960713Z", "modified": "2026-10-09T15:13:11.960713Z", "relationship_type": "indicates", "source_ref": "indicator--a4f2c450-2b0d-45b3-b0c4-cb11bbe53e3c", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32453ce-1878-429a-945d-7619b2d46ebb", "created": "2026-10-09T15:13:11.960832Z", "modified": "2026-10-09T15:13:11.960832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotesecurity-629f2.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.960832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5731348e-d5e0-4dc9-aaf1-75f5d5c86a9a", "created": "2026-10-09T15:13:11.961337Z", "modified": "2026-10-09T15:13:11.961337Z", "relationship_type": "indicates", "source_ref": "indicator--f32453ce-1878-429a-945d-7619b2d46ebb", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecc54a7-2ced-4195-a236-24a2e60bf42a", "created": "2026-10-09T15:13:11.961456Z", "modified": "2026-10-09T15:13:11.961456Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.onetouchsecurities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.961456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da134fce-f4f1-4a1e-96b0-4e4b77780d2e", "created": "2026-10-09T15:13:11.961933Z", "modified": "2026-10-09T15:13:11.961933Z", "relationship_type": "indicates", "source_ref": "indicator--cecc54a7-2ced-4195-a236-24a2e60bf42a", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0332fa-ce55-4ce9-8112-7673d93101d8", "created": "2026-10-09T15:13:11.962049Z", "modified": "2026-10-09T15:13:11.962049Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotesecurityots.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.962049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cca3e096-338e-49bf-8011-25f67b377f1a", "created": "2026-10-09T15:13:11.962579Z", "modified": "2026-10-09T15:13:11.962579Z", "relationship_type": "indicates", "source_ref": "indicator--7e0332fa-ce55-4ce9-8112-7673d93101d8", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6ae27b-e0df-4dac-a83e-f14ee11e9d50", "created": "2026-10-09T15:13:11.962701Z", "modified": "2026-10-09T15:13:11.962701Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.962701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02088cd2-e747-47c0-a2b2-bc76d6191555", "created": "2026-10-09T15:13:11.963176Z", "modified": "2026-10-09T15:13:11.963176Z", "relationship_type": "indicates", "source_ref": "indicator--9c6ae27b-e0df-4dac-a83e-f14ee11e9d50", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ef5fb9-756f-4676-9263-0e8d68052418", "created": "2026-10-09T15:13:11.963305Z", "modified": "2026-10-09T15:13:11.963305Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='absolutestoreindia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.963305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80a0070e-b3d8-45eb-bb40-750c10509907", "created": "2026-10-09T15:13:11.963886Z", "modified": "2026-10-09T15:13:11.963886Z", "relationship_type": "indicates", "source_ref": "indicator--a2ef5fb9-756f-4676-9263-0e8d68052418", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e27b35-1d83-4489-a2e6-387d46ebf235", "created": "2026-10-09T15:13:11.964009Z", "modified": "2026-10-09T15:13:11.964009Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ass.absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.964009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1854b72d-d65f-4768-ad28-2f13ea6f2b93", "created": "2026-10-09T15:13:11.964507Z", "modified": "2026-10-09T15:13:11.964507Z", "relationship_type": "indicates", "source_ref": "indicator--a5e27b35-1d83-4489-a2e6-387d46ebf235", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb46fa6-335e-4582-a7ba-06dbb71a83ed", "created": "2026-10-09T15:13:11.964631Z", "modified": "2026-10-09T15:13:11.964631Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geniesoftsystem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.964631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99e7d566-9bd3-47e0-b4b1-032fd3b08280", "created": "2026-10-09T15:13:11.965104Z", "modified": "2026-10-09T15:13:11.965104Z", "relationship_type": "indicates", "source_ref": "indicator--ebb46fa6-335e-4582-a7ba-06dbb71a83ed", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009d0b22-e760-4499-b886-1e0309d9612d", "created": "2026-10-09T15:13:11.965224Z", "modified": "2026-10-09T15:13:11.965224Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onetouchsecurities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.965224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea0de124-6db8-4fcc-b12e-cb29835bee72", "created": "2026-10-09T15:13:11.965712Z", "modified": "2026-10-09T15:13:11.965712Z", "relationship_type": "indicates", "source_ref": "indicator--009d0b22-e760-4499-b886-1e0309d9612d", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642fcaa4-4513-49a4-a11d-65f5c61f89ad", "created": "2026-10-09T15:13:11.96583Z", "modified": "2026-10-09T15:13:11.96583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smartguardapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.96583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97853b41-6546-4844-be05-f55d2c603323", "created": "2026-10-09T15:13:11.966315Z", "modified": "2026-10-09T15:13:11.966315Z", "relationship_type": "indicates", "source_ref": "indicator--642fcaa4-4513-49a4-a11d-65f5c61f89ad", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad3422d-e815-4838-a8c9-5e87cb365202", "created": "2026-10-09T15:13:11.966436Z", "modified": "2026-10-09T15:13:11.966436Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thiefguardbd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.966436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67d90e6e-8bf6-425e-a997-046db475e575", "created": "2026-10-09T15:13:11.966917Z", "modified": "2026-10-09T15:13:11.966917Z", "relationship_type": "indicates", "source_ref": "indicator--8ad3422d-e815-4838-a8c9-5e87cb365202", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f448ac-aa69-4551-abe2-eac611a32676", "created": "2026-10-09T15:13:11.967035Z", "modified": "2026-10-09T15:13:11.967035Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.smartguardapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.967035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--296534be-1ed4-4ac6-bee1-da85844bfcf2", "created": "2026-10-09T15:13:11.967522Z", "modified": "2026-10-09T15:13:11.967522Z", "relationship_type": "indicates", "source_ref": "indicator--b4f448ac-aa69-4551-abe2-eac611a32676", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ba5f57-7446-4fac-9097-cd2f0c376a18", "created": "2026-10-09T15:13:11.967642Z", "modified": "2026-10-09T15:13:11.967642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9c69ce4363f62b3255bffbd6872de9856d654994c10e5a75da517f68742561e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.967642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d50b2f18-0eb4-4c66-a57f-8daf568254c3", "created": "2026-10-09T15:13:11.968232Z", "modified": "2026-10-09T15:13:11.968232Z", "relationship_type": "indicates", "source_ref": "indicator--88ba5f57-7446-4fac-9097-cd2f0c376a18", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d781b6-a5c1-4a4b-8ca3-22a5112cf2ca", "created": "2026-10-09T15:13:11.968376Z", "modified": "2026-10-09T15:13:11.968376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f1256b972e981c110499005408a3c958f2dc384acc550ae41a4975e4ba845c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.968376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5193129d-a220-4597-a8d6-8584cde1a744", "created": "2026-10-09T15:13:11.968954Z", "modified": "2026-10-09T15:13:11.968954Z", "relationship_type": "indicates", "source_ref": "indicator--65d781b6-a5c1-4a4b-8ca3-22a5112cf2ca", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d688f80-10e0-4c93-acea-865714483767", "created": "2026-10-09T15:13:11.969077Z", "modified": "2026-10-09T15:13:11.969077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fd194b70894584bbb2d9f727663c29ab703a4dcb1eaff91e35af3817fe51dc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.969077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25fad4ef-2009-46ac-a9c0-410de7a4896b", "created": "2026-10-09T15:13:11.969765Z", "modified": "2026-10-09T15:13:11.969765Z", "relationship_type": "indicates", "source_ref": "indicator--7d688f80-10e0-4c93-acea-865714483767", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4ce7d0-d56b-423f-bcf4-3e3349c041c6", "created": "2026-10-09T15:13:11.969893Z", "modified": "2026-10-09T15:13:11.969893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='605964ddbaa59bf4953d7ae8b8ce247b0654694f12af99652fee824e21be8b76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.969893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf7dcdd7-1648-436e-b0c6-20198d9e9a00", "created": "2026-10-09T15:13:11.970499Z", "modified": "2026-10-09T15:13:11.970499Z", "relationship_type": "indicates", "source_ref": "indicator--ac4ce7d0-d56b-423f-bcf4-3e3349c041c6", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8116f520-dbe4-4f80-96bd-4eaa8653da83", "created": "2026-10-09T15:13:11.970624Z", "modified": "2026-10-09T15:13:11.970624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2833eff791982dbcd38cea8b68cb54f04b96a6842796727ad9f359cd86937e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.970624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a44b48eb-3bc2-4f3f-bc55-5adc860d8c0e", "created": "2026-10-09T15:13:11.971216Z", "modified": "2026-10-09T15:13:11.971216Z", "relationship_type": "indicates", "source_ref": "indicator--8116f520-dbe4-4f80-96bd-4eaa8653da83", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d351ae11-e00d-4350-b071-66eadd4237ed", "created": "2026-10-09T15:13:11.971348Z", "modified": "2026-10-09T15:13:11.971348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8f53b99ff5159699e47ca6d4344866e249887326d5ee19360dfe9ee820a44c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.971348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7586e8b-50a2-44c6-8e78-b11ad4da3d16", "created": "2026-10-09T15:13:11.971947Z", "modified": "2026-10-09T15:13:11.971947Z", "relationship_type": "indicates", "source_ref": "indicator--d351ae11-e00d-4350-b071-66eadd4237ed", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafbc8d0-9f14-4245-b056-a5609595b406", "created": "2026-10-09T15:13:11.972075Z", "modified": "2026-10-09T15:13:11.972075Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cc4e9ceea8d398f051fbd2deb3fc2e7936b607ccb18cc940a526eb8cb5060e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.972075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d80ebd5d-f16a-4fa2-b4f6-9300c45bcbdc", "created": "2026-10-09T15:13:11.972678Z", "modified": "2026-10-09T15:13:11.972678Z", "relationship_type": "indicates", "source_ref": "indicator--aafbc8d0-9f14-4245-b056-a5609595b406", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fffb60-6ff5-49fa-8440-661105ed7cb3", "created": "2026-10-09T15:13:11.972802Z", "modified": "2026-10-09T15:13:11.972802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a36637a317d9d927ba6e784592d1da974a07d82d168b4cbc82d6c0b718278060']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.972802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eb08f5c-96fb-417f-b880-4fa514f1a64e", "created": "2026-10-09T15:13:11.973399Z", "modified": "2026-10-09T15:13:11.973399Z", "relationship_type": "indicates", "source_ref": "indicator--c1fffb60-6ff5-49fa-8440-661105ed7cb3", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb8866d-ec00-4f8e-a107-15be44547e81", "created": "2026-10-09T15:13:11.973522Z", "modified": "2026-10-09T15:13:11.973522Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce1632fe353d6e17e263378b4148308c5853e59813cd02a72c6eb54ab814a4c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.973522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b6da7d5-fd6b-4415-bd90-20543a4dd7cd", "created": "2026-10-09T15:13:11.974118Z", "modified": "2026-10-09T15:13:11.974118Z", "relationship_type": "indicates", "source_ref": "indicator--1eb8866d-ec00-4f8e-a107-15be44547e81", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96f8bab-7e48-4956-b0b4-d72b272cdd28", "created": "2026-10-09T15:13:11.974238Z", "modified": "2026-10-09T15:13:11.974238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64a27fac8b598f6e7bc79eabdc960c29290db1872fdc04319e7947e9f5661af7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.974238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7098336f-6d4e-4102-b68b-de9e7e62d055", "created": "2026-10-09T15:13:11.97484Z", "modified": "2026-10-09T15:13:11.97484Z", "relationship_type": "indicates", "source_ref": "indicator--c96f8bab-7e48-4956-b0b4-d72b272cdd28", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5217dd05-778d-4677-b974-136b5b64ed3c", "created": "2026-10-09T15:13:11.974965Z", "modified": "2026-10-09T15:13:11.974965Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ass.antitheft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.974965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20fdbb1a-ea73-4edf-b8f7-da45aa83d6fd", "created": "2026-10-09T15:13:11.975433Z", "modified": "2026-10-09T15:13:11.975433Z", "relationship_type": "indicates", "source_ref": "indicator--5217dd05-778d-4677-b974-136b5b64ed3c", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d33c660-844b-4cec-af8b-9881e600d7a8", "created": "2026-10-09T15:13:11.975558Z", "modified": "2026-10-09T15:13:11.975558Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ass.remotesecurity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.975558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd0f62a2-2d2f-453e-b0d8-8c19901d2562", "created": "2026-10-09T15:13:11.976143Z", "modified": "2026-10-09T15:13:11.976143Z", "relationship_type": "indicates", "source_ref": "indicator--6d33c660-844b-4cec-af8b-9881e600d7a8", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97eacb9-cf2b-4701-b7ac-4829ac06919a", "created": "2026-10-09T15:13:11.97628Z", "modified": "2026-10-09T15:13:11.97628Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ass.ladieschildprotection']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.97628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27cade39-b532-4dc5-a58d-bbd9823dd60b", "created": "2026-10-09T15:13:11.976763Z", "modified": "2026-10-09T15:13:11.976763Z", "relationship_type": "indicates", "source_ref": "indicator--b97eacb9-cf2b-4701-b7ac-4829ac06919a", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa95fb33-dba5-436d-9162-b1467c5769a6", "created": "2026-10-09T15:13:11.976883Z", "modified": "2026-10-09T15:13:11.976883Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.ladieschildprotection']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.976883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52a77c61-2caa-48b3-b52c-d2b5f2f985ad", "created": "2026-10-09T15:13:11.977359Z", "modified": "2026-10-09T15:13:11.977359Z", "relationship_type": "indicates", "source_ref": "indicator--aa95fb33-dba5-436d-9162-b1467c5769a6", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f84e68-011b-44ae-a74a-1e6921e5bce3", "created": "2026-10-09T15:13:11.977482Z", "modified": "2026-10-09T15:13:11.977482Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.remotesecurity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.977482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--926ac81c-eb50-4824-bc26-3e45827c8ee7", "created": "2026-10-09T15:13:11.977945Z", "modified": "2026-10-09T15:13:11.977945Z", "relationship_type": "indicates", "source_ref": "indicator--d7f84e68-011b-44ae-a74a-1e6921e5bce3", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae45000-73a8-4f0d-acbb-8041531fbff7", "created": "2026-10-09T15:13:11.978072Z", "modified": "2026-10-09T15:13:11.978072Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.antitheft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.978072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba64ff35-9377-4c6a-bff8-1ebfc74e28d4", "created": "2026-10-09T15:13:11.978533Z", "modified": "2026-10-09T15:13:11.978533Z", "relationship_type": "indicates", "source_ref": "indicator--cae45000-73a8-4f0d-acbb-8041531fbff7", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9002c9c-6502-4f88-81e4-724e605dc3fb", "created": "2026-10-09T15:13:11.978652Z", "modified": "2026-10-09T15:13:11.978652Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.softalogy.thiefguard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.978652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cac5104-81da-442e-91be-a9c20dc66e52", "created": "2026-10-09T15:13:11.979111Z", "modified": "2026-10-09T15:13:11.979111Z", "relationship_type": "indicates", "source_ref": "indicator--d9002c9c-6502-4f88-81e4-724e605dc3fb", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1daf80d-0edb-4cf1-b4ee-f78422f11ce8", "created": "2026-10-09T15:13:11.979227Z", "modified": "2026-10-09T15:13:11.979227Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.womenchildsafety']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.979227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2d3ef58-0bc2-4e25-b59f-9d29877a1248", "created": "2026-10-09T15:13:11.979705Z", "modified": "2026-10-09T15:13:11.979705Z", "relationship_type": "indicates", "source_ref": "indicator--f1daf80d-0edb-4cf1-b4ee-f78422f11ce8", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d88716-f1de-44c4-98e2-828dffd9fb71", "created": "2026-10-09T15:13:11.979821Z", "modified": "2026-10-09T15:13:11.979821Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gss.whereismyphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.979821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1abe48a-d1e5-46b7-ab0d-268898a70b2f", "created": "2026-10-09T15:13:11.980294Z", "modified": "2026-10-09T15:13:11.980294Z", "relationship_type": "indicates", "source_ref": "indicator--01d88716-f1de-44c4-98e2-828dffd9fb71", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b9b02e-602a-40d9-ac8a-5f762bf25bc7", "created": "2026-10-09T15:13:11.980416Z", "modified": "2026-10-09T15:13:11.980416Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smart.guardoffline']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.980416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a4c6d8b-c6d5-4fc1-892a-bd139f17a0d3", "created": "2026-10-09T15:13:11.980883Z", "modified": "2026-10-09T15:13:11.980883Z", "relationship_type": "indicates", "source_ref": "indicator--28b9b02e-602a-40d9-ac8a-5f762bf25bc7", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117a8f59-cc7d-4ebd-831e-19714430cf5e", "created": "2026-10-09T15:13:11.981001Z", "modified": "2026-10-09T15:13:11.981001Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8851279B5177EF52B0B8540EE1FCED4BABDFB318']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.981001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb8184eb-233d-4323-bf3a-4dc6ed7f265e", "created": "2026-10-09T15:13:11.981649Z", "modified": "2026-10-09T15:13:11.981649Z", "relationship_type": "indicates", "source_ref": "indicator--117a8f59-cc7d-4ebd-831e-19714430cf5e", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0775ef9a-9361-43fa-8bf8-4655c468f412", "created": "2026-10-09T15:13:11.981776Z", "modified": "2026-10-09T15:13:11.981776Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5D655F30DE8B8BDABCCDF660582C6369145E7A5A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.981776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--524dc51b-37e8-4454-9ac0-7991b49a4fc3", "created": "2026-10-09T15:13:11.982337Z", "modified": "2026-10-09T15:13:11.982337Z", "relationship_type": "indicates", "source_ref": "indicator--0775ef9a-9361-43fa-8bf8-4655c468f412", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a438032c-0e0d-4e56-a254-fed2e3ac0301", "created": "2026-10-09T15:13:11.982459Z", "modified": "2026-10-09T15:13:11.982459Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='28393DBA55F5B08294D1E54962BE1648C1EFB4A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.982459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a14f800-e87e-48bf-9d1a-1147ff93d1bc", "created": "2026-10-09T15:13:11.983003Z", "modified": "2026-10-09T15:13:11.983003Z", "relationship_type": "indicates", "source_ref": "indicator--a438032c-0e0d-4e56-a254-fed2e3ac0301", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ff3575-3063-40fe-ac75-71486f832121", "created": "2026-10-09T15:13:11.983124Z", "modified": "2026-10-09T15:13:11.983124Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='40159690AF08A01670E3FA07A021F7B1C1437042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.983124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09fd05de-35e8-422b-a981-37209814c95e", "created": "2026-10-09T15:13:11.983667Z", "modified": "2026-10-09T15:13:11.983667Z", "relationship_type": "indicates", "source_ref": "indicator--c9ff3575-3063-40fe-ac75-71486f832121", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b7b22a-44d7-4bd7-881a-e521d48b5749", "created": "2026-10-09T15:13:11.983787Z", "modified": "2026-10-09T15:13:11.983787Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C9BE6C42B975258DEA10EB6946A7986E4FE955E2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.983787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01b03c79-dcc0-4ab3-9f09-4a3f7b81267a", "created": "2026-10-09T15:13:11.984334Z", "modified": "2026-10-09T15:13:11.984334Z", "relationship_type": "indicates", "source_ref": "indicator--22b7b22a-44d7-4bd7-881a-e521d48b5749", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfb75db-e3b3-43a0-9863-4d704a5e03e1", "created": "2026-10-09T15:13:11.984452Z", "modified": "2026-10-09T15:13:11.984452Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D1BB66A93F621A66094F28856988C7A2AE9972D0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.984452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--411423c9-2e06-4d8a-8c93-cf676121fed5", "created": "2026-10-09T15:13:11.984989Z", "modified": "2026-10-09T15:13:11.984989Z", "relationship_type": "indicates", "source_ref": "indicator--edfb75db-e3b3-43a0-9863-4d704a5e03e1", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ceb6f0f-b4c6-4f78-89d6-0f375772e36f", "created": "2026-10-09T15:13:11.985108Z", "modified": "2026-10-09T15:13:11.985108Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1C6E171D3A6E51947DF9E83946BB115ED4A41C6A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.985108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d45c9190-760e-4e04-9aa9-c3d01eaa2fc8", "created": "2026-10-09T15:13:11.985672Z", "modified": "2026-10-09T15:13:11.985672Z", "relationship_type": "indicates", "source_ref": "indicator--8ceb6f0f-b4c6-4f78-89d6-0f375772e36f", "target_ref": "malware--39eacf6d-926e-49ce-afc0-6cbe015e3890"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5723f792-3566-4174-a6fc-8fecbd2ea6f0", "created": "2026-10-09T15:13:11.985792Z", "modified": "2026-10-09T15:13:11.985792Z", "name": "SmartKeylogger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ce08b0-334f-421a-a107-613a58279754", "created": "2026-10-09T15:13:11.985907Z", "modified": "2026-10-09T15:13:11.985907Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awamisolution.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.985907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbf1c355-e6de-4497-82b5-843cab2ee8e0", "created": "2026-10-09T15:13:11.986409Z", "modified": "2026-10-09T15:13:11.986409Z", "relationship_type": "indicates", "source_ref": "indicator--20ce08b0-334f-421a-a107-613a58279754", "target_ref": "malware--5723f792-3566-4174-a6fc-8fecbd2ea6f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4ebeed-45bb-4272-b378-af8a90e8bab3", "created": "2026-10-09T15:13:11.986536Z", "modified": "2026-10-09T15:13:11.986536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awamisolution.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.986536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0747b045-484f-4d5d-a6c4-54fc0fa0d58a", "created": "2026-10-09T15:13:11.987007Z", "modified": "2026-10-09T15:13:11.987007Z", "relationship_type": "indicates", "source_ref": "indicator--9a4ebeed-45bb-4272-b378-af8a90e8bab3", "target_ref": "malware--5723f792-3566-4174-a6fc-8fecbd2ea6f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f84fc6d-d5bc-48d5-abfc-ade2d8775ffc", "created": "2026-10-09T15:13:11.987126Z", "modified": "2026-10-09T15:13:11.987126Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.AwamiSolution.smartkeylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.987126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92f6d7ec-f614-4a96-870f-3f13e4cf018e", "created": "2026-10-09T15:13:11.987717Z", "modified": "2026-10-09T15:13:11.987717Z", "relationship_type": "indicates", "source_ref": "indicator--8f84fc6d-d5bc-48d5-abfc-ade2d8775ffc", "target_ref": "malware--5723f792-3566-4174-a6fc-8fecbd2ea6f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0300fd-476f-4989-bbde-e3897e838f33", "created": "2026-10-09T15:13:11.98784Z", "modified": "2026-10-09T15:13:11.98784Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='842676B67005E6561808B650152F598035D12800']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.98784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--210bcbc1-8128-45ef-a568-85526f218272", "created": "2026-10-09T15:13:11.988405Z", "modified": "2026-10-09T15:13:11.988405Z", "relationship_type": "indicates", "source_ref": "indicator--dd0300fd-476f-4989-bbde-e3897e838f33", "target_ref": "malware--5723f792-3566-4174-a6fc-8fecbd2ea6f0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab", "created": "2026-10-09T15:13:11.988536Z", "modified": "2026-10-09T15:13:11.988536Z", "name": "Traccar", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf25e26a-d2aa-4929-8ca7-9a9a16a4c091", "created": "2026-10-09T15:13:11.988652Z", "modified": "2026-10-09T15:13:11.988652Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='traccar-client-app.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.988652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a303a26a-7990-449b-b5be-8ec87451d696", "created": "2026-10-09T15:13:11.989152Z", "modified": "2026-10-09T15:13:11.989152Z", "relationship_type": "indicates", "source_ref": "indicator--cf25e26a-d2aa-4929-8ca7-9a9a16a4c091", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e277461-c283-4556-9a11-695ff1989793", "created": "2026-10-09T15:13:11.98932Z", "modified": "2026-10-09T15:13:11.98932Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.98932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49bf2ae9-5b1d-43d2-89bb-cbfbff1e8d84", "created": "2026-10-09T15:13:11.989818Z", "modified": "2026-10-09T15:13:11.989818Z", "relationship_type": "indicates", "source_ref": "indicator--2e277461-c283-4556-9a11-695ff1989793", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415e213f-d58e-4336-bcc4-510897578e4a", "created": "2026-10-09T15:13:11.989941Z", "modified": "2026-10-09T15:13:11.989941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.989941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e398c613-d523-409e-9c0c-819ef067f314", "created": "2026-10-09T15:13:11.990439Z", "modified": "2026-10-09T15:13:11.990439Z", "relationship_type": "indicates", "source_ref": "indicator--415e213f-d58e-4336-bcc4-510897578e4a", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a284fb-ed0e-4925-81fa-fb79cb0bcfbe", "created": "2026-10-09T15:13:11.990567Z", "modified": "2026-10-09T15:13:11.990567Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.990567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5bf8981-60e0-46dd-95d6-f7b5a1077d7e", "created": "2026-10-09T15:13:11.991054Z", "modified": "2026-10-09T15:13:11.991054Z", "relationship_type": "indicates", "source_ref": "indicator--52a284fb-ed0e-4925-81fa-fb79cb0bcfbe", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4593c6-daba-4f22-ae18-3f577a4295bf", "created": "2026-10-09T15:13:11.99118Z", "modified": "2026-10-09T15:13:11.99118Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.99118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49442921-8ed1-4f8d-a0e6-0017c13cd97e", "created": "2026-10-09T15:13:11.991668Z", "modified": "2026-10-09T15:13:11.991668Z", "relationship_type": "indicates", "source_ref": "indicator--ad4593c6-daba-4f22-ae18-3f577a4295bf", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355071d0-60bc-4fe6-9f72-249fcac72c9b", "created": "2026-10-09T15:13:11.991791Z", "modified": "2026-10-09T15:13:11.991791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b83868f217dd72efbd7cc9695ccfdf78d079ef6acbff81b77cbeb8d52e66a82d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.991791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e9561a8-6e8e-42da-b563-f35bba308fa8", "created": "2026-10-09T15:13:11.992389Z", "modified": "2026-10-09T15:13:11.992389Z", "relationship_type": "indicates", "source_ref": "indicator--355071d0-60bc-4fe6-9f72-249fcac72c9b", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d057aa2-b476-4d3b-9042-ec1379d43b34", "created": "2026-10-09T15:13:11.992515Z", "modified": "2026-10-09T15:13:11.992515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79b7a5a83d12ec5f6ea5cd827b704496b6488212433c1ef0156b85ef1d90a80e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.992515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c68c964-8536-466c-a7c4-c6ddbf9cf64f", "created": "2026-10-09T15:13:11.9931Z", "modified": "2026-10-09T15:13:11.9931Z", "relationship_type": "indicates", "source_ref": "indicator--7d057aa2-b476-4d3b-9042-ec1379d43b34", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91732df-7c4d-4d54-a2ad-48a6a4a8697a", "created": "2026-10-09T15:13:11.993221Z", "modified": "2026-10-09T15:13:11.993221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d4d4b4b9ad189292154f5e6fd4b0760c44d7241d1bbd5a1e179431e8919755b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.993221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91a8f265-8bfd-4414-9c6e-24feba6e3cb6", "created": "2026-10-09T15:13:11.993995Z", "modified": "2026-10-09T15:13:11.993995Z", "relationship_type": "indicates", "source_ref": "indicator--e91732df-7c4d-4d54-a2ad-48a6a4a8697a", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd36687e-436f-47b5-820b-933777688bf0", "created": "2026-10-09T15:13:11.994136Z", "modified": "2026-10-09T15:13:11.994136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8a8cd0dc022ad8b36d2c474d12aa1fa07ded7e601ec0aaa38a2aba9c23c73e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.994136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--588441dc-1bdb-464c-8158-1704dbf02524", "created": "2026-10-09T15:13:11.994749Z", "modified": "2026-10-09T15:13:11.994749Z", "relationship_type": "indicates", "source_ref": "indicator--cd36687e-436f-47b5-820b-933777688bf0", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96408a31-ed0d-405e-a540-ff3d28a3c508", "created": "2026-10-09T15:13:11.994878Z", "modified": "2026-10-09T15:13:11.994878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a99291ec9971ac2fdfc530962902d80e23f465c1c9cdf4eb8b7c419f1e204c94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.994878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89e355c2-d7fa-4c7e-a7b1-6ee717b92c89", "created": "2026-10-09T15:13:11.995487Z", "modified": "2026-10-09T15:13:11.995487Z", "relationship_type": "indicates", "source_ref": "indicator--96408a31-ed0d-405e-a540-ff3d28a3c508", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a788a8f-808b-4de7-b213-0ab1b06e52e4", "created": "2026-10-09T15:13:11.995614Z", "modified": "2026-10-09T15:13:11.995614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f04ec7fb59bb2ca18f99e717fb89ca9ca18d4c904e12e3a1bd7542cb89c1ab72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.995614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02593b1c-26c2-4168-8f2f-ec09a6dce6f6", "created": "2026-10-09T15:13:11.996204Z", "modified": "2026-10-09T15:13:11.996204Z", "relationship_type": "indicates", "source_ref": "indicator--3a788a8f-808b-4de7-b213-0ab1b06e52e4", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f79c40e-3b99-4948-bbc2-6573c5eb06bc", "created": "2026-10-09T15:13:11.996351Z", "modified": "2026-10-09T15:13:11.996351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c464086f6e97b76aba19703fafb6b97adb3aaff5663ce8b766c6951f8cd0d55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.996351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71e07f86-56c1-4250-93da-1bd1c2afed5d", "created": "2026-10-09T15:13:11.996994Z", "modified": "2026-10-09T15:13:11.996994Z", "relationship_type": "indicates", "source_ref": "indicator--1f79c40e-3b99-4948-bbc2-6573c5eb06bc", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8674db89-cc7d-43ea-bc0f-3baf1ffa53ac", "created": "2026-10-09T15:13:11.997124Z", "modified": "2026-10-09T15:13:11.997124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a75a61944143efb0112e5a0c2f354919b203e33cec24819b9217bc3b429f76f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.997124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2451f07-73d6-43a4-9ea5-0562f0b69f3a", "created": "2026-10-09T15:13:11.997728Z", "modified": "2026-10-09T15:13:11.997728Z", "relationship_type": "indicates", "source_ref": "indicator--8674db89-cc7d-43ea-bc0f-3baf1ffa53ac", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f922bf9-d2d7-431d-a288-80df9996f9e0", "created": "2026-10-09T15:13:11.99785Z", "modified": "2026-10-09T15:13:11.99785Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92494377b8e0d98530be32d58e35e8c0dd43b28a9774669adb852e84332a4aa9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.99785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c284ac0f-e44f-4fed-a363-e483372bc670", "created": "2026-10-09T15:13:11.998443Z", "modified": "2026-10-09T15:13:11.998443Z", "relationship_type": "indicates", "source_ref": "indicator--4f922bf9-d2d7-431d-a288-80df9996f9e0", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7992ee60-20ea-464d-90af-b35249092aee", "created": "2026-10-09T15:13:11.998564Z", "modified": "2026-10-09T15:13:11.998564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='207f14e15709e1f00ee878014ffc9d601aa7638b48a5a5b1c9758eb8147dfcc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.998564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19bc9621-e803-459c-be3a-f993558b7501", "created": "2026-10-09T15:13:11.999146Z", "modified": "2026-10-09T15:13:11.999146Z", "relationship_type": "indicates", "source_ref": "indicator--7992ee60-20ea-464d-90af-b35249092aee", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31611b7b-006c-4294-bc1e-2b97075e8076", "created": "2026-10-09T15:13:11.999276Z", "modified": "2026-10-09T15:13:11.999276Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb0ba13b14dd83465e2be7355dcb46c3db0c3e9e19e946044abce507bb1509b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.999276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d68896b-be83-4ff3-9dae-ebfad4563097", "created": "2026-10-09T15:13:11.999872Z", "modified": "2026-10-09T15:13:11.999872Z", "relationship_type": "indicates", "source_ref": "indicator--31611b7b-006c-4294-bc1e-2b97075e8076", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb87105-bcfe-470d-ac02-94aba7dcc205", "created": "2026-10-09T15:13:11.999994Z", "modified": "2026-10-09T15:13:11.999994Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd1b9499e29f0b7e0b902b8b197837c6a64aa14d63e194bceef6a1df23bfee0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:11.999994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c8bad79-fb18-41a4-840d-1a0a43f94662", "created": "2026-10-09T15:13:12.000691Z", "modified": "2026-10-09T15:13:12.000691Z", "relationship_type": "indicates", "source_ref": "indicator--6eb87105-bcfe-470d-ac02-94aba7dcc205", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d06cf8f-2abb-4a2f-a2b0-85d438ff2852", "created": "2026-10-09T15:13:12.00082Z", "modified": "2026-10-09T15:13:12.00082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f2ff3bd2f27a574f47962bfc94e0701dd96fb2e46003479f95ad3bc0b67d939']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.00082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffea1717-cc1d-4227-a446-012fc07ba8e1", "created": "2026-10-09T15:13:12.001415Z", "modified": "2026-10-09T15:13:12.001415Z", "relationship_type": "indicates", "source_ref": "indicator--4d06cf8f-2abb-4a2f-a2b0-85d438ff2852", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cdee83-caa4-4eca-94d0-500454f85c49", "created": "2026-10-09T15:13:12.001538Z", "modified": "2026-10-09T15:13:12.001538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='756dbfd952195b7ba03d25c354353358517c12d6fc0ec063e38f59327d489ad0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.001538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a98293ed-e4d8-4377-a7aa-068268f3bc2e", "created": "2026-10-09T15:13:12.002114Z", "modified": "2026-10-09T15:13:12.002114Z", "relationship_type": "indicates", "source_ref": "indicator--a0cdee83-caa4-4eca-94d0-500454f85c49", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4902fbb5-a37a-4e6c-89a4-8a267ec53a26", "created": "2026-10-09T15:13:12.002233Z", "modified": "2026-10-09T15:13:12.002233Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f24c673cfefd9d4e6a3ff578b4d27ef5d0e61e200d70df178e5f1903bccdda9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.002233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d60fb82-105c-45e6-81dc-d041e2fd0690", "created": "2026-10-09T15:13:12.002828Z", "modified": "2026-10-09T15:13:12.002828Z", "relationship_type": "indicates", "source_ref": "indicator--4902fbb5-a37a-4e6c-89a4-8a267ec53a26", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e8fb5c-6e75-482f-8f20-a88d788e6530", "created": "2026-10-09T15:13:12.002948Z", "modified": "2026-10-09T15:13:12.002948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d669eb7929c344261a6cd33a9d7723eac167fd40b23379fb3372ffc75aced08e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.002948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a8562fe-5bd5-4a20-a4dc-6516931cdaaf", "created": "2026-10-09T15:13:12.003535Z", "modified": "2026-10-09T15:13:12.003535Z", "relationship_type": "indicates", "source_ref": "indicator--79e8fb5c-6e75-482f-8f20-a88d788e6530", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16575925-f5ce-464b-9636-b7bddaa68700", "created": "2026-10-09T15:13:12.003656Z", "modified": "2026-10-09T15:13:12.003656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4c657112fd4ee0d790d3b0426612d595b3a37ceb969e3f0257d7dcf7681bf75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.003656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38786da5-fc02-43e7-9d4d-504ecb1690be", "created": "2026-10-09T15:13:12.004233Z", "modified": "2026-10-09T15:13:12.004233Z", "relationship_type": "indicates", "source_ref": "indicator--16575925-f5ce-464b-9636-b7bddaa68700", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825bf54d-3d56-4ec8-9a37-491b9b942ec9", "created": "2026-10-09T15:13:12.004365Z", "modified": "2026-10-09T15:13:12.004365Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c1a4c1f172d431368221bbf019fa4e1ee223d51dfb41a9e69e65bdded7a12dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.004365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1e31b2d-ce38-4b81-9d10-a4b2138d8fd4", "created": "2026-10-09T15:13:12.004953Z", "modified": "2026-10-09T15:13:12.004953Z", "relationship_type": "indicates", "source_ref": "indicator--825bf54d-3d56-4ec8-9a37-491b9b942ec9", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1b2f11-5039-413b-ba9c-4c95aee73a80", "created": "2026-10-09T15:13:12.005072Z", "modified": "2026-10-09T15:13:12.005072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c23dbb945d27b2f60d1c68f51337fd3b155e97ff623dab884918866858403c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.005072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7717ef15-1ffc-4f33-bdc3-3689462b1ba9", "created": "2026-10-09T15:13:12.005673Z", "modified": "2026-10-09T15:13:12.005673Z", "relationship_type": "indicates", "source_ref": "indicator--ab1b2f11-5039-413b-ba9c-4c95aee73a80", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3752282-5f9f-4f55-bd2a-6370356a716b", "created": "2026-10-09T15:13:12.005798Z", "modified": "2026-10-09T15:13:12.005798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b03ccd61218fe12013836e7eea0363b33ba0436c3319f04afd92ec807fa2e390']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.005798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7621d722-b822-42dd-b1eb-da26a93460eb", "created": "2026-10-09T15:13:12.006782Z", "modified": "2026-10-09T15:13:12.006782Z", "relationship_type": "indicates", "source_ref": "indicator--c3752282-5f9f-4f55-bd2a-6370356a716b", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc79356-6106-4e40-b7c0-90b8eedc0a83", "created": "2026-10-09T15:13:12.006914Z", "modified": "2026-10-09T15:13:12.006914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ba1bb207697f68c1f2ed7a1ba689472e14252e39c963d8bde858dcf3c09aa86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.006914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b875dbb3-6318-44bf-9183-90f205310844", "created": "2026-10-09T15:13:12.007515Z", "modified": "2026-10-09T15:13:12.007515Z", "relationship_type": "indicates", "source_ref": "indicator--dfc79356-6106-4e40-b7c0-90b8eedc0a83", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912289a4-2434-487e-87a5-83cfbcc0f34a", "created": "2026-10-09T15:13:12.007639Z", "modified": "2026-10-09T15:13:12.007639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42ed66d273af5dc96b305f761ad51cfda62e97c1bbc2daee812d75d8379aef25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.007639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57f69ad7-81e6-4442-b47a-b01d36e14212", "created": "2026-10-09T15:13:12.008214Z", "modified": "2026-10-09T15:13:12.008214Z", "relationship_type": "indicates", "source_ref": "indicator--912289a4-2434-487e-87a5-83cfbcc0f34a", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a35e69-68bb-4420-a165-d6047ea4300d", "created": "2026-10-09T15:13:12.008346Z", "modified": "2026-10-09T15:13:12.008346Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd6bde3e80d94323ac7c60479df16a2ffbc1a6d7ff0c4c9feeff670af9e26e20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.008346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5d3adca-b0de-4178-acbb-0d11de46eb03", "created": "2026-10-09T15:13:12.008932Z", "modified": "2026-10-09T15:13:12.008932Z", "relationship_type": "indicates", "source_ref": "indicator--b9a35e69-68bb-4420-a165-d6047ea4300d", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30024f42-4f87-4765-b7c4-b625a66b0df2", "created": "2026-10-09T15:13:12.009055Z", "modified": "2026-10-09T15:13:12.009055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f61d4b4419b5de11961cbea1e52d5d54022d0b4f6c9c155b964b9a84f959e3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.009055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a7d5e65-0b42-4e5b-89b5-1caca5b15071", "created": "2026-10-09T15:13:12.009646Z", "modified": "2026-10-09T15:13:12.009646Z", "relationship_type": "indicates", "source_ref": "indicator--30024f42-4f87-4765-b7c4-b625a66b0df2", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e922cf-2856-470e-b95b-4f1e552c01e8", "created": "2026-10-09T15:13:12.009769Z", "modified": "2026-10-09T15:13:12.009769Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.traccar.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.009769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--daff5dce-6b2a-4af9-bc8f-6127caac6a6d", "created": "2026-10-09T15:13:12.010218Z", "modified": "2026-10-09T15:13:12.010218Z", "relationship_type": "indicates", "source_ref": "indicator--e0e922cf-2856-470e-b95b-4f1e552c01e8", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8497213-a7f9-4d66-bd65-f942741ff0b9", "created": "2026-10-09T15:13:12.01035Z", "modified": "2026-10-09T15:13:12.01035Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.traccar.client.hidden']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.01035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b84095cd-b18d-4f21-ad3e-01ec4c60864d", "created": "2026-10-09T15:13:12.01081Z", "modified": "2026-10-09T15:13:12.01081Z", "relationship_type": "indicates", "source_ref": "indicator--a8497213-a7f9-4d66-bd65-f942741ff0b9", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183808a0-5938-4057-9f65-b821a17885e9", "created": "2026-10-09T15:13:12.010928Z", "modified": "2026-10-09T15:13:12.010928Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AA752803419B66BC6D5CFCD61A7C88935FFE5511']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.010928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7252f14-a4bf-4e0c-ba3b-700244534618", "created": "2026-10-09T15:13:12.011478Z", "modified": "2026-10-09T15:13:12.011478Z", "relationship_type": "indicates", "source_ref": "indicator--183808a0-5938-4057-9f65-b821a17885e9", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9158f3-72c4-4e95-a4ad-a641a7234ba5", "created": "2026-10-09T15:13:12.0116Z", "modified": "2026-10-09T15:13:12.0116Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F4F16BDEB31AED018276B47CAD9007063029FD22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.0116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61a18f62-33e2-4e0c-9a50-f8b6b4f81883", "created": "2026-10-09T15:13:12.012135Z", "modified": "2026-10-09T15:13:12.012135Z", "relationship_type": "indicates", "source_ref": "indicator--bd9158f3-72c4-4e95-a4ad-a641a7234ba5", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d486c9d2-3e46-4759-aa4e-6ad8cb959ffd", "created": "2026-10-09T15:13:12.012259Z", "modified": "2026-10-09T15:13:12.012259Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DAE17DA900E269741688CEA3DAF929A8D896536D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.012259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01ccffc6-bf72-4f91-a9ef-1d04744eacfc", "created": "2026-10-09T15:13:12.012911Z", "modified": "2026-10-09T15:13:12.012911Z", "relationship_type": "indicates", "source_ref": "indicator--d486c9d2-3e46-4759-aa4e-6ad8cb959ffd", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ee5a74-037e-496d-9491-61fa5e95b7ff", "created": "2026-10-09T15:13:12.013038Z", "modified": "2026-10-09T15:13:12.013038Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A759EC34A1144DC3443A9D4C3286F9F3A4F23FB1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.013038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72d3df5e-03e2-4c1a-93f8-18b90edae166", "created": "2026-10-09T15:13:12.013598Z", "modified": "2026-10-09T15:13:12.013598Z", "relationship_type": "indicates", "source_ref": "indicator--f9ee5a74-037e-496d-9491-61fa5e95b7ff", "target_ref": "malware--4f312843-d4c5-4173-bc83-ea9e4925cdab"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840", "created": "2026-10-09T15:13:12.013722Z", "modified": "2026-10-09T15:13:12.013722Z", "name": "SpyNote", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd403b55-b390-4654-a5fe-325f0866a9df", "created": "2026-10-09T15:13:12.013842Z", "modified": "2026-10-09T15:13:12.013842Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynote.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.013842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2637e235-0157-406b-a29a-829fd7afa888", "created": "2026-10-09T15:13:12.014334Z", "modified": "2026-10-09T15:13:12.014334Z", "relationship_type": "indicates", "source_ref": "indicator--dd403b55-b390-4654-a5fe-325f0866a9df", "target_ref": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113d523f-b8cb-4008-aede-be0385dd886b", "created": "2026-10-09T15:13:12.014459Z", "modified": "2026-10-09T15:13:12.014459Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spynote.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.014459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--071f34fb-2d05-4809-ae49-beea1365fe30", "created": "2026-10-09T15:13:12.014921Z", "modified": "2026-10-09T15:13:12.014921Z", "relationship_type": "indicates", "source_ref": "indicator--113d523f-b8cb-4008-aede-be0385dd886b", "target_ref": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe99fce-a83b-4c7b-888a-8ed613653a66", "created": "2026-10-09T15:13:12.015057Z", "modified": "2026-10-09T15:13:12.015057Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynote.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.015057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2576cc0d-0569-4ba0-9b01-70378a3a1bc3", "created": "2026-10-09T15:13:12.015607Z", "modified": "2026-10-09T15:13:12.015607Z", "relationship_type": "indicates", "source_ref": "indicator--2fe99fce-a83b-4c7b-888a-8ed613653a66", "target_ref": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a3afaa-a408-455e-a654-6467b6bb2747", "created": "2026-10-09T15:13:12.015738Z", "modified": "2026-10-09T15:13:12.015738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='dell.scream.application']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.015738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddc14c85-ec10-4c53-908f-c42cb574f70a", "created": "2026-10-09T15:13:12.016213Z", "modified": "2026-10-09T15:13:12.016213Z", "relationship_type": "indicates", "source_ref": "indicator--f8a3afaa-a408-455e-a654-6467b6bb2747", "target_ref": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028ef78a-4961-4073-841b-6f71f1a8ecef", "created": "2026-10-09T15:13:12.016351Z", "modified": "2026-10-09T15:13:12.016351Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spynote.software.stubspynote']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.016351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f16dc5b-7bb9-4529-8e4a-52629ca88f69", "created": "2026-10-09T15:13:12.016835Z", "modified": "2026-10-09T15:13:12.016835Z", "relationship_type": "indicates", "source_ref": "indicator--028ef78a-4961-4073-841b-6f71f1a8ecef", "target_ref": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c37a60b-a007-45aa-8a89-0900e233717e", "created": "2026-10-09T15:13:12.016953Z", "modified": "2026-10-09T15:13:12.016953Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='219D542F901D8DB85C729B0F7AE32410096077CB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.016953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7778f25-a08c-4cd1-bdb8-e8fe16972f00", "created": "2026-10-09T15:13:12.017504Z", "modified": "2026-10-09T15:13:12.017504Z", "relationship_type": "indicates", "source_ref": "indicator--7c37a60b-a007-45aa-8a89-0900e233717e", "target_ref": "malware--d2a4861e-30f3-46ca-961a-fd2f98dfe840"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a15a3521-49dd-40e2-9148-cadc30f9e70d", "created": "2026-10-09T15:13:12.017625Z", "modified": "2026-10-09T15:13:12.017625Z", "name": "FlashKeylogger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa040fc-bf33-4bdb-a067-162d650542a8", "created": "2026-10-09T15:13:12.017737Z", "modified": "2026-10-09T15:13:12.017737Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flashkeylogger.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.017737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68c90b5a-8519-4e81-b3f4-1fbbe8b0ef7e", "created": "2026-10-09T15:13:12.018214Z", "modified": "2026-10-09T15:13:12.018214Z", "relationship_type": "indicates", "source_ref": "indicator--caa040fc-bf33-4bdb-a067-162d650542a8", "target_ref": "malware--a15a3521-49dd-40e2-9148-cadc30f9e70d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d9a07a-2891-401f-be10-fa89f0048a24", "created": "2026-10-09T15:13:12.018348Z", "modified": "2026-10-09T15:13:12.018348Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tej.flashkeylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.018348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c750ee5a-76b1-48a4-9826-b8eba2f1fd60", "created": "2026-10-09T15:13:12.018917Z", "modified": "2026-10-09T15:13:12.018917Z", "relationship_type": "indicates", "source_ref": "indicator--05d9a07a-2891-401f-be10-fa89f0048a24", "target_ref": "malware--a15a3521-49dd-40e2-9148-cadc30f9e70d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1b2e9d-27ef-4763-9806-67cefd07c9d4", "created": "2026-10-09T15:13:12.01904Z", "modified": "2026-10-09T15:13:12.01904Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tej.flashkeyloggerpro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.01904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51e9321b-05e1-4566-85e8-9a67b3c670ac", "created": "2026-10-09T15:13:12.019517Z", "modified": "2026-10-09T15:13:12.019517Z", "relationship_type": "indicates", "source_ref": "indicator--bc1b2e9d-27ef-4763-9806-67cefd07c9d4", "target_ref": "malware--a15a3521-49dd-40e2-9148-cadc30f9e70d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a145e0d3-bd46-4ee3-be4d-2dcfcffe4888", "created": "2026-10-09T15:13:12.019642Z", "modified": "2026-10-09T15:13:12.019642Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tej.flashkeylogges']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.019642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4995d3c0-2cb6-4559-91b3-8d895d263e34", "created": "2026-10-09T15:13:12.020094Z", "modified": "2026-10-09T15:13:12.020094Z", "relationship_type": "indicates", "source_ref": "indicator--a145e0d3-bd46-4ee3-be4d-2dcfcffe4888", "target_ref": "malware--a15a3521-49dd-40e2-9148-cadc30f9e70d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b91848-bbbb-4eec-af47-98d2d8079ee9", "created": "2026-10-09T15:13:12.020217Z", "modified": "2026-10-09T15:13:12.020217Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='340FE1F4AA4A401AD8E326907E35FB9E0C2486BD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.020217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14add4d6-34ff-4b78-a041-aa5d6bd25071", "created": "2026-10-09T15:13:12.020772Z", "modified": "2026-10-09T15:13:12.020772Z", "relationship_type": "indicates", "source_ref": "indicator--86b91848-bbbb-4eec-af47-98d2d8079ee9", "target_ref": "malware--a15a3521-49dd-40e2-9148-cadc30f9e70d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--18154dca-c890-496c-af5d-add7ab44a369", "created": "2026-10-09T15:13:12.020899Z", "modified": "2026-10-09T15:13:12.020899Z", "name": "MobiStealth", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a15a35-6dbd-44b1-b350-c92d3b1e0b1f", "created": "2026-10-09T15:13:12.021014Z", "modified": "2026-10-09T15:13:12.021014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='einformatiks.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.021014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bba1f061-5c78-4047-b1d8-0ebfe22bdbf3", "created": "2026-10-09T15:13:12.021507Z", "modified": "2026-10-09T15:13:12.021507Z", "relationship_type": "indicates", "source_ref": "indicator--90a15a35-6dbd-44b1-b350-c92d3b1e0b1f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b73370-013a-405d-9212-d888e54c116c", "created": "2026-10-09T15:13:12.02163Z", "modified": "2026-10-09T15:13:12.02163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.einformatiks.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.02163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e493411-d5c2-466b-8bd7-9474d553de32", "created": "2026-10-09T15:13:12.022107Z", "modified": "2026-10-09T15:13:12.022107Z", "relationship_type": "indicates", "source_ref": "indicator--94b73370-013a-405d-9212-d888e54c116c", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8a524a-c7f8-4403-84f9-29d7f4ff756d", "created": "2026-10-09T15:13:12.022225Z", "modified": "2026-10-09T15:13:12.022225Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dwn.vys.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.022225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3dcdc1c-3f41-44bd-a98d-9808e7028ccd", "created": "2026-10-09T15:13:12.022707Z", "modified": "2026-10-09T15:13:12.022707Z", "relationship_type": "indicates", "source_ref": "indicator--ac8a524a-c7f8-4403-84f9-29d7f4ff756d", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d9eed1-2d47-45a7-b5cd-fbc9bba1adf0", "created": "2026-10-09T15:13:12.022829Z", "modified": "2026-10-09T15:13:12.022829Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.vys.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.022829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a40e53ec-b784-45f8-9aa2-67bf54c0e2e1", "created": "2026-10-09T15:13:12.023327Z", "modified": "2026-10-09T15:13:12.023327Z", "relationship_type": "indicates", "source_ref": "indicator--80d9eed1-2d47-45a7-b5cd-fbc9bba1adf0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d09161-0f58-4dc4-afa4-8f97afb74229", "created": "2026-10-09T15:13:12.023453Z", "modified": "2026-10-09T15:13:12.023453Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='vys.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.023453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9003e55f-ab47-42ca-952b-d15677302b1f", "created": "2026-10-09T15:13:12.02395Z", "modified": "2026-10-09T15:13:12.02395Z", "relationship_type": "indicates", "source_ref": "indicator--c7d09161-0f58-4dc4-afa4-8f97afb74229", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a877f49-d9c1-44ce-a97a-963c603b00cf", "created": "2026-10-09T15:13:12.02407Z", "modified": "2026-10-09T15:13:12.02407Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobistealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.02407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a004facb-add1-43e1-9a0f-b72a3f31352c", "created": "2026-10-09T15:13:12.024651Z", "modified": "2026-10-09T15:13:12.024651Z", "relationship_type": "indicates", "source_ref": "indicator--1a877f49-d9c1-44ce-a97a-963c603b00cf", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332390a2-40c2-4e9c-9cdf-9b91af2d14d9", "created": "2026-10-09T15:13:12.024773Z", "modified": "2026-10-09T15:13:12.024773Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobistealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.024773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cdbe9f0-c09a-4c6b-9fee-962cdb118d61", "created": "2026-10-09T15:13:12.025249Z", "modified": "2026-10-09T15:13:12.025249Z", "relationship_type": "indicates", "source_ref": "indicator--332390a2-40c2-4e9c-9cdf-9b91af2d14d9", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24a0bf7-863b-468c-985c-5b0e7789b10b", "created": "2026-10-09T15:13:12.02538Z", "modified": "2026-10-09T15:13:12.02538Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilestealthreview.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.02538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41fcdd51-9509-4e3b-a82a-e6f8548b3565", "created": "2026-10-09T15:13:12.025871Z", "modified": "2026-10-09T15:13:12.025871Z", "relationship_type": "indicates", "source_ref": "indicator--a24a0bf7-863b-468c-985c-5b0e7789b10b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34232ec-3d6f-436f-8198-562576e2750e", "created": "2026-10-09T15:13:12.025993Z", "modified": "2026-10-09T15:13:12.025993Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2b7535cdeaadb603ed040a097ae0f3dc339a8d9f12d7af9609b2dd51888174c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.025993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bf34921-e8b9-43e3-ab75-d3d5c4ea69f5", "created": "2026-10-09T15:13:12.026598Z", "modified": "2026-10-09T15:13:12.026598Z", "relationship_type": "indicates", "source_ref": "indicator--b34232ec-3d6f-436f-8198-562576e2750e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f112fb-bcaf-498a-8de8-a59888d66f3a", "created": "2026-10-09T15:13:12.026723Z", "modified": "2026-10-09T15:13:12.026723Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b469c26e1f03ea047376436cae5faed402cd0a0bc06272f6c7b738e60a7ea30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.026723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d848ce0-8bac-4d6a-9e67-5901d607636b", "created": "2026-10-09T15:13:12.027324Z", "modified": "2026-10-09T15:13:12.027324Z", "relationship_type": "indicates", "source_ref": "indicator--30f112fb-bcaf-498a-8de8-a59888d66f3a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bca534-bb31-43f1-9aad-702018e1fe96", "created": "2026-10-09T15:13:12.02745Z", "modified": "2026-10-09T15:13:12.02745Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d87c82f013ac77ad1a1b87e9d850f9ba148c4f486bad33bcacd80c3a3b661357']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.02745Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb81ba51-ed80-4482-b764-466b27193c82", "created": "2026-10-09T15:13:12.028046Z", "modified": "2026-10-09T15:13:12.028046Z", "relationship_type": "indicates", "source_ref": "indicator--14bca534-bb31-43f1-9aad-702018e1fe96", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--818fcf94-ad93-472d-9f69-2a6d6d2d9724", "created": "2026-10-09T15:13:12.028171Z", "modified": "2026-10-09T15:13:12.028171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fec4804ff1d4500c0429c0fa827246bce09582bbf4a6cf2bd8a89f545a1214c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.028171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c72bc8b3-6f02-4c8e-8a55-9539c88f1c8d", "created": "2026-10-09T15:13:12.028777Z", "modified": "2026-10-09T15:13:12.028777Z", "relationship_type": "indicates", "source_ref": "indicator--818fcf94-ad93-472d-9f69-2a6d6d2d9724", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e04447-2af7-4a6a-9828-e428434d974f", "created": "2026-10-09T15:13:12.028904Z", "modified": "2026-10-09T15:13:12.028904Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3aa4c92b3a1c75813662cbc9a58f03d0b430567a27a0b3d159850e809f3fa21e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.028904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d75eb4b-4b08-4838-8c7f-39179062dfe7", "created": "2026-10-09T15:13:12.029525Z", "modified": "2026-10-09T15:13:12.029525Z", "relationship_type": "indicates", "source_ref": "indicator--29e04447-2af7-4a6a-9828-e428434d974f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586885ab-8ed8-4513-a432-0bac273db0c8", "created": "2026-10-09T15:13:12.02965Z", "modified": "2026-10-09T15:13:12.02965Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2d94e063f50cbc0424fdadfb268e42173e3b7d3aca3cc5f35c0829526858f9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.02965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--892f9e19-dd68-42f6-9a3e-31ec433b6dbc", "created": "2026-10-09T15:13:12.030236Z", "modified": "2026-10-09T15:13:12.030236Z", "relationship_type": "indicates", "source_ref": "indicator--586885ab-8ed8-4513-a432-0bac273db0c8", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e58553-cdaa-4f11-ac94-f6541c0dee9f", "created": "2026-10-09T15:13:12.030373Z", "modified": "2026-10-09T15:13:12.030373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e36a1f41f52bcf3b3c9e8f036ffc9498f3354e4e8746cf731a3d123f58d3575']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.030373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcbb2bfc-b992-4729-9f98-32c30ab13001", "created": "2026-10-09T15:13:12.031061Z", "modified": "2026-10-09T15:13:12.031061Z", "relationship_type": "indicates", "source_ref": "indicator--20e58553-cdaa-4f11-ac94-f6541c0dee9f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c70382-b5ea-4f41-9600-05c7832fa8b8", "created": "2026-10-09T15:13:12.031182Z", "modified": "2026-10-09T15:13:12.031182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='280cc93c36c7ddc4e7974753d244b8ac29af79991610159839f1d42470360efd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.031182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95c0abcb-37b3-4b9f-9cb6-83cd7dfd678a", "created": "2026-10-09T15:13:12.031776Z", "modified": "2026-10-09T15:13:12.031776Z", "relationship_type": "indicates", "source_ref": "indicator--a2c70382-b5ea-4f41-9600-05c7832fa8b8", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0973980b-7420-46f7-a0fb-938569551f39", "created": "2026-10-09T15:13:12.031898Z", "modified": "2026-10-09T15:13:12.031898Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1294018fb376aa29456b6e5c9f0018719e16aafe9f665344e5aeecdb6703fdff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.031898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7228d76e-7824-4c2d-afe4-d51941a3a9a5", "created": "2026-10-09T15:13:12.032487Z", "modified": "2026-10-09T15:13:12.032487Z", "relationship_type": "indicates", "source_ref": "indicator--0973980b-7420-46f7-a0fb-938569551f39", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d4570c-4ce9-43c0-8cc9-c7b06d2115a0", "created": "2026-10-09T15:13:12.032607Z", "modified": "2026-10-09T15:13:12.032607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49ce0613500e7085083ed62504612d40f804aa38c22bd7b532e1ffead88af047']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.032607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56298cad-84f3-424d-8ec3-7de5d8303a63", "created": "2026-10-09T15:13:12.033189Z", "modified": "2026-10-09T15:13:12.033189Z", "relationship_type": "indicates", "source_ref": "indicator--88d4570c-4ce9-43c0-8cc9-c7b06d2115a0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3df4f8d-036e-427f-8292-a9090a4df4ab", "created": "2026-10-09T15:13:12.033322Z", "modified": "2026-10-09T15:13:12.033322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d128f084615f874cfd5a70176ad22d960d92b0a44b5e32a27f89d0e23fc313ef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.033322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4d1b448-9f24-4cb3-ac36-b0c55306d207", "created": "2026-10-09T15:13:12.033921Z", "modified": "2026-10-09T15:13:12.033921Z", "relationship_type": "indicates", "source_ref": "indicator--e3df4f8d-036e-427f-8292-a9090a4df4ab", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cede55-4492-4d6b-ba46-2b7d8f33b90a", "created": "2026-10-09T15:13:12.034042Z", "modified": "2026-10-09T15:13:12.034042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e586ae1084da20562d7a336e1a292200d62db0b1c92d9db9eb2f2e15bb79de43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.034042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d33afdcc-6a6d-4690-a317-9ddeb41a25bf", "created": "2026-10-09T15:13:12.034649Z", "modified": "2026-10-09T15:13:12.034649Z", "relationship_type": "indicates", "source_ref": "indicator--24cede55-4492-4d6b-ba46-2b7d8f33b90a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8c4b32-0d88-4f50-bbb5-913662250b81", "created": "2026-10-09T15:13:12.034772Z", "modified": "2026-10-09T15:13:12.034772Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f48d459154a87dd02f80ac88e9b7566aff34f57b307fb103113fff1e7576193c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.034772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceec17c3-4270-4ccb-a2af-356aba7b8b2e", "created": "2026-10-09T15:13:12.03537Z", "modified": "2026-10-09T15:13:12.03537Z", "relationship_type": "indicates", "source_ref": "indicator--db8c4b32-0d88-4f50-bbb5-913662250b81", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e40a64-d8f2-4750-b76c-e9701848d2e6", "created": "2026-10-09T15:13:12.03549Z", "modified": "2026-10-09T15:13:12.03549Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64a30423d87c49392fa89bd9b5663fec266c7308bc1fefc0d9ffc245cb2aa905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.03549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--742dbd28-54af-4456-abc8-c0810bfaf81b", "created": "2026-10-09T15:13:12.036077Z", "modified": "2026-10-09T15:13:12.036077Z", "relationship_type": "indicates", "source_ref": "indicator--05e40a64-d8f2-4750-b76c-e9701848d2e6", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d3de91-2d89-40f6-b632-b7022991e652", "created": "2026-10-09T15:13:12.036196Z", "modified": "2026-10-09T15:13:12.036196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0ef82d4a5e712a7464826569980b21179a3ff9b309ea5f40d085bb9ff33510c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.036196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8134e235-ee60-45c0-a0c8-bc7ae8138546", "created": "2026-10-09T15:13:12.036796Z", "modified": "2026-10-09T15:13:12.036796Z", "relationship_type": "indicates", "source_ref": "indicator--91d3de91-2d89-40f6-b632-b7022991e652", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5513733-90af-41dd-a718-4aec03f45961", "created": "2026-10-09T15:13:12.03692Z", "modified": "2026-10-09T15:13:12.03692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7cbace36a42308b403cc7f10e1e9b12c645a3e4532d002c4c28f0ea1ed7baca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.03692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2710ccb9-55d2-4594-958e-ff59cdccf521", "created": "2026-10-09T15:13:12.037615Z", "modified": "2026-10-09T15:13:12.037615Z", "relationship_type": "indicates", "source_ref": "indicator--e5513733-90af-41dd-a718-4aec03f45961", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ef5f41-99fa-4a60-a101-0e8a392a134a", "created": "2026-10-09T15:13:12.037737Z", "modified": "2026-10-09T15:13:12.037737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5eef7743b2a7db2e593d179d2aaeb0f5a695186141797895c96eaa52c96fdeb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.037737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15cae08c-25be-44dc-8a4d-5c2c5e65ebec", "created": "2026-10-09T15:13:12.038326Z", "modified": "2026-10-09T15:13:12.038326Z", "relationship_type": "indicates", "source_ref": "indicator--f6ef5f41-99fa-4a60-a101-0e8a392a134a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2242696d-0816-4381-9d3c-e80528b0881a", "created": "2026-10-09T15:13:12.038449Z", "modified": "2026-10-09T15:13:12.038449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb8860d45dc4e47247bac1adf123d825f873e8ce89b0480fdf0b1da69fe21d99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.038449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d34c82c9-6c6e-46bc-ba6b-9e0565f143a2", "created": "2026-10-09T15:13:12.039032Z", "modified": "2026-10-09T15:13:12.039032Z", "relationship_type": "indicates", "source_ref": "indicator--2242696d-0816-4381-9d3c-e80528b0881a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5552456b-9253-46b4-ae94-bece83038d83", "created": "2026-10-09T15:13:12.039153Z", "modified": "2026-10-09T15:13:12.039153Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35b95246b1b65d1c0d883575dda84ba72e7f639085866e9f912e3c104ddf9958']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.039153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d4dcc68-5ecd-45fe-8cd1-a929023560f7", "created": "2026-10-09T15:13:12.039754Z", "modified": "2026-10-09T15:13:12.039754Z", "relationship_type": "indicates", "source_ref": "indicator--5552456b-9253-46b4-ae94-bece83038d83", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929b02f2-d388-474b-b4a8-63fb8125fd86", "created": "2026-10-09T15:13:12.039876Z", "modified": "2026-10-09T15:13:12.039876Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c9e37bf7ad20b65368ad366c635185fc77ad39af7214b7f21615c1d429f7b9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.039876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99fdeaa7-d320-4d90-b88a-26280c5bd8c0", "created": "2026-10-09T15:13:12.040477Z", "modified": "2026-10-09T15:13:12.040477Z", "relationship_type": "indicates", "source_ref": "indicator--929b02f2-d388-474b-b4a8-63fb8125fd86", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5797b72-21ca-4f76-8c3d-d3cbf7bd2e50", "created": "2026-10-09T15:13:12.0406Z", "modified": "2026-10-09T15:13:12.0406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9b304a81953330593d60b9bed61e9e3df574a4c9706ef15d92db97d47ad00b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.0406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82d168f3-81f4-408f-94ef-5a5e0c3917ba", "created": "2026-10-09T15:13:12.041182Z", "modified": "2026-10-09T15:13:12.041182Z", "relationship_type": "indicates", "source_ref": "indicator--c5797b72-21ca-4f76-8c3d-d3cbf7bd2e50", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e3f9fa4-b791-4345-a24d-237e3be86146", "created": "2026-10-09T15:13:12.04131Z", "modified": "2026-10-09T15:13:12.04131Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c59c633e5af9131192935b9c6fdcb106ccec85b6cb6a85bef3193f70a467ae2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.04131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--565bd855-bedd-4fa3-833f-e8ce7b8d1426", "created": "2026-10-09T15:13:12.041893Z", "modified": "2026-10-09T15:13:12.041893Z", "relationship_type": "indicates", "source_ref": "indicator--0e3f9fa4-b791-4345-a24d-237e3be86146", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b122c6d-4d4a-48a2-a5f8-cf41f2f75e90", "created": "2026-10-09T15:13:12.042012Z", "modified": "2026-10-09T15:13:12.042012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdd24731bdc47f6796269f5d81c97e8f3102f44186c0e171150c4d7c652de0df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.042012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9476237f-06a4-44c1-a12c-155ed277bbfe", "created": "2026-10-09T15:13:12.042604Z", "modified": "2026-10-09T15:13:12.042604Z", "relationship_type": "indicates", "source_ref": "indicator--6b122c6d-4d4a-48a2-a5f8-cf41f2f75e90", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71280645-587b-41bc-88a6-7e669cb54940", "created": "2026-10-09T15:13:12.042723Z", "modified": "2026-10-09T15:13:12.042723Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d1a07e3b5d5411a8f949cab6038d49a07414c46a164e76fd3eaf0e25498fd7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.042723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3f2610e-af20-4790-bd81-a0f91752a4ad", "created": "2026-10-09T15:13:12.043324Z", "modified": "2026-10-09T15:13:12.043324Z", "relationship_type": "indicates", "source_ref": "indicator--71280645-587b-41bc-88a6-7e669cb54940", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65513d30-474c-4730-b164-02bff29644fc", "created": "2026-10-09T15:13:12.043445Z", "modified": "2026-10-09T15:13:12.043445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed3bc485f3466b3fadf62ec1e933d89239864bd72f005ebaa333e501a550bcb8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.043445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af312b7c-72c1-4b51-b1b2-2e72447a391c", "created": "2026-10-09T15:13:12.044131Z", "modified": "2026-10-09T15:13:12.044131Z", "relationship_type": "indicates", "source_ref": "indicator--65513d30-474c-4730-b164-02bff29644fc", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e48861-f533-45cb-857a-783dcdf154de", "created": "2026-10-09T15:13:12.044255Z", "modified": "2026-10-09T15:13:12.044255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb490b114b1c961768c7da892830e9387ac2b921587d6af6c3ecb509049bb4dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.044255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f41d7086-5f62-4d97-8196-0a84ffcb7bca", "created": "2026-10-09T15:13:12.044852Z", "modified": "2026-10-09T15:13:12.044852Z", "relationship_type": "indicates", "source_ref": "indicator--a2e48861-f533-45cb-857a-783dcdf154de", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71454704-9791-4924-b1bd-9a59ca3b11a0", "created": "2026-10-09T15:13:12.044973Z", "modified": "2026-10-09T15:13:12.044973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d1e83dce0a7f285f0205183771def06d61a7e0015e6c7af77ed640cff2e7887']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.044973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd0cd30b-7288-437f-a69f-b0e0bef4ee41", "created": "2026-10-09T15:13:12.045561Z", "modified": "2026-10-09T15:13:12.045561Z", "relationship_type": "indicates", "source_ref": "indicator--71454704-9791-4924-b1bd-9a59ca3b11a0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99991f57-ca66-4eca-a758-1c94df8a8971", "created": "2026-10-09T15:13:12.045683Z", "modified": "2026-10-09T15:13:12.045683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e70e1418d27d53424a72f0d464eb264378d4f345668e81beca03cb05514e7b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.045683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--078efa54-1df0-4561-8820-5a8e68593dd7", "created": "2026-10-09T15:13:12.046279Z", "modified": "2026-10-09T15:13:12.046279Z", "relationship_type": "indicates", "source_ref": "indicator--99991f57-ca66-4eca-a758-1c94df8a8971", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32143645-cb8f-4d5c-9ddd-4fc24f330672", "created": "2026-10-09T15:13:12.046406Z", "modified": "2026-10-09T15:13:12.046406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6da467971701a943824456ce02f2bc1a8cce4db22bef1fc24982d62021467fdc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.046406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ab0972f-2a6e-4e5c-90f2-ffd8d97ed0f0", "created": "2026-10-09T15:13:12.046987Z", "modified": "2026-10-09T15:13:12.046987Z", "relationship_type": "indicates", "source_ref": "indicator--32143645-cb8f-4d5c-9ddd-4fc24f330672", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4a9b67-0a20-4750-964f-fb2778b1543f", "created": "2026-10-09T15:13:12.047107Z", "modified": "2026-10-09T15:13:12.047107Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5803d4bd7e01794ca825879290bcbaf80666740e87291492488323103dd4a8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.047107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89f341c5-ff2f-41e6-8e73-104861b8230f", "created": "2026-10-09T15:13:12.0477Z", "modified": "2026-10-09T15:13:12.0477Z", "relationship_type": "indicates", "source_ref": "indicator--1e4a9b67-0a20-4750-964f-fb2778b1543f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7231350d-af7f-4762-9b29-b12880b18a72", "created": "2026-10-09T15:13:12.04782Z", "modified": "2026-10-09T15:13:12.04782Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f805068b5b8535ff9357058425c8f6e0136bfddf772f138f52973b1b9b4db8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.04782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76528513-9f56-4448-8e75-0cfe655130f8", "created": "2026-10-09T15:13:12.048426Z", "modified": "2026-10-09T15:13:12.048426Z", "relationship_type": "indicates", "source_ref": "indicator--7231350d-af7f-4762-9b29-b12880b18a72", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f14df25-ab68-40b2-a7c0-c87c81753a2a", "created": "2026-10-09T15:13:12.048549Z", "modified": "2026-10-09T15:13:12.048549Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2009719145d8d9508f70327d52e58a7eb3905fe33068595aaf51f8df3ca35aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.048549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa218534-023c-4352-87cd-4a0c44338d84", "created": "2026-10-09T15:13:12.049128Z", "modified": "2026-10-09T15:13:12.049128Z", "relationship_type": "indicates", "source_ref": "indicator--3f14df25-ab68-40b2-a7c0-c87c81753a2a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89dec7a-c2f9-42b0-bbd2-ca5d29d8a234", "created": "2026-10-09T15:13:12.049252Z", "modified": "2026-10-09T15:13:12.049252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='439829b3aa52e3ef750a3981889db5dfc78ec3205b529e9154b013c11db19256']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.049252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfe6a7fa-0da6-4af6-89e8-39ebb00dffd9", "created": "2026-10-09T15:13:12.049986Z", "modified": "2026-10-09T15:13:12.049986Z", "relationship_type": "indicates", "source_ref": "indicator--e89dec7a-c2f9-42b0-bbd2-ca5d29d8a234", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acdc47a-8b6e-4b96-90c7-64fdf4884b6e", "created": "2026-10-09T15:13:12.050112Z", "modified": "2026-10-09T15:13:12.050112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a51e1feacc6460b235b8ccfc66a882c91ee18d42f7b422a0bd8fdc6357e95fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.050112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d783e36-bd96-4636-a71c-d9fe853ce864", "created": "2026-10-09T15:13:12.050712Z", "modified": "2026-10-09T15:13:12.050712Z", "relationship_type": "indicates", "source_ref": "indicator--7acdc47a-8b6e-4b96-90c7-64fdf4884b6e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675db0da-6e01-4084-bd3a-781a80b71c1e", "created": "2026-10-09T15:13:12.050832Z", "modified": "2026-10-09T15:13:12.050832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8eb011d34209f016937309e1fe557fd38a0626f3b836063eba8049a6559059b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.050832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f24cf2ea-4486-4d8e-b0f2-76bc6363de3c", "created": "2026-10-09T15:13:12.051428Z", "modified": "2026-10-09T15:13:12.051428Z", "relationship_type": "indicates", "source_ref": "indicator--675db0da-6e01-4084-bd3a-781a80b71c1e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df770fff-ead3-4033-861c-c63ce4c3d2ec", "created": "2026-10-09T15:13:12.051553Z", "modified": "2026-10-09T15:13:12.051553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a1fd731cce7447ec58bb3c1e40a5a00175216937af204b1bcdfe91303401dae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.051553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ab81c90-cee7-4eda-8549-7053d871d20a", "created": "2026-10-09T15:13:12.05214Z", "modified": "2026-10-09T15:13:12.05214Z", "relationship_type": "indicates", "source_ref": "indicator--df770fff-ead3-4033-861c-c63ce4c3d2ec", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e93b24-4cba-473a-a825-3d443dc2de82", "created": "2026-10-09T15:13:12.052262Z", "modified": "2026-10-09T15:13:12.052262Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f7165f25d25e31b86c4dcea75b3bf36fcf8661427ba388e2818352338ec1c21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.052262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6568349-8f90-43d4-8159-8706636ba55d", "created": "2026-10-09T15:13:12.052854Z", "modified": "2026-10-09T15:13:12.052854Z", "relationship_type": "indicates", "source_ref": "indicator--05e93b24-4cba-473a-a825-3d443dc2de82", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b60935-7144-4421-b21c-1e31d6b70c5b", "created": "2026-10-09T15:13:12.052975Z", "modified": "2026-10-09T15:13:12.052975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a4f7036d2dc15c98364836e9f45e5c7433242965b9562717a53f07c776c64e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.052975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6bd20b6-6b89-4597-9495-8fc8a8462f9b", "created": "2026-10-09T15:13:12.053568Z", "modified": "2026-10-09T15:13:12.053568Z", "relationship_type": "indicates", "source_ref": "indicator--97b60935-7144-4421-b21c-1e31d6b70c5b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c18d2e9-8fa0-4e26-8b36-041c68a5d1fb", "created": "2026-10-09T15:13:12.053688Z", "modified": "2026-10-09T15:13:12.053688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='86eab90fcdc1fa37a66bd6849153c38545f193fffac56c710d6177b8e8c948a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.053688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--799fa876-3f07-4f5b-8862-77acef8dcd79", "created": "2026-10-09T15:13:12.054288Z", "modified": "2026-10-09T15:13:12.054288Z", "relationship_type": "indicates", "source_ref": "indicator--1c18d2e9-8fa0-4e26-8b36-041c68a5d1fb", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6436f8-9351-4841-9e8d-8f78cf2edb8f", "created": "2026-10-09T15:13:12.054414Z", "modified": "2026-10-09T15:13:12.054414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec3b03c349309ce281df25f733ad565271fbbdc6b61ae857a4f5cb482c75a423']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.054414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--304a0a3d-ce11-4bda-9212-40c058355209", "created": "2026-10-09T15:13:12.054998Z", "modified": "2026-10-09T15:13:12.054998Z", "relationship_type": "indicates", "source_ref": "indicator--fa6436f8-9351-4841-9e8d-8f78cf2edb8f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f57192-daa0-4453-a363-3cf5f3ab77b1", "created": "2026-10-09T15:13:12.055115Z", "modified": "2026-10-09T15:13:12.055115Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9f4a4ca3595235960cd81b2947cb70377dfcd8a22e462b927681e14734b6e31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.055115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46d194c0-d1fd-4414-8309-883c016f7bbe", "created": "2026-10-09T15:13:12.055708Z", "modified": "2026-10-09T15:13:12.055708Z", "relationship_type": "indicates", "source_ref": "indicator--17f57192-daa0-4453-a363-3cf5f3ab77b1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236cfb04-2b53-4c3c-a4e2-3060a324721c", "created": "2026-10-09T15:13:12.055845Z", "modified": "2026-10-09T15:13:12.055845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e42ced33b8cc44e94d1c77b6c24dae1909add8b7d81b5112d1934f79ec648492']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.055845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fcf8269-280f-4656-90b3-98ccc6d33aae", "created": "2026-10-09T15:13:12.056555Z", "modified": "2026-10-09T15:13:12.056555Z", "relationship_type": "indicates", "source_ref": "indicator--236cfb04-2b53-4c3c-a4e2-3060a324721c", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc6ef9e-4260-4a37-a7ec-5cd33cdb9152", "created": "2026-10-09T15:13:12.056682Z", "modified": "2026-10-09T15:13:12.056682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2e0e707697b9c66d7b1d633588cf5e3d30adbb09d33bc93315be0e296c82900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.056682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--734e9b9a-4ba6-4910-8019-a44ee0df1a9d", "created": "2026-10-09T15:13:12.057275Z", "modified": "2026-10-09T15:13:12.057275Z", "relationship_type": "indicates", "source_ref": "indicator--2fc6ef9e-4260-4a37-a7ec-5cd33cdb9152", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a45b333-7f57-4ecb-b2f2-cf9ee24713b4", "created": "2026-10-09T15:13:12.057399Z", "modified": "2026-10-09T15:13:12.057399Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='803993173cd19c0db5915ea0b93fbe3ab7b28eb7434f62dca40333377254d4fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.057399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fb8e6a4-8595-4a5f-9f73-ea7078b9885f", "created": "2026-10-09T15:13:12.057985Z", "modified": "2026-10-09T15:13:12.057985Z", "relationship_type": "indicates", "source_ref": "indicator--7a45b333-7f57-4ecb-b2f2-cf9ee24713b4", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7622fcfa-83c4-4c35-98c0-a34689c560de", "created": "2026-10-09T15:13:12.058108Z", "modified": "2026-10-09T15:13:12.058108Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89183614a06829b441d1cc67584fc9016610e99ee583770dd3b17c4a2ed3163d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.058108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36565b65-1725-4cbb-9abc-c447c8893f7f", "created": "2026-10-09T15:13:12.058707Z", "modified": "2026-10-09T15:13:12.058707Z", "relationship_type": "indicates", "source_ref": "indicator--7622fcfa-83c4-4c35-98c0-a34689c560de", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be79000d-939b-43ae-a9b4-e7b5c83c8d2e", "created": "2026-10-09T15:13:12.05886Z", "modified": "2026-10-09T15:13:12.05886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f8a004013dc2ba44a1a55c2636147d4d856650eb0a0416a72d13070624b7114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.05886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e13b718-320e-471d-8cfb-e919a364bc7c", "created": "2026-10-09T15:13:12.059524Z", "modified": "2026-10-09T15:13:12.059524Z", "relationship_type": "indicates", "source_ref": "indicator--be79000d-939b-43ae-a9b4-e7b5c83c8d2e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17981cd4-a92d-485e-ab2b-42e23c0523a2", "created": "2026-10-09T15:13:12.059655Z", "modified": "2026-10-09T15:13:12.059655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46fe30db0adf5870e4b2e1432bd6d04214cd31e972a81bc08b8f237243c44243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.059655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8155e4bd-3b23-429a-9770-4e3119efee14", "created": "2026-10-09T15:13:12.060244Z", "modified": "2026-10-09T15:13:12.060244Z", "relationship_type": "indicates", "source_ref": "indicator--17981cd4-a92d-485e-ab2b-42e23c0523a2", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51c271b-b732-4933-8ab0-24a0f1cb06d7", "created": "2026-10-09T15:13:12.060378Z", "modified": "2026-10-09T15:13:12.060378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40b56c303f4553df549795ebd8f814b433eaa50db65cc0dc37a192e8a4157cec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.060378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f8c8f39-06e2-409e-8b74-abfaee6142b3", "created": "2026-10-09T15:13:12.060966Z", "modified": "2026-10-09T15:13:12.060966Z", "relationship_type": "indicates", "source_ref": "indicator--e51c271b-b732-4933-8ab0-24a0f1cb06d7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45f2fba-e15c-4b79-9248-6756b0815eb5", "created": "2026-10-09T15:13:12.061087Z", "modified": "2026-10-09T15:13:12.061087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='310dd7c5ca5dcbc51dd33b20d451d26834aca8d0cddf9e94bb667bb3fff54882']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.061087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--311cc98c-571d-4a7b-b879-f44032db1995", "created": "2026-10-09T15:13:12.061696Z", "modified": "2026-10-09T15:13:12.061696Z", "relationship_type": "indicates", "source_ref": "indicator--f45f2fba-e15c-4b79-9248-6756b0815eb5", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd80751-261f-48c3-90fc-77f18f3ff473", "created": "2026-10-09T15:13:12.061821Z", "modified": "2026-10-09T15:13:12.061821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec7e8846a82b1d8f7837b20968ce5f5afa8cc84bf335ddbd73f7bb3469a85029']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.061821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7db70c10-6a55-4fb2-a1bc-18c87a158ec6", "created": "2026-10-09T15:13:12.062416Z", "modified": "2026-10-09T15:13:12.062416Z", "relationship_type": "indicates", "source_ref": "indicator--3cd80751-261f-48c3-90fc-77f18f3ff473", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12955624-1a5d-4320-8ea1-cb9223d66a12", "created": "2026-10-09T15:13:12.062535Z", "modified": "2026-10-09T15:13:12.062535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8133bdea6358a7bcbb4a47e051597ad7c1e445df6622a8ffbb7b19333bccfd21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.062535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8d40551-aa31-41e4-acc3-8adbea1419bb", "created": "2026-10-09T15:13:12.063219Z", "modified": "2026-10-09T15:13:12.063219Z", "relationship_type": "indicates", "source_ref": "indicator--12955624-1a5d-4320-8ea1-cb9223d66a12", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d39703-3115-4d3a-916c-67bc5fcece00", "created": "2026-10-09T15:13:12.063354Z", "modified": "2026-10-09T15:13:12.063354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f57f85a76d1128fbbc00c8b62cd2ea0529b52f38ae044ce5d425666766b5fffc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.063354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0400877b-1aba-4d64-af53-7c982dbbd740", "created": "2026-10-09T15:13:12.063945Z", "modified": "2026-10-09T15:13:12.063945Z", "relationship_type": "indicates", "source_ref": "indicator--b8d39703-3115-4d3a-916c-67bc5fcece00", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f956401b-d063-4c05-a45c-36a20d9431f9", "created": "2026-10-09T15:13:12.064068Z", "modified": "2026-10-09T15:13:12.064068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ee4ad6ff547757ec6e4b7ce06aa6c916d2d8e9e3c657f609363b5582c80beb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.064068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a818cb1-61f3-45f0-a1bc-94b4096b074d", "created": "2026-10-09T15:13:12.064655Z", "modified": "2026-10-09T15:13:12.064655Z", "relationship_type": "indicates", "source_ref": "indicator--f956401b-d063-4c05-a45c-36a20d9431f9", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c69620b-0a1d-4f53-9926-12462bbb779b", "created": "2026-10-09T15:13:12.064778Z", "modified": "2026-10-09T15:13:12.064778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d66e89e09078b2db97292b0130b7bd54aca345a29f2eb0758c02198271b887e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.064778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b860747-9c4c-4513-8ee6-036733c685e8", "created": "2026-10-09T15:13:12.065371Z", "modified": "2026-10-09T15:13:12.065371Z", "relationship_type": "indicates", "source_ref": "indicator--2c69620b-0a1d-4f53-9926-12462bbb779b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83219504-27bd-4533-9e73-ef9406248e22", "created": "2026-10-09T15:13:12.065496Z", "modified": "2026-10-09T15:13:12.065496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba01eb1290b81e921f8e438f40c5c7b11409789176d54c35ef8556bd5ba48484']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.065496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ea2fe70-6184-430d-8886-0e07ad71a3ff", "created": "2026-10-09T15:13:12.06608Z", "modified": "2026-10-09T15:13:12.06608Z", "relationship_type": "indicates", "source_ref": "indicator--83219504-27bd-4533-9e73-ef9406248e22", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3986f2-917d-4412-935e-256381773efe", "created": "2026-10-09T15:13:12.066203Z", "modified": "2026-10-09T15:13:12.066203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb98d2afa9a4f08a0f96f1333208de14af5672cac958dffc784183b1c69e0c78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.066203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba780556-2915-40fe-97de-05a58e77a5d4", "created": "2026-10-09T15:13:12.066804Z", "modified": "2026-10-09T15:13:12.066804Z", "relationship_type": "indicates", "source_ref": "indicator--5a3986f2-917d-4412-935e-256381773efe", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c355cbd-21d7-4b93-89dd-e2278135e9ba", "created": "2026-10-09T15:13:12.066929Z", "modified": "2026-10-09T15:13:12.066929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dab6ff78a8c7783c5bf283bce6e151a25fdd518913d2756401b0808edbf8de47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.066929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--378ee314-466e-4847-a309-e3f7f89204eb", "created": "2026-10-09T15:13:12.067526Z", "modified": "2026-10-09T15:13:12.067526Z", "relationship_type": "indicates", "source_ref": "indicator--0c355cbd-21d7-4b93-89dd-e2278135e9ba", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d44c127-350a-4bbb-9203-561268c39b68", "created": "2026-10-09T15:13:12.067648Z", "modified": "2026-10-09T15:13:12.067648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a8dad00bf7fdfca8f0782cb0290dc2843925771f6cffa9e139523607e46df99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.067648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9c1f929-ed27-4f4e-a2c6-f917c3e9ec4e", "created": "2026-10-09T15:13:12.068228Z", "modified": "2026-10-09T15:13:12.068228Z", "relationship_type": "indicates", "source_ref": "indicator--2d44c127-350a-4bbb-9203-561268c39b68", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a815acb1-11a3-4bad-b74e-4ab93974a53b", "created": "2026-10-09T15:13:12.068361Z", "modified": "2026-10-09T15:13:12.068361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bcb3e8db1ac94aa2894515b9b6c235cdff1e81356e0b58407a90f15321b5443f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.068361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e0fbaa6-9b2e-46af-abdb-48450e3e5f17", "created": "2026-10-09T15:13:12.069044Z", "modified": "2026-10-09T15:13:12.069044Z", "relationship_type": "indicates", "source_ref": "indicator--a815acb1-11a3-4bad-b74e-4ab93974a53b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bae52f-1e99-467e-b923-be236c4fc42e", "created": "2026-10-09T15:13:12.069168Z", "modified": "2026-10-09T15:13:12.069168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ba6660fbbb34ed4458503cb52e351293a9e085385bd2fb513d734b0e37b3206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.069168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61ef2951-82a2-4180-a45d-6b319269de20", "created": "2026-10-09T15:13:12.06977Z", "modified": "2026-10-09T15:13:12.06977Z", "relationship_type": "indicates", "source_ref": "indicator--a2bae52f-1e99-467e-b923-be236c4fc42e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567f20bd-2536-4e69-be9b-f862b487f922", "created": "2026-10-09T15:13:12.069896Z", "modified": "2026-10-09T15:13:12.069896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fae40c8221cf47b6f276bef1da30954ea9032d3d6e1afd421ac3561860e92cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.069896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7661cefd-cb8c-460d-8dfc-e0b324b486e9", "created": "2026-10-09T15:13:12.070497Z", "modified": "2026-10-09T15:13:12.070497Z", "relationship_type": "indicates", "source_ref": "indicator--567f20bd-2536-4e69-be9b-f862b487f922", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422fa57a-299f-4d4d-8742-be7f0ab7d0a1", "created": "2026-10-09T15:13:12.070624Z", "modified": "2026-10-09T15:13:12.070624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0359ccebed22d1592223667d182ad4330aaf45c12b87e168a9caac702bd3f04e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.070624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dac9f0ba-15dd-4326-ac3a-82349b927e45", "created": "2026-10-09T15:13:12.071208Z", "modified": "2026-10-09T15:13:12.071208Z", "relationship_type": "indicates", "source_ref": "indicator--422fa57a-299f-4d4d-8742-be7f0ab7d0a1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4347b1-5676-485f-a886-6fcddd59e5a9", "created": "2026-10-09T15:13:12.071339Z", "modified": "2026-10-09T15:13:12.071339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51883046b0984c9e9831dfc885fc2e8db0c42c101c154991ca09b1bb72913e36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.071339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e26986c-413b-4663-839b-9e04b995e842", "created": "2026-10-09T15:13:12.071933Z", "modified": "2026-10-09T15:13:12.071933Z", "relationship_type": "indicates", "source_ref": "indicator--bd4347b1-5676-485f-a886-6fcddd59e5a9", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754bf1ae-0908-4a59-9355-29b495ad2782", "created": "2026-10-09T15:13:12.072053Z", "modified": "2026-10-09T15:13:12.072053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ac39bde3df354194d4b7bed69e3854daf849eec06cea34d6eb2e857a42e6259']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.072053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1984f64-6408-4da2-8ceb-67beda89b853", "created": "2026-10-09T15:13:12.072644Z", "modified": "2026-10-09T15:13:12.072644Z", "relationship_type": "indicates", "source_ref": "indicator--754bf1ae-0908-4a59-9355-29b495ad2782", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4afed2-e699-454e-ac68-375fad3452cc", "created": "2026-10-09T15:13:12.072765Z", "modified": "2026-10-09T15:13:12.072765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a2f253726ccb1efa7141111d18b20aebbda7b3236a376d91ecb21b75f45c5205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.072765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e133909a-8423-4386-8b27-250842ed4104", "created": "2026-10-09T15:13:12.073373Z", "modified": "2026-10-09T15:13:12.073373Z", "relationship_type": "indicates", "source_ref": "indicator--5b4afed2-e699-454e-ac68-375fad3452cc", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c59f64f-b808-4bce-b54b-7564c26e7cb7", "created": "2026-10-09T15:13:12.073504Z", "modified": "2026-10-09T15:13:12.073504Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da839fa8a780941e5f82a1d0e7d4029507a459c7b29cf52c26131107683fce55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.073504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54316231-0c76-45ef-a8c4-aa666f72e2f3", "created": "2026-10-09T15:13:12.074096Z", "modified": "2026-10-09T15:13:12.074096Z", "relationship_type": "indicates", "source_ref": "indicator--8c59f64f-b808-4bce-b54b-7564c26e7cb7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca85237-ce8e-4966-94a1-596164901d0f", "created": "2026-10-09T15:13:12.074218Z", "modified": "2026-10-09T15:13:12.074218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba4bbe3d6b3aad516bb6b1acea8b7d39dc62a2a78f571edf3c0a00b2d1cff44d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.074218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b09767e-4114-4e9f-b6ef-d75311cf72ae", "created": "2026-10-09T15:13:12.074827Z", "modified": "2026-10-09T15:13:12.074827Z", "relationship_type": "indicates", "source_ref": "indicator--1ca85237-ce8e-4966-94a1-596164901d0f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f8acbe-020f-46e8-83b7-369ed854d359", "created": "2026-10-09T15:13:12.074949Z", "modified": "2026-10-09T15:13:12.074949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60614ce4bad3438b5c3dcca29f436e8a1d9108145b3634ebc1b2cdb13fbe7342']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.074949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6af11974-c153-477c-abc4-cc015690c212", "created": "2026-10-09T15:13:12.075651Z", "modified": "2026-10-09T15:13:12.075651Z", "relationship_type": "indicates", "source_ref": "indicator--44f8acbe-020f-46e8-83b7-369ed854d359", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4c1872-224d-4e67-afce-4817081e7263", "created": "2026-10-09T15:13:12.07578Z", "modified": "2026-10-09T15:13:12.07578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5b2a137f57d30eef11c7ea58103227cd4d7bc8be0efb09319533de474e5e690']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.07578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a048129-e039-4706-a95d-b30262a5a9b7", "created": "2026-10-09T15:13:12.076395Z", "modified": "2026-10-09T15:13:12.076395Z", "relationship_type": "indicates", "source_ref": "indicator--3e4c1872-224d-4e67-afce-4817081e7263", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a31267-66fd-4912-85e3-1bfc00fe0e4e", "created": "2026-10-09T15:13:12.076521Z", "modified": "2026-10-09T15:13:12.076521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='732c5e573002949e44066a8eb683de447ed1d34420f42852bcd927d59066cc57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.076521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bf90ebd-1de6-44dd-b6c6-f0089575bde9", "created": "2026-10-09T15:13:12.077103Z", "modified": "2026-10-09T15:13:12.077103Z", "relationship_type": "indicates", "source_ref": "indicator--c6a31267-66fd-4912-85e3-1bfc00fe0e4e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7922a9-ee02-41a1-bfb1-da4bdc0b7f4d", "created": "2026-10-09T15:13:12.077221Z", "modified": "2026-10-09T15:13:12.077221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05e1e81aee6529fca4d5f51ab1e8cb0789c797e23edc51ee6fe14136830ee56f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.077221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf1ddb17-ead6-4b5a-9c15-ca2a6619d89a", "created": "2026-10-09T15:13:12.077819Z", "modified": "2026-10-09T15:13:12.077819Z", "relationship_type": "indicates", "source_ref": "indicator--be7922a9-ee02-41a1-bfb1-da4bdc0b7f4d", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54210a1-5bc1-4932-bd10-a8278d3a30cd", "created": "2026-10-09T15:13:12.077941Z", "modified": "2026-10-09T15:13:12.077941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f0ec11df70521de1fb4a963eddc6a5c4840a4282630c0a6244bd86e1fc27ee4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.077941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c79375f4-01b2-4914-b3ed-559c1b09687c", "created": "2026-10-09T15:13:12.078534Z", "modified": "2026-10-09T15:13:12.078534Z", "relationship_type": "indicates", "source_ref": "indicator--e54210a1-5bc1-4932-bd10-a8278d3a30cd", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e1eb70-9e64-43ce-832d-35de6e404416", "created": "2026-10-09T15:13:12.078656Z", "modified": "2026-10-09T15:13:12.078656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb3bdf1fd4bafbfdf8addb575e79e464013ce5d68e897015a08877a6a1e1639a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.078656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b7cdf5f-6da3-4ec3-b353-734a8eb46b96", "created": "2026-10-09T15:13:12.079232Z", "modified": "2026-10-09T15:13:12.079232Z", "relationship_type": "indicates", "source_ref": "indicator--76e1eb70-9e64-43ce-832d-35de6e404416", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8b8b0a-fb46-4839-b0a0-f76925727512", "created": "2026-10-09T15:13:12.079369Z", "modified": "2026-10-09T15:13:12.079369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c06bde5dca392176a7e6c346e5f6b9f0e42c61aefb1990ca51a3b7ca61f8c3a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.079369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb0c9314-607b-4262-86fb-646f686451a6", "created": "2026-10-09T15:13:12.079957Z", "modified": "2026-10-09T15:13:12.079957Z", "relationship_type": "indicates", "source_ref": "indicator--5c8b8b0a-fb46-4839-b0a0-f76925727512", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f06a2b-8155-459b-b985-080c36ad2db6", "created": "2026-10-09T15:13:12.080077Z", "modified": "2026-10-09T15:13:12.080077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c41581a7ba551478330d8e02bf9ca20a36dec11a873d7152f75cbf00d3969445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.080077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fce39a0-bc18-41cc-a145-8149f1531fc4", "created": "2026-10-09T15:13:12.080674Z", "modified": "2026-10-09T15:13:12.080674Z", "relationship_type": "indicates", "source_ref": "indicator--48f06a2b-8155-459b-b985-080c36ad2db6", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca59243-be10-46fb-84f9-10423f213524", "created": "2026-10-09T15:13:12.080797Z", "modified": "2026-10-09T15:13:12.080797Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5cc9f127b01ee15ebb980d96008133ddfbdeaebd3d67bd35f0d4ba9c53d17dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.080797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54cb50a0-5133-4936-9392-87442d0743f2", "created": "2026-10-09T15:13:12.081414Z", "modified": "2026-10-09T15:13:12.081414Z", "relationship_type": "indicates", "source_ref": "indicator--4ca59243-be10-46fb-84f9-10423f213524", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a7ef99-a5e6-4a2d-b2fc-67681f1e316c", "created": "2026-10-09T15:13:12.081537Z", "modified": "2026-10-09T15:13:12.081537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01590736453758009daa16435db295b4f8115fef428eb72444e06920d1bd1216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.081537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f7efe03-2546-4465-8720-3a2e510034c7", "created": "2026-10-09T15:13:12.08254Z", "modified": "2026-10-09T15:13:12.08254Z", "relationship_type": "indicates", "source_ref": "indicator--86a7ef99-a5e6-4a2d-b2fc-67681f1e316c", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01cd918-4134-412a-a7d0-de14ddd6da60", "created": "2026-10-09T15:13:12.082668Z", "modified": "2026-10-09T15:13:12.082668Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8962633bb862732c8a0ab5ea9c2f0ca03732c949d278087cc1362954e7ecb5c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.082668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b1e15cc-d9fb-4e53-bdd9-fa98d27feca1", "created": "2026-10-09T15:13:12.083254Z", "modified": "2026-10-09T15:13:12.083254Z", "relationship_type": "indicates", "source_ref": "indicator--d01cd918-4134-412a-a7d0-de14ddd6da60", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776c1ddf-2d27-4234-9dc7-9ceebd2fcd4b", "created": "2026-10-09T15:13:12.08339Z", "modified": "2026-10-09T15:13:12.08339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1dc2be1a7cd625b14a7c727e0aec381d89fd8a2b95c98624b6ea666120a9a0be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.08339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d0c9bc4-7ccb-42cd-a112-fc35b89a404b", "created": "2026-10-09T15:13:12.08398Z", "modified": "2026-10-09T15:13:12.08398Z", "relationship_type": "indicates", "source_ref": "indicator--776c1ddf-2d27-4234-9dc7-9ceebd2fcd4b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c4705d-9bb0-4031-866f-057e4bbb123b", "created": "2026-10-09T15:13:12.084101Z", "modified": "2026-10-09T15:13:12.084101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82081d5f96d0ac7a3755cadb9d116fc5c857a0ed7aac78aed82ceeca1dbebde1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.084101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2979fec-3f16-43ce-b8a6-589cb3c5c1dd", "created": "2026-10-09T15:13:12.084697Z", "modified": "2026-10-09T15:13:12.084697Z", "relationship_type": "indicates", "source_ref": "indicator--d9c4705d-9bb0-4031-866f-057e4bbb123b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e894594e-b838-4af5-b0c6-bcb6ef4000b1", "created": "2026-10-09T15:13:12.084822Z", "modified": "2026-10-09T15:13:12.084822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42f8d5e4af0003abf615ec37eb1134eaa71fb3c2876e705caaf29d58d5ea7143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.084822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--126430b6-0828-4905-aed7-beef0797ff47", "created": "2026-10-09T15:13:12.085418Z", "modified": "2026-10-09T15:13:12.085418Z", "relationship_type": "indicates", "source_ref": "indicator--e894594e-b838-4af5-b0c6-bcb6ef4000b1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5312b2cb-6586-4bfd-a3e3-c6b95a869fb8", "created": "2026-10-09T15:13:12.08554Z", "modified": "2026-10-09T15:13:12.08554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fa65ae9da86e240782ceeb0abea6bd448f7eb58bbae2e2fc242d0ce62207bf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.08554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e305d698-9da4-4543-814b-9147e1a02cfc", "created": "2026-10-09T15:13:12.086124Z", "modified": "2026-10-09T15:13:12.086124Z", "relationship_type": "indicates", "source_ref": "indicator--5312b2cb-6586-4bfd-a3e3-c6b95a869fb8", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c7f1c16-1033-43e1-b225-be6eb62bbecf", "created": "2026-10-09T15:13:12.086246Z", "modified": "2026-10-09T15:13:12.086246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2082d20db8c967d692aa0abb53ee3a7a65ae5ae542eebd3ac9648dc0699aa547']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.086246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9410b03-e5d8-47bb-900c-146fa6ad0b57", "created": "2026-10-09T15:13:12.086852Z", "modified": "2026-10-09T15:13:12.086852Z", "relationship_type": "indicates", "source_ref": "indicator--4c7f1c16-1033-43e1-b225-be6eb62bbecf", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ee6601-44c2-4175-b104-2d274c1d6aa7", "created": "2026-10-09T15:13:12.086975Z", "modified": "2026-10-09T15:13:12.086975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2718ef39c28304d0b5e5373bf5a1d64128fe009419b12b313fd28af6c5439db9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.086975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c66ad03a-4225-4110-a337-62ae584bf71a", "created": "2026-10-09T15:13:12.087567Z", "modified": "2026-10-09T15:13:12.087567Z", "relationship_type": "indicates", "source_ref": "indicator--d5ee6601-44c2-4175-b104-2d274c1d6aa7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2810df4c-770e-42b7-8d01-355e77378c70", "created": "2026-10-09T15:13:12.087688Z", "modified": "2026-10-09T15:13:12.087688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c6b6c5dcd9586cb6cefd72ad5e1c54b2e2a65eb4b025a71430903b21c3795a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.087688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aab64ebb-c83b-4ebc-90c7-c7da9585cb78", "created": "2026-10-09T15:13:12.088385Z", "modified": "2026-10-09T15:13:12.088385Z", "relationship_type": "indicates", "source_ref": "indicator--2810df4c-770e-42b7-8d01-355e77378c70", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c933ed-6731-47a4-8b80-abccf56178ce", "created": "2026-10-09T15:13:12.08852Z", "modified": "2026-10-09T15:13:12.08852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b97f36f2b1df735022edf5053750ea5410536d6cf4b752820134378cf7115e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.08852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d0c15f4-4bf9-4f1b-ac4e-9d0ede18fe12", "created": "2026-10-09T15:13:12.089126Z", "modified": "2026-10-09T15:13:12.089126Z", "relationship_type": "indicates", "source_ref": "indicator--f9c933ed-6731-47a4-8b80-abccf56178ce", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06977d22-e65e-4c55-9311-2020343fb0b7", "created": "2026-10-09T15:13:12.089252Z", "modified": "2026-10-09T15:13:12.089252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96aa75912e8c91d54cb97cba3035ee488df30794f4a49d71db20120a833eacfe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.089252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e771b9e5-42b3-443b-bc2f-66c54d3a73d3", "created": "2026-10-09T15:13:12.08986Z", "modified": "2026-10-09T15:13:12.08986Z", "relationship_type": "indicates", "source_ref": "indicator--06977d22-e65e-4c55-9311-2020343fb0b7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6e16cb-05ee-4714-9886-feb5495d1175", "created": "2026-10-09T15:13:12.089985Z", "modified": "2026-10-09T15:13:12.089985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='065c32cf3486b599a6b99ef4dae4526189fff45c5ae65b3b5114777c2eec91d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.089985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f0d790e-7281-48f6-8ce3-b89c7fdd1338", "created": "2026-10-09T15:13:12.090578Z", "modified": "2026-10-09T15:13:12.090578Z", "relationship_type": "indicates", "source_ref": "indicator--3c6e16cb-05ee-4714-9886-feb5495d1175", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e225835-9a9c-464b-b1df-575a5209e305", "created": "2026-10-09T15:13:12.090701Z", "modified": "2026-10-09T15:13:12.090701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e04821934d23308447b119152457aae9b9aa2cfeb4f1f9f9bec41a649397ae9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.090701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--102b4fe6-d1f6-4494-98cc-b8f6a56d2a83", "created": "2026-10-09T15:13:12.091285Z", "modified": "2026-10-09T15:13:12.091285Z", "relationship_type": "indicates", "source_ref": "indicator--7e225835-9a9c-464b-b1df-575a5209e305", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317cd7c0-cc75-4035-b043-dfe405cb6da3", "created": "2026-10-09T15:13:12.091406Z", "modified": "2026-10-09T15:13:12.091406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce0dc4ccfa15a2e2a1ddccf5d2148ef660431be975a46378e0123f435ec4f92e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.091406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6944045b-2d74-4b08-9e6a-5a3cd4312874", "created": "2026-10-09T15:13:12.091984Z", "modified": "2026-10-09T15:13:12.091984Z", "relationship_type": "indicates", "source_ref": "indicator--317cd7c0-cc75-4035-b043-dfe405cb6da3", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b7a55e-9268-473e-850a-438c063f872a", "created": "2026-10-09T15:13:12.092108Z", "modified": "2026-10-09T15:13:12.092108Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71b2d78b5ffed6c7f45d254acc3f06c7a56b8f84862610387fc26b881f4a88c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.092108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--073f8f7e-ef66-4ac6-ac40-7404d306ed0f", "created": "2026-10-09T15:13:12.09271Z", "modified": "2026-10-09T15:13:12.09271Z", "relationship_type": "indicates", "source_ref": "indicator--20b7a55e-9268-473e-850a-438c063f872a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a637e2-3376-4ecf-b99a-ef5fd15052a7", "created": "2026-10-09T15:13:12.092833Z", "modified": "2026-10-09T15:13:12.092833Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9220a673e0103f208337ba2aa0c5b49f86d45834c37c5922921a67a980e6c35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.092833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b105c947-544c-4cd6-ae55-d84ef9db758b", "created": "2026-10-09T15:13:12.09342Z", "modified": "2026-10-09T15:13:12.09342Z", "relationship_type": "indicates", "source_ref": "indicator--93a637e2-3376-4ecf-b99a-ef5fd15052a7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b947954b-a263-40fe-ac6a-b92445fe21ce", "created": "2026-10-09T15:13:12.09354Z", "modified": "2026-10-09T15:13:12.09354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc8049029b36b762334de8e6afb0c1a8cbcbed4d00cd6a77f23a005bea01e72d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.09354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf1f998c-6353-4053-99e6-ec3737a1e2d6", "created": "2026-10-09T15:13:12.094123Z", "modified": "2026-10-09T15:13:12.094123Z", "relationship_type": "indicates", "source_ref": "indicator--b947954b-a263-40fe-ac6a-b92445fe21ce", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd75fa0-c1f8-421b-9c2d-dd16f2eb0c27", "created": "2026-10-09T15:13:12.094244Z", "modified": "2026-10-09T15:13:12.094244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b89ca1f7fb4dd05cd2715a521d580a1ec88869aa20365aaa652cc1cabdce077']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.094244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88fee08a-f982-4989-a1f8-30f285a69a6c", "created": "2026-10-09T15:13:12.094943Z", "modified": "2026-10-09T15:13:12.094943Z", "relationship_type": "indicates", "source_ref": "indicator--6fd75fa0-c1f8-421b-9c2d-dd16f2eb0c27", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3f048b-ed32-4d46-af9f-f4ed33a5b1dd", "created": "2026-10-09T15:13:12.095065Z", "modified": "2026-10-09T15:13:12.095065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93025b26b98a19cc2a48c75c04d6473c02a4cb5328a27c6cbc3ec6ef340036e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.095065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--323ed57d-8794-4dbb-8501-cd7ab4b2e8b9", "created": "2026-10-09T15:13:12.095661Z", "modified": "2026-10-09T15:13:12.095661Z", "relationship_type": "indicates", "source_ref": "indicator--ab3f048b-ed32-4d46-af9f-f4ed33a5b1dd", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f75a88-43f5-42f8-a186-55d729a9eb57", "created": "2026-10-09T15:13:12.095792Z", "modified": "2026-10-09T15:13:12.095792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aebc540710c552acc164e9d541a7501aca52288e6c899b177740e8443175f225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.095792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0c639be-63a6-4d73-b477-9116a7bd0ddd", "created": "2026-10-09T15:13:12.096388Z", "modified": "2026-10-09T15:13:12.096388Z", "relationship_type": "indicates", "source_ref": "indicator--77f75a88-43f5-42f8-a186-55d729a9eb57", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf765d3-6bcf-4eae-ad6e-80e8c8e6fbd8", "created": "2026-10-09T15:13:12.096511Z", "modified": "2026-10-09T15:13:12.096511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a1e0c7e5e2c4fc14532403f54d2dbbbdf3ce09a6a052105206f65fb1d8cafca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.096511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3dde63da-18d7-49ac-895e-c6f603fac8d2", "created": "2026-10-09T15:13:12.09709Z", "modified": "2026-10-09T15:13:12.09709Z", "relationship_type": "indicates", "source_ref": "indicator--5bf765d3-6bcf-4eae-ad6e-80e8c8e6fbd8", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79ced15-d92f-4e93-aa90-53c3400d7143", "created": "2026-10-09T15:13:12.09721Z", "modified": "2026-10-09T15:13:12.09721Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9376ce2ecba8a4686f495460af029bb3f26f5146c275a7608269bc4ffbe25f08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.09721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85ead38d-07b3-4b1a-9b9f-62ab40121583", "created": "2026-10-09T15:13:12.097819Z", "modified": "2026-10-09T15:13:12.097819Z", "relationship_type": "indicates", "source_ref": "indicator--a79ced15-d92f-4e93-aa90-53c3400d7143", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80bda3f7-960e-4bd8-acb7-daada3019bf1", "created": "2026-10-09T15:13:12.097952Z", "modified": "2026-10-09T15:13:12.097952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba0dd886275dacdcb1d937776b7e52818f02a809d5150f4b91762c813cde4b65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.097952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2faa382d-253f-4bba-b378-a368762a2ef4", "created": "2026-10-09T15:13:12.09855Z", "modified": "2026-10-09T15:13:12.09855Z", "relationship_type": "indicates", "source_ref": "indicator--80bda3f7-960e-4bd8-acb7-daada3019bf1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d7eb60-b8a8-4d5c-9078-f6e255ddd26e", "created": "2026-10-09T15:13:12.09867Z", "modified": "2026-10-09T15:13:12.09867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='351b5342415cc45ae78bac877da294600eb91338278fa05205c5cc300167a28f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.09867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6528044-7ee1-4121-8b45-598cb3ad4aa6", "created": "2026-10-09T15:13:12.099245Z", "modified": "2026-10-09T15:13:12.099245Z", "relationship_type": "indicates", "source_ref": "indicator--69d7eb60-b8a8-4d5c-9078-f6e255ddd26e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5910f5-6681-45e8-a67b-547b0f87c56b", "created": "2026-10-09T15:13:12.09938Z", "modified": "2026-10-09T15:13:12.09938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1d73a257632805272c4dd03ff3386b8c1b15df20d82ca072e13340308d75ecb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.09938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7afe74ea-cdf2-4913-90d7-36166b1ffdc8", "created": "2026-10-09T15:13:12.099963Z", "modified": "2026-10-09T15:13:12.099963Z", "relationship_type": "indicates", "source_ref": "indicator--7e5910f5-6681-45e8-a67b-547b0f87c56b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc56150b-a71c-4e58-9b76-c7f2ed22d5a8", "created": "2026-10-09T15:13:12.100087Z", "modified": "2026-10-09T15:13:12.100087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55197138654e103b332aae809eee71dc862572b627a06a7082e24653046106fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.100087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9725c50-9b26-431f-9b21-7c6dd6399307", "created": "2026-10-09T15:13:12.100683Z", "modified": "2026-10-09T15:13:12.100683Z", "relationship_type": "indicates", "source_ref": "indicator--dc56150b-a71c-4e58-9b76-c7f2ed22d5a8", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3718aad-299c-46c3-b6f6-20bf7b88ca39", "created": "2026-10-09T15:13:12.10081Z", "modified": "2026-10-09T15:13:12.10081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1070a2d2bb5c040ba77157efc79182bd5056ddc4ce3ffabebeaa1949d6981287']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.10081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02eafdc9-c9d8-4962-8978-16fb55507265", "created": "2026-10-09T15:13:12.101519Z", "modified": "2026-10-09T15:13:12.101519Z", "relationship_type": "indicates", "source_ref": "indicator--b3718aad-299c-46c3-b6f6-20bf7b88ca39", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642174ee-70d0-4711-9a7a-3916e88cf093", "created": "2026-10-09T15:13:12.101648Z", "modified": "2026-10-09T15:13:12.101648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b1c19ea4074276c96331f0af1d409b4bd3feb31b740f70541554f8f9c5daf37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.101648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--263dd4e9-27ba-403a-aa83-1cc69ea49a9c", "created": "2026-10-09T15:13:12.102231Z", "modified": "2026-10-09T15:13:12.102231Z", "relationship_type": "indicates", "source_ref": "indicator--642174ee-70d0-4711-9a7a-3916e88cf093", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4dd24aa-08c3-4dc9-b9bf-1cfe2a110864", "created": "2026-10-09T15:13:12.102364Z", "modified": "2026-10-09T15:13:12.102364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94488499541aeee1e3a84688ef9a6250e3bf9e70673b2a264f3bd45bfe7ed2f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.102364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02531bbb-01a0-4234-b49c-fde381b11b19", "created": "2026-10-09T15:13:12.102949Z", "modified": "2026-10-09T15:13:12.102949Z", "relationship_type": "indicates", "source_ref": "indicator--e4dd24aa-08c3-4dc9-b9bf-1cfe2a110864", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac6ba2c-1e77-4392-b718-5d5a90bdd9a0", "created": "2026-10-09T15:13:12.10307Z", "modified": "2026-10-09T15:13:12.10307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9573484507fb9a7954ef776dcd3b2639745c796a0a6f348d57b6833fa2b8e720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.10307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fffd450-430e-4b38-94ee-5ba021dd1242", "created": "2026-10-09T15:13:12.103664Z", "modified": "2026-10-09T15:13:12.103664Z", "relationship_type": "indicates", "source_ref": "indicator--9ac6ba2c-1e77-4392-b718-5d5a90bdd9a0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46d306d-4247-4615-8ed7-988f369712a7", "created": "2026-10-09T15:13:12.10379Z", "modified": "2026-10-09T15:13:12.10379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e29b1bcc2109ddae31bc4e5ccbd36b706ab8765c077bdfd3c72c9c6be750d9e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.10379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc2038d6-3d07-453d-9f44-325bc6b2331d", "created": "2026-10-09T15:13:12.104379Z", "modified": "2026-10-09T15:13:12.104379Z", "relationship_type": "indicates", "source_ref": "indicator--a46d306d-4247-4615-8ed7-988f369712a7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3197dbea-c5e9-4790-a21f-91b9bd56395e", "created": "2026-10-09T15:13:12.1045Z", "modified": "2026-10-09T15:13:12.1045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74ae41799b502ad76825176208eb159eff9a58370414b66b01cade92756b6cc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.1045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afc58507-0231-4159-81bb-e8da048fbca6", "created": "2026-10-09T15:13:12.105083Z", "modified": "2026-10-09T15:13:12.105083Z", "relationship_type": "indicates", "source_ref": "indicator--3197dbea-c5e9-4790-a21f-91b9bd56395e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c255e3f0-680a-4b6c-aa47-b7054a1368cd", "created": "2026-10-09T15:13:12.105208Z", "modified": "2026-10-09T15:13:12.105208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fcf3f41a0e83494af7288d8669ea951bdeb1eaf78abf835f89c4d067cf6af1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.105208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--731c2710-92bb-4e4a-aa8f-7fe5c73a07a0", "created": "2026-10-09T15:13:12.105803Z", "modified": "2026-10-09T15:13:12.105803Z", "relationship_type": "indicates", "source_ref": "indicator--c255e3f0-680a-4b6c-aa47-b7054a1368cd", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984c46b1-4226-42c0-922b-039681de99f1", "created": "2026-10-09T15:13:12.105923Z", "modified": "2026-10-09T15:13:12.105923Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fe0720bd6cbddb84f7f059e120444f69aede18c30527a62c057e50d547f6b34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.105923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae3f481b-90d8-470c-a3f3-50da31de74b5", "created": "2026-10-09T15:13:12.106528Z", "modified": "2026-10-09T15:13:12.106528Z", "relationship_type": "indicates", "source_ref": "indicator--984c46b1-4226-42c0-922b-039681de99f1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dda5f01c-da81-4d24-b0b0-8405af838138", "created": "2026-10-09T15:13:12.106653Z", "modified": "2026-10-09T15:13:12.106653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca51f2cdc954f7c977e549c8c0263c75fd2313cd96dc951143181d35296213af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.106653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b304f23-3984-46e8-84d2-942dbe80d10f", "created": "2026-10-09T15:13:12.107243Z", "modified": "2026-10-09T15:13:12.107243Z", "relationship_type": "indicates", "source_ref": "indicator--dda5f01c-da81-4d24-b0b0-8405af838138", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464ed76d-0e1b-40af-a256-f9b4533b1fe9", "created": "2026-10-09T15:13:12.107373Z", "modified": "2026-10-09T15:13:12.107373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c21a9c8b0bb3142e8251c9d43c36f5f47f2a3faef6419c76ee20240dcf9bda8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.107373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c63e89d-580a-478e-b30d-b5ad04d6ff35", "created": "2026-10-09T15:13:12.108063Z", "modified": "2026-10-09T15:13:12.108063Z", "relationship_type": "indicates", "source_ref": "indicator--464ed76d-0e1b-40af-a256-f9b4533b1fe9", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ac3008-934a-4315-bca1-76b5f75bfc89", "created": "2026-10-09T15:13:12.108185Z", "modified": "2026-10-09T15:13:12.108185Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='212573c9d8dc7045861365ab4b4d9badd8161ced31e8ef7a3780e86783b80ac1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.108185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--817693cc-9f59-4b6f-8bb3-6a8aaa285ea7", "created": "2026-10-09T15:13:12.108778Z", "modified": "2026-10-09T15:13:12.108778Z", "relationship_type": "indicates", "source_ref": "indicator--51ac3008-934a-4315-bca1-76b5f75bfc89", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13003b9d-d05e-4caa-8826-896618ada64c", "created": "2026-10-09T15:13:12.108901Z", "modified": "2026-10-09T15:13:12.108901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec846312963d9e8410cc341dc50fabe8aad278d4f46126a567e7da7a93469f7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.108901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d802d895-345a-4107-b9e8-c7540e720048", "created": "2026-10-09T15:13:12.109494Z", "modified": "2026-10-09T15:13:12.109494Z", "relationship_type": "indicates", "source_ref": "indicator--13003b9d-d05e-4caa-8826-896618ada64c", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89f7f08-93ad-4a45-ad22-e75463a67c4f", "created": "2026-10-09T15:13:12.10962Z", "modified": "2026-10-09T15:13:12.10962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53eca50f066c8895996681c8c22f7092f58b4d1f5416fe071fe5e743ea50ee75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.10962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27ec8a12-f0a6-4410-a362-4920149752b0", "created": "2026-10-09T15:13:12.110202Z", "modified": "2026-10-09T15:13:12.110202Z", "relationship_type": "indicates", "source_ref": "indicator--a89f7f08-93ad-4a45-ad22-e75463a67c4f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb82df9-6357-4d15-aec8-2447e421f9ed", "created": "2026-10-09T15:13:12.110332Z", "modified": "2026-10-09T15:13:12.110332Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a27af8aa0c9355f9c53f59999a1d1b55ad8eb478afafba8b0495746b292300c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.110332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--521437b7-161e-4b63-afa4-6aae104c587a", "created": "2026-10-09T15:13:12.110911Z", "modified": "2026-10-09T15:13:12.110911Z", "relationship_type": "indicates", "source_ref": "indicator--bcb82df9-6357-4d15-aec8-2447e421f9ed", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8822a0-a4e5-4285-bb57-44e5bbe950d2", "created": "2026-10-09T15:13:12.11103Z", "modified": "2026-10-09T15:13:12.11103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5a35e2f0e9abc25ce043e5e28e70ef733b6434748198ddf6227adb2444b2540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.11103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd24d2b9-c625-4161-ab3b-d051c86f4424", "created": "2026-10-09T15:13:12.111629Z", "modified": "2026-10-09T15:13:12.111629Z", "relationship_type": "indicates", "source_ref": "indicator--ab8822a0-a4e5-4285-bb57-44e5bbe950d2", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5132083-ad88-4594-a130-5182776795c1", "created": "2026-10-09T15:13:12.11175Z", "modified": "2026-10-09T15:13:12.11175Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d76df89b110fd71b292b20a833c1baef5621d80f6ae6196bca8f1d89b70412b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.11175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ede224a2-f3b8-4d1f-b2ed-92ffefcfeec8", "created": "2026-10-09T15:13:12.112361Z", "modified": "2026-10-09T15:13:12.112361Z", "relationship_type": "indicates", "source_ref": "indicator--b5132083-ad88-4594-a130-5182776795c1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73087c0-7e60-422d-86a7-bd37f93d6690", "created": "2026-10-09T15:13:12.112485Z", "modified": "2026-10-09T15:13:12.112485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee68df82caf9b45e8964f5ff5f4aab45a54f41b01a2d64644ccadfdf9ed05f36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.112485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2eb7cb76-5d3e-4f04-94f6-303b8dbcd2b8", "created": "2026-10-09T15:13:12.11308Z", "modified": "2026-10-09T15:13:12.11308Z", "relationship_type": "indicates", "source_ref": "indicator--c73087c0-7e60-422d-86a7-bd37f93d6690", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50120b82-4fb6-4bb4-944b-a49c195154c5", "created": "2026-10-09T15:13:12.113205Z", "modified": "2026-10-09T15:13:12.113205Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e44c57d4e5ddf49d935931e5dd4eca065984280aa5ae263eb04bfcf2cb599a90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.113205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ed35183-6a82-4330-a15a-608a4d9c4853", "created": "2026-10-09T15:13:12.11391Z", "modified": "2026-10-09T15:13:12.11391Z", "relationship_type": "indicates", "source_ref": "indicator--50120b82-4fb6-4bb4-944b-a49c195154c5", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce28718-89d0-45dd-bc10-babaa8415ea3", "created": "2026-10-09T15:13:12.114037Z", "modified": "2026-10-09T15:13:12.114037Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4924da1b4bfd715a903741fb2c944c77a1eda8399185ab85097b50bdf880229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.114037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--994aeeb8-254e-4483-ba6b-4067fa426c02", "created": "2026-10-09T15:13:12.114631Z", "modified": "2026-10-09T15:13:12.114631Z", "relationship_type": "indicates", "source_ref": "indicator--8ce28718-89d0-45dd-bc10-babaa8415ea3", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb320ca-4b21-4ca8-93ba-0827888683a0", "created": "2026-10-09T15:13:12.114757Z", "modified": "2026-10-09T15:13:12.114757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbd313516cbe2cd992a33569a0063bc4764ab774e03c3653e0be459682a5bce4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.114757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dddbec6b-a858-4e77-af1e-c3dc92266b7e", "created": "2026-10-09T15:13:12.115348Z", "modified": "2026-10-09T15:13:12.115348Z", "relationship_type": "indicates", "source_ref": "indicator--5eb320ca-4b21-4ca8-93ba-0827888683a0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc63199-ca76-4c78-9eb6-158e63a7c923", "created": "2026-10-09T15:13:12.115471Z", "modified": "2026-10-09T15:13:12.115471Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f498c98a0b886fb1c9d995348703e3a94acc9e41c6bfb226d98a0708929cde6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.115471Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e932092-752a-45ad-aba0-9fd9c9ae588a", "created": "2026-10-09T15:13:12.11605Z", "modified": "2026-10-09T15:13:12.11605Z", "relationship_type": "indicates", "source_ref": "indicator--1fc63199-ca76-4c78-9eb6-158e63a7c923", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c8a440-eba7-4629-ad91-b79709c1747f", "created": "2026-10-09T15:13:12.116171Z", "modified": "2026-10-09T15:13:12.116171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72e02401bc6edadae314141dddd2612a1d1d05a8164796259e030d1a8dd52319']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.116171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6ac20a8-a6da-46d9-8ecc-e1bdbcfd5ea1", "created": "2026-10-09T15:13:12.116758Z", "modified": "2026-10-09T15:13:12.116758Z", "relationship_type": "indicates", "source_ref": "indicator--05c8a440-eba7-4629-ad91-b79709c1747f", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dade057-aa01-4a0c-8a75-073c7aec51c1", "created": "2026-10-09T15:13:12.116878Z", "modified": "2026-10-09T15:13:12.116878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62234915547a111afc76c6ddce5fa0e9c83a25ab1fea3fbf104fd9578de0c3f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.116878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--265733e4-bfed-4f55-9041-9443ccc1d653", "created": "2026-10-09T15:13:12.117484Z", "modified": "2026-10-09T15:13:12.117484Z", "relationship_type": "indicates", "source_ref": "indicator--6dade057-aa01-4a0c-8a75-073c7aec51c1", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52ca0bf-6b82-4b96-8546-057e160c05e2", "created": "2026-10-09T15:13:12.117608Z", "modified": "2026-10-09T15:13:12.117608Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09ea0d11b737db47d05235fedc2a2abed82a283f8102f99774267fee58cb2ecb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.117608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e64d6bb8-8377-4d9f-8186-d803c1b64d86", "created": "2026-10-09T15:13:12.118195Z", "modified": "2026-10-09T15:13:12.118195Z", "relationship_type": "indicates", "source_ref": "indicator--a52ca0bf-6b82-4b96-8546-057e160c05e2", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2ef62b-1785-4e61-85bc-07598240ef8e", "created": "2026-10-09T15:13:12.118327Z", "modified": "2026-10-09T15:13:12.118327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f695a0034456be78f6389dd7d9927852d1e1153dec1acfc874719fa6ecf4325']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.118327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--359211e8-d6f8-4616-8d3a-c56df38d2d9d", "created": "2026-10-09T15:13:12.118917Z", "modified": "2026-10-09T15:13:12.118917Z", "relationship_type": "indicates", "source_ref": "indicator--ac2ef62b-1785-4e61-85bc-07598240ef8e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df45db5b-07d7-41bf-97e6-d3431033b012", "created": "2026-10-09T15:13:12.119042Z", "modified": "2026-10-09T15:13:12.119042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62e0a8bff4cb66473024c798b3a9b184b4e58a54e554762134512f1c3582133c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.119042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d83c630-bfff-437f-8cd1-06c32e64b23a", "created": "2026-10-09T15:13:12.11963Z", "modified": "2026-10-09T15:13:12.11963Z", "relationship_type": "indicates", "source_ref": "indicator--df45db5b-07d7-41bf-97e6-d3431033b012", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1e1796-e784-4653-855c-a2498a3f0eb0", "created": "2026-10-09T15:13:12.11975Z", "modified": "2026-10-09T15:13:12.11975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca508ee54a8eaaf20e615472816f7b74e9a0a7cfe59f403f33afd34c5a58cda6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.11975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14685327-4615-4e16-9bb0-68900ef29bf1", "created": "2026-10-09T15:13:12.120443Z", "modified": "2026-10-09T15:13:12.120443Z", "relationship_type": "indicates", "source_ref": "indicator--2b1e1796-e784-4653-855c-a2498a3f0eb0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c00b3b-5072-4b2f-8095-aab93dd5dcfa", "created": "2026-10-09T15:13:12.120567Z", "modified": "2026-10-09T15:13:12.120567Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80f2bd63dd65dddfeec879ae566d45ba9226f4b8c866a2f0667398616899dbe2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.120567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--181bb864-6ea8-44d2-9185-baf11e550fa4", "created": "2026-10-09T15:13:12.121147Z", "modified": "2026-10-09T15:13:12.121147Z", "relationship_type": "indicates", "source_ref": "indicator--97c00b3b-5072-4b2f-8095-aab93dd5dcfa", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cee2931-adf2-4886-8b58-7f45744a67f5", "created": "2026-10-09T15:13:12.121281Z", "modified": "2026-10-09T15:13:12.121281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f92ad41e779cd16862f42b982d6f97a19e5ab4d3ca773c8c1a0b1fd895c2510']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.121281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60798e3f-9f4a-41b5-8fa3-d3f90ca37745", "created": "2026-10-09T15:13:12.121858Z", "modified": "2026-10-09T15:13:12.121858Z", "relationship_type": "indicates", "source_ref": "indicator--4cee2931-adf2-4886-8b58-7f45744a67f5", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2375f393-edb5-4a2c-b889-a034f99519fc", "created": "2026-10-09T15:13:12.121978Z", "modified": "2026-10-09T15:13:12.121978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c4931f82fdc668e11301d47092a83570606d7f32f24218241303a9adc6eb6eb6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.121978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bf8fce3-7890-43e6-b309-2a32584a17d5", "created": "2026-10-09T15:13:12.122566Z", "modified": "2026-10-09T15:13:12.122566Z", "relationship_type": "indicates", "source_ref": "indicator--2375f393-edb5-4a2c-b889-a034f99519fc", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4c3e75-e996-4978-a7f7-7d63476f6d20", "created": "2026-10-09T15:13:12.122691Z", "modified": "2026-10-09T15:13:12.122691Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b8ee1bcd52e3be5e4832586be978f8e75389a6eb81f0311ca67ddeafb7acf1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.122691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5259d1d0-609a-47d9-920d-ee56861138a0", "created": "2026-10-09T15:13:12.123286Z", "modified": "2026-10-09T15:13:12.123286Z", "relationship_type": "indicates", "source_ref": "indicator--6d4c3e75-e996-4978-a7f7-7d63476f6d20", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f3875d-3357-4b59-b9e1-f6bf6b9f2f29", "created": "2026-10-09T15:13:12.123413Z", "modified": "2026-10-09T15:13:12.123413Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5726e65dad1d88a3cd4401bb379ae3a6fcaef342f7cabcd639be5f04d6521693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.123413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2badf233-aec4-4da9-bf02-5527b364f38f", "created": "2026-10-09T15:13:12.123999Z", "modified": "2026-10-09T15:13:12.123999Z", "relationship_type": "indicates", "source_ref": "indicator--31f3875d-3357-4b59-b9e1-f6bf6b9f2f29", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4af05d-f34c-4d9c-bafc-c46b4b653789", "created": "2026-10-09T15:13:12.124119Z", "modified": "2026-10-09T15:13:12.124119Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87c6cbf2f06305f484a46393aacaaf77e28e7f7f4e65d559f0f0eaf540582370']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.124119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--622c7537-d3b3-4e7d-b774-8c5b47f0d672", "created": "2026-10-09T15:13:12.124706Z", "modified": "2026-10-09T15:13:12.124706Z", "relationship_type": "indicates", "source_ref": "indicator--dc4af05d-f34c-4d9c-bafc-c46b4b653789", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdea6a2b-a26e-41a5-920d-cd98650a65b0", "created": "2026-10-09T15:13:12.124827Z", "modified": "2026-10-09T15:13:12.124827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c023db8aa4bb4e96eb268f6e99f4afb99c2e132b8ec4558bd6e5748322d4424a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.124827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76c3e80f-a003-4f73-87a5-aa0dcd9197a9", "created": "2026-10-09T15:13:12.125415Z", "modified": "2026-10-09T15:13:12.125415Z", "relationship_type": "indicates", "source_ref": "indicator--cdea6a2b-a26e-41a5-920d-cd98650a65b0", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c6bbc2-3060-4b4e-beab-0cc2e927e761", "created": "2026-10-09T15:13:12.125534Z", "modified": "2026-10-09T15:13:12.125534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9af386acac64a16445a43fb00eba535f95fc84fd39cec02fea64664dc50e645']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.125534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e22a672e-8848-4577-9101-000f4a30d767", "created": "2026-10-09T15:13:12.12612Z", "modified": "2026-10-09T15:13:12.12612Z", "relationship_type": "indicates", "source_ref": "indicator--85c6bbc2-3060-4b4e-beab-0cc2e927e761", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7bad7c-8fe3-49f1-897b-eeca49d0cfc5", "created": "2026-10-09T15:13:12.126243Z", "modified": "2026-10-09T15:13:12.126243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0d27661442767811bb5a12166fd192b2015efc74bfae1a933fc9d2396ac843f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.126243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10d3634d-d0db-45e7-af33-73ab82786238", "created": "2026-10-09T15:13:12.12694Z", "modified": "2026-10-09T15:13:12.12694Z", "relationship_type": "indicates", "source_ref": "indicator--8f7bad7c-8fe3-49f1-897b-eeca49d0cfc5", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cc7821-6f06-4451-b807-bab7ea47d838", "created": "2026-10-09T15:13:12.127061Z", "modified": "2026-10-09T15:13:12.127061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef7d83ff850c592de5f1ef893a0cbcc9bce856abcb6ae0afc3e05b679e64a2d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.127061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a12470a6-2472-4796-829c-55b72e9989cb", "created": "2026-10-09T15:13:12.127652Z", "modified": "2026-10-09T15:13:12.127652Z", "relationship_type": "indicates", "source_ref": "indicator--d4cc7821-6f06-4451-b807-bab7ea47d838", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab9b518-de9f-4d9d-bb93-c2872724e4dd", "created": "2026-10-09T15:13:12.127778Z", "modified": "2026-10-09T15:13:12.127778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d13053401242406612abbac3d435581b977d909c9079570c487e2fe5a31ffbe5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.127778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97f47448-089b-4154-bf57-01f84414b2a0", "created": "2026-10-09T15:13:12.128381Z", "modified": "2026-10-09T15:13:12.128381Z", "relationship_type": "indicates", "source_ref": "indicator--8ab9b518-de9f-4d9d-bb93-c2872724e4dd", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bebfdc-d8f3-47ca-bf56-bb1a2730e465", "created": "2026-10-09T15:13:12.128505Z", "modified": "2026-10-09T15:13:12.128505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b8c17f8a4efc4a67197379e9b15a937e437bd21a6324e7e32f314646630a6fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.128505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60a6fbe4-6716-42d5-9bef-80308344612b", "created": "2026-10-09T15:13:12.129084Z", "modified": "2026-10-09T15:13:12.129084Z", "relationship_type": "indicates", "source_ref": "indicator--02bebfdc-d8f3-47ca-bf56-bb1a2730e465", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03df2ccc-a77d-4ec4-9e26-88f45327a268", "created": "2026-10-09T15:13:12.129201Z", "modified": "2026-10-09T15:13:12.129201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a3839006ca1fc37002e7b6c81d578ce793d00dedae5d5c9b1259daed5591d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.129201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88689022-f230-400c-9f6b-9453fe96ecda", "created": "2026-10-09T15:13:12.129796Z", "modified": "2026-10-09T15:13:12.129796Z", "relationship_type": "indicates", "source_ref": "indicator--03df2ccc-a77d-4ec4-9e26-88f45327a268", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4caad83b-595e-4d2f-b497-0483c99f391a", "created": "2026-10-09T15:13:12.129916Z", "modified": "2026-10-09T15:13:12.129916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f01d7c39506e79979bece4274d37d2eea57d1e7f069cce03ee622b91225ce581']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.129916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45706160-e6ac-4be3-a35a-5db49d054b08", "created": "2026-10-09T15:13:12.130516Z", "modified": "2026-10-09T15:13:12.130516Z", "relationship_type": "indicates", "source_ref": "indicator--4caad83b-595e-4d2f-b497-0483c99f391a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f38c46-edaa-4f4c-b58b-18f4892de080", "created": "2026-10-09T15:13:12.130641Z", "modified": "2026-10-09T15:13:12.130641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41bc9910bed549cd9f34ea29ceffb26547af8b73cd10062ec5410817eb7f3976']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.130641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea3650b4-b52f-4ef6-baba-6228eb0be81c", "created": "2026-10-09T15:13:12.131231Z", "modified": "2026-10-09T15:13:12.131231Z", "relationship_type": "indicates", "source_ref": "indicator--a1f38c46-edaa-4f4c-b58b-18f4892de080", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb35e833-8fbe-4edd-9c0b-423658e1258c", "created": "2026-10-09T15:13:12.13136Z", "modified": "2026-10-09T15:13:12.13136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd88169e73938238c4146b045ba6bd4b7121035acb602b11b3891957f6ae4dbe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.13136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb89afce-79fa-40d8-b519-8606bfb04334", "created": "2026-10-09T15:13:12.131944Z", "modified": "2026-10-09T15:13:12.131944Z", "relationship_type": "indicates", "source_ref": "indicator--fb35e833-8fbe-4edd-9c0b-423658e1258c", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00556607-8e69-4b5a-9226-eebeb8b56929", "created": "2026-10-09T15:13:12.132064Z", "modified": "2026-10-09T15:13:12.132064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6ed6b4a74716c16aef189990c273404df1a60500f865dfbd052c7141be0a972']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.132064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--079fc43e-d8f6-4fbf-9e0b-700ffcad8303", "created": "2026-10-09T15:13:12.132767Z", "modified": "2026-10-09T15:13:12.132767Z", "relationship_type": "indicates", "source_ref": "indicator--00556607-8e69-4b5a-9226-eebeb8b56929", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb82dbf5-5c78-4f34-8c26-0d2f23ba0b79", "created": "2026-10-09T15:13:12.132893Z", "modified": "2026-10-09T15:13:12.132893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='619b7b9d4f66ab57f0261169070ccd14241d38290661d8f19fe1822b7f7ae49f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.132893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdad1c21-864b-4a25-8cc1-85d30b8d2be7", "created": "2026-10-09T15:13:12.133492Z", "modified": "2026-10-09T15:13:12.133492Z", "relationship_type": "indicates", "source_ref": "indicator--fb82dbf5-5c78-4f34-8c26-0d2f23ba0b79", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa40baab-3ef6-4d29-8364-4df56cbc325b", "created": "2026-10-09T15:13:12.133616Z", "modified": "2026-10-09T15:13:12.133616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e746c7d526ecabd08bbf448fa49890a6bbb054d04b669723159de819a11ed43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.133616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af615541-5eb5-497f-a04d-9a5ec80b316d", "created": "2026-10-09T15:13:12.134202Z", "modified": "2026-10-09T15:13:12.134202Z", "relationship_type": "indicates", "source_ref": "indicator--aa40baab-3ef6-4d29-8364-4df56cbc325b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b07c31-5d48-472a-8422-9846ba7a876d", "created": "2026-10-09T15:13:12.134339Z", "modified": "2026-10-09T15:13:12.134339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02d909650e87eeeff91218253b479b1022b7f97672010237b1f781d4590c3bf0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.134339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a8b482b-4961-431f-8a47-7a0d27352e89", "created": "2026-10-09T15:13:12.134935Z", "modified": "2026-10-09T15:13:12.134935Z", "relationship_type": "indicates", "source_ref": "indicator--11b07c31-5d48-472a-8422-9846ba7a876d", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ef2018-d314-4bf9-9f36-4829b68aff3a", "created": "2026-10-09T15:13:12.135056Z", "modified": "2026-10-09T15:13:12.135056Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97723b6f8726a267bf50c13975407bf5efa3317d10d375591de3277956810107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.135056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db1b7dd5-4a29-44f5-9199-ae6b0b5bc2aa", "created": "2026-10-09T15:13:12.13565Z", "modified": "2026-10-09T15:13:12.13565Z", "relationship_type": "indicates", "source_ref": "indicator--13ef2018-d314-4bf9-9f36-4829b68aff3a", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bc7bdd-7fc7-4379-9a01-907884329f8b", "created": "2026-10-09T15:13:12.135782Z", "modified": "2026-10-09T15:13:12.135782Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb6a4f3623ecbbc455fe2f1ceea164e51a21fddc5769f58a9947306117d8c8b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.135782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5faa9161-9c0f-445d-802f-efc31a078970", "created": "2026-10-09T15:13:12.136385Z", "modified": "2026-10-09T15:13:12.136385Z", "relationship_type": "indicates", "source_ref": "indicator--72bc7bdd-7fc7-4379-9a01-907884329f8b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad573ec-4baf-4a97-9861-e336d7f4edc8", "created": "2026-10-09T15:13:12.13651Z", "modified": "2026-10-09T15:13:12.13651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b2f13281356f9ef1173c7e2bace68b631506bde63aa7e9c485ac89f6e0cc560']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.13651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbd998de-5317-4cd6-9bfc-fc2d0fe4f20e", "created": "2026-10-09T15:13:12.137082Z", "modified": "2026-10-09T15:13:12.137082Z", "relationship_type": "indicates", "source_ref": "indicator--cad573ec-4baf-4a97-9861-e336d7f4edc8", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b70a902-819b-4c5f-9415-8ac60e7fa6a4", "created": "2026-10-09T15:13:12.1372Z", "modified": "2026-10-09T15:13:12.1372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33dc2bac3daaff1c39d2392167dd6d9992f2c2baa7bf0dd9df6d2cf245e743a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.1372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99e31a81-8b00-47d3-a139-1e4472464ced", "created": "2026-10-09T15:13:12.137801Z", "modified": "2026-10-09T15:13:12.137801Z", "relationship_type": "indicates", "source_ref": "indicator--7b70a902-819b-4c5f-9415-8ac60e7fa6a4", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80c4496-3b14-4087-bb1e-68b72a529ed7", "created": "2026-10-09T15:13:12.13792Z", "modified": "2026-10-09T15:13:12.13792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39ff0f6c144f05c7fcfc590580e20597d7d9cc1eff35e2be0aad425c22e8cc38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.13792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f2e72c8-7000-4324-b2da-30720f947052", "created": "2026-10-09T15:13:12.138527Z", "modified": "2026-10-09T15:13:12.138527Z", "relationship_type": "indicates", "source_ref": "indicator--d80c4496-3b14-4087-bb1e-68b72a529ed7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd558cd-281d-4f87-a7cb-05ceb9877de9", "created": "2026-10-09T15:13:12.13865Z", "modified": "2026-10-09T15:13:12.13865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac6aa0c781092fc4bb21b71de52085c3cb55a273be648635c0c676a9252b8919']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.13865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c78dc76d-e688-48cd-abdb-b1f8ec90e8af", "created": "2026-10-09T15:13:12.139341Z", "modified": "2026-10-09T15:13:12.139341Z", "relationship_type": "indicates", "source_ref": "indicator--bdd558cd-281d-4f87-a7cb-05ceb9877de9", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105b1da4-f519-40ab-bd15-fdb87eae00ec", "created": "2026-10-09T15:13:12.139466Z", "modified": "2026-10-09T15:13:12.139466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46450d286ca22d24c7496e67d457e6ee689a14461dc07bb503910c99f980f531']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.139466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a79ea2d-4a5f-423a-8a77-9d8cf4f196cc", "created": "2026-10-09T15:13:12.140064Z", "modified": "2026-10-09T15:13:12.140064Z", "relationship_type": "indicates", "source_ref": "indicator--105b1da4-f519-40ab-bd15-fdb87eae00ec", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afcc0bf-c231-4938-a097-e0cde392adb7", "created": "2026-10-09T15:13:12.140186Z", "modified": "2026-10-09T15:13:12.140186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='487d068394836dffde78b7fec59f2e32d483cf00123e9af56b81e6d974b62bcc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.140186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa4ee20f-9a7b-46bc-8f31-f60788ca1b6d", "created": "2026-10-09T15:13:12.140811Z", "modified": "2026-10-09T15:13:12.140811Z", "relationship_type": "indicates", "source_ref": "indicator--7afcc0bf-c231-4938-a097-e0cde392adb7", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515f4fd3-28f9-4768-92e5-688340483213", "created": "2026-10-09T15:13:12.140933Z", "modified": "2026-10-09T15:13:12.140933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='508a7276c8dbe45f8c6849172cc722bcf23efb4d222a18e36bf4cddf389c8a23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.140933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ecccd0c-440d-4116-9d72-db1386ccc5f7", "created": "2026-10-09T15:13:12.141525Z", "modified": "2026-10-09T15:13:12.141525Z", "relationship_type": "indicates", "source_ref": "indicator--515f4fd3-28f9-4768-92e5-688340483213", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579b6847-2b19-4009-aff1-6a0a52a4a584", "created": "2026-10-09T15:13:12.14165Z", "modified": "2026-10-09T15:13:12.14165Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a23587c909211bca255285d3dd5047a37b4745293751ec38ac026d78f71c6f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.14165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa287e25-bc29-430c-b0d2-c2593552a4ca", "created": "2026-10-09T15:13:12.14223Z", "modified": "2026-10-09T15:13:12.14223Z", "relationship_type": "indicates", "source_ref": "indicator--579b6847-2b19-4009-aff1-6a0a52a4a584", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2fac62c-7f7e-40c6-8562-4c91bd5db1ba", "created": "2026-10-09T15:13:12.14236Z", "modified": "2026-10-09T15:13:12.14236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c4f4418545221991831859fbe9a43ac39902de8678a5d85e423568c7ecad41a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.14236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66897871-9772-467a-948f-a5280f750537", "created": "2026-10-09T15:13:12.142949Z", "modified": "2026-10-09T15:13:12.142949Z", "relationship_type": "indicates", "source_ref": "indicator--b2fac62c-7f7e-40c6-8562-4c91bd5db1ba", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0aee1da-1e63-419a-8d3d-8198c76ff61e", "created": "2026-10-09T15:13:12.14307Z", "modified": "2026-10-09T15:13:12.14307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cefd61f2f26ff4c40baf00713a8d37d71fba6c75f5c92699d8c617a61a570c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.14307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e13ae624-42b5-4b4f-8ca4-df403ce24201", "created": "2026-10-09T15:13:12.143683Z", "modified": "2026-10-09T15:13:12.143683Z", "relationship_type": "indicates", "source_ref": "indicator--a0aee1da-1e63-419a-8d3d-8198c76ff61e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecba5b5d-6e40-441a-9a08-b76286a6f635", "created": "2026-10-09T15:13:12.143807Z", "modified": "2026-10-09T15:13:12.143807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ca806078bcf4f2380bb65a81a27d0eec67a5a4cc789c1f3bf19129fc2ccb465']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.143807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf286718-3b13-4d5e-bb8d-306bee5e4f79", "created": "2026-10-09T15:13:12.144405Z", "modified": "2026-10-09T15:13:12.144405Z", "relationship_type": "indicates", "source_ref": "indicator--ecba5b5d-6e40-441a-9a08-b76286a6f635", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93667ead-1d99-4688-9dd9-4cf4dd69b61b", "created": "2026-10-09T15:13:12.144528Z", "modified": "2026-10-09T15:13:12.144528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc7b2ce39505b94cc00362fbe98f41ed2726d84c29f6a06c6610878034d05115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.144528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--174e59d4-7ffd-4f85-b0d6-4a391d6c7305", "created": "2026-10-09T15:13:12.145109Z", "modified": "2026-10-09T15:13:12.145109Z", "relationship_type": "indicates", "source_ref": "indicator--93667ead-1d99-4688-9dd9-4cf4dd69b61b", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b511844c-955c-4247-8117-f39bf1adfbaa", "created": "2026-10-09T15:13:12.145229Z", "modified": "2026-10-09T15:13:12.145229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42a32d0735629c8864099c6113612b1fc939cce8f809ad20d9077e852f9dc008']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.145229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae2869b9-056a-466d-ba68-38d36baa89e7", "created": "2026-10-09T15:13:12.145937Z", "modified": "2026-10-09T15:13:12.145937Z", "relationship_type": "indicates", "source_ref": "indicator--b511844c-955c-4247-8117-f39bf1adfbaa", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95175e36-1d78-48d4-8a23-4bd090d64b26", "created": "2026-10-09T15:13:12.146063Z", "modified": "2026-10-09T15:13:12.146063Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f9806c4cb8644a45ab2c3a55458702a81323bc85cf2c1c8c09b87997fa8c7cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.146063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7e872ac-1e02-48d1-bcc1-4c71391bad2c", "created": "2026-10-09T15:13:12.14666Z", "modified": "2026-10-09T15:13:12.14666Z", "relationship_type": "indicates", "source_ref": "indicator--95175e36-1d78-48d4-8a23-4bd090d64b26", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27394af-8036-40c7-8639-1509ed79d361", "created": "2026-10-09T15:13:12.146781Z", "modified": "2026-10-09T15:13:12.146781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fa2fddd99327d8d855e8bbece9a4bb617fbb9fa0f67bdd032fee95512011d32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.146781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7692485b-f69a-450d-8146-336f7fb88b39", "created": "2026-10-09T15:13:12.14737Z", "modified": "2026-10-09T15:13:12.14737Z", "relationship_type": "indicates", "source_ref": "indicator--f27394af-8036-40c7-8639-1509ed79d361", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0bd179-8ea6-43f8-b9c7-35dff9505467", "created": "2026-10-09T15:13:12.147491Z", "modified": "2026-10-09T15:13:12.147491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='187a86891ecc9be14adf9ba88af53fa3dc84a2602f889faa5f01e92e55694c06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.147491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86837be0-69ac-4d30-baca-efb63ff4de54", "created": "2026-10-09T15:13:12.148079Z", "modified": "2026-10-09T15:13:12.148079Z", "relationship_type": "indicates", "source_ref": "indicator--2a0bd179-8ea6-43f8-b9c7-35dff9505467", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f208272-4730-4d5c-a9f2-dba51ecae9f6", "created": "2026-10-09T15:13:12.148199Z", "modified": "2026-10-09T15:13:12.148199Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='stealthLight.sys']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.148199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--507990cd-6c2d-424c-9683-a02370166a9d", "created": "2026-10-09T15:13:12.148669Z", "modified": "2026-10-09T15:13:12.148669Z", "relationship_type": "indicates", "source_ref": "indicator--8f208272-4730-4d5c-a9f2-dba51ecae9f6", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2111d3e5-0c74-4358-bc50-38122a095f64", "created": "2026-10-09T15:13:12.148788Z", "modified": "2026-10-09T15:13:12.148788Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='phone.Secure']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.148788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f808b696-255d-422d-975d-770e7f3bc3cc", "created": "2026-10-09T15:13:12.149237Z", "modified": "2026-10-09T15:13:12.149237Z", "relationship_type": "indicates", "source_ref": "indicator--2111d3e5-0c74-4358-bc50-38122a095f64", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23c0aa5-7414-46c9-9629-d38f62088aa9", "created": "2026-10-09T15:13:12.149368Z", "modified": "2026-10-09T15:13:12.149368Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='and.LocatorTrial']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.149368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90a56bf1-565a-456b-9594-95cd2075bf78", "created": "2026-10-09T15:13:12.149827Z", "modified": "2026-10-09T15:13:12.149827Z", "relationship_type": "indicates", "source_ref": "indicator--b23c0aa5-7414-46c9-9629-d38f62088aa9", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5179f0b9-5a66-4c80-aed4-6712c854e57e", "created": "2026-10-09T15:13:12.149943Z", "modified": "2026-10-09T15:13:12.149943Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='and.GuardTrial']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.149943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2065c44-538e-4ccd-b598-8bfae232e260", "created": "2026-10-09T15:13:12.150404Z", "modified": "2026-10-09T15:13:12.150404Z", "relationship_type": "indicates", "source_ref": "indicator--5179f0b9-5a66-4c80-aed4-6712c854e57e", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c11285d-06cb-4c78-a244-edadb5bdb84d", "created": "2026-10-09T15:13:12.150527Z", "modified": "2026-10-09T15:13:12.150527Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='lookOut.Secure']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.150527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c78a2ce8-2aeb-40c3-885c-b85a547f8038", "created": "2026-10-09T15:13:12.150977Z", "modified": "2026-10-09T15:13:12.150977Z", "relationship_type": "indicates", "source_ref": "indicator--5c11285d-06cb-4c78-a244-edadb5bdb84d", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518f701d-9514-4099-9670-2c4a2c5691e4", "created": "2026-10-09T15:13:12.15112Z", "modified": "2026-10-09T15:13:12.15112Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5AD2ACB089F8BE5112FF5125D94036983DE3E8D5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.15112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--212b87c3-f1fa-499e-b8ac-614a4eb976c9", "created": "2026-10-09T15:13:12.151774Z", "modified": "2026-10-09T15:13:12.151774Z", "relationship_type": "indicates", "source_ref": "indicator--518f701d-9514-4099-9670-2c4a2c5691e4", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a4117e-8b26-4e49-9ea9-f0c1f4f37070", "created": "2026-10-09T15:13:12.151897Z", "modified": "2026-10-09T15:13:12.151897Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FED69D6F09AE8C98DD4053C1934CCAF57D31824D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.151897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7cc8c75-094a-4283-abb1-771ba1b68ba1", "created": "2026-10-09T15:13:12.152453Z", "modified": "2026-10-09T15:13:12.152453Z", "relationship_type": "indicates", "source_ref": "indicator--78a4117e-8b26-4e49-9ea9-f0c1f4f37070", "target_ref": "malware--18154dca-c890-496c-af5d-add7ab44a369"}, {"type": "malware", "spec_version": "2.1", "id": "malware--441a32bc-7f4a-4ed2-b0e7-67fda2f5b50d", "created": "2026-10-09T15:13:12.152576Z", "modified": "2026-10-09T15:13:12.152576Z", "name": "SMSForward", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14417980-c8a4-40e6-b9cf-4f6d9fdcff1e", "created": "2026-10-09T15:13:12.152698Z", "modified": "2026-10-09T15:13:12.152698Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='one.enix.smsforward']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.152698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5845231e-6caa-4ce6-a555-f570663dd58a", "created": "2026-10-09T15:13:12.153162Z", "modified": "2026-10-09T15:13:12.153162Z", "relationship_type": "indicates", "source_ref": "indicator--14417980-c8a4-40e6-b9cf-4f6d9fdcff1e", "target_ref": "malware--441a32bc-7f4a-4ed2-b0e7-67fda2f5b50d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e080f5-c46b-492f-8fea-cfde96bb59c1", "created": "2026-10-09T15:13:12.153295Z", "modified": "2026-10-09T15:13:12.153295Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1E15B0D27C0551061885340A3990D52A93F646B8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.153295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81c6a6bd-6b0f-4527-846f-5b743b862999", "created": "2026-10-09T15:13:12.153839Z", "modified": "2026-10-09T15:13:12.153839Z", "relationship_type": "indicates", "source_ref": "indicator--42e080f5-c46b-492f-8fea-cfde96bb59c1", "target_ref": "malware--441a32bc-7f4a-4ed2-b0e7-67fda2f5b50d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d88939aa-27be-47ab-aa58-f341cd399516", "created": "2026-10-09T15:13:12.153956Z", "modified": "2026-10-09T15:13:12.153956Z", "name": "Ahmyth", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6c2af8-c395-4157-b38c-34b3fa30fe7e", "created": "2026-10-09T15:13:12.154067Z", "modified": "2026-10-09T15:13:12.154067Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.droid.talk218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.154067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16fc2352-0860-477e-8280-fdf31199021f", "created": "2026-10-09T15:13:12.15455Z", "modified": "2026-10-09T15:13:12.15455Z", "relationship_type": "indicates", "source_ref": "indicator--8c6c2af8-c395-4157-b38c-34b3fa30fe7e", "target_ref": "malware--d88939aa-27be-47ab-aa58-f341cd399516"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccbcecb-a0ed-4656-b98c-66c70899dd03", "created": "2026-10-09T15:13:12.15468Z", "modified": "2026-10-09T15:13:12.15468Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ahmyth.mine.king.ahmyth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.15468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5ff647-dada-4c9e-851f-c21ea46e78f8", "created": "2026-10-09T15:13:12.155145Z", "modified": "2026-10-09T15:13:12.155145Z", "relationship_type": "indicates", "source_ref": "indicator--4ccbcecb-a0ed-4656-b98c-66c70899dd03", "target_ref": "malware--d88939aa-27be-47ab-aa58-f341cd399516"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1097bd5-578c-49b3-a31d-d32c51376820", "created": "2026-10-09T15:13:12.15528Z", "modified": "2026-10-09T15:13:12.15528Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0ECD5FD80682776D804715AB5B8504DAF59A4B54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.15528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d202e1-a63c-4059-8c03-8a858a15cf36", "created": "2026-10-09T15:13:12.155834Z", "modified": "2026-10-09T15:13:12.155834Z", "relationship_type": "indicates", "source_ref": "indicator--e1097bd5-578c-49b3-a31d-d32c51376820", "target_ref": "malware--d88939aa-27be-47ab-aa58-f341cd399516"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f5edde39-395d-4b01-afc8-9c05468ac604", "created": "2026-10-09T15:13:12.155952Z", "modified": "2026-10-09T15:13:12.155952Z", "name": "xHunter", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccc8a50-68d6-4ba8-afe8-0ebf52e9f0d4", "created": "2026-10-09T15:13:12.156062Z", "modified": "2026-10-09T15:13:12.156062Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.xhunter.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.156062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be00586e-3244-4018-b6f7-b1269086bafe", "created": "2026-10-09T15:13:12.156527Z", "modified": "2026-10-09T15:13:12.156527Z", "relationship_type": "indicates", "source_ref": "indicator--fccc8a50-68d6-4ba8-afe8-0ebf52e9f0d4", "target_ref": "malware--f5edde39-395d-4b01-afc8-9c05468ac604"}, {"type": "malware", "spec_version": "2.1", "id": "malware--72b6b2cb-ba4f-4b7f-a268-fea5a36675cc", "created": "2026-10-09T15:13:12.156651Z", "modified": "2026-10-09T15:13:12.156651Z", "name": "SpyTec", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348146f2-0c29-498d-8c5c-8bedf4aedeea", "created": "2026-10-09T15:13:12.156768Z", "modified": "2026-10-09T15:13:12.156768Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytecgps.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.156768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df3c0d07-edbb-4b22-8791-10a358fdf441", "created": "2026-10-09T15:13:12.157593Z", "modified": "2026-10-09T15:13:12.157593Z", "relationship_type": "indicates", "source_ref": "indicator--348146f2-0c29-498d-8c5c-8bedf4aedeea", "target_ref": "malware--72b6b2cb-ba4f-4b7f-a268-fea5a36675cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be02438-1378-4a84-b0a2-a40f6a48439d", "created": "2026-10-09T15:13:12.157727Z", "modified": "2026-10-09T15:13:12.157727Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytecgl300.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.157727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92166ed4-2a9f-40da-9646-9e3bb2a126d9", "created": "2026-10-09T15:13:12.158207Z", "modified": "2026-10-09T15:13:12.158207Z", "relationship_type": "indicates", "source_ref": "indicator--4be02438-1378-4a84-b0a2-a40f6a48439d", "target_ref": "malware--72b6b2cb-ba4f-4b7f-a268-fea5a36675cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2e6527-6fb4-427e-8337-c4d1f969c89e", "created": "2026-10-09T15:13:12.158341Z", "modified": "2026-10-09T15:13:12.158341Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spytec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.158341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62b26937-1c8f-46f8-b97c-dccefa3a2d83", "created": "2026-10-09T15:13:12.158823Z", "modified": "2026-10-09T15:13:12.158823Z", "relationship_type": "indicates", "source_ref": "indicator--5b2e6527-6fb4-427e-8337-c4d1f969c89e", "target_ref": "malware--72b6b2cb-ba4f-4b7f-a268-fea5a36675cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31aad8e6-a448-482e-806c-2eed79920301", "created": "2026-10-09T15:13:12.158946Z", "modified": "2026-10-09T15:13:12.158946Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.158946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35af5562-b30d-4baa-a806-192644c1547b", "created": "2026-10-09T15:13:12.159422Z", "modified": "2026-10-09T15:13:12.159422Z", "relationship_type": "indicates", "source_ref": "indicator--31aad8e6-a448-482e-806c-2eed79920301", "target_ref": "malware--72b6b2cb-ba4f-4b7f-a268-fea5a36675cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde175e2-b97d-40d3-b551-faae6d61cd60", "created": "2026-10-09T15:13:12.159543Z", "modified": "2026-10-09T15:13:12.159543Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='activation.spytec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.159543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e80dfc20-fb64-42b3-8357-994be2a0fbfd", "created": "2026-10-09T15:13:12.160022Z", "modified": "2026-10-09T15:13:12.160022Z", "relationship_type": "indicates", "source_ref": "indicator--bde175e2-b97d-40d3-b551-faae6d61cd60", "target_ref": "malware--72b6b2cb-ba4f-4b7f-a268-fea5a36675cc"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d75f1f62-39e3-4ab8-ba77-f4bb477713b3", "created": "2026-10-09T15:13:12.16014Z", "modified": "2026-10-09T15:13:12.16014Z", "name": "SpyTek", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98692ad0-ff97-4f39-9e1a-774150582559", "created": "2026-10-09T15:13:12.160254Z", "modified": "2026-10-09T15:13:12.160254Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytekonline.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.160254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9726ae9b-b168-4850-b4f5-a1b5c4ea27bd", "created": "2026-10-09T15:13:12.160741Z", "modified": "2026-10-09T15:13:12.160741Z", "relationship_type": "indicates", "source_ref": "indicator--98692ad0-ff97-4f39-9e1a-774150582559", "target_ref": "malware--d75f1f62-39e3-4ab8-ba77-f4bb477713b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211cf3b5-8327-40cd-bb1d-48182f505c1f", "created": "2026-10-09T15:13:12.160861Z", "modified": "2026-10-09T15:13:12.160861Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytek.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.160861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cc26e99-beaa-4770-b1d6-1605903995da", "created": "2026-10-09T15:13:12.161348Z", "modified": "2026-10-09T15:13:12.161348Z", "relationship_type": "indicates", "source_ref": "indicator--211cf3b5-8327-40cd-bb1d-48182f505c1f", "target_ref": "malware--d75f1f62-39e3-4ab8-ba77-f4bb477713b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb963792-9476-4e1d-8914-c530728a82f8", "created": "2026-10-09T15:13:12.161468Z", "modified": "2026-10-09T15:13:12.161468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.spytek.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.161468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--151e428c-ebbb-418f-8454-8031efb76673", "created": "2026-10-09T15:13:12.161947Z", "modified": "2026-10-09T15:13:12.161947Z", "relationship_type": "indicates", "source_ref": "indicator--fb963792-9476-4e1d-8914-c530728a82f8", "target_ref": "malware--d75f1f62-39e3-4ab8-ba77-f4bb477713b3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8c2040be-180b-4e56-8602-f6dc13231122", "created": "2026-10-09T15:13:12.162065Z", "modified": "2026-10-09T15:13:12.162065Z", "name": "BosSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf682ba9-c138-45df-b4e9-e346a533646c", "created": "2026-10-09T15:13:12.162176Z", "modified": "2026-10-09T15:13:12.162176Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bosspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.162176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--add94ffd-b0d3-4226-83a3-1365b48d4fe8", "created": "2026-10-09T15:13:12.162651Z", "modified": "2026-10-09T15:13:12.162651Z", "relationship_type": "indicates", "source_ref": "indicator--bf682ba9-c138-45df-b4e9-e346a533646c", "target_ref": "malware--8c2040be-180b-4e56-8602-f6dc13231122"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47ff6a1-9996-445c-bb0b-65c9067a0d85", "created": "2026-10-09T15:13:12.162772Z", "modified": "2026-10-09T15:13:12.162772Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.preference.help.mole']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.162772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ab701fe-a273-48a7-bc91-86de2ca3a2bc", "created": "2026-10-09T15:13:12.163354Z", "modified": "2026-10-09T15:13:12.163354Z", "relationship_type": "indicates", "source_ref": "indicator--c47ff6a1-9996-445c-bb0b-65c9067a0d85", "target_ref": "malware--8c2040be-180b-4e56-8602-f6dc13231122"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53261723-bfe4-4248-8d76-d1f3fca4d043", "created": "2026-10-09T15:13:12.163481Z", "modified": "2026-10-09T15:13:12.163481Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='32570AD62B2DF951A67251ACB49E39E96B8A43BA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.163481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32fb7fcf-b7da-4027-90b6-1174bfd67207", "created": "2026-10-09T15:13:12.164028Z", "modified": "2026-10-09T15:13:12.164028Z", "relationship_type": "indicates", "source_ref": "indicator--53261723-bfe4-4248-8d76-d1f3fca4d043", "target_ref": "malware--8c2040be-180b-4e56-8602-f6dc13231122"}, {"type": "malware", "spec_version": "2.1", "id": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd", "created": "2026-10-09T15:13:12.164152Z", "modified": "2026-10-09T15:13:12.164152Z", "name": "Fenced", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95759f62-7d82-4cc1-847d-9b4b50cb89b5", "created": "2026-10-09T15:13:12.164276Z", "modified": "2026-10-09T15:13:12.164276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespy.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.164276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0630ce7a-37eb-495e-bd8f-59a1f795250e", "created": "2026-10-09T15:13:12.16475Z", "modified": "2026-10-09T15:13:12.16475Z", "relationship_type": "indicates", "source_ref": "indicator--95759f62-7d82-4cc1-847d-9b4b50cb89b5", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f12ccde-f474-4dde-bdd2-6fef7c09a804", "created": "2026-10-09T15:13:12.164872Z", "modified": "2026-10-09T15:13:12.164872Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.164872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75aace63-3257-46f4-a757-fff9f659d16f", "created": "2026-10-09T15:13:12.165346Z", "modified": "2026-10-09T15:13:12.165346Z", "relationship_type": "indicates", "source_ref": "indicator--1f12ccde-f474-4dde-bdd2-6fef7c09a804", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e15356-3a2b-4cea-9c1f-8bd21c8f4fe2", "created": "2026-10-09T15:13:12.165468Z", "modified": "2026-10-09T15:13:12.165468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='web.mobilespy.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.165468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--988a4efa-2dc9-4c28-800c-3093af282628", "created": "2026-10-09T15:13:12.165944Z", "modified": "2026-10-09T15:13:12.165944Z", "relationship_type": "indicates", "source_ref": "indicator--47e15356-3a2b-4cea-9c1f-8bd21c8f4fe2", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1004d5f5-a59a-4d1f-af44-97ab14b52595", "created": "2026-10-09T15:13:12.166063Z", "modified": "2026-10-09T15:13:12.166063Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.166063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c059416a-15cf-4759-9b75-56354fe24c36", "created": "2026-10-09T15:13:12.166549Z", "modified": "2026-10-09T15:13:12.166549Z", "relationship_type": "indicates", "source_ref": "indicator--1004d5f5-a59a-4d1f-af44-97ab14b52595", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45895dbb-a5a0-4261-865c-e16c092f7507", "created": "2026-10-09T15:13:12.166667Z", "modified": "2026-10-09T15:13:12.166667Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='web.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.166667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9538042c-d2b0-4186-9bdd-6e66202f3226", "created": "2026-10-09T15:13:12.16713Z", "modified": "2026-10-09T15:13:12.16713Z", "relationship_type": "indicates", "source_ref": "indicator--45895dbb-a5a0-4261-865c-e16c092f7507", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2db64b-f11f-4fec-bf41-be3948e38074", "created": "2026-10-09T15:13:12.167245Z", "modified": "2026-10-09T15:13:12.167245Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.167245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e072f0ac-5830-418f-ab58-4920752d29b9", "created": "2026-10-09T15:13:12.167725Z", "modified": "2026-10-09T15:13:12.167725Z", "relationship_type": "indicates", "source_ref": "indicator--cb2db64b-f11f-4fec-bf41-be3948e38074", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a1351-c539-4979-bf68-b39e11f89dea", "created": "2026-10-09T15:13:12.167843Z", "modified": "2026-10-09T15:13:12.167843Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobilespy.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.167843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86d0896c-9cc3-4d23-8b4c-13ea01136ebe", "created": "2026-10-09T15:13:12.168303Z", "modified": "2026-10-09T15:13:12.168303Z", "relationship_type": "indicates", "source_ref": "indicator--918a1351-c539-4979-bf68-b39e11f89dea", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789b7162-e6ee-4616-8d26-77be07873025", "created": "2026-10-09T15:13:12.168424Z", "modified": "2026-10-09T15:13:12.168424Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.168424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04b4889c-06b1-452f-b007-3cc5619a526d", "created": "2026-10-09T15:13:12.168974Z", "modified": "2026-10-09T15:13:12.168974Z", "relationship_type": "indicates", "source_ref": "indicator--789b7162-e6ee-4616-8d26-77be07873025", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939497f5-5ba6-47cc-afa3-f5eb2e7317bd", "created": "2026-10-09T15:13:12.169097Z", "modified": "2026-10-09T15:13:12.169097Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5F2DCC133AF3E19D3935A85A3E2871856602A21D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.169097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79df9d11-46e0-49b1-a041-168de1915992", "created": "2026-10-09T15:13:12.169652Z", "modified": "2026-10-09T15:13:12.169652Z", "relationship_type": "indicates", "source_ref": "indicator--939497f5-5ba6-47cc-afa3-f5eb2e7317bd", "target_ref": "malware--45d643ae-8fd2-4cbf-81ae-e3672392e7bd"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7b010168-be19-464d-839a-fa31259a918c", "created": "2026-10-09T15:13:12.169776Z", "modified": "2026-10-09T15:13:12.169776Z", "name": "RastreadorDeNamorado", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a730084f-5cbd-405d-af42-ee18fa1e441a", "created": "2026-10-09T15:13:12.169889Z", "modified": "2026-10-09T15:13:12.169889Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rastreadordenamorado.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.169889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--516a0695-413b-4c21-a32c-c12a1edcae2a", "created": "2026-10-09T15:13:12.170387Z", "modified": "2026-10-09T15:13:12.170387Z", "relationship_type": "indicates", "source_ref": "indicator--a730084f-5cbd-405d-af42-ee18fa1e441a", "target_ref": "malware--7b010168-be19-464d-839a-fa31259a918c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823e14f3-c3ee-4441-b5b1-2569ffbd6d25", "created": "2026-10-09T15:13:12.17051Z", "modified": "2026-10-09T15:13:12.17051Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.rastreadordenamorado']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.17051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a5dc33a-7756-467b-aba4-7f0aac7f7d5e", "created": "2026-10-09T15:13:12.170976Z", "modified": "2026-10-09T15:13:12.170976Z", "relationship_type": "indicates", "source_ref": "indicator--823e14f3-c3ee-4441-b5b1-2569ffbd6d25", "target_ref": "malware--7b010168-be19-464d-839a-fa31259a918c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a25a987f-ecf9-46f7-9ad2-82c5277df4d6", "created": "2026-10-09T15:13:12.171098Z", "modified": "2026-10-09T15:13:12.171098Z", "name": "Intertel", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1baecaa4-8a46-4331-aaeb-e9b1998b6cf9", "created": "2026-10-09T15:13:12.171214Z", "modified": "2026-10-09T15:13:12.171214Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-spy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.171214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88b1eebb-8c5a-4f7c-a895-73ed99b19652", "created": "2026-10-09T15:13:12.171702Z", "modified": "2026-10-09T15:13:12.171702Z", "relationship_type": "indicates", "source_ref": "indicator--1baecaa4-8a46-4331-aaeb-e9b1998b6cf9", "target_ref": "malware--a25a987f-ecf9-46f7-9ad2-82c5277df4d6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--cdb6a13a-cd17-49f8-96db-1a840af1022d", "created": "2026-10-09T15:13:12.171822Z", "modified": "2026-10-09T15:13:12.171822Z", "name": "SpyFly", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f5794b7-a597-4466-ae6e-fc41e2f4c12e", "created": "2026-10-09T15:13:12.171931Z", "modified": "2026-10-09T15:13:12.171931Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyfly.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.171931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5b0b149-3867-4932-ae08-bb34e4c6e1f8", "created": "2026-10-09T15:13:12.172405Z", "modified": "2026-10-09T15:13:12.172405Z", "relationship_type": "indicates", "source_ref": "indicator--4f5794b7-a597-4466-ae6e-fc41e2f4c12e", "target_ref": "malware--cdb6a13a-cd17-49f8-96db-1a840af1022d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c551ab5f-074d-4272-bb5b-e8a99a690b15", "created": "2026-10-09T15:13:12.172525Z", "modified": "2026-10-09T15:13:12.172525Z", "name": "MocoSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3891e5-09de-4b39-9b00-57610ac66f9f", "created": "2026-10-09T15:13:12.172634Z", "modified": "2026-10-09T15:13:12.172634Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mocospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.172634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fc5d9c8-021d-4616-b0f5-50972aed8fca", "created": "2026-10-09T15:13:12.173112Z", "modified": "2026-10-09T15:13:12.173112Z", "relationship_type": "indicates", "source_ref": "indicator--da3891e5-09de-4b39-9b00-57610ac66f9f", "target_ref": "malware--c551ab5f-074d-4272-bb5b-e8a99a690b15"}, {"type": "malware", "spec_version": "2.1", "id": "malware--db26e016-781e-4a75-b842-b25f8d959322", "created": "2026-10-09T15:13:12.173232Z", "modified": "2026-10-09T15:13:12.173232Z", "name": "MzanziSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301213d5-498f-4569-a2bd-3084b6c63042", "created": "2026-10-09T15:13:12.173358Z", "modified": "2026-10-09T15:13:12.173358Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mzanzispy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.173358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb2dc4b3-7a2c-41d5-9937-154058900f28", "created": "2026-10-09T15:13:12.17383Z", "modified": "2026-10-09T15:13:12.17383Z", "relationship_type": "indicates", "source_ref": "indicator--301213d5-498f-4569-a2bd-3084b6c63042", "target_ref": "malware--db26e016-781e-4a75-b842-b25f8d959322"}, {"type": "malware", "spec_version": "2.1", "id": "malware--739629ea-80a5-45fb-b481-b6692e7313c7", "created": "2026-10-09T15:13:12.173946Z", "modified": "2026-10-09T15:13:12.173946Z", "name": "RecomSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a20d10-5a51-4236-beca-efb1dfef9140", "created": "2026-10-09T15:13:12.174058Z", "modified": "2026-10-09T15:13:12.174058Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='recomspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.174058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--506c161e-4cad-444f-ba90-e62e7ee47d03", "created": "2026-10-09T15:13:12.174533Z", "modified": "2026-10-09T15:13:12.174533Z", "relationship_type": "indicates", "source_ref": "indicator--a0a20d10-5a51-4236-beca-efb1dfef9140", "target_ref": "malware--739629ea-80a5-45fb-b481-b6692e7313c7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4bcb19cb-4bf6-40f2-b841-08a994a890c4", "created": "2026-10-09T15:13:12.174652Z", "modified": "2026-10-09T15:13:12.174652Z", "name": "SwiftMobileSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bb21bd-8cd8-4722-8318-1c3992a701b3", "created": "2026-10-09T15:13:12.174762Z", "modified": "2026-10-09T15:13:12.174762Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.myswiftmobilespy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.174762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c02a2173-4e78-45d7-8543-d699dd2a21ae", "created": "2026-10-09T15:13:12.175341Z", "modified": "2026-10-09T15:13:12.175341Z", "relationship_type": "indicates", "source_ref": "indicator--13bb21bd-8cd8-4722-8318-1c3992a701b3", "target_ref": "malware--4bcb19cb-4bf6-40f2-b841-08a994a890c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331821d4-c599-4b67-a21e-06317a7d61ad", "created": "2026-10-09T15:13:12.175461Z", "modified": "2026-10-09T15:13:12.175461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='swiftmobilespy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.175461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cd3ed38-08b3-4515-8011-2d801ff52033", "created": "2026-10-09T15:13:12.175942Z", "modified": "2026-10-09T15:13:12.175942Z", "relationship_type": "indicates", "source_ref": "indicator--331821d4-c599-4b67-a21e-06317a7d61ad", "target_ref": "malware--4bcb19cb-4bf6-40f2-b841-08a994a890c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab9f5e3-61ca-4bf4-b8bc-8989aee4466a", "created": "2026-10-09T15:13:12.176067Z", "modified": "2026-10-09T15:13:12.176067Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='795C30FAD432EE48EDF52B0748BA2749F0915CA3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.176067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52a13f0-63f7-4dbc-8e53-ad61f9d34035", "created": "2026-10-09T15:13:12.176623Z", "modified": "2026-10-09T15:13:12.176623Z", "relationship_type": "indicates", "source_ref": "indicator--3ab9f5e3-61ca-4bf4-b8bc-8989aee4466a", "target_ref": "malware--4bcb19cb-4bf6-40f2-b841-08a994a890c4"}, {"type": "malware", "spec_version": "2.1", "id": "malware--18d438e1-2774-4b14-8fc6-25d5694c2fab", "created": "2026-10-09T15:13:12.176743Z", "modified": "2026-10-09T15:13:12.176743Z", "name": "Trackji", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fb75ad-117c-4f70-96d0-8fc40c75b658", "created": "2026-10-09T15:13:12.176854Z", "modified": "2026-10-09T15:13:12.176854Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackji.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.176854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdf5a780-12a6-4a04-9fce-7c1740744cf1", "created": "2026-10-09T15:13:12.177333Z", "modified": "2026-10-09T15:13:12.177333Z", "relationship_type": "indicates", "source_ref": "indicator--d0fb75ad-117c-4f70-96d0-8fc40c75b658", "target_ref": "malware--18d438e1-2774-4b14-8fc6-25d5694c2fab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1b3b2f-afb1-4948-a35a-33586d93b557", "created": "2026-10-09T15:13:12.177455Z", "modified": "2026-10-09T15:13:12.177455Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackji.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.177455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c905bdf5-4cbd-4e62-8f90-78f24b4cfcc8", "created": "2026-10-09T15:13:12.177925Z", "modified": "2026-10-09T15:13:12.177925Z", "relationship_type": "indicates", "source_ref": "indicator--7e1b3b2f-afb1-4948-a35a-33586d93b557", "target_ref": "malware--18d438e1-2774-4b14-8fc6-25d5694c2fab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae62d46-bc3f-43b5-8a84-472baae7ff45", "created": "2026-10-09T15:13:12.178044Z", "modified": "2026-10-09T15:13:12.178044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='366b60fcbd0288e279b35f2a8c67a3cde5c5bdaa1ebfc17fd07b3dab3c03132a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.178044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc64268f-33b1-4be9-a208-41b6d314c94b", "created": "2026-10-09T15:13:12.178644Z", "modified": "2026-10-09T15:13:12.178644Z", "relationship_type": "indicates", "source_ref": "indicator--7ae62d46-bc3f-43b5-8a84-472baae7ff45", "target_ref": "malware--18d438e1-2774-4b14-8fc6-25d5694c2fab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60fa6a8-9b45-40f2-9189-332e5ee077e4", "created": "2026-10-09T15:13:12.178765Z", "modified": "2026-10-09T15:13:12.178765Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.wifi.tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.178765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--375af7ad-bfc9-4ae8-b7eb-4c75468bc70c", "created": "2026-10-09T15:13:12.179233Z", "modified": "2026-10-09T15:13:12.179233Z", "relationship_type": "indicates", "source_ref": "indicator--e60fa6a8-9b45-40f2-9189-332e5ee077e4", "target_ref": "malware--18d438e1-2774-4b14-8fc6-25d5694c2fab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6c2283-1d5f-4ded-b18a-c58f481d93db", "created": "2026-10-09T15:13:12.179365Z", "modified": "2026-10-09T15:13:12.179365Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DBA6211533A354E4BBF685A2EA458AC372C4ECE4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.179365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d0cb5b5-3e48-4ff7-acc6-76265edf163c", "created": "2026-10-09T15:13:12.179902Z", "modified": "2026-10-09T15:13:12.179902Z", "relationship_type": "indicates", "source_ref": "indicator--2d6c2283-1d5f-4ded-b18a-c58f481d93db", "target_ref": "malware--18d438e1-2774-4b14-8fc6-25d5694c2fab"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144", "created": "2026-10-09T15:13:12.180019Z", "modified": "2026-10-09T15:13:12.180019Z", "name": "XDSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfe44e6-00de-467d-9c60-756596df91ff", "created": "2026-10-09T15:13:12.180129Z", "modified": "2026-10-09T15:13:12.180129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.xdspy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.180129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef122f2e-687a-4ebd-a783-ffc8527a6292", "created": "2026-10-09T15:13:12.180711Z", "modified": "2026-10-09T15:13:12.180711Z", "relationship_type": "indicates", "source_ref": "indicator--cbfe44e6-00de-467d-9c60-756596df91ff", "target_ref": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0709fb-9952-45c9-b132-bad297f243cc", "created": "2026-10-09T15:13:12.180838Z", "modified": "2026-10-09T15:13:12.180838Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xdspy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.180838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f9689f6-598f-4001-bdc7-32d0ac2c7fa5", "created": "2026-10-09T15:13:12.181315Z", "modified": "2026-10-09T15:13:12.181315Z", "relationship_type": "indicates", "source_ref": "indicator--5d0709fb-9952-45c9-b132-bad297f243cc", "target_ref": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4474984-81ef-43e9-b777-8fdb9da25dd3", "created": "2026-10-09T15:13:12.181439Z", "modified": "2026-10-09T15:13:12.181439Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidspy.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.181439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5aa98bb-20f0-4d3c-9fdf-76f06ba7f983", "created": "2026-10-09T15:13:12.181924Z", "modified": "2026-10-09T15:13:12.181924Z", "relationship_type": "indicates", "source_ref": "indicator--e4474984-81ef-43e9-b777-8fdb9da25dd3", "target_ref": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc60d516-b720-4bcc-b1b0-bb3487424464", "created": "2026-10-09T15:13:12.182046Z", "modified": "2026-10-09T15:13:12.182046Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='xd.spy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.182046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf29f4a1-b890-4399-9e3c-19d68ddc996b", "created": "2026-10-09T15:13:12.182507Z", "modified": "2026-10-09T15:13:12.182507Z", "relationship_type": "indicates", "source_ref": "indicator--cc60d516-b720-4bcc-b1b0-bb3487424464", "target_ref": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78934370-161f-47e9-ab76-d0e25efb7363", "created": "2026-10-09T15:13:12.182628Z", "modified": "2026-10-09T15:13:12.182628Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='06A49FE1347C7D2E596DF2F08B8C235C00975AF8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.182628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab6b45f8-ab7a-467b-a585-b9825b204e78", "created": "2026-10-09T15:13:12.18317Z", "modified": "2026-10-09T15:13:12.18317Z", "relationship_type": "indicates", "source_ref": "indicator--78934370-161f-47e9-ab76-d0e25efb7363", "target_ref": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d72e54-89d1-4486-a62e-105ffd383bfe", "created": "2026-10-09T15:13:12.183304Z", "modified": "2026-10-09T15:13:12.183304Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7A22EB86FD8D817ED7BFAA03E7A280A03AF20779']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.183304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--651ac361-22ee-444f-91be-a621f11d914c", "created": "2026-10-09T15:13:12.18386Z", "modified": "2026-10-09T15:13:12.18386Z", "relationship_type": "indicates", "source_ref": "indicator--86d72e54-89d1-4486-a62e-105ffd383bfe", "target_ref": "malware--a1e7c92d-2014-4746-9c99-65edb66ab144"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9c742e22-7d53-4f87-a109-111b136e2684", "created": "2026-10-09T15:13:12.183979Z", "modified": "2026-10-09T15:13:12.183979Z", "name": "XploitSPY", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d58efe-0fec-4dcc-89b2-d51692334aee", "created": "2026-10-09T15:13:12.184096Z", "modified": "2026-10-09T15:13:12.184096Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xploitwizer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.184096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3483867-8f6e-4e6d-991a-fa5d85787373", "created": "2026-10-09T15:13:12.184581Z", "modified": "2026-10-09T15:13:12.184581Z", "relationship_type": "indicates", "source_ref": "indicator--f7d58efe-0fec-4dcc-89b2-d51692334aee", "target_ref": "malware--9c742e22-7d53-4f87-a109-111b136e2684"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ed39a7-cf02-4920-9419-49e48d901830", "created": "2026-10-09T15:13:12.184705Z", "modified": "2026-10-09T15:13:12.184705Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.remote.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.184705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c35b1a44-e819-4e2f-b046-8bdba1085d98", "created": "2026-10-09T15:13:12.185162Z", "modified": "2026-10-09T15:13:12.185162Z", "relationship_type": "indicates", "source_ref": "indicator--d3ed39a7-cf02-4920-9419-49e48d901830", "target_ref": "malware--9c742e22-7d53-4f87-a109-111b136e2684"}, {"type": "malware", "spec_version": "2.1", "id": "malware--89a774a5-1739-4127-8d70-eb45921d6eed", "created": "2026-10-09T15:13:12.185295Z", "modified": "2026-10-09T15:13:12.185295Z", "name": "SpySMS", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7d331b-a30e-4d99-a392-04e1bc1688b8", "created": "2026-10-09T15:13:12.185409Z", "modified": "2026-10-09T15:13:12.185409Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.devspark.securityotp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.185409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--120384ea-7138-460c-b65f-ae6ae5243092", "created": "2026-10-09T15:13:12.185891Z", "modified": "2026-10-09T15:13:12.185891Z", "relationship_type": "indicates", "source_ref": "indicator--3a7d331b-a30e-4d99-a392-04e1bc1688b8", "target_ref": "malware--89a774a5-1739-4127-8d70-eb45921d6eed"}, {"type": "malware", "spec_version": "2.1", "id": "malware--077d3cdd-c83c-4857-b671-7559ecbc7b3f", "created": "2026-10-09T15:13:12.18601Z", "modified": "2026-10-09T15:13:12.18601Z", "name": "DroidWatcher", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c896907-924c-4282-b3c1-962ab8bda5cb", "created": "2026-10-09T15:13:12.18612Z", "modified": "2026-10-09T15:13:12.18612Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.droidwatcher']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.18612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f929851-5d26-4fde-bd94-a8a69a132b1e", "created": "2026-10-09T15:13:12.186688Z", "modified": "2026-10-09T15:13:12.186688Z", "relationship_type": "indicates", "source_ref": "indicator--9c896907-924c-4282-b3c1-962ab8bda5cb", "target_ref": "malware--077d3cdd-c83c-4857-b671-7559ecbc7b3f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--42f3bed8-0eeb-4846-b5a7-3c979a8a985f", "created": "2026-10-09T15:13:12.18681Z", "modified": "2026-10-09T15:13:12.18681Z", "name": "Spyzier", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca2e9ea-38c6-4ba0-a6ae-0aba26bf6cd4", "created": "2026-10-09T15:13:12.18692Z", "modified": "2026-10-09T15:13:12.18692Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rana_aditya.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.18692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f04a77e8-d336-4e56-bff2-f482db1b28f1", "created": "2026-10-09T15:13:12.187394Z", "modified": "2026-10-09T15:13:12.187394Z", "relationship_type": "indicates", "source_ref": "indicator--fca2e9ea-38c6-4ba0-a6ae-0aba26bf6cd4", "target_ref": "malware--42f3bed8-0eeb-4846-b5a7-3c979a8a985f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--535d572d-5246-49b2-8fb9-1a0596a60fad", "created": "2026-10-09T15:13:12.187516Z", "modified": "2026-10-09T15:13:12.187516Z", "name": "AndroidSpyApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ccb377-c637-495b-9e1d-5efea740391a", "created": "2026-10-09T15:13:12.187632Z", "modified": "2026-10-09T15:13:12.187632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='me.hawkshaw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.187632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d805d1ae-e8e8-4ddf-974a-e3c8ba05c462", "created": "2026-10-09T15:13:12.188076Z", "modified": "2026-10-09T15:13:12.188076Z", "relationship_type": "indicates", "source_ref": "indicator--96ccb377-c637-495b-9e1d-5efea740391a", "target_ref": "malware--535d572d-5246-49b2-8fb9-1a0596a60fad"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5c6a54f5-37eb-42d6-8ed2-1172035e5ed0", "created": "2026-10-09T15:13:12.188192Z", "modified": "2026-10-09T15:13:12.188192Z", "name": "SpyDroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaf2104-ae05-4ce7-9ab6-6a17348f45c5", "created": "2026-10-09T15:13:12.188316Z", "modified": "2026-10-09T15:13:12.188316Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.majorkernelpanic.spydroid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.188316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4be13b18-c839-4ae5-a123-7063115965aa", "created": "2026-10-09T15:13:12.188785Z", "modified": "2026-10-09T15:13:12.188785Z", "relationship_type": "indicates", "source_ref": "indicator--8aaf2104-ae05-4ce7-9ab6-6a17348f45c5", "target_ref": "malware--5c6a54f5-37eb-42d6-8ed2-1172035e5ed0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4fe5091f-b1d2-443b-84bd-dc4bf642906c", "created": "2026-10-09T15:13:12.188907Z", "modified": "2026-10-09T15:13:12.188907Z", "name": "SpyAppGhazi", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59401adc-6ac1-4567-99ed-5d9fcf7574b3", "created": "2026-10-09T15:13:12.189017Z", "modified": "2026-10-09T15:13:12.189017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.ghazi.sms']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.189017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--327a5394-1f29-4dca-a4c9-0ed3e2247558", "created": "2026-10-09T15:13:12.189491Z", "modified": "2026-10-09T15:13:12.189491Z", "relationship_type": "indicates", "source_ref": "indicator--59401adc-6ac1-4567-99ed-5d9fcf7574b3", "target_ref": "malware--4fe5091f-b1d2-443b-84bd-dc4bf642906c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4fe6ea0d-b91b-43de-b57a-0399cd0ecc10", "created": "2026-10-09T15:13:12.189609Z", "modified": "2026-10-09T15:13:12.189609Z", "name": "Curiosus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec90c98f-53b0-45e8-a9bf-79d4f5bfe730", "created": "2026-10-09T15:13:12.18972Z", "modified": "2026-10-09T15:13:12.18972Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hyadesinc.curiosus']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.18972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d768384-74e0-44e3-b8c3-c66b35971326", "created": "2026-10-09T15:13:12.190178Z", "modified": "2026-10-09T15:13:12.190178Z", "relationship_type": "indicates", "source_ref": "indicator--ec90c98f-53b0-45e8-a9bf-79d4f5bfe730", "target_ref": "malware--4fe6ea0d-b91b-43de-b57a-0399cd0ecc10"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8b1da960-5a8b-460f-b8d9-985ecea4adc6", "created": "2026-10-09T15:13:12.190306Z", "modified": "2026-10-09T15:13:12.190306Z", "name": "LoveSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5950d9d8-06a3-444c-ac36-541218935e3c", "created": "2026-10-09T15:13:12.190425Z", "modified": "2026-10-09T15:13:12.190425Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.lovespy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.190425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33ddeef4-235c-4d5a-afb0-a207dfcf9d3f", "created": "2026-10-09T15:13:12.190885Z", "modified": "2026-10-09T15:13:12.190885Z", "relationship_type": "indicates", "source_ref": "indicator--5950d9d8-06a3-444c-ac36-541218935e3c", "target_ref": "malware--8b1da960-5a8b-460f-b8d9-985ecea4adc6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--23a0daeb-314b-4c7c-9530-d6d7980aad8e", "created": "2026-10-09T15:13:12.191001Z", "modified": "2026-10-09T15:13:12.191001Z", "name": "ISpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5f3112-6beb-4a09-80b3-25e720ef84b7", "created": "2026-10-09T15:13:12.19111Z", "modified": "2026-10-09T15:13:12.19111Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='edu.virginia.cs.cs4720.ispy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.19111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fc961b8-0024-4761-a5ce-61340f7153f0", "created": "2026-10-09T15:13:12.19158Z", "modified": "2026-10-09T15:13:12.19158Z", "relationship_type": "indicates", "source_ref": "indicator--ec5f3112-6beb-4a09-80b3-25e720ef84b7", "target_ref": "malware--23a0daeb-314b-4c7c-9530-d6d7980aad8e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7aad4de9-a7c1-4f9e-a5b2-e7a2a3b6b079", "created": "2026-10-09T15:13:12.191705Z", "modified": "2026-10-09T15:13:12.191705Z", "name": "PatanSpyApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27754bb-6eb1-48df-9242-af6f583c48be", "created": "2026-10-09T15:13:12.191815Z", "modified": "2026-10-09T15:13:12.191815Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='in.spyapp.patanjali.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.191815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0eea5a20-78ed-49ef-9ee9-4e4c926a91c1", "created": "2026-10-09T15:13:12.192383Z", "modified": "2026-10-09T15:13:12.192383Z", "relationship_type": "indicates", "source_ref": "indicator--e27754bb-6eb1-48df-9242-af6f583c48be", "target_ref": "malware--7aad4de9-a7c1-4f9e-a5b2-e7a2a3b6b079"}, {"type": "malware", "spec_version": "2.1", "id": "malware--913bc161-ef43-4226-94a5-7f6a7bfb2eeb", "created": "2026-10-09T15:13:12.19251Z", "modified": "2026-10-09T15:13:12.19251Z", "name": "Dash", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1819add9-f61d-4086-9461-b26ae775f0dc", "created": "2026-10-09T15:13:12.192626Z", "modified": "2026-10-09T15:13:12.192626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.github.muneebwanee.dash']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.192626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d046e446-c08d-471d-8727-96de8b049832", "created": "2026-10-09T15:13:12.193095Z", "modified": "2026-10-09T15:13:12.193095Z", "relationship_type": "indicates", "source_ref": "indicator--1819add9-f61d-4086-9461-b26ae775f0dc", "target_ref": "malware--913bc161-ef43-4226-94a5-7f6a7bfb2eeb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325", "created": "2026-10-09T15:13:12.193214Z", "modified": "2026-10-09T15:13:12.193214Z", "name": "SpyApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e711b-6081-4e54-953d-b4ad80072c65", "created": "2026-10-09T15:13:12.193336Z", "modified": "2026-10-09T15:13:12.193336Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.193336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1d83726-ad82-4631-9259-c21daaf14926", "created": "2026-10-09T15:13:12.193799Z", "modified": "2026-10-09T15:13:12.193799Z", "relationship_type": "indicates", "source_ref": "indicator--712e711b-6081-4e54-953d-b4ad80072c65", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b600c5e-7a51-46fa-a95f-6c328ad51d40", "created": "2026-10-09T15:13:12.193918Z", "modified": "2026-10-09T15:13:12.193918Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.193918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffe08de8-2e81-45e2-93b2-ce1450a298d3", "created": "2026-10-09T15:13:12.194389Z", "modified": "2026-10-09T15:13:12.194389Z", "relationship_type": "indicates", "source_ref": "indicator--0b600c5e-7a51-46fa-a95f-6c328ad51d40", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b43293b-e662-41bd-b5e1-cc518e5c311e", "created": "2026-10-09T15:13:12.194512Z", "modified": "2026-10-09T15:13:12.194512Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.194512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a3eacd8-7299-449f-9a83-c0027589cd6e", "created": "2026-10-09T15:13:12.194976Z", "modified": "2026-10-09T15:13:12.194976Z", "relationship_type": "indicates", "source_ref": "indicator--0b43293b-e662-41bd-b5e1-cc518e5c311e", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cc9b40-0d39-4ff4-a84a-9910597a4909", "created": "2026-10-09T15:13:12.195094Z", "modified": "2026-10-09T15:13:12.195094Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accounts.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.195094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbde80fd-a3ba-456c-a392-66d6cdcdad05", "created": "2026-10-09T15:13:12.195592Z", "modified": "2026-10-09T15:13:12.195592Z", "relationship_type": "indicates", "source_ref": "indicator--41cc9b40-0d39-4ff4-a84a-9910597a4909", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a4bfc80-cd25-4345-b47c-6938920ff2d5", "created": "2026-10-09T15:13:12.195715Z", "modified": "2026-10-09T15:13:12.195715Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accounts.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.195715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5aa906a2-1abc-4999-9c52-abe38839ebeb", "created": "2026-10-09T15:13:12.196188Z", "modified": "2026-10-09T15:13:12.196188Z", "relationship_type": "indicates", "source_ref": "indicator--4a4bfc80-cd25-4345-b47c-6938920ff2d5", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57e0493-7220-40d2-841b-37e3761bb30f", "created": "2026-10-09T15:13:12.196328Z", "modified": "2026-10-09T15:13:12.196328Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='applispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.196328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa4318f6-aa4c-4fb9-95bf-b04ec8a7386b", "created": "2026-10-09T15:13:12.196807Z", "modified": "2026-10-09T15:13:12.196807Z", "relationship_type": "indicates", "source_ref": "indicator--a57e0493-7220-40d2-841b-37e3761bb30f", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba12ae7c-3fa8-4d2d-a7b7-db9be741327b", "created": "2026-10-09T15:13:12.196929Z", "modified": "2026-10-09T15:13:12.196929Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='area.spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.196929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb5bde2c-95ae-425f-8226-65f06eb2850b", "created": "2026-10-09T15:13:12.19742Z", "modified": "2026-10-09T15:13:12.19742Z", "relationship_type": "indicates", "source_ref": "indicator--ba12ae7c-3fa8-4d2d-a7b7-db9be741327b", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e18af7-fe25-4f29-8d9a-439d9d3b53ff", "created": "2026-10-09T15:13:12.19754Z", "modified": "2026-10-09T15:13:12.19754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.19754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--178c13b7-1f13-4a25-9851-6b01cdc91195", "created": "2026-10-09T15:13:12.198098Z", "modified": "2026-10-09T15:13:12.198098Z", "relationship_type": "indicates", "source_ref": "indicator--29e18af7-fe25-4f29-8d9a-439d9d3b53ff", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a027f6a0-20eb-4071-8258-0363a57db32d", "created": "2026-10-09T15:13:12.198218Z", "modified": "2026-10-09T15:13:12.198218Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.198218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfc2e4fb-4ca6-4b6a-913f-0958dcdb51af", "created": "2026-10-09T15:13:12.198693Z", "modified": "2026-10-09T15:13:12.198693Z", "relationship_type": "indicates", "source_ref": "indicator--a027f6a0-20eb-4071-8258-0363a57db32d", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d6b4d1-6e94-4506-9d3e-ca14172bc7d0", "created": "2026-10-09T15:13:12.198812Z", "modified": "2026-10-09T15:13:12.198812Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clienti.securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.198812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cc363da-c2fe-499c-b05f-41ff72f0449f", "created": "2026-10-09T15:13:12.199304Z", "modified": "2026-10-09T15:13:12.199304Z", "relationship_type": "indicates", "source_ref": "indicator--d3d6b4d1-6e94-4506-9d3e-ca14172bc7d0", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6852ce41-b3ec-490d-ad75-84d77375f5c9", "created": "2026-10-09T15:13:12.199426Z", "modified": "2026-10-09T15:13:12.199426Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='compte.applispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.199426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5e029b1-29da-4d14-88b3-ed875ec8e352", "created": "2026-10-09T15:13:12.199898Z", "modified": "2026-10-09T15:13:12.199898Z", "relationship_type": "indicates", "source_ref": "indicator--6852ce41-b3ec-490d-ad75-84d77375f5c9", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726d4f8a-3fae-471f-871d-d33022135031", "created": "2026-10-09T15:13:12.200016Z", "modified": "2026-10-09T15:13:12.200016Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='controllo.spystoreitalia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.200016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c48e3e6e-c39c-45b7-b4dc-7320b3b755f3", "created": "2026-10-09T15:13:12.200515Z", "modified": "2026-10-09T15:13:12.200515Z", "relationship_type": "indicates", "source_ref": "indicator--726d4f8a-3fae-471f-871d-d33022135031", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ef2488-87e2-4942-925d-eae6401c721c", "created": "2026-10-09T15:13:12.200637Z", "modified": "2026-10-09T15:13:12.200637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tel.forensis-lab.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.200637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13fff33c-73ef-404d-b5f9-e419341b5699", "created": "2026-10-09T15:13:12.201112Z", "modified": "2026-10-09T15:13:12.201112Z", "relationship_type": "indicates", "source_ref": "indicator--f9ef2488-87e2-4942-925d-eae6401c721c", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd72aaa9-9e00-48be-9a49-e8dfaf0fa4f7", "created": "2026-10-09T15:13:12.201228Z", "modified": "2026-10-09T15:13:12.201228Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.201228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07f9b2b7-1ac1-483b-baec-1630b818e3ef", "created": "2026-10-09T15:13:12.201717Z", "modified": "2026-10-09T15:13:12.201717Z", "relationship_type": "indicates", "source_ref": "indicator--fd72aaa9-9e00-48be-9a49-e8dfaf0fa4f7", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e56b56-5131-4846-a572-6fcc25464bdd", "created": "2026-10-09T15:13:12.201839Z", "modified": "2026-10-09T15:13:12.201839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='partner.securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.201839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ead6026-8a9f-47aa-881d-48b11d875753", "created": "2026-10-09T15:13:12.202327Z", "modified": "2026-10-09T15:13:12.202327Z", "relationship_type": "indicates", "source_ref": "indicator--e1e56b56-5131-4846-a572-6fcc25464bdd", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b1ec59-070d-4e55-a45f-88a09425c251", "created": "2026-10-09T15:13:12.202451Z", "modified": "2026-10-09T15:13:12.202451Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.202451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--630b9195-66be-4fd7-8641-1e2c1e88714e", "created": "2026-10-09T15:13:12.202915Z", "modified": "2026-10-09T15:13:12.202915Z", "relationship_type": "indicates", "source_ref": "indicator--10b1ec59-070d-4e55-a45f-88a09425c251", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efcd17b-666f-4b1c-9df3-0f143bbd5bb8", "created": "2026-10-09T15:13:12.203044Z", "modified": "2026-10-09T15:13:12.203044Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pin.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.203044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3e67987-15c2-4532-8197-da9fb6cb4eb2", "created": "2026-10-09T15:13:12.203611Z", "modified": "2026-10-09T15:13:12.203611Z", "relationship_type": "indicates", "source_ref": "indicator--7efcd17b-666f-4b1c-9df3-0f143bbd5bb8", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cb6ba8-f44d-47ca-9225-56496d129dfc", "created": "2026-10-09T15:13:12.203739Z", "modified": "2026-10-09T15:13:12.203739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pin.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.203739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b562f919-61fb-45f7-a795-db8d4d725540", "created": "2026-10-09T15:13:12.204204Z", "modified": "2026-10-09T15:13:12.204204Z", "relationship_type": "indicates", "source_ref": "indicator--37cb6ba8-f44d-47ca-9225-56496d129dfc", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dffabd1-1938-4fb0-902c-4732c94d6dc8", "created": "2026-10-09T15:13:12.204339Z", "modified": "2026-10-09T15:13:12.204339Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ro.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.204339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e119b87-a6c4-4c28-bb85-ca1b4d5d0e51", "created": "2026-10-09T15:13:12.204803Z", "modified": "2026-10-09T15:13:12.204803Z", "relationship_type": "indicates", "source_ref": "indicator--8dffabd1-1938-4fb0-902c-4732c94d6dc8", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ae63cb-d89a-41ce-a07d-ee358f742e62", "created": "2026-10-09T15:13:12.204928Z", "modified": "2026-10-09T15:13:12.204928Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='roaccount.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.204928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6d85a3f-0311-4d2c-9958-142a41ed90c4", "created": "2026-10-09T15:13:12.205401Z", "modified": "2026-10-09T15:13:12.205401Z", "relationship_type": "indicates", "source_ref": "indicator--56ae63cb-d89a-41ce-a07d-ee358f742e62", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe72d8f-a753-483b-955a-49b54ad4e5a5", "created": "2026-10-09T15:13:12.205521Z", "modified": "2026-10-09T15:13:12.205521Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.205521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--562218bd-b43b-4fec-8971-96a8aa208ef5", "created": "2026-10-09T15:13:12.205989Z", "modified": "2026-10-09T15:13:12.205989Z", "relationship_type": "indicates", "source_ref": "indicator--0fe72d8f-a753-483b-955a-49b54ad4e5a5", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3412a90f-2c13-478e-910c-f37924477816", "created": "2026-10-09T15:13:12.206106Z", "modified": "2026-10-09T15:13:12.206106Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='server.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.206106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e24a7ff-1c25-4fe1-8603-62c326cf571b", "created": "2026-10-09T15:13:12.206584Z", "modified": "2026-10-09T15:13:12.206584Z", "relationship_type": "indicates", "source_ref": "indicator--3412a90f-2c13-478e-910c-f37924477816", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7685c76-08d5-4890-9604-da64c74e2b2d", "created": "2026-10-09T15:13:12.206704Z", "modified": "2026-10-09T15:13:12.206704Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.206704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a5946a1-540d-412f-945b-c6b31dbb0f94", "created": "2026-10-09T15:13:12.207164Z", "modified": "2026-10-09T15:13:12.207164Z", "relationship_type": "indicates", "source_ref": "indicator--e7685c76-08d5-4890-9604-da64c74e2b2d", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b895006-bc98-4f52-87ef-e09637bed98e", "created": "2026-10-09T15:13:12.207293Z", "modified": "2026-10-09T15:13:12.207293Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.207293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22497f75-c7f2-425c-8c48-fa986842a28b", "created": "2026-10-09T15:13:12.207755Z", "modified": "2026-10-09T15:13:12.207755Z", "relationship_type": "indicates", "source_ref": "indicator--2b895006-bc98-4f52-87ef-e09637bed98e", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6fdc5e-2bfe-48ea-99b3-e32dfb29c7a6", "created": "2026-10-09T15:13:12.207875Z", "modified": "2026-10-09T15:13:12.207875Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.207875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3a9d235-d0dd-4bb1-b1b1-15b89b253ff7", "created": "2026-10-09T15:13:12.208366Z", "modified": "2026-10-09T15:13:12.208366Z", "relationship_type": "indicates", "source_ref": "indicator--ca6fdc5e-2bfe-48ea-99b3-e32dfb29c7a6", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c86db04-a953-48f3-b3b1-a90100f98261", "created": "2026-10-09T15:13:12.20849Z", "modified": "2026-10-09T15:13:12.20849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.20849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55ea3f15-3593-400e-a92f-575b7e570d6d", "created": "2026-10-09T15:13:12.209044Z", "modified": "2026-10-09T15:13:12.209044Z", "relationship_type": "indicates", "source_ref": "indicator--7c86db04-a953-48f3-b3b1-a90100f98261", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7458aed4-796e-42d0-8e7d-2d16a01469f1", "created": "2026-10-09T15:13:12.209163Z", "modified": "2026-10-09T15:13:12.209163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.209163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2620db98-80d2-49f3-820a-fc10d72d233b", "created": "2026-10-09T15:13:12.209636Z", "modified": "2026-10-09T15:13:12.209636Z", "relationship_type": "indicates", "source_ref": "indicator--7458aed4-796e-42d0-8e7d-2d16a01469f1", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15af687-e3f6-4941-a843-e6ec4feac22a", "created": "2026-10-09T15:13:12.209754Z", "modified": "2026-10-09T15:13:12.209754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.209754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9c9c098-e672-4080-9a5e-b2aaa844df6d", "created": "2026-10-09T15:13:12.210214Z", "modified": "2026-10-09T15:13:12.210214Z", "relationship_type": "indicates", "source_ref": "indicator--c15af687-e3f6-4941-a843-e6ec4feac22a", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a43ece7-5671-4aac-8153-621e25fdb375", "created": "2026-10-09T15:13:12.210343Z", "modified": "2026-10-09T15:13:12.210343Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spybrother.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.210343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95c11423-098f-4983-8918-3b1cfa8e68b4", "created": "2026-10-09T15:13:12.210814Z", "modified": "2026-10-09T15:13:12.210814Z", "relationship_type": "indicates", "source_ref": "indicator--0a43ece7-5671-4aac-8153-621e25fdb375", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02415573-b5c2-47ad-96ae-e46d61e940fa", "created": "2026-10-09T15:13:12.210934Z", "modified": "2026-10-09T15:13:12.210934Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sys.spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.210934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b340e87-e1f3-4ae4-85a0-a67bace9cca2", "created": "2026-10-09T15:13:12.211412Z", "modified": "2026-10-09T15:13:12.211412Z", "relationship_type": "indicates", "source_ref": "indicator--02415573-b5c2-47ad-96ae-e46d61e940fa", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bca0e4-d310-42b0-b2ff-74f74688847f", "created": "2026-10-09T15:13:12.211532Z", "modified": "2026-10-09T15:13:12.211532Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.211532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--206cf935-292c-421a-b32f-40b575688d85", "created": "2026-10-09T15:13:12.212002Z", "modified": "2026-10-09T15:13:12.212002Z", "relationship_type": "indicates", "source_ref": "indicator--47bca0e4-d310-42b0-b2ff-74f74688847f", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e5922b-cb13-442f-b67b-b5b37a9993a9", "created": "2026-10-09T15:13:12.212125Z", "modified": "2026-10-09T15:13:12.212125Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.212125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d698942-bbe2-4f9c-b5cd-ff88f3b63a4a", "created": "2026-10-09T15:13:12.212605Z", "modified": "2026-10-09T15:13:12.212605Z", "relationship_type": "indicates", "source_ref": "indicator--d7e5922b-cb13-442f-b67b-b5b37a9993a9", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae07ab2-9e9e-40f6-a174-feeb3d701cfa", "created": "2026-10-09T15:13:12.212725Z", "modified": "2026-10-09T15:13:12.212725Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x.securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.212725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd7b1554-9425-4799-9c11-d507d9a6dc93", "created": "2026-10-09T15:13:12.213192Z", "modified": "2026-10-09T15:13:12.213192Z", "relationship_type": "indicates", "source_ref": "indicator--bae07ab2-9e9e-40f6-a174-feeb3d701cfa", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6fa039-2b94-44ff-9972-385639468ada", "created": "2026-10-09T15:13:12.213321Z", "modified": "2026-10-09T15:13:12.213321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.213321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dbac366-6c01-4cf8-b5be-7f537e328462", "created": "2026-10-09T15:13:12.213787Z", "modified": "2026-10-09T15:13:12.213787Z", "relationship_type": "indicates", "source_ref": "indicator--2c6fa039-2b94-44ff-9972-385639468ada", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fb41db-ed64-4183-a041-08c2d7a118d5", "created": "2026-10-09T15:13:12.213905Z", "modified": "2026-10-09T15:13:12.213905Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.213905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11a8d586-a757-42b5-8a2d-8236cee1e6a0", "created": "2026-10-09T15:13:12.214467Z", "modified": "2026-10-09T15:13:12.214467Z", "relationship_type": "indicates", "source_ref": "indicator--12fb41db-ed64-4183-a041-08c2d7a118d5", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae5cdec-7979-40f0-92b9-f5eedce5702c", "created": "2026-10-09T15:13:12.214592Z", "modified": "2026-10-09T15:13:12.214592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0973b9ac9f3f5623a946581f9ec930b2d238572b46bf1281692fff7d088ba930']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.214592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86554a14-2bed-48c4-9dbb-1f705657205f", "created": "2026-10-09T15:13:12.21525Z", "modified": "2026-10-09T15:13:12.21525Z", "relationship_type": "indicates", "source_ref": "indicator--dae5cdec-7979-40f0-92b9-f5eedce5702c", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dcd4f9-87b0-4101-a535-210c22f0278e", "created": "2026-10-09T15:13:12.215396Z", "modified": "2026-10-09T15:13:12.215396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='989b759d28ac1243048475fecd2df3d2736fb5f2eab4387c4602be9acb55b877']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.215396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--983eb8d4-a2c9-4e89-8a32-3394e183f521", "created": "2026-10-09T15:13:12.215988Z", "modified": "2026-10-09T15:13:12.215988Z", "relationship_type": "indicates", "source_ref": "indicator--b5dcd4f9-87b0-4101-a535-210c22f0278e", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2250872c-19b7-449b-87c9-bb6871e54832", "created": "2026-10-09T15:13:12.216109Z", "modified": "2026-10-09T15:13:12.216109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ab4ff9f8028c02cbb0886922142227732cfe3aaec99af1a5af2ddb43b0fb5a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.216109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71925e79-0c2a-46ba-8e30-1ce23a1f7cf0", "created": "2026-10-09T15:13:12.216707Z", "modified": "2026-10-09T15:13:12.216707Z", "relationship_type": "indicates", "source_ref": "indicator--2250872c-19b7-449b-87c9-bb6871e54832", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae0fcd-4fe7-45aa-abdc-641041843be6", "created": "2026-10-09T15:13:12.21684Z", "modified": "2026-10-09T15:13:12.21684Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d9a085fed94b853da3d5431144021fc7d602641472518c7e17d5cb9be03b64b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.21684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f165f5b-f322-4468-86ce-fd77a60da7bb", "created": "2026-10-09T15:13:12.217441Z", "modified": "2026-10-09T15:13:12.217441Z", "relationship_type": "indicates", "source_ref": "indicator--85ae0fcd-4fe7-45aa-abdc-641041843be6", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78bb7d46-9763-48e8-9d84-c4cdde5047b4", "created": "2026-10-09T15:13:12.217565Z", "modified": "2026-10-09T15:13:12.217565Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.femimesusu.libapasopi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.217565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dbda674-438d-4ef6-9b58-ec0281f589f4", "created": "2026-10-09T15:13:12.218022Z", "modified": "2026-10-09T15:13:12.218022Z", "relationship_type": "indicates", "source_ref": "indicator--78bb7d46-9763-48e8-9d84-c4cdde5047b4", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ab3359-caf3-4b42-bf7c-1e5813230360", "created": "2026-10-09T15:13:12.21814Z", "modified": "2026-10-09T15:13:12.21814Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='38819265668EEAE6AC3C6C80D1A6530EAE99AD0E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.21814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--825ad50f-9e7e-4b7a-92ea-b27f3e2ac80c", "created": "2026-10-09T15:13:12.218697Z", "modified": "2026-10-09T15:13:12.218697Z", "relationship_type": "indicates", "source_ref": "indicator--12ab3359-caf3-4b42-bf7c-1e5813230360", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d55c404-2268-49ff-8565-b2cd2ddd9e41", "created": "2026-10-09T15:13:12.21882Z", "modified": "2026-10-09T15:13:12.21882Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E3620714FB24A45614A456DF1176D482BCD1B032']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.21882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cf5f254-2789-40b9-bc2d-5c0f3c6f2471", "created": "2026-10-09T15:13:12.219373Z", "modified": "2026-10-09T15:13:12.219373Z", "relationship_type": "indicates", "source_ref": "indicator--2d55c404-2268-49ff-8565-b2cd2ddd9e41", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553b1de5-a892-414d-bdfc-91b057cc377f", "created": "2026-10-09T15:13:12.219503Z", "modified": "2026-10-09T15:13:12.219503Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F3E17DFDB98B1F7774A16967FD1D84D3D9D59389']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.219503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--858b7adc-e50b-4520-a80f-619b5bbaff9e", "created": "2026-10-09T15:13:12.220043Z", "modified": "2026-10-09T15:13:12.220043Z", "relationship_type": "indicates", "source_ref": "indicator--553b1de5-a892-414d-bdfc-91b057cc377f", "target_ref": "malware--6952f8c7-25be-4897-8f9d-f38e5cf33325"}, {"type": "malware", "spec_version": "2.1", "id": "malware--29deb219-617a-4886-bedb-39e8c8fc2491", "created": "2026-10-09T15:13:12.220165Z", "modified": "2026-10-09T15:13:12.220165Z", "name": "MySpyApps", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e68e2d2-2baa-4756-a553-0a9a9caed4aa", "created": "2026-10-09T15:13:12.220293Z", "modified": "2026-10-09T15:13:12.220293Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my-spy-a9c92.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.220293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f880282-488f-4266-8cb5-1e9cf68b59a5", "created": "2026-10-09T15:13:12.220895Z", "modified": "2026-10-09T15:13:12.220895Z", "relationship_type": "indicates", "source_ref": "indicator--1e68e2d2-2baa-4756-a553-0a9a9caed4aa", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfff2123-8b64-49bd-b416-a0c7a14daa24", "created": "2026-10-09T15:13:12.22102Z", "modified": "2026-10-09T15:13:12.22102Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='myspyapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.22102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1ac1699-2d08-4cab-851b-a69add928aac", "created": "2026-10-09T15:13:12.2215Z", "modified": "2026-10-09T15:13:12.2215Z", "relationship_type": "indicates", "source_ref": "indicator--cfff2123-8b64-49bd-b416-a0c7a14daa24", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84bce9b-4bd7-4030-bdd4-8ae85e6547e1", "created": "2026-10-09T15:13:12.221624Z", "modified": "2026-10-09T15:13:12.221624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7efa674b2a18fb7a62dea72b133a3f8892b419205852122be3b13f5a9b90f33e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.221624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5dfe68c-bbca-40d5-86ae-99d485083f64", "created": "2026-10-09T15:13:12.222208Z", "modified": "2026-10-09T15:13:12.222208Z", "relationship_type": "indicates", "source_ref": "indicator--b84bce9b-4bd7-4030-bdd4-8ae85e6547e1", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3b0d70-0134-4f73-9097-6118555de130", "created": "2026-10-09T15:13:12.222342Z", "modified": "2026-10-09T15:13:12.222342Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5809066a109718683fa1ffe3abcd0e6c9bd5f613279e081e31bc17e628d9bfba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.222342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ad967ec-6380-48f1-a65c-9ef7e418dcd9", "created": "2026-10-09T15:13:12.222925Z", "modified": "2026-10-09T15:13:12.222925Z", "relationship_type": "indicates", "source_ref": "indicator--2e3b0d70-0134-4f73-9097-6118555de130", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942fd8d9-5b4a-4b12-b508-825302843e0a", "created": "2026-10-09T15:13:12.223044Z", "modified": "2026-10-09T15:13:12.223044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63141fd14148ff8e6bf8f9bde95a84af28f1bec69c94c4d9442972bdffad6c92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.223044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01acf0ea-1c44-4631-b94d-6849b66d8aad", "created": "2026-10-09T15:13:12.223641Z", "modified": "2026-10-09T15:13:12.223641Z", "relationship_type": "indicates", "source_ref": "indicator--942fd8d9-5b4a-4b12-b508-825302843e0a", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef82f71-a7d9-410f-8310-7c088d50ee24", "created": "2026-10-09T15:13:12.223768Z", "modified": "2026-10-09T15:13:12.223768Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.my.spy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.223768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03ce7455-2e12-4afd-a391-1e8ae244f4d6", "created": "2026-10-09T15:13:12.224231Z", "modified": "2026-10-09T15:13:12.224231Z", "relationship_type": "indicates", "source_ref": "indicator--5ef82f71-a7d9-410f-8310-7c088d50ee24", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561f56f3-92b8-4606-ae3c-7248812f2660", "created": "2026-10-09T15:13:12.224363Z", "modified": "2026-10-09T15:13:12.224363Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CCCD74B31E53685BFA5A23AD0AE020AF74689085']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.224363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d9d96f1-8463-42e5-be38-140e231c2a44", "created": "2026-10-09T15:13:12.224901Z", "modified": "2026-10-09T15:13:12.224901Z", "relationship_type": "indicates", "source_ref": "indicator--561f56f3-92b8-4606-ae3c-7248812f2660", "target_ref": "malware--29deb219-617a-4886-bedb-39e8c8fc2491"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d14988f2-8401-4b23-8a71-5030e85edaea", "created": "2026-10-09T15:13:12.225022Z", "modified": "2026-10-09T15:13:12.225022Z", "name": "OneSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b2771e-d32b-4727-9e9f-3a12f067967c", "created": "2026-10-09T15:13:12.225145Z", "modified": "2026-10-09T15:13:12.225145Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.cp.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.225145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b13e25e-0133-4d48-956a-26f5dc788a35", "created": "2026-10-09T15:13:12.225637Z", "modified": "2026-10-09T15:13:12.225637Z", "relationship_type": "indicates", "source_ref": "indicator--03b2771e-d32b-4727-9e9f-3a12f067967c", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858a3fdb-1531-4488-8a04-569d1b2bdfb6", "created": "2026-10-09T15:13:12.225763Z", "modified": "2026-10-09T15:13:12.225763Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onespy-in-196211.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.225763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32770aba-760b-4dca-88a9-c03d17f3c508", "created": "2026-10-09T15:13:12.226261Z", "modified": "2026-10-09T15:13:12.226261Z", "relationship_type": "indicates", "source_ref": "indicator--858a3fdb-1531-4488-8a04-569d1b2bdfb6", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bcff0d8-cf8a-4ff8-8d54-06a5d7a3a936", "created": "2026-10-09T15:13:12.226395Z", "modified": "2026-10-09T15:13:12.226395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.226395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4997b409-7ac7-4e18-8e21-2e8a0a41408b", "created": "2026-10-09T15:13:12.227253Z", "modified": "2026-10-09T15:13:12.227253Z", "relationship_type": "indicates", "source_ref": "indicator--7bcff0d8-cf8a-4ff8-8d54-06a5d7a3a936", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749cda97-8273-4537-aff8-31a017df251c", "created": "2026-10-09T15:13:12.227397Z", "modified": "2026-10-09T15:13:12.227397Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='web.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.227397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54424be7-44c9-4d90-b583-5e9a426b771e", "created": "2026-10-09T15:13:12.227886Z", "modified": "2026-10-09T15:13:12.227886Z", "relationship_type": "indicates", "source_ref": "indicator--749cda97-8273-4537-aff8-31a017df251c", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b31a04f-17ce-44be-8c3e-990a5eb7cde5", "created": "2026-10-09T15:13:12.228008Z", "modified": "2026-10-09T15:13:12.228008Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sse.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.228008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17f31a4f-9b0e-409c-8659-340567593b2c", "created": "2026-10-09T15:13:12.228498Z", "modified": "2026-10-09T15:13:12.228498Z", "relationship_type": "indicates", "source_ref": "indicator--5b31a04f-17ce-44be-8c3e-990a5eb7cde5", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c6e803-8a2d-4084-b0cf-f286712e536b", "created": "2026-10-09T15:13:12.228622Z", "modified": "2026-10-09T15:13:12.228622Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.228622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3e3ef6b-dd28-421f-ae91-5862828114cd", "created": "2026-10-09T15:13:12.229094Z", "modified": "2026-10-09T15:13:12.229094Z", "relationship_type": "indicates", "source_ref": "indicator--19c6e803-8a2d-4084-b0cf-f286712e536b", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b218ba3-9a6b-40b0-97bf-6c669bba14c9", "created": "2026-10-09T15:13:12.229212Z", "modified": "2026-10-09T15:13:12.229212Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ap.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.229212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c3fc6f1-a1ce-4f78-a0f6-489f671fb26d", "created": "2026-10-09T15:13:12.229705Z", "modified": "2026-10-09T15:13:12.229705Z", "relationship_type": "indicates", "source_ref": "indicator--2b218ba3-9a6b-40b0-97bf-6c669bba14c9", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133b5654-8a91-4638-8ce1-cb2889ecd846", "created": "2026-10-09T15:13:12.229829Z", "modified": "2026-10-09T15:13:12.229829Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cockpit.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.229829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20a31a1e-59db-4f79-8fb8-5d6284450682", "created": "2026-10-09T15:13:12.230318Z", "modified": "2026-10-09T15:13:12.230318Z", "relationship_type": "indicates", "source_ref": "indicator--133b5654-8a91-4638-8ce1-cb2889ecd846", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4f3af4-9597-481f-9b64-85cdeee06c6a", "created": "2026-10-09T15:13:12.23044Z", "modified": "2026-10-09T15:13:12.23044Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.23044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9aad93f-2b0b-47f7-9101-215de633dfa0", "created": "2026-10-09T15:13:12.230904Z", "modified": "2026-10-09T15:13:12.230904Z", "relationship_type": "indicates", "source_ref": "indicator--3a4f3af4-9597-481f-9b64-85cdeee06c6a", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61cf657-5c94-45da-9068-0fdd196969f3", "created": "2026-10-09T15:13:12.23102Z", "modified": "2026-10-09T15:13:12.23102Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cloud.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.23102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05b650f3-9490-49c6-8dcd-8851c7f06a23", "created": "2026-10-09T15:13:12.231509Z", "modified": "2026-10-09T15:13:12.231509Z", "relationship_type": "indicates", "source_ref": "indicator--f61cf657-5c94-45da-9068-0fdd196969f3", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a00ae6-3b72-4804-8c27-59b007b1d76b", "created": "2026-10-09T15:13:12.231629Z", "modified": "2026-10-09T15:13:12.231629Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.231629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24b4e78d-ee22-4c7f-94c4-2c19c8eb0edf", "created": "2026-10-09T15:13:12.232103Z", "modified": "2026-10-09T15:13:12.232103Z", "relationship_type": "indicates", "source_ref": "indicator--c6a00ae6-3b72-4804-8c27-59b007b1d76b", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1116d951-c3ee-4248-adba-b6e2a86bef40", "created": "2026-10-09T15:13:12.23222Z", "modified": "2026-10-09T15:13:12.23222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.23222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b9a593a-3fc5-406b-b719-a0817158a4b8", "created": "2026-10-09T15:13:12.232794Z", "modified": "2026-10-09T15:13:12.232794Z", "relationship_type": "indicates", "source_ref": "indicator--1116d951-c3ee-4248-adba-b6e2a86bef40", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ad398d-4aa1-4eb7-b5c1-577ff07f96f5", "created": "2026-10-09T15:13:12.232921Z", "modified": "2026-10-09T15:13:12.232921Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.232921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65e545e7-c3b3-4e34-a6af-28f8b30ef093", "created": "2026-10-09T15:13:12.233403Z", "modified": "2026-10-09T15:13:12.233403Z", "relationship_type": "indicates", "source_ref": "indicator--e4ad398d-4aa1-4eb7-b5c1-577ff07f96f5", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5a1509-ce73-43d9-8c19-bc5273a95d73", "created": "2026-10-09T15:13:12.233527Z", "modified": "2026-10-09T15:13:12.233527Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pma-234fsfsddfsdfds09.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.233527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c375e66-c8f1-4313-9b30-8d08e81b7ac5", "created": "2026-10-09T15:13:12.234027Z", "modified": "2026-10-09T15:13:12.234027Z", "relationship_type": "indicates", "source_ref": "indicator--9f5a1509-ce73-43d9-8c19-bc5273a95d73", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a01010a7-86df-4051-8308-4e853f2032c2", "created": "2026-10-09T15:13:12.234148Z", "modified": "2026-10-09T15:13:12.234148Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='send.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.234148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97f6ac01-9649-4315-8904-a5548184ea5d", "created": "2026-10-09T15:13:12.23463Z", "modified": "2026-10-09T15:13:12.23463Z", "relationship_type": "indicates", "source_ref": "indicator--a01010a7-86df-4051-8308-4e853f2032c2", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db5ad2f-d52c-4b78-897c-1c1ad848ab28", "created": "2026-10-09T15:13:12.234751Z", "modified": "2026-10-09T15:13:12.234751Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='send.onespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.234751Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f78ba3f0-18be-41b4-9387-f7a2e240dc07", "created": "2026-10-09T15:13:12.235216Z", "modified": "2026-10-09T15:13:12.235216Z", "relationship_type": "indicates", "source_ref": "indicator--9db5ad2f-d52c-4b78-897c-1c1ad848ab28", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aeefc6a-c60d-4962-8cfd-a3561189652a", "created": "2026-10-09T15:13:12.235344Z", "modified": "2026-10-09T15:13:12.235344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='su.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.235344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--789adb4c-1181-4742-8560-d0b82bffa6b1", "created": "2026-10-09T15:13:12.235812Z", "modified": "2026-10-09T15:13:12.235812Z", "relationship_type": "indicates", "source_ref": "indicator--4aeefc6a-c60d-4962-8cfd-a3561189652a", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37260fb-9556-4ef9-aa2c-700f7e717d5e", "created": "2026-10-09T15:13:12.235935Z", "modified": "2026-10-09T15:13:12.235935Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='superuser.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.235935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71d4051c-1527-46cf-98f9-4a5f4883a0f2", "created": "2026-10-09T15:13:12.236426Z", "modified": "2026-10-09T15:13:12.236426Z", "relationship_type": "indicates", "source_ref": "indicator--e37260fb-9556-4ef9-aa2c-700f7e717d5e", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604e2aed-7cb4-440a-8a38-2fdb89a8f75e", "created": "2026-10-09T15:13:12.236543Z", "modified": "2026-10-09T15:13:12.236543Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.send.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.236543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58a5d0ea-72da-461c-b464-d3c633f48c3b", "created": "2026-10-09T15:13:12.237021Z", "modified": "2026-10-09T15:13:12.237021Z", "relationship_type": "indicates", "source_ref": "indicator--604e2aed-7cb4-440a-8a38-2fdb89a8f75e", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f92dfa-bcc2-4fe3-9bc8-1969532bdc5c", "created": "2026-10-09T15:13:12.237138Z", "modified": "2026-10-09T15:13:12.237138Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='billing.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.237138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a44d3480-e048-47ac-be4c-5780abd9eeb9", "created": "2026-10-09T15:13:12.237633Z", "modified": "2026-10-09T15:13:12.237633Z", "relationship_type": "indicates", "source_ref": "indicator--d6f92dfa-bcc2-4fe3-9bc8-1969532bdc5c", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b24f308-9548-4d01-9af5-24fdf471c147", "created": "2026-10-09T15:13:12.237754Z", "modified": "2026-10-09T15:13:12.237754Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onespy-in-d.s3.eu-central-1.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.237754Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7fa64ea-7f9f-478b-828e-805c06823d5d", "created": "2026-10-09T15:13:12.238258Z", "modified": "2026-10-09T15:13:12.238258Z", "relationship_type": "indicates", "source_ref": "indicator--7b24f308-9548-4d01-9af5-24fdf471c147", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef80ef68-fdd8-4ec0-b273-7da51e80a364", "created": "2026-10-09T15:13:12.238394Z", "modified": "2026-10-09T15:13:12.238394Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-apps.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.238394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa51df3f-b0d4-41fc-937d-c568c84db269", "created": "2026-10-09T15:13:12.238988Z", "modified": "2026-10-09T15:13:12.238988Z", "relationship_type": "indicates", "source_ref": "indicator--ef80ef68-fdd8-4ec0-b273-7da51e80a364", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77fac8f-9c74-47d0-8362-c045adbb3c5d", "created": "2026-10-09T15:13:12.23911Z", "modified": "2026-10-09T15:13:12.23911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4208ab96617742bde0a508cfe53ee6ebaa68ea6c68153c73dd4b58bc7d10d4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.23911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cc7f66f-b5c2-4b80-8f41-8e9371e49e5b", "created": "2026-10-09T15:13:12.239717Z", "modified": "2026-10-09T15:13:12.239717Z", "relationship_type": "indicates", "source_ref": "indicator--d77fac8f-9c74-47d0-8362-c045adbb3c5d", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63722f3d-0c88-468f-894d-ac3f032838ea", "created": "2026-10-09T15:13:12.239842Z", "modified": "2026-10-09T15:13:12.239842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b236ec0502fc570bbba386c8f6f19632ccf2d30164c030fd3d86fa230ecef316']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.239842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eca4c2c0-b97f-4b4f-8e08-66b0471c3b23", "created": "2026-10-09T15:13:12.240441Z", "modified": "2026-10-09T15:13:12.240441Z", "relationship_type": "indicates", "source_ref": "indicator--63722f3d-0c88-468f-894d-ac3f032838ea", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df9f011-c268-4aa1-95eb-b0a0e5f508ce", "created": "2026-10-09T15:13:12.240565Z", "modified": "2026-10-09T15:13:12.240565Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34a5ac46eb4168e04ea8c831c0ca9767242f0a4c1e95f9b33424a84b3492e1fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.240565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a592353-7a6e-47e9-aae2-b7413c4e544c", "created": "2026-10-09T15:13:12.241154Z", "modified": "2026-10-09T15:13:12.241154Z", "relationship_type": "indicates", "source_ref": "indicator--7df9f011-c268-4aa1-95eb-b0a0e5f508ce", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b991f4-cb18-452b-a05d-42fc2a22f1b5", "created": "2026-10-09T15:13:12.241291Z", "modified": "2026-10-09T15:13:12.241291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='266eb1ee254175bc2b1f50f0e2d5d15fb5cd91502dcfc8a44f85c5d7a72a17e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.241291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f5302e2-4239-45fc-b174-84879bf30a2f", "created": "2026-10-09T15:13:12.241881Z", "modified": "2026-10-09T15:13:12.241881Z", "relationship_type": "indicates", "source_ref": "indicator--89b991f4-cb18-452b-a05d-42fc2a22f1b5", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddb235d-f73e-44f5-b97d-f291386671d9", "created": "2026-10-09T15:13:12.242002Z", "modified": "2026-10-09T15:13:12.242002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='917e29ff91324a6c3630f0eb392a6d1a5c394d7112b35ef29e7cc0269e4c1445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.242002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cf530e1-9ee4-41c9-9142-e09b6025ac30", "created": "2026-10-09T15:13:12.242603Z", "modified": "2026-10-09T15:13:12.242603Z", "relationship_type": "indicates", "source_ref": "indicator--0ddb235d-f73e-44f5-b97d-f291386671d9", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5f48b8-5d3c-46ab-925b-3bb4896020a7", "created": "2026-10-09T15:13:12.24273Z", "modified": "2026-10-09T15:13:12.24273Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72590b59664bf215bd407f46b5296cdd33db7721a77f5e80d23f61b73ce984d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.24273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48a31278-5763-417f-aad1-63a449d56674", "created": "2026-10-09T15:13:12.243338Z", "modified": "2026-10-09T15:13:12.243338Z", "relationship_type": "indicates", "source_ref": "indicator--fd5f48b8-5d3c-46ab-925b-3bb4896020a7", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9872174-fa65-4f2c-8e1d-01439fea0dba", "created": "2026-10-09T15:13:12.243459Z", "modified": "2026-10-09T15:13:12.243459Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.system.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.243459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c0a8e04-ebb3-4f9b-9752-f772d1da28d6", "created": "2026-10-09T15:13:12.243919Z", "modified": "2026-10-09T15:13:12.243919Z", "relationship_type": "indicates", "source_ref": "indicator--a9872174-fa65-4f2c-8e1d-01439fea0dba", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f4380e-a0d0-419b-a1e4-358c44b608f5", "created": "2026-10-09T15:13:12.244036Z", "modified": "2026-10-09T15:13:12.244036Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.settings.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.244036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1856cb52-a76a-43c5-a994-dc187d115b30", "created": "2026-10-09T15:13:12.244609Z", "modified": "2026-10-09T15:13:12.244609Z", "relationship_type": "indicates", "source_ref": "indicator--98f4380e-a0d0-419b-a1e4-358c44b608f5", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd9d259-50e9-4643-a3a7-b6feb9f9d8f7", "created": "2026-10-09T15:13:12.244736Z", "modified": "2026-10-09T15:13:12.244736Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='seC.fqjx.sqBB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.244736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dde3bc6-b074-4e85-824d-476da6dcc8e6", "created": "2026-10-09T15:13:12.245188Z", "modified": "2026-10-09T15:13:12.245188Z", "relationship_type": "indicates", "source_ref": "indicator--2bd9d259-50e9-4643-a3a7-b6feb9f9d8f7", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7cb99d-1d46-464f-8002-6315fd743a94", "created": "2026-10-09T15:13:12.245319Z", "modified": "2026-10-09T15:13:12.245319Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qwertyuiop.asdfghjkl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.245319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f63ba3f-4093-4ef8-bd5e-216ecbe0a959", "created": "2026-10-09T15:13:12.245789Z", "modified": "2026-10-09T15:13:12.245789Z", "relationship_type": "indicates", "source_ref": "indicator--3e7cb99d-1d46-464f-8002-6315fd743a94", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767cda67-28f0-4740-a898-15a9cb469957", "created": "2026-10-09T15:13:12.24591Z", "modified": "2026-10-09T15:13:12.24591Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E458DC7CD8928A41865F502A884F0D51309E0BEF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.24591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3b34ac6-fb31-41fb-af62-d84328c8f24c", "created": "2026-10-09T15:13:12.246457Z", "modified": "2026-10-09T15:13:12.246457Z", "relationship_type": "indicates", "source_ref": "indicator--767cda67-28f0-4740-a898-15a9cb469957", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8654808e-e33c-42e2-858c-30ea8dec32bf", "created": "2026-10-09T15:13:12.246578Z", "modified": "2026-10-09T15:13:12.246578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E7D395DF3B8077C733D9BE67D841FDF271F49406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.246578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c67dfdbc-4fd4-4316-92db-5b3c02f9d870", "created": "2026-10-09T15:13:12.247115Z", "modified": "2026-10-09T15:13:12.247115Z", "relationship_type": "indicates", "source_ref": "indicator--8654808e-e33c-42e2-858c-30ea8dec32bf", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449c000d-16fc-4d7a-98f9-46902eab1760", "created": "2026-10-09T15:13:12.247231Z", "modified": "2026-10-09T15:13:12.247231Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0FB6643902E891C230F6E6662083442EEA1F16CE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.247231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd09d9ed-f787-418e-8d58-8a5240ccfb8b", "created": "2026-10-09T15:13:12.247784Z", "modified": "2026-10-09T15:13:12.247784Z", "relationship_type": "indicates", "source_ref": "indicator--449c000d-16fc-4d7a-98f9-46902eab1760", "target_ref": "malware--d14988f2-8401-4b23-8a71-5030e85edaea"}, {"type": "malware", "spec_version": "2.1", "id": "malware--82350776-75b5-4498-8135-920de02aedbe", "created": "2026-10-09T15:13:12.247904Z", "modified": "2026-10-09T15:13:12.247904Z", "name": "Android007", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d30562-e06c-40be-bc9d-85a7c0b35210", "created": "2026-10-09T15:13:12.248019Z", "modified": "2026-10-09T15:13:12.248019Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android007.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.248019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f60c1808-45f6-480b-b8f4-f832a968da99", "created": "2026-10-09T15:13:12.2485Z", "modified": "2026-10-09T15:13:12.2485Z", "relationship_type": "indicates", "source_ref": "indicator--79d30562-e06c-40be-bc9d-85a7c0b35210", "target_ref": "malware--82350776-75b5-4498-8135-920de02aedbe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46ea0e8-37da-4abd-a3b1-d97454b72123", "created": "2026-10-09T15:13:12.248621Z", "modified": "2026-10-09T15:13:12.248621Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.android007.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.248621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f7fb199-8f1e-419e-8f87-25eafd764e66", "created": "2026-10-09T15:13:12.24909Z", "modified": "2026-10-09T15:13:12.24909Z", "relationship_type": "indicates", "source_ref": "indicator--a46ea0e8-37da-4abd-a3b1-d97454b72123", "target_ref": "malware--82350776-75b5-4498-8135-920de02aedbe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfea35da-43a4-42ac-a8b6-1c9ded269725", "created": "2026-10-09T15:13:12.249213Z", "modified": "2026-10-09T15:13:12.249213Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.android007.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.249213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--359432fa-6b0f-492f-a920-0b602e685361", "created": "2026-10-09T15:13:12.249701Z", "modified": "2026-10-09T15:13:12.249701Z", "relationship_type": "indicates", "source_ref": "indicator--bfea35da-43a4-42ac-a8b6-1c9ded269725", "target_ref": "malware--82350776-75b5-4498-8135-920de02aedbe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b97b82-6187-42e6-ae5d-0b97df866af9", "created": "2026-10-09T15:13:12.249816Z", "modified": "2026-10-09T15:13:12.249816Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spybunker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.249816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c6a13fa-59f5-4ab3-851b-2b96be4efb44", "created": "2026-10-09T15:13:12.250394Z", "modified": "2026-10-09T15:13:12.250394Z", "relationship_type": "indicates", "source_ref": "indicator--21b97b82-6187-42e6-ae5d-0b97df866af9", "target_ref": "malware--82350776-75b5-4498-8135-920de02aedbe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1436a39-a0c7-4e61-bb02-9ee6f2148cb2", "created": "2026-10-09T15:13:12.250516Z", "modified": "2026-10-09T15:13:12.250516Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spybunker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.250516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25d1b529-0c84-40fb-82fa-75439b18bbf3", "created": "2026-10-09T15:13:12.25099Z", "modified": "2026-10-09T15:13:12.25099Z", "relationship_type": "indicates", "source_ref": "indicator--d1436a39-a0c7-4e61-bb02-9ee6f2148cb2", "target_ref": "malware--82350776-75b5-4498-8135-920de02aedbe"}, {"type": "malware", "spec_version": "2.1", "id": "malware--25a7679e-b0d4-4e50-85eb-e6427e689b21", "created": "2026-10-09T15:13:12.251109Z", "modified": "2026-10-09T15:13:12.251109Z", "name": "RioSPY", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98b0d2e-d9e3-44e0-a6e3-854a001bdb69", "created": "2026-10-09T15:13:12.251221Z", "modified": "2026-10-09T15:13:12.251221Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.riospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.251221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eaa0b2f-8781-40f6-8ca0-cdb4e82e2c5f", "created": "2026-10-09T15:13:12.251706Z", "modified": "2026-10-09T15:13:12.251706Z", "relationship_type": "indicates", "source_ref": "indicator--c98b0d2e-d9e3-44e0-a6e3-854a001bdb69", "target_ref": "malware--25a7679e-b0d4-4e50-85eb-e6427e689b21"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453f8d7c-981a-41fc-b4f4-3389f0f5c318", "created": "2026-10-09T15:13:12.251825Z", "modified": "2026-10-09T15:13:12.251825Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='riospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.251825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63520583-37af-45ea-bbbe-02f5777eca1f", "created": "2026-10-09T15:13:12.252303Z", "modified": "2026-10-09T15:13:12.252303Z", "relationship_type": "indicates", "source_ref": "indicator--453f8d7c-981a-41fc-b4f4-3389f0f5c318", "target_ref": "malware--25a7679e-b0d4-4e50-85eb-e6427e689b21"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e", "created": "2026-10-09T15:13:12.252425Z", "modified": "2026-10-09T15:13:12.252425Z", "name": "WheresMyDroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce52c36-9004-44b3-8b06-104764689efa", "created": "2026-10-09T15:13:12.252537Z", "modified": "2026-10-09T15:13:12.252537Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wmdcommander.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.252537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f186dadf-fef3-4829-9946-9a909d6c7fef", "created": "2026-10-09T15:13:12.25302Z", "modified": "2026-10-09T15:13:12.25302Z", "relationship_type": "indicates", "source_ref": "indicator--6ce52c36-9004-44b3-8b06-104764689efa", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6e8010-0945-41c7-b996-34b8c146dae7", "created": "2026-10-09T15:13:12.253137Z", "modified": "2026-10-09T15:13:12.253137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wheresmydroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.253137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c60119c-737f-49bf-9a5e-295aa7f72896", "created": "2026-10-09T15:13:12.253627Z", "modified": "2026-10-09T15:13:12.253627Z", "relationship_type": "indicates", "source_ref": "indicator--db6e8010-0945-41c7-b996-34b8c146dae7", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4945540e-a51f-4a36-ac07-29d27d319c55", "created": "2026-10-09T15:13:12.253747Z", "modified": "2026-10-09T15:13:12.253747Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.wheresmydroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.253747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f5fde94-3ea7-4787-b6f4-b3aab505eefb", "created": "2026-10-09T15:13:12.254225Z", "modified": "2026-10-09T15:13:12.254225Z", "relationship_type": "indicates", "source_ref": "indicator--4945540e-a51f-4a36-ac07-29d27d319c55", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef71997-d495-400c-94c6-f99623ed38d4", "created": "2026-10-09T15:13:12.254356Z", "modified": "2026-10-09T15:13:12.254356Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wmdcommander.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.254356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--403e8585-515f-4527-a1a0-1d0a7ba08d93", "created": "2026-10-09T15:13:12.254843Z", "modified": "2026-10-09T15:13:12.254843Z", "relationship_type": "indicates", "source_ref": "indicator--fef71997-d495-400c-94c6-f99623ed38d4", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45caf957-f531-487c-b9b0-335f77fd3ba3", "created": "2026-10-09T15:13:12.254961Z", "modified": "2026-10-09T15:13:12.254961Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.254961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c16e8e62-3179-43a2-a935-8d43cae5de9b", "created": "2026-10-09T15:13:12.255555Z", "modified": "2026-10-09T15:13:12.255555Z", "relationship_type": "indicates", "source_ref": "indicator--45caf957-f531-487c-b9b0-335f77fd3ba3", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862714c4-876f-4d55-9712-2fa9314089e9", "created": "2026-10-09T15:13:12.255676Z", "modified": "2026-10-09T15:13:12.255676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='784d9b9a88a2ce953b5bf25873af3bf3758198dd4cbfa3f51b06e5ab98a9b2f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.255676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74a6dd8f-236d-4661-9d6b-ccf8f263bce9", "created": "2026-10-09T15:13:12.256368Z", "modified": "2026-10-09T15:13:12.256368Z", "relationship_type": "indicates", "source_ref": "indicator--862714c4-876f-4d55-9712-2fa9314089e9", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725bd878-a701-4af0-89df-8376914c8214", "created": "2026-10-09T15:13:12.256498Z", "modified": "2026-10-09T15:13:12.256498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.256498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97869532-1225-4f9f-8758-59a7463c1c15", "created": "2026-10-09T15:13:12.257085Z", "modified": "2026-10-09T15:13:12.257085Z", "relationship_type": "indicates", "source_ref": "indicator--725bd878-a701-4af0-89df-8376914c8214", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6abc23-cf0f-4879-bb6a-93f6128cad85", "created": "2026-10-09T15:13:12.257207Z", "modified": "2026-10-09T15:13:12.257207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.alienmanfc6.wheresmyandroid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.257207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeaea33e-d8b0-4c3e-98b0-058fa4dd2490", "created": "2026-10-09T15:13:12.257693Z", "modified": "2026-10-09T15:13:12.257693Z", "relationship_type": "indicates", "source_ref": "indicator--7d6abc23-cf0f-4879-bb6a-93f6128cad85", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfda0316-7e15-4c09-8bf6-130b27554a58", "created": "2026-10-09T15:13:12.257816Z", "modified": "2026-10-09T15:13:12.257816Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F8FC21D0709C3C0A3E4FBA81D24AB50979F25C19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.257816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60559d77-3a90-4ffd-a5b8-918100eeb472", "created": "2026-10-09T15:13:12.258373Z", "modified": "2026-10-09T15:13:12.258373Z", "relationship_type": "indicates", "source_ref": "indicator--dfda0316-7e15-4c09-8bf6-130b27554a58", "target_ref": "malware--6a64cb24-d2c5-4986-a702-85986c0e7b0e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--dd8a6358-c893-4788-a7b0-60543f635adb", "created": "2026-10-09T15:13:12.2585Z", "modified": "2026-10-09T15:13:12.2585Z", "name": "WiseMo", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a1e229-96c3-492e-9a68-61d35cfeabdc", "created": "2026-10-09T15:13:12.258615Z", "modified": "2026-10-09T15:13:12.258615Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.258615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a57cf297-a3c9-4a13-9029-288de70dca0e", "created": "2026-10-09T15:13:12.259083Z", "modified": "2026-10-09T15:13:12.259083Z", "relationship_type": "indicates", "source_ref": "indicator--02a1e229-96c3-492e-9a68-61d35cfeabdc", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82e4139-e2fd-44fd-8cf9-6df2cc6df750", "created": "2026-10-09T15:13:12.259201Z", "modified": "2026-10-09T15:13:12.259201Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud1.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.259201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6f6d137-d1bb-47bb-b43c-f20617b99d45", "created": "2026-10-09T15:13:12.259683Z", "modified": "2026-10-09T15:13:12.259683Z", "relationship_type": "indicates", "source_ref": "indicator--c82e4139-e2fd-44fd-8cf9-6df2cc6df750", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746b7cb8-071a-4183-bb62-c35d6ac348d7", "created": "2026-10-09T15:13:12.2598Z", "modified": "2026-10-09T15:13:12.2598Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtracker.fortess.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.2598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c09e92e-be28-4486-899a-f4699ef0d185", "created": "2026-10-09T15:13:12.260291Z", "modified": "2026-10-09T15:13:12.260291Z", "relationship_type": "indicates", "source_ref": "indicator--746b7cb8-071a-4183-bb62-c35d6ac348d7", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b718db19-ce8c-49c0-9262-c5475629cc3b", "created": "2026-10-09T15:13:12.260411Z", "modified": "2026-10-09T15:13:12.260411Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.260411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd47599d-b789-4520-ac8c-f40333d2f9c5", "created": "2026-10-09T15:13:12.260887Z", "modified": "2026-10-09T15:13:12.260887Z", "relationship_type": "indicates", "source_ref": "indicator--b718db19-ce8c-49c0-9262-c5475629cc3b", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a543ddf8-a91e-4ee2-9b2a-be07031742b6", "created": "2026-10-09T15:13:12.261005Z", "modified": "2026-10-09T15:13:12.261005Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.261005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9756869-d96e-4274-a93b-5b75127b62d5", "created": "2026-10-09T15:13:12.261475Z", "modified": "2026-10-09T15:13:12.261475Z", "relationship_type": "indicates", "source_ref": "indicator--a543ddf8-a91e-4ee2-9b2a-be07031742b6", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ddf760-7ce8-48be-a530-1bf768506f95", "created": "2026-10-09T15:13:12.261595Z", "modified": "2026-10-09T15:13:12.261595Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wisemo.wsmguest.v18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.261595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9d5bcff-ad63-4126-8249-898c99ea8a30", "created": "2026-10-09T15:13:12.262149Z", "modified": "2026-10-09T15:13:12.262149Z", "relationship_type": "indicates", "source_ref": "indicator--a5ddf760-7ce8-48be-a530-1bf768506f95", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c51898-490b-4b67-bdf8-e628e3522315", "created": "2026-10-09T15:13:12.26228Z", "modified": "2026-10-09T15:13:12.26228Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wisemo.host.v10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.26228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d94f59df-09cb-4240-a09f-c56fa7f980d4", "created": "2026-10-09T15:13:12.262736Z", "modified": "2026-10-09T15:13:12.262736Z", "relationship_type": "indicates", "source_ref": "indicator--a2c51898-490b-4b67-bdf8-e628e3522315", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99cac41-0a3a-4ae1-9baf-123dee353190", "created": "2026-10-09T15:13:12.262853Z", "modified": "2026-10-09T15:13:12.262853Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B48840CBF93379410172B4B85989624D2B33D59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.262853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7600ab1b-4ded-485e-93f3-ea44ca3e367f", "created": "2026-10-09T15:13:12.263398Z", "modified": "2026-10-09T15:13:12.263398Z", "relationship_type": "indicates", "source_ref": "indicator--d99cac41-0a3a-4ae1-9baf-123dee353190", "target_ref": "malware--dd8a6358-c893-4788-a7b0-60543f635adb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818", "created": "2026-10-09T15:13:12.263518Z", "modified": "2026-10-09T15:13:12.263518Z", "name": "FindMyKids", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65f1884-186e-4be3-9157-d0ceffda51d9", "created": "2026-10-09T15:13:12.263635Z", "modified": "2026-10-09T15:13:12.263635Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.263635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0e67895-5640-4b7c-a316-c9a253d57d05", "created": "2026-10-09T15:13:12.26411Z", "modified": "2026-10-09T15:13:12.26411Z", "relationship_type": "indicates", "source_ref": "indicator--a65f1884-186e-4be3-9157-d0ceffda51d9", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a841d4-eb12-4c7d-8d2b-6314a66cff6c", "created": "2026-10-09T15:13:12.264226Z", "modified": "2026-10-09T15:13:12.264226Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='r.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.264226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d53e657-0515-4def-a854-0cc708602c78", "created": "2026-10-09T15:13:12.264712Z", "modified": "2026-10-09T15:13:12.264712Z", "relationship_type": "indicates", "source_ref": "indicator--48a841d4-eb12-4c7d-8d2b-6314a66cff6c", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef96e2bd-7466-45eb-9d95-a4183eba6017", "created": "2026-10-09T15:13:12.26483Z", "modified": "2026-10-09T15:13:12.26483Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wss.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.26483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3f9fcd3-afab-49f7-ab0c-5738d785b93f", "created": "2026-10-09T15:13:12.265309Z", "modified": "2026-10-09T15:13:12.265309Z", "relationship_type": "indicates", "source_ref": "indicator--ef96e2bd-7466-45eb-9d95-a4183eba6017", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838bc8cf-71a0-4dc3-9408-af0bd2690db4", "created": "2026-10-09T15:13:12.265431Z", "modified": "2026-10-09T15:13:12.265431Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='where-is-my-children.firebase.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.265431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3476f979-7e3a-4286-b200-0a263a6cfc16", "created": "2026-10-09T15:13:12.265945Z", "modified": "2026-10-09T15:13:12.265945Z", "relationship_type": "indicates", "source_ref": "indicator--838bc8cf-71a0-4dc3-9408-af0bd2690db4", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8bf327-1a6d-4a04-b617-1275f22f616a", "created": "2026-10-09T15:13:12.266072Z", "modified": "2026-10-09T15:13:12.266072Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.266072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70a0877e-e1f4-41b7-9743-53c3fed91fb6", "created": "2026-10-09T15:13:12.26656Z", "modified": "2026-10-09T15:13:12.26656Z", "relationship_type": "indicates", "source_ref": "indicator--6d8bf327-1a6d-4a04-b617-1275f22f616a", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a88dc7c-b6c5-40be-ac57-aeee34666c1c", "created": "2026-10-09T15:13:12.266685Z", "modified": "2026-10-09T15:13:12.266685Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fmk.god-xc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.266685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ac7ee36-c133-470e-94c7-bea0dbae733b", "created": "2026-10-09T15:13:12.267146Z", "modified": "2026-10-09T15:13:12.267146Z", "relationship_type": "indicates", "source_ref": "indicator--1a88dc7c-b6c5-40be-ac57-aeee34666c1c", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82becb9-9433-483c-a2c8-77975ad75a40", "created": "2026-10-09T15:13:12.267261Z", "modified": "2026-10-09T15:13:12.267261Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.findmykids.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.267261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--453a5fc1-ccec-4acf-a6ad-30a384cbd9cf", "created": "2026-10-09T15:13:12.267857Z", "modified": "2026-10-09T15:13:12.267857Z", "relationship_type": "indicates", "source_ref": "indicator--e82becb9-9433-483c-a2c8-77975ad75a40", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--115f7238-545d-4651-8bbb-ea541c4819d0", "created": "2026-10-09T15:13:12.267982Z", "modified": "2026-10-09T15:13:12.267982Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.findmykids.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.267982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fc9aacb-7914-4731-8f20-40d1259f0571", "created": "2026-10-09T15:13:12.268453Z", "modified": "2026-10-09T15:13:12.268453Z", "relationship_type": "indicates", "source_ref": "indicator--115f7238-545d-4651-8bbb-ea541c4819d0", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6468674b-ace5-430f-abf2-a645f3488b8f", "created": "2026-10-09T15:13:12.268578Z", "modified": "2026-10-09T15:13:12.268578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B48840CBF93379410172B4B85989624D2B33D59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.268578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47ac701e-1afa-482a-9c69-84455cc1162e", "created": "2026-10-09T15:13:12.269116Z", "modified": "2026-10-09T15:13:12.269116Z", "relationship_type": "indicates", "source_ref": "indicator--6468674b-ace5-430f-abf2-a645f3488b8f", "target_ref": "malware--ef547ee7-e3d1-4f7c-a09c-b89acc3fa818"}, {"type": "malware", "spec_version": "2.1", "id": "malware--821b236b-1cee-4f8a-8149-091702be3318", "created": "2026-10-09T15:13:12.269233Z", "modified": "2026-10-09T15:13:12.269233Z", "name": "MagMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968891b4-4673-4d9f-8e19-04b2c0086ad5", "created": "2026-10-09T15:13:12.269358Z", "modified": "2026-10-09T15:13:12.269358Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.269358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a4e0900-880f-452a-9a54-17d853a32aab", "created": "2026-10-09T15:13:12.269825Z", "modified": "2026-10-09T15:13:12.269825Z", "relationship_type": "indicates", "source_ref": "indicator--968891b4-4673-4d9f-8e19-04b2c0086ad5", "target_ref": "malware--821b236b-1cee-4f8a-8149-091702be3318"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b283b1de-a674-4720-946e-0fd885c42e86", "created": "2026-10-09T15:13:12.269945Z", "modified": "2026-10-09T15:13:12.269945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.269945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57ffae85-e543-4476-b3e4-ba9f4888eba8", "created": "2026-10-09T15:13:12.270424Z", "modified": "2026-10-09T15:13:12.270424Z", "relationship_type": "indicates", "source_ref": "indicator--b283b1de-a674-4720-946e-0fd885c42e86", "target_ref": "malware--821b236b-1cee-4f8a-8149-091702be3318"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a5a6c1-75aa-42a4-a271-d0c7c704cbcb", "created": "2026-10-09T15:13:12.270548Z", "modified": "2026-10-09T15:13:12.270548Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ue.maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.270548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d54a3b12-81a6-4189-87ad-e24286f10c7c", "created": "2026-10-09T15:13:12.271009Z", "modified": "2026-10-09T15:13:12.271009Z", "relationship_type": "indicates", "source_ref": "indicator--f9a5a6c1-75aa-42a4-a271-d0c7c704cbcb", "target_ref": "malware--821b236b-1cee-4f8a-8149-091702be3318"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36d88b8-66b5-4fa7-9ff8-225a2c255fcd", "created": "2026-10-09T15:13:12.271131Z", "modified": "2026-10-09T15:13:12.271131Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf.maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.271131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--535db9ea-5366-4ddd-9488-6c1ddbddd368", "created": "2026-10-09T15:13:12.271608Z", "modified": "2026-10-09T15:13:12.271608Z", "relationship_type": "indicates", "source_ref": "indicator--d36d88b8-66b5-4fa7-9ff8-225a2c255fcd", "target_ref": "malware--821b236b-1cee-4f8a-8149-091702be3318"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e28f45e-8dc9-45df-889a-4c0adc8cc150", "created": "2026-10-09T15:13:12.271727Z", "modified": "2026-10-09T15:13:12.271727Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.271727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e3f30f6-2a0c-4942-88fc-a6b901077d41", "created": "2026-10-09T15:13:12.272195Z", "modified": "2026-10-09T15:13:12.272195Z", "relationship_type": "indicates", "source_ref": "indicator--0e28f45e-8dc9-45df-889a-4c0adc8cc150", "target_ref": "malware--821b236b-1cee-4f8a-8149-091702be3318"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe", "created": "2026-10-09T15:13:12.272326Z", "modified": "2026-10-09T15:13:12.272326Z", "name": "BrunoEspiao", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a197856-b98c-4e7c-ba5c-993988f61943", "created": "2026-10-09T15:13:12.272441Z", "modified": "2026-10-09T15:13:12.272441Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='back.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.272441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ed4e9ad-4a2c-44af-8f88-dc2209a56861", "created": "2026-10-09T15:13:12.27293Z", "modified": "2026-10-09T15:13:12.27293Z", "relationship_type": "indicates", "source_ref": "indicator--4a197856-b98c-4e7c-ba5c-993988f61943", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a2bd84-180b-4a7c-9df7-d2fb7c22f349", "created": "2026-10-09T15:13:12.27306Z", "modified": "2026-10-09T15:13:12.27306Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.27306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e080a99f-c478-4057-adbb-28cd0b778717", "created": "2026-10-09T15:13:12.273648Z", "modified": "2026-10-09T15:13:12.273648Z", "relationship_type": "indicates", "source_ref": "indicator--05a2bd84-180b-4a7c-9df7-d2fb7c22f349", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3955b5b5-2b05-4740-8eb8-da2f12f8d616", "created": "2026-10-09T15:13:12.273775Z", "modified": "2026-10-09T15:13:12.273775Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.273775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a6c74eb-ecb5-4781-8fe7-7fc8c5e13e6e", "created": "2026-10-09T15:13:12.274247Z", "modified": "2026-10-09T15:13:12.274247Z", "relationship_type": "indicates", "source_ref": "indicator--3955b5b5-2b05-4740-8eb8-da2f12f8d616", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239be922-95ae-4e46-b5ff-d9587aa9f8af", "created": "2026-10-09T15:13:12.274384Z", "modified": "2026-10-09T15:13:12.274384Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='im.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.274384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b07aaf28-df81-4615-b550-fb6c03230cb8", "created": "2026-10-09T15:13:12.27486Z", "modified": "2026-10-09T15:13:12.27486Z", "relationship_type": "indicates", "source_ref": "indicator--239be922-95ae-4e46-b5ff-d9587aa9f8af", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa65bfd7-8543-4bc1-b0a9-c913891652b0", "created": "2026-10-09T15:13:12.274983Z", "modified": "2026-10-09T15:13:12.274983Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.274983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e03851b-cb79-42b6-83f1-b1c5e608997c", "created": "2026-10-09T15:13:12.275465Z", "modified": "2026-10-09T15:13:12.275465Z", "relationship_type": "indicates", "source_ref": "indicator--fa65bfd7-8543-4bc1-b0a9-c913891652b0", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf4be9e-dd5d-470f-92df-47d1d2558ca1", "created": "2026-10-09T15:13:12.275587Z", "modified": "2026-10-09T15:13:12.275587Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc1.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.275587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebe8556f-3100-41e0-9761-50ad23e708e5", "created": "2026-10-09T15:13:12.276069Z", "modified": "2026-10-09T15:13:12.276069Z", "relationship_type": "indicates", "source_ref": "indicator--1bf4be9e-dd5d-470f-92df-47d1d2558ca1", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790269ba-2edc-4d4d-aa89-15b24a819571", "created": "2026-10-09T15:13:12.276188Z", "modified": "2026-10-09T15:13:12.276188Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.276188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2036a17-5032-464c-a909-b501973b1562", "created": "2026-10-09T15:13:12.276674Z", "modified": "2026-10-09T15:13:12.276674Z", "relationship_type": "indicates", "source_ref": "indicator--790269ba-2edc-4d4d-aa89-15b24a819571", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e72974-3b72-4f29-b0b8-e2c310f93845", "created": "2026-10-09T15:13:12.276792Z", "modified": "2026-10-09T15:13:12.276792Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ue.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.276792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2cffa61-2e7f-4406-ad7c-46af626b41e4", "created": "2026-10-09T15:13:12.277262Z", "modified": "2026-10-09T15:13:12.277262Z", "relationship_type": "indicates", "source_ref": "indicator--77e72974-3b72-4f29-b0b8-e2c310f93845", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e547186-2cfe-4701-9eb7-3b5f134a21bb", "created": "2026-10-09T15:13:12.277392Z", "modified": "2026-10-09T15:13:12.277392Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.277392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36e469c1-94fa-4d3a-a04d-332e52730f81", "created": "2026-10-09T15:13:12.277873Z", "modified": "2026-10-09T15:13:12.277873Z", "relationship_type": "indicates", "source_ref": "indicator--5e547186-2cfe-4701-9eb7-3b5f134a21bb", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be675fc2-2357-4770-b422-e3bf578a5e83", "created": "2026-10-09T15:13:12.277991Z", "modified": "2026-10-09T15:13:12.277991Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf1.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.277991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e983446f-b90a-4fa5-9b60-137df8ab6508", "created": "2026-10-09T15:13:12.278484Z", "modified": "2026-10-09T15:13:12.278484Z", "relationship_type": "indicates", "source_ref": "indicator--be675fc2-2357-4770-b422-e3bf578a5e83", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ea6e14-a2a8-49ab-bc8f-7094cf607d63", "created": "2026-10-09T15:13:12.278607Z", "modified": "2026-10-09T15:13:12.278607Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ur.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.278607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10b86ac5-ae42-4d90-a4ef-f44ce2cde315", "created": "2026-10-09T15:13:12.279176Z", "modified": "2026-10-09T15:13:12.279176Z", "relationship_type": "indicates", "source_ref": "indicator--33ea6e14-a2a8-49ab-bc8f-7094cf607d63", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683671c2-a598-45d0-92f2-c09af48871aa", "created": "2026-10-09T15:13:12.279313Z", "modified": "2026-10-09T15:13:12.279313Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.279313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0da171d-8f8d-4f73-bdb2-3a8d32040dae", "created": "2026-10-09T15:13:12.279793Z", "modified": "2026-10-09T15:13:12.279793Z", "relationship_type": "indicates", "source_ref": "indicator--683671c2-a598-45d0-92f2-c09af48871aa", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca25f219-7733-413a-8770-02ef3baa9dab", "created": "2026-10-09T15:13:12.279914Z", "modified": "2026-10-09T15:13:12.279914Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao2.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.279914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--925329fa-f517-4154-a8d5-c4ed87ca2735", "created": "2026-10-09T15:13:12.280408Z", "modified": "2026-10-09T15:13:12.280408Z", "relationship_type": "indicates", "source_ref": "indicator--ca25f219-7733-413a-8770-02ef3baa9dab", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2de441-be31-42dd-bffe-7a6ceb46a32b", "created": "2026-10-09T15:13:12.28053Z", "modified": "2026-10-09T15:13:12.28053Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.28053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfd6f39b-8f89-450d-bb56-01cdc8532b51", "created": "2026-10-09T15:13:12.281007Z", "modified": "2026-10-09T15:13:12.281007Z", "relationship_type": "indicates", "source_ref": "indicator--db2de441-be31-42dd-bffe-7a6ceb46a32b", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a4818f-e26a-4999-a99a-e09c56a4269d", "created": "2026-10-09T15:13:12.281133Z", "modified": "2026-10-09T15:13:12.281133Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sbt.tv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.281133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fefdc7fb-e1fa-47b7-91fe-c66b64363716", "created": "2026-10-09T15:13:12.2816Z", "modified": "2026-10-09T15:13:12.2816Z", "relationship_type": "indicates", "source_ref": "indicator--71a4818f-e26a-4999-a99a-e09c56a4269d", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e75fc90-eb8a-4ca0-b95d-f06ade9e0cc2", "created": "2026-10-09T15:13:12.28172Z", "modified": "2026-10-09T15:13:12.28172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='551d61685f69372204f69da1394b4155a4f732d5a4ff5bdb67f11ae7a8e7ee50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.28172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09425c2a-133a-4b7c-b7ca-f74b67248379", "created": "2026-10-09T15:13:12.282322Z", "modified": "2026-10-09T15:13:12.282322Z", "relationship_type": "indicates", "source_ref": "indicator--3e75fc90-eb8a-4ca0-b95d-f06ade9e0cc2", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d391e3c-79ff-42e8-b021-939d72a35538", "created": "2026-10-09T15:13:12.282445Z", "modified": "2026-10-09T15:13:12.282445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b2749bfd91ab0a27ef988b84aeafbca81d4d9f3d63ab7e594655b266f27a30f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.282445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6aea9d5-6220-4516-9613-b8490e8ee086", "created": "2026-10-09T15:13:12.283032Z", "modified": "2026-10-09T15:13:12.283032Z", "relationship_type": "indicates", "source_ref": "indicator--6d391e3c-79ff-42e8-b021-939d72a35538", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccf6164-bc59-4994-a3d4-f4adc70f30b0", "created": "2026-10-09T15:13:12.283151Z", "modified": "2026-10-09T15:13:12.283151Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.moxlndmp.uhzhgzjh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.283151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--949215d2-094b-4daa-bda2-e7277e3c23a9", "created": "2026-10-09T15:13:12.283614Z", "modified": "2026-10-09T15:13:12.283614Z", "relationship_type": "indicates", "source_ref": "indicator--3ccf6164-bc59-4994-a3d4-f4adc70f30b0", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5355a15-9337-43a9-9695-95cd9fac32c0", "created": "2026-10-09T15:13:12.283738Z", "modified": "2026-10-09T15:13:12.283738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fzvsdrtb.qamlhxri']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.283738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce2cd7ba-677e-4c42-ba5b-4f058624758b", "created": "2026-10-09T15:13:12.28419Z", "modified": "2026-10-09T15:13:12.28419Z", "relationship_type": "indicates", "source_ref": "indicator--e5355a15-9337-43a9-9695-95cd9fac32c0", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47df0e7e-7dd0-4613-9793-37fd70f4298b", "created": "2026-10-09T15:13:12.284323Z", "modified": "2026-10-09T15:13:12.284323Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thaxygpc.xjsjobpn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.284323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98d70174-627d-465f-b372-2edaccbdb8ba", "created": "2026-10-09T15:13:12.284878Z", "modified": "2026-10-09T15:13:12.284878Z", "relationship_type": "indicates", "source_ref": "indicator--47df0e7e-7dd0-4613-9793-37fd70f4298b", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeda0e7-2b83-4063-b30a-2e5069b96198", "created": "2026-10-09T15:13:12.285Z", "modified": "2026-10-09T15:13:12.285Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.nhevvtmt.thinkquo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff8b5a2f-2eda-42b3-b081-09380aea682d", "created": "2026-10-09T15:13:12.285478Z", "modified": "2026-10-09T15:13:12.285478Z", "relationship_type": "indicates", "source_ref": "indicator--adeda0e7-2b83-4063-b30a-2e5069b96198", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd161d1-05ae-438d-8f49-16b8422e8256", "created": "2026-10-09T15:13:12.285605Z", "modified": "2026-10-09T15:13:12.285605Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='159B64B29BC8842ACDF8022B70730B13E288044B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.285605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41603c96-4bf1-49fa-b990-2b4e9eaf4a45", "created": "2026-10-09T15:13:12.28615Z", "modified": "2026-10-09T15:13:12.28615Z", "relationship_type": "indicates", "source_ref": "indicator--9cd161d1-05ae-438d-8f49-16b8422e8256", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bcd767-27ff-4f09-be9f-0d6aa22c2e9d", "created": "2026-10-09T15:13:12.286281Z", "modified": "2026-10-09T15:13:12.286281Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8E38D577187544D4E0F747CAEF32B47FD15B07E5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.286281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c746a6e-0a5e-4445-80ee-7af2386f75c8", "created": "2026-10-09T15:13:12.286825Z", "modified": "2026-10-09T15:13:12.286825Z", "relationship_type": "indicates", "source_ref": "indicator--45bcd767-27ff-4f09-be9f-0d6aa22c2e9d", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090e9137-b663-4ca4-bb23-bbbca2eea080", "created": "2026-10-09T15:13:12.286947Z", "modified": "2026-10-09T15:13:12.286947Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6041F01561EC43309CCC8452719C4F515C32F3C2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.286947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ba10425-2358-4acc-aa53-4ef46298d9a9", "created": "2026-10-09T15:13:12.287507Z", "modified": "2026-10-09T15:13:12.287507Z", "relationship_type": "indicates", "source_ref": "indicator--090e9137-b663-4ca4-bb23-bbbca2eea080", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a22b05aa-d871-405d-bc84-0af8df6b38d0", "created": "2026-10-09T15:13:12.287632Z", "modified": "2026-10-09T15:13:12.287632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A1AA4CD5B6CDBD906E3B27A7D1FA42EA2416ADC3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.287632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--216e4170-989f-41a0-9fc8-a613d3003c4d", "created": "2026-10-09T15:13:12.288172Z", "modified": "2026-10-09T15:13:12.288172Z", "relationship_type": "indicates", "source_ref": "indicator--a22b05aa-d871-405d-bc84-0af8df6b38d0", "target_ref": "malware--f2201627-4b3e-4617-999b-35bbd9a5e1fe"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a", "created": "2026-10-09T15:13:12.2883Z", "modified": "2026-10-09T15:13:12.2883Z", "name": "Spyone", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e266b77d-cae2-493f-aa8e-d684eb62fa33", "created": "2026-10-09T15:13:12.28842Z", "modified": "2026-10-09T15:13:12.28842Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.spyone.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.28842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0ff1a53-bd96-4303-834d-7d19d24bf9d5", "created": "2026-10-09T15:13:12.288885Z", "modified": "2026-10-09T15:13:12.288885Z", "relationship_type": "indicates", "source_ref": "indicator--e266b77d-cae2-493f-aa8e-d684eb62fa33", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac71138-8f1d-4573-8f69-48ca9544b7aa", "created": "2026-10-09T15:13:12.289004Z", "modified": "2026-10-09T15:13:12.289004Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ur.spyone.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.289004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3482c14f-3998-4d59-aaf8-fbc0ec969087", "created": "2026-10-09T15:13:12.28948Z", "modified": "2026-10-09T15:13:12.28948Z", "relationship_type": "indicates", "source_ref": "indicator--bac71138-8f1d-4573-8f69-48ca9544b7aa", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ac366e-9903-40a3-ad89-851d32a3c7db", "created": "2026-10-09T15:13:12.289599Z", "modified": "2026-10-09T15:13:12.289599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='laucass.forumactif.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.289599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec18b211-e781-4753-bdcb-8a5dec80881e", "created": "2026-10-09T15:13:12.290077Z", "modified": "2026-10-09T15:13:12.290077Z", "relationship_type": "indicates", "source_ref": "indicator--00ac366e-9903-40a3-ad89-851d32a3c7db", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb70d28-3982-4c55-9719-553660358a8b", "created": "2026-10-09T15:13:12.290195Z", "modified": "2026-10-09T15:13:12.290195Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyone.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.290195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b70fd45-96f7-4fa3-bb02-b61c241757c9", "created": "2026-10-09T15:13:12.290765Z", "modified": "2026-10-09T15:13:12.290765Z", "relationship_type": "indicates", "source_ref": "indicator--7bb70d28-3982-4c55-9719-553660358a8b", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3609c67-d11a-4587-9e08-bc0e40ab0998", "created": "2026-10-09T15:13:12.290885Z", "modified": "2026-10-09T15:13:12.290885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='11111.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.290885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19c7f86a-e62e-4e2f-ac67-d28f57c2712f", "created": "2026-10-09T15:13:12.29135Z", "modified": "2026-10-09T15:13:12.29135Z", "relationship_type": "indicates", "source_ref": "indicator--a3609c67-d11a-4587-9e08-bc0e40ab0998", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f033e9-be49-4709-a115-e69ededee8dd", "created": "2026-10-09T15:13:12.29147Z", "modified": "2026-10-09T15:13:12.29147Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.11111.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.29147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d714b990-214b-444f-83f1-53cb87ad349e", "created": "2026-10-09T15:13:12.291944Z", "modified": "2026-10-09T15:13:12.291944Z", "relationship_type": "indicates", "source_ref": "indicator--52f033e9-be49-4709-a115-e69ededee8dd", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4654550f-857e-46c7-af07-78eac9d97b05", "created": "2026-10-09T15:13:12.292065Z", "modified": "2026-10-09T15:13:12.292065Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='4jslg.11111.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.292065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a35c04a-3ea7-4c9d-b2c1-766b336c2d42", "created": "2026-10-09T15:13:12.292551Z", "modified": "2026-10-09T15:13:12.292551Z", "relationship_type": "indicates", "source_ref": "indicator--4654550f-857e-46c7-af07-78eac9d97b05", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521274a7-68db-45d2-a46b-20287ddc0df4", "created": "2026-10-09T15:13:12.292672Z", "modified": "2026-10-09T15:13:12.292672Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c816d7513cb36becac080698ee3937bccfc5f8f3b2b0a436c8b46f7f0635197b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.292672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5478dd71-d1a1-4ed1-8788-591f3790721b", "created": "2026-10-09T15:13:12.293253Z", "modified": "2026-10-09T15:13:12.293253Z", "relationship_type": "indicates", "source_ref": "indicator--521274a7-68db-45d2-a46b-20287ddc0df4", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68002f7a-f51d-41cf-8a33-82491348651c", "created": "2026-10-09T15:13:12.293384Z", "modified": "2026-10-09T15:13:12.293384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bcb6951c5f78c646c19771ff58c2ea749e734ae3fa916f130aeee8e083ca2e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.293384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a3f001e-6541-4c74-9135-36f17b3db61b", "created": "2026-10-09T15:13:12.293964Z", "modified": "2026-10-09T15:13:12.293964Z", "relationship_type": "indicates", "source_ref": "indicator--68002f7a-f51d-41cf-8a33-82491348651c", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6decd213-2352-46d3-8f54-c090fddfa186", "created": "2026-10-09T15:13:12.294081Z", "modified": "2026-10-09T15:13:12.294081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54583791e1d906c2f77b10feec1d842ddb8afebc14f4ceec0483e89fccd194e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.294081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d589cbc-5cbe-450e-b057-87a6f285ff82", "created": "2026-10-09T15:13:12.294687Z", "modified": "2026-10-09T15:13:12.294687Z", "relationship_type": "indicates", "source_ref": "indicator--6decd213-2352-46d3-8f54-c090fddfa186", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be41fde-ecdb-48c1-9888-5b556a0be2ef", "created": "2026-10-09T15:13:12.294818Z", "modified": "2026-10-09T15:13:12.294818Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d37aa0d8937c4c2e3b1d65afb5be94cf901c4255750c98b4b44489e5455367a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.294818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3c7f169-ec0d-4bb4-befa-4e3ec9232c9e", "created": "2026-10-09T15:13:12.295415Z", "modified": "2026-10-09T15:13:12.295415Z", "relationship_type": "indicates", "source_ref": "indicator--2be41fde-ecdb-48c1-9888-5b556a0be2ef", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e35c54b-9850-482d-9a32-91422050f9f2", "created": "2026-10-09T15:13:12.295541Z", "modified": "2026-10-09T15:13:12.295541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='137153826c66a28b21ed23a7be8857da69af45fba8a7cd126937674069f03336']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.295541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26c5d3ea-9e63-4b63-ab50-938ef9c54bf4", "created": "2026-10-09T15:13:12.296141Z", "modified": "2026-10-09T15:13:12.296141Z", "relationship_type": "indicates", "source_ref": "indicator--0e35c54b-9850-482d-9a32-91422050f9f2", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03553399-eed3-453d-b53b-81b64d65648c", "created": "2026-10-09T15:13:12.296282Z", "modified": "2026-10-09T15:13:12.296282Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.296282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--902c2826-2793-46ec-9372-7ab01e5b5fd4", "created": "2026-10-09T15:13:12.297285Z", "modified": "2026-10-09T15:13:12.297285Z", "relationship_type": "indicates", "source_ref": "indicator--03553399-eed3-453d-b53b-81b64d65648c", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f66a0dd-1cc9-4b18-aef9-11f0a230a914", "created": "2026-10-09T15:13:12.297415Z", "modified": "2026-10-09T15:13:12.297415Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.jgeuhcex.ejcxndak']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.297415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ea08a51-a0df-4c49-afaf-b32d8b66cec8", "created": "2026-10-09T15:13:12.297876Z", "modified": "2026-10-09T15:13:12.297876Z", "relationship_type": "indicates", "source_ref": "indicator--7f66a0dd-1cc9-4b18-aef9-11f0a230a914", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29dbf37-a757-428c-ac9d-db486cf8bce3", "created": "2026-10-09T15:13:12.297996Z", "modified": "2026-10-09T15:13:12.297996Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.eytewqrm.wvdkgmrl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.297996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c009f47a-787f-4286-90cd-6d29e2fbdda9", "created": "2026-10-09T15:13:12.298464Z", "modified": "2026-10-09T15:13:12.298464Z", "relationship_type": "indicates", "source_ref": "indicator--b29dbf37-a757-428c-ac9d-db486cf8bce3", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276925d1-234d-4b70-9520-a0c4ed743624", "created": "2026-10-09T15:13:12.298585Z", "modified": "2026-10-09T15:13:12.298585Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.epbzrqcg.syzzkuqx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.298585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dae94ec2-d34b-41bb-88e1-54edb8957753", "created": "2026-10-09T15:13:12.299034Z", "modified": "2026-10-09T15:13:12.299034Z", "relationship_type": "indicates", "source_ref": "indicator--276925d1-234d-4b70-9520-a0c4ed743624", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d12b3ac-e5e5-4273-8bca-40d6668a4568", "created": "2026-10-09T15:13:12.299152Z", "modified": "2026-10-09T15:13:12.299152Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.laucass.phonecontrolenabler']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.299152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e84c229-82af-4a46-8cde-961c7d3dc3b9", "created": "2026-10-09T15:13:12.299634Z", "modified": "2026-10-09T15:13:12.299634Z", "relationship_type": "indicates", "source_ref": "indicator--3d12b3ac-e5e5-4273-8bca-40d6668a4568", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be43a62f-69a9-42bf-91df-e02911124411", "created": "2026-10-09T15:13:12.299755Z", "modified": "2026-10-09T15:13:12.299755Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.laucass.phonecontroltarget']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.299755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f2014d3-b3dd-4aab-9aab-a0be1ab96cd8", "created": "2026-10-09T15:13:12.300221Z", "modified": "2026-10-09T15:13:12.300221Z", "relationship_type": "indicates", "source_ref": "indicator--be43a62f-69a9-42bf-91df-e02911124411", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853b77c7-72d4-4454-8c05-5d904952c9ad", "created": "2026-10-09T15:13:12.300354Z", "modified": "2026-10-09T15:13:12.300354Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.laucass.androsmscontrol']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.300354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f041a3aa-cfdc-4d29-9b0b-760c92e0f4cc", "created": "2026-10-09T15:13:12.300822Z", "modified": "2026-10-09T15:13:12.300822Z", "relationship_type": "indicates", "source_ref": "indicator--853b77c7-72d4-4454-8c05-5d904952c9ad", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df928c9c-593c-40e1-88f5-619712b4b7bc", "created": "2026-10-09T15:13:12.300941Z", "modified": "2026-10-09T15:13:12.300941Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.juzyuwqt.thxxnjvf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.300941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dbf5082-cab7-4580-8fe2-3ceffedb5bf0", "created": "2026-10-09T15:13:12.301402Z", "modified": "2026-10-09T15:13:12.301402Z", "relationship_type": "indicates", "source_ref": "indicator--df928c9c-593c-40e1-88f5-619712b4b7bc", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97f2452-5040-4c25-88de-73a41d8af587", "created": "2026-10-09T15:13:12.30152Z", "modified": "2026-10-09T15:13:12.30152Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.epasufob.kybavfgt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.30152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--476b4d88-fe9f-4e88-a070-a710af693e27", "created": "2026-10-09T15:13:12.301971Z", "modified": "2026-10-09T15:13:12.301971Z", "relationship_type": "indicates", "source_ref": "indicator--f97f2452-5040-4c25-88de-73a41d8af587", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec321f1a-2efd-43c6-9fe5-c1eaa8b4098c", "created": "2026-10-09T15:13:12.302094Z", "modified": "2026-10-09T15:13:12.302094Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.spyone.agent2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.302094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d480f91d-86d2-4595-bdc5-c0450199d03b", "created": "2026-10-09T15:13:12.302562Z", "modified": "2026-10-09T15:13:12.302562Z", "relationship_type": "indicates", "source_ref": "indicator--ec321f1a-2efd-43c6-9fe5-c1eaa8b4098c", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a7b9eb-36de-48e6-b3fc-3ef9fd72b13e", "created": "2026-10-09T15:13:12.302683Z", "modified": "2026-10-09T15:13:12.302683Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='Aktualizacja.apps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.302683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59c639ac-3d23-42a6-8f91-f17d862524cd", "created": "2026-10-09T15:13:12.303231Z", "modified": "2026-10-09T15:13:12.303231Z", "relationship_type": "indicates", "source_ref": "indicator--30a7b9eb-36de-48e6-b3fc-3ef9fd72b13e", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12051c58-ba2c-4656-b5df-ba33fcd4d753", "created": "2026-10-09T15:13:12.303367Z", "modified": "2026-10-09T15:13:12.303367Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C4B56E3768543190FDBE0AA01DD628E579F5514C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.303367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0557ee1-609f-4f13-a69a-635592791f33", "created": "2026-10-09T15:13:12.303912Z", "modified": "2026-10-09T15:13:12.303912Z", "relationship_type": "indicates", "source_ref": "indicator--12051c58-ba2c-4656-b5df-ba33fcd4d753", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807ed46f-1458-4f98-a1d0-b2c21987880d", "created": "2026-10-09T15:13:12.304035Z", "modified": "2026-10-09T15:13:12.304035Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='28AFF3C41C0D42ACBB6B73C6C08868C442088640']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.304035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--648e54a7-1cd2-4cee-9959-09596209f23a", "created": "2026-10-09T15:13:12.304592Z", "modified": "2026-10-09T15:13:12.304592Z", "relationship_type": "indicates", "source_ref": "indicator--807ed46f-1458-4f98-a1d0-b2c21987880d", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb1b34c-6e8a-470a-b21e-0feae0569060", "created": "2026-10-09T15:13:12.304714Z", "modified": "2026-10-09T15:13:12.304714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2441F6D331D6CFD8624346ED4B1987EAE6534FA3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.304714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15a497dc-b3d1-41a8-939f-cc617c7ec91a", "created": "2026-10-09T15:13:12.305249Z", "modified": "2026-10-09T15:13:12.305249Z", "relationship_type": "indicates", "source_ref": "indicator--deb1b34c-6e8a-470a-b21e-0feae0569060", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c950e2-5ccb-430d-b75a-f8432542df02", "created": "2026-10-09T15:13:12.30538Z", "modified": "2026-10-09T15:13:12.30538Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='123C09B261DFA0F67D817E9BA079942830C31D54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.30538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f8bcc3d-d808-49b5-a9c9-495f38feabc7", "created": "2026-10-09T15:13:12.305922Z", "modified": "2026-10-09T15:13:12.305922Z", "relationship_type": "indicates", "source_ref": "indicator--37c950e2-5ccb-430d-b75a-f8432542df02", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303946a6-4663-4e6b-8c22-1e2f87178031", "created": "2026-10-09T15:13:12.306039Z", "modified": "2026-10-09T15:13:12.306039Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='32F6E28DD3E2E61ED94446591E31F89AEE3A9BD2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.306039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6581750c-0727-447d-a7f4-8f98c46730e9", "created": "2026-10-09T15:13:12.306589Z", "modified": "2026-10-09T15:13:12.306589Z", "relationship_type": "indicates", "source_ref": "indicator--303946a6-4663-4e6b-8c22-1e2f87178031", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0530381-51d0-4bd5-a7da-9b8dda9fd9a7", "created": "2026-10-09T15:13:12.306708Z", "modified": "2026-10-09T15:13:12.306708Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='317A9577A5B2D0930D06E0D8D7427E2F8FCAD29D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.306708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71ecd10a-d048-43cf-92f6-e05bfe0a54f8", "created": "2026-10-09T15:13:12.307247Z", "modified": "2026-10-09T15:13:12.307247Z", "relationship_type": "indicates", "source_ref": "indicator--b0530381-51d0-4bd5-a7da-9b8dda9fd9a7", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0394f6f2-84ff-4482-8448-348f0d8fd362", "created": "2026-10-09T15:13:12.307374Z", "modified": "2026-10-09T15:13:12.307374Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D2A84922F8F747FD7582EFEF4189E06897FA8839']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.307374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a257be5c-bef0-4797-afe2-0b8c230c1510", "created": "2026-10-09T15:13:12.307925Z", "modified": "2026-10-09T15:13:12.307925Z", "relationship_type": "indicates", "source_ref": "indicator--0394f6f2-84ff-4482-8448-348f0d8fd362", "target_ref": "malware--6fe68ce0-a385-46f0-96b0-bcd3c56fa27a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8970c232-f5f5-4281-9c60-f6477fec9105", "created": "2026-10-09T15:13:12.308046Z", "modified": "2026-10-09T15:13:12.308046Z", "name": "eagleSPY", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c72ce9-bf40-4d14-9979-07424334dd97", "created": "2026-10-09T15:13:12.308161Z", "modified": "2026-10-09T15:13:12.308161Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='eaglespy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.308161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e995491-9cee-4405-9ca9-ef606da3006e", "created": "2026-10-09T15:13:12.308642Z", "modified": "2026-10-09T15:13:12.308642Z", "relationship_type": "indicates", "source_ref": "indicator--11c72ce9-bf40-4d14-9979-07424334dd97", "target_ref": "malware--8970c232-f5f5-4281-9c60-f6477fec9105"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60e14ce-3046-4802-808a-4da8a70e8cf2", "created": "2026-10-09T15:13:12.308766Z", "modified": "2026-10-09T15:13:12.308766Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prontodigital.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.308766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ee066ba-50b4-4251-a4ba-64ee51a34d96", "created": "2026-10-09T15:13:12.309364Z", "modified": "2026-10-09T15:13:12.309364Z", "relationship_type": "indicates", "source_ref": "indicator--a60e14ce-3046-4802-808a-4da8a70e8cf2", "target_ref": "malware--8970c232-f5f5-4281-9c60-f6477fec9105"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a94fa3-3855-4612-a1d2-78e7d0b5ba8c", "created": "2026-10-09T15:13:12.309488Z", "modified": "2026-10-09T15:13:12.309488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='eaglespy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.309488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5dd16f7-c495-4086-bb70-47ebeb0c5108", "created": "2026-10-09T15:13:12.30996Z", "modified": "2026-10-09T15:13:12.30996Z", "relationship_type": "indicates", "source_ref": "indicator--59a94fa3-3855-4612-a1d2-78e7d0b5ba8c", "target_ref": "malware--8970c232-f5f5-4281-9c60-f6477fec9105"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd370e01-3618-4bc3-b756-393edbba54fb", "created": "2026-10-09T15:13:12.310079Z", "modified": "2026-10-09T15:13:12.310079Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.eaglespy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.310079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad2db680-483e-4b6d-b961-2a9c50ee661d", "created": "2026-10-09T15:13:12.310542Z", "modified": "2026-10-09T15:13:12.310542Z", "relationship_type": "indicates", "source_ref": "indicator--cd370e01-3618-4bc3-b756-393edbba54fb", "target_ref": "malware--8970c232-f5f5-4281-9c60-f6477fec9105"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cecfa2-9fe1-469d-960d-f3e789e41454", "created": "2026-10-09T15:13:12.310664Z", "modified": "2026-10-09T15:13:12.310664Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7B561250288C8BB44932B591B5451D852A95109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.310664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--604f6701-34ca-4b83-8fea-0d1349d87bd2", "created": "2026-10-09T15:13:12.311208Z", "modified": "2026-10-09T15:13:12.311208Z", "relationship_type": "indicates", "source_ref": "indicator--37cecfa2-9fe1-469d-960d-f3e789e41454", "target_ref": "malware--8970c232-f5f5-4281-9c60-f6477fec9105"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc", "created": "2026-10-09T15:13:12.311344Z", "modified": "2026-10-09T15:13:12.311344Z", "name": "PhoneMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c527b1-9847-4ee6-a406-f1cd8c3ee39b", "created": "2026-10-09T15:13:12.311462Z", "modified": "2026-10-09T15:13:12.311462Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.thephonem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.311462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae8641c2-8e80-4dfa-abbf-2f4ad679e586", "created": "2026-10-09T15:13:12.311956Z", "modified": "2026-10-09T15:13:12.311956Z", "relationship_type": "indicates", "source_ref": "indicator--91c527b1-9847-4ee6-a406-f1cd8c3ee39b", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863e3bab-2450-4f4b-b9b3-676af339fb90", "created": "2026-10-09T15:13:12.312075Z", "modified": "2026-10-09T15:13:12.312075Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonemonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.312075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3746a770-9f5a-4aee-82b4-74b1e8a0c999", "created": "2026-10-09T15:13:12.312556Z", "modified": "2026-10-09T15:13:12.312556Z", "relationship_type": "indicates", "source_ref": "indicator--863e3bab-2450-4f4b-b9b3-676af339fb90", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a7ace7-e9af-44bc-8122-2dfe021cba6b", "created": "2026-10-09T15:13:12.312676Z", "modified": "2026-10-09T15:13:12.312676Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.thephonem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.312676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5fe0d3b-96ef-46c0-a1ca-96883837a4fe", "created": "2026-10-09T15:13:12.313154Z", "modified": "2026-10-09T15:13:12.313154Z", "relationship_type": "indicates", "source_ref": "indicator--27a7ace7-e9af-44bc-8122-2dfe021cba6b", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d675832-33ad-408b-b695-9814090a0308", "created": "2026-10-09T15:13:12.313283Z", "modified": "2026-10-09T15:13:12.313283Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tphmr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.313283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d3e7b16-b32c-4816-8dbb-a8fe0e34a76d", "created": "2026-10-09T15:13:12.31376Z", "modified": "2026-10-09T15:13:12.31376Z", "relationship_type": "indicates", "source_ref": "indicator--3d675832-33ad-408b-b695-9814090a0308", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5499f8d-f7b8-43e6-892e-7b7beee6a5d7", "created": "2026-10-09T15:13:12.313882Z", "modified": "2026-10-09T15:13:12.313882Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gurley.s3.ap-southeast-1.wasabisys.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.313882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5acb39c1-5bd5-4eca-9bbd-577c86c7d8fd", "created": "2026-10-09T15:13:12.314388Z", "modified": "2026-10-09T15:13:12.314388Z", "relationship_type": "indicates", "source_ref": "indicator--e5499f8d-f7b8-43e6-892e-7b7beee6a5d7", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb94c7b2-e7f5-4305-acaa-e16c33834227", "created": "2026-10-09T15:13:12.314508Z", "modified": "2026-10-09T15:13:12.314508Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.pvojpamt.tzzyqjyb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.314508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--641c7720-4877-4a4f-81cb-0c92f39f4cc5", "created": "2026-10-09T15:13:12.315073Z", "modified": "2026-10-09T15:13:12.315073Z", "relationship_type": "indicates", "source_ref": "indicator--cb94c7b2-e7f5-4305-acaa-e16c33834227", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afccc54-7078-4ead-bf4f-cae091b345b7", "created": "2026-10-09T15:13:12.315191Z", "modified": "2026-10-09T15:13:12.315191Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.monitor.phone.s0ft.phonemonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.315191Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45b44a00-d1f8-47d2-9a43-c82c307839d7", "created": "2026-10-09T15:13:12.315684Z", "modified": "2026-10-09T15:13:12.315684Z", "relationship_type": "indicates", "source_ref": "indicator--1afccc54-7078-4ead-bf4f-cae091b345b7", "target_ref": "malware--e51ff1b1-44bf-47fd-9b9f-52841c6ae9cc"}, {"type": "malware", "spec_version": "2.1", "id": "malware--92d50046-f3e4-47c7-a88a-5666718f44d3", "created": "2026-10-09T15:13:12.315806Z", "modified": "2026-10-09T15:13:12.315806Z", "name": "Buhsam", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196a015f-9818-405c-9b96-b470633c183a", "created": "2026-10-09T15:13:12.315921Z", "modified": "2026-10-09T15:13:12.315921Z", "indicator_types": ["malicious-activity"], "pattern": "[url:value='https://github.com/earthshakira/android_hack']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.315921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0c25f34-57dd-4c06-85dc-f284b1529552", "created": "2026-10-09T15:13:12.316747Z", "modified": "2026-10-09T15:13:12.316747Z", "relationship_type": "indicates", "source_ref": "indicator--196a015f-9818-405c-9b96-b470633c183a", "target_ref": "malware--92d50046-f3e4-47c7-a88a-5666718f44d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d4f5bf-d6d6-4932-84e0-ab85c10b1c1d", "created": "2026-10-09T15:13:12.316876Z", "modified": "2026-10-09T15:13:12.316876Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.google.android.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.316876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d34f125-b15f-46fb-a08b-ffb9a320fa92", "created": "2026-10-09T15:13:12.317369Z", "modified": "2026-10-09T15:13:12.317369Z", "relationship_type": "indicates", "source_ref": "indicator--14d4f5bf-d6d6-4932-84e0-ab85c10b1c1d", "target_ref": "malware--92d50046-f3e4-47c7-a88a-5666718f44d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516c29fc-555c-4494-ac75-dc9eb2a8f226", "created": "2026-10-09T15:13:12.317491Z", "modified": "2026-10-09T15:13:12.317491Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='00F618C4C43C28B107DAB8F5641AD00D3A774AFD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.317491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cf0cf85-0352-4ca1-83c2-e75f150d01ea", "created": "2026-10-09T15:13:12.318034Z", "modified": "2026-10-09T15:13:12.318034Z", "relationship_type": "indicates", "source_ref": "indicator--516c29fc-555c-4494-ac75-dc9eb2a8f226", "target_ref": "malware--92d50046-f3e4-47c7-a88a-5666718f44d3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9ea93619-f084-4bd3-977d-acb1b9a3b28a", "created": "2026-10-09T15:13:12.318153Z", "modified": "2026-10-09T15:13:12.318153Z", "name": "AndroRat", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eca757-2b4d-478c-8c6f-43e437e24c7c", "created": "2026-10-09T15:13:12.318283Z", "modified": "2026-10-09T15:13:12.318283Z", "indicator_types": ["malicious-activity"], "pattern": "[url:value='https://github.com/karma9874/AndroRAT']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.318283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7dbaae14-415c-477b-970a-4aff83cf9ef6", "created": "2026-10-09T15:13:12.31885Z", "modified": "2026-10-09T15:13:12.31885Z", "relationship_type": "indicates", "source_ref": "indicator--05eca757-2b4d-478c-8c6f-43e437e24c7c", "target_ref": "malware--9ea93619-f084-4bd3-977d-acb1b9a3b28a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa65047-ff1f-4407-9aa0-b259a71ce81e", "created": "2026-10-09T15:13:12.318976Z", "modified": "2026-10-09T15:13:12.318976Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.reverseshell2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.318976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b2b0f63-40fa-4850-885c-c135ac8f54d8", "created": "2026-10-09T15:13:12.319453Z", "modified": "2026-10-09T15:13:12.319453Z", "relationship_type": "indicates", "source_ref": "indicator--faa65047-ff1f-4407-9aa0-b259a71ce81e", "target_ref": "malware--9ea93619-f084-4bd3-977d-acb1b9a3b28a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce", "created": "2026-10-09T15:13:12.319572Z", "modified": "2026-10-09T15:13:12.319572Z", "name": "Spynger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b5b6f7-90c3-491b-a7d9-a6bc65ea17f7", "created": "2026-10-09T15:13:12.319687Z", "modified": "2026-10-09T15:13:12.319687Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.319687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31dd9d99-429e-41ec-b56c-3d8a642a4d46", "created": "2026-10-09T15:13:12.320162Z", "modified": "2026-10-09T15:13:12.320162Z", "relationship_type": "indicates", "source_ref": "indicator--41b5b6f7-90c3-491b-a7d9-a6bc65ea17f7", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ded158-1ef9-4498-822d-9f029c8180de", "created": "2026-10-09T15:13:12.320289Z", "modified": "2026-10-09T15:13:12.320289Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ios-gw.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.320289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4812046-f078-496f-814f-4c74e66a20a1", "created": "2026-10-09T15:13:12.320765Z", "modified": "2026-10-09T15:13:12.320765Z", "relationship_type": "indicates", "source_ref": "indicator--c9ded158-1ef9-4498-822d-9f029c8180de", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232d91e8-94c1-4841-8197-a877612cad76", "created": "2026-10-09T15:13:12.320883Z", "modified": "2026-10-09T15:13:12.320883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mob-app-gw.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.320883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3aa1ba58-42ee-4161-8163-272b1ed998b3", "created": "2026-10-09T15:13:12.321486Z", "modified": "2026-10-09T15:13:12.321486Z", "relationship_type": "indicates", "source_ref": "indicator--232d91e8-94c1-4841-8197-a877612cad76", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6933cf43-9227-4d0a-a216-0f85b76daf10", "created": "2026-10-09T15:13:12.321611Z", "modified": "2026-10-09T15:13:12.321611Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.321611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbebc488-8955-4c50-913d-7879794a1845", "created": "2026-10-09T15:13:12.322092Z", "modified": "2026-10-09T15:13:12.322092Z", "relationship_type": "indicates", "source_ref": "indicator--6933cf43-9227-4d0a-a216-0f85b76daf10", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f492d0b0-abae-457a-95ff-fbd12bbb1fa7", "created": "2026-10-09T15:13:12.322211Z", "modified": "2026-10-09T15:13:12.322211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynger.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.322211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70d186d8-1c28-4e12-87fe-194f478dd5d4", "created": "2026-10-09T15:13:12.322706Z", "modified": "2026-10-09T15:13:12.322706Z", "relationship_type": "indicates", "source_ref": "indicator--f492d0b0-abae-457a-95ff-fbd12bbb1fa7", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c62391-3582-4254-b6fe-9390b9021f23", "created": "2026-10-09T15:13:12.322826Z", "modified": "2026-10-09T15:13:12.322826Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cart.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.322826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--360b6178-c1b8-443b-b28f-cedee067e4b3", "created": "2026-10-09T15:13:12.323311Z", "modified": "2026-10-09T15:13:12.323311Z", "relationship_type": "indicates", "source_ref": "indicator--43c62391-3582-4254-b6fe-9390b9021f23", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05c336c-aa9f-4fc3-b67a-43516e6b2b32", "created": "2026-10-09T15:13:12.323435Z", "modified": "2026-10-09T15:13:12.323435Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='win.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.323435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--365cb3f6-a942-4e3f-8bc2-284099cdff5e", "created": "2026-10-09T15:13:12.323907Z", "modified": "2026-10-09T15:13:12.323907Z", "relationship_type": "indicates", "source_ref": "indicator--d05c336c-aa9f-4fc3-b67a-43516e6b2b32", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f0e7d3-0881-469d-90bb-d318044203b2", "created": "2026-10-09T15:13:12.324024Z", "modified": "2026-10-09T15:13:12.324024Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='update.service.android.pynger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.324024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef054f75-70e6-4ef8-be22-5fbb0184ee90", "created": "2026-10-09T15:13:12.324514Z", "modified": "2026-10-09T15:13:12.324514Z", "relationship_type": "indicates", "source_ref": "indicator--41f0e7d3-0881-469d-90bb-d318044203b2", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a159b5ce-a9b3-4ce6-a266-4b3eba7ac632", "created": "2026-10-09T15:13:12.324635Z", "modified": "2026-10-09T15:13:12.324635Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9997E63018756CC7034F94B005205A5E15A3770C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.324635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81922e2c-7244-40c2-b13a-55ada455d4f2", "created": "2026-10-09T15:13:12.325181Z", "modified": "2026-10-09T15:13:12.325181Z", "relationship_type": "indicates", "source_ref": "indicator--a159b5ce-a9b3-4ce6-a266-4b3eba7ac632", "target_ref": "malware--3666c2b0-13d3-437e-b7b3-e3fb492fd7ce"}, {"type": "malware", "spec_version": "2.1", "id": "malware--018d0c8b-2e75-4398-8f8b-d2223816950a", "created": "2026-10-09T15:13:12.32531Z", "modified": "2026-10-09T15:13:12.32531Z", "name": "Everspy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0710788d-62c0-4089-84a7-5e0b45351cc6", "created": "2026-10-09T15:13:12.325427Z", "modified": "2026-10-09T15:13:12.325427Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='everspyrat.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.325427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c49e6dc8-33d9-4fc0-9819-4296b5bbc1cd", "created": "2026-10-09T15:13:12.325904Z", "modified": "2026-10-09T15:13:12.325904Z", "relationship_type": "indicates", "source_ref": "indicator--0710788d-62c0-4089-84a7-5e0b45351cc6", "target_ref": "malware--018d0c8b-2e75-4398-8f8b-d2223816950a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d72676-89d3-4a4f-81d4-854222c54f6e", "created": "2026-10-09T15:13:12.32603Z", "modified": "2026-10-09T15:13:12.32603Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='everspy.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.32603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85182b62-8cdc-4faf-842d-b3a969da1146", "created": "2026-10-09T15:13:12.32651Z", "modified": "2026-10-09T15:13:12.32651Z", "relationship_type": "indicates", "source_ref": "indicator--a8d72676-89d3-4a4f-81d4-854222c54f6e", "target_ref": "malware--018d0c8b-2e75-4398-8f8b-d2223816950a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c38b6a-a587-4ee7-a43b-3de0662e49ee", "created": "2026-10-09T15:13:12.326634Z", "modified": "2026-10-09T15:13:12.326634Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.everspy.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.326634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e0027c7-c722-434f-ad09-0a6c4bd505fc", "created": "2026-10-09T15:13:12.327212Z", "modified": "2026-10-09T15:13:12.327212Z", "relationship_type": "indicates", "source_ref": "indicator--65c38b6a-a587-4ee7-a43b-3de0662e49ee", "target_ref": "malware--018d0c8b-2e75-4398-8f8b-d2223816950a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209", "created": "2026-10-09T15:13:12.327347Z", "modified": "2026-10-09T15:13:12.327347Z", "name": "Msafely", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d07808f-221a-4478-a23d-383a87fdf505", "created": "2026-10-09T15:13:12.32746Z", "modified": "2026-10-09T15:13:12.32746Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='strapi.spyphone.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.32746Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62b7d263-da50-4f7e-b91a-9c13a730b7df", "created": "2026-10-09T15:13:12.327931Z", "modified": "2026-10-09T15:13:12.327931Z", "relationship_type": "indicates", "source_ref": "indicator--8d07808f-221a-4478-a23d-383a87fdf505", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4a472b-8928-46e3-a65d-4806c7094b72", "created": "2026-10-09T15:13:12.32805Z", "modified": "2026-10-09T15:13:12.32805Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='strapi.spyx.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.32805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af6b16fe-c0ef-4be4-9dad-e246072168f5", "created": "2026-10-09T15:13:12.328537Z", "modified": "2026-10-09T15:13:12.328537Z", "relationship_type": "indicates", "source_ref": "indicator--ff4a472b-8928-46e3-a65d-4806c7094b72", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc338b0-2ce9-45b5-82b4-96fff32e988a", "created": "2026-10-09T15:13:12.32866Z", "modified": "2026-10-09T15:13:12.32866Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='strapi.msafely.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.32866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b24d14a3-8c33-4126-b31d-878948b9fc8f", "created": "2026-10-09T15:13:12.329133Z", "modified": "2026-10-09T15:13:12.329133Z", "relationship_type": "indicates", "source_ref": "indicator--cfc338b0-2ce9-45b5-82b4-96fff32e988a", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a87d63-5b94-4a93-a43f-bc553e60c4ce", "created": "2026-10-09T15:13:12.329253Z", "modified": "2026-10-09T15:13:12.329253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tun-cos-1258344701.file.myqcloud.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.329253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a6f02a3-59c8-496e-bb67-5f50550d31ab", "created": "2026-10-09T15:13:12.329763Z", "modified": "2026-10-09T15:13:12.329763Z", "relationship_type": "indicates", "source_ref": "indicator--32a87d63-5b94-4a93-a43f-bc553e60c4ce", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd210d16-b743-4dca-be57-c70cf4d5dfae", "created": "2026-10-09T15:13:12.329881Z", "modified": "2026-10-09T15:13:12.329881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.msafely.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.329881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08b438a8-10f3-49c0-9b65-632e3396ced4", "created": "2026-10-09T15:13:12.330357Z", "modified": "2026-10-09T15:13:12.330357Z", "relationship_type": "indicates", "source_ref": "indicator--cd210d16-b743-4dca-be57-c70cf4d5dfae", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d967fe-2f12-4f8c-bc40-9cfe9f860420", "created": "2026-10-09T15:13:12.330476Z", "modified": "2026-10-09T15:13:12.330476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msafely.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.330476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbffd556-4e8b-4edd-a552-334bfd1656ea", "created": "2026-10-09T15:13:12.330943Z", "modified": "2026-10-09T15:13:12.330943Z", "relationship_type": "indicates", "source_ref": "indicator--f0d967fe-2f12-4f8c-bc40-9cfe9f860420", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23dd35c5-9b79-4396-9526-4cc2887a7208", "created": "2026-10-09T15:13:12.331062Z", "modified": "2026-10-09T15:13:12.331062Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='feishu.msafely.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.331062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b6c8c4d-bd7e-4182-b603-c064713d3024", "created": "2026-10-09T15:13:12.331547Z", "modified": "2026-10-09T15:13:12.331547Z", "relationship_type": "indicates", "source_ref": "indicator--23dd35c5-9b79-4396-9526-4cc2887a7208", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1168cfbb-1df0-43a0-8f54-0577a632fc8d", "created": "2026-10-09T15:13:12.331665Z", "modified": "2026-10-09T15:13:12.331665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msafely-nuxt-web.pages.dev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.331665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27fb4ed5-5ab0-447a-b5cc-c0c594bc1496", "created": "2026-10-09T15:13:12.332153Z", "modified": "2026-10-09T15:13:12.332153Z", "relationship_type": "indicates", "source_ref": "indicator--1168cfbb-1df0-43a0-8f54-0577a632fc8d", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa057dd-1ffd-40d6-b28e-7abca3fe5e62", "created": "2026-10-09T15:13:12.33228Z", "modified": "2026-10-09T15:13:12.33228Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spyx.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.33228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31cf6df7-cb73-48e3-b8df-c676ef7a22c2", "created": "2026-10-09T15:13:12.332841Z", "modified": "2026-10-09T15:13:12.332841Z", "relationship_type": "indicates", "source_ref": "indicator--3fa057dd-1ffd-40d6-b28e-7abca3fe5e62", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca9d23a-e914-4ad3-82f8-273815e306dc", "created": "2026-10-09T15:13:12.332964Z", "modified": "2026-10-09T15:13:12.332964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyx.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.332964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--491c7b5a-217b-4466-b5b4-7b3dbb51edc1", "created": "2026-10-09T15:13:12.333435Z", "modified": "2026-10-09T15:13:12.333435Z", "relationship_type": "indicates", "source_ref": "indicator--cca9d23a-e914-4ad3-82f8-273815e306dc", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8612db9e-56a9-438b-8f9b-061239e67c7d", "created": "2026-10-09T15:13:12.333557Z", "modified": "2026-10-09T15:13:12.333557Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spyphone.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.333557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3ce5577-20de-47ed-8ff3-ef93c475c27b", "created": "2026-10-09T15:13:12.334025Z", "modified": "2026-10-09T15:13:12.334025Z", "relationship_type": "indicates", "source_ref": "indicator--8612db9e-56a9-438b-8f9b-061239e67c7d", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ac87e5-ea67-4efe-b193-94f1c8d649b8", "created": "2026-10-09T15:13:12.334143Z", "modified": "2026-10-09T15:13:12.334143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyphone.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.334143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b37483d9-2c57-4cdb-82bc-5b3fb898f70e", "created": "2026-10-09T15:13:12.334614Z", "modified": "2026-10-09T15:13:12.334614Z", "relationship_type": "indicates", "source_ref": "indicator--b9ac87e5-ea67-4efe-b193-94f1c8d649b8", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5d3efe-d061-4e25-821f-d6e9f9f86bc5", "created": "2026-10-09T15:13:12.334734Z", "modified": "2026-10-09T15:13:12.334734Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='images.msafely.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.334734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03aafbab-6bc4-4bbd-822f-1b8042c56943", "created": "2026-10-09T15:13:12.335209Z", "modified": "2026-10-09T15:13:12.335209Z", "relationship_type": "indicates", "source_ref": "indicator--3f5d3efe-d061-4e25-821f-d6e9f9f86bc5", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e878371-18ef-4cab-9997-0fb1a84c8f22", "created": "2026-10-09T15:13:12.335338Z", "modified": "2026-10-09T15:13:12.335338Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='images.spyx.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.335338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61feae28-0570-4015-9299-9a76e9c57221", "created": "2026-10-09T15:13:12.335812Z", "modified": "2026-10-09T15:13:12.335812Z", "relationship_type": "indicates", "source_ref": "indicator--1e878371-18ef-4cab-9997-0fb1a84c8f22", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ade445-15e9-4740-a11b-87a7730cb1a7", "created": "2026-10-09T15:13:12.33593Z", "modified": "2026-10-09T15:13:12.33593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='images.spyphone.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.33593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73bddd29-26bd-46f0-b9a2-ee0ed8532aaa", "created": "2026-10-09T15:13:12.336413Z", "modified": "2026-10-09T15:13:12.336413Z", "relationship_type": "indicates", "source_ref": "indicator--d1ade445-15e9-4740-a11b-87a7730cb1a7", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa72fbe5-4924-4062-98a6-f5698344bc92", "created": "2026-10-09T15:13:12.336532Z", "modified": "2026-10-09T15:13:12.336532Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='io.github.vvb2060.packageinstaller.test']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.336532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49b5416d-5eed-4f42-8d7d-9eea4784b550", "created": "2026-10-09T15:13:12.337016Z", "modified": "2026-10-09T15:13:12.337016Z", "relationship_type": "indicates", "source_ref": "indicator--aa72fbe5-4924-4062-98a6-f5698344bc92", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4fd13d-8ea9-427a-813f-9c2f426c88a1", "created": "2026-10-09T15:13:12.337135Z", "modified": "2026-10-09T15:13:12.337135Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1BE914194D14B3DEDA93EA06E0C58ECD420BB89F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.337135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6db0c08-64f9-45a9-9cad-47c358dad93a", "created": "2026-10-09T15:13:12.337688Z", "modified": "2026-10-09T15:13:12.337688Z", "relationship_type": "indicates", "source_ref": "indicator--be4fd13d-8ea9-427a-813f-9c2f426c88a1", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47784e1-7a04-41c9-ac02-c4428e2c414a", "created": "2026-10-09T15:13:12.337811Z", "modified": "2026-10-09T15:13:12.337811Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E82EDEDCDC22C6FA054AA74274AB789412B1C2F5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.337811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5eba22eb-b5dc-46e9-bf16-8fec7e774d56", "created": "2026-10-09T15:13:12.338455Z", "modified": "2026-10-09T15:13:12.338455Z", "relationship_type": "indicates", "source_ref": "indicator--a47784e1-7a04-41c9-ac02-c4428e2c414a", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750398ee-05f9-4cd0-91be-2a8bc02ad0e3", "created": "2026-10-09T15:13:12.338578Z", "modified": "2026-10-09T15:13:12.338578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4FEAF05665D7CA7D017962CADFDB4E38CC8D79E7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.338578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--107a21ea-2a87-43ea-a28e-a8de1699eee8", "created": "2026-10-09T15:13:12.339124Z", "modified": "2026-10-09T15:13:12.339124Z", "relationship_type": "indicates", "source_ref": "indicator--750398ee-05f9-4cd0-91be-2a8bc02ad0e3", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e122dfd-cbdf-49b0-9215-fa62f1b76b59", "created": "2026-10-09T15:13:12.339243Z", "modified": "2026-10-09T15:13:12.339243Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0172D7D80D2F0656711ED87C2433988BFF820E3D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.339243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50b2539b-fcc7-4600-a00c-34cea487962d", "created": "2026-10-09T15:13:12.339791Z", "modified": "2026-10-09T15:13:12.339791Z", "relationship_type": "indicates", "source_ref": "indicator--5e122dfd-cbdf-49b0-9215-fa62f1b76b59", "target_ref": "malware--f462a902-1d6e-49a3-a3aa-dde6ba19c209"}, {"type": "malware", "spec_version": "2.1", "id": "malware--17a7a159-97fb-45af-b51f-658b3c7ee978", "created": "2026-10-09T15:13:12.339907Z", "modified": "2026-10-09T15:13:12.339907Z", "name": "SpyStealth", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb93528-00ed-49d8-aafe-2c1781c4ba67", "created": "2026-10-09T15:13:12.340019Z", "modified": "2026-10-09T15:13:12.340019Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='stage.spystealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.340019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08c2f425-947b-49b5-8f01-a8adb98e055c", "created": "2026-10-09T15:13:12.340508Z", "modified": "2026-10-09T15:13:12.340508Z", "relationship_type": "indicates", "source_ref": "indicator--9eb93528-00ed-49d8-aafe-2c1781c4ba67", "target_ref": "malware--17a7a159-97fb-45af-b51f-658b3c7ee978"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd96da1-b21c-4af1-a80b-b90ce7134e02", "created": "2026-10-09T15:13:12.340631Z", "modified": "2026-10-09T15:13:12.340631Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tt.spystealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.340631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5c4b428-edaa-464e-9e13-f6f9fb3a2d77", "created": "2026-10-09T15:13:12.341113Z", "modified": "2026-10-09T15:13:12.341113Z", "relationship_type": "indicates", "source_ref": "indicator--5cd96da1-b21c-4af1-a80b-b90ce7134e02", "target_ref": "malware--17a7a159-97fb-45af-b51f-658b3c7ee978"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9503ea96-90fe-4a36-9310-8f87b652917e", "created": "2026-10-09T15:13:12.341234Z", "modified": "2026-10-09T15:13:12.341234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.spystealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.341234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45a2b25f-ce23-4daa-9c7e-276844e23fa7", "created": "2026-10-09T15:13:12.341715Z", "modified": "2026-10-09T15:13:12.341715Z", "relationship_type": "indicates", "source_ref": "indicator--9503ea96-90fe-4a36-9310-8f87b652917e", "target_ref": "malware--17a7a159-97fb-45af-b51f-658b3c7ee978"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3973f0-b294-4104-a443-efb6b0851664", "created": "2026-10-09T15:13:12.341832Z", "modified": "2026-10-09T15:13:12.341832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spystealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.341832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8289fab-e63a-4d74-9cf8-4d7a2ac8b335", "created": "2026-10-09T15:13:12.342355Z", "modified": "2026-10-09T15:13:12.342355Z", "relationship_type": "indicates", "source_ref": "indicator--3c3973f0-b294-4104-a443-efb6b0851664", "target_ref": "malware--17a7a159-97fb-45af-b51f-658b3c7ee978"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0", "created": "2026-10-09T15:13:12.342481Z", "modified": "2026-10-09T15:13:12.342481Z", "name": "WiseMo", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb83fb0-fd22-4986-87e0-065dc9611626", "created": "2026-10-09T15:13:12.342597Z", "modified": "2026-10-09T15:13:12.342597Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud1.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.342597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcfe551d-64e2-4d7f-989b-50f2f90937c0", "created": "2026-10-09T15:13:12.343078Z", "modified": "2026-10-09T15:13:12.343078Z", "relationship_type": "indicates", "source_ref": "indicator--0fb83fb0-fd22-4986-87e0-065dc9611626", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f7822c-3a99-42bd-a573-1d02ab5f2872", "created": "2026-10-09T15:13:12.343197Z", "modified": "2026-10-09T15:13:12.343197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.343197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42d9f770-7670-4975-b321-ab11f8032867", "created": "2026-10-09T15:13:12.343688Z", "modified": "2026-10-09T15:13:12.343688Z", "relationship_type": "indicates", "source_ref": "indicator--37f7822c-3a99-42bd-a573-1d02ab5f2872", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1d6b0e-36b3-41ac-9ed8-cd3da5f89149", "created": "2026-10-09T15:13:12.343808Z", "modified": "2026-10-09T15:13:12.343808Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtracker.fortess.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.343808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b60b0881-8a8a-4989-a0cd-e59f2ccdbd15", "created": "2026-10-09T15:13:12.344395Z", "modified": "2026-10-09T15:13:12.344395Z", "relationship_type": "indicates", "source_ref": "indicator--cc1d6b0e-36b3-41ac-9ed8-cd3da5f89149", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c94fead-c932-40f0-b0bf-9f53b92b58f6", "created": "2026-10-09T15:13:12.344519Z", "modified": "2026-10-09T15:13:12.344519Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs10.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.344519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1e8a8e1-d578-41b7-9447-ccc96279f3a6", "created": "2026-10-09T15:13:12.345003Z", "modified": "2026-10-09T15:13:12.345003Z", "relationship_type": "indicates", "source_ref": "indicator--2c94fead-c932-40f0-b0bf-9f53b92b58f6", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d174dc8a-db4f-4a43-8d99-597b378b7790", "created": "2026-10-09T15:13:12.345121Z", "modified": "2026-10-09T15:13:12.345121Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs17.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.345121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e0665ba-eb83-4c4e-ac0e-f0bcfcef2eda", "created": "2026-10-09T15:13:12.345615Z", "modified": "2026-10-09T15:13:12.345615Z", "relationship_type": "indicates", "source_ref": "indicator--d174dc8a-db4f-4a43-8d99-597b378b7790", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3416b1-1370-4d72-99e8-e3e0959264df", "created": "2026-10-09T15:13:12.34574Z", "modified": "2026-10-09T15:13:12.34574Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs17a.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.34574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bdc4ffe-15c4-43e6-b71e-737f1385f5f8", "created": "2026-10-09T15:13:12.346223Z", "modified": "2026-10-09T15:13:12.346223Z", "relationship_type": "indicates", "source_ref": "indicator--6c3416b1-1370-4d72-99e8-e3e0959264df", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61dfd2f-57a0-4180-9d80-e093bdef627d", "created": "2026-10-09T15:13:12.346354Z", "modified": "2026-10-09T15:13:12.346354Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs5a.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.346354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69f8d176-28fd-4333-b869-dcaf2ec7bdcc", "created": "2026-10-09T15:13:12.346832Z", "modified": "2026-10-09T15:13:12.346832Z", "relationship_type": "indicates", "source_ref": "indicator--c61dfd2f-57a0-4180-9d80-e093bdef627d", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42607a50-d8df-4260-94c2-2ce7f5a9078e", "created": "2026-10-09T15:13:12.346949Z", "modified": "2026-10-09T15:13:12.346949Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs9.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.346949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee624924-382e-4bb2-b4c1-4845152486ad", "created": "2026-10-09T15:13:12.347432Z", "modified": "2026-10-09T15:13:12.347432Z", "relationship_type": "indicates", "source_ref": "indicator--42607a50-d8df-4260-94c2-2ce7f5a9078e", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4e5803-778a-44ec-9da5-c267c70fdd5a", "created": "2026-10-09T15:13:12.34755Z", "modified": "2026-10-09T15:13:12.34755Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.34755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe01ca65-5d8a-4361-8431-76bfc09976b2", "created": "2026-10-09T15:13:12.348012Z", "modified": "2026-10-09T15:13:12.348012Z", "relationship_type": "indicates", "source_ref": "indicator--3b4e5803-778a-44ec-9da5-c267c70fdd5a", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da20a33-e433-44bf-8642-85c93c7bf568", "created": "2026-10-09T15:13:12.348127Z", "modified": "2026-10-09T15:13:12.348127Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.348127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11ae9a59-59ac-48d4-944f-eaf5ae8717ab", "created": "2026-10-09T15:13:12.34861Z", "modified": "2026-10-09T15:13:12.34861Z", "relationship_type": "indicates", "source_ref": "indicator--1da20a33-e433-44bf-8642-85c93c7bf568", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fbae63-6e61-48f1-8861-69fd8118d5d2", "created": "2026-10-09T15:13:12.348733Z", "modified": "2026-10-09T15:13:12.348733Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wisemo.host.v10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.348733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee6a12ac-ed05-49ba-9c66-f7c8e9354b5e", "created": "2026-10-09T15:13:12.349189Z", "modified": "2026-10-09T15:13:12.349189Z", "relationship_type": "indicates", "source_ref": "indicator--18fbae63-6e61-48f1-8861-69fd8118d5d2", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6b6985-e448-4674-8de7-852352f9c823", "created": "2026-10-09T15:13:12.34932Z", "modified": "2026-10-09T15:13:12.34932Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B48840CBF93379410172B4B85989624D2B33D59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.34932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cff2cf12-f80c-4783-a084-e1cb083deffa", "created": "2026-10-09T15:13:12.349982Z", "modified": "2026-10-09T15:13:12.349982Z", "relationship_type": "indicates", "source_ref": "indicator--1e6b6985-e448-4674-8de7-852352f9c823", "target_ref": "malware--a0e9ef61-b323-4abf-a8b8-fcf06ddf6be0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a", "created": "2026-10-09T15:13:12.35011Z", "modified": "2026-10-09T15:13:12.35011Z", "name": "FamiSafe", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246b7f91-a4e1-4b01-bee7-a019e7f61b0a", "created": "2026-10-09T15:13:12.350224Z", "modified": "2026-10-09T15:13:12.350224Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='300624.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.350224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6aad4838-edcb-40ce-92b9-2a8db38db8f1", "created": "2026-10-09T15:13:12.350718Z", "modified": "2026-10-09T15:13:12.350718Z", "relationship_type": "indicates", "source_ref": "indicator--246b7f91-a4e1-4b01-bee7-a019e7f61b0a", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f105c150-39f9-420d-9d3e-400134cf94dd", "created": "2026-10-09T15:13:12.35084Z", "modified": "2026-10-09T15:13:12.35084Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='analytics.300624.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.35084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60772971-6a47-494f-80e7-ac744e55d5ae", "created": "2026-10-09T15:13:12.351321Z", "modified": "2026-10-09T15:13:12.351321Z", "relationship_type": "indicates", "source_ref": "indicator--f105c150-39f9-420d-9d3e-400134cf94dd", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ee0393-3f46-4c3e-b460-867ac486dc90", "created": "2026-10-09T15:13:12.351444Z", "modified": "2026-10-09T15:13:12.351444Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.wondershare.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.351444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77ea4625-5985-4f98-af66-5663f687b796", "created": "2026-10-09T15:13:12.351922Z", "modified": "2026-10-09T15:13:12.351922Z", "relationship_type": "indicates", "source_ref": "indicator--82ee0393-3f46-4c3e-b460-867ac486dc90", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740c5863-a25a-4959-ad12-24ad9f6457c1", "created": "2026-10-09T15:13:12.352042Z", "modified": "2026-10-09T15:13:12.352042Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app-api-pro.wondershare.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.352042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb998a46-46a6-4e07-a061-810f5184c9c8", "created": "2026-10-09T15:13:12.352544Z", "modified": "2026-10-09T15:13:12.352544Z", "relationship_type": "indicates", "source_ref": "indicator--740c5863-a25a-4959-ad12-24ad9f6457c1", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef1d51a-af9e-498e-9117-74d402ddf5c2", "created": "2026-10-09T15:13:12.352667Z", "modified": "2026-10-09T15:13:12.352667Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-api.famisafe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.352667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d025810-dad4-40a4-907e-b9ced1b8feb0", "created": "2026-10-09T15:13:12.353145Z", "modified": "2026-10-09T15:13:12.353145Z", "relationship_type": "indicates", "source_ref": "indicator--9ef1d51a-af9e-498e-9117-74d402ddf5c2", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038cae35-24ae-4b7a-8cbc-dd8dbed99e2f", "created": "2026-10-09T15:13:12.353276Z", "modified": "2026-10-09T15:13:12.353276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dc.wondershare.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.353276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2303c950-556a-4239-b27d-1298c41107de", "created": "2026-10-09T15:13:12.353752Z", "modified": "2026-10-09T15:13:12.353752Z", "relationship_type": "indicates", "source_ref": "indicator--038cae35-24ae-4b7a-8cbc-dd8dbed99e2f", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534e036a-2c77-4eae-a85b-17a888708d5d", "created": "2026-10-09T15:13:12.353869Z", "modified": "2026-10-09T15:13:12.353869Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famisafe-b6807.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.353869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd420d50-9dd1-409f-b983-8261420df949", "created": "2026-10-09T15:13:12.354367Z", "modified": "2026-10-09T15:13:12.354367Z", "relationship_type": "indicates", "source_ref": "indicator--534e036a-2c77-4eae-a85b-17a888708d5d", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ed5ec4-3169-47dd-b997-e8bc822f151d", "created": "2026-10-09T15:13:12.354486Z", "modified": "2026-10-09T15:13:12.354486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sparrow.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.354486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b19c9c9-9657-44e0-aac9-9aa45e974537", "created": "2026-10-09T15:13:12.35496Z", "modified": "2026-10-09T15:13:12.35496Z", "relationship_type": "indicates", "source_ref": "indicator--d5ed5ec4-3169-47dd-b997-e8bc822f151d", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97759fc2-1bea-428e-97b2-fa6dbc9c47ef", "created": "2026-10-09T15:13:12.355077Z", "modified": "2026-10-09T15:13:12.355077Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famisafe.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.355077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3192be8f-8fef-42df-88a4-5c9c36dec58d", "created": "2026-10-09T15:13:12.355657Z", "modified": "2026-10-09T15:13:12.355657Z", "relationship_type": "indicates", "source_ref": "indicator--97759fc2-1bea-428e-97b2-fa6dbc9c47ef", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f070941d-e6bb-4217-b286-d2947b2f5022", "created": "2026-10-09T15:13:12.355785Z", "modified": "2026-10-09T15:13:12.355785Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famisafeapp.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.355785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56e59ffc-8aea-4a6b-8bcf-e9da94b902c3", "created": "2026-10-09T15:13:12.356295Z", "modified": "2026-10-09T15:13:12.356295Z", "relationship_type": "indicates", "source_ref": "indicator--f070941d-e6bb-4217-b286-d2947b2f5022", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3312c0e6-a173-4bd1-8646-430b3c54f24d", "created": "2026-10-09T15:13:12.35642Z", "modified": "2026-10-09T15:13:12.35642Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accounts.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.35642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3aa62bc-64d7-40e9-8bcb-9bfa1d72ddfb", "created": "2026-10-09T15:13:12.356904Z", "modified": "2026-10-09T15:13:12.356904Z", "relationship_type": "indicates", "source_ref": "indicator--3312c0e6-a173-4bd1-8646-430b3c54f24d", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24638306-2d50-4557-9582-04ea0cbc0fd3", "created": "2026-10-09T15:13:12.357025Z", "modified": "2026-10-09T15:13:12.357025Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wondershare.famisafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.357025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c51d153e-55b0-4f2b-8a25-c4482c505843", "created": "2026-10-09T15:13:12.357504Z", "modified": "2026-10-09T15:13:12.357504Z", "relationship_type": "indicates", "source_ref": "indicator--24638306-2d50-4557-9582-04ea0cbc0fd3", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97132ebd-07d0-429a-bddc-cbfbd8978927", "created": "2026-10-09T15:13:12.357628Z", "modified": "2026-10-09T15:13:12.357628Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wondershare.famisafe.kids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.357628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eba0a3af-b317-4054-9834-f9d72518ff2e", "created": "2026-10-09T15:13:12.358106Z", "modified": "2026-10-09T15:13:12.358106Z", "relationship_type": "indicates", "source_ref": "indicator--97132ebd-07d0-429a-bddc-cbfbd8978927", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c07113d-cfb4-47f2-877a-38466651cadb", "created": "2026-10-09T15:13:12.358226Z", "modified": "2026-10-09T15:13:12.358226Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='61B90229F79F730043D06FEE46BB8FD9E3A0E70B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.358226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--996d2f44-b26f-4976-9a69-640849d584d8", "created": "2026-10-09T15:13:12.358791Z", "modified": "2026-10-09T15:13:12.358791Z", "relationship_type": "indicates", "source_ref": "indicator--2c07113d-cfb4-47f2-877a-38466651cadb", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d8bf35-aa96-4ae4-a2cc-58a0405cef87", "created": "2026-10-09T15:13:12.35891Z", "modified": "2026-10-09T15:13:12.35891Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='095514BA4F28DBE521C74ABF77972BE3C86A50A5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.35891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17069e07-311a-4f1c-bfb2-95ba13ea78cd", "created": "2026-10-09T15:13:12.35946Z", "modified": "2026-10-09T15:13:12.35946Z", "relationship_type": "indicates", "source_ref": "indicator--c1d8bf35-aa96-4ae4-a2cc-58a0405cef87", "target_ref": "malware--4d31dd87-4722-4aca-bac3-ff1f947b002a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--91ab6533-c658-4b91-b010-59a59e38c8dc", "created": "2026-10-09T15:13:12.359578Z", "modified": "2026-10-09T15:13:12.359578Z", "name": "KasperskySafeKids", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3b58cf-e8ee-4988-9f01-b7ecc84fb7f8", "created": "2026-10-09T15:13:12.35969Z", "modified": "2026-10-09T15:13:12.35969Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kaspersky-safe-kids.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.35969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db3f8fa0-85cd-4eb2-a7b4-e308d8ee72aa", "created": "2026-10-09T15:13:12.360185Z", "modified": "2026-10-09T15:13:12.360185Z", "relationship_type": "indicates", "source_ref": "indicator--8f3b58cf-e8ee-4988-9f01-b7ecc84fb7f8", "target_ref": "malware--91ab6533-c658-4b91-b010-59a59e38c8dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81016e4e-d1fb-49ec-ad71-c2816d210619", "created": "2026-10-09T15:13:12.360328Z", "modified": "2026-10-09T15:13:12.360328Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kaspersky.safekids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.360328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4ca7cb4-392d-46e7-a5ce-42907eabc47a", "created": "2026-10-09T15:13:12.360795Z", "modified": "2026-10-09T15:13:12.360795Z", "relationship_type": "indicates", "source_ref": "indicator--81016e4e-d1fb-49ec-ad71-c2816d210619", "target_ref": "malware--91ab6533-c658-4b91-b010-59a59e38c8dc"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6", "created": "2026-10-09T15:13:12.360915Z", "modified": "2026-10-09T15:13:12.360915Z", "name": "KidsControl", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2c1a51-1d62-4a45-a7fb-36708c6daf77", "created": "2026-10-09T15:13:12.361029Z", "modified": "2026-10-09T15:13:12.361029Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.361029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a14ca864-cf06-4d58-9844-d06b17d4cf80", "created": "2026-10-09T15:13:12.361617Z", "modified": "2026-10-09T15:13:12.361617Z", "relationship_type": "indicates", "source_ref": "indicator--7e2c1a51-1d62-4a45-a7fb-36708c6daf77", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca15af8-bce7-4fa5-aa00-97cef64f18f4", "created": "2026-10-09T15:13:12.361739Z", "modified": "2026-10-09T15:13:12.361739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.361739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67f431d9-fae0-4ce4-a354-aa50959716c2", "created": "2026-10-09T15:13:12.362214Z", "modified": "2026-10-09T15:13:12.362214Z", "relationship_type": "indicates", "source_ref": "indicator--eca15af8-bce7-4fa5-aa00-97cef64f18f4", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07180efe-a20f-4089-85fe-04c836a71b2b", "created": "2026-10-09T15:13:12.362344Z", "modified": "2026-10-09T15:13:12.362344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ios.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.362344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0f999e1-5937-4b65-82b2-ff48bd95b8cf", "created": "2026-10-09T15:13:12.362819Z", "modified": "2026-10-09T15:13:12.362819Z", "relationship_type": "indicates", "source_ref": "indicator--07180efe-a20f-4089-85fe-04c836a71b2b", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecb9d23-86cc-4f2b-9e2d-ffb884ba6e26", "created": "2026-10-09T15:13:12.362942Z", "modified": "2026-10-09T15:13:12.362942Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='go.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.362942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--894f9900-2efa-4181-8ede-6748546ea82e", "created": "2026-10-09T15:13:12.363426Z", "modified": "2026-10-09T15:13:12.363426Z", "relationship_type": "indicates", "source_ref": "indicator--7ecb9d23-86cc-4f2b-9e2d-ffb884ba6e26", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11126e2-e796-42f0-99a0-307314909f96", "created": "2026-10-09T15:13:12.363547Z", "modified": "2026-10-09T15:13:12.363547Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='go2.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.363547Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d550907-c551-4ccb-98cb-b6ee875e0cb3", "created": "2026-10-09T15:13:12.364021Z", "modified": "2026-10-09T15:13:12.364021Z", "relationship_type": "indicates", "source_ref": "indicator--e11126e2-e796-42f0-99a0-307314909f96", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5cade7-144a-4fa2-863f-92a2d72ce34b", "created": "2026-10-09T15:13:12.364138Z", "modified": "2026-10-09T15:13:12.364138Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpsme1.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.364138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd49cfa3-9dda-44e0-b3cb-9de9164f7de3", "created": "2026-10-09T15:13:12.364623Z", "modified": "2026-10-09T15:13:12.364623Z", "relationship_type": "indicates", "source_ref": "indicator--bf5cade7-144a-4fa2-863f-92a2d72ce34b", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bd71d6-4a8f-4255-bda9-712c64bb826a", "created": "2026-10-09T15:13:12.364742Z", "modified": "2026-10-09T15:13:12.364742Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.364742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b9581ce-dabe-46fc-a5a9-6c7f783524c2", "created": "2026-10-09T15:13:12.365219Z", "modified": "2026-10-09T15:13:12.365219Z", "relationship_type": "indicates", "source_ref": "indicator--58bd71d6-4a8f-4255-bda9-712c64bb826a", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f6d639-af40-43c1-b391-69fdfe52bd34", "created": "2026-10-09T15:13:12.365347Z", "modified": "2026-10-09T15:13:12.365347Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s4.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.365347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f11e74b-fb2d-4954-bfeb-073c16f60acb", "created": "2026-10-09T15:13:12.365835Z", "modified": "2026-10-09T15:13:12.365835Z", "relationship_type": "indicates", "source_ref": "indicator--f5f6d639-af40-43c1-b391-69fdfe52bd34", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5477ffb5-9c87-4380-97c6-03221dd9938a", "created": "2026-10-09T15:13:12.365953Z", "modified": "2026-10-09T15:13:12.365953Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s5.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.365953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5b82781-ca6e-4b1a-9aa0-1474377e88f0", "created": "2026-10-09T15:13:12.366436Z", "modified": "2026-10-09T15:13:12.366436Z", "relationship_type": "indicates", "source_ref": "indicator--5477ffb5-9c87-4380-97c6-03221dd9938a", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff61ff44-b6af-4bdd-bc74-9b1c84c73665", "created": "2026-10-09T15:13:12.366554Z", "modified": "2026-10-09T15:13:12.366554Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s6.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.366554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06c577b5-417a-4a84-8b22-1b9db4e4e00e", "created": "2026-10-09T15:13:12.367387Z", "modified": "2026-10-09T15:13:12.367387Z", "relationship_type": "indicates", "source_ref": "indicator--ff61ff44-b6af-4bdd-bc74-9b1c84c73665", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3c5ec5-f654-49c9-8622-a890f624019e", "created": "2026-10-09T15:13:12.367519Z", "modified": "2026-10-09T15:13:12.367519Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s7.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.367519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f843e367-7c5e-43f5-b025-e245a491ba6a", "created": "2026-10-09T15:13:12.368003Z", "modified": "2026-10-09T15:13:12.368003Z", "relationship_type": "indicates", "source_ref": "indicator--ab3c5ec5-f654-49c9-8622-a890f624019e", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cf1ff8-7c5c-4ded-9274-835dbb5080a4", "created": "2026-10-09T15:13:12.368124Z", "modified": "2026-10-09T15:13:12.368124Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s8.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.368124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dacd6b8-5535-4096-ae21-56deecc677b4", "created": "2026-10-09T15:13:12.368604Z", "modified": "2026-10-09T15:13:12.368604Z", "relationship_type": "indicates", "source_ref": "indicator--49cf1ff8-7c5c-4ded-9274-835dbb5080a4", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed2493a-758e-402f-b3d3-fa17c318afea", "created": "2026-10-09T15:13:12.368726Z", "modified": "2026-10-09T15:13:12.368726Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s9.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.368726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd0244c0-8f2b-4b80-be1e-619b5011263e", "created": "2026-10-09T15:13:12.369199Z", "modified": "2026-10-09T15:13:12.369199Z", "relationship_type": "indicates", "source_ref": "indicator--4ed2493a-758e-402f-b3d3-fa17c318afea", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56af8e66-0cb8-47ba-bf17-810a3e1dabd9", "created": "2026-10-09T15:13:12.369329Z", "modified": "2026-10-09T15:13:12.369329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s10.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.369329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69973b25-b74b-46a2-888f-49f7dbca98af", "created": "2026-10-09T15:13:12.369806Z", "modified": "2026-10-09T15:13:12.369806Z", "relationship_type": "indicates", "source_ref": "indicator--56af8e66-0cb8-47ba-bf17-810a3e1dabd9", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e73011-8dc3-4743-85c4-252b5408c85e", "created": "2026-10-09T15:13:12.369925Z", "modified": "2026-10-09T15:13:12.369925Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.369925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52dedfc1-3096-4964-b749-763b785f8e8e", "created": "2026-10-09T15:13:12.370405Z", "modified": "2026-10-09T15:13:12.370405Z", "relationship_type": "indicates", "source_ref": "indicator--e5e73011-8dc3-4743-85c4-252b5408c85e", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc423ae-9b14-4f6d-8504-a51475a9f864", "created": "2026-10-09T15:13:12.37053Z", "modified": "2026-10-09T15:13:12.37053Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kid-control.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.37053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4d17998-0995-4327-947e-38c285e06074", "created": "2026-10-09T15:13:12.371002Z", "modified": "2026-10-09T15:13:12.371002Z", "relationship_type": "indicates", "source_ref": "indicator--8cc423ae-9b14-4f6d-8504-a51475a9f864", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8867c73-784e-4c54-9631-66f3ba834466", "created": "2026-10-09T15:13:12.371127Z", "modified": "2026-10-09T15:13:12.371127Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.gpsme']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.371127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc660dc1-e69b-4cce-b8af-e49a9d47f7f9", "created": "2026-10-09T15:13:12.371572Z", "modified": "2026-10-09T15:13:12.371572Z", "relationship_type": "indicates", "source_ref": "indicator--b8867c73-784e-4c54-9631-66f3ba834466", "target_ref": "malware--6fe6132c-f63b-4d64-bb04-5f607fb490e6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221", "created": "2026-10-09T15:13:12.371694Z", "modified": "2026-10-09T15:13:12.371694Z", "name": "FindMyKids", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f48df27-7a67-4913-afe6-6f6667bc2e4b", "created": "2026-10-09T15:13:12.371805Z", "modified": "2026-10-09T15:13:12.371805Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='r.findmychilds.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.371805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f244c027-7ed7-409d-94c3-a902b46feb02", "created": "2026-10-09T15:13:12.372288Z", "modified": "2026-10-09T15:13:12.372288Z", "relationship_type": "indicates", "source_ref": "indicator--7f48df27-7a67-4913-afe6-6f6667bc2e4b", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714c6189-2e0f-4a1b-85ac-d054d263f08e", "created": "2026-10-09T15:13:12.372408Z", "modified": "2026-10-09T15:13:12.372408Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wss.findmychilds.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.372408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--305034ad-ed70-4eaf-a9bb-47767241a136", "created": "2026-10-09T15:13:12.372884Z", "modified": "2026-10-09T15:13:12.372884Z", "relationship_type": "indicates", "source_ref": "indicator--714c6189-2e0f-4a1b-85ac-d054d263f08e", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c401ed-1fed-42a2-83bb-85c8fc01e27d", "created": "2026-10-09T15:13:12.373005Z", "modified": "2026-10-09T15:13:12.373005Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='where-is-my-children.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.373005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fa95f7b-96bc-4b29-8cb3-c325156ab122", "created": "2026-10-09T15:13:12.373607Z", "modified": "2026-10-09T15:13:12.373607Z", "relationship_type": "indicates", "source_ref": "indicator--a9c401ed-1fed-42a2-83bb-85c8fc01e27d", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3144a617-9d8a-4c56-b895-0bb8d983e7df", "created": "2026-10-09T15:13:12.373731Z", "modified": "2026-10-09T15:13:12.373731Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.373731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9696b08a-0c2e-4685-a971-c6da97533994", "created": "2026-10-09T15:13:12.374196Z", "modified": "2026-10-09T15:13:12.374196Z", "relationship_type": "indicates", "source_ref": "indicator--3144a617-9d8a-4c56-b895-0bb8d983e7df", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e54866-3712-47b9-8040-61ff0c624aee", "created": "2026-10-09T15:13:12.374329Z", "modified": "2026-10-09T15:13:12.374329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='discount.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.374329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39654f83-f3c3-44cb-9f55-8945c73412bc", "created": "2026-10-09T15:13:12.374807Z", "modified": "2026-10-09T15:13:12.374807Z", "relationship_type": "indicates", "source_ref": "indicator--30e54866-3712-47b9-8040-61ff0c624aee", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a1f837-3f56-4bb5-8ad1-c1e973e9753d", "created": "2026-10-09T15:13:12.374926Z", "modified": "2026-10-09T15:13:12.374926Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.findmykids.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.374926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d42db02e-75b1-4728-bbd3-5be1b890d5cd", "created": "2026-10-09T15:13:12.375383Z", "modified": "2026-10-09T15:13:12.375383Z", "relationship_type": "indicates", "source_ref": "indicator--76a1f837-3f56-4bb5-8ad1-c1e973e9753d", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec24b446-5a9e-4d19-a333-bcd089656cab", "created": "2026-10-09T15:13:12.375502Z", "modified": "2026-10-09T15:13:12.375502Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wheremychildren.ios']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.375502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8580fe84-6edc-4207-8ddd-6e674c24ba1e", "created": "2026-10-09T15:13:12.37601Z", "modified": "2026-10-09T15:13:12.37601Z", "relationship_type": "indicates", "source_ref": "indicator--ec24b446-5a9e-4d19-a333-bcd089656cab", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c9138b-3eda-4f7d-b290-141fafd63527", "created": "2026-10-09T15:13:12.376145Z", "modified": "2026-10-09T15:13:12.376145Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2A57777E3B9491A37392AFCE2E69D030DBF95037']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.376145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c643e913-14e3-4d58-bde2-ca45e4cc7efb", "created": "2026-10-09T15:13:12.376707Z", "modified": "2026-10-09T15:13:12.376707Z", "relationship_type": "indicates", "source_ref": "indicator--94c9138b-3eda-4f7d-b290-141fafd63527", "target_ref": "malware--506efd3f-0b9f-4b09-b0ae-937e3388f221"}, {"type": "malware", "spec_version": "2.1", "id": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2", "created": "2026-10-09T15:13:12.376828Z", "modified": "2026-10-09T15:13:12.376828Z", "name": "Accountable2you", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f642f75a-463a-4cff-9ebf-2ebd72d9af5a", "created": "2026-10-09T15:13:12.37694Z", "modified": "2026-10-09T15:13:12.37694Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.37694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9e3b16f-b60c-45e8-a4e1-cf242005f584", "created": "2026-10-09T15:13:12.377422Z", "modified": "2026-10-09T15:13:12.377422Z", "relationship_type": "indicates", "source_ref": "indicator--f642f75a-463a-4cff-9ebf-2ebd72d9af5a", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1f1393-3dc3-4288-b68a-219a99e42685", "created": "2026-10-09T15:13:12.377542Z", "modified": "2026-10-09T15:13:12.377542Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webservice.accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.377542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41391e50-de23-4f76-a8f7-38ceb5a43e37", "created": "2026-10-09T15:13:12.378025Z", "modified": "2026-10-09T15:13:12.378025Z", "relationship_type": "indicates", "source_ref": "indicator--9d1f1393-3dc3-4288-b68a-219a99e42685", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deaa19a-9c5d-410c-9110-fe26afb591be", "created": "2026-10-09T15:13:12.37815Z", "modified": "2026-10-09T15:13:12.37815Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accountable2you-android.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.37815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e666223-0cb5-484b-9c35-57492f84427b", "created": "2026-10-09T15:13:12.378658Z", "modified": "2026-10-09T15:13:12.378658Z", "relationship_type": "indicates", "source_ref": "indicator--0deaa19a-9c5d-410c-9110-fe26afb591be", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950246dc-9492-437d-bf90-341d5a1c04e0", "created": "2026-10-09T15:13:12.37878Z", "modified": "2026-10-09T15:13:12.37878Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.37878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--221f29e3-0a65-459c-81c1-4dd90ac240b8", "created": "2026-10-09T15:13:12.379377Z", "modified": "2026-10-09T15:13:12.379377Z", "relationship_type": "indicates", "source_ref": "indicator--950246dc-9492-437d-bf90-341d5a1c04e0", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ad27f3-16b7-41b2-817e-dda507c13f05", "created": "2026-10-09T15:13:12.379503Z", "modified": "2026-10-09T15:13:12.379503Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.379503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21941be2-abd8-4d58-9513-f2a598c1562a", "created": "2026-10-09T15:13:12.379987Z", "modified": "2026-10-09T15:13:12.379987Z", "relationship_type": "indicates", "source_ref": "indicator--e4ad27f3-16b7-41b2-817e-dda507c13f05", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22c0cb6-8544-45b7-aa3c-4407c3bc3b20", "created": "2026-10-09T15:13:12.380119Z", "modified": "2026-10-09T15:13:12.380119Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.accountable2you.ap1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.380119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--251971d6-a269-4dbf-90de-7302281ebc52", "created": "2026-10-09T15:13:12.380591Z", "modified": "2026-10-09T15:13:12.380591Z", "relationship_type": "indicates", "source_ref": "indicator--f22c0cb6-8544-45b7-aa3c-4407c3bc3b20", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbeae080-1b93-471a-8768-386ddb3ce2f9", "created": "2026-10-09T15:13:12.38071Z", "modified": "2026-10-09T15:13:12.38071Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='78CFFA689DD23FDD7E84DDFBF28F86D4843C6129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.38071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7b054ef-dc11-4534-bd56-3e6c25de38d5", "created": "2026-10-09T15:13:12.381251Z", "modified": "2026-10-09T15:13:12.381251Z", "relationship_type": "indicates", "source_ref": "indicator--bbeae080-1b93-471a-8768-386ddb3ce2f9", "target_ref": "malware--43ef91b6-a2c4-4d3b-9d9e-33987e4e48f2"}, {"type": "malware", "spec_version": "2.1", "id": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96", "created": "2026-10-09T15:13:12.381378Z", "modified": "2026-10-09T15:13:12.381378Z", "name": "ZoeMob", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fce751-a4fc-4c12-a5fb-a3e8141f8935", "created": "2026-10-09T15:13:12.381491Z", "modified": "2026-10-09T15:13:12.381491Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apis.zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.381491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a502f029-f5a6-446c-bab8-a96e68c1f3c7", "created": "2026-10-09T15:13:12.381953Z", "modified": "2026-10-09T15:13:12.381953Z", "relationship_type": "indicates", "source_ref": "indicator--57fce751-a4fc-4c12-a5fb-a3e8141f8935", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b889b66a-b6a9-40ba-a7d7-12ebec218466", "created": "2026-10-09T15:13:12.382068Z", "modified": "2026-10-09T15:13:12.382068Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='zoemob.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.382068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--088baefe-4e21-4d4b-a842-b130112e4992", "created": "2026-10-09T15:13:12.382553Z", "modified": "2026-10-09T15:13:12.382553Z", "relationship_type": "indicates", "source_ref": "indicator--b889b66a-b6a9-40ba-a7d7-12ebec218466", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21547c7-94fd-4918-8d37-eb5f610a01d7", "created": "2026-10-09T15:13:12.382675Z", "modified": "2026-10-09T15:13:12.382675Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.382675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77e4d337-eb61-40b0-b347-86db460b0bab", "created": "2026-10-09T15:13:12.383143Z", "modified": "2026-10-09T15:13:12.383143Z", "relationship_type": "indicates", "source_ref": "indicator--c21547c7-94fd-4918-8d37-eb5f610a01d7", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54ca032-a0e7-4724-8bb2-50c0c863c9fd", "created": "2026-10-09T15:13:12.383259Z", "modified": "2026-10-09T15:13:12.383259Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.383259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dfbff80-e1bb-4c4d-9d83-909db0c6049e", "created": "2026-10-09T15:13:12.383737Z", "modified": "2026-10-09T15:13:12.383737Z", "relationship_type": "indicates", "source_ref": "indicator--a54ca032-a0e7-4724-8bb2-50c0c863c9fd", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7671eda6-b06f-46d7-96b3-755629a1ece9", "created": "2026-10-09T15:13:12.383857Z", "modified": "2026-10-09T15:13:12.383857Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.383857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16a6de93-35ee-49ae-8ef3-089fc0f21734", "created": "2026-10-09T15:13:12.384461Z", "modified": "2026-10-09T15:13:12.384461Z", "relationship_type": "indicates", "source_ref": "indicator--7671eda6-b06f-46d7-96b3-755629a1ece9", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b825b17-6dc3-4888-a73a-e6aa2904caaa", "created": "2026-10-09T15:13:12.384596Z", "modified": "2026-10-09T15:13:12.384596Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.zoemob.gpstracking']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.384596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91a126c5-fd6e-4cfe-850d-6efa773009dd", "created": "2026-10-09T15:13:12.385198Z", "modified": "2026-10-09T15:13:12.385198Z", "relationship_type": "indicates", "source_ref": "indicator--2b825b17-6dc3-4888-a73a-e6aa2904caaa", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbaef16-2896-40e4-9a0d-ebdb582b1c93", "created": "2026-10-09T15:13:12.385347Z", "modified": "2026-10-09T15:13:12.385347Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F9761F7C7AA6317B667671CB8F66479970630EAD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.385347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4620efae-6bfe-48b5-9289-e8ac6fff5b39", "created": "2026-10-09T15:13:12.385924Z", "modified": "2026-10-09T15:13:12.385924Z", "relationship_type": "indicates", "source_ref": "indicator--3cbaef16-2896-40e4-9a0d-ebdb582b1c93", "target_ref": "malware--df316524-e0db-4ef4-bff8-b8cb3039ca96"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da", "created": "2026-10-09T15:13:12.386059Z", "modified": "2026-10-09T15:13:12.386059Z", "name": "Life360", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23431d8e-b458-4628-89bb-d561957fb8be", "created": "2026-10-09T15:13:12.386176Z", "modified": "2026-10-09T15:13:12.386176Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpi4.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.386176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f730e20-f8d7-4a29-9ad8-63ac80ad8f38", "created": "2026-10-09T15:13:12.386662Z", "modified": "2026-10-09T15:13:12.386662Z", "relationship_type": "indicates", "source_ref": "indicator--23431d8e-b458-4628-89bb-d561957fb8be", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51033a06-9644-4215-a14e-cc2b1f6436f4", "created": "2026-10-09T15:13:12.386782Z", "modified": "2026-10-09T15:13:12.386782Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-dev.tile-api.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.386782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--700e3923-dc93-4a5e-b8a9-c3792717c998", "created": "2026-10-09T15:13:12.387261Z", "modified": "2026-10-09T15:13:12.387261Z", "relationship_type": "indicates", "source_ref": "indicator--51033a06-9644-4215-a14e-cc2b1f6436f4", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f506b5-7d67-4e31-bdd8-81179eaf6250", "created": "2026-10-09T15:13:12.38739Z", "modified": "2026-10-09T15:13:12.38739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360.atlassian.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.38739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4459fa01-4bc6-4b33-a01f-10c2e6b70518", "created": "2026-10-09T15:13:12.387872Z", "modified": "2026-10-09T15:13:12.387872Z", "relationship_type": "indicates", "source_ref": "indicator--07f506b5-7d67-4e31-bdd8-81179eaf6250", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5166dea-67bb-4e5c-8eb3-0ec12c8cfd2f", "created": "2026-10-09T15:13:12.387993Z", "modified": "2026-10-09T15:13:12.387993Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-location-dev.tile-api.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.387993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40cb2640-3aea-40d8-9c86-d9b918db8264", "created": "2026-10-09T15:13:12.388507Z", "modified": "2026-10-09T15:13:12.388507Z", "relationship_type": "indicates", "source_ref": "indicator--b5166dea-67bb-4e5c-8eb3-0ec12c8cfd2f", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49020406-a49e-4bc3-a946-26d9908b9c16", "created": "2026-10-09T15:13:12.388629Z", "modified": "2026-10-09T15:13:12.388629Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpi3.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.388629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--245dc99a-bada-4766-ab19-2c7465a064bb", "created": "2026-10-09T15:13:12.389101Z", "modified": "2026-10-09T15:13:12.389101Z", "relationship_type": "indicates", "source_ref": "indicator--49020406-a49e-4bc3-a946-26d9908b9c16", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27cfd606-2a90-4399-b868-9b907f8a8bb4", "created": "2026-10-09T15:13:12.389223Z", "modified": "2026-10-09T15:13:12.389223Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.lf360.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.389223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67a47857-f158-49ba-9cb2-17d5428fe0bc", "created": "2026-10-09T15:13:12.389694Z", "modified": "2026-10-09T15:13:12.389694Z", "relationship_type": "indicates", "source_ref": "indicator--27cfd606-2a90-4399-b868-9b907f8a8bb4", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5a1de0-e70c-4aff-ad14-da596a8a78dd", "created": "2026-10-09T15:13:12.389813Z", "modified": "2026-10-09T15:13:12.389813Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpi4.dev.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.389813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1bb03fb-554d-4d4e-8060-8aa70fb33d0e", "created": "2026-10-09T15:13:12.390324Z", "modified": "2026-10-09T15:13:12.390324Z", "relationship_type": "indicates", "source_ref": "indicator--ad5a1de0-e70c-4aff-ad14-da596a8a78dd", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493224a3-9dfd-4cef-b5a1-75034688b28b", "created": "2026-10-09T15:13:12.390451Z", "modified": "2026-10-09T15:13:12.390451Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360feedback.typeform.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.390451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc841942-9082-4ed6-95ab-456fae3c3d93", "created": "2026-10-09T15:13:12.391067Z", "modified": "2026-10-09T15:13:12.391067Z", "relationship_type": "indicates", "source_ref": "indicator--493224a3-9dfd-4cef-b5a1-75034688b28b", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49dadb9-6522-49c4-baea-b3a713f8ac18", "created": "2026-10-09T15:13:12.391234Z", "modified": "2026-10-09T15:13:12.391234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api-cloudfront.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.391234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d494870-3cba-41e5-968e-0e62b2252a7a", "created": "2026-10-09T15:13:12.391786Z", "modified": "2026-10-09T15:13:12.391786Z", "relationship_type": "indicates", "source_ref": "indicator--b49dadb9-6522-49c4-baea-b3a713f8ac18", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c30586a-8f68-462f-a170-06453773d310", "created": "2026-10-09T15:13:12.391921Z", "modified": "2026-10-09T15:13:12.391921Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-com-l360safetycenter.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.391921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a2597b3-8a2d-4199-a23e-45827799d192", "created": "2026-10-09T15:13:12.392447Z", "modified": "2026-10-09T15:13:12.392447Z", "relationship_type": "indicates", "source_ref": "indicator--5c30586a-8f68-462f-a170-06453773d310", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f8d96c-122e-47da-8088-303f10fc1462", "created": "2026-10-09T15:13:12.392572Z", "modified": "2026-10-09T15:13:12.392572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.392572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01a121f9-998c-4812-8b7f-930ba40f86fd", "created": "2026-10-09T15:13:12.393041Z", "modified": "2026-10-09T15:13:12.393041Z", "relationship_type": "indicates", "source_ref": "indicator--47f8d96c-122e-47da-8088-303f10fc1462", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a634b83a-bc3e-41e7-8d0c-b9cd61f16ecb", "created": "2026-10-09T15:13:12.39316Z", "modified": "2026-10-09T15:13:12.39316Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.39316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c9f61c9-6b77-4c6d-97ba-fbe78157cd6d", "created": "2026-10-09T15:13:12.393691Z", "modified": "2026-10-09T15:13:12.393691Z", "relationship_type": "indicates", "source_ref": "indicator--a634b83a-bc3e-41e7-8d0c-b9cd61f16ecb", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f46c10-d204-4724-9c42-e5b611ea4983", "created": "2026-10-09T15:13:12.393825Z", "modified": "2026-10-09T15:13:12.393825Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-wordpress.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.393825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f71a9875-68c1-47b0-b973-511f323f54d6", "created": "2026-10-09T15:13:12.394342Z", "modified": "2026-10-09T15:13:12.394342Z", "relationship_type": "indicates", "source_ref": "indicator--39f46c10-d204-4724-9c42-e5b611ea4983", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b994dcce-77d5-41ca-a560-77779d026e40", "created": "2026-10-09T15:13:12.394466Z", "modified": "2026-10-09T15:13:12.394466Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.394466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1fab74f-aea7-4299-877a-4f6fc346eec8", "created": "2026-10-09T15:13:12.394945Z", "modified": "2026-10-09T15:13:12.394945Z", "relationship_type": "indicates", "source_ref": "indicator--b994dcce-77d5-41ca-a560-77779d026e40", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de537ff0-4ae3-45b0-987d-b002eb7690ee", "created": "2026-10-09T15:13:12.39507Z", "modified": "2026-10-09T15:13:12.39507Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.life360.android.safetymapd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.39507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c7799b7-4ab0-4ac4-a9fb-e1559b3019f1", "created": "2026-10-09T15:13:12.395569Z", "modified": "2026-10-09T15:13:12.395569Z", "relationship_type": "indicates", "source_ref": "indicator--de537ff0-4ae3-45b0-987d-b002eb7690ee", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043e2e9b-9f5e-4411-9ff5-f4868b892d6b", "created": "2026-10-09T15:13:12.395698Z", "modified": "2026-10-09T15:13:12.395698Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.life360.safetymap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.395698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4447a023-d173-435e-9d7a-ce679ea9fbe9", "created": "2026-10-09T15:13:12.396163Z", "modified": "2026-10-09T15:13:12.396163Z", "relationship_type": "indicates", "source_ref": "indicator--043e2e9b-9f5e-4411-9ff5-f4868b892d6b", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47de7ca-4ef1-4ca0-930a-0cab3faa11a9", "created": "2026-10-09T15:13:12.396302Z", "modified": "2026-10-09T15:13:12.396302Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='19C0868F028757F49FD8F7BDF39FF70C771D622B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.396302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9358c612-1488-4dd7-b97e-8a8e190ee49d", "created": "2026-10-09T15:13:12.396952Z", "modified": "2026-10-09T15:13:12.396952Z", "relationship_type": "indicates", "source_ref": "indicator--b47de7ca-4ef1-4ca0-930a-0cab3faa11a9", "target_ref": "malware--a8ba0144-d721-4b45-9cea-c838b3c9d6da"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e74216be-0d71-4c88-95c3-2526bb23866c", "created": "2026-10-09T15:13:12.397078Z", "modified": "2026-10-09T15:13:12.397078Z", "name": "MicrosoftFamilySafe", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d571cea9-5dca-489a-b888-d53aa7d853bd", "created": "2026-10-09T15:13:12.397193Z", "modified": "2026-10-09T15:13:12.397193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='location.family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.397193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f08d4146-17b9-4a93-89ff-6f77576fc9fb", "created": "2026-10-09T15:13:12.397703Z", "modified": "2026-10-09T15:13:12.397703Z", "relationship_type": "indicates", "source_ref": "indicator--d571cea9-5dca-489a-b888-d53aa7d853bd", "target_ref": "malware--e74216be-0d71-4c88-95c3-2526bb23866c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4605cb-6eb0-4be2-a6ab-11badda59a7c", "created": "2026-10-09T15:13:12.397831Z", "modified": "2026-10-09T15:13:12.397831Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobileaggregator.family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.397831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8829f7bb-712d-4548-85ec-6579981d5c90", "created": "2026-10-09T15:13:12.398345Z", "modified": "2026-10-09T15:13:12.398345Z", "relationship_type": "indicates", "source_ref": "indicator--0f4605cb-6eb0-4be2-a6ab-11badda59a7c", "target_ref": "malware--e74216be-0d71-4c88-95c3-2526bb23866c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11fd8f1-b058-4583-891a-e54513f72527", "created": "2026-10-09T15:13:12.398468Z", "modified": "2026-10-09T15:13:12.398468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safedriving.family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.398468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57798bd4-12e3-4d90-9d6f-efaf3c8ee171", "created": "2026-10-09T15:13:12.398955Z", "modified": "2026-10-09T15:13:12.398955Z", "relationship_type": "indicates", "source_ref": "indicator--c11fd8f1-b058-4583-891a-e54513f72527", "target_ref": "malware--e74216be-0d71-4c88-95c3-2526bb23866c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e05c1c-1b64-4fc3-b185-3ab32306c93a", "created": "2026-10-09T15:13:12.399074Z", "modified": "2026-10-09T15:13:12.399074Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.399074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d8a96e1-f444-4d1f-baa6-81b49f39e2b2", "created": "2026-10-09T15:13:12.399563Z", "modified": "2026-10-09T15:13:12.399563Z", "relationship_type": "indicates", "source_ref": "indicator--e5e05c1c-1b64-4fc3-b185-3ab32306c93a", "target_ref": "malware--e74216be-0d71-4c88-95c3-2526bb23866c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cea60b9-b1c0-469b-a708-af1541c75b0e", "created": "2026-10-09T15:13:12.399683Z", "modified": "2026-10-09T15:13:12.399683Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.microsoft.familysafety']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.399683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ed62196-4684-44c7-bcb6-e6b7a09a213c", "created": "2026-10-09T15:13:12.400145Z", "modified": "2026-10-09T15:13:12.400145Z", "relationship_type": "indicates", "source_ref": "indicator--2cea60b9-b1c0-469b-a708-af1541c75b0e", "target_ref": "malware--e74216be-0d71-4c88-95c3-2526bb23866c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb", "created": "2026-10-09T15:13:12.400263Z", "modified": "2026-10-09T15:13:12.400263Z", "name": "GeoZilla", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f986f18a-cc51-4312-8c36-a743afdaacc6", "created": "2026-10-09T15:13:12.400393Z", "modified": "2026-10-09T15:13:12.400393Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.400393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39dc9174-e401-46c8-b287-15df10699572", "created": "2026-10-09T15:13:12.400903Z", "modified": "2026-10-09T15:13:12.400903Z", "relationship_type": "indicates", "source_ref": "indicator--f986f18a-cc51-4312-8c36-a743afdaacc6", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9846d016-f93e-4e1f-a23c-b0d2c16eadd7", "created": "2026-10-09T15:13:12.401034Z", "modified": "2026-10-09T15:13:12.401034Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='files.geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.401034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b818bbf2-4ecc-4850-924f-17683c3e6846", "created": "2026-10-09T15:13:12.401527Z", "modified": "2026-10-09T15:13:12.401527Z", "relationship_type": "indicates", "source_ref": "indicator--9846d016-f93e-4e1f-a23c-b0d2c16eadd7", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b746e97e-d56e-4ecd-8408-adcc2549f1d8", "created": "2026-10-09T15:13:12.401657Z", "modified": "2026-10-09T15:13:12.401657Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozilla.autosmartins.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.401657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75d5e5f3-99d6-4fb5-b09a-0c53142e3239", "created": "2026-10-09T15:13:12.402152Z", "modified": "2026-10-09T15:13:12.402152Z", "relationship_type": "indicates", "source_ref": "indicator--b746e97e-d56e-4ecd-8408-adcc2549f1d8", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b40cbe-1f65-4689-a8bf-ac024f4f4388", "created": "2026-10-09T15:13:12.402283Z", "modified": "2026-10-09T15:13:12.402283Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozillafamily-c92d0.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.402283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27fd257c-a79b-4c05-903b-dee168f7a676", "created": "2026-10-09T15:13:12.402887Z", "modified": "2026-10-09T15:13:12.402887Z", "relationship_type": "indicates", "source_ref": "indicator--52b40cbe-1f65-4689-a8bf-ac024f4f4388", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d931d1-3a0f-432c-acf6-55679d78a400", "created": "2026-10-09T15:13:12.403012Z", "modified": "2026-10-09T15:13:12.403012Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozillafamily.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.403012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5461be71-80d9-40c9-b051-d0a927aa0400", "created": "2026-10-09T15:13:12.403522Z", "modified": "2026-10-09T15:13:12.403522Z", "relationship_type": "indicates", "source_ref": "indicator--18d931d1-3a0f-432c-acf6-55679d78a400", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7d394b-266f-47ed-bad3-ac7e1120f424", "created": "2026-10-09T15:13:12.403648Z", "modified": "2026-10-09T15:13:12.403648Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='iot.geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.403648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86d1c787-c735-4944-945f-cf6b9fd3fd6e", "created": "2026-10-09T15:13:12.404122Z", "modified": "2026-10-09T15:13:12.404122Z", "relationship_type": "indicates", "source_ref": "indicator--3e7d394b-266f-47ed-bad3-ac7e1120f424", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a2b64e-7d04-4263-8276-6665a1ae2b92", "created": "2026-10-09T15:13:12.404243Z", "modified": "2026-10-09T15:13:12.404243Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.404243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54491b5b-e0d7-435f-9b27-d39614a754be", "created": "2026-10-09T15:13:12.404732Z", "modified": "2026-10-09T15:13:12.404732Z", "relationship_type": "indicates", "source_ref": "indicator--07a2b64e-7d04-4263-8276-6665a1ae2b92", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a55663-e24a-45e8-b96c-aec7a32ab8d5", "created": "2026-10-09T15:13:12.404849Z", "modified": "2026-10-09T15:13:12.404849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozillahelp.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.404849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f50aeaef-401b-4e06-9ff4-99a0624facbd", "created": "2026-10-09T15:13:12.405345Z", "modified": "2026-10-09T15:13:12.405345Z", "relationship_type": "indicates", "source_ref": "indicator--a8a55663-e24a-45e8-b96c-aec7a32ab8d5", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c821fd63-75ce-45b9-9b4c-6956a4ce42d5", "created": "2026-10-09T15:13:12.405468Z", "modified": "2026-10-09T15:13:12.405468Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.geozilla.family']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.405468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1948991d-59d9-4ab3-a6ff-e3f908b5d3c9", "created": "2026-10-09T15:13:12.405929Z", "modified": "2026-10-09T15:13:12.405929Z", "relationship_type": "indicates", "source_ref": "indicator--c821fd63-75ce-45b9-9b4c-6956a4ce42d5", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baa5087-4390-4210-bd75-91bf1788bd76", "created": "2026-10-09T15:13:12.406047Z", "modified": "2026-10-09T15:13:12.406047Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EE74E09E40A324B806AE5ED68A4543E50C3B6FC2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.406047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--232237b9-ff97-4e91-ac09-de66ea07c98a", "created": "2026-10-09T15:13:12.406612Z", "modified": "2026-10-09T15:13:12.406612Z", "relationship_type": "indicates", "source_ref": "indicator--6baa5087-4390-4210-bd75-91bf1788bd76", "target_ref": "malware--84f0d7b9-0a08-4dcb-86ac-c43176eecddb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc", "created": "2026-10-09T15:13:12.406733Z", "modified": "2026-10-09T15:13:12.406733Z", "name": "KidsLox", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b07722-8d15-484f-8ead-3acf88878577", "created": "2026-10-09T15:13:12.406849Z", "modified": "2026-10-09T15:13:12.406849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidslox.page.link']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.406849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6372b8a0-9cab-44b3-ba6e-87f46c6969dc", "created": "2026-10-09T15:13:12.40733Z", "modified": "2026-10-09T15:13:12.40733Z", "relationship_type": "indicates", "source_ref": "indicator--d3b07722-8d15-484f-8ead-3acf88878577", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc51443-5b31-4484-95ea-508b78aa6e95", "created": "2026-10-09T15:13:12.407453Z", "modified": "2026-10-09T15:13:12.407453Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidslox.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.407453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b373adc4-87dd-4a23-9854-0616449df3ed", "created": "2026-10-09T15:13:12.407945Z", "modified": "2026-10-09T15:13:12.407945Z", "relationship_type": "indicates", "source_ref": "indicator--cdc51443-5b31-4484-95ea-508b78aa6e95", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5539ce1b-28cc-4485-bfde-f42202a6fd01", "created": "2026-10-09T15:13:12.408061Z", "modified": "2026-10-09T15:13:12.408061Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='activity.kdlparentalcontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.408061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f62b15f-7a2e-45fe-a91f-9c14591e1544", "created": "2026-10-09T15:13:12.40866Z", "modified": "2026-10-09T15:13:12.40866Z", "relationship_type": "indicates", "source_ref": "indicator--5539ce1b-28cc-4485-bfde-f42202a6fd01", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd572964-5865-4e5d-ae92-956821c2cedf", "created": "2026-10-09T15:13:12.40879Z", "modified": "2026-10-09T15:13:12.40879Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.kdlparentalcontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.40879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85741e78-ba15-4445-b270-ee4c1d2460d6", "created": "2026-10-09T15:13:12.40929Z", "modified": "2026-10-09T15:13:12.40929Z", "relationship_type": "indicates", "source_ref": "indicator--dd572964-5865-4e5d-ae92-956821c2cedf", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4d232d-9698-46b0-9d6a-7935188c3315", "created": "2026-10-09T15:13:12.409408Z", "modified": "2026-10-09T15:13:12.409408Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidslox.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.409408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee6bdc64-b899-44d9-aa16-819f8c7a533a", "created": "2026-10-09T15:13:12.409869Z", "modified": "2026-10-09T15:13:12.409869Z", "relationship_type": "indicates", "source_ref": "indicator--bb4d232d-9698-46b0-9d6a-7935188c3315", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f61f5c-86cd-4b61-b257-462e6674d474", "created": "2026-10-09T15:13:12.409986Z", "modified": "2026-10-09T15:13:12.409986Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsloxsupport.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.409986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cdad4c3-61d9-4707-a13a-bb101db01b88", "created": "2026-10-09T15:13:12.410474Z", "modified": "2026-10-09T15:13:12.410474Z", "relationship_type": "indicates", "source_ref": "indicator--31f61f5c-86cd-4b61-b257-462e6674d474", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70155c9-a7ce-4cf6-8566-bcee7c41bc2d", "created": "2026-10-09T15:13:12.410598Z", "modified": "2026-10-09T15:13:12.410598Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.advanced.kidslox.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.410598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b99465f-8969-496d-be8b-3b88b947dbbf", "created": "2026-10-09T15:13:12.411101Z", "modified": "2026-10-09T15:13:12.411101Z", "relationship_type": "indicates", "source_ref": "indicator--c70155c9-a7ce-4cf6-8566-bcee7c41bc2d", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa9e051-6457-4a7d-a5ee-5f5ff583364d", "created": "2026-10-09T15:13:12.411222Z", "modified": "2026-10-09T15:13:12.411222Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kidslox.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.411222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dc0dbba-da93-4b24-825a-4416d183f5da", "created": "2026-10-09T15:13:12.41168Z", "modified": "2026-10-09T15:13:12.41168Z", "relationship_type": "indicates", "source_ref": "indicator--1fa9e051-6457-4a7d-a5ee-5f5ff583364d", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1e9c2c-ec61-49d6-8a16-99f51c1ae05f", "created": "2026-10-09T15:13:12.411797Z", "modified": "2026-10-09T15:13:12.411797Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4BBD8F7E244B86B6B82F2A343EE8EDB5E797FEF8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.411797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e0d12bf-8d86-44db-87d7-ca0bb47c08b3", "created": "2026-10-09T15:13:12.412341Z", "modified": "2026-10-09T15:13:12.412341Z", "relationship_type": "indicates", "source_ref": "indicator--9d1e9c2c-ec61-49d6-8a16-99f51c1ae05f", "target_ref": "malware--2bbf7445-8dd6-49da-b15e-07c280df88cc"}, {"type": "malware", "spec_version": "2.1", "id": "malware--136dabf0-b5e5-49bd-ba4d-260d8a0d724e", "created": "2026-10-09T15:13:12.41246Z", "modified": "2026-10-09T15:13:12.41246Z", "name": "FamiShield", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecf9706-e6ad-407c-afdb-6624e2a03138", "created": "2026-10-09T15:13:12.412578Z", "modified": "2026-10-09T15:13:12.412578Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='parental-control-d4a98-default-rtdb.asia-southeast1.firebasedatabase.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.412578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44427a96-10e2-4046-9a8c-64470b02a5a6", "created": "2026-10-09T15:13:12.413126Z", "modified": "2026-10-09T15:13:12.413126Z", "relationship_type": "indicates", "source_ref": "indicator--5ecf9706-e6ad-407c-afdb-6624e2a03138", "target_ref": "malware--136dabf0-b5e5-49bd-ba4d-260d8a0d724e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b184b185-f3fb-4387-9518-a6fc30706594", "created": "2026-10-09T15:13:12.413246Z", "modified": "2026-10-09T15:13:12.413246Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famishield.usibtheteam.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.413246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--764057c4-284b-4a41-8a3e-d4a881ba2b8d", "created": "2026-10-09T15:13:12.413744Z", "modified": "2026-10-09T15:13:12.413744Z", "relationship_type": "indicates", "source_ref": "indicator--b184b185-f3fb-4387-9518-a6fc30706594", "target_ref": "malware--136dabf0-b5e5-49bd-ba4d-260d8a0d724e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6e6f52-6a45-43c3-84f9-de9d287a634c", "created": "2026-10-09T15:13:12.413861Z", "modified": "2026-10-09T15:13:12.413861Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.USIB.Child.ChildControl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.413861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d809876a-f9fb-43e6-9aab-821272876d17", "created": "2026-10-09T15:13:12.414546Z", "modified": "2026-10-09T15:13:12.414546Z", "relationship_type": "indicates", "source_ref": "indicator--af6e6f52-6a45-43c3-84f9-de9d287a634c", "target_ref": "malware--136dabf0-b5e5-49bd-ba4d-260d8a0d724e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64746b3b-21d0-4c34-adc2-cd03f7157de5", "created": "2026-10-09T15:13:12.414674Z", "modified": "2026-10-09T15:13:12.414674Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4598FFB867E28560BC1198D61EC83A1CCA0F1612']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.414674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--816f4dd6-362e-4776-9910-2338f87a399d", "created": "2026-10-09T15:13:12.415218Z", "modified": "2026-10-09T15:13:12.415218Z", "relationship_type": "indicates", "source_ref": "indicator--64746b3b-21d0-4c34-adc2-cd03f7157de5", "target_ref": "malware--136dabf0-b5e5-49bd-ba4d-260d8a0d724e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5c9d299f-e3a4-4d41-b22e-642badbf9567", "created": "2026-10-09T15:13:12.415348Z", "modified": "2026-10-09T15:13:12.415348Z", "name": "Qustodio", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc18da6d-8476-457e-912a-fa1bb94aa5b6", "created": "2026-10-09T15:13:12.415462Z", "modified": "2026-10-09T15:13:12.415462Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='qustodio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.415462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08b30af7-9245-467b-be97-814227c971c3", "created": "2026-10-09T15:13:12.415938Z", "modified": "2026-10-09T15:13:12.415938Z", "relationship_type": "indicates", "source_ref": "indicator--cc18da6d-8476-457e-912a-fa1bb94aa5b6", "target_ref": "malware--5c9d299f-e3a4-4d41-b22e-642badbf9567"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c89f39-b9a9-4587-8260-f2598d5bcb02", "created": "2026-10-09T15:13:12.416063Z", "modified": "2026-10-09T15:13:12.416063Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.qustodio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.416063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d153e08-db37-4922-93f3-d18a463d9ca9", "created": "2026-10-09T15:13:12.416546Z", "modified": "2026-10-09T15:13:12.416546Z", "relationship_type": "indicates", "source_ref": "indicator--b9c89f39-b9a9-4587-8260-f2598d5bcb02", "target_ref": "malware--5c9d299f-e3a4-4d41-b22e-642badbf9567"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe3b2f1-6f1a-4055-bccd-4204e6092699", "created": "2026-10-09T15:13:12.416665Z", "modified": "2026-10-09T15:13:12.416665Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qustodio.qustodioapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.416665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35ffdd52-a572-4199-bd24-ed9577fece1e", "created": "2026-10-09T15:13:12.417118Z", "modified": "2026-10-09T15:13:12.417118Z", "relationship_type": "indicates", "source_ref": "indicator--dfe3b2f1-6f1a-4055-bccd-4204e6092699", "target_ref": "malware--5c9d299f-e3a4-4d41-b22e-642badbf9567"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6622ecc8-09de-4bb6-87dc-676a465e3812", "created": "2026-10-09T15:13:12.417235Z", "modified": "2026-10-09T15:13:12.417235Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qustodio.par.qustodio-family-parental-control-app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.417235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d26cfda-f2c1-4013-9283-f3a3b08a79a7", "created": "2026-10-09T15:13:12.417741Z", "modified": "2026-10-09T15:13:12.417741Z", "relationship_type": "indicates", "source_ref": "indicator--6622ecc8-09de-4bb6-87dc-676a465e3812", "target_ref": "malware--5c9d299f-e3a4-4d41-b22e-642badbf9567"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059a844c-ca6d-4d70-92f6-13b27b505282", "created": "2026-10-09T15:13:12.41786Z", "modified": "2026-10-09T15:13:12.41786Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qustodio.mdm.app.family.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.41786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a1cb334-df1f-48e0-b76d-1ae0ea979852", "created": "2026-10-09T15:13:12.418351Z", "modified": "2026-10-09T15:13:12.418351Z", "relationship_type": "indicates", "source_ref": "indicator--059a844c-ca6d-4d70-92f6-13b27b505282", "target_ref": "malware--5c9d299f-e3a4-4d41-b22e-642badbf9567"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3dbafdda-d444-4fa5-8835-132e8db3fbb1", "created": "2026-10-09T15:13:12.418471Z", "modified": "2026-10-09T15:13:12.418471Z", "name": "ScreenTime", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e0c07f-74f9-4702-9314-70b28645e7de", "created": "2026-10-09T15:13:12.418586Z", "modified": "2026-10-09T15:13:12.418586Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='screentimelabs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.418586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a83961d-3058-49c8-83df-de763d3531b3", "created": "2026-10-09T15:13:12.419067Z", "modified": "2026-10-09T15:13:12.419067Z", "relationship_type": "indicates", "source_ref": "indicator--f0e0c07f-74f9-4702-9314-70b28645e7de", "target_ref": "malware--3dbafdda-d444-4fa5-8835-132e8db3fbb1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfb5103-f133-4089-ab37-8500b48dbdc6", "created": "2026-10-09T15:13:12.419185Z", "modified": "2026-10-09T15:13:12.419185Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.screentime.rc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.419185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd59a360-6c3d-4dc7-b13c-b0f9d506564c", "created": "2026-10-09T15:13:12.419643Z", "modified": "2026-10-09T15:13:12.419643Z", "relationship_type": "indicates", "source_ref": "indicator--ddfb5103-f133-4089-ab37-8500b48dbdc6", "target_ref": "malware--3dbafdda-d444-4fa5-8835-132e8db3fbb1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03638616-265e-4c3a-a6d8-39e2756b2c96", "created": "2026-10-09T15:13:12.419764Z", "modified": "2026-10-09T15:13:12.419764Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.screentime']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.419764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6692b328-06b8-4faa-b910-8062981e37a3", "created": "2026-10-09T15:13:12.420316Z", "modified": "2026-10-09T15:13:12.420316Z", "relationship_type": "indicates", "source_ref": "indicator--03638616-265e-4c3a-a6d8-39e2756b2c96", "target_ref": "malware--3dbafdda-d444-4fa5-8835-132e8db3fbb1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ec525265-8a60-466b-902d-f38626d24282", "created": "2026-10-09T15:13:12.420437Z", "modified": "2026-10-09T15:13:12.420437Z", "name": "MMGuardian", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36170ff-c797-4e2e-ab9e-8aeeb556760e", "created": "2026-10-09T15:13:12.420549Z", "modified": "2026-10-09T15:13:12.420549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mmguardian.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.420549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d3323a2-c7a1-44c4-a925-482ad1ce9d2d", "created": "2026-10-09T15:13:12.421021Z", "modified": "2026-10-09T15:13:12.421021Z", "relationship_type": "indicates", "source_ref": "indicator--f36170ff-c797-4e2e-ab9e-8aeeb556760e", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51802f0-5686-4e28-b789-07de6f2af367", "created": "2026-10-09T15:13:12.42114Z", "modified": "2026-10-09T15:13:12.42114Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mmguardian.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.42114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--426fec3f-d57d-4c12-99a3-3dbd2d231435", "created": "2026-10-09T15:13:12.421619Z", "modified": "2026-10-09T15:13:12.421619Z", "relationship_type": "indicates", "source_ref": "indicator--e51802f0-5686-4e28-b789-07de6f2af367", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ed7fc9-9df1-46dd-aad3-661ebd143dcb", "created": "2026-10-09T15:13:12.421739Z", "modified": "2026-10-09T15:13:12.421739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='family.mmguardian.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.421739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--351f67ad-fcb1-4f8f-8ee3-bd8d34311f68", "created": "2026-10-09T15:13:12.422212Z", "modified": "2026-10-09T15:13:12.422212Z", "relationship_type": "indicates", "source_ref": "indicator--a4ed7fc9-9df1-46dd-aad3-661ebd143dcb", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b874bafd-36eb-4764-bf2d-8cc45b0c7f2e", "created": "2026-10-09T15:13:12.422341Z", "modified": "2026-10-09T15:13:12.422341Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mmguardian.parentapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.422341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f773c9ce-48ed-4a12-ba9d-d7f06b2ad51a", "created": "2026-10-09T15:13:12.422804Z", "modified": "2026-10-09T15:13:12.422804Z", "relationship_type": "indicates", "source_ref": "indicator--b874bafd-36eb-4764-bf2d-8cc45b0c7f2e", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccea126-0535-4f9e-b10e-98955c21e518", "created": "2026-10-09T15:13:12.42293Z", "modified": "2026-10-09T15:13:12.42293Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mmguardian.tabletsecurity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.42293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e06b37a-38c9-4105-9ba0-a62c11c17b46", "created": "2026-10-09T15:13:12.423411Z", "modified": "2026-10-09T15:13:12.423411Z", "relationship_type": "indicates", "source_ref": "indicator--fccea126-0535-4f9e-b10e-98955c21e518", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88222884-6b8e-4fdf-9dd8-b06b4c8c3939", "created": "2026-10-09T15:13:12.423533Z", "modified": "2026-10-09T15:13:12.423533Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mmguardian.childapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.423533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2511c4f1-cfb3-4368-b8a6-b4278eff4f2c", "created": "2026-10-09T15:13:12.423988Z", "modified": "2026-10-09T15:13:12.423988Z", "relationship_type": "indicates", "source_ref": "indicator--88222884-6b8e-4fdf-9dd8-b06b4c8c3939", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1970fec-61af-4d98-b8a1-96fa81476e71", "created": "2026-10-09T15:13:12.424108Z", "modified": "2026-10-09T15:13:12.424108Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='842933609E604063B55C04BBB47763AC7C0FC327']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.424108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1f9883d-fae7-4b64-b903-2b4450000a55", "created": "2026-10-09T15:13:12.424658Z", "modified": "2026-10-09T15:13:12.424658Z", "relationship_type": "indicates", "source_ref": "indicator--e1970fec-61af-4d98-b8a1-96fa81476e71", "target_ref": "malware--ec525265-8a60-466b-902d-f38626d24282"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6a5fbb18-b90d-4af2-852f-b544de18ffe1", "created": "2026-10-09T15:13:12.424777Z", "modified": "2026-10-09T15:13:12.424777Z", "name": "FlareFamilyLocator", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01af5974-9942-4f5e-aab3-7b4979ec46fa", "created": "2026-10-09T15:13:12.42489Z", "modified": "2026-10-09T15:13:12.42489Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.probit.flare']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.42489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46f44bb3-3ad3-402e-a5f9-c88416b52842", "created": "2026-10-09T15:13:12.425362Z", "modified": "2026-10-09T15:13:12.425362Z", "relationship_type": "indicates", "source_ref": "indicator--01af5974-9942-4f5e-aab3-7b4979ec46fa", "target_ref": "malware--6a5fbb18-b90d-4af2-852f-b544de18ffe1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294", "created": "2026-10-09T15:13:12.425481Z", "modified": "2026-10-09T15:13:12.425481Z", "name": "FamilyOrbit", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2e56b6-d4e0-4331-8983-6cc39237f065", "created": "2026-10-09T15:13:12.425593Z", "modified": "2026-10-09T15:13:12.425593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.familyorbit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.425593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ab14497-b026-45f3-9e74-cae506ccece3", "created": "2026-10-09T15:13:12.426179Z", "modified": "2026-10-09T15:13:12.426179Z", "relationship_type": "indicates", "source_ref": "indicator--6f2e56b6-d4e0-4331-8983-6cc39237f065", "target_ref": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e6bbe1-cfff-47f3-9f65-15a3139e77c7", "created": "2026-10-09T15:13:12.426319Z", "modified": "2026-10-09T15:13:12.426319Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.familyorbit.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.426319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb92b750-6806-42bb-897f-ce55fce28a6b", "created": "2026-10-09T15:13:12.426794Z", "modified": "2026-10-09T15:13:12.426794Z", "relationship_type": "indicates", "source_ref": "indicator--47e6bbe1-cfff-47f3-9f65-15a3139e77c7", "target_ref": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030a840c-3ff3-4c16-81bb-0662544751c4", "created": "2026-10-09T15:13:12.426914Z", "modified": "2026-10-09T15:13:12.426914Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='familyorbit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.426914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cccc273-ceeb-4baa-8e7b-327ecbb8e5d3", "created": "2026-10-09T15:13:12.427393Z", "modified": "2026-10-09T15:13:12.427393Z", "relationship_type": "indicates", "source_ref": "indicator--030a840c-3ff3-4c16-81bb-0662544751c4", "target_ref": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fc67a8-7e53-4c4a-854a-b1171be6fb89", "created": "2026-10-09T15:13:12.427513Z", "modified": "2026-10-09T15:13:12.427513Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.familyorbit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.427513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0050e3e-0a33-4795-815d-a934b5d12cdb", "created": "2026-10-09T15:13:12.427983Z", "modified": "2026-10-09T15:13:12.427983Z", "relationship_type": "indicates", "source_ref": "indicator--d6fc67a8-7e53-4c4a-854a-b1171be6fb89", "target_ref": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cab73f7-699d-4d17-8e21-d5d5bf2378a5", "created": "2026-10-09T15:13:12.428103Z", "modified": "2026-10-09T15:13:12.428103Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.familyorbit.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.428103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9af8973-6203-45e1-ae14-40359960b39f", "created": "2026-10-09T15:13:12.428566Z", "modified": "2026-10-09T15:13:12.428566Z", "relationship_type": "indicates", "source_ref": "indicator--2cab73f7-699d-4d17-8e21-d5d5bf2378a5", "target_ref": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccf2f67-e580-4682-b10c-9e4fd233380a", "created": "2026-10-09T15:13:12.428685Z", "modified": "2026-10-09T15:13:12.428685Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DB8DF9C3D6524B298F3EAD22E6A77D7FB2F1003A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.428685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--925d7eab-7c1e-422b-91d3-e150c80d6cf7", "created": "2026-10-09T15:13:12.429221Z", "modified": "2026-10-09T15:13:12.429221Z", "relationship_type": "indicates", "source_ref": "indicator--eccf2f67-e580-4682-b10c-9e4fd233380a", "target_ref": "malware--fceeb8a0-a550-48e5-a5fb-27c9949d6294"}, {"type": "malware", "spec_version": "2.1", "id": "malware--abe080ab-4369-4c8f-877a-81db93f5057a", "created": "2026-10-09T15:13:12.42935Z", "modified": "2026-10-09T15:13:12.42935Z", "name": "Trulpe", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d9a13d-f404-491f-a92c-89dbedf169de", "created": "2026-10-09T15:13:12.429467Z", "modified": "2026-10-09T15:13:12.429467Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='truple.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.429467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53dcf0d6-a3c8-4b21-aa0e-70b1b355ccde", "created": "2026-10-09T15:13:12.42993Z", "modified": "2026-10-09T15:13:12.42993Z", "relationship_type": "indicates", "source_ref": "indicator--10d9a13d-f404-491f-a92c-89dbedf169de", "target_ref": "malware--abe080ab-4369-4c8f-877a-81db93f5057a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee55e447-30ad-4261-9e9a-d7aabbb2003b", "created": "2026-10-09T15:13:12.430047Z", "modified": "2026-10-09T15:13:12.430047Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.truple.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.430047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da43b090-bdc8-4ddb-af68-441fb23576af", "created": "2026-10-09T15:13:12.430535Z", "modified": "2026-10-09T15:13:12.430535Z", "relationship_type": "indicates", "source_ref": "indicator--ee55e447-30ad-4261-9e9a-d7aabbb2003b", "target_ref": "malware--abe080ab-4369-4c8f-877a-81db93f5057a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df221cd3-103d-4e60-8a71-89dc990ba659", "created": "2026-10-09T15:13:12.430657Z", "modified": "2026-10-09T15:13:12.430657Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.camhart.netcountable']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.430657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f93585d2-0043-424d-b2a9-6916aed21742", "created": "2026-10-09T15:13:12.431121Z", "modified": "2026-10-09T15:13:12.431121Z", "relationship_type": "indicates", "source_ref": "indicator--df221cd3-103d-4e60-8a71-89dc990ba659", "target_ref": "malware--abe080ab-4369-4c8f-877a-81db93f5057a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c53def1d-e3da-492a-a6af-83fcdd201527", "created": "2026-10-09T15:13:12.431237Z", "modified": "2026-10-09T15:13:12.431237Z", "name": "Boomrang", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9aefc01-3bcf-4578-a580-142c39d12ab6", "created": "2026-10-09T15:13:12.431358Z", "modified": "2026-10-09T15:13:12.431358Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='useboomerang.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.431358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7775d040-f2f0-4804-80a5-e6d33aa862e6", "created": "2026-10-09T15:13:12.431931Z", "modified": "2026-10-09T15:13:12.431931Z", "relationship_type": "indicates", "source_ref": "indicator--b9aefc01-3bcf-4578-a580-142c39d12ab6", "target_ref": "malware--c53def1d-e3da-492a-a6af-83fcdd201527"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88593d10-de84-402e-a462-3c6a1dbb9321", "created": "2026-10-09T15:13:12.432052Z", "modified": "2026-10-09T15:13:12.432052Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.nationaledtech.Boomerang']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.432052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9237ac68-c803-454c-a59a-be5fc541feaa", "created": "2026-10-09T15:13:12.432537Z", "modified": "2026-10-09T15:13:12.432537Z", "relationship_type": "indicates", "source_ref": "indicator--88593d10-de84-402e-a462-3c6a1dbb9321", "target_ref": "malware--c53def1d-e3da-492a-a6af-83fcdd201527"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1036c760-8a68-47a9-93bf-3b3cccbe3376", "created": "2026-10-09T15:13:12.432661Z", "modified": "2026-10-09T15:13:12.432661Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E6157A76E1DCF43159529212009A0AA335499B7D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.432661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e45b628-b125-42ef-855e-19761060a53f", "created": "2026-10-09T15:13:12.433206Z", "modified": "2026-10-09T15:13:12.433206Z", "relationship_type": "indicates", "source_ref": "indicator--1036c760-8a68-47a9-93bf-3b3cccbe3376", "target_ref": "malware--c53def1d-e3da-492a-a6af-83fcdd201527"}, {"type": "malware", "spec_version": "2.1", "id": "malware--35874bca-19e3-41ef-a597-dacb91413915", "created": "2026-10-09T15:13:12.433338Z", "modified": "2026-10-09T15:13:12.433338Z", "name": "MobileFence", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc6de0c-e6de-4597-8b02-5f0f3d486ef9", "created": "2026-10-09T15:13:12.433452Z", "modified": "2026-10-09T15:13:12.433452Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilefence.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.433452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5dee67c-5cd1-4843-89d9-1352535854cb", "created": "2026-10-09T15:13:12.433938Z", "modified": "2026-10-09T15:13:12.433938Z", "relationship_type": "indicates", "source_ref": "indicator--2fc6de0c-e6de-4597-8b02-5f0f3d486ef9", "target_ref": "malware--35874bca-19e3-41ef-a597-dacb91413915"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b296df1-b0ce-42c1-9f85-14ee12da7404", "created": "2026-10-09T15:13:12.43406Z", "modified": "2026-10-09T15:13:12.43406Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilefence.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.43406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee617190-05f7-4819-9abc-c7653808faf6", "created": "2026-10-09T15:13:12.434546Z", "modified": "2026-10-09T15:13:12.434546Z", "relationship_type": "indicates", "source_ref": "indicator--1b296df1-b0ce-42c1-9f85-14ee12da7404", "target_ref": "malware--35874bca-19e3-41ef-a597-dacb91413915"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a5605-ef83-4ff2-b0ef-2b9aa8f44440", "created": "2026-10-09T15:13:12.434668Z", "modified": "2026-10-09T15:13:12.434668Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobilefence.family']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.434668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1edd5d00-0d03-4849-93ff-a8dafd95356c", "created": "2026-10-09T15:13:12.435134Z", "modified": "2026-10-09T15:13:12.435134Z", "relationship_type": "indicates", "source_ref": "indicator--763a5605-ef83-4ff2-b0ef-2b9aa8f44440", "target_ref": "malware--35874bca-19e3-41ef-a597-dacb91413915"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a9827694-374a-4ae4-b092-56dfad3d7a14", "created": "2026-10-09T15:13:12.435252Z", "modified": "2026-10-09T15:13:12.435252Z", "name": "Kidgy", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfef6b11-e2ca-4a2d-a88c-60e09c4b014c", "created": "2026-10-09T15:13:12.435376Z", "modified": "2026-10-09T15:13:12.435376Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidgy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.435376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6d8bba2-5de1-4cbf-94d4-daac06f7101b", "created": "2026-10-09T15:13:12.435848Z", "modified": "2026-10-09T15:13:12.435848Z", "relationship_type": "indicates", "source_ref": "indicator--bfef6b11-e2ca-4a2d-a88c-60e09c4b014c", "target_ref": "malware--a9827694-374a-4ae4-b092-56dfad3d7a14"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829e7b3c-b7e8-4340-85c5-9085621c9c6c", "created": "2026-10-09T15:13:12.435972Z", "modified": "2026-10-09T15:13:12.435972Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.parental.control.kidgy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.435972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84706d39-e14b-4b41-a76d-a920f87e9679", "created": "2026-10-09T15:13:12.436466Z", "modified": "2026-10-09T15:13:12.436466Z", "relationship_type": "indicates", "source_ref": "indicator--829e7b3c-b7e8-4340-85c5-9085621c9c6c", "target_ref": "malware--a9827694-374a-4ae4-b092-56dfad3d7a14"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a2775cb3-ae3d-43b5-9c1d-a73f1ab2064e", "created": "2026-10-09T15:13:12.436591Z", "modified": "2026-10-09T15:13:12.436591Z", "name": "Kiddoware", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63df3d8-2c9d-4498-adfc-2d708af21d8a", "created": "2026-10-09T15:13:12.436703Z", "modified": "2026-10-09T15:13:12.436703Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kiddoware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.436703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e9c63e1-bf06-4ba7-9f31-a8fbfaa57c70", "created": "2026-10-09T15:13:12.437172Z", "modified": "2026-10-09T15:13:12.437172Z", "relationship_type": "indicates", "source_ref": "indicator--a63df3d8-2c9d-4498-adfc-2d708af21d8a", "target_ref": "malware--a2775cb3-ae3d-43b5-9c1d-a73f1ab2064e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--502651bf-4a3b-49c1-bfa4-f3a56d3f33c7", "created": "2026-10-09T15:13:12.437302Z", "modified": "2026-10-09T15:13:12.437302Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kiddoware.kidsplace']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.437302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06d99b34-2658-43b3-9922-53646ae0371e", "created": "2026-10-09T15:13:12.438125Z", "modified": "2026-10-09T15:13:12.438125Z", "relationship_type": "indicates", "source_ref": "indicator--502651bf-4a3b-49c1-bfa4-f3a56d3f33c7", "target_ref": "malware--a2775cb3-ae3d-43b5-9c1d-a73f1ab2064e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--69451720-4a02-40ec-8e8a-158a73241861", "created": "2026-10-09T15:13:12.438251Z", "modified": "2026-10-09T15:13:12.438251Z", "name": "Netnanny", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f655bb9-c491-4abf-818c-3cc6076fb807", "created": "2026-10-09T15:13:12.438378Z", "modified": "2026-10-09T15:13:12.438378Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='parent.netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.438378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ae3deca-fe7c-43e1-8aab-570842b3ed1e", "created": "2026-10-09T15:13:12.438858Z", "modified": "2026-10-09T15:13:12.438858Z", "relationship_type": "indicates", "source_ref": "indicator--6f655bb9-c491-4abf-818c-3cc6076fb807", "target_ref": "malware--69451720-4a02-40ec-8e8a-158a73241861"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b2b4f5-453d-4e1e-8c6b-a4ab6fa1f00c", "created": "2026-10-09T15:13:12.43898Z", "modified": "2026-10-09T15:13:12.43898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.43898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23132ce0-262f-4066-94cd-92beaf3be6e7", "created": "2026-10-09T15:13:12.439472Z", "modified": "2026-10-09T15:13:12.439472Z", "relationship_type": "indicates", "source_ref": "indicator--02b2b4f5-453d-4e1e-8c6b-a4ab6fa1f00c", "target_ref": "malware--69451720-4a02-40ec-8e8a-158a73241861"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215d2a56-84f0-429a-bd39-244731295ee4", "created": "2026-10-09T15:13:12.439596Z", "modified": "2026-10-09T15:13:12.439596Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.439596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e604b5e2-b31e-4a01-a2f7-33ac350812df", "created": "2026-10-09T15:13:12.44007Z", "modified": "2026-10-09T15:13:12.44007Z", "relationship_type": "indicates", "source_ref": "indicator--215d2a56-84f0-429a-bd39-244731295ee4", "target_ref": "malware--69451720-4a02-40ec-8e8a-158a73241861"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1168c74f-b765-4c5e-9192-bb61597705c0", "created": "2026-10-09T15:13:12.440193Z", "modified": "2026-10-09T15:13:12.440193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='install.netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.440193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4478df5f-9664-4440-a6f9-38a34c1ba517", "created": "2026-10-09T15:13:12.440685Z", "modified": "2026-10-09T15:13:12.440685Z", "relationship_type": "indicates", "source_ref": "indicator--1168c74f-b765-4c5e-9192-bb61597705c0", "target_ref": "malware--69451720-4a02-40ec-8e8a-158a73241861"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9399dd-7a87-4608-a477-4ec6483444a1", "created": "2026-10-09T15:13:12.440806Z", "modified": "2026-10-09T15:13:12.440806Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.contentwatch.ghoti.cp2.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.440806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f00b3f91-5002-4542-826a-24486ac240dd", "created": "2026-10-09T15:13:12.441295Z", "modified": "2026-10-09T15:13:12.441295Z", "relationship_type": "indicates", "source_ref": "indicator--3b9399dd-7a87-4608-a477-4ec6483444a1", "target_ref": "malware--69451720-4a02-40ec-8e8a-158a73241861"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c62140-4b1a-4f99-bb4e-2403f700048f", "created": "2026-10-09T15:13:12.44142Z", "modified": "2026-10-09T15:13:12.44142Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.contentwatch.ghoti.cp2.parent']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.44142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e717d20-15ce-43f6-8f83-8150412a1261", "created": "2026-10-09T15:13:12.44189Z", "modified": "2026-10-09T15:13:12.44189Z", "relationship_type": "indicates", "source_ref": "indicator--f5c62140-4b1a-4f99-bb4e-2403f700048f", "target_ref": "malware--69451720-4a02-40ec-8e8a-158a73241861"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c48dc3ba-aea4-440e-ba86-5d50ba7f7c3e", "created": "2026-10-09T15:13:12.442014Z", "modified": "2026-10-09T15:13:12.442014Z", "name": "SeekDroid", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9b6892-478e-409e-82c8-1c5205ef801e", "created": "2026-10-09T15:13:12.442127Z", "modified": "2026-10-09T15:13:12.442127Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='seekdroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.442127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5a55bf0-c98c-4488-843d-5a2d21d4950b", "created": "2026-10-09T15:13:12.442622Z", "modified": "2026-10-09T15:13:12.442622Z", "relationship_type": "indicates", "source_ref": "indicator--1c9b6892-478e-409e-82c8-1c5205ef801e", "target_ref": "malware--c48dc3ba-aea4-440e-ba86-5d50ba7f7c3e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943e16d1-32e6-4646-ad8d-c11e9a65e6cf", "created": "2026-10-09T15:13:12.442749Z", "modified": "2026-10-09T15:13:12.442749Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.gtmedia.seekdroid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.442749Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03cb2fd1-830b-4410-8154-71dfb2768853", "created": "2026-10-09T15:13:12.443211Z", "modified": "2026-10-09T15:13:12.443211Z", "relationship_type": "indicates", "source_ref": "indicator--943e16d1-32e6-4646-ad8d-c11e9a65e6cf", "target_ref": "malware--c48dc3ba-aea4-440e-ba86-5d50ba7f7c3e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e6e1958b-0f33-4c95-86b3-157476356d75", "created": "2026-10-09T15:13:12.44334Z", "modified": "2026-10-09T15:13:12.44334Z", "name": "LockItTight", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed98f03-16c8-4966-92e6-8bb0d3cf5498", "created": "2026-10-09T15:13:12.443452Z", "modified": "2026-10-09T15:13:12.443452Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.lockittight.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.443452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f47048a-b256-4d84-a475-d560a0836cad", "created": "2026-10-09T15:13:12.444038Z", "modified": "2026-10-09T15:13:12.444038Z", "relationship_type": "indicates", "source_ref": "indicator--8ed98f03-16c8-4966-92e6-8bb0d3cf5498", "target_ref": "malware--e6e1958b-0f33-4c95-86b3-157476356d75"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accbb641-2cbc-4a5b-9f03-3eb2f89a0e7d", "created": "2026-10-09T15:13:12.444165Z", "modified": "2026-10-09T15:13:12.444165Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lockittight.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.444165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d55f0ce8-5771-4fcd-92d4-52e2d8b06399", "created": "2026-10-09T15:13:12.444659Z", "modified": "2026-10-09T15:13:12.444659Z", "relationship_type": "indicates", "source_ref": "indicator--accbb641-2cbc-4a5b-9f03-3eb2f89a0e7d", "target_ref": "malware--e6e1958b-0f33-4c95-86b3-157476356d75"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecbdc6e-bcb7-481e-af3f-2d438e630a6e", "created": "2026-10-09T15:13:12.444783Z", "modified": "2026-10-09T15:13:12.444783Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.timeon.litclient']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.444783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eea9820b-14d9-4d28-bc25-ccbd87ba5ca5", "created": "2026-10-09T15:13:12.445238Z", "modified": "2026-10-09T15:13:12.445238Z", "relationship_type": "indicates", "source_ref": "indicator--9ecbdc6e-bcb7-481e-af3f-2d438e630a6e", "target_ref": "malware--e6e1958b-0f33-4c95-86b3-157476356d75"}, {"type": "malware", "spec_version": "2.1", "id": "malware--40293650-2c5a-46a7-a570-7e1fc19a1e90", "created": "2026-10-09T15:13:12.445369Z", "modified": "2026-10-09T15:13:12.445369Z", "name": "SafeNet", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13ffe2c-0e79-41c1-8bf5-25ada71c8167", "created": "2026-10-09T15:13:12.445486Z", "modified": "2026-10-09T15:13:12.445486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safenet.family']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.445486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d65c74c0-2085-4b32-9182-fa64ecb2159f", "created": "2026-10-09T15:13:12.445963Z", "modified": "2026-10-09T15:13:12.445963Z", "relationship_type": "indicates", "source_ref": "indicator--b13ffe2c-0e79-41c1-8bf5-25ada71c8167", "target_ref": "malware--40293650-2c5a-46a7-a570-7e1fc19a1e90"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23964d66-ffd8-43f1-a1bb-7856ad7bfaff", "created": "2026-10-09T15:13:12.446082Z", "modified": "2026-10-09T15:13:12.446082Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cisai.safenetchild']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.446082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3fea010-418f-4120-8931-9764cb120abb", "created": "2026-10-09T15:13:12.446541Z", "modified": "2026-10-09T15:13:12.446541Z", "relationship_type": "indicates", "source_ref": "indicator--23964d66-ffd8-43f1-a1bb-7856ad7bfaff", "target_ref": "malware--40293650-2c5a-46a7-a570-7e1fc19a1e90"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8157efa6-014c-4e0f-9eec-81cd561bf7ee", "created": "2026-10-09T15:13:12.446661Z", "modified": "2026-10-09T15:13:12.446661Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7F0D7ED5D614B03962014483E654A215A40F029F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.446661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94d7eefa-97bc-483d-b84d-025ae4664e6a", "created": "2026-10-09T15:13:12.447207Z", "modified": "2026-10-09T15:13:12.447207Z", "relationship_type": "indicates", "source_ref": "indicator--8157efa6-014c-4e0f-9eec-81cd561bf7ee", "target_ref": "malware--40293650-2c5a-46a7-a570-7e1fc19a1e90"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0a5bab14-21b9-485f-a41a-a5604d8b137b", "created": "2026-10-09T15:13:12.447342Z", "modified": "2026-10-09T15:13:12.447342Z", "name": "Discovenger", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbe1364-91f0-42fc-ba7d-0f9c24a93bfe", "created": "2026-10-09T15:13:12.447455Z", "modified": "2026-10-09T15:13:12.447455Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='discovenger.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.447455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e36e323-3945-4732-a78f-a93da7be8567", "created": "2026-10-09T15:13:12.447925Z", "modified": "2026-10-09T15:13:12.447925Z", "relationship_type": "indicates", "source_ref": "indicator--6cbe1364-91f0-42fc-ba7d-0f9c24a93bfe", "target_ref": "malware--0a5bab14-21b9-485f-a41a-a5604d8b137b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0e7e64-19e6-44ed-891d-f360b8b2ba30", "created": "2026-10-09T15:13:12.44805Z", "modified": "2026-10-09T15:13:12.44805Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.discovenger.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-09T15:13:12.44805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0a8b940-e878-4861-b501-9a33561765e2", "created": "2026-10-09T15:13:12.448514Z", "modified": "2026-10-09T15:13:12.448514Z", "relationship_type": "indicates", "source_ref": "indicator--ae0e7e64-19e6-44ed-891d-f360b8b2ba30", "target_ref": "malware--0a5bab14-21b9-485f-a41a-a5604d8b137b"}]}