{"type": "bundle", "id": "bundle--1cf36a22-06e3-4b3a-9009-29f9dfe34ae1", "objects": [{"type": "malware", "spec_version": "2.1", "id": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22", "created": "2026-01-27T05:12:56.363331Z", "modified": "2026-01-27T05:12:56.363331Z", "name": "TheTruthSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d320ae-ded5-4fc4-901c-7482ed93e478", "created": "2026-01-27T05:12:56.363635Z", "modified": "2026-01-27T05:12:56.363635Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='1ca43.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.363635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bab7eb22-6057-46eb-8cfb-9458746258ab", "created": "2026-01-27T05:12:56.370966Z", "modified": "2026-01-27T05:12:56.370966Z", "relationship_type": "indicates", "source_ref": "indicator--96d320ae-ded5-4fc4-901c-7482ed93e478", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba84b10-f510-4b89-b010-a7d644d69144", "created": "2026-01-27T05:12:56.371587Z", "modified": "2026-01-27T05:12:56.371587Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.371587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5c22578-6551-4179-8165-1af86e1e2c65", "created": "2026-01-27T05:12:56.372592Z", "modified": "2026-01-27T05:12:56.372592Z", "relationship_type": "indicates", "source_ref": "indicator--dba84b10-f510-4b89-b010-a7d644d69144", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6af3a69-ac9e-461e-b4d2-d82f6d05bb9f", "created": "2026-01-27T05:12:56.372808Z", "modified": "2026-01-27T05:12:56.372808Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.372808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65ba04c0-24db-4410-b192-1dfcf97bbd4f", "created": "2026-01-27T05:12:56.373714Z", "modified": "2026-01-27T05:12:56.373714Z", "relationship_type": "indicates", "source_ref": "indicator--b6af3a69-ac9e-461e-b4d2-d82f6d05bb9f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0bd0ec-22fe-4878-a093-afbe3767e9ee", "created": "2026-01-27T05:12:56.373929Z", "modified": "2026-01-27T05:12:56.373929Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.373929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2848c4d8-13f1-475c-8275-7352c3c4330c", "created": "2026-01-27T05:12:56.37485Z", "modified": "2026-01-27T05:12:56.37485Z", "relationship_type": "indicates", "source_ref": "indicator--dd0bd0ec-22fe-4878-a093-afbe3767e9ee", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825f58c8-fcc7-4bc6-bfdd-854e7b5d3182", "created": "2026-01-27T05:12:56.375039Z", "modified": "2026-01-27T05:12:56.375039Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.375039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5149c65-126b-4986-942c-2544bc78b9f3", "created": "2026-01-27T05:12:56.376024Z", "modified": "2026-01-27T05:12:56.376024Z", "relationship_type": "indicates", "source_ref": "indicator--825f58c8-fcc7-4bc6-bfdd-854e7b5d3182", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6dc2fc-d975-4907-9bab-69e4c6ead964", "created": "2026-01-27T05:12:56.376211Z", "modified": "2026-01-27T05:12:56.376211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.376211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--691f10ee-720f-45c4-b918-ac123d2dd9e4", "created": "2026-01-27T05:12:56.377013Z", "modified": "2026-01-27T05:12:56.377013Z", "relationship_type": "indicates", "source_ref": "indicator--9e6dc2fc-d975-4907-9bab-69e4c6ead964", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba78a2de-08e6-4df6-a682-397c2a560d98", "created": "2026-01-27T05:12:56.3772Z", "modified": "2026-01-27T05:12:56.3772Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.3772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd9a8ea0-aace-414e-8207-dd83c4f14b2a", "created": "2026-01-27T05:12:56.378132Z", "modified": "2026-01-27T05:12:56.378132Z", "relationship_type": "indicates", "source_ref": "indicator--ba78a2de-08e6-4df6-a682-397c2a560d98", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e318b526-92eb-46d6-b0a0-0d0e4b285069", "created": "2026-01-27T05:12:56.378318Z", "modified": "2026-01-27T05:12:56.378318Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.378318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--155a624f-694b-4af4-a316-8c058639f4e3", "created": "2026-01-27T05:12:56.379122Z", "modified": "2026-01-27T05:12:56.379122Z", "relationship_type": "indicates", "source_ref": "indicator--e318b526-92eb-46d6-b0a0-0d0e4b285069", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fc5fb8-7c29-44a3-95e9-8bd3ee08e455", "created": "2026-01-27T05:12:56.379311Z", "modified": "2026-01-27T05:12:56.379311Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.379311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45bced98-7f59-4966-9b5c-6dbcc4373ad9", "created": "2026-01-27T05:12:56.380127Z", "modified": "2026-01-27T05:12:56.380127Z", "relationship_type": "indicates", "source_ref": "indicator--d8fc5fb8-7c29-44a3-95e9-8bd3ee08e455", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2346f3-50ed-45f6-b223-07f388e2d034", "created": "2026-01-27T05:12:56.380314Z", "modified": "2026-01-27T05:12:56.380314Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a100.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.380314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0726c2fc-bc13-461e-825f-caabb06668d6", "created": "2026-01-27T05:12:56.381191Z", "modified": "2026-01-27T05:12:56.381191Z", "relationship_type": "indicates", "source_ref": "indicator--cc2346f3-50ed-45f6-b223-07f388e2d034", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2724aa8d-7f4a-4ba0-b7d4-4928f0710b61", "created": "2026-01-27T05:12:56.381377Z", "modified": "2026-01-27T05:12:56.381377Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a100.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.381377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de484b44-9156-481a-a292-dfd5adf13380", "created": "2026-01-27T05:12:56.382114Z", "modified": "2026-01-27T05:12:56.382114Z", "relationship_type": "indicates", "source_ref": "indicator--2724aa8d-7f4a-4ba0-b7d4-4928f0710b61", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d769c0bc-aa53-4a10-ada0-e59bc13552b2", "created": "2026-01-27T05:12:56.382303Z", "modified": "2026-01-27T05:12:56.382303Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a600.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.382303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efb4942b-f24a-436c-9948-5ef1870f4834", "created": "2026-01-27T05:12:56.383138Z", "modified": "2026-01-27T05:12:56.383138Z", "relationship_type": "indicates", "source_ref": "indicator--d769c0bc-aa53-4a10-ada0-e59bc13552b2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df9ad3c-7cd0-40f8-81a1-27359f2345a6", "created": "2026-01-27T05:12:56.383321Z", "modified": "2026-01-27T05:12:56.383321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a621.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.383321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b29bd89d-80eb-4b08-a16d-b0cf54842d08", "created": "2026-01-27T05:12:56.384123Z", "modified": "2026-01-27T05:12:56.384123Z", "relationship_type": "indicates", "source_ref": "indicator--7df9ad3c-7cd0-40f8-81a1-27359f2345a6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399cc5c6-6cc0-4854-b71a-7d349c786d4c", "created": "2026-01-27T05:12:56.384303Z", "modified": "2026-01-27T05:12:56.384303Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a696.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.384303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f09f1d5d-c869-4bad-b0a3-23330814f3ee", "created": "2026-01-27T05:12:56.385031Z", "modified": "2026-01-27T05:12:56.385031Z", "relationship_type": "indicates", "source_ref": "indicator--399cc5c6-6cc0-4854-b71a-7d349c786d4c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a816e08b-0bb1-4a15-acc5-33d59fcecb84", "created": "2026-01-27T05:12:56.385215Z", "modified": "2026-01-27T05:12:56.385215Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a710.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.385215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bfd61ac-d256-4c0a-8b96-ddb323b2cb9d", "created": "2026-01-27T05:12:56.386022Z", "modified": "2026-01-27T05:12:56.386022Z", "relationship_type": "indicates", "source_ref": "indicator--a816e08b-0bb1-4a15-acc5-33d59fcecb84", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703dce65-805e-44dd-8854-097505577751", "created": "2026-01-27T05:12:56.386206Z", "modified": "2026-01-27T05:12:56.386206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a740.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.386206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7816667a-bf60-4888-b7e2-090b04f1f1d7", "created": "2026-01-27T05:12:56.386931Z", "modified": "2026-01-27T05:12:56.386931Z", "relationship_type": "indicates", "source_ref": "indicator--703dce65-805e-44dd-8854-097505577751", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf23a61-6865-438c-b29e-818422ffd2d2", "created": "2026-01-27T05:12:56.387111Z", "modified": "2026-01-27T05:12:56.387111Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a743.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.387111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0947a5b-02f0-40a9-9f44-7e24405b5e9c", "created": "2026-01-27T05:12:56.387945Z", "modified": "2026-01-27T05:12:56.387945Z", "relationship_type": "indicates", "source_ref": "indicator--ccf23a61-6865-438c-b29e-818422ffd2d2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbee7cc-de2f-4591-8465-f410f9c356c8", "created": "2026-01-27T05:12:56.388129Z", "modified": "2026-01-27T05:12:56.388129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a746.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.388129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cb96d41-58e3-4bec-a7ce-5204fd61b626", "created": "2026-01-27T05:12:56.388846Z", "modified": "2026-01-27T05:12:56.388846Z", "relationship_type": "indicates", "source_ref": "indicator--ecbee7cc-de2f-4591-8465-f410f9c356c8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf07753-cd1a-49bf-89b1-9ac013af1f35", "created": "2026-01-27T05:12:56.389033Z", "modified": "2026-01-27T05:12:56.389033Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a747.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.389033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8efd58eb-297e-470c-9c41-32415a33c5dd", "created": "2026-01-27T05:12:56.389756Z", "modified": "2026-01-27T05:12:56.389756Z", "relationship_type": "indicates", "source_ref": "indicator--2cf07753-cd1a-49bf-89b1-9ac013af1f35", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634b372f-b2c1-4c00-b9f2-2b506398c7dd", "created": "2026-01-27T05:12:56.389942Z", "modified": "2026-01-27T05:12:56.389942Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a748.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.389942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3c2f794-7759-490e-9c4a-da6dcb02131f", "created": "2026-01-27T05:12:56.390732Z", "modified": "2026-01-27T05:12:56.390732Z", "relationship_type": "indicates", "source_ref": "indicator--634b372f-b2c1-4c00-b9f2-2b506398c7dd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1c13f9-9052-4491-97f0-035836bf9a1f", "created": "2026-01-27T05:12:56.390937Z", "modified": "2026-01-27T05:12:56.390937Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a749.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.390937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0265cb6d-65fc-4c8c-9894-35dc94865a4c", "created": "2026-01-27T05:12:56.391644Z", "modified": "2026-01-27T05:12:56.391644Z", "relationship_type": "indicates", "source_ref": "indicator--1b1c13f9-9052-4491-97f0-035836bf9a1f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603b0615-1048-4a12-b647-81c791e07b0e", "created": "2026-01-27T05:12:56.391843Z", "modified": "2026-01-27T05:12:56.391843Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a780.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.391843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e3f9b2e-38d7-422b-80a4-25c0b58d49e0", "created": "2026-01-27T05:12:56.392552Z", "modified": "2026-01-27T05:12:56.392552Z", "relationship_type": "indicates", "source_ref": "indicator--603b0615-1048-4a12-b647-81c791e07b0e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444e5810-f2a4-419c-9107-6fa1fc8e91c2", "created": "2026-01-27T05:12:56.392734Z", "modified": "2026-01-27T05:12:56.392734Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a785.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.392734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad4e35d2-d9de-482a-adea-4417cfe6a810", "created": "2026-01-27T05:12:56.393537Z", "modified": "2026-01-27T05:12:56.393537Z", "relationship_type": "indicates", "source_ref": "indicator--444e5810-f2a4-419c-9107-6fa1fc8e91c2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4febca72-effc-4bc3-8533-d87d9cb4c273", "created": "2026-01-27T05:12:56.393718Z", "modified": "2026-01-27T05:12:56.393718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a7xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.393718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--236dbcc7-6b8b-47bb-9711-1161b531da38", "created": "2026-01-27T05:12:56.394435Z", "modified": "2026-01-27T05:12:56.394435Z", "relationship_type": "indicates", "source_ref": "indicator--4febca72-effc-4bc3-8533-d87d9cb4c273", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4faa54c7-6d71-47cc-9e20-41fde3243a3e", "created": "2026-01-27T05:12:56.394614Z", "modified": "2026-01-27T05:12:56.394614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a810.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.394614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68f7bb5f-111e-4f69-af88-22eb5bfe016f", "created": "2026-01-27T05:12:56.395328Z", "modified": "2026-01-27T05:12:56.395328Z", "relationship_type": "indicates", "source_ref": "indicator--4faa54c7-6d71-47cc-9e20-41fde3243a3e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab6ea04-68df-4129-8a15-b4f4fdca2f93", "created": "2026-01-27T05:12:56.395506Z", "modified": "2026-01-27T05:12:56.395506Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a820.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.395506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--649b1050-b9a2-4625-9967-251da0ad1140", "created": "2026-01-27T05:12:56.396218Z", "modified": "2026-01-27T05:12:56.396218Z", "relationship_type": "indicates", "source_ref": "indicator--eab6ea04-68df-4129-8a15-b4f4fdca2f93", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdfdc78e-e7c1-4577-8280-34d17a119810", "created": "2026-01-27T05:12:56.396401Z", "modified": "2026-01-27T05:12:56.396401Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a825.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.396401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b78a3e74-66c5-4cd9-8e42-a9735d0a2b98", "created": "2026-01-27T05:12:56.397232Z", "modified": "2026-01-27T05:12:56.397232Z", "relationship_type": "indicates", "source_ref": "indicator--cdfdc78e-e7c1-4577-8280-34d17a119810", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192314eb-926b-4cbf-8dc0-3e4895740288", "created": "2026-01-27T05:12:56.397414Z", "modified": "2026-01-27T05:12:56.397414Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a830.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.397414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4de28cdd-7c04-42d7-984c-0b1d254c3729", "created": "2026-01-27T05:12:56.398138Z", "modified": "2026-01-27T05:12:56.398138Z", "relationship_type": "indicates", "source_ref": "indicator--192314eb-926b-4cbf-8dc0-3e4895740288", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6a46f7-4b80-457a-99c6-ec02c508e736", "created": "2026-01-27T05:12:56.398327Z", "modified": "2026-01-27T05:12:56.398327Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a835.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.398327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95a7dca7-83b6-43cd-8a37-bcb4b39ff035", "created": "2026-01-27T05:12:56.399053Z", "modified": "2026-01-27T05:12:56.399053Z", "relationship_type": "indicates", "source_ref": "indicator--cd6a46f7-4b80-457a-99c6-ec02c508e736", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b456054-b904-4e5f-8056-fa8a8fa83b58", "created": "2026-01-27T05:12:56.399233Z", "modified": "2026-01-27T05:12:56.399233Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a895.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.399233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65b0712a-21ec-41fe-8b3b-fb35c296489d", "created": "2026-01-27T05:12:56.399947Z", "modified": "2026-01-27T05:12:56.399947Z", "relationship_type": "indicates", "source_ref": "indicator--4b456054-b904-4e5f-8056-fa8a8fa83b58", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435478d9-776e-495f-8f28-bd5482d8eace", "created": "2026-01-27T05:12:56.400127Z", "modified": "2026-01-27T05:12:56.400127Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a8xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.400127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29dc472e-fcbd-4209-9a7f-3f9f54899c09", "created": "2026-01-27T05:12:56.400846Z", "modified": "2026-01-27T05:12:56.400846Z", "relationship_type": "indicates", "source_ref": "indicator--435478d9-776e-495f-8f28-bd5482d8eace", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f399e52f-1ec7-416a-8867-5683d051a433", "created": "2026-01-27T05:12:56.401027Z", "modified": "2026-01-27T05:12:56.401027Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a910.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.401027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a500804-ec9f-416b-9016-01cdc2408b5b", "created": "2026-01-27T05:12:56.40172Z", "modified": "2026-01-27T05:12:56.40172Z", "relationship_type": "indicates", "source_ref": "indicator--f399e52f-1ec7-416a-8867-5683d051a433", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c899ef73-abb8-4090-ba2a-c0b1b39ddadd", "created": "2026-01-27T05:12:56.401917Z", "modified": "2026-01-27T05:12:56.401917Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a915.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.401917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--262b7065-77f5-4e9c-a04c-7eb6fca3b144", "created": "2026-01-27T05:12:56.402623Z", "modified": "2026-01-27T05:12:56.402623Z", "relationship_type": "indicates", "source_ref": "indicator--c899ef73-abb8-4090-ba2a-c0b1b39ddadd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba6eb0e-0451-4d11-80ad-40a096175dd2", "created": "2026-01-27T05:12:56.40282Z", "modified": "2026-01-27T05:12:56.40282Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a920.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.40282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f33840e-e658-47ab-8145-035db7192aca", "created": "2026-01-27T05:12:56.403523Z", "modified": "2026-01-27T05:12:56.403523Z", "relationship_type": "indicates", "source_ref": "indicator--5ba6eb0e-0451-4d11-80ad-40a096175dd2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378066f1-209a-4efd-8a31-d3be6212f281", "created": "2026-01-27T05:12:56.403701Z", "modified": "2026-01-27T05:12:56.403701Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a925.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.403701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd02bb54-8f6f-4a06-ae86-8d68c2a801a3", "created": "2026-01-27T05:12:56.404419Z", "modified": "2026-01-27T05:12:56.404419Z", "relationship_type": "indicates", "source_ref": "indicator--378066f1-209a-4efd-8a31-d3be6212f281", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b434f4-0467-4d10-8c4d-9e465c407c55", "created": "2026-01-27T05:12:56.404598Z", "modified": "2026-01-27T05:12:56.404598Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a930.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.404598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ff38a3b-fad9-4fde-bcb3-392ec551cdda", "created": "2026-01-27T05:12:56.405441Z", "modified": "2026-01-27T05:12:56.405441Z", "relationship_type": "indicates", "source_ref": "indicator--f7b434f4-0467-4d10-8c4d-9e465c407c55", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f04c48c-74c5-430a-967e-1866b1857c3e", "created": "2026-01-27T05:12:56.405625Z", "modified": "2026-01-27T05:12:56.405625Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a935.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.405625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cc24034-7240-4a08-b6b1-a0b3c94d147b", "created": "2026-01-27T05:12:56.406345Z", "modified": "2026-01-27T05:12:56.406345Z", "relationship_type": "indicates", "source_ref": "indicator--6f04c48c-74c5-430a-967e-1866b1857c3e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd690175-1381-4e5d-a2a6-3d4561204599", "created": "2026-01-27T05:12:56.406525Z", "modified": "2026-01-27T05:12:56.406525Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a940.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.406525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0066c13-1155-49c5-a73c-40bebc7804d3", "created": "2026-01-27T05:12:56.407245Z", "modified": "2026-01-27T05:12:56.407245Z", "relationship_type": "indicates", "source_ref": "indicator--bd690175-1381-4e5d-a2a6-3d4561204599", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cffebb-c30c-454d-9d03-319883fdfce3", "created": "2026-01-27T05:12:56.407428Z", "modified": "2026-01-27T05:12:56.407428Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a941.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.407428Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--062a2589-38f9-40b0-8e38-794726caca58", "created": "2026-01-27T05:12:56.408152Z", "modified": "2026-01-27T05:12:56.408152Z", "relationship_type": "indicates", "source_ref": "indicator--a9cffebb-c30c-454d-9d03-319883fdfce3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49bc9ac-3b30-4a33-aead-b48829c92e7d", "created": "2026-01-27T05:12:56.408336Z", "modified": "2026-01-27T05:12:56.408336Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a942.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.408336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--162cdbe0-5c15-45e9-b81b-cc64ea06f573", "created": "2026-01-27T05:12:56.409053Z", "modified": "2026-01-27T05:12:56.409053Z", "relationship_type": "indicates", "source_ref": "indicator--c49bc9ac-3b30-4a33-aead-b48829c92e7d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc51524-937f-4e3c-8760-f16811a345e0", "created": "2026-01-27T05:12:56.409234Z", "modified": "2026-01-27T05:12:56.409234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a943.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.409234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--454e0431-c6b7-43f4-8a31-b16fe7cd86ef", "created": "2026-01-27T05:12:56.409954Z", "modified": "2026-01-27T05:12:56.409954Z", "relationship_type": "indicates", "source_ref": "indicator--bfc51524-937f-4e3c-8760-f16811a345e0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c86054e-c655-48e1-a562-327a4b695ca4", "created": "2026-01-27T05:12:56.410134Z", "modified": "2026-01-27T05:12:56.410134Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a944.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.410134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--147529da-6c3e-4fb9-b62a-d163f7910437", "created": "2026-01-27T05:12:56.410853Z", "modified": "2026-01-27T05:12:56.410853Z", "relationship_type": "indicates", "source_ref": "indicator--9c86054e-c655-48e1-a562-327a4b695ca4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5d297b-5a02-4dc9-9838-0b188ec370ed", "created": "2026-01-27T05:12:56.411038Z", "modified": "2026-01-27T05:12:56.411038Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a945.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.411038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d3bf061-11dc-45c4-8f8b-5ad120eb927b", "created": "2026-01-27T05:12:56.411734Z", "modified": "2026-01-27T05:12:56.411734Z", "relationship_type": "indicates", "source_ref": "indicator--6b5d297b-5a02-4dc9-9838-0b188ec370ed", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03748130-0f34-4d0b-a9b2-be368017b030", "created": "2026-01-27T05:12:56.411932Z", "modified": "2026-01-27T05:12:56.411932Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a946.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.411932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cb6eef2-b16e-42d0-9766-78df1147f9a1", "created": "2026-01-27T05:12:56.412642Z", "modified": "2026-01-27T05:12:56.412642Z", "relationship_type": "indicates", "source_ref": "indicator--03748130-0f34-4d0b-a9b2-be368017b030", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3f2557-a07f-442b-9fc0-1830ee21050b", "created": "2026-01-27T05:12:56.412838Z", "modified": "2026-01-27T05:12:56.412838Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync-a947.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.412838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90623a19-f999-4624-8ab4-236a3656bf34", "created": "2026-01-27T05:12:56.413875Z", "modified": "2026-01-27T05:12:56.413875Z", "relationship_type": "indicates", "source_ref": "indicator--1c3f2557-a07f-442b-9fc0-1830ee21050b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7674c353-14d7-49c6-baa2-4875f4d914a4", "created": "2026-01-27T05:12:56.414061Z", "modified": "2026-01-27T05:12:56.414061Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media-sync.systemserviceprovider.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.414061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--882fb673-756a-41bf-8583-94e72bd4dd59", "created": "2026-01-27T05:12:56.414894Z", "modified": "2026-01-27T05:12:56.414894Z", "relationship_type": "indicates", "source_ref": "indicator--7674c353-14d7-49c6-baa2-4875f4d914a4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7291c2d-42ba-46a2-babf-d48a0ab9663f", "created": "2026-01-27T05:12:56.415083Z", "modified": "2026-01-27T05:12:56.415083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='media.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.415083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72e876e8-b654-4fd3-b489-0f643d0eb8c5", "created": "2026-01-27T05:12:56.415793Z", "modified": "2026-01-27T05:12:56.415793Z", "relationship_type": "indicates", "source_ref": "indicator--f7291c2d-42ba-46a2-babf-d48a0ab9663f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17559067-41a4-45e7-8c80-07d3fa48694f", "created": "2026-01-27T05:12:56.415977Z", "modified": "2026-01-27T05:12:56.415977Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='microtracker-1ca43.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.415977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--022e5078-184c-4e05-8528-c516515af0be", "created": "2026-01-27T05:12:56.41679Z", "modified": "2026-01-27T05:12:56.41679Z", "relationship_type": "indicates", "source_ref": "indicator--17559067-41a4-45e7-8c80-07d3fa48694f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b535c6-0ca3-41ca-8623-29883bc1406a", "created": "2026-01-27T05:12:56.416977Z", "modified": "2026-01-27T05:12:56.416977Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.416977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--130b1ba9-506b-410b-8bf7-1fa7269f2f59", "created": "2026-01-27T05:12:56.417645Z", "modified": "2026-01-27T05:12:56.417645Z", "relationship_type": "indicates", "source_ref": "indicator--10b535c6-0ca3-41ca-8623-29883bc1406a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3559cb1-46e6-44ba-ac7f-60d2e87fa219", "created": "2026-01-27T05:12:56.417845Z", "modified": "2026-01-27T05:12:56.417845Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.417845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--027d4112-c663-4ea6-9380-a54e89b5d0f2", "created": "2026-01-27T05:12:56.418518Z", "modified": "2026-01-27T05:12:56.418518Z", "relationship_type": "indicates", "source_ref": "indicator--a3559cb1-46e6-44ba-ac7f-60d2e87fa219", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d88d6d-ec75-4c62-977f-14b8b79c2ba6", "created": "2026-01-27T05:12:56.418699Z", "modified": "2026-01-27T05:12:56.418699Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.418699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a17ba99b-62b0-40b2-9b68-2241dab9be98", "created": "2026-01-27T05:12:56.419389Z", "modified": "2026-01-27T05:12:56.419389Z", "relationship_type": "indicates", "source_ref": "indicator--d4d88d6d-ec75-4c62-977f-14b8b79c2ba6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fe818a-854d-447a-857f-e73103f945d2", "created": "2026-01-27T05:12:56.419567Z", "modified": "2026-01-27T05:12:56.419567Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.419567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05d74f9e-2c2c-4db6-a9be-ee51dfc234f9", "created": "2026-01-27T05:12:56.420265Z", "modified": "2026-01-27T05:12:56.420265Z", "relationship_type": "indicates", "source_ref": "indicator--b9fe818a-854d-447a-857f-e73103f945d2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6450ac6-1b5d-4a9c-bb17-c78f5e184749", "created": "2026-01-27T05:12:56.420446Z", "modified": "2026-01-27T05:12:56.420446Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.thespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.420446Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee18ce29-946c-4b14-aa73-670a47bd941c", "created": "2026-01-27T05:12:56.421142Z", "modified": "2026-01-27T05:12:56.421142Z", "relationship_type": "indicates", "source_ref": "indicator--b6450ac6-1b5d-4a9c-bb17-c78f5e184749", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d6ce51-9080-4c53-a6e4-9d533e42b690", "created": "2026-01-27T05:12:56.421321Z", "modified": "2026-01-27T05:12:56.421321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.421321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fe559da-3d85-4bdd-8474-ad13f763ea30", "created": "2026-01-27T05:12:56.42217Z", "modified": "2026-01-27T05:12:56.42217Z", "relationship_type": "indicates", "source_ref": "indicator--e5d6ce51-9080-4c53-a6e4-9d533e42b690", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb42684-9c1b-4b6c-aa60-d665d0d75b2d", "created": "2026-01-27T05:12:56.422361Z", "modified": "2026-01-27T05:12:56.422361Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracking.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.422361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea0c148f-b198-4284-914c-817a91272eeb", "created": "2026-01-27T05:12:56.423184Z", "modified": "2026-01-27T05:12:56.423184Z", "relationship_type": "indicates", "source_ref": "indicator--2fb42684-9c1b-4b6c-aa60-d665d0d75b2d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6ec6d3-5207-4faf-90a2-4432afd7819b", "created": "2026-01-27T05:12:56.423378Z", "modified": "2026-01-27T05:12:56.423378Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.inospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.423378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--266dc6b3-db9a-4178-b296-5bb3d73ad601", "created": "2026-01-27T05:12:56.424094Z", "modified": "2026-01-27T05:12:56.424094Z", "relationship_type": "indicates", "source_ref": "indicator--3d6ec6d3-5207-4faf-90a2-4432afd7819b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792e2937-dba7-466d-96e9-abf1ef4d7643", "created": "2026-01-27T05:12:56.424277Z", "modified": "2026-01-27T05:12:56.424277Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.424277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdf9f775-e833-45c7-bb71-0565abd86351", "created": "2026-01-27T05:12:56.424979Z", "modified": "2026-01-27T05:12:56.424979Z", "relationship_type": "indicates", "source_ref": "indicator--792e2937-dba7-466d-96e9-abf1ef4d7643", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b953c686-5f8d-4aac-bc43-f3f72fe6e37f", "created": "2026-01-27T05:12:56.425164Z", "modified": "2026-01-27T05:12:56.425164Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.425164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de2a039e-3776-499a-bb51-e9a19911a76c", "created": "2026-01-27T05:12:56.425871Z", "modified": "2026-01-27T05:12:56.425871Z", "relationship_type": "indicates", "source_ref": "indicator--b953c686-5f8d-4aac-bc43-f3f72fe6e37f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a65fd5-7a43-4079-be74-b3e831a4da1e", "created": "2026-01-27T05:12:56.426052Z", "modified": "2026-01-27T05:12:56.426052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.426052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bef8f28-3899-48cd-ba71-9cb164a43ef7", "created": "2026-01-27T05:12:56.42676Z", "modified": "2026-01-27T05:12:56.42676Z", "relationship_type": "indicates", "source_ref": "indicator--e8a65fd5-7a43-4079-be74-b3e831a4da1e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6687a1-fac2-4023-bc04-2d4864631839", "created": "2026-01-27T05:12:56.426945Z", "modified": "2026-01-27T05:12:56.426945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.426945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e053f568-0a65-4576-95f3-9ea31006cf90", "created": "2026-01-27T05:12:56.427629Z", "modified": "2026-01-27T05:12:56.427629Z", "relationship_type": "indicates", "source_ref": "indicator--ae6687a1-fac2-4023-bc04-2d4864631839", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9810c81c-51d7-46de-bc13-ce501b3a7a59", "created": "2026-01-27T05:12:56.427826Z", "modified": "2026-01-27T05:12:56.427826Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.427826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a87df926-8c43-443c-996e-f225ddebac99", "created": "2026-01-27T05:12:56.428513Z", "modified": "2026-01-27T05:12:56.428513Z", "relationship_type": "indicates", "source_ref": "indicator--9810c81c-51d7-46de-bc13-ce501b3a7a59", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0fb62f-fcef-4898-b3a3-321622eb8f3f", "created": "2026-01-27T05:12:56.428691Z", "modified": "2026-01-27T05:12:56.428691Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.428691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56b33172-1c80-4f65-b854-9b726d3ca513", "created": "2026-01-27T05:12:56.429395Z", "modified": "2026-01-27T05:12:56.429395Z", "relationship_type": "indicates", "source_ref": "indicator--ac0fb62f-fcef-4898-b3a3-321622eb8f3f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c92ef65-db9e-4827-938a-4c1c8d8b51dd", "created": "2026-01-27T05:12:56.429574Z", "modified": "2026-01-27T05:12:56.429574Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.429574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce4b7603-7795-4b42-9d9b-e46d0ebd9811", "created": "2026-01-27T05:12:56.43028Z", "modified": "2026-01-27T05:12:56.43028Z", "relationship_type": "indicates", "source_ref": "indicator--6c92ef65-db9e-4827-938a-4c1c8d8b51dd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a153b54e-34ec-45b8-9a26-3fc1d67de581", "created": "2026-01-27T05:12:56.430467Z", "modified": "2026-01-27T05:12:56.430467Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a100.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.430467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67629cad-6c9c-4c94-859b-cd0992af796b", "created": "2026-01-27T05:12:56.431306Z", "modified": "2026-01-27T05:12:56.431306Z", "relationship_type": "indicates", "source_ref": "indicator--a153b54e-34ec-45b8-9a26-3fc1d67de581", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbceff67-984f-4581-b6c9-8f5b8bdc93ab", "created": "2026-01-27T05:12:56.431487Z", "modified": "2026-01-27T05:12:56.431487Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a100.phoneparental.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.431487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8eefa466-3781-4ec9-95f6-5dad9c4ba148", "created": "2026-01-27T05:12:56.432207Z", "modified": "2026-01-27T05:12:56.432207Z", "relationship_type": "indicates", "source_ref": "indicator--dbceff67-984f-4581-b6c9-8f5b8bdc93ab", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea452a7c-9313-4d9a-a8af-bfe778048ed6", "created": "2026-01-27T05:12:56.432395Z", "modified": "2026-01-27T05:12:56.432395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a100.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.432395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dcfa033-a474-448e-9886-785de717112e", "created": "2026-01-27T05:12:56.433109Z", "modified": "2026-01-27T05:12:56.433109Z", "relationship_type": "indicates", "source_ref": "indicator--ea452a7c-9313-4d9a-a8af-bfe778048ed6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926dc945-0e69-4c01-bedc-4039b8b322c5", "created": "2026-01-27T05:12:56.433291Z", "modified": "2026-01-27T05:12:56.433291Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a5.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.433291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ba17793-7066-47c5-bb86-2e88670191ee", "created": "2026-01-27T05:12:56.434004Z", "modified": "2026-01-27T05:12:56.434004Z", "relationship_type": "indicates", "source_ref": "indicator--926dc945-0e69-4c01-bedc-4039b8b322c5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de51c892-5854-4abe-a53b-ddf0ec171f91", "created": "2026-01-27T05:12:56.434187Z", "modified": "2026-01-27T05:12:56.434187Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a58.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.434187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--440adb58-4690-4ebd-8e45-f92f8308159e", "created": "2026-01-27T05:12:56.434893Z", "modified": "2026-01-27T05:12:56.434893Z", "relationship_type": "indicates", "source_ref": "indicator--de51c892-5854-4abe-a53b-ddf0ec171f91", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed4c1c9-b456-4986-940f-d2dce4c27840", "created": "2026-01-27T05:12:56.435082Z", "modified": "2026-01-27T05:12:56.435082Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a59.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.435082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f508b14c-33ef-4795-a682-9a0a13ffd009", "created": "2026-01-27T05:12:56.43579Z", "modified": "2026-01-27T05:12:56.43579Z", "relationship_type": "indicates", "source_ref": "indicator--3ed4c1c9-b456-4986-940f-d2dce4c27840", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e349f496-ad3e-45f6-8eda-af65db9fcdb9", "created": "2026-01-27T05:12:56.435974Z", "modified": "2026-01-27T05:12:56.435974Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a6.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.435974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0eefe818-e496-4ca3-bb8a-1e34a0fccf15", "created": "2026-01-27T05:12:56.436663Z", "modified": "2026-01-27T05:12:56.436663Z", "relationship_type": "indicates", "source_ref": "indicator--e349f496-ad3e-45f6-8eda-af65db9fcdb9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79358fdc-2b4b-49e1-b573-db110590d3a8", "created": "2026-01-27T05:12:56.43686Z", "modified": "2026-01-27T05:12:56.43686Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a60.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.43686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c169f58-c941-4077-9e3f-88cf2a929e87", "created": "2026-01-27T05:12:56.437558Z", "modified": "2026-01-27T05:12:56.437558Z", "relationship_type": "indicates", "source_ref": "indicator--79358fdc-2b4b-49e1-b573-db110590d3a8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74c7527-b895-4736-9ccd-93d9d602cf1e", "created": "2026-01-27T05:12:56.437739Z", "modified": "2026-01-27T05:12:56.437739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a600.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.437739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b37fe689-4696-4d8d-ad60-64bd2e80f209", "created": "2026-01-27T05:12:56.438454Z", "modified": "2026-01-27T05:12:56.438454Z", "relationship_type": "indicates", "source_ref": "indicator--a74c7527-b895-4736-9ccd-93d9d602cf1e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79de7313-f47b-49a9-aa64-7d5332079028", "created": "2026-01-27T05:12:56.438634Z", "modified": "2026-01-27T05:12:56.438634Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a610.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.438634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95a76d73-03ef-4c77-b7b3-a9a95c3b03b3", "created": "2026-01-27T05:12:56.439461Z", "modified": "2026-01-27T05:12:56.439461Z", "relationship_type": "indicates", "source_ref": "indicator--79de7313-f47b-49a9-aa64-7d5332079028", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f005d5-2f22-47ac-adf7-ef9e1d385853", "created": "2026-01-27T05:12:56.439645Z", "modified": "2026-01-27T05:12:56.439645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a610.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.439645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4b1507a-207f-48c3-9203-4570786a2a1a", "created": "2026-01-27T05:12:56.440367Z", "modified": "2026-01-27T05:12:56.440367Z", "relationship_type": "indicates", "source_ref": "indicator--d5f005d5-2f22-47ac-adf7-ef9e1d385853", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0729c29-d06e-40a5-82ab-2e3fdf4cf744", "created": "2026-01-27T05:12:56.44055Z", "modified": "2026-01-27T05:12:56.44055Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a611.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.44055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00708fdd-ef00-4163-8551-405bd77838e0", "created": "2026-01-27T05:12:56.441252Z", "modified": "2026-01-27T05:12:56.441252Z", "relationship_type": "indicates", "source_ref": "indicator--d0729c29-d06e-40a5-82ab-2e3fdf4cf744", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d990ae17-616b-470b-8576-b8c1f6d9142c", "created": "2026-01-27T05:12:56.441435Z", "modified": "2026-01-27T05:12:56.441435Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a611.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.441435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ec9f992-b169-4aa5-895d-a82afc4b2e9f", "created": "2026-01-27T05:12:56.442159Z", "modified": "2026-01-27T05:12:56.442159Z", "relationship_type": "indicates", "source_ref": "indicator--d990ae17-616b-470b-8576-b8c1f6d9142c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1052dc95-5c7d-49da-b10e-2812f037373b", "created": "2026-01-27T05:12:56.442345Z", "modified": "2026-01-27T05:12:56.442345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a612.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.442345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58a6a434-a1d2-4b9a-9b1e-578c176bdb5c", "created": "2026-01-27T05:12:56.443055Z", "modified": "2026-01-27T05:12:56.443055Z", "relationship_type": "indicates", "source_ref": "indicator--1052dc95-5c7d-49da-b10e-2812f037373b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd11c8d-1271-4a5d-9749-367cc3fa8fc8", "created": "2026-01-27T05:12:56.443238Z", "modified": "2026-01-27T05:12:56.443238Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a614.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.443238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52218e7-eeaf-4366-8e0f-f43559284498", "created": "2026-01-27T05:12:56.443959Z", "modified": "2026-01-27T05:12:56.443959Z", "relationship_type": "indicates", "source_ref": "indicator--7dd11c8d-1271-4a5d-9749-367cc3fa8fc8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453b3d79-d918-4f6d-8a79-5907fe82870a", "created": "2026-01-27T05:12:56.44414Z", "modified": "2026-01-27T05:12:56.44414Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a615.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.44414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1114b461-7db1-41b7-a86c-76ab743d32a7", "created": "2026-01-27T05:12:56.444835Z", "modified": "2026-01-27T05:12:56.444835Z", "relationship_type": "indicates", "source_ref": "indicator--453b3d79-d918-4f6d-8a79-5907fe82870a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f7745f-d730-44dd-b768-cd9c662844ba", "created": "2026-01-27T05:12:56.445014Z", "modified": "2026-01-27T05:12:56.445014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a616.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.445014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92fb55bf-de0b-4020-b95b-54b1dfcd3b8c", "created": "2026-01-27T05:12:56.445697Z", "modified": "2026-01-27T05:12:56.445697Z", "relationship_type": "indicates", "source_ref": "indicator--b5f7745f-d730-44dd-b768-cd9c662844ba", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91963e42-1657-46b4-80cf-bc8e39bb438e", "created": "2026-01-27T05:12:56.445892Z", "modified": "2026-01-27T05:12:56.445892Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a617.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.445892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b1121c9-5227-4cd3-84b0-e4d978cc4482", "created": "2026-01-27T05:12:56.446596Z", "modified": "2026-01-27T05:12:56.446596Z", "relationship_type": "indicates", "source_ref": "indicator--91963e42-1657-46b4-80cf-bc8e39bb438e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1c23e1-4826-45bc-aed5-378601244ab4", "created": "2026-01-27T05:12:56.446789Z", "modified": "2026-01-27T05:12:56.446789Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a618.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.446789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57a0a6ed-7c11-4b04-9bbb-e873467b6e90", "created": "2026-01-27T05:12:56.447586Z", "modified": "2026-01-27T05:12:56.447586Z", "relationship_type": "indicates", "source_ref": "indicator--ad1c23e1-4826-45bc-aed5-378601244ab4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a10d82-ff94-4d53-ba48-c809cee13826", "created": "2026-01-27T05:12:56.447783Z", "modified": "2026-01-27T05:12:56.447783Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a620.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.447783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b0dafba-5f79-4266-89ab-bb46705a5c03", "created": "2026-01-27T05:12:56.448479Z", "modified": "2026-01-27T05:12:56.448479Z", "relationship_type": "indicates", "source_ref": "indicator--45a10d82-ff94-4d53-ba48-c809cee13826", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37975151-df12-4420-9b5b-70d9cf026d63", "created": "2026-01-27T05:12:56.448661Z", "modified": "2026-01-27T05:12:56.448661Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a621.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.448661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75c019e6-c1fd-47ca-937c-c2f186516000", "created": "2026-01-27T05:12:56.449376Z", "modified": "2026-01-27T05:12:56.449376Z", "relationship_type": "indicates", "source_ref": "indicator--37975151-df12-4420-9b5b-70d9cf026d63", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cb78b8-fdd0-4f50-b913-2e1916ac1331", "created": "2026-01-27T05:12:56.449556Z", "modified": "2026-01-27T05:12:56.449556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a65.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.449556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b52a608-5ce5-43ca-abf8-85be11df25dd", "created": "2026-01-27T05:12:56.450262Z", "modified": "2026-01-27T05:12:56.450262Z", "relationship_type": "indicates", "source_ref": "indicator--d7cb78b8-fdd0-4f50-b913-2e1916ac1331", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87db210b-3a18-408f-b10e-2ad9a3051c68", "created": "2026-01-27T05:12:56.450445Z", "modified": "2026-01-27T05:12:56.450445Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a69.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.450445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2b432f5-a744-4d89-889b-58959f7c1867", "created": "2026-01-27T05:12:56.451153Z", "modified": "2026-01-27T05:12:56.451153Z", "relationship_type": "indicates", "source_ref": "indicator--87db210b-3a18-408f-b10e-2ad9a3051c68", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc74210-4a9f-495a-83d6-4b3670da8b3e", "created": "2026-01-27T05:12:56.451334Z", "modified": "2026-01-27T05:12:56.451334Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a696.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.451334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90c0b2cf-8096-41a2-8354-23f1bbad8242", "created": "2026-01-27T05:12:56.452045Z", "modified": "2026-01-27T05:12:56.452045Z", "relationship_type": "indicates", "source_ref": "indicator--2cc74210-4a9f-495a-83d6-4b3670da8b3e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6028af-f226-4e26-996f-3631cad82d64", "created": "2026-01-27T05:12:56.452226Z", "modified": "2026-01-27T05:12:56.452226Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a70.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.452226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d15e4aaf-581a-43a6-b631-5db74215690a", "created": "2026-01-27T05:12:56.45298Z", "modified": "2026-01-27T05:12:56.45298Z", "relationship_type": "indicates", "source_ref": "indicator--be6028af-f226-4e26-996f-3631cad82d64", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb78fe1-ca2d-436d-9c3b-123059e99b6e", "created": "2026-01-27T05:12:56.453167Z", "modified": "2026-01-27T05:12:56.453167Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a710.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.453167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--776eb5bf-90ab-41d9-8904-86013d6fcf74", "created": "2026-01-27T05:12:56.453927Z", "modified": "2026-01-27T05:12:56.453927Z", "relationship_type": "indicates", "source_ref": "indicator--7fb78fe1-ca2d-436d-9c3b-123059e99b6e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1945ef40-eea5-41de-ae9d-a4520c4457da", "created": "2026-01-27T05:12:56.454121Z", "modified": "2026-01-27T05:12:56.454121Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a712.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.454121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06cc13c1-0bdb-44e0-9a3c-63b6ea354b1d", "created": "2026-01-27T05:12:56.454844Z", "modified": "2026-01-27T05:12:56.454844Z", "relationship_type": "indicates", "source_ref": "indicator--1945ef40-eea5-41de-ae9d-a4520c4457da", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18422b38-87fc-4c71-aa5e-fde76a90cedd", "created": "2026-01-27T05:12:56.455031Z", "modified": "2026-01-27T05:12:56.455031Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a72.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.455031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b18d5de-8aec-483c-a0ab-c4875ec529e3", "created": "2026-01-27T05:12:56.45586Z", "modified": "2026-01-27T05:12:56.45586Z", "relationship_type": "indicates", "source_ref": "indicator--18422b38-87fc-4c71-aa5e-fde76a90cedd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92af75a-e021-487e-bf8d-1461f0225a97", "created": "2026-01-27T05:12:56.456045Z", "modified": "2026-01-27T05:12:56.456045Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a720.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.456045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--234915b9-6fc4-48e6-a242-e8569dc72348", "created": "2026-01-27T05:12:56.456759Z", "modified": "2026-01-27T05:12:56.456759Z", "relationship_type": "indicates", "source_ref": "indicator--c92af75a-e021-487e-bf8d-1461f0225a97", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419ff12d-73ba-40e2-ae07-a6c50e0b0b78", "created": "2026-01-27T05:12:56.456944Z", "modified": "2026-01-27T05:12:56.456944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a721.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.456944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdc30e00-a70f-48f3-a6e0-22800fdc4d2b", "created": "2026-01-27T05:12:56.457641Z", "modified": "2026-01-27T05:12:56.457641Z", "relationship_type": "indicates", "source_ref": "indicator--419ff12d-73ba-40e2-ae07-a6c50e0b0b78", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c847bd-afe9-4153-bdfc-7e334c62c5b5", "created": "2026-01-27T05:12:56.45784Z", "modified": "2026-01-27T05:12:56.45784Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a722.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.45784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5799399c-f0f0-4b22-a205-ee23802e8e98", "created": "2026-01-27T05:12:56.45854Z", "modified": "2026-01-27T05:12:56.45854Z", "relationship_type": "indicates", "source_ref": "indicator--15c847bd-afe9-4153-bdfc-7e334c62c5b5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b28dc2-c6dc-4df1-a290-2fb4ece9c678", "created": "2026-01-27T05:12:56.458723Z", "modified": "2026-01-27T05:12:56.458723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a723.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.458723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf7cfb3b-6853-4f93-afb9-3756816b53e9", "created": "2026-01-27T05:12:56.459443Z", "modified": "2026-01-27T05:12:56.459443Z", "relationship_type": "indicates", "source_ref": "indicator--63b28dc2-c6dc-4df1-a290-2fb4ece9c678", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1e1807-963c-4b6c-bfbd-797c531d6c9a", "created": "2026-01-27T05:12:56.459627Z", "modified": "2026-01-27T05:12:56.459627Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a724.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.459627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fce9b0a-c631-49da-acb3-5448a9e70065", "created": "2026-01-27T05:12:56.46034Z", "modified": "2026-01-27T05:12:56.46034Z", "relationship_type": "indicates", "source_ref": "indicator--eb1e1807-963c-4b6c-bfbd-797c531d6c9a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970327a6-47df-4e27-8545-e82389a9e2c9", "created": "2026-01-27T05:12:56.46052Z", "modified": "2026-01-27T05:12:56.46052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a725.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.46052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3ca1318-bc2f-4e84-bba8-fcd62bc512da", "created": "2026-01-27T05:12:56.461234Z", "modified": "2026-01-27T05:12:56.461234Z", "relationship_type": "indicates", "source_ref": "indicator--970327a6-47df-4e27-8545-e82389a9e2c9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fec51a-4800-4090-8fd8-fb0d9a7b2b03", "created": "2026-01-27T05:12:56.461415Z", "modified": "2026-01-27T05:12:56.461415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a726.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.461415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99694558-52e4-4715-ba8d-084f587f6257", "created": "2026-01-27T05:12:56.462143Z", "modified": "2026-01-27T05:12:56.462143Z", "relationship_type": "indicates", "source_ref": "indicator--75fec51a-4800-4090-8fd8-fb0d9a7b2b03", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb378c6-4317-4f9d-9ab1-277c89b8e66f", "created": "2026-01-27T05:12:56.462325Z", "modified": "2026-01-27T05:12:56.462325Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a727.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.462325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fbad29d-6ec1-4854-9ac7-7d37db4610c2", "created": "2026-01-27T05:12:56.463041Z", "modified": "2026-01-27T05:12:56.463041Z", "relationship_type": "indicates", "source_ref": "indicator--3fb378c6-4317-4f9d-9ab1-277c89b8e66f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7d25ff-ef88-435b-ac65-e1c2b3d3db82", "created": "2026-01-27T05:12:56.463224Z", "modified": "2026-01-27T05:12:56.463224Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a728.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.463224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--318167bc-3e35-4113-85ab-e5f1dc3a9497", "created": "2026-01-27T05:12:56.464056Z", "modified": "2026-01-27T05:12:56.464056Z", "relationship_type": "indicates", "source_ref": "indicator--de7d25ff-ef88-435b-ac65-e1c2b3d3db82", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0791c2e0-a4f4-4e31-b920-4340793f963d", "created": "2026-01-27T05:12:56.464239Z", "modified": "2026-01-27T05:12:56.464239Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a729.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.464239Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cad6d6e-c3ac-47cb-b1b9-c8347b4188da", "created": "2026-01-27T05:12:56.464957Z", "modified": "2026-01-27T05:12:56.464957Z", "relationship_type": "indicates", "source_ref": "indicator--0791c2e0-a4f4-4e31-b920-4340793f963d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6d3d45-7699-411c-bd94-2886afebc2c5", "created": "2026-01-27T05:12:56.465137Z", "modified": "2026-01-27T05:12:56.465137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a730.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.465137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9f947c3-3681-45b5-b076-658b3777138f", "created": "2026-01-27T05:12:56.465846Z", "modified": "2026-01-27T05:12:56.465846Z", "relationship_type": "indicates", "source_ref": "indicator--6c6d3d45-7699-411c-bd94-2886afebc2c5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8aab5d3-aa0c-4046-94dd-915d1e1160ff", "created": "2026-01-27T05:12:56.466031Z", "modified": "2026-01-27T05:12:56.466031Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a731.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.466031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cc042dc-9316-4804-8f8b-e46a946679ec", "created": "2026-01-27T05:12:56.46672Z", "modified": "2026-01-27T05:12:56.46672Z", "relationship_type": "indicates", "source_ref": "indicator--a8aab5d3-aa0c-4046-94dd-915d1e1160ff", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031f95b2-07aa-497c-b677-822d45d7e1ff", "created": "2026-01-27T05:12:56.466917Z", "modified": "2026-01-27T05:12:56.466917Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a732.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.466917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f47e4b8-6a21-4f68-859f-6dd1eb4c2e43", "created": "2026-01-27T05:12:56.46761Z", "modified": "2026-01-27T05:12:56.46761Z", "relationship_type": "indicates", "source_ref": "indicator--031f95b2-07aa-497c-b677-822d45d7e1ff", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f66a4c-63c2-410c-8f97-cb8680f9f611", "created": "2026-01-27T05:12:56.467807Z", "modified": "2026-01-27T05:12:56.467807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a733.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.467807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--528d94e5-2cd0-488a-b761-5de172d3ccfd", "created": "2026-01-27T05:12:56.468499Z", "modified": "2026-01-27T05:12:56.468499Z", "relationship_type": "indicates", "source_ref": "indicator--13f66a4c-63c2-410c-8f97-cb8680f9f611", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68adaadc-397b-4b0d-8b41-7e8bcf511bb6", "created": "2026-01-27T05:12:56.468677Z", "modified": "2026-01-27T05:12:56.468677Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a734.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.468677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e7cd7fb-de9c-4cba-bfab-1a12e8433cce", "created": "2026-01-27T05:12:56.469387Z", "modified": "2026-01-27T05:12:56.469387Z", "relationship_type": "indicates", "source_ref": "indicator--68adaadc-397b-4b0d-8b41-7e8bcf511bb6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cfda14-a99b-48fd-b108-b95d8dd76c9b", "created": "2026-01-27T05:12:56.469565Z", "modified": "2026-01-27T05:12:56.469565Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a735.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.469565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d25249d7-2ce4-449d-8e2c-91408e813548", "created": "2026-01-27T05:12:56.470269Z", "modified": "2026-01-27T05:12:56.470269Z", "relationship_type": "indicates", "source_ref": "indicator--b1cfda14-a99b-48fd-b108-b95d8dd76c9b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0e3373-861b-49fb-a07a-33bca854a0ab", "created": "2026-01-27T05:12:56.470445Z", "modified": "2026-01-27T05:12:56.470445Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a736.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.470445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4a7b135-03b5-4b06-8052-986983c1b8b0", "created": "2026-01-27T05:12:56.471152Z", "modified": "2026-01-27T05:12:56.471152Z", "relationship_type": "indicates", "source_ref": "indicator--1c0e3373-861b-49fb-a07a-33bca854a0ab", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28be929-15bd-4dac-b003-8c46810df5d8", "created": "2026-01-27T05:12:56.471331Z", "modified": "2026-01-27T05:12:56.471331Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a737.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.471331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4777f474-c70e-46db-9086-79eaa01b3925", "created": "2026-01-27T05:12:56.472143Z", "modified": "2026-01-27T05:12:56.472143Z", "relationship_type": "indicates", "source_ref": "indicator--f28be929-15bd-4dac-b003-8c46810df5d8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ec7729-0c45-4c3c-a766-07009cd06b04", "created": "2026-01-27T05:12:56.472329Z", "modified": "2026-01-27T05:12:56.472329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a738.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.472329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70fce384-8450-4871-9167-e9a5cb7afe7a", "created": "2026-01-27T05:12:56.473038Z", "modified": "2026-01-27T05:12:56.473038Z", "relationship_type": "indicates", "source_ref": "indicator--c5ec7729-0c45-4c3c-a766-07009cd06b04", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541af6c4-763d-48bb-941a-f3e3f455bed2", "created": "2026-01-27T05:12:56.473221Z", "modified": "2026-01-27T05:12:56.473221Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a739.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.473221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--540da991-acc0-489c-8b4f-8e65824d8fd2", "created": "2026-01-27T05:12:56.473932Z", "modified": "2026-01-27T05:12:56.473932Z", "relationship_type": "indicates", "source_ref": "indicator--541af6c4-763d-48bb-941a-f3e3f455bed2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312b1d31-62c6-4ea6-b885-215aa6f30aad", "created": "2026-01-27T05:12:56.474111Z", "modified": "2026-01-27T05:12:56.474111Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a740.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.474111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9b712c7-acfa-412d-88c5-b3ca0a3e40b4", "created": "2026-01-27T05:12:56.474818Z", "modified": "2026-01-27T05:12:56.474818Z", "relationship_type": "indicates", "source_ref": "indicator--312b1d31-62c6-4ea6-b885-215aa6f30aad", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1885588c-8bb4-41ff-8d55-2eee071fc185", "created": "2026-01-27T05:12:56.475Z", "modified": "2026-01-27T05:12:56.475Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a741.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc43ca12-f5d6-424a-837e-76df15b511d2", "created": "2026-01-27T05:12:56.475696Z", "modified": "2026-01-27T05:12:56.475696Z", "relationship_type": "indicates", "source_ref": "indicator--1885588c-8bb4-41ff-8d55-2eee071fc185", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e167e5b-911b-4742-b8fa-1dea4d536413", "created": "2026-01-27T05:12:56.475899Z", "modified": "2026-01-27T05:12:56.475899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a742.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.475899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8aedc85a-bbb7-454d-bb60-ba6294e11392", "created": "2026-01-27T05:12:56.4766Z", "modified": "2026-01-27T05:12:56.4766Z", "relationship_type": "indicates", "source_ref": "indicator--2e167e5b-911b-4742-b8fa-1dea4d536413", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97221e40-737f-4deb-8387-7f8e5eb806f9", "created": "2026-01-27T05:12:56.476801Z", "modified": "2026-01-27T05:12:56.476801Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a743.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.476801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73128693-1ccd-4844-9b03-2b47c0d8fcea", "created": "2026-01-27T05:12:56.477508Z", "modified": "2026-01-27T05:12:56.477508Z", "relationship_type": "indicates", "source_ref": "indicator--97221e40-737f-4deb-8387-7f8e5eb806f9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea990c47-2ed5-40e7-a8c8-64e2d17edea2", "created": "2026-01-27T05:12:56.477685Z", "modified": "2026-01-27T05:12:56.477685Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a744.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.477685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac4838ab-e064-4503-a616-d536710be97c", "created": "2026-01-27T05:12:56.478407Z", "modified": "2026-01-27T05:12:56.478407Z", "relationship_type": "indicates", "source_ref": "indicator--ea990c47-2ed5-40e7-a8c8-64e2d17edea2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80bacc2-85ab-4605-b047-a1a940d6cae1", "created": "2026-01-27T05:12:56.478583Z", "modified": "2026-01-27T05:12:56.478583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a745.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.478583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6d92694-6fd7-476f-9fd6-db85b4486114", "created": "2026-01-27T05:12:56.479282Z", "modified": "2026-01-27T05:12:56.479282Z", "relationship_type": "indicates", "source_ref": "indicator--b80bacc2-85ab-4605-b047-a1a940d6cae1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5e68ef-8552-446d-9827-547ab21f1155", "created": "2026-01-27T05:12:56.47946Z", "modified": "2026-01-27T05:12:56.47946Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a745.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.47946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d488e9-04d8-4959-813e-e92fddcd2819", "created": "2026-01-27T05:12:56.480274Z", "modified": "2026-01-27T05:12:56.480274Z", "relationship_type": "indicates", "source_ref": "indicator--cf5e68ef-8552-446d-9827-547ab21f1155", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5158aaa-824c-430c-85e1-0b74b4393eab", "created": "2026-01-27T05:12:56.480455Z", "modified": "2026-01-27T05:12:56.480455Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a746.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.480455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd3c1d55-101d-4f58-a5d6-8c6b263ecd1f", "created": "2026-01-27T05:12:56.481163Z", "modified": "2026-01-27T05:12:56.481163Z", "relationship_type": "indicates", "source_ref": "indicator--f5158aaa-824c-430c-85e1-0b74b4393eab", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdb5960-b597-4ce2-b29b-ec7acd5b9815", "created": "2026-01-27T05:12:56.481345Z", "modified": "2026-01-27T05:12:56.481345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a747.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.481345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4184d8a3-83fb-4d0d-8b65-149b5a12e9f1", "created": "2026-01-27T05:12:56.482055Z", "modified": "2026-01-27T05:12:56.482055Z", "relationship_type": "indicates", "source_ref": "indicator--1cdb5960-b597-4ce2-b29b-ec7acd5b9815", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3459b1fd-bcbd-41d4-bb66-b6794e4b2428", "created": "2026-01-27T05:12:56.482234Z", "modified": "2026-01-27T05:12:56.482234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a748.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.482234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ea22abc-d32e-4c92-8cc3-19527fa5dc88", "created": "2026-01-27T05:12:56.482957Z", "modified": "2026-01-27T05:12:56.482957Z", "relationship_type": "indicates", "source_ref": "indicator--3459b1fd-bcbd-41d4-bb66-b6794e4b2428", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5871394-4d60-4415-8a6b-e24d698ff68e", "created": "2026-01-27T05:12:56.483138Z", "modified": "2026-01-27T05:12:56.483138Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a749.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.483138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9f46a89-d6bf-45a8-a85e-676108818667", "created": "2026-01-27T05:12:56.483849Z", "modified": "2026-01-27T05:12:56.483849Z", "relationship_type": "indicates", "source_ref": "indicator--c5871394-4d60-4415-8a6b-e24d698ff68e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca2c4aa-16f1-4597-960b-b51995e53a1f", "created": "2026-01-27T05:12:56.484029Z", "modified": "2026-01-27T05:12:56.484029Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.484029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c379afb9-4eab-4bfb-917e-ebb37776a90a", "created": "2026-01-27T05:12:56.484716Z", "modified": "2026-01-27T05:12:56.484716Z", "relationship_type": "indicates", "source_ref": "indicator--1ca2c4aa-16f1-4597-960b-b51995e53a1f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396259a8-35b9-4e61-8fcc-422923bcd756", "created": "2026-01-27T05:12:56.484913Z", "modified": "2026-01-27T05:12:56.484913Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.484913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0f52ebd-696b-475d-a99a-e0da0b9714f8", "created": "2026-01-27T05:12:56.485609Z", "modified": "2026-01-27T05:12:56.485609Z", "relationship_type": "indicates", "source_ref": "indicator--396259a8-35b9-4e61-8fcc-422923bcd756", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d7253a-352c-4eb0-8b8b-a90e6e2dfe54", "created": "2026-01-27T05:12:56.485804Z", "modified": "2026-01-27T05:12:56.485804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.485804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91688428-315e-43f8-8d3f-c4062ad5dd1f", "created": "2026-01-27T05:12:56.486503Z", "modified": "2026-01-27T05:12:56.486503Z", "relationship_type": "indicates", "source_ref": "indicator--22d7253a-352c-4eb0-8b8b-a90e6e2dfe54", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56e4b44-6fc8-4624-99e8-4f3654af2d4a", "created": "2026-01-27T05:12:56.486684Z", "modified": "2026-01-27T05:12:56.486684Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a780.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.486684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2afb9cec-902f-41d5-bc3f-0de77d2ce46a", "created": "2026-01-27T05:12:56.487383Z", "modified": "2026-01-27T05:12:56.487383Z", "relationship_type": "indicates", "source_ref": "indicator--b56e4b44-6fc8-4624-99e8-4f3654af2d4a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675a8887-2fea-4e00-b1ab-69b2fa8f1d12", "created": "2026-01-27T05:12:56.487559Z", "modified": "2026-01-27T05:12:56.487559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a785.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.487559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61b0440a-e68e-4dc3-bb06-f861dc8f30b8", "created": "2026-01-27T05:12:56.488369Z", "modified": "2026-01-27T05:12:56.488369Z", "relationship_type": "indicates", "source_ref": "indicator--675a8887-2fea-4e00-b1ab-69b2fa8f1d12", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b58d1cb-b8cc-44ca-910c-ea0af4d4c583", "created": "2026-01-27T05:12:56.488552Z", "modified": "2026-01-27T05:12:56.488552Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a785.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.488552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8c567e9-c8d9-4570-9d19-61d2d9a80ecb", "created": "2026-01-27T05:12:56.489263Z", "modified": "2026-01-27T05:12:56.489263Z", "relationship_type": "indicates", "source_ref": "indicator--1b58d1cb-b8cc-44ca-910c-ea0af4d4c583", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8adf4dc-6c4f-409e-9ea9-76046590590d", "created": "2026-01-27T05:12:56.489443Z", "modified": "2026-01-27T05:12:56.489443Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a810.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.489443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cc50cc1-b6da-40b4-888f-f2f6682d7a42", "created": "2026-01-27T05:12:56.490145Z", "modified": "2026-01-27T05:12:56.490145Z", "relationship_type": "indicates", "source_ref": "indicator--e8adf4dc-6c4f-409e-9ea9-76046590590d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ca4e2a-df1d-4f11-b4e2-50ba14ab4d89", "created": "2026-01-27T05:12:56.490325Z", "modified": "2026-01-27T05:12:56.490325Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a810.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.490325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3341ad3-c90c-44cc-8ee9-cb86e3bb0e47", "created": "2026-01-27T05:12:56.49103Z", "modified": "2026-01-27T05:12:56.49103Z", "relationship_type": "indicates", "source_ref": "indicator--94ca4e2a-df1d-4f11-b4e2-50ba14ab4d89", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21449208-0546-473e-a3f8-d916a1a816e2", "created": "2026-01-27T05:12:56.491212Z", "modified": "2026-01-27T05:12:56.491212Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a810.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.491212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d6b2cc2-9e8e-444e-a473-1bd780dd78ca", "created": "2026-01-27T05:12:56.491924Z", "modified": "2026-01-27T05:12:56.491924Z", "relationship_type": "indicates", "source_ref": "indicator--21449208-0546-473e-a3f8-d916a1a816e2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b9756c-6c39-4030-9342-a85dcd85db3c", "created": "2026-01-27T05:12:56.492104Z", "modified": "2026-01-27T05:12:56.492104Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a811.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.492104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cca8fba3-3a84-4fff-8210-d37ba3a44654", "created": "2026-01-27T05:12:56.492814Z", "modified": "2026-01-27T05:12:56.492814Z", "relationship_type": "indicates", "source_ref": "indicator--b6b9756c-6c39-4030-9342-a85dcd85db3c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a744fd8-431a-426d-8ea3-ffc1f3f4ab79", "created": "2026-01-27T05:12:56.492996Z", "modified": "2026-01-27T05:12:56.492996Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a811.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.492996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc046ccf-93ab-47cf-b458-fe740fd48345", "created": "2026-01-27T05:12:56.493685Z", "modified": "2026-01-27T05:12:56.493685Z", "relationship_type": "indicates", "source_ref": "indicator--5a744fd8-431a-426d-8ea3-ffc1f3f4ab79", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168d7bbc-1cb6-46ce-a0fb-5f824886bac9", "created": "2026-01-27T05:12:56.493887Z", "modified": "2026-01-27T05:12:56.493887Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a880.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.493887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bb1068b-430b-4981-a1fc-48615a5a853f", "created": "2026-01-27T05:12:56.494572Z", "modified": "2026-01-27T05:12:56.494572Z", "relationship_type": "indicates", "source_ref": "indicator--168d7bbc-1cb6-46ce-a0fb-5f824886bac9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8baf31-af33-4969-a8ea-ccdd1b5d626b", "created": "2026-01-27T05:12:56.494804Z", "modified": "2026-01-27T05:12:56.494804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a89.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.494804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5828e05e-d42e-4cd2-98eb-f36446d94a98", "created": "2026-01-27T05:12:56.495536Z", "modified": "2026-01-27T05:12:56.495536Z", "relationship_type": "indicates", "source_ref": "indicator--2e8baf31-af33-4969-a8ea-ccdd1b5d626b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5458155-9140-42e4-affc-b933c25afed0", "created": "2026-01-27T05:12:56.495718Z", "modified": "2026-01-27T05:12:56.495718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a89.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.495718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd074299-3ec6-4bce-911d-d77c9241a7e5", "created": "2026-01-27T05:12:56.496543Z", "modified": "2026-01-27T05:12:56.496543Z", "relationship_type": "indicates", "source_ref": "indicator--e5458155-9140-42e4-affc-b933c25afed0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5005336-d5a1-4023-8b0f-c2a5dbf72340", "created": "2026-01-27T05:12:56.496727Z", "modified": "2026-01-27T05:12:56.496727Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a910.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.496727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--585ed716-9dae-4bf6-ae21-7b075b321e14", "created": "2026-01-27T05:12:56.497445Z", "modified": "2026-01-27T05:12:56.497445Z", "relationship_type": "indicates", "source_ref": "indicator--b5005336-d5a1-4023-8b0f-c2a5dbf72340", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efea01d-413d-405b-8ede-4f3ef579cd9e", "created": "2026-01-27T05:12:56.497624Z", "modified": "2026-01-27T05:12:56.497624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a915.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.497624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94385c93-af9d-4784-884a-c3a4af4ebd52", "created": "2026-01-27T05:12:56.498338Z", "modified": "2026-01-27T05:12:56.498338Z", "relationship_type": "indicates", "source_ref": "indicator--3efea01d-413d-405b-8ede-4f3ef579cd9e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3957a7-975f-4fec-a36e-b405beb8cb1e", "created": "2026-01-27T05:12:56.498521Z", "modified": "2026-01-27T05:12:56.498521Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a920.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.498521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bf551a0-27c1-4939-af78-33df35b9de0f", "created": "2026-01-27T05:12:56.499236Z", "modified": "2026-01-27T05:12:56.499236Z", "relationship_type": "indicates", "source_ref": "indicator--7b3957a7-975f-4fec-a36e-b405beb8cb1e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2118f8-d1e5-4199-9824-eea42dae5643", "created": "2026-01-27T05:12:56.499416Z", "modified": "2026-01-27T05:12:56.499416Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a925.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.499416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--717f2a33-6e2d-4b28-824f-682a525c6cc5", "created": "2026-01-27T05:12:56.500134Z", "modified": "2026-01-27T05:12:56.500134Z", "relationship_type": "indicates", "source_ref": "indicator--af2118f8-d1e5-4199-9824-eea42dae5643", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04468108-3ff7-4bf5-a8fc-fd6e93fd2232", "created": "2026-01-27T05:12:56.500316Z", "modified": "2026-01-27T05:12:56.500316Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a930.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.500316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da36c43c-c0b1-4c77-8e6a-3c3837cab345", "created": "2026-01-27T05:12:56.501038Z", "modified": "2026-01-27T05:12:56.501038Z", "relationship_type": "indicates", "source_ref": "indicator--04468108-3ff7-4bf5-a8fc-fd6e93fd2232", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e1b971-623e-4e5f-9af5-d216cf08d11a", "created": "2026-01-27T05:12:56.501217Z", "modified": "2026-01-27T05:12:56.501217Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a935.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.501217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54eb9173-b31b-49a8-8d61-b606b3aa7e99", "created": "2026-01-27T05:12:56.501936Z", "modified": "2026-01-27T05:12:56.501936Z", "relationship_type": "indicates", "source_ref": "indicator--45e1b971-623e-4e5f-9af5-d216cf08d11a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7af54dc-b772-4319-ae82-cb40a01c8e14", "created": "2026-01-27T05:12:56.502115Z", "modified": "2026-01-27T05:12:56.502115Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a940.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.502115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b5ceeaf-04d9-4872-a154-0b92fff86962", "created": "2026-01-27T05:12:56.502833Z", "modified": "2026-01-27T05:12:56.502833Z", "relationship_type": "indicates", "source_ref": "indicator--c7af54dc-b772-4319-ae82-cb40a01c8e14", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb73f245-90d3-450a-a85e-a6ac2b48b115", "created": "2026-01-27T05:12:56.503013Z", "modified": "2026-01-27T05:12:56.503013Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a941.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.503013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7b4cbaa-f6ff-4e3c-9c41-045d62e1be74", "created": "2026-01-27T05:12:56.503716Z", "modified": "2026-01-27T05:12:56.503716Z", "relationship_type": "indicates", "source_ref": "indicator--cb73f245-90d3-450a-a85e-a6ac2b48b115", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bdd1ab-67d2-49fa-b4d6-ece206831680", "created": "2026-01-27T05:12:56.503918Z", "modified": "2026-01-27T05:12:56.503918Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a942.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.503918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eee68a48-c33d-4c77-b2b6-d203e39a7379", "created": "2026-01-27T05:12:56.50473Z", "modified": "2026-01-27T05:12:56.50473Z", "relationship_type": "indicates", "source_ref": "indicator--93bdd1ab-67d2-49fa-b4d6-ece206831680", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7942682-ced6-4be9-959f-04d0c828c8ec", "created": "2026-01-27T05:12:56.504931Z", "modified": "2026-01-27T05:12:56.504931Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a943.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.504931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c59497a-4223-45de-94cf-a4e5c627333e", "created": "2026-01-27T05:12:56.505634Z", "modified": "2026-01-27T05:12:56.505634Z", "relationship_type": "indicates", "source_ref": "indicator--a7942682-ced6-4be9-959f-04d0c828c8ec", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d5c58f-e9f9-4eba-9e66-4c7450122326", "created": "2026-01-27T05:12:56.505834Z", "modified": "2026-01-27T05:12:56.505834Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a944.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.505834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0abcef7-df9d-4195-85e9-47b3dd423498", "created": "2026-01-27T05:12:56.50654Z", "modified": "2026-01-27T05:12:56.50654Z", "relationship_type": "indicates", "source_ref": "indicator--15d5c58f-e9f9-4eba-9e66-4c7450122326", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1231856e-9533-4b63-824d-08df9a9a3640", "created": "2026-01-27T05:12:56.50672Z", "modified": "2026-01-27T05:12:56.50672Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a945.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.50672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--160735cc-c142-45ea-8639-68c1dd7591f9", "created": "2026-01-27T05:12:56.507432Z", "modified": "2026-01-27T05:12:56.507432Z", "relationship_type": "indicates", "source_ref": "indicator--1231856e-9533-4b63-824d-08df9a9a3640", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477bab7f-3b06-4682-b588-385145f380ae", "created": "2026-01-27T05:12:56.507613Z", "modified": "2026-01-27T05:12:56.507613Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a946.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.507613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1165e43f-8f6c-483a-9b2c-342bb9b3d833", "created": "2026-01-27T05:12:56.508334Z", "modified": "2026-01-27T05:12:56.508334Z", "relationship_type": "indicates", "source_ref": "indicator--477bab7f-3b06-4682-b588-385145f380ae", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34490bcd-587b-444d-ae9c-be6f6bef12e8", "created": "2026-01-27T05:12:56.508513Z", "modified": "2026-01-27T05:12:56.508513Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-a947.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.508513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f47a9b5b-ffe4-49be-8051-c5f7ed4f4c4b", "created": "2026-01-27T05:12:56.509223Z", "modified": "2026-01-27T05:12:56.509223Z", "relationship_type": "indicates", "source_ref": "indicator--34490bcd-587b-444d-ae9c-be6f6bef12e8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410314ae-84ea-4e19-8341-eba9ad384ed1", "created": "2026-01-27T05:12:56.509405Z", "modified": "2026-01-27T05:12:56.509405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-monitor.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.509405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3bd2340-6cb2-4711-bb7d-3b808205d271", "created": "2026-01-27T05:12:56.510143Z", "modified": "2026-01-27T05:12:56.510143Z", "relationship_type": "indicates", "source_ref": "indicator--410314ae-84ea-4e19-8341-eba9ad384ed1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0ddc34-8c7b-47ea-a305-ff6f62fc8efb", "created": "2026-01-27T05:12:56.510322Z", "modified": "2026-01-27T05:12:56.510322Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol-viewer-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.510322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e78d4425-ef10-4689-99cf-e1b76acd37c4", "created": "2026-01-27T05:12:56.511134Z", "modified": "2026-01-27T05:12:56.511134Z", "relationship_type": "indicates", "source_ref": "indicator--fb0ddc34-8c7b-47ea-a305-ff6f62fc8efb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9025cc-efa5-4dca-ad80-512c0fad6b60", "created": "2026-01-27T05:12:56.511319Z", "modified": "2026-01-27T05:12:56.511319Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.511319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4130067c-eedd-4ff6-ab1e-7f765eba8e2d", "created": "2026-01-27T05:12:56.512015Z", "modified": "2026-01-27T05:12:56.512015Z", "relationship_type": "indicates", "source_ref": "indicator--8f9025cc-efa5-4dca-ad80-512c0fad6b60", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d281b18-20d0-46b5-a21a-b357a1ec1777", "created": "2026-01-27T05:12:56.512198Z", "modified": "2026-01-27T05:12:56.512198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.512198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3adfd88-137d-4b00-9acf-d33f37d9f991", "created": "2026-01-27T05:12:56.513267Z", "modified": "2026-01-27T05:12:56.513267Z", "relationship_type": "indicates", "source_ref": "indicator--1d281b18-20d0-46b5-a21a-b357a1ec1777", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5c2ee3-6d3b-4250-8a7c-223cf4140a7b", "created": "2026-01-27T05:12:56.513469Z", "modified": "2026-01-27T05:12:56.513469Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.513469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01999de0-f6cb-4cf1-951f-fcb84e0c99cf", "created": "2026-01-27T05:12:56.514185Z", "modified": "2026-01-27T05:12:56.514185Z", "relationship_type": "indicates", "source_ref": "indicator--ef5c2ee3-6d3b-4250-8a7c-223cf4140a7b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc504d4-ebbf-490a-9251-3619d2cdd060", "created": "2026-01-27T05:12:56.514367Z", "modified": "2026-01-27T05:12:56.514367Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.514367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa83ddcf-fc0c-4fd3-9885-482e713e994a", "created": "2026-01-27T05:12:56.515067Z", "modified": "2026-01-27T05:12:56.515067Z", "relationship_type": "indicates", "source_ref": "indicator--3bc504d4-ebbf-490a-9251-3619d2cdd060", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413f92ba-a7d5-49b3-a84c-a385274f549d", "created": "2026-01-27T05:12:56.515249Z", "modified": "2026-01-27T05:12:56.515249Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.systemserviceprovider.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.515249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dc675a1-c710-442d-9f1d-0c284e11200a", "created": "2026-01-27T05:12:56.515972Z", "modified": "2026-01-27T05:12:56.515972Z", "relationship_type": "indicates", "source_ref": "indicator--413f92ba-a7d5-49b3-a84c-a385274f549d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da4d94e-25ee-41ff-ae8b-5efd5737e299", "created": "2026-01-27T05:12:56.516156Z", "modified": "2026-01-27T05:12:56.516156Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='protocol.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.516156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--feb541bd-247f-4d62-b802-24ce7ef02081", "created": "2026-01-27T05:12:56.516864Z", "modified": "2026-01-27T05:12:56.516864Z", "relationship_type": "indicates", "source_ref": "indicator--9da4d94e-25ee-41ff-ae8b-5efd5737e299", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b69abe7-8c89-4c36-9dbc-bdbf0b6ab155", "created": "2026-01-27T05:12:56.517046Z", "modified": "2026-01-27T05:12:56.517046Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='secondclone-2d312.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.517046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2947d204-bf0c-4872-a2c6-9faf56a14f63", "created": "2026-01-27T05:12:56.517861Z", "modified": "2026-01-27T05:12:56.517861Z", "relationship_type": "indicates", "source_ref": "indicator--1b69abe7-8c89-4c36-9dbc-bdbf0b6ab155", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5652e3-bd91-49a8-8aee-ffaa9e101431", "created": "2026-01-27T05:12:56.518047Z", "modified": "2026-01-27T05:12:56.518047Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.518047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a420527b-a111-4c87-8210-352dd60b5e9f", "created": "2026-01-27T05:12:56.518755Z", "modified": "2026-01-27T05:12:56.518755Z", "relationship_type": "indicates", "source_ref": "indicator--7e5652e3-bd91-49a8-8aee-ffaa9e101431", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3b10a0-a3f0-4c8c-b9e8-14db58429944", "created": "2026-01-27T05:12:56.518948Z", "modified": "2026-01-27T05:12:56.518948Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a720.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.518948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d443325-46ac-48c3-bf87-7084391be14b", "created": "2026-01-27T05:12:56.519638Z", "modified": "2026-01-27T05:12:56.519638Z", "relationship_type": "indicates", "source_ref": "indicator--8a3b10a0-a3f0-4c8c-b9e8-14db58429944", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b71740d-3484-46b0-ab5b-014dc8b2b69e", "created": "2026-01-27T05:12:56.519834Z", "modified": "2026-01-27T05:12:56.519834Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a722.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.519834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d77cd495-09bb-4d15-8ca5-3727360ebe4e", "created": "2026-01-27T05:12:56.520543Z", "modified": "2026-01-27T05:12:56.520543Z", "relationship_type": "indicates", "source_ref": "indicator--5b71740d-3484-46b0-ab5b-014dc8b2b69e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c66cfc-484d-4711-a82c-20d1a69bb051", "created": "2026-01-27T05:12:56.520722Z", "modified": "2026-01-27T05:12:56.520722Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a724.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.520722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aea40aa0-b614-4cea-b7bc-4a8d6807cb7f", "created": "2026-01-27T05:12:56.521433Z", "modified": "2026-01-27T05:12:56.521433Z", "relationship_type": "indicates", "source_ref": "indicator--04c66cfc-484d-4711-a82c-20d1a69bb051", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1db490-11f5-4e3d-b9af-9570a2282aa2", "created": "2026-01-27T05:12:56.521614Z", "modified": "2026-01-27T05:12:56.521614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a725.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.521614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68c8a1da-0c31-4a04-927b-a6c8697182c5", "created": "2026-01-27T05:12:56.522441Z", "modified": "2026-01-27T05:12:56.522441Z", "relationship_type": "indicates", "source_ref": "indicator--5e1db490-11f5-4e3d-b9af-9570a2282aa2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086ec381-2d3b-4efa-aaa8-0e81bc09b61c", "created": "2026-01-27T05:12:56.522623Z", "modified": "2026-01-27T05:12:56.522623Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a726.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.522623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dff7b24c-2bc2-4c05-9c95-76a18c4af612", "created": "2026-01-27T05:12:56.523352Z", "modified": "2026-01-27T05:12:56.523352Z", "relationship_type": "indicates", "source_ref": "indicator--086ec381-2d3b-4efa-aaa8-0e81bc09b61c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bab68b-6dd6-4b47-9627-21705eabe401", "created": "2026-01-27T05:12:56.523536Z", "modified": "2026-01-27T05:12:56.523536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a727.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.523536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8193b74c-837f-4313-a27e-861fd055a563", "created": "2026-01-27T05:12:56.524272Z", "modified": "2026-01-27T05:12:56.524272Z", "relationship_type": "indicates", "source_ref": "indicator--03bab68b-6dd6-4b47-9627-21705eabe401", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678bd7b2-df05-4d86-8881-f05bc7d141d4", "created": "2026-01-27T05:12:56.524455Z", "modified": "2026-01-27T05:12:56.524455Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a729.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.524455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cd0f9d2-3ac8-4ea2-ba5b-336378981efd", "created": "2026-01-27T05:12:56.52517Z", "modified": "2026-01-27T05:12:56.52517Z", "relationship_type": "indicates", "source_ref": "indicator--678bd7b2-df05-4d86-8881-f05bc7d141d4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbdaa75-31ad-4921-be6a-4c320b1677e8", "created": "2026-01-27T05:12:56.52535Z", "modified": "2026-01-27T05:12:56.52535Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a732.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.52535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--227d314c-29ff-4fb2-a6b6-caf46c856774", "created": "2026-01-27T05:12:56.526068Z", "modified": "2026-01-27T05:12:56.526068Z", "relationship_type": "indicates", "source_ref": "indicator--8bbdaa75-31ad-4921-be6a-4c320b1677e8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398d0ed1-41fb-4603-9a13-5a067ca9f497", "created": "2026-01-27T05:12:56.526249Z", "modified": "2026-01-27T05:12:56.526249Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a733.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.526249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--192a352e-ff2f-46e3-b69f-cb3348f6e2d3", "created": "2026-01-27T05:12:56.526964Z", "modified": "2026-01-27T05:12:56.526964Z", "relationship_type": "indicates", "source_ref": "indicator--398d0ed1-41fb-4603-9a13-5a067ca9f497", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03b209d-56a9-4c18-8ae9-7ac03a0bdacd", "created": "2026-01-27T05:12:56.527145Z", "modified": "2026-01-27T05:12:56.527145Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a734.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.527145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d9863a8-c2e9-4a32-85ca-a252d92b7079", "created": "2026-01-27T05:12:56.527852Z", "modified": "2026-01-27T05:12:56.527852Z", "relationship_type": "indicates", "source_ref": "indicator--a03b209d-56a9-4c18-8ae9-7ac03a0bdacd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a9ed61-2b30-424d-91e2-b5a682d67a45", "created": "2026-01-27T05:12:56.528056Z", "modified": "2026-01-27T05:12:56.528056Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a735.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.528056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25674f20-7ef4-4e23-8b72-93b52c728948", "created": "2026-01-27T05:12:56.528809Z", "modified": "2026-01-27T05:12:56.528809Z", "relationship_type": "indicates", "source_ref": "indicator--15a9ed61-2b30-424d-91e2-b5a682d67a45", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424cdd4c-e23a-46b5-b6e6-1e9d23f0c9d0", "created": "2026-01-27T05:12:56.528993Z", "modified": "2026-01-27T05:12:56.528993Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a737.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.528993Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac926903-0dfc-4acb-837b-2ca9ca9adfbc", "created": "2026-01-27T05:12:56.52968Z", "modified": "2026-01-27T05:12:56.52968Z", "relationship_type": "indicates", "source_ref": "indicator--424cdd4c-e23a-46b5-b6e6-1e9d23f0c9d0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00396703-e665-40d4-bff4-b6bac269fa9b", "created": "2026-01-27T05:12:56.529876Z", "modified": "2026-01-27T05:12:56.529876Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a738.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.529876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e62ad03-01ce-422c-9fa1-53e7ea1bf036", "created": "2026-01-27T05:12:56.530685Z", "modified": "2026-01-27T05:12:56.530685Z", "relationship_type": "indicates", "source_ref": "indicator--00396703-e665-40d4-bff4-b6bac269fa9b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1d141b-8a6b-450b-8997-d4e3edecd9a5", "created": "2026-01-27T05:12:56.530885Z", "modified": "2026-01-27T05:12:56.530885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a740.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.530885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b54132f8-357e-402d-aa61-7af0f371b0ab", "created": "2026-01-27T05:12:56.531589Z", "modified": "2026-01-27T05:12:56.531589Z", "relationship_type": "indicates", "source_ref": "indicator--bc1d141b-8a6b-450b-8997-d4e3edecd9a5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456a9c45-4c56-4feb-b221-746397b0a3b2", "created": "2026-01-27T05:12:56.531786Z", "modified": "2026-01-27T05:12:56.531786Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a741.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.531786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12e83bcb-936e-413b-ae40-a11db8db4e68", "created": "2026-01-27T05:12:56.532494Z", "modified": "2026-01-27T05:12:56.532494Z", "relationship_type": "indicates", "source_ref": "indicator--456a9c45-4c56-4feb-b221-746397b0a3b2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb394f3-889c-4f29-966a-d0c407c5ca72", "created": "2026-01-27T05:12:56.532675Z", "modified": "2026-01-27T05:12:56.532675Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a742.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.532675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75b14e6f-24c9-4aa9-b317-ab7273dfb498", "created": "2026-01-27T05:12:56.533383Z", "modified": "2026-01-27T05:12:56.533383Z", "relationship_type": "indicates", "source_ref": "indicator--cfb394f3-889c-4f29-966a-d0c407c5ca72", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38db38ec-e679-4adb-be9a-2f9bb8ae5188", "created": "2026-01-27T05:12:56.533561Z", "modified": "2026-01-27T05:12:56.533561Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a743.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.533561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffaddbe8-bc14-461e-9d59-c8fd24dbb1c1", "created": "2026-01-27T05:12:56.53427Z", "modified": "2026-01-27T05:12:56.53427Z", "relationship_type": "indicates", "source_ref": "indicator--38db38ec-e679-4adb-be9a-2f9bb8ae5188", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70556e80-c70e-4358-840d-304d65032f11", "created": "2026-01-27T05:12:56.534452Z", "modified": "2026-01-27T05:12:56.534452Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a744.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.534452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15b49459-3e1d-4c0b-8db0-0946c01aab2a", "created": "2026-01-27T05:12:56.535163Z", "modified": "2026-01-27T05:12:56.535163Z", "relationship_type": "indicates", "source_ref": "indicator--70556e80-c70e-4358-840d-304d65032f11", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f934f2a7-1337-4f92-8c12-c22104953494", "created": "2026-01-27T05:12:56.535342Z", "modified": "2026-01-27T05:12:56.535342Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a745.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.535342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff1b8b8f-d89d-47a0-a2a0-5d3f91b7b112", "created": "2026-01-27T05:12:56.536075Z", "modified": "2026-01-27T05:12:56.536075Z", "relationship_type": "indicates", "source_ref": "indicator--f934f2a7-1337-4f92-8c12-c22104953494", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e1355b-052f-4d44-bd9f-9c6fa8ab2d3f", "created": "2026-01-27T05:12:56.536324Z", "modified": "2026-01-27T05:12:56.536324Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a746.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.536324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23e24171-e21a-4a1e-9659-5b01058f7aad", "created": "2026-01-27T05:12:56.537054Z", "modified": "2026-01-27T05:12:56.537054Z", "relationship_type": "indicates", "source_ref": "indicator--d6e1355b-052f-4d44-bd9f-9c6fa8ab2d3f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e6d483-98b9-4611-b3c7-1c60da1c6b49", "created": "2026-01-27T05:12:56.537235Z", "modified": "2026-01-27T05:12:56.537235Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a747.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.537235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cec55719-9b5a-4747-8c88-6067a03542d7", "created": "2026-01-27T05:12:56.537949Z", "modified": "2026-01-27T05:12:56.537949Z", "relationship_type": "indicates", "source_ref": "indicator--b4e6d483-98b9-4611-b3c7-1c60da1c6b49", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558a607e-92b6-404b-ab43-5740a4717475", "created": "2026-01-27T05:12:56.538139Z", "modified": "2026-01-27T05:12:56.538139Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a748.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.538139Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a4f241c-b220-463a-9740-037c4a8492aa", "created": "2026-01-27T05:12:56.538964Z", "modified": "2026-01-27T05:12:56.538964Z", "relationship_type": "indicates", "source_ref": "indicator--558a607e-92b6-404b-ab43-5740a4717475", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbf0df3-f943-40ab-afae-bbe720693de6", "created": "2026-01-27T05:12:56.539148Z", "modified": "2026-01-27T05:12:56.539148Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a910.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.539148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--778a270b-471e-41b1-8c36-5485022c1678", "created": "2026-01-27T05:12:56.539874Z", "modified": "2026-01-27T05:12:56.539874Z", "relationship_type": "indicates", "source_ref": "indicator--1dbf0df3-f943-40ab-afae-bbe720693de6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd62e92-101f-450c-aebf-b9a7bbe5d1ff", "created": "2026-01-27T05:12:56.540065Z", "modified": "2026-01-27T05:12:56.540065Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a915.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.540065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--439ae367-7a58-4523-9aff-6173a2f65085", "created": "2026-01-27T05:12:56.540791Z", "modified": "2026-01-27T05:12:56.540791Z", "relationship_type": "indicates", "source_ref": "indicator--1fd62e92-101f-450c-aebf-b9a7bbe5d1ff", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82723a74-f433-48f1-b602-248eff4d8d17", "created": "2026-01-27T05:12:56.540975Z", "modified": "2026-01-27T05:12:56.540975Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail-a920.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.540975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1438edd6-5502-43b8-b64e-6bb3a100eba5", "created": "2026-01-27T05:12:56.541673Z", "modified": "2026-01-27T05:12:56.541673Z", "relationship_type": "indicates", "source_ref": "indicator--82723a74-f433-48f1-b602-248eff4d8d17", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dcaee8c-15df-4155-aeb6-0804b36f9d05", "created": "2026-01-27T05:12:56.541882Z", "modified": "2026-01-27T05:12:56.541882Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setupmail.icloudappe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.541882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83a2b38e-56c6-4a91-b63e-dc134e71189b", "created": "2026-01-27T05:12:56.54258Z", "modified": "2026-01-27T05:12:56.54258Z", "relationship_type": "indicates", "source_ref": "indicator--0dcaee8c-15df-4155-aeb6-0804b36f9d05", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12cd19f-131c-4559-a72a-fe1252961c77", "created": "2026-01-27T05:12:56.542778Z", "modified": "2026-01-27T05:12:56.542778Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.phoneparental.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.542778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ca311ec-8b8a-479f-9f48-d3e74cfc1c6e", "created": "2026-01-27T05:12:56.54357Z", "modified": "2026-01-27T05:12:56.54357Z", "relationship_type": "indicates", "source_ref": "indicator--d12cd19f-131c-4559-a72a-fe1252961c77", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315c3bbe-ecab-4c3e-9d0a-7d923affdd03", "created": "2026-01-27T05:12:56.543779Z", "modified": "2026-01-27T05:12:56.543779Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.543779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad9478ed-861b-4d20-8908-b1d788fed54f", "created": "2026-01-27T05:12:56.544555Z", "modified": "2026-01-27T05:12:56.544555Z", "relationship_type": "indicates", "source_ref": "indicator--315c3bbe-ecab-4c3e-9d0a-7d923affdd03", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b45ffd-fc14-45de-b14d-b81e22324f38", "created": "2026-01-27T05:12:56.544735Z", "modified": "2026-01-27T05:12:56.544735Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.544735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1976d2c6-1b48-4d6b-81f3-eba5fb23d47e", "created": "2026-01-27T05:12:56.545427Z", "modified": "2026-01-27T05:12:56.545427Z", "relationship_type": "indicates", "source_ref": "indicator--c4b45ffd-fc14-45de-b14d-b81e22324f38", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff72bbe9-3203-4c95-a0cf-20a98f5543db", "created": "2026-01-27T05:12:56.545605Z", "modified": "2026-01-27T05:12:56.545605Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.545605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2fdff20-9896-4d75-9730-78b6429b57ef", "created": "2026-01-27T05:12:56.546302Z", "modified": "2026-01-27T05:12:56.546302Z", "relationship_type": "indicates", "source_ref": "indicator--ff72bbe9-3203-4c95-a0cf-20a98f5543db", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf85d9b-e45e-431a-9e6d-9ca3f34c78ed", "created": "2026-01-27T05:12:56.54648Z", "modified": "2026-01-27T05:12:56.54648Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.54648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f97b11df-1f61-41e5-935a-8356cbe21254", "created": "2026-01-27T05:12:56.547302Z", "modified": "2026-01-27T05:12:56.547302Z", "relationship_type": "indicates", "source_ref": "indicator--aaf85d9b-e45e-431a-9e6d-9ca3f34c78ed", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abed7acd-132d-4e2a-9558-a253d328a9fe", "created": "2026-01-27T05:12:56.547485Z", "modified": "2026-01-27T05:12:56.547485Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.547485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89264b73-fab0-47ad-b407-51148243ec51", "created": "2026-01-27T05:12:56.54818Z", "modified": "2026-01-27T05:12:56.54818Z", "relationship_type": "indicates", "source_ref": "indicator--abed7acd-132d-4e2a-9558-a253d328a9fe", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f16ab2-9a52-4ccf-a6c3-2dee7e184f08", "created": "2026-01-27T05:12:56.54836Z", "modified": "2026-01-27T05:12:56.54836Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.54836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f01f9423-f4dc-4918-ba44-8a233447bde3", "created": "2026-01-27T05:12:56.549054Z", "modified": "2026-01-27T05:12:56.549054Z", "relationship_type": "indicates", "source_ref": "indicator--b4f16ab2-9a52-4ccf-a6c3-2dee7e184f08", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ee9d6d-ae70-45d4-ab45-90461d6eda9d", "created": "2026-01-27T05:12:56.549234Z", "modified": "2026-01-27T05:12:56.549234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.549234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40ee14f7-1148-4681-9cc0-bb63d7d1c544", "created": "2026-01-27T05:12:56.549937Z", "modified": "2026-01-27T05:12:56.549937Z", "relationship_type": "indicates", "source_ref": "indicator--e5ee9d6d-ae70-45d4-ab45-90461d6eda9d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6aa7a9d-5351-4c68-aa42-7933ef733327", "created": "2026-01-27T05:12:56.550119Z", "modified": "2026-01-27T05:12:56.550119Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a100.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.550119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a42983ce-7d67-4b32-b0e3-ea2da3956c2e", "created": "2026-01-27T05:12:56.550832Z", "modified": "2026-01-27T05:12:56.550832Z", "relationship_type": "indicates", "source_ref": "indicator--d6aa7a9d-5351-4c68-aa42-7933ef733327", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b320867-33ad-4fa2-a997-ea053908f07e", "created": "2026-01-27T05:12:56.551014Z", "modified": "2026-01-27T05:12:56.551014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a600.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.551014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82055794-2184-403b-9263-4e7db4d6aecb", "created": "2026-01-27T05:12:56.5517Z", "modified": "2026-01-27T05:12:56.5517Z", "relationship_type": "indicates", "source_ref": "indicator--3b320867-33ad-4fa2-a997-ea053908f07e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4397d681-c98d-407f-9351-02d715886c15", "created": "2026-01-27T05:12:56.551895Z", "modified": "2026-01-27T05:12:56.551895Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a712.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.551895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6596726e-ded7-463a-8cb9-61cbb491f99d", "created": "2026-01-27T05:12:56.552588Z", "modified": "2026-01-27T05:12:56.552588Z", "relationship_type": "indicates", "source_ref": "indicator--4397d681-c98d-407f-9351-02d715886c15", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b9fc80-cc60-4610-83ba-7d6415443cc6", "created": "2026-01-27T05:12:56.552778Z", "modified": "2026-01-27T05:12:56.552778Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a780.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.552778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--008d853e-d9ba-4986-a4f5-acd45b14a60f", "created": "2026-01-27T05:12:56.553456Z", "modified": "2026-01-27T05:12:56.553456Z", "relationship_type": "indicates", "source_ref": "indicator--46b9fc80-cc60-4610-83ba-7d6415443cc6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bc086d-45dd-4d9f-b4d6-3a9adc85c907", "created": "2026-01-27T05:12:56.553638Z", "modified": "2026-01-27T05:12:56.553638Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a7xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.553638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c1ea779-0213-4546-bb06-47c7c46dcd2f", "created": "2026-01-27T05:12:56.554345Z", "modified": "2026-01-27T05:12:56.554345Z", "relationship_type": "indicates", "source_ref": "indicator--e9bc086d-45dd-4d9f-b4d6-3a9adc85c907", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60b8fa7-61b0-4b44-8076-e8c7999532ba", "created": "2026-01-27T05:12:56.554523Z", "modified": "2026-01-27T05:12:56.554523Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a8xx.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.554523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41af377f-31b3-4d44-810d-735fa038166f", "created": "2026-01-27T05:12:56.555336Z", "modified": "2026-01-27T05:12:56.555336Z", "relationship_type": "indicates", "source_ref": "indicator--f60b8fa7-61b0-4b44-8076-e8c7999532ba", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b1409d-15f5-4c58-b40c-183418318ff0", "created": "2026-01-27T05:12:56.555517Z", "modified": "2026-01-27T05:12:56.555517Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a925.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.555517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cf8eab2-eb09-4fee-9518-94c372f242af", "created": "2026-01-27T05:12:56.556224Z", "modified": "2026-01-27T05:12:56.556224Z", "relationship_type": "indicates", "source_ref": "indicator--d2b1409d-15f5-4c58-b40c-183418318ff0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb8d095-4ab0-439b-9ec5-2117494dc512", "created": "2026-01-27T05:12:56.556404Z", "modified": "2026-01-27T05:12:56.556404Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a930.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.556404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1341130-3300-42f4-865e-0215a29e1123", "created": "2026-01-27T05:12:56.557108Z", "modified": "2026-01-27T05:12:56.557108Z", "relationship_type": "indicates", "source_ref": "indicator--9cb8d095-4ab0-439b-9ec5-2117494dc512", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a761767-f338-439d-9ea7-1eb60ac90b29", "created": "2026-01-27T05:12:56.55729Z", "modified": "2026-01-27T05:12:56.55729Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a935.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.55729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc7a9c4d-3b48-4ff2-bbc6-f53c65e71214", "created": "2026-01-27T05:12:56.558009Z", "modified": "2026-01-27T05:12:56.558009Z", "relationship_type": "indicates", "source_ref": "indicator--5a761767-f338-439d-9ea7-1eb60ac90b29", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6386fd-685f-4094-99a9-fe71935e5315", "created": "2026-01-27T05:12:56.558208Z", "modified": "2026-01-27T05:12:56.558208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a940.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.558208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7719ac14-dead-4998-b3f4-d58e1e664599", "created": "2026-01-27T05:12:56.558934Z", "modified": "2026-01-27T05:12:56.558934Z", "relationship_type": "indicates", "source_ref": "indicator--8a6386fd-685f-4094-99a9-fe71935e5315", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967eac34-9c89-452f-90c1-bd32e0261555", "created": "2026-01-27T05:12:56.559115Z", "modified": "2026-01-27T05:12:56.559115Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a941.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.559115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df67ed89-ee05-4fd0-b3d7-75c62723daa7", "created": "2026-01-27T05:12:56.559813Z", "modified": "2026-01-27T05:12:56.559813Z", "relationship_type": "indicates", "source_ref": "indicator--967eac34-9c89-452f-90c1-bd32e0261555", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95db88fc-7243-4342-abb8-c0005cfffae4", "created": "2026-01-27T05:12:56.559992Z", "modified": "2026-01-27T05:12:56.559992Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync-a942.thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.559992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--765d4953-204a-4ab6-bea5-3509f42eb107", "created": "2026-01-27T05:12:56.560677Z", "modified": "2026-01-27T05:12:56.560677Z", "relationship_type": "indicates", "source_ref": "indicator--95db88fc-7243-4342-abb8-c0005cfffae4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8a1a68-083d-4b7f-baab-d550f995cc97", "created": "2026-01-27T05:12:56.560872Z", "modified": "2026-01-27T05:12:56.560872Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thetruth-db94a.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.560872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--137256f5-466f-44b9-918d-2fd89321d012", "created": "2026-01-27T05:12:56.561663Z", "modified": "2026-01-27T05:12:56.561663Z", "relationship_type": "indicates", "source_ref": "indicator--9c8a1a68-083d-4b7f-baab-d550f995cc97", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b9415e-014c-4a26-8312-f5b5dc9d188e", "created": "2026-01-27T05:12:56.561861Z", "modified": "2026-01-27T05:12:56.561861Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.xyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.561861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52a91275-5c75-400a-9f15-fb4baa0f2ecc", "created": "2026-01-27T05:12:56.562627Z", "modified": "2026-01-27T05:12:56.562627Z", "relationship_type": "indicates", "source_ref": "indicator--85b9415e-014c-4a26-8312-f5b5dc9d188e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33871c34-4d83-4a17-b34b-c185e7c3a20c", "created": "2026-01-27T05:12:56.562823Z", "modified": "2026-01-27T05:12:56.562823Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.562823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c8c527b-b060-4808-b54b-826e44ffae62", "created": "2026-01-27T05:12:56.563615Z", "modified": "2026-01-27T05:12:56.563615Z", "relationship_type": "indicates", "source_ref": "indicator--33871c34-4d83-4a17-b34b-c185e7c3a20c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f578066-9336-4e55-9c8c-6be2870e6445", "created": "2026-01-27T05:12:56.563811Z", "modified": "2026-01-27T05:12:56.563811Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='copy9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.563811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68895bfa-04ca-4392-9131-e48448862fb2", "created": "2026-01-27T05:12:56.564475Z", "modified": "2026-01-27T05:12:56.564475Z", "relationship_type": "indicates", "source_ref": "indicator--7f578066-9336-4e55-9c8c-6be2870e6445", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204b544d-32ce-45d6-b70f-d97b53472eaf", "created": "2026-01-27T05:12:56.564653Z", "modified": "2026-01-27T05:12:56.564653Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='exactspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.564653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--498eebfb-eba2-4aa8-9af1-29542c8d04ed", "created": "2026-01-27T05:12:56.565423Z", "modified": "2026-01-27T05:12:56.565423Z", "relationship_type": "indicates", "source_ref": "indicator--204b544d-32ce-45d6-b70f-d97b53472eaf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a32a3ba-4a65-4a23-9466-bb9343ffe63a", "created": "2026-01-27T05:12:56.565603Z", "modified": "2026-01-27T05:12:56.565603Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.565603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67b34f8f-90b5-4230-a156-acc7d5692dbd", "created": "2026-01-27T05:12:56.566382Z", "modified": "2026-01-27T05:12:56.566382Z", "relationship_type": "indicates", "source_ref": "indicator--4a32a3ba-4a65-4a23-9466-bb9343ffe63a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa45544-6e63-4ff3-b87a-e80e8301de4d", "created": "2026-01-27T05:12:56.566565Z", "modified": "2026-01-27T05:12:56.566565Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='free.spycell.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.566565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23cc88de-4cdc-4bd1-b237-14099a3bb154", "created": "2026-01-27T05:12:56.567321Z", "modified": "2026-01-27T05:12:56.567321Z", "relationship_type": "indicates", "source_ref": "indicator--9fa45544-6e63-4ff3-b87a-e80e8301de4d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46078e55-7bb8-4760-898e-cd9186d47201", "created": "2026-01-27T05:12:56.567509Z", "modified": "2026-01-27T05:12:56.567509Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='guestspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.567509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90511a71-0d0d-4de0-9ee2-89fb2e7ed907", "created": "2026-01-27T05:12:56.568206Z", "modified": "2026-01-27T05:12:56.568206Z", "relationship_type": "indicates", "source_ref": "indicator--46078e55-7bb8-4760-898e-cd9186d47201", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5142cecc-8f4a-451a-a1ba-d2276abaa139", "created": "2026-01-27T05:12:56.568387Z", "modified": "2026-01-27T05:12:56.568387Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.568387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e2e95c4-593d-4f00-93b0-7dad4373869f", "created": "2026-01-27T05:12:56.569165Z", "modified": "2026-01-27T05:12:56.569165Z", "relationship_type": "indicates", "source_ref": "indicator--5142cecc-8f4a-451a-a1ba-d2276abaa139", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5d3a0d-ea72-4e18-b4d8-de59061fec62", "created": "2026-01-27T05:12:56.569345Z", "modified": "2026-01-27T05:12:56.569345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='innoaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.569345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecac1dd6-98eb-4058-8a34-c7e991b824b4", "created": "2026-01-27T05:12:56.570027Z", "modified": "2026-01-27T05:12:56.570027Z", "relationship_type": "indicates", "source_ref": "indicator--be5d3a0d-ea72-4e18-b4d8-de59061fec62", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce192ebc-040a-4572-b547-ff49cba6c184", "created": "2026-01-27T05:12:56.570206Z", "modified": "2026-01-27T05:12:56.570206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.570206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbece508-3e50-47e8-ad9a-50c7b03cce1a", "created": "2026-01-27T05:12:56.570879Z", "modified": "2026-01-27T05:12:56.570879Z", "relationship_type": "indicates", "source_ref": "indicator--ce192ebc-040a-4572-b547-ff49cba6c184", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b09a7b7-781f-43db-8d8b-7b41ae880660", "created": "2026-01-27T05:12:56.571059Z", "modified": "2026-01-27T05:12:56.571059Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobidad.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.571059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bde1e74-aa0d-4879-84db-348f3f746d64", "created": "2026-01-27T05:12:56.571845Z", "modified": "2026-01-27T05:12:56.571845Z", "relationship_type": "indicates", "source_ref": "indicator--7b09a7b7-781f-43db-8d8b-7b41ae880660", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755961ee-308e-4684-8b77-efb70035fcd3", "created": "2026-01-27T05:12:56.572027Z", "modified": "2026-01-27T05:12:56.572027Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.572027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1092ab6-6b9d-4341-bc5c-c025719f2913", "created": "2026-01-27T05:12:56.572701Z", "modified": "2026-01-27T05:12:56.572701Z", "relationship_type": "indicates", "source_ref": "indicator--755961ee-308e-4684-8b77-efb70035fcd3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a10ed2-cd32-4181-aeeb-c021abf6e9c0", "created": "2026-01-27T05:12:56.572899Z", "modified": "2026-01-27T05:12:56.572899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.572899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46955033-51ca-487e-ab20-0a135968f4e3", "created": "2026-01-27T05:12:56.57356Z", "modified": "2026-01-27T05:12:56.57356Z", "relationship_type": "indicates", "source_ref": "indicator--f8a10ed2-cd32-4181-aeeb-c021abf6e9c0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01bfc43f-9e57-48db-808f-f2588b275aa4", "created": "2026-01-27T05:12:56.573738Z", "modified": "2026-01-27T05:12:56.573738Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phoneparental.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.573738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--342623cd-9583-4404-a1d3-d4c217d3f619", "created": "2026-01-27T05:12:56.574443Z", "modified": "2026-01-27T05:12:56.574443Z", "relationship_type": "indicates", "source_ref": "indicator--01bfc43f-9e57-48db-808f-f2588b275aa4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c088e6c6-0f6d-448a-8d42-066a5db2ac32", "created": "2026-01-27T05:12:56.574625Z", "modified": "2026-01-27T05:12:56.574625Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.574625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa7b83e1-1f78-4f07-a44b-19a2a6ef4184", "created": "2026-01-27T05:12:56.575433Z", "modified": "2026-01-27T05:12:56.575433Z", "relationship_type": "indicates", "source_ref": "indicator--c088e6c6-0f6d-448a-8d42-066a5db2ac32", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba36164d-3a9e-442c-825f-d841e3b4a2ba", "created": "2026-01-27T05:12:56.57567Z", "modified": "2026-01-27T05:12:56.57567Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracking.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.57567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--190a12c9-7c49-409b-be9d-2dfa767a95e8", "created": "2026-01-27T05:12:56.576393Z", "modified": "2026-01-27T05:12:56.576393Z", "relationship_type": "indicates", "source_ref": "indicator--ba36164d-3a9e-442c-825f-d841e3b4a2ba", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a1857e-397d-4b9a-a9ea-804dfe626dfd", "created": "2026-01-27T05:12:56.576576Z", "modified": "2026-01-27T05:12:56.576576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='secondclone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.576576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e494ce75-772e-4c12-809b-4fc6d6bce4cf", "created": "2026-01-27T05:12:56.577267Z", "modified": "2026-01-27T05:12:56.577267Z", "relationship_type": "indicates", "source_ref": "indicator--48a1857e-397d-4b9a-a9ea-804dfe626dfd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f41bda-f88c-4fe7-adf9-a081758d844a", "created": "2026-01-27T05:12:56.577447Z", "modified": "2026-01-27T05:12:56.577447Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapps.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.577447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--433eac70-b8df-4355-9a42-b485053f6090", "created": "2026-01-27T05:12:56.578138Z", "modified": "2026-01-27T05:12:56.578138Z", "relationship_type": "indicates", "source_ref": "indicator--a2f41bda-f88c-4fe7-adf9-a081758d844a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc887b0-adb9-43a3-ac86-cdea059c19e6", "created": "2026-01-27T05:12:56.578317Z", "modified": "2026-01-27T05:12:56.578317Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spycell.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.578317Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2c686a4-15f9-4fde-a6b1-46d0eaf9a789", "created": "2026-01-27T05:12:56.579009Z", "modified": "2026-01-27T05:12:56.579009Z", "relationship_type": "indicates", "source_ref": "indicator--dcc887b0-adb9-43a3-ac86-cdea059c19e6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b9202d-a9e5-46af-891d-ab0285eb2812", "created": "2026-01-27T05:12:56.579189Z", "modified": "2026-01-27T05:12:56.579189Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.579189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e18c6a7-c1ce-4e41-9dab-140cb431517a", "created": "2026-01-27T05:12:56.579998Z", "modified": "2026-01-27T05:12:56.579998Z", "relationship_type": "indicates", "source_ref": "indicator--20b9202d-a9e5-46af-891d-ab0285eb2812", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116b5635-d1a9-4fbf-ade0-6788f24f75ae", "created": "2026-01-27T05:12:56.58018Z", "modified": "2026-01-27T05:12:56.58018Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thetruthspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.58018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--125eccd0-a35d-46d7-b8e9-9b601dcb1da6", "created": "2026-01-27T05:12:56.580879Z", "modified": "2026-01-27T05:12:56.580879Z", "relationship_type": "indicates", "source_ref": "indicator--116b5635-d1a9-4fbf-ade0-6788f24f75ae", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae83ca5a-0bc4-4c61-8a12-8a326e83ce24", "created": "2026-01-27T05:12:56.58106Z", "modified": "2026-01-27T05:12:56.58106Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thetruthspys.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.58106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--883c14ee-78f4-4b0e-89f5-8596ce481fed", "created": "2026-01-27T05:12:56.581729Z", "modified": "2026-01-27T05:12:56.581729Z", "relationship_type": "indicates", "source_ref": "indicator--ae83ca5a-0bc4-4c61-8a12-8a326e83ce24", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d009fe40-e3f2-40ba-b6bf-760b50e26273", "created": "2026-01-27T05:12:56.581925Z", "modified": "2026-01-27T05:12:56.581925Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us.xnspy.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.581925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9540ccce-efe4-4183-b5c4-75d766fe6685", "created": "2026-01-27T05:12:56.582698Z", "modified": "2026-01-27T05:12:56.582698Z", "relationship_type": "indicates", "source_ref": "indicator--d009fe40-e3f2-40ba-b6bf-760b50e26273", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbde3cc1-faaa-4b26-a987-6e0bec2a1333", "created": "2026-01-27T05:12:56.582898Z", "modified": "2026-01-27T05:12:56.582898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='weysys.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.582898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6289e37d-12c7-411c-bee4-343ce10b6841", "created": "2026-01-27T05:12:56.583657Z", "modified": "2026-01-27T05:12:56.583657Z", "relationship_type": "indicates", "source_ref": "indicator--fbde3cc1-faaa-4b26-a987-6e0bec2a1333", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f373fcd3-9bc7-4cc9-914d-e59023c98f32", "created": "2026-01-27T05:12:56.583867Z", "modified": "2026-01-27T05:12:56.583867Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.583867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f628546-2144-4de8-bf47-2aff5c8168dd", "created": "2026-01-27T05:12:56.584539Z", "modified": "2026-01-27T05:12:56.584539Z", "relationship_type": "indicates", "source_ref": "indicator--f373fcd3-9bc7-4cc9-914d-e59023c98f32", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58d7cdc-a6b5-4b62-9f82-18ffe2968ca4", "created": "2026-01-27T05:12:56.584718Z", "modified": "2026-01-27T05:12:56.584718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phonespying.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.584718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d77511b8-b873-4f72-8aae-7712c6e4bd8a", "created": "2026-01-27T05:12:56.585415Z", "modified": "2026-01-27T05:12:56.585415Z", "relationship_type": "indicates", "source_ref": "indicator--f58d7cdc-a6b5-4b62-9f82-18ffe2968ca4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7feaea53-716a-408d-9ad9-ef6de1e11518", "created": "2026-01-27T05:12:56.585593Z", "modified": "2026-01-27T05:12:56.585593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xpspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.585593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55a4b41d-5f96-4464-9aaa-87abb5c7b21f", "created": "2026-01-27T05:12:56.586359Z", "modified": "2026-01-27T05:12:56.586359Z", "relationship_type": "indicates", "source_ref": "indicator--7feaea53-716a-408d-9ad9-ef6de1e11518", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fe36e8-ceb3-433e-84fc-858c179be903", "created": "2026-01-27T05:12:56.586544Z", "modified": "2026-01-27T05:12:56.586544Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnspy.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.586544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47a593e5-68d5-4906-8de9-017d75ff35da", "created": "2026-01-27T05:12:56.587224Z", "modified": "2026-01-27T05:12:56.587224Z", "relationship_type": "indicates", "source_ref": "indicator--82fe36e8-ceb3-433e-84fc-858c179be903", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc407729-c715-4e08-b158-421d906d601e", "created": "2026-01-27T05:12:56.587403Z", "modified": "2026-01-27T05:12:56.587403Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='inospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.587403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4277334d-ea9a-446e-95df-e0a8ab815f8c", "created": "2026-01-27T05:12:56.588194Z", "modified": "2026-01-27T05:12:56.588194Z", "relationship_type": "indicates", "source_ref": "indicator--cc407729-c715-4e08-b158-421d906d601e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1043fc8-9097-4f50-a700-461d838b8dcc", "created": "2026-01-27T05:12:56.588376Z", "modified": "2026-01-27T05:12:56.588376Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.fonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.588376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85c11cf6-2086-4714-97eb-313b0cd995a5", "created": "2026-01-27T05:12:56.58907Z", "modified": "2026-01-27T05:12:56.58907Z", "relationship_type": "indicates", "source_ref": "indicator--f1043fc8-9097-4f50-a700-461d838b8dcc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f264f2-fbd5-4924-94e4-e1bcb5a5927a", "created": "2026-01-27T05:12:56.589252Z", "modified": "2026-01-27T05:12:56.589252Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.mobiletracking.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.589252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5a6d988-7a6c-45ce-9dc7-12600d4e9403", "created": "2026-01-27T05:12:56.589981Z", "modified": "2026-01-27T05:12:56.589981Z", "relationship_type": "indicates", "source_ref": "indicator--e8f264f2-fbd5-4924-94e4-e1bcb5a5927a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eea4595-c85e-453c-8708-1e9fa9c176c6", "created": "2026-01-27T05:12:56.590163Z", "modified": "2026-01-27T05:12:56.590163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.xpspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.590163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e9caf85-cca4-441d-8dac-0fc6af744767", "created": "2026-01-27T05:12:56.590839Z", "modified": "2026-01-27T05:12:56.590839Z", "relationship_type": "indicates", "source_ref": "indicator--5eea4595-c85e-453c-8708-1e9fa9c176c6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6566a903-eae4-4707-9be6-d4e583b01780", "created": "2026-01-27T05:12:56.591024Z", "modified": "2026-01-27T05:12:56.591024Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f785433251bf3b2c302904f0195b20cceb04ce35ba5cb0d1b2a9b1817a2f035']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.591024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c70302d1-a37f-4bad-a06c-47cce54b05c9", "created": "2026-01-27T05:12:56.594518Z", "modified": "2026-01-27T05:12:56.594518Z", "relationship_type": "indicates", "source_ref": "indicator--6566a903-eae4-4707-9be6-d4e583b01780", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e09eec1-43f8-47ee-b0bb-9a3a5fd892d9", "created": "2026-01-27T05:12:56.594723Z", "modified": "2026-01-27T05:12:56.594723Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b991813a528fec153c1e3dec85491f415b6b6e75f83510f5ce09985bd1ed5d66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.594723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce454d3f-0209-45ab-9b1b-abb3139bf44d", "created": "2026-01-27T05:12:56.595676Z", "modified": "2026-01-27T05:12:56.595676Z", "relationship_type": "indicates", "source_ref": "indicator--0e09eec1-43f8-47ee-b0bb-9a3a5fd892d9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ebc317-446e-4070-972b-bc70f3cd0ca7", "created": "2026-01-27T05:12:56.595886Z", "modified": "2026-01-27T05:12:56.595886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd2ce4e3bf429f1b4ee33b8f5610baf628b854eb61d3965e1420c6d47c3c1c77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.595886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc3599c3-2cfe-4f2d-b305-c1bf972e80f2", "created": "2026-01-27T05:12:56.596823Z", "modified": "2026-01-27T05:12:56.596823Z", "relationship_type": "indicates", "source_ref": "indicator--96ebc317-446e-4070-972b-bc70f3cd0ca7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701ccea9-9133-4145-8b78-915a2fa96469", "created": "2026-01-27T05:12:56.597012Z", "modified": "2026-01-27T05:12:56.597012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='404cab9bdec390531240bf8b661c1d71e7e6d252b6f9343cff124197152787db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.597012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d967b06d-411b-4a07-972f-72385e7b2910", "created": "2026-01-27T05:12:56.597986Z", "modified": "2026-01-27T05:12:56.597986Z", "relationship_type": "indicates", "source_ref": "indicator--701ccea9-9133-4145-8b78-915a2fa96469", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84930d8-7543-45be-860f-68cede881602", "created": "2026-01-27T05:12:56.598176Z", "modified": "2026-01-27T05:12:56.598176Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='524df866d77cc37efd3aeddc925604fbba30166d8d94a3f812b781c8b33487cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.598176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f6089c6-2f42-4e5b-a689-9b25c8c350ca", "created": "2026-01-27T05:12:56.599122Z", "modified": "2026-01-27T05:12:56.599122Z", "relationship_type": "indicates", "source_ref": "indicator--e84930d8-7543-45be-860f-68cede881602", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96223e84-b861-44c1-8ff9-64a6a90b8d05", "created": "2026-01-27T05:12:56.599313Z", "modified": "2026-01-27T05:12:56.599313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c323fa228e8f8be02f2b9456054858a6dd7c75b85fd0bffd75ff69903af62abc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.599313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e365b8b-514d-4080-b405-0168bf14af06", "created": "2026-01-27T05:12:56.600164Z", "modified": "2026-01-27T05:12:56.600164Z", "relationship_type": "indicates", "source_ref": "indicator--96223e84-b861-44c1-8ff9-64a6a90b8d05", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c6cf8f-696d-4291-96ad-73722b746ea0", "created": "2026-01-27T05:12:56.600348Z", "modified": "2026-01-27T05:12:56.600348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5262b5a3fad36ff75049819c150a69043aae5e1dbcf25d065e70947c6e04c0b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.600348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59cb8cb8-9af0-453f-93b0-e04574e2eb1d", "created": "2026-01-27T05:12:56.601203Z", "modified": "2026-01-27T05:12:56.601203Z", "relationship_type": "indicates", "source_ref": "indicator--77c6cf8f-696d-4291-96ad-73722b746ea0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b63a22-b433-4b59-aeaf-cb9a44959d7d", "created": "2026-01-27T05:12:56.601386Z", "modified": "2026-01-27T05:12:56.601386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f51d827ff1625b487a12d7b8d93710af61da16f3edeac003d3ccb106e6567553']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.601386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f78b9af-a7ca-4949-a554-14bad770bc7d", "created": "2026-01-27T05:12:56.602231Z", "modified": "2026-01-27T05:12:56.602231Z", "relationship_type": "indicates", "source_ref": "indicator--01b63a22-b433-4b59-aeaf-cb9a44959d7d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7823336c-8816-411f-b472-cc17f1c7219a", "created": "2026-01-27T05:12:56.60242Z", "modified": "2026-01-27T05:12:56.60242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55fd2cf034c6a28885eab9d0eb6299a0597031f2427352f4101c542d22e9896f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.60242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5eea7e1d-6563-49f8-b5d4-149a1dc84342", "created": "2026-01-27T05:12:56.603262Z", "modified": "2026-01-27T05:12:56.603262Z", "relationship_type": "indicates", "source_ref": "indicator--7823336c-8816-411f-b472-cc17f1c7219a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea8d7f1-dc2f-433f-99bd-a6c851066b6f", "created": "2026-01-27T05:12:56.603444Z", "modified": "2026-01-27T05:12:56.603444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d5d88eb08afdb3f16d5b45ea6eef71ceb2bc7ccee2ca0cf419256d3f01ee3f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.603444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcd27135-4e4f-4472-baad-a2486c175fe5", "created": "2026-01-27T05:12:56.604284Z", "modified": "2026-01-27T05:12:56.604284Z", "relationship_type": "indicates", "source_ref": "indicator--eea8d7f1-dc2f-433f-99bd-a6c851066b6f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6afecd0-f618-4cdf-a2b8-ecf3a67a7fd1", "created": "2026-01-27T05:12:56.604465Z", "modified": "2026-01-27T05:12:56.604465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09048b754ac13cd52b168ef8646762a351cd85e363f32935c5ab00dc27665819']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.604465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de2d6216-7bfc-45cb-aae6-3e38bc763cb1", "created": "2026-01-27T05:12:56.605418Z", "modified": "2026-01-27T05:12:56.605418Z", "relationship_type": "indicates", "source_ref": "indicator--a6afecd0-f618-4cdf-a2b8-ecf3a67a7fd1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abf03e3-ec90-4831-8e8b-f443bd8667cb", "created": "2026-01-27T05:12:56.605614Z", "modified": "2026-01-27T05:12:56.605614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e13c1748f6aaa7c5e49692926bbd905a961a14f76c05c00cb25a838c2725f2d9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.605614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3532737a-9339-462d-9a9c-fc3d6a260d9b", "created": "2026-01-27T05:12:56.606466Z", "modified": "2026-01-27T05:12:56.606466Z", "relationship_type": "indicates", "source_ref": "indicator--4abf03e3-ec90-4831-8e8b-f443bd8667cb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a763c88-24ff-48cd-ab20-66e1bdf33339", "created": "2026-01-27T05:12:56.606648Z", "modified": "2026-01-27T05:12:56.606648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dac46c02c272a5f62a2602394f1feb92d9473dd2f19c8cf59f84f2d203cee60c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.606648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2613ff1f-272d-4a2a-af69-c368e0c188b3", "created": "2026-01-27T05:12:56.607616Z", "modified": "2026-01-27T05:12:56.607616Z", "relationship_type": "indicates", "source_ref": "indicator--7a763c88-24ff-48cd-ab20-66e1bdf33339", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ce69f1-ff66-4df9-ae8d-df958ccd7f7a", "created": "2026-01-27T05:12:56.607827Z", "modified": "2026-01-27T05:12:56.607827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cba8bbe440ea785e03973f4e77238a734b70b103f81147651d4945f10943262']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.607827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f74307bd-db1e-4e50-b267-f914bd36c657", "created": "2026-01-27T05:12:56.608764Z", "modified": "2026-01-27T05:12:56.608764Z", "relationship_type": "indicates", "source_ref": "indicator--11ce69f1-ff66-4df9-ae8d-df958ccd7f7a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa3d94b-66bd-4afd-b084-4b8ff74b6a35", "created": "2026-01-27T05:12:56.608952Z", "modified": "2026-01-27T05:12:56.608952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79627ef411c65960e49536333bdb8127bfb9bacf82dbe491d1466f5ff7164b4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.608952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54c09e36-5b8a-40d1-ba12-3feee13ba04e", "created": "2026-01-27T05:12:56.609894Z", "modified": "2026-01-27T05:12:56.609894Z", "relationship_type": "indicates", "source_ref": "indicator--5fa3d94b-66bd-4afd-b084-4b8ff74b6a35", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce68f86-05da-42a3-8d70-4f4ebb4726e1", "created": "2026-01-27T05:12:56.610082Z", "modified": "2026-01-27T05:12:56.610082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b8a7fcd8c68111efa1df0cf350fba4e0a21f4cc2fbde52e30e6b12951b8f81f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.610082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a24442b-e91e-4bd5-ab11-224afb2a353e", "created": "2026-01-27T05:12:56.611025Z", "modified": "2026-01-27T05:12:56.611025Z", "relationship_type": "indicates", "source_ref": "indicator--fce68f86-05da-42a3-8d70-4f4ebb4726e1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aeaf2e3-099a-4b09-9032-00346151afbd", "created": "2026-01-27T05:12:56.611213Z", "modified": "2026-01-27T05:12:56.611213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e81de3f104586f1ca13cb54b88187bff655fb502a27f91a2019514bcb7d1f0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.611213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e6f566-e993-43f4-b4d7-3055d8d7a488", "created": "2026-01-27T05:12:56.612159Z", "modified": "2026-01-27T05:12:56.612159Z", "relationship_type": "indicates", "source_ref": "indicator--0aeaf2e3-099a-4b09-9032-00346151afbd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8698ef2-a7e7-49e5-8d3b-e6c881a5b8b6", "created": "2026-01-27T05:12:56.612354Z", "modified": "2026-01-27T05:12:56.612354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6d19159d1d34cd01a248d5f74f11d30641b7e5ccf6aae49e88be0695276b0ba8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.612354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34cd4212-2b80-4d1b-9938-b92a2f3c3200", "created": "2026-01-27T05:12:56.613212Z", "modified": "2026-01-27T05:12:56.613212Z", "relationship_type": "indicates", "source_ref": "indicator--e8698ef2-a7e7-49e5-8d3b-e6c881a5b8b6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb360f9-3387-4930-8e20-22c86a5a4838", "created": "2026-01-27T05:12:56.613395Z", "modified": "2026-01-27T05:12:56.613395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85177661ae43545b73a2a0050eedf095e17e786dcbd7cbbb1905412ed8edbbdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.613395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--954043dd-cfb9-4726-91d8-944935ee47eb", "created": "2026-01-27T05:12:56.614327Z", "modified": "2026-01-27T05:12:56.614327Z", "relationship_type": "indicates", "source_ref": "indicator--ffb360f9-3387-4930-8e20-22c86a5a4838", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5ca53d-23e0-45cd-a423-e3ba3757ea5e", "created": "2026-01-27T05:12:56.614512Z", "modified": "2026-01-27T05:12:56.614512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d9a784f63c5b9e05597ca9b9804185f39cf6abb6506935f364d7ccbf63068d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.614512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24e2c374-9d11-43e4-b444-70826b4b204b", "created": "2026-01-27T05:12:56.615441Z", "modified": "2026-01-27T05:12:56.615441Z", "relationship_type": "indicates", "source_ref": "indicator--5d5ca53d-23e0-45cd-a423-e3ba3757ea5e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f76e4eb-aa55-4224-8db4-1ee5f9d8f8b5", "created": "2026-01-27T05:12:56.615633Z", "modified": "2026-01-27T05:12:56.615633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='243e394bac6c022961ba371096e35a52f2403fcdc20af6c7e4d7d7f88343f0b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.615633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e18c5f49-04ea-48b3-a3d7-0f3dca8f81b5", "created": "2026-01-27T05:12:56.616924Z", "modified": "2026-01-27T05:12:56.616924Z", "relationship_type": "indicates", "source_ref": "indicator--8f76e4eb-aa55-4224-8db4-1ee5f9d8f8b5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ded1d8-fa7d-4109-a6e0-e65ad69c3199", "created": "2026-01-27T05:12:56.617116Z", "modified": "2026-01-27T05:12:56.617116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a1cd21b198bc89046410983707c1fdc1474a45977f807a04fc4be8711141c02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.617116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecd7b205-b9d0-48c1-ab52-f84cdde37f6e", "created": "2026-01-27T05:12:56.617968Z", "modified": "2026-01-27T05:12:56.617968Z", "relationship_type": "indicates", "source_ref": "indicator--62ded1d8-fa7d-4109-a6e0-e65ad69c3199", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f37966c-0d14-4517-bace-af2b82562775", "created": "2026-01-27T05:12:56.618156Z", "modified": "2026-01-27T05:12:56.618156Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb3a9cc079da56f71bcc8f1a9b15bc37b2c8cd5fcbdd7396994105f798f5fe55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.618156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b58a23d3-67e1-4fbb-8563-7bf4d8688c6c", "created": "2026-01-27T05:12:56.619003Z", "modified": "2026-01-27T05:12:56.619003Z", "relationship_type": "indicates", "source_ref": "indicator--4f37966c-0d14-4517-bace-af2b82562775", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308452f3-2e0d-47a1-9e48-9759e0f6d3c6", "created": "2026-01-27T05:12:56.619187Z", "modified": "2026-01-27T05:12:56.619187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20e41685aede18ac396138bd7a3fe44c77662ac64f54b36f0f5c6a218f714900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.619187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b54e0fe-a045-41a0-ad56-c8e188959efb", "created": "2026-01-27T05:12:56.620036Z", "modified": "2026-01-27T05:12:56.620036Z", "relationship_type": "indicates", "source_ref": "indicator--308452f3-2e0d-47a1-9e48-9759e0f6d3c6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e376e5-83f8-476a-bf2b-2d31886ccef6", "created": "2026-01-27T05:12:56.620221Z", "modified": "2026-01-27T05:12:56.620221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d6daac87a78fb0f4ef2a3b4c6d73a09b4ce62944527e5eb8a4d12bc9b7f5d11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.620221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b02710e9-b54b-4a25-a320-24c8ea238be9", "created": "2026-01-27T05:12:56.621072Z", "modified": "2026-01-27T05:12:56.621072Z", "relationship_type": "indicates", "source_ref": "indicator--b0e376e5-83f8-476a-bf2b-2d31886ccef6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fdb1fa-3568-41fe-b9cf-09f28b2b0d75", "created": "2026-01-27T05:12:56.621255Z", "modified": "2026-01-27T05:12:56.621255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45ec7020be983fbe3eafd5646af15b60e67fb4fc85c35925d5461bcaf0dd3487']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.621255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f13932f-cc5f-4e7b-9f02-191211e51456", "created": "2026-01-27T05:12:56.622101Z", "modified": "2026-01-27T05:12:56.622101Z", "relationship_type": "indicates", "source_ref": "indicator--96fdb1fa-3568-41fe-b9cf-09f28b2b0d75", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24f0f82-f627-4013-a3d8-f3d0d500dd15", "created": "2026-01-27T05:12:56.622287Z", "modified": "2026-01-27T05:12:56.622287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2abe977cf1d77ebecb4d7525c0365dae9a937fa40a31dbde4962411406eb2a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.622287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8be8ad6-aac8-41bc-bc0b-720519226152", "created": "2026-01-27T05:12:56.623138Z", "modified": "2026-01-27T05:12:56.623138Z", "relationship_type": "indicates", "source_ref": "indicator--f24f0f82-f627-4013-a3d8-f3d0d500dd15", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2521a2d9-2d65-4d6f-8d08-d5e85a7814a4", "created": "2026-01-27T05:12:56.62332Z", "modified": "2026-01-27T05:12:56.62332Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='174ba6a05ec0c3d59e94e1b88b43077e1340a4b92514162c2f9ab128c2ab963f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.62332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c5c50a7-d822-40ba-83bd-0d76e8bc57de", "created": "2026-01-27T05:12:56.624165Z", "modified": "2026-01-27T05:12:56.624165Z", "relationship_type": "indicates", "source_ref": "indicator--2521a2d9-2d65-4d6f-8d08-d5e85a7814a4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539949d9-d365-43b2-9403-8c5068e7b2cd", "created": "2026-01-27T05:12:56.624347Z", "modified": "2026-01-27T05:12:56.624347Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2ee84d4064ebbe9b453f1895cafefe9f9cd2b06985851888fcad796ad7b5328']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.624347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f611c53c-9fb4-4242-ae8d-d98dcde74d6c", "created": "2026-01-27T05:12:56.625184Z", "modified": "2026-01-27T05:12:56.625184Z", "relationship_type": "indicates", "source_ref": "indicator--539949d9-d365-43b2-9403-8c5068e7b2cd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e31d8d7-bfac-4e4f-90aa-179164f69c26", "created": "2026-01-27T05:12:56.625365Z", "modified": "2026-01-27T05:12:56.625365Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6e2e75685cfaea903f94ec0d2cfa698a545d13339689282abda6f122aa4bc6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.625365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0757b004-e084-4a36-ada2-09ff15427253", "created": "2026-01-27T05:12:56.626331Z", "modified": "2026-01-27T05:12:56.626331Z", "relationship_type": "indicates", "source_ref": "indicator--0e31d8d7-bfac-4e4f-90aa-179164f69c26", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46c43d6-9e11-4a07-a12b-3563e65bed48", "created": "2026-01-27T05:12:56.626517Z", "modified": "2026-01-27T05:12:56.626517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bc92a9900d469302b974dc54c8e4a52b4e46cccfe669a7bf026f65544f6b342']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.626517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--321a5f04-f0b9-49ea-baf1-a23262a5341e", "created": "2026-01-27T05:12:56.62736Z", "modified": "2026-01-27T05:12:56.62736Z", "relationship_type": "indicates", "source_ref": "indicator--a46c43d6-9e11-4a07-a12b-3563e65bed48", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611d2565-9b8d-46b0-9173-ab9af3a8f5d2", "created": "2026-01-27T05:12:56.627615Z", "modified": "2026-01-27T05:12:56.627615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71de91b97fbb475d0a22e44bd2ccd3833f26c5690e1ca5c5cd41c512ba237f01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.627615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa4ffa43-3914-4985-9310-dfec09c068aa", "created": "2026-01-27T05:12:56.62847Z", "modified": "2026-01-27T05:12:56.62847Z", "relationship_type": "indicates", "source_ref": "indicator--611d2565-9b8d-46b0-9173-ab9af3a8f5d2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--430c88e7-5fba-4a44-97ce-82b780304381", "created": "2026-01-27T05:12:56.628653Z", "modified": "2026-01-27T05:12:56.628653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d006a147372fe86a8c9ff8d2d6ef4e714be3db99610292403cbc1b5720c1bfc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.628653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ab3a493-3c50-43c3-8e85-79ce2db460ff", "created": "2026-01-27T05:12:56.629493Z", "modified": "2026-01-27T05:12:56.629493Z", "relationship_type": "indicates", "source_ref": "indicator--430c88e7-5fba-4a44-97ce-82b780304381", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775229b9-e60d-4b6b-8d97-796b605619de", "created": "2026-01-27T05:12:56.629672Z", "modified": "2026-01-27T05:12:56.629672Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3151b5918698e1c24f13b8a15a2355e398718049be0e26e2d5f7ba3cfff2109e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.629672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90b9ea3d-a595-430f-a429-d69d8ccfa913", "created": "2026-01-27T05:12:56.630528Z", "modified": "2026-01-27T05:12:56.630528Z", "relationship_type": "indicates", "source_ref": "indicator--775229b9-e60d-4b6b-8d97-796b605619de", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f4b9df-fecc-484f-82be-b12b615856af", "created": "2026-01-27T05:12:56.630708Z", "modified": "2026-01-27T05:12:56.630708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='942b57b04c8a2f0385162aaafc7890eaeeb6a8667e03820707cf1e0c1633989d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.630708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5108cd3-2353-46bb-ae1b-fcf9b631c09f", "created": "2026-01-27T05:12:56.631555Z", "modified": "2026-01-27T05:12:56.631555Z", "relationship_type": "indicates", "source_ref": "indicator--52f4b9df-fecc-484f-82be-b12b615856af", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85597f5-a2a7-4d9d-83a5-ff8314e21b56", "created": "2026-01-27T05:12:56.631734Z", "modified": "2026-01-27T05:12:56.631734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='450af8d01fcdafe7f6ce3dba227f96fb3e011fb13e66c3594db636e1a4a53562']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.631734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b4730db-7cdc-44e4-a5f8-51ee1332a316", "created": "2026-01-27T05:12:56.63258Z", "modified": "2026-01-27T05:12:56.63258Z", "relationship_type": "indicates", "source_ref": "indicator--c85597f5-a2a7-4d9d-83a5-ff8314e21b56", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca92577-030d-4fc5-987f-e1899b9197a9", "created": "2026-01-27T05:12:56.632772Z", "modified": "2026-01-27T05:12:56.632772Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='25eeebb1afa4e2e69d38c82cd7bd7e858f96660c5ac4f7de180ff3195b78b35d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.632772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b47a4f50-ab26-4ec0-b7f5-3be386ae7d19", "created": "2026-01-27T05:12:56.633589Z", "modified": "2026-01-27T05:12:56.633589Z", "relationship_type": "indicates", "source_ref": "indicator--aca92577-030d-4fc5-987f-e1899b9197a9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc39d8b-fc6f-4ef1-84f9-a08edd8c277e", "created": "2026-01-27T05:12:56.633779Z", "modified": "2026-01-27T05:12:56.633779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb66c9e2b06cc18ddb254ffced918da2c7e7741ecfef6bc9a13c9484fcddf67e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.633779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80e30efe-060a-4866-916a-7531399cbd7d", "created": "2026-01-27T05:12:56.634603Z", "modified": "2026-01-27T05:12:56.634603Z", "relationship_type": "indicates", "source_ref": "indicator--6dc39d8b-fc6f-4ef1-84f9-a08edd8c277e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18365f18-dcb8-414b-8506-a8630859782b", "created": "2026-01-27T05:12:56.6348Z", "modified": "2026-01-27T05:12:56.6348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be0a23b7a7bc0fcc326d5f649db64bab09efdc150704586235af66dad9e6f0f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.6348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb0e31a7-7cd0-48dd-b318-0af123eae3e4", "created": "2026-01-27T05:12:56.635762Z", "modified": "2026-01-27T05:12:56.635762Z", "relationship_type": "indicates", "source_ref": "indicator--18365f18-dcb8-414b-8506-a8630859782b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd10767-be2b-4069-8374-78b8e64561be", "created": "2026-01-27T05:12:56.635948Z", "modified": "2026-01-27T05:12:56.635948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bca22874a70fe2ee9bc5d4ad9a4dc9c4d27bd9d876de2741c2fd877406b1f6bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.635948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd2f7a33-d5a3-4af4-8678-96fd9be48cc4", "created": "2026-01-27T05:12:56.636792Z", "modified": "2026-01-27T05:12:56.636792Z", "relationship_type": "indicates", "source_ref": "indicator--ebd10767-be2b-4069-8374-78b8e64561be", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b5e5e8-64a2-4d36-9b1a-935ea896378d", "created": "2026-01-27T05:12:56.636973Z", "modified": "2026-01-27T05:12:56.636973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c16ad7195bd4374830b0217f6a7ee1162cbd56608ea91d445d40e15493c1167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.636973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be9c866b-5b71-4cd6-b540-fdbf36840882", "created": "2026-01-27T05:12:56.637836Z", "modified": "2026-01-27T05:12:56.637836Z", "relationship_type": "indicates", "source_ref": "indicator--78b5e5e8-64a2-4d36-9b1a-935ea896378d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef40808d-525e-466b-8d3b-f4c010f0e040", "created": "2026-01-27T05:12:56.63802Z", "modified": "2026-01-27T05:12:56.63802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d04da91ff25c46d7ab4d0da0c8ffe8d44345d91050e9e712527efcd652ed5568']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.63802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6e22b22-0819-44be-b2c2-fcdbde67a99b", "created": "2026-01-27T05:12:56.638862Z", "modified": "2026-01-27T05:12:56.638862Z", "relationship_type": "indicates", "source_ref": "indicator--ef40808d-525e-466b-8d3b-f4c010f0e040", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--936754ea-1671-484e-910a-688f56fc9e57", "created": "2026-01-27T05:12:56.639043Z", "modified": "2026-01-27T05:12:56.639043Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f897da07b17368e3c1732ee5b2e27769072e328ad72b7de7db77ec2bd04fa711']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.639043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4916811c-b207-46da-8259-3e92c8aa16ea", "created": "2026-01-27T05:12:56.639879Z", "modified": "2026-01-27T05:12:56.639879Z", "relationship_type": "indicates", "source_ref": "indicator--936754ea-1671-484e-910a-688f56fc9e57", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4131df34-4702-403d-b72d-9ae9c9da5d1c", "created": "2026-01-27T05:12:56.640059Z", "modified": "2026-01-27T05:12:56.640059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29297bcb4245b25b6816a39e4dd28c7bf56377ea9fa4f189f285b774c82f45d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.640059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ff54f90-affd-4c2b-b827-9b769636a801", "created": "2026-01-27T05:12:56.640909Z", "modified": "2026-01-27T05:12:56.640909Z", "relationship_type": "indicates", "source_ref": "indicator--4131df34-4702-403d-b72d-9ae9c9da5d1c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc424557-45ef-4e4d-ac9e-551353c60f07", "created": "2026-01-27T05:12:56.641089Z", "modified": "2026-01-27T05:12:56.641089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79f3c38ba7a738fddbfc553c7161abf7a13b880cc4eb32e88320477a20fe7d70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.641089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cf43718-dfff-49e6-867d-69b186835d71", "created": "2026-01-27T05:12:56.641928Z", "modified": "2026-01-27T05:12:56.641928Z", "relationship_type": "indicates", "source_ref": "indicator--bc424557-45ef-4e4d-ac9e-551353c60f07", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6a4cd7-4d9c-4f78-b85c-1a9ca498903c", "created": "2026-01-27T05:12:56.642105Z", "modified": "2026-01-27T05:12:56.642105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='384aa1291d7d08fe264b6abfa38bd736e53211ef45ac080edb2884e964e76505']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.642105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62e45b4d-99a2-40cd-9704-805aa32bad47", "created": "2026-01-27T05:12:56.642944Z", "modified": "2026-01-27T05:12:56.642944Z", "relationship_type": "indicates", "source_ref": "indicator--be6a4cd7-4d9c-4f78-b85c-1a9ca498903c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce4aae3-f11a-4707-84b7-ee0d365f3f0a", "created": "2026-01-27T05:12:56.643122Z", "modified": "2026-01-27T05:12:56.643122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fdcd969c4fcb6fe3607b557a7294882cb61da3464cf980165da75c853a8168e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.643122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a62028d-fc9e-4011-ae55-2b83e0ab0571", "created": "2026-01-27T05:12:56.643953Z", "modified": "2026-01-27T05:12:56.643953Z", "relationship_type": "indicates", "source_ref": "indicator--fce4aae3-f11a-4707-84b7-ee0d365f3f0a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd8dff3-3ef7-49ba-aa91-d8175b096c82", "created": "2026-01-27T05:12:56.644131Z", "modified": "2026-01-27T05:12:56.644131Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0fd27560aa05dc8372a29fe86fe80254b6e0b9eeb5a78092e47e74fb7d324ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.644131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3900578e-3bdf-49ab-b767-8ab58a238647", "created": "2026-01-27T05:12:56.645089Z", "modified": "2026-01-27T05:12:56.645089Z", "relationship_type": "indicates", "source_ref": "indicator--1cd8dff3-3ef7-49ba-aa91-d8175b096c82", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d117565-7263-471d-93dc-0c0c2feea0a6", "created": "2026-01-27T05:12:56.645271Z", "modified": "2026-01-27T05:12:56.645271Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f591c97987f482c199c4331d83b4e9793f972794b9f15d7a34d482ddbe1172a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.645271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc167505-3d68-40f2-bfaa-61961bc498ce", "created": "2026-01-27T05:12:56.64611Z", "modified": "2026-01-27T05:12:56.64611Z", "relationship_type": "indicates", "source_ref": "indicator--4d117565-7263-471d-93dc-0c0c2feea0a6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c02fa6-eecf-49ba-af01-477d044b930a", "created": "2026-01-27T05:12:56.64629Z", "modified": "2026-01-27T05:12:56.64629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9cdadad8acadc7ab03969192021345dbd1c61cfe4797d31f0ae67d391bdb172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.64629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8de670ad-9b8b-4c2d-abf4-0d9580f14dd1", "created": "2026-01-27T05:12:56.647129Z", "modified": "2026-01-27T05:12:56.647129Z", "relationship_type": "indicates", "source_ref": "indicator--b1c02fa6-eecf-49ba-af01-477d044b930a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281819b5-4301-4107-98e2-a063a95fe34e", "created": "2026-01-27T05:12:56.64731Z", "modified": "2026-01-27T05:12:56.64731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e27709930ec345c37ef1895787fbfeb1c86e68a6467a7e6c88c5ec730db8fbd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.64731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2dc8105-073b-4836-87cc-48f87752a6dc", "created": "2026-01-27T05:12:56.648147Z", "modified": "2026-01-27T05:12:56.648147Z", "relationship_type": "indicates", "source_ref": "indicator--281819b5-4301-4107-98e2-a063a95fe34e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6098e835-c090-49aa-85b1-fc7e998aeee1", "created": "2026-01-27T05:12:56.648327Z", "modified": "2026-01-27T05:12:56.648327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e771860ba23ee8aa9b9991e70a6cdc01e3f58d0c1695c70f3ad9aecf2aaf8db1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.648327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b172300-5651-4739-bfc3-cce5fd7df4e5", "created": "2026-01-27T05:12:56.649177Z", "modified": "2026-01-27T05:12:56.649177Z", "relationship_type": "indicates", "source_ref": "indicator--6098e835-c090-49aa-85b1-fc7e998aeee1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d81fe4-66de-48c1-8711-ec9f5d8d02ba", "created": "2026-01-27T05:12:56.649359Z", "modified": "2026-01-27T05:12:56.649359Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60d3e0dce72494e7ea645abcbce6b689d7e7f159e119380ccb97c8765d3fe420']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.649359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a54b1d3-38f2-4f56-904f-0571726ea2e3", "created": "2026-01-27T05:12:56.6502Z", "modified": "2026-01-27T05:12:56.6502Z", "relationship_type": "indicates", "source_ref": "indicator--41d81fe4-66de-48c1-8711-ec9f5d8d02ba", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d5215a-cc78-4e11-9946-62eda021010a", "created": "2026-01-27T05:12:56.650378Z", "modified": "2026-01-27T05:12:56.650378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd86f3dc604b8e2f3f97884c0630688e1f0848c301ebd8e20cabea25ff6083c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.650378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf134f92-32b0-47b0-906a-61daa0c8fd51", "created": "2026-01-27T05:12:56.651216Z", "modified": "2026-01-27T05:12:56.651216Z", "relationship_type": "indicates", "source_ref": "indicator--d7d5215a-cc78-4e11-9946-62eda021010a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1871ae23-b2b4-4d4d-a3e6-cd14e48b24c2", "created": "2026-01-27T05:12:56.651396Z", "modified": "2026-01-27T05:12:56.651396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e31a39111df67c06b224f42fff53ec12461209e80881c01e9450933f6cdd28a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.651396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5411056-2ee3-472b-bd4d-b2b9774fdc63", "created": "2026-01-27T05:12:56.652234Z", "modified": "2026-01-27T05:12:56.652234Z", "relationship_type": "indicates", "source_ref": "indicator--1871ae23-b2b4-4d4d-a3e6-cd14e48b24c2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a7b279-16ed-42d9-a520-9c16dfe40b24", "created": "2026-01-27T05:12:56.65242Z", "modified": "2026-01-27T05:12:56.65242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='daa67f94bc7b50021bdda068469f18616db2b7ca331fc7cb7c452a4a2e95464c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.65242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dbc107c-8643-429d-bafb-4186dd3d4d33", "created": "2026-01-27T05:12:56.653398Z", "modified": "2026-01-27T05:12:56.653398Z", "relationship_type": "indicates", "source_ref": "indicator--49a7b279-16ed-42d9-a520-9c16dfe40b24", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ed24f9-9131-47ee-b2df-e228ef5fc1f2", "created": "2026-01-27T05:12:56.65358Z", "modified": "2026-01-27T05:12:56.65358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='972b291a37d8ff9dfc2459169a829112b5fface52c0ee1d445baab38d2d81053']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.65358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c1b70a0-81fb-46ad-9563-7858634b95c9", "created": "2026-01-27T05:12:56.65442Z", "modified": "2026-01-27T05:12:56.65442Z", "relationship_type": "indicates", "source_ref": "indicator--06ed24f9-9131-47ee-b2df-e228ef5fc1f2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e792c2c-8d95-4b85-be82-6bfc6e36fb32", "created": "2026-01-27T05:12:56.654601Z", "modified": "2026-01-27T05:12:56.654601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8ac9a8b8a656baaaff1098fed39053044ddb16e6ad8c728c4b73b228544eda5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.654601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70d4e5c0-b17c-4f06-8b3d-be079c64c74b", "created": "2026-01-27T05:12:56.655454Z", "modified": "2026-01-27T05:12:56.655454Z", "relationship_type": "indicates", "source_ref": "indicator--6e792c2c-8d95-4b85-be82-6bfc6e36fb32", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59636bfa-982d-49af-af55-63b8172e4d82", "created": "2026-01-27T05:12:56.655634Z", "modified": "2026-01-27T05:12:56.655634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba467303b0e601dc8dbea89e16cfb8c1253540eadf0cfc4ea875412a7a3ed834']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.655634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c553c5c-13f6-4207-add1-a92a86a774e9", "created": "2026-01-27T05:12:56.656476Z", "modified": "2026-01-27T05:12:56.656476Z", "relationship_type": "indicates", "source_ref": "indicator--59636bfa-982d-49af-af55-63b8172e4d82", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19d6736-a033-42ad-8c44-e5c250afeca8", "created": "2026-01-27T05:12:56.656655Z", "modified": "2026-01-27T05:12:56.656655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f73a6c83c2fd73ab166a8e09e67181286a91523091a67214914e2d1499ea92cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.656655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d269406-301c-4ebf-8aac-6e694fe93421", "created": "2026-01-27T05:12:56.657496Z", "modified": "2026-01-27T05:12:56.657496Z", "relationship_type": "indicates", "source_ref": "indicator--a19d6736-a033-42ad-8c44-e5c250afeca8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6ba58a-0595-41cd-bf35-de0542e40018", "created": "2026-01-27T05:12:56.657674Z", "modified": "2026-01-27T05:12:56.657674Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43071339975ea2e470c643e6ff22044ec516ba84371ec0d233a6314e7dd653b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.657674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--364f8644-5f07-4f82-a639-b85cfdf6a311", "created": "2026-01-27T05:12:56.658516Z", "modified": "2026-01-27T05:12:56.658516Z", "relationship_type": "indicates", "source_ref": "indicator--fd6ba58a-0595-41cd-bf35-de0542e40018", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda5f74a-6fa5-4906-bbfd-91a298a9914b", "created": "2026-01-27T05:12:56.658696Z", "modified": "2026-01-27T05:12:56.658696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7303f1cdb0e7c31dfc46c3372c5c68cb2729907471cb40b939f31f9a03e6cac0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.658696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--222bf9fd-71dd-4379-9ce9-904dc9316072", "created": "2026-01-27T05:12:56.659533Z", "modified": "2026-01-27T05:12:56.659533Z", "relationship_type": "indicates", "source_ref": "indicator--bda5f74a-6fa5-4906-bbfd-91a298a9914b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78947efa-ae81-4122-b47b-e6b8b042b909", "created": "2026-01-27T05:12:56.659711Z", "modified": "2026-01-27T05:12:56.659711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f081ec912cdde8bec68b9a2456bf44d978e1119448a475b32ec7bd2f78680c15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.659711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ba32fee-2df7-4a59-b6fe-76023a001a82", "created": "2026-01-27T05:12:56.660553Z", "modified": "2026-01-27T05:12:56.660553Z", "relationship_type": "indicates", "source_ref": "indicator--78947efa-ae81-4122-b47b-e6b8b042b909", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419fe7a6-1bd9-46de-98a4-c906a4380f8d", "created": "2026-01-27T05:12:56.66073Z", "modified": "2026-01-27T05:12:56.66073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3f11dadf9168c2605a7f0ad0cc9111998e5086a55bc76ec8392d604b131fde1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.66073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--126242d0-6e70-4f47-afc5-e3bfa0c53baa", "created": "2026-01-27T05:12:56.661569Z", "modified": "2026-01-27T05:12:56.661569Z", "relationship_type": "indicates", "source_ref": "indicator--419fe7a6-1bd9-46de-98a4-c906a4380f8d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8c8478-86bb-48f3-a2d1-ac68cbd075e6", "created": "2026-01-27T05:12:56.661761Z", "modified": "2026-01-27T05:12:56.661761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1e8856fe99a67654c52b8a38f88f68e1c0225c87dac9c1a0c1b0620dd9c6665']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.661761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef37f862-9038-45b1-bfff-59520838d9f6", "created": "2026-01-27T05:12:56.662715Z", "modified": "2026-01-27T05:12:56.662715Z", "relationship_type": "indicates", "source_ref": "indicator--9b8c8478-86bb-48f3-a2d1-ac68cbd075e6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ac7b82-b421-46a9-ab8f-fefc3628a329", "created": "2026-01-27T05:12:56.662912Z", "modified": "2026-01-27T05:12:56.662912Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4598edbfe6ca567538836cc06ffa7bf6e083e3a5e34c286f6b7fb9bb5ac57a10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.662912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b2296d4-010a-4318-a93c-501745aa79ec", "created": "2026-01-27T05:12:56.663736Z", "modified": "2026-01-27T05:12:56.663736Z", "relationship_type": "indicates", "source_ref": "indicator--05ac7b82-b421-46a9-ab8f-fefc3628a329", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f60e3f-0cb1-4213-ac83-7fad4a23340a", "created": "2026-01-27T05:12:56.663935Z", "modified": "2026-01-27T05:12:56.663935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e98bc2b678968aa61c839a991d7f09020a0627fbcf4d1caadb7546867a707084']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.663935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1fd0b9c-5643-40cc-a9a9-a2fc951226db", "created": "2026-01-27T05:12:56.664777Z", "modified": "2026-01-27T05:12:56.664777Z", "relationship_type": "indicates", "source_ref": "indicator--f3f60e3f-0cb1-4213-ac83-7fad4a23340a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18036e3-4570-4c02-9e22-512cab26fdc9", "created": "2026-01-27T05:12:56.664963Z", "modified": "2026-01-27T05:12:56.664963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fdd9e4396a8f7274f034958169bb47180cd7d29d1bb2d7e71895fec642437e60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.664963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30218279-71b0-4018-9954-bac7411fa594", "created": "2026-01-27T05:12:56.665856Z", "modified": "2026-01-27T05:12:56.665856Z", "relationship_type": "indicates", "source_ref": "indicator--f18036e3-4570-4c02-9e22-512cab26fdc9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e12fcbc-4a29-4fb0-9278-6c1cdc78ff40", "created": "2026-01-27T05:12:56.666042Z", "modified": "2026-01-27T05:12:56.666042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3efa85cb979b680aa2e9dfcd1460b7557b594cd1555efa8ae7c3adcf14b5cac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.666042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a1ffc45-5d79-4870-89e2-11f7335d0233", "created": "2026-01-27T05:12:56.666886Z", "modified": "2026-01-27T05:12:56.666886Z", "relationship_type": "indicates", "source_ref": "indicator--5e12fcbc-4a29-4fb0-9278-6c1cdc78ff40", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dfc968-bb69-4329-8d4b-9ee215d90eca", "created": "2026-01-27T05:12:56.667069Z", "modified": "2026-01-27T05:12:56.667069Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b75c8da86b2280c41551eaa2729b4a2678ba07aadf5bd858b1144543e4e0dc86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.667069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d66e735c-1e18-472a-8331-52a63a44df24", "created": "2026-01-27T05:12:56.66791Z", "modified": "2026-01-27T05:12:56.66791Z", "relationship_type": "indicates", "source_ref": "indicator--75dfc968-bb69-4329-8d4b-9ee215d90eca", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada0e5b3-ca51-4c78-be74-a3aa132c246c", "created": "2026-01-27T05:12:56.66809Z", "modified": "2026-01-27T05:12:56.66809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19527b5cd82b869088e3dcb69d134d6d6c5b88cd3f4d97a68a8a7ebe2fe1c8ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.66809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fe7d176-7fbb-42da-8a45-0fe84ac3a65e", "created": "2026-01-27T05:12:56.668927Z", "modified": "2026-01-27T05:12:56.668927Z", "relationship_type": "indicates", "source_ref": "indicator--ada0e5b3-ca51-4c78-be74-a3aa132c246c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02d6ff8-2f97-47e6-b00b-444bba6c5c40", "created": "2026-01-27T05:12:56.669118Z", "modified": "2026-01-27T05:12:56.669118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f998294f5b5935b399d498124e117f2443384ec3214f7d262c4985d9665aa2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.669118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb3983db-6f4f-482a-9c4e-ffc90373ebc4", "created": "2026-01-27T05:12:56.669958Z", "modified": "2026-01-27T05:12:56.669958Z", "relationship_type": "indicates", "source_ref": "indicator--b02d6ff8-2f97-47e6-b00b-444bba6c5c40", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1962e83-66e4-41b7-a9bc-efff6ef4b5ac", "created": "2026-01-27T05:12:56.670137Z", "modified": "2026-01-27T05:12:56.670137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da4e4644fe709456f032f4877bd8574b5f5f7543cab8825421cbf0f308c97f50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.670137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c17ca5e-ede0-4127-a723-d638abb46ad3", "created": "2026-01-27T05:12:56.670971Z", "modified": "2026-01-27T05:12:56.670971Z", "relationship_type": "indicates", "source_ref": "indicator--c1962e83-66e4-41b7-a9bc-efff6ef4b5ac", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179fe7cd-ac5e-4bb9-989d-6b0b7a31c95d", "created": "2026-01-27T05:12:56.671149Z", "modified": "2026-01-27T05:12:56.671149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06e4312edd54c0393a451dcfa1535289f49a2948dda9a687d01894abd794fc3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.671149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69410513-eb92-4695-b9cd-2b3a995988b2", "created": "2026-01-27T05:12:56.672109Z", "modified": "2026-01-27T05:12:56.672109Z", "relationship_type": "indicates", "source_ref": "indicator--179fe7cd-ac5e-4bb9-989d-6b0b7a31c95d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c5acf2-79f0-4b2a-a9c0-00b6bb6e04f1", "created": "2026-01-27T05:12:56.67229Z", "modified": "2026-01-27T05:12:56.67229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e3e27372d68c4a3de42843ec98619a2e4d42b92d3ba35f76a1efe8f698e27ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.67229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3198bdfb-13c7-4ef5-98f3-bf8d2e056087", "created": "2026-01-27T05:12:56.673135Z", "modified": "2026-01-27T05:12:56.673135Z", "relationship_type": "indicates", "source_ref": "indicator--d1c5acf2-79f0-4b2a-a9c0-00b6bb6e04f1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156083bd-4e0f-4156-b9d3-000d39dfa2b1", "created": "2026-01-27T05:12:56.673315Z", "modified": "2026-01-27T05:12:56.673315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a041f99656709f659a0439dc632fa55913f4ff874992db8f990a7215844e97a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.673315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c92b8f1-3e5c-46bb-bb7b-0c7107a5f9c6", "created": "2026-01-27T05:12:56.674162Z", "modified": "2026-01-27T05:12:56.674162Z", "relationship_type": "indicates", "source_ref": "indicator--156083bd-4e0f-4156-b9d3-000d39dfa2b1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6059ef17-d82d-4ac4-b3d2-0a560416d421", "created": "2026-01-27T05:12:56.674344Z", "modified": "2026-01-27T05:12:56.674344Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d042b2b4caaddafc486b03bdab231f3ec67240dc504a485a3e3ac889b2a00fb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.674344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--028c6ded-dbf9-44f5-8468-45e535676709", "created": "2026-01-27T05:12:56.67518Z", "modified": "2026-01-27T05:12:56.67518Z", "relationship_type": "indicates", "source_ref": "indicator--6059ef17-d82d-4ac4-b3d2-0a560416d421", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf42861-03ad-4aea-a4b8-d3ed3e1e2680", "created": "2026-01-27T05:12:56.67536Z", "modified": "2026-01-27T05:12:56.67536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='719ab7f46fc5de5c49b7a04a36adb2010d04ce75d627d4444031225786f7ab14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.67536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4ed4e25-6d8e-47a1-b887-154f62c11e61", "created": "2026-01-27T05:12:56.676197Z", "modified": "2026-01-27T05:12:56.676197Z", "relationship_type": "indicates", "source_ref": "indicator--ecf42861-03ad-4aea-a4b8-d3ed3e1e2680", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a374ea-9b02-41ca-a0d3-bb6d15f8a376", "created": "2026-01-27T05:12:56.676375Z", "modified": "2026-01-27T05:12:56.676375Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='138a985abd08524ec1d98181344f52725ff0ee3baaadec6ccef869933f93a74d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.676375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6493eaae-ac44-46b3-89ce-e6881ed4dc33", "created": "2026-01-27T05:12:56.677209Z", "modified": "2026-01-27T05:12:56.677209Z", "relationship_type": "indicates", "source_ref": "indicator--71a374ea-9b02-41ca-a0d3-bb6d15f8a376", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497f69db-59c4-4cff-b179-4f9614de7285", "created": "2026-01-27T05:12:56.677387Z", "modified": "2026-01-27T05:12:56.677387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e06e339f8208f61f43750251aa7ee5060d01e71f07123feb8323ce17b6c71b8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.677387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2de6cd7-f639-4ca1-88e7-8d23f0914eef", "created": "2026-01-27T05:12:56.678224Z", "modified": "2026-01-27T05:12:56.678224Z", "relationship_type": "indicates", "source_ref": "indicator--497f69db-59c4-4cff-b179-4f9614de7285", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96359b86-9375-4f48-a4dc-48b3a1b9f16e", "created": "2026-01-27T05:12:56.678402Z", "modified": "2026-01-27T05:12:56.678402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d210218fcdc241d017839feb17a8b8f22904b0ea251e0441ee4f2bd55b1140ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.678402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9581f24-d5c6-4169-8d1a-448eb285a0ca", "created": "2026-01-27T05:12:56.679233Z", "modified": "2026-01-27T05:12:56.679233Z", "relationship_type": "indicates", "source_ref": "indicator--96359b86-9375-4f48-a4dc-48b3a1b9f16e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261e9bf6-9abc-43a3-b76d-49f2daa1279e", "created": "2026-01-27T05:12:56.67941Z", "modified": "2026-01-27T05:12:56.67941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='380573652889e1a4fb2ddce0fcfd2955908c38881fd21b36f065f20af25963cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.67941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40e298ac-bc1e-4ffa-b398-475ff43b8942", "created": "2026-01-27T05:12:56.680364Z", "modified": "2026-01-27T05:12:56.680364Z", "relationship_type": "indicates", "source_ref": "indicator--261e9bf6-9abc-43a3-b76d-49f2daa1279e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08315be3-146e-423c-b1b8-47e8a6837788", "created": "2026-01-27T05:12:56.680545Z", "modified": "2026-01-27T05:12:56.680545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c7afc7a1b9cfe0c848d54cf561079abf959ed36370e3867c0bcb8625d60bb7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.680545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9cbc5b9-0aa6-4088-b3a9-1936aec74080", "created": "2026-01-27T05:12:56.681377Z", "modified": "2026-01-27T05:12:56.681377Z", "relationship_type": "indicates", "source_ref": "indicator--08315be3-146e-423c-b1b8-47e8a6837788", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90d332c-df98-4fc4-b647-d322b5cf8b5c", "created": "2026-01-27T05:12:56.681558Z", "modified": "2026-01-27T05:12:56.681558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58a5bbbea9a86c54742f12febd62fe25d575d21b111355d9ce0b05beed4271d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.681558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20e467e9-ecd8-4b29-b897-ecbba4d43a97", "created": "2026-01-27T05:12:56.682393Z", "modified": "2026-01-27T05:12:56.682393Z", "relationship_type": "indicates", "source_ref": "indicator--a90d332c-df98-4fc4-b647-d322b5cf8b5c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fcd3f9f-9f40-4389-acde-950bdb2cd302", "created": "2026-01-27T05:12:56.682574Z", "modified": "2026-01-27T05:12:56.682574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c214f3c137d3084baea868a788f4c8fe1e2d86d39675a99a3afd3eb4623b0e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.682574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa2b2696-f6c3-4146-8b9e-451229547230", "created": "2026-01-27T05:12:56.683416Z", "modified": "2026-01-27T05:12:56.683416Z", "relationship_type": "indicates", "source_ref": "indicator--6fcd3f9f-9f40-4389-acde-950bdb2cd302", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e35845f-1d19-444c-baf3-e260cdca46cf", "created": "2026-01-27T05:12:56.683597Z", "modified": "2026-01-27T05:12:56.683597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bf9734c63208b788875eeeaa56c49c643c3cd545813d808acd557524003771a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.683597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88852906-7664-4760-a3c0-805ff8b0899a", "created": "2026-01-27T05:12:56.684431Z", "modified": "2026-01-27T05:12:56.684431Z", "relationship_type": "indicates", "source_ref": "indicator--3e35845f-1d19-444c-baf3-e260cdca46cf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b41b00-2e85-4679-a90d-e12aa5eebcb1", "created": "2026-01-27T05:12:56.68461Z", "modified": "2026-01-27T05:12:56.68461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d136acb4b792d0043ef2588d25b8ef9239accf8a386ec4be7b38e76a518e459c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.68461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e0f27db-1bee-467c-aff9-b72ec9522f5c", "created": "2026-01-27T05:12:56.685473Z", "modified": "2026-01-27T05:12:56.685473Z", "relationship_type": "indicates", "source_ref": "indicator--64b41b00-2e85-4679-a90d-e12aa5eebcb1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a52cf4-5404-4337-83d6-060b89d8a55a", "created": "2026-01-27T05:12:56.685652Z", "modified": "2026-01-27T05:12:56.685652Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='718fa2b662fa30a2d1e56b61e9df1fb6173caad011a82b8678e6173f3c6421c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.685652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6596c94b-0fc6-4eb5-8977-315115c9b728", "created": "2026-01-27T05:12:56.686499Z", "modified": "2026-01-27T05:12:56.686499Z", "relationship_type": "indicates", "source_ref": "indicator--27a52cf4-5404-4337-83d6-060b89d8a55a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7666859a-46de-4f70-81fb-4877ad578718", "created": "2026-01-27T05:12:56.686676Z", "modified": "2026-01-27T05:12:56.686676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd9f98e815dc04fe6926c37a4209640f6fbc52cd253a7c79273b5ac8a61c6817']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.686676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8eab5eb8-5c25-417c-92ff-8bbf4ba036db", "created": "2026-01-27T05:12:56.687517Z", "modified": "2026-01-27T05:12:56.687517Z", "relationship_type": "indicates", "source_ref": "indicator--7666859a-46de-4f70-81fb-4877ad578718", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62a51c5-1084-4338-8709-f66f2eaac71a", "created": "2026-01-27T05:12:56.687695Z", "modified": "2026-01-27T05:12:56.687695Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='441b27d4b59fa5a27d119d649d43d5401114f9014954199edb39d2a22b24ca9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.687695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bfac993-f54c-4b30-8f4f-0ead53a93318", "created": "2026-01-27T05:12:56.688527Z", "modified": "2026-01-27T05:12:56.688527Z", "relationship_type": "indicates", "source_ref": "indicator--a62a51c5-1084-4338-8709-f66f2eaac71a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4196d89-5565-438b-a08e-d17112cd13bd", "created": "2026-01-27T05:12:56.688705Z", "modified": "2026-01-27T05:12:56.688705Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='224f03961205a2971982b16308cd1f89a7b5c38c5f76ca0315df3206f4b68280']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.688705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b4f153a-b35e-4f92-a041-218dba2e3370", "created": "2026-01-27T05:12:56.689663Z", "modified": "2026-01-27T05:12:56.689663Z", "relationship_type": "indicates", "source_ref": "indicator--b4196d89-5565-438b-a08e-d17112cd13bd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02102b42-f027-4421-966f-f2cb3eeb964c", "created": "2026-01-27T05:12:56.689858Z", "modified": "2026-01-27T05:12:56.689858Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80a5e973dd6793f60ea8026ca6c8ccc1a227a56bfb540943bc61774feda37fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.689858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--491d9ec1-ce34-42d0-9b4a-f10180d203d1", "created": "2026-01-27T05:12:56.690675Z", "modified": "2026-01-27T05:12:56.690675Z", "relationship_type": "indicates", "source_ref": "indicator--02102b42-f027-4421-966f-f2cb3eeb964c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9a7be1-01e7-4f7a-9f89-50707e82afea", "created": "2026-01-27T05:12:56.690871Z", "modified": "2026-01-27T05:12:56.690871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ca0bb6eab07356d5b349b38dbadecca9d7e6532f657a5e68a68575427852599']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.690871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fc94a4f-49bb-41c1-a82d-d57871132b88", "created": "2026-01-27T05:12:56.691695Z", "modified": "2026-01-27T05:12:56.691695Z", "relationship_type": "indicates", "source_ref": "indicator--bf9a7be1-01e7-4f7a-9f89-50707e82afea", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949f949b-a5e4-40ba-b947-348e8ec869fc", "created": "2026-01-27T05:12:56.691895Z", "modified": "2026-01-27T05:12:56.691895Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd6f65c6f07323eb59ef998c80c2757bcb4fa553d140ab66fadfaab5e1d8c30c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.691895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57a9787a-21ed-48b3-b833-08f8fb3be9d3", "created": "2026-01-27T05:12:56.692728Z", "modified": "2026-01-27T05:12:56.692728Z", "relationship_type": "indicates", "source_ref": "indicator--949f949b-a5e4-40ba-b947-348e8ec869fc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b965e354-d572-41f1-8fed-ba9f18b05137", "created": "2026-01-27T05:12:56.692924Z", "modified": "2026-01-27T05:12:56.692924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c59cdf11196bfc860cbd6da9ceec71c94c83d9af227922854ff4233022a37e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.692924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1614908-8628-4f51-8abd-b3bf75954533", "created": "2026-01-27T05:12:56.693763Z", "modified": "2026-01-27T05:12:56.693763Z", "relationship_type": "indicates", "source_ref": "indicator--b965e354-d572-41f1-8fed-ba9f18b05137", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6660a26a-fee8-4b1d-9489-df483d97e1ad", "created": "2026-01-27T05:12:56.693949Z", "modified": "2026-01-27T05:12:56.693949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffef95c056a19e07ae8f8c968f2ecc43df3ca1ad79ba160c945e8e879431a672']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.693949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb2e9fad-4b4a-475a-a7e5-71c5becfa43f", "created": "2026-01-27T05:12:56.694792Z", "modified": "2026-01-27T05:12:56.694792Z", "relationship_type": "indicates", "source_ref": "indicator--6660a26a-fee8-4b1d-9489-df483d97e1ad", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f24b7ae-da5b-41ba-a380-cbffebbaadd5", "created": "2026-01-27T05:12:56.694975Z", "modified": "2026-01-27T05:12:56.694975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f06ff5b7d0c17cb0ce7f5428d6cf5d170f0bb08cbbdf31413e12aaf1f8d4ea6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.694975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffa739f5-af78-4564-a2ff-67fca73b558b", "created": "2026-01-27T05:12:56.695813Z", "modified": "2026-01-27T05:12:56.695813Z", "relationship_type": "indicates", "source_ref": "indicator--2f24b7ae-da5b-41ba-a380-cbffebbaadd5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce5a189-a5f6-48ec-9231-38a45b65635d", "created": "2026-01-27T05:12:56.695996Z", "modified": "2026-01-27T05:12:56.695996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d59b2545012211cb3495d00dc0571795aa4cedaef01afa6486746966695a1e01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.695996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5aecc0f4-16f1-4643-9360-c04badab2993", "created": "2026-01-27T05:12:56.696833Z", "modified": "2026-01-27T05:12:56.696833Z", "relationship_type": "indicates", "source_ref": "indicator--cce5a189-a5f6-48ec-9231-38a45b65635d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9155e04-2f11-4743-80aa-7f1b728e5a0e", "created": "2026-01-27T05:12:56.697011Z", "modified": "2026-01-27T05:12:56.697011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a8c1ced3e5b39f37804b16cc003ae8c3c6e460c14621f62864194699ffdb5a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.697011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db3df608-9c9b-442e-99f2-7e99eea00318", "created": "2026-01-27T05:12:56.697841Z", "modified": "2026-01-27T05:12:56.697841Z", "relationship_type": "indicates", "source_ref": "indicator--b9155e04-2f11-4743-80aa-7f1b728e5a0e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d22ec5-cd56-4bcd-84de-80e99a1c34aa", "created": "2026-01-27T05:12:56.69802Z", "modified": "2026-01-27T05:12:56.69802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c15f907f3054806d87fa645cd9d0c45a49405679bf37c60a40482f7d1eafb971']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.69802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c534485-e76e-4980-a247-c1d09ba08b28", "created": "2026-01-27T05:12:56.699029Z", "modified": "2026-01-27T05:12:56.699029Z", "relationship_type": "indicates", "source_ref": "indicator--a8d22ec5-cd56-4bcd-84de-80e99a1c34aa", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60dda15f-5e29-4d0d-88cf-965da04a713d", "created": "2026-01-27T05:12:56.699252Z", "modified": "2026-01-27T05:12:56.699252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54ecd62b661446f31f8dee39820753996a7723bb66bdcaa834eac4bff7501614']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.699252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a3f096d-e2d6-4bb8-8006-6ef1e7ca6f12", "created": "2026-01-27T05:12:56.700118Z", "modified": "2026-01-27T05:12:56.700118Z", "relationship_type": "indicates", "source_ref": "indicator--60dda15f-5e29-4d0d-88cf-965da04a713d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07233643-61a4-4032-87c1-f61bf3133c17", "created": "2026-01-27T05:12:56.700303Z", "modified": "2026-01-27T05:12:56.700303Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29f2e9b3331a31299ed9d06d45a579d5366e0227cfb0f1e053f61f7e590ae335']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.700303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dac5eb89-1ecd-42cf-b31e-6b3e1518fe6e", "created": "2026-01-27T05:12:56.701167Z", "modified": "2026-01-27T05:12:56.701167Z", "relationship_type": "indicates", "source_ref": "indicator--07233643-61a4-4032-87c1-f61bf3133c17", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5de733e-165d-4752-9eb8-c0d1591c4cd1", "created": "2026-01-27T05:12:56.701349Z", "modified": "2026-01-27T05:12:56.701349Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='103854397cd049f06d3c38aee9dd9c4611c459eebc45a1f974b26829ea1cb3e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.701349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3948870a-80b8-4558-a22d-e450f34b0c8a", "created": "2026-01-27T05:12:56.702188Z", "modified": "2026-01-27T05:12:56.702188Z", "relationship_type": "indicates", "source_ref": "indicator--e5de733e-165d-4752-9eb8-c0d1591c4cd1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4bf483-d537-4c5d-b963-d9c555b45c1b", "created": "2026-01-27T05:12:56.702373Z", "modified": "2026-01-27T05:12:56.702373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca974a7903a7b2202b8e3834cb79f5ddf3fc49110976f33138e22dd28e6f4423']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.702373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc2288e6-d778-4227-8e7e-8327c9ac0762", "created": "2026-01-27T05:12:56.703216Z", "modified": "2026-01-27T05:12:56.703216Z", "relationship_type": "indicates", "source_ref": "indicator--eb4bf483-d537-4c5d-b963-d9c555b45c1b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a85a23-0422-4b77-a521-f90d947dbb2c", "created": "2026-01-27T05:12:56.703398Z", "modified": "2026-01-27T05:12:56.703398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92783577529e705b02bb2131606419789104bf251076c57ad11119f1f6478e23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.703398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d30aba2-4edc-410a-862d-a5558811c5f0", "created": "2026-01-27T05:12:56.704238Z", "modified": "2026-01-27T05:12:56.704238Z", "relationship_type": "indicates", "source_ref": "indicator--51a85a23-0422-4b77-a521-f90d947dbb2c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5686da4b-01db-472d-8536-72ef9f458aef", "created": "2026-01-27T05:12:56.704418Z", "modified": "2026-01-27T05:12:56.704418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b64eb769554584940fdfda2c762e02878f6cf6ab1554936c5f330446abe4b76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.704418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--285a06ac-f3f5-4dab-9778-a54e0717d460", "created": "2026-01-27T05:12:56.705253Z", "modified": "2026-01-27T05:12:56.705253Z", "relationship_type": "indicates", "source_ref": "indicator--5686da4b-01db-472d-8536-72ef9f458aef", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2c01e3-34fc-4468-a063-efda7858ecc8", "created": "2026-01-27T05:12:56.705431Z", "modified": "2026-01-27T05:12:56.705431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc245f301bf373feb0b8de035a91ba1a68a8387b3f1e0e8dc6eb7700eabd5201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.705431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47558e10-5458-4366-bb5b-6e8546bb9968", "created": "2026-01-27T05:12:56.706263Z", "modified": "2026-01-27T05:12:56.706263Z", "relationship_type": "indicates", "source_ref": "indicator--2a2c01e3-34fc-4468-a063-efda7858ecc8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454f73e6-0c95-4c6c-910a-6f3189d45389", "created": "2026-01-27T05:12:56.706442Z", "modified": "2026-01-27T05:12:56.706442Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22f81170787399bb92c3349e95c33a6c4e14463e84b77a813b2474bf4fbea1ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.706442Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1561cd0-bdc6-44f0-af59-e6eeac8d1830", "created": "2026-01-27T05:12:56.707406Z", "modified": "2026-01-27T05:12:56.707406Z", "relationship_type": "indicates", "source_ref": "indicator--454f73e6-0c95-4c6c-910a-6f3189d45389", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79c5792-4a86-4559-9009-d1983fab5b2f", "created": "2026-01-27T05:12:56.707588Z", "modified": "2026-01-27T05:12:56.707588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bff570907b50e674c2e8a23f18b2dc20d0424a8d6b210027e84dc82655a527c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.707588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fe93a4a-f5f2-4834-a500-0949ee4abf1f", "created": "2026-01-27T05:12:56.708423Z", "modified": "2026-01-27T05:12:56.708423Z", "relationship_type": "indicates", "source_ref": "indicator--e79c5792-4a86-4559-9009-d1983fab5b2f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9831a4-a0e4-4573-aa9c-7a7a0aff053a", "created": "2026-01-27T05:12:56.708602Z", "modified": "2026-01-27T05:12:56.708602Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a71b8cf1f70f1433e09ce34058ffdd9b6d21b5565d6e31bb1c64905e33af9a99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.708602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92008eb5-624e-4548-bf79-4f45e4d49820", "created": "2026-01-27T05:12:56.709437Z", "modified": "2026-01-27T05:12:56.709437Z", "relationship_type": "indicates", "source_ref": "indicator--ee9831a4-a0e4-4573-aa9c-7a7a0aff053a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add7aa56-4c86-4165-a745-6e5d628680dd", "created": "2026-01-27T05:12:56.709613Z", "modified": "2026-01-27T05:12:56.709613Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7f67e1bb5ad006c6bd4d8d093b7e321bb6e56cc1d5e17b4fb8190aaa537d91b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.709613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68047bbb-8df8-4512-b9f6-1c8811db9bcb", "created": "2026-01-27T05:12:56.710455Z", "modified": "2026-01-27T05:12:56.710455Z", "relationship_type": "indicates", "source_ref": "indicator--add7aa56-4c86-4165-a745-6e5d628680dd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9a8c51-d462-4b8c-af1f-ca81d9ee5eef", "created": "2026-01-27T05:12:56.710631Z", "modified": "2026-01-27T05:12:56.710631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eed13ce2d07c9d0d0b6ebf5abd6675794ca154e911b6b41926380a2007132e72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.710631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e7ede1e-d741-47c8-b308-73ee482d11c5", "created": "2026-01-27T05:12:56.711475Z", "modified": "2026-01-27T05:12:56.711475Z", "relationship_type": "indicates", "source_ref": "indicator--bb9a8c51-d462-4b8c-af1f-ca81d9ee5eef", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64885dcf-d89a-4837-9749-7bab8474eb35", "created": "2026-01-27T05:12:56.711656Z", "modified": "2026-01-27T05:12:56.711656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a0b6bf75020a2b10334d1e754a3e13cb4099772ab0ebdf8f358f72b13087ec1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.711656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3bad5a6-e300-4be3-8528-dee300d9b0b2", "created": "2026-01-27T05:12:56.712502Z", "modified": "2026-01-27T05:12:56.712502Z", "relationship_type": "indicates", "source_ref": "indicator--64885dcf-d89a-4837-9749-7bab8474eb35", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679af501-fdfc-4f92-b193-e1823c2212b3", "created": "2026-01-27T05:12:56.712679Z", "modified": "2026-01-27T05:12:56.712679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba9a3e92ee2dc9026e0a7f78efd2867abccb396d2288f8d6b5a9647300a86ce5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.712679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67a4b7ba-6b48-49b3-85a6-481280e67b5b", "created": "2026-01-27T05:12:56.713523Z", "modified": "2026-01-27T05:12:56.713523Z", "relationship_type": "indicates", "source_ref": "indicator--679af501-fdfc-4f92-b193-e1823c2212b3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c0cef7-b636-4bd5-8f01-d515af5ab4e0", "created": "2026-01-27T05:12:56.7137Z", "modified": "2026-01-27T05:12:56.7137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='419cb0e1201948ac271fa8fbac2941cf9e151bed304282e8099e6c4d078a3b80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.7137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad11ac52-86c7-4e6d-8a32-eb7c520d5bf4", "created": "2026-01-27T05:12:56.714533Z", "modified": "2026-01-27T05:12:56.714533Z", "relationship_type": "indicates", "source_ref": "indicator--f5c0cef7-b636-4bd5-8f01-d515af5ab4e0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33719cc1-8130-4203-92fc-099ff1da86b4", "created": "2026-01-27T05:12:56.714709Z", "modified": "2026-01-27T05:12:56.714709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12f34d14d25a3fe519621343588dbfd17cac7180b276e77aecfb46b4e2140eb8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.714709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fbe8965-9aa4-423a-b1d8-b1c21f51e73a", "created": "2026-01-27T05:12:56.715545Z", "modified": "2026-01-27T05:12:56.715545Z", "relationship_type": "indicates", "source_ref": "indicator--33719cc1-8130-4203-92fc-099ff1da86b4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42973140-3983-44c4-bc3b-f7f1dae3acf5", "created": "2026-01-27T05:12:56.715721Z", "modified": "2026-01-27T05:12:56.715721Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e92b20674c86b01be77c51093dee2504ceaeda7adbd4fe401e3803a812e56514']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.715721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3700b3c2-1808-458c-b1ab-d575ced06ae2", "created": "2026-01-27T05:12:56.716677Z", "modified": "2026-01-27T05:12:56.716677Z", "relationship_type": "indicates", "source_ref": "indicator--42973140-3983-44c4-bc3b-f7f1dae3acf5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563978b8-3fd7-4022-b7ec-a26f7293607a", "created": "2026-01-27T05:12:56.716875Z", "modified": "2026-01-27T05:12:56.716875Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9f237a83c0e6dd3f8570fa686bb62960054a6f48776e91ca669e266ca53bec4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.716875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3905539-bc41-4fda-b7ea-5ec9ab691abc", "created": "2026-01-27T05:12:56.71771Z", "modified": "2026-01-27T05:12:56.71771Z", "relationship_type": "indicates", "source_ref": "indicator--563978b8-3fd7-4022-b7ec-a26f7293607a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377ffee1-de7d-4aab-8f55-ce18bf0043b8", "created": "2026-01-27T05:12:56.717906Z", "modified": "2026-01-27T05:12:56.717906Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a8a3eebffc80190ac84557e842cde94c369b856abe5bf11221834ee96bd945e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.717906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dfbf4b0-51f0-47da-95ae-cbcbf5cb58b2", "created": "2026-01-27T05:12:56.718726Z", "modified": "2026-01-27T05:12:56.718726Z", "relationship_type": "indicates", "source_ref": "indicator--377ffee1-de7d-4aab-8f55-ce18bf0043b8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4ffdc7-5f52-4bfd-9e83-f9ab59159714", "created": "2026-01-27T05:12:56.718922Z", "modified": "2026-01-27T05:12:56.718922Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a8df497302602515f23edd51ee23de5fd86810e91797e8e796f05b39aef7597']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.718922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a7b9c3d-aa7d-49ee-8845-e0a7f26e999b", "created": "2026-01-27T05:12:56.719766Z", "modified": "2026-01-27T05:12:56.719766Z", "relationship_type": "indicates", "source_ref": "indicator--1d4ffdc7-5f52-4bfd-9e83-f9ab59159714", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400b8826-caf6-4485-90a2-f45c90b2fe9a", "created": "2026-01-27T05:12:56.719949Z", "modified": "2026-01-27T05:12:56.719949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='88330769127ef9f023f4ffc17c12fb5e28557dfaaa65d5d159d31e161ce7a787']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.719949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89b14056-a6ef-43af-ad13-8d46fc7d39fc", "created": "2026-01-27T05:12:56.720784Z", "modified": "2026-01-27T05:12:56.720784Z", "relationship_type": "indicates", "source_ref": "indicator--400b8826-caf6-4485-90a2-f45c90b2fe9a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f384eb-8514-4169-847b-835c549f2a62", "created": "2026-01-27T05:12:56.720966Z", "modified": "2026-01-27T05:12:56.720966Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bb077a37f8e2e1c042a602d15c6368bbb63572fbd55b5f9af86f2714587f9d3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.720966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eee5806-7d41-4f67-8d65-d0823c8dd081", "created": "2026-01-27T05:12:56.721801Z", "modified": "2026-01-27T05:12:56.721801Z", "relationship_type": "indicates", "source_ref": "indicator--94f384eb-8514-4169-847b-835c549f2a62", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74867013-fbe8-46d1-88f0-5b49e09eb147", "created": "2026-01-27T05:12:56.72198Z", "modified": "2026-01-27T05:12:56.72198Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc432a27cdc691fb1a17e4b2de559428e1b5a7623a598e512abf55511cb05ec2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.72198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5302a5d4-52e2-4e43-bdb5-c6164163a832", "created": "2026-01-27T05:12:56.722819Z", "modified": "2026-01-27T05:12:56.722819Z", "relationship_type": "indicates", "source_ref": "indicator--74867013-fbe8-46d1-88f0-5b49e09eb147", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6848e67-4411-4daf-a560-f1b2e01902d3", "created": "2026-01-27T05:12:56.722999Z", "modified": "2026-01-27T05:12:56.722999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e60bed3b67c92053b5e5f3658316825221891c077b99f63ab807235ee5a8811']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.722999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3da511a3-1d25-467a-a512-d215b162b4a9", "created": "2026-01-27T05:12:56.723836Z", "modified": "2026-01-27T05:12:56.723836Z", "relationship_type": "indicates", "source_ref": "indicator--b6848e67-4411-4daf-a560-f1b2e01902d3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09777b3b-40a8-4ede-9940-2fc3b2af7cbd", "created": "2026-01-27T05:12:56.724013Z", "modified": "2026-01-27T05:12:56.724013Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b1bbfac6972bdc1a915154f798945d818d0b3720586eb015522ae49b1c393d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.724013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3fc948a-d494-480d-88f4-bec38776e41e", "created": "2026-01-27T05:12:56.724852Z", "modified": "2026-01-27T05:12:56.724852Z", "relationship_type": "indicates", "source_ref": "indicator--09777b3b-40a8-4ede-9940-2fc3b2af7cbd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bea5e97-2a0c-40b3-aa3e-0de4c8f8df2a", "created": "2026-01-27T05:12:56.72503Z", "modified": "2026-01-27T05:12:56.72503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d948848bfc8f4dc82a1553f7a3c69ae201e4814b9dfd04092a315a4bb04d3435']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.72503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acc34848-4039-4878-bfdf-4c1b03bb6280", "created": "2026-01-27T05:12:56.726261Z", "modified": "2026-01-27T05:12:56.726261Z", "relationship_type": "indicates", "source_ref": "indicator--7bea5e97-2a0c-40b3-aa3e-0de4c8f8df2a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8895879a-0435-49fd-8a84-053ff3ea03cd", "created": "2026-01-27T05:12:56.726445Z", "modified": "2026-01-27T05:12:56.726445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='724faff6eb37b8fa5427ce708ade5052c85a034f709a942134c7d716a8b9507a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.726445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff2f78f9-8b58-4f64-bb62-decdaab35162", "created": "2026-01-27T05:12:56.727291Z", "modified": "2026-01-27T05:12:56.727291Z", "relationship_type": "indicates", "source_ref": "indicator--8895879a-0435-49fd-8a84-053ff3ea03cd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552d4bcc-6116-40cc-8017-2cbd397e4b99", "created": "2026-01-27T05:12:56.727476Z", "modified": "2026-01-27T05:12:56.727476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7920cf2def13649007ea976cd0d5f0138c64d478343f0fcbbe677b953e7bfab6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.727476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bf997fc-2293-4fe5-add8-05988b4a5139", "created": "2026-01-27T05:12:56.728324Z", "modified": "2026-01-27T05:12:56.728324Z", "relationship_type": "indicates", "source_ref": "indicator--552d4bcc-6116-40cc-8017-2cbd397e4b99", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72801fe8-9d4e-4c27-9f95-1ef35abcd917", "created": "2026-01-27T05:12:56.728503Z", "modified": "2026-01-27T05:12:56.728503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ae5b896cfa90e89bb97c94d9438cde9e9c107204ace3e58cdbde7dbadaa4562']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.728503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a969e1a5-13bb-4a63-8b4b-f1e384b068e5", "created": "2026-01-27T05:12:56.729348Z", "modified": "2026-01-27T05:12:56.729348Z", "relationship_type": "indicates", "source_ref": "indicator--72801fe8-9d4e-4c27-9f95-1ef35abcd917", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b30eb9c-bc44-43ef-938f-5ae9d52110ec", "created": "2026-01-27T05:12:56.72953Z", "modified": "2026-01-27T05:12:56.72953Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='093540e1fa3651b4caebcc13c64b979f2f75d893701294ce8041fdfe5d853afe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.72953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--246a0144-c6cf-49e8-a62a-3bc493b3a663", "created": "2026-01-27T05:12:56.730385Z", "modified": "2026-01-27T05:12:56.730385Z", "relationship_type": "indicates", "source_ref": "indicator--2b30eb9c-bc44-43ef-938f-5ae9d52110ec", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a5f5f9-4c58-4a15-86c4-300c826afccf", "created": "2026-01-27T05:12:56.730565Z", "modified": "2026-01-27T05:12:56.730565Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21c96e36d06f19c6b54b3d6d5d93e6c9b3da729e669675f08114419374c9323a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.730565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6496a2e4-da55-4bc7-9603-55c1d9e77f6d", "created": "2026-01-27T05:12:56.731408Z", "modified": "2026-01-27T05:12:56.731408Z", "relationship_type": "indicates", "source_ref": "indicator--48a5f5f9-4c58-4a15-86c4-300c826afccf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37972e01-5c3a-4216-bb34-970d008b6a0b", "created": "2026-01-27T05:12:56.731587Z", "modified": "2026-01-27T05:12:56.731587Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75251236c63561fc188aba70e59fe9cf0456308df52838b203e9acefa9e87479']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.731587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04643840-5791-4419-913c-9feef92f8f44", "created": "2026-01-27T05:12:56.732433Z", "modified": "2026-01-27T05:12:56.732433Z", "relationship_type": "indicates", "source_ref": "indicator--37972e01-5c3a-4216-bb34-970d008b6a0b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a57bbbf-56d4-4e3c-a68a-ec58f3a14e16", "created": "2026-01-27T05:12:56.732613Z", "modified": "2026-01-27T05:12:56.732613Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f35905ccdca42feb449faa89bb4243c8200a6f7712359b6792b2a89cf6ddc8a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.732613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a65cbf0c-93fa-4a39-8fef-117521e3282d", "created": "2026-01-27T05:12:56.733468Z", "modified": "2026-01-27T05:12:56.733468Z", "relationship_type": "indicates", "source_ref": "indicator--7a57bbbf-56d4-4e3c-a68a-ec58f3a14e16", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2381eadf-9650-4efa-b9ed-38991e97dd1c", "created": "2026-01-27T05:12:56.733647Z", "modified": "2026-01-27T05:12:56.733647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3000bff31d917fecef13878f29f4ac56d8fc7e8ef8b16c8d5bd9e96f1af7c114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.733647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--293ae67e-268f-4b7a-abe9-c681c6f4cc2b", "created": "2026-01-27T05:12:56.734619Z", "modified": "2026-01-27T05:12:56.734619Z", "relationship_type": "indicates", "source_ref": "indicator--2381eadf-9650-4efa-b9ed-38991e97dd1c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d854f4bd-d815-455e-a4f1-fd197aa1400f", "created": "2026-01-27T05:12:56.734822Z", "modified": "2026-01-27T05:12:56.734822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b43fbfc590bc460eeb03c31333e0a27325379126330eb1e655de73d40018811']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.734822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--983b9a65-ca78-4646-8117-327dbcfb363f", "created": "2026-01-27T05:12:56.735654Z", "modified": "2026-01-27T05:12:56.735654Z", "relationship_type": "indicates", "source_ref": "indicator--d854f4bd-d815-455e-a4f1-fd197aa1400f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07400ba6-87a9-49af-9512-c923360ff61a", "created": "2026-01-27T05:12:56.735857Z", "modified": "2026-01-27T05:12:56.735857Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b68a872aba9473dea818d371e5fdaf188e99a03066282b9b395e4902c7a7cc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.735857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c1c4863-f2ff-4b3b-b679-53ee3d4fb1df", "created": "2026-01-27T05:12:56.736687Z", "modified": "2026-01-27T05:12:56.736687Z", "relationship_type": "indicates", "source_ref": "indicator--07400ba6-87a9-49af-9512-c923360ff61a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ad74fd-9baf-4dcc-b8cf-4fabc2123524", "created": "2026-01-27T05:12:56.736886Z", "modified": "2026-01-27T05:12:56.736886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a2a06b7ae10ab12e2ab7c6e33a77fe589c181f71940a54beacb468cb5be3fde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.736886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70ef4805-4fa8-4f4a-8c2b-9c91d7cd327c", "created": "2026-01-27T05:12:56.737711Z", "modified": "2026-01-27T05:12:56.737711Z", "relationship_type": "indicates", "source_ref": "indicator--29ad74fd-9baf-4dcc-b8cf-4fabc2123524", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaf2b2e-6c6f-4102-ba4b-f636f772bee5", "created": "2026-01-27T05:12:56.737908Z", "modified": "2026-01-27T05:12:56.737908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fdcd295d0e0d2b30a02eae4d04db09a60b1dc4b0d4d512739621bb1f052acf95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.737908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1b9a334-b86d-410e-9c3c-f380a6b5673a", "created": "2026-01-27T05:12:56.73873Z", "modified": "2026-01-27T05:12:56.73873Z", "relationship_type": "indicates", "source_ref": "indicator--ebaf2b2e-6c6f-4102-ba4b-f636f772bee5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c8ebf4-0bb8-4120-8135-29539362b45a", "created": "2026-01-27T05:12:56.738928Z", "modified": "2026-01-27T05:12:56.738928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d53d1bd9ef8cd4cb96e0c7d3067c9dfc51a22fd69c6336a155d8c27e63082150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.738928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--810ae985-8ffa-4cb1-ada7-027dfc3aa847", "created": "2026-01-27T05:12:56.739773Z", "modified": "2026-01-27T05:12:56.739773Z", "relationship_type": "indicates", "source_ref": "indicator--a6c8ebf4-0bb8-4120-8135-29539362b45a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9213585d-97d0-49ce-9b1c-d78aa2f70640", "created": "2026-01-27T05:12:56.739959Z", "modified": "2026-01-27T05:12:56.739959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff33b8329da21c7ed76e4f4bc85325cecbb9f8055471fb2493c26b4d6b4a4a7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.739959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3096374f-c5fd-4704-a933-203585474586", "created": "2026-01-27T05:12:56.740798Z", "modified": "2026-01-27T05:12:56.740798Z", "relationship_type": "indicates", "source_ref": "indicator--9213585d-97d0-49ce-9b1c-d78aa2f70640", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91ad2f3-db45-4a04-9df4-0ba1ff38c4a3", "created": "2026-01-27T05:12:56.740979Z", "modified": "2026-01-27T05:12:56.740979Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='68def8d1aed44c7003b547fe26f1e87602bdc033f25cd6a98ce05e2f14218c13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.740979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1daac7e-43ff-4e19-b57b-1ba8487e5253", "created": "2026-01-27T05:12:56.741811Z", "modified": "2026-01-27T05:12:56.741811Z", "relationship_type": "indicates", "source_ref": "indicator--e91ad2f3-db45-4a04-9df4-0ba1ff38c4a3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f1ea8e-d470-4000-8b73-39c2d37e7794", "created": "2026-01-27T05:12:56.741992Z", "modified": "2026-01-27T05:12:56.741992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f8d2daf00a328692e488c91b1a67f9e9b1c4e144ed2aed59a98167877b314bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.741992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08887038-bfb8-484a-b8b2-4b54062dcadf", "created": "2026-01-27T05:12:56.742846Z", "modified": "2026-01-27T05:12:56.742846Z", "relationship_type": "indicates", "source_ref": "indicator--29f1ea8e-d470-4000-8b73-39c2d37e7794", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac698ae-210b-4070-a12c-100aae959c0c", "created": "2026-01-27T05:12:56.743026Z", "modified": "2026-01-27T05:12:56.743026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d61eb2c50a0b2a5a75ce34b2b000501fc05aa25868b5f380f4e7f24872c794b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.743026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--adc6e378-d084-45f5-9665-ff29622319b7", "created": "2026-01-27T05:12:56.744006Z", "modified": "2026-01-27T05:12:56.744006Z", "relationship_type": "indicates", "source_ref": "indicator--7ac698ae-210b-4070-a12c-100aae959c0c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e47e1b-10a7-4962-85a9-0c639a0a05e3", "created": "2026-01-27T05:12:56.744188Z", "modified": "2026-01-27T05:12:56.744188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c5d95ffe5860dce230e821645ff1fd5aa79723802fd2f8e2221801aa07d29a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.744188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a428563e-f2f4-433a-9cd4-ab313d532f91", "created": "2026-01-27T05:12:56.745034Z", "modified": "2026-01-27T05:12:56.745034Z", "relationship_type": "indicates", "source_ref": "indicator--b0e47e1b-10a7-4962-85a9-0c639a0a05e3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0642c5-8ad0-4d59-be6c-0987d54b342c", "created": "2026-01-27T05:12:56.745217Z", "modified": "2026-01-27T05:12:56.745217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae73961e7c7f8a52c7e644443c3b205bca373897b21585ba9ed0e065e5e29edd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.745217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--094b5601-6e61-49e9-8dbe-e714e9c34dd9", "created": "2026-01-27T05:12:56.746063Z", "modified": "2026-01-27T05:12:56.746063Z", "relationship_type": "indicates", "source_ref": "indicator--8a0642c5-8ad0-4d59-be6c-0987d54b342c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38bf679c-5dde-4eb2-bda2-270662f978bf", "created": "2026-01-27T05:12:56.746244Z", "modified": "2026-01-27T05:12:56.746244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc48f270d3e3f9f4fd027f93078329cbf6aa401acaa125eb22b50470178eae67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.746244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e600848-0b55-47c1-b26e-e8f944e46ab6", "created": "2026-01-27T05:12:56.747085Z", "modified": "2026-01-27T05:12:56.747085Z", "relationship_type": "indicates", "source_ref": "indicator--38bf679c-5dde-4eb2-bda2-270662f978bf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9540ec1-2dd2-48dc-bf8c-daef87de2be4", "created": "2026-01-27T05:12:56.747263Z", "modified": "2026-01-27T05:12:56.747263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c83a1e479806325df53a3076f31a2b368135501c76ddd2b00a013060dd170329']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.747263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5b5b920-baca-4549-83a6-5556ff0dbe1f", "created": "2026-01-27T05:12:56.748104Z", "modified": "2026-01-27T05:12:56.748104Z", "relationship_type": "indicates", "source_ref": "indicator--f9540ec1-2dd2-48dc-bf8c-daef87de2be4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8dbbdd-f21f-4c4b-abbd-fd7fa3b9684f", "created": "2026-01-27T05:12:56.748285Z", "modified": "2026-01-27T05:12:56.748285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e1820f3db9c3d2b457e8bcd3ab2e5ac4e633f90e80a48987d4096003a15489e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.748285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05bc4e66-5228-421c-a44f-be158452070c", "created": "2026-01-27T05:12:56.749138Z", "modified": "2026-01-27T05:12:56.749138Z", "relationship_type": "indicates", "source_ref": "indicator--1c8dbbdd-f21f-4c4b-abbd-fd7fa3b9684f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8642a3-d659-441a-a283-87fdd653289d", "created": "2026-01-27T05:12:56.749318Z", "modified": "2026-01-27T05:12:56.749318Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b99d650506eee927cc4ba14ed2a0892b2fdae27dc940c751e4dec47cdcf3a41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.749318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37a6c2cd-ac08-4198-a438-0cea92241a57", "created": "2026-01-27T05:12:56.750156Z", "modified": "2026-01-27T05:12:56.750156Z", "relationship_type": "indicates", "source_ref": "indicator--cb8642a3-d659-441a-a283-87fdd653289d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cdcb3e-ba54-48c2-b5a6-302accb75cb3", "created": "2026-01-27T05:12:56.750334Z", "modified": "2026-01-27T05:12:56.750334Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d545c204038fe6713adfce311daf1e2d7cd593a9de86b98a3219a018cac8527b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.750334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c653da3-71d4-4f87-973d-3df0e8d9fb6b", "created": "2026-01-27T05:12:56.751168Z", "modified": "2026-01-27T05:12:56.751168Z", "relationship_type": "indicates", "source_ref": "indicator--07cdcb3e-ba54-48c2-b5a6-302accb75cb3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfd0baa-6b0c-48a8-9eed-57fb109cf949", "created": "2026-01-27T05:12:56.751345Z", "modified": "2026-01-27T05:12:56.751345Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7e057a1d55e44db277968c5725fe20886578c60b68398c582f4a3694831b22a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.751345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fe76a9b-9ddf-4575-b4a9-608e78347962", "created": "2026-01-27T05:12:56.752185Z", "modified": "2026-01-27T05:12:56.752185Z", "relationship_type": "indicates", "source_ref": "indicator--abfd0baa-6b0c-48a8-9eed-57fb109cf949", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c16c95-8279-4219-b082-5f2b8dc76704", "created": "2026-01-27T05:12:56.752368Z", "modified": "2026-01-27T05:12:56.752368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='289a0d31a280a58570bc56f7799ceabd15ce6d9329ad79e7f8fde2635718a526']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.752368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1907ddfd-e328-42a5-ae97-dfbcd4a5a078", "created": "2026-01-27T05:12:56.753331Z", "modified": "2026-01-27T05:12:56.753331Z", "relationship_type": "indicates", "source_ref": "indicator--41c16c95-8279-4219-b082-5f2b8dc76704", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6ca8e7-c3f6-4e42-9108-456a1f3f5615", "created": "2026-01-27T05:12:56.753512Z", "modified": "2026-01-27T05:12:56.753512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b6f6b332f06922acdff5fa68b9b0a86fe659a6b8e38e5427b90ff4bce516322']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.753512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5902f8f2-ff41-467c-b59a-502834b6dcc5", "created": "2026-01-27T05:12:56.75435Z", "modified": "2026-01-27T05:12:56.75435Z", "relationship_type": "indicates", "source_ref": "indicator--6e6ca8e7-c3f6-4e42-9108-456a1f3f5615", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f0bb7a-18c0-44ba-944b-a2d1d48f587b", "created": "2026-01-27T05:12:56.75453Z", "modified": "2026-01-27T05:12:56.75453Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.75453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1300203-2183-47d7-955d-208792a5b785", "created": "2026-01-27T05:12:56.755373Z", "modified": "2026-01-27T05:12:56.755373Z", "relationship_type": "indicates", "source_ref": "indicator--a3f0bb7a-18c0-44ba-944b-a2d1d48f587b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987bd0ac-82cd-4c6a-b334-f8b8e43286e4", "created": "2026-01-27T05:12:56.755553Z", "modified": "2026-01-27T05:12:56.755553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3218f9b8c8324539526a7a3dc17a104ef3f61896513980aad6d760151d98b788']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.755553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b65dcf78-464e-4a8c-b462-989322f57448", "created": "2026-01-27T05:12:56.756387Z", "modified": "2026-01-27T05:12:56.756387Z", "relationship_type": "indicates", "source_ref": "indicator--987bd0ac-82cd-4c6a-b334-f8b8e43286e4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7126450a-e6e8-4b1f-819c-8331b7a500a7", "created": "2026-01-27T05:12:56.756566Z", "modified": "2026-01-27T05:12:56.756566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f28f2b3798527e8bede0aefe8764ce642668cac992445ca3db936c89666b45c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.756566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6da6a831-4dea-47c7-924d-cb81146acfb6", "created": "2026-01-27T05:12:56.757424Z", "modified": "2026-01-27T05:12:56.757424Z", "relationship_type": "indicates", "source_ref": "indicator--7126450a-e6e8-4b1f-819c-8331b7a500a7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf85dd0-f6a8-44ac-86b1-48038d7581f7", "created": "2026-01-27T05:12:56.757602Z", "modified": "2026-01-27T05:12:56.757602Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7285d57030e016bc0f4b428cb398a07b7578cc707227718eaf94abb5ac182464']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.757602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4053e1a7-8fb0-4f43-b14c-2792a57cd745", "created": "2026-01-27T05:12:56.758438Z", "modified": "2026-01-27T05:12:56.758438Z", "relationship_type": "indicates", "source_ref": "indicator--ccf85dd0-f6a8-44ac-86b1-48038d7581f7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d0dbae-d5c6-4579-8689-b725ae213ccf", "created": "2026-01-27T05:12:56.758616Z", "modified": "2026-01-27T05:12:56.758616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7022452a5b8d81e20c5f0adfbf11d01afaa2eada7c55647aa432c9907b066e41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.758616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f54f8b3-95a7-435a-9c04-9c0021b0ba30", "created": "2026-01-27T05:12:56.759452Z", "modified": "2026-01-27T05:12:56.759452Z", "relationship_type": "indicates", "source_ref": "indicator--42d0dbae-d5c6-4579-8689-b725ae213ccf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c99080b-b84d-4ae8-9753-8b732dd40152", "created": "2026-01-27T05:12:56.75963Z", "modified": "2026-01-27T05:12:56.75963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5e808891660f8ee5f9da69c5a1f31d0da037aedfdb8d1ff746d005092fbb9e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.75963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2429fae0-6fec-4fa1-8692-f9ae7bb63751", "created": "2026-01-27T05:12:56.760464Z", "modified": "2026-01-27T05:12:56.760464Z", "relationship_type": "indicates", "source_ref": "indicator--0c99080b-b84d-4ae8-9753-8b732dd40152", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f546e3a7-8f7f-4800-bf28-a01d95d0978f", "created": "2026-01-27T05:12:56.76064Z", "modified": "2026-01-27T05:12:56.76064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='159657f7a3bc53ef7617e67666f1e0b6394757fff9d86aa8026decce9786ae29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.76064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be754a05-9a9d-4a1e-9080-260dbb3e4924", "created": "2026-01-27T05:12:56.761474Z", "modified": "2026-01-27T05:12:56.761474Z", "relationship_type": "indicates", "source_ref": "indicator--f546e3a7-8f7f-4800-bf28-a01d95d0978f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d72f27-eb45-4d17-b26e-0e94b8ffd77f", "created": "2026-01-27T05:12:56.76165Z", "modified": "2026-01-27T05:12:56.76165Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='384a6d337ff3615143d5915207051b13603e843d25508a62993bb889321bda1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.76165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--945a1979-cfd7-47e4-a855-673bc01fa486", "created": "2026-01-27T05:12:56.76261Z", "modified": "2026-01-27T05:12:56.76261Z", "relationship_type": "indicates", "source_ref": "indicator--95d72f27-eb45-4d17-b26e-0e94b8ffd77f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84860e5a-faee-4e39-b50d-ab9b9b428360", "created": "2026-01-27T05:12:56.762805Z", "modified": "2026-01-27T05:12:56.762805Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f7499cfb98f4275fd88d3734602988742ff08be674ec60e79457c443b075f92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.762805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be68781a-72c6-4c1d-b82d-55bb70a16566", "created": "2026-01-27T05:12:56.763632Z", "modified": "2026-01-27T05:12:56.763632Z", "relationship_type": "indicates", "source_ref": "indicator--84860e5a-faee-4e39-b50d-ab9b9b428360", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60be02ef-06a9-4f2b-88ce-0257695aa359", "created": "2026-01-27T05:12:56.763829Z", "modified": "2026-01-27T05:12:56.763829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b8dab7393d0d157147fe5db1968b567d5a0ec0ccd817ce1095971fef8915264']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.763829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a93b7c0d-388d-4ed2-adf7-95644a4a42c2", "created": "2026-01-27T05:12:56.76467Z", "modified": "2026-01-27T05:12:56.76467Z", "relationship_type": "indicates", "source_ref": "indicator--60be02ef-06a9-4f2b-88ce-0257695aa359", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be145fa6-adfc-4aae-b9c3-d51fe304cf7b", "created": "2026-01-27T05:12:56.764866Z", "modified": "2026-01-27T05:12:56.764866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1819f93c6077a88660fc67bbe5c8c06ded25e066cc18f50881ed776c6c4b243f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.764866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf2609f5-aa98-481c-bda6-d69a09e5bf13", "created": "2026-01-27T05:12:56.765687Z", "modified": "2026-01-27T05:12:56.765687Z", "relationship_type": "indicates", "source_ref": "indicator--be145fa6-adfc-4aae-b9c3-d51fe304cf7b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512ac8b7-ee8d-425e-8ff8-2ea595effa52", "created": "2026-01-27T05:12:56.765881Z", "modified": "2026-01-27T05:12:56.765881Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15e64a23712dc808ee82d6c25c01834a7164577a57e2014d0ebecdea41d768ef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.765881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fd5a9d1-9699-4ead-9369-14e2bc918b64", "created": "2026-01-27T05:12:56.766701Z", "modified": "2026-01-27T05:12:56.766701Z", "relationship_type": "indicates", "source_ref": "indicator--512ac8b7-ee8d-425e-8ff8-2ea595effa52", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6430cf-ef9b-4c1a-9a7c-a5904de8cba8", "created": "2026-01-27T05:12:56.766896Z", "modified": "2026-01-27T05:12:56.766896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13bf4090f924bcf7d795735a61003d4e7325bb9deb9fd9e7011e260f0683eba2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.766896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44c2db81-27cc-4834-a7d3-1e48c1e96521", "created": "2026-01-27T05:12:56.767715Z", "modified": "2026-01-27T05:12:56.767715Z", "relationship_type": "indicates", "source_ref": "indicator--be6430cf-ef9b-4c1a-9a7c-a5904de8cba8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df13dbed-f721-4822-93ca-265f8efeda45", "created": "2026-01-27T05:12:56.767914Z", "modified": "2026-01-27T05:12:56.767914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5eff9ed897b61e5a24251a3712d3cb65cecffbf9868f325fda965efe94f1f819']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.767914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd107f75-676b-443f-8fef-e17fcb2b496f", "created": "2026-01-27T05:12:56.768742Z", "modified": "2026-01-27T05:12:56.768742Z", "relationship_type": "indicates", "source_ref": "indicator--df13dbed-f721-4822-93ca-265f8efeda45", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964e60ea-07cd-4481-9984-f10c444f7a1c", "created": "2026-01-27T05:12:56.768942Z", "modified": "2026-01-27T05:12:56.768942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c26855167ec5089bc21eb6ec582706bfd822ebecb9d423141740cd15ae64f83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.768942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22e4401f-9623-462e-b64c-ae43757e68de", "created": "2026-01-27T05:12:56.769773Z", "modified": "2026-01-27T05:12:56.769773Z", "relationship_type": "indicates", "source_ref": "indicator--964e60ea-07cd-4481-9984-f10c444f7a1c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2982eba-352b-4b01-830d-3dbe0de5909f", "created": "2026-01-27T05:12:56.769955Z", "modified": "2026-01-27T05:12:56.769955Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='620525c4d845f6962177b35c8fa64349f4a4e7f97969cf48983a446ffee98fcf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.769955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4cae512-f1fb-48a2-9e8e-f6ee610fbc4e", "created": "2026-01-27T05:12:56.770919Z", "modified": "2026-01-27T05:12:56.770919Z", "relationship_type": "indicates", "source_ref": "indicator--b2982eba-352b-4b01-830d-3dbe0de5909f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5df7910-28e3-4243-bd47-c4154072ea36", "created": "2026-01-27T05:12:56.771102Z", "modified": "2026-01-27T05:12:56.771102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bdddefe4af4d73d1fc6766214e57ca0e1fe329a1839530153b392129d337309a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.771102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71dcd9b7-c5f1-4d31-ae59-6da4082ef649", "created": "2026-01-27T05:12:56.771947Z", "modified": "2026-01-27T05:12:56.771947Z", "relationship_type": "indicates", "source_ref": "indicator--c5df7910-28e3-4243-bd47-c4154072ea36", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b407d2-9266-4cd8-ac3a-e2d7251afc36", "created": "2026-01-27T05:12:56.772128Z", "modified": "2026-01-27T05:12:56.772128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81b145188bfb4b45c1127a4b3168e1d71cb3382318b671ca6247263bc9311e2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.772128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8299a921-2e7d-4ff1-ae7e-8567197103d7", "created": "2026-01-27T05:12:56.772986Z", "modified": "2026-01-27T05:12:56.772986Z", "relationship_type": "indicates", "source_ref": "indicator--14b407d2-9266-4cd8-ac3a-e2d7251afc36", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cbdd14-0798-4ed4-8047-bca40713a751", "created": "2026-01-27T05:12:56.773167Z", "modified": "2026-01-27T05:12:56.773167Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac1dec50ad9ca74715a7bd3802116ed7593e5fd6b4f5963d84655364e8efb2ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.773167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a779d419-3b42-40ac-8bc3-c1e3c882acaf", "created": "2026-01-27T05:12:56.774006Z", "modified": "2026-01-27T05:12:56.774006Z", "relationship_type": "indicates", "source_ref": "indicator--45cbdd14-0798-4ed4-8047-bca40713a751", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7165186b-a7cd-4edb-94a0-03f07313fa59", "created": "2026-01-27T05:12:56.774185Z", "modified": "2026-01-27T05:12:56.774185Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2da71f32dc715accdd317c86497700b4b23c1c647964b6b6c9d0c57652a233ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.774185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c858f3d3-e2bc-452b-a118-96408ab59f60", "created": "2026-01-27T05:12:56.775061Z", "modified": "2026-01-27T05:12:56.775061Z", "relationship_type": "indicates", "source_ref": "indicator--7165186b-a7cd-4edb-94a0-03f07313fa59", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45236711-f92e-4070-b7cd-9d3f1ddbb48c", "created": "2026-01-27T05:12:56.775243Z", "modified": "2026-01-27T05:12:56.775243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd8e6c537d8ddddea5f8f079efe255f5859b422fad0926c9eb4f3c04276d90ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.775243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73e84ee4-b6a3-47d8-b36f-a844da97bc54", "created": "2026-01-27T05:12:56.776079Z", "modified": "2026-01-27T05:12:56.776079Z", "relationship_type": "indicates", "source_ref": "indicator--45236711-f92e-4070-b7cd-9d3f1ddbb48c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003a3658-43b3-4a7b-9bc6-a5fe1494c91d", "created": "2026-01-27T05:12:56.776255Z", "modified": "2026-01-27T05:12:56.776255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83e798a1e85e5f624edfce5ac714e621b5444ce60334ac99f7fd61d801bbac2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.776255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84d6333d-3669-4439-9c8b-171cf1efb9bc", "created": "2026-01-27T05:12:56.777095Z", "modified": "2026-01-27T05:12:56.777095Z", "relationship_type": "indicates", "source_ref": "indicator--003a3658-43b3-4a7b-9bc6-a5fe1494c91d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8cd0a32-652b-40d9-889f-7afc3ba6e3cd", "created": "2026-01-27T05:12:56.777273Z", "modified": "2026-01-27T05:12:56.777273Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b115d7b29c53bd196c786cf84d56e346e0436c825d9daef8023c25b53c3eca3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.777273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfc64099-699e-4654-84a3-b97d3f5dab5d", "created": "2026-01-27T05:12:56.778111Z", "modified": "2026-01-27T05:12:56.778111Z", "relationship_type": "indicates", "source_ref": "indicator--f8cd0a32-652b-40d9-889f-7afc3ba6e3cd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78275571-d699-4ebb-9926-e81ce0b161e1", "created": "2026-01-27T05:12:56.77829Z", "modified": "2026-01-27T05:12:56.77829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf1046207cb039bef91f8a2db3986cc02a21197e7d72fd48e017103676affd0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.77829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2144a2f2-fa0c-43f7-9ca0-1b675abb87c8", "created": "2026-01-27T05:12:56.779129Z", "modified": "2026-01-27T05:12:56.779129Z", "relationship_type": "indicates", "source_ref": "indicator--78275571-d699-4ebb-9926-e81ce0b161e1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2ba34a-2b33-4a5e-acf7-efef3d88f564", "created": "2026-01-27T05:12:56.779307Z", "modified": "2026-01-27T05:12:56.779307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='226ca797966b993320d76d9cb010f83bad574bed4f47ebe75340a7232111cbd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.779307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96bc4ac3-a633-488a-8e8e-1c56df50d91b", "created": "2026-01-27T05:12:56.78027Z", "modified": "2026-01-27T05:12:56.78027Z", "relationship_type": "indicates", "source_ref": "indicator--0d2ba34a-2b33-4a5e-acf7-efef3d88f564", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4dc92e-5140-4b8b-ab81-ad1ea6bbeff6", "created": "2026-01-27T05:12:56.780451Z", "modified": "2026-01-27T05:12:56.780451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bbbaff31596d3634439f7a0f29d82d120e482aa0ddc5563835c2a38a22f243d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.780451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a19b7845-ce9c-4f8f-ba55-b1a448a3932c", "created": "2026-01-27T05:12:56.781305Z", "modified": "2026-01-27T05:12:56.781305Z", "relationship_type": "indicates", "source_ref": "indicator--7a4dc92e-5140-4b8b-ab81-ad1ea6bbeff6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1075bb0d-b03d-4cc6-9866-7533e64ff6f4", "created": "2026-01-27T05:12:56.781485Z", "modified": "2026-01-27T05:12:56.781485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36e4151a751d3d244a691b1cdf84825cf933397100a6e174b26fd6ef56cc80ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.781485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88056725-afc5-4cfd-a643-fd92b18427dc", "created": "2026-01-27T05:12:56.782326Z", "modified": "2026-01-27T05:12:56.782326Z", "relationship_type": "indicates", "source_ref": "indicator--1075bb0d-b03d-4cc6-9866-7533e64ff6f4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610c1249-a904-4a6f-aeaf-d07d76090283", "created": "2026-01-27T05:12:56.782509Z", "modified": "2026-01-27T05:12:56.782509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cfa8df61c08325b2e1e6efe652b69ccea19218972245787ea51ce1b1581d120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.782509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01104059-cbbd-4eb1-a9da-43bbe59fdbda", "created": "2026-01-27T05:12:56.783354Z", "modified": "2026-01-27T05:12:56.783354Z", "relationship_type": "indicates", "source_ref": "indicator--610c1249-a904-4a6f-aeaf-d07d76090283", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5930b354-2cd8-42e7-814e-4d37be423a99", "created": "2026-01-27T05:12:56.783532Z", "modified": "2026-01-27T05:12:56.783532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a97d98442099c39e9b6722c42ce864834eedd03fdfdd877a5387b853a58ba68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.783532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--007694bd-6db0-44b6-835a-ad8365bdb440", "created": "2026-01-27T05:12:56.784372Z", "modified": "2026-01-27T05:12:56.784372Z", "relationship_type": "indicates", "source_ref": "indicator--5930b354-2cd8-42e7-814e-4d37be423a99", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807f620e-e9bc-45fa-8ee3-a2a081352e0f", "created": "2026-01-27T05:12:56.784552Z", "modified": "2026-01-27T05:12:56.784552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f054a0578c2af378347834e07df3a17c2f33bab44e42fa0e2232edda5a183ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.784552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc303bc3-4a57-4843-b197-e9d7b0581d9e", "created": "2026-01-27T05:12:56.785388Z", "modified": "2026-01-27T05:12:56.785388Z", "relationship_type": "indicates", "source_ref": "indicator--807f620e-e9bc-45fa-8ee3-a2a081352e0f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bd6fa3-3af5-4200-ab58-615017999ea9", "created": "2026-01-27T05:12:56.785567Z", "modified": "2026-01-27T05:12:56.785567Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8834166aaf6bafa764e046c085ad42656a3123b33eaece4d0051103d82c5b28d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.785567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--903aac9f-2175-4f58-be9b-0ead506620a3", "created": "2026-01-27T05:12:56.786414Z", "modified": "2026-01-27T05:12:56.786414Z", "relationship_type": "indicates", "source_ref": "indicator--44bd6fa3-3af5-4200-ab58-615017999ea9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30be4062-5960-4d1e-8dd1-8ef08b4f98a9", "created": "2026-01-27T05:12:56.786593Z", "modified": "2026-01-27T05:12:56.786593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9fa2573ee87a60548c69daf0637f1c3f6ab838c703242c0d639e8153b535c0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.786593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd9c9472-e3e3-4091-bf58-87fde9e8ca8e", "created": "2026-01-27T05:12:56.787433Z", "modified": "2026-01-27T05:12:56.787433Z", "relationship_type": "indicates", "source_ref": "indicator--30be4062-5960-4d1e-8dd1-8ef08b4f98a9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c58c0b-07e5-4050-a40b-52bbe7a263fb", "created": "2026-01-27T05:12:56.787612Z", "modified": "2026-01-27T05:12:56.787612Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='16be514b6039026f2bf1b0e6ad8e69b6a0cb070946e94d8568eebc53302c9394']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.787612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de842e97-297c-4ee1-8bc8-cf0d7e949c52", "created": "2026-01-27T05:12:56.788449Z", "modified": "2026-01-27T05:12:56.788449Z", "relationship_type": "indicates", "source_ref": "indicator--f1c58c0b-07e5-4050-a40b-52bbe7a263fb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01541983-9364-45a8-8f08-621d120bb350", "created": "2026-01-27T05:12:56.788627Z", "modified": "2026-01-27T05:12:56.788627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3f972d1d64d5cecb2acf637d3ff89a60d9ddfcb27f47ce2dff565e64a9af83f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.788627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b53b82b-fef9-45f8-bbe9-4591df6e0e54", "created": "2026-01-27T05:12:56.789585Z", "modified": "2026-01-27T05:12:56.789585Z", "relationship_type": "indicates", "source_ref": "indicator--01541983-9364-45a8-8f08-621d120bb350", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b74cee-6be2-4d23-bc7f-7cad23e85174", "created": "2026-01-27T05:12:56.789779Z", "modified": "2026-01-27T05:12:56.789779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d805511be69a2d6f4639d188308866cca5391dd5719d4ec9318ff956465ec4d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.789779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--165141d0-0113-424a-ad9c-ddb8f7bdd477", "created": "2026-01-27T05:12:56.790608Z", "modified": "2026-01-27T05:12:56.790608Z", "relationship_type": "indicates", "source_ref": "indicator--78b74cee-6be2-4d23-bc7f-7cad23e85174", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac654a00-54e1-4865-adc1-6d0c276485df", "created": "2026-01-27T05:12:56.790804Z", "modified": "2026-01-27T05:12:56.790804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='452a7c12bf550daae38c836b769dc252778b3bb9a1a66bc46a9af2bfed910b24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.790804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2faeeef4-25e9-4575-964b-ffcf58557124", "created": "2026-01-27T05:12:56.791626Z", "modified": "2026-01-27T05:12:56.791626Z", "relationship_type": "indicates", "source_ref": "indicator--ac654a00-54e1-4865-adc1-6d0c276485df", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ac334a-73c1-48cf-80c9-12cf8470775a", "created": "2026-01-27T05:12:56.79182Z", "modified": "2026-01-27T05:12:56.79182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdb590bef92cfb3049c7d4694b10f51d0dfaca2f0a323210ad9593a59c41eb7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.79182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b96a3f3c-ade7-485c-aead-dc6c6fdcb0a2", "created": "2026-01-27T05:12:56.792647Z", "modified": "2026-01-27T05:12:56.792647Z", "relationship_type": "indicates", "source_ref": "indicator--68ac334a-73c1-48cf-80c9-12cf8470775a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13fbb2c-c2ac-42d2-8d15-91b721313cf4", "created": "2026-01-27T05:12:56.792843Z", "modified": "2026-01-27T05:12:56.792843Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a28aa0ce129f5f835712c80b3c543a235e0a106cb28913a8aec67968bf2c0bb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.792843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2449196-72eb-4055-aa12-2dfda2d7ec8a", "created": "2026-01-27T05:12:56.793742Z", "modified": "2026-01-27T05:12:56.793742Z", "relationship_type": "indicates", "source_ref": "indicator--a13fbb2c-c2ac-42d2-8d15-91b721313cf4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa340ba-9192-454c-8bba-ba64ee292487", "created": "2026-01-27T05:12:56.793959Z", "modified": "2026-01-27T05:12:56.793959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='238f7954871661c1647e0b9f7946b3bfcd058c0dd3678d80afa7ff050442f279']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.793959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--901bc1bd-dc03-4046-8b58-edc441c8021b", "created": "2026-01-27T05:12:56.794803Z", "modified": "2026-01-27T05:12:56.794803Z", "relationship_type": "indicates", "source_ref": "indicator--6fa340ba-9192-454c-8bba-ba64ee292487", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dda283b-821a-4b8b-ba75-ce4db591f3e7", "created": "2026-01-27T05:12:56.794984Z", "modified": "2026-01-27T05:12:56.794984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7f1778ccb8f4640b7c511b2c065b3a610713ebad410385714ac7a6ebaff5e5f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.794984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dff4d058-2a7e-4d78-8712-37817ffd86f4", "created": "2026-01-27T05:12:56.795819Z", "modified": "2026-01-27T05:12:56.795819Z", "relationship_type": "indicates", "source_ref": "indicator--3dda283b-821a-4b8b-ba75-ce4db591f3e7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d73460f-9a59-4ef0-b3e0-587ac4e2ee41", "created": "2026-01-27T05:12:56.795999Z", "modified": "2026-01-27T05:12:56.795999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e27be339a91a2d7fd28c18cd41ce53e701eb1adb7cb8aea5947b6733e3bbc425']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.795999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c25d844-b564-4973-af49-d408c003e05b", "created": "2026-01-27T05:12:56.796838Z", "modified": "2026-01-27T05:12:56.796838Z", "relationship_type": "indicates", "source_ref": "indicator--6d73460f-9a59-4ef0-b3e0-587ac4e2ee41", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103c8802-4b8e-4034-89ed-4dbe006a7725", "created": "2026-01-27T05:12:56.797016Z", "modified": "2026-01-27T05:12:56.797016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fdcff3090d84ae5b4bb8ff94704f7196cb3269bc545f6c1e245653c87922d8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.797016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c65f77f4-015c-4446-a418-8971fe0676cf", "created": "2026-01-27T05:12:56.797968Z", "modified": "2026-01-27T05:12:56.797968Z", "relationship_type": "indicates", "source_ref": "indicator--103c8802-4b8e-4034-89ed-4dbe006a7725", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d17cbd56-d1fb-428b-a218-2e2d96f01f9b", "created": "2026-01-27T05:12:56.79815Z", "modified": "2026-01-27T05:12:56.79815Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0320bbb6b562fdfd3667816c902447e2e0d8a7074061f0c87036ebdfb7eb013']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.79815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4efc8cdb-ddd6-4e34-8429-9277b949f362", "created": "2026-01-27T05:12:56.799Z", "modified": "2026-01-27T05:12:56.799Z", "relationship_type": "indicates", "source_ref": "indicator--d17cbd56-d1fb-428b-a218-2e2d96f01f9b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7b433e-c329-49db-aa5b-8504d5225441", "created": "2026-01-27T05:12:56.79918Z", "modified": "2026-01-27T05:12:56.79918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17107b3e4f8bee149c3bf74e1100e7c2a6cd04920479dcb6147c5703375cbb4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.79918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4aeb1fee-c36e-482e-816b-79008d33412e", "created": "2026-01-27T05:12:56.800026Z", "modified": "2026-01-27T05:12:56.800026Z", "relationship_type": "indicates", "source_ref": "indicator--2d7b433e-c329-49db-aa5b-8504d5225441", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de84035b-dc9d-4d04-bc56-2e53ee5df008", "created": "2026-01-27T05:12:56.800207Z", "modified": "2026-01-27T05:12:56.800207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='862028c4a32ab57bcf0568f3fde03b5c2640a53a9deb524f8229a16b135e6e37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.800207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8fb9e63-3506-4cd2-99ad-ba68f8c98362", "created": "2026-01-27T05:12:56.801066Z", "modified": "2026-01-27T05:12:56.801066Z", "relationship_type": "indicates", "source_ref": "indicator--de84035b-dc9d-4d04-bc56-2e53ee5df008", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb033843-795f-403a-993b-5e8daad99ad1", "created": "2026-01-27T05:12:56.801249Z", "modified": "2026-01-27T05:12:56.801249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d00d828ce3408b0ef59b17260c7e07efa4299faa1230dc6dd0bde0d3e77f4770']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.801249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a8724e6-7998-4de9-9470-93e87ae6c575", "created": "2026-01-27T05:12:56.802093Z", "modified": "2026-01-27T05:12:56.802093Z", "relationship_type": "indicates", "source_ref": "indicator--fb033843-795f-403a-993b-5e8daad99ad1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16162f8a-9067-44a2-b3f6-f5549ee28d13", "created": "2026-01-27T05:12:56.802274Z", "modified": "2026-01-27T05:12:56.802274Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d9aef770817ba359d60e8d73f95bea257c184f8d5e380161afda02304db25dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.802274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fd3b0b2-fe3b-42c4-b83c-a2a01392e4ed", "created": "2026-01-27T05:12:56.803125Z", "modified": "2026-01-27T05:12:56.803125Z", "relationship_type": "indicates", "source_ref": "indicator--16162f8a-9067-44a2-b3f6-f5549ee28d13", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7274ffb1-bb65-42e4-9267-55f59ad868a0", "created": "2026-01-27T05:12:56.803306Z", "modified": "2026-01-27T05:12:56.803306Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33a04fc3ebcc75961d82661318e42af5ef41a74f4cddc9b52ada07e6efe58668']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.803306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f0d1076-8408-4b70-9abf-fbc656cb1ee5", "created": "2026-01-27T05:12:56.804148Z", "modified": "2026-01-27T05:12:56.804148Z", "relationship_type": "indicates", "source_ref": "indicator--7274ffb1-bb65-42e4-9267-55f59ad868a0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67241726-6487-40c7-9614-8df9537fea77", "created": "2026-01-27T05:12:56.804326Z", "modified": "2026-01-27T05:12:56.804326Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7eae64715959efaf5d1b8766803b73c71dee9a9f66bd3bf0bf4c8a01644a2c04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.804326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1b395e1-4ccd-43f6-8ace-bca507525d8f", "created": "2026-01-27T05:12:56.805166Z", "modified": "2026-01-27T05:12:56.805166Z", "relationship_type": "indicates", "source_ref": "indicator--67241726-6487-40c7-9614-8df9537fea77", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88329a76-686e-48d5-ae3d-d5d6e9baf10d", "created": "2026-01-27T05:12:56.805346Z", "modified": "2026-01-27T05:12:56.805346Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d13d2f985603c3f5fa3ac266e6005b52c715e2a2ac70354227f123a1bdcb7d95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.805346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--354f56f5-7418-40c8-b3d1-7d4e15f231f5", "created": "2026-01-27T05:12:56.806198Z", "modified": "2026-01-27T05:12:56.806198Z", "relationship_type": "indicates", "source_ref": "indicator--88329a76-686e-48d5-ae3d-d5d6e9baf10d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9730a5bf-e2b5-4244-bad8-4f7537e11081", "created": "2026-01-27T05:12:56.806379Z", "modified": "2026-01-27T05:12:56.806379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='653d4cdfc8679fd00c6b35666f72393c0b32aa458f707b13276086619b587a67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.806379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eadfd269-8dc0-4a2f-a5b5-3c7b364cd6b0", "created": "2026-01-27T05:12:56.807348Z", "modified": "2026-01-27T05:12:56.807348Z", "relationship_type": "indicates", "source_ref": "indicator--9730a5bf-e2b5-4244-bad8-4f7537e11081", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a637db3c-aa58-4ad0-86c4-aed38b5af4af", "created": "2026-01-27T05:12:56.80753Z", "modified": "2026-01-27T05:12:56.80753Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d181f0c995296087a80e4b01b37d032d497e8d613c14d3db2ec431ff744b077a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.80753Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--051480e9-8464-49a8-b3c5-b82a7094fdb5", "created": "2026-01-27T05:12:56.808366Z", "modified": "2026-01-27T05:12:56.808366Z", "relationship_type": "indicates", "source_ref": "indicator--a637db3c-aa58-4ad0-86c4-aed38b5af4af", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523478d1-da22-45fc-a37a-01fcf3f5a004", "created": "2026-01-27T05:12:56.808547Z", "modified": "2026-01-27T05:12:56.808547Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ac778fb2aa09699f9699a9ad27c60e6f8b364fe37fd538eea737ad11b357cc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.808547Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dae965e-3000-4f58-beb8-04e8dad068a2", "created": "2026-01-27T05:12:56.809384Z", "modified": "2026-01-27T05:12:56.809384Z", "relationship_type": "indicates", "source_ref": "indicator--523478d1-da22-45fc-a37a-01fcf3f5a004", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950109da-feb8-4dab-815b-256d8c5a0ad2", "created": "2026-01-27T05:12:56.809563Z", "modified": "2026-01-27T05:12:56.809563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb00c170b6303a22a7a14585762a236bc7735f7f40804fbb80d96c0494f58226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.809563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57c914c6-b527-4b5b-b0a8-f55e8c8823ed", "created": "2026-01-27T05:12:56.8104Z", "modified": "2026-01-27T05:12:56.8104Z", "relationship_type": "indicates", "source_ref": "indicator--950109da-feb8-4dab-815b-256d8c5a0ad2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40433ef6-05e2-4c61-8a30-3502cd91f9c5", "created": "2026-01-27T05:12:56.810579Z", "modified": "2026-01-27T05:12:56.810579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0630edcf1dfd83ee9cef3bc4995c938967a920a130bcbd31aa6d31371374c644']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.810579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59b28ab0-7ea1-4693-9765-eb6ad2325761", "created": "2026-01-27T05:12:56.811414Z", "modified": "2026-01-27T05:12:56.811414Z", "relationship_type": "indicates", "source_ref": "indicator--40433ef6-05e2-4c61-8a30-3502cd91f9c5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b18428f-bb60-4b65-8b99-6577266cf503", "created": "2026-01-27T05:12:56.811594Z", "modified": "2026-01-27T05:12:56.811594Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0526b3b2640685d3210003f1dd39f6275636fd608550ed31026cdfd86de2285e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.811594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--473db560-fb15-46f0-b9a2-0b7aeda3695f", "created": "2026-01-27T05:12:56.812445Z", "modified": "2026-01-27T05:12:56.812445Z", "relationship_type": "indicates", "source_ref": "indicator--1b18428f-bb60-4b65-8b99-6577266cf503", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5629d0-a7c7-4f64-b52f-643fdaa2fa4a", "created": "2026-01-27T05:12:56.812621Z", "modified": "2026-01-27T05:12:56.812621Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9fe4ca74944e8f1375c8234a90dd1e7b0dd25b67b699983992eb80bceb9f7eab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.812621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6b58a1d-a083-4720-93bd-3a3976a52511", "created": "2026-01-27T05:12:56.813454Z", "modified": "2026-01-27T05:12:56.813454Z", "relationship_type": "indicates", "source_ref": "indicator--8d5629d0-a7c7-4f64-b52f-643fdaa2fa4a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb87f88-2a18-4557-acb6-4b11f6aa5a26", "created": "2026-01-27T05:12:56.813629Z", "modified": "2026-01-27T05:12:56.813629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb27d5ca159d19745d324e607da69c3c303b925a74544dd25965f02e19bbab42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.813629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6883b938-35a7-4169-a249-3a0bf50b5a61", "created": "2026-01-27T05:12:56.814465Z", "modified": "2026-01-27T05:12:56.814465Z", "relationship_type": "indicates", "source_ref": "indicator--0cb87f88-2a18-4557-acb6-4b11f6aa5a26", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9243295f-dc2c-4645-97f2-5e0e9205ac59", "created": "2026-01-27T05:12:56.814642Z", "modified": "2026-01-27T05:12:56.814642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='999cb8017a63d60b185a3a47d53aed69babab16bcfde1134fb7dfb90156173f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.814642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80cd4376-0989-40e9-94b9-ce9a7e7f468f", "created": "2026-01-27T05:12:56.815479Z", "modified": "2026-01-27T05:12:56.815479Z", "relationship_type": "indicates", "source_ref": "indicator--9243295f-dc2c-4645-97f2-5e0e9205ac59", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1d5d4d-b4d5-41f9-8c6d-4e20ef8a5994", "created": "2026-01-27T05:12:56.815655Z", "modified": "2026-01-27T05:12:56.815655Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2c00377c1274460c894c901e4fa19aa28d7fcb65e01b7ef6f6b9d7c81ab27cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.815655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6cb0428-c163-4d63-a470-59de65b42672", "created": "2026-01-27T05:12:56.816614Z", "modified": "2026-01-27T05:12:56.816614Z", "relationship_type": "indicates", "source_ref": "indicator--da1d5d4d-b4d5-41f9-8c6d-4e20ef8a5994", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43bea116-9880-4ad2-ae2f-0b1106cfa41c", "created": "2026-01-27T05:12:56.816808Z", "modified": "2026-01-27T05:12:56.816808Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0adeef7e841a90164e64476de3a10a895be5a1694228fdc4ebf9a9a4307a8e3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.816808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48c1bc43-95e2-4472-8a3d-d21059b1a03d", "created": "2026-01-27T05:12:56.817629Z", "modified": "2026-01-27T05:12:56.817629Z", "relationship_type": "indicates", "source_ref": "indicator--43bea116-9880-4ad2-ae2f-0b1106cfa41c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c677fab-a55d-4025-a9de-67ec574b98fd", "created": "2026-01-27T05:12:56.817824Z", "modified": "2026-01-27T05:12:56.817824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01d9cb71acfa655cc910c98947bb194f2738618135868664def5c1e29594f6a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.817824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a368baae-e099-4858-b088-18a1b0a9b8fa", "created": "2026-01-27T05:12:56.818646Z", "modified": "2026-01-27T05:12:56.818646Z", "relationship_type": "indicates", "source_ref": "indicator--2c677fab-a55d-4025-a9de-67ec574b98fd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448b906c-6034-462e-9265-3c4604211f21", "created": "2026-01-27T05:12:56.818841Z", "modified": "2026-01-27T05:12:56.818841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99c231e24f06f3d8517dcc3bca2d91ec92caaf2d155a52e20b4110b6f0022408']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.818841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--911d4f2d-6b53-4dbf-9769-6ccc3915740c", "created": "2026-01-27T05:12:56.819667Z", "modified": "2026-01-27T05:12:56.819667Z", "relationship_type": "indicates", "source_ref": "indicator--448b906c-6034-462e-9265-3c4604211f21", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6d50a1-45ca-49e3-965b-5ceefcb0ec7f", "created": "2026-01-27T05:12:56.819861Z", "modified": "2026-01-27T05:12:56.819861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c86160ee6203c8c54e535381404489b626ed96513526b7a414466eabeeb59f26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.819861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--232b7294-3aa1-4530-a640-1fc16daf44d7", "created": "2026-01-27T05:12:56.820692Z", "modified": "2026-01-27T05:12:56.820692Z", "relationship_type": "indicates", "source_ref": "indicator--3a6d50a1-45ca-49e3-965b-5ceefcb0ec7f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57238806-2f69-41ed-8931-8f4efdcb7040", "created": "2026-01-27T05:12:56.820886Z", "modified": "2026-01-27T05:12:56.820886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8133ff9615b4f1821cb360be965d676ed1b916ea4d8d4f2dd334075ca65efc00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.820886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf059ca4-85bf-4935-896e-9851b92f313e", "created": "2026-01-27T05:12:56.821716Z", "modified": "2026-01-27T05:12:56.821716Z", "relationship_type": "indicates", "source_ref": "indicator--57238806-2f69-41ed-8931-8f4efdcb7040", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e22a4e-3636-4842-8b48-135847c6dbf7", "created": "2026-01-27T05:12:56.821913Z", "modified": "2026-01-27T05:12:56.821913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5f71fdf2a86bcf3ea0f922b06ffde1eceeab7d3f25aee928ff7fd22839fb602']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.821913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4919f74-2c21-49f4-8878-876c94affd45", "created": "2026-01-27T05:12:56.822761Z", "modified": "2026-01-27T05:12:56.822761Z", "relationship_type": "indicates", "source_ref": "indicator--89e22a4e-3636-4842-8b48-135847c6dbf7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d44502c-3341-4fa0-9613-c88b1b4d9392", "created": "2026-01-27T05:12:56.822942Z", "modified": "2026-01-27T05:12:56.822942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f0233c220be53c06ad6a57b74fcc09359efc3fc15f1ce15fa7bf83ec42d364e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.822942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c60e4050-0c6f-421e-999b-1c0f1ba8c727", "created": "2026-01-27T05:12:56.82378Z", "modified": "2026-01-27T05:12:56.82378Z", "relationship_type": "indicates", "source_ref": "indicator--1d44502c-3341-4fa0-9613-c88b1b4d9392", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad3ed15-0da7-4743-b585-7d3f8f2a514f", "created": "2026-01-27T05:12:56.82396Z", "modified": "2026-01-27T05:12:56.82396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11a554ff0257d93cad1e4060e53ca509416c2d290c7adc36acf0e2d811b121dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.82396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f751731-2f29-4205-825a-f61469a316b6", "created": "2026-01-27T05:12:56.824915Z", "modified": "2026-01-27T05:12:56.824915Z", "relationship_type": "indicates", "source_ref": "indicator--2ad3ed15-0da7-4743-b585-7d3f8f2a514f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc42524a-1684-48a3-a60d-d173218df521", "created": "2026-01-27T05:12:56.825098Z", "modified": "2026-01-27T05:12:56.825098Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da4791238823d760283d6840aa35cec393e403123212e008eeb77a7c2051844d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.825098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b426d54-f547-4aee-a250-7df74c0830e9", "created": "2026-01-27T05:12:56.825944Z", "modified": "2026-01-27T05:12:56.825944Z", "relationship_type": "indicates", "source_ref": "indicator--bc42524a-1684-48a3-a60d-d173218df521", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61057ef-de0b-4546-9b41-00cd8b216dc9", "created": "2026-01-27T05:12:56.826129Z", "modified": "2026-01-27T05:12:56.826129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8af178e84d401ce19794811677f73b2ccb01abdcde376efb4f1efcdcbbd76540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.826129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a7d13a6-e811-4a00-9d57-ffbbbb147918", "created": "2026-01-27T05:12:56.826974Z", "modified": "2026-01-27T05:12:56.826974Z", "relationship_type": "indicates", "source_ref": "indicator--f61057ef-de0b-4546-9b41-00cd8b216dc9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eafc3037-5c1a-4c87-a434-78b8b33b321b", "created": "2026-01-27T05:12:56.827154Z", "modified": "2026-01-27T05:12:56.827154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b0dc1ab899a48b2e5795a200d66cbc4aa212518d2b177f1e08d016d9c7de11a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.827154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f21e27a-1f97-4b1e-8fe0-c96bb0764876", "created": "2026-01-27T05:12:56.828004Z", "modified": "2026-01-27T05:12:56.828004Z", "relationship_type": "indicates", "source_ref": "indicator--eafc3037-5c1a-4c87-a434-78b8b33b321b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c2a2da-8dd0-414b-ae1b-5b511f473e61", "created": "2026-01-27T05:12:56.828187Z", "modified": "2026-01-27T05:12:56.828187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6367f22775bccdb2f625318104050a2aa069e4840268c0d7b515db324a5e14be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.828187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9670ed6-89f9-49d7-9dd4-3bcae0ece046", "created": "2026-01-27T05:12:56.829032Z", "modified": "2026-01-27T05:12:56.829032Z", "relationship_type": "indicates", "source_ref": "indicator--b4c2a2da-8dd0-414b-ae1b-5b511f473e61", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c09dd52-f392-4cd1-b4fa-0e78ede70d33", "created": "2026-01-27T05:12:56.82922Z", "modified": "2026-01-27T05:12:56.82922Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c6b33d9c91ac6e6f3dc91254f33cb6dbed1356f5e477c5f0a69c5e43c168ca0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.82922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6eed2d6c-15c1-4c89-b6e0-9068d153a1ed", "created": "2026-01-27T05:12:56.830071Z", "modified": "2026-01-27T05:12:56.830071Z", "relationship_type": "indicates", "source_ref": "indicator--6c09dd52-f392-4cd1-b4fa-0e78ede70d33", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144b15d3-7fa7-4cbe-affc-4fcf20a34785", "created": "2026-01-27T05:12:56.830253Z", "modified": "2026-01-27T05:12:56.830253Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ac2c39753fcf0ac39e90920c92f29e32d8c0cfdfeb8e0d6d7adf9bfb7581bdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.830253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6b0fd13-4018-49dc-8e9e-60a8fd68f350", "created": "2026-01-27T05:12:56.831107Z", "modified": "2026-01-27T05:12:56.831107Z", "relationship_type": "indicates", "source_ref": "indicator--144b15d3-7fa7-4cbe-affc-4fcf20a34785", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcce0c6c-a552-402a-894b-fdb93ce916bd", "created": "2026-01-27T05:12:56.831285Z", "modified": "2026-01-27T05:12:56.831285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd1b4c56a623f17b5eb07cd460bbdd0b292ff69439a63bea9fc7564061dccb5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.831285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25c72255-8ed6-4ce2-85e5-aa94098ff0b4", "created": "2026-01-27T05:12:56.83212Z", "modified": "2026-01-27T05:12:56.83212Z", "relationship_type": "indicates", "source_ref": "indicator--bcce0c6c-a552-402a-894b-fdb93ce916bd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f05992b-6171-4be0-af90-b6d4d3c8768c", "created": "2026-01-27T05:12:56.832299Z", "modified": "2026-01-27T05:12:56.832299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e25964805c4c29f01331e2547ff568a1b1124debbae0b3bc84ad22b8aaf38132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.832299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7dfe8275-7b29-456b-8639-5d0bad50a8e3", "created": "2026-01-27T05:12:56.833162Z", "modified": "2026-01-27T05:12:56.833162Z", "relationship_type": "indicates", "source_ref": "indicator--0f05992b-6171-4be0-af90-b6d4d3c8768c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ebd958-80d9-408e-ac7b-7f5b19083d29", "created": "2026-01-27T05:12:56.833338Z", "modified": "2026-01-27T05:12:56.833338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ba2e5a3c21d32b40abe213e36eef9f1e3254c7393c5680736e6f848f0ec5289']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.833338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de69c62f-b17b-4f97-aca4-9793929a7b7e", "created": "2026-01-27T05:12:56.834575Z", "modified": "2026-01-27T05:12:56.834575Z", "relationship_type": "indicates", "source_ref": "indicator--14ebd958-80d9-408e-ac7b-7f5b19083d29", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b75d261-5d9c-4eec-90ff-5ee9623eba89", "created": "2026-01-27T05:12:56.834771Z", "modified": "2026-01-27T05:12:56.834771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb23a59a6dfa9f4697d518f407521f081f482142787992f6c3cd149665bbff3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.834771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0aa8c4d0-23dc-4283-94cd-9f1d96469a95", "created": "2026-01-27T05:12:56.835596Z", "modified": "2026-01-27T05:12:56.835596Z", "relationship_type": "indicates", "source_ref": "indicator--2b75d261-5d9c-4eec-90ff-5ee9623eba89", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0119ef99-727e-4bf3-82d1-97ce6230a6e3", "created": "2026-01-27T05:12:56.835792Z", "modified": "2026-01-27T05:12:56.835792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f6c253a1da86914924785550ce67151339967d4b58ee2b388c3dce002a0f58e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.835792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37864e06-33ce-4175-b32b-83874c42f7b6", "created": "2026-01-27T05:12:56.836627Z", "modified": "2026-01-27T05:12:56.836627Z", "relationship_type": "indicates", "source_ref": "indicator--0119ef99-727e-4bf3-82d1-97ce6230a6e3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cff71a0-3d10-48a7-8478-4d04ed9bf2f5", "created": "2026-01-27T05:12:56.836829Z", "modified": "2026-01-27T05:12:56.836829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c812869a56a60cd946493d5db98b8a3c7c28e2a292781f056491b97cbe36f7da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.836829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c4c4c6c-7d94-49a1-be3f-20f2679c63f5", "created": "2026-01-27T05:12:56.837657Z", "modified": "2026-01-27T05:12:56.837657Z", "relationship_type": "indicates", "source_ref": "indicator--4cff71a0-3d10-48a7-8478-4d04ed9bf2f5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c75b75c-8b2b-4dd8-9f62-44c49bddfbb2", "created": "2026-01-27T05:12:56.83786Z", "modified": "2026-01-27T05:12:56.83786Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31ffef84cca698fc0fef5497c4abbe030e17427144864971f8a9f637f9800573']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.83786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--047da314-7460-49b1-95fc-d803d178faed", "created": "2026-01-27T05:12:56.838683Z", "modified": "2026-01-27T05:12:56.838683Z", "relationship_type": "indicates", "source_ref": "indicator--3c75b75c-8b2b-4dd8-9f62-44c49bddfbb2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f3594d-87c4-4eef-9e38-9ad358edae16", "created": "2026-01-27T05:12:56.838888Z", "modified": "2026-01-27T05:12:56.838888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3356441f12a687c976835c4513643413942d5f7a358f4d1dfb41077d105e2e13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.838888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33036f5f-42bc-4a68-8fb5-127a34c9085f", "created": "2026-01-27T05:12:56.839715Z", "modified": "2026-01-27T05:12:56.839715Z", "relationship_type": "indicates", "source_ref": "indicator--70f3594d-87c4-4eef-9e38-9ad358edae16", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70000050-a104-45ca-ac17-e7ffd4476e15", "created": "2026-01-27T05:12:56.839912Z", "modified": "2026-01-27T05:12:56.839912Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f815c969f0fb27bbe77453245d0f4a7bcae246222c03ea838f1cc6525dec97c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.839912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0af31945-2d14-432f-a00f-1f7e4f937544", "created": "2026-01-27T05:12:56.840735Z", "modified": "2026-01-27T05:12:56.840735Z", "relationship_type": "indicates", "source_ref": "indicator--70000050-a104-45ca-ac17-e7ffd4476e15", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a44f89b-2bc8-493b-a081-cab10b5b3cea", "created": "2026-01-27T05:12:56.840932Z", "modified": "2026-01-27T05:12:56.840932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b45f8c019a71acb350a54cd6346910ad8805a6e9e545ae253caf14ac6ba7599']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.840932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cf09ea4-e864-4299-81af-37557fd3161e", "created": "2026-01-27T05:12:56.841765Z", "modified": "2026-01-27T05:12:56.841765Z", "relationship_type": "indicates", "source_ref": "indicator--6a44f89b-2bc8-493b-a081-cab10b5b3cea", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773890be-f29a-4d77-be4d-e5fe2b5dee33", "created": "2026-01-27T05:12:56.841949Z", "modified": "2026-01-27T05:12:56.841949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6346a454eeafde43b606b0a615034e57a49cc79c8564f351e9aa87890d96a670']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.841949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb33b4c6-d756-4e9e-9d60-03b877e14bcf", "created": "2026-01-27T05:12:56.842789Z", "modified": "2026-01-27T05:12:56.842789Z", "relationship_type": "indicates", "source_ref": "indicator--773890be-f29a-4d77-be4d-e5fe2b5dee33", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf7ac2e-003a-4a9e-9699-d55a260af7dc", "created": "2026-01-27T05:12:56.842969Z", "modified": "2026-01-27T05:12:56.842969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='524af3569fa5e4b588ce6f6ad710effa56eb20a9ec23ee842319411230dd4364']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.842969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0535d03e-aa66-4c0c-94f0-2e4c40250c63", "created": "2026-01-27T05:12:56.84395Z", "modified": "2026-01-27T05:12:56.84395Z", "relationship_type": "indicates", "source_ref": "indicator--5cf7ac2e-003a-4a9e-9699-d55a260af7dc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be95b6f-788c-4903-a497-90011452f16a", "created": "2026-01-27T05:12:56.844134Z", "modified": "2026-01-27T05:12:56.844134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2126b6f172af725b7ff510cdc63d5147e6016bb0aa7980af00ffc87c1d07c908']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.844134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4605be9-c671-42c7-9096-67371ec129e1", "created": "2026-01-27T05:12:56.844975Z", "modified": "2026-01-27T05:12:56.844975Z", "relationship_type": "indicates", "source_ref": "indicator--9be95b6f-788c-4903-a497-90011452f16a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b336170-628f-4f46-85fd-2ab809ef39a9", "created": "2026-01-27T05:12:56.845157Z", "modified": "2026-01-27T05:12:56.845157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1160869b249cba8894268444588bd67e9a494723432bc85d30d20c07b406748d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.845157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c5417fb-17a7-4167-882f-566f559f24c2", "created": "2026-01-27T05:12:56.846003Z", "modified": "2026-01-27T05:12:56.846003Z", "relationship_type": "indicates", "source_ref": "indicator--8b336170-628f-4f46-85fd-2ab809ef39a9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34fca5a-df3e-47c2-82b7-7e42f67b9063", "created": "2026-01-27T05:12:56.846185Z", "modified": "2026-01-27T05:12:56.846185Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28aaab6753b2da29e80caf23a667d92ee19157bf271da1efbc1d65381e428169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.846185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ff9937a-2c96-462e-b5ce-1457ba20d97d", "created": "2026-01-27T05:12:56.847039Z", "modified": "2026-01-27T05:12:56.847039Z", "relationship_type": "indicates", "source_ref": "indicator--c34fca5a-df3e-47c2-82b7-7e42f67b9063", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b692f1-d102-4956-b874-5f72166a4766", "created": "2026-01-27T05:12:56.847218Z", "modified": "2026-01-27T05:12:56.847218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='16c816230036f45ce7f0e6639700ffd2539205f4e5a01fe4f303f6e30b7ca913']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.847218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a4ecc1d-9781-4c15-b97f-daae58cb383b", "created": "2026-01-27T05:12:56.848063Z", "modified": "2026-01-27T05:12:56.848063Z", "relationship_type": "indicates", "source_ref": "indicator--b1b692f1-d102-4956-b874-5f72166a4766", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0536f8f-0290-42f1-842b-21614a3c5916", "created": "2026-01-27T05:12:56.84824Z", "modified": "2026-01-27T05:12:56.84824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a11d5f4fed5190d88513d4eb5354f2fe3f865530cec49e2c393f1eb8683983c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.84824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ef9af30-1493-4cdd-9f26-2209c9daa7ee", "created": "2026-01-27T05:12:56.849081Z", "modified": "2026-01-27T05:12:56.849081Z", "relationship_type": "indicates", "source_ref": "indicator--b0536f8f-0290-42f1-842b-21614a3c5916", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91210e9e-38a5-45ac-ae79-90b44c839d26", "created": "2026-01-27T05:12:56.849261Z", "modified": "2026-01-27T05:12:56.849261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78d24906185ece29ed39e426a6f63c624b07f736e7fc10a8a085729db5b91b50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.849261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f852a1eb-f81b-437b-b44b-1f7ee1d83375", "created": "2026-01-27T05:12:56.850102Z", "modified": "2026-01-27T05:12:56.850102Z", "relationship_type": "indicates", "source_ref": "indicator--91210e9e-38a5-45ac-ae79-90b44c839d26", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66715295-cfe5-44f1-a17a-5ece9e69ebc6", "created": "2026-01-27T05:12:56.850284Z", "modified": "2026-01-27T05:12:56.850284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3bb77f13d13c9000c9139d545dfb15820ce361ec5d98d4e50f8d2b013c931bc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.850284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f356d5b-b543-45ff-a716-f77f39258ac4", "created": "2026-01-27T05:12:56.85115Z", "modified": "2026-01-27T05:12:56.85115Z", "relationship_type": "indicates", "source_ref": "indicator--66715295-cfe5-44f1-a17a-5ece9e69ebc6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0c02a8-19ba-4268-8c0e-5b5d6f0326ba", "created": "2026-01-27T05:12:56.851329Z", "modified": "2026-01-27T05:12:56.851329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a84d2fa5fc444434a4145a4e7969f0d900311b6af2bcc6bf6b2b2878dd63194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.851329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c157818-4361-44b5-b0e9-c11fb1c9f689", "created": "2026-01-27T05:12:56.852167Z", "modified": "2026-01-27T05:12:56.852167Z", "relationship_type": "indicates", "source_ref": "indicator--3b0c02a8-19ba-4268-8c0e-5b5d6f0326ba", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d95e37-1fba-44e2-9e6d-a599c237523a", "created": "2026-01-27T05:12:56.852357Z", "modified": "2026-01-27T05:12:56.852357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='064605e408c01ce1552b73412c9b61a996cbb72f501714bef0747d28f2254d97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.852357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aa314bc-b5db-4591-9248-71d44cafac9c", "created": "2026-01-27T05:12:56.853342Z", "modified": "2026-01-27T05:12:56.853342Z", "relationship_type": "indicates", "source_ref": "indicator--a1d95e37-1fba-44e2-9e6d-a599c237523a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345c31bc-36e2-4dae-a15e-cdcbf00df213", "created": "2026-01-27T05:12:56.853525Z", "modified": "2026-01-27T05:12:56.853525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06f211c6eb69d2a2a67232e4e04f7428aaa0f5a188b6d142d44b6bdf0286d906']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.853525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08ee5004-2f3c-417b-87ae-8d905597ddc8", "created": "2026-01-27T05:12:56.854375Z", "modified": "2026-01-27T05:12:56.854375Z", "relationship_type": "indicates", "source_ref": "indicator--345c31bc-36e2-4dae-a15e-cdcbf00df213", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dcaa6b-2537-4325-b100-3f92f05d13b7", "created": "2026-01-27T05:12:56.854558Z", "modified": "2026-01-27T05:12:56.854558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06bbbde6e1ea47bc9632c46440bfaa41a58357584e69d555d6d825f46bd8d84c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.854558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34727c72-eb4d-428e-a849-001fba050afc", "created": "2026-01-27T05:12:56.855403Z", "modified": "2026-01-27T05:12:56.855403Z", "relationship_type": "indicates", "source_ref": "indicator--33dcaa6b-2537-4325-b100-3f92f05d13b7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba3940c-4ab9-4e72-bc0f-9960da789d0e", "created": "2026-01-27T05:12:56.855585Z", "modified": "2026-01-27T05:12:56.855585Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e07b9d72556de869075ad4f8d53db8df3ff643b67aaf7ae116cdcf99c04ea81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.855585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a42f0c6-9637-411e-94dd-52cc4836c342", "created": "2026-01-27T05:12:56.856432Z", "modified": "2026-01-27T05:12:56.856432Z", "relationship_type": "indicates", "source_ref": "indicator--7ba3940c-4ab9-4e72-bc0f-9960da789d0e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ded3011-4398-42c2-b640-dfad11f6bdcb", "created": "2026-01-27T05:12:56.856611Z", "modified": "2026-01-27T05:12:56.856611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c528a0ff3c23402f2e9e0e63c70019d4b5c6e62d0c6b65a36d651d4bf6446474']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.856611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6c6bbde-5d16-453a-af09-063cc3acb1c5", "created": "2026-01-27T05:12:56.857459Z", "modified": "2026-01-27T05:12:56.857459Z", "relationship_type": "indicates", "source_ref": "indicator--5ded3011-4398-42c2-b640-dfad11f6bdcb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af760abb-9c6f-4e3a-811a-c39f07cf521f", "created": "2026-01-27T05:12:56.857637Z", "modified": "2026-01-27T05:12:56.857637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d34e55862fb9f873422ecaf46e77146edf81fe8d18fb50e7f1ef4d84b472fc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.857637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b668887-9337-4f72-b5a6-fdf4ee1a6a28", "created": "2026-01-27T05:12:56.858476Z", "modified": "2026-01-27T05:12:56.858476Z", "relationship_type": "indicates", "source_ref": "indicator--af760abb-9c6f-4e3a-811a-c39f07cf521f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9882cbe-dc97-45be-a382-b4ab3dede45a", "created": "2026-01-27T05:12:56.858657Z", "modified": "2026-01-27T05:12:56.858657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='145217272f98e3c97c48d44fad82bf3019eaa840b41b0767b12c41c01fa09890']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.858657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73447d19-1402-4c07-97b9-e95bbd17a791", "created": "2026-01-27T05:12:56.859498Z", "modified": "2026-01-27T05:12:56.859498Z", "relationship_type": "indicates", "source_ref": "indicator--c9882cbe-dc97-45be-a382-b4ab3dede45a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5da4d6-35b6-4e91-b91e-272fbd991da3", "created": "2026-01-27T05:12:56.859694Z", "modified": "2026-01-27T05:12:56.859694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc0e80e127b69476a7af69f53a00d744f15c3f460baabf1f1a8876792fccd314']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.859694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95363b01-129c-4c99-a0ad-a1319955be7d", "created": "2026-01-27T05:12:56.860539Z", "modified": "2026-01-27T05:12:56.860539Z", "relationship_type": "indicates", "source_ref": "indicator--6e5da4d6-35b6-4e91-b91e-272fbd991da3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3556d2-1a69-438a-93c2-9ae63daeadec", "created": "2026-01-27T05:12:56.860716Z", "modified": "2026-01-27T05:12:56.860716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a720559890caf85bf1d5a33bbfba68c021627fbf3b8ae4b5b96a1a855fbc0012']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.860716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2b9682a-37f0-424a-9c34-dc18241bf11a", "created": "2026-01-27T05:12:56.861552Z", "modified": "2026-01-27T05:12:56.861552Z", "relationship_type": "indicates", "source_ref": "indicator--4a3556d2-1a69-438a-93c2-9ae63daeadec", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b86265-cbc5-42fe-bd2f-1eaa31c32d9c", "created": "2026-01-27T05:12:56.861728Z", "modified": "2026-01-27T05:12:56.861728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9ea53856bc3922b599129cdecdc5e511178100cde1e2628b55b40b5d81758df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.861728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06b50af6-4d68-487f-8576-ac8ff1182754", "created": "2026-01-27T05:12:56.862696Z", "modified": "2026-01-27T05:12:56.862696Z", "relationship_type": "indicates", "source_ref": "indicator--c8b86265-cbc5-42fe-bd2f-1eaa31c32d9c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c854ec6-4d4d-4f4d-ae23-da2d38b0c813", "created": "2026-01-27T05:12:56.862892Z", "modified": "2026-01-27T05:12:56.862892Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8deb08872530d53c9e0083c44f721a36418027f9f7fdf9b5594a85b14219e1b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.862892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70c246b0-809b-48cc-ac51-8ddd215f35d2", "created": "2026-01-27T05:12:56.863721Z", "modified": "2026-01-27T05:12:56.863721Z", "relationship_type": "indicates", "source_ref": "indicator--2c854ec6-4d4d-4f4d-ae23-da2d38b0c813", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21f048c-936d-46c8-9592-278a551251de", "created": "2026-01-27T05:12:56.863918Z", "modified": "2026-01-27T05:12:56.863918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f5e4e1958553ccd1a3368ae8a221c871cea29c05cf7ec15034c8ffa846e84e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.863918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a9a909a-08cd-44a4-9c4b-11c45ca16ea8", "created": "2026-01-27T05:12:56.86474Z", "modified": "2026-01-27T05:12:56.86474Z", "relationship_type": "indicates", "source_ref": "indicator--f21f048c-936d-46c8-9592-278a551251de", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e4d878-ab14-457e-9bd1-92a6841472ec", "created": "2026-01-27T05:12:56.864935Z", "modified": "2026-01-27T05:12:56.864935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95fc33ac432632804fcf8c133d6ce111d18b694e07ddd2c104dcaf76b182a053']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.864935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aea4d8f1-3f06-4592-b189-42b505269aac", "created": "2026-01-27T05:12:56.865772Z", "modified": "2026-01-27T05:12:56.865772Z", "relationship_type": "indicates", "source_ref": "indicator--d0e4d878-ab14-457e-9bd1-92a6841472ec", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63a98d5-9414-4f71-9c1b-0d25e774989b", "created": "2026-01-27T05:12:56.865953Z", "modified": "2026-01-27T05:12:56.865953Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0e3ce30cc1ef3d047da0471ec47c96abf8ca230e464cdb01c25a4baf27051d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.865953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd86b525-c779-47a1-9717-791f6e848341", "created": "2026-01-27T05:12:56.866796Z", "modified": "2026-01-27T05:12:56.866796Z", "relationship_type": "indicates", "source_ref": "indicator--b63a98d5-9414-4f71-9c1b-0d25e774989b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a7f133-ef10-4b91-90e6-b73e4684ff2c", "created": "2026-01-27T05:12:56.866977Z", "modified": "2026-01-27T05:12:56.866977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed9b9f5e92c80365905d342323a47a2df1e7d48545423425588f8ecaaa2dc7d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.866977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b810cebb-0b83-4f8c-b57f-45ee21b8e995", "created": "2026-01-27T05:12:56.867836Z", "modified": "2026-01-27T05:12:56.867836Z", "relationship_type": "indicates", "source_ref": "indicator--84a7f133-ef10-4b91-90e6-b73e4684ff2c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02aa1fd-570b-4263-937e-066c1dc5f2c3", "created": "2026-01-27T05:12:56.868018Z", "modified": "2026-01-27T05:12:56.868018Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a847a6b31d6ce38ea911a7975897cf0b24d7532f38de4acad566ddca34d17fe2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.868018Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eebbdaee-a09f-4ff6-afb4-148069175106", "created": "2026-01-27T05:12:56.868856Z", "modified": "2026-01-27T05:12:56.868856Z", "relationship_type": "indicates", "source_ref": "indicator--d02aa1fd-570b-4263-937e-066c1dc5f2c3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da89016-09d6-47ca-8cff-aa6da3de1554", "created": "2026-01-27T05:12:56.869037Z", "modified": "2026-01-27T05:12:56.869037Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d3950ff132907afad5486bc56b2f6ed55ebd4253ddb8221053a0ba6ba27337a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.869037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfdcffaa-8678-40e5-8c40-df341622d295", "created": "2026-01-27T05:12:56.869876Z", "modified": "2026-01-27T05:12:56.869876Z", "relationship_type": "indicates", "source_ref": "indicator--5da89016-09d6-47ca-8cff-aa6da3de1554", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9565d31d-d1bd-4999-9208-eaaf04b60953", "created": "2026-01-27T05:12:56.870057Z", "modified": "2026-01-27T05:12:56.870057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='080212c48e19adcae83838afbd6e8b39a68674562473629d376757299a69bac2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.870057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfd16d2e-270c-4410-a93b-d633bf81c0de", "created": "2026-01-27T05:12:56.871026Z", "modified": "2026-01-27T05:12:56.871026Z", "relationship_type": "indicates", "source_ref": "indicator--9565d31d-d1bd-4999-9208-eaaf04b60953", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b02bc16-019f-4e40-938b-a36607c01116", "created": "2026-01-27T05:12:56.871208Z", "modified": "2026-01-27T05:12:56.871208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d624eb9219fb5ccae550320b8eeea6b8d2b1870f6b8763da6d3b5e1265e9a8c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.871208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98923b29-a6cc-4891-be78-bc52e8cfaaab", "created": "2026-01-27T05:12:56.872064Z", "modified": "2026-01-27T05:12:56.872064Z", "relationship_type": "indicates", "source_ref": "indicator--9b02bc16-019f-4e40-938b-a36607c01116", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f40918e-9c66-43c0-a7d4-c083befb0eb3", "created": "2026-01-27T05:12:56.872247Z", "modified": "2026-01-27T05:12:56.872247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='052840c5e9479fcd75e12b9c55f7d9296f08393947c14108ea7c7f25606d1e83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.872247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5554f0f7-c9bf-497c-a702-248b555bb9c2", "created": "2026-01-27T05:12:56.87309Z", "modified": "2026-01-27T05:12:56.87309Z", "relationship_type": "indicates", "source_ref": "indicator--7f40918e-9c66-43c0-a7d4-c083befb0eb3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09486c7f-5cb2-46af-a9ea-171811a6ba5d", "created": "2026-01-27T05:12:56.87327Z", "modified": "2026-01-27T05:12:56.87327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c757e63dd664a4b453614aef1fd7a8a91c57b888018eee088f5308cffc735c4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.87327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bb02438-c07d-416d-9b6c-f6c46e95b770", "created": "2026-01-27T05:12:56.87412Z", "modified": "2026-01-27T05:12:56.87412Z", "relationship_type": "indicates", "source_ref": "indicator--09486c7f-5cb2-46af-a9ea-171811a6ba5d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264ea49b-0eaf-49ef-9d54-8a3bafaaf430", "created": "2026-01-27T05:12:56.874299Z", "modified": "2026-01-27T05:12:56.874299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cab2e24ae2406117485eec11fb057911f880e83d86befb2e180b3b927854abf4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.874299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af297a3f-45fb-4860-8c26-cbd7ac456974", "created": "2026-01-27T05:12:56.875147Z", "modified": "2026-01-27T05:12:56.875147Z", "relationship_type": "indicates", "source_ref": "indicator--264ea49b-0eaf-49ef-9d54-8a3bafaaf430", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ea0b81-1f0a-4489-81bb-1e0662090430", "created": "2026-01-27T05:12:56.875335Z", "modified": "2026-01-27T05:12:56.875335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c7cdb477a71b92243a2fbaff03b85eaaf0003d2b4ce93ebc4dd4a074e11fcf8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.875335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5d438eb-96f8-4131-8922-69b8827204c0", "created": "2026-01-27T05:12:56.876185Z", "modified": "2026-01-27T05:12:56.876185Z", "relationship_type": "indicates", "source_ref": "indicator--88ea0b81-1f0a-4489-81bb-1e0662090430", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab20691-a90e-4107-9097-879bc47067a2", "created": "2026-01-27T05:12:56.876363Z", "modified": "2026-01-27T05:12:56.876363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a12e74f9a737f630671d8e9501c2dcb1aaba451a3a516182bf5ea485e866a406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.876363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8fb8984-7b0a-478b-bf3d-839c5e2c2ab6", "created": "2026-01-27T05:12:56.877202Z", "modified": "2026-01-27T05:12:56.877202Z", "relationship_type": "indicates", "source_ref": "indicator--8ab20691-a90e-4107-9097-879bc47067a2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f90fa8b-14e7-4da8-bf6a-56dfdfbdd472", "created": "2026-01-27T05:12:56.877379Z", "modified": "2026-01-27T05:12:56.877379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='805bb5a2b3e0aa393ebb50a87bad68ca8216d21c1d22817f1c53b9fd567feac2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.877379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ebe94e8-766b-47f2-8c44-69a69a6cb534", "created": "2026-01-27T05:12:56.878225Z", "modified": "2026-01-27T05:12:56.878225Z", "relationship_type": "indicates", "source_ref": "indicator--9f90fa8b-14e7-4da8-bf6a-56dfdfbdd472", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5e6c18-1041-42c4-b0a6-52db784f6aa6", "created": "2026-01-27T05:12:56.878402Z", "modified": "2026-01-27T05:12:56.878402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71a09a046782c388255631305585a5f1a94ece68fb5ff1d9114928342fcd4df8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.878402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd6c8c8e-deec-4139-a0e0-814f2f5c5b3a", "created": "2026-01-27T05:12:56.879245Z", "modified": "2026-01-27T05:12:56.879245Z", "relationship_type": "indicates", "source_ref": "indicator--fc5e6c18-1041-42c4-b0a6-52db784f6aa6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379095f2-8aa5-4b1d-b16e-4aec14fab393", "created": "2026-01-27T05:12:56.879425Z", "modified": "2026-01-27T05:12:56.879425Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cfb6ac6b241953f1923721c24ca33dd44152bc0040403b5e304920f3cb73177d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.879425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceb65ffa-a5d4-4bc8-bbbe-c333a82ad3e5", "created": "2026-01-27T05:12:56.880388Z", "modified": "2026-01-27T05:12:56.880388Z", "relationship_type": "indicates", "source_ref": "indicator--379095f2-8aa5-4b1d-b16e-4aec14fab393", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863376e9-6932-4c5b-b02d-5e4694590737", "created": "2026-01-27T05:12:56.880569Z", "modified": "2026-01-27T05:12:56.880569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18fc525897872b2d222a72a33995ee75d8c5cfa6b48cadbea3c790184c9b6164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.880569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec0ec42e-04be-4b55-bd2e-61b4591a6fe2", "created": "2026-01-27T05:12:56.881409Z", "modified": "2026-01-27T05:12:56.881409Z", "relationship_type": "indicates", "source_ref": "indicator--863376e9-6932-4c5b-b02d-5e4694590737", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fb7f06-3b7e-4396-9957-7618bd58ae5b", "created": "2026-01-27T05:12:56.881586Z", "modified": "2026-01-27T05:12:56.881586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccfacdc42832302cc44cfa2cca12a9e0580fafc61b94f8f71d1722b91e4f390c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.881586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91ff2bed-641b-46ba-954c-14a0e01bfc7e", "created": "2026-01-27T05:12:56.882428Z", "modified": "2026-01-27T05:12:56.882428Z", "relationship_type": "indicates", "source_ref": "indicator--85fb7f06-3b7e-4396-9957-7618bd58ae5b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a43c26e-c9f8-4aef-ad92-0090620a79ee", "created": "2026-01-27T05:12:56.882608Z", "modified": "2026-01-27T05:12:56.882608Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae9d11c4475b5fc45c2d7267a7f3b89eec54475a45ce6a5f63b242f356f1d350']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.882608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17f82c00-fd13-4ad9-aff5-859e417e5f9d", "created": "2026-01-27T05:12:56.883454Z", "modified": "2026-01-27T05:12:56.883454Z", "relationship_type": "indicates", "source_ref": "indicator--9a43c26e-c9f8-4aef-ad92-0090620a79ee", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0495ebe-f69d-497f-b5a9-2f931d4e689a", "created": "2026-01-27T05:12:56.883632Z", "modified": "2026-01-27T05:12:56.883632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbfcc8489ad78467eb6761008bf2425ed31d7a191225476484d30b0510e70f74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.883632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f11648ed-7e0f-4a97-b553-3f73377dc337", "created": "2026-01-27T05:12:56.884471Z", "modified": "2026-01-27T05:12:56.884471Z", "relationship_type": "indicates", "source_ref": "indicator--c0495ebe-f69d-497f-b5a9-2f931d4e689a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8694802d-e58d-48b7-b1c9-0c87477debbd", "created": "2026-01-27T05:12:56.884646Z", "modified": "2026-01-27T05:12:56.884646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e458b650af8904c898b07ceea688a81f1ad66fa447cc1ccfc4890c27ef898e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.884646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de16c8db-2af9-41b4-95a5-388a1991ac74", "created": "2026-01-27T05:12:56.88548Z", "modified": "2026-01-27T05:12:56.88548Z", "relationship_type": "indicates", "source_ref": "indicator--8694802d-e58d-48b7-b1c9-0c87477debbd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c030690-010a-4b17-ad2c-dc6b930b0519", "created": "2026-01-27T05:12:56.885653Z", "modified": "2026-01-27T05:12:56.885653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd547958fc63e09ebc1005b1fd4dfa047cdbe959fb2299f742fd9a3b971bfdef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.885653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a4bd956-484c-4969-ac23-afff6b5d16c0", "created": "2026-01-27T05:12:56.886487Z", "modified": "2026-01-27T05:12:56.886487Z", "relationship_type": "indicates", "source_ref": "indicator--7c030690-010a-4b17-ad2c-dc6b930b0519", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4774af-7ef2-4d47-962b-b01d9271d8e2", "created": "2026-01-27T05:12:56.886663Z", "modified": "2026-01-27T05:12:56.886663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f693cdcdb32721cdd0487c90d7d6cb7b80f3f2abf69524238774bb3b93cf319']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.886663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76fe10f5-b427-4be0-8808-e67c8de8ca36", "created": "2026-01-27T05:12:56.887503Z", "modified": "2026-01-27T05:12:56.887503Z", "relationship_type": "indicates", "source_ref": "indicator--7b4774af-7ef2-4d47-962b-b01d9271d8e2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8033d41-ee09-412d-bdd1-54c0660086c4", "created": "2026-01-27T05:12:56.887679Z", "modified": "2026-01-27T05:12:56.887679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4f339df64cbe537d7c8c126962875098e60481df16c3239f52f7c68e72cccb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.887679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fc46e7b-ae45-49b2-87f6-3a5061d90960", "created": "2026-01-27T05:12:56.88853Z", "modified": "2026-01-27T05:12:56.88853Z", "relationship_type": "indicates", "source_ref": "indicator--f8033d41-ee09-412d-bdd1-54c0660086c4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6711950b-8f5d-4b73-9c91-85e892944cd4", "created": "2026-01-27T05:12:56.888707Z", "modified": "2026-01-27T05:12:56.888707Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='abb87ad479d011c3f499887e79fe476d8c65517d7f57f98e0d0086067d3e2415']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.888707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a6202b0-e41e-4ceb-b8a9-02cb7599c2a3", "created": "2026-01-27T05:12:56.889672Z", "modified": "2026-01-27T05:12:56.889672Z", "relationship_type": "indicates", "source_ref": "indicator--6711950b-8f5d-4b73-9c91-85e892944cd4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb373e1a-3a4c-4b21-8591-fbff9d962dfe", "created": "2026-01-27T05:12:56.889868Z", "modified": "2026-01-27T05:12:56.889868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81a3e983d158b0b4622786be154716e19dc4137f017e4c2177edf59b572babde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.889868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--529fc9f9-9c32-4cb9-9287-a902bb0c1672", "created": "2026-01-27T05:12:56.890694Z", "modified": "2026-01-27T05:12:56.890694Z", "relationship_type": "indicates", "source_ref": "indicator--bb373e1a-3a4c-4b21-8591-fbff9d962dfe", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d3ed1e-395c-4399-bbc4-b0211ed9810d", "created": "2026-01-27T05:12:56.890891Z", "modified": "2026-01-27T05:12:56.890891Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bac5836ab104b431f70887bfbaaf277c4bff24408d6a34d3b214e0318b375cc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.890891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--490500de-63c3-4468-8ce3-b3cfcf905872", "created": "2026-01-27T05:12:56.891727Z", "modified": "2026-01-27T05:12:56.891727Z", "relationship_type": "indicates", "source_ref": "indicator--b0d3ed1e-395c-4399-bbc4-b0211ed9810d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5177a3-f6b8-426f-b63a-2360c072807f", "created": "2026-01-27T05:12:56.891922Z", "modified": "2026-01-27T05:12:56.891922Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f3e424e85a5c5a8f4cdf1cc3462dd8d042fd080a1f0f66d12b0d7e8690ab0a7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.891922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9aa5076-f75c-407a-b41e-df221be9991c", "created": "2026-01-27T05:12:56.892763Z", "modified": "2026-01-27T05:12:56.892763Z", "relationship_type": "indicates", "source_ref": "indicator--be5177a3-f6b8-426f-b63a-2360c072807f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e246f4da-a993-4faa-b6b6-28cc398b3298", "created": "2026-01-27T05:12:56.892944Z", "modified": "2026-01-27T05:12:56.892944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31fa0c554373b15e485f63482121c7a7676eb58b79d0aa4710d9b1584af97d91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.892944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d7592e1-3670-494a-b397-2ae8173f7a20", "created": "2026-01-27T05:12:56.893776Z", "modified": "2026-01-27T05:12:56.893776Z", "relationship_type": "indicates", "source_ref": "indicator--e246f4da-a993-4faa-b6b6-28cc398b3298", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48686661-d273-450a-bf89-2283133cb627", "created": "2026-01-27T05:12:56.893955Z", "modified": "2026-01-27T05:12:56.893955Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ef88e0bbee52352cf95c33c18f7a945ca13e6a61ac72c517e60b0898833fda1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.893955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e6bfdda-4dbc-4280-a1b7-1df243025b07", "created": "2026-01-27T05:12:56.894791Z", "modified": "2026-01-27T05:12:56.894791Z", "relationship_type": "indicates", "source_ref": "indicator--48686661-d273-450a-bf89-2283133cb627", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e57a770-609b-4b45-8c5c-9cacdf283840", "created": "2026-01-27T05:12:56.894969Z", "modified": "2026-01-27T05:12:56.894969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab2b281e6e6c3ac75e187b2c759ce4c4a99b2035358edd905ca3336fa9faceba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.894969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41c95092-b5f6-4c94-8f4c-b9c27496f0c7", "created": "2026-01-27T05:12:56.895818Z", "modified": "2026-01-27T05:12:56.895818Z", "relationship_type": "indicates", "source_ref": "indicator--4e57a770-609b-4b45-8c5c-9cacdf283840", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d5659c-68fa-45ea-9153-24be0dd808a8", "created": "2026-01-27T05:12:56.895995Z", "modified": "2026-01-27T05:12:56.895995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e45a09ee59120878fba5329b21b327eaecdf28211fb147ca00a9bf6dec79ad1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.895995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d939706b-79b8-4444-8b78-ac0c0094e096", "created": "2026-01-27T05:12:56.896826Z", "modified": "2026-01-27T05:12:56.896826Z", "relationship_type": "indicates", "source_ref": "indicator--72d5659c-68fa-45ea-9153-24be0dd808a8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad7377b-79f3-4b81-b5b3-7bd9110e605c", "created": "2026-01-27T05:12:56.897002Z", "modified": "2026-01-27T05:12:56.897002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9c630ce2c80d3142c8f95611589c6f2e6cb507472146d327aedfe423b98f8b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.897002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67309d22-c7eb-49fb-9455-7f44ee2261ad", "created": "2026-01-27T05:12:56.897961Z", "modified": "2026-01-27T05:12:56.897961Z", "relationship_type": "indicates", "source_ref": "indicator--5ad7377b-79f3-4b81-b5b3-7bd9110e605c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd609da-f169-4262-9fe2-5cb8988173e1", "created": "2026-01-27T05:12:56.898139Z", "modified": "2026-01-27T05:12:56.898139Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a30b15ca27baa6d55992028333f57f998c81660ff3abe98abefe8398b55b233']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.898139Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca01e43b-5e10-49f2-9af7-20f46e9a3322", "created": "2026-01-27T05:12:56.898993Z", "modified": "2026-01-27T05:12:56.898993Z", "relationship_type": "indicates", "source_ref": "indicator--bfd609da-f169-4262-9fe2-5cb8988173e1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75449cb8-2757-4326-a7cd-4c4a25302ad4", "created": "2026-01-27T05:12:56.899177Z", "modified": "2026-01-27T05:12:56.899177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bcd6d5459dd4524f3f991b209ad45324be068d580e586bfe91f6dd5d2ad0d317']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.899177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1292e56d-6806-4908-9b4a-050d08619d36", "created": "2026-01-27T05:12:56.900025Z", "modified": "2026-01-27T05:12:56.900025Z", "relationship_type": "indicates", "source_ref": "indicator--75449cb8-2757-4326-a7cd-4c4a25302ad4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6946312d-1ae2-4cb0-b7d8-af3ce958622e", "created": "2026-01-27T05:12:56.900207Z", "modified": "2026-01-27T05:12:56.900207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14c01c9513ab79ae179098e74ecc2ee373230a167c1c9d2436652a8611b61ceb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.900207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d264d867-2178-4891-9ea2-8be6e96ae70c", "created": "2026-01-27T05:12:56.901063Z", "modified": "2026-01-27T05:12:56.901063Z", "relationship_type": "indicates", "source_ref": "indicator--6946312d-1ae2-4cb0-b7d8-af3ce958622e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538d3cbe-fc01-4bf3-8944-e993e0e5efba", "created": "2026-01-27T05:12:56.90124Z", "modified": "2026-01-27T05:12:56.90124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ede3f0c48d113e727baa5cde35b2a9ab93e98eebbc60b91e086e23c03c87c8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.90124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8129629d-4b89-4117-8e2d-12aba4bd5d1f", "created": "2026-01-27T05:12:56.902088Z", "modified": "2026-01-27T05:12:56.902088Z", "relationship_type": "indicates", "source_ref": "indicator--538d3cbe-fc01-4bf3-8944-e993e0e5efba", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf69b03a-1ee1-4b86-bd03-e3e33f4d079a", "created": "2026-01-27T05:12:56.902265Z", "modified": "2026-01-27T05:12:56.902265Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c3cbc565510f9d30b09941925d2327b8dd72e8c0de46d27792819daa03d4714']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.902265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e68d6920-ea7d-4ec7-8c47-9e9118321bf2", "created": "2026-01-27T05:12:56.903118Z", "modified": "2026-01-27T05:12:56.903118Z", "relationship_type": "indicates", "source_ref": "indicator--cf69b03a-1ee1-4b86-bd03-e3e33f4d079a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42ba270-67db-4513-b374-b3fb1c363b39", "created": "2026-01-27T05:12:56.903295Z", "modified": "2026-01-27T05:12:56.903295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26ff4b53cee88271e83627f5fab1bf8473c5c2631033b67cc0983cfaca37678b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.903295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee45ba27-027b-4800-a042-cd8e77847ad2", "created": "2026-01-27T05:12:56.904136Z", "modified": "2026-01-27T05:12:56.904136Z", "relationship_type": "indicates", "source_ref": "indicator--f42ba270-67db-4513-b374-b3fb1c363b39", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5935dc6-3580-41b3-aca0-1a94c5d63f33", "created": "2026-01-27T05:12:56.904313Z", "modified": "2026-01-27T05:12:56.904313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91a0ad6be78ecc663f73d7cba7c3235aea32fba8a376412bda88e37f6b468c27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.904313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8cb2bd1-68e7-47ca-84f4-3d9196e222e4", "created": "2026-01-27T05:12:56.905164Z", "modified": "2026-01-27T05:12:56.905164Z", "relationship_type": "indicates", "source_ref": "indicator--d5935dc6-3580-41b3-aca0-1a94c5d63f33", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6617680-44c9-4693-aee5-e060940ac3f5", "created": "2026-01-27T05:12:56.905341Z", "modified": "2026-01-27T05:12:56.905341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83b2e6535589cd70d74fc4c657ec51da5bcdef90160cd449c0d6be9cce5d439c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.905341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bb40967-c4ff-4d16-b87c-4f709ca99d04", "created": "2026-01-27T05:12:56.906187Z", "modified": "2026-01-27T05:12:56.906187Z", "relationship_type": "indicates", "source_ref": "indicator--b6617680-44c9-4693-aee5-e060940ac3f5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda86f2c-0d26-48b0-b130-cb0af111a652", "created": "2026-01-27T05:12:56.906364Z", "modified": "2026-01-27T05:12:56.906364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cf403bcb58208bae0caa437ee7775579e1ba3c1859b63ee9f7bbcb72edbc677']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.906364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb60eb68-0222-484d-8dff-6ffda81011dd", "created": "2026-01-27T05:12:56.907331Z", "modified": "2026-01-27T05:12:56.907331Z", "relationship_type": "indicates", "source_ref": "indicator--eda86f2c-0d26-48b0-b130-cb0af111a652", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95727f5d-556a-4864-8940-31ae670642cb", "created": "2026-01-27T05:12:56.907509Z", "modified": "2026-01-27T05:12:56.907509Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ac14b87f2927f587e04fcd8c2470fccbdb6f9145deb161972472533748723ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.907509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02faf17a-763f-45f8-80da-d8e07dcff617", "created": "2026-01-27T05:12:56.908345Z", "modified": "2026-01-27T05:12:56.908345Z", "relationship_type": "indicates", "source_ref": "indicator--95727f5d-556a-4864-8940-31ae670642cb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9ba902-aebc-49eb-8230-1b0e47ebff73", "created": "2026-01-27T05:12:56.908526Z", "modified": "2026-01-27T05:12:56.908526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d5a30f8a71ff83146de5b54bda8dd1984abc479fd55d2abdfbcb8a8fec965cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.908526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c13664c-7847-4c44-a499-4d0d7b34b0ee", "created": "2026-01-27T05:12:56.909362Z", "modified": "2026-01-27T05:12:56.909362Z", "relationship_type": "indicates", "source_ref": "indicator--9c9ba902-aebc-49eb-8230-1b0e47ebff73", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f747ce42-68d1-4f8f-81f3-3a7fc156052e", "created": "2026-01-27T05:12:56.909542Z", "modified": "2026-01-27T05:12:56.909542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bb2c39ec7dce3e1f30c1dbf55e5662f421adf968f3be7018b0c7946f1304a65b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.909542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a311dcdf-d19d-4007-9d3b-6f22db4b5cca", "created": "2026-01-27T05:12:56.910393Z", "modified": "2026-01-27T05:12:56.910393Z", "relationship_type": "indicates", "source_ref": "indicator--f747ce42-68d1-4f8f-81f3-3a7fc156052e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5ba967-2124-4fae-84dc-a7e086535dd9", "created": "2026-01-27T05:12:56.910571Z", "modified": "2026-01-27T05:12:56.910571Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63f428a8291d2f3a821a8358a8139bd06d219590e5e2baf31d78b83be7476c8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.910571Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecd583a5-cb85-475f-9253-a7ed654469b6", "created": "2026-01-27T05:12:56.91142Z", "modified": "2026-01-27T05:12:56.91142Z", "relationship_type": "indicates", "source_ref": "indicator--ab5ba967-2124-4fae-84dc-a7e086535dd9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ccfe55-c918-4c5d-903f-ac880fa23e6b", "created": "2026-01-27T05:12:56.9116Z", "modified": "2026-01-27T05:12:56.9116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4672bed8fde5726d081162e3364fa7512174641a097f8c7cb7f833ea4b12af0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.9116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b51cea3-6cf1-474d-ba76-5ffc6000e5d5", "created": "2026-01-27T05:12:56.912449Z", "modified": "2026-01-27T05:12:56.912449Z", "relationship_type": "indicates", "source_ref": "indicator--c1ccfe55-c918-4c5d-903f-ac880fa23e6b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2028d661-4bca-4802-88b8-df48adea4281", "created": "2026-01-27T05:12:56.912626Z", "modified": "2026-01-27T05:12:56.912626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e11b06dc47fb0994a05727d029fb35837cf5e4bf29dd4a2e619ce2efe3d92b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.912626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cf92fff-b601-49e4-966c-f9335f543d2f", "created": "2026-01-27T05:12:56.91348Z", "modified": "2026-01-27T05:12:56.91348Z", "relationship_type": "indicates", "source_ref": "indicator--2028d661-4bca-4802-88b8-df48adea4281", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dceb4fe4-8820-4d55-9846-2b55f3c9229b", "created": "2026-01-27T05:12:56.913659Z", "modified": "2026-01-27T05:12:56.913659Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d29120c16a06839083c71eddb479836740e3eb57b7cce675acdd363c16309c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.913659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c94f53ac-69f2-49fa-b13f-73f30129842b", "created": "2026-01-27T05:12:56.914507Z", "modified": "2026-01-27T05:12:56.914507Z", "relationship_type": "indicates", "source_ref": "indicator--dceb4fe4-8820-4d55-9846-2b55f3c9229b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe22b99-4286-441c-93a0-a356ba720d7c", "created": "2026-01-27T05:12:56.914684Z", "modified": "2026-01-27T05:12:56.914684Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='358726ca85969ee194abf166e3b7947c674ea3dd17e058e8a468903f386025db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.914684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--382a54eb-42a2-440d-82a4-1d5f146e61c1", "created": "2026-01-27T05:12:56.915525Z", "modified": "2026-01-27T05:12:56.915525Z", "relationship_type": "indicates", "source_ref": "indicator--efe22b99-4286-441c-93a0-a356ba720d7c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ad1cf2-f55d-4063-8a38-e05403fe1f26", "created": "2026-01-27T05:12:56.915702Z", "modified": "2026-01-27T05:12:56.915702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='867be4489b9132523406c75471d9db006f2233c2b0830f989759212b0d565098']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.915702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a59c9856-7bb8-4c7d-ad55-ef10d6aab2fd", "created": "2026-01-27T05:12:56.916674Z", "modified": "2026-01-27T05:12:56.916674Z", "relationship_type": "indicates", "source_ref": "indicator--27ad1cf2-f55d-4063-8a38-e05403fe1f26", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2d17dd-a698-4cbf-a5fd-3a1c46bce274", "created": "2026-01-27T05:12:56.916867Z", "modified": "2026-01-27T05:12:56.916867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='24b67dd38394632b78ffe45985b96ceaa68769f9e4cbc9348cd434d91cbdf6fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.916867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72e454aa-c9ac-4c7d-9032-e73ef1d1a68d", "created": "2026-01-27T05:12:56.917688Z", "modified": "2026-01-27T05:12:56.917688Z", "relationship_type": "indicates", "source_ref": "indicator--8e2d17dd-a698-4cbf-a5fd-3a1c46bce274", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7ee48b-1593-4c99-94f1-20be929038bd", "created": "2026-01-27T05:12:56.917883Z", "modified": "2026-01-27T05:12:56.917883Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62020cab3c7249c75fe111922eacb7719fa88687abf4651aa57eb1d82d80bc06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.917883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebbf2e8a-ac0b-47ce-8b15-07af95382b08", "created": "2026-01-27T05:12:56.918709Z", "modified": "2026-01-27T05:12:56.918709Z", "relationship_type": "indicates", "source_ref": "indicator--2f7ee48b-1593-4c99-94f1-20be929038bd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247ec696-d2c5-46a4-bb4e-808ce6d5c3b3", "created": "2026-01-27T05:12:56.918911Z", "modified": "2026-01-27T05:12:56.918911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='116c9888333e210d4573df71943b58d066e25bea1af906458d6e84eb97705288']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.918911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5681ec2-f65a-4f4c-8679-ac0aa8347793", "created": "2026-01-27T05:12:56.919738Z", "modified": "2026-01-27T05:12:56.919738Z", "relationship_type": "indicates", "source_ref": "indicator--247ec696-d2c5-46a4-bb4e-808ce6d5c3b3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24defb0e-9dd0-43d1-a855-0539fecfcfa0", "created": "2026-01-27T05:12:56.919934Z", "modified": "2026-01-27T05:12:56.919934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32838fe1604a25a4fbcb62954c976b84c68694d73020994de034550641743f13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.919934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94a1669e-b329-4c11-a8fd-c26e3107d788", "created": "2026-01-27T05:12:56.920772Z", "modified": "2026-01-27T05:12:56.920772Z", "relationship_type": "indicates", "source_ref": "indicator--24defb0e-9dd0-43d1-a855-0539fecfcfa0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d803053e-9953-417d-85d4-2b68f93d2a56", "created": "2026-01-27T05:12:56.920952Z", "modified": "2026-01-27T05:12:56.920952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85cdb85ffec0fa8d05aef6421e38f245570dead161e37c90f3bc9ee46d98a625']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.920952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a33c1efc-c53f-4314-a603-7132d1865d64", "created": "2026-01-27T05:12:56.921787Z", "modified": "2026-01-27T05:12:56.921787Z", "relationship_type": "indicates", "source_ref": "indicator--d803053e-9953-417d-85d4-2b68f93d2a56", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd9c0a8-8de8-4982-bcbf-344978d1c41d", "created": "2026-01-27T05:12:56.921966Z", "modified": "2026-01-27T05:12:56.921966Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e5e5b84a9ad8663d8047d24202c2ea87ad8e235db1b2154aba181b0c8d35ea72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.921966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e8f1318-7099-401a-b4d7-e79cda617afe", "created": "2026-01-27T05:12:56.922806Z", "modified": "2026-01-27T05:12:56.922806Z", "relationship_type": "indicates", "source_ref": "indicator--0bd9c0a8-8de8-4982-bcbf-344978d1c41d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c756eff-f9fa-4ed9-9a1f-c6dec9e6ed02", "created": "2026-01-27T05:12:56.922997Z", "modified": "2026-01-27T05:12:56.922997Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f67a068cc4521a36056c5f6119dd4edcb86996a85475f444cd024e2370f49fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.922997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84522b97-a8d7-44f2-8c1e-4391243d2350", "created": "2026-01-27T05:12:56.923837Z", "modified": "2026-01-27T05:12:56.923837Z", "relationship_type": "indicates", "source_ref": "indicator--6c756eff-f9fa-4ed9-9a1f-c6dec9e6ed02", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a3fed5-553d-471b-a7a0-ad1232725934", "created": "2026-01-27T05:12:56.924016Z", "modified": "2026-01-27T05:12:56.924016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7c37ee164c2cfd4c60d5b4861273c35668c3aa467cbf6d623bbc54ebf7bc7d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.924016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdea5f42-903c-4f37-a430-ef65bbd450c9", "created": "2026-01-27T05:12:56.924978Z", "modified": "2026-01-27T05:12:56.924978Z", "relationship_type": "indicates", "source_ref": "indicator--d0a3fed5-553d-471b-a7a0-ad1232725934", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05cdeff-e6b2-428e-89bf-1c265d49d8c4", "created": "2026-01-27T05:12:56.925158Z", "modified": "2026-01-27T05:12:56.925158Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0570daaa9db24c98671baded7e1dd3d77398b645d6c53ff765b91a0c95de3e01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.925158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41b30c8e-3a2e-4fb8-8b69-e02d927b1d55", "created": "2026-01-27T05:12:56.926007Z", "modified": "2026-01-27T05:12:56.926007Z", "relationship_type": "indicates", "source_ref": "indicator--a05cdeff-e6b2-428e-89bf-1c265d49d8c4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab2aad2-88cc-4ccd-aa65-5ac675f89875", "created": "2026-01-27T05:12:56.926187Z", "modified": "2026-01-27T05:12:56.926187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fefc35ce29a326420873597eae3662904649f5db16f09901048eade4d06110b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.926187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9064df3c-937b-4dac-b4a9-4ce2b10c6595", "created": "2026-01-27T05:12:56.927041Z", "modified": "2026-01-27T05:12:56.927041Z", "relationship_type": "indicates", "source_ref": "indicator--4ab2aad2-88cc-4ccd-aa65-5ac675f89875", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55dd82b1-ee1f-4076-aad8-3dc3c265ba48", "created": "2026-01-27T05:12:56.927219Z", "modified": "2026-01-27T05:12:56.927219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62b59e1c1c2bcdbd2e6538b37cb55c42c7573885008aacc97ecc9745e93c3c9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.927219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--693bac10-c90f-4ac6-89bd-3355ecf99698", "created": "2026-01-27T05:12:56.928065Z", "modified": "2026-01-27T05:12:56.928065Z", "relationship_type": "indicates", "source_ref": "indicator--55dd82b1-ee1f-4076-aad8-3dc3c265ba48", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf76dc-674e-4d3d-ad9b-f574a9462ff1", "created": "2026-01-27T05:12:56.928246Z", "modified": "2026-01-27T05:12:56.928246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='336ad026ec37fe12db2fd1709a7a9244573445235891440acafe5b2a259909df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.928246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e15a5d-f06e-41bd-bd85-2ea86ed894fc", "created": "2026-01-27T05:12:56.929096Z", "modified": "2026-01-27T05:12:56.929096Z", "relationship_type": "indicates", "source_ref": "indicator--0fdf76dc-674e-4d3d-ad9b-f574a9462ff1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067c24e6-f361-453d-9c91-786920c82abc", "created": "2026-01-27T05:12:56.929275Z", "modified": "2026-01-27T05:12:56.929275Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6a99920c4155147f9d76900fbcd7cd827ae924b2f1c4d4c04944167831361be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.929275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4a8d2ea-e4e2-49d6-b94e-dd0bce0e7845", "created": "2026-01-27T05:12:56.930125Z", "modified": "2026-01-27T05:12:56.930125Z", "relationship_type": "indicates", "source_ref": "indicator--067c24e6-f361-453d-9c91-786920c82abc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb25fbf4-f6f2-4eaa-81ef-ae2aa1fa3bcf", "created": "2026-01-27T05:12:56.930304Z", "modified": "2026-01-27T05:12:56.930304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d2cc5342f65d13d66f179bad47356fe6de3cce08b92f97a52d5f36b7fdcf4b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.930304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee88bb22-550c-42d0-ba06-eb98fda02df2", "created": "2026-01-27T05:12:56.931147Z", "modified": "2026-01-27T05:12:56.931147Z", "relationship_type": "indicates", "source_ref": "indicator--cb25fbf4-f6f2-4eaa-81ef-ae2aa1fa3bcf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bc9927-a084-4ec8-a528-c45771598374", "created": "2026-01-27T05:12:56.931323Z", "modified": "2026-01-27T05:12:56.931323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2461488faf5a7ee9feb2293e33a8d63b5ea029a106386dc98d0e3e43398fa541']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.931323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5371f11-d41e-4085-bbc9-c37ea78ec9bb", "created": "2026-01-27T05:12:56.932171Z", "modified": "2026-01-27T05:12:56.932171Z", "relationship_type": "indicates", "source_ref": "indicator--f2bc9927-a084-4ec8-a528-c45771598374", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5837f7-3571-4cff-a64b-c7a3ad54f0ea", "created": "2026-01-27T05:12:56.932347Z", "modified": "2026-01-27T05:12:56.932347Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15eaf97dd6738aa25914fd8088bcdb11aaa0c62408544da452bf201dd53b11ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.932347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b9be606-7589-4f18-a686-ddcc27dd4dff", "created": "2026-01-27T05:12:56.933296Z", "modified": "2026-01-27T05:12:56.933296Z", "relationship_type": "indicates", "source_ref": "indicator--be5837f7-3571-4cff-a64b-c7a3ad54f0ea", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a551724-fb8f-4ba8-909b-2148d7316238", "created": "2026-01-27T05:12:56.933484Z", "modified": "2026-01-27T05:12:56.933484Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1347d735453d810dbe3218aff637b817aee17667f7dfb309987d130231fca77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.933484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66641492-a670-4527-824c-5bb3ecd8b058", "created": "2026-01-27T05:12:56.934536Z", "modified": "2026-01-27T05:12:56.934536Z", "relationship_type": "indicates", "source_ref": "indicator--6a551724-fb8f-4ba8-909b-2148d7316238", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df88a8fd-4f63-45fd-849f-55eac731fd01", "created": "2026-01-27T05:12:56.93472Z", "modified": "2026-01-27T05:12:56.93472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='824f8bc12ce6f4c316bacfb419f12fbd7f4d56325e801ab238132e9e014d5dd6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.93472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a24d188e-a6d4-45c5-82ce-9f93f61d957d", "created": "2026-01-27T05:12:56.935572Z", "modified": "2026-01-27T05:12:56.935572Z", "relationship_type": "indicates", "source_ref": "indicator--df88a8fd-4f63-45fd-849f-55eac731fd01", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859e54e8-7066-4346-b237-8f17d805e1d4", "created": "2026-01-27T05:12:56.935769Z", "modified": "2026-01-27T05:12:56.935769Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56fbd8225f06b01cf060488b7033960e4e37ea48ff7b9ee9b0e01d4766102f47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.935769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd54f4fa-3edb-43a8-843f-e71448b46618", "created": "2026-01-27T05:12:56.93661Z", "modified": "2026-01-27T05:12:56.93661Z", "relationship_type": "indicates", "source_ref": "indicator--859e54e8-7066-4346-b237-8f17d805e1d4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb4de69-dd17-483a-8088-fd656f2fa450", "created": "2026-01-27T05:12:56.936807Z", "modified": "2026-01-27T05:12:56.936807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fefbf54d11ba3aa741273712ba9117fc84164d05be124307f0042c9528e100a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.936807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6293899a-b9e6-4efa-b973-c1c6ae8a71b9", "created": "2026-01-27T05:12:56.937643Z", "modified": "2026-01-27T05:12:56.937643Z", "relationship_type": "indicates", "source_ref": "indicator--feb4de69-dd17-483a-8088-fd656f2fa450", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc8d13e-89b5-4786-8772-3d94056a9670", "created": "2026-01-27T05:12:56.937848Z", "modified": "2026-01-27T05:12:56.937848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d84275666bce9e4d4addea5db756708aa689276b465e80e366e4e3d87059d41a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.937848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--791a0631-fe3a-4928-8faf-b3cb8a8baf55", "created": "2026-01-27T05:12:56.938684Z", "modified": "2026-01-27T05:12:56.938684Z", "relationship_type": "indicates", "source_ref": "indicator--abc8d13e-89b5-4786-8772-3d94056a9670", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5808b8e5-53e3-4798-b50e-8d571de4d3a8", "created": "2026-01-27T05:12:56.938884Z", "modified": "2026-01-27T05:12:56.938884Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d91db72387809da2ed0b3c48bb8b2729e31d0bc3901f195eb331b2cdf1bdf11e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.938884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be940683-9c87-44d7-a743-17fb979ba77f", "created": "2026-01-27T05:12:56.939714Z", "modified": "2026-01-27T05:12:56.939714Z", "relationship_type": "indicates", "source_ref": "indicator--5808b8e5-53e3-4798-b50e-8d571de4d3a8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede14a70-3bda-49a0-82db-691ae3121a8f", "created": "2026-01-27T05:12:56.939909Z", "modified": "2026-01-27T05:12:56.939909Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac75e69ce4cf35ca8dc492f25ff3bad6fd9ce1a46412dbf5a559f9234003fbcb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.939909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a3cd6e4-5b53-43a6-a50c-0751e073f357", "created": "2026-01-27T05:12:56.940741Z", "modified": "2026-01-27T05:12:56.940741Z", "relationship_type": "indicates", "source_ref": "indicator--ede14a70-3bda-49a0-82db-691ae3121a8f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54b623f-3871-4191-ba4b-6ff4707216ce", "created": "2026-01-27T05:12:56.940936Z", "modified": "2026-01-27T05:12:56.940936Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4a848f4ca3762d4040649dacc30f953eafc49fae7968ed22501e269755f4531']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.940936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a6e3c05-f6dd-4041-8b87-595c01b436a0", "created": "2026-01-27T05:12:56.941775Z", "modified": "2026-01-27T05:12:56.941775Z", "relationship_type": "indicates", "source_ref": "indicator--c54b623f-3871-4191-ba4b-6ff4707216ce", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84c7eec-702f-486e-bdef-91bcd42a6b1a", "created": "2026-01-27T05:12:56.941958Z", "modified": "2026-01-27T05:12:56.941958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91225a5b66c878d5b706445d344c3d67093a30e99045afdb60b9ef3603dda4fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.941958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4987eab-3f21-4290-89ec-3a46749d31e9", "created": "2026-01-27T05:12:56.942808Z", "modified": "2026-01-27T05:12:56.942808Z", "relationship_type": "indicates", "source_ref": "indicator--b84c7eec-702f-486e-bdef-91bcd42a6b1a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a90fa54-6c5b-479e-b660-0c2e0dee5320", "created": "2026-01-27T05:12:56.942989Z", "modified": "2026-01-27T05:12:56.942989Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6041979a0ffcb022d2ee9c59bc3609a4f46a7b20bb15e6e148f8b727ad867d4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.942989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a1cd4af-ae2f-496d-83fa-0b40474d1c38", "created": "2026-01-27T05:12:56.944246Z", "modified": "2026-01-27T05:12:56.944246Z", "relationship_type": "indicates", "source_ref": "indicator--7a90fa54-6c5b-479e-b660-0c2e0dee5320", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed69cb6-ed18-4b12-987d-00afacacbc88", "created": "2026-01-27T05:12:56.944452Z", "modified": "2026-01-27T05:12:56.944452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d9563d4230764a27ca3f440de688333e8b744c69381729e7cffea1e182e20aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.944452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ba23907-b5c7-4060-9314-bc0c00c97929", "created": "2026-01-27T05:12:56.945349Z", "modified": "2026-01-27T05:12:56.945349Z", "relationship_type": "indicates", "source_ref": "indicator--fed69cb6-ed18-4b12-987d-00afacacbc88", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2459d939-e8f3-4538-a7f6-6685aecf5cd9", "created": "2026-01-27T05:12:56.945536Z", "modified": "2026-01-27T05:12:56.945536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c7f6d583fbf2136d167c4fb68473e4e7bcb372dca8f64143383a37f2d38a542']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.945536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe506348-2819-404e-982a-30151f460b5e", "created": "2026-01-27T05:12:56.946396Z", "modified": "2026-01-27T05:12:56.946396Z", "relationship_type": "indicates", "source_ref": "indicator--2459d939-e8f3-4538-a7f6-6685aecf5cd9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15fd45d5-2af5-4b85-a6ad-8f427fca68a8", "created": "2026-01-27T05:12:56.94658Z", "modified": "2026-01-27T05:12:56.94658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7adacd626fed8a0498106978d8146206636dabc5fefa5120eb0af1f8e825246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.94658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c5ba26d-2e9b-42ff-9c10-29dd2f4cb7a7", "created": "2026-01-27T05:12:56.947437Z", "modified": "2026-01-27T05:12:56.947437Z", "relationship_type": "indicates", "source_ref": "indicator--15fd45d5-2af5-4b85-a6ad-8f427fca68a8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c79a064-de1d-47c5-aa40-e071c174bcd8", "created": "2026-01-27T05:12:56.94762Z", "modified": "2026-01-27T05:12:56.94762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2623011824e8113f590fde22f63319f3680707ab2193ca391eb298b06c1a0f97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.94762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e4af3a5-719c-4d77-ada7-fa97e44f05d6", "created": "2026-01-27T05:12:56.94847Z", "modified": "2026-01-27T05:12:56.94847Z", "relationship_type": "indicates", "source_ref": "indicator--8c79a064-de1d-47c5-aa40-e071c174bcd8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde69949-1d54-470b-a838-fe815e9b3646", "created": "2026-01-27T05:12:56.948649Z", "modified": "2026-01-27T05:12:56.948649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39283b786c20fdab98188039031cc732615aeb71be06f3530f2f219b1d393ac3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.948649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5d028ea-cab4-4a9e-86d0-19b7c380f1e0", "created": "2026-01-27T05:12:56.949502Z", "modified": "2026-01-27T05:12:56.949502Z", "relationship_type": "indicates", "source_ref": "indicator--bde69949-1d54-470b-a838-fe815e9b3646", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10438c3-837f-473a-85dd-b157ba4ffa63", "created": "2026-01-27T05:12:56.94968Z", "modified": "2026-01-27T05:12:56.94968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f9859e63c70b637ea5000a2095e6c9d3d929b0e59f0ffabb063444bf4e7de82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.94968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05b1277c-253f-4377-830c-3da12e274183", "created": "2026-01-27T05:12:56.950521Z", "modified": "2026-01-27T05:12:56.950521Z", "relationship_type": "indicates", "source_ref": "indicator--b10438c3-837f-473a-85dd-b157ba4ffa63", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8f6dec-f157-494f-9b4a-89e76d933375", "created": "2026-01-27T05:12:56.950698Z", "modified": "2026-01-27T05:12:56.950698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23a1d9a6a748f159f96a285992cf99415c41aa89b5455bb08ec16ef8056ce36d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.950698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08cd0403-e847-4d99-b4e3-8222b80e999e", "created": "2026-01-27T05:12:56.951541Z", "modified": "2026-01-27T05:12:56.951541Z", "relationship_type": "indicates", "source_ref": "indicator--ef8f6dec-f157-494f-9b4a-89e76d933375", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1366834b-116f-4849-ba5a-daaab94692a6", "created": "2026-01-27T05:12:56.951716Z", "modified": "2026-01-27T05:12:56.951716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51b8a4e1f9d0e89ca2aed1f5b204c3747133ab78d687ac2c7f123d9c8af44d97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.951716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e8e8851-ff95-418a-8736-850e275af5cb", "created": "2026-01-27T05:12:56.952567Z", "modified": "2026-01-27T05:12:56.952567Z", "relationship_type": "indicates", "source_ref": "indicator--1366834b-116f-4849-ba5a-daaab94692a6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7b38a0-08c6-4845-a1bb-1347f76764f4", "created": "2026-01-27T05:12:56.952757Z", "modified": "2026-01-27T05:12:56.952757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52f3e09a1fac75a1c2ca1c667367b9a80bfec3dc8c0c395fa129935196e929c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.952757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a01cc23-a446-451d-b37c-bc0276a14dc1", "created": "2026-01-27T05:12:56.95371Z", "modified": "2026-01-27T05:12:56.95371Z", "relationship_type": "indicates", "source_ref": "indicator--4a7b38a0-08c6-4845-a1bb-1347f76764f4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92af91c8-6301-4af8-a28b-d51828476610", "created": "2026-01-27T05:12:56.953907Z", "modified": "2026-01-27T05:12:56.953907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5c601a346dadc7a648e5abcb2a774b178567e3dec211d3cf34f72b43c9cfa58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.953907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a50ac982-482c-4b00-a7f7-733dee5c6f4f", "created": "2026-01-27T05:12:56.954736Z", "modified": "2026-01-27T05:12:56.954736Z", "relationship_type": "indicates", "source_ref": "indicator--92af91c8-6301-4af8-a28b-d51828476610", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f434e520-fb5d-4a61-816b-09b978a5b6e9", "created": "2026-01-27T05:12:56.954934Z", "modified": "2026-01-27T05:12:56.954934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c61f296599a18826bdcb2c205fe1b8c6ce0a14a20d590e84fad12476adb851a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.954934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33dbdfb9-afe5-4e62-87cd-22ec2cc23862", "created": "2026-01-27T05:12:56.955774Z", "modified": "2026-01-27T05:12:56.955774Z", "relationship_type": "indicates", "source_ref": "indicator--f434e520-fb5d-4a61-816b-09b978a5b6e9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91425a53-4ba8-42f6-8ff8-b3dda324c68e", "created": "2026-01-27T05:12:56.955954Z", "modified": "2026-01-27T05:12:56.955954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='967ef5e2a296c25e1f833dfb37e74aa66037b549684bd55fe92d5e7214b6c2fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.955954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7a1f662-f992-4bd4-b697-a65fd2d9e719", "created": "2026-01-27T05:12:56.95679Z", "modified": "2026-01-27T05:12:56.95679Z", "relationship_type": "indicates", "source_ref": "indicator--91425a53-4ba8-42f6-8ff8-b3dda324c68e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce55d11-33a8-4668-9eb5-396d01920895", "created": "2026-01-27T05:12:56.956969Z", "modified": "2026-01-27T05:12:56.956969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3134eab2bd43c1996d7f4d4866e34faba5294df41bf3291b32c75f2b3ac6396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.956969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3aa8acc0-858c-4d33-bf15-1fd4096d71ab", "created": "2026-01-27T05:12:56.957804Z", "modified": "2026-01-27T05:12:56.957804Z", "relationship_type": "indicates", "source_ref": "indicator--7ce55d11-33a8-4668-9eb5-396d01920895", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe709288-d9ac-4381-9302-1beea9e81a91", "created": "2026-01-27T05:12:56.957983Z", "modified": "2026-01-27T05:12:56.957983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa70144ffaa96c445e5880d9f87af81a64650e03371c94d34d5e876aa9150bad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.957983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6858e855-2f0c-48ff-ae76-7989676d14c8", "created": "2026-01-27T05:12:56.958818Z", "modified": "2026-01-27T05:12:56.958818Z", "relationship_type": "indicates", "source_ref": "indicator--fe709288-d9ac-4381-9302-1beea9e81a91", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaab5417-9815-46d1-9968-6f43c18a1b8b", "created": "2026-01-27T05:12:56.958995Z", "modified": "2026-01-27T05:12:56.958995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='675f4412c360e47220d02dd74646058122f8b3a5b3631251e9f09447a4fc8373']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.958995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ad99909-bb4d-46dd-b024-cb7ceaefc616", "created": "2026-01-27T05:12:56.959829Z", "modified": "2026-01-27T05:12:56.959829Z", "relationship_type": "indicates", "source_ref": "indicator--eaab5417-9815-46d1-9968-6f43c18a1b8b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c0128f-ce55-482a-be52-c97e5fa84894", "created": "2026-01-27T05:12:56.960004Z", "modified": "2026-01-27T05:12:56.960004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bff0087b9e9d47e64841c0fd32d89c521d1ff4065d695472c7c107ef620ac9ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.960004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7073b031-9cb9-49bf-b5e4-de4c7725f040", "created": "2026-01-27T05:12:56.960848Z", "modified": "2026-01-27T05:12:56.960848Z", "relationship_type": "indicates", "source_ref": "indicator--95c0128f-ce55-482a-be52-c97e5fa84894", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbe3fdc-b3a0-4600-aff5-a07b64475304", "created": "2026-01-27T05:12:56.961024Z", "modified": "2026-01-27T05:12:56.961024Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48f50083d3ceb26776bc8b8196b5ca0b174ba090a7800ff1501332363a5d7a12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.961024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89fc0328-06fc-4720-8b92-397644b8afa8", "created": "2026-01-27T05:12:56.961931Z", "modified": "2026-01-27T05:12:56.961931Z", "relationship_type": "indicates", "source_ref": "indicator--ffbe3fdc-b3a0-4600-aff5-a07b64475304", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df5ac11-b713-4190-b1e2-ee3256fae0d7", "created": "2026-01-27T05:12:56.96213Z", "modified": "2026-01-27T05:12:56.96213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='abd7c2b08c1393f7eb64d4170ef995b24cb09922ac62e4f4bdf50353f1bc703b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.96213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f253056-4ace-40d5-ad9a-81d13fbd9596", "created": "2026-01-27T05:12:56.963121Z", "modified": "2026-01-27T05:12:56.963121Z", "relationship_type": "indicates", "source_ref": "indicator--4df5ac11-b713-4190-b1e2-ee3256fae0d7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2044352-5f24-450a-80d4-53cf32f410c5", "created": "2026-01-27T05:12:56.963302Z", "modified": "2026-01-27T05:12:56.963302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0be371f3b8d403837e9ab11e4f7c5671db79b8306bc02bdc6f5c1a90c0846fb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.963302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a9d29c6-539a-4684-96e1-24950b37a364", "created": "2026-01-27T05:12:56.964158Z", "modified": "2026-01-27T05:12:56.964158Z", "relationship_type": "indicates", "source_ref": "indicator--a2044352-5f24-450a-80d4-53cf32f410c5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503f952c-49d9-47b8-b2db-877dba30ce1b", "created": "2026-01-27T05:12:56.964338Z", "modified": "2026-01-27T05:12:56.964338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ac709aa1616c2dfb604e2d14a2063e054356130ae04fe58ade6217c23e41a03']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.964338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b3b52fa-6bdf-4083-a101-22ffbe169bd4", "created": "2026-01-27T05:12:56.965187Z", "modified": "2026-01-27T05:12:56.965187Z", "relationship_type": "indicates", "source_ref": "indicator--503f952c-49d9-47b8-b2db-877dba30ce1b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f798f906-588e-4dea-b915-060bee789790", "created": "2026-01-27T05:12:56.965364Z", "modified": "2026-01-27T05:12:56.965364Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ad5e67bb397e3ae0db83417eddf371e20ff515cd3aa4dab30dd231e10175e38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.965364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5f6648e-df16-45f1-b897-ec0f3d0d0f50", "created": "2026-01-27T05:12:56.966206Z", "modified": "2026-01-27T05:12:56.966206Z", "relationship_type": "indicates", "source_ref": "indicator--f798f906-588e-4dea-b915-060bee789790", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b78f4d2-630b-4b73-a137-1d7f12553e17", "created": "2026-01-27T05:12:56.966385Z", "modified": "2026-01-27T05:12:56.966385Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1af35ac556274230ece02f1e1c386357357e1b3c9ebe6fc6475fb4d92594323']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.966385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eea9ba62-72c3-4494-9a95-39c7fc973332", "created": "2026-01-27T05:12:56.967233Z", "modified": "2026-01-27T05:12:56.967233Z", "relationship_type": "indicates", "source_ref": "indicator--6b78f4d2-630b-4b73-a137-1d7f12553e17", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678e04db-fca3-40a5-9018-0fd347a01bae", "created": "2026-01-27T05:12:56.967409Z", "modified": "2026-01-27T05:12:56.967409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='699ce42b7abd530c3bda8340a5f5d657f579e303b35d03affabd71eafab5b1d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.967409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87906c9e-6b0d-4f1f-829e-d7b289a615c8", "created": "2026-01-27T05:12:56.968406Z", "modified": "2026-01-27T05:12:56.968406Z", "relationship_type": "indicates", "source_ref": "indicator--678e04db-fca3-40a5-9018-0fd347a01bae", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589c890e-b808-41c9-9191-51b7aa16aeab", "created": "2026-01-27T05:12:56.968701Z", "modified": "2026-01-27T05:12:56.968701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5b706ddb8c7e71c8e782ee8f538bb300e120cd0ceaebdf7e2ddbbfc2370bde1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.968701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d595e274-42e8-41e2-9dc7-e5c949d7d152", "created": "2026-01-27T05:12:56.970244Z", "modified": "2026-01-27T05:12:56.970244Z", "relationship_type": "indicates", "source_ref": "indicator--589c890e-b808-41c9-9191-51b7aa16aeab", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c86b190-b7d4-489e-8c23-6e6c20ba41b9", "created": "2026-01-27T05:12:56.970422Z", "modified": "2026-01-27T05:12:56.970422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f99cfd3990364cbad1d3c25363752a69c3a77b9ba9f30f292f2694becacf3474']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.970422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c1054d4-cb63-4fd8-92c9-d0bc2b83bb5e", "created": "2026-01-27T05:12:56.971603Z", "modified": "2026-01-27T05:12:56.971603Z", "relationship_type": "indicates", "source_ref": "indicator--8c86b190-b7d4-489e-8c23-6e6c20ba41b9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fce262-4e7e-4355-86f6-d5ab83bc7a43", "created": "2026-01-27T05:12:56.971799Z", "modified": "2026-01-27T05:12:56.971799Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fca98daedd9ca31e37054d42f4da870fa2a08d716bf121435eee6dfef51c00fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.971799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c755c1ab-8f6d-48a9-b2fa-5286801a50dd", "created": "2026-01-27T05:12:56.972788Z", "modified": "2026-01-27T05:12:56.972788Z", "relationship_type": "indicates", "source_ref": "indicator--93fce262-4e7e-4355-86f6-d5ab83bc7a43", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e2a209-475c-42a5-9151-b74c02dcefa7", "created": "2026-01-27T05:12:56.972972Z", "modified": "2026-01-27T05:12:56.972972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c74525f9a8e02906951521e210357204ce82d9f907d42015127c6ac692f7a748']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.972972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41cc6c71-70e5-4f32-a396-cfc97c7b4554", "created": "2026-01-27T05:12:56.973863Z", "modified": "2026-01-27T05:12:56.973863Z", "relationship_type": "indicates", "source_ref": "indicator--44e2a209-475c-42a5-9151-b74c02dcefa7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9015234c-e50c-4a7f-b2c7-39656b825e29", "created": "2026-01-27T05:12:56.974081Z", "modified": "2026-01-27T05:12:56.974081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b81f7a9152d12b3db9a1e7981abe2786630e181db569fc7acc7cd32f0926159f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.974081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c5e420f-675b-425e-adf0-12775e347cbc", "created": "2026-01-27T05:12:56.975131Z", "modified": "2026-01-27T05:12:56.975131Z", "relationship_type": "indicates", "source_ref": "indicator--9015234c-e50c-4a7f-b2c7-39656b825e29", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4205cd30-27a9-46e8-84b1-259d5eb64c4a", "created": "2026-01-27T05:12:56.975423Z", "modified": "2026-01-27T05:12:56.975423Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a33c25a56b1853e0eecc9ba44c5c4e082253d064a665e37c894d4521291f0465']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.975423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cdbe697-31b9-47ed-99f6-b325dbba089d", "created": "2026-01-27T05:12:56.976636Z", "modified": "2026-01-27T05:12:56.976636Z", "relationship_type": "indicates", "source_ref": "indicator--4205cd30-27a9-46e8-84b1-259d5eb64c4a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5499a014-094a-424d-872c-8d087d5732a6", "created": "2026-01-27T05:12:56.976875Z", "modified": "2026-01-27T05:12:56.976875Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e6281d60175b988e71a2f26c259cbbc51913caca6bedcba90eaf47ad8394883']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.976875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--228c29dc-5221-420f-8e3f-7427a2f7a021", "created": "2026-01-27T05:12:56.97774Z", "modified": "2026-01-27T05:12:56.97774Z", "relationship_type": "indicates", "source_ref": "indicator--5499a014-094a-424d-872c-8d087d5732a6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b0a2c2-af66-445a-9252-db660f70420a", "created": "2026-01-27T05:12:56.977933Z", "modified": "2026-01-27T05:12:56.977933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='274e086c5c34ad6f1d9eb2b5cb9dcb87d647e7a2c44e18d4529f85c5ebaaf5cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.977933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a6ab9c8-6fc6-439c-b135-2d23fe7806da", "created": "2026-01-27T05:12:56.978768Z", "modified": "2026-01-27T05:12:56.978768Z", "relationship_type": "indicates", "source_ref": "indicator--75b0a2c2-af66-445a-9252-db660f70420a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca6967b-3376-48cc-a2e6-b7e1e013d42b", "created": "2026-01-27T05:12:56.978947Z", "modified": "2026-01-27T05:12:56.978947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37bf018a269a42d994f43d40376b2bb431edf39fd86397b78a411c4513b5d27f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.978947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68ec561f-e259-4b35-9a6f-5fde580c5e81", "created": "2026-01-27T05:12:56.979787Z", "modified": "2026-01-27T05:12:56.979787Z", "relationship_type": "indicates", "source_ref": "indicator--cca6967b-3376-48cc-a2e6-b7e1e013d42b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3036263-ca2a-4b51-b4ff-f434d9e1188c", "created": "2026-01-27T05:12:56.979966Z", "modified": "2026-01-27T05:12:56.979966Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e061d10fe7767f44210c8d26f49a5d26f15d366f026db762277ca11430c904f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.979966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--007f4845-e578-4250-bbee-7e64e9c48291", "created": "2026-01-27T05:12:56.980812Z", "modified": "2026-01-27T05:12:56.980812Z", "relationship_type": "indicates", "source_ref": "indicator--c3036263-ca2a-4b51-b4ff-f434d9e1188c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0172326d-77f4-423e-9c35-20941b31496c", "created": "2026-01-27T05:12:56.980992Z", "modified": "2026-01-27T05:12:56.980992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0788826eee97e14f8d6a7e66c7f431ddfa26f391bbb91e038d914861cbf67362']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.980992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a50436e6-15ce-405e-bfb8-556ef7fc686a", "created": "2026-01-27T05:12:56.981835Z", "modified": "2026-01-27T05:12:56.981835Z", "relationship_type": "indicates", "source_ref": "indicator--0172326d-77f4-423e-9c35-20941b31496c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4163c3-003b-4451-9325-1f5091527af6", "created": "2026-01-27T05:12:56.982013Z", "modified": "2026-01-27T05:12:56.982013Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ba0ccce0415ae30d28ac758d41cb2ff64326c0ca9b1d3bb0b13dafeb4ae5d82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.982013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--564cd953-103c-44c2-a662-b5479c3ee879", "created": "2026-01-27T05:12:56.983001Z", "modified": "2026-01-27T05:12:56.983001Z", "relationship_type": "indicates", "source_ref": "indicator--de4163c3-003b-4451-9325-1f5091527af6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68610793-30a1-4183-a01d-ac6271557e32", "created": "2026-01-27T05:12:56.983182Z", "modified": "2026-01-27T05:12:56.983182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdeecb6a46f63ff28a6a5bc093cb80ebda01b8d0c4c155735b9b1d824c975620']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.983182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbe752ae-786f-41c6-bfd9-aef3e61bffd4", "created": "2026-01-27T05:12:56.984038Z", "modified": "2026-01-27T05:12:56.984038Z", "relationship_type": "indicates", "source_ref": "indicator--68610793-30a1-4183-a01d-ac6271557e32", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7090a84d-23cc-4912-8531-7c471454ab99", "created": "2026-01-27T05:12:56.984216Z", "modified": "2026-01-27T05:12:56.984216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f182f0fdde80349a05b3d74c9cfc74fa728ae5f64221e3cfb1a509a3a32fdf9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.984216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--537a7256-80be-4cde-b075-acaa69a696c2", "created": "2026-01-27T05:12:56.985062Z", "modified": "2026-01-27T05:12:56.985062Z", "relationship_type": "indicates", "source_ref": "indicator--7090a84d-23cc-4912-8531-7c471454ab99", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f399dc02-b183-4fa8-86a6-074d1aa6bc1d", "created": "2026-01-27T05:12:56.985259Z", "modified": "2026-01-27T05:12:56.985259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70cdfa7cd38c4feeb36f8c726e2a47a85c718629bfcd683224e4afef577b4427']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.985259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c3883f5-9354-4e86-91d3-b24952b6da0b", "created": "2026-01-27T05:12:56.986112Z", "modified": "2026-01-27T05:12:56.986112Z", "relationship_type": "indicates", "source_ref": "indicator--f399dc02-b183-4fa8-86a6-074d1aa6bc1d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee4ec38-4267-437c-b3e9-7678ad3c6e11", "created": "2026-01-27T05:12:56.986291Z", "modified": "2026-01-27T05:12:56.986291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96dce1532a4273e8e32da5b8110b739ef1dae055be9026f0c40a6112bdc09180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.986291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78e6cb30-01ae-4ffc-975c-486d74ef8114", "created": "2026-01-27T05:12:56.987141Z", "modified": "2026-01-27T05:12:56.987141Z", "relationship_type": "indicates", "source_ref": "indicator--dee4ec38-4267-437c-b3e9-7678ad3c6e11", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5b2dbf-68c0-4aaa-96c0-80f4e2b1f019", "created": "2026-01-27T05:12:56.987319Z", "modified": "2026-01-27T05:12:56.987319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e8efb2e0a97d9d454b0a8165376e3e36a5005cec7a5e3addaa3b2edf9d5b1c9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.987319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe987ecd-2e35-4827-8dcc-1c392ae326fb", "created": "2026-01-27T05:12:56.988165Z", "modified": "2026-01-27T05:12:56.988165Z", "relationship_type": "indicates", "source_ref": "indicator--0e5b2dbf-68c0-4aaa-96c0-80f4e2b1f019", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd9b89d-b74f-4c01-9038-d8d994d47891", "created": "2026-01-27T05:12:56.988341Z", "modified": "2026-01-27T05:12:56.988341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18a5569e795b152ce3ad4a025877e85d2c1856660fc3a43baf4ba096066bbbb3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.988341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6886c0bb-9a98-48d5-9f14-5d3ec198c082", "created": "2026-01-27T05:12:56.989185Z", "modified": "2026-01-27T05:12:56.989185Z", "relationship_type": "indicates", "source_ref": "indicator--ccd9b89d-b74f-4c01-9038-d8d994d47891", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e980176-34f3-461a-82a5-3d6a88deb461", "created": "2026-01-27T05:12:56.989363Z", "modified": "2026-01-27T05:12:56.989363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ac5f31eb8a0cbf4363548f6b87c9346a33c17189fb55cbb7b19b60181ef298e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.989363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09f6ada5-e95f-4b0e-9731-72dbc4c8d684", "created": "2026-01-27T05:12:56.990206Z", "modified": "2026-01-27T05:12:56.990206Z", "relationship_type": "indicates", "source_ref": "indicator--4e980176-34f3-461a-82a5-3d6a88deb461", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c03a54-a554-4b58-ad2e-26e11df480cf", "created": "2026-01-27T05:12:56.990382Z", "modified": "2026-01-27T05:12:56.990382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87a1fd64100929bd36e355e09cf5e9de57d7080ddc498541cce64f3323141b84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.990382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d52d8c90-e857-4bb4-9f8b-5fa9571cef21", "created": "2026-01-27T05:12:56.991236Z", "modified": "2026-01-27T05:12:56.991236Z", "relationship_type": "indicates", "source_ref": "indicator--d2c03a54-a554-4b58-ad2e-26e11df480cf", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfac51de-01b6-47ee-9b2e-8dce790e0136", "created": "2026-01-27T05:12:56.991411Z", "modified": "2026-01-27T05:12:56.991411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05500b56a49dab3535cf5443a1040d8a73a96eada3d904df1b1faf2f95a89f7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.991411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d7be23e-21de-4ccf-976c-dfa3e3679aa3", "created": "2026-01-27T05:12:56.992396Z", "modified": "2026-01-27T05:12:56.992396Z", "relationship_type": "indicates", "source_ref": "indicator--cfac51de-01b6-47ee-9b2e-8dce790e0136", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ee6085-725c-46b2-ba73-4c8536854ae0", "created": "2026-01-27T05:12:56.992575Z", "modified": "2026-01-27T05:12:56.992575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='163197ba35235b114d769b54f4603d9e525878b6bd74155ce94be3c7309864aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.992575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf92ecd0-69df-44ef-ab1e-2b9381ea398e", "created": "2026-01-27T05:12:56.993419Z", "modified": "2026-01-27T05:12:56.993419Z", "relationship_type": "indicates", "source_ref": "indicator--c5ee6085-725c-46b2-ba73-4c8536854ae0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372a0046-4bef-4776-86bc-172996e01d83", "created": "2026-01-27T05:12:56.993595Z", "modified": "2026-01-27T05:12:56.993595Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00b776ef565563d510b9eb428d7dddd52e8edf3bd3c38947a88cd9d7d637c874']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.993595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f713db4b-44f6-486f-9bf1-4ceb0e130b3c", "created": "2026-01-27T05:12:56.994441Z", "modified": "2026-01-27T05:12:56.994441Z", "relationship_type": "indicates", "source_ref": "indicator--372a0046-4bef-4776-86bc-172996e01d83", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480fe614-db78-4fd9-93b8-28dd73997ea7", "created": "2026-01-27T05:12:56.994619Z", "modified": "2026-01-27T05:12:56.994619Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9103be9e4e0c016fbf7541a8056903d1e485cb6633003ed4b9afe201930b521']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.994619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--307c6660-f3aa-470d-b1ce-e45414438a5f", "created": "2026-01-27T05:12:56.995483Z", "modified": "2026-01-27T05:12:56.995483Z", "relationship_type": "indicates", "source_ref": "indicator--480fe614-db78-4fd9-93b8-28dd73997ea7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b1a5de-3db6-474d-98fa-a329029f1fd9", "created": "2026-01-27T05:12:56.99566Z", "modified": "2026-01-27T05:12:56.99566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3d5224e78aa075da25d4407e8f56c1dca4bde8a42d5fb850dab2f40440217dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.99566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2753f4cc-655e-4a0a-a0b0-6f136b7eef83", "created": "2026-01-27T05:12:56.996509Z", "modified": "2026-01-27T05:12:56.996509Z", "relationship_type": "indicates", "source_ref": "indicator--18b1a5de-3db6-474d-98fa-a329029f1fd9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5726ed42-b454-4495-91ed-e4487061a3b9", "created": "2026-01-27T05:12:56.996699Z", "modified": "2026-01-27T05:12:56.996699Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1d4cc24e8b612a7c1940400590a471a197a695c9917afadb0457856cde27a1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.996699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9157cb7-db59-43b3-8ad4-07f508f4cc86", "created": "2026-01-27T05:12:56.997552Z", "modified": "2026-01-27T05:12:56.997552Z", "relationship_type": "indicates", "source_ref": "indicator--5726ed42-b454-4495-91ed-e4487061a3b9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfa0e5a-8a66-4738-8ca0-8e71784921f1", "created": "2026-01-27T05:12:56.997727Z", "modified": "2026-01-27T05:12:56.997727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af830b3b974f05d6df72295ac7603a766a6cc4d7bf0ac6acbe44753e98e9319e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.997727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33fcb934-cc27-49d8-8700-cc70dde3c976", "created": "2026-01-27T05:12:56.998571Z", "modified": "2026-01-27T05:12:56.998571Z", "relationship_type": "indicates", "source_ref": "indicator--7dfa0e5a-8a66-4738-8ca0-8e71784921f1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f336c9ee-d37e-4664-8c61-6eeeddc7e662", "created": "2026-01-27T05:12:56.998766Z", "modified": "2026-01-27T05:12:56.998766Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc07725a32b06848f548214d3419e239d7d717e6debea3765ee6685b0eed16a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.998766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34e6a93e-073e-4c05-9841-306a96904082", "created": "2026-01-27T05:12:56.999608Z", "modified": "2026-01-27T05:12:56.999608Z", "relationship_type": "indicates", "source_ref": "indicator--f336c9ee-d37e-4664-8c61-6eeeddc7e662", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a560f0-056c-4ef9-ae06-d265b5caf4d2", "created": "2026-01-27T05:12:56.999804Z", "modified": "2026-01-27T05:12:56.999804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb23a4d700a976ad3dba0b1e10b5ece3e37ad455887983bc067cb55b9cb9cc06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:56.999804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--349611a4-a68b-4f81-993b-263d28c5aa88", "created": "2026-01-27T05:12:57.000781Z", "modified": "2026-01-27T05:12:57.000781Z", "relationship_type": "indicates", "source_ref": "indicator--58a560f0-056c-4ef9-ae06-d265b5caf4d2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856a0afc-fd2e-49f0-a79c-aca27d674e52", "created": "2026-01-27T05:12:57.000963Z", "modified": "2026-01-27T05:12:57.000963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adc012af3b25e51f9353e23483366eb79f7559dd5bdeb03e518a7e34aa6a9727']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.000963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--780874a8-7183-491a-8a0b-2bce91c749d6", "created": "2026-01-27T05:12:57.001802Z", "modified": "2026-01-27T05:12:57.001802Z", "relationship_type": "indicates", "source_ref": "indicator--856a0afc-fd2e-49f0-a79c-aca27d674e52", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d35bd5a-4b4c-4d0a-834d-c76159cf3dc3", "created": "2026-01-27T05:12:57.001982Z", "modified": "2026-01-27T05:12:57.001982Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06f368cc3e1a84c7976f7b7749ec7d6d8e1a654cf38648161e27b533b788f08e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.001982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a515104-c826-439f-ac9b-b5f584d8d330", "created": "2026-01-27T05:12:57.00283Z", "modified": "2026-01-27T05:12:57.00283Z", "relationship_type": "indicates", "source_ref": "indicator--0d35bd5a-4b4c-4d0a-834d-c76159cf3dc3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e043761a-a01d-4d18-a933-3dc33b4cffbc", "created": "2026-01-27T05:12:57.003009Z", "modified": "2026-01-27T05:12:57.003009Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd3b1d4f1fb667b1aa2e20f84085b60c6e36fe08f33fb5d89ec0f54b5ef78cc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.003009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab4884a2-d2b4-4706-995e-e687c9cc1e64", "created": "2026-01-27T05:12:57.003967Z", "modified": "2026-01-27T05:12:57.003967Z", "relationship_type": "indicates", "source_ref": "indicator--e043761a-a01d-4d18-a933-3dc33b4cffbc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477dae50-3c99-4c96-bb21-92080f46ff87", "created": "2026-01-27T05:12:57.004147Z", "modified": "2026-01-27T05:12:57.004147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac79c7fb883d898c3870daf08f7cd128b835032044592b5298eae69b72ca9d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.004147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3c8438b-a1c3-46e5-a1de-6dc64c5f6cee", "created": "2026-01-27T05:12:57.005002Z", "modified": "2026-01-27T05:12:57.005002Z", "relationship_type": "indicates", "source_ref": "indicator--477dae50-3c99-4c96-bb21-92080f46ff87", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c413b2-6c06-4f63-b583-8fa5de3beda3", "created": "2026-01-27T05:12:57.00518Z", "modified": "2026-01-27T05:12:57.00518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85bc98904027679b1af7875442e202a52b4beecf19d48c3cdf92f6ecd2c4123a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.00518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--725f7ae8-6aa6-4c5c-86e5-b0f44f7f2b03", "created": "2026-01-27T05:12:57.006024Z", "modified": "2026-01-27T05:12:57.006024Z", "relationship_type": "indicates", "source_ref": "indicator--e9c413b2-6c06-4f63-b583-8fa5de3beda3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aba813-9352-44aa-ae67-df560cbe85a7", "created": "2026-01-27T05:12:57.006199Z", "modified": "2026-01-27T05:12:57.006199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='777c920743b86dcc87953a1b963e0b792a05436cd17b3e0ff6e7d94b5cbf9a01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.006199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2197830-1226-4a80-9406-a3a0a3dadd0c", "created": "2026-01-27T05:12:57.007079Z", "modified": "2026-01-27T05:12:57.007079Z", "relationship_type": "indicates", "source_ref": "indicator--91aba813-9352-44aa-ae67-df560cbe85a7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac5b439-83bc-45a0-8038-cf692fb32ced", "created": "2026-01-27T05:12:57.007262Z", "modified": "2026-01-27T05:12:57.007262Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5eb3168d4294b9a69f2a448a2b11cdb437e4ffca0aad5449b7851d4a56bf440']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.007262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01fffcfc-80d3-4943-bced-c9879bbcc4f6", "created": "2026-01-27T05:12:57.00812Z", "modified": "2026-01-27T05:12:57.00812Z", "relationship_type": "indicates", "source_ref": "indicator--1ac5b439-83bc-45a0-8038-cf692fb32ced", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e2c4a8-70c2-4d6a-8fad-2ec99161d634", "created": "2026-01-27T05:12:57.008298Z", "modified": "2026-01-27T05:12:57.008298Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c1a21a7de0a68158b9c1933b3910d53bf0ef7fe7fc35538f769016d22d00062']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.008298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faaf9d1c-a3c0-4695-9193-c78a0bbfaffd", "created": "2026-01-27T05:12:57.009362Z", "modified": "2026-01-27T05:12:57.009362Z", "relationship_type": "indicates", "source_ref": "indicator--20e2c4a8-70c2-4d6a-8fad-2ec99161d634", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecd0d42-c4db-4c28-843e-bdd294d8919b", "created": "2026-01-27T05:12:57.009603Z", "modified": "2026-01-27T05:12:57.009603Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9273e9be758dbd73e8f71154c17ae3e150477069d24a71e30338e60b54d300d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.009603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e3787b6-7ba4-4021-82d1-4410a803c3df", "created": "2026-01-27T05:12:57.010807Z", "modified": "2026-01-27T05:12:57.010807Z", "relationship_type": "indicates", "source_ref": "indicator--6ecd0d42-c4db-4c28-843e-bdd294d8919b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb39eb9-187e-4bf2-bc27-a20e8a588e10", "created": "2026-01-27T05:12:57.010996Z", "modified": "2026-01-27T05:12:57.010996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44b0b4bd26973348dbab8d4d7d9fc3116576e76d6bb3cb09c1362263ba94c890']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.010996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8852c958-f048-47aa-9032-7aed56673979", "created": "2026-01-27T05:12:57.01208Z", "modified": "2026-01-27T05:12:57.01208Z", "relationship_type": "indicates", "source_ref": "indicator--6fb39eb9-187e-4bf2-bc27-a20e8a588e10", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735c250a-b112-4eeb-afab-93358df48925", "created": "2026-01-27T05:12:57.012269Z", "modified": "2026-01-27T05:12:57.012269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4dbd129864a57380613cfc3a2cfd4f5fd1678073f520eab9d21b99ae63c59e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.012269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71d30915-a8f1-4ccf-b850-f91ac551e573", "created": "2026-01-27T05:12:57.013343Z", "modified": "2026-01-27T05:12:57.013343Z", "relationship_type": "indicates", "source_ref": "indicator--735c250a-b112-4eeb-afab-93358df48925", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f4793b-3c29-4307-8946-8d1e6928a954", "created": "2026-01-27T05:12:57.013535Z", "modified": "2026-01-27T05:12:57.013535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80f9df9a1e2127d59c39e456110ef80692c4c427905c69afecabff33121a97f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.013535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7449696f-8867-4176-b7c0-832a4488c37e", "created": "2026-01-27T05:12:57.014383Z", "modified": "2026-01-27T05:12:57.014383Z", "relationship_type": "indicates", "source_ref": "indicator--19f4793b-3c29-4307-8946-8d1e6928a954", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8575c01-e0c3-45de-a5b7-fe317411e80d", "created": "2026-01-27T05:12:57.014562Z", "modified": "2026-01-27T05:12:57.014562Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d12579ac49a2d46028e36ecda6fc577ba3c5b37c0e9ae2b73d1853206d99e6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.014562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7f2e77b-0c57-40f6-8b3c-b4812ebdf893", "created": "2026-01-27T05:12:57.015629Z", "modified": "2026-01-27T05:12:57.015629Z", "relationship_type": "indicates", "source_ref": "indicator--a8575c01-e0c3-45de-a5b7-fe317411e80d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ab9463-2f22-4c2f-be23-8743a0664ce2", "created": "2026-01-27T05:12:57.015831Z", "modified": "2026-01-27T05:12:57.015831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b16c30aee3e1bde998d9438d6b2e1de6c46b9fde625ca78b6927f3ee71aa5e80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.015831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af2bf567-45e5-465c-b85c-e85cc42d19f0", "created": "2026-01-27T05:12:57.016901Z", "modified": "2026-01-27T05:12:57.016901Z", "relationship_type": "indicates", "source_ref": "indicator--95ab9463-2f22-4c2f-be23-8743a0664ce2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9769a29e-1fc1-49db-9cb5-4302b1fb9b98", "created": "2026-01-27T05:12:57.017083Z", "modified": "2026-01-27T05:12:57.017083Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c4f8e95e1cc7a8f111ecd8efa767c2a932726cf23188429b44e8be83049b660b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.017083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27c2145a-e9cd-4ddd-8c4b-e28c774c8fd3", "created": "2026-01-27T05:12:57.018142Z", "modified": "2026-01-27T05:12:57.018142Z", "relationship_type": "indicates", "source_ref": "indicator--9769a29e-1fc1-49db-9cb5-4302b1fb9b98", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da6dcbd-69fd-44eb-b542-7cd914000780", "created": "2026-01-27T05:12:57.018324Z", "modified": "2026-01-27T05:12:57.018324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='478eb67281278595a36bd755398a2211017ed0f1220248efd2867ac3558f9918']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.018324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c757cbc4-ae20-4b2f-adad-5ce19505842a", "created": "2026-01-27T05:12:57.019245Z", "modified": "2026-01-27T05:12:57.019245Z", "relationship_type": "indicates", "source_ref": "indicator--5da6dcbd-69fd-44eb-b542-7cd914000780", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df01d4e0-8e02-4df1-858e-34dbfaadf26d", "created": "2026-01-27T05:12:57.01943Z", "modified": "2026-01-27T05:12:57.01943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b96d4c161d465d8dd094c3753b37e041f5da9dd56c81be049d26105988719b87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.01943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75abaac0-2369-4305-ae37-56a09cce40b6", "created": "2026-01-27T05:12:57.020297Z", "modified": "2026-01-27T05:12:57.020297Z", "relationship_type": "indicates", "source_ref": "indicator--df01d4e0-8e02-4df1-858e-34dbfaadf26d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98068d1-1e9a-44aa-b53f-b0c67b2daba2", "created": "2026-01-27T05:12:57.020476Z", "modified": "2026-01-27T05:12:57.020476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a91a67560f9139d9770f1ab0540c21753c90d85d9f400cb9a859a9ec3ab738af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.020476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51c363c0-7843-4588-815f-91fee923b966", "created": "2026-01-27T05:12:57.021484Z", "modified": "2026-01-27T05:12:57.021484Z", "relationship_type": "indicates", "source_ref": "indicator--d98068d1-1e9a-44aa-b53f-b0c67b2daba2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48169fbb-63d8-4aa2-b4cd-44f88f1b74d7", "created": "2026-01-27T05:12:57.021667Z", "modified": "2026-01-27T05:12:57.021667Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99335aa19f2e606eaa52b10600c0ae452d601aa3e87656f779718d436f2c526f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.021667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c22ebb11-b978-474b-bc60-97094dca95d9", "created": "2026-01-27T05:12:57.022515Z", "modified": "2026-01-27T05:12:57.022515Z", "relationship_type": "indicates", "source_ref": "indicator--48169fbb-63d8-4aa2-b4cd-44f88f1b74d7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5954f013-ef07-4594-9f2e-f63ef40ea1c8", "created": "2026-01-27T05:12:57.022693Z", "modified": "2026-01-27T05:12:57.022693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2459dc54196813a8ed703a996f984bd40620ed408521c27d70cfd354ffd7f4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.022693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca45f6a4-ff7d-4f72-a032-17c4663cf3e9", "created": "2026-01-27T05:12:57.023542Z", "modified": "2026-01-27T05:12:57.023542Z", "relationship_type": "indicates", "source_ref": "indicator--5954f013-ef07-4594-9f2e-f63ef40ea1c8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f811660-4153-43a7-994a-cdf0c1f85c4b", "created": "2026-01-27T05:12:57.023717Z", "modified": "2026-01-27T05:12:57.023717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf74c0b98403e3adf2f1f7b8217dfd9bf4ded4e94d5cdb91fe2bad7f794db414']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.023717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37e9079a-93a2-4783-abc4-cb521842521a", "created": "2026-01-27T05:12:57.024553Z", "modified": "2026-01-27T05:12:57.024553Z", "relationship_type": "indicates", "source_ref": "indicator--2f811660-4153-43a7-994a-cdf0c1f85c4b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152e33b2-2060-4060-8db3-80de651cc9b2", "created": "2026-01-27T05:12:57.024729Z", "modified": "2026-01-27T05:12:57.024729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c504f858bcd50bbef3b35b6d9ce8fbcb16e20c7b0bf5651338b0ceca6a0cab48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.024729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00c6b6d4-2e91-490f-8410-425e72e7e2a8", "created": "2026-01-27T05:12:57.02557Z", "modified": "2026-01-27T05:12:57.02557Z", "relationship_type": "indicates", "source_ref": "indicator--152e33b2-2060-4060-8db3-80de651cc9b2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25499891-aa20-4273-b670-b91da3c34f58", "created": "2026-01-27T05:12:57.025756Z", "modified": "2026-01-27T05:12:57.025756Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e3eba3ca72c9b614c535af39528c4a1d733e5a173282ab3dfb3a5e57964f23f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.025756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--281de7ae-8a5f-4481-9c45-7f7921fa59ad", "created": "2026-01-27T05:12:57.026585Z", "modified": "2026-01-27T05:12:57.026585Z", "relationship_type": "indicates", "source_ref": "indicator--25499891-aa20-4273-b670-b91da3c34f58", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce8341e-8595-4a2b-9c4d-26761a857af0", "created": "2026-01-27T05:12:57.026775Z", "modified": "2026-01-27T05:12:57.026775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf4bf9f58ab4f6fe7853256b8a432ec50a8f22e803b0ee0310fa02440d42a396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.026775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31562a3e-43b7-4b24-85f3-691954eb418d", "created": "2026-01-27T05:12:57.0276Z", "modified": "2026-01-27T05:12:57.0276Z", "relationship_type": "indicates", "source_ref": "indicator--7ce8341e-8595-4a2b-9c4d-26761a857af0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee46eae6-eb22-4e5e-8a83-788073e64dd0", "created": "2026-01-27T05:12:57.027797Z", "modified": "2026-01-27T05:12:57.027797Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad5dfd32c19afdca643b67fb251197489486ecfdc4d76ffa7e257da9bc343ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.027797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a47fc5f0-ec13-4cd5-af39-b54e3e42008a", "created": "2026-01-27T05:12:57.028618Z", "modified": "2026-01-27T05:12:57.028618Z", "relationship_type": "indicates", "source_ref": "indicator--ee46eae6-eb22-4e5e-8a83-788073e64dd0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b915575-63a4-4e7c-bd3e-02e0ae4cd64e", "created": "2026-01-27T05:12:57.028813Z", "modified": "2026-01-27T05:12:57.028813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a0341861cd8ab51567c5bc19e1e8bbdc35e2e02927b5ae1db1d2f5bae8784d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.028813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6fc765-7330-4c7f-99f2-8616a384b4f6", "created": "2026-01-27T05:12:57.029783Z", "modified": "2026-01-27T05:12:57.029783Z", "relationship_type": "indicates", "source_ref": "indicator--8b915575-63a4-4e7c-bd3e-02e0ae4cd64e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec46399c-6d12-4cdc-918c-0c0b9f4da558", "created": "2026-01-27T05:12:57.029965Z", "modified": "2026-01-27T05:12:57.029965Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a607b57949ecc77fc0a190e4e59ecaf3016cd08547cf4178d407b773433882a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.029965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21ca24c5-78b4-42dc-b852-808da6d1aa88", "created": "2026-01-27T05:12:57.030817Z", "modified": "2026-01-27T05:12:57.030817Z", "relationship_type": "indicates", "source_ref": "indicator--ec46399c-6d12-4cdc-918c-0c0b9f4da558", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27cf3bb-fd6e-4fc9-b9cc-7aed1f47a42f", "created": "2026-01-27T05:12:57.030997Z", "modified": "2026-01-27T05:12:57.030997Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54f22aa019b4b3ca72dbc26feb3c5fba4f7fd042b5e4c37da051e0e3bec269df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.030997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39c28020-ba9b-4710-bf3b-606d42a69b0c", "created": "2026-01-27T05:12:57.031833Z", "modified": "2026-01-27T05:12:57.031833Z", "relationship_type": "indicates", "source_ref": "indicator--e27cf3bb-fd6e-4fc9-b9cc-7aed1f47a42f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fd6323-6aa0-413e-899e-6530b7d2f5fa", "created": "2026-01-27T05:12:57.032012Z", "modified": "2026-01-27T05:12:57.032012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='697d45bec0f1fb1608f484fb95e59c8cecb1d6a1d86824e2a4860ef8dc3f28e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.032012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9e27aec-df17-4a23-b47a-daff881d3d99", "created": "2026-01-27T05:12:57.032858Z", "modified": "2026-01-27T05:12:57.032858Z", "relationship_type": "indicates", "source_ref": "indicator--a1fd6323-6aa0-413e-899e-6530b7d2f5fa", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27dbabc-b826-467d-a5ed-359db60a0a5d", "created": "2026-01-27T05:12:57.033036Z", "modified": "2026-01-27T05:12:57.033036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd20dae44d2ce870b03847702365bc7252e99695d9bcd9ebba3731e777ecaad7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.033036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b31ecde-1f49-4cf1-8652-98f609ee6f2b", "created": "2026-01-27T05:12:57.033887Z", "modified": "2026-01-27T05:12:57.033887Z", "relationship_type": "indicates", "source_ref": "indicator--e27dbabc-b826-467d-a5ed-359db60a0a5d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632fd28b-861b-4819-b4ce-3b34b434f0e3", "created": "2026-01-27T05:12:57.034068Z", "modified": "2026-01-27T05:12:57.034068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f695107e1981a75474100002d87a20ae34c30c142228aa38bc31462aea13d27b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.034068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92e2a336-0b87-466a-9134-e1bfabc21abd", "created": "2026-01-27T05:12:57.034906Z", "modified": "2026-01-27T05:12:57.034906Z", "relationship_type": "indicates", "source_ref": "indicator--632fd28b-861b-4819-b4ce-3b34b434f0e3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28daad5-6610-4e8f-9df5-a274a7282d7d", "created": "2026-01-27T05:12:57.035084Z", "modified": "2026-01-27T05:12:57.035084Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac97c96e4af1c501d3a14b262fb83c6c4979c0973c6f3b0c113434d8a5660aa0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.035084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bc55a18-4ada-4e4b-8174-894a2be7622e", "created": "2026-01-27T05:12:57.035923Z", "modified": "2026-01-27T05:12:57.035923Z", "relationship_type": "indicates", "source_ref": "indicator--d28daad5-6610-4e8f-9df5-a274a7282d7d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa3bf28-ec7d-4bc2-8166-c538137d35d7", "created": "2026-01-27T05:12:57.036167Z", "modified": "2026-01-27T05:12:57.036167Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c684ed7da2abbb571cb74b6b71480ecebfeac61e94e91bd193392c2967360066']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.036167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e7dc298-ed69-4010-8759-19dc2be5dcf3", "created": "2026-01-27T05:12:57.037032Z", "modified": "2026-01-27T05:12:57.037032Z", "relationship_type": "indicates", "source_ref": "indicator--5fa3bf28-ec7d-4bc2-8166-c538137d35d7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8403a188-ca65-4513-882a-6520d1cb70c8", "created": "2026-01-27T05:12:57.037212Z", "modified": "2026-01-27T05:12:57.037212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='223e545e6c755f16fe6084a32b1e853e7ab1236fe485ebe66aaebba040e5765e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.037212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c996df4-1026-4bc4-8401-161bed46b3a2", "created": "2026-01-27T05:12:57.03807Z", "modified": "2026-01-27T05:12:57.03807Z", "relationship_type": "indicates", "source_ref": "indicator--8403a188-ca65-4513-882a-6520d1cb70c8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04bfb5b-7866-4de9-980b-e08cff40774a", "created": "2026-01-27T05:12:57.038249Z", "modified": "2026-01-27T05:12:57.038249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bff36343808e864d693b094d1d671f39812b3b542501825b4f0d292d5f98b0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.038249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--013842b9-ce95-48fd-a174-3420816eab49", "created": "2026-01-27T05:12:57.039218Z", "modified": "2026-01-27T05:12:57.039218Z", "relationship_type": "indicates", "source_ref": "indicator--c04bfb5b-7866-4de9-980b-e08cff40774a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3667c2-5485-4684-8ece-11c399b91ab1", "created": "2026-01-27T05:12:57.039398Z", "modified": "2026-01-27T05:12:57.039398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f91ba35434cbf21d149f9c96aaa9dd1658ab77499a67ff03d83e90c08da7b8a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.039398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9386702a-59f3-4739-a783-e5e79dd75951", "created": "2026-01-27T05:12:57.040238Z", "modified": "2026-01-27T05:12:57.040238Z", "relationship_type": "indicates", "source_ref": "indicator--5f3667c2-5485-4684-8ece-11c399b91ab1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9ea2bb-83f1-4d24-9067-f9d3a75e10ee", "created": "2026-01-27T05:12:57.040414Z", "modified": "2026-01-27T05:12:57.040414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f1c73bfa7a1309fbdfb067ad5f3a06f1a44df73e8effc9b27c2c600c80ae62f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.040414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c88cacfd-a564-4436-9d49-030ddc525238", "created": "2026-01-27T05:12:57.041251Z", "modified": "2026-01-27T05:12:57.041251Z", "relationship_type": "indicates", "source_ref": "indicator--4f9ea2bb-83f1-4d24-9067-f9d3a75e10ee", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bc023f-f392-4b88-a088-9157f71270cc", "created": "2026-01-27T05:12:57.041434Z", "modified": "2026-01-27T05:12:57.041434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd5587f99c25d93b8e51cf487454d2d067fc7d5fe8e107ff6824b9dbd2bc7c97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.041434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd1af346-1cc6-4615-9a43-6f737aadc634", "created": "2026-01-27T05:12:57.042281Z", "modified": "2026-01-27T05:12:57.042281Z", "relationship_type": "indicates", "source_ref": "indicator--16bc023f-f392-4b88-a088-9157f71270cc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d526d56e-6539-44cb-a8b7-a457737dba89", "created": "2026-01-27T05:12:57.042464Z", "modified": "2026-01-27T05:12:57.042464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf01c02d795c2077c200311c4ab6b000ec74559cf9017a54d767e36fb26e3a41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.042464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07a91efc-413e-4d88-9eec-60dede94c433", "created": "2026-01-27T05:12:57.043396Z", "modified": "2026-01-27T05:12:57.043396Z", "relationship_type": "indicates", "source_ref": "indicator--d526d56e-6539-44cb-a8b7-a457737dba89", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bde40972-92f0-4c4a-afc4-e25ad4d2bd86", "created": "2026-01-27T05:12:57.043586Z", "modified": "2026-01-27T05:12:57.043586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38cdde1c18ed0afe6ee2a54d119e258af88489efed57acd27b1ddc591d5d1ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.043586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29bcafbe-10ec-411f-99da-7e5275d57b86", "created": "2026-01-27T05:12:57.044429Z", "modified": "2026-01-27T05:12:57.044429Z", "relationship_type": "indicates", "source_ref": "indicator--bde40972-92f0-4c4a-afc4-e25ad4d2bd86", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b00f3e-7339-4ac1-ac43-b4db79be8cd2", "created": "2026-01-27T05:12:57.044607Z", "modified": "2026-01-27T05:12:57.044607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9a42214d06b0ad5242d304df3cb0e10df345390e1fd06ed71e4209ce1dc6fc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.044607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e8ce326-9f31-4525-8927-6bc4514b8994", "created": "2026-01-27T05:12:57.045454Z", "modified": "2026-01-27T05:12:57.045454Z", "relationship_type": "indicates", "source_ref": "indicator--d9b00f3e-7339-4ac1-ac43-b4db79be8cd2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2844ab29-7295-49c1-8005-d47636a12928", "created": "2026-01-27T05:12:57.04563Z", "modified": "2026-01-27T05:12:57.04563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56d92ede777635bf80b1b7e873dc46c82bc0f1c5fcc9b44d6c93e1f49400ee44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.04563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0d2d141-f758-43f4-a3a3-c2e8a8ce9870", "created": "2026-01-27T05:12:57.046471Z", "modified": "2026-01-27T05:12:57.046471Z", "relationship_type": "indicates", "source_ref": "indicator--2844ab29-7295-49c1-8005-d47636a12928", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb66ca5-53da-4954-9199-56972c474890", "created": "2026-01-27T05:12:57.046649Z", "modified": "2026-01-27T05:12:57.046649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f761dea56b7d4a0ad40e55632da2e6e2de322d1cae3b117d1d27ea0b3346bd63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.046649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af6ca51d-0f51-4bf0-a4d7-e63781b4690f", "created": "2026-01-27T05:12:57.04749Z", "modified": "2026-01-27T05:12:57.04749Z", "relationship_type": "indicates", "source_ref": "indicator--cdb66ca5-53da-4954-9199-56972c474890", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8894fcea-45e2-4dd0-b27b-4f53f7e075c2", "created": "2026-01-27T05:12:57.047666Z", "modified": "2026-01-27T05:12:57.047666Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a96795ed6820823c95e436b788dea5e5c58c7f199d56d454b6fd6b53d827afbb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.047666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1da3373-421e-4025-8e38-753482d3e685", "created": "2026-01-27T05:12:57.048621Z", "modified": "2026-01-27T05:12:57.048621Z", "relationship_type": "indicates", "source_ref": "indicator--8894fcea-45e2-4dd0-b27b-4f53f7e075c2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db57579-38bd-4519-bfba-283bdcee28aa", "created": "2026-01-27T05:12:57.048813Z", "modified": "2026-01-27T05:12:57.048813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e544d7335a66ed9b369e386f2bed975e82458ee8a0ca05648cec8aef3ad4f9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.048813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8207a740-e5ac-4d99-98d7-76a805bda9c8", "created": "2026-01-27T05:12:57.049645Z", "modified": "2026-01-27T05:12:57.049645Z", "relationship_type": "indicates", "source_ref": "indicator--5db57579-38bd-4519-bfba-283bdcee28aa", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2509b2-51d3-485e-adcc-b61bda552370", "created": "2026-01-27T05:12:57.049838Z", "modified": "2026-01-27T05:12:57.049838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='616283cad705f9337ba35b2a19d5f18f9d78e23dd0802c33c185d95027854561']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.049838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0985ec05-c655-4cbe-b29c-92030539dc44", "created": "2026-01-27T05:12:57.050669Z", "modified": "2026-01-27T05:12:57.050669Z", "relationship_type": "indicates", "source_ref": "indicator--ed2509b2-51d3-485e-adcc-b61bda552370", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9becacfa-dcd6-485e-a136-2c135e93b6c4", "created": "2026-01-27T05:12:57.050864Z", "modified": "2026-01-27T05:12:57.050864Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82ebe4a0a595d9bcaa32cd32de5757f85b8347a42cecd8bee8792e60f0416f8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.050864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--986b5195-ef7e-418d-ae46-5f294a32afc4", "created": "2026-01-27T05:12:57.051701Z", "modified": "2026-01-27T05:12:57.051701Z", "relationship_type": "indicates", "source_ref": "indicator--9becacfa-dcd6-485e-a136-2c135e93b6c4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abca4d7-048d-4c99-91e8-5326007ad643", "created": "2026-01-27T05:12:57.051893Z", "modified": "2026-01-27T05:12:57.051893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f227d2415e2218adc8b14b50bc4c475e3edbbc81fe6daabe93e7cd9671c944d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.051893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93be901a-00a4-4069-bb55-df08b9d4d73d", "created": "2026-01-27T05:12:57.052724Z", "modified": "2026-01-27T05:12:57.052724Z", "relationship_type": "indicates", "source_ref": "indicator--1abca4d7-048d-4c99-91e8-5326007ad643", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b27612-ccaf-4301-b499-bfa5bcc49654", "created": "2026-01-27T05:12:57.052918Z", "modified": "2026-01-27T05:12:57.052918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6dbe5e7bf359d503c03bda35bfd5ed139e51ef92444235d4cfbfb2f60579c755']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.052918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8398029b-c146-4cb3-bdb5-09bcecea0f9f", "created": "2026-01-27T05:12:57.053742Z", "modified": "2026-01-27T05:12:57.053742Z", "relationship_type": "indicates", "source_ref": "indicator--73b27612-ccaf-4301-b499-bfa5bcc49654", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaf7490-b876-443c-8a2a-a43a484540e1", "created": "2026-01-27T05:12:57.053935Z", "modified": "2026-01-27T05:12:57.053935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d07c495d093b60de69e0f612a0d3bd75144532e377153b1c1b9128092e9d4f93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.053935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d39cb5ec-e6fc-4333-b771-4974fd75649e", "created": "2026-01-27T05:12:57.054784Z", "modified": "2026-01-27T05:12:57.054784Z", "relationship_type": "indicates", "source_ref": "indicator--ddaf7490-b876-443c-8a2a-a43a484540e1", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7c4a1c-df98-4e90-abcf-d425b96e36c7", "created": "2026-01-27T05:12:57.054963Z", "modified": "2026-01-27T05:12:57.054963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='878bc1f24e4d3026a1421c746aca699764967bd020fd62ef1c93515d0028642a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.054963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82813634-ea62-4b74-a406-861effb4abe0", "created": "2026-01-27T05:12:57.05581Z", "modified": "2026-01-27T05:12:57.05581Z", "relationship_type": "indicates", "source_ref": "indicator--7a7c4a1c-df98-4e90-abcf-d425b96e36c7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0cf1a9-e112-4356-9062-59ee915f070b", "created": "2026-01-27T05:12:57.055988Z", "modified": "2026-01-27T05:12:57.055988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e298a7b804f97b31b79a2a3514bd1ab608847e507c1a7234c060b98adf287838']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.055988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--638cfb12-dd92-46c9-844c-71242261129a", "created": "2026-01-27T05:12:57.057212Z", "modified": "2026-01-27T05:12:57.057212Z", "relationship_type": "indicates", "source_ref": "indicator--fe0cf1a9-e112-4356-9062-59ee915f070b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dc8ac7-ca61-4578-890d-59c9f80bdea5", "created": "2026-01-27T05:12:57.057391Z", "modified": "2026-01-27T05:12:57.057391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f45d484c1e7bf7b2d61ec07165308ce6cd94c4b071fa2af521f085928d8338a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.057391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39ed6306-2c28-415b-b54d-2cf745a70bda", "created": "2026-01-27T05:12:57.058236Z", "modified": "2026-01-27T05:12:57.058236Z", "relationship_type": "indicates", "source_ref": "indicator--b3dc8ac7-ca61-4578-890d-59c9f80bdea5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036fb429-a518-4464-8b13-c482be2e8901", "created": "2026-01-27T05:12:57.058414Z", "modified": "2026-01-27T05:12:57.058414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ec050ee12ad53b3a15c41c97f6a1728e1f1650249ce8049658ea33ca88ab9b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.058414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4282d39-0346-46dc-bb9b-54e20d4b955b", "created": "2026-01-27T05:12:57.059276Z", "modified": "2026-01-27T05:12:57.059276Z", "relationship_type": "indicates", "source_ref": "indicator--036fb429-a518-4464-8b13-c482be2e8901", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be801e6-5026-4160-994c-84bc712b28e8", "created": "2026-01-27T05:12:57.05947Z", "modified": "2026-01-27T05:12:57.05947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83f23a3cb934d8c3492bf81af36853983db5a80d0a105650ee2a87455f06b959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.05947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8746d13f-580d-40f2-8ba3-c8b1c43ec712", "created": "2026-01-27T05:12:57.060374Z", "modified": "2026-01-27T05:12:57.060374Z", "relationship_type": "indicates", "source_ref": "indicator--2be801e6-5026-4160-994c-84bc712b28e8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcef6a9-92be-48cb-8dc9-b8f08fcb107f", "created": "2026-01-27T05:12:57.060556Z", "modified": "2026-01-27T05:12:57.060556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fa36da8909548c83d9e8917e4b8ea1409b2ffe88fa5dab02c51611ee87a53f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.060556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--201083dc-1a9f-4118-8abb-0cc886c69142", "created": "2026-01-27T05:12:57.061407Z", "modified": "2026-01-27T05:12:57.061407Z", "relationship_type": "indicates", "source_ref": "indicator--9dcef6a9-92be-48cb-8dc9-b8f08fcb107f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d520358-dfa8-49bf-a88d-e437586858ee", "created": "2026-01-27T05:12:57.06159Z", "modified": "2026-01-27T05:12:57.06159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='753a87623aed19819a702657e2eba9304f93e126e425168dbf3e142a148f9090']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.06159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6d8de75-a9e1-4d78-98a4-2b560cbd72c3", "created": "2026-01-27T05:12:57.06244Z", "modified": "2026-01-27T05:12:57.06244Z", "relationship_type": "indicates", "source_ref": "indicator--4d520358-dfa8-49bf-a88d-e437586858ee", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27718bd7-ec75-41f7-853a-c6def2031e0f", "created": "2026-01-27T05:12:57.062621Z", "modified": "2026-01-27T05:12:57.062621Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3431bbb0a073c4529a869d0453d8284e3d684cf7e16cad947fac90dcf2513023']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.062621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa49b1c2-102b-4442-adae-a6be93b10ca8", "created": "2026-01-27T05:12:57.063461Z", "modified": "2026-01-27T05:12:57.063461Z", "relationship_type": "indicates", "source_ref": "indicator--27718bd7-ec75-41f7-853a-c6def2031e0f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63de2e14-c71e-4fb5-b53c-42f335b208cc", "created": "2026-01-27T05:12:57.063637Z", "modified": "2026-01-27T05:12:57.063637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97dfdfb46328ae1a73dead8e4771b2ffc67cb844d95a1e6f0cbe308b41790c3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.063637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a6b52f8-898d-4407-bd17-36fb1d4b6d07", "created": "2026-01-27T05:12:57.064479Z", "modified": "2026-01-27T05:12:57.064479Z", "relationship_type": "indicates", "source_ref": "indicator--63de2e14-c71e-4fb5-b53c-42f335b208cc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ba0335-1417-4d72-9104-b8dbe40776fb", "created": "2026-01-27T05:12:57.064654Z", "modified": "2026-01-27T05:12:57.064654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c63327fbf16551846d4b5b3bf787700ae56aed91d6abd516bd1e3973c31656b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.064654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0f20600-2d91-4111-911d-4925779e3944", "created": "2026-01-27T05:12:57.065506Z", "modified": "2026-01-27T05:12:57.065506Z", "relationship_type": "indicates", "source_ref": "indicator--c5ba0335-1417-4d72-9104-b8dbe40776fb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0d98be-2bb8-462b-9042-85e56cb36035", "created": "2026-01-27T05:12:57.065688Z", "modified": "2026-01-27T05:12:57.065688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28e69ca9b92cda079828560d5b6094343dfbfb60556f7372b96ce339ac3cda71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.065688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31d039db-afd1-4844-9535-e185941fefb6", "created": "2026-01-27T05:12:57.066671Z", "modified": "2026-01-27T05:12:57.066671Z", "relationship_type": "indicates", "source_ref": "indicator--8e0d98be-2bb8-462b-9042-85e56cb36035", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc963dd-fb30-4690-a2e5-57ec22e3db1b", "created": "2026-01-27T05:12:57.06687Z", "modified": "2026-01-27T05:12:57.06687Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d2d63e0579f26f54ea25232791706094e219e1034074aecbae89e441bf0fab9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.06687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96add41a-66e7-4e8d-ab20-cac45e16e26c", "created": "2026-01-27T05:12:57.067705Z", "modified": "2026-01-27T05:12:57.067705Z", "relationship_type": "indicates", "source_ref": "indicator--9bc963dd-fb30-4690-a2e5-57ec22e3db1b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e44ae8c-1c03-4b67-bd5e-6305bb0eda64", "created": "2026-01-27T05:12:57.067911Z", "modified": "2026-01-27T05:12:57.067911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c151a59b70fe87ae5d30d474018658de3445a0a450edb3cb59cddbf318ca5289']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.067911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c931a08-1fe1-4fff-8d53-272984deff39", "created": "2026-01-27T05:12:57.068741Z", "modified": "2026-01-27T05:12:57.068741Z", "relationship_type": "indicates", "source_ref": "indicator--6e44ae8c-1c03-4b67-bd5e-6305bb0eda64", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c287840-d28c-4b41-9bfc-f3849d548165", "created": "2026-01-27T05:12:57.068941Z", "modified": "2026-01-27T05:12:57.068941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8344b1b5a4f2493b6d048e3d96284cab3e277761e3b24e479d4980cc33022d46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.068941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6aa69305-ea65-443f-b932-0d9a155330e6", "created": "2026-01-27T05:12:57.069783Z", "modified": "2026-01-27T05:12:57.069783Z", "relationship_type": "indicates", "source_ref": "indicator--1c287840-d28c-4b41-9bfc-f3849d548165", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60f33bf-ab36-4301-8231-b7205736a681", "created": "2026-01-27T05:12:57.069964Z", "modified": "2026-01-27T05:12:57.069964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3b561950e2bd1f5067564a0ce25e4d1818ab525bc98caa72c608d27a2782f19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.069964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1ebd15e-3560-4543-8439-176319991ab0", "created": "2026-01-27T05:12:57.070847Z", "modified": "2026-01-27T05:12:57.070847Z", "relationship_type": "indicates", "source_ref": "indicator--e60f33bf-ab36-4301-8231-b7205736a681", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a31925-c23f-49eb-a06b-6cd239831a2b", "created": "2026-01-27T05:12:57.071035Z", "modified": "2026-01-27T05:12:57.071035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d7c8fa85c299051edfa59e1a9bb02cb3e6210d1fea9f1509999614986b18fe8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.071035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2fc6975-ca5b-4a4f-8616-aefae15633ad", "created": "2026-01-27T05:12:57.071883Z", "modified": "2026-01-27T05:12:57.071883Z", "relationship_type": "indicates", "source_ref": "indicator--74a31925-c23f-49eb-a06b-6cd239831a2b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae298298-d4a8-46f4-b62c-7cfff99fe6e0", "created": "2026-01-27T05:12:57.072062Z", "modified": "2026-01-27T05:12:57.072062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2156664e23ecb5cd39a5a1d29ec786ff91ba863c525b9f031b44ab592a592d4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.072062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--901b455c-d0fb-4aeb-abdc-4b78722d46e0", "created": "2026-01-27T05:12:57.072907Z", "modified": "2026-01-27T05:12:57.072907Z", "relationship_type": "indicates", "source_ref": "indicator--ae298298-d4a8-46f4-b62c-7cfff99fe6e0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44c784e-9066-4dbc-ad95-be252cc31e5f", "created": "2026-01-27T05:12:57.073086Z", "modified": "2026-01-27T05:12:57.073086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81db1cb7204c77e48122e909b4d94ab1f099f858d88973def2a8be4fe7935673']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.073086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1c58bcb-6b96-4188-abdb-70d32d1dad4b", "created": "2026-01-27T05:12:57.073943Z", "modified": "2026-01-27T05:12:57.073943Z", "relationship_type": "indicates", "source_ref": "indicator--a44c784e-9066-4dbc-ad95-be252cc31e5f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253ba596-263d-4985-851a-3d81febb6a66", "created": "2026-01-27T05:12:57.074122Z", "modified": "2026-01-27T05:12:57.074122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbc20c4d2a0b2a870ee08f561a8089e3cadee3b8cb16fe19581e49b19dfdf153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.074122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--632a6f8f-906f-4da2-b349-78cc01b18c81", "created": "2026-01-27T05:12:57.074978Z", "modified": "2026-01-27T05:12:57.074978Z", "relationship_type": "indicates", "source_ref": "indicator--253ba596-263d-4985-851a-3d81febb6a66", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8727ac-6110-485f-ab70-9ded56a78420", "created": "2026-01-27T05:12:57.075158Z", "modified": "2026-01-27T05:12:57.075158Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='639b381f6f39a37363bd6ccae7b301957fe3f19b270b029f28bac4396d3c7f7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.075158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b237f70-6599-456f-9ce4-f1c91ea85556", "created": "2026-01-27T05:12:57.076155Z", "modified": "2026-01-27T05:12:57.076155Z", "relationship_type": "indicates", "source_ref": "indicator--ca8727ac-6110-485f-ab70-9ded56a78420", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097ef88e-c5dc-46fa-b6d5-7e021854b5d2", "created": "2026-01-27T05:12:57.076337Z", "modified": "2026-01-27T05:12:57.076337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2bce478bea2fcbd3b62d177d1e3b081425eb1fbf7e5abd1d14a5058a0c85aeff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.076337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f98b03da-f623-4209-9421-16fbe3cbb1f5", "created": "2026-01-27T05:12:57.077204Z", "modified": "2026-01-27T05:12:57.077204Z", "relationship_type": "indicates", "source_ref": "indicator--097ef88e-c5dc-46fa-b6d5-7e021854b5d2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9326a049-b634-4506-9f7a-f8f2745e6ea5", "created": "2026-01-27T05:12:57.077386Z", "modified": "2026-01-27T05:12:57.077386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fc64d9b4477bec34136ecbfa330841304bb55ca20461e7d1e71f284c34bb4d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.077386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f216e32-c503-44c5-a5d2-7d991f9143c3", "created": "2026-01-27T05:12:57.078236Z", "modified": "2026-01-27T05:12:57.078236Z", "relationship_type": "indicates", "source_ref": "indicator--9326a049-b634-4506-9f7a-f8f2745e6ea5", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090a32bd-3df8-49a8-8fae-a535345b73ae", "created": "2026-01-27T05:12:57.078416Z", "modified": "2026-01-27T05:12:57.078416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fe24371a5ffefc073b010fd138ca0e1804a09b53d1373266db292ba56ab026b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.078416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fb4427e-0f87-4a3f-8f4e-fcd91035ca25", "created": "2026-01-27T05:12:57.079263Z", "modified": "2026-01-27T05:12:57.079263Z", "relationship_type": "indicates", "source_ref": "indicator--090a32bd-3df8-49a8-8fae-a535345b73ae", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc97aed-cc76-41c9-a6da-07b182c95478", "created": "2026-01-27T05:12:57.079444Z", "modified": "2026-01-27T05:12:57.079444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d417e100bf3613ee7bb2ca84e30214dcb4d93cf6c7d6fbcf9e7a73f8f9afb54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.079444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b848324-356a-4a05-a8c2-814538419dcb", "created": "2026-01-27T05:12:57.080286Z", "modified": "2026-01-27T05:12:57.080286Z", "relationship_type": "indicates", "source_ref": "indicator--0fc97aed-cc76-41c9-a6da-07b182c95478", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344c639a-1ae4-41ee-9d17-52125297b3f8", "created": "2026-01-27T05:12:57.080462Z", "modified": "2026-01-27T05:12:57.080462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8fe4b45908ded8917d8f8a8be6493eaf128c3a7b31c959ec92387dddf09f4b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.080462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ad3a2ea-1520-4b17-b1f9-812b1658b736", "created": "2026-01-27T05:12:57.081303Z", "modified": "2026-01-27T05:12:57.081303Z", "relationship_type": "indicates", "source_ref": "indicator--344c639a-1ae4-41ee-9d17-52125297b3f8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa198b22-0297-4224-b8eb-e992efb3e657", "created": "2026-01-27T05:12:57.081481Z", "modified": "2026-01-27T05:12:57.081481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39b3f318bd34e84452f22440dcab64238739829b9d44734d1ce3157ecab35014']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.081481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd3399f9-e78d-4b69-b0a5-16c9d47d669d", "created": "2026-01-27T05:12:57.082329Z", "modified": "2026-01-27T05:12:57.082329Z", "relationship_type": "indicates", "source_ref": "indicator--fa198b22-0297-4224-b8eb-e992efb3e657", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42749bdb-02d4-451a-a801-27ffb4aabba0", "created": "2026-01-27T05:12:57.082523Z", "modified": "2026-01-27T05:12:57.082523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d558f5a4056acb16095adbcb0c9de9dfa450dc2b992298bd52ea8d35d22a397']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.082523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21c04c14-b6dc-43d9-ba78-3f5bb013348f", "created": "2026-01-27T05:12:57.083371Z", "modified": "2026-01-27T05:12:57.083371Z", "relationship_type": "indicates", "source_ref": "indicator--42749bdb-02d4-451a-a801-27ffb4aabba0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383ec203-eef9-4b1a-9dde-30a957e9ea36", "created": "2026-01-27T05:12:57.083555Z", "modified": "2026-01-27T05:12:57.083555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='878780a68bc58b7a8469df4869089344c3e8f56db7089f60e2cc9c6cb63e917c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.083555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb732c32-ae96-4823-b0d9-6587198f98eb", "created": "2026-01-27T05:12:57.084397Z", "modified": "2026-01-27T05:12:57.084397Z", "relationship_type": "indicates", "source_ref": "indicator--383ec203-eef9-4b1a-9dde-30a957e9ea36", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caadc6f6-5792-4e1a-81f6-1a712568e3a2", "created": "2026-01-27T05:12:57.084583Z", "modified": "2026-01-27T05:12:57.084583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da609d990b861f153a314724ba33f8f537f93a2c1f737b58750d180bccc21e8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.084583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3be0125-5c66-4c2a-b492-2893649e726d", "created": "2026-01-27T05:12:57.085548Z", "modified": "2026-01-27T05:12:57.085548Z", "relationship_type": "indicates", "source_ref": "indicator--caadc6f6-5792-4e1a-81f6-1a712568e3a2", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f80ee2-bbf1-4726-b28e-3bf89b9e2a42", "created": "2026-01-27T05:12:57.085728Z", "modified": "2026-01-27T05:12:57.085728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06634297f6060543d654923e61446a32b8e983613bba542fb98bf828eb34a579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.085728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0f3904a-ffc5-40dd-89c3-86fa6e7df5b0", "created": "2026-01-27T05:12:57.086586Z", "modified": "2026-01-27T05:12:57.086586Z", "relationship_type": "indicates", "source_ref": "indicator--59f80ee2-bbf1-4726-b28e-3bf89b9e2a42", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249757e0-a364-4830-8327-3a37c394eb4c", "created": "2026-01-27T05:12:57.086777Z", "modified": "2026-01-27T05:12:57.086777Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='994eec95771c8e2380f16516531eaeeeef3ab439c8d1f5f7751850d1d296e28a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.086777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45597e3e-2591-41f1-9075-1f9fe9d37cb2", "created": "2026-01-27T05:12:57.087608Z", "modified": "2026-01-27T05:12:57.087608Z", "relationship_type": "indicates", "source_ref": "indicator--249757e0-a364-4830-8327-3a37c394eb4c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a593a4-b530-40e9-869a-354ca45809f6", "created": "2026-01-27T05:12:57.087804Z", "modified": "2026-01-27T05:12:57.087804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4255d25301c3cbe952f623b653541e79456cb46cd9abac26ce5ed2bd81758cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.087804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba87aead-4efd-45c3-9358-ba7622692369", "created": "2026-01-27T05:12:57.088626Z", "modified": "2026-01-27T05:12:57.088626Z", "relationship_type": "indicates", "source_ref": "indicator--e6a593a4-b530-40e9-869a-354ca45809f6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12866f3-da74-495c-adb8-022c0a4e7ebb", "created": "2026-01-27T05:12:57.08882Z", "modified": "2026-01-27T05:12:57.08882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49000151dcf9cdbe51dd676a27fccde02509a6cf5d1802cc2e93d16c5827eccc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.08882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8827517d-18f2-4434-9b3d-0096dda348c3", "created": "2026-01-27T05:12:57.089647Z", "modified": "2026-01-27T05:12:57.089647Z", "relationship_type": "indicates", "source_ref": "indicator--e12866f3-da74-495c-adb8-022c0a4e7ebb", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03872056-20c1-4df4-8641-7bfc5d17399e", "created": "2026-01-27T05:12:57.089841Z", "modified": "2026-01-27T05:12:57.089841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a6ae6d7f02fdaa96063f714aaba213f43509bde486c21198258e27d13da4dad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.089841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7374a37c-7c77-4955-97bb-2306f511b14c", "created": "2026-01-27T05:12:57.090674Z", "modified": "2026-01-27T05:12:57.090674Z", "relationship_type": "indicates", "source_ref": "indicator--03872056-20c1-4df4-8641-7bfc5d17399e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ce31f9-eed7-4969-a687-c610b80fb7cc", "created": "2026-01-27T05:12:57.090871Z", "modified": "2026-01-27T05:12:57.090871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04feea6f12083462adac1b4f4eb034e8e8d095090c52169b0057a59360208e2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.090871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da91d83f-2821-49c9-a0d3-b0ba9ef84294", "created": "2026-01-27T05:12:57.091714Z", "modified": "2026-01-27T05:12:57.091714Z", "relationship_type": "indicates", "source_ref": "indicator--b9ce31f9-eed7-4969-a687-c610b80fb7cc", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f094958b-9ff8-401f-a83c-28ef4ab91c2c", "created": "2026-01-27T05:12:57.091908Z", "modified": "2026-01-27T05:12:57.091908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6700abd41f151a0cd08bc85ab0cd2719357da3a1f382bc84e17e4521debeded']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.091908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b0e1d47-5600-40f6-8382-af8bcd1407fe", "created": "2026-01-27T05:12:57.092756Z", "modified": "2026-01-27T05:12:57.092756Z", "relationship_type": "indicates", "source_ref": "indicator--f094958b-9ff8-401f-a83c-28ef4ab91c2c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff519aae-c9d9-4241-81e0-54f2d53da9a4", "created": "2026-01-27T05:12:57.092934Z", "modified": "2026-01-27T05:12:57.092934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27dc7afacaa3f229d9003790e1a49a669c5d59836ff075e6dbc33d28d069ac4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.092934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1be07af-0981-4c0f-bee2-e70a1f06ab72", "created": "2026-01-27T05:12:57.093899Z", "modified": "2026-01-27T05:12:57.093899Z", "relationship_type": "indicates", "source_ref": "indicator--ff519aae-c9d9-4241-81e0-54f2d53da9a4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80a74d3-ad08-4fbf-9dbf-3c19b900f4f3", "created": "2026-01-27T05:12:57.09408Z", "modified": "2026-01-27T05:12:57.09408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27c36d4b59c1cfcf99eb565895b7a28ddc509a3025ab89f972a66b6fed2aad2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.09408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--459a3ba3-7f15-428c-858f-83f18281c5a2", "created": "2026-01-27T05:12:57.094925Z", "modified": "2026-01-27T05:12:57.094925Z", "relationship_type": "indicates", "source_ref": "indicator--f80a74d3-ad08-4fbf-9dbf-3c19b900f4f3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef20de5-0eaf-4931-933b-4d8e8577a45d", "created": "2026-01-27T05:12:57.095113Z", "modified": "2026-01-27T05:12:57.095113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1ed4367a0442533e77637ce11d4165cd9d90ff33fb48a72bb3b7aa07d2544b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.095113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de877d7d-0511-4004-ab9a-71d4e788fbe6", "created": "2026-01-27T05:12:57.095961Z", "modified": "2026-01-27T05:12:57.095961Z", "relationship_type": "indicates", "source_ref": "indicator--cef20de5-0eaf-4931-933b-4d8e8577a45d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c487f1e1-78b8-448e-8f54-2ebae0b8e935", "created": "2026-01-27T05:12:57.096149Z", "modified": "2026-01-27T05:12:57.096149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02633b4fbe095f324372179fea12ffe65be340b8436e0a6706018070259ded13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.096149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6c55336-f959-47ae-9b61-d3728a26606d", "created": "2026-01-27T05:12:57.097021Z", "modified": "2026-01-27T05:12:57.097021Z", "relationship_type": "indicates", "source_ref": "indicator--c487f1e1-78b8-448e-8f54-2ebae0b8e935", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf2a6b7-fd9f-4e19-aba8-fa821c742a67", "created": "2026-01-27T05:12:57.097203Z", "modified": "2026-01-27T05:12:57.097203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c58c0dda52ee07a2b5f27b4d3ef398d4b4aba6ca41acd78d1ac7f59f6dfbab47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.097203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1269648c-0187-4747-b98f-0455572a7708", "created": "2026-01-27T05:12:57.098064Z", "modified": "2026-01-27T05:12:57.098064Z", "relationship_type": "indicates", "source_ref": "indicator--caf2a6b7-fd9f-4e19-aba8-fa821c742a67", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de8d2a2-3729-4117-b1c8-ff9ba3ca9677", "created": "2026-01-27T05:12:57.098243Z", "modified": "2026-01-27T05:12:57.098243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34249b289aed6366633e3f91a36e39b90a43dd999f0f0a4fc0e98e63662cd60c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.098243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c96a1422-14f9-47ec-8c6c-9850d25e51c7", "created": "2026-01-27T05:12:57.099099Z", "modified": "2026-01-27T05:12:57.099099Z", "relationship_type": "indicates", "source_ref": "indicator--2de8d2a2-3729-4117-b1c8-ff9ba3ca9677", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f85577b-9260-4d06-8ffc-b0f675ae0e87", "created": "2026-01-27T05:12:57.099283Z", "modified": "2026-01-27T05:12:57.099283Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81ca4988ce166a3b6b629e074d4c2fe12dbcc297e1d4399dee3dadf9dc869109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.099283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d191abd2-67bd-4868-9fab-b5c5c23d0fdc", "created": "2026-01-27T05:12:57.100136Z", "modified": "2026-01-27T05:12:57.100136Z", "relationship_type": "indicates", "source_ref": "indicator--3f85577b-9260-4d06-8ffc-b0f675ae0e87", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768cbd87-4608-4a35-82cc-15eba356d6e7", "created": "2026-01-27T05:12:57.100314Z", "modified": "2026-01-27T05:12:57.100314Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd8625f7b6e16c3cb8041b115fa85f8eadf42b1006d0c8e97b090c51b466463a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.100314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc2378de-eae1-45b0-bbfa-8ffabcfe3425", "created": "2026-01-27T05:12:57.10116Z", "modified": "2026-01-27T05:12:57.10116Z", "relationship_type": "indicates", "source_ref": "indicator--768cbd87-4608-4a35-82cc-15eba356d6e7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6162bc49-bee9-46c6-81ec-9560dd7aba14", "created": "2026-01-27T05:12:57.101339Z", "modified": "2026-01-27T05:12:57.101339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a67b576ad92e821134e4fcf8050778cb6e087d68e1d7ca79146640200e51d2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.101339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d12338ab-c768-44e9-ad44-79aaa3b60929", "created": "2026-01-27T05:12:57.102191Z", "modified": "2026-01-27T05:12:57.102191Z", "relationship_type": "indicates", "source_ref": "indicator--6162bc49-bee9-46c6-81ec-9560dd7aba14", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4227e610-3866-45f9-8cc0-67b1a675dc77", "created": "2026-01-27T05:12:57.102369Z", "modified": "2026-01-27T05:12:57.102369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78e0f021976f32155447277919540fe1dad7cbd5527b77d055659ce97411761a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.102369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e844dca-b689-40a5-9423-459c486f7b42", "created": "2026-01-27T05:12:57.103333Z", "modified": "2026-01-27T05:12:57.103333Z", "relationship_type": "indicates", "source_ref": "indicator--4227e610-3866-45f9-8cc0-67b1a675dc77", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6975c9-9252-489d-8dff-1f1f47ec8310", "created": "2026-01-27T05:12:57.103511Z", "modified": "2026-01-27T05:12:57.103511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4bfb03936bd52269cdccea90222685e8b09c63e26ae037228c277b36ff6f068']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.103511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c868dd7a-5bbb-4c9d-a65d-a72e76a8f4e9", "created": "2026-01-27T05:12:57.104357Z", "modified": "2026-01-27T05:12:57.104357Z", "relationship_type": "indicates", "source_ref": "indicator--ad6975c9-9252-489d-8dff-1f1f47ec8310", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0377be9-16a9-422f-8516-4355c8cf97a9", "created": "2026-01-27T05:12:57.10454Z", "modified": "2026-01-27T05:12:57.10454Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='543bd05ea4d3714d22fa7aaf5d6f9977d145cf1819b22c31c05e0e2b044b96d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.10454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad5df5c5-88fc-45ed-82fa-4596d29e8d0b", "created": "2026-01-27T05:12:57.105385Z", "modified": "2026-01-27T05:12:57.105385Z", "relationship_type": "indicates", "source_ref": "indicator--c0377be9-16a9-422f-8516-4355c8cf97a9", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160bf93-e117-4211-bebf-7ead4064819d", "created": "2026-01-27T05:12:57.105565Z", "modified": "2026-01-27T05:12:57.105565Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71b1a419443c3e9be84e3784f4437f7cf63180a1cde95a0cf49da91521513fd8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.105565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--106308d0-e053-4f80-94b5-bbbe09ca8e4a", "created": "2026-01-27T05:12:57.106405Z", "modified": "2026-01-27T05:12:57.106405Z", "relationship_type": "indicates", "source_ref": "indicator--5160bf93-e117-4211-bebf-7ead4064819d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9547fe-4f8e-4dfd-9acb-0a8a74790206", "created": "2026-01-27T05:12:57.106584Z", "modified": "2026-01-27T05:12:57.106584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2d3c1ee4fa154844b508c78746743a46a736bd462a0493ce1019b19229b05bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.106584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--460f5074-92c7-4649-8a29-5b29735a4016", "created": "2026-01-27T05:12:57.10743Z", "modified": "2026-01-27T05:12:57.10743Z", "relationship_type": "indicates", "source_ref": "indicator--6f9547fe-4f8e-4dfd-9acb-0a8a74790206", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fac3f4-c4a4-463e-a1e4-bf5864e7d199", "created": "2026-01-27T05:12:57.10761Z", "modified": "2026-01-27T05:12:57.10761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a7d82a0cfe4b34d1ba283747329a5e8d9e2040edb933740f3e02c5c82aaf8f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.10761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eb1af20-f2b0-40cb-8c39-865546e2149f", "created": "2026-01-27T05:12:57.108453Z", "modified": "2026-01-27T05:12:57.108453Z", "relationship_type": "indicates", "source_ref": "indicator--34fac3f4-c4a4-463e-a1e4-bf5864e7d199", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dc36b8-8783-461c-b075-65a763ca8336", "created": "2026-01-27T05:12:57.10863Z", "modified": "2026-01-27T05:12:57.10863Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='764beec56787acf2aa462edfea6c56782f4e278cd641d22e89996349cc502103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.10863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7affd032-40f4-47c4-a968-a1baa1b70abf", "created": "2026-01-27T05:12:57.109488Z", "modified": "2026-01-27T05:12:57.109488Z", "relationship_type": "indicates", "source_ref": "indicator--65dc36b8-8783-461c-b075-65a763ca8336", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2958ae3f-7945-4fa7-afd2-8fbb01f1a0f7", "created": "2026-01-27T05:12:57.109671Z", "modified": "2026-01-27T05:12:57.109671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b3191dc2ecc2ce78b29310f691279da41b5c26a5becf34da7a9fdc0db5c0d0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.109671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3dae4b04-3347-436f-a631-ae3dce788947", "created": "2026-01-27T05:12:57.110516Z", "modified": "2026-01-27T05:12:57.110516Z", "relationship_type": "indicates", "source_ref": "indicator--2958ae3f-7945-4fa7-afd2-8fbb01f1a0f7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e51c46-9d20-43bf-8fd3-6090955e4828", "created": "2026-01-27T05:12:57.110693Z", "modified": "2026-01-27T05:12:57.110693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dad31e95570ac4efa60361ea3aafb98374d969d27fa378388dfce68826622fd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.110693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06843198-c620-4f23-8577-2b0921f55f5b", "created": "2026-01-27T05:12:57.111539Z", "modified": "2026-01-27T05:12:57.111539Z", "relationship_type": "indicates", "source_ref": "indicator--c4e51c46-9d20-43bf-8fd3-6090955e4828", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa365e22-e415-43f3-8d49-8bac8ac163ce", "created": "2026-01-27T05:12:57.111716Z", "modified": "2026-01-27T05:12:57.111716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69623b7266c5a218f40219ba8e911ed5aeeb5798fa46be7ab150794f300045b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.111716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73d4e1c9-38db-4ffa-96a2-13395a40e15e", "created": "2026-01-27T05:12:57.112693Z", "modified": "2026-01-27T05:12:57.112693Z", "relationship_type": "indicates", "source_ref": "indicator--fa365e22-e415-43f3-8d49-8bac8ac163ce", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eebee3-9e0d-4c7d-9ed9-16ffa8558506", "created": "2026-01-27T05:12:57.112901Z", "modified": "2026-01-27T05:12:57.112901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fc32c9192cf58e323bfa7bdf3980f267b1602789e38c929900d9d946622f557']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.112901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35843293-fe82-4e68-bfd8-25edbe4b3f5d", "created": "2026-01-27T05:12:57.113721Z", "modified": "2026-01-27T05:12:57.113721Z", "relationship_type": "indicates", "source_ref": "indicator--21eebee3-9e0d-4c7d-9ed9-16ffa8558506", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227d9d65-df10-4976-ba99-e98e9219593e", "created": "2026-01-27T05:12:57.113916Z", "modified": "2026-01-27T05:12:57.113916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ddd84859b91f4170ab59f4e28565d5b265154848454ab80b09c2f71d6b3fc629']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.113916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f963d002-0bed-406e-bebd-038583c3ad8b", "created": "2026-01-27T05:12:57.114739Z", "modified": "2026-01-27T05:12:57.114739Z", "relationship_type": "indicates", "source_ref": "indicator--227d9d65-df10-4976-ba99-e98e9219593e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301c5447-59f9-4c9c-aadc-1ffa04eff187", "created": "2026-01-27T05:12:57.114935Z", "modified": "2026-01-27T05:12:57.114935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42554cc7d6a4887124366d6f9cc5e6530814d267d94413e8695bf9445af836e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.114935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--354f496e-a7a8-4080-8f3f-0c2f0bd85825", "created": "2026-01-27T05:12:57.115774Z", "modified": "2026-01-27T05:12:57.115774Z", "relationship_type": "indicates", "source_ref": "indicator--301c5447-59f9-4c9c-aadc-1ffa04eff187", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb1176b-f102-4ebf-9761-0c1a8a09794f", "created": "2026-01-27T05:12:57.115955Z", "modified": "2026-01-27T05:12:57.115955Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf05b4147c610c8eaffcc3d944ca5b26205782b96a845823c225eca4c43a76f4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.115955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--688e01c2-abb8-44d6-8f79-792bdf362bfb", "created": "2026-01-27T05:12:57.116793Z", "modified": "2026-01-27T05:12:57.116793Z", "relationship_type": "indicates", "source_ref": "indicator--9eb1176b-f102-4ebf-9761-0c1a8a09794f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d25bcae-5d61-4a8b-a813-6bcdf75e692d", "created": "2026-01-27T05:12:57.11697Z", "modified": "2026-01-27T05:12:57.11697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cc8e89d78cfe3b3f86a1098c97c034cfd0a1198e7be4ca9094c13574fa459f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.11697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5aa6bf71-a027-4de1-a7f3-9fc9709a5198", "created": "2026-01-27T05:12:57.117813Z", "modified": "2026-01-27T05:12:57.117813Z", "relationship_type": "indicates", "source_ref": "indicator--6d25bcae-5d61-4a8b-a813-6bcdf75e692d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df06783-cbdf-44d8-afe9-efd43eeda287", "created": "2026-01-27T05:12:57.117992Z", "modified": "2026-01-27T05:12:57.117992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e22b036ac5a5b3ab78f236d51a40428cfcebff35a49cc28f075a63527a1c1783']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.117992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c937025-e129-4e2b-b3bc-06962bacc12c", "created": "2026-01-27T05:12:57.118838Z", "modified": "2026-01-27T05:12:57.118838Z", "relationship_type": "indicates", "source_ref": "indicator--1df06783-cbdf-44d8-afe9-efd43eeda287", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3677ee3c-be2d-454d-bce8-239543a6d983", "created": "2026-01-27T05:12:57.119016Z", "modified": "2026-01-27T05:12:57.119016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1ae0bcdda40444aba873715569b0f5fa4b6d7c95b16ed5bfefe058fe8f441fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.119016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--370e12c9-e824-4fbe-9c46-ec11ea38c6aa", "created": "2026-01-27T05:12:57.119857Z", "modified": "2026-01-27T05:12:57.119857Z", "relationship_type": "indicates", "source_ref": "indicator--3677ee3c-be2d-454d-bce8-239543a6d983", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ecbde0-a1e1-40fc-9f67-af69bbf6976d", "created": "2026-01-27T05:12:57.120035Z", "modified": "2026-01-27T05:12:57.120035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2cae869c12fc10c3435d0164a535b39ff65b55ffda551a4ff7be022e0ef40da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.120035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8839710f-643c-4ce8-ac29-ff65236fbf52", "created": "2026-01-27T05:12:57.120999Z", "modified": "2026-01-27T05:12:57.120999Z", "relationship_type": "indicates", "source_ref": "indicator--c4ecbde0-a1e1-40fc-9f67-af69bbf6976d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a64be9-d839-4c95-820d-44fc49c50171", "created": "2026-01-27T05:12:57.12118Z", "modified": "2026-01-27T05:12:57.12118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5220f365069a03c966261ca1886fa9c80aae9ae6e5ba78b52a9cafcd327fb72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.12118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddf32149-bf22-480d-b23e-8c1ad78d1ed3", "created": "2026-01-27T05:12:57.122028Z", "modified": "2026-01-27T05:12:57.122028Z", "relationship_type": "indicates", "source_ref": "indicator--77a64be9-d839-4c95-820d-44fc49c50171", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cccf0c7-510f-463b-a085-9a4baa1ee76e", "created": "2026-01-27T05:12:57.122206Z", "modified": "2026-01-27T05:12:57.122206Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9baa5c33c411c91413ab9ef126463a893d787527055ac4fb6ac549903302b2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.122206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31ce1c81-e143-4167-8f93-ee835dfa07b8", "created": "2026-01-27T05:12:57.123051Z", "modified": "2026-01-27T05:12:57.123051Z", "relationship_type": "indicates", "source_ref": "indicator--6cccf0c7-510f-463b-a085-9a4baa1ee76e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7ff525-d837-48c8-bcff-23941ef4eb8c", "created": "2026-01-27T05:12:57.123235Z", "modified": "2026-01-27T05:12:57.123235Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='201625b0ab47027bd2dcb27f88c5c0cf96e4bc32505083cb7036639c6a4a8b24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.123235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6203e912-b012-41bc-a646-32081d1b23e6", "created": "2026-01-27T05:12:57.124079Z", "modified": "2026-01-27T05:12:57.124079Z", "relationship_type": "indicates", "source_ref": "indicator--2b7ff525-d837-48c8-bcff-23941ef4eb8c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdea5e9b-8e55-47bc-9b8a-8e66d10de662", "created": "2026-01-27T05:12:57.124257Z", "modified": "2026-01-27T05:12:57.124257Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='161ca9bbd38eacfd265864b1627f3e7a85b08a8758114bce8362cdfc56fcd6be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.124257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86af8386-5463-4565-bcd3-07727ca7ec41", "created": "2026-01-27T05:12:57.125107Z", "modified": "2026-01-27T05:12:57.125107Z", "relationship_type": "indicates", "source_ref": "indicator--bdea5e9b-8e55-47bc-9b8a-8e66d10de662", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e57020-7423-408e-ab0e-0ed8b75d067f", "created": "2026-01-27T05:12:57.125286Z", "modified": "2026-01-27T05:12:57.125286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ec259e0de00dbcca2817907aef55fb41bd94b918bc629889a92d7cb710094a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.125286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f8ef4ab-03ea-4d23-a1ee-4ad50c88e563", "created": "2026-01-27T05:12:57.126125Z", "modified": "2026-01-27T05:12:57.126125Z", "relationship_type": "indicates", "source_ref": "indicator--e7e57020-7423-408e-ab0e-0ed8b75d067f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7aefe5c-2d8c-42d1-9c00-469f81c21a29", "created": "2026-01-27T05:12:57.126301Z", "modified": "2026-01-27T05:12:57.126301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc580afb916974c60c43a99c9c82fcc71b271fbf4481d52dfca77160fb065850']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.126301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d38fa18-5ebd-4a80-bdb5-a1dba8461946", "created": "2026-01-27T05:12:57.127132Z", "modified": "2026-01-27T05:12:57.127132Z", "relationship_type": "indicates", "source_ref": "indicator--a7aefe5c-2d8c-42d1-9c00-469f81c21a29", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c17a21-dcd3-4c25-b974-d9dd3476b07d", "created": "2026-01-27T05:12:57.127309Z", "modified": "2026-01-27T05:12:57.127309Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccbccbfa79bb9e809139604d480a68117a9f23456b789009823cda0103b6825b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.127309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0321214-7ed4-44a0-b267-21e77b1f19a0", "created": "2026-01-27T05:12:57.128155Z", "modified": "2026-01-27T05:12:57.128155Z", "relationship_type": "indicates", "source_ref": "indicator--30c17a21-dcd3-4c25-b974-d9dd3476b07d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6623dccc-d542-410b-917d-54b3a76a3fb6", "created": "2026-01-27T05:12:57.12834Z", "modified": "2026-01-27T05:12:57.12834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1df4a79502a01a9850afd3d851d6753f478afdd219ee974bde7a30c12d85ac64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.12834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41833056-9052-48d2-8013-20f85329654a", "created": "2026-01-27T05:12:57.129191Z", "modified": "2026-01-27T05:12:57.129191Z", "relationship_type": "indicates", "source_ref": "indicator--6623dccc-d542-410b-917d-54b3a76a3fb6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24621894-8539-4520-9cdb-7c1bacea4575", "created": "2026-01-27T05:12:57.129371Z", "modified": "2026-01-27T05:12:57.129371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eacaad8a2088d8abb000e1b65bde80f19c5e2b0483107334ffffadef46f00b05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.129371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f97554a-0fb4-47f3-8e71-6c0b0462eddf", "created": "2026-01-27T05:12:57.130343Z", "modified": "2026-01-27T05:12:57.130343Z", "relationship_type": "indicates", "source_ref": "indicator--24621894-8539-4520-9cdb-7c1bacea4575", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa5eb2a-480a-4271-af44-fcd0c45382b0", "created": "2026-01-27T05:12:57.130525Z", "modified": "2026-01-27T05:12:57.130525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f062bd7d159f1d9f692b1205b48b59f5cc3ec844e1167af0dcace13236a05b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.130525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0279fe10-5c4a-47c3-bd45-0f5bdf63739d", "created": "2026-01-27T05:12:57.131376Z", "modified": "2026-01-27T05:12:57.131376Z", "relationship_type": "indicates", "source_ref": "indicator--5aa5eb2a-480a-4271-af44-fcd0c45382b0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5e6f2a-49ae-4817-b922-8674a615a443", "created": "2026-01-27T05:12:57.131555Z", "modified": "2026-01-27T05:12:57.131555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa80342368e0865d15b9c2edde5ec01906e1e97920e1b68c4fdbeb462a45dfe0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.131555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c48a9251-968e-4fca-b934-9bc3ae8a57f8", "created": "2026-01-27T05:12:57.132399Z", "modified": "2026-01-27T05:12:57.132399Z", "relationship_type": "indicates", "source_ref": "indicator--bd5e6f2a-49ae-4817-b922-8674a615a443", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd024cc-baff-4b93-bd98-1c3dedc94b2b", "created": "2026-01-27T05:12:57.132583Z", "modified": "2026-01-27T05:12:57.132583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ca0e9766d2095bb6a85782e8b6fa2030cceda20ca352f50e831aada39a75521']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.132583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--102ea11e-e366-4c5b-be2a-e01274144f90", "created": "2026-01-27T05:12:57.133445Z", "modified": "2026-01-27T05:12:57.133445Z", "relationship_type": "indicates", "source_ref": "indicator--1dd024cc-baff-4b93-bd98-1c3dedc94b2b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be22fed2-7e2c-452f-9210-67021ff95129", "created": "2026-01-27T05:12:57.133631Z", "modified": "2026-01-27T05:12:57.133631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='217fe5b1c136d846a5141a9a8837c47372ffe0c12fb8c67a873cf632c831aa1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.133631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c247796b-d4ff-4516-b009-6e66e0c67a96", "created": "2026-01-27T05:12:57.134483Z", "modified": "2026-01-27T05:12:57.134483Z", "relationship_type": "indicates", "source_ref": "indicator--be22fed2-7e2c-452f-9210-67021ff95129", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf4006b-e41b-4fdb-a9a5-7ba1c884f272", "created": "2026-01-27T05:12:57.134665Z", "modified": "2026-01-27T05:12:57.134665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fe9e26c656ae558b31a9428b525db20f1b144f5bcdeaaa6ab9d01151feeddb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.134665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--520a5e38-c3e9-433b-b435-c66768c4e66d", "created": "2026-01-27T05:12:57.135564Z", "modified": "2026-01-27T05:12:57.135564Z", "relationship_type": "indicates", "source_ref": "indicator--9cf4006b-e41b-4fdb-a9a5-7ba1c884f272", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ca3079-78d9-4785-910e-e23a50bc16ee", "created": "2026-01-27T05:12:57.135761Z", "modified": "2026-01-27T05:12:57.135761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b259d82ddf17aa08bef2e6bad1aa035de419f838c12ea97ee40e7606703057b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.135761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b279e7c5-8d2a-4a44-945d-73b4d318714e", "created": "2026-01-27T05:12:57.136615Z", "modified": "2026-01-27T05:12:57.136615Z", "relationship_type": "indicates", "source_ref": "indicator--82ca3079-78d9-4785-910e-e23a50bc16ee", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2695f83e-551c-43a3-a1b5-85dc38a83ca7", "created": "2026-01-27T05:12:57.136815Z", "modified": "2026-01-27T05:12:57.136815Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0245f3665a8377758fed31259cde989e313215d89bc3082f3fcbefaccd6cff41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.136815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09131d1e-bbe7-4a68-a38d-a4ecfa3f90c1", "created": "2026-01-27T05:12:57.137646Z", "modified": "2026-01-27T05:12:57.137646Z", "relationship_type": "indicates", "source_ref": "indicator--2695f83e-551c-43a3-a1b5-85dc38a83ca7", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30763f69-3e71-432a-b53d-302f839a0e8e", "created": "2026-01-27T05:12:57.137841Z", "modified": "2026-01-27T05:12:57.137841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23c6eb3cd9e04ff3684681c9469ea8909022bdf71dd403e8049bc88e52efc40c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.137841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9caf4aa4-c8df-4cc6-a260-084abfeded11", "created": "2026-01-27T05:12:57.138672Z", "modified": "2026-01-27T05:12:57.138672Z", "relationship_type": "indicates", "source_ref": "indicator--30763f69-3e71-432a-b53d-302f839a0e8e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7acd97-d8e9-48f2-abaf-d54adcc8c792", "created": "2026-01-27T05:12:57.138866Z", "modified": "2026-01-27T05:12:57.138866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a651cb3c1bd2942dfd293cd9e25f5c9a67725c73753f50f18abd254f9c5c63b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.138866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d42dfef0-ad14-402c-9dc8-09c28eae107e", "created": "2026-01-27T05:12:57.139832Z", "modified": "2026-01-27T05:12:57.139832Z", "relationship_type": "indicates", "source_ref": "indicator--bf7acd97-d8e9-48f2-abaf-d54adcc8c792", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b431928-d8d9-47f0-9d6f-bfdbf27e535e", "created": "2026-01-27T05:12:57.140011Z", "modified": "2026-01-27T05:12:57.140011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b476d299f75eaf4d729f2c7d5b4e41d735e2ae44d38e1cd3ea1a54a63fa2b187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.140011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a494755b-357a-4ee9-b656-82b6da13bca4", "created": "2026-01-27T05:12:57.140853Z", "modified": "2026-01-27T05:12:57.140853Z", "relationship_type": "indicates", "source_ref": "indicator--1b431928-d8d9-47f0-9d6f-bfdbf27e535e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe89cb3-af79-47cf-a100-94e23e24dab3", "created": "2026-01-27T05:12:57.141037Z", "modified": "2026-01-27T05:12:57.141037Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbf95e4cd8471ac6357431243022510871c9567ff36049577079c3d2e1cf2f4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.141037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0785a0d1-90b7-485d-85b5-bf26d2e9709c", "created": "2026-01-27T05:12:57.141878Z", "modified": "2026-01-27T05:12:57.141878Z", "relationship_type": "indicates", "source_ref": "indicator--fbe89cb3-af79-47cf-a100-94e23e24dab3", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4e3106-d24a-41e1-9f69-111c13587323", "created": "2026-01-27T05:12:57.142057Z", "modified": "2026-01-27T05:12:57.142057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04d505bd81905f606f65bdbb3abe26a88ac1b17ea687b564b9f9c6c71140115b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.142057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f416a3b9-1a91-45f1-852f-a91e7c4582c8", "created": "2026-01-27T05:12:57.142899Z", "modified": "2026-01-27T05:12:57.142899Z", "relationship_type": "indicates", "source_ref": "indicator--9e4e3106-d24a-41e1-9f69-111c13587323", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaf5ddd-26aa-49e0-bf4a-6e978edd0384", "created": "2026-01-27T05:12:57.143079Z", "modified": "2026-01-27T05:12:57.143079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1926abf924d7903caf2ead771bd3a8f0205277f06f1370f015da50362f49f9f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.143079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbee42f7-e62f-43e5-bba3-511e4b5e35e0", "created": "2026-01-27T05:12:57.143923Z", "modified": "2026-01-27T05:12:57.143923Z", "relationship_type": "indicates", "source_ref": "indicator--afaf5ddd-26aa-49e0-bf4a-6e978edd0384", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06934423-9ac8-4cac-8e11-f35a3fa61056", "created": "2026-01-27T05:12:57.144105Z", "modified": "2026-01-27T05:12:57.144105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a11d3f2dbfdd6bc19fc14a786c573bd15c28d7c91498fae2c8343204875b45ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.144105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac9d2848-b6eb-4077-aa4f-132f984571c4", "created": "2026-01-27T05:12:57.144952Z", "modified": "2026-01-27T05:12:57.144952Z", "relationship_type": "indicates", "source_ref": "indicator--06934423-9ac8-4cac-8e11-f35a3fa61056", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37740ad6-3dc7-43e9-be6a-68710e5a5ca0", "created": "2026-01-27T05:12:57.145133Z", "modified": "2026-01-27T05:12:57.145133Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50356f65d9dc98996a5fad0775650c3a12625ab3cbe70a8bd827b1b0eadd7b47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.145133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dda15f9-893c-4655-bff3-353ce25ee686", "created": "2026-01-27T05:12:57.145998Z", "modified": "2026-01-27T05:12:57.145998Z", "relationship_type": "indicates", "source_ref": "indicator--37740ad6-3dc7-43e9-be6a-68710e5a5ca0", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ea5748-4265-40ac-b763-c60b577bd0b8", "created": "2026-01-27T05:12:57.146179Z", "modified": "2026-01-27T05:12:57.146179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d44a700414573f55214514ec5557576f38519ae06072c3b15e1c76c9de0c3cc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.146179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--879394c5-4abb-4ed4-b4b8-6a692f90b97c", "created": "2026-01-27T05:12:57.147013Z", "modified": "2026-01-27T05:12:57.147013Z", "relationship_type": "indicates", "source_ref": "indicator--f7ea5748-4265-40ac-b763-c60b577bd0b8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d1bde8-0f26-4b04-811e-606582db9bb4", "created": "2026-01-27T05:12:57.147188Z", "modified": "2026-01-27T05:12:57.147188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11f56a7989ba68c6b99ecebe2d8230cbcd205ac3e61396f3dc9f3d92d0088b2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.147188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--560d23a7-48dd-4e79-84d8-02bfec4646ab", "created": "2026-01-27T05:12:57.148162Z", "modified": "2026-01-27T05:12:57.148162Z", "relationship_type": "indicates", "source_ref": "indicator--42d1bde8-0f26-4b04-811e-606582db9bb4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f31972-fe49-4fbe-b499-d541cba96db6", "created": "2026-01-27T05:12:57.148343Z", "modified": "2026-01-27T05:12:57.148343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d20a32781c8cf1f3f5bed793326d93a715f6ed8ea24dd5c9b9b8fc0ce20655d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.148343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9c639ca-a0e6-4341-9512-dddd37f0a848", "created": "2026-01-27T05:12:57.1492Z", "modified": "2026-01-27T05:12:57.1492Z", "relationship_type": "indicates", "source_ref": "indicator--47f31972-fe49-4fbe-b499-d541cba96db6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4687d959-1c97-4de6-b5ae-cabbd43943dd", "created": "2026-01-27T05:12:57.149378Z", "modified": "2026-01-27T05:12:57.149378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d74d40e9211ce376974e69f5be220c057be52170e1d568ea968fcc9438a6d38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.149378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07d079e5-561f-4c1e-bda0-014f09006081", "created": "2026-01-27T05:12:57.15022Z", "modified": "2026-01-27T05:12:57.15022Z", "relationship_type": "indicates", "source_ref": "indicator--4687d959-1c97-4de6-b5ae-cabbd43943dd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230e2bd7-cb81-420f-88c3-e5c5d0648406", "created": "2026-01-27T05:12:57.150404Z", "modified": "2026-01-27T05:12:57.150404Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7904cc78d5d6c1edd90309b1e2439165179489abbc28a33138be09072908a13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.150404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e21416b-9ef3-4389-a32e-366811b5d7b4", "created": "2026-01-27T05:12:57.151248Z", "modified": "2026-01-27T05:12:57.151248Z", "relationship_type": "indicates", "source_ref": "indicator--230e2bd7-cb81-420f-88c3-e5c5d0648406", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599192d8-c950-4342-839c-dc4c868ea7a6", "created": "2026-01-27T05:12:57.151424Z", "modified": "2026-01-27T05:12:57.151424Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='045dbed6efe8d7114edefd5792a9747c3650319d5ea9f8965dff6ba976e5222b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.151424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--807e02f7-cc1e-4c0a-8aa5-aa5d78f5ce78", "created": "2026-01-27T05:12:57.152277Z", "modified": "2026-01-27T05:12:57.152277Z", "relationship_type": "indicates", "source_ref": "indicator--599192d8-c950-4342-839c-dc4c868ea7a6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f28c1dd-4cc6-4472-8917-48ce2dc73ac6", "created": "2026-01-27T05:12:57.152463Z", "modified": "2026-01-27T05:12:57.152463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b64c49f599ffac658ee97f49a33d35023857cecee92219604b3576b0c348a695']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.152463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--488c9f57-4792-4bc2-bc64-e0a9571db5a7", "created": "2026-01-27T05:12:57.153306Z", "modified": "2026-01-27T05:12:57.153306Z", "relationship_type": "indicates", "source_ref": "indicator--1f28c1dd-4cc6-4472-8917-48ce2dc73ac6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ec9117-b1e1-45dc-8f45-01fc2a154115", "created": "2026-01-27T05:12:57.153484Z", "modified": "2026-01-27T05:12:57.153484Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bb25e2fc328cb7b0c229347bc6fe7bfd627bd172f7a6840992805225d8a54edb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.153484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b22f28ef-fbff-4c80-a237-2ca2f37492d7", "created": "2026-01-27T05:12:57.15433Z", "modified": "2026-01-27T05:12:57.15433Z", "relationship_type": "indicates", "source_ref": "indicator--36ec9117-b1e1-45dc-8f45-01fc2a154115", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3980554-eced-4d7c-95ae-9423246cde38", "created": "2026-01-27T05:12:57.154507Z", "modified": "2026-01-27T05:12:57.154507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8558418fef61447aea6aa68fa917dec5813dac051ca882f8b68423dff4e2bc42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.154507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f7aee36-7970-44c5-9cc5-37ba7ab7be57", "created": "2026-01-27T05:12:57.155356Z", "modified": "2026-01-27T05:12:57.155356Z", "relationship_type": "indicates", "source_ref": "indicator--d3980554-eced-4d7c-95ae-9423246cde38", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1146b3-475a-4260-86ab-e1e747e9334c", "created": "2026-01-27T05:12:57.155532Z", "modified": "2026-01-27T05:12:57.155532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad70d8bad45ea42e15836d3f4efeb35c59a97e10a4343863d7462b86fa7c4616']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.155532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0556c70a-e1b3-4a9f-a242-4bc6a4b7f5d9", "created": "2026-01-27T05:12:57.156379Z", "modified": "2026-01-27T05:12:57.156379Z", "relationship_type": "indicates", "source_ref": "indicator--8a1146b3-475a-4260-86ab-e1e747e9334c", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c465958-4402-446a-9823-8926d98964ab", "created": "2026-01-27T05:12:57.156556Z", "modified": "2026-01-27T05:12:57.156556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1222360bc9aee284e85b5bc2febda8578e97d816db67302b5d025e54b268655']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.156556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a04e070b-44ba-498d-a58a-c13a5dfc33c3", "created": "2026-01-27T05:12:57.157523Z", "modified": "2026-01-27T05:12:57.157523Z", "relationship_type": "indicates", "source_ref": "indicator--7c465958-4402-446a-9823-8926d98964ab", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2079aa-cbdc-4cc4-a30b-b9fce0d26235", "created": "2026-01-27T05:12:57.1577Z", "modified": "2026-01-27T05:12:57.1577Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df068984b6f190b40db3ce276de6374c2ede3b8c335bdc6215914089d70cc436']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.1577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65e17c65-4186-4d3e-a519-1fab44c4ad3f", "created": "2026-01-27T05:12:57.158553Z", "modified": "2026-01-27T05:12:57.158553Z", "relationship_type": "indicates", "source_ref": "indicator--3f2079aa-cbdc-4cc4-a30b-b9fce0d26235", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493e0686-9b0b-4af9-942b-4ebb00c9b787", "created": "2026-01-27T05:12:57.15873Z", "modified": "2026-01-27T05:12:57.15873Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7d246bbf76bf4773312eff25fb6e658bb8c0f5d5cbcc098354f078e5c3ef8b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.15873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cb805ac-327c-413d-aed2-fa77bc055aca", "created": "2026-01-27T05:12:57.159572Z", "modified": "2026-01-27T05:12:57.159572Z", "relationship_type": "indicates", "source_ref": "indicator--493e0686-9b0b-4af9-942b-4ebb00c9b787", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b917963-5311-4906-b5e9-0c65eda3c727", "created": "2026-01-27T05:12:57.159763Z", "modified": "2026-01-27T05:12:57.159763Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fed5f1dff6139f2c7201039e676df0b9441e044e5f51dbd76733d529a24c27b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.159763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7188c8d-7990-47f1-82c9-6ab189c540dc", "created": "2026-01-27T05:12:57.160593Z", "modified": "2026-01-27T05:12:57.160593Z", "relationship_type": "indicates", "source_ref": "indicator--8b917963-5311-4906-b5e9-0c65eda3c727", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6806301d-0dfd-4ea1-be3a-6c4588e52e7f", "created": "2026-01-27T05:12:57.160785Z", "modified": "2026-01-27T05:12:57.160785Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.apspy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.160785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdf5ff09-cf0f-4c64-9f27-09737bcf08a8", "created": "2026-01-27T05:12:57.161936Z", "modified": "2026-01-27T05:12:57.161936Z", "relationship_type": "indicates", "source_ref": "indicator--6806301d-0dfd-4ea1-be3a-6c4588e52e7f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed62ab9d-0a3d-4a90-83f1-e4b3bf8ce141", "created": "2026-01-27T05:12:57.162121Z", "modified": "2026-01-27T05:12:57.162121Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.162121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0207146c-df23-4f5b-8b93-50c27daf21f4", "created": "2026-01-27T05:12:57.162785Z", "modified": "2026-01-27T05:12:57.162785Z", "relationship_type": "indicates", "source_ref": "indicator--ed62ab9d-0a3d-4a90-83f1-e4b3bf8ce141", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e79c46-becf-4c68-9207-b42bec4e2e94", "created": "2026-01-27T05:12:57.162965Z", "modified": "2026-01-27T05:12:57.162965Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.guest']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.162965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a63512db-4101-4b26-9532-4836be2c007e", "created": "2026-01-27T05:12:57.163611Z", "modified": "2026-01-27T05:12:57.163611Z", "relationship_type": "indicates", "source_ref": "indicator--f2e79c46-becf-4c68-9207-b42bec4e2e94", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ceb985-aa17-424a-9a2a-fe30e32a8b3a", "created": "2026-01-27T05:12:57.16381Z", "modified": "2026-01-27T05:12:57.16381Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ispyoo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.16381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7a6e0d8-e902-47a0-ba9b-801e81e4c123", "created": "2026-01-27T05:12:57.164465Z", "modified": "2026-01-27T05:12:57.164465Z", "relationship_type": "indicates", "source_ref": "indicator--b4ceb985-aa17-424a-9a2a-fe30e32a8b3a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710a8398-3deb-46c0-92bc-04fdf7bd619b", "created": "2026-01-27T05:12:57.164645Z", "modified": "2026-01-27T05:12:57.164645Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ispyoo.traceyou']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.164645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27e95ccb-c1d3-4c5c-8374-fbfd0b7758b8", "created": "2026-01-27T05:12:57.165331Z", "modified": "2026-01-27T05:12:57.165331Z", "relationship_type": "indicates", "source_ref": "indicator--710a8398-3deb-46c0-92bc-04fdf7bd619b", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bbe11c-ec37-491c-9728-7c471641c5af", "created": "2026-01-27T05:12:57.165509Z", "modified": "2026-01-27T05:12:57.165509Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mxspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.165509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b71114a-0170-4254-ac1c-7e4770d400e9", "created": "2026-01-27T05:12:57.166631Z", "modified": "2026-01-27T05:12:57.166631Z", "relationship_type": "indicates", "source_ref": "indicator--64bbe11c-ec37-491c-9728-7c471641c5af", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9f8dce-57de-4412-a7ae-ea6f706b058a", "created": "2026-01-27T05:12:57.166833Z", "modified": "2026-01-27T05:12:57.166833Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyzee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.166833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45a58fea-2a27-4473-813e-ad391eed0834", "created": "2026-01-27T05:12:57.167482Z", "modified": "2026-01-27T05:12:57.167482Z", "relationship_type": "indicates", "source_ref": "indicator--9b9f8dce-57de-4412-a7ae-ea6f706b058a", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1eb55c8-b399-45c2-8e3b-ee39dff0f8f6", "created": "2026-01-27T05:12:57.167661Z", "modified": "2026-01-27T05:12:57.167661Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.systemservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.167661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c213af7b-de28-4299-8296-049c7c7303c5", "created": "2026-01-27T05:12:57.168332Z", "modified": "2026-01-27T05:12:57.168332Z", "relationship_type": "indicates", "source_ref": "indicator--d1eb55c8-b399-45c2-8e3b-ee39dff0f8f6", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569e532f-6971-4aaf-b554-e8f001c732f4", "created": "2026-01-27T05:12:57.168511Z", "modified": "2026-01-27T05:12:57.168511Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thetruth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.168511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db93f065-1417-4e73-94a8-d9f7e303b971", "created": "2026-01-27T05:12:57.169184Z", "modified": "2026-01-27T05:12:57.169184Z", "relationship_type": "indicates", "source_ref": "indicator--569e532f-6971-4aaf-b554-e8f001c732f4", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6750a442-762f-4e22-8427-04e394232a16", "created": "2026-01-27T05:12:57.169362Z", "modified": "2026-01-27T05:12:57.169362Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ttsapp.catchcheating']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.169362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3170132-f7ce-4364-8e41-61e65d0e6dc6", "created": "2026-01-27T05:12:57.170046Z", "modified": "2026-01-27T05:12:57.170046Z", "relationship_type": "indicates", "source_ref": "indicator--6750a442-762f-4e22-8427-04e394232a16", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbf0a28-a00d-4c2f-b2ba-0295b091cbae", "created": "2026-01-27T05:12:57.170226Z", "modified": "2026-01-27T05:12:57.170226Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='31A6ECECD97CF39BC4126B8745CD94A7C30BF81C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.170226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6eabcf6c-aaa0-4884-bd4c-a6271b21b89d", "created": "2026-01-27T05:12:57.17182Z", "modified": "2026-01-27T05:12:57.17182Z", "relationship_type": "indicates", "source_ref": "indicator--ffbf0a28-a00d-4c2f-b2ba-0295b091cbae", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92b5ec9-3546-4749-ab92-b0be1f304be8", "created": "2026-01-27T05:12:57.172006Z", "modified": "2026-01-27T05:12:57.172006Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='36E6671BC4397F475A350905D9A649A5ADE97BB2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.172006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec95f913-d3a2-4dbf-a8ba-4324fbb7d5a5", "created": "2026-01-27T05:12:57.172812Z", "modified": "2026-01-27T05:12:57.172812Z", "relationship_type": "indicates", "source_ref": "indicator--c92b5ec9-3546-4749-ab92-b0be1f304be8", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9ed1c9-fa38-46c6-9e36-0426c2f51773", "created": "2026-01-27T05:12:57.172994Z", "modified": "2026-01-27T05:12:57.172994Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='483716998F0C092FE82B0B12B1A4BA399D941318']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.172994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d8de8b4-0510-4be1-830f-84f9ce7850be", "created": "2026-01-27T05:12:57.173787Z", "modified": "2026-01-27T05:12:57.173787Z", "relationship_type": "indicates", "source_ref": "indicator--aa9ed1c9-fa38-46c6-9e36-0426c2f51773", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf49819f-6b24-421d-b239-7198d81ddf61", "created": "2026-01-27T05:12:57.173969Z", "modified": "2026-01-27T05:12:57.173969Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4FF0174BEDC1D16BE55AC53B98599398AC461F82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.173969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82bc7375-9c86-4d20-8f15-f46de12bc4d7", "created": "2026-01-27T05:12:57.174765Z", "modified": "2026-01-27T05:12:57.174765Z", "relationship_type": "indicates", "source_ref": "indicator--bf49819f-6b24-421d-b239-7198d81ddf61", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7eb252-7cd9-4080-b4ee-fea944a18135", "created": "2026-01-27T05:12:57.174947Z", "modified": "2026-01-27T05:12:57.174947Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='56EF5244378FB6B4EF82D2B9E99BF41F7B97D93A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.174947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c963d48-31bf-4856-8d97-54e1ecf8387d", "created": "2026-01-27T05:12:57.187887Z", "modified": "2026-01-27T05:12:57.187887Z", "relationship_type": "indicates", "source_ref": "indicator--2b7eb252-7cd9-4080-b4ee-fea944a18135", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0eaa75-f39a-4551-bd87-e9b5706df093", "created": "2026-01-27T05:12:57.188125Z", "modified": "2026-01-27T05:12:57.188125Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5D7B59F3AFB74D86CCD56440F99CA2FC83A23F22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.188125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--452e153a-28d0-41c7-85eb-a90ce4ccf2d8", "created": "2026-01-27T05:12:57.188965Z", "modified": "2026-01-27T05:12:57.188965Z", "relationship_type": "indicates", "source_ref": "indicator--af0eaa75-f39a-4551-bd87-e9b5706df093", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe40575-5597-4c96-9116-88c8d5ceac9f", "created": "2026-01-27T05:12:57.189199Z", "modified": "2026-01-27T05:12:57.189199Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='917BB5B2D40EC40018541784A06285DE0F50F60F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.189199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0c3c0e7-5b38-4c2b-9986-e612f6a3aac9", "created": "2026-01-27T05:12:57.190022Z", "modified": "2026-01-27T05:12:57.190022Z", "relationship_type": "indicates", "source_ref": "indicator--5fe40575-5597-4c96-9116-88c8d5ceac9f", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aa14aa-d20c-4d3f-b41e-b763a88219cd", "created": "2026-01-27T05:12:57.190247Z", "modified": "2026-01-27T05:12:57.190247Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B0F639B67819EDBADC73B9FEFF2582FC58B8F115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.190247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b86af225-7f6c-4ed2-81b2-3a5aa3b65960", "created": "2026-01-27T05:12:57.191174Z", "modified": "2026-01-27T05:12:57.191174Z", "relationship_type": "indicates", "source_ref": "indicator--e3aa14aa-d20c-4d3f-b41e-b763a88219cd", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dfa79a-eb0f-4abd-9c75-7a33fc274266", "created": "2026-01-27T05:12:57.191365Z", "modified": "2026-01-27T05:12:57.191365Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B1336A5F3A017394186563E84AE0D2649FC1697D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.191365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeb15cac-47b5-4518-a28a-b5f8940819e5", "created": "2026-01-27T05:12:57.19218Z", "modified": "2026-01-27T05:12:57.19218Z", "relationship_type": "indicates", "source_ref": "indicator--97dfa79a-eb0f-4abd-9c75-7a33fc274266", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d4eec1-df8c-4cdb-b9fc-8a6bdd6c615d", "created": "2026-01-27T05:12:57.192376Z", "modified": "2026-01-27T05:12:57.192376Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CBDA86758FBE8E5A6AB805F493AA151B1F2B95F4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.192376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a53089d4-10b6-4cde-b682-cc77f8b89244", "created": "2026-01-27T05:12:57.193291Z", "modified": "2026-01-27T05:12:57.193291Z", "relationship_type": "indicates", "source_ref": "indicator--83d4eec1-df8c-4cdb-b9fc-8a6bdd6c615d", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77137a05-3a16-44ef-b576-0a3a323bca66", "created": "2026-01-27T05:12:57.193477Z", "modified": "2026-01-27T05:12:57.193477Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D667A33203776F2285EBA3E826CD286356EF05D0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.193477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fdecd0f-056d-41aa-8bac-6b3d9bbffdca", "created": "2026-01-27T05:12:57.194366Z", "modified": "2026-01-27T05:12:57.194366Z", "relationship_type": "indicates", "source_ref": "indicator--77137a05-3a16-44ef-b576-0a3a323bca66", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d225dd-a787-437d-8273-3d3cdba24c92", "created": "2026-01-27T05:12:57.194551Z", "modified": "2026-01-27T05:12:57.194551Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FF8CCD9816B0524A58FBDE1809FB227DBCDFD692']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.194551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c63d9f33-dca6-4870-a10f-54b5ab0b650d", "created": "2026-01-27T05:12:57.195546Z", "modified": "2026-01-27T05:12:57.195546Z", "relationship_type": "indicates", "source_ref": "indicator--c7d225dd-a787-437d-8273-3d3cdba24c92", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99f7288-149e-41c4-afa0-ac65e3ef3179", "created": "2026-01-27T05:12:57.195733Z", "modified": "2026-01-27T05:12:57.195733Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E6502D8A870C3F3910EA34F5B46D20D923047580']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.195733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0beab1b4-f98e-474d-bb01-bba2eb4069ea", "created": "2026-01-27T05:12:57.19662Z", "modified": "2026-01-27T05:12:57.19662Z", "relationship_type": "indicates", "source_ref": "indicator--f99f7288-149e-41c4-afa0-ac65e3ef3179", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deed262-df5d-46d4-85d6-fcb256e0a27e", "created": "2026-01-27T05:12:57.196821Z", "modified": "2026-01-27T05:12:57.196821Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DE648A3253C16692AF71141C069D15C87C3E5495']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.196821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b077ba96-3de4-47ef-bfaa-6d0e3bd5a496", "created": "2026-01-27T05:12:57.197606Z", "modified": "2026-01-27T05:12:57.197606Z", "relationship_type": "indicates", "source_ref": "indicator--0deed262-df5d-46d4-85d6-fcb256e0a27e", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc7c6cf-3ec1-49dd-af2e-a158439a3924", "created": "2026-01-27T05:12:57.197803Z", "modified": "2026-01-27T05:12:57.197803Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F9181C6CF9AACB3AB1092F5338C3198A8D833431']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.197803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d249d38b-ecba-4e2a-be07-eeb445414be0", "created": "2026-01-27T05:12:57.198582Z", "modified": "2026-01-27T05:12:57.198582Z", "relationship_type": "indicates", "source_ref": "indicator--bdc7c6cf-3ec1-49dd-af2e-a158439a3924", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87808553-00cc-435c-9176-ed1a2e686c93", "created": "2026-01-27T05:12:57.198799Z", "modified": "2026-01-27T05:12:57.198799Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5E3C376B52C672C81439358DE6348F25F96EAAA4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.198799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c70a9e4-8965-4105-b341-d8e8ac3fef02", "created": "2026-01-27T05:12:57.199593Z", "modified": "2026-01-27T05:12:57.199593Z", "relationship_type": "indicates", "source_ref": "indicator--87808553-00cc-435c-9176-ed1a2e686c93", "target_ref": "malware--42f5d994-722a-4b2f-897f-6ae4e7a13c22"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c", "created": "2026-01-27T05:12:57.199789Z", "modified": "2026-01-27T05:12:57.199789Z", "name": "HelloSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f416e87b-b859-419c-80d1-13069127810e", "created": "2026-01-27T05:12:57.199966Z", "modified": "2026-01-27T05:12:57.199966Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='1topspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.199966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bf3b233-96ec-4d4e-ac2c-ef9ce17ba7e8", "created": "2026-01-27T05:12:57.200657Z", "modified": "2026-01-27T05:12:57.200657Z", "relationship_type": "indicates", "source_ref": "indicator--f416e87b-b859-419c-80d1-13069127810e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8fc074-e04c-4c03-9ab7-0bab893400c6", "created": "2026-01-27T05:12:57.200854Z", "modified": "2026-01-27T05:12:57.200854Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.cellphone-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.200854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c152375-5116-4247-bc0c-821cddc2d158", "created": "2026-01-27T05:12:57.201568Z", "modified": "2026-01-27T05:12:57.201568Z", "relationship_type": "indicates", "source_ref": "indicator--eb8fc074-e04c-4c03-9ab7-0bab893400c6", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b379f7-35da-40b0-91df-92f66a040ecb", "created": "2026-01-27T05:12:57.201757Z", "modified": "2026-01-27T05:12:57.201757Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphone-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.201757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--825e0379-88d2-4afd-a500-84f3148694d9", "created": "2026-01-27T05:12:57.202457Z", "modified": "2026-01-27T05:12:57.202457Z", "relationship_type": "indicates", "source_ref": "indicator--b7b379f7-35da-40b0-91df-92f66a040ecb", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe803358-409b-4768-893a-ba302dbe36e3", "created": "2026-01-27T05:12:57.202633Z", "modified": "2026-01-27T05:12:57.202633Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='client.spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.202633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e49e6e1-2fc1-4e7a-b592-06fb2dcf3ea5", "created": "2026-01-27T05:12:57.203329Z", "modified": "2026-01-27T05:12:57.203329Z", "relationship_type": "indicates", "source_ref": "indicator--fe803358-409b-4768-893a-ba302dbe36e3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdedb0e9-90d6-4197-8e05-7965499be19e", "created": "2026-01-27T05:12:57.203506Z", "modified": "2026-01-27T05:12:57.203506Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='client.spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.203506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85e156c8-401e-4ec3-b66f-07fe9bc25f05", "created": "2026-01-27T05:12:57.204327Z", "modified": "2026-01-27T05:12:57.204327Z", "relationship_type": "indicates", "source_ref": "indicator--bdedb0e9-90d6-4197-8e05-7965499be19e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0375fd-b820-48f7-9842-b53c8440ff32", "created": "2026-01-27T05:12:57.204508Z", "modified": "2026-01-27T05:12:57.204508Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='copy9db.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.204508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ccc63de-3076-4743-845e-769c1dcb8c1e", "created": "2026-01-27T05:12:57.205196Z", "modified": "2026-01-27T05:12:57.205196Z", "relationship_type": "indicates", "source_ref": "indicator--8a0375fd-b820-48f7-9842-b53c8440ff32", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b05948f-d759-4598-90a7-e9719dbdbf39", "created": "2026-01-27T05:12:57.205374Z", "modified": "2026-01-27T05:12:57.205374Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata.1topspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.205374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90598c42-739d-47e3-8976-403e712fc4b5", "created": "2026-01-27T05:12:57.206082Z", "modified": "2026-01-27T05:12:57.206082Z", "relationship_type": "indicates", "source_ref": "indicator--1b05948f-d759-4598-90a7-e9719dbdbf39", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f0a23f-32d6-4fe3-983b-229953b703a9", "created": "2026-01-27T05:12:57.206263Z", "modified": "2026-01-27T05:12:57.206263Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata.copy9db.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.206263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2efad273-4c75-4464-8f89-10c30c520141", "created": "2026-01-27T05:12:57.206965Z", "modified": "2026-01-27T05:12:57.206965Z", "relationship_type": "indicates", "source_ref": "indicator--92f0a23f-32d6-4fe3-983b-229953b703a9", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5515d0-b4d7-4afa-810b-c6fe3ca84947", "created": "2026-01-27T05:12:57.207145Z", "modified": "2026-01-27T05:12:57.207145Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.207145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe45be48-0c3f-4de0-ad33-e4078c105521", "created": "2026-01-27T05:12:57.207843Z", "modified": "2026-01-27T05:12:57.207843Z", "relationship_type": "indicates", "source_ref": "indicator--9f5515d0-b4d7-4afa-810b-c6fe3ca84947", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce14fd2-c64f-4219-ad93-2c84702b65bb", "created": "2026-01-27T05:12:57.208021Z", "modified": "2026-01-27T05:12:57.208021Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata2.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.208021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2449ee3-94af-4943-9f04-821e8270a8c5", "created": "2026-01-27T05:12:57.208739Z", "modified": "2026-01-27T05:12:57.208739Z", "relationship_type": "indicates", "source_ref": "indicator--cce14fd2-c64f-4219-ad93-2c84702b65bb", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767cf943-93c7-4325-9c05-a4291297a672", "created": "2026-01-27T05:12:57.208936Z", "modified": "2026-01-27T05:12:57.208936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata3.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.208936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad0b3dd7-e0de-4b04-984c-3b41f81b02d4", "created": "2026-01-27T05:12:57.209756Z", "modified": "2026-01-27T05:12:57.209756Z", "relationship_type": "indicates", "source_ref": "indicator--767cf943-93c7-4325-9c05-a4291297a672", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cae11f8-a5ca-4e3b-9c3e-9e38a5f301ae", "created": "2026-01-27T05:12:57.210104Z", "modified": "2026-01-27T05:12:57.210104Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata4.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.210104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb1ad46f-2977-4650-99b5-194812f3c13e", "created": "2026-01-27T05:12:57.210935Z", "modified": "2026-01-27T05:12:57.210935Z", "relationship_type": "indicates", "source_ref": "indicator--9cae11f8-a5ca-4e3b-9c3e-9e38a5f301ae", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b01cd0e-c5e4-472d-a8df-c7aa13ad1f6b", "created": "2026-01-27T05:12:57.211112Z", "modified": "2026-01-27T05:12:57.211112Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdata5.hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.211112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4006533c-3776-4c94-8a3a-c465eb9fa55e", "created": "2026-01-27T05:12:57.211812Z", "modified": "2026-01-27T05:12:57.211812Z", "relationship_type": "indicates", "source_ref": "indicator--7b01cd0e-c5e4-472d-a8df-c7aa13ad1f6b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767d756f-7584-4a9d-87d5-f9a60f2b5a40", "created": "2026-01-27T05:12:57.211989Z", "modified": "2026-01-27T05:12:57.211989Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flushdbd.maxxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.211989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dfd184b-6968-4cf2-959b-89e823f20244", "created": "2026-01-27T05:12:57.212809Z", "modified": "2026-01-27T05:12:57.212809Z", "relationship_type": "indicates", "source_ref": "indicator--767d756f-7584-4a9d-87d5-f9a60f2b5a40", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71976331-718e-41bc-b5d4-5558197a086b", "created": "2026-01-27T05:12:57.213001Z", "modified": "2026-01-27T05:12:57.213001Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.213001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ec490a4-e0c8-494d-a015-702f7d0295ac", "created": "2026-01-27T05:12:57.213669Z", "modified": "2026-01-27T05:12:57.213669Z", "relationship_type": "indicates", "source_ref": "indicator--71976331-718e-41bc-b5d4-5558197a086b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4b4945-f224-477a-81a8-9bb35f858f15", "created": "2026-01-27T05:12:57.213876Z", "modified": "2026-01-27T05:12:57.213876Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maxxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.213876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a04647d-bbe5-4d82-b0b1-f40d41305c6e", "created": "2026-01-27T05:12:57.214558Z", "modified": "2026-01-27T05:12:57.214558Z", "relationship_type": "indicates", "source_ref": "indicator--7e4b4945-f224-477a-81a8-9bb35f858f15", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209bc58b-5ac7-4a9b-94fd-b4a92640b23c", "created": "2026-01-27T05:12:57.214737Z", "modified": "2026-01-27T05:12:57.214737Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.214737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff93b325-5536-4815-be9e-9f8d0cf4f21d", "created": "2026-01-27T05:12:57.215443Z", "modified": "2026-01-27T05:12:57.215443Z", "relationship_type": "indicates", "source_ref": "indicator--209bc58b-5ac7-4a9b-94fd-b4a92640b23c", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04eb77f-8894-40d7-a3ff-8e6772aefb67", "created": "2026-01-27T05:12:57.21562Z", "modified": "2026-01-27T05:12:57.21562Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.21562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efbfb1b2-0f18-4f0d-8012-cb415f82cc09", "created": "2026-01-27T05:12:57.21631Z", "modified": "2026-01-27T05:12:57.21631Z", "relationship_type": "indicates", "source_ref": "indicator--f04eb77f-8894-40d7-a3ff-8e6772aefb67", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3878d1-2da1-45ea-98ad-052287acf551", "created": "2026-01-27T05:12:57.216488Z", "modified": "2026-01-27T05:12:57.216488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.216488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79fe6379-ab5e-4250-b750-24477e86679c", "created": "2026-01-27T05:12:57.217184Z", "modified": "2026-01-27T05:12:57.217184Z", "relationship_type": "indicates", "source_ref": "indicator--0a3878d1-2da1-45ea-98ad-052287acf551", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734fc006-41d5-48e5-b0a8-7e75d72d6292", "created": "2026-01-27T05:12:57.217362Z", "modified": "2026-01-27T05:12:57.217362Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='virsis.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.217362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d7e8f1a-8469-413b-a8da-5e1f98613de5", "created": "2026-01-27T05:12:57.218135Z", "modified": "2026-01-27T05:12:57.218135Z", "relationship_type": "indicates", "source_ref": "indicator--734fc006-41d5-48e5-b0a8-7e75d72d6292", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff698eb5-612a-4b90-983e-6d3ee4f62916", "created": "2026-01-27T05:12:57.218313Z", "modified": "2026-01-27T05:12:57.218313Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webservicesdb.mobiispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.218313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ce71c97-3463-4c02-9ebc-0d340faa703c", "created": "2026-01-27T05:12:57.219031Z", "modified": "2026-01-27T05:12:57.219031Z", "relationship_type": "indicates", "source_ref": "indicator--ff698eb5-612a-4b90-983e-6d3ee4f62916", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9bf57f-cc12-493f-b458-ff7136336e6d", "created": "2026-01-27T05:12:57.21921Z", "modified": "2026-01-27T05:12:57.21921Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.21921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5716dd9-7009-4e48-9419-b66d0a078a61", "created": "2026-01-27T05:12:57.219902Z", "modified": "2026-01-27T05:12:57.219902Z", "relationship_type": "indicates", "source_ref": "indicator--ba9bf57f-cc12-493f-b458-ff7136336e6d", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f100c399-5261-4d2e-a0ff-aaff897b3139", "created": "2026-01-27T05:12:57.220079Z", "modified": "2026-01-27T05:12:57.220079Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.220079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8fa12d0-244a-4f4a-a729-cb1c6ad60008", "created": "2026-01-27T05:12:57.220895Z", "modified": "2026-01-27T05:12:57.220895Z", "relationship_type": "indicates", "source_ref": "indicator--f100c399-5261-4d2e-a0ff-aaff897b3139", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80a1a71-89a0-4780-893d-5667bfdef690", "created": "2026-01-27T05:12:57.221074Z", "modified": "2026-01-27T05:12:57.221074Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='1topspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.221074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17f961de-da29-4029-9e94-d09b2c319f39", "created": "2026-01-27T05:12:57.221842Z", "modified": "2026-01-27T05:12:57.221842Z", "relationship_type": "indicates", "source_ref": "indicator--d80a1a71-89a0-4780-893d-5667bfdef690", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31f26a8-f433-44d7-81c9-d0b7ed90544b", "created": "2026-01-27T05:12:57.22203Z", "modified": "2026-01-27T05:12:57.22203Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.mobile-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.22203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf43c411-26b7-42fd-bfb7-8e782797b2ce", "created": "2026-01-27T05:12:57.222762Z", "modified": "2026-01-27T05:12:57.222762Z", "relationship_type": "indicates", "source_ref": "indicator--c31f26a8-f433-44d7-81c9-d0b7ed90544b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231bf306-285b-4144-9504-ebb2c415b2e9", "created": "2026-01-27T05:12:57.222944Z", "modified": "2026-01-27T05:12:57.222944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.222944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d58679dc-ecc4-493c-9e43-5adc2d812f38", "created": "2026-01-27T05:12:57.22361Z", "modified": "2026-01-27T05:12:57.22361Z", "relationship_type": "indicates", "source_ref": "indicator--231bf306-285b-4144-9504-ebb2c415b2e9", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a4cd59-bb40-4c0f-9cbe-cdf8f60ec266", "created": "2026-01-27T05:12:57.22381Z", "modified": "2026-01-27T05:12:57.22381Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getspyapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.22381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3040612-ec8d-4694-8a76-fe9a7e14ef86", "created": "2026-01-27T05:12:57.224498Z", "modified": "2026-01-27T05:12:57.224498Z", "relationship_type": "indicates", "source_ref": "indicator--80a4cd59-bb40-4c0f-9cbe-cdf8f60ec266", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bfed22-1917-4b21-8f0a-c69251934545", "created": "2026-01-27T05:12:57.224674Z", "modified": "2026-01-27T05:12:57.224674Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hellospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.224674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6eced7e-bbe4-4093-8f62-e5bf5aea5de0", "created": "2026-01-27T05:12:57.225369Z", "modified": "2026-01-27T05:12:57.225369Z", "relationship_type": "indicates", "source_ref": "indicator--62bfed22-1917-4b21-8f0a-c69251934545", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bffe4b9-7c2c-44af-b590-5ae65a2541e3", "created": "2026-01-27T05:12:57.22555Z", "modified": "2026-01-27T05:12:57.22555Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='innovaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.22555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d00fb450-253d-4a80-be82-b4d961a8417e", "created": "2026-01-27T05:12:57.226245Z", "modified": "2026-01-27T05:12:57.226245Z", "relationship_type": "indicates", "source_ref": "indicator--8bffe4b9-7c2c-44af-b590-5ae65a2541e3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f9b99c-72bd-4aff-8fe2-2c9ad9c7faa8", "created": "2026-01-27T05:12:57.226424Z", "modified": "2026-01-27T05:12:57.226424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ispytic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.226424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f004ed31-aa1e-4795-9daa-36903d4615f5", "created": "2026-01-27T05:12:57.227111Z", "modified": "2026-01-27T05:12:57.227111Z", "relationship_type": "indicates", "source_ref": "indicator--d2f9b99c-72bd-4aff-8fe2-2c9ad9c7faa8", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e77cba-898c-44b1-bdd2-8c2b6aac0bbb", "created": "2026-01-27T05:12:57.22729Z", "modified": "2026-01-27T05:12:57.22729Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maxxspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.22729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d10813ac-fb10-41ab-9a9b-4266b67aa0fc", "created": "2026-01-27T05:12:57.227986Z", "modified": "2026-01-27T05:12:57.227986Z", "relationship_type": "indicates", "source_ref": "indicator--78e77cba-898c-44b1-bdd2-8c2b6aac0bbb", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824deb8e-a268-4b89-87dd-9efddc44abd6", "created": "2026-01-27T05:12:57.228163Z", "modified": "2026-01-27T05:12:57.228163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobeespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.228163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f108cb0a-bfa4-404a-a209-6ff21b573f5a", "created": "2026-01-27T05:12:57.228974Z", "modified": "2026-01-27T05:12:57.228974Z", "relationship_type": "indicates", "source_ref": "indicator--824deb8e-a268-4b89-87dd-9efddc44abd6", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a67827-6427-45d1-a613-100b192040f8", "created": "2026-01-27T05:12:57.229154Z", "modified": "2026-01-27T05:12:57.229154Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.229154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de66d00f-0845-4f8f-8f32-e6b664d0af0e", "created": "2026-01-27T05:12:57.229838Z", "modified": "2026-01-27T05:12:57.229838Z", "relationship_type": "indicates", "source_ref": "indicator--48a67827-6427-45d1-a613-100b192040f8", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c6e158-e99a-4834-85b0-5f456992751e", "created": "2026-01-27T05:12:57.230016Z", "modified": "2026-01-27T05:12:57.230016Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.230016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b73e4ea-390b-4557-a718-e15f17f3080c", "created": "2026-01-27T05:12:57.230685Z", "modified": "2026-01-27T05:12:57.230685Z", "relationship_type": "indicates", "source_ref": "indicator--61c6e158-e99a-4834-85b0-5f456992751e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a914fa-d43a-4bdb-a92d-6f8e15855fc4", "created": "2026-01-27T05:12:57.230881Z", "modified": "2026-01-27T05:12:57.230881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-remote-tracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.230881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b87d796-8ef0-4585-94da-ed91ddb427aa", "created": "2026-01-27T05:12:57.231571Z", "modified": "2026-01-27T05:12:57.231571Z", "relationship_type": "indicates", "source_ref": "indicator--83a914fa-d43a-4bdb-a92d-6f8e15855fc4", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46c587e-8979-41d5-8a3f-7b521e87542b", "created": "2026-01-27T05:12:57.231768Z", "modified": "2026-01-27T05:12:57.231768Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespyblog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.231768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b8de13f-5078-414f-80a6-13628bc81a83", "created": "2026-01-27T05:12:57.232472Z", "modified": "2026-01-27T05:12:57.232472Z", "relationship_type": "indicates", "source_ref": "indicator--b46c587e-8979-41d5-8a3f-7b521e87542b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad70f4a-28d7-4f4d-9d6e-820cd1281870", "created": "2026-01-27T05:12:57.232651Z", "modified": "2026-01-27T05:12:57.232651Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspymax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.232651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1576b80-e436-43b1-a880-d6d39cb7a466", "created": "2026-01-27T05:12:57.233342Z", "modified": "2026-01-27T05:12:57.233342Z", "relationship_type": "indicates", "source_ref": "indicator--7ad70f4a-28d7-4f4d-9d6e-820cd1281870", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60a6b98-3f74-40cb-8010-ae5b0c245697", "created": "2026-01-27T05:12:57.233518Z", "modified": "2026-01-27T05:12:57.233518Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='opispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.233518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c254865-a4fe-4421-9640-d8bdd83c3b7a", "created": "2026-01-27T05:12:57.234315Z", "modified": "2026-01-27T05:12:57.234315Z", "relationship_type": "indicates", "source_ref": "indicator--d60a6b98-3f74-40cb-8010-ae5b0c245697", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1333b205-7ad7-41de-9537-ae20d1c41b1d", "created": "2026-01-27T05:12:57.234497Z", "modified": "2026-01-27T05:12:57.234497Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyacellphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.234497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01fa0d12-c717-4a4c-8ef3-99479c213d54", "created": "2026-01-27T05:12:57.235202Z", "modified": "2026-01-27T05:12:57.235202Z", "relationship_type": "indicates", "source_ref": "indicator--1333b205-7ad7-41de-9537-ae20d1c41b1d", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5984402-1fe6-4981-ad28-d780acec6665", "created": "2026-01-27T05:12:57.235383Z", "modified": "2026-01-27T05:12:57.235383Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.235383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81448bb1-1634-484c-be81-85ce08c5c8f3", "created": "2026-01-27T05:12:57.236071Z", "modified": "2026-01-27T05:12:57.236071Z", "relationship_type": "indicates", "source_ref": "indicator--e5984402-1fe6-4981-ad28-d780acec6665", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0231c412-1d5d-486d-a965-f3c138907dd1", "created": "2026-01-27T05:12:57.236252Z", "modified": "2026-01-27T05:12:57.236252Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.236252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e949c143-2716-4d6e-9f2b-6bbcf0656cab", "created": "2026-01-27T05:12:57.23705Z", "modified": "2026-01-27T05:12:57.23705Z", "relationship_type": "indicates", "source_ref": "indicator--0231c412-1d5d-486d-a965-f3c138907dd1", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee573375-520e-4e04-8cd8-a946f278f475", "created": "2026-01-27T05:12:57.237234Z", "modified": "2026-01-27T05:12:57.237234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyios8x.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.237234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8a11c53-43b2-41c5-9d56-3f0309eaf263", "created": "2026-01-27T05:12:57.237927Z", "modified": "2026-01-27T05:12:57.237927Z", "relationship_type": "indicates", "source_ref": "indicator--ee573375-520e-4e04-8cd8-a946f278f475", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62500836-3ef2-4aef-9ffb-79181bd51c35", "created": "2026-01-27T05:12:57.238107Z", "modified": "2026-01-27T05:12:57.238107Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.238107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b44d112b-3a60-42ce-9614-e1aa3293f5a5", "created": "2026-01-27T05:12:57.238797Z", "modified": "2026-01-27T05:12:57.238797Z", "relationship_type": "indicates", "source_ref": "indicator--62500836-3ef2-4aef-9ffb-79181bd51c35", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d589de1-6349-436f-ad52-97d9deab488c", "created": "2026-01-27T05:12:57.238978Z", "modified": "2026-01-27T05:12:57.238978Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyhide.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.238978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85ed047e-2432-420d-a905-ce32fba313a5", "created": "2026-01-27T05:12:57.239649Z", "modified": "2026-01-27T05:12:57.239649Z", "relationship_type": "indicates", "source_ref": "indicator--4d589de1-6349-436f-ad52-97d9deab488c", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83eca804-e29d-4756-9a8c-9c08d4f11594", "created": "2026-01-27T05:12:57.239864Z", "modified": "2026-01-27T05:12:57.239864Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='profotoeditor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.239864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8e5f293-36df-4c0d-95a0-a0b157c34bf4", "created": "2026-01-27T05:12:57.240544Z", "modified": "2026-01-27T05:12:57.240544Z", "relationship_type": "indicates", "source_ref": "indicator--83eca804-e29d-4756-9a8c-9c08d4f11594", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574caed0-c085-4d8b-9658-b4a0b0e4178e", "created": "2026-01-27T05:12:57.240722Z", "modified": "2026-01-27T05:12:57.240722Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='178.63.71.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.240722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--caa49c9e-4a05-4e4b-ab30-c7093976cd7f", "created": "2026-01-27T05:12:57.241412Z", "modified": "2026-01-27T05:12:57.241412Z", "relationship_type": "indicates", "source_ref": "indicator--574caed0-c085-4d8b-9658-b4a0b0e4178e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f590b41-7e47-4e7e-b9e7-cec9f6765852", "created": "2026-01-27T05:12:57.241589Z", "modified": "2026-01-27T05:12:57.241589Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cfd4bb895ea465ce3d92d4e99ef220d97e5cf6d9936b4b08fc55c52384195659']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.241589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--592abcf1-3887-415e-91a1-ce3661461712", "created": "2026-01-27T05:12:57.242449Z", "modified": "2026-01-27T05:12:57.242449Z", "relationship_type": "indicates", "source_ref": "indicator--2f590b41-7e47-4e7e-b9e7-cec9f6765852", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed90d8a-213c-4000-94ae-ddd03d07216a", "created": "2026-01-27T05:12:57.242628Z", "modified": "2026-01-27T05:12:57.242628Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aae6a0f264a658f1630e99c636cf854f6224648dbfe2e8838e7656c891ed681']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.242628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2f44e08-6101-4b88-845f-d26042b113d0", "created": "2026-01-27T05:12:57.243484Z", "modified": "2026-01-27T05:12:57.243484Z", "relationship_type": "indicates", "source_ref": "indicator--1ed90d8a-213c-4000-94ae-ddd03d07216a", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ac375e-9f4a-4bc5-9a55-b70e533d8697", "created": "2026-01-27T05:12:57.243664Z", "modified": "2026-01-27T05:12:57.243664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9a20dc495151ead4193171d4f94e7a30c2efe8fe30dccd98534b752f356512']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.243664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51327573-67ea-4e26-a9c0-6dd90536a451", "created": "2026-01-27T05:12:57.244533Z", "modified": "2026-01-27T05:12:57.244533Z", "relationship_type": "indicates", "source_ref": "indicator--18ac375e-9f4a-4bc5-9a55-b70e533d8697", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f02c0aa-3203-4af3-b637-40b97bd113e4", "created": "2026-01-27T05:12:57.244712Z", "modified": "2026-01-27T05:12:57.244712Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76a5121457d43a79b1fcb4c6b6098b23def2d9509e111fcf11c6dc276f500c97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.244712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b27aa80-8e45-4924-9f9f-7f9c05c4b110", "created": "2026-01-27T05:12:57.245686Z", "modified": "2026-01-27T05:12:57.245686Z", "relationship_type": "indicates", "source_ref": "indicator--9f02c0aa-3203-4af3-b637-40b97bd113e4", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33e648c-e7a6-4f86-a0f8-adbf9e0d657c", "created": "2026-01-27T05:12:57.245885Z", "modified": "2026-01-27T05:12:57.245885Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='777d0bc5091dcd5d1dc5fd51ca5e4e67312cf08eb60dc7ea8dac01105821d200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.245885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cbd15fe-9cba-4310-ac85-de50fc640fa2", "created": "2026-01-27T05:12:57.246719Z", "modified": "2026-01-27T05:12:57.246719Z", "relationship_type": "indicates", "source_ref": "indicator--a33e648c-e7a6-4f86-a0f8-adbf9e0d657c", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43004c24-e05c-42de-97df-79bf8168ed0f", "created": "2026-01-27T05:12:57.246916Z", "modified": "2026-01-27T05:12:57.246916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fcd4d09edc2c20ecb4b3eca758f5c263998fe2c07f4001b692460f004743c8c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.246916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55ea52d5-45c3-4654-b8fb-fdd2c02e7fc4", "created": "2026-01-27T05:12:57.247764Z", "modified": "2026-01-27T05:12:57.247764Z", "relationship_type": "indicates", "source_ref": "indicator--43004c24-e05c-42de-97df-79bf8168ed0f", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26075bcd-eca2-4462-8d16-6c6077d36f24", "created": "2026-01-27T05:12:57.247946Z", "modified": "2026-01-27T05:12:57.247946Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f3bc9ebe8c249f0416f5b0367f34b4b8f6aaa7d351dc5b4912fe2558491b6b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.247946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cb0774d-804c-41c3-a955-2187cba02def", "created": "2026-01-27T05:12:57.248803Z", "modified": "2026-01-27T05:12:57.248803Z", "relationship_type": "indicates", "source_ref": "indicator--26075bcd-eca2-4462-8d16-6c6077d36f24", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa54e2a-3e7b-41e3-8f24-bb6a81065dd3", "created": "2026-01-27T05:12:57.248988Z", "modified": "2026-01-27T05:12:57.248988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13e0ac75810028bc4a2ee4b810f4fb9eb5c8dbe5ed43e88f4b635f5877475864']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.248988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a89a5d1-4dd8-40d3-8b80-ba80db01b03e", "created": "2026-01-27T05:12:57.249838Z", "modified": "2026-01-27T05:12:57.249838Z", "relationship_type": "indicates", "source_ref": "indicator--cfa54e2a-3e7b-41e3-8f24-bb6a81065dd3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7052df-0236-4ce4-a801-e1c727c7c579", "created": "2026-01-27T05:12:57.25002Z", "modified": "2026-01-27T05:12:57.25002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15564b1fe7262e02254c639abc08086f92bf8f8a60d765c750ee69e1b7aea541']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.25002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8353226-d17b-4eac-8c14-b025e8049cac", "created": "2026-01-27T05:12:57.250872Z", "modified": "2026-01-27T05:12:57.250872Z", "relationship_type": "indicates", "source_ref": "indicator--0a7052df-0236-4ce4-a801-e1c727c7c579", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38672eaf-9299-4814-805d-c597c933069d", "created": "2026-01-27T05:12:57.251049Z", "modified": "2026-01-27T05:12:57.251049Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dfba04a26e0727fbd1d2a32e91125c5588d399388a1bcabf57b87d80f6c8b49c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.251049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21f70959-606c-498c-997a-b61c30f25573", "created": "2026-01-27T05:12:57.2519Z", "modified": "2026-01-27T05:12:57.2519Z", "relationship_type": "indicates", "source_ref": "indicator--38672eaf-9299-4814-805d-c597c933069d", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d93704-f0d2-428b-9a8a-45cde9fa4628", "created": "2026-01-27T05:12:57.252077Z", "modified": "2026-01-27T05:12:57.252077Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f29e75c97f1c0f3461c384c3358ad888e1be114dc0eef9d44cd12b7b30a5d5e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.252077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cd218f0-4989-4633-99b4-a4b7711cf379", "created": "2026-01-27T05:12:57.252926Z", "modified": "2026-01-27T05:12:57.252926Z", "relationship_type": "indicates", "source_ref": "indicator--c8d93704-f0d2-428b-9a8a-45cde9fa4628", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e090be1c-afb9-44cf-988d-72684450b1c5", "created": "2026-01-27T05:12:57.253103Z", "modified": "2026-01-27T05:12:57.253103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1605113e98c26220b694135f5020844d93d72d70b61e17fd555cbcc0a3854ebe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.253103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f02bbbee-1662-4772-8c7f-5384f022f6c3", "created": "2026-01-27T05:12:57.253946Z", "modified": "2026-01-27T05:12:57.253946Z", "relationship_type": "indicates", "source_ref": "indicator--e090be1c-afb9-44cf-988d-72684450b1c5", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00c8a6fc-e041-4ffc-a8d9-efd45df990cd", "created": "2026-01-27T05:12:57.254125Z", "modified": "2026-01-27T05:12:57.254125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83971977247736f1a99a02b9eb394e560e98de9a0cd64fbae594f6da622f4859']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.254125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93e3d566-0483-4023-a645-e0f7ff89aaf7", "created": "2026-01-27T05:12:57.255115Z", "modified": "2026-01-27T05:12:57.255115Z", "relationship_type": "indicates", "source_ref": "indicator--00c8a6fc-e041-4ffc-a8d9-efd45df990cd", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108a201f-59b3-439e-b183-9a90b92a8c73", "created": "2026-01-27T05:12:57.255295Z", "modified": "2026-01-27T05:12:57.255295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a6e2a38782ea3d0eabf1bbc5f388ea3dd56d08d38ffc81cebe7c8fdf5594e42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.255295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22f107a1-2b9e-472b-8c3c-f80a320f11a7", "created": "2026-01-27T05:12:57.256161Z", "modified": "2026-01-27T05:12:57.256161Z", "relationship_type": "indicates", "source_ref": "indicator--108a201f-59b3-439e-b183-9a90b92a8c73", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0a3f27-0587-4c4d-97c5-687f90049463", "created": "2026-01-27T05:12:57.256342Z", "modified": "2026-01-27T05:12:57.256342Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea75e842ec7e927aed6ec0fe3a85f515f2f9bfaa1a84d665c7937fa1e5caf7c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.256342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50250d01-ead3-4bf0-97bd-d2f24ebcc4b3", "created": "2026-01-27T05:12:57.257189Z", "modified": "2026-01-27T05:12:57.257189Z", "relationship_type": "indicates", "source_ref": "indicator--0b0a3f27-0587-4c4d-97c5-687f90049463", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f79673-0df4-41ea-a291-2ec70437d7be", "created": "2026-01-27T05:12:57.257367Z", "modified": "2026-01-27T05:12:57.257367Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='122398ef2c28b577e491459915dfc00da1de6bb942cc67b1c273180a0af116ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.257367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--198408ff-6fa9-4a6a-9d78-0ac03330ade4", "created": "2026-01-27T05:12:57.258211Z", "modified": "2026-01-27T05:12:57.258211Z", "relationship_type": "indicates", "source_ref": "indicator--16f79673-0df4-41ea-a291-2ec70437d7be", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d86d547-1f98-440e-acbb-a3fbacf9b90e", "created": "2026-01-27T05:12:57.25839Z", "modified": "2026-01-27T05:12:57.25839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='611736dfb1f0da65604412ed3cedc612fa292349c3041b9d3971e0426728c1bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.25839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d22d23a-4e33-4cfd-89a0-ada2142ba965", "created": "2026-01-27T05:12:57.259232Z", "modified": "2026-01-27T05:12:57.259232Z", "relationship_type": "indicates", "source_ref": "indicator--3d86d547-1f98-440e-acbb-a3fbacf9b90e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a8eee7-7c8c-47c1-94b0-7a4e4d0da18e", "created": "2026-01-27T05:12:57.259407Z", "modified": "2026-01-27T05:12:57.259407Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8ea0be5ada9340af9ee46dd71e6f537c6e96631bf6b1d88813acdfed76bb392']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.259407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--803dd4d2-6b0a-4b46-8922-0b95081ce04a", "created": "2026-01-27T05:12:57.260249Z", "modified": "2026-01-27T05:12:57.260249Z", "relationship_type": "indicates", "source_ref": "indicator--c5a8eee7-7c8c-47c1-94b0-7a4e4d0da18e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3597db1-5580-4318-b51f-3f416e354a77", "created": "2026-01-27T05:12:57.260423Z", "modified": "2026-01-27T05:12:57.260423Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a48445a5da9d5649bb5dabe40155c99fcfe1fb503fa169d9f21bbe68cfd3114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.260423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb53d448-ee17-4b3e-ac32-c67c8a92e15c", "created": "2026-01-27T05:12:57.261263Z", "modified": "2026-01-27T05:12:57.261263Z", "relationship_type": "indicates", "source_ref": "indicator--b3597db1-5580-4318-b51f-3f416e354a77", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c093821a-f44b-4e1c-ba9c-4877281f54b9", "created": "2026-01-27T05:12:57.26144Z", "modified": "2026-01-27T05:12:57.26144Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23929ad7a4945c8ddb12545c90d9739895d1846f168bba367a556e458a53c7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.26144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61ca0ab1-07c0-48b5-9e79-0d022cccb343", "created": "2026-01-27T05:12:57.262297Z", "modified": "2026-01-27T05:12:57.262297Z", "relationship_type": "indicates", "source_ref": "indicator--c093821a-f44b-4e1c-ba9c-4877281f54b9", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ded5963-7167-4784-99ff-0ac76c9a644b", "created": "2026-01-27T05:12:57.262481Z", "modified": "2026-01-27T05:12:57.262481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f6efeefea291f1fbd8584914ce24ac6361c790397ff13b2c12978538f963af0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.262481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85f0b054-178f-4ef0-88e9-b3eea9c3e95c", "created": "2026-01-27T05:12:57.26335Z", "modified": "2026-01-27T05:12:57.26335Z", "relationship_type": "indicates", "source_ref": "indicator--2ded5963-7167-4784-99ff-0ac76c9a644b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f74499-0429-417f-9583-02f7434fa60f", "created": "2026-01-27T05:12:57.263536Z", "modified": "2026-01-27T05:12:57.263536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c82bb722ce8a846541cc009a0760bd05f9455f27d9d4c76bbb9a6733f8d1d7dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.263536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83545bcb-3027-4fed-be1b-0035b845b3cf", "created": "2026-01-27T05:12:57.264507Z", "modified": "2026-01-27T05:12:57.264507Z", "relationship_type": "indicates", "source_ref": "indicator--c9f74499-0429-417f-9583-02f7434fa60f", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd53f233-1ee7-4afd-a931-1d85c4e72e6b", "created": "2026-01-27T05:12:57.264689Z", "modified": "2026-01-27T05:12:57.264689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='efb55e3b484ac441976eb9ec20e2c61ca350b4356971da806558dfc5317ecfb6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.264689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a5493e5-b29b-4b5a-b9e2-12f3b9e90ad9", "created": "2026-01-27T05:12:57.265573Z", "modified": "2026-01-27T05:12:57.265573Z", "relationship_type": "indicates", "source_ref": "indicator--bd53f233-1ee7-4afd-a931-1d85c4e72e6b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0ba997-746d-4d51-88f1-483b149c558e", "created": "2026-01-27T05:12:57.26577Z", "modified": "2026-01-27T05:12:57.26577Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5516637d5c79334b79ff5b8877bedcfdb395858c467a84df3f555836d1c3d3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.26577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--322704d7-73b6-412c-84fb-48d384dc0d2f", "created": "2026-01-27T05:12:57.266604Z", "modified": "2026-01-27T05:12:57.266604Z", "relationship_type": "indicates", "source_ref": "indicator--fa0ba997-746d-4d51-88f1-483b149c558e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042e3b90-dcd7-4e7f-9ba9-c767769bb451", "created": "2026-01-27T05:12:57.266799Z", "modified": "2026-01-27T05:12:57.266799Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1add35a54b77ce30742d18398d9f79b8ffb49e3d39f846381eea3624db598d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.266799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7586b851-ba0e-41d1-b748-0a573fb3e70b", "created": "2026-01-27T05:12:57.267631Z", "modified": "2026-01-27T05:12:57.267631Z", "relationship_type": "indicates", "source_ref": "indicator--042e3b90-dcd7-4e7f-9ba9-c767769bb451", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0359a2f7-9f84-405a-b21b-2c225c9b4353", "created": "2026-01-27T05:12:57.267826Z", "modified": "2026-01-27T05:12:57.267826Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4dfdba46a872d5e10c69bee741aa08dcd4cb0b2373a736b972eaa85b80659d32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.267826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f4bb181-e917-4f55-bd54-4ddc0ee56000", "created": "2026-01-27T05:12:57.268656Z", "modified": "2026-01-27T05:12:57.268656Z", "relationship_type": "indicates", "source_ref": "indicator--0359a2f7-9f84-405a-b21b-2c225c9b4353", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf0e19a-96f5-43a1-97b2-94b1c993eb68", "created": "2026-01-27T05:12:57.26886Z", "modified": "2026-01-27T05:12:57.26886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a8cea56f382e5339fed2387b2c06083683fd1613b7db5eef03d619c5ecea5d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.26886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fa002b2-e8ef-4939-a801-343c72b1cc3d", "created": "2026-01-27T05:12:57.269692Z", "modified": "2026-01-27T05:12:57.269692Z", "relationship_type": "indicates", "source_ref": "indicator--baf0e19a-96f5-43a1-97b2-94b1c993eb68", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deaf156d-f236-40bd-825b-2e031810e01c", "created": "2026-01-27T05:12:57.269888Z", "modified": "2026-01-27T05:12:57.269888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='577493b01b33d87a0fbe988bf8e3008060584ff62b1ca949cd798b9747e63aa8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.269888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8be63dd2-16bb-4828-935d-f0acb0e699b4", "created": "2026-01-27T05:12:57.270713Z", "modified": "2026-01-27T05:12:57.270713Z", "relationship_type": "indicates", "source_ref": "indicator--deaf156d-f236-40bd-825b-2e031810e01c", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c5228f-7221-48bd-ad00-0b9830e320ec", "created": "2026-01-27T05:12:57.270907Z", "modified": "2026-01-27T05:12:57.270907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7955cef071d9e2d563cb1ba9aecea2dba361854641c4cbfad39cb242d1cb7156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.270907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0aeb8cf-46b3-4556-851d-b413a373adc4", "created": "2026-01-27T05:12:57.271821Z", "modified": "2026-01-27T05:12:57.271821Z", "relationship_type": "indicates", "source_ref": "indicator--b9c5228f-7221-48bd-ad00-0b9830e320ec", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644cf96d-5a2c-442c-98b0-3e8e518d829e", "created": "2026-01-27T05:12:57.272008Z", "modified": "2026-01-27T05:12:57.272008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db96ea05672188096d05c657fddb4134c56adf9f9971a234c6c1028959eae4c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.272008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e76ddbee-0866-4c6a-a90c-8c743a61ad01", "created": "2026-01-27T05:12:57.272998Z", "modified": "2026-01-27T05:12:57.272998Z", "relationship_type": "indicates", "source_ref": "indicator--644cf96d-5a2c-442c-98b0-3e8e518d829e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082c948f-3f11-48ed-94da-82b1fd8aa095", "created": "2026-01-27T05:12:57.273181Z", "modified": "2026-01-27T05:12:57.273181Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d7c87283256621dca3f48887f7a9068b6636124a552cff54924d96e7fbccff0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.273181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f0fc0a1-86c8-41ac-a192-bf3df9207740", "created": "2026-01-27T05:12:57.274034Z", "modified": "2026-01-27T05:12:57.274034Z", "relationship_type": "indicates", "source_ref": "indicator--082c948f-3f11-48ed-94da-82b1fd8aa095", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe70798-2495-4cf3-b362-b067694a0839", "created": "2026-01-27T05:12:57.274213Z", "modified": "2026-01-27T05:12:57.274213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5918f58ba7b9fcb1cc92fd3b6b1d80638ae2f5ffe3687f1b22fdf4db6927d4ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.274213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f473beb1-3fb4-4003-9ba3-0112409b0b29", "created": "2026-01-27T05:12:57.275063Z", "modified": "2026-01-27T05:12:57.275063Z", "relationship_type": "indicates", "source_ref": "indicator--dbe70798-2495-4cf3-b362-b067694a0839", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb06b66-daaf-43b6-88bf-6e0e2a16a78b", "created": "2026-01-27T05:12:57.275242Z", "modified": "2026-01-27T05:12:57.275242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95f0d0c28040db9d8aab64ba1a4173cde0da43680a26e3e531c9291cd2597254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.275242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcbdeb86-b058-4d58-9477-8160fa3081eb", "created": "2026-01-27T05:12:57.276089Z", "modified": "2026-01-27T05:12:57.276089Z", "relationship_type": "indicates", "source_ref": "indicator--2eb06b66-daaf-43b6-88bf-6e0e2a16a78b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615c07f4-9e49-4f1e-a76f-cfef1723d767", "created": "2026-01-27T05:12:57.27627Z", "modified": "2026-01-27T05:12:57.27627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9bf8f7e8e949fc21009c431e4eee01e996f0e1caaef41699b22321d8abf0c53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.27627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eddfc204-efee-4ec6-82ce-6e286b6ad9fb", "created": "2026-01-27T05:12:57.277118Z", "modified": "2026-01-27T05:12:57.277118Z", "relationship_type": "indicates", "source_ref": "indicator--615c07f4-9e49-4f1e-a76f-cfef1723d767", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1555839f-e92f-4793-9310-8a76eddf77ea", "created": "2026-01-27T05:12:57.277303Z", "modified": "2026-01-27T05:12:57.277303Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d040065f9160e463225bddeb3179b2210eaca53b47334c808f4e65cb6fc47284']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.277303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc622d01-2bd4-47d9-8eb7-27c1e53d9fb2", "created": "2026-01-27T05:12:57.278152Z", "modified": "2026-01-27T05:12:57.278152Z", "relationship_type": "indicates", "source_ref": "indicator--1555839f-e92f-4793-9310-8a76eddf77ea", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724a9c2f-9e0e-40d2-ba73-5decd38c22bb", "created": "2026-01-27T05:12:57.27833Z", "modified": "2026-01-27T05:12:57.27833Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc7623a9f959d384ffaee43f0083356a79ef0669ed2af18c0c38d5c1c6fa1ae1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.27833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6d508c8-b968-4c4e-ac96-98d87226e5d0", "created": "2026-01-27T05:12:57.279178Z", "modified": "2026-01-27T05:12:57.279178Z", "relationship_type": "indicates", "source_ref": "indicator--724a9c2f-9e0e-40d2-ba73-5decd38c22bb", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b319817c-77c4-4e43-904a-e6d80747f820", "created": "2026-01-27T05:12:57.279358Z", "modified": "2026-01-27T05:12:57.279358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4e991488843dad10d87d240b9acff78a8373a5335d5959e8b1e06e2fdf491e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.279358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f744db4b-7ce8-4fe0-9b1a-2664b25dd9a3", "created": "2026-01-27T05:12:57.280204Z", "modified": "2026-01-27T05:12:57.280204Z", "relationship_type": "indicates", "source_ref": "indicator--b319817c-77c4-4e43-904a-e6d80747f820", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5709594-c0e0-4391-9be7-8047c8a140ba", "created": "2026-01-27T05:12:57.280383Z", "modified": "2026-01-27T05:12:57.280383Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fba88e4aaf2af1500a5720d48d6c63ec234270f1278ca412257d0013fe132dc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.280383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff667649-a823-4dfc-8196-5a6f051a8169", "created": "2026-01-27T05:12:57.281225Z", "modified": "2026-01-27T05:12:57.281225Z", "relationship_type": "indicates", "source_ref": "indicator--d5709594-c0e0-4391-9be7-8047c8a140ba", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c502447f-7fbf-49d2-a8db-8b2330572531", "created": "2026-01-27T05:12:57.281401Z", "modified": "2026-01-27T05:12:57.281401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='196c325ea637bf2bf0054e8f1e3683d784a6b6a95c04a4bf2920b0e7e5c0d68c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.281401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--363266e4-1e0c-4eee-ac18-4bd76af39972", "created": "2026-01-27T05:12:57.282369Z", "modified": "2026-01-27T05:12:57.282369Z", "relationship_type": "indicates", "source_ref": "indicator--c502447f-7fbf-49d2-a8db-8b2330572531", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5e2b9d-4270-4a6a-b7fc-911dd647f11c", "created": "2026-01-27T05:12:57.282553Z", "modified": "2026-01-27T05:12:57.282553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59616acb848184ef501b55eed59ded3db51e7a1b4ccc476a8eec784b9db87270']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.282553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67c2ac5f-1561-4454-a79b-0bb0f454d689", "created": "2026-01-27T05:12:57.283414Z", "modified": "2026-01-27T05:12:57.283414Z", "relationship_type": "indicates", "source_ref": "indicator--1f5e2b9d-4270-4a6a-b7fc-911dd647f11c", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d2ccae-11e8-4ee8-853a-5a38628d2a28", "created": "2026-01-27T05:12:57.283597Z", "modified": "2026-01-27T05:12:57.283597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e87884b4bc35d6c2ecc57912ccf91dd8ea903818d1ab988c106d9e60b0c93a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.283597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35bffa8c-c379-4cf1-bd73-48c854481acc", "created": "2026-01-27T05:12:57.284442Z", "modified": "2026-01-27T05:12:57.284442Z", "relationship_type": "indicates", "source_ref": "indicator--b0d2ccae-11e8-4ee8-853a-5a38628d2a28", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8f023e-10ab-472c-bb80-805176a7d804", "created": "2026-01-27T05:12:57.28462Z", "modified": "2026-01-27T05:12:57.28462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22bcd6529138782ce7b8311c41de307660efe4f26f5b77f88ee52ec0b31b797a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.28462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba6d2c6d-ee48-402e-afd7-407f9f0dfa96", "created": "2026-01-27T05:12:57.285469Z", "modified": "2026-01-27T05:12:57.285469Z", "relationship_type": "indicates", "source_ref": "indicator--cf8f023e-10ab-472c-bb80-805176a7d804", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1e9f13-6b77-44ce-ba61-06084832899f", "created": "2026-01-27T05:12:57.285646Z", "modified": "2026-01-27T05:12:57.285646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0b247dd8c09d5af2a6e58b7dada1bbff3741ed379ce40fdf9b497469ba03d85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.285646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62924dda-b27f-4efc-a96e-ee917079c735", "created": "2026-01-27T05:12:57.286487Z", "modified": "2026-01-27T05:12:57.286487Z", "relationship_type": "indicates", "source_ref": "indicator--bc1e9f13-6b77-44ce-ba61-06084832899f", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b520376-efe2-4ceb-940e-eac4c7992a2b", "created": "2026-01-27T05:12:57.286664Z", "modified": "2026-01-27T05:12:57.286664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bbe03430f5e9128c1dcaff73d94036ce40373170101f003ab30891ea5cacbfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.286664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--287b6322-8364-49c7-8fa5-26d6d84df24a", "created": "2026-01-27T05:12:57.287524Z", "modified": "2026-01-27T05:12:57.287524Z", "relationship_type": "indicates", "source_ref": "indicator--8b520376-efe2-4ceb-940e-eac4c7992a2b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff95cb0-f9fa-4b54-ae9f-3d2b0fba9f41", "created": "2026-01-27T05:12:57.287704Z", "modified": "2026-01-27T05:12:57.287704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee23b9af72c59bed21df12958e3a2a7e5c06d34310f4b03be641baa4e3b92b6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.287704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5896f72f-695d-4e7b-8096-773501e1cc21", "created": "2026-01-27T05:12:57.288556Z", "modified": "2026-01-27T05:12:57.288556Z", "relationship_type": "indicates", "source_ref": "indicator--0ff95cb0-f9fa-4b54-ae9f-3d2b0fba9f41", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26952dad-f031-4582-9473-47dcb9111313", "created": "2026-01-27T05:12:57.288736Z", "modified": "2026-01-27T05:12:57.288736Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2d9b06b9a8f2db3032f10cb82716b8db7cd72f98cd6be1689de1e56331bc1ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.288736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67ddd2c3-ee24-4e6d-a4a4-fbf5a4cb189a", "created": "2026-01-27T05:12:57.28958Z", "modified": "2026-01-27T05:12:57.28958Z", "relationship_type": "indicates", "source_ref": "indicator--26952dad-f031-4582-9473-47dcb9111313", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407a7e1f-5c1c-49d9-85aa-4edde3a043f2", "created": "2026-01-27T05:12:57.289773Z", "modified": "2026-01-27T05:12:57.289773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a69a276db6d439001e364aab2c37d6c40557095953fc02ec849b637ad264d45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.289773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--494dd523-81a1-4814-8fd3-6d500cee2df8", "created": "2026-01-27T05:12:57.290624Z", "modified": "2026-01-27T05:12:57.290624Z", "relationship_type": "indicates", "source_ref": "indicator--407a7e1f-5c1c-49d9-85aa-4edde3a043f2", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44787b0-3a8b-4b07-9e28-453e253a4f54", "created": "2026-01-27T05:12:57.290825Z", "modified": "2026-01-27T05:12:57.290825Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a9c6fdff26bf37bc4b374d43a93b30c0f7f52020a41c699a8bfa1868840df66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.290825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8562dff-70fc-4e8b-ae77-811582d8d663", "created": "2026-01-27T05:12:57.292085Z", "modified": "2026-01-27T05:12:57.292085Z", "relationship_type": "indicates", "source_ref": "indicator--c44787b0-3a8b-4b07-9e28-453e253a4f54", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3499d6e0-3eaf-45f4-9166-0d077ad762dc", "created": "2026-01-27T05:12:57.292266Z", "modified": "2026-01-27T05:12:57.292266Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='792f97b7c7ef2bcb2a67f94e103d38677f0ea5da6496c587db6f039fa47f861f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.292266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce2bf1f3-6643-4862-8b57-c08bf3af9d25", "created": "2026-01-27T05:12:57.293118Z", "modified": "2026-01-27T05:12:57.293118Z", "relationship_type": "indicates", "source_ref": "indicator--3499d6e0-3eaf-45f4-9166-0d077ad762dc", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6bce4c-6d28-4488-82d3-69d187e072ed", "created": "2026-01-27T05:12:57.293297Z", "modified": "2026-01-27T05:12:57.293297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='759af7e0434126059069bb16f7de28f88643f305bebe71528e155e916fc31546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.293297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c46f1450-e087-49cf-bd23-67d8f69f81a5", "created": "2026-01-27T05:12:57.294216Z", "modified": "2026-01-27T05:12:57.294216Z", "relationship_type": "indicates", "source_ref": "indicator--9a6bce4c-6d28-4488-82d3-69d187e072ed", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f81eccb-b57b-4f92-9a45-c79ea2a4ed51", "created": "2026-01-27T05:12:57.294409Z", "modified": "2026-01-27T05:12:57.294409Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56b6e1a065a3414fc259bd2592b345d3e20c267e84fe60260e266b7a1fb6611c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.294409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e61c079f-3bcc-49ee-8292-ae67604d25bb", "created": "2026-01-27T05:12:57.295267Z", "modified": "2026-01-27T05:12:57.295267Z", "relationship_type": "indicates", "source_ref": "indicator--1f81eccb-b57b-4f92-9a45-c79ea2a4ed51", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b150ba90-e0e3-41fa-af7d-34ab3c6c35c0", "created": "2026-01-27T05:12:57.29545Z", "modified": "2026-01-27T05:12:57.29545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf4119dd0afbba9e8ca53d4544750f810f545da1fc38cc3b3efbcb14f3be65b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.29545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9b66f51-1a8d-4dcb-bea6-c10cc819c96c", "created": "2026-01-27T05:12:57.296306Z", "modified": "2026-01-27T05:12:57.296306Z", "relationship_type": "indicates", "source_ref": "indicator--b150ba90-e0e3-41fa-af7d-34ab3c6c35c0", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec5f8ac-4c16-47f1-ba65-d2fa40007d32", "created": "2026-01-27T05:12:57.296485Z", "modified": "2026-01-27T05:12:57.296485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b93de26791c2c7c8e98d74bc5727a4367b68a1f14a8c71f176f92d7b8049329']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.296485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f14bc825-3647-47cb-ada8-0feed14a64ff", "created": "2026-01-27T05:12:57.297415Z", "modified": "2026-01-27T05:12:57.297415Z", "relationship_type": "indicates", "source_ref": "indicator--1ec5f8ac-4c16-47f1-ba65-d2fa40007d32", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd97cec-dc5a-498f-b8d4-4e686385ac76", "created": "2026-01-27T05:12:57.297605Z", "modified": "2026-01-27T05:12:57.297605Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dba1d575e17644e2132fff6eced7746fe8825358ba33d7519853a3836ae0b21f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.297605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6aad3c5-56d7-487e-992f-45748e7d8e05", "created": "2026-01-27T05:12:57.298468Z", "modified": "2026-01-27T05:12:57.298468Z", "relationship_type": "indicates", "source_ref": "indicator--1cd97cec-dc5a-498f-b8d4-4e686385ac76", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0280122-f586-44a4-a736-01447b8dd0aa", "created": "2026-01-27T05:12:57.298647Z", "modified": "2026-01-27T05:12:57.298647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='056c74dc28215a1846fdc556de6ff80e6db0433abb972dfc72cf78a65c077a7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.298647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20d57c2c-30f0-40ac-ba40-5dc908952e92", "created": "2026-01-27T05:12:57.299504Z", "modified": "2026-01-27T05:12:57.299504Z", "relationship_type": "indicates", "source_ref": "indicator--e0280122-f586-44a4-a736-01447b8dd0aa", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8c6681-f075-4238-ad8e-194d23bf4888", "created": "2026-01-27T05:12:57.299683Z", "modified": "2026-01-27T05:12:57.299683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73ef0fb8b79a60703f3d5e88305aefba67141b774fa6b84a798d29ab7415c557']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.299683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--533fffab-9093-43f9-b654-62295170e3a5", "created": "2026-01-27T05:12:57.300672Z", "modified": "2026-01-27T05:12:57.300672Z", "relationship_type": "indicates", "source_ref": "indicator--2d8c6681-f075-4238-ad8e-194d23bf4888", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db19c407-f2b5-438b-9df3-aba2e5ce9226", "created": "2026-01-27T05:12:57.300875Z", "modified": "2026-01-27T05:12:57.300875Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5afd2f43d1a15fe32a4352796e2deb2ed60b74a3a4040cc8a767191372d2e56c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.300875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a75deea3-57b1-4d86-b9fa-9763223b19cf", "created": "2026-01-27T05:12:57.301706Z", "modified": "2026-01-27T05:12:57.301706Z", "relationship_type": "indicates", "source_ref": "indicator--db19c407-f2b5-438b-9df3-aba2e5ce9226", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c6ecdb-8efd-4273-aa64-b6dd315f9cd1", "created": "2026-01-27T05:12:57.301903Z", "modified": "2026-01-27T05:12:57.301903Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='362a5b734c80c992a39710609add8e01a1168949c4f7de891fa55040428832b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.301903Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f3dbe9b-a64f-45ad-8d6d-64822ef55032", "created": "2026-01-27T05:12:57.302734Z", "modified": "2026-01-27T05:12:57.302734Z", "relationship_type": "indicates", "source_ref": "indicator--87c6ecdb-8efd-4273-aa64-b6dd315f9cd1", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ff1668-59e9-42ff-8b5d-d8aa4b8bd9df", "created": "2026-01-27T05:12:57.302939Z", "modified": "2026-01-27T05:12:57.302939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bffe294019c86f9a65ccafc7cb9c07ea44295ca0cd4dbe99afb36e2944765148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.302939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1f3e481-70c6-4f15-830c-0f4a859bb4e1", "created": "2026-01-27T05:12:57.303788Z", "modified": "2026-01-27T05:12:57.303788Z", "relationship_type": "indicates", "source_ref": "indicator--66ff1668-59e9-42ff-8b5d-d8aa4b8bd9df", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6b4290-a29a-4960-9880-d4663fc5c91b", "created": "2026-01-27T05:12:57.303968Z", "modified": "2026-01-27T05:12:57.303968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95af557b9026cee5918a89dd8db67bb894be31ae26a048896995b520613a606e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.303968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--060987a4-b271-44ca-813e-72ce22060bc8", "created": "2026-01-27T05:12:57.304807Z", "modified": "2026-01-27T05:12:57.304807Z", "relationship_type": "indicates", "source_ref": "indicator--5d6b4290-a29a-4960-9880-d4663fc5c91b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df18fa14-2bab-4da8-9601-065019b96e91", "created": "2026-01-27T05:12:57.304988Z", "modified": "2026-01-27T05:12:57.304988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5d27b69497c09d2481b662a84b0dac694f2f932f8160b9a4f1c9e99cc359fc5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.304988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cb6106a-dcee-4adc-9815-6d61519f4092", "created": "2026-01-27T05:12:57.305828Z", "modified": "2026-01-27T05:12:57.305828Z", "relationship_type": "indicates", "source_ref": "indicator--df18fa14-2bab-4da8-9601-065019b96e91", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73617c4d-af61-45c4-b29e-3d565eb6c89d", "created": "2026-01-27T05:12:57.306006Z", "modified": "2026-01-27T05:12:57.306006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c07b0cbad31ce7e331b161e88f117436be656a2179f5aa37a81f1500141335a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.306006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c82fc9f-ee93-49ca-a70b-aa0f9699d39d", "created": "2026-01-27T05:12:57.306843Z", "modified": "2026-01-27T05:12:57.306843Z", "relationship_type": "indicates", "source_ref": "indicator--73617c4d-af61-45c4-b29e-3d565eb6c89d", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b233cd8-2ccc-40ac-b818-1d0a3ca96e7a", "created": "2026-01-27T05:12:57.30702Z", "modified": "2026-01-27T05:12:57.30702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d6d2394e3cbff757197f1826c86a12a348cdb877d144fe959745f9e0f451118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.30702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--967d071f-1e57-4911-9cb5-ec8593add71f", "created": "2026-01-27T05:12:57.307865Z", "modified": "2026-01-27T05:12:57.307865Z", "relationship_type": "indicates", "source_ref": "indicator--4b233cd8-2ccc-40ac-b818-1d0a3ca96e7a", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1e1286-d907-482a-b7a6-661279af9be2", "created": "2026-01-27T05:12:57.308047Z", "modified": "2026-01-27T05:12:57.308047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d10af08a10e726a9ec8561ccde7450a2fbd68c8cae95b4e12a2eca08c769b27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.308047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9acb13b6-4beb-4d36-8c15-f447a4b18c0b", "created": "2026-01-27T05:12:57.308895Z", "modified": "2026-01-27T05:12:57.308895Z", "relationship_type": "indicates", "source_ref": "indicator--7d1e1286-d907-482a-b7a6-661279af9be2", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343783e9-4769-4878-be12-d7b0681760b3", "created": "2026-01-27T05:12:57.309074Z", "modified": "2026-01-27T05:12:57.309074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bac1e5c3cc602952d002db55d9de0f80adc1fa3ec32c5050c292e1d4d7f3df17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.309074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--118ce766-cac9-4007-96a6-562b80827c8a", "created": "2026-01-27T05:12:57.310062Z", "modified": "2026-01-27T05:12:57.310062Z", "relationship_type": "indicates", "source_ref": "indicator--343783e9-4769-4878-be12-d7b0681760b3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b8e639-59da-47b9-80f0-903dd9ea5636", "created": "2026-01-27T05:12:57.310243Z", "modified": "2026-01-27T05:12:57.310243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4886c4faa0b3578ef90af88f3ef29bf55d46d9c4f0c9bc7c527d59079308ef9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.310243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbd928c4-2969-4fa7-8e0d-a14a48d64232", "created": "2026-01-27T05:12:57.311095Z", "modified": "2026-01-27T05:12:57.311095Z", "relationship_type": "indicates", "source_ref": "indicator--a2b8e639-59da-47b9-80f0-903dd9ea5636", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048eeea8-64b0-46c6-8423-fe1231456dbc", "created": "2026-01-27T05:12:57.311275Z", "modified": "2026-01-27T05:12:57.311275Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed44c74b000809a45506c57080658303357716d454919bd4394dac4cf3edf8ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.311275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20c6e41d-e649-4f53-87d9-67067ab50857", "created": "2026-01-27T05:12:57.312126Z", "modified": "2026-01-27T05:12:57.312126Z", "relationship_type": "indicates", "source_ref": "indicator--048eeea8-64b0-46c6-8423-fe1231456dbc", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58281d43-594a-4347-b9ad-f65191fd3313", "created": "2026-01-27T05:12:57.312307Z", "modified": "2026-01-27T05:12:57.312307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b17c3e598cb3657439996d26d70562b72487086d5677975b97598e86d0ff4d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.312307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25024051-c880-40d4-998e-07adb6e2ed6c", "created": "2026-01-27T05:12:57.313159Z", "modified": "2026-01-27T05:12:57.313159Z", "relationship_type": "indicates", "source_ref": "indicator--58281d43-594a-4347-b9ad-f65191fd3313", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c4520a-5521-4d4f-9495-24f264947600", "created": "2026-01-27T05:12:57.31334Z", "modified": "2026-01-27T05:12:57.31334Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09a21b7d1b9a7bafd0341b2bba43c5b66edaa044d48c0efd6bb6691ecbbee5f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.31334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d952b0d-db99-480f-bfb1-0e4474f9338e", "created": "2026-01-27T05:12:57.314186Z", "modified": "2026-01-27T05:12:57.314186Z", "relationship_type": "indicates", "source_ref": "indicator--c8c4520a-5521-4d4f-9495-24f264947600", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d865cf97-da5d-4656-83bd-1837e10e31af", "created": "2026-01-27T05:12:57.314363Z", "modified": "2026-01-27T05:12:57.314363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10c4749bcf4e36638c54d5f2e141b7f90a580f670d3f72841fa79e42d275a217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.314363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b40a3304-2c3d-470e-9d29-754e45fa4ca6", "created": "2026-01-27T05:12:57.315202Z", "modified": "2026-01-27T05:12:57.315202Z", "relationship_type": "indicates", "source_ref": "indicator--d865cf97-da5d-4656-83bd-1837e10e31af", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44e7482-4514-4c7c-adba-73ff561cc8e3", "created": "2026-01-27T05:12:57.315377Z", "modified": "2026-01-27T05:12:57.315377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b64e301fe0a37ed680cf3d1be58a2f5dd7b6f86911c06edce62cc023ccbb68c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.315377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55ab725e-4a07-4b2f-9ad1-d066a02fdf3e", "created": "2026-01-27T05:12:57.316223Z", "modified": "2026-01-27T05:12:57.316223Z", "relationship_type": "indicates", "source_ref": "indicator--b44e7482-4514-4c7c-adba-73ff561cc8e3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b8bf17-7ab1-4ed4-bcd1-00455c4220f3", "created": "2026-01-27T05:12:57.316399Z", "modified": "2026-01-27T05:12:57.316399Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed0dfb8089d82dd415dcdcb40b67b3f3c28cb3c520a00cc70cb08bf606cc4e66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.316399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc618fb9-1528-4e82-807b-9b5d56b0b359", "created": "2026-01-27T05:12:57.317254Z", "modified": "2026-01-27T05:12:57.317254Z", "relationship_type": "indicates", "source_ref": "indicator--f0b8bf17-7ab1-4ed4-bcd1-00455c4220f3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173ecc78-723c-4b4c-90ae-61cca254598b", "created": "2026-01-27T05:12:57.317431Z", "modified": "2026-01-27T05:12:57.317431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d582f5748e72a4d12ade3a61aedfbf150fe46edd88da6e8ed0b224cce526de4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.317431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03265242-5241-449d-b587-4eebec154c39", "created": "2026-01-27T05:12:57.318277Z", "modified": "2026-01-27T05:12:57.318277Z", "relationship_type": "indicates", "source_ref": "indicator--173ecc78-723c-4b4c-90ae-61cca254598b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653838ca-4191-49bb-a3f6-a7f566698413", "created": "2026-01-27T05:12:57.318463Z", "modified": "2026-01-27T05:12:57.318463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e24bed9ae314f7b50a234805584c1e9cd5f20513fb619555841ea3caeb20ddd5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.318463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c5c1c7c-2868-47cb-a859-25688c5a0244", "created": "2026-01-27T05:12:57.319457Z", "modified": "2026-01-27T05:12:57.319457Z", "relationship_type": "indicates", "source_ref": "indicator--653838ca-4191-49bb-a3f6-a7f566698413", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1263ae8-2c1b-4736-8508-39b53fa21541", "created": "2026-01-27T05:12:57.319639Z", "modified": "2026-01-27T05:12:57.319639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='495c1e3b40afd320a2d67dee6dfc0b58744c07c9e6cbbf554c35e5497d76f351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.319639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f79397f7-d12a-4ddc-9792-36d2c091a816", "created": "2026-01-27T05:12:57.320492Z", "modified": "2026-01-27T05:12:57.320492Z", "relationship_type": "indicates", "source_ref": "indicator--b1263ae8-2c1b-4736-8508-39b53fa21541", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc79efa-ab28-46d0-a999-d99590cf9ecb", "created": "2026-01-27T05:12:57.320673Z", "modified": "2026-01-27T05:12:57.320673Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e52438f28275dc2a7e83b989e726f86ba53c915b44f126507763850197646f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.320673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a2b363c-94cd-4468-9fc7-009feeed97f6", "created": "2026-01-27T05:12:57.321524Z", "modified": "2026-01-27T05:12:57.321524Z", "relationship_type": "indicates", "source_ref": "indicator--6fc79efa-ab28-46d0-a999-d99590cf9ecb", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79fee85-438e-4da4-9e01-a7346fd214cf", "created": "2026-01-27T05:12:57.3217Z", "modified": "2026-01-27T05:12:57.3217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='809444db04b9e9f6a79df4634313cc952499feaa1ef6b4033244ead19f40301d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.3217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e87bf4eb-0726-4c51-b35f-0dca3ad723fe", "created": "2026-01-27T05:12:57.32255Z", "modified": "2026-01-27T05:12:57.32255Z", "relationship_type": "indicates", "source_ref": "indicator--f79fee85-438e-4da4-9e01-a7346fd214cf", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3904ce-495d-435b-a0f9-42b0dbdd9d73", "created": "2026-01-27T05:12:57.322726Z", "modified": "2026-01-27T05:12:57.322726Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ac65ea5e1604d0e437e6dd0fcd0888a31cf6c96833015059f6cb0d989c18158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.322726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d94770b-21d9-4005-a626-d3116b118546", "created": "2026-01-27T05:12:57.323573Z", "modified": "2026-01-27T05:12:57.323573Z", "relationship_type": "indicates", "source_ref": "indicator--cc3904ce-495d-435b-a0f9-42b0dbdd9d73", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8b93f4-3943-49d8-bb53-0ccdd567311a", "created": "2026-01-27T05:12:57.323764Z", "modified": "2026-01-27T05:12:57.323764Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56ee9dfee5c1526be1b421a2dab7026cccd6b1697b25b9babf48fa178ab20034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.323764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53e47369-99bd-46b1-bd56-8adf6bbf1edd", "created": "2026-01-27T05:12:57.324607Z", "modified": "2026-01-27T05:12:57.324607Z", "relationship_type": "indicates", "source_ref": "indicator--be8b93f4-3943-49d8-bb53-0ccdd567311a", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa0dd0c-a2e1-466c-9905-71809a6813ac", "created": "2026-01-27T05:12:57.3248Z", "modified": "2026-01-27T05:12:57.3248Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7789c3bf629fa260712aedefa93c688cf999133f89d724366dec3e6c14986c12']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.3248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a481027-e4df-4cde-84f5-5ed85133239e", "created": "2026-01-27T05:12:57.325624Z", "modified": "2026-01-27T05:12:57.325624Z", "relationship_type": "indicates", "source_ref": "indicator--daa0dd0c-a2e1-466c-9905-71809a6813ac", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfaf5b1-e003-4914-b004-699fa17f6690", "created": "2026-01-27T05:12:57.325816Z", "modified": "2026-01-27T05:12:57.325816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8893180027877372dba71e4484c99a0a2783e381191ac84169ea585307c19c80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.325816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72526dd2-4bad-4e42-85b1-05cbc268f766", "created": "2026-01-27T05:12:57.326648Z", "modified": "2026-01-27T05:12:57.326648Z", "relationship_type": "indicates", "source_ref": "indicator--8cfaf5b1-e003-4914-b004-699fa17f6690", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4880ed01-314d-4e3e-b775-dcb0e930a275", "created": "2026-01-27T05:12:57.326846Z", "modified": "2026-01-27T05:12:57.326846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac2ef74229eb170380330c85ad511ac70660554dfdefdbd6a1bd15b7cbdf2c62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.326846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0bb9a11-c15b-4dc7-98d2-d848802b6395", "created": "2026-01-27T05:12:57.327673Z", "modified": "2026-01-27T05:12:57.327673Z", "relationship_type": "indicates", "source_ref": "indicator--4880ed01-314d-4e3e-b775-dcb0e930a275", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dd7441-e680-4f59-85c5-60b6775cf462", "created": "2026-01-27T05:12:57.327867Z", "modified": "2026-01-27T05:12:57.327867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8b2647ee3d1c2004954c406d1cea79d14127614bcf0d65fa55e657e5cfc2318']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.327867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28bb2bbf-79e7-4dc0-99f9-304162328f41", "created": "2026-01-27T05:12:57.328845Z", "modified": "2026-01-27T05:12:57.328845Z", "relationship_type": "indicates", "source_ref": "indicator--a2dd7441-e680-4f59-85c5-60b6775cf462", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ebc526-1c21-44da-8e34-0d04049a9ecc", "created": "2026-01-27T05:12:57.329026Z", "modified": "2026-01-27T05:12:57.329026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6691acdde1290b1bedf893841a04730c1ab1f5a00ceff01b5ad719b9d9341a48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.329026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9b41f96-233a-45a5-a55e-0f5cfaae9d75", "created": "2026-01-27T05:12:57.329875Z", "modified": "2026-01-27T05:12:57.329875Z", "relationship_type": "indicates", "source_ref": "indicator--53ebc526-1c21-44da-8e34-0d04049a9ecc", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6c6795-31c3-462b-88b7-9f5540ccbbd2", "created": "2026-01-27T05:12:57.330061Z", "modified": "2026-01-27T05:12:57.330061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3321aef6bb5d4807badc0171ec6169f623057a970311adb26ec958e1ec03347e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.330061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--345d7e1d-22da-46fd-9623-4b916f2546be", "created": "2026-01-27T05:12:57.330912Z", "modified": "2026-01-27T05:12:57.330912Z", "relationship_type": "indicates", "source_ref": "indicator--3c6c6795-31c3-462b-88b7-9f5540ccbbd2", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be8fe16-ff99-42a0-9019-d57d8606348b", "created": "2026-01-27T05:12:57.331091Z", "modified": "2026-01-27T05:12:57.331091Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3e76b47e122eadbab168e53c9bf1af92a60ac5c8edd6ac317db97a9d2c39e26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.331091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edb89efd-e9ac-49f8-8209-69f789eb767c", "created": "2026-01-27T05:12:57.331945Z", "modified": "2026-01-27T05:12:57.331945Z", "relationship_type": "indicates", "source_ref": "indicator--8be8fe16-ff99-42a0-9019-d57d8606348b", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd57646f-2069-43ed-b48e-91e1e364ddce", "created": "2026-01-27T05:12:57.332124Z", "modified": "2026-01-27T05:12:57.332124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93b0fa151195b9827ee07fadc8d7831a734ef2fb2756bdae02b1dd98a1c6d39b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.332124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc3f9be4-613e-4345-8611-f3dd54b75126", "created": "2026-01-27T05:12:57.332986Z", "modified": "2026-01-27T05:12:57.332986Z", "relationship_type": "indicates", "source_ref": "indicator--cd57646f-2069-43ed-b48e-91e1e364ddce", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56becc4-c3de-4419-9b8a-05d9ac69eec9", "created": "2026-01-27T05:12:57.333164Z", "modified": "2026-01-27T05:12:57.333164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f916cd6796935aa9a83bfb076fb86795450d81abb47f9965647b4ce255d4181f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.333164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acfe21ca-8b8f-46ad-b5d0-364ba6046518", "created": "2026-01-27T05:12:57.334032Z", "modified": "2026-01-27T05:12:57.334032Z", "relationship_type": "indicates", "source_ref": "indicator--e56becc4-c3de-4419-9b8a-05d9ac69eec9", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449954ef-4b11-4564-a421-cff0c962f6fd", "created": "2026-01-27T05:12:57.334209Z", "modified": "2026-01-27T05:12:57.334209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d7f8e66fc6b436c68fa3620ebcf573fb4a28feb802710543b6bb8690e5abf8c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.334209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6a7bfe4-d866-469a-b0c3-78277ab86d4a", "created": "2026-01-27T05:12:57.335057Z", "modified": "2026-01-27T05:12:57.335057Z", "relationship_type": "indicates", "source_ref": "indicator--449954ef-4b11-4564-a421-cff0c962f6fd", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192baa94-0e8b-4065-b4a1-239ecddaf7c1", "created": "2026-01-27T05:12:57.335233Z", "modified": "2026-01-27T05:12:57.335233Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4beacf285240ff4f7e2c7f7405d4f962b3559bd3b3b501bdbb82eae296e35d7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.335233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42375f4c-0271-4dfd-90d8-96ee68bc2991", "created": "2026-01-27T05:12:57.336074Z", "modified": "2026-01-27T05:12:57.336074Z", "relationship_type": "indicates", "source_ref": "indicator--192baa94-0e8b-4065-b4a1-239ecddaf7c1", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8428fb59-31c9-426c-85f7-8bf9cfb60062", "created": "2026-01-27T05:12:57.336251Z", "modified": "2026-01-27T05:12:57.336251Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f6b9e1f728e69e499b82120666dc7119a74b3ede8c8341211815e9d87fdb125']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.336251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9f80f90-f4c3-4d51-84f5-077f4140dcd1", "created": "2026-01-27T05:12:57.337231Z", "modified": "2026-01-27T05:12:57.337231Z", "relationship_type": "indicates", "source_ref": "indicator--8428fb59-31c9-426c-85f7-8bf9cfb60062", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec94092e-dae9-41f1-b2a6-6772276adce7", "created": "2026-01-27T05:12:57.337411Z", "modified": "2026-01-27T05:12:57.337411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ef9e3d36b90f82b92dda8477ede97c7c6e86f0728b83071d671dd8748a9cf50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.337411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e75d3881-e05d-449e-9998-59af5bffcbe0", "created": "2026-01-27T05:12:57.338259Z", "modified": "2026-01-27T05:12:57.338259Z", "relationship_type": "indicates", "source_ref": "indicator--ec94092e-dae9-41f1-b2a6-6772276adce7", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90e5dfc-4bd7-4a0f-af38-964e67e6ecda", "created": "2026-01-27T05:12:57.338447Z", "modified": "2026-01-27T05:12:57.338447Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0599af4764489034a34c7f00e5bb1c5f04bcbe75c6861e967c58175a9395928c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.338447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5fa12a8-b066-4758-9e96-3777dba153f4", "created": "2026-01-27T05:12:57.339288Z", "modified": "2026-01-27T05:12:57.339288Z", "relationship_type": "indicates", "source_ref": "indicator--a90e5dfc-4bd7-4a0f-af38-964e67e6ecda", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a455acc-9239-4b50-b7cd-631e04cbc353", "created": "2026-01-27T05:12:57.339467Z", "modified": "2026-01-27T05:12:57.339467Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d97f8b225371e30ba72c6b724a8e0214e29343138dcaa545e5b166581d08c4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.339467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08582257-0bd6-4d6d-8486-40347b1c2ff7", "created": "2026-01-27T05:12:57.340313Z", "modified": "2026-01-27T05:12:57.340313Z", "relationship_type": "indicates", "source_ref": "indicator--7a455acc-9239-4b50-b7cd-631e04cbc353", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9001492d-c210-47e4-a0e5-b69c77417f06", "created": "2026-01-27T05:12:57.340491Z", "modified": "2026-01-27T05:12:57.340491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='badb44ccdde53618f84d6ba7e774f5c2333fd87260127ff66d3346c984525d92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.340491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbacfb85-50cb-4770-a57e-9f1e36ba8dc3", "created": "2026-01-27T05:12:57.341338Z", "modified": "2026-01-27T05:12:57.341338Z", "relationship_type": "indicates", "source_ref": "indicator--9001492d-c210-47e4-a0e5-b69c77417f06", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8065d907-0843-4924-8aef-a4d167e39f9f", "created": "2026-01-27T05:12:57.341515Z", "modified": "2026-01-27T05:12:57.341515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a52c9089d7a5a53fb94b3232691dd5e8299e35840b1503d5e2051f4068ca512b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.341515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e6db00-94ac-4690-aab4-b5926fadeb34", "created": "2026-01-27T05:12:57.34236Z", "modified": "2026-01-27T05:12:57.34236Z", "relationship_type": "indicates", "source_ref": "indicator--8065d907-0843-4924-8aef-a4d167e39f9f", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8415b2ec-827b-49c7-b1f2-ce1a74ba894e", "created": "2026-01-27T05:12:57.342545Z", "modified": "2026-01-27T05:12:57.342545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='891fef1417324175fa4e7c35be818d0e1bc0e2537094061719ffdd8f5c2c1afc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.342545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22fb0b19-d6fd-4ee4-b1ac-3cb160203df1", "created": "2026-01-27T05:12:57.343387Z", "modified": "2026-01-27T05:12:57.343387Z", "relationship_type": "indicates", "source_ref": "indicator--8415b2ec-827b-49c7-b1f2-ce1a74ba894e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774d77b7-ebbe-45f1-9a84-a900c9c44af9", "created": "2026-01-27T05:12:57.343566Z", "modified": "2026-01-27T05:12:57.343566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d22eede29d9c481053d6c288c4aa722451d3ce032cc801856259dfe7ae450cb8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.343566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89b46e71-0163-46d9-a873-333207199409", "created": "2026-01-27T05:12:57.344409Z", "modified": "2026-01-27T05:12:57.344409Z", "relationship_type": "indicates", "source_ref": "indicator--774d77b7-ebbe-45f1-9a84-a900c9c44af9", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f74835-cc49-4543-8024-6a022d5b9102", "created": "2026-01-27T05:12:57.344586Z", "modified": "2026-01-27T05:12:57.344586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='688a0ee417e51bddfa2f1469d165c03e69b1e5a55fb61180c8b945aa1916fbea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.344586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9086ed6b-9277-4774-a9e9-5f30423165af", "created": "2026-01-27T05:12:57.345434Z", "modified": "2026-01-27T05:12:57.345434Z", "relationship_type": "indicates", "source_ref": "indicator--f9f74835-cc49-4543-8024-6a022d5b9102", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83142c37-5f38-49f2-9bc2-f7a1df969c0e", "created": "2026-01-27T05:12:57.345618Z", "modified": "2026-01-27T05:12:57.345618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b0a0b6b4fb7ecbcabf3111007f051bf0067b86123aa24ad6adbcfc7648562ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.345618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c97c015-e568-4e33-b8d2-77bb5f87eec4", "created": "2026-01-27T05:12:57.346592Z", "modified": "2026-01-27T05:12:57.346592Z", "relationship_type": "indicates", "source_ref": "indicator--83142c37-5f38-49f2-9bc2-f7a1df969c0e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4462d6-5eb7-4029-ad61-ebc06e2ad0e9", "created": "2026-01-27T05:12:57.346788Z", "modified": "2026-01-27T05:12:57.346788Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85ac17c9a999fe8fd5df3880184e6a38398af4370b479ac0ab377a0d5fdabb43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.346788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--865e9f04-fd45-4915-b5af-f6d582376373", "created": "2026-01-27T05:12:57.347619Z", "modified": "2026-01-27T05:12:57.347619Z", "relationship_type": "indicates", "source_ref": "indicator--4d4462d6-5eb7-4029-ad61-ebc06e2ad0e9", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dd1a83-c3ac-4265-bf82-fbfedb86c9b2", "created": "2026-01-27T05:12:57.347815Z", "modified": "2026-01-27T05:12:57.347815Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a896c127a7a4b75b7032dc5f56d20ebb918403c0d84d2f3cf4fd55e785cf9415']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.347815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5267849-14c5-4c94-b1eb-6937d1ab439f", "created": "2026-01-27T05:12:57.348642Z", "modified": "2026-01-27T05:12:57.348642Z", "relationship_type": "indicates", "source_ref": "indicator--e3dd1a83-c3ac-4265-bf82-fbfedb86c9b2", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368a67c3-7902-4ed2-95ca-12aa846a44ca", "created": "2026-01-27T05:12:57.348838Z", "modified": "2026-01-27T05:12:57.348838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3300e23f115da752db66a446eb6b10c73561cc7d9bf941e535d78ab8a1835632']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.348838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aacc8016-7614-4817-8324-092777596bb1", "created": "2026-01-27T05:12:57.349662Z", "modified": "2026-01-27T05:12:57.349662Z", "relationship_type": "indicates", "source_ref": "indicator--368a67c3-7902-4ed2-95ca-12aa846a44ca", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33da3942-9d67-4b08-8341-0c0b46c810ac", "created": "2026-01-27T05:12:57.349861Z", "modified": "2026-01-27T05:12:57.349861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7f29ea7beb90ea5b68304d99b7e985cc34ddab1e148720e5dd8eb692e0d9e3c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.349861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8abbe3ea-6069-4b02-bfcf-7366a8e77076", "created": "2026-01-27T05:12:57.350695Z", "modified": "2026-01-27T05:12:57.350695Z", "relationship_type": "indicates", "source_ref": "indicator--33da3942-9d67-4b08-8341-0c0b46c810ac", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad89718-4af4-4ae9-8c58-cdbe60e137cd", "created": "2026-01-27T05:12:57.350891Z", "modified": "2026-01-27T05:12:57.350891Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3566fa1503c6bcb641c7f486f3ea2950d0f83800733bc4fe55bc1246b5fde57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.350891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eeb4b7b3-6787-4d85-a510-648fdc95623c", "created": "2026-01-27T05:12:57.351719Z", "modified": "2026-01-27T05:12:57.351719Z", "relationship_type": "indicates", "source_ref": "indicator--4ad89718-4af4-4ae9-8c58-cdbe60e137cd", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd72013b-a0b5-45ff-9ae6-ad5f8353e7c0", "created": "2026-01-27T05:12:57.351916Z", "modified": "2026-01-27T05:12:57.351916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a0e3850015f87d7e88d7637e37051f7a64732a254e456d7b8e21d66a4f8d6e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.351916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8205807-95b7-4d57-bf22-fad35edcba10", "created": "2026-01-27T05:12:57.352774Z", "modified": "2026-01-27T05:12:57.352774Z", "relationship_type": "indicates", "source_ref": "indicator--cd72013b-a0b5-45ff-9ae6-ad5f8353e7c0", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200dca5d-a1da-4d84-9f66-9ea946629faf", "created": "2026-01-27T05:12:57.352954Z", "modified": "2026-01-27T05:12:57.352954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4ae7dfa492edc2d47c1fd8346588718e1f51c1bf4b74a0909c88fb6327e734b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.352954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33f0c317-4ff5-492d-b1af-ae18481ac029", "created": "2026-01-27T05:12:57.353812Z", "modified": "2026-01-27T05:12:57.353812Z", "relationship_type": "indicates", "source_ref": "indicator--200dca5d-a1da-4d84-9f66-9ea946629faf", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c980bdb8-23aa-4828-9aba-c1290d98787a", "created": "2026-01-27T05:12:57.353989Z", "modified": "2026-01-27T05:12:57.353989Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='252d55271e0fe3b9d9f5971963d63fdb9f6ec0e19a5d7ff27f27c066438a2748']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.353989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36a306e1-e41a-4301-9d07-9822e7afb052", "created": "2026-01-27T05:12:57.354819Z", "modified": "2026-01-27T05:12:57.354819Z", "relationship_type": "indicates", "source_ref": "indicator--c980bdb8-23aa-4828-9aba-c1290d98787a", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e92b1cf-83dc-42f1-947d-315660c5a1ca", "created": "2026-01-27T05:12:57.355002Z", "modified": "2026-01-27T05:12:57.355002Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e13a41ca68f0a2b41d97426600b7f64e8cb11c01251a8373e21369d0d2a1c59d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.355002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c57b9858-dddf-4433-8e1b-42d334bb13aa", "created": "2026-01-27T05:12:57.355973Z", "modified": "2026-01-27T05:12:57.355973Z", "relationship_type": "indicates", "source_ref": "indicator--0e92b1cf-83dc-42f1-947d-315660c5a1ca", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0048ff44-7c6f-47dc-a909-f171011c25cb", "created": "2026-01-27T05:12:57.356152Z", "modified": "2026-01-27T05:12:57.356152Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2b267249cbcb222e2f45e6ab2a3de557fa7f9bef4b34d011c7ad4511b41e4eec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.356152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b8b811b-b31f-462c-9f6b-316ddba4e019", "created": "2026-01-27T05:12:57.356997Z", "modified": "2026-01-27T05:12:57.356997Z", "relationship_type": "indicates", "source_ref": "indicator--0048ff44-7c6f-47dc-a909-f171011c25cb", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2beee5-bc2e-4a72-a5fe-17238646492a", "created": "2026-01-27T05:12:57.357177Z", "modified": "2026-01-27T05:12:57.357177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6977e6e1050aa884ebc4732859c9c239218847ddd492a86dfdc19fbc3748a109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.357177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b72f8eb9-7cfb-48da-adba-4193730fd149", "created": "2026-01-27T05:12:57.35803Z", "modified": "2026-01-27T05:12:57.35803Z", "relationship_type": "indicates", "source_ref": "indicator--bf2beee5-bc2e-4a72-a5fe-17238646492a", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78501434-e65c-471d-8268-452d6f2fc6d8", "created": "2026-01-27T05:12:57.35821Z", "modified": "2026-01-27T05:12:57.35821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca912c296e5a65b241d83da71b7ddfb3bef5f3ab412ec122b8557e2ab15b6671']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.35821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e65c4e7-d0ad-4450-b493-679e25adcb5e", "created": "2026-01-27T05:12:57.359061Z", "modified": "2026-01-27T05:12:57.359061Z", "relationship_type": "indicates", "source_ref": "indicator--78501434-e65c-471d-8268-452d6f2fc6d8", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c913bca-b793-4869-9875-d41ef73a1866", "created": "2026-01-27T05:12:57.359239Z", "modified": "2026-01-27T05:12:57.359239Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e85a3b7c279b4a8f9a27dad7e6db00e9b5c0a33b2c0c047d648e7769de9b5bf1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.359239Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5aa81b3-bf6b-49c2-82d0-0595f9fffd8c", "created": "2026-01-27T05:12:57.360099Z", "modified": "2026-01-27T05:12:57.360099Z", "relationship_type": "indicates", "source_ref": "indicator--1c913bca-b793-4869-9875-d41ef73a1866", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39080038-5566-4015-b772-3f94eba5261c", "created": "2026-01-27T05:12:57.360278Z", "modified": "2026-01-27T05:12:57.360278Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='710d70fb43c87b7d663daeadb2c8e39b91dece4cdd89085944452f88587ba00c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.360278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6697929f-78b2-4ed8-a134-a2c265686d56", "created": "2026-01-27T05:12:57.361125Z", "modified": "2026-01-27T05:12:57.361125Z", "relationship_type": "indicates", "source_ref": "indicator--39080038-5566-4015-b772-3f94eba5261c", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679237c0-9cf8-471c-a2ec-1855fcda1ddc", "created": "2026-01-27T05:12:57.361304Z", "modified": "2026-01-27T05:12:57.361304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c380d86db0157f569e4ad908d12f2276573a2faede578daa31e474e200132deb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.361304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--518c1680-7cc9-4487-a5ed-44280cf4cd65", "created": "2026-01-27T05:12:57.362159Z", "modified": "2026-01-27T05:12:57.362159Z", "relationship_type": "indicates", "source_ref": "indicator--679237c0-9cf8-471c-a2ec-1855fcda1ddc", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8131dac-36be-4cea-8847-71c8f466fbe4", "created": "2026-01-27T05:12:57.362336Z", "modified": "2026-01-27T05:12:57.362336Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aae89e217255e486541d8e94635d01b9221b92eaa7bc5125026c9aae4d93fba0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.362336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4956965d-4d3c-4bc9-83c9-1f4a7e1d8dce", "created": "2026-01-27T05:12:57.363184Z", "modified": "2026-01-27T05:12:57.363184Z", "relationship_type": "indicates", "source_ref": "indicator--f8131dac-36be-4cea-8847-71c8f466fbe4", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876ccbfe-ffbf-42d5-a9dd-90e0e5233a4d", "created": "2026-01-27T05:12:57.363363Z", "modified": "2026-01-27T05:12:57.363363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a64fed1c630a11ad7e70a0313fc8e5126ce92d654850e7a3905470bc28f514f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.363363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13b3dc9f-b743-4378-98b4-62f2fa4ef26d", "created": "2026-01-27T05:12:57.364336Z", "modified": "2026-01-27T05:12:57.364336Z", "relationship_type": "indicates", "source_ref": "indicator--876ccbfe-ffbf-42d5-a9dd-90e0e5233a4d", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63937734-0047-4eac-b2f6-64bd21aaf4ae", "created": "2026-01-27T05:12:57.364517Z", "modified": "2026-01-27T05:12:57.364517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c6cf9e15fd3d70369d930dae92111518deb5c4cfe2a411a74292f62a320fe0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.364517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52014870-9331-4537-abff-4d61eca8f7d7", "created": "2026-01-27T05:12:57.365367Z", "modified": "2026-01-27T05:12:57.365367Z", "relationship_type": "indicates", "source_ref": "indicator--63937734-0047-4eac-b2f6-64bd21aaf4ae", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b14cf96-2b20-4c55-98f3-f82346b9e469", "created": "2026-01-27T05:12:57.365551Z", "modified": "2026-01-27T05:12:57.365551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89b921dd0ddec7feec1877862f215408484340f3362f28698beddb17d9bf445d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.365551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45b6db08-80d0-40ba-9bff-f42c43a38a86", "created": "2026-01-27T05:12:57.366413Z", "modified": "2026-01-27T05:12:57.366413Z", "relationship_type": "indicates", "source_ref": "indicator--0b14cf96-2b20-4c55-98f3-f82346b9e469", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f7924a-e875-445a-a564-fb0ccd5b3650", "created": "2026-01-27T05:12:57.366593Z", "modified": "2026-01-27T05:12:57.366593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fdd77772c6b37bb2008977740f0582d7b474095de55b8a15b6300dcda4426a2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.366593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4d44cb9-288f-4608-9bcb-2ad3b5433507", "created": "2026-01-27T05:12:57.367437Z", "modified": "2026-01-27T05:12:57.367437Z", "relationship_type": "indicates", "source_ref": "indicator--a7f7924a-e875-445a-a564-fb0ccd5b3650", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0925bd4-28b6-461c-8543-ba95ecce8159", "created": "2026-01-27T05:12:57.367617Z", "modified": "2026-01-27T05:12:57.367617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cac7e08e64454ca6fe5519e3cbdd3cf2aba1f06656721b99948b7275c7e532f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.367617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27eb5a96-cc1a-4c42-ad2d-184626a868df", "created": "2026-01-27T05:12:57.368462Z", "modified": "2026-01-27T05:12:57.368462Z", "relationship_type": "indicates", "source_ref": "indicator--a0925bd4-28b6-461c-8543-ba95ecce8159", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ad55e7-d940-41c3-bf10-d46342c34d25", "created": "2026-01-27T05:12:57.36864Z", "modified": "2026-01-27T05:12:57.36864Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.innovaspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.36864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--410456c0-ff3c-4d93-99f2-205165544aa8", "created": "2026-01-27T05:12:57.36933Z", "modified": "2026-01-27T05:12:57.36933Z", "relationship_type": "indicates", "source_ref": "indicator--73ad55e7-d940-41c3-bf10-d46342c34d25", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f71e06c-7a4b-43db-b0f4-5f921e2c5e2f", "created": "2026-01-27T05:12:57.369508Z", "modified": "2026-01-27T05:12:57.369508Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.hellospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.369508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--496c2289-394d-4622-bdd0-af5016b84679", "created": "2026-01-27T05:12:57.370181Z", "modified": "2026-01-27T05:12:57.370181Z", "relationship_type": "indicates", "source_ref": "indicator--7f71e06c-7a4b-43db-b0f4-5f921e2c5e2f", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5641b469-ca8d-4977-8a30-6c0c3fe3b69e", "created": "2026-01-27T05:12:57.370359Z", "modified": "2026-01-27T05:12:57.370359Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.googlesettings.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.370359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7960cec4-de34-48c0-a577-97fc6a5ac9a3", "created": "2026-01-27T05:12:57.37105Z", "modified": "2026-01-27T05:12:57.37105Z", "relationship_type": "indicates", "source_ref": "indicator--5641b469-ca8d-4977-8a30-6c0c3fe3b69e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6639d2-8e0e-459f-937c-50b6230685d3", "created": "2026-01-27T05:12:57.371227Z", "modified": "2026-01-27T05:12:57.371227Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hellospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.371227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d1804d9-ce7d-4435-b0ab-96d0bffbda17", "created": "2026-01-27T05:12:57.371894Z", "modified": "2026-01-27T05:12:57.371894Z", "relationship_type": "indicates", "source_ref": "indicator--6b6639d2-8e0e-459f-937c-50b6230685d3", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0b31846-8832-43dc-85ca-29ae0e798760", "created": "2026-01-27T05:12:57.372077Z", "modified": "2026-01-27T05:12:57.372077Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hellospy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.372077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c00a820a-6c98-4130-94d2-af391f37f169", "created": "2026-01-27T05:12:57.372876Z", "modified": "2026-01-27T05:12:57.372876Z", "relationship_type": "indicates", "source_ref": "indicator--b0b31846-8832-43dc-85ca-29ae0e798760", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc5a6b5-a0c7-45f3-98c3-d5cff56d4261", "created": "2026-01-27T05:12:57.37306Z", "modified": "2026-01-27T05:12:57.37306Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.maxxspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.37306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--324229b9-eec4-4c8b-a775-4812af1d9332", "created": "2026-01-27T05:12:57.373702Z", "modified": "2026-01-27T05:12:57.373702Z", "relationship_type": "indicates", "source_ref": "indicator--5dc5a6b5-a0c7-45f3-98c3-d5cff56d4261", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf20945-8079-4148-98a6-6ad50365329a", "created": "2026-01-27T05:12:57.373901Z", "modified": "2026-01-27T05:12:57.373901Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.maxxspy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.373901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad167b60-7905-43d9-af39-74b0693f9e9b", "created": "2026-01-27T05:12:57.374555Z", "modified": "2026-01-27T05:12:57.374555Z", "relationship_type": "indicates", "source_ref": "indicator--dcf20945-8079-4148-98a6-6ad50365329a", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd2ba70-ec9e-41cf-a9f0-f41518e48db5", "created": "2026-01-27T05:12:57.374736Z", "modified": "2026-01-27T05:12:57.374736Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiispy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.374736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53066139-208f-435b-beff-aa4ee636f6e5", "created": "2026-01-27T05:12:57.375399Z", "modified": "2026-01-27T05:12:57.375399Z", "relationship_type": "indicates", "source_ref": "indicator--edd2ba70-ec9e-41cf-a9f0-f41518e48db5", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb05685c-59d9-47ca-9ec2-912964d7933d", "created": "2026-01-27T05:12:57.375576Z", "modified": "2026-01-27T05:12:57.375576Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiispy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.375576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb33e5d3-e8f1-45e4-86f2-5efae0b97804", "created": "2026-01-27T05:12:57.376254Z", "modified": "2026-01-27T05:12:57.376254Z", "relationship_type": "indicates", "source_ref": "indicator--fb05685c-59d9-47ca-9ec2-912964d7933d", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5914905-dd9f-4bb8-835a-1b6b59f19ec2", "created": "2026-01-27T05:12:57.376434Z", "modified": "2026-01-27T05:12:57.376434Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrblue.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.376434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f3d2751-4ebe-4ff2-8d3b-c30f678a1581", "created": "2026-01-27T05:12:57.377118Z", "modified": "2026-01-27T05:12:57.377118Z", "relationship_type": "indicates", "source_ref": "indicator--d5914905-dd9f-4bb8-835a-1b6b59f19ec2", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1603ba2-7724-407f-be86-ffb1c08880b2", "created": "2026-01-27T05:12:57.377296Z", "modified": "2026-01-27T05:12:57.377296Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrbluetooth.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.377296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--667634f7-50da-4dca-8793-7df1543d6f42", "created": "2026-01-27T05:12:57.37798Z", "modified": "2026-01-27T05:12:57.37798Z", "relationship_type": "indicates", "source_ref": "indicator--a1603ba2-7724-407f-be86-ffb1c08880b2", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ba3917-b32a-4e1d-82db-29e43c8266c0", "created": "2026-01-27T05:12:57.378156Z", "modified": "2026-01-27T05:12:57.378156Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrtred.setred']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.378156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--872d4cc5-4b30-4a72-a481-2b427d1f0dcc", "created": "2026-01-27T05:12:57.378825Z", "modified": "2026-01-27T05:12:57.378825Z", "relationship_type": "indicates", "source_ref": "indicator--f4ba3917-b32a-4e1d-82db-29e43c8266c0", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e353bc-c5c7-4785-9165-de0606bc2a65", "created": "2026-01-27T05:12:57.379004Z", "modified": "2026-01-27T05:12:57.379004Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.prophoto.editor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.379004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f2da88a-7699-4481-9887-af9609b4f423", "created": "2026-01-27T05:12:57.379667Z", "modified": "2026-01-27T05:12:57.379667Z", "relationship_type": "indicates", "source_ref": "indicator--98e353bc-c5c7-4785-9165-de0606bc2a65", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd2d92d2-657a-4e64-943e-b5cabdd9cd84", "created": "2026-01-27T05:12:57.379863Z", "modified": "2026-01-27T05:12:57.379863Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.topspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.379863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ff97311-c712-4aad-9980-36f395bc53ca", "created": "2026-01-27T05:12:57.380626Z", "modified": "2026-01-27T05:12:57.380626Z", "relationship_type": "indicates", "source_ref": "indicator--bd2d92d2-657a-4e64-943e-b5cabdd9cd84", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0a311d-324c-46d5-be85-4877398ccb54", "created": "2026-01-27T05:12:57.380824Z", "modified": "2026-01-27T05:12:57.380824Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.topspy.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.380824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b1f161b-b209-46c3-b5ad-fdfd9c81612e", "created": "2026-01-27T05:12:57.381493Z", "modified": "2026-01-27T05:12:57.381493Z", "relationship_type": "indicates", "source_ref": "indicator--3a0a311d-324c-46d5-be85-4877398ccb54", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7606fe6-27e8-4d93-b4c7-5713e4669fc6", "created": "2026-01-27T05:12:57.381667Z", "modified": "2026-01-27T05:12:57.381667Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.virsys.tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.381667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55f80d59-ac5c-4010-a70f-7b85906818e4", "created": "2026-01-27T05:12:57.382345Z", "modified": "2026-01-27T05:12:57.382345Z", "relationship_type": "indicates", "source_ref": "indicator--a7606fe6-27e8-4d93-b4c7-5713e4669fc6", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405904ee-e7b5-4b88-b244-95404b4cab22", "created": "2026-01-27T05:12:57.382526Z", "modified": "2026-01-27T05:12:57.382526Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wifiset.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.382526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--365a7158-1bf9-40e2-a919-d93d33f505df", "created": "2026-01-27T05:12:57.383214Z", "modified": "2026-01-27T05:12:57.383214Z", "relationship_type": "indicates", "source_ref": "indicator--405904ee-e7b5-4b88-b244-95404b4cab22", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede5e510-ed66-42fb-a2f9-35c7edb83977", "created": "2026-01-27T05:12:57.383392Z", "modified": "2026-01-27T05:12:57.383392Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wifisettings.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.383392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f03a3343-ea0a-4fb4-bb71-3fdd7ef549f1", "created": "2026-01-27T05:12:57.384085Z", "modified": "2026-01-27T05:12:57.384085Z", "relationship_type": "indicates", "source_ref": "indicator--ede5e510-ed66-42fb-a2f9-35c7edb83977", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b59278f-bcf6-4726-b46d-51595552c25e", "created": "2026-01-27T05:12:57.384262Z", "modified": "2026-01-27T05:12:57.384262Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='googlesettings.setting']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.384262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27fd33a3-405f-46ed-8fab-e018bba3dcc8", "created": "2026-01-27T05:12:57.384945Z", "modified": "2026-01-27T05:12:57.384945Z", "relationship_type": "indicates", "source_ref": "indicator--9b59278f-bcf6-4726-b46d-51595552c25e", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a72583d-c3e9-4f5a-81b9-94493bd30366", "created": "2026-01-27T05:12:57.385121Z", "modified": "2026-01-27T05:12:57.385121Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1EBFFD9FE9463B2ED24582D2846990A5ABEF79B9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.385121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65e9749c-3176-4572-ac93-de27fe5df32e", "created": "2026-01-27T05:12:57.385912Z", "modified": "2026-01-27T05:12:57.385912Z", "relationship_type": "indicates", "source_ref": "indicator--2a72583d-c3e9-4f5a-81b9-94493bd30366", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e3a8e9-dbd4-4bd0-b6a3-97d565f70445", "created": "2026-01-27T05:12:57.386089Z", "modified": "2026-01-27T05:12:57.386089Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='656CD7890ED79CE8570D1B7156C31958D5AC1606']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.386089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b03ba026-075e-49ad-b16d-12df4c658991", "created": "2026-01-27T05:12:57.386882Z", "modified": "2026-01-27T05:12:57.386882Z", "relationship_type": "indicates", "source_ref": "indicator--c2e3a8e9-dbd4-4bd0-b6a3-97d565f70445", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc28e89-b47a-4def-8797-ffb7dac68d24", "created": "2026-01-27T05:12:57.387064Z", "modified": "2026-01-27T05:12:57.387064Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6B660EAAEBA47793B7A1278D714669A6612BCA5B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.387064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fe88ce5-865a-41c8-a904-8ff8b209951f", "created": "2026-01-27T05:12:57.387859Z", "modified": "2026-01-27T05:12:57.387859Z", "relationship_type": "indicates", "source_ref": "indicator--2cc28e89-b47a-4def-8797-ffb7dac68d24", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67193b18-296a-454f-8682-dd8731202667", "created": "2026-01-27T05:12:57.388037Z", "modified": "2026-01-27T05:12:57.388037Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6EB49E72D6138B4210D1CA60247D419E5660315C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.388037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5948204a-1b6b-46f1-8884-f7ce2671cad5", "created": "2026-01-27T05:12:57.388963Z", "modified": "2026-01-27T05:12:57.388963Z", "relationship_type": "indicates", "source_ref": "indicator--67193b18-296a-454f-8682-dd8731202667", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e73248-c838-40c2-aa22-2d1bc6af3afd", "created": "2026-01-27T05:12:57.389143Z", "modified": "2026-01-27T05:12:57.389143Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7AFD651F96C7C938351396A53895C3C0704F6B96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.389143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c0bacf6-cecd-4f9b-a4ff-811f62b74eec", "created": "2026-01-27T05:12:57.389944Z", "modified": "2026-01-27T05:12:57.389944Z", "relationship_type": "indicates", "source_ref": "indicator--39e73248-c838-40c2-aa22-2d1bc6af3afd", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1186845-39c6-4eb2-a7f3-03c4f3d9d1b6", "created": "2026-01-27T05:12:57.390123Z", "modified": "2026-01-27T05:12:57.390123Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7F5C0D54A813BA9B87A91420CA2C3DE5E7948F09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.390123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f77c7a82-3411-43b8-9a3d-a42b3067fec5", "created": "2026-01-27T05:12:57.390913Z", "modified": "2026-01-27T05:12:57.390913Z", "relationship_type": "indicates", "source_ref": "indicator--a1186845-39c6-4eb2-a7f3-03c4f3d9d1b6", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc1e7a6-c32b-4813-89a0-c6e75bbbe337", "created": "2026-01-27T05:12:57.39109Z", "modified": "2026-01-27T05:12:57.39109Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A40D8FDC7953AD69D970FF00658EB0F58B3A052A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.39109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51172f14-58bb-4553-beb8-109f0a18d3c4", "created": "2026-01-27T05:12:57.391986Z", "modified": "2026-01-27T05:12:57.391986Z", "relationship_type": "indicates", "source_ref": "indicator--dfc1e7a6-c32b-4813-89a0-c6e75bbbe337", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eebd74e-b7d7-464b-8f7c-1639ed7d2d89", "created": "2026-01-27T05:12:57.392168Z", "modified": "2026-01-27T05:12:57.392168Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CD8F39DAECC7793F33D8D847A598373B8F25A7B7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.392168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81f9608d-792f-4827-88e7-db049523106c", "created": "2026-01-27T05:12:57.392978Z", "modified": "2026-01-27T05:12:57.392978Z", "relationship_type": "indicates", "source_ref": "indicator--1eebd74e-b7d7-464b-8f7c-1639ed7d2d89", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49776cfc-d6de-4c16-a47d-6212fc48f474", "created": "2026-01-27T05:12:57.393159Z", "modified": "2026-01-27T05:12:57.393159Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F6914F044B9385D6005DC9C50A9AECDC2349F413']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.393159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--702f302d-b427-43de-bd41-daad72de058d", "created": "2026-01-27T05:12:57.393956Z", "modified": "2026-01-27T05:12:57.393956Z", "relationship_type": "indicates", "source_ref": "indicator--49776cfc-d6de-4c16-a47d-6212fc48f474", "target_ref": "malware--ff4cccfc-d13a-4079-8779-eb717d88ea9c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7", "created": "2026-01-27T05:12:57.394133Z", "modified": "2026-01-27T05:12:57.394133Z", "name": "SpyAdvice", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd84670f-87f6-48e6-a834-92b64ed0f115", "created": "2026-01-27T05:12:57.394308Z", "modified": "2026-01-27T05:12:57.394308Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracking-dd226.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.394308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e098fe8-f168-4ef9-8ede-d8583f967cb8", "created": "2026-01-27T05:12:57.395041Z", "modified": "2026-01-27T05:12:57.395041Z", "relationship_type": "indicates", "source_ref": "indicator--dd84670f-87f6-48e6-a834-92b64ed0f115", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbf5c3c-211b-4daf-9f6d-82286ef617b2", "created": "2026-01-27T05:12:57.395222Z", "modified": "2026-01-27T05:12:57.395222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyadvice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.395222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8a14893-ddfb-432a-afca-0d509f24e466", "created": "2026-01-27T05:12:57.395921Z", "modified": "2026-01-27T05:12:57.395921Z", "relationship_type": "indicates", "source_ref": "indicator--3bbf5c3c-211b-4daf-9f6d-82286ef617b2", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c78628f-4861-478d-99b2-58db911ccb01", "created": "2026-01-27T05:12:57.3961Z", "modified": "2026-01-27T05:12:57.3961Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyadvice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.3961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1059364d-7754-47c7-a412-fe17c93375a6", "created": "2026-01-27T05:12:57.396794Z", "modified": "2026-01-27T05:12:57.396794Z", "relationship_type": "indicates", "source_ref": "indicator--2c78628f-4861-478d-99b2-58db911ccb01", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac0cecd-2d1a-42ec-a2c3-d9c3cca9a1f9", "created": "2026-01-27T05:12:57.396973Z", "modified": "2026-01-27T05:12:57.396973Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freespyphone.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.396973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bbd8df9-de7b-4058-a71a-291d34c03775", "created": "2026-01-27T05:12:57.398053Z", "modified": "2026-01-27T05:12:57.398053Z", "relationship_type": "indicates", "source_ref": "indicator--1ac0cecd-2d1a-42ec-a2c3-d9c3cca9a1f9", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28eef505-06d6-4888-95c7-e9caac9e471d", "created": "2026-01-27T05:12:57.398235Z", "modified": "2026-01-27T05:12:57.398235Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='download.freespyphone.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.398235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f91dbf6f-6aea-4604-ac33-02635843fcd9", "created": "2026-01-27T05:12:57.398955Z", "modified": "2026-01-27T05:12:57.398955Z", "relationship_type": "indicates", "source_ref": "indicator--28eef505-06d6-4888-95c7-e9caac9e471d", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b44a15-ec17-48a4-bd74-aee2d64108f7", "created": "2026-01-27T05:12:57.399144Z", "modified": "2026-01-27T05:12:57.399144Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sa.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.399144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--583e7738-d43d-457d-8541-a222c1b4bfbd", "created": "2026-01-27T05:12:57.399804Z", "modified": "2026-01-27T05:12:57.399804Z", "relationship_type": "indicates", "source_ref": "indicator--e5b44a15-ec17-48a4-bd74-aee2d64108f7", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83abc488-f484-4259-84e0-58d0556ea6e8", "created": "2026-01-27T05:12:57.399986Z", "modified": "2026-01-27T05:12:57.399986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B374A75F87F992A6F57CF99A24197ABCEB17A1E7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.399986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5db3cbf6-85dd-44d4-a970-bde983fa7ae4", "created": "2026-01-27T05:12:57.400776Z", "modified": "2026-01-27T05:12:57.400776Z", "relationship_type": "indicates", "source_ref": "indicator--83abc488-f484-4259-84e0-58d0556ea6e8", "target_ref": "malware--c3dc1c20-3248-44d5-8937-f453a98c3ef7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959", "created": "2026-01-27T05:12:57.400956Z", "modified": "2026-01-27T05:12:57.400956Z", "name": "Reptilicus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7276e148-23f2-419b-9891-609b1ca24db0", "created": "2026-01-27T05:12:57.401131Z", "modified": "2026-01-27T05:12:57.401131Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apollospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.401131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7dfe1bb9-09cd-490c-a707-e1229ffbbd3d", "created": "2026-01-27T05:12:57.401823Z", "modified": "2026-01-27T05:12:57.401823Z", "relationship_type": "indicates", "source_ref": "indicator--7276e148-23f2-419b-9891-609b1ca24db0", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d049788d-3351-4833-a543-6eb8f30a7da2", "created": "2026-01-27T05:12:57.402002Z", "modified": "2026-01-27T05:12:57.402002Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.ecohouse-eg.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.402002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4484dcb-38c6-4788-8a44-de1d3ba8e4e3", "created": "2026-01-27T05:12:57.40271Z", "modified": "2026-01-27T05:12:57.40271Z", "relationship_type": "indicates", "source_ref": "indicator--d049788d-3351-4833-a543-6eb8f30a7da2", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0c777f-c0c7-477e-9b4d-557cb9ca7319", "created": "2026-01-27T05:12:57.402908Z", "modified": "2026-01-27T05:12:57.402908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.gps-monitor.uz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.402908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5ebcc36-7b56-4de8-a63b-e7a56e557bad", "created": "2026-01-27T05:12:57.403596Z", "modified": "2026-01-27T05:12:57.403596Z", "relationship_type": "indicates", "source_ref": "indicator--bb0c777f-c0c7-477e-9b4d-557cb9ca7319", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49336973-bbd6-4a90-bd00-ec8279a1872d", "created": "2026-01-27T05:12:57.403787Z", "modified": "2026-01-27T05:12:57.403787Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.kfnm.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.403787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da5a734c-40e5-45d2-8f42-3d845d38bb15", "created": "2026-01-27T05:12:57.404469Z", "modified": "2026-01-27T05:12:57.404469Z", "relationship_type": "indicates", "source_ref": "indicator--49336973-bbd6-4a90-bd00-ec8279a1872d", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846b6964-3b59-4379-b43d-c71b04193a1a", "created": "2026-01-27T05:12:57.404643Z", "modified": "2026-01-27T05:12:57.404643Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.vegosm.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.404643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01e17824-84c7-4e93-8f98-e6e35f1dd85e", "created": "2026-01-27T05:12:57.40534Z", "modified": "2026-01-27T05:12:57.40534Z", "relationship_type": "indicates", "source_ref": "indicator--846b6964-3b59-4379-b43d-c71b04193a1a", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a426e0-e07f-4b3c-8dae-13a21b05a305", "created": "2026-01-27T05:12:57.405523Z", "modified": "2026-01-27T05:12:57.405523Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.vkur.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.405523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03f01a1a-135e-4d16-a08f-fa7d529cfbe4", "created": "2026-01-27T05:12:57.406353Z", "modified": "2026-01-27T05:12:57.406353Z", "relationship_type": "indicates", "source_ref": "indicator--b8a426e0-e07f-4b3c-8dae-13a21b05a305", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8fbb75-524f-4083-a7f0-eab53b5f26bb", "created": "2026-01-27T05:12:57.406536Z", "modified": "2026-01-27T05:12:57.406536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.vkur1.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.406536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad1fc988-557d-4187-a997-24ddf5cfacd5", "created": "2026-01-27T05:12:57.407238Z", "modified": "2026-01-27T05:12:57.407238Z", "relationship_type": "indicates", "source_ref": "indicator--ce8fbb75-524f-4083-a7f0-eab53b5f26bb", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bfbbb9-1532-4f81-b092-4d53f79a4074", "created": "2026-01-27T05:12:57.407421Z", "modified": "2026-01-27T05:12:57.407421Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cabinet.thecybernanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.407421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--938bcf38-efb1-450c-97ed-78d2d10a8d71", "created": "2026-01-27T05:12:57.408136Z", "modified": "2026-01-27T05:12:57.408136Z", "relationship_type": "indicates", "source_ref": "indicator--36bfbbb9-1532-4f81-b092-4d53f79a4074", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08125c32-1e7a-4aec-b941-1df12fbb7be1", "created": "2026-01-27T05:12:57.408314Z", "modified": "2026-01-27T05:12:57.408314Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.408314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62889b68-c778-4711-bd7c-b646c5d78eb7", "created": "2026-01-27T05:12:57.409017Z", "modified": "2026-01-27T05:12:57.409017Z", "relationship_type": "indicates", "source_ref": "indicator--08125c32-1e7a-4aec-b941-1df12fbb7be1", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df0b239-7047-449a-a0c9-0f59c3d8c542", "created": "2026-01-27T05:12:57.409197Z", "modified": "2026-01-27T05:12:57.409197Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e2c64.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.409197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4533f7a-fb71-4827-bfcc-039d4ba363f4", "created": "2026-01-27T05:12:57.409891Z", "modified": "2026-01-27T05:12:57.409891Z", "relationship_type": "indicates", "source_ref": "indicator--8df0b239-7047-449a-a0c9-0f59c3d8c542", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8f797d-b92f-4dbc-91a5-efbbb0cbd154", "created": "2026-01-27T05:12:57.410066Z", "modified": "2026-01-27T05:12:57.410066Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='labrador.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.410066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05758ac8-f2c7-4885-804f-3dafd067f4c0", "created": "2026-01-27T05:12:57.410848Z", "modified": "2026-01-27T05:12:57.410848Z", "relationship_type": "indicates", "source_ref": "indicator--5e8f797d-b92f-4dbc-91a5-efbbb0cbd154", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa97bc3-0964-45be-a208-f9e4e3a9f2ee", "created": "2026-01-27T05:12:57.411027Z", "modified": "2026-01-27T05:12:57.411027Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mob.eurotrans.kz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.411027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c36ee21f-da2b-49fa-be52-9fa8aad94a9d", "created": "2026-01-27T05:12:57.411706Z", "modified": "2026-01-27T05:12:57.411706Z", "relationship_type": "indicates", "source_ref": "indicator--6aa97bc3-0964-45be-a208-f9e4e3a9f2ee", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f78ca9-dde1-4e9b-a531-3f09c4467af7", "created": "2026-01-27T05:12:57.4119Z", "modified": "2026-01-27T05:12:57.4119Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonecontrolapp-e2c64.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.4119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0617f93-3bab-4c22-a515-fe7c7595959d", "created": "2026-01-27T05:12:57.412614Z", "modified": "2026-01-27T05:12:57.412614Z", "relationship_type": "indicates", "source_ref": "indicator--a6f78ca9-dde1-4e9b-a531-3f09c4467af7", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bf7418-6ab8-401c-93e3-c14e97e2a714", "created": "2026-01-27T05:12:57.412807Z", "modified": "2026-01-27T05:12:57.412807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='proxy.reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.412807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--090a1f3f-c0b6-4019-93b8-933e891af935", "created": "2026-01-27T05:12:57.413498Z", "modified": "2026-01-27T05:12:57.413498Z", "relationship_type": "indicates", "source_ref": "indicator--b4bf7418-6ab8-401c-93e3-c14e97e2a714", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1703075c-2809-4a9d-9c85-c297c2ec1380", "created": "2026-01-27T05:12:57.413675Z", "modified": "2026-01-27T05:12:57.413675Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.413675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b3c7b2d-c2d9-490c-8b6c-4ba92960c528", "created": "2026-01-27T05:12:57.414587Z", "modified": "2026-01-27T05:12:57.414587Z", "relationship_type": "indicates", "source_ref": "indicator--1703075c-2809-4a9d-9c85-c297c2ec1380", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4aa047-f764-46df-ad0d-55d09b3cb5e8", "created": "2026-01-27T05:12:57.414783Z", "modified": "2026-01-27T05:12:57.414783Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.apollospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.414783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b29c504-cb01-45e9-a4a4-85eab2b3a739", "created": "2026-01-27T05:12:57.415475Z", "modified": "2026-01-27T05:12:57.415475Z", "relationship_type": "indicates", "source_ref": "indicator--2c4aa047-f764-46df-ad0d-55d09b3cb5e8", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b49d145-b60a-4709-873f-84a5f55e8617", "created": "2026-01-27T05:12:57.415656Z", "modified": "2026-01-27T05:12:57.415656Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.dedrone.com.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.415656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c4c9d3a-43c7-4a21-b44f-9a1a2ea1c116", "created": "2026-01-27T05:12:57.41636Z", "modified": "2026-01-27T05:12:57.41636Z", "relationship_type": "indicates", "source_ref": "indicator--7b49d145-b60a-4709-873f-84a5f55e8617", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a4ac0-ac93-4e17-9ac4-f78c726cc6e9", "created": "2026-01-27T05:12:57.41654Z", "modified": "2026-01-27T05:12:57.41654Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.labrador.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.41654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b325cb24-d6ed-42c6-a33c-fe379f80fba2", "created": "2026-01-27T05:12:57.417237Z", "modified": "2026-01-27T05:12:57.417237Z", "relationship_type": "indicates", "source_ref": "indicator--301a4ac0-ac93-4e17-9ac4-f78c726cc6e9", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ec606d-cfb8-4f88-990c-2d83d8204a3b", "created": "2026-01-27T05:12:57.417417Z", "modified": "2026-01-27T05:12:57.417417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rp.liquidblue.com.ua']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.417417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9f659a5-206d-47f0-906d-7c9659a83870", "created": "2026-01-27T05:12:57.418229Z", "modified": "2026-01-27T05:12:57.418229Z", "relationship_type": "indicates", "source_ref": "indicator--23ec606d-cfb8-4f88-990c-2d83d8204a3b", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b375c02-b465-4bca-ae27-af4c936bbc75", "created": "2026-01-27T05:12:57.418411Z", "modified": "2026-01-27T05:12:57.418411Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='vkur.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.418411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--220babe9-ca84-460a-96ab-0751073ea7b0", "created": "2026-01-27T05:12:57.419099Z", "modified": "2026-01-27T05:12:57.419099Z", "relationship_type": "indicates", "source_ref": "indicator--6b375c02-b465-4bca-ae27-af4c936bbc75", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92ddfe4-edb3-4fba-a4cb-f3dfb94aa758", "created": "2026-01-27T05:12:57.419278Z", "modified": "2026-01-27T05:12:57.419278Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='vkur1.se']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.419278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e685651-a04d-4729-ad74-5a40130569d4", "created": "2026-01-27T05:12:57.419963Z", "modified": "2026-01-27T05:12:57.419963Z", "relationship_type": "indicates", "source_ref": "indicator--a92ddfe4-edb3-4fba-a4cb-f3dfb94aa758", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543ab23c-5256-4c5f-8edf-b12f316015a9", "created": "2026-01-27T05:12:57.420143Z", "modified": "2026-01-27T05:12:57.420143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.420143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6252aaa6-d579-47ff-80a1-98ba3652fb55", "created": "2026-01-27T05:12:57.420857Z", "modified": "2026-01-27T05:12:57.420857Z", "relationship_type": "indicates", "source_ref": "indicator--543ab23c-5256-4c5f-8edf-b12f316015a9", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f48fcf8-2da4-4c8b-8493-68ae9d6edb27", "created": "2026-01-27T05:12:57.421041Z", "modified": "2026-01-27T05:12:57.421041Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='reptilicus.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.421041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0cc4cce-6148-413e-a19e-43bc3b5ef74a", "created": "2026-01-27T05:12:57.421703Z", "modified": "2026-01-27T05:12:57.421703Z", "relationship_type": "indicates", "source_ref": "indicator--0f48fcf8-2da4-4c8b-8493-68ae9d6edb27", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6413e111-6f29-465e-a3df-21bd5bcee4d4", "created": "2026-01-27T05:12:57.421897Z", "modified": "2026-01-27T05:12:57.421897Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thecybernanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.421897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--855d9ba5-2103-4eda-90e3-b1118ad43da2", "created": "2026-01-27T05:12:57.422684Z", "modified": "2026-01-27T05:12:57.422684Z", "relationship_type": "indicates", "source_ref": "indicator--6413e111-6f29-465e-a3df-21bd5bcee4d4", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5af3fc8-ceaa-4d74-b1e7-f75e62e4c5d3", "created": "2026-01-27T05:12:57.422885Z", "modified": "2026-01-27T05:12:57.422885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apollospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.422885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c85c5011-d1b0-4229-92e3-7320b990ad2c", "created": "2026-01-27T05:12:57.423553Z", "modified": "2026-01-27T05:12:57.423553Z", "relationship_type": "indicates", "source_ref": "indicator--d5af3fc8-ceaa-4d74-b1e7-f75e62e4c5d3", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6efbebd-5d9e-42df-bef1-e9add286b25f", "created": "2026-01-27T05:12:57.423733Z", "modified": "2026-01-27T05:12:57.423733Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b89b9f572ba37c239fc3c1821939ecfd7e7e0aac00f992f733bdb197de8808e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.423733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af5b7dbe-bcf6-41c7-9ed6-1368b252f573", "created": "2026-01-27T05:12:57.424574Z", "modified": "2026-01-27T05:12:57.424574Z", "relationship_type": "indicates", "source_ref": "indicator--c6efbebd-5d9e-42df-bef1-e9add286b25f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871ea3a5-6656-4558-a7d7-c2b9abafa7a0", "created": "2026-01-27T05:12:57.424767Z", "modified": "2026-01-27T05:12:57.424767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51fde0197f1152a0145bf0fbfd17809b9b105557e9c980d2e886cf01b85add51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.424767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76dbf557-2f2b-4459-bd80-7ae3290d6a62", "created": "2026-01-27T05:12:57.425591Z", "modified": "2026-01-27T05:12:57.425591Z", "relationship_type": "indicates", "source_ref": "indicator--871ea3a5-6656-4558-a7d7-c2b9abafa7a0", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9fd7c-672a-4459-8b50-1d74aba1263f", "created": "2026-01-27T05:12:57.425783Z", "modified": "2026-01-27T05:12:57.425783Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='078cc832db7df902bf6b30bec5da07321e07e62fbfde75a50522c29dfed34996']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.425783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee2b09f1-67b1-4eb8-849b-cf432b7e9920", "created": "2026-01-27T05:12:57.426623Z", "modified": "2026-01-27T05:12:57.426623Z", "relationship_type": "indicates", "source_ref": "indicator--55e9fd7c-672a-4459-8b50-1d74aba1263f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ae71d3-7772-4afb-9e1e-7bd6ea02ec8b", "created": "2026-01-27T05:12:57.426816Z", "modified": "2026-01-27T05:12:57.426816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='489fe688a5ecb172e95aeb007ec5c62cfa5c50841bf220810c449a004b2f45d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.426816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--def55bbe-9b3c-451b-a05a-6a21c1b21dda", "created": "2026-01-27T05:12:57.427647Z", "modified": "2026-01-27T05:12:57.427647Z", "relationship_type": "indicates", "source_ref": "indicator--45ae71d3-7772-4afb-9e1e-7bd6ea02ec8b", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d98884-da8c-4665-bfa5-fc26126ce4f0", "created": "2026-01-27T05:12:57.42784Z", "modified": "2026-01-27T05:12:57.42784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cfe5ec79c7fbdf94c3ec90ac0a8e2d1b4f1a13409c384c9dfbc51fc3839051b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.42784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--befee7ab-1328-4ad1-8879-639749d2c56f", "created": "2026-01-27T05:12:57.428665Z", "modified": "2026-01-27T05:12:57.428665Z", "relationship_type": "indicates", "source_ref": "indicator--51d98884-da8c-4665-bfa5-fc26126ce4f0", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64460acd-1e7a-4f5c-8812-c27fda61e90e", "created": "2026-01-27T05:12:57.428866Z", "modified": "2026-01-27T05:12:57.428866Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35ca9897210d2f34a8acf81bf573c03a9f0fd35b0be2388d2ebfcca98aaab760']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.428866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c48b4a4-b7c4-441c-8c08-b57c0ee3770b", "created": "2026-01-27T05:12:57.429719Z", "modified": "2026-01-27T05:12:57.429719Z", "relationship_type": "indicates", "source_ref": "indicator--64460acd-1e7a-4f5c-8812-c27fda61e90e", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcd46da-4279-4495-b172-7bbfbe0f69b9", "created": "2026-01-27T05:12:57.42991Z", "modified": "2026-01-27T05:12:57.42991Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dcdeaf96b4eb779fe6b2b827575d9630fd9fa089bfdd701b807efb2a8bbdcc83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.42991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e74ef87-3bcd-4977-9a58-5a8fe8d19f92", "created": "2026-01-27T05:12:57.430738Z", "modified": "2026-01-27T05:12:57.430738Z", "relationship_type": "indicates", "source_ref": "indicator--cbcd46da-4279-4495-b172-7bbfbe0f69b9", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d075b1a-1edd-42c9-b40b-5e3747643333", "created": "2026-01-27T05:12:57.430935Z", "modified": "2026-01-27T05:12:57.430935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce7a44a38be92c59a9924c56c231340d6714d5c68cd95bbec88c1fec7a989b56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.430935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cabf9f8d-ca0b-44cb-b36e-0d2c0c775733", "created": "2026-01-27T05:12:57.431915Z", "modified": "2026-01-27T05:12:57.431915Z", "relationship_type": "indicates", "source_ref": "indicator--2d075b1a-1edd-42c9-b40b-5e3747643333", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aff6170-f20d-4a3d-97d9-b4213d0e12ff", "created": "2026-01-27T05:12:57.432102Z", "modified": "2026-01-27T05:12:57.432102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b04afa264292511d139605687f674e4e65046791a276357d4fcddc526672861a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.432102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e52d8edc-8653-49cf-905f-81805af30f58", "created": "2026-01-27T05:12:57.432959Z", "modified": "2026-01-27T05:12:57.432959Z", "relationship_type": "indicates", "source_ref": "indicator--3aff6170-f20d-4a3d-97d9-b4213d0e12ff", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a42123-04fc-4fe2-b902-e19c6ff8bf83", "created": "2026-01-27T05:12:57.433138Z", "modified": "2026-01-27T05:12:57.433138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98a9c10c998a81be77dfc8c45a8eb731d2921487401490c0fc2102f15f0a3c26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.433138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e64d0bd-59cc-48e8-a6c6-4d9b98d4760d", "created": "2026-01-27T05:12:57.43398Z", "modified": "2026-01-27T05:12:57.43398Z", "relationship_type": "indicates", "source_ref": "indicator--82a42123-04fc-4fe2-b902-e19c6ff8bf83", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da112fa-95d8-4f9a-81d7-bd97f96c2a76", "created": "2026-01-27T05:12:57.434156Z", "modified": "2026-01-27T05:12:57.434156Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb28dd7db2ed33a74f22a89777714b5d4bc3bf838c20b885f41f9f589f8168dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.434156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98db0903-bf26-4679-9f34-e34e534e4e14", "created": "2026-01-27T05:12:57.435053Z", "modified": "2026-01-27T05:12:57.435053Z", "relationship_type": "indicates", "source_ref": "indicator--3da112fa-95d8-4f9a-81d7-bd97f96c2a76", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8b90eb-dde4-4f38-81d8-30c3ca07de6d", "created": "2026-01-27T05:12:57.435238Z", "modified": "2026-01-27T05:12:57.435238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='326a3e4dc76dafd9722406dd2fdb1e10f65a836a64b14e23cde921020f8979c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.435238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f56d77ac-46f9-40ae-851b-072cdb2422b1", "created": "2026-01-27T05:12:57.436149Z", "modified": "2026-01-27T05:12:57.436149Z", "relationship_type": "indicates", "source_ref": "indicator--7e8b90eb-dde4-4f38-81d8-30c3ca07de6d", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1762a0-7c73-4a86-8a64-c3b2cf1f8e90", "created": "2026-01-27T05:12:57.436334Z", "modified": "2026-01-27T05:12:57.436334Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47ee347a4a534e32fe4546a0105bec0b669fe72ca81d9ead591d501f9a0168aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.436334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff75e9f8-758d-4e55-9e25-3c3f66ebde1c", "created": "2026-01-27T05:12:57.437181Z", "modified": "2026-01-27T05:12:57.437181Z", "relationship_type": "indicates", "source_ref": "indicator--ba1762a0-7c73-4a86-8a64-c3b2cf1f8e90", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25eeb68-f920-432b-a7e6-067e5d543f31", "created": "2026-01-27T05:12:57.437357Z", "modified": "2026-01-27T05:12:57.437357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c58eefbfdeb3248d52eb914ef7f91c6df7dfbe3f20314ee3a9ecab4d16899389']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.437357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed18205f-ce4d-47bb-865b-90481eb49c87", "created": "2026-01-27T05:12:57.438206Z", "modified": "2026-01-27T05:12:57.438206Z", "relationship_type": "indicates", "source_ref": "indicator--a25eeb68-f920-432b-a7e6-067e5d543f31", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487b8697-111e-4f04-a8c4-b4ab4b2cf906", "created": "2026-01-27T05:12:57.438384Z", "modified": "2026-01-27T05:12:57.438384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11e937f2bfcbce24be626bcd2a5c7a8c90e8ce3d4317c43b9a044a2b44f17417']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.438384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd218d81-93ea-48a3-b7c0-3adf0e1e4c76", "created": "2026-01-27T05:12:57.439243Z", "modified": "2026-01-27T05:12:57.439243Z", "relationship_type": "indicates", "source_ref": "indicator--487b8697-111e-4f04-a8c4-b4ab4b2cf906", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfc161a-7aee-472d-affe-b7c760623bdf", "created": "2026-01-27T05:12:57.439429Z", "modified": "2026-01-27T05:12:57.439429Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='161e8d0c4eb623b81862e09a6f4097bdaa13ef45f3b9e8f0206f503acbae27c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.439429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df89ea65-d965-4606-be12-6ad7bc08d10d", "created": "2026-01-27T05:12:57.440295Z", "modified": "2026-01-27T05:12:57.440295Z", "relationship_type": "indicates", "source_ref": "indicator--8dfc161a-7aee-472d-affe-b7c760623bdf", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e0ae1c-86b6-49bb-8286-d1f1cf253813", "created": "2026-01-27T05:12:57.440475Z", "modified": "2026-01-27T05:12:57.440475Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='086a72891ad805b02028ab878fe04219b47b41e7fe57827cb8bae3342df8fbf0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.440475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--969bd1ba-b666-40b3-952e-aa272d357918", "created": "2026-01-27T05:12:57.441448Z", "modified": "2026-01-27T05:12:57.441448Z", "relationship_type": "indicates", "source_ref": "indicator--56e0ae1c-86b6-49bb-8286-d1f1cf253813", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c25de9-6c98-4bbf-8873-c390e894415d", "created": "2026-01-27T05:12:57.441629Z", "modified": "2026-01-27T05:12:57.441629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae34a70a1dea161ea00dacd26a204800445593af962b81931f769807e9e4bf75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.441629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0a11767-b5bc-445f-b8e7-16f2bc0ed5d7", "created": "2026-01-27T05:12:57.442473Z", "modified": "2026-01-27T05:12:57.442473Z", "relationship_type": "indicates", "source_ref": "indicator--12c25de9-6c98-4bbf-8873-c390e894415d", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bed310a-c134-4f92-9964-67d942d75f5c", "created": "2026-01-27T05:12:57.442657Z", "modified": "2026-01-27T05:12:57.442657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b2027a3eec306415fe09fd97a7b13f31318d4eb1c5ef4f3854cd6121e05833d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.442657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4151ad0e-7e7d-4cb2-baaa-9a825ab72832", "created": "2026-01-27T05:12:57.443499Z", "modified": "2026-01-27T05:12:57.443499Z", "relationship_type": "indicates", "source_ref": "indicator--7bed310a-c134-4f92-9964-67d942d75f5c", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffd53dd-40ab-422c-9cb5-deb2640abc93", "created": "2026-01-27T05:12:57.443677Z", "modified": "2026-01-27T05:12:57.443677Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e8b15fcb82e229cee20f1fbf6c75bf1f617308cd321ccaacd8583c4dd4bc8bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.443677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a87f671b-123c-452c-94a3-e23ef2fba18b", "created": "2026-01-27T05:12:57.444518Z", "modified": "2026-01-27T05:12:57.444518Z", "relationship_type": "indicates", "source_ref": "indicator--1ffd53dd-40ab-422c-9cb5-deb2640abc93", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792fcd0e-8b03-41ac-bfa0-ecbbc0a8a796", "created": "2026-01-27T05:12:57.4447Z", "modified": "2026-01-27T05:12:57.4447Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2ab208206321b463bc7e5c3089814391b425db13e6aa917ffb368018f5d8872']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.4447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a501cea-a113-43e9-a76a-f201bdc52115", "created": "2026-01-27T05:12:57.445559Z", "modified": "2026-01-27T05:12:57.445559Z", "relationship_type": "indicates", "source_ref": "indicator--792fcd0e-8b03-41ac-bfa0-ecbbc0a8a796", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749342a5-4869-44ea-830e-9b2138d8ba14", "created": "2026-01-27T05:12:57.445738Z", "modified": "2026-01-27T05:12:57.445738Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e884358fe79d553e129a0b5c4571b096416a33de780fbc540c79dee852a2f19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.445738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--067ea3d5-0c51-45f1-be69-10853bcc80ec", "created": "2026-01-27T05:12:57.446591Z", "modified": "2026-01-27T05:12:57.446591Z", "relationship_type": "indicates", "source_ref": "indicator--749342a5-4869-44ea-830e-9b2138d8ba14", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1a1da9-d2d5-4578-8942-b1ce02877aef", "created": "2026-01-27T05:12:57.446784Z", "modified": "2026-01-27T05:12:57.446784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78a81b421b7e4c695c6cb657774f5b0d03c8b2b830aa53d0f6585511060fdbd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.446784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8ff0d1a-3c66-4bb6-ba7f-d0f388b2be38", "created": "2026-01-27T05:12:57.447615Z", "modified": "2026-01-27T05:12:57.447615Z", "relationship_type": "indicates", "source_ref": "indicator--2d1a1da9-d2d5-4578-8942-b1ce02877aef", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381e441b-6c6a-40b7-bced-a9d711870e4b", "created": "2026-01-27T05:12:57.447807Z", "modified": "2026-01-27T05:12:57.447807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='25c0a8426afa94c2f0a0a12f75d141370b3a4fe8653292c19b241c83eb39e579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.447807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02058df9-933f-4070-801b-3242cd1fffbe", "created": "2026-01-27T05:12:57.448631Z", "modified": "2026-01-27T05:12:57.448631Z", "relationship_type": "indicates", "source_ref": "indicator--381e441b-6c6a-40b7-bced-a9d711870e4b", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8d80e7-8395-47e1-a1bd-a5e036fde90a", "created": "2026-01-27T05:12:57.448824Z", "modified": "2026-01-27T05:12:57.448824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26434d43e515f38a10263cf74fc6ce2849423ac477de0f4ae4c397152a2efbaa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.448824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a36f415-1ba4-4f29-96bc-aa978c5d5808", "created": "2026-01-27T05:12:57.44979Z", "modified": "2026-01-27T05:12:57.44979Z", "relationship_type": "indicates", "source_ref": "indicator--8c8d80e7-8395-47e1-a1bd-a5e036fde90a", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131f7ca1-499d-4fe9-a3dd-453a2eb9ee7e", "created": "2026-01-27T05:12:57.449971Z", "modified": "2026-01-27T05:12:57.449971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a56b53a2ed3e43b13a92d1083a4c8e8ee331e01b64bab28979c8b2d1fd52eb71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.449971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85139799-cc21-4bc3-9f6d-481b04fef9af", "created": "2026-01-27T05:12:57.45082Z", "modified": "2026-01-27T05:12:57.45082Z", "relationship_type": "indicates", "source_ref": "indicator--131f7ca1-499d-4fe9-a3dd-453a2eb9ee7e", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c75bbb0-36dc-479e-8b64-9c689f815acf", "created": "2026-01-27T05:12:57.451001Z", "modified": "2026-01-27T05:12:57.451001Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d035848c249baaf2907922e5c1a45a18b0d1a0af29181d6d6f942e7d7ac7e1fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.451001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45153453-7e14-42fa-b434-f823d2dc23dc", "created": "2026-01-27T05:12:57.451841Z", "modified": "2026-01-27T05:12:57.451841Z", "relationship_type": "indicates", "source_ref": "indicator--8c75bbb0-36dc-479e-8b64-9c689f815acf", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a9b5e9-6bed-495a-ac65-9009dc9cdfcf", "created": "2026-01-27T05:12:57.452019Z", "modified": "2026-01-27T05:12:57.452019Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d6ec4cd2a5f3192cdc1e6ff0ca59f9a92b358ef08f7c5f0118ba15afea0c74d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.452019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98ce468e-5879-42bb-a201-bdf0c182bcb6", "created": "2026-01-27T05:12:57.452862Z", "modified": "2026-01-27T05:12:57.452862Z", "relationship_type": "indicates", "source_ref": "indicator--f8a9b5e9-6bed-495a-ac65-9009dc9cdfcf", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a327dc-1604-4625-a059-fdedf1d5d259", "created": "2026-01-27T05:12:57.45304Z", "modified": "2026-01-27T05:12:57.45304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d8cac906fefc39de9df995854771f61a3c8cd0c14fe5ad456c91913ba77793a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.45304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1386d534-b923-4ca5-bd95-de6eb0d1c31b", "created": "2026-01-27T05:12:57.453877Z", "modified": "2026-01-27T05:12:57.453877Z", "relationship_type": "indicates", "source_ref": "indicator--c9a327dc-1604-4625-a059-fdedf1d5d259", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0975cd46-38a6-4170-ac33-add12218ab7e", "created": "2026-01-27T05:12:57.454054Z", "modified": "2026-01-27T05:12:57.454054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69fa86e8a5415f44db366787058f5fd0c73efd88de5f4fd94aeb8e899fb8cec8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.454054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1383f69e-d80f-4f26-a343-8556cddd0d30", "created": "2026-01-27T05:12:57.454916Z", "modified": "2026-01-27T05:12:57.454916Z", "relationship_type": "indicates", "source_ref": "indicator--0975cd46-38a6-4170-ac33-add12218ab7e", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d0411b-332e-47cf-88dd-2290ffbe5672", "created": "2026-01-27T05:12:57.455096Z", "modified": "2026-01-27T05:12:57.455096Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b3a099d0d5983f472c7f42e91873d91a6ddc3dae3b4d02c32845e0d118bb3c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.455096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cbea5b1-8c17-4fd5-8eb4-f2fa7f8856cd", "created": "2026-01-27T05:12:57.455941Z", "modified": "2026-01-27T05:12:57.455941Z", "relationship_type": "indicates", "source_ref": "indicator--60d0411b-332e-47cf-88dd-2290ffbe5672", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b9b7fb-a49b-4ba9-a434-5f049b86ca57", "created": "2026-01-27T05:12:57.456119Z", "modified": "2026-01-27T05:12:57.456119Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b622cf798e09493f59c8bb64e82daa4c0c165db2f57d7bc9ba83ec803b27bd7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.456119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--636f7d31-20ba-43c8-8cd0-9831468571c2", "created": "2026-01-27T05:12:57.45697Z", "modified": "2026-01-27T05:12:57.45697Z", "relationship_type": "indicates", "source_ref": "indicator--f7b9b7fb-a49b-4ba9-a434-5f049b86ca57", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fc9cdb-f13f-4d26-9b2b-02036f3d0657", "created": "2026-01-27T05:12:57.457147Z", "modified": "2026-01-27T05:12:57.457147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a296ebc5ed97d07685fc341dace821adb37fdf5d704c02f32a0c9f137827eff9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.457147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0f90eda-bc66-4a23-845e-51f813699097", "created": "2026-01-27T05:12:57.458002Z", "modified": "2026-01-27T05:12:57.458002Z", "relationship_type": "indicates", "source_ref": "indicator--c5fc9cdb-f13f-4d26-9b2b-02036f3d0657", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77520385-763c-436a-a503-7f19fe28c050", "created": "2026-01-27T05:12:57.45818Z", "modified": "2026-01-27T05:12:57.45818Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b08592d6aa163a92f6294e806f938a5a15b143bd6604677e1988d8ab30c1b9c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.45818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d79bdb8-8824-4e1a-bd5c-8d2ae8d25b89", "created": "2026-01-27T05:12:57.459147Z", "modified": "2026-01-27T05:12:57.459147Z", "relationship_type": "indicates", "source_ref": "indicator--77520385-763c-436a-a503-7f19fe28c050", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92177b9-5fae-4a9a-83fa-5470cc719c69", "created": "2026-01-27T05:12:57.459331Z", "modified": "2026-01-27T05:12:57.459331Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8264d44e15f8b7278bd10a6df07cfa859340d11c35bf4877101cdb71c9f07aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.459331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2182dc3f-6ad2-4ef3-a889-f57cd90266cf", "created": "2026-01-27T05:12:57.460192Z", "modified": "2026-01-27T05:12:57.460192Z", "relationship_type": "indicates", "source_ref": "indicator--c92177b9-5fae-4a9a-83fa-5470cc719c69", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd3d45c-f898-4b47-804e-e1f7f60b4a7f", "created": "2026-01-27T05:12:57.460372Z", "modified": "2026-01-27T05:12:57.460372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2cc4882a5cb1950f3b984e1d8cbd55d489096d7a3e2cb9c0194f5440a88ae5e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.460372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1825b4fb-e7af-44f7-b86a-8b414ca3d78c", "created": "2026-01-27T05:12:57.461228Z", "modified": "2026-01-27T05:12:57.461228Z", "relationship_type": "indicates", "source_ref": "indicator--3fd3d45c-f898-4b47-804e-e1f7f60b4a7f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfa1583-6296-4704-a072-2f96f6ae9f68", "created": "2026-01-27T05:12:57.461405Z", "modified": "2026-01-27T05:12:57.461405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f9c4103e3551b2849d378baaabc06fa4de042419ce45f78a3105feb9a582d01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.461405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--135f5eb7-08e6-439d-af51-020167121a8c", "created": "2026-01-27T05:12:57.462269Z", "modified": "2026-01-27T05:12:57.462269Z", "relationship_type": "indicates", "source_ref": "indicator--6bfa1583-6296-4704-a072-2f96f6ae9f68", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e47a74-6aaf-43d1-99f1-43f52df757ff", "created": "2026-01-27T05:12:57.462448Z", "modified": "2026-01-27T05:12:57.462448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ac2e7a717737cab28d8f63d61af9349c5456ec7dbe67c523e5c6f7348885a8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.462448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--638bd515-05f6-418a-bbfa-aff01d583de4", "created": "2026-01-27T05:12:57.463314Z", "modified": "2026-01-27T05:12:57.463314Z", "relationship_type": "indicates", "source_ref": "indicator--e4e47a74-6aaf-43d1-99f1-43f52df757ff", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8369ab-43d4-4227-9f66-f746406dac23", "created": "2026-01-27T05:12:57.463494Z", "modified": "2026-01-27T05:12:57.463494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67cd617d215361904ac274e1600cd1e48642a8b1e8381edd6e80e286d8297e8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.463494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce459488-8149-4430-9961-0c2850e8f554", "created": "2026-01-27T05:12:57.464331Z", "modified": "2026-01-27T05:12:57.464331Z", "relationship_type": "indicates", "source_ref": "indicator--6d8369ab-43d4-4227-9f66-f746406dac23", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9c3686-db2f-45cd-a0bb-9a9d98bcaea1", "created": "2026-01-27T05:12:57.464507Z", "modified": "2026-01-27T05:12:57.464507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3b8b90ee684eef32a590fa452f0d06199c6f02303e255d02876f73cb03259db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.464507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d28c5b55-36de-4bfd-a027-39a5f326212e", "created": "2026-01-27T05:12:57.465348Z", "modified": "2026-01-27T05:12:57.465348Z", "relationship_type": "indicates", "source_ref": "indicator--9e9c3686-db2f-45cd-a0bb-9a9d98bcaea1", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6f8b68-ea45-4e29-82d8-2627c8fd14ef", "created": "2026-01-27T05:12:57.465524Z", "modified": "2026-01-27T05:12:57.465524Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e25e41a6347212b24e4b4c7ba374851932f63b856acd72292e935d5613ad5e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.465524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fb0889b-33a7-428c-89ba-d75d9d7cbc2f", "created": "2026-01-27T05:12:57.466367Z", "modified": "2026-01-27T05:12:57.466367Z", "relationship_type": "indicates", "source_ref": "indicator--aa6f8b68-ea45-4e29-82d8-2627c8fd14ef", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226f6302-0c83-4e36-a37f-fa41558f3fe9", "created": "2026-01-27T05:12:57.466541Z", "modified": "2026-01-27T05:12:57.466541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37f1ffb5f1806cec2c6f323feace42894ad11758af05f416a518e9730ca3faba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.466541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fe579a5-b515-432d-ae22-f7be4d46a92d", "created": "2026-01-27T05:12:57.467391Z", "modified": "2026-01-27T05:12:57.467391Z", "relationship_type": "indicates", "source_ref": "indicator--226f6302-0c83-4e36-a37f-fa41558f3fe9", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c74f4b5-fa20-486b-9c76-750289050c0f", "created": "2026-01-27T05:12:57.467568Z", "modified": "2026-01-27T05:12:57.467568Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='effb9c98db3d940644b8b7bc0e6e05f52631836fa9955707f2d811e444cd2e1f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.467568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceb8f426-46f6-4e69-8fbd-393bc2aa7218", "created": "2026-01-27T05:12:57.468522Z", "modified": "2026-01-27T05:12:57.468522Z", "relationship_type": "indicates", "source_ref": "indicator--6c74f4b5-fa20-486b-9c76-750289050c0f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37358f1d-3a07-4141-8725-cd8272ef6119", "created": "2026-01-27T05:12:57.4687Z", "modified": "2026-01-27T05:12:57.4687Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='331e395fa0a9d75342d41f2b4d2e5c48042a528e61e41b3678dabdd28c8bb3c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.4687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af08fc39-b2ad-4f5e-8742-d362a8a2f7c5", "created": "2026-01-27T05:12:57.469551Z", "modified": "2026-01-27T05:12:57.469551Z", "relationship_type": "indicates", "source_ref": "indicator--37358f1d-3a07-4141-8725-cd8272ef6119", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9befbedd-2fc4-4062-85ef-d13dd334ba54", "created": "2026-01-27T05:12:57.46973Z", "modified": "2026-01-27T05:12:57.46973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99b36b155f432d5b36b46f294cda426b08a1a5cca0796ccd418b15e070448fd3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.46973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91ea4566-2317-448d-a8f4-b135210600c2", "created": "2026-01-27T05:12:57.470573Z", "modified": "2026-01-27T05:12:57.470573Z", "relationship_type": "indicates", "source_ref": "indicator--9befbedd-2fc4-4062-85ef-d13dd334ba54", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299b157f-6e59-411f-9328-6d01d8768a4f", "created": "2026-01-27T05:12:57.470767Z", "modified": "2026-01-27T05:12:57.470767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5272239d925132c601125328cc58897753ae068116fc1dd93df740b1d59d8597']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.470767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1df02a33-574b-4773-a747-041865296672", "created": "2026-01-27T05:12:57.471611Z", "modified": "2026-01-27T05:12:57.471611Z", "relationship_type": "indicates", "source_ref": "indicator--299b157f-6e59-411f-9328-6d01d8768a4f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c72f65-8793-4867-8586-f31d594a5cbf", "created": "2026-01-27T05:12:57.471818Z", "modified": "2026-01-27T05:12:57.471818Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9191a8236f338269f957294c6137ce83df5dc4af51f5ea812c08f585f66c03bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.471818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--765fcd69-90e9-4303-802a-c0bb902bc9e7", "created": "2026-01-27T05:12:57.472653Z", "modified": "2026-01-27T05:12:57.472653Z", "relationship_type": "indicates", "source_ref": "indicator--b3c72f65-8793-4867-8586-f31d594a5cbf", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff923364-976e-4c4a-9e79-c0edc3f5abda", "created": "2026-01-27T05:12:57.472852Z", "modified": "2026-01-27T05:12:57.472852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='915b558ddf6456534f77d3a609154bef8b3ed9bbc0993f80c7dc9b13e5365ec8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.472852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5e3f9af-4f24-4445-a3c9-116a1994b35a", "created": "2026-01-27T05:12:57.473683Z", "modified": "2026-01-27T05:12:57.473683Z", "relationship_type": "indicates", "source_ref": "indicator--ff923364-976e-4c4a-9e79-c0edc3f5abda", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14f775d-e308-43ed-862b-66e0546367f8", "created": "2026-01-27T05:12:57.473877Z", "modified": "2026-01-27T05:12:57.473877Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84b85ab4d5972bbb1cd1305c2ebb78c7cbc9328942a09260deab92f9832a639a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.473877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cd11fea-3d84-4179-bf72-505c417d8060", "created": "2026-01-27T05:12:57.474709Z", "modified": "2026-01-27T05:12:57.474709Z", "relationship_type": "indicates", "source_ref": "indicator--c14f775d-e308-43ed-862b-66e0546367f8", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f18f7c-14f5-4276-93a1-fbd63974595f", "created": "2026-01-27T05:12:57.474904Z", "modified": "2026-01-27T05:12:57.474904Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1bcb08fb20b3a22938c3c01fe4f4890404310ea65eb86e5dfd1639f30c8d73d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.474904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba6e8e1d-dceb-4d98-94f5-18a6a76410d9", "created": "2026-01-27T05:12:57.475737Z", "modified": "2026-01-27T05:12:57.475737Z", "relationship_type": "indicates", "source_ref": "indicator--f6f18f7c-14f5-4276-93a1-fbd63974595f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb33fbd9-e109-4397-b639-568f54d08bd8", "created": "2026-01-27T05:12:57.475931Z", "modified": "2026-01-27T05:12:57.475931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c3c0bff829c72cea1e4fc0633bda56594cbb68572fd38989d87843a84275e96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.475931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fc8a00a-9244-4285-a1c7-580dc3e598b6", "created": "2026-01-27T05:12:57.476918Z", "modified": "2026-01-27T05:12:57.476918Z", "relationship_type": "indicates", "source_ref": "indicator--fb33fbd9-e109-4397-b639-568f54d08bd8", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43eefa4-3dea-4eb6-ac6d-942bcb0a185f", "created": "2026-01-27T05:12:57.477117Z", "modified": "2026-01-27T05:12:57.477117Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fd97d68386eacce306ed977d0d3a3947a5bee704a91491d9045ccc48e79a1fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.477117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--723110f9-8e63-42e5-bc4f-58bfaa98d2cc", "created": "2026-01-27T05:12:57.477968Z", "modified": "2026-01-27T05:12:57.477968Z", "relationship_type": "indicates", "source_ref": "indicator--a43eefa4-3dea-4eb6-ac6d-942bcb0a185f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e750510-11f0-42b2-ba7e-f750b603215d", "created": "2026-01-27T05:12:57.478149Z", "modified": "2026-01-27T05:12:57.478149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ccbb0b25fdc6757072fb7fe648f61dcef6650d71003af2b219e5b781406b5fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.478149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c4d3360-332d-49e3-b613-fcb09aede5de", "created": "2026-01-27T05:12:57.478994Z", "modified": "2026-01-27T05:12:57.478994Z", "relationship_type": "indicates", "source_ref": "indicator--9e750510-11f0-42b2-ba7e-f750b603215d", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c91543-7229-494c-94a1-51d11d507f34", "created": "2026-01-27T05:12:57.479173Z", "modified": "2026-01-27T05:12:57.479173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96067163a2d66143758df859d4f8d45dab7b45a5f5a5d708aa17d97499776fcb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.479173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed15f2e4-a404-47fc-9a16-19a2b9d8e4a7", "created": "2026-01-27T05:12:57.480019Z", "modified": "2026-01-27T05:12:57.480019Z", "relationship_type": "indicates", "source_ref": "indicator--f6c91543-7229-494c-94a1-51d11d507f34", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f3dcab-b788-4e80-bf6e-cd9ba8087ecf", "created": "2026-01-27T05:12:57.480197Z", "modified": "2026-01-27T05:12:57.480197Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c9ff006344869c4ce571ecb11c9e4e1e5c11784efe0132a5e2420941be5d767']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.480197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db5487c2-405e-4d9d-b852-a3e8b70266d0", "created": "2026-01-27T05:12:57.481043Z", "modified": "2026-01-27T05:12:57.481043Z", "relationship_type": "indicates", "source_ref": "indicator--a1f3dcab-b788-4e80-bf6e-cd9ba8087ecf", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390548cc-dce7-4975-b9f2-09429a63ba22", "created": "2026-01-27T05:12:57.481221Z", "modified": "2026-01-27T05:12:57.481221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b4eb6e5f5c82ec6b84cced857714e7a217fd835d2442b1504aa950d99d42ba2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.481221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf50798c-188e-4bef-bb56-632fd92eb58c", "created": "2026-01-27T05:12:57.482077Z", "modified": "2026-01-27T05:12:57.482077Z", "relationship_type": "indicates", "source_ref": "indicator--390548cc-dce7-4975-b9f2-09429a63ba22", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772a6d9d-28ef-4243-8ca9-a47bfde0efa7", "created": "2026-01-27T05:12:57.482256Z", "modified": "2026-01-27T05:12:57.482256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='057105577ff80bc15ff151a6e976814b0a2404239a236e2bd084f784ba0154e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.482256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3508b21-3839-4dd4-a3d0-2d88f51baf59", "created": "2026-01-27T05:12:57.483105Z", "modified": "2026-01-27T05:12:57.483105Z", "relationship_type": "indicates", "source_ref": "indicator--772a6d9d-28ef-4243-8ca9-a47bfde0efa7", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503f244d-a008-40df-9c41-e457d9b88ad3", "created": "2026-01-27T05:12:57.483282Z", "modified": "2026-01-27T05:12:57.483282Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cd9704928789629ed804ac9d726fa8fd809b682d83ca83b2755e537b98c656b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.483282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e80fa0c-105d-4033-b7e1-9efcff095964", "created": "2026-01-27T05:12:57.484137Z", "modified": "2026-01-27T05:12:57.484137Z", "relationship_type": "indicates", "source_ref": "indicator--503f244d-a008-40df-9c41-e457d9b88ad3", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0d3445-0e45-4af9-99f6-77fa04c4ba6c", "created": "2026-01-27T05:12:57.484317Z", "modified": "2026-01-27T05:12:57.484317Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.brot.storage.work']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.484317Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d1f6380-31f9-4d50-8aef-7da1b16e0d92", "created": "2026-01-27T05:12:57.484995Z", "modified": "2026-01-27T05:12:57.484995Z", "relationship_type": "indicates", "source_ref": "indicator--cd0d3445-0e45-4af9-99f6-77fa04c4ba6c", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699ea7c1-3513-4373-92a4-7663860e4853", "created": "2026-01-27T05:12:57.485182Z", "modified": "2026-01-27T05:12:57.485182Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cycle.start.mess']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.485182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a8a6b16-6163-4e3a-b247-eb49fad585dc", "created": "2026-01-27T05:12:57.485985Z", "modified": "2026-01-27T05:12:57.485985Z", "relationship_type": "indicates", "source_ref": "indicator--699ea7c1-3513-4373-92a4-7663860e4853", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33beeb25-a32b-4183-90d3-cd83a4ce96cf", "created": "2026-01-27T05:12:57.486164Z", "modified": "2026-01-27T05:12:57.486164Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thecybernanny.andapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.486164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a91cf221-ac0c-46db-a2b5-859ee9ba7078", "created": "2026-01-27T05:12:57.486839Z", "modified": "2026-01-27T05:12:57.486839Z", "relationship_type": "indicates", "source_ref": "indicator--33beeb25-a32b-4183-90d3-cd83a4ce96cf", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8776a227-a7f4-438e-bdcf-ce4b00a19210", "created": "2026-01-27T05:12:57.487019Z", "modified": "2026-01-27T05:12:57.487019Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.androidcoreapp.androidbackup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.487019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b37ae10e-8563-4062-97d0-c60138b52771", "created": "2026-01-27T05:12:57.487818Z", "modified": "2026-01-27T05:12:57.487818Z", "relationship_type": "indicates", "source_ref": "indicator--8776a227-a7f4-438e-bdcf-ce4b00a19210", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530fd60c-1b4e-4e41-9c0e-a3d3315a4947", "created": "2026-01-27T05:12:57.488001Z", "modified": "2026-01-27T05:12:57.488001Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.delphiboardlayer.androidcoreapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.488001Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6b348c4-9e79-48ff-81df-d616f3888d1c", "created": "2026-01-27T05:12:57.488691Z", "modified": "2026-01-27T05:12:57.488691Z", "relationship_type": "indicates", "source_ref": "indicator--530fd60c-1b4e-4e41-9c0e-a3d3315a4947", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fefea4ff-cfbf-4568-b631-3f632137e5b3", "created": "2026-01-27T05:12:57.488887Z", "modified": "2026-01-27T05:12:57.488887Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.reptilicus.clientapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.488887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b35ddf2f-af3b-4f83-8dbd-af4252e78e3b", "created": "2026-01-27T05:12:57.489552Z", "modified": "2026-01-27T05:12:57.489552Z", "relationship_type": "indicates", "source_ref": "indicator--fefea4ff-cfbf-4568-b631-3f632137e5b3", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023618ed-e0ad-4c34-a890-51e578db9394", "created": "2026-01-27T05:12:57.489727Z", "modified": "2026-01-27T05:12:57.489727Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.system_updater_abs341']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.489727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--911956fe-1d46-4c01-b07d-784afcdbb36c", "created": "2026-01-27T05:12:57.490497Z", "modified": "2026-01-27T05:12:57.490497Z", "relationship_type": "indicates", "source_ref": "indicator--023618ed-e0ad-4c34-a890-51e578db9394", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7e5d3e-0810-4967-877e-74908b53d014", "created": "2026-01-27T05:12:57.490675Z", "modified": "2026-01-27T05:12:57.490675Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.vkurhandler']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.490675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cbbeae1-976b-4f76-9e70-20f66faa6700", "created": "2026-01-27T05:12:57.49135Z", "modified": "2026-01-27T05:12:57.49135Z", "relationship_type": "indicates", "source_ref": "indicator--0b7e5d3e-0810-4967-877e-74908b53d014", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4614158d-a0f2-43de-bdba-f232af4eb487", "created": "2026-01-27T05:12:57.491529Z", "modified": "2026-01-27T05:12:57.491529Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='se.vkur.clientapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.491529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fde713c-743d-4789-bca8-91b6c7b9178e", "created": "2026-01-27T05:12:57.492207Z", "modified": "2026-01-27T05:12:57.492207Z", "relationship_type": "indicates", "source_ref": "indicator--4614158d-a0f2-43de-bdba-f232af4eb487", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b993447e-836f-4cf9-babc-66d5fb8e9e4d", "created": "2026-01-27T05:12:57.492384Z", "modified": "2026-01-27T05:12:57.492384Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='yc.sysupd.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.492384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88cc74be-d787-42d4-b75b-7780d4ddc494", "created": "2026-01-27T05:12:57.493174Z", "modified": "2026-01-27T05:12:57.493174Z", "relationship_type": "indicates", "source_ref": "indicator--b993447e-836f-4cf9-babc-66d5fb8e9e4d", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de00d647-e5e1-4702-857d-b2883801c65f", "created": "2026-01-27T05:12:57.493353Z", "modified": "2026-01-27T05:12:57.493353Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='230E35A26E471352DF5DBDBCF9834E0711500CB0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.493353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61cee3e0-9c72-47cd-973b-2fc23b6da1c6", "created": "2026-01-27T05:12:57.494264Z", "modified": "2026-01-27T05:12:57.494264Z", "relationship_type": "indicates", "source_ref": "indicator--de00d647-e5e1-4702-857d-b2883801c65f", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c4d344-b256-4886-89cb-64882d42b90b", "created": "2026-01-27T05:12:57.494444Z", "modified": "2026-01-27T05:12:57.494444Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2C08279BCC8EB16B2B31ACFBD7E1D4BB28E49A87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.494444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbd0f5c9-23f7-4627-92cb-1f9ca358d997", "created": "2026-01-27T05:12:57.495242Z", "modified": "2026-01-27T05:12:57.495242Z", "relationship_type": "indicates", "source_ref": "indicator--e3c4d344-b256-4886-89cb-64882d42b90b", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bfca6d-526d-45fd-ac39-a10d7576fd4d", "created": "2026-01-27T05:12:57.495423Z", "modified": "2026-01-27T05:12:57.495423Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2FD8BEF4081F126D4DA655B40E9FC63F116DD857']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.495423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--077c91b4-52b4-4111-aa3a-4cdbfae80108", "created": "2026-01-27T05:12:57.496216Z", "modified": "2026-01-27T05:12:57.496216Z", "relationship_type": "indicates", "source_ref": "indicator--e0bfca6d-526d-45fd-ac39-a10d7576fd4d", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461ed710-afa1-419a-aab9-302a019b8e50", "created": "2026-01-27T05:12:57.496394Z", "modified": "2026-01-27T05:12:57.496394Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9256E291823DA741B64CB23F7E371D0940E5272E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.496394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f119bf2e-c0d3-484d-8bf6-69b447b3ed93", "created": "2026-01-27T05:12:57.49718Z", "modified": "2026-01-27T05:12:57.49718Z", "relationship_type": "indicates", "source_ref": "indicator--461ed710-afa1-419a-aab9-302a019b8e50", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe252a9-c80f-4519-86ec-e7910c5c98a3", "created": "2026-01-27T05:12:57.497356Z", "modified": "2026-01-27T05:12:57.497356Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9BD494107EFED96F630D29D6E18AE4DCC47149E2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.497356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b347c926-b5d6-47e9-820f-4040f95d51de", "created": "2026-01-27T05:12:57.498142Z", "modified": "2026-01-27T05:12:57.498142Z", "relationship_type": "indicates", "source_ref": "indicator--1fe252a9-c80f-4519-86ec-e7910c5c98a3", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc65e6c-f583-44d3-a734-b5a670801e06", "created": "2026-01-27T05:12:57.498318Z", "modified": "2026-01-27T05:12:57.498318Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6D0FF787BF4534F1077D1E4BF2E18BA381D97061']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.498318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ef22a64-107a-4904-bd97-cf40596cc2f6", "created": "2026-01-27T05:12:57.499111Z", "modified": "2026-01-27T05:12:57.499111Z", "relationship_type": "indicates", "source_ref": "indicator--4bc65e6c-f583-44d3-a734-b5a670801e06", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6614a384-49e5-40c1-a87d-6628b9563db9", "created": "2026-01-27T05:12:57.499289Z", "modified": "2026-01-27T05:12:57.499289Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D3A7E0E542A3E1112741806AC31F341C4200FBA1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.499289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5eafd1fd-1473-454b-ab16-30d7c6ca1097", "created": "2026-01-27T05:12:57.500093Z", "modified": "2026-01-27T05:12:57.500093Z", "relationship_type": "indicates", "source_ref": "indicator--6614a384-49e5-40c1-a87d-6628b9563db9", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d10c73-ded1-45a0-abec-e47e093f72b9", "created": "2026-01-27T05:12:57.500271Z", "modified": "2026-01-27T05:12:57.500271Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B61326887306E5A65726AE6BFD1D720D2760CEFF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.500271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e858af0-11fe-4b9b-9075-d96395d11892", "created": "2026-01-27T05:12:57.501071Z", "modified": "2026-01-27T05:12:57.501071Z", "relationship_type": "indicates", "source_ref": "indicator--49d10c73-ded1-45a0-abec-e47e093f72b9", "target_ref": "malware--f6a28946-2cc8-42ca-80fa-01099c74e959"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7350382e-887c-410e-9724-25a46e49c1d0", "created": "2026-01-27T05:12:57.501245Z", "modified": "2026-01-27T05:12:57.501245Z", "name": "PhoneSheriff", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d63281-49c0-4def-8df6-2104de7dc281", "created": "2026-01-27T05:12:57.501418Z", "modified": "2026-01-27T05:12:57.501418Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilenannylogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.501418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61d6c458-30da-4822-9436-99eb899e58ce", "created": "2026-01-27T05:12:57.502129Z", "modified": "2026-01-27T05:12:57.502129Z", "relationship_type": "indicates", "source_ref": "indicator--34d63281-49c0-4def-8df6-2104de7dc281", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37d288a-c56e-4a9d-9dda-c890800d9a7e", "created": "2026-01-27T05:12:57.502308Z", "modified": "2026-01-27T05:12:57.502308Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonesheriff.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.502308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe1e3824-5a0a-4d9f-b7cb-7890c696d576", "created": "2026-01-27T05:12:57.503426Z", "modified": "2026-01-27T05:12:57.503426Z", "relationship_type": "indicates", "source_ref": "indicator--b37d288a-c56e-4a9d-9dda-c890800d9a7e", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6519ce-35ad-42de-9bc2-6943bdb1fc25", "created": "2026-01-27T05:12:57.503608Z", "modified": "2026-01-27T05:12:57.503608Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellmonitoring.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.503608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28aba22d-71fe-4265-8301-5536ec96278f", "created": "2026-01-27T05:12:57.504302Z", "modified": "2026-01-27T05:12:57.504302Z", "relationship_type": "indicates", "source_ref": "indicator--1b6519ce-35ad-42de-9bc2-6943bdb1fc25", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980f553d-59d1-4f8f-8f08-f865fab73f1e", "created": "2026-01-27T05:12:57.50448Z", "modified": "2026-01-27T05:12:57.50448Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cellmonitoring.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.50448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62128409-1060-40cf-a8d4-8b7f7c0d3281", "created": "2026-01-27T05:12:57.505182Z", "modified": "2026-01-27T05:12:57.505182Z", "relationship_type": "indicates", "source_ref": "indicator--980f553d-59d1-4f8f-8f08-f865fab73f1e", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2431e57a-f615-4d7d-9bc2-3be88f378b96", "created": "2026-01-27T05:12:57.50536Z", "modified": "2026-01-27T05:12:57.50536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobile-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.50536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62ee3232-fcab-44a5-beee-78a21802d6a0", "created": "2026-01-27T05:12:57.506053Z", "modified": "2026-01-27T05:12:57.506053Z", "relationship_type": "indicates", "source_ref": "indicator--2431e57a-f615-4d7d-9bc2-3be88f378b96", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c790d0d-9d68-48ff-97c9-9a01fa1ef412", "created": "2026-01-27T05:12:57.50623Z", "modified": "2026-01-27T05:12:57.50623Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.emobilespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.50623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cd1a32f-5a9d-45b2-a819-ec0badbfb355", "created": "2026-01-27T05:12:57.506922Z", "modified": "2026-01-27T05:12:57.506922Z", "relationship_type": "indicates", "source_ref": "indicator--8c790d0d-9d68-48ff-97c9-9a01fa1ef412", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c2d08e-db32-474e-9481-513363628d05", "created": "2026-01-27T05:12:57.5071Z", "modified": "2026-01-27T05:12:57.5071Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonesheriff.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.5071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b55045e-19d7-474f-9a48-a665d04d89f0", "created": "2026-01-27T05:12:57.507785Z", "modified": "2026-01-27T05:12:57.507785Z", "relationship_type": "indicates", "source_ref": "indicator--07c2d08e-db32-474e-9481-513363628d05", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571df25b-fe2e-42af-a13a-57848abcd9e7", "created": "2026-01-27T05:12:57.507961Z", "modified": "2026-01-27T05:12:57.507961Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phonesheriff.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.507961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48eb0995-7106-4214-b621-6a5c0972beed", "created": "2026-01-27T05:12:57.508629Z", "modified": "2026-01-27T05:12:57.508629Z", "relationship_type": "indicates", "source_ref": "indicator--571df25b-fe2e-42af-a13a-57848abcd9e7", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfb25ba-c3d1-475c-a699-0f6152ec3744", "created": "2026-01-27T05:12:57.50882Z", "modified": "2026-01-27T05:12:57.50882Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.retinax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.50882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4475aa4-99a7-4547-bf75-6020e14b92e0", "created": "2026-01-27T05:12:57.509497Z", "modified": "2026-01-27T05:12:57.509497Z", "relationship_type": "indicates", "source_ref": "indicator--bdfb25ba-c3d1-475c-a699-0f6152ec3744", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f04dec-966d-47fc-bcbf-ad3181e4352f", "created": "2026-01-27T05:12:57.50967Z", "modified": "2026-01-27T05:12:57.50967Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='retinax.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.50967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f634b29f-e69c-4e08-a603-53edf7a52666", "created": "2026-01-27T05:12:57.510345Z", "modified": "2026-01-27T05:12:57.510345Z", "relationship_type": "indicates", "source_ref": "indicator--22f04dec-966d-47fc-bcbf-ad3181e4352f", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3a1ab0-943a-4866-85c3-0f95eabf8eaa", "created": "2026-01-27T05:12:57.51052Z", "modified": "2026-01-27T05:12:57.51052Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retina.phonesheriff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.51052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e694a647-8e27-444b-ad62-ced8df8d9283", "created": "2026-01-27T05:12:57.511313Z", "modified": "2026-01-27T05:12:57.511313Z", "relationship_type": "indicates", "source_ref": "indicator--3f3a1ab0-943a-4866-85c3-0f95eabf8eaa", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa1ba73-4b63-461c-b5d2-deec6c3f433d", "created": "2026-01-27T05:12:57.511491Z", "modified": "2026-01-27T05:12:57.511491Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retina21.ms41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.511491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bca752b7-5b1a-4b33-8f7c-59597165518d", "created": "2026-01-27T05:12:57.512161Z", "modified": "2026-01-27T05:12:57.512161Z", "relationship_type": "indicates", "source_ref": "indicator--bfa1ba73-4b63-461c-b5d2-deec6c3f433d", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e183c40-d61c-45fa-bf98-e64582b0feef", "created": "2026-01-27T05:12:57.512341Z", "modified": "2026-01-27T05:12:57.512341Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retina22.ms6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.512341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--457d5db4-f361-4f1e-a763-be76e310f317", "created": "2026-01-27T05:12:57.513012Z", "modified": "2026-01-27T05:12:57.513012Z", "relationship_type": "indicates", "source_ref": "indicator--2e183c40-d61c-45fa-bf98-e64582b0feef", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa93abd-c175-486d-ab6f-2b15872fbb4b", "created": "2026-01-27T05:12:57.513189Z", "modified": "2026-01-27T05:12:57.513189Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl22.retinaspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.513189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7670576e-6e72-4865-9742-7010a22915da", "created": "2026-01-27T05:12:57.513861Z", "modified": "2026-01-27T05:12:57.513861Z", "relationship_type": "indicates", "source_ref": "indicator--3fa93abd-c175-486d-ab6f-2b15872fbb4b", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d12803-c795-4416-a362-c0976276d463", "created": "2026-01-27T05:12:57.514042Z", "modified": "2026-01-27T05:12:57.514042Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.retinasoft.ephonetracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.514042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88429a5b-f2ff-4136-a9e0-709cd69d6a5d", "created": "2026-01-27T05:12:57.514721Z", "modified": "2026-01-27T05:12:57.514721Z", "relationship_type": "indicates", "source_ref": "indicator--b8d12803-c795-4416-a362-c0976276d463", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb01299-aea7-4b11-b9e4-b9f38f7fc0e1", "created": "2026-01-27T05:12:57.514917Z", "modified": "2026-01-27T05:12:57.514917Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl15.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.514917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c16f67a8-60f3-4fed-86f3-d56be3a8c3db", "created": "2026-01-27T05:12:57.51558Z", "modified": "2026-01-27T05:12:57.51558Z", "relationship_type": "indicates", "source_ref": "indicator--4fb01299-aea7-4b11-b9e4-b9f38f7fc0e1", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e123ae-2bef-4028-a2c8-d7fff5315000", "created": "2026-01-27T05:12:57.515765Z", "modified": "2026-01-27T05:12:57.515765Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl16.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.515765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ac22df9-9fea-45e0-9db1-20085f0ce483", "created": "2026-01-27T05:12:57.51643Z", "modified": "2026-01-27T05:12:57.51643Z", "relationship_type": "indicates", "source_ref": "indicator--76e123ae-2bef-4028-a2c8-d7fff5315000", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a757c220-173c-428c-8321-6bf41a5f1655", "created": "2026-01-27T05:12:57.516616Z", "modified": "2026-01-27T05:12:57.516616Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl17.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.516616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87e5cc1e-2bab-40cf-b609-2c1ed7bf41fa", "created": "2026-01-27T05:12:57.517294Z", "modified": "2026-01-27T05:12:57.517294Z", "relationship_type": "indicates", "source_ref": "indicator--a757c220-173c-428c-8321-6bf41a5f1655", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23b8e9a-73ca-4353-b797-45f8afa9d4cd", "created": "2026-01-27T05:12:57.517468Z", "modified": "2026-01-27T05:12:57.517468Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl18.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.517468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--379daa8a-1db8-4d7a-aad4-7cfcfdeba033", "created": "2026-01-27T05:12:57.518144Z", "modified": "2026-01-27T05:12:57.518144Z", "relationship_type": "indicates", "source_ref": "indicator--f23b8e9a-73ca-4353-b797-45f8afa9d4cd", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177bed7c-416d-42cf-9bea-692e5834e47c", "created": "2026-01-27T05:12:57.518321Z", "modified": "2026-01-27T05:12:57.518321Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl19.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.518321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdd06294-f325-44c7-9c39-fc95d096abb3", "created": "2026-01-27T05:12:57.519046Z", "modified": "2026-01-27T05:12:57.519046Z", "relationship_type": "indicates", "source_ref": "indicator--177bed7c-416d-42cf-9bea-692e5834e47c", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f93751-782e-4096-8a22-d5e1edce516b", "created": "2026-01-27T05:12:57.519233Z", "modified": "2026-01-27T05:12:57.519233Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl20.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.519233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c818df82-8000-4801-b15c-7c13d1dd0c2c", "created": "2026-01-27T05:12:57.520036Z", "modified": "2026-01-27T05:12:57.520036Z", "relationship_type": "indicates", "source_ref": "indicator--50f93751-782e-4096-8a22-d5e1edce516b", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b1e345-1cc6-4807-b134-fc3dcac57aed", "created": "2026-01-27T05:12:57.520215Z", "modified": "2026-01-27T05:12:57.520215Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rspl21.nanny.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.520215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ebcd47-a8e4-43b4-ac02-45802ccc4814", "created": "2026-01-27T05:12:57.520894Z", "modified": "2026-01-27T05:12:57.520894Z", "relationship_type": "indicates", "source_ref": "indicator--28b1e345-1cc6-4807-b134-fc3dcac57aed", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ddfa7c-dcfa-4671-ab01-e4d6c4e58f99", "created": "2026-01-27T05:12:57.521074Z", "modified": "2026-01-27T05:12:57.521074Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F57CBB4CBB9834A14AF675222CECA6A0D26D838E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.521074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cf32d3e-5d5f-44f7-8228-ac6dd9e2a610", "created": "2026-01-27T05:12:57.521919Z", "modified": "2026-01-27T05:12:57.521919Z", "relationship_type": "indicates", "source_ref": "indicator--79ddfa7c-dcfa-4671-ab01-e4d6c4e58f99", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79d21db-1604-4d3d-bd81-3b3c7156aaf0", "created": "2026-01-27T05:12:57.522107Z", "modified": "2026-01-27T05:12:57.522107Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F28F3A97D25E51AB266E56D3B80F04747D242E50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.522107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85ab67a5-2f06-49bf-bce9-1613a9483e18", "created": "2026-01-27T05:12:57.5229Z", "modified": "2026-01-27T05:12:57.5229Z", "relationship_type": "indicates", "source_ref": "indicator--b79d21db-1604-4d3d-bd81-3b3c7156aaf0", "target_ref": "malware--7350382e-887c-410e-9724-25a46e49c1d0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d", "created": "2026-01-27T05:12:57.52308Z", "modified": "2026-01-27T05:12:57.52308Z", "name": "OwnSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65190345-aedd-4759-99aa-d941854506ad", "created": "2026-01-27T05:12:57.523249Z", "modified": "2026-01-27T05:12:57.523249Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user.ownspy.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.523249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cd4a6d6-001c-4f85-b7a7-572a247ecfca", "created": "2026-01-27T05:12:57.523935Z", "modified": "2026-01-27T05:12:57.523935Z", "relationship_type": "indicates", "source_ref": "indicator--65190345-aedd-4759-99aa-d941854506ad", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d218d3d3-faa6-4c59-8ed3-409d3b61504b", "created": "2026-01-27T05:12:57.524115Z", "modified": "2026-01-27T05:12:57.524115Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobileinnova.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.524115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0c28cde-b84d-44ab-a7b8-e80d12eaf90a", "created": "2026-01-27T05:12:57.524801Z", "modified": "2026-01-27T05:12:57.524801Z", "relationship_type": "indicates", "source_ref": "indicator--d218d3d3-faa6-4c59-8ed3-409d3b61504b", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cb1fea-d7b1-406a-a971-26b550fde027", "created": "2026-01-27T05:12:57.524978Z", "modified": "2026-01-27T05:12:57.524978Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ownspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.524978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1afbba79-f327-441e-8f99-8f358d6702e3", "created": "2026-01-27T05:12:57.525645Z", "modified": "2026-01-27T05:12:57.525645Z", "relationship_type": "indicates", "source_ref": "indicator--34cb1fea-d7b1-406a-a971-26b550fde027", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ee739c-283d-4f92-87c2-58b21e6bee34", "created": "2026-01-27T05:12:57.525841Z", "modified": "2026-01-27T05:12:57.525841Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='en.ownspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.525841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ba0eaab-ef30-4a12-93af-f08deef5eb7e", "created": "2026-01-27T05:12:57.52653Z", "modified": "2026-01-27T05:12:57.52653Z", "relationship_type": "indicates", "source_ref": "indicator--79ee739c-283d-4f92-87c2-58b21e6bee34", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fdc980-15e3-4b09-a9dc-edbd2abddbc5", "created": "2026-01-27T05:12:57.526711Z", "modified": "2026-01-27T05:12:57.526711Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webdetetive.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.526711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcb2595e-f416-4816-a6cc-ff8dbfb5acac", "created": "2026-01-27T05:12:57.527402Z", "modified": "2026-01-27T05:12:57.527402Z", "relationship_type": "indicates", "source_ref": "indicator--35fdc980-15e3-4b09-a9dc-edbd2abddbc5", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcf138f-cb4d-424a-9c36-7ba9776844cb", "created": "2026-01-27T05:12:57.527578Z", "modified": "2026-01-27T05:12:57.527578Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ownspy.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.527578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7117a0b6-74c9-47d0-afc1-041378298bf4", "created": "2026-01-27T05:12:57.528383Z", "modified": "2026-01-27T05:12:57.528383Z", "relationship_type": "indicates", "source_ref": "indicator--4bcf138f-cb4d-424a-9c36-7ba9776844cb", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10fa2ea-0c49-4ba3-8de7-3ea0661cdd11", "created": "2026-01-27T05:12:57.528562Z", "modified": "2026-01-27T05:12:57.528562Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='saferspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.528562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38eac615-b9cb-4d96-8745-a339bdd5d12d", "created": "2026-01-27T05:12:57.529238Z", "modified": "2026-01-27T05:12:57.529238Z", "relationship_type": "indicates", "source_ref": "indicator--a10fa2ea-0c49-4ba3-8de7-3ea0661cdd11", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3018ca-5d99-4077-b1ef-c674ceafd839", "created": "2026-01-27T05:12:57.529424Z", "modified": "2026-01-27T05:12:57.529424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.webdetetive.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.529424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e6ebc04-7913-4fa1-8f5e-d609a8a565a8", "created": "2026-01-27T05:12:57.530126Z", "modified": "2026-01-27T05:12:57.530126Z", "relationship_type": "indicates", "source_ref": "indicator--4b3018ca-5d99-4077-b1ef-c674ceafd839", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685ca931-5a3d-4dc1-8241-69a1547ef2da", "created": "2026-01-27T05:12:57.530306Z", "modified": "2026-01-27T05:12:57.530306Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.530306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f04dc5e-868f-4b48-872c-c7571668ea98", "created": "2026-01-27T05:12:57.530994Z", "modified": "2026-01-27T05:12:57.530994Z", "relationship_type": "indicates", "source_ref": "indicator--685ca931-5a3d-4dc1-8241-69a1547ef2da", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b290d6-7a6e-4ee0-b4d2-dcc6e2c9c948", "created": "2026-01-27T05:12:57.531172Z", "modified": "2026-01-27T05:12:57.531172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.webdetetive.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.531172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c845fdd-bffb-4878-a3c8-1d2b8fec6cb2", "created": "2026-01-27T05:12:57.531879Z", "modified": "2026-01-27T05:12:57.531879Z", "relationship_type": "indicates", "source_ref": "indicator--38b290d6-7a6e-4ee0-b4d2-dcc6e2c9c948", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2683fba-04eb-44e1-adb8-5e5d1731ca74", "created": "2026-01-27T05:12:57.532068Z", "modified": "2026-01-27T05:12:57.532068Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webdetetive.era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.532068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99bc568b-f203-4eae-bc1b-6859e41ad34a", "created": "2026-01-27T05:12:57.532782Z", "modified": "2026-01-27T05:12:57.532782Z", "relationship_type": "indicates", "source_ref": "indicator--c2683fba-04eb-44e1-adb8-5e5d1731ca74", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e639185-9e02-436e-b2bb-b4103a923eff", "created": "2026-01-27T05:12:57.532962Z", "modified": "2026-01-27T05:12:57.532962Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='6287970dd9.era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.532962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b75e8ef1-23c9-4715-a0bb-0953f20f146e", "created": "2026-01-27T05:12:57.533639Z", "modified": "2026-01-27T05:12:57.533639Z", "relationship_type": "indicates", "source_ref": "indicator--1e639185-9e02-436e-b2bb-b4103a923eff", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a59e32b4-e0d8-4967-8881-8e723bc0f35a", "created": "2026-01-27T05:12:57.533832Z", "modified": "2026-01-27T05:12:57.533832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c9db9bbc8d.era3000.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.533832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc6b574e-45e8-4b71-a657-9fd83009d596", "created": "2026-01-27T05:12:57.534511Z", "modified": "2026-01-27T05:12:57.534511Z", "relationship_type": "indicates", "source_ref": "indicator--a59e32b4-e0d8-4967-8881-8e723bc0f35a", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a951c3ca-6093-499d-a124-727f1a0d8a01", "created": "2026-01-27T05:12:57.534691Z", "modified": "2026-01-27T05:12:57.534691Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bcf96117b47fac6666eec22664c721546b45dcf42857f49277d1cb7e8f90b70a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.534691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3c0a732-1d66-4c44-bd3b-f45057ebfe20", "created": "2026-01-27T05:12:57.535547Z", "modified": "2026-01-27T05:12:57.535547Z", "relationship_type": "indicates", "source_ref": "indicator--a951c3ca-6093-499d-a124-727f1a0d8a01", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866efa47-332a-4a87-984e-1548c9498c40", "created": "2026-01-27T05:12:57.535727Z", "modified": "2026-01-27T05:12:57.535727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1bc37d9be07ffad8b21f673f2b678b24ad0a53f51fe53598544da549fe4d4e66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.535727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01fe77c1-f32d-4082-ad28-d50a57780e12", "created": "2026-01-27T05:12:57.536701Z", "modified": "2026-01-27T05:12:57.536701Z", "relationship_type": "indicates", "source_ref": "indicator--866efa47-332a-4a87-984e-1548c9498c40", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4161d4f5-9a90-4981-9d1e-a18b0ba95aae", "created": "2026-01-27T05:12:57.536957Z", "modified": "2026-01-27T05:12:57.536957Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ownspy.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.536957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c87ba96-9fe1-4431-9499-9ba6ae123c55", "created": "2026-01-27T05:12:57.537708Z", "modified": "2026-01-27T05:12:57.537708Z", "relationship_type": "indicates", "source_ref": "indicator--4161d4f5-9a90-4981-9d1e-a18b0ba95aae", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ef2bff-57be-496e-bad8-2867c5f5f486", "created": "2026-01-27T05:12:57.537917Z", "modified": "2026-01-27T05:12:57.537917Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.system.kernel']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.537917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7236ebcb-6541-4240-9412-cba2639b1c4a", "created": "2026-01-27T05:12:57.538585Z", "modified": "2026-01-27T05:12:57.538585Z", "relationship_type": "indicates", "source_ref": "indicator--60ef2bff-57be-496e-bad8-2867c5f5f486", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0563fd6-0345-46ae-9738-140c3ff210e9", "created": "2026-01-27T05:12:57.538779Z", "modified": "2026-01-27T05:12:57.538779Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CA5304E94F4BC97DA9D147E76858DBF70AB8B4E6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.538779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7ed069f-0527-4c7e-8d2a-ab12f1c9418a", "created": "2026-01-27T05:12:57.539552Z", "modified": "2026-01-27T05:12:57.539552Z", "relationship_type": "indicates", "source_ref": "indicator--e0563fd6-0345-46ae-9738-140c3ff210e9", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43abe59d-471c-4458-8a92-0c566b4472cd", "created": "2026-01-27T05:12:57.539728Z", "modified": "2026-01-27T05:12:57.539728Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='14A071616D4BC37F08BE865D375101F4C963777A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.539728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d857b2d2-a5b1-481b-aadd-d41d22ab46ca", "created": "2026-01-27T05:12:57.540511Z", "modified": "2026-01-27T05:12:57.540511Z", "relationship_type": "indicates", "source_ref": "indicator--43abe59d-471c-4458-8a92-0c566b4472cd", "target_ref": "malware--7e5a98b4-39a4-44bd-9095-c4105768297d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--39b8c38f-64f7-4204-8693-b211caf0759d", "created": "2026-01-27T05:12:57.540691Z", "modified": "2026-01-27T05:12:57.540691Z", "name": "Cocospy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea39c376-b008-4c5a-9b86-8a5074c34bc9", "created": "2026-01-27T05:12:57.54088Z", "modified": "2026-01-27T05:12:57.54088Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alog.umeng.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.54088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5684e74-f7da-4a99-8964-63d98bc596fe", "created": "2026-01-27T05:12:57.541548Z", "modified": "2026-01-27T05:12:57.541548Z", "relationship_type": "indicates", "source_ref": "indicator--ea39c376-b008-4c5a-9b86-8a5074c34bc9", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df66b3c3-c52c-4d80-aca5-ee30f851861b", "created": "2026-01-27T05:12:57.541723Z", "modified": "2026-01-27T05:12:57.541723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app-api.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.541723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bc869fc-403a-4b4a-98c4-bb8d2785d1f2", "created": "2026-01-27T05:12:57.542421Z", "modified": "2026-01-27T05:12:57.542421Z", "relationship_type": "indicates", "source_ref": "indicator--df66b3c3-c52c-4d80-aca5-ee30f851861b", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34a1b16-1f23-4fa2-ad7f-d422e272c820", "created": "2026-01-27T05:12:57.542605Z", "modified": "2026-01-27T05:12:57.542605Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.api.spyzie.wondershare.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.542605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db8dc4bd-b438-4c94-a317-ee40a45c8289", "created": "2026-01-27T05:12:57.543388Z", "modified": "2026-01-27T05:12:57.543388Z", "relationship_type": "indicates", "source_ref": "indicator--f34a1b16-1f23-4fa2-ad7f-d422e272c820", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff169ee7-390d-46c8-b350-c39f74433d17", "created": "2026-01-27T05:12:57.543579Z", "modified": "2026-01-27T05:12:57.543579Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.543579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8f91abb-9de8-4f6d-8dae-796ba35a0f82", "created": "2026-01-27T05:12:57.544363Z", "modified": "2026-01-27T05:12:57.544363Z", "relationship_type": "indicates", "source_ref": "indicator--ff169ee7-390d-46c8-b350-c39f74433d17", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c2f90d-6986-455f-b557-a2c99f19a41a", "created": "2026-01-27T05:12:57.544545Z", "modified": "2026-01-27T05:12:57.544545Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='b.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.544545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42519251-d676-45c9-a689-809733cd95b3", "created": "2026-01-27T05:12:57.545369Z", "modified": "2026-01-27T05:12:57.545369Z", "relationship_type": "indicates", "source_ref": "indicator--38c2f90d-6986-455f-b557-a2c99f19a41a", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744cb0ce-eb66-41d8-9991-b927ee162f87", "created": "2026-01-27T05:12:57.545549Z", "modified": "2026-01-27T05:12:57.545549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.545549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0e7a165-4d37-4c02-9311-30bebd942ae4", "created": "2026-01-27T05:12:57.546236Z", "modified": "2026-01-27T05:12:57.546236Z", "relationship_type": "indicates", "source_ref": "indicator--744cb0ce-eb66-41d8-9991-b927ee162f87", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096ba064-f5b9-4f56-b455-454a5f68d222", "created": "2026-01-27T05:12:57.546415Z", "modified": "2026-01-27T05:12:57.546415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.546415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75d9991c-fd3e-48ee-bd07-ebfcf3a60a1c", "created": "2026-01-27T05:12:57.547109Z", "modified": "2026-01-27T05:12:57.547109Z", "relationship_type": "indicates", "source_ref": "indicator--096ba064-f5b9-4f56-b455-454a5f68d222", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adcc563-69f1-4737-ae32-74bad823b725", "created": "2026-01-27T05:12:57.547287Z", "modified": "2026-01-27T05:12:57.547287Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.547287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9258340-30a4-46d5-894f-3ab0f324801f", "created": "2026-01-27T05:12:57.547971Z", "modified": "2026-01-27T05:12:57.547971Z", "relationship_type": "indicates", "source_ref": "indicator--2adcc563-69f1-4737-ae32-74bad823b725", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ffc3c7c-e24b-4eb4-b70c-dc369b0c4544", "created": "2026-01-27T05:12:57.548148Z", "modified": "2026-01-27T05:12:57.548148Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='f.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.548148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--246b05cb-0262-492e-a17a-6f9bac8b562e", "created": "2026-01-27T05:12:57.548829Z", "modified": "2026-01-27T05:12:57.548829Z", "relationship_type": "indicates", "source_ref": "indicator--0ffc3c7c-e24b-4eb4-b70c-dc369b0c4544", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7c9ea5-ba50-40e4-81d7-ba273024cffe", "created": "2026-01-27T05:12:57.549006Z", "modified": "2026-01-27T05:12:57.549006Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fonemonitor.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.549006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71526660-e182-4e10-8db2-4126a953d7ca", "created": "2026-01-27T05:12:57.549673Z", "modified": "2026-01-27T05:12:57.549673Z", "relationship_type": "indicates", "source_ref": "indicator--8b7c9ea5-ba50-40e4-81d7-ba273024cffe", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f594528-6519-4d20-bf8f-e49d5b901cae", "created": "2026-01-27T05:12:57.54987Z", "modified": "2026-01-27T05:12:57.54987Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='g.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.54987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e7f5430-28b7-4356-bf73-07c26e32b080", "created": "2026-01-27T05:12:57.550535Z", "modified": "2026-01-27T05:12:57.550535Z", "relationship_type": "indicates", "source_ref": "indicator--4f594528-6519-4d20-bf8f-e49d5b901cae", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0056dc77-fb44-4416-a492-ed709a4b2608", "created": "2026-01-27T05:12:57.550708Z", "modified": "2026-01-27T05:12:57.550708Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-api.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.550708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c4520f4-ae51-4f28-ba1d-1cd3b044d716", "created": "2026-01-27T05:12:57.551405Z", "modified": "2026-01-27T05:12:57.551405Z", "relationship_type": "indicates", "source_ref": "indicator--0056dc77-fb44-4416-a492-ed709a4b2608", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ef8c62-3789-468e-b024-bfe429727072", "created": "2026-01-27T05:12:57.551585Z", "modified": "2026-01-27T05:12:57.551585Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.api.spyzie.wondershare.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.551585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9012b8ae-3c73-40b8-aa9a-e879b9d09a8f", "created": "2026-01-27T05:12:57.552304Z", "modified": "2026-01-27T05:12:57.552304Z", "relationship_type": "indicates", "source_ref": "indicator--02ef8c62-3789-468e-b024-bfe429727072", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3d8a98-fa2a-4a6f-8aad-29450e565688", "created": "2026-01-27T05:12:57.552479Z", "modified": "2026-01-27T05:12:57.552479Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='h.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.552479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed53937e-9bd6-413f-9080-6dc1aaab6197", "created": "2026-01-27T05:12:57.553284Z", "modified": "2026-01-27T05:12:57.553284Z", "relationship_type": "indicates", "source_ref": "indicator--4e3d8a98-fa2a-4a6f-8aad-29450e565688", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf84e872-9455-46c4-948b-146b021bc8e6", "created": "2026-01-27T05:12:57.553465Z", "modified": "2026-01-27T05:12:57.553465Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.fonemonitor.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.553465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c41bca50-9555-4b89-b56d-cdcc4917c6e0", "created": "2026-01-27T05:12:57.554162Z", "modified": "2026-01-27T05:12:57.554162Z", "relationship_type": "indicates", "source_ref": "indicator--cf84e872-9455-46c4-948b-146b021bc8e6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605f159a-3b8e-4b94-81d1-fc25cd8d6eef", "created": "2026-01-27T05:12:57.554341Z", "modified": "2026-01-27T05:12:57.554341Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.cocospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.554341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd78abf5-8236-4b4b-a39d-cfc89d2efe33", "created": "2026-01-27T05:12:57.555027Z", "modified": "2026-01-27T05:12:57.555027Z", "relationship_type": "indicates", "source_ref": "indicator--605f159a-3b8e-4b94-81d1-fc25cd8d6eef", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268b7b72-21c8-411e-9bd7-117c005e4511", "created": "2026-01-27T05:12:57.555206Z", "modified": "2026-01-27T05:12:57.555206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.minspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.555206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad82cdbd-6f43-43d5-9270-8fb056f94ef4", "created": "2026-01-27T05:12:57.555883Z", "modified": "2026-01-27T05:12:57.555883Z", "relationship_type": "indicates", "source_ref": "indicator--268b7b72-21c8-411e-9bd7-117c005e4511", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad89e6fe-9379-4131-b0a3-499547480526", "created": "2026-01-27T05:12:57.556059Z", "modified": "2026-01-27T05:12:57.556059Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.neatspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.556059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6da1e7f-c17e-4249-81bb-a61c80cffdb0", "created": "2026-01-27T05:12:57.556761Z", "modified": "2026-01-27T05:12:57.556761Z", "relationship_type": "indicates", "source_ref": "indicator--ad89e6fe-9379-4131-b0a3-499547480526", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1010a69-916a-4c42-9b59-3ff78e72e260", "created": "2026-01-27T05:12:57.556941Z", "modified": "2026-01-27T05:12:57.556941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.safespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.556941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11b9d829-31fb-4e99-9f02-50a1bd4b9b7e", "created": "2026-01-27T05:12:57.557598Z", "modified": "2026-01-27T05:12:57.557598Z", "relationship_type": "indicates", "source_ref": "indicator--e1010a69-916a-4c42-9b59-3ff78e72e260", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a77bfe-af49-4a1d-b638-b4b66943c8fd", "created": "2026-01-27T05:12:57.557787Z", "modified": "2026-01-27T05:12:57.557787Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.557787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ce12d3c-5747-42e6-af3d-cb90d25afbf5", "created": "2026-01-27T05:12:57.558472Z", "modified": "2026-01-27T05:12:57.558472Z", "relationship_type": "indicates", "source_ref": "indicator--c6a77bfe-af49-4a1d-b638-b4b66943c8fd", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce29929-cbd4-4ca8-bd22-f59bc2d4b2a2", "created": "2026-01-27T05:12:57.558646Z", "modified": "2026-01-27T05:12:57.558646Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyine.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.558646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d671d7e9-65f9-4f40-904d-394453505196", "created": "2026-01-27T05:12:57.559367Z", "modified": "2026-01-27T05:12:57.559367Z", "relationship_type": "indicates", "source_ref": "indicator--7ce29929-cbd4-4ca8-bd22-f59bc2d4b2a2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a411d396-42f5-4dd7-93b1-45c9dbb89bb6", "created": "2026-01-27T05:12:57.559543Z", "modified": "2026-01-27T05:12:57.559543Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyzie.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.559543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef1bc25f-c87e-40d9-b194-92300c3193b6", "created": "2026-01-27T05:12:57.560233Z", "modified": "2026-01-27T05:12:57.560233Z", "relationship_type": "indicates", "source_ref": "indicator--a411d396-42f5-4dd7-93b1-45c9dbb89bb6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e28bc3-a807-43b6-a52d-23ec6ed38d0e", "created": "2026-01-27T05:12:57.560411Z", "modified": "2026-01-27T05:12:57.560411Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.teensafe.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.560411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c22270cc-8518-4983-859f-4a297ecd6064", "created": "2026-01-27T05:12:57.561237Z", "modified": "2026-01-27T05:12:57.561237Z", "relationship_type": "indicates", "source_ref": "indicator--37e28bc3-a807-43b6-a52d-23ec6ed38d0e", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61401462-a2ec-4c05-8d0d-9f91a5c0374d", "created": "2026-01-27T05:12:57.561417Z", "modified": "2026-01-27T05:12:57.561417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mintrack.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.561417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2dddc74-9abd-4754-b8de-390ad0b9f1f8", "created": "2026-01-27T05:12:57.5621Z", "modified": "2026-01-27T05:12:57.5621Z", "relationship_type": "indicates", "source_ref": "indicator--61401462-a2ec-4c05-8d0d-9f91a5c0374d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5a60b7-aa8b-4e05-8329-97f0626e6d80", "created": "2026-01-27T05:12:57.562277Z", "modified": "2026-01-27T05:12:57.562277Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.562277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e5ecc90-3b00-48ac-9317-95b78ef0725a", "created": "2026-01-27T05:12:57.562958Z", "modified": "2026-01-27T05:12:57.562958Z", "relationship_type": "indicates", "source_ref": "indicator--bb5a60b7-aa8b-4e05-8329-97f0626e6d80", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265589e9-5584-49e5-b0fd-bee09e75ddc1", "created": "2026-01-27T05:12:57.563134Z", "modified": "2026-01-27T05:12:57.563134Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neatspy.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.563134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e40e10c-30fa-48e6-8e8e-dfea493d486f", "created": "2026-01-27T05:12:57.563807Z", "modified": "2026-01-27T05:12:57.563807Z", "relationship_type": "indicates", "source_ref": "indicator--265589e9-5584-49e5-b0fd-bee09e75ddc1", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc56a1b-e375-4c9f-b784-e1e5ed4a535b", "created": "2026-01-27T05:12:57.563983Z", "modified": "2026-01-27T05:12:57.563983Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonedata.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.563983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10789ff4-9852-4877-90e0-b40632a2b070", "created": "2026-01-27T05:12:57.564648Z", "modified": "2026-01-27T05:12:57.564648Z", "relationship_type": "indicates", "source_ref": "indicator--abc56a1b-e375-4c9f-b784-e1e5ed4a535b", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaac2bd-1691-4e51-86a9-a37469afff39", "created": "2026-01-27T05:12:57.564844Z", "modified": "2026-01-27T05:12:57.564844Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app-api.phonedata.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.564844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de84890c-a4e1-4dc8-83a0-d77e72423efe", "created": "2026-01-27T05:12:57.565528Z", "modified": "2026-01-27T05:12:57.565528Z", "relationship_type": "indicates", "source_ref": "indicator--caaac2bd-1691-4e51-86a9-a37469afff39", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d383d6-3447-429c-b2d2-2f097914bfca", "created": "2026-01-27T05:12:57.565709Z", "modified": "2026-01-27T05:12:57.565709Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-api.phonedata.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.565709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d75313e0-2c95-49d2-a2e8-2add7a258e3d", "created": "2026-01-27T05:12:57.566402Z", "modified": "2026-01-27T05:12:57.566402Z", "relationship_type": "indicates", "source_ref": "indicator--b8d383d6-3447-429c-b2d2-2f097914bfca", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeb0167-91a7-4e4e-be86-e793fa58b0a9", "created": "2026-01-27T05:12:57.566584Z", "modified": "2026-01-27T05:12:57.566584Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie-a.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.566584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0030a342-7e2a-4373-87e8-30d65a982a62", "created": "2026-01-27T05:12:57.567284Z", "modified": "2026-01-27T05:12:57.567284Z", "relationship_type": "indicates", "source_ref": "indicator--eaeb0167-91a7-4e4e-be86-e793fa58b0a9", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d8d8b1-2051-4fe5-864f-d53b07c2cff6", "created": "2026-01-27T05:12:57.567459Z", "modified": "2026-01-27T05:12:57.567459Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mg-spyzie.oss-us-west-1.aliyuncs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.567459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19a23e7b-6597-4c8a-9c71-21794923543a", "created": "2026-01-27T05:12:57.568187Z", "modified": "2026-01-27T05:12:57.568187Z", "relationship_type": "indicates", "source_ref": "indicator--66d8d8b1-2051-4fe5-864f-d53b07c2cff6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea65538e-efb6-4c5a-96e6-5110d16e03da", "created": "2026-01-27T05:12:57.568367Z", "modified": "2026-01-27T05:12:57.568367Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s.appjiagu.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.568367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--423f5bde-d9d2-4db4-85d2-28247fb379dc", "created": "2026-01-27T05:12:57.569176Z", "modified": "2026-01-27T05:12:57.569176Z", "relationship_type": "indicates", "source_ref": "indicator--ea65538e-efb6-4c5a-96e6-5110d16e03da", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c7a41b-bd4f-4fc6-8ada-8ca6d012c238", "created": "2026-01-27T05:12:57.569357Z", "modified": "2026-01-27T05:12:57.569357Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safespy.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.569357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bc48a4f-b899-4fbd-bf27-2237d9d39c86", "created": "2026-01-27T05:12:57.57004Z", "modified": "2026-01-27T05:12:57.57004Z", "relationship_type": "indicates", "source_ref": "indicator--e1c7a41b-bd4f-4fc6-8ada-8ca6d012c238", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeb9898-87db-41bd-9a20-7f807a19b755", "created": "2026-01-27T05:12:57.570219Z", "modified": "2026-01-27T05:12:57.570219Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sp.kuuvv.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.570219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e94ce9a-0909-4fa2-8908-bfc0aa1d3d99", "created": "2026-01-27T05:12:57.570898Z", "modified": "2026-01-27T05:12:57.570898Z", "relationship_type": "indicates", "source_ref": "indicator--ffeb9898-87db-41bd-9a20-7f807a19b755", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48f0213-0ae4-4cbd-87bf-a69e77977c85", "created": "2026-01-27T05:12:57.571076Z", "modified": "2026-01-27T05:12:57.571076Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kuuvv.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.571076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70ee4933-0028-40e8-a890-12c64639e3cb", "created": "2026-01-27T05:12:57.571847Z", "modified": "2026-01-27T05:12:57.571847Z", "relationship_type": "indicates", "source_ref": "indicator--c48f0213-0ae4-4cbd-87bf-a69e77977c85", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339116ca-4760-42a8-9016-a44b484b58f6", "created": "2026-01-27T05:12:57.572029Z", "modified": "2026-01-27T05:12:57.572029Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.572029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7be2811-e207-4187-bdd3-dcfc6d079585", "created": "2026-01-27T05:12:57.572712Z", "modified": "2026-01-27T05:12:57.572712Z", "relationship_type": "indicates", "source_ref": "indicator--339116ca-4760-42a8-9016-a44b484b58f6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca998e68-2b2e-4b77-b0b8-566b9d5003b1", "created": "2026-01-27T05:12:57.572907Z", "modified": "2026-01-27T05:12:57.572907Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackier.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.572907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--060e5b72-b518-4fcc-85d1-f0fc00366bc1", "created": "2026-01-27T05:12:57.573569Z", "modified": "2026-01-27T05:12:57.573569Z", "relationship_type": "indicates", "source_ref": "indicator--ca998e68-2b2e-4b77-b0b8-566b9d5003b1", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50868309-a526-4060-bda2-e68e8ddbbd08", "created": "2026-01-27T05:12:57.573758Z", "modified": "2026-01-27T05:12:57.573758Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackine.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.573758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d06808a-f46d-4314-b787-1da9320acf33", "created": "2026-01-27T05:12:57.574427Z", "modified": "2026-01-27T05:12:57.574427Z", "relationship_type": "indicates", "source_ref": "indicator--50868309-a526-4060-bda2-e68e8ddbbd08", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2f8112-d1cd-4f64-a442-3a14e27240c4", "created": "2026-01-27T05:12:57.574602Z", "modified": "2026-01-27T05:12:57.574602Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackpro.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.574602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9175155b-49f7-45b3-a5bf-678ef5ec3c01", "created": "2026-01-27T05:12:57.575321Z", "modified": "2026-01-27T05:12:57.575321Z", "relationship_type": "indicates", "source_ref": "indicator--eb2f8112-d1cd-4f64-a442-3a14e27240c4", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425f55e8-6c2a-4190-8a81-330c9575a096", "created": "2026-01-27T05:12:57.575509Z", "modified": "2026-01-27T05:12:57.575509Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptrack.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.575509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f870aa5b-9048-4756-afda-0975e3fc3dc8", "created": "2026-01-27T05:12:57.576452Z", "modified": "2026-01-27T05:12:57.576452Z", "relationship_type": "indicates", "source_ref": "indicator--425f55e8-6c2a-4190-8a81-330c9575a096", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a010300f-74df-4453-98de-59ecf29bee3a", "created": "2026-01-27T05:12:57.576652Z", "modified": "2026-01-27T05:12:57.576652Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.576652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51e153da-c256-4ac7-9291-dbec8e5344c4", "created": "2026-01-27T05:12:57.577483Z", "modified": "2026-01-27T05:12:57.577483Z", "relationship_type": "indicates", "source_ref": "indicator--a010300f-74df-4453-98de-59ecf29bee3a", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2154e471-c7c2-4ee9-a7a9-b8c7d3abcbb2", "created": "2026-01-27T05:12:57.577666Z", "modified": "2026-01-27T05:12:57.577666Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='best-mobile-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.577666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a25150b7-6f62-425c-a194-7136bf0523fd", "created": "2026-01-27T05:12:57.578375Z", "modified": "2026-01-27T05:12:57.578375Z", "relationship_type": "indicates", "source_ref": "indicator--2154e471-c7c2-4ee9-a7a9-b8c7d3abcbb2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a82cac-af8a-4c57-8d11-3f928e957a3a", "created": "2026-01-27T05:12:57.578556Z", "modified": "2026-01-27T05:12:57.578556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cocospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.578556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f69e53e-7fc9-4dd1-8084-9be5dd774428", "created": "2026-01-27T05:12:57.57924Z", "modified": "2026-01-27T05:12:57.57924Z", "relationship_type": "indicates", "source_ref": "indicator--39a82cac-af8a-4c57-8d11-3f928e957a3a", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31846231-8d57-4db1-9840-1dd6bed5cdc1", "created": "2026-01-27T05:12:57.579419Z", "modified": "2026-01-27T05:12:57.579419Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cocospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.579419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff7c8706-1b60-48d9-bcfb-351391a015c8", "created": "2026-01-27T05:12:57.5801Z", "modified": "2026-01-27T05:12:57.5801Z", "relationship_type": "indicates", "source_ref": "indicator--31846231-8d57-4db1-9840-1dd6bed5cdc1", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f071f996-10bf-4b8c-bb7c-5ed86fd675eb", "created": "2026-01-27T05:12:57.580276Z", "modified": "2026-01-27T05:12:57.580276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fonemonitor.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.580276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d42581a-0cdb-4d10-81c4-3471ab714979", "created": "2026-01-27T05:12:57.580955Z", "modified": "2026-01-27T05:12:57.580955Z", "relationship_type": "indicates", "source_ref": "indicator--f071f996-10bf-4b8c-bb7c-5ed86fd675eb", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ad1cb2-ae9b-422c-a162-3cbbc2d19d1b", "created": "2026-01-27T05:12:57.581132Z", "modified": "2026-01-27T05:12:57.581132Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='minspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.581132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ace5da6-da9c-43dc-b4c8-dfdfa30da8b4", "created": "2026-01-27T05:12:57.581832Z", "modified": "2026-01-27T05:12:57.581832Z", "relationship_type": "indicates", "source_ref": "indicator--38ad1cb2-ae9b-422c-a162-3cbbc2d19d1b", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01224cbf-d1d9-40a8-a3bd-ff450a1648df", "created": "2026-01-27T05:12:57.582008Z", "modified": "2026-01-27T05:12:57.582008Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neatspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.582008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--995da649-307a-48e8-94af-d1b032558455", "created": "2026-01-27T05:12:57.582681Z", "modified": "2026-01-27T05:12:57.582681Z", "relationship_type": "indicates", "source_ref": "indicator--01224cbf-d1d9-40a8-a3bd-ff450a1648df", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730cd73e-d78d-464e-a6f1-2b835d2f0571", "created": "2026-01-27T05:12:57.582884Z", "modified": "2026-01-27T05:12:57.582884Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.582884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2771953-d082-45d7-9d59-04144f6475e8", "created": "2026-01-27T05:12:57.583547Z", "modified": "2026-01-27T05:12:57.583547Z", "relationship_type": "indicates", "source_ref": "indicator--730cd73e-d78d-464e-a6f1-2b835d2f0571", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9dfbbb-d0c3-4915-9474-f540e06618c6", "created": "2026-01-27T05:12:57.583721Z", "modified": "2026-01-27T05:12:57.583721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyic.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.583721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cd09ada-cae7-453b-a237-2a0bde6882b3", "created": "2026-01-27T05:12:57.584404Z", "modified": "2026-01-27T05:12:57.584404Z", "relationship_type": "indicates", "source_ref": "indicator--8b9dfbbb-d0c3-4915-9474-f540e06618c6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77448af2-10ff-42d6-9dd7-4e33813ca3ca", "created": "2026-01-27T05:12:57.584576Z", "modified": "2026-01-27T05:12:57.584576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.584576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21bfb152-0751-4787-9f53-296233c0996e", "created": "2026-01-27T05:12:57.585372Z", "modified": "2026-01-27T05:12:57.585372Z", "relationship_type": "indicates", "source_ref": "indicator--77448af2-10ff-42d6-9dd7-4e33813ca3ca", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72921d5-e368-4c86-bcce-731a61765ff7", "created": "2026-01-27T05:12:57.585549Z", "modified": "2026-01-27T05:12:57.585549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyier.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.585549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb9a0de7-442f-4db5-9a07-72721d763cc4", "created": "2026-01-27T05:12:57.58623Z", "modified": "2026-01-27T05:12:57.58623Z", "relationship_type": "indicates", "source_ref": "indicator--b72921d5-e368-4c86-bcce-731a61765ff7", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc11259d-867f-4b99-8053-857d8f1ec327", "created": "2026-01-27T05:12:57.586405Z", "modified": "2026-01-27T05:12:57.586405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyine.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.586405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ce07243-9bb1-41f0-926c-4bd33c1795c0", "created": "2026-01-27T05:12:57.587083Z", "modified": "2026-01-27T05:12:57.587083Z", "relationship_type": "indicates", "source_ref": "indicator--fc11259d-867f-4b99-8053-857d8f1ec327", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9261c7ee-934b-4cbd-8380-f3658b6f0b57", "created": "2026-01-27T05:12:57.587259Z", "modified": "2026-01-27T05:12:57.587259Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyine.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.587259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0907a7b5-4b42-42ef-a0fb-d58bc47dadc7", "created": "2026-01-27T05:12:57.587943Z", "modified": "2026-01-27T05:12:57.587943Z", "relationship_type": "indicates", "source_ref": "indicator--9261c7ee-934b-4cbd-8380-f3658b6f0b57", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217a82a1-e379-4bca-b703-8c2644da766d", "created": "2026-01-27T05:12:57.588133Z", "modified": "2026-01-27T05:12:57.588133Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.588133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ff4cc3e-7770-43b5-8849-b67fa4823a68", "created": "2026-01-27T05:12:57.588817Z", "modified": "2026-01-27T05:12:57.588817Z", "relationship_type": "indicates", "source_ref": "indicator--217a82a1-e379-4bca-b703-8c2644da766d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508101a2-750b-41b5-b275-701e5aadebbe", "created": "2026-01-27T05:12:57.589Z", "modified": "2026-01-27T05:12:57.589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--137fab86-b44f-4304-8c9f-cbf0567b4a98", "created": "2026-01-27T05:12:57.589655Z", "modified": "2026-01-27T05:12:57.589655Z", "relationship_type": "indicates", "source_ref": "indicator--508101a2-750b-41b5-b275-701e5aadebbe", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159909c5-2410-4acd-8a2e-098bc5d930bc", "created": "2026-01-27T05:12:57.589849Z", "modified": "2026-01-27T05:12:57.589849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyzie.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.589849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8b3b3d1-73be-465c-9366-907350fb8623", "created": "2026-01-27T05:12:57.590518Z", "modified": "2026-01-27T05:12:57.590518Z", "relationship_type": "indicates", "source_ref": "indicator--159909c5-2410-4acd-8a2e-098bc5d930bc", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff1b90b-e7fe-4d76-8414-8074f35741ed", "created": "2026-01-27T05:12:57.590691Z", "modified": "2026-01-27T05:12:57.590691Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teensafe.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.590691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a527ea7-127e-4920-bc4b-f5671523e1c9", "created": "2026-01-27T05:12:57.591376Z", "modified": "2026-01-27T05:12:57.591376Z", "relationship_type": "indicates", "source_ref": "indicator--dff1b90b-e7fe-4d76-8414-8074f35741ed", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcacea6-4050-45e1-b1de-00385168798d", "created": "2026-01-27T05:12:57.591549Z", "modified": "2026-01-27T05:12:57.591549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teensoftware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.591549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c4d6eb6-51d6-4712-b9e0-5c5769cb1c96", "created": "2026-01-27T05:12:57.592237Z", "modified": "2026-01-27T05:12:57.592237Z", "relationship_type": "indicates", "source_ref": "indicator--cfcacea6-4050-45e1-b1de-00385168798d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80927229-60c0-48ac-964b-f86806bac825", "created": "2026-01-27T05:12:57.59241Z", "modified": "2026-01-27T05:12:57.59241Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.fonemonitor.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.59241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e92f1b3-9aca-4a40-8d0c-fb1ac73f659a", "created": "2026-01-27T05:12:57.593217Z", "modified": "2026-01-27T05:12:57.593217Z", "relationship_type": "indicates", "source_ref": "indicator--80927229-60c0-48ac-964b-f86806bac825", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a527d7f-e8ca-4fec-a452-8b59bce8a5e6", "created": "2026-01-27T05:12:57.593394Z", "modified": "2026-01-27T05:12:57.593394Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.minspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.593394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d49c3d3d-7758-4bc6-9ef2-6e1e58e6a3f5", "created": "2026-01-27T05:12:57.594076Z", "modified": "2026-01-27T05:12:57.594076Z", "relationship_type": "indicates", "source_ref": "indicator--4a527d7f-e8ca-4fec-a452-8b59bce8a5e6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0e5e04-87c4-4de0-9f92-77cd031a03cd", "created": "2026-01-27T05:12:57.594251Z", "modified": "2026-01-27T05:12:57.594251Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyic.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.594251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f6699e4-7d0c-4a5d-a41c-a3efd3d7a6ae", "created": "2026-01-27T05:12:57.59493Z", "modified": "2026-01-27T05:12:57.59493Z", "relationship_type": "indicates", "source_ref": "indicator--8b0e5e04-87c4-4de0-9f92-77cd031a03cd", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b9efe0-cf65-4f23-ab17-9f82dab33cb8", "created": "2026-01-27T05:12:57.595104Z", "modified": "2026-01-27T05:12:57.595104Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyzie.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.595104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac344cdd-36dc-4919-ace7-8a47b8177d43", "created": "2026-01-27T05:12:57.595782Z", "modified": "2026-01-27T05:12:57.595782Z", "relationship_type": "indicates", "source_ref": "indicator--99b9efe0-cf65-4f23-ab17-9f82dab33cb8", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1ee4f7-f80b-440a-a9fb-571c3975316f", "created": "2026-01-27T05:12:57.59596Z", "modified": "2026-01-27T05:12:57.59596Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.teensafe.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.59596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7400e6fc-2de9-4881-a0bc-5a24484fdafb", "created": "2026-01-27T05:12:57.596636Z", "modified": "2026-01-27T05:12:57.596636Z", "relationship_type": "indicates", "source_ref": "indicator--8c1ee4f7-f80b-440a-a9fb-571c3975316f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378d4b2f-f91c-45c4-adf8-002f6fb044e5", "created": "2026-01-27T05:12:57.596831Z", "modified": "2026-01-27T05:12:57.596831Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.teensoftware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.596831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cb51649-d2ad-4d73-9060-7aa5c07d06bd", "created": "2026-01-27T05:12:57.597502Z", "modified": "2026-01-27T05:12:57.597502Z", "relationship_type": "indicates", "source_ref": "indicator--378d4b2f-f91c-45c4-adf8-002f6fb044e5", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a5473c-1b9d-483e-94cb-c5fa12d6ce4e", "created": "2026-01-27T05:12:57.597677Z", "modified": "2026-01-27T05:12:57.597677Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teensafe.vip']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.597677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90c52e7a-0487-4f14-9b72-1187994160ed", "created": "2026-01-27T05:12:57.598368Z", "modified": "2026-01-27T05:12:57.598368Z", "relationship_type": "indicates", "source_ref": "indicator--17a5473c-1b9d-483e-94cb-c5fa12d6ce4e", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e815dfe-8ef8-46d0-ac26-ffe60e6567a5", "created": "2026-01-27T05:12:57.598543Z", "modified": "2026-01-27T05:12:57.598543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fd8e2317a8e92953009bbd1dd1386d5ab2bfcfa977ce14633b671b32c490893']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.598543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d284db0-50df-4919-b8a7-45ab5b5759ab", "created": "2026-01-27T05:12:57.599396Z", "modified": "2026-01-27T05:12:57.599396Z", "relationship_type": "indicates", "source_ref": "indicator--5e815dfe-8ef8-46d0-ac26-ffe60e6567a5", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08e04c5-1ff5-40c2-8a9d-3edfb102a04f", "created": "2026-01-27T05:12:57.599578Z", "modified": "2026-01-27T05:12:57.599578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b5b1406549c995a617c322a6d5863e59aaeb0749f9a9ee7018cb11abf3cfdc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.599578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f5d3ba3-0d33-46fc-8149-9021929b007d", "created": "2026-01-27T05:12:57.600432Z", "modified": "2026-01-27T05:12:57.600432Z", "relationship_type": "indicates", "source_ref": "indicator--d08e04c5-1ff5-40c2-8a9d-3edfb102a04f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e14318-1d4e-4d80-a642-f3e4352f117f", "created": "2026-01-27T05:12:57.600617Z", "modified": "2026-01-27T05:12:57.600617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e546aab3699d6e228142e5d86ece710bcb298e6c3d2440b831dc4fb695e7b045']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.600617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df51a515-1440-433f-806b-f76c5344cf13", "created": "2026-01-27T05:12:57.601838Z", "modified": "2026-01-27T05:12:57.601838Z", "relationship_type": "indicates", "source_ref": "indicator--a6e14318-1d4e-4d80-a642-f3e4352f117f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f5d5a6-ee60-4eb3-b4f4-4f1655656989", "created": "2026-01-27T05:12:57.602024Z", "modified": "2026-01-27T05:12:57.602024Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4504de667760eb5004a37c38b993ac5284d6ebff8d5b81ba81413a56f705496b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.602024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83a4c4ce-2e97-41a3-a2a7-dabc5122c5a9", "created": "2026-01-27T05:12:57.602872Z", "modified": "2026-01-27T05:12:57.602872Z", "relationship_type": "indicates", "source_ref": "indicator--22f5d5a6-ee60-4eb3-b4f4-4f1655656989", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2358e3e-66d8-4b0c-93f5-a39321b5127e", "created": "2026-01-27T05:12:57.603053Z", "modified": "2026-01-27T05:12:57.603053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5cd5d3ab9d603aa4048ea46d91c4694097083da6d9f5458e10f5eec166d6d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.603053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e735c7a-be32-4bb7-8fe6-958f393cb72b", "created": "2026-01-27T05:12:57.603912Z", "modified": "2026-01-27T05:12:57.603912Z", "relationship_type": "indicates", "source_ref": "indicator--c2358e3e-66d8-4b0c-93f5-a39321b5127e", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd086ef-32bc-4462-8f33-3c23ef3180c6", "created": "2026-01-27T05:12:57.604095Z", "modified": "2026-01-27T05:12:57.604095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbd3c5cf40d3e98e8c40b76892b7f9a5a22c1115bfd7e836bd3beecd477bd657']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.604095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5947f9ca-ca7e-41c8-98e7-071e6e0de600", "created": "2026-01-27T05:12:57.604931Z", "modified": "2026-01-27T05:12:57.604931Z", "relationship_type": "indicates", "source_ref": "indicator--1fd086ef-32bc-4462-8f33-3c23ef3180c6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe82d4aa-1a99-4ae5-b525-e5eea0c81ab3", "created": "2026-01-27T05:12:57.605111Z", "modified": "2026-01-27T05:12:57.605111Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1f617da385ecd97334c00d2dd1983c271c64a052183f4ef3b68be0652e6d835']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.605111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15b83165-0d21-471e-80b3-9b09e4e6615f", "created": "2026-01-27T05:12:57.605961Z", "modified": "2026-01-27T05:12:57.605961Z", "relationship_type": "indicates", "source_ref": "indicator--fe82d4aa-1a99-4ae5-b525-e5eea0c81ab3", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1f98bc-4098-451b-b637-44206a869c1f", "created": "2026-01-27T05:12:57.606143Z", "modified": "2026-01-27T05:12:57.606143Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='385b1dabc4438c2bae87d355cfe333f09cd5c6215f9c90dd1827c459657a37f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.606143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c009f356-51d0-4023-923c-b654c80b6539", "created": "2026-01-27T05:12:57.607011Z", "modified": "2026-01-27T05:12:57.607011Z", "relationship_type": "indicates", "source_ref": "indicator--cd1f98bc-4098-451b-b637-44206a869c1f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9d091a-fd4e-4606-a83c-b8586e35a340", "created": "2026-01-27T05:12:57.60719Z", "modified": "2026-01-27T05:12:57.60719Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3ae6c9b88be100b82a681f3ec91caec88f76b8cf0bc61762f149e680900ffa3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.60719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3645626-d29d-48be-a53d-2396428186aa", "created": "2026-01-27T05:12:57.608036Z", "modified": "2026-01-27T05:12:57.608036Z", "relationship_type": "indicates", "source_ref": "indicator--dc9d091a-fd4e-4606-a83c-b8586e35a340", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14afe8f9-3441-43bc-ac35-fd24a1c150ed", "created": "2026-01-27T05:12:57.608216Z", "modified": "2026-01-27T05:12:57.608216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5643706ca9651fd45a57fb61aa982981bba374467294dca6d10159d137c6f24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.608216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7286f75-89c1-475b-b1e1-3c08ca5d79dc", "created": "2026-01-27T05:12:57.609064Z", "modified": "2026-01-27T05:12:57.609064Z", "relationship_type": "indicates", "source_ref": "indicator--14afe8f9-3441-43bc-ac35-fd24a1c150ed", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff246721-2df4-45dd-acfa-71527422f80c", "created": "2026-01-27T05:12:57.609242Z", "modified": "2026-01-27T05:12:57.609242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acb90adf1ab4889eff77d3346a74a51b23794827f7c2d2ebda025de77b8d7433']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.609242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99056e06-fa42-4b51-b63f-2d7a62e7780c", "created": "2026-01-27T05:12:57.610086Z", "modified": "2026-01-27T05:12:57.610086Z", "relationship_type": "indicates", "source_ref": "indicator--ff246721-2df4-45dd-acfa-71527422f80c", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231fb3f6-e04e-4efe-a5cb-5faba6288709", "created": "2026-01-27T05:12:57.610261Z", "modified": "2026-01-27T05:12:57.610261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0161661923f6ec731fc9cfcf20ac7fcadab5904e6a943440c591908241609de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.610261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b91ddba-f0e3-4a5b-b35e-c9aeeb8df905", "created": "2026-01-27T05:12:57.611228Z", "modified": "2026-01-27T05:12:57.611228Z", "relationship_type": "indicates", "source_ref": "indicator--231fb3f6-e04e-4efe-a5cb-5faba6288709", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e1844c-f1b7-4d1d-93c3-2dad8c248659", "created": "2026-01-27T05:12:57.611412Z", "modified": "2026-01-27T05:12:57.611412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='111b7a2f8988cb30e74f51e66f7083f84c4b53f0971c4b5f1007547355e6bb35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.611412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--075737f8-4c53-43d0-9be0-268a9e1fb098", "created": "2026-01-27T05:12:57.612261Z", "modified": "2026-01-27T05:12:57.612261Z", "relationship_type": "indicates", "source_ref": "indicator--51e1844c-f1b7-4d1d-93c3-2dad8c248659", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766dea8f-733b-47b7-927a-cdefa09a14f2", "created": "2026-01-27T05:12:57.612441Z", "modified": "2026-01-27T05:12:57.612441Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bfebe651c4254f1939de5941f659421fe47dec9f93900ea06d087348beca482f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.612441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f03a6f3-8cd4-45bb-965f-067c480a2754", "created": "2026-01-27T05:12:57.613288Z", "modified": "2026-01-27T05:12:57.613288Z", "relationship_type": "indicates", "source_ref": "indicator--766dea8f-733b-47b7-927a-cdefa09a14f2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293a40a4-2527-4066-938c-bfd146f8c214", "created": "2026-01-27T05:12:57.613465Z", "modified": "2026-01-27T05:12:57.613465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d41d89ef814b64729856fd42e75927bd25921353dad4f3df5839552b1c58b6f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.613465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--472b05ca-fe2d-4ffc-9ce9-fde7a4197a10", "created": "2026-01-27T05:12:57.614302Z", "modified": "2026-01-27T05:12:57.614302Z", "relationship_type": "indicates", "source_ref": "indicator--293a40a4-2527-4066-938c-bfd146f8c214", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a195373c-9f06-4aff-8c61-63c2b24ee18f", "created": "2026-01-27T05:12:57.61448Z", "modified": "2026-01-27T05:12:57.61448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b9464102c37803c6e8d117419ad07a75ebb85dc54cc1a95dba05f433fc89990']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.61448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ae1ce74-1132-4295-a0d7-2950a7c7771d", "created": "2026-01-27T05:12:57.615321Z", "modified": "2026-01-27T05:12:57.615321Z", "relationship_type": "indicates", "source_ref": "indicator--a195373c-9f06-4aff-8c61-63c2b24ee18f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf46129-2f45-4d6b-ac04-c19ac3c02361", "created": "2026-01-27T05:12:57.615499Z", "modified": "2026-01-27T05:12:57.615499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4da7cfcec9d9e597e93ac647ef4093cfbaa203889a8922ec1e09d7921aaa6ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.615499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84052b87-a808-4ff4-8341-cabc109a382b", "created": "2026-01-27T05:12:57.616344Z", "modified": "2026-01-27T05:12:57.616344Z", "relationship_type": "indicates", "source_ref": "indicator--bdf46129-2f45-4d6b-ac04-c19ac3c02361", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1991453c-a73c-4be6-b911-d103d3a34264", "created": "2026-01-27T05:12:57.616521Z", "modified": "2026-01-27T05:12:57.616521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7092fce338cf4aa2d16d3f1e8a5d619da15f2be4702b53c71797ffca82afda70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.616521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b220171-e1e6-4c44-b79f-78529c8a6f99", "created": "2026-01-27T05:12:57.617368Z", "modified": "2026-01-27T05:12:57.617368Z", "relationship_type": "indicates", "source_ref": "indicator--1991453c-a73c-4be6-b911-d103d3a34264", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8d40f3-410f-49ce-ae6d-56978da78425", "created": "2026-01-27T05:12:57.617542Z", "modified": "2026-01-27T05:12:57.617542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6809eabd0d264aa223aaf5775fc477237cca3e537b7348757303ca8fccbcda6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.617542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b123fbc6-e00a-4fbf-ba52-8a49b4a788ac", "created": "2026-01-27T05:12:57.618378Z", "modified": "2026-01-27T05:12:57.618378Z", "relationship_type": "indicates", "source_ref": "indicator--be8d40f3-410f-49ce-ae6d-56978da78425", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8773231-2516-44c6-a629-512c1c7f283b", "created": "2026-01-27T05:12:57.618554Z", "modified": "2026-01-27T05:12:57.618554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='042cb2188ee3948b336613b2c526d3e54437807909a45366b127e8baa9dbf976']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.618554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d0a51f1-e4c8-4bba-8f77-ef20005c9ffa", "created": "2026-01-27T05:12:57.619392Z", "modified": "2026-01-27T05:12:57.619392Z", "relationship_type": "indicates", "source_ref": "indicator--c8773231-2516-44c6-a629-512c1c7f283b", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fc23d1-0940-40ef-b758-d70b785d1653", "created": "2026-01-27T05:12:57.619573Z", "modified": "2026-01-27T05:12:57.619573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62e56df0d5dd4e2499fb71a24ec06f22f93b89ba6957e7c8e0f8dc52873a38a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.619573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b95cfa1d-f798-43d4-9726-61ed26df924d", "created": "2026-01-27T05:12:57.620567Z", "modified": "2026-01-27T05:12:57.620567Z", "relationship_type": "indicates", "source_ref": "indicator--b1fc23d1-0940-40ef-b758-d70b785d1653", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365b72f5-797a-4e63-a97e-09e325a67cf4", "created": "2026-01-27T05:12:57.620766Z", "modified": "2026-01-27T05:12:57.620766Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe5e68f082f2e533f628351cd40a76369e423131851a1133373c755ab2986439']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.620766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70ae0ee1-76a6-4cf6-a1ff-ea0b048ddd58", "created": "2026-01-27T05:12:57.621603Z", "modified": "2026-01-27T05:12:57.621603Z", "relationship_type": "indicates", "source_ref": "indicator--365b72f5-797a-4e63-a97e-09e325a67cf4", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f29f427-2114-4f7a-a367-61e3596bdd85", "created": "2026-01-27T05:12:57.621798Z", "modified": "2026-01-27T05:12:57.621798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2db9a5df39e4e897d6da33053e67de44f222937ca2355bc10e9966472da66144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.621798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f9f1e6d-a0dd-4d97-a2a4-d2bf853ce773", "created": "2026-01-27T05:12:57.62263Z", "modified": "2026-01-27T05:12:57.62263Z", "relationship_type": "indicates", "source_ref": "indicator--4f29f427-2114-4f7a-a367-61e3596bdd85", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4300c425-dddf-4691-bd58-74d2ebd393bb", "created": "2026-01-27T05:12:57.622824Z", "modified": "2026-01-27T05:12:57.622824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3da79e8a3a933a4dae169726df56cdab56e35cbaeb81eece3c3edfb7a8598751']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.622824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4644c2c1-ef5f-41fa-84b4-168d8b7af052", "created": "2026-01-27T05:12:57.623645Z", "modified": "2026-01-27T05:12:57.623645Z", "relationship_type": "indicates", "source_ref": "indicator--4300c425-dddf-4691-bd58-74d2ebd393bb", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822be0d5-257c-4208-b24d-1c7b5a7bab88", "created": "2026-01-27T05:12:57.623838Z", "modified": "2026-01-27T05:12:57.623838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c7df1452ad261a0ca16320285169970d93cc3ff99aceaba4c57fff1a7e3153e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.623838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4e048ed-9485-42af-8525-65b1789c2e45", "created": "2026-01-27T05:12:57.624658Z", "modified": "2026-01-27T05:12:57.624658Z", "relationship_type": "indicates", "source_ref": "indicator--822be0d5-257c-4208-b24d-1c7b5a7bab88", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6e07bd-5be5-4855-a69f-39f85e7d2874", "created": "2026-01-27T05:12:57.624851Z", "modified": "2026-01-27T05:12:57.624851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58c6cb7eb7b0c280a72f72e3ef3a778e08a44471e194f5b21b7c56360ddb7555']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.624851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcf9725b-2034-404b-ae2d-69fb350aa815", "created": "2026-01-27T05:12:57.625674Z", "modified": "2026-01-27T05:12:57.625674Z", "relationship_type": "indicates", "source_ref": "indicator--bb6e07bd-5be5-4855-a69f-39f85e7d2874", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a382e0f-893c-4a7a-8a61-b913597ce6b0", "created": "2026-01-27T05:12:57.625867Z", "modified": "2026-01-27T05:12:57.625867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa484e6bb7390781ab5fd707a3e3b18b7c6c3431bb6b209a95ae2443170d50dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.625867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--393eabb2-8a3b-4a64-b45b-684282846dd3", "created": "2026-01-27T05:12:57.626704Z", "modified": "2026-01-27T05:12:57.626704Z", "relationship_type": "indicates", "source_ref": "indicator--2a382e0f-893c-4a7a-8a61-b913597ce6b0", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fd3819-427e-4701-b2ae-c77ea3ad6ad6", "created": "2026-01-27T05:12:57.626898Z", "modified": "2026-01-27T05:12:57.626898Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='deda527cc46e85197ea4aff42be0ce22e4f11ddcf7fc58fe87a0ddc228416864']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.626898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0aebf1e-f104-437a-b1f6-6c67457b7840", "created": "2026-01-27T05:12:57.627768Z", "modified": "2026-01-27T05:12:57.627768Z", "relationship_type": "indicates", "source_ref": "indicator--68fd3819-427e-4701-b2ae-c77ea3ad6ad6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311e6b62-efd8-41f2-92de-1054daceecec", "created": "2026-01-27T05:12:57.627949Z", "modified": "2026-01-27T05:12:57.627949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='008c67b7156648f4ef43a24d9cccfc6a47b89216ab266fa23e4384bc424b94fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.627949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50b5b7b7-7c92-4a29-8e03-074f299a304a", "created": "2026-01-27T05:12:57.628811Z", "modified": "2026-01-27T05:12:57.628811Z", "relationship_type": "indicates", "source_ref": "indicator--311e6b62-efd8-41f2-92de-1054daceecec", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486a3094-3584-497f-8c73-9b5834308a23", "created": "2026-01-27T05:12:57.629Z", "modified": "2026-01-27T05:12:57.629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e99235fe8fa6da324fda5e6eb1816320ecf9ca68756703dd46d613fef2145435']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bb2dc60-5fe0-4033-a880-c767384d2b25", "created": "2026-01-27T05:12:57.629955Z", "modified": "2026-01-27T05:12:57.629955Z", "relationship_type": "indicates", "source_ref": "indicator--486a3094-3584-497f-8c73-9b5834308a23", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac74524c-c133-4f9e-8730-a5b43acf32e9", "created": "2026-01-27T05:12:57.630134Z", "modified": "2026-01-27T05:12:57.630134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f0a99fb4fb4ad917d59d6bf6551ba5f359b0f038879bbbb3ed34060a8d18339']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.630134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e318fca4-2b16-4333-aaa3-c72c8c7ee77f", "created": "2026-01-27T05:12:57.631079Z", "modified": "2026-01-27T05:12:57.631079Z", "relationship_type": "indicates", "source_ref": "indicator--ac74524c-c133-4f9e-8730-a5b43acf32e9", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87459b19-a282-4843-ad3d-36d1023f95f2", "created": "2026-01-27T05:12:57.631263Z", "modified": "2026-01-27T05:12:57.631263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f7e06c6e23e1e8ca668cdc9a718e6448be54c2cb177b152fbfe535cdfdad263']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.631263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b562be30-c7f9-462d-93e0-a9824f8d2a36", "created": "2026-01-27T05:12:57.632105Z", "modified": "2026-01-27T05:12:57.632105Z", "relationship_type": "indicates", "source_ref": "indicator--87459b19-a282-4843-ad3d-36d1023f95f2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4939f4-f413-43d8-848f-64ea6fb6a4c9", "created": "2026-01-27T05:12:57.632285Z", "modified": "2026-01-27T05:12:57.632285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45369166e1d856a1263e9e691989e6bee43c8f750bb7a2b74a15fbba28aa0351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.632285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f1d664a-bd51-40c4-988a-573e9a347f82", "created": "2026-01-27T05:12:57.633131Z", "modified": "2026-01-27T05:12:57.633131Z", "relationship_type": "indicates", "source_ref": "indicator--bc4939f4-f413-43d8-848f-64ea6fb6a4c9", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e504803d-7903-4c11-b40d-0ae1516a68f5", "created": "2026-01-27T05:12:57.633308Z", "modified": "2026-01-27T05:12:57.633308Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7ee8dfac77959bfc2a92ea4fdc1385b23c3619af731dc8b4fbb8eccbcfdf7fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.633308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30bba145-1fdd-4625-9456-f0d83c3b3203", "created": "2026-01-27T05:12:57.634148Z", "modified": "2026-01-27T05:12:57.634148Z", "relationship_type": "indicates", "source_ref": "indicator--e504803d-7903-4c11-b40d-0ae1516a68f5", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb75f55-94c8-49ca-8d73-cc96db0c3738", "created": "2026-01-27T05:12:57.634339Z", "modified": "2026-01-27T05:12:57.634339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f2b87ad63011a214462c2057d0df46d828f16282508e35bc69a5341c1eccdb6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.634339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--337d30c5-79c7-4de2-96d7-ccb0e58c937b", "created": "2026-01-27T05:12:57.635183Z", "modified": "2026-01-27T05:12:57.635183Z", "relationship_type": "indicates", "source_ref": "indicator--5eb75f55-94c8-49ca-8d73-cc96db0c3738", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9a2cbb-24c0-4bdd-b9e7-6b6589e779d7", "created": "2026-01-27T05:12:57.63536Z", "modified": "2026-01-27T05:12:57.63536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='557aed501642b5f3a19a4a63dea96eedf806930be02a0aef3fa304dd57d8c1ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.63536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7994989-76a6-470c-b674-2207a42b990c", "created": "2026-01-27T05:12:57.636212Z", "modified": "2026-01-27T05:12:57.636212Z", "relationship_type": "indicates", "source_ref": "indicator--3a9a2cbb-24c0-4bdd-b9e7-6b6589e779d7", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f3c693-2f13-4c19-bd51-08daa911a46c", "created": "2026-01-27T05:12:57.636394Z", "modified": "2026-01-27T05:12:57.636394Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d88f39434478f77240930ce4bfc9399ab72687a92a8e4380ee92c236eb98a971']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.636394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00827fc4-f78e-4eef-9b2b-712201418108", "created": "2026-01-27T05:12:57.637235Z", "modified": "2026-01-27T05:12:57.637235Z", "relationship_type": "indicates", "source_ref": "indicator--26f3c693-2f13-4c19-bd51-08daa911a46c", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3bd05c-4173-444a-8808-5cdb1b7914d2", "created": "2026-01-27T05:12:57.637413Z", "modified": "2026-01-27T05:12:57.637413Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a393c89393d78a01ad9fa7bce5eeeb74281d794bfa1caff00ebd2fbd1cc1c40c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.637413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3ceb1c5-46f6-479c-9a90-9def2ab206b4", "created": "2026-01-27T05:12:57.638393Z", "modified": "2026-01-27T05:12:57.638393Z", "relationship_type": "indicates", "source_ref": "indicator--3f3bd05c-4173-444a-8808-5cdb1b7914d2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4c1899-bf07-416b-98e5-d37a1a24d8fb", "created": "2026-01-27T05:12:57.638575Z", "modified": "2026-01-27T05:12:57.638575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29130a7cd58c757128aed9dcca6741206a710f99d865917c0301c5e2736e9814']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.638575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69999612-a3e6-4be5-a307-ed808c759f6e", "created": "2026-01-27T05:12:57.639421Z", "modified": "2026-01-27T05:12:57.639421Z", "relationship_type": "indicates", "source_ref": "indicator--4c4c1899-bf07-416b-98e5-d37a1a24d8fb", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151d167a-c5d2-4ea1-bb14-4e23cfce0a39", "created": "2026-01-27T05:12:57.639603Z", "modified": "2026-01-27T05:12:57.639603Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87113158aaef934387e4aa58f4fd9fdc9cfe40fa56be8ff38ad5a4786b41f61e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.639603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af8a30ae-843e-45e2-8eac-e27780b17c65", "created": "2026-01-27T05:12:57.640453Z", "modified": "2026-01-27T05:12:57.640453Z", "relationship_type": "indicates", "source_ref": "indicator--151d167a-c5d2-4ea1-bb14-4e23cfce0a39", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a88d3b-ed7c-4f12-a3c2-898ecc728988", "created": "2026-01-27T05:12:57.640631Z", "modified": "2026-01-27T05:12:57.640631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bd1b652ec1ce452b79245898150cc258c44f175011c7051a21047fbee2e3fd5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.640631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3711048-fb88-4d3c-8d53-18aca6af9161", "created": "2026-01-27T05:12:57.641471Z", "modified": "2026-01-27T05:12:57.641471Z", "relationship_type": "indicates", "source_ref": "indicator--78a88d3b-ed7c-4f12-a3c2-898ecc728988", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe50ddc-bf07-433c-9701-0feca27187f3", "created": "2026-01-27T05:12:57.641656Z", "modified": "2026-01-27T05:12:57.641656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77974461c24e1b4256f786b5178cfb96d282ada253275d64d81a18d84cfcb1f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.641656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee573065-bb31-4631-8299-d61a6a8b3a7f", "created": "2026-01-27T05:12:57.642512Z", "modified": "2026-01-27T05:12:57.642512Z", "relationship_type": "indicates", "source_ref": "indicator--2fe50ddc-bf07-433c-9701-0feca27187f3", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e6c272-48f4-4e3b-9e8f-9738e2e07384", "created": "2026-01-27T05:12:57.642693Z", "modified": "2026-01-27T05:12:57.642693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cd110c2311deac8ef7ad60e062786b033c08b7911e9fc4ea88de07f21b9d8ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.642693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4582ea63-069f-4ec0-bce3-fa37406b22ff", "created": "2026-01-27T05:12:57.643575Z", "modified": "2026-01-27T05:12:57.643575Z", "relationship_type": "indicates", "source_ref": "indicator--88e6c272-48f4-4e3b-9e8f-9738e2e07384", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11771f2b-a1ec-4a3e-ac8f-faf632ed7859", "created": "2026-01-27T05:12:57.643762Z", "modified": "2026-01-27T05:12:57.643762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e9baea9166fc547a66342551b68eb4e782d82c5b3ab8ab15aa7361dd2ef58914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.643762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61c17e1a-522b-4dc6-80c7-d15b92c43ddd", "created": "2026-01-27T05:12:57.644599Z", "modified": "2026-01-27T05:12:57.644599Z", "relationship_type": "indicates", "source_ref": "indicator--11771f2b-a1ec-4a3e-ac8f-faf632ed7859", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1b65ea-8700-4436-9689-3b0c6531de51", "created": "2026-01-27T05:12:57.644796Z", "modified": "2026-01-27T05:12:57.644796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a0aa568ff6cc8e19d71e9bb979fca0c268ce1ee022cb1831839634e5bd4adec4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.644796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b5149e6-034a-46b9-b568-858cc6fa35aa", "created": "2026-01-27T05:12:57.645624Z", "modified": "2026-01-27T05:12:57.645624Z", "relationship_type": "indicates", "source_ref": "indicator--8c1b65ea-8700-4436-9689-3b0c6531de51", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5fb599-3b13-4f4c-badb-2d28506e337d", "created": "2026-01-27T05:12:57.645816Z", "modified": "2026-01-27T05:12:57.645816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63762e5ff7bc93ee68424d698e65a0f247dc594c78af298f6796b541bc208364']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.645816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--062ac9eb-2579-4c38-be58-64b912404175", "created": "2026-01-27T05:12:57.646647Z", "modified": "2026-01-27T05:12:57.646647Z", "relationship_type": "indicates", "source_ref": "indicator--eb5fb599-3b13-4f4c-badb-2d28506e337d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a1d201-b1fb-4d6f-b136-d2b0952b31c6", "created": "2026-01-27T05:12:57.646862Z", "modified": "2026-01-27T05:12:57.646862Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90c5d8c8d4e91e18effcf66e90b30283b43d1d5d1d68b6ac60d81e50c13cf5cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.646862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a8bc97b-c4d2-40a3-b94a-e5ad8f652e37", "created": "2026-01-27T05:12:57.647836Z", "modified": "2026-01-27T05:12:57.647836Z", "relationship_type": "indicates", "source_ref": "indicator--f4a1d201-b1fb-4d6f-b136-d2b0952b31c6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d9f462-fdf6-487e-9953-892af3509878", "created": "2026-01-27T05:12:57.648019Z", "modified": "2026-01-27T05:12:57.648019Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27b925ca2e6f01815a66b01f63c7ac17175e9df205d7655336bd3eb7e89cfa10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.648019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af001a2d-927d-486a-898f-d4f66f821b46", "created": "2026-01-27T05:12:57.648858Z", "modified": "2026-01-27T05:12:57.648858Z", "relationship_type": "indicates", "source_ref": "indicator--53d9f462-fdf6-487e-9953-892af3509878", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b836d04-df15-4f0c-a04f-37ef822bf59d", "created": "2026-01-27T05:12:57.649039Z", "modified": "2026-01-27T05:12:57.649039Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0968c53c9c1b62e20b99aa2de3a1f4d971f6f49630f0727f635e4551f0e8e313']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.649039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2896036d-6a21-402b-929f-3ae416490b25", "created": "2026-01-27T05:12:57.649884Z", "modified": "2026-01-27T05:12:57.649884Z", "relationship_type": "indicates", "source_ref": "indicator--6b836d04-df15-4f0c-a04f-37ef822bf59d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774af742-26cc-4737-b978-fe201fa29693", "created": "2026-01-27T05:12:57.650064Z", "modified": "2026-01-27T05:12:57.650064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce271fe1f0987bb6e646593fb08f36edf915ed0f11960473f6cb95aba9e8d1f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.650064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70f4517c-fb49-4584-a2f3-6287c7870f1a", "created": "2026-01-27T05:12:57.650909Z", "modified": "2026-01-27T05:12:57.650909Z", "relationship_type": "indicates", "source_ref": "indicator--774af742-26cc-4737-b978-fe201fa29693", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bb7865-c536-4c11-b454-afdd8074e9f2", "created": "2026-01-27T05:12:57.651088Z", "modified": "2026-01-27T05:12:57.651088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e202dfca580e51005d9f9c1613e39a5376a64e34d92086eaa7f8b7e1ffd32d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.651088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fac9fe52-1f09-431f-be8d-8fa365b87141", "created": "2026-01-27T05:12:57.651954Z", "modified": "2026-01-27T05:12:57.651954Z", "relationship_type": "indicates", "source_ref": "indicator--99bb7865-c536-4c11-b454-afdd8074e9f2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb45cc75-73fe-41d1-bc3f-0e06cd23d0e9", "created": "2026-01-27T05:12:57.652136Z", "modified": "2026-01-27T05:12:57.652136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='176cd54005aeb64d2415685c0f97bdad0292e9ae2f307bb6908c2927d5edd3a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.652136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2740a5e5-fbf7-49f8-a6ad-d414939f4cd0", "created": "2026-01-27T05:12:57.652984Z", "modified": "2026-01-27T05:12:57.652984Z", "relationship_type": "indicates", "source_ref": "indicator--cb45cc75-73fe-41d1-bc3f-0e06cd23d0e9", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6987dcc4-8951-4709-939b-d3341f5e54d8", "created": "2026-01-27T05:12:57.653166Z", "modified": "2026-01-27T05:12:57.653166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6b1ec9a59c2e9dcbe550a737dc028d8f174f11b9a69c397f81438c0e93ecc3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.653166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59964658-88ec-47dd-be40-55fbf2ba7e3b", "created": "2026-01-27T05:12:57.654013Z", "modified": "2026-01-27T05:12:57.654013Z", "relationship_type": "indicates", "source_ref": "indicator--6987dcc4-8951-4709-939b-d3341f5e54d8", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42c2aa8-2caa-4e06-b48b-24a3ced04238", "created": "2026-01-27T05:12:57.654189Z", "modified": "2026-01-27T05:12:57.654189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33f625191b79757f685a3337dabca583311484003b9aa0b900baee014646f750']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.654189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cba2f9cc-0b6e-47ac-8b80-55db500542c2", "created": "2026-01-27T05:12:57.655045Z", "modified": "2026-01-27T05:12:57.655045Z", "relationship_type": "indicates", "source_ref": "indicator--d42c2aa8-2caa-4e06-b48b-24a3ced04238", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898e0f49-db73-4ff0-a11f-444236ef837f", "created": "2026-01-27T05:12:57.655228Z", "modified": "2026-01-27T05:12:57.655228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f3551e3c55f89add1c12384f7e434caa7610b34c4a0207f2efcbd86ea14eaf4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.655228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ad8e7f1-22d9-493d-80c0-fbe75927b1a3", "created": "2026-01-27T05:12:57.65608Z", "modified": "2026-01-27T05:12:57.65608Z", "relationship_type": "indicates", "source_ref": "indicator--898e0f49-db73-4ff0-a11f-444236ef837f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3252d5-b954-4ddf-b124-5d1c06185b9a", "created": "2026-01-27T05:12:57.656261Z", "modified": "2026-01-27T05:12:57.656261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67e54def3d50d32cf133dd9ef388f4f659725532997c868d1a109d8eabb22215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.656261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ec66fc2-c0b7-4312-adc1-fb0c0a046467", "created": "2026-01-27T05:12:57.657224Z", "modified": "2026-01-27T05:12:57.657224Z", "relationship_type": "indicates", "source_ref": "indicator--ee3252d5-b954-4ddf-b124-5d1c06185b9a", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8026dd-b462-4d43-8b55-11fe0c81f6f2", "created": "2026-01-27T05:12:57.657411Z", "modified": "2026-01-27T05:12:57.657411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05f727e005501f389ceda32a0e03d524a19bba867fa4c29364214fac0dcbd6d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.657411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be220c5d-f5e2-4bf8-9323-eb910c206571", "created": "2026-01-27T05:12:57.658266Z", "modified": "2026-01-27T05:12:57.658266Z", "relationship_type": "indicates", "source_ref": "indicator--ea8026dd-b462-4d43-8b55-11fe0c81f6f2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6525b9b3-5918-43dc-a06f-ca61c8729833", "created": "2026-01-27T05:12:57.658445Z", "modified": "2026-01-27T05:12:57.658445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='416d5a5525b9d36b185fdc9538887d8c80dcd70b581d1349343e0f322ef99a22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.658445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b9e9a2a-bc35-4389-b8d0-f7cc0cac6731", "created": "2026-01-27T05:12:57.659307Z", "modified": "2026-01-27T05:12:57.659307Z", "relationship_type": "indicates", "source_ref": "indicator--6525b9b3-5918-43dc-a06f-ca61c8729833", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16559ba0-6c9d-4291-b021-ab596423eda6", "created": "2026-01-27T05:12:57.659482Z", "modified": "2026-01-27T05:12:57.659482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc363b9033dc72646064095dd55926f8f86108c04410ba0ad2fe08cc729153b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.659482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ba64265-72df-4c96-8205-684284a1ddb6", "created": "2026-01-27T05:12:57.660334Z", "modified": "2026-01-27T05:12:57.660334Z", "relationship_type": "indicates", "source_ref": "indicator--16559ba0-6c9d-4291-b021-ab596423eda6", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827400a3-3869-4e2f-b656-babc236f08a1", "created": "2026-01-27T05:12:57.660512Z", "modified": "2026-01-27T05:12:57.660512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1271c5fed302d2dab3a74bcda70d8bcb4566b8c92639c08229f009103e0d3984']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.660512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--012a2306-fa5e-484f-8487-edc782c3c927", "created": "2026-01-27T05:12:57.661354Z", "modified": "2026-01-27T05:12:57.661354Z", "relationship_type": "indicates", "source_ref": "indicator--827400a3-3869-4e2f-b656-babc236f08a1", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686b4fe4-abc3-4e50-ba2c-b32eacf2433d", "created": "2026-01-27T05:12:57.661531Z", "modified": "2026-01-27T05:12:57.661531Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='867aa54974964038876b563c52132106e5f8c70afe13ba73b633e4edf8d74cfa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.661531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8fe9d39-7c80-4c4e-a021-ad410ba008fc", "created": "2026-01-27T05:12:57.662381Z", "modified": "2026-01-27T05:12:57.662381Z", "relationship_type": "indicates", "source_ref": "indicator--686b4fe4-abc3-4e50-ba2c-b32eacf2433d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6e84e2-cd0f-47ce-9bc5-189626f05248", "created": "2026-01-27T05:12:57.662575Z", "modified": "2026-01-27T05:12:57.662575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a20880e386b4863240db059c990d8585c34dcbbaef91de2ffb0005131717bad3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.662575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c26d6bef-63a5-42b1-93c5-3406c693dd75", "created": "2026-01-27T05:12:57.663413Z", "modified": "2026-01-27T05:12:57.663413Z", "relationship_type": "indicates", "source_ref": "indicator--bc6e84e2-cd0f-47ce-9bc5-189626f05248", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--361dd810-6cb9-4517-a3ef-b42c4ee10d03", "created": "2026-01-27T05:12:57.663588Z", "modified": "2026-01-27T05:12:57.663588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bce7153e517f6c18a3140f425fb3134b0ddea711cddf3724fe2a026eb3fc277']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.663588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65dddbad-1302-4bcf-9853-d4a1cd437fab", "created": "2026-01-27T05:12:57.664427Z", "modified": "2026-01-27T05:12:57.664427Z", "relationship_type": "indicates", "source_ref": "indicator--361dd810-6cb9-4517-a3ef-b42c4ee10d03", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b9bb68-b0ad-4d7d-9e5a-fc58874d054c", "created": "2026-01-27T05:12:57.664616Z", "modified": "2026-01-27T05:12:57.664616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0af3f6499567eec869567675c72be4b5ec0822133759af12599502b8a23219b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.664616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7c02cee-f717-4c4b-b611-c1916acb07fe", "created": "2026-01-27T05:12:57.665659Z", "modified": "2026-01-27T05:12:57.665659Z", "relationship_type": "indicates", "source_ref": "indicator--e8b9bb68-b0ad-4d7d-9e5a-fc58874d054c", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e701c14-9834-4809-8e68-d70ffb609777", "created": "2026-01-27T05:12:57.665867Z", "modified": "2026-01-27T05:12:57.665867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='838b9875bd4e9e3000674e1a67844b9d7d2038337f638c4db0c22916a49ab49e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.665867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04c14fb3-c41e-4e1a-ad42-edbffbc95e0d", "created": "2026-01-27T05:12:57.666696Z", "modified": "2026-01-27T05:12:57.666696Z", "relationship_type": "indicates", "source_ref": "indicator--0e701c14-9834-4809-8e68-d70ffb609777", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ed681d-8dd3-4a03-811e-3b3fd5ab9c2d", "created": "2026-01-27T05:12:57.666891Z", "modified": "2026-01-27T05:12:57.666891Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d7740906a42489a080eef75ae793b9f838cef58b9bd55ba6094359e8eda68697']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.666891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cc5d0c1-1622-49bb-a908-ef8f2edd235a", "created": "2026-01-27T05:12:57.667718Z", "modified": "2026-01-27T05:12:57.667718Z", "relationship_type": "indicates", "source_ref": "indicator--b6ed681d-8dd3-4a03-811e-3b3fd5ab9c2d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c24412-1231-409e-ac27-ad2d32a4f4e5", "created": "2026-01-27T05:12:57.66791Z", "modified": "2026-01-27T05:12:57.66791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='159e6a085f5ed4659b21a8b7e545decd97879981302fc874b3919a0e8ba42ff4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.66791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34980935-5119-4a5c-9e5c-cbbe714c1109", "created": "2026-01-27T05:12:57.668737Z", "modified": "2026-01-27T05:12:57.668737Z", "relationship_type": "indicates", "source_ref": "indicator--41c24412-1231-409e-ac27-ad2d32a4f4e5", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b93461-51bd-4575-815f-7c809709c5f4", "created": "2026-01-27T05:12:57.668931Z", "modified": "2026-01-27T05:12:57.668931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed47a8032c4551004c26875716bac7f60f091c4049bcb1719bfe44475d8b2e00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.668931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f132ef18-ee2a-4124-bdf4-7ea6da38399a", "created": "2026-01-27T05:12:57.669778Z", "modified": "2026-01-27T05:12:57.669778Z", "relationship_type": "indicates", "source_ref": "indicator--01b93461-51bd-4575-815f-7c809709c5f4", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1fb2e9-0d92-4671-a516-5e7bbeba909d", "created": "2026-01-27T05:12:57.669963Z", "modified": "2026-01-27T05:12:57.669963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eee03bd119096fcf1ed0fa1c51154d022185f51b0273951e8b65fd28e5edd77e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.669963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--250404fa-2dfb-4121-a334-4041745d9054", "created": "2026-01-27T05:12:57.670811Z", "modified": "2026-01-27T05:12:57.670811Z", "relationship_type": "indicates", "source_ref": "indicator--4d1fb2e9-0d92-4671-a516-5e7bbeba909d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e04a58e-47a3-45ca-a26c-7a15148de5ce", "created": "2026-01-27T05:12:57.670992Z", "modified": "2026-01-27T05:12:57.670992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f060c5b5437b63757e0d8a3e5a5b5bfd24e740c21668a8722d51e16e091c37d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.670992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--855de6ac-3c72-4a3a-b0f7-f1d20fa6f47e", "created": "2026-01-27T05:12:57.671829Z", "modified": "2026-01-27T05:12:57.671829Z", "relationship_type": "indicates", "source_ref": "indicator--3e04a58e-47a3-45ca-a26c-7a15148de5ce", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef67b29-ecf3-403b-845e-75cf6463ce81", "created": "2026-01-27T05:12:57.672006Z", "modified": "2026-01-27T05:12:57.672006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6121b820224ea5fa55feacc28f58f33af900e71a3131874d0e0e5fb9ad9388d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.672006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65ea4fea-099e-4bdd-98a6-b65823201186", "created": "2026-01-27T05:12:57.672854Z", "modified": "2026-01-27T05:12:57.672854Z", "relationship_type": "indicates", "source_ref": "indicator--fef67b29-ecf3-403b-845e-75cf6463ce81", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3830ad1-effb-4c70-b15a-e73de84baf15", "created": "2026-01-27T05:12:57.673031Z", "modified": "2026-01-27T05:12:57.673031Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb0292635fe1b34a41777cab425828cf52a2a6efe83171e9a1b75c32b0b10142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.673031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--158cbd52-22fc-441a-8123-d450d76d8a17", "created": "2026-01-27T05:12:57.673867Z", "modified": "2026-01-27T05:12:57.673867Z", "relationship_type": "indicates", "source_ref": "indicator--d3830ad1-effb-4c70-b15a-e73de84baf15", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80caba93-adcf-4bb0-a852-b4d59370b65f", "created": "2026-01-27T05:12:57.674052Z", "modified": "2026-01-27T05:12:57.674052Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15fc2ca31516f06ea1ec75cb83c3fec66318bd21f15f67839115e1a4bdcd3b25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.674052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8247d657-a66d-438e-862f-e223ff5a346a", "created": "2026-01-27T05:12:57.675037Z", "modified": "2026-01-27T05:12:57.675037Z", "relationship_type": "indicates", "source_ref": "indicator--80caba93-adcf-4bb0-a852-b4d59370b65f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32675124-adb4-4da9-8898-9295de929e82", "created": "2026-01-27T05:12:57.675217Z", "modified": "2026-01-27T05:12:57.675217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98965236f66b61c17f1482b0e4bce1591f770c2ebfb9a8dba37dda2aa0b7538c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.675217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be95c705-6948-4005-b8d4-a124790fd15d", "created": "2026-01-27T05:12:57.67606Z", "modified": "2026-01-27T05:12:57.67606Z", "relationship_type": "indicates", "source_ref": "indicator--32675124-adb4-4da9-8898-9295de929e82", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46220ca9-b64a-4b22-8cbf-6cfe746ac856", "created": "2026-01-27T05:12:57.676235Z", "modified": "2026-01-27T05:12:57.676235Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='30bef83da4c61b26da43657b92ecda7f7901dc44514d41477a5994ccd565823a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.676235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14bd2301-7ced-4eb5-a6a3-1fe2223b0582", "created": "2026-01-27T05:12:57.677078Z", "modified": "2026-01-27T05:12:57.677078Z", "relationship_type": "indicates", "source_ref": "indicator--46220ca9-b64a-4b22-8cbf-6cfe746ac856", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce352ec-0f2a-4af3-b907-b34b7dffeb8d", "created": "2026-01-27T05:12:57.677258Z", "modified": "2026-01-27T05:12:57.677258Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc8a1e738d33844713c454473d9089d7f47cdeaa9bf8e0551f964092fb604b05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.677258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d09631d-7379-42d3-afd3-da393c3c4074", "created": "2026-01-27T05:12:57.678107Z", "modified": "2026-01-27T05:12:57.678107Z", "relationship_type": "indicates", "source_ref": "indicator--7ce352ec-0f2a-4af3-b907-b34b7dffeb8d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cc6de9-7a55-4c83-b437-dea840323c0f", "created": "2026-01-27T05:12:57.678292Z", "modified": "2026-01-27T05:12:57.678292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e178303fc38f0cb0cd876df6ea52ed524567e55fa74043bc8bfa48fd25ce676']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.678292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21b9c777-2a46-4c22-b493-0e37cb634f3e", "created": "2026-01-27T05:12:57.679138Z", "modified": "2026-01-27T05:12:57.679138Z", "relationship_type": "indicates", "source_ref": "indicator--29cc6de9-7a55-4c83-b437-dea840323c0f", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a51616-0ce9-40fc-b2ed-184b2eb67dca", "created": "2026-01-27T05:12:57.679316Z", "modified": "2026-01-27T05:12:57.679316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bb1d81cb33d3bdfd40b77a63b98987b98aefb74b8c866e2f51d4a129bbcd27e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.679316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e536a73-b9f8-4cf2-b4f0-d03cfe184a4c", "created": "2026-01-27T05:12:57.680199Z", "modified": "2026-01-27T05:12:57.680199Z", "relationship_type": "indicates", "source_ref": "indicator--93a51616-0ce9-40fc-b2ed-184b2eb67dca", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dee658-ce5d-46fb-aa92-dfa657aa2ce1", "created": "2026-01-27T05:12:57.68038Z", "modified": "2026-01-27T05:12:57.68038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c19bc3323f51c454689cfcf5c6379b06f28971e381c4f46ef573b1e11b086f00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.68038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--303e6586-025e-482f-90c7-c78a2169a5a7", "created": "2026-01-27T05:12:57.681301Z", "modified": "2026-01-27T05:12:57.681301Z", "relationship_type": "indicates", "source_ref": "indicator--a9dee658-ce5d-46fb-aa92-dfa657aa2ce1", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b44e58b-aad4-4a3f-8064-18845f7faa4c", "created": "2026-01-27T05:12:57.681485Z", "modified": "2026-01-27T05:12:57.681485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9f55944213d777b829b2f1bd2c60052f3f4b60166e9f4e2af00921131483109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.681485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51cdaffb-44b2-42d5-9207-bf4fe87dcea8", "created": "2026-01-27T05:12:57.682331Z", "modified": "2026-01-27T05:12:57.682331Z", "relationship_type": "indicates", "source_ref": "indicator--5b44e58b-aad4-4a3f-8064-18845f7faa4c", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0da0ec0-e93f-41ee-a2df-bf19e7a7703e", "created": "2026-01-27T05:12:57.682516Z", "modified": "2026-01-27T05:12:57.682516Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6414d67b5b5390e026d309908c9660ed59a044a8352c4bd6056dc5ee0ef6c420']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.682516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f8bee2e-d970-4728-ad4d-3ace3f65fc7b", "created": "2026-01-27T05:12:57.683372Z", "modified": "2026-01-27T05:12:57.683372Z", "relationship_type": "indicates", "source_ref": "indicator--b0da0ec0-e93f-41ee-a2df-bf19e7a7703e", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcf87a9-e3cc-4744-bfd7-70404e99d6bc", "created": "2026-01-27T05:12:57.683555Z", "modified": "2026-01-27T05:12:57.683555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9055c385207e82e4c758e5f2de86c9dbc6a0fcffcde6d82afb020deb14bf04cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.683555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fdba299-3161-4194-aa59-366330377351", "created": "2026-01-27T05:12:57.684516Z", "modified": "2026-01-27T05:12:57.684516Z", "relationship_type": "indicates", "source_ref": "indicator--6bcf87a9-e3cc-4744-bfd7-70404e99d6bc", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3b5fd2-195f-4e0a-9037-42e82aa27443", "created": "2026-01-27T05:12:57.684694Z", "modified": "2026-01-27T05:12:57.684694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4de6da48ac3d70e725c8aaaa60bd88c69a761e645602d26316c5f1f714bfa7a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.684694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ef476b6-332b-484b-8f49-9a861bc6c0d3", "created": "2026-01-27T05:12:57.685535Z", "modified": "2026-01-27T05:12:57.685535Z", "relationship_type": "indicates", "source_ref": "indicator--8c3b5fd2-195f-4e0a-9037-42e82aa27443", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb148bf7-1716-44c7-9c43-237d4cc5be30", "created": "2026-01-27T05:12:57.685711Z", "modified": "2026-01-27T05:12:57.685711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb29f0351a0a4d5e3d20cc84f0a79c0e1a0105d9b1b6532eb3d3cf08de0e09b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.685711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff3a4b3e-f255-48c5-9131-b36a1509ab01", "created": "2026-01-27T05:12:57.686559Z", "modified": "2026-01-27T05:12:57.686559Z", "relationship_type": "indicates", "source_ref": "indicator--fb148bf7-1716-44c7-9c43-237d4cc5be30", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddfdea4-a6c9-4119-8996-f57ce0b6832c", "created": "2026-01-27T05:12:57.686735Z", "modified": "2026-01-27T05:12:57.686735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='408799aa71be8ab451b675b15509689ca77895888cfc0b39956437359350f84a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.686735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e75e5b26-e8c0-4f39-b549-06a0747cbc92", "created": "2026-01-27T05:12:57.687577Z", "modified": "2026-01-27T05:12:57.687577Z", "relationship_type": "indicates", "source_ref": "indicator--9ddfdea4-a6c9-4119-8996-f57ce0b6832c", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309c6a55-dea3-4a37-8969-3ca8d9ad377b", "created": "2026-01-27T05:12:57.687768Z", "modified": "2026-01-27T05:12:57.687768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aae4aa1dcf5d62eb31e8435e8f307d9310cbfc2b6410e59ae433c5782e9f86a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.687768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ad1fd63-6e16-42c8-b210-e64a62a7bbce", "created": "2026-01-27T05:12:57.6886Z", "modified": "2026-01-27T05:12:57.6886Z", "relationship_type": "indicates", "source_ref": "indicator--309c6a55-dea3-4a37-8969-3ca8d9ad377b", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d16a96-d18d-4aba-9621-ac97dcaea962", "created": "2026-01-27T05:12:57.688791Z", "modified": "2026-01-27T05:12:57.688791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6a6539c8c0dbfdfe609ccc73029d134719c655b75bd0e6ade8a366897634067']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.688791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ff103bf-d5c8-42d8-aa96-a40aadfce4ba", "created": "2026-01-27T05:12:57.689628Z", "modified": "2026-01-27T05:12:57.689628Z", "relationship_type": "indicates", "source_ref": "indicator--a3d16a96-d18d-4aba-9621-ac97dcaea962", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c551401-6e04-4741-987e-a6fe9373f28e", "created": "2026-01-27T05:12:57.689828Z", "modified": "2026-01-27T05:12:57.689828Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d6d997ee4a59a78629e32b081be072799cf75595c1e23abba0ea0507c31b1aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.689828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7222368-758c-4d53-9bf1-e2fee74750e0", "created": "2026-01-27T05:12:57.690652Z", "modified": "2026-01-27T05:12:57.690652Z", "relationship_type": "indicates", "source_ref": "indicator--1c551401-6e04-4741-987e-a6fe9373f28e", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0802485-fb13-4a9a-8f83-b12491e6cb9d", "created": "2026-01-27T05:12:57.690852Z", "modified": "2026-01-27T05:12:57.690852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d3508316b60a1ad87f666a22acd2fbf3e113c6b9afe2574a3d69bef092c8e90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.690852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--873a2895-bdb1-4fa5-ae47-c5d6e40e7919", "created": "2026-01-27T05:12:57.691683Z", "modified": "2026-01-27T05:12:57.691683Z", "relationship_type": "indicates", "source_ref": "indicator--f0802485-fb13-4a9a-8f83-b12491e6cb9d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a715b6-1d80-4ea2-9090-e11db372fe86", "created": "2026-01-27T05:12:57.691883Z", "modified": "2026-01-27T05:12:57.691883Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='efd1ced7031ead2ee8ec6dbf8e7fdcb5bb36e3edf8294552fe954157c4dd2bf7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.691883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c925e50-a581-4858-9e21-e7f8b7b2a860", "created": "2026-01-27T05:12:57.692855Z", "modified": "2026-01-27T05:12:57.692855Z", "relationship_type": "indicates", "source_ref": "indicator--32a715b6-1d80-4ea2-9090-e11db372fe86", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9aed7a-79e4-4d8f-acf2-8f31c37e2abb", "created": "2026-01-27T05:12:57.693037Z", "modified": "2026-01-27T05:12:57.693037Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6cd1a15a89bb1d1b3bca94434e11647b5a5630a9f19013829a8f120bcc78c54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.693037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c24fde4-8ae8-45ca-8813-7cd2d4bd585e", "created": "2026-01-27T05:12:57.693878Z", "modified": "2026-01-27T05:12:57.693878Z", "relationship_type": "indicates", "source_ref": "indicator--af9aed7a-79e4-4d8f-acf2-8f31c37e2abb", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdffd63-b591-45dd-95f2-54dc00846059", "created": "2026-01-27T05:12:57.694055Z", "modified": "2026-01-27T05:12:57.694055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fa29aa23e741e1774820634b9a10d9cd6bc2ea383967b9c2ef4ecb799699f79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.694055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b33e7b7e-9f44-4fd1-adcb-c9d3a7c9f99d", "created": "2026-01-27T05:12:57.694889Z", "modified": "2026-01-27T05:12:57.694889Z", "relationship_type": "indicates", "source_ref": "indicator--bfdffd63-b591-45dd-95f2-54dc00846059", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5d6e4f-e9b3-4947-94a3-836e2b400daa", "created": "2026-01-27T05:12:57.69507Z", "modified": "2026-01-27T05:12:57.69507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa32bee555c9e780a36f3c8f7b0d226a45d0d0fc4047a32aabb4703df79dbbf9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.69507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--602f53ef-f167-43c4-abce-75f2c4573512", "created": "2026-01-27T05:12:57.695905Z", "modified": "2026-01-27T05:12:57.695905Z", "relationship_type": "indicates", "source_ref": "indicator--de5d6e4f-e9b3-4947-94a3-836e2b400daa", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb5e39a-29fb-4e87-afce-b92b68357e7d", "created": "2026-01-27T05:12:57.696088Z", "modified": "2026-01-27T05:12:57.696088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42efcf7403a8e26537cf825f9f642055f8db423c211ec045b532c55c12f03a4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.696088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--693465ce-abe8-4f66-b48c-368448367bbc", "created": "2026-01-27T05:12:57.696928Z", "modified": "2026-01-27T05:12:57.696928Z", "relationship_type": "indicates", "source_ref": "indicator--1eb5e39a-29fb-4e87-afce-b92b68357e7d", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3621f289-13da-46a5-aed8-6e00507919e2", "created": "2026-01-27T05:12:57.697105Z", "modified": "2026-01-27T05:12:57.697105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a720420cd96fda86ac73721ffc7f2efd57887e30632d7b945749bd30822a6d0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.697105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32d26518-8a0b-4f6d-b501-169450aa4b54", "created": "2026-01-27T05:12:57.697949Z", "modified": "2026-01-27T05:12:57.697949Z", "relationship_type": "indicates", "source_ref": "indicator--3621f289-13da-46a5-aed8-6e00507919e2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef6eab8-4766-4468-97ab-7487762b9b57", "created": "2026-01-27T05:12:57.698128Z", "modified": "2026-01-27T05:12:57.698128Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aiyi.admin']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.698128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b56ebc7a-f212-449d-83b2-d856ab3f7f77", "created": "2026-01-27T05:12:57.698797Z", "modified": "2026-01-27T05:12:57.698797Z", "relationship_type": "indicates", "source_ref": "indicator--cef6eab8-4766-4468-97ab-7487762b9b57", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1dfaeb-e6e0-4fd0-8e99-629b32f390c3", "created": "2026-01-27T05:12:57.698985Z", "modified": "2026-01-27T05:12:57.698985Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cocospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.698985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--645ebbda-9392-481e-bc33-ea00a42d0b97", "created": "2026-01-27T05:12:57.699642Z", "modified": "2026-01-27T05:12:57.699642Z", "relationship_type": "indicates", "source_ref": "indicator--9f1dfaeb-e6e0-4fd0-8e99-629b32f390c3", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1747c1cf-911b-4f82-936e-a355ad5612c0", "created": "2026-01-27T05:12:57.699835Z", "modified": "2026-01-27T05:12:57.699835Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.cocospy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.699835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5584fb5e-edc2-4356-b910-6f990180fb89", "created": "2026-01-27T05:12:57.700493Z", "modified": "2026-01-27T05:12:57.700493Z", "relationship_type": "indicates", "source_ref": "indicator--1747c1cf-911b-4f82-936e-a355ad5612c0", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ea72da-bc86-4ccd-874b-7e1c86bed9ad", "created": "2026-01-27T05:12:57.700666Z", "modified": "2026-01-27T05:12:57.700666Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.cocospy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.700666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--016746ef-ac1a-44d0-a6cd-25fffbc9d50d", "created": "2026-01-27T05:12:57.701467Z", "modified": "2026-01-27T05:12:57.701467Z", "relationship_type": "indicates", "source_ref": "indicator--84ea72da-bc86-4ccd-874b-7e1c86bed9ad", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f991a250-e8f7-4aa2-83e3-bb19c74952db", "created": "2026-01-27T05:12:57.701646Z", "modified": "2026-01-27T05:12:57.701646Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.fonemonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.701646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0f7b6d3-d37a-4d96-bbe5-67b5fe32c31e", "created": "2026-01-27T05:12:57.702321Z", "modified": "2026-01-27T05:12:57.702321Z", "relationship_type": "indicates", "source_ref": "indicator--f991a250-e8f7-4aa2-83e3-bb19c74952db", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32df81f-b770-4ced-9077-fdead43a3456", "created": "2026-01-27T05:12:57.702499Z", "modified": "2026-01-27T05:12:57.702499Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.spyine']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.702499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5e1769e-9e3c-41b9-b2c8-ecee57ef78e4", "created": "2026-01-27T05:12:57.703169Z", "modified": "2026-01-27T05:12:57.703169Z", "relationship_type": "indicates", "source_ref": "indicator--c32df81f-b770-4ced-9077-fdead43a3456", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4b9b77-c25b-409e-a05f-fc99500334ab", "created": "2026-01-27T05:12:57.703345Z", "modified": "2026-01-27T05:12:57.703345Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.spyzie']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.703345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46dbaff0-e583-4b9c-a8e0-b7d1262987d9", "created": "2026-01-27T05:12:57.704017Z", "modified": "2026-01-27T05:12:57.704017Z", "relationship_type": "indicates", "source_ref": "indicator--ca4b9b77-c25b-409e-a05f-fc99500334ab", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178559a5-500d-4594-9889-f66218c8d0f4", "created": "2026-01-27T05:12:57.704197Z", "modified": "2026-01-27T05:12:57.704197Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.duiyun.spyic']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.704197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bd3f29e-f031-42a5-8275-f89c054b001f", "created": "2026-01-27T05:12:57.704867Z", "modified": "2026-01-27T05:12:57.704867Z", "relationship_type": "indicates", "source_ref": "indicator--178559a5-500d-4594-9889-f66218c8d0f4", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303efefb-8880-491b-a4de-f37472e8c791", "created": "2026-01-27T05:12:57.705045Z", "modified": "2026-01-27T05:12:57.705045Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.minspy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.705045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--338f55a0-3419-472c-9fde-2a0ea2543df8", "created": "2026-01-27T05:12:57.705695Z", "modified": "2026-01-27T05:12:57.705695Z", "relationship_type": "indicates", "source_ref": "indicator--303efefb-8880-491b-a4de-f37472e8c791", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bff30bb-3667-4735-b2d5-4542b4a1b41b", "created": "2026-01-27T05:12:57.705889Z", "modified": "2026-01-27T05:12:57.705889Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.minspy.v3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.705889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--206e517c-651a-4969-a8de-df46d4015dea", "created": "2026-01-27T05:12:57.706556Z", "modified": "2026-01-27T05:12:57.706556Z", "relationship_type": "indicates", "source_ref": "indicator--5bff30bb-3667-4735-b2d5-4542b4a1b41b", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf73ea64-c083-4338-9699-26d72609b80a", "created": "2026-01-27T05:12:57.706729Z", "modified": "2026-01-27T05:12:57.706729Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.cocospy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.706729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20449424-9611-4c45-8944-60b91ff28712", "created": "2026-01-27T05:12:57.707405Z", "modified": "2026-01-27T05:12:57.707405Z", "relationship_type": "indicates", "source_ref": "indicator--cf73ea64-c083-4338-9699-26d72609b80a", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebaeffb1-e78e-4f4a-b149-d6b6dbad10de", "created": "2026-01-27T05:12:57.707586Z", "modified": "2026-01-27T05:12:57.707586Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.fonemonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.707586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c81f05d3-1acc-4ee7-a111-f9d5a315ae2f", "created": "2026-01-27T05:12:57.708265Z", "modified": "2026-01-27T05:12:57.708265Z", "relationship_type": "indicates", "source_ref": "indicator--ebaeffb1-e78e-4f4a-b149-d6b6dbad10de", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e8113-e007-4f25-ace8-dceb434f4066", "created": "2026-01-27T05:12:57.708453Z", "modified": "2026-01-27T05:12:57.708453Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.fonemonitor.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.708453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eee6c40a-0e39-4927-afa2-fd8c0b271d6e", "created": "2026-01-27T05:12:57.709522Z", "modified": "2026-01-27T05:12:57.709522Z", "relationship_type": "indicates", "source_ref": "indicator--d24e8113-e007-4f25-ace8-dceb434f4066", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6501e8ec-571b-4a83-9f63-d1fe956be174", "created": "2026-01-27T05:12:57.709704Z", "modified": "2026-01-27T05:12:57.709704Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.minspy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.709704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04fa7109-6e27-4988-863c-199efa8d7cee", "created": "2026-01-27T05:12:57.710374Z", "modified": "2026-01-27T05:12:57.710374Z", "relationship_type": "indicates", "source_ref": "indicator--6501e8ec-571b-4a83-9f63-d1fe956be174", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da725b05-6b7e-4eef-ae65-6dd184951b67", "created": "2026-01-27T05:12:57.710552Z", "modified": "2026-01-27T05:12:57.710552Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.neatspy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.710552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7785cf0-de0d-41db-b942-5e0b8c31672b", "created": "2026-01-27T05:12:57.711214Z", "modified": "2026-01-27T05:12:57.711214Z", "relationship_type": "indicates", "source_ref": "indicator--da725b05-6b7e-4eef-ae65-6dd184951b67", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb98e59-86a3-4458-b24e-497165307799", "created": "2026-01-27T05:12:57.711392Z", "modified": "2026-01-27T05:12:57.711392Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.safespy.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.711392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c6f0b9d-f76a-4f67-b37e-4b303deca1e2", "created": "2026-01-27T05:12:57.712054Z", "modified": "2026-01-27T05:12:57.712054Z", "relationship_type": "indicates", "source_ref": "indicator--bfb98e59-86a3-4458-b24e-497165307799", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4824ecc-ce95-4e00-9e8e-59afc3eff327", "created": "2026-01-27T05:12:57.712231Z", "modified": "2026-01-27T05:12:57.712231Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.safespy.v3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.712231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9329e627-e499-4026-989f-5007ad02e168", "created": "2026-01-27T05:12:57.712897Z", "modified": "2026-01-27T05:12:57.712897Z", "relationship_type": "indicates", "source_ref": "indicator--f4824ecc-ce95-4e00-9e8e-59afc3eff327", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038f8d62-3ca5-4960-aa01-f896abdcd050", "created": "2026-01-27T05:12:57.713077Z", "modified": "2026-01-27T05:12:57.713077Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyic.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.713077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f682dea-edfb-4134-9dc0-4e017a694dca", "created": "2026-01-27T05:12:57.713726Z", "modified": "2026-01-27T05:12:57.713726Z", "relationship_type": "indicates", "source_ref": "indicator--038f8d62-3ca5-4960-aa01-f896abdcd050", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16452df3-af02-473e-bffd-d8155c949c8c", "created": "2026-01-27T05:12:57.713919Z", "modified": "2026-01-27T05:12:57.713919Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyic.v3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.713919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--923bf0e9-ad0a-4227-9a22-b41cffe07735", "created": "2026-01-27T05:12:57.714574Z", "modified": "2026-01-27T05:12:57.714574Z", "relationship_type": "indicates", "source_ref": "indicator--16452df3-af02-473e-bffd-d8155c949c8c", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efe4a2e-f6da-4228-bd9c-c65e1399e1ec", "created": "2026-01-27T05:12:57.714765Z", "modified": "2026-01-27T05:12:57.714765Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyier.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.714765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12c3e8c6-9597-4839-8072-faac11e36d2f", "created": "2026-01-27T05:12:57.715416Z", "modified": "2026-01-27T05:12:57.715416Z", "relationship_type": "indicates", "source_ref": "indicator--0efe4a2e-f6da-4228-bd9c-c65e1399e1ec", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6bae67-9a58-435a-a93d-e61df753e383", "created": "2026-01-27T05:12:57.71559Z", "modified": "2026-01-27T05:12:57.71559Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyine.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.71559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f9d1df9-3bc8-4cdd-855c-05d0c1724cc3", "created": "2026-01-27T05:12:57.716251Z", "modified": "2026-01-27T05:12:57.716251Z", "relationship_type": "indicates", "source_ref": "indicator--0a6bae67-9a58-435a-a93d-e61df753e383", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a0dfba-f934-4717-9e98-5881e94880d2", "created": "2026-01-27T05:12:57.716427Z", "modified": "2026-01-27T05:12:57.716427Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyzie.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.716427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ae90c51-e8bf-4b4c-9eec-aeff330f63d9", "created": "2026-01-27T05:12:57.717092Z", "modified": "2026-01-27T05:12:57.717092Z", "relationship_type": "indicates", "source_ref": "indicator--65a0dfba-f934-4717-9e98-5881e94880d2", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015b7507-3b2e-4c98-90d5-55f2974f16be", "created": "2026-01-27T05:12:57.717268Z", "modified": "2026-01-27T05:12:57.717268Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dy.spyzie.v4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.717268Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--690fd69d-d4d7-488d-86e1-d222111711c8", "created": "2026-01-27T05:12:57.718047Z", "modified": "2026-01-27T05:12:57.718047Z", "relationship_type": "indicates", "source_ref": "indicator--015b7507-3b2e-4c98-90d5-55f2974f16be", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e936c612-493a-4ab7-ae91-8ef552164ada", "created": "2026-01-27T05:12:57.718224Z", "modified": "2026-01-27T05:12:57.718224Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.teensafe.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.718224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58961d42-a185-43df-8c9f-83f2c60fad9c", "created": "2026-01-27T05:12:57.718891Z", "modified": "2026-01-27T05:12:57.718891Z", "relationship_type": "indicates", "source_ref": "indicator--e936c612-493a-4ab7-ae91-8ef552164ada", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d87a419-4914-48f5-a57f-bf8d1b8f5bc3", "created": "2026-01-27T05:12:57.719077Z", "modified": "2026-01-27T05:12:57.719077Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyic']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.719077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5495f83-b335-4bba-83af-fa27354ab0d5", "created": "2026-01-27T05:12:57.719725Z", "modified": "2026-01-27T05:12:57.719725Z", "relationship_type": "indicates", "source_ref": "indicator--3d87a419-4914-48f5-a57f-bf8d1b8f5bc3", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5292900-dd81-44c0-8333-a27f33bdd033", "created": "2026-01-27T05:12:57.719918Z", "modified": "2026-01-27T05:12:57.719918Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wb.production']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.719918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e76c482e-fa18-4b06-9d62-ec979adebafe", "created": "2026-01-27T05:12:57.720565Z", "modified": "2026-01-27T05:12:57.720565Z", "relationship_type": "indicates", "source_ref": "indicator--c5292900-dd81-44c0-8333-a27f33bdd033", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3298dad7-b8ac-4148-8477-e3e0dedc91dc", "created": "2026-01-27T05:12:57.720737Z", "modified": "2026-01-27T05:12:57.720737Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ws.sc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.720737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--929336bc-827c-4da0-866c-122280072434", "created": "2026-01-27T05:12:57.721396Z", "modified": "2026-01-27T05:12:57.721396Z", "relationship_type": "indicates", "source_ref": "indicator--3298dad7-b8ac-4148-8477-e3e0dedc91dc", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ee2169-d5cb-427b-9bd6-5668905bc5ca", "created": "2026-01-27T05:12:57.721571Z", "modified": "2026-01-27T05:12:57.721571Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ws.scli']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.721571Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0112e6da-0daf-4408-bd53-3f5dce5bd0e5", "created": "2026-01-27T05:12:57.722225Z", "modified": "2026-01-27T05:12:57.722225Z", "relationship_type": "indicates", "source_ref": "indicator--13ee2169-d5cb-427b-9bd6-5668905bc5ca", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b18299-9182-4687-ab6e-e40526281230", "created": "2026-01-27T05:12:57.722403Z", "modified": "2026-01-27T05:12:57.722403Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8418703221A74C73405AD273C28CBC12444D7520']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.722403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f797a9f-7c9d-4eaa-bf7e-19a82315e55d", "created": "2026-01-27T05:12:57.723201Z", "modified": "2026-01-27T05:12:57.723201Z", "relationship_type": "indicates", "source_ref": "indicator--b2b18299-9182-4687-ab6e-e40526281230", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae12a1b-e48a-47af-af7d-aab9bbff2f15", "created": "2026-01-27T05:12:57.723377Z", "modified": "2026-01-27T05:12:57.723377Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B4A1513C2C71F08D2EE763CD3FAE585F71F268A9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.723377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7a950bd-aa9b-4e1a-94df-68be6417dd4d", "created": "2026-01-27T05:12:57.724158Z", "modified": "2026-01-27T05:12:57.724158Z", "relationship_type": "indicates", "source_ref": "indicator--eae12a1b-e48a-47af-af7d-aab9bbff2f15", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26eb7a9b-d03c-4add-be76-8edc59a3ef67", "created": "2026-01-27T05:12:57.724335Z", "modified": "2026-01-27T05:12:57.724335Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C377ADFF5DF116AB7297D32850ADE8A8FC3F8FB9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.724335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32ade1ca-ac03-4417-99eb-5229b063f4a0", "created": "2026-01-27T05:12:57.725122Z", "modified": "2026-01-27T05:12:57.725122Z", "relationship_type": "indicates", "source_ref": "indicator--26eb7a9b-d03c-4add-be76-8edc59a3ef67", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2876ae06-3eb4-45bf-990f-2b966bae4308", "created": "2026-01-27T05:12:57.725298Z", "modified": "2026-01-27T05:12:57.725298Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CC866E79BDAD431A2B1E07229B92E64808221610']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.725298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5237e33a-ee7c-442f-8156-23a9e8a34ee1", "created": "2026-01-27T05:12:57.726212Z", "modified": "2026-01-27T05:12:57.726212Z", "relationship_type": "indicates", "source_ref": "indicator--2876ae06-3eb4-45bf-990f-2b966bae4308", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f6e5e3-a637-4f4c-a029-e184dfbbceb3", "created": "2026-01-27T05:12:57.726391Z", "modified": "2026-01-27T05:12:57.726391Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F25D72FCCB84BAF7F73467FC9571024B7E274CA3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.726391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38c0e657-55b5-48f1-b089-2cf42b7adb5a", "created": "2026-01-27T05:12:57.727184Z", "modified": "2026-01-27T05:12:57.727184Z", "relationship_type": "indicates", "source_ref": "indicator--66f6e5e3-a637-4f4c-a029-e184dfbbceb3", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6216418-2fce-475c-8c32-483add8a1f5a", "created": "2026-01-27T05:12:57.727361Z", "modified": "2026-01-27T05:12:57.727361Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='71BE35691A181E1524DDF83F931FBC62DC4E7EC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.727361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba9f739b-5fb7-492a-8c24-e6cef5c88295", "created": "2026-01-27T05:12:57.728154Z", "modified": "2026-01-27T05:12:57.728154Z", "relationship_type": "indicates", "source_ref": "indicator--e6216418-2fce-475c-8c32-483add8a1f5a", "target_ref": "malware--39b8c38f-64f7-4204-8693-b211caf0759d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862", "created": "2026-01-27T05:12:57.72833Z", "modified": "2026-01-27T05:12:57.72833Z", "name": "VIPTrack", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a81b85-ee0c-4cfe-843b-8b3d670c3e5a", "created": "2026-01-27T05:12:57.728508Z", "modified": "2026-01-27T05:12:57.728508Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.viptrack.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.728508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d492b2-32b6-40a8-90b3-fd78270b8ebc", "created": "2026-01-27T05:12:57.729208Z", "modified": "2026-01-27T05:12:57.729208Z", "relationship_type": "indicates", "source_ref": "indicator--26a81b85-ee0c-4cfe-843b-8b3d670c3e5a", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040f62ea-e4b1-47fc-bd84-3e0ab4e0bc35", "created": "2026-01-27T05:12:57.729386Z", "modified": "2026-01-27T05:12:57.729386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptrack.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.729386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b0c121b-c654-47f0-b31f-2def923ccc34", "created": "2026-01-27T05:12:57.73008Z", "modified": "2026-01-27T05:12:57.73008Z", "relationship_type": "indicates", "source_ref": "indicator--040f62ea-e4b1-47fc-bd84-3e0ab4e0bc35", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b26d0c6-f360-4f0f-b744-48a1c5fa93a8", "created": "2026-01-27T05:12:57.730271Z", "modified": "2026-01-27T05:12:57.730271Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b9a62be13f91df54c555f43b6e1243d8b7b9f3345c44fee95dbc0c9fe0e35b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.730271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1674c115-1da2-4c90-8035-606d935b61e9", "created": "2026-01-27T05:12:57.731132Z", "modified": "2026-01-27T05:12:57.731132Z", "relationship_type": "indicates", "source_ref": "indicator--6b26d0c6-f360-4f0f-b744-48a1c5fa93a8", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6f75ec-aa30-41df-989c-c9d9ea7b0a51", "created": "2026-01-27T05:12:57.731312Z", "modified": "2026-01-27T05:12:57.731312Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c253a652ab4262072431e9729710a25e5554e09ac8dff4452f1c20a7271b1a57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.731312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43d0b71c-1e7e-411d-93c8-a9a0686c16c2", "created": "2026-01-27T05:12:57.732164Z", "modified": "2026-01-27T05:12:57.732164Z", "relationship_type": "indicates", "source_ref": "indicator--1f6f75ec-aa30-41df-989c-c9d9ea7b0a51", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62db6b6d-6825-42f8-ae3f-85a706196f6e", "created": "2026-01-27T05:12:57.732343Z", "modified": "2026-01-27T05:12:57.732343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f0cf9791c98c84cd758b6a18760dc5118ec59c6fff9f8d279a09790084ff1a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.732343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69246256-100e-45f7-9cb4-d3ab647b124d", "created": "2026-01-27T05:12:57.733194Z", "modified": "2026-01-27T05:12:57.733194Z", "relationship_type": "indicates", "source_ref": "indicator--62db6b6d-6825-42f8-ae3f-85a706196f6e", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7af739f-7495-4754-ad38-3aa32b394fdb", "created": "2026-01-27T05:12:57.733376Z", "modified": "2026-01-27T05:12:57.733376Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mit.viptrackpro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.733376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c770c27-81ed-4456-8409-e450e1ae08a3", "created": "2026-01-27T05:12:57.734056Z", "modified": "2026-01-27T05:12:57.734056Z", "relationship_type": "indicates", "source_ref": "indicator--e7af739f-7495-4754-ad38-3aa32b394fdb", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae63b7c-a8bc-4d7a-a571-f84d3cf1eada", "created": "2026-01-27T05:12:57.734237Z", "modified": "2026-01-27T05:12:57.734237Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mit.networkadapter']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.734237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be4072a0-029f-4242-b5a1-f47e720fb49c", "created": "2026-01-27T05:12:57.735044Z", "modified": "2026-01-27T05:12:57.735044Z", "relationship_type": "indicates", "source_ref": "indicator--cae63b7c-a8bc-4d7a-a571-f84d3cf1eada", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b44ea3-cc46-4906-8e27-403bf65aeb5b", "created": "2026-01-27T05:12:57.735225Z", "modified": "2026-01-27T05:12:57.735225Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tag.viptrack']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.735225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe15ccd1-2427-48c9-b554-f1328840d964", "created": "2026-01-27T05:12:57.735893Z", "modified": "2026-01-27T05:12:57.735893Z", "relationship_type": "indicates", "source_ref": "indicator--e7b44ea3-cc46-4906-8e27-403bf65aeb5b", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5027bb37-ea6f-4581-8384-b76d1a634065", "created": "2026-01-27T05:12:57.73607Z", "modified": "2026-01-27T05:12:57.73607Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2E104C33C8DA4DB32E59A45701D8E0C4CAD16BD3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.73607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--177a7513-1d41-4051-93d4-921956c7e78e", "created": "2026-01-27T05:12:57.736866Z", "modified": "2026-01-27T05:12:57.736866Z", "relationship_type": "indicates", "source_ref": "indicator--5027bb37-ea6f-4581-8384-b76d1a634065", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7698a3d-331c-41fd-bfca-7e530159d902", "created": "2026-01-27T05:12:57.737044Z", "modified": "2026-01-27T05:12:57.737044Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5A73C8FE7CBA5C9E70B0DF69B3A111C42A10B215']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.737044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--284e58c0-49d3-450f-b90d-4d5e92e38bdd", "created": "2026-01-27T05:12:57.73783Z", "modified": "2026-01-27T05:12:57.73783Z", "relationship_type": "indicates", "source_ref": "indicator--f7698a3d-331c-41fd-bfca-7e530159d902", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c9cb55-e77e-413f-813c-9deafbd3851d", "created": "2026-01-27T05:12:57.738008Z", "modified": "2026-01-27T05:12:57.738008Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='437940A417B58B1C2CDB85EDE4D37C3DE6EFDC95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.738008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e279cf1-d1f8-4d66-924f-783b162e08ae", "created": "2026-01-27T05:12:57.738801Z", "modified": "2026-01-27T05:12:57.738801Z", "relationship_type": "indicates", "source_ref": "indicator--05c9cb55-e77e-413f-813c-9deafbd3851d", "target_ref": "malware--90fa1dc4-0778-4f74-a040-dd1f1f20d862"}, {"type": "malware", "spec_version": "2.1", "id": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f", "created": "2026-01-27T05:12:57.738978Z", "modified": "2026-01-27T05:12:57.738978Z", "name": "EasyLogger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2d487e4-0a66-4e8c-b0ba-b036b351b8ad", "created": "2026-01-27T05:12:57.739148Z", "modified": "2026-01-27T05:12:57.739148Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='97.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.739148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a76a38dd-dae7-4e18-8a47-47a3ee86fa30", "created": "2026-01-27T05:12:57.739834Z", "modified": "2026-01-27T05:12:57.739834Z", "relationship_type": "indicates", "source_ref": "indicator--f2d487e4-0a66-4e8c-b0ba-b036b351b8ad", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fea3908-3243-4bc5-9a83-942710589678", "created": "2026-01-27T05:12:57.740012Z", "modified": "2026-01-27T05:12:57.740012Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.740012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--700ed85b-10f8-4b4c-813c-8b93053dad52", "created": "2026-01-27T05:12:57.740692Z", "modified": "2026-01-27T05:12:57.740692Z", "relationship_type": "indicates", "source_ref": "indicator--2fea3908-3243-4bc5-9a83-942710589678", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19062145-b426-4dc1-942e-cae570aa7dad", "created": "2026-01-27T05:12:57.740898Z", "modified": "2026-01-27T05:12:57.740898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.740898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51cb984e-dbfd-4097-bfc4-8ad33db0e161", "created": "2026-01-27T05:12:57.741605Z", "modified": "2026-01-27T05:12:57.741605Z", "relationship_type": "indicates", "source_ref": "indicator--19062145-b426-4dc1-942e-cae570aa7dad", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27b8468-ccb3-4040-8dc2-cfee7b23c048", "created": "2026-01-27T05:12:57.741802Z", "modified": "2026-01-27T05:12:57.741802Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.741802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8870c3f-8f0a-424e-a209-608c029b62dd", "created": "2026-01-27T05:12:57.742504Z", "modified": "2026-01-27T05:12:57.742504Z", "relationship_type": "indicates", "source_ref": "indicator--c27b8468-ccb3-4040-8dc2-cfee7b23c048", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c4ad58-2885-4a1e-9636-99eb3e2b518d", "created": "2026-01-27T05:12:57.742689Z", "modified": "2026-01-27T05:12:57.742689Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.742689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4acb948e-a875-4016-9225-9dcb3c5bfb7f", "created": "2026-01-27T05:12:57.743537Z", "modified": "2026-01-27T05:12:57.743537Z", "relationship_type": "indicates", "source_ref": "indicator--a0c4ad58-2885-4a1e-9636-99eb3e2b518d", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dccc71c-3e60-4f87-a60b-9246be335394", "created": "2026-01-27T05:12:57.743716Z", "modified": "2026-01-27T05:12:57.743716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta-api.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.743716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ee2fe88-3ec1-416d-ac95-09d15c6e06f2", "created": "2026-01-27T05:12:57.744408Z", "modified": "2026-01-27T05:12:57.744408Z", "relationship_type": "indicates", "source_ref": "indicator--3dccc71c-3e60-4f87-a60b-9246be335394", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fa1a13-2768-498c-8f3e-d5febaa46343", "created": "2026-01-27T05:12:57.744587Z", "modified": "2026-01-27T05:12:57.744587Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.744587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd906ee6-ed6e-4464-8b68-08ecc2da1963", "created": "2026-01-27T05:12:57.745277Z", "modified": "2026-01-27T05:12:57.745277Z", "relationship_type": "indicates", "source_ref": "indicator--67fa1a13-2768-498c-8f3e-d5febaa46343", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d30152a2-92b8-448c-b52a-a66df51e5904", "created": "2026-01-27T05:12:57.745457Z", "modified": "2026-01-27T05:12:57.745457Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easyloggerbeta.azurewebsites.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.745457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7064f8-002d-4a71-9ff0-b7ae09197347", "created": "2026-01-27T05:12:57.746179Z", "modified": "2026-01-27T05:12:57.746179Z", "relationship_type": "indicates", "source_ref": "indicator--d30152a2-92b8-448c-b52a-a66df51e5904", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0143778-2645-4713-9eef-b35cb32720d3", "created": "2026-01-27T05:12:57.746355Z", "modified": "2026-01-27T05:12:57.746355Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='elcore-api.azurewebsites.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.746355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53bcd551-a802-4ada-a9b5-1fbadf5405c5", "created": "2026-01-27T05:12:57.747057Z", "modified": "2026-01-27T05:12:57.747057Z", "relationship_type": "indicates", "source_ref": "indicator--c0143778-2645-4713-9eef-b35cb32720d3", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21809a91-4c88-42c6-9beb-6960ee29a565", "created": "2026-01-27T05:12:57.747236Z", "modified": "2026-01-27T05:12:57.747236Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='inv.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.747236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e587a2c-7d14-474f-8a10-6600361e913b", "created": "2026-01-27T05:12:57.74792Z", "modified": "2026-01-27T05:12:57.74792Z", "relationship_type": "indicates", "source_ref": "indicator--21809a91-4c88-42c6-9beb-6960ee29a565", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ca1017-af16-47ff-81fe-ce8732839f65", "created": "2026-01-27T05:12:57.748102Z", "modified": "2026-01-27T05:12:57.748102Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pro.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.748102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e7eb98-3f2a-4e10-a4f4-687d3110f3a3", "created": "2026-01-27T05:12:57.74878Z", "modified": "2026-01-27T05:12:57.74878Z", "relationship_type": "indicates", "source_ref": "indicator--a9ca1017-af16-47ff-81fe-ce8732839f65", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0003a8-d7be-444e-ab1f-775b20731974", "created": "2026-01-27T05:12:57.748956Z", "modified": "2026-01-27T05:12:57.748956Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ps97mailer.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.748956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1acd1178-a54e-484e-b4de-23692fde6fe2", "created": "2026-01-27T05:12:57.749634Z", "modified": "2026-01-27T05:12:57.749634Z", "relationship_type": "indicates", "source_ref": "indicator--3b0003a8-d7be-444e-ab1f-775b20731974", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc4c5e5-543f-4a49-9271-09179d8c5536", "created": "2026-01-27T05:12:57.749824Z", "modified": "2026-01-27T05:12:57.749824Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pulsesolutions-net-easy-logger.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.749824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22ecd73d-6e0a-468e-a0c6-30c3d483a2e7", "created": "2026-01-27T05:12:57.750544Z", "modified": "2026-01-27T05:12:57.750544Z", "relationship_type": "indicates", "source_ref": "indicator--7fc4c5e5-543f-4a49-9271-09179d8c5536", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1aab2b-b3ce-4395-b748-fd43806e5900", "created": "2026-01-27T05:12:57.750717Z", "modified": "2026-01-27T05:12:57.750717Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sandbox97.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.750717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96a1c2fb-66ff-4c10-bf6a-b5c9c0feaaf1", "created": "2026-01-27T05:12:57.751542Z", "modified": "2026-01-27T05:12:57.751542Z", "relationship_type": "indicates", "source_ref": "indicator--7c1aab2b-b3ce-4395-b748-fd43806e5900", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae249d9-3e5a-43c2-a1b2-4abe94aac4ae", "created": "2026-01-27T05:12:57.751719Z", "modified": "2026-01-27T05:12:57.751719Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sandbox97.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.751719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dfff2ca-51bb-4009-b689-9ee78c0cb63d", "created": "2026-01-27T05:12:57.752413Z", "modified": "2026-01-27T05:12:57.752413Z", "relationship_type": "indicates", "source_ref": "indicator--8ae249d9-3e5a-43c2-a1b2-4abe94aac4ae", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93571a0-bc09-4b29-9e2f-fbccf73a5c00", "created": "2026-01-27T05:12:57.752595Z", "modified": "2026-01-27T05:12:57.752595Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sandbox97.seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.752595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9115d45-7b82-415e-9ac3-f6614937d27b", "created": "2026-01-27T05:12:57.753301Z", "modified": "2026-01-27T05:12:57.753301Z", "relationship_type": "indicates", "source_ref": "indicator--f93571a0-bc09-4b29-9e2f-fbccf73a5c00", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264a2676-4154-4468-9d72-5ae3e0323a08", "created": "2026-01-27T05:12:57.753491Z", "modified": "2026-01-27T05:12:57.753491Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='senior-safety-189010.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.753491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--929101fb-9057-44b6-9ad9-4a8cb35cc3a4", "created": "2026-01-27T05:12:57.754207Z", "modified": "2026-01-27T05:12:57.754207Z", "relationship_type": "indicates", "source_ref": "indicator--264a2676-4154-4468-9d72-5ae3e0323a08", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6bbcd2-769b-4d14-b76a-0b5baa4ae0e0", "created": "2026-01-27T05:12:57.754388Z", "modified": "2026-01-27T05:12:57.754388Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='servicesloggermobi.azurewebsites.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.754388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c87a9553-4b5a-4c66-a5fc-9ea625e1e026", "created": "2026-01-27T05:12:57.755122Z", "modified": "2026-01-27T05:12:57.755122Z", "relationship_type": "indicates", "source_ref": "indicator--bb6bbcd2-769b-4d14-b76a-0b5baa4ae0e0", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a125deb-defa-4671-97ba-7fded64c9540", "created": "2026-01-27T05:12:57.7553Z", "modified": "2026-01-27T05:12:57.7553Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='waws-prod-blu-247-e7b3.eastus.cloudapp.azure.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.7553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1865d98-03fb-48c9-b001-8b12e8d844ec", "created": "2026-01-27T05:12:57.756044Z", "modified": "2026-01-27T05:12:57.756044Z", "relationship_type": "indicates", "source_ref": "indicator--1a125deb-defa-4671-97ba-7fded64c9540", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27748542-fce1-4f9f-b85f-ca044468b046", "created": "2026-01-27T05:12:57.756222Z", "modified": "2026-01-27T05:12:57.756222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='waws-prod-blu-247.sip.azurewebsites.windows.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.756222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c4ed97f-723d-46c0-859a-071a0e1d4022", "created": "2026-01-27T05:12:57.756954Z", "modified": "2026-01-27T05:12:57.756954Z", "relationship_type": "indicates", "source_ref": "indicator--27748542-fce1-4f9f-b85f-ca044468b046", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba71e1-b614-4d01-a344-2286f8f792d4", "created": "2026-01-27T05:12:57.757129Z", "modified": "2026-01-27T05:12:57.757129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.757129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--762d0719-88d8-4ce9-b94b-f106943af2ef", "created": "2026-01-27T05:12:57.757811Z", "modified": "2026-01-27T05:12:57.757811Z", "relationship_type": "indicates", "source_ref": "indicator--e2ba71e1-b614-4d01-a344-2286f8f792d4", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7913fe9-a0f0-4014-b6a9-dc58a15e9ab7", "created": "2026-01-27T05:12:57.757994Z", "modified": "2026-01-27T05:12:57.757994Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.757994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55fad7b4-770a-477f-a551-1f4ea2a63b10", "created": "2026-01-27T05:12:57.758678Z", "modified": "2026-01-27T05:12:57.758678Z", "relationship_type": "indicates", "source_ref": "indicator--f7913fe9-a0f0-4014-b6a9-dc58a15e9ab7", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5659247f-7f37-4831-a34e-aedf68d564e1", "created": "2026-01-27T05:12:57.758872Z", "modified": "2026-01-27T05:12:57.758872Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.758872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd77ca80-69eb-4ebc-8683-836d16eabea1", "created": "2026-01-27T05:12:57.759656Z", "modified": "2026-01-27T05:12:57.759656Z", "relationship_type": "indicates", "source_ref": "indicator--5659247f-7f37-4831-a34e-aedf68d564e1", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fe2d9e-6144-44dd-af8a-ebe1554c3bc5", "created": "2026-01-27T05:12:57.759855Z", "modified": "2026-01-27T05:12:57.759855Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.childsafetytrackerapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.759855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1973b8d-f1f4-41f7-92ed-a49e03e60d34", "created": "2026-01-27T05:12:57.760543Z", "modified": "2026-01-27T05:12:57.760543Z", "relationship_type": "indicates", "source_ref": "indicator--f7fe2d9e-6144-44dd-af8a-ebe1554c3bc5", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e0e6d8-8262-49ae-b3c3-0eba5fb3c4e0", "created": "2026-01-27T05:12:57.760716Z", "modified": "2026-01-27T05:12:57.760716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.seniorsafetyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.760716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d46f3619-f00e-46e7-8443-b2cbaf56808c", "created": "2026-01-27T05:12:57.761415Z", "modified": "2026-01-27T05:12:57.761415Z", "relationship_type": "indicates", "source_ref": "indicator--b3e0e6d8-8262-49ae-b3c3-0eba5fb3c4e0", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ca1ae9-6b8a-4960-815d-8bccaeab2572", "created": "2026-01-27T05:12:57.76159Z", "modified": "2026-01-27T05:12:57.76159Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='inv.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.76159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad99b94d-61d2-4363-ba44-ab292a0476b2", "created": "2026-01-27T05:12:57.762294Z", "modified": "2026-01-27T05:12:57.762294Z", "relationship_type": "indicates", "source_ref": "indicator--e8ca1ae9-6b8a-4960-815d-8bccaeab2572", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a13598-06a0-4b73-9847-28f2a88b78ad", "created": "2026-01-27T05:12:57.76247Z", "modified": "2026-01-27T05:12:57.76247Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pro.logger.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.76247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a2bc0e9-0f45-4cc8-8310-f46111ef89c8", "created": "2026-01-27T05:12:57.763162Z", "modified": "2026-01-27T05:12:57.763162Z", "relationship_type": "indicates", "source_ref": "indicator--36a13598-06a0-4b73-9847-28f2a88b78ad", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5070149-f287-4a67-b26c-e2e33fd82070", "created": "2026-01-27T05:12:57.763337Z", "modified": "2026-01-27T05:12:57.763337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='afadbc7afb73fb9b95d8209bce8441032ffdc1d2d636d957bc3bb54bdd89c71a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.763337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c7bc6bb-0b87-4754-9f09-b07c3cb3eb20", "created": "2026-01-27T05:12:57.764171Z", "modified": "2026-01-27T05:12:57.764171Z", "relationship_type": "indicates", "source_ref": "indicator--f5070149-f287-4a67-b26c-e2e33fd82070", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6d6930-236d-4734-958f-e595df21ef35", "created": "2026-01-27T05:12:57.764348Z", "modified": "2026-01-27T05:12:57.764348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17fdeaaac973b0802caf128f876ec30faefb1341c5050de284709c035759fc22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.764348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--546f4530-92d8-4872-80dd-5fe7f4f46414", "created": "2026-01-27T05:12:57.765187Z", "modified": "2026-01-27T05:12:57.765187Z", "relationship_type": "indicates", "source_ref": "indicator--7c6d6930-236d-4734-958f-e595df21ef35", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a72094-5d3d-4a0c-afbb-1f0a0cbbab10", "created": "2026-01-27T05:12:57.765372Z", "modified": "2026-01-27T05:12:57.765372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c9504d0ce1395de79b30d5cb40f621a648ce218129e998c398fd44956df4b39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.765372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3d279e9-bcfb-43ad-a043-ea54e18bdf7e", "created": "2026-01-27T05:12:57.766212Z", "modified": "2026-01-27T05:12:57.766212Z", "relationship_type": "indicates", "source_ref": "indicator--29a72094-5d3d-4a0c-afbb-1f0a0cbbab10", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d936172-146d-47b9-9630-883a31de4c0e", "created": "2026-01-27T05:12:57.766395Z", "modified": "2026-01-27T05:12:57.766395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='354b5dcbd4ca6e3281e1584ab15b92a2e79b3f33cf791a01803d9045de022a87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.766395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d742afa-f062-43ed-aede-0528eb09d2dc", "created": "2026-01-27T05:12:57.767252Z", "modified": "2026-01-27T05:12:57.767252Z", "relationship_type": "indicates", "source_ref": "indicator--1d936172-146d-47b9-9630-883a31de4c0e", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbc3192-f37c-4c4b-b055-d3a08f46201b", "created": "2026-01-27T05:12:57.767429Z", "modified": "2026-01-27T05:12:57.767429Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8ba451b2aead09660235de21d2361575839be51d14f974ff71b4e74c944467e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.767429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1a39104-d95a-4452-99f3-d307593b351a", "created": "2026-01-27T05:12:57.768402Z", "modified": "2026-01-27T05:12:57.768402Z", "relationship_type": "indicates", "source_ref": "indicator--1bbc3192-f37c-4c4b-b055-d3a08f46201b", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a504736-eb4a-4643-9a88-3fd3564cb19c", "created": "2026-01-27T05:12:57.76858Z", "modified": "2026-01-27T05:12:57.76858Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9139a94cc8faf55427974883ac4c75aa7e010257ffc673eee9381c3db0b14744']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.76858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec902952-71a0-4d82-8957-decd72dcb929", "created": "2026-01-27T05:12:57.76942Z", "modified": "2026-01-27T05:12:57.76942Z", "relationship_type": "indicates", "source_ref": "indicator--4a504736-eb4a-4643-9a88-3fd3564cb19c", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3997d44e-747f-4ca2-a6a4-2db7cfd5e789", "created": "2026-01-27T05:12:57.769599Z", "modified": "2026-01-27T05:12:57.769599Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e5e309f9ad7954ba2a6ec25badac9ebbd82ead4e553a6928d6d4cce60b713138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.769599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3311bc16-f106-4582-acc8-037bbf81a611", "created": "2026-01-27T05:12:57.770432Z", "modified": "2026-01-27T05:12:57.770432Z", "relationship_type": "indicates", "source_ref": "indicator--3997d44e-747f-4ca2-a6a4-2db7cfd5e789", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbfd3799-ab6c-457e-813c-0b8be8886f70", "created": "2026-01-27T05:12:57.770609Z", "modified": "2026-01-27T05:12:57.770609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18e3249eda93d29928a847508546450cd2ec56054e19bfe34ac21aba2392b7ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.770609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21ded6a7-9a1c-4749-9668-dffe2c9120c5", "created": "2026-01-27T05:12:57.771441Z", "modified": "2026-01-27T05:12:57.771441Z", "relationship_type": "indicates", "source_ref": "indicator--cbfd3799-ab6c-457e-813c-0b8be8886f70", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7baf554-16f5-4ba8-8b75-5c8ad39f908c", "created": "2026-01-27T05:12:57.771617Z", "modified": "2026-01-27T05:12:57.771617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8ba96349a9c2be3e198256a6b0dd803435d919770cf0db7541fba4f8387c3cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.771617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7baad07f-8172-4639-bc85-27fcc8f02dae", "created": "2026-01-27T05:12:57.772508Z", "modified": "2026-01-27T05:12:57.772508Z", "relationship_type": "indicates", "source_ref": "indicator--b7baf554-16f5-4ba8-8b75-5c8ad39f908c", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19814f89-4b74-45f6-ab81-b55c455f3201", "created": "2026-01-27T05:12:57.772697Z", "modified": "2026-01-27T05:12:57.772697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d919252d2e7f7430c647bfb37ebf073ff1cc0934b1530de0a664f7a01563c69f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.772697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cec32a04-5dbf-4fa5-b565-3011a5776e59", "created": "2026-01-27T05:12:57.77354Z", "modified": "2026-01-27T05:12:57.77354Z", "relationship_type": "indicates", "source_ref": "indicator--19814f89-4b74-45f6-ab81-b55c455f3201", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3f94d7-dc3a-4d0c-9aed-527c58c16714", "created": "2026-01-27T05:12:57.773717Z", "modified": "2026-01-27T05:12:57.773717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00bd13864abccee1f8c781cd92dbd438acdefde5c7b33b2be7572e3491859692']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.773717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3faa4165-62e4-4984-8cbf-0808bf2d7a46", "created": "2026-01-27T05:12:57.77457Z", "modified": "2026-01-27T05:12:57.77457Z", "relationship_type": "indicates", "source_ref": "indicator--db3f94d7-dc3a-4d0c-9aed-527c58c16714", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fed1e3-7237-4008-b0a1-6b288921d2d6", "created": "2026-01-27T05:12:57.774756Z", "modified": "2026-01-27T05:12:57.774756Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f944adb68c483acc7a30ef569d8d42fc52cab59a7b27f50d17434c359bd389c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.774756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5b304c0-8a07-401d-8414-358cf22f6347", "created": "2026-01-27T05:12:57.775593Z", "modified": "2026-01-27T05:12:57.775593Z", "relationship_type": "indicates", "source_ref": "indicator--79fed1e3-7237-4008-b0a1-6b288921d2d6", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e98d6-6236-418e-9ffa-f5565b6ae7c5", "created": "2026-01-27T05:12:57.775785Z", "modified": "2026-01-27T05:12:57.775785Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fb2298f86314ec2f6a9576dfde72e8c04c1f043eec062c0ef6b5488401ffae5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.775785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48a89c75-5aa7-4b24-bbf1-5709af577f62", "created": "2026-01-27T05:12:57.776613Z", "modified": "2026-01-27T05:12:57.776613Z", "relationship_type": "indicates", "source_ref": "indicator--4e6e98d6-6236-418e-9ffa-f5565b6ae7c5", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8582220-e64e-4440-b7f4-a5ab4b0afd5f", "created": "2026-01-27T05:12:57.776804Z", "modified": "2026-01-27T05:12:57.776804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='972550785e90d4829e60bac4cd76c8cbf1edb3e2b246c13719d0331be14c0b95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.776804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d3c2ef2-d57d-4794-93d3-396b4e0e5d51", "created": "2026-01-27T05:12:57.77777Z", "modified": "2026-01-27T05:12:57.77777Z", "relationship_type": "indicates", "source_ref": "indicator--a8582220-e64e-4440-b7f4-a5ab4b0afd5f", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f4761a-cfda-4773-8467-039e054418c2", "created": "2026-01-27T05:12:57.777951Z", "modified": "2026-01-27T05:12:57.777951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='411788a467aa79c387f1f1f6a1977f4d053b5d512e7304d1a09bc6cc331a0291']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.777951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f448932a-03d8-44e6-9895-bba906368ecd", "created": "2026-01-27T05:12:57.778785Z", "modified": "2026-01-27T05:12:57.778785Z", "relationship_type": "indicates", "source_ref": "indicator--35f4761a-cfda-4773-8467-039e054418c2", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c51fec1-38e5-4b86-a382-4ec14964ac23", "created": "2026-01-27T05:12:57.778971Z", "modified": "2026-01-27T05:12:57.778971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6051aa1995cb631183b037893b0da787eb2ffdddd2b1b4327fcd6f8306e4354e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.778971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce5e3cd4-2022-46ec-868e-2ddda5a9e7b8", "created": "2026-01-27T05:12:57.77981Z", "modified": "2026-01-27T05:12:57.77981Z", "relationship_type": "indicates", "source_ref": "indicator--9c51fec1-38e5-4b86-a382-4ec14964ac23", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f4b7d9-e5e2-465d-93f2-267e17f59348", "created": "2026-01-27T05:12:57.779988Z", "modified": "2026-01-27T05:12:57.779988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9af1d9d0c13acfdc4de301f49423954022dffe00b9e1139392ea907e1ae5135f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.779988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d737c51e-7f4a-415e-8615-a842fbb7f3fd", "created": "2026-01-27T05:12:57.780818Z", "modified": "2026-01-27T05:12:57.780818Z", "relationship_type": "indicates", "source_ref": "indicator--f9f4b7d9-e5e2-465d-93f2-267e17f59348", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3a4cbf-beb8-4bdd-b3be-9672d7506d13", "created": "2026-01-27T05:12:57.780996Z", "modified": "2026-01-27T05:12:57.780996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbeea229410935271c3c957fc5488072e666ed29515bbffb4e08e39dd169077a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.780996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91a3b152-d2c2-427f-814c-9e87a3d178c6", "created": "2026-01-27T05:12:57.78184Z", "modified": "2026-01-27T05:12:57.78184Z", "relationship_type": "indicates", "source_ref": "indicator--1c3a4cbf-beb8-4bdd-b3be-9672d7506d13", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13115a24-e31f-460b-8e06-985ab9e57f64", "created": "2026-01-27T05:12:57.782021Z", "modified": "2026-01-27T05:12:57.782021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e76c4e421558f4dea735a845bbedd1524846263d806a992a3154926f7f95c914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.782021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8aab4846-a13a-45a5-912c-e5d733b6db84", "created": "2026-01-27T05:12:57.78287Z", "modified": "2026-01-27T05:12:57.78287Z", "relationship_type": "indicates", "source_ref": "indicator--13115a24-e31f-460b-8e06-985ab9e57f64", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a3fbb2-a7f9-4baf-b154-4590aa01f200", "created": "2026-01-27T05:12:57.783048Z", "modified": "2026-01-27T05:12:57.783048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9f8a542a3ba6e9ec9fb5ec6c79e6c0aa98bafed1b44df55aab16b40a0625fd3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.783048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fd138ad-e434-4ac3-a0a7-784e84d7d8ac", "created": "2026-01-27T05:12:57.783886Z", "modified": "2026-01-27T05:12:57.783886Z", "relationship_type": "indicates", "source_ref": "indicator--10a3fbb2-a7f9-4baf-b154-4590aa01f200", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c71721e-a92c-4b2e-93b7-4881686cd9d3", "created": "2026-01-27T05:12:57.784064Z", "modified": "2026-01-27T05:12:57.784064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6aaceba978bf1178e0f26310b7842c279ac6497a1abf259c99e1c83d9800c9bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.784064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08bb0c0b-2a98-48c3-9708-37e6abe12b81", "created": "2026-01-27T05:12:57.784899Z", "modified": "2026-01-27T05:12:57.784899Z", "relationship_type": "indicates", "source_ref": "indicator--1c71721e-a92c-4b2e-93b7-4881686cd9d3", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4c15cd-aaf0-4497-bacb-fc3fa594e019", "created": "2026-01-27T05:12:57.785086Z", "modified": "2026-01-27T05:12:57.785086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32dd7e9982153978a5887d618ed2fcc752d00613fde0289a4871eade2cbb4674']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.785086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2eb0bc98-5e5a-479e-974f-3a25ed90502a", "created": "2026-01-27T05:12:57.785939Z", "modified": "2026-01-27T05:12:57.785939Z", "relationship_type": "indicates", "source_ref": "indicator--ef4c15cd-aaf0-4497-bacb-fc3fa594e019", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e940498-dd4f-4fa3-a873-10fea8c00e58", "created": "2026-01-27T05:12:57.786116Z", "modified": "2026-01-27T05:12:57.786116Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7f60ce4e1ddde8dc7f866b17067ef1ff337f4073edb052fe5fa68a759276003']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.786116Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1029fe6-92a7-4766-9631-0daf23bc0392", "created": "2026-01-27T05:12:57.787084Z", "modified": "2026-01-27T05:12:57.787084Z", "relationship_type": "indicates", "source_ref": "indicator--4e940498-dd4f-4fa3-a873-10fea8c00e58", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6317fe21-56f7-4693-a15e-fbc7041a402d", "created": "2026-01-27T05:12:57.787261Z", "modified": "2026-01-27T05:12:57.787261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad4497491dd50c7dba63b557800c49fc3a16fe1f7ef6213df985b6e9c365daed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.787261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--552b7f33-029f-42ca-b754-20e3a7e9c5a5", "created": "2026-01-27T05:12:57.788103Z", "modified": "2026-01-27T05:12:57.788103Z", "relationship_type": "indicates", "source_ref": "indicator--6317fe21-56f7-4693-a15e-fbc7041a402d", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f761f38-aff5-444d-9cb6-6ee7bea991d8", "created": "2026-01-27T05:12:57.78828Z", "modified": "2026-01-27T05:12:57.78828Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61c7f52d3fedb428288b8c949a05b8301c5c2e6fbdf43848220e950086598b8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.78828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--121b4bb2-22a8-4c6c-9c69-6152c53637a0", "created": "2026-01-27T05:12:57.789121Z", "modified": "2026-01-27T05:12:57.789121Z", "relationship_type": "indicates", "source_ref": "indicator--4f761f38-aff5-444d-9cb6-6ee7bea991d8", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc057b0-d54f-451b-aa13-71f5f1ce5487", "created": "2026-01-27T05:12:57.789299Z", "modified": "2026-01-27T05:12:57.789299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f01fb1f694ae7133710ad9ef725808d2dd4fd73cccf98be9c70644767c1fab2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.789299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8e4a99d-99bb-4c51-bc58-1cca824b5ec0", "created": "2026-01-27T05:12:57.790154Z", "modified": "2026-01-27T05:12:57.790154Z", "relationship_type": "indicates", "source_ref": "indicator--9fc057b0-d54f-451b-aa13-71f5f1ce5487", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a712bbcb-60fa-4d36-8a73-a2fa6a319665", "created": "2026-01-27T05:12:57.790334Z", "modified": "2026-01-27T05:12:57.790334Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29f8127cd10082ff0254141ec7f327da46c24843e3108fccf8762b208228868f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.790334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86fd001d-a3b3-40c9-8710-e90af66fdcd6", "created": "2026-01-27T05:12:57.791174Z", "modified": "2026-01-27T05:12:57.791174Z", "relationship_type": "indicates", "source_ref": "indicator--a712bbcb-60fa-4d36-8a73-a2fa6a319665", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130e5dd6-4373-4f80-93a4-2601563a519b", "created": "2026-01-27T05:12:57.791352Z", "modified": "2026-01-27T05:12:57.791352Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='289ce92449f253dd853338ffe9172bc66afd757d88f19c28375709bd869644e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.791352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0dbb8e8-8653-42f3-99fa-ed8315797a8c", "created": "2026-01-27T05:12:57.792183Z", "modified": "2026-01-27T05:12:57.792183Z", "relationship_type": "indicates", "source_ref": "indicator--130e5dd6-4373-4f80-93a4-2601563a519b", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300b8a53-1860-477a-85cd-da8462e51650", "created": "2026-01-27T05:12:57.792366Z", "modified": "2026-01-27T05:12:57.792366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e48e0a6c56c655cb8027e3b7c405c5521f6867bc4835eeea6bfb2da13aecd5b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.792366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c675812a-088c-4ee7-b838-0a81d7634568", "created": "2026-01-27T05:12:57.793222Z", "modified": "2026-01-27T05:12:57.793222Z", "relationship_type": "indicates", "source_ref": "indicator--300b8a53-1860-477a-85cd-da8462e51650", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0401131-0007-4fcd-a5d6-e4c5d6787433", "created": "2026-01-27T05:12:57.793467Z", "modified": "2026-01-27T05:12:57.793467Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffa2d012c4a9966d4ecc527c6c79d0292d2ef08e15d5190ac1b8419193457a1e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.793467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0ba714f-24df-469f-b3d2-29352b2f0644", "created": "2026-01-27T05:12:57.794357Z", "modified": "2026-01-27T05:12:57.794357Z", "relationship_type": "indicates", "source_ref": "indicator--f0401131-0007-4fcd-a5d6-e4c5d6787433", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613974b7-b688-46f2-a68b-fe4aa7de0b0c", "created": "2026-01-27T05:12:57.794537Z", "modified": "2026-01-27T05:12:57.794537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36c4a03f3195fd0279afd6760797348a07478a0522e6556dabb6e6e925a928d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.794537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d29f7aed-e3b6-4193-9d05-2d60a2187810", "created": "2026-01-27T05:12:57.795503Z", "modified": "2026-01-27T05:12:57.795503Z", "relationship_type": "indicates", "source_ref": "indicator--613974b7-b688-46f2-a68b-fe4aa7de0b0c", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4e97b7-8b37-421e-a9c8-968099ca338a", "created": "2026-01-27T05:12:57.795684Z", "modified": "2026-01-27T05:12:57.795684Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d9d78cc88d322195395dbc3667cb8fdfdbecf3c9bd55917ebf885376e6663829']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.795684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59b04dfa-89c9-4242-a439-fab6029fefda", "created": "2026-01-27T05:12:57.796531Z", "modified": "2026-01-27T05:12:57.796531Z", "relationship_type": "indicates", "source_ref": "indicator--6a4e97b7-8b37-421e-a9c8-968099ca338a", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d59a873-4654-4fe0-ae25-275ffbe40d88", "created": "2026-01-27T05:12:57.796708Z", "modified": "2026-01-27T05:12:57.796708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0980b9d5a8b4ed687738ccb9ecd39b40baf85e28e75f926494907d5d0c10907e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.796708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50dda2df-b72f-46ab-b264-ab43e369af75", "created": "2026-01-27T05:12:57.797555Z", "modified": "2026-01-27T05:12:57.797555Z", "relationship_type": "indicates", "source_ref": "indicator--8d59a873-4654-4fe0-ae25-275ffbe40d88", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03aa758-0be9-4eee-9971-17d6326c779e", "created": "2026-01-27T05:12:57.797733Z", "modified": "2026-01-27T05:12:57.797733Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='282924a246f2962e42afaa8b2dee0b49989e0e88c1aabd8387176661aabca07a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.797733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c112811b-1ae2-4620-9f94-b9e5d47b8366", "created": "2026-01-27T05:12:57.798573Z", "modified": "2026-01-27T05:12:57.798573Z", "relationship_type": "indicates", "source_ref": "indicator--e03aa758-0be9-4eee-9971-17d6326c779e", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3775805-3034-40de-8a21-d3c348712555", "created": "2026-01-27T05:12:57.798765Z", "modified": "2026-01-27T05:12:57.798765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0a79a098bc718e2c67db89d0a37b7247ec2fcfcdd35d14bd8c3fd2f72d482fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.798765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c65d212-9218-4759-98a3-07e411f23558", "created": "2026-01-27T05:12:57.799588Z", "modified": "2026-01-27T05:12:57.799588Z", "relationship_type": "indicates", "source_ref": "indicator--a3775805-3034-40de-8a21-d3c348712555", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6bf1e5-bdfc-400a-b3e8-5d87b1f4a482", "created": "2026-01-27T05:12:57.799778Z", "modified": "2026-01-27T05:12:57.799778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3d8f0861e78c1f6907f5d4847f3e04f294fbc8e22bf90311da73c3decdd4226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.799778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef9773ee-72c8-4d67-9e58-ad722435cdd8", "created": "2026-01-27T05:12:57.800606Z", "modified": "2026-01-27T05:12:57.800606Z", "relationship_type": "indicates", "source_ref": "indicator--ce6bf1e5-bdfc-400a-b3e8-5d87b1f4a482", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc6be14-f214-4972-a139-d4bb1b08f233", "created": "2026-01-27T05:12:57.8008Z", "modified": "2026-01-27T05:12:57.8008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1373c0b0e89b895bba9d86c720f715419a98e4047c12ab6c68dc1dcbfdc7f62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.8008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0780a6b0-1bc8-464c-8ce5-bafc92848284", "created": "2026-01-27T05:12:57.801624Z", "modified": "2026-01-27T05:12:57.801624Z", "relationship_type": "indicates", "source_ref": "indicator--3bc6be14-f214-4972-a139-d4bb1b08f233", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46117e12-00c2-4e54-93fa-8f874e2bc733", "created": "2026-01-27T05:12:57.801817Z", "modified": "2026-01-27T05:12:57.801817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c6d461732dfb332e6043d6ffcd364d03cd8b30980b4afa67d0ed1477d2ab9da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.801817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a3d5687-300f-4ee2-8bdb-8262d4bfba03", "created": "2026-01-27T05:12:57.80265Z", "modified": "2026-01-27T05:12:57.80265Z", "relationship_type": "indicates", "source_ref": "indicator--46117e12-00c2-4e54-93fa-8f874e2bc733", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3ac6e4-46d7-46aa-b427-803e17c78afa", "created": "2026-01-27T05:12:57.802847Z", "modified": "2026-01-27T05:12:57.802847Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ed2ec205d1a492b2846a65d4202bb6943e09165cf145d93a8fd18bc0421d38b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.802847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2680da8d-1cf7-4df2-9497-415c9c96a543", "created": "2026-01-27T05:12:57.803689Z", "modified": "2026-01-27T05:12:57.803689Z", "relationship_type": "indicates", "source_ref": "indicator--9f3ac6e4-46d7-46aa-b427-803e17c78afa", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f8b0a2-aa46-4955-a729-782ad39f4056", "created": "2026-01-27T05:12:57.803887Z", "modified": "2026-01-27T05:12:57.803887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e24bfc5adb0c77b7c773348da561a2600d3eecfffb4428c027ff6fa8652aec22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.803887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7907fbb-f142-417a-bb25-11d644d3a742", "created": "2026-01-27T05:12:57.804857Z", "modified": "2026-01-27T05:12:57.804857Z", "relationship_type": "indicates", "source_ref": "indicator--01f8b0a2-aa46-4955-a729-782ad39f4056", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b523f68-53cc-466f-8e15-cc11640da37b", "created": "2026-01-27T05:12:57.805036Z", "modified": "2026-01-27T05:12:57.805036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09aa8f60b4fc67f24c1a97568e2d385dddf40c4307ad59df06c812129e677a33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.805036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7e51beb-2bec-4c6b-82be-3065210be15f", "created": "2026-01-27T05:12:57.805871Z", "modified": "2026-01-27T05:12:57.805871Z", "relationship_type": "indicates", "source_ref": "indicator--8b523f68-53cc-466f-8e15-cc11640da37b", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc26fd31-f846-426b-a5c7-68c6ff2a43a3", "created": "2026-01-27T05:12:57.806056Z", "modified": "2026-01-27T05:12:57.806056Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='389a112d584290bd70fb929fc73135c3c06c21c315d0175315235f3697b23e2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.806056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d388705d-c18c-4ba3-ae11-33bf5e53637f", "created": "2026-01-27T05:12:57.806912Z", "modified": "2026-01-27T05:12:57.806912Z", "relationship_type": "indicates", "source_ref": "indicator--cc26fd31-f846-426b-a5c7-68c6ff2a43a3", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638b4500-a4ed-4912-9cd0-7883d67a16df", "created": "2026-01-27T05:12:57.807091Z", "modified": "2026-01-27T05:12:57.807091Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66e5fdd27e3e9854385af877179ff9573db9d29927582cd40f19f364cb1b681e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.807091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e7b0682-8e3a-45e6-a154-28bc51041ab9", "created": "2026-01-27T05:12:57.807932Z", "modified": "2026-01-27T05:12:57.807932Z", "relationship_type": "indicates", "source_ref": "indicator--638b4500-a4ed-4912-9cd0-7883d67a16df", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb88feb-c75d-4395-a4c2-9309d1a19be9", "created": "2026-01-27T05:12:57.80811Z", "modified": "2026-01-27T05:12:57.80811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e1ececaf9ee86e31dcd9772637304b314be6e45563d7de1db915e4896173400']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.80811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--045fcf5d-4dbb-4719-ae6f-480f7db38fb3", "created": "2026-01-27T05:12:57.808954Z", "modified": "2026-01-27T05:12:57.808954Z", "relationship_type": "indicates", "source_ref": "indicator--bfb88feb-c75d-4395-a4c2-9309d1a19be9", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ccb279-dc87-466a-86d5-096ce0b6bd77", "created": "2026-01-27T05:12:57.80914Z", "modified": "2026-01-27T05:12:57.80914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f328a85b096ed6aac67720332c06e224ce01e422a13090bd885a7af162bf825']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.80914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07d40ef3-7e77-48d0-81f7-945045906f82", "created": "2026-01-27T05:12:57.80999Z", "modified": "2026-01-27T05:12:57.80999Z", "relationship_type": "indicates", "source_ref": "indicator--09ccb279-dc87-466a-86d5-096ce0b6bd77", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253db6f5-6603-4d4c-82b3-ab879852cade", "created": "2026-01-27T05:12:57.810165Z", "modified": "2026-01-27T05:12:57.810165Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93976fde3c9acefd4707bac5f2bc2d29b55db0deee66a27b7b38301278060f6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.810165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b692650-9e88-4d5a-8279-56416b8aed4d", "created": "2026-01-27T05:12:57.811025Z", "modified": "2026-01-27T05:12:57.811025Z", "relationship_type": "indicates", "source_ref": "indicator--253db6f5-6603-4d4c-82b3-ab879852cade", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cc702c-08dd-447d-98e7-dcbd9b4c6151", "created": "2026-01-27T05:12:57.811207Z", "modified": "2026-01-27T05:12:57.811207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d6df3a8bd15ee450294b011abfd7c85b4129e4866d57b09c9bbd3977f5ae5a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.811207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--403971aa-ccd9-4675-b5e1-293cf87001d2", "created": "2026-01-27T05:12:57.812054Z", "modified": "2026-01-27T05:12:57.812054Z", "relationship_type": "indicates", "source_ref": "indicator--12cc702c-08dd-447d-98e7-dcbd9b4c6151", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cba46d-9e1f-4509-b462-e4622a56b709", "created": "2026-01-27T05:12:57.812232Z", "modified": "2026-01-27T05:12:57.812232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bfd7fbb09425ea712c2123ff051d9b3b1b4011ee2a1d2eee612d68f193d1836']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.812232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be38c640-1637-4b0b-93ae-3accecd7d27e", "created": "2026-01-27T05:12:57.813075Z", "modified": "2026-01-27T05:12:57.813075Z", "relationship_type": "indicates", "source_ref": "indicator--44cba46d-9e1f-4509-b462-e4622a56b709", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c8df2e-e1d9-42dc-b832-e8636a60a340", "created": "2026-01-27T05:12:57.813255Z", "modified": "2026-01-27T05:12:57.813255Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.EasyLogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.813255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c7aefe3-0f54-48cb-bcbe-9ad5e65aa7a5", "created": "2026-01-27T05:12:57.814384Z", "modified": "2026-01-27T05:12:57.814384Z", "relationship_type": "indicates", "source_ref": "indicator--80c8df2e-e1d9-42dc-b832-e8636a60a340", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ee643b-0d93-4ade-8d68-43a803d3d7e6", "created": "2026-01-27T05:12:57.81457Z", "modified": "2026-01-27T05:12:57.81457Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.Easylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.81457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac6a98eb-2f79-44f1-9639-042cdfb6772c", "created": "2026-01-27T05:12:57.815255Z", "modified": "2026-01-27T05:12:57.815255Z", "relationship_type": "indicates", "source_ref": "indicator--07ee643b-0d93-4ade-8d68-43a803d3d7e6", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf2e2cf-edd8-46af-978b-d8ecbe5f6211", "created": "2026-01-27T05:12:57.815435Z", "modified": "2026-01-27T05:12:57.815435Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.Elogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.815435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f6f1c6b-c681-41a6-bf07-7ef13c01ba88", "created": "2026-01-27T05:12:57.816095Z", "modified": "2026-01-27T05:12:57.816095Z", "relationship_type": "indicates", "source_ref": "indicator--1cf2e2cf-edd8-46af-978b-d8ecbe5f6211", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7254b31-6b94-49a6-ace4-0c199470c3c6", "created": "2026-01-27T05:12:57.816276Z", "modified": "2026-01-27T05:12:57.816276Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.childsafetytracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.816276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--207da45c-126f-46eb-9cf3-bb8c1653decc", "created": "2026-01-27T05:12:57.816949Z", "modified": "2026-01-27T05:12:57.816949Z", "relationship_type": "indicates", "source_ref": "indicator--b7254b31-6b94-49a6-ace4-0c199470c3c6", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779408bd-bd03-4a4d-8926-df98b2909f68", "created": "2026-01-27T05:12:57.817129Z", "modified": "2026-01-27T05:12:57.817129Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.seniorsafety']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.817129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--351aba19-8973-4e30-9b28-fd35cd394374", "created": "2026-01-27T05:12:57.817789Z", "modified": "2026-01-27T05:12:57.817789Z", "relationship_type": "indicates", "source_ref": "indicator--779408bd-bd03-4a4d-8926-df98b2909f68", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda04a64-bc44-47f0-8ba4-7d669fa574af", "created": "2026-01-27T05:12:57.817968Z", "modified": "2026-01-27T05:12:57.817968Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='07906D1FA933730B8EB44F03910C88FDAC2C0135']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.817968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01c052e5-8acc-45e5-b8c6-ea8278a4f3db", "created": "2026-01-27T05:12:57.818741Z", "modified": "2026-01-27T05:12:57.818741Z", "relationship_type": "indicates", "source_ref": "indicator--bda04a64-bc44-47f0-8ba4-7d669fa574af", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef77f49-b5c1-4679-ae83-de93f721bf29", "created": "2026-01-27T05:12:57.818933Z", "modified": "2026-01-27T05:12:57.818933Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='24D3251C7A1184649211B9068820545397B112C9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.818933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2206f2b3-af0e-4ba5-b921-9f83a4b9d374", "created": "2026-01-27T05:12:57.8197Z", "modified": "2026-01-27T05:12:57.8197Z", "relationship_type": "indicates", "source_ref": "indicator--3ef77f49-b5c1-4679-ae83-de93f721bf29", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6459de1-1668-425d-97ce-312ecc946456", "created": "2026-01-27T05:12:57.819894Z", "modified": "2026-01-27T05:12:57.819894Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35D7CF057BFA5023CE739A725ADA0DA1FD34D1FF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.819894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2663a87d-88c0-40c2-8d8d-6c88eafd3d01", "created": "2026-01-27T05:12:57.820662Z", "modified": "2026-01-27T05:12:57.820662Z", "relationship_type": "indicates", "source_ref": "indicator--c6459de1-1668-425d-97ce-312ecc946456", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c418bf32-9f2b-4bed-b58c-c34c49ca58e0", "created": "2026-01-27T05:12:57.820857Z", "modified": "2026-01-27T05:12:57.820857Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8698564FBEC700167FCC53D1AED00FFADF6BED6C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.820857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bc5d72d-0d99-40ae-be7e-15c664f42d72", "created": "2026-01-27T05:12:57.821634Z", "modified": "2026-01-27T05:12:57.821634Z", "relationship_type": "indicates", "source_ref": "indicator--c418bf32-9f2b-4bed-b58c-c34c49ca58e0", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6b85a4-13ef-4d27-a7d3-077a5687d472", "created": "2026-01-27T05:12:57.82184Z", "modified": "2026-01-27T05:12:57.82184Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8F23E1457ADC6189F6ED504A60DF8896FEC6D970']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.82184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a914c2b5-711a-4d85-bee9-1f94ee1abfbe", "created": "2026-01-27T05:12:57.822783Z", "modified": "2026-01-27T05:12:57.822783Z", "relationship_type": "indicates", "source_ref": "indicator--dc6b85a4-13ef-4d27-a7d3-077a5687d472", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c764ea40-75e5-42b6-89dd-31fdac76aae9", "created": "2026-01-27T05:12:57.822968Z", "modified": "2026-01-27T05:12:57.822968Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D15A276F181C839E0390672A43065E8D97F140E9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.822968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65981854-3939-448c-b719-4aa05bd7c365", "created": "2026-01-27T05:12:57.823759Z", "modified": "2026-01-27T05:12:57.823759Z", "relationship_type": "indicates", "source_ref": "indicator--c764ea40-75e5-42b6-89dd-31fdac76aae9", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229ea8cd-c122-4f79-a86a-24f5906715dd", "created": "2026-01-27T05:12:57.823943Z", "modified": "2026-01-27T05:12:57.823943Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='53FADDAF873B7BD00E5AD9F5F05E7888A398CE70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.823943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ab870e6-4a11-4acc-a475-c13446aca1ae", "created": "2026-01-27T05:12:57.82472Z", "modified": "2026-01-27T05:12:57.82472Z", "relationship_type": "indicates", "source_ref": "indicator--229ea8cd-c122-4f79-a86a-24f5906715dd", "target_ref": "malware--062360eb-77f9-4c38-ae13-a509cc4ab76f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--44b91195-2717-4bf7-b511-be613732fb99", "created": "2026-01-27T05:12:57.824914Z", "modified": "2026-01-27T05:12:57.824914Z", "name": "Hoverwatch", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14e2ff0-2565-4eb7-8010-da70c2c3f876", "created": "2026-01-27T05:12:57.825088Z", "modified": "2026-01-27T05:12:57.825088Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.825088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1b59df6-fafd-405d-9512-521e86fffe2c", "created": "2026-01-27T05:12:57.825765Z", "modified": "2026-01-27T05:12:57.825765Z", "relationship_type": "indicates", "source_ref": "indicator--d14e2ff0-2565-4eb7-8010-da70c2c3f876", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d56be63-855d-4bb1-9eb9-2a1a0e5a395b", "created": "2026-01-27T05:12:57.825945Z", "modified": "2026-01-27T05:12:57.825945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.825945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4191328c-32ea-46eb-b74e-4df45ecd0912", "created": "2026-01-27T05:12:57.826605Z", "modified": "2026-01-27T05:12:57.826605Z", "relationship_type": "indicates", "source_ref": "indicator--4d56be63-855d-4bb1-9eb9-2a1a0e5a395b", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e25b53-c75c-4b20-9dcc-d2efc6072c6d", "created": "2026-01-27T05:12:57.826798Z", "modified": "2026-01-27T05:12:57.826798Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.hwa.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.826798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13ebbcd6-2d2d-4e12-94a7-7d4856c5e8a7", "created": "2026-01-27T05:12:57.827458Z", "modified": "2026-01-27T05:12:57.827458Z", "relationship_type": "indicates", "source_ref": "indicator--30e25b53-c75c-4b20-9dcc-d2efc6072c6d", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b1ccdd-88f3-4851-a1ce-82b4040fd4c6", "created": "2026-01-27T05:12:57.827631Z", "modified": "2026-01-27T05:12:57.827631Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.827631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4cf9d74-a30e-4501-a40b-f2df828830af", "created": "2026-01-27T05:12:57.828317Z", "modified": "2026-01-27T05:12:57.828317Z", "relationship_type": "indicates", "source_ref": "indicator--a7b1ccdd-88f3-4851-a1ce-82b4040fd4c6", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb17a4fc-aabd-4793-94ef-9e4123044a7d", "created": "2026-01-27T05:12:57.82849Z", "modified": "2026-01-27T05:12:57.82849Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.82849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc63fcb6-d33d-4684-bf4f-b50610320ab0", "created": "2026-01-27T05:12:57.829183Z", "modified": "2026-01-27T05:12:57.829183Z", "relationship_type": "indicates", "source_ref": "indicator--bb17a4fc-aabd-4793-94ef-9e4123044a7d", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be8d4be-5c8a-42d4-b1e4-ae1947a29a77", "created": "2026-01-27T05:12:57.82936Z", "modified": "2026-01-27T05:12:57.82936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev2.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.82936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f944612-5325-4acf-9592-d2782bedbb6d", "created": "2026-01-27T05:12:57.830048Z", "modified": "2026-01-27T05:12:57.830048Z", "relationship_type": "indicates", "source_ref": "indicator--1be8d4be-5c8a-42d4-b1e4-ae1947a29a77", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65919fc4-4b11-4885-b0e7-711dc510c10a", "created": "2026-01-27T05:12:57.83023Z", "modified": "2026-01-27T05:12:57.83023Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='downloads.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.83023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faf2f252-6d1a-461a-86db-e3f3cb27ba43", "created": "2026-01-27T05:12:57.831051Z", "modified": "2026-01-27T05:12:57.831051Z", "relationship_type": "indicates", "source_ref": "indicator--65919fc4-4b11-4885-b0e7-711dc510c10a", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2299d0e5-15af-4d91-8fa7-b31b68827f65", "created": "2026-01-27T05:12:57.83123Z", "modified": "2026-01-27T05:12:57.83123Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hover.watch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.83123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3992bc8e-d23a-4b2d-8dd2-0836e20b8707", "created": "2026-01-27T05:12:57.831916Z", "modified": "2026-01-27T05:12:57.831916Z", "relationship_type": "indicates", "source_ref": "indicator--2299d0e5-15af-4d91-8fa7-b31b68827f65", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ed4b84-9a91-42b8-a983-8cbb2740d4b5", "created": "2026-01-27T05:12:57.832094Z", "modified": "2026-01-27T05:12:57.832094Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.832094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e78badcc-76d6-4b15-88b6-57848f0df04b", "created": "2026-01-27T05:12:57.83279Z", "modified": "2026-01-27T05:12:57.83279Z", "relationship_type": "indicates", "source_ref": "indicator--53ed4b84-9a91-42b8-a983-8cbb2740d4b5", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044e006f-b4e8-4bb0-ac57-a19d994558d9", "created": "2026-01-27T05:12:57.83297Z", "modified": "2026-01-27T05:12:57.83297Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hwa.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.83297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0a8f3c1-da84-494a-95e0-3e6cf6aa7d60", "created": "2026-01-27T05:12:57.833625Z", "modified": "2026-01-27T05:12:57.833625Z", "relationship_type": "indicates", "source_ref": "indicator--044e006f-b4e8-4bb0-ac57-a19d994558d9", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40996e2-3b66-4d8d-9991-04c1b7995073", "created": "2026-01-27T05:12:57.833817Z", "modified": "2026-01-27T05:12:57.833817Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hwm.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.833817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b2dcf1e-2e78-4669-b314-1e213fe0df01", "created": "2026-01-27T05:12:57.834475Z", "modified": "2026-01-27T05:12:57.834475Z", "relationship_type": "indicates", "source_ref": "indicator--a40996e2-3b66-4d8d-9991-04c1b7995073", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827ab1f7-5821-4336-b67c-d8959ce73055", "created": "2026-01-27T05:12:57.83465Z", "modified": "2026-01-27T05:12:57.83465Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hws.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.83465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a82dd8aa-d2a0-485f-8296-05a412ee1172", "created": "2026-01-27T05:12:57.83533Z", "modified": "2026-01-27T05:12:57.83533Z", "relationship_type": "indicates", "source_ref": "indicator--827ab1f7-5821-4336-b67c-d8959ce73055", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e07ebcc-3f00-4a0e-a0a3-c574b011961d", "created": "2026-01-27T05:12:57.835504Z", "modified": "2026-01-27T05:12:57.835504Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hww.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.835504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4810be19-da3d-4e9c-b299-30f0d1cc6783", "created": "2026-01-27T05:12:57.836187Z", "modified": "2026-01-27T05:12:57.836187Z", "relationship_type": "indicates", "source_ref": "indicator--1e07ebcc-3f00-4a0e-a0a3-c574b011961d", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06b3a85-9fdd-49c0-87ba-7e70d4df1076", "created": "2026-01-27T05:12:57.836364Z", "modified": "2026-01-27T05:12:57.836364Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.836364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--636eae8e-e57f-4c42-8186-ccf502023dfb", "created": "2026-01-27T05:12:57.837077Z", "modified": "2026-01-27T05:12:57.837077Z", "relationship_type": "indicates", "source_ref": "indicator--d06b3a85-9fdd-49c0-87ba-7e70d4df1076", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00919b2-9f07-4b15-aeaa-b9cfe0972728", "created": "2026-01-27T05:12:57.837258Z", "modified": "2026-01-27T05:12:57.837258Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i1.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.837258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aee544a5-0383-4912-b567-c400e910c54c", "created": "2026-01-27T05:12:57.837951Z", "modified": "2026-01-27T05:12:57.837951Z", "relationship_type": "indicates", "source_ref": "indicator--e00919b2-9f07-4b15-aeaa-b9cfe0972728", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad505acc-e3bd-4559-8f8d-c2ead39e3ff3", "created": "2026-01-27T05:12:57.838129Z", "modified": "2026-01-27T05:12:57.838129Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='office.hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.838129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a19e183b-f84e-4b62-970b-90a1bf8b1abb", "created": "2026-01-27T05:12:57.838933Z", "modified": "2026-01-27T05:12:57.838933Z", "relationship_type": "indicates", "source_ref": "indicator--ad505acc-e3bd-4559-8f8d-c2ead39e3ff3", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6732daba-28ce-4fc8-b838-16712af43b38", "created": "2026-01-27T05:12:57.839112Z", "modified": "2026-01-27T05:12:57.839112Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rec.hw.cab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.839112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f4a4351-0571-4b18-8dfd-5c82bdc34aa8", "created": "2026-01-27T05:12:57.839797Z", "modified": "2026-01-27T05:12:57.839797Z", "relationship_type": "indicates", "source_ref": "indicator--6732daba-28ce-4fc8-b838-16712af43b38", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6334fb-0c32-44cc-94fb-b03cd6382b2f", "created": "2026-01-27T05:12:57.83998Z", "modified": "2026-01-27T05:12:57.83998Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.83998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69512a80-5738-4999-9dd3-eb7fc879a6b7", "created": "2026-01-27T05:12:57.840671Z", "modified": "2026-01-27T05:12:57.840671Z", "relationship_type": "indicates", "source_ref": "indicator--0b6334fb-0c32-44cc-94fb-b03cd6382b2f", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea1ec7b-d9e3-4513-b9c7-a1975b2f643c", "created": "2026-01-27T05:12:57.840867Z", "modified": "2026-01-27T05:12:57.840867Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.syncvch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.840867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e535591-203a-47d9-bbdc-f95d2d113cda", "created": "2026-01-27T05:12:57.84154Z", "modified": "2026-01-27T05:12:57.84154Z", "relationship_type": "indicates", "source_ref": "indicator--5ea1ec7b-d9e3-4513-b9c7-a1975b2f643c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98beef0-43b4-46d5-ad48-bab4d0816059", "created": "2026-01-27T05:12:57.841722Z", "modified": "2026-01-27T05:12:57.841722Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.841722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ae5db8e-83b9-4c1e-a620-8d69dfd254e1", "created": "2026-01-27T05:12:57.842407Z", "modified": "2026-01-27T05:12:57.842407Z", "relationship_type": "indicates", "source_ref": "indicator--a98beef0-43b4-46d5-ad48-bab4d0816059", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcffa09b-cbc3-4b7b-9082-e022d1e37f46", "created": "2026-01-27T05:12:57.842588Z", "modified": "2026-01-27T05:12:57.842588Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='de.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.842588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70af6854-5623-4153-9cad-0a99e542f531", "created": "2026-01-27T05:12:57.843277Z", "modified": "2026-01-27T05:12:57.843277Z", "relationship_type": "indicates", "source_ref": "indicator--fcffa09b-cbc3-4b7b-9082-e022d1e37f46", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb91d66d-ded0-41ab-9bac-b82ac7ea6dfc", "created": "2026-01-27T05:12:57.843462Z", "modified": "2026-01-27T05:12:57.843462Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='es.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.843462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90c35b03-a07d-4b3d-8a3d-c420dcad4cb3", "created": "2026-01-27T05:12:57.844151Z", "modified": "2026-01-27T05:12:57.844151Z", "relationship_type": "indicates", "source_ref": "indicator--eb91d66d-ded0-41ab-9bac-b82ac7ea6dfc", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c74996-137f-4fd3-9577-1a991a651281", "created": "2026-01-27T05:12:57.844327Z", "modified": "2026-01-27T05:12:57.844327Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fr.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.844327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5925e48-89ae-4848-9235-dc48c43a014b", "created": "2026-01-27T05:12:57.84501Z", "modified": "2026-01-27T05:12:57.84501Z", "relationship_type": "indicates", "source_ref": "indicator--94c74996-137f-4fd3-9577-1a991a651281", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff4b133-932a-4024-806a-e6ad3a8a818c", "created": "2026-01-27T05:12:57.84519Z", "modified": "2026-01-27T05:12:57.84519Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='highstermobi.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.84519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce6f9142-e93d-412d-9df6-4c861c124ee7", "created": "2026-01-27T05:12:57.845876Z", "modified": "2026-01-27T05:12:57.845876Z", "relationship_type": "indicates", "source_ref": "indicator--aff4b133-932a-4024-806a-e6ad3a8a818c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7c791e-23db-4db7-982d-3b167e5c025c", "created": "2026-01-27T05:12:57.846052Z", "modified": "2026-01-27T05:12:57.846052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hover.watch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.846052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7a838b1-e932-43b8-937b-277cc6bb3bbf", "created": "2026-01-27T05:12:57.846843Z", "modified": "2026-01-27T05:12:57.846843Z", "relationship_type": "indicates", "source_ref": "indicator--1f7c791e-23db-4db7-982d-3b167e5c025c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bceb186-b8ff-4c58-95f7-425d69c93a95", "created": "2026-01-27T05:12:57.847023Z", "modified": "2026-01-27T05:12:57.847023Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.847023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6cc1cda-0c95-4837-9530-94225dbd198d", "created": "2026-01-27T05:12:57.847692Z", "modified": "2026-01-27T05:12:57.847692Z", "relationship_type": "indicates", "source_ref": "indicator--4bceb186-b8ff-4c58-95f7-425d69c93a95", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3238166-9874-4cd0-a520-c22e0de5eadd", "created": "2026-01-27T05:12:57.847887Z", "modified": "2026-01-27T05:12:57.847887Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hu.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.847887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cc48e05-d456-44c5-9816-641f61a334f3", "created": "2026-01-27T05:12:57.848552Z", "modified": "2026-01-27T05:12:57.848552Z", "relationship_type": "indicates", "source_ref": "indicator--d3238166-9874-4cd0-a520-c22e0de5eadd", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c192142-62e1-4767-a426-5885651c2ef8", "created": "2026-01-27T05:12:57.848729Z", "modified": "2026-01-27T05:12:57.848729Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hws.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.848729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3666686c-559f-4986-9e86-9c379382af5a", "created": "2026-01-27T05:12:57.849402Z", "modified": "2026-01-27T05:12:57.849402Z", "relationship_type": "indicates", "source_ref": "indicator--3c192142-62e1-4767-a426-5885651c2ef8", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8376cf95-5156-456e-8baf-f21d7c022051", "created": "2026-01-27T05:12:57.849577Z", "modified": "2026-01-27T05:12:57.849577Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='it.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.849577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41d5aa7b-412f-4afa-8a92-9de9849b0b0d", "created": "2026-01-27T05:12:57.850273Z", "modified": "2026-01-27T05:12:57.850273Z", "relationship_type": "indicates", "source_ref": "indicator--8376cf95-5156-456e-8baf-f21d7c022051", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc9a7c1-49d6-4383-8bb4-df9de93384bb", "created": "2026-01-27T05:12:57.850459Z", "modified": "2026-01-27T05:12:57.850459Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.hws.icu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.850459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7297dddb-ef82-4068-a38e-800e2a83ed39", "created": "2026-01-27T05:12:57.851135Z", "modified": "2026-01-27T05:12:57.851135Z", "relationship_type": "indicates", "source_ref": "indicator--ffc9a7c1-49d6-4383-8bb4-df9de93384bb", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e490ea0-80ca-45b8-bb0e-3078070d7526", "created": "2026-01-27T05:12:57.851311Z", "modified": "2026-01-27T05:12:57.851311Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nl.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.851311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1722d1f2-3775-4bd1-b25f-0ff7de75639c", "created": "2026-01-27T05:12:57.851994Z", "modified": "2026-01-27T05:12:57.851994Z", "relationship_type": "indicates", "source_ref": "indicator--7e490ea0-80ca-45b8-bb0e-3078070d7526", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd88173-e1fe-43e5-9c63-e227e919aba5", "created": "2026-01-27T05:12:57.852169Z", "modified": "2026-01-27T05:12:57.852169Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prospybubble.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.852169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a31fa466-d3d8-4abe-b9ee-238996a4e6c1", "created": "2026-01-27T05:12:57.852863Z", "modified": "2026-01-27T05:12:57.852863Z", "relationship_type": "indicates", "source_ref": "indicator--4cd88173-e1fe-43e5-9c63-e227e919aba5", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b0c8d8-3fb5-4189-ae92-9392641f39c1", "created": "2026-01-27T05:12:57.853046Z", "modified": "2026-01-27T05:12:57.853046Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.853046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fa81581-4054-4884-8a51-e6f3b8d084dc", "created": "2026-01-27T05:12:57.853706Z", "modified": "2026-01-27T05:12:57.853706Z", "relationship_type": "indicates", "source_ref": "indicator--31b0c8d8-3fb5-4189-ae92-9392641f39c1", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda519f1-3338-4639-aa1f-b3045533b883", "created": "2026-01-27T05:12:57.853897Z", "modified": "2026-01-27T05:12:57.853897Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.853897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9975d985-0b45-4de6-8a69-3ecbf7aaac3b", "created": "2026-01-27T05:12:57.854676Z", "modified": "2026-01-27T05:12:57.854676Z", "relationship_type": "indicates", "source_ref": "indicator--bda519f1-3338-4639-aa1f-b3045533b883", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db4cd06-0f7a-4065-86a1-51ef9d22e395", "created": "2026-01-27T05:12:57.854869Z", "modified": "2026-01-27T05:12:57.854869Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.854869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98161338-a1f9-48e6-a899-63e7054eec7e", "created": "2026-01-27T05:12:57.855528Z", "modified": "2026-01-27T05:12:57.855528Z", "relationship_type": "indicates", "source_ref": "indicator--2db4cd06-0f7a-4065-86a1-51ef9d22e395", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61218b60-7cb3-4d2c-945b-1ee30cadfcb4", "created": "2026-01-27T05:12:57.855702Z", "modified": "2026-01-27T05:12:57.855702Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='refog.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.855702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e45d7647-2657-4114-ac74-4291ef94483b", "created": "2026-01-27T05:12:57.856379Z", "modified": "2026-01-27T05:12:57.856379Z", "relationship_type": "indicates", "source_ref": "indicator--61218b60-7cb3-4d2c-945b-1ee30cadfcb4", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7323f337-a00c-404c-8855-9e26b20b864c", "created": "2026-01-27T05:12:57.856553Z", "modified": "2026-01-27T05:12:57.856553Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ro.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.856553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d66eb46-aa46-4718-969a-24dcdc67284a", "created": "2026-01-27T05:12:57.857244Z", "modified": "2026-01-27T05:12:57.857244Z", "relationship_type": "indicates", "source_ref": "indicator--7323f337-a00c-404c-8855-9e26b20b864c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79380eab-381b-43d9-aedd-9d2354a54dcf", "created": "2026-01-27T05:12:57.857425Z", "modified": "2026-01-27T05:12:57.857425Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.hoverwatch.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.857425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d382211a-ef9d-4729-9f79-7972bc2628e3", "created": "2026-01-27T05:12:57.858143Z", "modified": "2026-01-27T05:12:57.858143Z", "relationship_type": "indicates", "source_ref": "indicator--79380eab-381b-43d9-aedd-9d2354a54dcf", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8816bd7a-4bc2-4640-b8d6-2805ee72b29f", "created": "2026-01-27T05:12:57.85832Z", "modified": "2026-01-27T05:12:57.85832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.refog.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.85832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85304c94-ca7b-4cb3-8d18-abea3f6ee5c6", "created": "2026-01-27T05:12:57.859005Z", "modified": "2026-01-27T05:12:57.859005Z", "relationship_type": "indicates", "source_ref": "indicator--8816bd7a-4bc2-4640-b8d6-2805ee72b29f", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effc8e46-922f-4936-9c98-62cbbe405f33", "created": "2026-01-27T05:12:57.859182Z", "modified": "2026-01-27T05:12:57.859182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dfd16f4511101b1700c66ce1fbab90a5c071fd91300cddacf7db512e60c2f593']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.859182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1684503-d0da-4554-a203-ee9aa3ccabbf", "created": "2026-01-27T05:12:57.860035Z", "modified": "2026-01-27T05:12:57.860035Z", "relationship_type": "indicates", "source_ref": "indicator--effc8e46-922f-4936-9c98-62cbbe405f33", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d5df51-3bf3-4f24-b07f-5718c857659f", "created": "2026-01-27T05:12:57.860228Z", "modified": "2026-01-27T05:12:57.860228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d71add7cd70d52a8e2ccbd6edd9b082f33cf561db3f93b8bd331a787ae8d8069']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.860228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e000ab86-8811-49c4-b9c9-536c93c86f81", "created": "2026-01-27T05:12:57.861099Z", "modified": "2026-01-27T05:12:57.861099Z", "relationship_type": "indicates", "source_ref": "indicator--60d5df51-3bf3-4f24-b07f-5718c857659f", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d40ad11-ef72-44ef-8f3c-fa0861cb55c2", "created": "2026-01-27T05:12:57.861279Z", "modified": "2026-01-27T05:12:57.861279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f1468cf727c5833853ee5fcfbb525a83c54619f97939258d1a6b6ec75969357']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.861279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0032795d-c9ee-4677-ae38-fa25c2364b3f", "created": "2026-01-27T05:12:57.862133Z", "modified": "2026-01-27T05:12:57.862133Z", "relationship_type": "indicates", "source_ref": "indicator--7d40ad11-ef72-44ef-8f3c-fa0861cb55c2", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55249036-c3a0-49c3-97a4-547df79d796a", "created": "2026-01-27T05:12:57.862311Z", "modified": "2026-01-27T05:12:57.862311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf7cf560bc07799400b21a271521c924a027e4cce236dc9a3790f24da0e80097']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.862311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1963212d-214e-4257-bfe2-e0aefd55fd3b", "created": "2026-01-27T05:12:57.863277Z", "modified": "2026-01-27T05:12:57.863277Z", "relationship_type": "indicates", "source_ref": "indicator--55249036-c3a0-49c3-97a4-547df79d796a", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe1d353-3df0-4efe-8d18-464d902f4e08", "created": "2026-01-27T05:12:57.863456Z", "modified": "2026-01-27T05:12:57.863456Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c61b33f97ebe874e3ec161690ba3ea9e5aa941f17e02e79d4944adb62fd0853']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.863456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f238683f-4153-47e3-9c39-2d940911b0f0", "created": "2026-01-27T05:12:57.864296Z", "modified": "2026-01-27T05:12:57.864296Z", "relationship_type": "indicates", "source_ref": "indicator--dbe1d353-3df0-4efe-8d18-464d902f4e08", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4480c7ed-fed3-4d7c-a5aa-dd1cbae18dc3", "created": "2026-01-27T05:12:57.864474Z", "modified": "2026-01-27T05:12:57.864474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f1d2ad4ba2f1e3b65792b213d43744c7cd2aff1a832e2f45acde5a0a4a84701']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.864474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bf5db99-6323-41fc-ae33-7fb1f16b932c", "created": "2026-01-27T05:12:57.865314Z", "modified": "2026-01-27T05:12:57.865314Z", "relationship_type": "indicates", "source_ref": "indicator--4480c7ed-fed3-4d7c-a5aa-dd1cbae18dc3", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722bc63e-cd63-4816-94bb-7791c1e4ce58", "created": "2026-01-27T05:12:57.865492Z", "modified": "2026-01-27T05:12:57.865492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4285828eade067fd3229a10079b13aedc168d3440f6fe22c611f77701a9a4ee6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.865492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0d37943-1d51-4e48-aaff-fa9b420762f0", "created": "2026-01-27T05:12:57.866337Z", "modified": "2026-01-27T05:12:57.866337Z", "relationship_type": "indicates", "source_ref": "indicator--722bc63e-cd63-4816-94bb-7791c1e4ce58", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798da1a4-c917-49c0-90c1-62e5a50b7744", "created": "2026-01-27T05:12:57.866515Z", "modified": "2026-01-27T05:12:57.866515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='649552d0431edc9bae9bde32f6eef9fa84024a47f576ba86e70d0fd5a3f36d62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.866515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2ec0a3e-c002-4046-a033-4134b2cc7cae", "created": "2026-01-27T05:12:57.867367Z", "modified": "2026-01-27T05:12:57.867367Z", "relationship_type": "indicates", "source_ref": "indicator--798da1a4-c917-49c0-90c1-62e5a50b7744", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203b15fd-5e3f-47a1-b6c2-78051904603f", "created": "2026-01-27T05:12:57.867546Z", "modified": "2026-01-27T05:12:57.867546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b31d2fcd456f58adfe16b4b074124be618c4d81231342b98bae8b87e3f8c6f1f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.867546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--694daabd-445c-4d40-a825-f3c389faeac2", "created": "2026-01-27T05:12:57.868385Z", "modified": "2026-01-27T05:12:57.868385Z", "relationship_type": "indicates", "source_ref": "indicator--203b15fd-5e3f-47a1-b6c2-78051904603f", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38700b48-fb56-4cae-8874-58c805267a53", "created": "2026-01-27T05:12:57.868565Z", "modified": "2026-01-27T05:12:57.868565Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='efbe52ccccec13b0639d43ffd46aabab109f94732ffade78812502cd3971d2fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.868565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f135a71c-086a-464c-af14-b32ca9a125b4", "created": "2026-01-27T05:12:57.869415Z", "modified": "2026-01-27T05:12:57.869415Z", "relationship_type": "indicates", "source_ref": "indicator--38700b48-fb56-4cae-8874-58c805267a53", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c3562e-cb3f-4237-9043-a5bc1fd55b6e", "created": "2026-01-27T05:12:57.869599Z", "modified": "2026-01-27T05:12:57.869599Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='533af9199639b5020addb4c6ccf7d6f9dce2deae7276137b1e75bf513b7a2f9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.869599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dcbc896-087d-4a7c-932e-70608feb2d57", "created": "2026-01-27T05:12:57.870443Z", "modified": "2026-01-27T05:12:57.870443Z", "relationship_type": "indicates", "source_ref": "indicator--f8c3562e-cb3f-4237-9043-a5bc1fd55b6e", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981724a1-d77f-462e-b883-4eb7c3a13c0a", "created": "2026-01-27T05:12:57.87062Z", "modified": "2026-01-27T05:12:57.87062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca67b603e41b81be9176cefbe4f7c6a8bc4772c9b60da8316377cf032556d0e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.87062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f34f9846-42cd-46cf-809e-a09a73254603", "created": "2026-01-27T05:12:57.871458Z", "modified": "2026-01-27T05:12:57.871458Z", "relationship_type": "indicates", "source_ref": "indicator--981724a1-d77f-462e-b883-4eb7c3a13c0a", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061998e8-9359-45d9-b3e4-a75877af622f", "created": "2026-01-27T05:12:57.871633Z", "modified": "2026-01-27T05:12:57.871633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e32cd90b7d31dd786df87e09546eee8237dbb7f83ad300407cd4e839ac2c30c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.871633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96ad8b41-bad2-4397-bb1e-6940a5a727d2", "created": "2026-01-27T05:12:57.872621Z", "modified": "2026-01-27T05:12:57.872621Z", "relationship_type": "indicates", "source_ref": "indicator--061998e8-9359-45d9-b3e4-a75877af622f", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094ffa81-3a8f-479b-ab36-06288e1ba4b3", "created": "2026-01-27T05:12:57.87283Z", "modified": "2026-01-27T05:12:57.87283Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00b7b5b659f0d8fe8d8890c1928ae8862e8f369aa0b97d5b13263b6d3a4016ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.87283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50fb7cda-d1aa-41cf-99d8-9d7000a5b8fa", "created": "2026-01-27T05:12:57.873672Z", "modified": "2026-01-27T05:12:57.873672Z", "relationship_type": "indicates", "source_ref": "indicator--094ffa81-3a8f-479b-ab36-06288e1ba4b3", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adc0188-f395-43fd-ab75-eba26ca3e488", "created": "2026-01-27T05:12:57.873869Z", "modified": "2026-01-27T05:12:57.873869Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf056638e09afda32ee30d49f55b0679a33b48c50904ce92631e5da464f4c19d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.873869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--769ecb50-2800-494d-bccd-0fd63cb5c427", "created": "2026-01-27T05:12:57.874693Z", "modified": "2026-01-27T05:12:57.874693Z", "relationship_type": "indicates", "source_ref": "indicator--8adc0188-f395-43fd-ab75-eba26ca3e488", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9be0db-cd43-42c2-b5e9-b3d3142d5208", "created": "2026-01-27T05:12:57.874887Z", "modified": "2026-01-27T05:12:57.874887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8237488be720903fdf4aa951ccf850b0aae4a980d9cdba388b124f021a1bc7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.874887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d736b3c-f0c1-42e8-afc5-c09b4b15fa77", "created": "2026-01-27T05:12:57.875701Z", "modified": "2026-01-27T05:12:57.875701Z", "relationship_type": "indicates", "source_ref": "indicator--bf9be0db-cd43-42c2-b5e9-b3d3142d5208", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325885a3-9d64-41a9-ba98-040b95423f0c", "created": "2026-01-27T05:12:57.875896Z", "modified": "2026-01-27T05:12:57.875896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d933cb48462898e5cfb360a530f927dd6834fcbb32f6577a1602607709b08d7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.875896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96d76cdd-906b-4960-8345-efeb6b2be253", "created": "2026-01-27T05:12:57.876724Z", "modified": "2026-01-27T05:12:57.876724Z", "relationship_type": "indicates", "source_ref": "indicator--325885a3-9d64-41a9-ba98-040b95423f0c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797595ac-7bf3-4111-ab13-01a801b19ee2", "created": "2026-01-27T05:12:57.876917Z", "modified": "2026-01-27T05:12:57.876917Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3b8642927b2d5f6cbb5bcd117f770dfeb0d9179f6aafb7b5357c2b63f07b1dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.876917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce38a565-6d73-4125-8acb-52ae40dd430f", "created": "2026-01-27T05:12:57.87774Z", "modified": "2026-01-27T05:12:57.87774Z", "relationship_type": "indicates", "source_ref": "indicator--797595ac-7bf3-4111-ab13-01a801b19ee2", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d81717-a5de-49ec-997c-1c8a937a3b75", "created": "2026-01-27T05:12:57.877933Z", "modified": "2026-01-27T05:12:57.877933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd82087ae2d9fbd7ab3c7be3a06ff30ec6d7c40400dc2497c3e5839953c48d69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.877933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ef4985e-3e70-40f3-b0f7-828e0cdc2e37", "created": "2026-01-27T05:12:57.878782Z", "modified": "2026-01-27T05:12:57.878782Z", "relationship_type": "indicates", "source_ref": "indicator--37d81717-a5de-49ec-997c-1c8a937a3b75", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb006d2-ef65-40cc-b3d0-582d94b304ec", "created": "2026-01-27T05:12:57.878961Z", "modified": "2026-01-27T05:12:57.878961Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10128147241f0815954bc145323ad36c271309fdff2794d090ec96c51820e70f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.878961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f707515-0946-4163-adaf-dcd4d12af24f", "created": "2026-01-27T05:12:57.879802Z", "modified": "2026-01-27T05:12:57.879802Z", "relationship_type": "indicates", "source_ref": "indicator--8cb006d2-ef65-40cc-b3d0-582d94b304ec", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78602930-960c-410c-add6-2a8cc6e2530a", "created": "2026-01-27T05:12:57.879984Z", "modified": "2026-01-27T05:12:57.879984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='615fd55f6857081495a6a6b019df89c25c6e6834e7e30a6c4bd8104e1da75ea2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.879984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--733bf085-3620-476d-bf58-4df3e03743e4", "created": "2026-01-27T05:12:57.880827Z", "modified": "2026-01-27T05:12:57.880827Z", "relationship_type": "indicates", "source_ref": "indicator--78602930-960c-410c-add6-2a8cc6e2530a", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2988b60-5ddc-4348-9581-6d2d7a2f43f4", "created": "2026-01-27T05:12:57.881005Z", "modified": "2026-01-27T05:12:57.881005Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35e7bc0aa4450af68cc8fae1d2220ea5823ca19d35adc6da12d6f51e48bd8551']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.881005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d808487f-20b9-4ff9-a183-78d03552e9be", "created": "2026-01-27T05:12:57.881966Z", "modified": "2026-01-27T05:12:57.881966Z", "relationship_type": "indicates", "source_ref": "indicator--e2988b60-5ddc-4348-9581-6d2d7a2f43f4", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c36db7-bebf-48df-9302-43c6effc982e", "created": "2026-01-27T05:12:57.882145Z", "modified": "2026-01-27T05:12:57.882145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58bf54327ff51b5630681cee4c5baeae4c720d182943b4d859d35ca24403ccbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.882145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9abbca3f-7bcb-4b3c-b250-1f89227bd18d", "created": "2026-01-27T05:12:57.882994Z", "modified": "2026-01-27T05:12:57.882994Z", "relationship_type": "indicates", "source_ref": "indicator--88c36db7-bebf-48df-9302-43c6effc982e", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da02766-afef-4584-8e75-3468f928b6a2", "created": "2026-01-27T05:12:57.883174Z", "modified": "2026-01-27T05:12:57.883174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4383eaee4e3f09da61dc68b4f2f1af7b959d3393b5b160d2d20225f66ca83460']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.883174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d1484fd-a572-49cd-ab14-f44023c69500", "created": "2026-01-27T05:12:57.884014Z", "modified": "2026-01-27T05:12:57.884014Z", "relationship_type": "indicates", "source_ref": "indicator--9da02766-afef-4584-8e75-3468f928b6a2", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c116c47c-c357-479c-ab8f-c68419815473", "created": "2026-01-27T05:12:57.884193Z", "modified": "2026-01-27T05:12:57.884193Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4496787c23f2a21a12875acee68b724768494f4f87a198a10c405769ee5ba2a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.884193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--daf161bf-20f2-4755-be57-8b7cbfecdb36", "created": "2026-01-27T05:12:57.885041Z", "modified": "2026-01-27T05:12:57.885041Z", "relationship_type": "indicates", "source_ref": "indicator--c116c47c-c357-479c-ab8f-c68419815473", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ef20c4-4b0d-4070-8218-b67b6d29ceb4", "created": "2026-01-27T05:12:57.885219Z", "modified": "2026-01-27T05:12:57.885219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d22a334010c7e9d366463a9cb77e868712b45561baa6b1fafed9b8169335ecc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.885219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb8c12cb-7977-4ed5-9143-0bf5954ce295", "created": "2026-01-27T05:12:57.886062Z", "modified": "2026-01-27T05:12:57.886062Z", "relationship_type": "indicates", "source_ref": "indicator--57ef20c4-4b0d-4070-8218-b67b6d29ceb4", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87487c9-73d5-4443-bb74-63b76acdf86d", "created": "2026-01-27T05:12:57.886237Z", "modified": "2026-01-27T05:12:57.886237Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b71d7fa108b86302f7809f9b65388d46f9f379287ec3e62ff342d85c8ee33710']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.886237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7433e757-16dd-49ea-aaaf-79a43353f516", "created": "2026-01-27T05:12:57.88708Z", "modified": "2026-01-27T05:12:57.88708Z", "relationship_type": "indicates", "source_ref": "indicator--d87487c9-73d5-4443-bb74-63b76acdf86d", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86609f1e-e384-4015-91fd-ea11b6f13708", "created": "2026-01-27T05:12:57.887255Z", "modified": "2026-01-27T05:12:57.887255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2409cdaa1ce7a6c6e3c4caab729975a199e9bf68946194e4beda44f20e5628c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.887255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65824a83-7752-4df4-9ec0-5b0b0e796973", "created": "2026-01-27T05:12:57.888095Z", "modified": "2026-01-27T05:12:57.888095Z", "relationship_type": "indicates", "source_ref": "indicator--86609f1e-e384-4015-91fd-ea11b6f13708", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b4a9f7-4ecb-4b29-b4c7-3d9a0c80cf1d", "created": "2026-01-27T05:12:57.888269Z", "modified": "2026-01-27T05:12:57.888269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89390464d8f0e6e11235e44bbb57a14d3d365cd6413224263b9e08d1e5d74713']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.888269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c287d578-8b41-450e-a86d-a418a9f3f1ef", "created": "2026-01-27T05:12:57.889116Z", "modified": "2026-01-27T05:12:57.889116Z", "relationship_type": "indicates", "source_ref": "indicator--12b4a9f7-4ecb-4b29-b4c7-3d9a0c80cf1d", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07645e93-0517-400f-ac86-6b89ff4db909", "created": "2026-01-27T05:12:57.889295Z", "modified": "2026-01-27T05:12:57.889295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3091ea4ad98319d4129502465e6e8a01af1e3d39a1690cb0eee870909bafe01f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.889295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f5f83da-c39e-4782-9f60-83e315782ffa", "created": "2026-01-27T05:12:57.890267Z", "modified": "2026-01-27T05:12:57.890267Z", "relationship_type": "indicates", "source_ref": "indicator--07645e93-0517-400f-ac86-6b89ff4db909", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fa6b11-6189-497c-a39f-88476b1c78d1", "created": "2026-01-27T05:12:57.890445Z", "modified": "2026-01-27T05:12:57.890445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50b4b3c76ae285c3562c6bf73752713ee7016f1ad8adeda77e72def340c6bac4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.890445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--225b45d9-bd24-4854-b2c0-fcc4d9d8da6a", "created": "2026-01-27T05:12:57.891279Z", "modified": "2026-01-27T05:12:57.891279Z", "relationship_type": "indicates", "source_ref": "indicator--e7fa6b11-6189-497c-a39f-88476b1c78d1", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db6bc8c-225c-45bf-b772-19ec6a233ea4", "created": "2026-01-27T05:12:57.891455Z", "modified": "2026-01-27T05:12:57.891455Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ff19c25ae603c42019156565b5723133f41bdc2ed0b975444ab450a4a23d2d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.891455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecdb06f5-1224-403c-b199-d5ba6bcc5ff1", "created": "2026-01-27T05:12:57.892294Z", "modified": "2026-01-27T05:12:57.892294Z", "relationship_type": "indicates", "source_ref": "indicator--9db6bc8c-225c-45bf-b772-19ec6a233ea4", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398351ff-3fd7-462d-afa7-46e0aef5e7d6", "created": "2026-01-27T05:12:57.892469Z", "modified": "2026-01-27T05:12:57.892469Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1357b95d5aee15bba6e5bb79ab3d064d9302d677f1150c81d108d1ac763d43a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.892469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3701df97-57f8-45ee-b391-55c087ce424f", "created": "2026-01-27T05:12:57.893309Z", "modified": "2026-01-27T05:12:57.893309Z", "relationship_type": "indicates", "source_ref": "indicator--398351ff-3fd7-462d-afa7-46e0aef5e7d6", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7aef73c-8916-4471-9af9-b2238c283194", "created": "2026-01-27T05:12:57.893498Z", "modified": "2026-01-27T05:12:57.893498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee8668b7e826977a6efd2d0051d7822accb1f09fa2f400adda252fc49d996d89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.893498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--898c6b5c-ed28-4be5-a5d5-e76e3f2b981f", "created": "2026-01-27T05:12:57.894345Z", "modified": "2026-01-27T05:12:57.894345Z", "relationship_type": "indicates", "source_ref": "indicator--d7aef73c-8916-4471-9af9-b2238c283194", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939db3de-7ea9-4921-8581-fd2afd19169a", "created": "2026-01-27T05:12:57.894521Z", "modified": "2026-01-27T05:12:57.894521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='910f43bafff554ad99d9215313d66f244d3da62de2d2f9ebcc6c0b4719f74140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.894521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11f3443f-b5f8-4b88-a4ab-81792a0e4909", "created": "2026-01-27T05:12:57.895365Z", "modified": "2026-01-27T05:12:57.895365Z", "relationship_type": "indicates", "source_ref": "indicator--939db3de-7ea9-4921-8581-fd2afd19169a", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a80d274-ff72-4e5d-a01b-239e596d06ec", "created": "2026-01-27T05:12:57.895541Z", "modified": "2026-01-27T05:12:57.895541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f201a70dd254e3d9ecf64fadffdc4281f4b4995a5757b36e205e651ae9917acf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.895541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83367135-396c-489b-a209-aee93169ad31", "created": "2026-01-27T05:12:57.896378Z", "modified": "2026-01-27T05:12:57.896378Z", "relationship_type": "indicates", "source_ref": "indicator--9a80d274-ff72-4e5d-a01b-239e596d06ec", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7bb6e9-e8d7-44e0-be77-c9b57603bb92", "created": "2026-01-27T05:12:57.896555Z", "modified": "2026-01-27T05:12:57.896555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa83a1dda275ec4c436f97852ea4880f75704a632365da9a696156a039493035']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.896555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2c0b8ce-951a-4566-98da-b049ccde8351", "created": "2026-01-27T05:12:57.8974Z", "modified": "2026-01-27T05:12:57.8974Z", "relationship_type": "indicates", "source_ref": "indicator--de7bb6e9-e8d7-44e0-be77-c9b57603bb92", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a479ed8-3c7c-4727-be61-e23ea18a9824", "created": "2026-01-27T05:12:57.897582Z", "modified": "2026-01-27T05:12:57.897582Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b4cfd6e231a489a9845cca1ca9ff7f1b80cc97b72f04cfe758116fd01aa8d9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.897582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5ccc32f-3071-468e-9883-cef027758c3c", "created": "2026-01-27T05:12:57.898437Z", "modified": "2026-01-27T05:12:57.898437Z", "relationship_type": "indicates", "source_ref": "indicator--2a479ed8-3c7c-4727-be61-e23ea18a9824", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e04213-5757-46c9-9ddb-ebdc83ff627a", "created": "2026-01-27T05:12:57.898614Z", "modified": "2026-01-27T05:12:57.898614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='876c5ec4a6dc4a5eb12325934295cf897a6111865e6c629db79f77c286b1f157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.898614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--518e612f-5f6c-4a12-ba86-e63bf0434279", "created": "2026-01-27T05:12:57.899562Z", "modified": "2026-01-27T05:12:57.899562Z", "relationship_type": "indicates", "source_ref": "indicator--f1e04213-5757-46c9-9ddb-ebdc83ff627a", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3080f886-61e7-4f42-8e9a-73d6bf22c26b", "created": "2026-01-27T05:12:57.899741Z", "modified": "2026-01-27T05:12:57.899741Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3faacaf1994eba94aacd14e97e5bf7ea04e14ed33664041c9321561000bbc8cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.899741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72976a3f-8af3-4c7f-ae3c-9f4733edaa55", "created": "2026-01-27T05:12:57.900584Z", "modified": "2026-01-27T05:12:57.900584Z", "relationship_type": "indicates", "source_ref": "indicator--3080f886-61e7-4f42-8e9a-73d6bf22c26b", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4226572e-2353-4ba1-8c96-1119a370caec", "created": "2026-01-27T05:12:57.900773Z", "modified": "2026-01-27T05:12:57.900773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='314e9832a66fca4020f2e7c03216c0cbfd088dbaf37765f2b943c15529a36b66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.900773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e22b524d-f1f0-42a5-8da5-7aa69f58ff60", "created": "2026-01-27T05:12:57.901603Z", "modified": "2026-01-27T05:12:57.901603Z", "relationship_type": "indicates", "source_ref": "indicator--4226572e-2353-4ba1-8c96-1119a370caec", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f2c9b5-bb5d-489f-b763-e1024821d83e", "created": "2026-01-27T05:12:57.901798Z", "modified": "2026-01-27T05:12:57.901798Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitor.debug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.901798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--617368bb-24a8-483f-9201-a9718d6dac92", "created": "2026-01-27T05:12:57.902482Z", "modified": "2026-01-27T05:12:57.902482Z", "relationship_type": "indicates", "source_ref": "indicator--d5f2c9b5-bb5d-489f-b763-e1024821d83e", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa163784-a1a6-4269-9ac5-41cc54464dd7", "created": "2026-01-27T05:12:57.902663Z", "modified": "2026-01-27T05:12:57.902663Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitor.null']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.902663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3431bfd0-bcec-425e-a060-4db4bd8f4596", "created": "2026-01-27T05:12:57.903361Z", "modified": "2026-01-27T05:12:57.903361Z", "relationship_type": "indicates", "source_ref": "indicator--aa163784-a1a6-4269-9ac5-41cc54464dd7", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b4b9e6-a31d-41f6-8920-eee087504f44", "created": "2026-01-27T05:12:57.903538Z", "modified": "2026-01-27T05:12:57.903538Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitornull']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.903538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc840c27-d703-4877-b6d0-999c52254156", "created": "2026-01-27T05:12:57.904232Z", "modified": "2026-01-27T05:12:57.904232Z", "relationship_type": "indicates", "source_ref": "indicator--c9b4b9e6-a31d-41f6-8920-eee087504f44", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53b938a-d79c-4c09-ac8a-206139eda11b", "created": "2026-01-27T05:12:57.904422Z", "modified": "2026-01-27T05:12:57.904422Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.904422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b946f0f4-fce9-4513-843d-e651e0c3fcc4", "created": "2026-01-27T05:12:57.905106Z", "modified": "2026-01-27T05:12:57.905106Z", "relationship_type": "indicates", "source_ref": "indicator--f53b938a-d79c-4c09-ac8a-206139eda11b", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240321ad-2850-4c74-a1b6-56447164b853", "created": "2026-01-27T05:12:57.905283Z", "modified": "2026-01-27T05:12:57.905283Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.905283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d31724ea-1fee-4b39-bf86-5944daecf11c", "created": "2026-01-27T05:12:57.905968Z", "modified": "2026-01-27T05:12:57.905968Z", "relationship_type": "indicates", "source_ref": "indicator--240321ad-2850-4c74-a1b6-56447164b853", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dfb2bb-cc44-4f6e-969b-6bb0486c86b8", "created": "2026-01-27T05:12:57.906149Z", "modified": "2026-01-27T05:12:57.906149Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnta']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.906149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c29735bd-8bbd-421b-9fbb-e6075e6e4367", "created": "2026-01-27T05:12:57.906825Z", "modified": "2026-01-27T05:12:57.906825Z", "relationship_type": "indicates", "source_ref": "indicator--c8dfb2bb-cc44-4f6e-969b-6bb0486c86b8", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaad22e-e9fc-4634-9d3c-4197effed09d", "created": "2026-01-27T05:12:57.907003Z", "modified": "2026-01-27T05:12:57.907003Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntah']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.907003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e940dab-f9a4-4c50-acbb-d32c07484bc4", "created": "2026-01-27T05:12:57.907801Z", "modified": "2026-01-27T05:12:57.907801Z", "relationship_type": "indicates", "source_ref": "indicator--ecaad22e-e9fc-4634-9d3c-4197effed09d", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39da47db-3109-46e0-a90b-543f43b5c9ec", "created": "2026-01-27T05:12:57.907979Z", "modified": "2026-01-27T05:12:57.907979Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.907979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e80accf-50af-42be-b9c2-1f2a572c41ad", "created": "2026-01-27T05:12:57.908636Z", "modified": "2026-01-27T05:12:57.908636Z", "relationship_type": "indicates", "source_ref": "indicator--39da47db-3109-46e0-a90b-543f43b5c9ec", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d703c9-5c9c-4f9b-a916-782adca1e535", "created": "2026-01-27T05:12:57.908834Z", "modified": "2026-01-27T05:12:57.908834Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.908834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--019a358e-ded5-42bc-9f95-59198ce044f0", "created": "2026-01-27T05:12:57.909494Z", "modified": "2026-01-27T05:12:57.909494Z", "relationship_type": "indicates", "source_ref": "indicator--67d703c9-5c9c-4f9b-a916-782adca1e535", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d70ff8d-f780-4617-b9a8-987907298cba", "created": "2026-01-27T05:12:57.909671Z", "modified": "2026-01-27T05:12:57.909671Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnte']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.909671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0a7661f-fc68-4010-b6b7-36c5d0272139", "created": "2026-01-27T05:12:57.910342Z", "modified": "2026-01-27T05:12:57.910342Z", "relationship_type": "indicates", "source_ref": "indicator--7d70ff8d-f780-4617-b9a8-987907298cba", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cebeac1-25d6-4fc8-9848-da9f1636ee8b", "created": "2026-01-27T05:12:57.910516Z", "modified": "2026-01-27T05:12:57.910516Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.910516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18ee1dfe-ed79-4e29-bb2c-1362809f3029", "created": "2026-01-27T05:12:57.911185Z", "modified": "2026-01-27T05:12:57.911185Z", "relationship_type": "indicates", "source_ref": "indicator--4cebeac1-25d6-4fc8-9848-da9f1636ee8b", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ca6abc-8ac3-46cf-baa9-bf3354153930", "created": "2026-01-27T05:12:57.911359Z", "modified": "2026-01-27T05:12:57.911359Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntg']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.911359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aab0e79f-3b01-4343-b3e4-66d13bcb160d", "created": "2026-01-27T05:12:57.912039Z", "modified": "2026-01-27T05:12:57.912039Z", "relationship_type": "indicates", "source_ref": "indicator--b2ca6abc-8ac3-46cf-baa9-bf3354153930", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de29ee76-fe25-40d6-9f6c-7024f334212c", "created": "2026-01-27T05:12:57.912214Z", "modified": "2026-01-27T05:12:57.912214Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.912214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7306ec75-9102-44ec-935c-3077ca400efb", "created": "2026-01-27T05:12:57.912892Z", "modified": "2026-01-27T05:12:57.912892Z", "relationship_type": "indicates", "source_ref": "indicator--de29ee76-fe25-40d6-9f6c-7024f334212c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b014f368-3ee1-46a4-8df0-dcbf5210d7e5", "created": "2026-01-27T05:12:57.913066Z", "modified": "2026-01-27T05:12:57.913066Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnti']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.913066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0de1945f-6054-489c-8eab-33eaddda42bd", "created": "2026-01-27T05:12:57.913724Z", "modified": "2026-01-27T05:12:57.913724Z", "relationship_type": "indicates", "source_ref": "indicator--b014f368-3ee1-46a4-8df0-dcbf5210d7e5", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8954ad-c7c6-4ce3-bb54-ad2e7c16d551", "created": "2026-01-27T05:12:57.913917Z", "modified": "2026-01-27T05:12:57.913917Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.913917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7f0d720-ef8a-490f-9006-80ed00394906", "created": "2026-01-27T05:12:57.914591Z", "modified": "2026-01-27T05:12:57.914591Z", "relationship_type": "indicates", "source_ref": "indicator--2b8954ad-c7c6-4ce3-bb54-ad2e7c16d551", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcc770ec-c538-49f6-8201-c24be81592ed", "created": "2026-01-27T05:12:57.914789Z", "modified": "2026-01-27T05:12:57.914789Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.914789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad088e1d-99a8-46f9-9a75-8b3a637e0be8", "created": "2026-01-27T05:12:57.915839Z", "modified": "2026-01-27T05:12:57.915839Z", "relationship_type": "indicates", "source_ref": "indicator--dcc770ec-c538-49f6-8201-c24be81592ed", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80303a13-105b-4e61-8a18-8c754e66a438", "created": "2026-01-27T05:12:57.916019Z", "modified": "2026-01-27T05:12:57.916019Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.916019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6c88ec6-010a-48db-ac4e-62c63034cdbf", "created": "2026-01-27T05:12:57.916679Z", "modified": "2026-01-27T05:12:57.916679Z", "relationship_type": "indicates", "source_ref": "indicator--80303a13-105b-4e61-8a18-8c754e66a438", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee7a60f-b959-4b21-b348-84a399dfd448", "created": "2026-01-27T05:12:57.91687Z", "modified": "2026-01-27T05:12:57.91687Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.91687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2880ebc3-7a5a-4222-a295-5f6c08e4e632", "created": "2026-01-27T05:12:57.917533Z", "modified": "2026-01-27T05:12:57.917533Z", "relationship_type": "indicates", "source_ref": "indicator--eee7a60f-b959-4b21-b348-84a399dfd448", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8174447-0aea-4885-8330-e13184ed01e9", "created": "2026-01-27T05:12:57.91771Z", "modified": "2026-01-27T05:12:57.91771Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.91771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c117a7df-f7dd-485c-8b7e-d1f534b16262", "created": "2026-01-27T05:12:57.918388Z", "modified": "2026-01-27T05:12:57.918388Z", "relationship_type": "indicates", "source_ref": "indicator--d8174447-0aea-4885-8330-e13184ed01e9", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2e927c-ce8c-434d-96cc-feeecfdac771", "created": "2026-01-27T05:12:57.918565Z", "modified": "2026-01-27T05:12:57.918565Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnto']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.918565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d6a48f2-acfb-44e2-ba3d-7e562336c76a", "created": "2026-01-27T05:12:57.919234Z", "modified": "2026-01-27T05:12:57.919234Z", "relationship_type": "indicates", "source_ref": "indicator--6c2e927c-ce8c-434d-96cc-feeecfdac771", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7132cc3-7624-4283-9d7f-1691c6495f0e", "created": "2026-01-27T05:12:57.919411Z", "modified": "2026-01-27T05:12:57.919411Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.919411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f010b7af-d304-4877-8246-cddce641e51a", "created": "2026-01-27T05:12:57.920084Z", "modified": "2026-01-27T05:12:57.920084Z", "relationship_type": "indicates", "source_ref": "indicator--e7132cc3-7624-4283-9d7f-1691c6495f0e", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e5921a-1b80-4c99-86d1-e199dd98ab01", "created": "2026-01-27T05:12:57.920282Z", "modified": "2026-01-27T05:12:57.920282Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.920282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e17b6daf-ab8f-4846-a8b4-e793a3bd7d43", "created": "2026-01-27T05:12:57.92095Z", "modified": "2026-01-27T05:12:57.92095Z", "relationship_type": "indicates", "source_ref": "indicator--88e5921a-1b80-4c99-86d1-e199dd98ab01", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9534030e-730f-48d6-be75-39e50d4e15e3", "created": "2026-01-27T05:12:57.921125Z", "modified": "2026-01-27T05:12:57.921125Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.921125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd910611-0f09-4165-8057-0d4320864a19", "created": "2026-01-27T05:12:57.921791Z", "modified": "2026-01-27T05:12:57.921791Z", "relationship_type": "indicates", "source_ref": "indicator--9534030e-730f-48d6-be75-39e50d4e15e3", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917cb392-bd82-4c3c-aec0-2d1cfc859e35", "created": "2026-01-27T05:12:57.921969Z", "modified": "2026-01-27T05:12:57.921969Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnts']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.921969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21e58024-d954-4086-9bb8-abe77e022c7c", "created": "2026-01-27T05:12:57.922636Z", "modified": "2026-01-27T05:12:57.922636Z", "relationship_type": "indicates", "source_ref": "indicator--917cb392-bd82-4c3c-aec0-2d1cfc859e35", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1fddf5-6e77-41f5-ae90-432eddbccc80", "created": "2026-01-27T05:12:57.922837Z", "modified": "2026-01-27T05:12:57.922837Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.922837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c7256b7-80f0-4adb-a0a3-2265731b27da", "created": "2026-01-27T05:12:57.92349Z", "modified": "2026-01-27T05:12:57.92349Z", "relationship_type": "indicates", "source_ref": "indicator--cc1fddf5-6e77-41f5-ae90-432eddbccc80", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214a3b58-2219-4080-9c12-884dd881395e", "created": "2026-01-27T05:12:57.923662Z", "modified": "2026-01-27T05:12:57.923662Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.923662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e66de31f-c7c2-4f2a-8058-984760ac4db3", "created": "2026-01-27T05:12:57.924455Z", "modified": "2026-01-27T05:12:57.924455Z", "relationship_type": "indicates", "source_ref": "indicator--214a3b58-2219-4080-9c12-884dd881395e", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f467f623-c1ac-44fc-8ce9-8c7a3dec6dbb", "created": "2026-01-27T05:12:57.924631Z", "modified": "2026-01-27T05:12:57.924631Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.924631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77c1dcae-ebf4-445e-affc-701b4fa0127e", "created": "2026-01-27T05:12:57.925341Z", "modified": "2026-01-27T05:12:57.925341Z", "relationship_type": "indicates", "source_ref": "indicator--f467f623-c1ac-44fc-8ce9-8c7a3dec6dbb", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8defda0f-f852-4df0-a0d8-71dab7499eca", "created": "2026-01-27T05:12:57.925526Z", "modified": "2026-01-27T05:12:57.925526Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.925526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3785e596-9348-4bfe-9490-f526afa17694", "created": "2026-01-27T05:12:57.926216Z", "modified": "2026-01-27T05:12:57.926216Z", "relationship_type": "indicates", "source_ref": "indicator--8defda0f-f852-4df0-a0d8-71dab7499eca", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0165a68b-83cb-443e-bae4-cc4165297633", "created": "2026-01-27T05:12:57.926439Z", "modified": "2026-01-27T05:12:57.926439Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.926439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58536309-ed85-4915-a547-7d2cff8ba9d7", "created": "2026-01-27T05:12:57.927136Z", "modified": "2026-01-27T05:12:57.927136Z", "relationship_type": "indicates", "source_ref": "indicator--0165a68b-83cb-443e-bae4-cc4165297633", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e72ca75-15da-49f1-8e86-16d5efcea871", "created": "2026-01-27T05:12:57.927315Z", "modified": "2026-01-27T05:12:57.927315Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mnty']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.927315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--baf511a1-9bd8-4355-b782-3f292e338ec4", "created": "2026-01-27T05:12:57.927992Z", "modified": "2026-01-27T05:12:57.927992Z", "relationship_type": "indicates", "source_ref": "indicator--1e72ca75-15da-49f1-8e86-16d5efcea871", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa01a308-e0b7-463b-b801-5ebe99f24738", "created": "2026-01-27T05:12:57.928174Z", "modified": "2026-01-27T05:12:57.928174Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mntz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.928174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58b97e9d-906d-4fd8-ad3d-b8464fe96c18", "created": "2026-01-27T05:12:57.928846Z", "modified": "2026-01-27T05:12:57.928846Z", "relationship_type": "indicates", "source_ref": "indicator--fa01a308-e0b7-463b-b801-5ebe99f24738", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86ce09e-3475-46f5-baa6-a048f3b29bbf", "created": "2026-01-27T05:12:57.929025Z", "modified": "2026-01-27T05:12:57.929025Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='cmf0.c3b5bm90zq.patch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.929025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f6d04e6-9ba6-4cdc-b05e-63f29ecdaa00", "created": "2026-01-27T05:12:57.929679Z", "modified": "2026-01-27T05:12:57.929679Z", "relationship_type": "indicates", "source_ref": "indicator--b86ce09e-3475-46f5-baa6-a048f3b29bbf", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3555220-bcb6-4c52-a499-44485bfebab2", "created": "2026-01-27T05:12:57.929873Z", "modified": "2026-01-27T05:12:57.929873Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0E0BE37D31CA21F19095FC38F9F1BEF310CE227C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.929873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e5147b7-cad5-48fa-b2a9-0e2e77d762ba", "created": "2026-01-27T05:12:57.930651Z", "modified": "2026-01-27T05:12:57.930651Z", "relationship_type": "indicates", "source_ref": "indicator--b3555220-bcb6-4c52-a499-44485bfebab2", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84aef3b2-dbe5-480d-8fde-93b036ac888c", "created": "2026-01-27T05:12:57.930848Z", "modified": "2026-01-27T05:12:57.930848Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4F6AD2383DADACCF93EA5BE4300571C315DBDF5B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.930848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--211dc163-622f-4d73-962e-875a76807c51", "created": "2026-01-27T05:12:57.931626Z", "modified": "2026-01-27T05:12:57.931626Z", "relationship_type": "indicates", "source_ref": "indicator--84aef3b2-dbe5-480d-8fde-93b036ac888c", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fa24d7-d5ad-4a67-a4a1-33e3fc413cb9", "created": "2026-01-27T05:12:57.931819Z", "modified": "2026-01-27T05:12:57.931819Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5284272445CE993DE601BB23CAE6BA9E43E4589C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.931819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db90469b-5265-4784-967f-e00046b6516d", "created": "2026-01-27T05:12:57.932764Z", "modified": "2026-01-27T05:12:57.932764Z", "relationship_type": "indicates", "source_ref": "indicator--a3fa24d7-d5ad-4a67-a4a1-33e3fc413cb9", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a94c82a-0ada-4af8-939b-9c835746c2d2", "created": "2026-01-27T05:12:57.932953Z", "modified": "2026-01-27T05:12:57.932953Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6144ED2E25B6F3A5FAFCF914965CA071A685674B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.932953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c25d953-b7aa-4f03-8e33-5989793934c6", "created": "2026-01-27T05:12:57.933817Z", "modified": "2026-01-27T05:12:57.933817Z", "relationship_type": "indicates", "source_ref": "indicator--1a94c82a-0ada-4af8-939b-9c835746c2d2", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e267d7c7-50c1-4dbe-a294-5b33b47254e2", "created": "2026-01-27T05:12:57.934008Z", "modified": "2026-01-27T05:12:57.934008Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='64403A61F41848F987D6FD0BE00392E9561A0EF7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.934008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93f5a6a1-984d-4390-b7a6-764118fe6912", "created": "2026-01-27T05:12:57.934797Z", "modified": "2026-01-27T05:12:57.934797Z", "relationship_type": "indicates", "source_ref": "indicator--e267d7c7-50c1-4dbe-a294-5b33b47254e2", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62daa60-f284-45b8-811d-855c2cbb0898", "created": "2026-01-27T05:12:57.934979Z", "modified": "2026-01-27T05:12:57.934979Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AFC457A96258490FBC284EE889634B5F3E325B8E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.934979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e476746-dec6-4c89-b3d1-776afc1be3e4", "created": "2026-01-27T05:12:57.935781Z", "modified": "2026-01-27T05:12:57.935781Z", "relationship_type": "indicates", "source_ref": "indicator--f62daa60-f284-45b8-811d-855c2cbb0898", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fbcb00-062e-4573-ac72-873b1a08eefe", "created": "2026-01-27T05:12:57.935961Z", "modified": "2026-01-27T05:12:57.935961Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B6B58148F1B2198C94BDE546FD2E0734EC7838D6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.935961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b00b109-ee59-4567-8ed8-807eb7bb490d", "created": "2026-01-27T05:12:57.93676Z", "modified": "2026-01-27T05:12:57.93676Z", "relationship_type": "indicates", "source_ref": "indicator--44fbcb00-062e-4573-ac72-873b1a08eefe", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa54982d-cf25-4f30-b3ad-5b41136a6109", "created": "2026-01-27T05:12:57.93694Z", "modified": "2026-01-27T05:12:57.93694Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CC4A78DBE96AC1FA5977E03C97052A9A334113B4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.93694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c9b1fa3-d243-4338-b301-3fa3d4972a7e", "created": "2026-01-27T05:12:57.937714Z", "modified": "2026-01-27T05:12:57.937714Z", "relationship_type": "indicates", "source_ref": "indicator--fa54982d-cf25-4f30-b3ad-5b41136a6109", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e48e18-f1dd-4e9d-98ba-89f188ee17e3", "created": "2026-01-27T05:12:57.937908Z", "modified": "2026-01-27T05:12:57.937908Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E8FF1077D207E47AB4B53F275C437C0889579658']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.937908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--046ad08f-52ea-497e-8acc-5141bf1c9433", "created": "2026-01-27T05:12:57.938687Z", "modified": "2026-01-27T05:12:57.938687Z", "relationship_type": "indicates", "source_ref": "indicator--f5e48e18-f1dd-4e9d-98ba-89f188ee17e3", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc6a226-2fb1-40eb-bbdb-573fecd6dabd", "created": "2026-01-27T05:12:57.938889Z", "modified": "2026-01-27T05:12:57.938889Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F21ECAFCFF000686E8EC090F1ECDAECE08798BFF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.938889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a89a7e61-1d1a-4a73-b0f6-eb2fd73c71f7", "created": "2026-01-27T05:12:57.939668Z", "modified": "2026-01-27T05:12:57.939668Z", "relationship_type": "indicates", "source_ref": "indicator--bfc6a226-2fb1-40eb-bbdb-573fecd6dabd", "target_ref": "malware--44b91195-2717-4bf7-b511-be613732fb99"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324", "created": "2026-01-27T05:12:57.939864Z", "modified": "2026-01-27T05:12:57.939864Z", "name": "LetMeSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd1544d-6e55-4d9c-b70d-5d5a7cbeb3c1", "created": "2026-01-27T05:12:57.940044Z", "modified": "2026-01-27T05:12:57.940044Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='letmespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.940044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9963455-dbc8-4cb7-a104-08acf27ee2d1", "created": "2026-01-27T05:12:57.940709Z", "modified": "2026-01-27T05:12:57.940709Z", "relationship_type": "indicates", "source_ref": "indicator--cdd1544d-6e55-4d9c-b70d-5d5a7cbeb3c1", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be46773f-106c-4f2c-b53e-0cb4da0edb48", "created": "2026-01-27T05:12:57.940909Z", "modified": "2026-01-27T05:12:57.940909Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotecommands.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.940909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b43d9841-5ee9-472a-b127-8d72f415edb5", "created": "2026-01-27T05:12:57.941702Z", "modified": "2026-01-27T05:12:57.941702Z", "relationship_type": "indicates", "source_ref": "indicator--be46773f-106c-4f2c-b53e-0cb4da0edb48", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84023891-acae-45e7-969f-f4f534f6d8dc", "created": "2026-01-27T05:12:57.941898Z", "modified": "2026-01-27T05:12:57.941898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='zdalnakontrola.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.941898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a03cada-66c9-44c5-b0c4-28480cf19746", "created": "2026-01-27T05:12:57.942703Z", "modified": "2026-01-27T05:12:57.942703Z", "relationship_type": "indicates", "source_ref": "indicator--84023891-acae-45e7-969f-f4f534f6d8dc", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623f8bcd-904b-4660-bd3a-cb2648cb97cb", "created": "2026-01-27T05:12:57.942906Z", "modified": "2026-01-27T05:12:57.942906Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='letmespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.942906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36d5635a-a3d5-48d0-a694-2dc950a910e1", "created": "2026-01-27T05:12:57.943582Z", "modified": "2026-01-27T05:12:57.943582Z", "relationship_type": "indicates", "source_ref": "indicator--623f8bcd-904b-4660-bd3a-cb2648cb97cb", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e5244c-30be-4020-bb00-3673d0baa3d2", "created": "2026-01-27T05:12:57.943775Z", "modified": "2026-01-27T05:12:57.943775Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotecommands.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.943775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--176dc9f6-0dd6-4b0e-b77e-3d0ab71ada15", "created": "2026-01-27T05:12:57.94446Z", "modified": "2026-01-27T05:12:57.94446Z", "relationship_type": "indicates", "source_ref": "indicator--05e5244c-30be-4020-bb00-3673d0baa3d2", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ed9cd0-ed0f-43a5-9cf1-3a02b224732e", "created": "2026-01-27T05:12:57.944637Z", "modified": "2026-01-27T05:12:57.944637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.letmespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.944637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a093b762-5b34-407b-a3af-b559adc88d33", "created": "2026-01-27T05:12:57.945332Z", "modified": "2026-01-27T05:12:57.945332Z", "relationship_type": "indicates", "source_ref": "indicator--58ed9cd0-ed0f-43a5-9cf1-3a02b224732e", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1cd92a-3cdb-493a-92d4-d42a2e2aaf14", "created": "2026-01-27T05:12:57.94551Z", "modified": "2026-01-27T05:12:57.94551Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.teleszpieg.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.94551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5317965-d365-441d-91f8-884cb52bed2e", "created": "2026-01-27T05:12:57.946207Z", "modified": "2026-01-27T05:12:57.946207Z", "relationship_type": "indicates", "source_ref": "indicator--2d1cd92a-3cdb-493a-92d4-d42a2e2aaf14", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4ca7c7-ebd3-451f-8a33-d4722c38700e", "created": "2026-01-27T05:12:57.946385Z", "modified": "2026-01-27T05:12:57.946385Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='teleszpieg.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.946385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fe80b8e-96be-4866-be39-f2ac85132bb9", "created": "2026-01-27T05:12:57.947067Z", "modified": "2026-01-27T05:12:57.947067Z", "relationship_type": "indicates", "source_ref": "indicator--cc4ca7c7-ebd3-451f-8a33-d4722c38700e", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342ac388-e047-4501-b731-5acd134f02f2", "created": "2026-01-27T05:12:57.947243Z", "modified": "2026-01-27T05:12:57.947243Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bbiindia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.947243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1945cd71-03d0-4382-902b-4afcd3d67bb5", "created": "2026-01-27T05:12:57.947929Z", "modified": "2026-01-27T05:12:57.947929Z", "relationship_type": "indicates", "source_ref": "indicator--342ac388-e047-4501-b731-5acd134f02f2", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483000bd-8406-46ff-88b1-1d890a410e8e", "created": "2026-01-27T05:12:57.948106Z", "modified": "2026-01-27T05:12:57.948106Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.bbiindia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.948106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dff4b45d-aa8b-423b-8741-a63c2b04ba62", "created": "2026-01-27T05:12:57.948798Z", "modified": "2026-01-27T05:12:57.948798Z", "relationship_type": "indicates", "source_ref": "indicator--483000bd-8406-46ff-88b1-1d890a410e8e", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000f54de-17fe-456a-a80f-7b724fc8f974", "created": "2026-01-27T05:12:57.948976Z", "modified": "2026-01-27T05:12:57.948976Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd8128c2f0839bae94bf0160265c8b3313cdd53ab373e1489c03659b1c8b14ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.948976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cc7305f-9610-41df-a2f7-1652d47ff959", "created": "2026-01-27T05:12:57.949948Z", "modified": "2026-01-27T05:12:57.949948Z", "relationship_type": "indicates", "source_ref": "indicator--000f54de-17fe-456a-a80f-7b724fc8f974", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc16d303-db24-4093-a50c-742e9a8d850a", "created": "2026-01-27T05:12:57.950131Z", "modified": "2026-01-27T05:12:57.950131Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='856bc344bce5fbb077b1ce545000e26b68b97e3b089d4f737321d5d9347ff02b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.950131Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f293a5a-3ec9-463a-a61f-a077f0745fd4", "created": "2026-01-27T05:12:57.95099Z", "modified": "2026-01-27T05:12:57.95099Z", "relationship_type": "indicates", "source_ref": "indicator--dc16d303-db24-4093-a50c-742e9a8d850a", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdef5624-96fd-4d06-a4dd-423736fcc0b7", "created": "2026-01-27T05:12:57.951171Z", "modified": "2026-01-27T05:12:57.951171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01e890e3f24a8394a37545c5d6438fe7f38cbde9c843ac38ec934dcdba50cd6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.951171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e4aefe1-18a8-4417-b108-183611e8f4f1", "created": "2026-01-27T05:12:57.952025Z", "modified": "2026-01-27T05:12:57.952025Z", "relationship_type": "indicates", "source_ref": "indicator--bdef5624-96fd-4d06-a4dd-423736fcc0b7", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b55ad4-899a-4260-8619-0d9e05e6bad9", "created": "2026-01-27T05:12:57.952215Z", "modified": "2026-01-27T05:12:57.952215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66f44a0f7c74778af95e4a7d6037294aff7e6078992048d83a98467b98a0ed29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.952215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--102c3c8c-225a-4b35-b3da-12155c4d4c7a", "created": "2026-01-27T05:12:57.953086Z", "modified": "2026-01-27T05:12:57.953086Z", "relationship_type": "indicates", "source_ref": "indicator--e0b55ad4-899a-4260-8619-0d9e05e6bad9", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f198983-8bda-45fb-b25b-939dc61db115", "created": "2026-01-27T05:12:57.953265Z", "modified": "2026-01-27T05:12:57.953265Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8788135bd2bed69d497185bbe92de240265676df335770d2adae1ed056910f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.953265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e54827d9-5c54-4aeb-bd2c-555c651d5db3", "created": "2026-01-27T05:12:57.954117Z", "modified": "2026-01-27T05:12:57.954117Z", "relationship_type": "indicates", "source_ref": "indicator--4f198983-8bda-45fb-b25b-939dc61db115", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00e2702-ad0b-4fd0-8f6e-b8b8f1298538", "created": "2026-01-27T05:12:57.954297Z", "modified": "2026-01-27T05:12:57.954297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a456009451a128251961927d7b142a1770672d486dbd9eb0cd1cfcdc656b14df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.954297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb43043f-9663-4b6e-b308-c92eea51dee2", "created": "2026-01-27T05:12:57.955146Z", "modified": "2026-01-27T05:12:57.955146Z", "relationship_type": "indicates", "source_ref": "indicator--f00e2702-ad0b-4fd0-8f6e-b8b8f1298538", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04890354-7075-47f0-a296-c974ec2e539c", "created": "2026-01-27T05:12:57.955326Z", "modified": "2026-01-27T05:12:57.955326Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8afd404efffc98ecc19ecbb442b80cb55b61ebd8a3e6b2e231e6241dbff2dc18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.955326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25e7b8c0-641c-4195-a6aa-2b944aec368c", "created": "2026-01-27T05:12:57.956172Z", "modified": "2026-01-27T05:12:57.956172Z", "relationship_type": "indicates", "source_ref": "indicator--04890354-7075-47f0-a296-c974ec2e539c", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1603a069-b014-482c-9d58-ad4b7944c579", "created": "2026-01-27T05:12:57.956348Z", "modified": "2026-01-27T05:12:57.956348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26deed22f8f2b611a1aeb2abb03d65fde6a31674abbcf09a9d19a85a1b91bbca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.956348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8852cb2a-93f3-4b75-a2a6-88a54cc03100", "created": "2026-01-27T05:12:57.957205Z", "modified": "2026-01-27T05:12:57.957205Z", "relationship_type": "indicates", "source_ref": "indicator--1603a069-b014-482c-9d58-ad4b7944c579", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ef0078-4a59-4ea4-b817-1c39eda7a99c", "created": "2026-01-27T05:12:57.957381Z", "modified": "2026-01-27T05:12:57.957381Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fb5e267ad05981323449b69a57d280f033f0a0609c49773e567687a6cba77a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.957381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d526d02-4cc5-4d16-8d46-a8a14dee3691", "created": "2026-01-27T05:12:57.958235Z", "modified": "2026-01-27T05:12:57.958235Z", "relationship_type": "indicates", "source_ref": "indicator--b0ef0078-4a59-4ea4-b817-1c39eda7a99c", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86adae9-2d84-4b10-8427-62021103ce2b", "created": "2026-01-27T05:12:57.958413Z", "modified": "2026-01-27T05:12:57.958413Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='176affea44663f35cff671dc935402bd4c69e2dd22d2d87bed618096057a25bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.958413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76c0097b-e5b7-4a76-8960-e104ce818ac0", "created": "2026-01-27T05:12:57.959379Z", "modified": "2026-01-27T05:12:57.959379Z", "relationship_type": "indicates", "source_ref": "indicator--d86adae9-2d84-4b10-8427-62021103ce2b", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49dede9-556a-4c8b-9080-d60bb20719e3", "created": "2026-01-27T05:12:57.959558Z", "modified": "2026-01-27T05:12:57.959558Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.959558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1f5c6a4-db3d-44b6-8e6f-9bfcc69f291b", "created": "2026-01-27T05:12:57.960231Z", "modified": "2026-01-27T05:12:57.960231Z", "relationship_type": "indicates", "source_ref": "indicator--d49dede9-556a-4c8b-9080-d60bb20719e3", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e0cab5-c02f-4cf7-b899-802c055833c0", "created": "2026-01-27T05:12:57.960413Z", "modified": "2026-01-27T05:12:57.960413Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.960413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14a11243-107d-4181-98bd-db8aa904e0f2", "created": "2026-01-27T05:12:57.961086Z", "modified": "2026-01-27T05:12:57.961086Z", "relationship_type": "indicates", "source_ref": "indicator--f8e0cab5-c02f-4cf7-b899-802c055833c0", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207c237c-36d0-427f-a534-e4cbc4697e0f", "created": "2026-01-27T05:12:57.961263Z", "modified": "2026-01-27T05:12:57.961263Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.961263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9281b545-50fb-4767-8296-56b5aa3bebc3", "created": "2026-01-27T05:12:57.961928Z", "modified": "2026-01-27T05:12:57.961928Z", "relationship_type": "indicates", "source_ref": "indicator--207c237c-36d0-427f-a534-e4cbc4697e0f", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b02357-2a87-4f16-8ad9-35626aede618", "created": "2026-01-27T05:12:57.962105Z", "modified": "2026-01-27T05:12:57.962105Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.962105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75be74df-e859-4d04-93c1-e5badb8b77b0", "created": "2026-01-27T05:12:57.962771Z", "modified": "2026-01-27T05:12:57.962771Z", "relationship_type": "indicates", "source_ref": "indicator--16b02357-2a87-4f16-8ad9-35626aede618", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0357303f-b200-4c9c-b69a-880fa31b4a8a", "created": "2026-01-27T05:12:57.962949Z", "modified": "2026-01-27T05:12:57.962949Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.letmespy5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.962949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0fb4551-bc0c-461f-bd91-7fe4b5efd9c7", "created": "2026-01-27T05:12:57.963605Z", "modified": "2026-01-27T05:12:57.963605Z", "relationship_type": "indicates", "source_ref": "indicator--0357303f-b200-4c9c-b69a-880fa31b4a8a", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7230df-31ce-4fc4-8296-3d4b7e7cd1fe", "created": "2026-01-27T05:12:57.963798Z", "modified": "2026-01-27T05:12:57.963798Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.lms']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.963798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41d15951-60f8-4ce7-bbe7-0a620c670dd2", "created": "2026-01-27T05:12:57.964449Z", "modified": "2026-01-27T05:12:57.964449Z", "relationship_type": "indicates", "source_ref": "indicator--8b7230df-31ce-4fc4-8296-3d4b7e7cd1fe", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d9726-c603-4828-98ec-bcbe26865fb0", "created": "2026-01-27T05:12:57.964709Z", "modified": "2026-01-27T05:12:57.964709Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.remote']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.964709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57b9d79e-05dc-4b8c-bb7e-556ecd22a15e", "created": "2026-01-27T05:12:57.965396Z", "modified": "2026-01-27T05:12:57.965396Z", "relationship_type": "indicates", "source_ref": "indicator--010d9726-c603-4828-98ec-bcbe26865fb0", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b757a3c-0998-4f88-93cf-77a3bca7401e", "created": "2026-01-27T05:12:57.965575Z", "modified": "2026-01-27T05:12:57.965575Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.remote1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.965575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd18740a-c6b2-45a1-a368-f1b88436b338", "created": "2026-01-27T05:12:57.966243Z", "modified": "2026-01-27T05:12:57.966243Z", "relationship_type": "indicates", "source_ref": "indicator--9b757a3c-0998-4f88-93cf-77a3bca7401e", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94fb9ea-bd0f-424a-8ada-83f5a57130b7", "created": "2026-01-27T05:12:57.96642Z", "modified": "2026-01-27T05:12:57.96642Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.lidwin.remote2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.96642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47553ccf-042b-44a8-b183-2b9aa8df9a90", "created": "2026-01-27T05:12:57.967201Z", "modified": "2026-01-27T05:12:57.967201Z", "relationship_type": "indicates", "source_ref": "indicator--d94fb9ea-bd0f-424a-8ada-83f5a57130b7", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0619ddee-be5d-4386-a7c4-d5193e693634", "created": "2026-01-27T05:12:57.967379Z", "modified": "2026-01-27T05:12:57.967379Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.radeal.lms4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.967379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99537116-f90f-4c44-a665-ef41d7fa295b", "created": "2026-01-27T05:12:57.968046Z", "modified": "2026-01-27T05:12:57.968046Z", "relationship_type": "indicates", "source_ref": "indicator--0619ddee-be5d-4386-a7c4-d5193e693634", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315dbd88-d4b4-4046-a9bb-605da9e0cc24", "created": "2026-01-27T05:12:57.968237Z", "modified": "2026-01-27T05:12:57.968237Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='340E571CB1A64E6EE384D3F8A544681459CF3F5F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.968237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b461c964-f316-49f2-a90d-70d4eac00d69", "created": "2026-01-27T05:12:57.969025Z", "modified": "2026-01-27T05:12:57.969025Z", "relationship_type": "indicates", "source_ref": "indicator--315dbd88-d4b4-4046-a9bb-605da9e0cc24", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1164d701-af55-440d-abfc-b9e8d488faf0", "created": "2026-01-27T05:12:57.969203Z", "modified": "2026-01-27T05:12:57.969203Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='69EE83CB3E0968B49E33849D40F7D91B0592C7DB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.969203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--157384e6-ccd0-43eb-85c0-1530bfa66ad7", "created": "2026-01-27T05:12:57.969996Z", "modified": "2026-01-27T05:12:57.969996Z", "relationship_type": "indicates", "source_ref": "indicator--1164d701-af55-440d-abfc-b9e8d488faf0", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d42fba8-cf8f-4f5e-8131-b600b4ebb7b8", "created": "2026-01-27T05:12:57.970173Z", "modified": "2026-01-27T05:12:57.970173Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8F0EAD4F1DA5DAAF8C0F7A51096CECEEF81D0C76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.970173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10e0a5a3-4e45-49d2-80e0-ebfb6195bc47", "created": "2026-01-27T05:12:57.970952Z", "modified": "2026-01-27T05:12:57.970952Z", "relationship_type": "indicates", "source_ref": "indicator--3d42fba8-cf8f-4f5e-8131-b600b4ebb7b8", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747f9d6e-e8f1-44ca-8f22-80f14c6168d7", "created": "2026-01-27T05:12:57.971127Z", "modified": "2026-01-27T05:12:57.971127Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EF6BC4C13FE455CD98192E56D96317069BDF7658']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.971127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66c9d9aa-bd0a-4696-b1aa-5dd5b09730c0", "created": "2026-01-27T05:12:57.971926Z", "modified": "2026-01-27T05:12:57.971926Z", "relationship_type": "indicates", "source_ref": "indicator--747f9d6e-e8f1-44ca-8f22-80f14c6168d7", "target_ref": "malware--e0694624-e41a-4b69-88cd-24d1d58ae324"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da", "created": "2026-01-27T05:12:57.972101Z", "modified": "2026-01-27T05:12:57.972101Z", "name": "Snoopza", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b0d4b0-3ef0-43e6-a970-ad85c3badf7e", "created": "2026-01-27T05:12:57.972275Z", "modified": "2026-01-27T05:12:57.972275Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.972275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07f8fe25-682c-4a6d-8bc2-c05e61649453", "created": "2026-01-27T05:12:57.972968Z", "modified": "2026-01-27T05:12:57.972968Z", "relationship_type": "indicates", "source_ref": "indicator--64b0d4b0-3ef0-43e6-a970-ad85c3badf7e", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6685b200-c322-4489-8ca1-4ce25ffcc7e8", "created": "2026-01-27T05:12:57.973146Z", "modified": "2026-01-27T05:12:57.973146Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.973146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9026f8e8-94ca-4f76-8b63-e03cf88df60a", "created": "2026-01-27T05:12:57.973828Z", "modified": "2026-01-27T05:12:57.973828Z", "relationship_type": "indicates", "source_ref": "indicator--6685b200-c322-4489-8ca1-4ce25ffcc7e8", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f068a5-d614-45e1-be0f-8ac53e172d13", "created": "2026-01-27T05:12:57.974005Z", "modified": "2026-01-27T05:12:57.974005Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app2.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.974005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8f16039-132b-46e2-93c2-75d4ed6297a8", "created": "2026-01-27T05:12:57.974684Z", "modified": "2026-01-27T05:12:57.974684Z", "relationship_type": "indicates", "source_ref": "indicator--e2f068a5-d614-45e1-be0f-8ac53e172d13", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108f2a1d-0d9b-4734-abdb-6a4529a61dcc", "created": "2026-01-27T05:12:57.97488Z", "modified": "2026-01-27T05:12:57.97488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.97488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0101a670-f515-4062-a668-4af9bb7cca87", "created": "2026-01-27T05:12:57.975666Z", "modified": "2026-01-27T05:12:57.975666Z", "relationship_type": "indicates", "source_ref": "indicator--108f2a1d-0d9b-4734-abdb-6a4529a61dcc", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d68aa-256f-4738-8c91-53e0a517ff80", "created": "2026-01-27T05:12:57.975866Z", "modified": "2026-01-27T05:12:57.975866Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flower.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.975866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be4c0b35-be3a-49a7-923a-313a9cb40de6", "created": "2026-01-27T05:12:57.976539Z", "modified": "2026-01-27T05:12:57.976539Z", "relationship_type": "indicates", "source_ref": "indicator--d70d68aa-256f-4738-8c91-53e0a517ff80", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0676ab05-45fd-477d-b6d9-fcd1bc781546", "created": "2026-01-27T05:12:57.976714Z", "modified": "2026-01-27T05:12:57.976714Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='get.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.976714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e66c585-ebe2-407f-933f-b325f36b225a", "created": "2026-01-27T05:12:57.977398Z", "modified": "2026-01-27T05:12:57.977398Z", "relationship_type": "indicates", "source_ref": "indicator--0676ab05-45fd-477d-b6d9-fcd1bc781546", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96fcafe3-50d3-40fe-8eca-3270a8c3f2e3", "created": "2026-01-27T05:12:57.977574Z", "modified": "2026-01-27T05:12:57.977574Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.977574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6b89496-51db-412a-a217-2dc09dd8cfee", "created": "2026-01-27T05:12:57.978257Z", "modified": "2026-01-27T05:12:57.978257Z", "relationship_type": "indicates", "source_ref": "indicator--96fcafe3-50d3-40fe-8eca-3270a8c3f2e3", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c933b6f-870f-4edf-9a10-34e80aede435", "created": "2026-01-27T05:12:57.978434Z", "modified": "2026-01-27T05:12:57.978434Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my2.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.978434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--621ed199-bd18-42be-9915-5c6180778dc8", "created": "2026-01-27T05:12:57.979126Z", "modified": "2026-01-27T05:12:57.979126Z", "relationship_type": "indicates", "source_ref": "indicator--7c933b6f-870f-4edf-9a10-34e80aede435", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01731a42-fd12-4a1b-a2f3-0abb569967dd", "created": "2026-01-27T05:12:57.979303Z", "modified": "2026-01-27T05:12:57.979303Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.979303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c379760d-29c2-4331-8fee-9480e05aef7a", "created": "2026-01-27T05:12:57.97998Z", "modified": "2026-01-27T05:12:57.97998Z", "relationship_type": "indicates", "source_ref": "indicator--01731a42-fd12-4a1b-a2f3-0abb569967dd", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5329749d-b390-49ce-b123-2d884636a59f", "created": "2026-01-27T05:12:57.980155Z", "modified": "2026-01-27T05:12:57.980155Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viewer.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.980155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dfb6661-504c-4f3a-9058-1be0912319de", "created": "2026-01-27T05:12:57.980849Z", "modified": "2026-01-27T05:12:57.980849Z", "relationship_type": "indicates", "source_ref": "indicator--5329749d-b390-49ce-b123-2d884636a59f", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ca0d20-6b13-42b8-a9e5-bb02c44aa37d", "created": "2026-01-27T05:12:57.981026Z", "modified": "2026-01-27T05:12:57.981026Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.981026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76ad7348-d3d4-470c-baa6-fbe73800ab3d", "created": "2026-01-27T05:12:57.981687Z", "modified": "2026-01-27T05:12:57.981687Z", "relationship_type": "indicates", "source_ref": "indicator--f4ca0d20-6b13-42b8-a9e5-bb02c44aa37d", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93da7c8d-8dd8-4aa4-a91c-7420f0db1d7a", "created": "2026-01-27T05:12:57.98189Z", "modified": "2026-01-27T05:12:57.98189Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='get.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.98189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af9ece9f-3472-4e56-906d-7403db218ec5", "created": "2026-01-27T05:12:57.982562Z", "modified": "2026-01-27T05:12:57.982562Z", "relationship_type": "indicates", "source_ref": "indicator--93da7c8d-8dd8-4aa4-a91c-7420f0db1d7a", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6277b636-3dd1-48f5-b211-92947f5617ea", "created": "2026-01-27T05:12:57.98276Z", "modified": "2026-01-27T05:12:57.98276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='snoopza.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.98276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4fb0149-39eb-41fb-9cd0-3f496ae32649", "created": "2026-01-27T05:12:57.983554Z", "modified": "2026-01-27T05:12:57.983554Z", "relationship_type": "indicates", "source_ref": "indicator--6277b636-3dd1-48f5-b211-92947f5617ea", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd1bdc6-a427-4757-9c02-8edc1440d6ce", "created": "2026-01-27T05:12:57.983733Z", "modified": "2026-01-27T05:12:57.983733Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.983733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31d7ef94-3ec3-4a62-9b58-aac8105867f4", "created": "2026-01-27T05:12:57.984434Z", "modified": "2026-01-27T05:12:57.984434Z", "relationship_type": "indicates", "source_ref": "indicator--afd1bdc6-a427-4757-9c02-8edc1440d6ce", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596d5cb8-c8a3-4083-8e87-2132595a0173", "created": "2026-01-27T05:12:57.98461Z", "modified": "2026-01-27T05:12:57.98461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='newdemo.snoopza.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.98461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd9aebb8-c439-4666-943c-dcdf38363443", "created": "2026-01-27T05:12:57.985307Z", "modified": "2026-01-27T05:12:57.985307Z", "relationship_type": "indicates", "source_ref": "indicator--596d5cb8-c8a3-4083-8e87-2132595a0173", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e969cfe-d5f0-4caf-bb28-a1f06109eb2a", "created": "2026-01-27T05:12:57.985484Z", "modified": "2026-01-27T05:12:57.985484Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='997b808e64c1ce1fed7605e63cffd37b98b3add891d22cddfda3e29dbfebb9d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.985484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e39eabe4-3c88-42f6-862f-e58731a6acc3", "created": "2026-01-27T05:12:57.986327Z", "modified": "2026-01-27T05:12:57.986327Z", "relationship_type": "indicates", "source_ref": "indicator--1e969cfe-d5f0-4caf-bb28-a1f06109eb2a", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c023fa6-7d6a-4939-a8c4-a0ef7e1b01cc", "created": "2026-01-27T05:12:57.986506Z", "modified": "2026-01-27T05:12:57.986506Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ceccb0637ecb2ebe90a96ea63e99603be67e4e4e20b2195c69feef633136558']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.986506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2ae549f-4a37-4d64-bc82-c32d3f5f63c7", "created": "2026-01-27T05:12:57.987343Z", "modified": "2026-01-27T05:12:57.987343Z", "relationship_type": "indicates", "source_ref": "indicator--6c023fa6-7d6a-4939-a8c4-a0ef7e1b01cc", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23e17b9-5a7f-40fc-ad69-1c9ee55242b3", "created": "2026-01-27T05:12:57.987526Z", "modified": "2026-01-27T05:12:57.987526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08a52e468a094957728b15cfcec2c25de03725c393c4c37e5ef72eb3bf7d09b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.987526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c6b7737-ab94-47c6-af24-d87c8cc4119a", "created": "2026-01-27T05:12:57.988371Z", "modified": "2026-01-27T05:12:57.988371Z", "relationship_type": "indicates", "source_ref": "indicator--a23e17b9-5a7f-40fc-ad69-1c9ee55242b3", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e8faa1-647f-4c54-8951-f09ea4d89bfa", "created": "2026-01-27T05:12:57.988551Z", "modified": "2026-01-27T05:12:57.988551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6b9370976a38b07771c528a0e66bcedf51f88d348c1c6a3a21d7e14fbef6094']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.988551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe03c103-dbe6-4d11-aa56-21bc28ec31b7", "created": "2026-01-27T05:12:57.989397Z", "modified": "2026-01-27T05:12:57.989397Z", "relationship_type": "indicates", "source_ref": "indicator--48e8faa1-647f-4c54-8951-f09ea4d89bfa", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a41b663-fd9e-446c-953c-6a5fc1e58d36", "created": "2026-01-27T05:12:57.989583Z", "modified": "2026-01-27T05:12:57.989583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cdd2c1df453e1db2845f3e26cb73ea9012f2bed64485da7278a5a88f8f67895']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.989583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d70d1629-368f-4bd1-8834-40165b71de96", "created": "2026-01-27T05:12:57.99044Z", "modified": "2026-01-27T05:12:57.99044Z", "relationship_type": "indicates", "source_ref": "indicator--3a41b663-fd9e-446c-953c-6a5fc1e58d36", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c7e7e4-b3ec-420e-904a-0d46b3f83bf0", "created": "2026-01-27T05:12:57.990618Z", "modified": "2026-01-27T05:12:57.990618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='07cfd836073d0012c9f7d0ecc3fcfb0af848098d6fa60708acc9e2213fbd59a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.990618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36787af6-51ca-488b-a447-a8405441110c", "created": "2026-01-27T05:12:57.991455Z", "modified": "2026-01-27T05:12:57.991455Z", "relationship_type": "indicates", "source_ref": "indicator--60c7e7e4-b3ec-420e-904a-0d46b3f83bf0", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b010a2-fe0d-404c-96cd-acc1ca4cdccc", "created": "2026-01-27T05:12:57.991632Z", "modified": "2026-01-27T05:12:57.991632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2ff81a8d5f980e54c818df634b16b659471ebab0d358e132c9561ec3fcff1e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.991632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfd3efc6-42e9-4f87-be5f-281b728878b5", "created": "2026-01-27T05:12:57.992617Z", "modified": "2026-01-27T05:12:57.992617Z", "relationship_type": "indicates", "source_ref": "indicator--29b010a2-fe0d-404c-96cd-acc1ca4cdccc", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d252f76d-2e0a-443c-8212-aa1a19041b50", "created": "2026-01-27T05:12:57.992813Z", "modified": "2026-01-27T05:12:57.992813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='820d38f51e2557a5a20c9a6d53f116850bec0c2277cf111a1c631a35a47ccac2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.992813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40298d26-d20f-4710-9fde-a6f602bde345", "created": "2026-01-27T05:12:57.993641Z", "modified": "2026-01-27T05:12:57.993641Z", "relationship_type": "indicates", "source_ref": "indicator--d252f76d-2e0a-443c-8212-aa1a19041b50", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6f98fa-726b-4e3e-a26e-eb3aa7e82fbd", "created": "2026-01-27T05:12:57.993838Z", "modified": "2026-01-27T05:12:57.993838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f739bf9d16d719f55a4ccffd6b928a9f50cc8c226ff3568481e5584154e35a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.993838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cdc8709-e6e8-4b8a-bd5e-b503d7dfe3c7", "created": "2026-01-27T05:12:57.99477Z", "modified": "2026-01-27T05:12:57.99477Z", "relationship_type": "indicates", "source_ref": "indicator--fb6f98fa-726b-4e3e-a26e-eb3aa7e82fbd", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e35e12-287f-4b51-aba7-3f856a0a2908", "created": "2026-01-27T05:12:57.994978Z", "modified": "2026-01-27T05:12:57.994978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e53360b146fac1dd68a92cde0d23c5badf852745222366b293d3936b306c275']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.994978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1ab2ec9-fcd9-4bb9-86ed-74c1aa1d11a1", "created": "2026-01-27T05:12:57.99584Z", "modified": "2026-01-27T05:12:57.99584Z", "relationship_type": "indicates", "source_ref": "indicator--33e35e12-287f-4b51-aba7-3f856a0a2908", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24494ccd-510d-4f97-9d33-dd3cd8e29c71", "created": "2026-01-27T05:12:57.996025Z", "modified": "2026-01-27T05:12:57.996025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='168272c0283d82d9af512cbe379de2799d779bc7d68ae5c901e1bd388b63cd2c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.996025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b54a1aab-1030-4278-913b-a1b925141ee8", "created": "2026-01-27T05:12:57.996875Z", "modified": "2026-01-27T05:12:57.996875Z", "relationship_type": "indicates", "source_ref": "indicator--24494ccd-510d-4f97-9d33-dd3cd8e29c71", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a0d022-6757-429b-9063-2c669e80d584", "created": "2026-01-27T05:12:57.997058Z", "modified": "2026-01-27T05:12:57.997058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.997058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa69b36d-9d93-42f6-abdb-2e1505ebbcf9", "created": "2026-01-27T05:12:57.997715Z", "modified": "2026-01-27T05:12:57.997715Z", "relationship_type": "indicates", "source_ref": "indicator--37a0d022-6757-429b-9063-2c669e80d584", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8bdd82-7719-47df-a550-b2c4b1ddb65b", "created": "2026-01-27T05:12:57.997919Z", "modified": "2026-01-27T05:12:57.997919Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.997919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--792e0567-3b13-4ca5-8808-228b5606a71d", "created": "2026-01-27T05:12:57.998593Z", "modified": "2026-01-27T05:12:57.998593Z", "relationship_type": "indicates", "source_ref": "indicator--ed8bdd82-7719-47df-a550-b2c4b1ddb65b", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7739aa-2c3c-4b48-a650-0912ae04f77b", "created": "2026-01-27T05:12:57.998807Z", "modified": "2026-01-27T05:12:57.998807Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.998807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47b3477e-ef14-4219-850b-f6f054793aac", "created": "2026-01-27T05:12:57.999489Z", "modified": "2026-01-27T05:12:57.999489Z", "relationship_type": "indicates", "source_ref": "indicator--df7739aa-2c3c-4b48-a650-0912ae04f77b", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f357e32-13a1-49e0-a58c-d48256e3e11d", "created": "2026-01-27T05:12:57.99967Z", "modified": "2026-01-27T05:12:57.99967Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:57.99967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9728f69b-72bd-4f8c-8ba1-8cb53e4dcaea", "created": "2026-01-27T05:12:58.000384Z", "modified": "2026-01-27T05:12:58.000384Z", "relationship_type": "indicates", "source_ref": "indicator--3f357e32-13a1-49e0-a58c-d48256e3e11d", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d89e72-ace6-40cf-9936-370d451e436f", "created": "2026-01-27T05:12:58.000563Z", "modified": "2026-01-27T05:12:58.000563Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.000563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95729465-d422-44d1-8f00-0a0f039904df", "created": "2026-01-27T05:12:58.001384Z", "modified": "2026-01-27T05:12:58.001384Z", "relationship_type": "indicates", "source_ref": "indicator--53d89e72-ace6-40cf-9936-370d451e436f", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a83910-ddd1-40fa-bca4-adfcfa791dd2", "created": "2026-01-27T05:12:58.001567Z", "modified": "2026-01-27T05:12:58.001567Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.001567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a2d5ad4-e302-4f5c-8675-b6a689c67cee", "created": "2026-01-27T05:12:58.002243Z", "modified": "2026-01-27T05:12:58.002243Z", "relationship_type": "indicates", "source_ref": "indicator--f5a83910-ddd1-40fa-bca4-adfcfa791dd2", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5a417d-8c2a-4b01-b99b-12c633d5f6b9", "created": "2026-01-27T05:12:58.002425Z", "modified": "2026-01-27T05:12:58.002425Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.002425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9164a5d5-af4e-40ae-b2a4-52a254774d9a", "created": "2026-01-27T05:12:58.003141Z", "modified": "2026-01-27T05:12:58.003141Z", "relationship_type": "indicates", "source_ref": "indicator--fa5a417d-8c2a-4b01-b99b-12c633d5f6b9", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd76e13-5894-42ae-8e76-2a4778621f61", "created": "2026-01-27T05:12:58.003326Z", "modified": "2026-01-27T05:12:58.003326Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.003326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c4274f2-f026-406f-894f-9b6d1e5f533f", "created": "2026-01-27T05:12:58.00403Z", "modified": "2026-01-27T05:12:58.00403Z", "relationship_type": "indicates", "source_ref": "indicator--edd76e13-5894-42ae-8e76-2a4778621f61", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200676e5-a018-4db0-958c-2b4771fc99c3", "created": "2026-01-27T05:12:58.004212Z", "modified": "2026-01-27T05:12:58.004212Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.004212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--955b27df-3646-4891-9153-f4f62f831b4e", "created": "2026-01-27T05:12:58.0049Z", "modified": "2026-01-27T05:12:58.0049Z", "relationship_type": "indicates", "source_ref": "indicator--200676e5-a018-4db0-958c-2b4771fc99c3", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e3bdd9-b53b-4644-80ed-43ce81844e52", "created": "2026-01-27T05:12:58.005085Z", "modified": "2026-01-27T05:12:58.005085Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.005085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--796c74fa-c2c4-427a-b559-68de89dbe6f8", "created": "2026-01-27T05:12:58.005737Z", "modified": "2026-01-27T05:12:58.005737Z", "relationship_type": "indicates", "source_ref": "indicator--16e3bdd9-b53b-4644-80ed-43ce81844e52", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57b320c-490f-4d9f-9839-6ac585bbf22b", "created": "2026-01-27T05:12:58.005929Z", "modified": "2026-01-27T05:12:58.005929Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.005929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a652b9d-81f3-44c6-b127-807d48217ec6", "created": "2026-01-27T05:12:58.006591Z", "modified": "2026-01-27T05:12:58.006591Z", "relationship_type": "indicates", "source_ref": "indicator--e57b320c-490f-4d9f-9839-6ac585bbf22b", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ee5415-8262-4ec4-9d8b-5f8bae19b29e", "created": "2026-01-27T05:12:58.006808Z", "modified": "2026-01-27T05:12:58.006808Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.006808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--528c91b2-f2c1-42ef-8298-811ded3de669", "created": "2026-01-27T05:12:58.00747Z", "modified": "2026-01-27T05:12:58.00747Z", "relationship_type": "indicates", "source_ref": "indicator--b7ee5415-8262-4ec4-9d8b-5f8bae19b29e", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec988be-7991-4d49-aae3-0ed3fbf75d9c", "created": "2026-01-27T05:12:58.007646Z", "modified": "2026-01-27T05:12:58.007646Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.007646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d25b2fd4-735a-4cc7-8546-e87c9b04eb34", "created": "2026-01-27T05:12:58.008323Z", "modified": "2026-01-27T05:12:58.008323Z", "relationship_type": "indicates", "source_ref": "indicator--aec988be-7991-4d49-aae3-0ed3fbf75d9c", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c21475-eba6-4bfd-860a-45ce72158c93", "created": "2026-01-27T05:12:58.008497Z", "modified": "2026-01-27T05:12:58.008497Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.008497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ceaee33-e1d7-4ab6-ba7c-a89839c3d256", "created": "2026-01-27T05:12:58.009293Z", "modified": "2026-01-27T05:12:58.009293Z", "relationship_type": "indicates", "source_ref": "indicator--94c21475-eba6-4bfd-860a-45ce72158c93", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b86b69-cef6-49fb-8a2f-addb2fb9ca40", "created": "2026-01-27T05:12:58.009472Z", "modified": "2026-01-27T05:12:58.009472Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.009472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9675a553-0ab2-4c5b-a756-f6663852765b", "created": "2026-01-27T05:12:58.010144Z", "modified": "2026-01-27T05:12:58.010144Z", "relationship_type": "indicates", "source_ref": "indicator--90b86b69-cef6-49fb-8a2f-addb2fb9ca40", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f875868-f04a-49ce-bcb6-9b51311eee47", "created": "2026-01-27T05:12:58.01032Z", "modified": "2026-01-27T05:12:58.01032Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.01032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1803af3a-0d44-47b7-b232-1af80997553e", "created": "2026-01-27T05:12:58.010994Z", "modified": "2026-01-27T05:12:58.010994Z", "relationship_type": "indicates", "source_ref": "indicator--9f875868-f04a-49ce-bcb6-9b51311eee47", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d9afe0-57b6-4b1a-9fac-6b5dd912edad", "created": "2026-01-27T05:12:58.011172Z", "modified": "2026-01-27T05:12:58.011172Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.core.mngz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.011172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ec65225-4b96-47fe-b5ad-45ccb7d9cf5c", "created": "2026-01-27T05:12:58.011844Z", "modified": "2026-01-27T05:12:58.011844Z", "relationship_type": "indicates", "source_ref": "indicator--42d9afe0-57b6-4b1a-9fac-6b5dd912edad", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a12aeb-b408-4982-ae87-1a30e07c5182", "created": "2026-01-27T05:12:58.012028Z", "modified": "2026-01-27T05:12:58.012028Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='240E97A0587BF99441787EA3BCB2B2D8827564FE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.012028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ee80eee-d49e-4454-9cd1-0802b620591d", "created": "2026-01-27T05:12:58.012819Z", "modified": "2026-01-27T05:12:58.012819Z", "relationship_type": "indicates", "source_ref": "indicator--56a12aeb-b408-4982-ae87-1a30e07c5182", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc95a0-debe-4da2-a765-54c53a3c1369", "created": "2026-01-27T05:12:58.012997Z", "modified": "2026-01-27T05:12:58.012997Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='854F7978408EA58C5B792C1C1EF9733FC2D5E813']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.012997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77be394c-9f65-48a4-9f72-d08ccdfa23bc", "created": "2026-01-27T05:12:58.013786Z", "modified": "2026-01-27T05:12:58.013786Z", "relationship_type": "indicates", "source_ref": "indicator--bafc95a0-debe-4da2-a765-54c53a3c1369", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12532b6-b3ad-4498-a8a1-7d279d80b432", "created": "2026-01-27T05:12:58.013968Z", "modified": "2026-01-27T05:12:58.013968Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1988EDEA389D42983CEC8B5F8A9C27AE49F800F9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.013968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b89366-961d-4a73-b127-71c7c65ae263", "created": "2026-01-27T05:12:58.014739Z", "modified": "2026-01-27T05:12:58.014739Z", "relationship_type": "indicates", "source_ref": "indicator--a12532b6-b3ad-4498-a8a1-7d279d80b432", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e1c34f-9539-4372-9788-4f01fbeadb50", "created": "2026-01-27T05:12:58.014932Z", "modified": "2026-01-27T05:12:58.014932Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5E16BA998632C1C3E4D4AE707D6EE2454ED2AEB5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.014932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5407f72-610d-4cd7-ade1-ccbcec4a8ad7", "created": "2026-01-27T05:12:58.015717Z", "modified": "2026-01-27T05:12:58.015717Z", "relationship_type": "indicates", "source_ref": "indicator--a6e1c34f-9539-4372-9788-4f01fbeadb50", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dfe418-f4bf-42b5-a48f-5048a623b48e", "created": "2026-01-27T05:12:58.01591Z", "modified": "2026-01-27T05:12:58.01591Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E023517B163AAAE209CBD97E312752960F575D38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.01591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a75e02b-924d-467b-bc10-e2d4caab2d7c", "created": "2026-01-27T05:12:58.016692Z", "modified": "2026-01-27T05:12:58.016692Z", "relationship_type": "indicates", "source_ref": "indicator--d5dfe418-f4bf-42b5-a48f-5048a623b48e", "target_ref": "malware--a7ea66f3-3393-4f62-b7ef-96140ae264da"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4", "created": "2026-01-27T05:12:58.016885Z", "modified": "2026-01-27T05:12:58.016885Z", "name": "TrackMyPhones", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4af839f-e3b0-4a8c-9e1d-dafd04c8c931", "created": "2026-01-27T05:12:58.017057Z", "modified": "2026-01-27T05:12:58.017057Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cell-tracker-green.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.017057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4622c81-c760-40c7-9d67-b9826a0913ec", "created": "2026-01-27T05:12:58.018162Z", "modified": "2026-01-27T05:12:58.018162Z", "relationship_type": "indicates", "source_ref": "indicator--d4af839f-e3b0-4a8c-9e1d-dafd04c8c931", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666eb0b5-6218-4d46-9afe-9a44230e165c", "created": "2026-01-27T05:12:58.018344Z", "modified": "2026-01-27T05:12:58.018344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cell-tracker-updated.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.018344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe749801-2982-4ba3-8808-a2332b896302", "created": "2026-01-27T05:12:58.019066Z", "modified": "2026-01-27T05:12:58.019066Z", "relationship_type": "indicates", "source_ref": "indicator--666eb0b5-6218-4d46-9afe-9a44230e165c", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82215c7-9a4e-40b2-b19a-e9739af613e3", "created": "2026-01-27T05:12:58.019244Z", "modified": "2026-01-27T05:12:58.019244Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='key-logger-90fff.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.019244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c418344-7712-44ac-96c0-446772bbbbf2", "created": "2026-01-27T05:12:58.02005Z", "modified": "2026-01-27T05:12:58.02005Z", "relationship_type": "indicates", "source_ref": "indicator--e82215c7-9a4e-40b2-b19a-e9739af613e3", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd589a4-2e8a-4d4c-ab7c-5d4c386e7e65", "created": "2026-01-27T05:12:58.020237Z", "modified": "2026-01-27T05:12:58.020237Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='message-tracker-98822.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.020237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b49da8fe-11b5-45de-a260-3adfa78b219b", "created": "2026-01-27T05:12:58.020971Z", "modified": "2026-01-27T05:12:58.020971Z", "relationship_type": "indicates", "source_ref": "indicator--2dd589a4-2e8a-4d4c-ab7c-5d4c386e7e65", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223367f2-53e2-4eb1-965c-88cf668f7913", "created": "2026-01-27T05:12:58.021151Z", "modified": "2026-01-27T05:12:58.021151Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smsandcalltracker.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.021151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4011f8b0-d72d-4b4d-978d-0929adfbd485", "created": "2026-01-27T05:12:58.021863Z", "modified": "2026-01-27T05:12:58.021863Z", "relationship_type": "indicates", "source_ref": "indicator--223367f2-53e2-4eb1-965c-88cf668f7913", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36004042-8c9c-4984-8c68-d15d879b8af4", "created": "2026-01-27T05:12:58.022045Z", "modified": "2026-01-27T05:12:58.022045Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyaudiorecorder.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.022045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2da05265-6e75-4008-aee2-50cbca2229a4", "created": "2026-01-27T05:12:58.022833Z", "modified": "2026-01-27T05:12:58.022833Z", "relationship_type": "indicates", "source_ref": "indicator--36004042-8c9c-4984-8c68-d15d879b8af4", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c925a52d-363d-4385-80f5-d117418cb972", "created": "2026-01-27T05:12:58.023028Z", "modified": "2026-01-27T05:12:58.023028Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmyphones-pro.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.023028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--790b549d-dcb5-46c9-9d25-a16068ffafa4", "created": "2026-01-27T05:12:58.023763Z", "modified": "2026-01-27T05:12:58.023763Z", "relationship_type": "indicates", "source_ref": "indicator--c925a52d-363d-4385-80f5-d117418cb972", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26007ab3-89e1-40b5-95e4-50a8119e3b7d", "created": "2026-01-27T05:12:58.023951Z", "modified": "2026-01-27T05:12:58.023951Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.023951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ac37c63-08d3-4720-b4e0-b14ec8efd0ca", "created": "2026-01-27T05:12:58.024634Z", "modified": "2026-01-27T05:12:58.024634Z", "relationship_type": "indicates", "source_ref": "indicator--26007ab3-89e1-40b5-95e4-50a8119e3b7d", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d64f48-2ec4-4308-a31e-d4fcbd5e239f", "created": "2026-01-27T05:12:58.024831Z", "modified": "2026-01-27T05:12:58.024831Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='video-recorder-c0419.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.024831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18f17039-06b9-4d0c-b456-d7cb21ac7e3d", "created": "2026-01-27T05:12:58.025535Z", "modified": "2026-01-27T05:12:58.025535Z", "relationship_type": "indicates", "source_ref": "indicator--51d64f48-2ec4-4308-a31e-d4fcbd5e239f", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afbfd5e-c9ba-4e02-98dc-0b6258f5865d", "created": "2026-01-27T05:12:58.025709Z", "modified": "2026-01-27T05:12:58.025709Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.025709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b8a473c-da19-4e01-89fe-c68cc954160e", "created": "2026-01-27T05:12:58.026404Z", "modified": "2026-01-27T05:12:58.026404Z", "relationship_type": "indicates", "source_ref": "indicator--8afbfd5e-c9ba-4e02-98dc-0b6258f5865d", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d17e0d9-7d12-4964-acd5-c0c9538f9b37", "created": "2026-01-27T05:12:58.026582Z", "modified": "2026-01-27T05:12:58.026582Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.026582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c0a3c38-fe69-4a31-b754-3a96a4e0e07e", "created": "2026-01-27T05:12:58.027388Z", "modified": "2026-01-27T05:12:58.027388Z", "relationship_type": "indicates", "source_ref": "indicator--2d17e0d9-7d12-4964-acd5-c0c9538f9b37", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042d55be-af86-4448-b7ac-9ea5b4691762", "created": "2026-01-27T05:12:58.027567Z", "modified": "2026-01-27T05:12:58.027567Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackmyphones.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.027567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13e5ddc7-7f66-481e-9f65-06bcdea2db9f", "created": "2026-01-27T05:12:58.02826Z", "modified": "2026-01-27T05:12:58.02826Z", "relationship_type": "indicates", "source_ref": "indicator--042d55be-af86-4448-b7ac-9ea5b4691762", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b91753-3ff3-46ee-bc6f-9f1abf5f148b", "created": "2026-01-27T05:12:58.028438Z", "modified": "2026-01-27T05:12:58.028438Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.audiorec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.028438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d012d8e4-4cc3-4292-a1a5-f430bca60a3e", "created": "2026-01-27T05:12:58.029102Z", "modified": "2026-01-27T05:12:58.029102Z", "relationship_type": "indicates", "source_ref": "indicator--d1b91753-3ff3-46ee-bc6f-9f1abf5f148b", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c17b64-9c08-4107-941b-5aff745d6d23", "created": "2026-01-27T05:12:58.02928Z", "modified": "2026-01-27T05:12:58.02928Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.call_rec_hidden']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.02928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79b2d21d-f60a-405e-9efe-99b15f51c63c", "created": "2026-01-27T05:12:58.029952Z", "modified": "2026-01-27T05:12:58.029952Z", "relationship_type": "indicates", "source_ref": "indicator--18c17b64-9c08-4107-941b-5aff745d6d23", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece57fd-8421-4c49-8afb-effc54eed203", "created": "2026-01-27T05:12:58.030134Z", "modified": "2026-01-27T05:12:58.030134Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.030134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc1bbbb3-7305-4ee3-8d64-ea7757228570", "created": "2026-01-27T05:12:58.0308Z", "modified": "2026-01-27T05:12:58.0308Z", "relationship_type": "indicates", "source_ref": "indicator--6ece57fd-8421-4c49-8afb-effc54eed203", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a7d07c-dbdb-4ac1-9cbb-f10fcb884bcd", "created": "2026-01-27T05:12:58.030989Z", "modified": "2026-01-27T05:12:58.030989Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.spy_call_recorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.030989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09adc3d4-a4df-4af8-bd58-e50a23e5108d", "created": "2026-01-27T05:12:58.031658Z", "modified": "2026-01-27T05:12:58.031658Z", "relationship_type": "indicates", "source_ref": "indicator--a4a7d07c-dbdb-4ac1-9cbb-f10fcb884bcd", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647cfa50-ae1b-43d9-b646-f2001a9e07ce", "created": "2026-01-27T05:12:58.031851Z", "modified": "2026-01-27T05:12:58.031851Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.recorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.031851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70356723-7ca4-4d00-9df5-29e47c2cdb50", "created": "2026-01-27T05:12:58.032499Z", "modified": "2026-01-27T05:12:58.032499Z", "relationship_type": "indicates", "source_ref": "indicator--647cfa50-ae1b-43d9-b646-f2001a9e07ce", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd7911a-824a-4280-a7c3-ba78158c3ea0", "created": "2026-01-27T05:12:58.032678Z", "modified": "2026-01-27T05:12:58.032678Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.videorec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.032678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99c54a6a-a016-4e47-a8b5-d8c3db6bddf1", "created": "2026-01-27T05:12:58.033339Z", "modified": "2026-01-27T05:12:58.033339Z", "relationship_type": "indicates", "source_ref": "indicator--ebd7911a-824a-4280-a7c3-ba78158c3ea0", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a55725-b503-43f4-82d8-ae86ccf2e16d", "created": "2026-01-27T05:12:58.033512Z", "modified": "2026-01-27T05:12:58.033512Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.apps.anti_theft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.033512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cbe3e8b-d0c7-4f4f-bb41-eb74eb4b3a40", "created": "2026-01-27T05:12:58.034179Z", "modified": "2026-01-27T05:12:58.034179Z", "relationship_type": "indicates", "source_ref": "indicator--b8a55725-b503-43f4-82d8-ae86ccf2e16d", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe320fe-df77-4602-b513-6d98c285f20c", "created": "2026-01-27T05:12:58.034362Z", "modified": "2026-01-27T05:12:58.034362Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.apps.rct.CellTrackerActivity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.034362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aea01cec-6b65-424d-b69a-852483f8e3aa", "created": "2026-01-27T05:12:58.035318Z", "modified": "2026-01-27T05:12:58.035318Z", "relationship_type": "indicates", "source_ref": "indicator--6fe320fe-df77-4602-b513-6d98c285f20c", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e274b6bb-0885-4e3e-b5e1-c897ce7c42df", "created": "2026-01-27T05:12:58.035507Z", "modified": "2026-01-27T05:12:58.035507Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dev4playapps.whatsdeleted']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.035507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4395619f-776c-4ed6-852e-80ecf8cc2a04", "created": "2026-01-27T05:12:58.036197Z", "modified": "2026-01-27T05:12:58.036197Z", "relationship_type": "indicates", "source_ref": "indicator--e274b6bb-0885-4e3e-b5e1-c897ce7c42df", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4289dd24-dd1d-4439-966b-b951672b4190", "created": "2026-01-27T05:12:58.036377Z", "modified": "2026-01-27T05:12:58.036377Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_sms_tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.036377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d5122d3-ae28-44a0-8919-ff767ac6211a", "created": "2026-01-27T05:12:58.037063Z", "modified": "2026-01-27T05:12:58.037063Z", "relationship_type": "indicates", "source_ref": "indicator--4289dd24-dd1d-4439-966b-b951672b4190", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7357983b-17eb-43fb-ac19-bd8c6fd4236e", "created": "2026-01-27T05:12:58.037243Z", "modified": "2026-01-27T05:12:58.037243Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_sms_tracker.updated']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.037243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c2a4252-3817-44de-a125-2eb73ae39f36", "created": "2026-01-27T05:12:58.037973Z", "modified": "2026-01-27T05:12:58.037973Z", "relationship_type": "indicates", "source_ref": "indicator--7357983b-17eb-43fb-ac19-bd8c6fd4236e", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f445db-666b-4091-8553-5b92237815e7", "created": "2026-01-27T05:12:58.038168Z", "modified": "2026-01-27T05:12:58.038168Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.038168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a81f6f3-be0d-442f-9b6d-2aadbe5ff4f3", "created": "2026-01-27T05:12:58.038844Z", "modified": "2026-01-27T05:12:58.038844Z", "relationship_type": "indicates", "source_ref": "indicator--a8f445db-666b-4091-8553-5b92237815e7", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677fb20f-4af6-4c33-87e8-f5813e869e15", "created": "2026-01-27T05:12:58.039025Z", "modified": "2026-01-27T05:12:58.039025Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_celltracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.039025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1545751c-d4cf-4321-a0e2-eab2c271468c", "created": "2026-01-27T05:12:58.039673Z", "modified": "2026-01-27T05:12:58.039673Z", "relationship_type": "indicates", "source_ref": "indicator--677fb20f-4af6-4c33-87e8-f5813e869e15", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1efbc4-4a26-4232-a6fe-41fb0f7cb61b", "created": "2026-01-27T05:12:58.039868Z", "modified": "2026-01-27T05:12:58.039868Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.local_cell_tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.039868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55ae3498-efce-408e-a57c-4e34cc2199c9", "created": "2026-01-27T05:12:58.040526Z", "modified": "2026-01-27T05:12:58.040526Z", "relationship_type": "indicates", "source_ref": "indicator--ba1efbc4-4a26-4232-a6fe-41fb0f7cb61b", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd6744b-38c5-4818-83ec-30599655518a", "created": "2026-01-27T05:12:58.0407Z", "modified": "2026-01-27T05:12:58.0407Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.local_cell_tracker_updated']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.0407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c9c26d0-999b-42ae-8ff4-b68e9d074c8e", "created": "2026-01-27T05:12:58.041393Z", "modified": "2026-01-27T05:12:58.041393Z", "relationship_type": "indicates", "source_ref": "indicator--6fd6744b-38c5-4818-83ec-30599655518a", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe751c1-3930-4ef9-b49f-dd50ec044a13", "created": "2026-01-27T05:12:58.041568Z", "modified": "2026-01-27T05:12:58.041568Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.soh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.041568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37ae7ecc-8a8e-467c-9539-b37baee905ef", "created": "2026-01-27T05:12:58.042222Z", "modified": "2026-01-27T05:12:58.042222Z", "relationship_type": "indicates", "source_ref": "indicator--4fe751c1-3930-4ef9-b49f-dd50ec044a13", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269ea6fc-af91-4af3-b518-710e1cea78ff", "created": "2026-01-27T05:12:58.042399Z", "modified": "2026-01-27T05:12:58.042399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackerapps.whatsaptracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.042399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5438418a-7020-48ed-b10a-33d952a21a72", "created": "2026-01-27T05:12:58.043234Z", "modified": "2026-01-27T05:12:58.043234Z", "relationship_type": "indicates", "source_ref": "indicator--269ea6fc-af91-4af3-b518-710e1cea78ff", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ead5abb-1da6-4a61-920f-1449886bedfc", "created": "2026-01-27T05:12:58.043417Z", "modified": "2026-01-27T05:12:58.043417Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphone_pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.043417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e376b9d4-3b01-412f-be20-f9dde7b4b5f9", "created": "2026-01-27T05:12:58.044103Z", "modified": "2026-01-27T05:12:58.044103Z", "relationship_type": "indicates", "source_ref": "indicator--4ead5abb-1da6-4a61-920f-1449886bedfc", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad00c13-4b83-4d7b-badc-dc18c0e376ec", "created": "2026-01-27T05:12:58.044281Z", "modified": "2026-01-27T05:12:58.044281Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphones.livefamilytracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.044281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba9c75fa-6b4f-407a-884b-f6c91bfcb903", "created": "2026-01-27T05:12:58.044979Z", "modified": "2026-01-27T05:12:58.044979Z", "relationship_type": "indicates", "source_ref": "indicator--dad00c13-4b83-4d7b-badc-dc18c0e376ec", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d97d1c-7d69-407d-af48-48df47755935", "created": "2026-01-27T05:12:58.045157Z", "modified": "2026-01-27T05:12:58.045157Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphones.recoverphoneusingchatmessages']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.045157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb787e61-a2e3-469f-a10b-66dd90f6d2ea", "created": "2026-01-27T05:12:58.045866Z", "modified": "2026-01-27T05:12:58.045866Z", "relationship_type": "indicates", "source_ref": "indicator--17d97d1c-7d69-407d-af48-48df47755935", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8998dc8-34b0-467b-a354-b06acd8e8286", "created": "2026-01-27T05:12:58.046044Z", "modified": "2026-01-27T05:12:58.046044Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackmyphones.tmpusingchatmessages']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.046044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb64ac11-c3a9-461c-a7b9-a3829d3204b8", "created": "2026-01-27T05:12:58.046723Z", "modified": "2026-01-27T05:12:58.046723Z", "relationship_type": "indicates", "source_ref": "indicator--d8998dc8-34b0-467b-a354-b06acd8e8286", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e106fe-d7d8-4d04-a877-398ead723af8", "created": "2026-01-27T05:12:58.046923Z", "modified": "2026-01-27T05:12:58.046923Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='37ACE0321E8833F25BDDB363AB395C81354E88A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.046923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc0162f5-5cdf-4ca0-b653-1072bcc5261c", "created": "2026-01-27T05:12:58.047698Z", "modified": "2026-01-27T05:12:58.047698Z", "relationship_type": "indicates", "source_ref": "indicator--b9e106fe-d7d8-4d04-a877-398ead723af8", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6400770a-47d4-4a4c-a400-2ff22b03dd08", "created": "2026-01-27T05:12:58.047893Z", "modified": "2026-01-27T05:12:58.047893Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='554137DEE63BE07CE9687C5886244954277227F5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.047893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4059abb5-8535-445d-9242-5edfdb793f38", "created": "2026-01-27T05:12:58.048668Z", "modified": "2026-01-27T05:12:58.048668Z", "relationship_type": "indicates", "source_ref": "indicator--6400770a-47d4-4a4c-a400-2ff22b03dd08", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f390c61d-589b-4799-a454-174d7e4cd5dd", "created": "2026-01-27T05:12:58.048861Z", "modified": "2026-01-27T05:12:58.048861Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='68AC78A7CD660ED204B4BC3C73A3F91DA1AE45FC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.048861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ea50b09-0b21-45e7-b129-32785d1715f5", "created": "2026-01-27T05:12:58.049638Z", "modified": "2026-01-27T05:12:58.049638Z", "relationship_type": "indicates", "source_ref": "indicator--f390c61d-589b-4799-a454-174d7e4cd5dd", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3af2a2-ceb9-46e9-804d-325d1d0d5236", "created": "2026-01-27T05:12:58.049826Z", "modified": "2026-01-27T05:12:58.049826Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6DB1F33668AA745163DFB6C5614C3800BCA8D693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.049826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9ff5365-71c3-46ca-ab79-3e4cecf39173", "created": "2026-01-27T05:12:58.05059Z", "modified": "2026-01-27T05:12:58.05059Z", "relationship_type": "indicates", "source_ref": "indicator--ea3af2a2-ceb9-46e9-804d-325d1d0d5236", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23047a3f-e03d-49d1-948c-b4068f3125d8", "created": "2026-01-27T05:12:58.050786Z", "modified": "2026-01-27T05:12:58.050786Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='849D181E1BEE5084CBE1BACBA8442996A8B1F8C6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.050786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6874d26a-4d9f-4002-9dd5-f44b46e0dcde", "created": "2026-01-27T05:12:58.051681Z", "modified": "2026-01-27T05:12:58.051681Z", "relationship_type": "indicates", "source_ref": "indicator--23047a3f-e03d-49d1-948c-b4068f3125d8", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ef9a83-3dce-43fc-aa3f-457f2c937497", "created": "2026-01-27T05:12:58.051876Z", "modified": "2026-01-27T05:12:58.051876Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='87EF370B8D6E3089E7F8CDDD6E830B5E4C8CF60B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.051876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a4ac6da-e124-46ba-8163-1025496345d0", "created": "2026-01-27T05:12:58.052646Z", "modified": "2026-01-27T05:12:58.052646Z", "relationship_type": "indicates", "source_ref": "indicator--60ef9a83-3dce-43fc-aa3f-457f2c937497", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218567d2-6999-4c5c-b015-65e64bff726e", "created": "2026-01-27T05:12:58.052843Z", "modified": "2026-01-27T05:12:58.052843Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A93266E83B136CBC220062898D308213263E793A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.052843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03a8f5a4-a766-4969-9d6c-99e302526186", "created": "2026-01-27T05:12:58.053621Z", "modified": "2026-01-27T05:12:58.053621Z", "relationship_type": "indicates", "source_ref": "indicator--218567d2-6999-4c5c-b015-65e64bff726e", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e57e83-7e46-4baa-bb44-df5bf8340929", "created": "2026-01-27T05:12:58.053814Z", "modified": "2026-01-27T05:12:58.053814Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7285348B05EDAEFF7F032384E4F90182E1C1F27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.053814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--346e202b-d1fc-4c85-a283-bf359c09ee7f", "created": "2026-01-27T05:12:58.054581Z", "modified": "2026-01-27T05:12:58.054581Z", "relationship_type": "indicates", "source_ref": "indicator--02e57e83-7e46-4baa-bb44-df5bf8340929", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656bfb85-b80a-4a5c-bda8-4d98cf2d8fdf", "created": "2026-01-27T05:12:58.054775Z", "modified": "2026-01-27T05:12:58.054775Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EBD3713DFB02D79ADC90C88DE1E0B547882F5A42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.054775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3cd3b8d-d3b5-4a42-bc9f-0188d4d43a38", "created": "2026-01-27T05:12:58.055562Z", "modified": "2026-01-27T05:12:58.055562Z", "relationship_type": "indicates", "source_ref": "indicator--656bfb85-b80a-4a5c-bda8-4d98cf2d8fdf", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e02e7e6-9b6d-4c97-b1dc-297c68f2addf", "created": "2026-01-27T05:12:58.055736Z", "modified": "2026-01-27T05:12:58.055736Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F5A5336B28456208EF357B4630A93A91206CF21A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.055736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e247dbc-82aa-40c4-a932-7914514f90b7", "created": "2026-01-27T05:12:58.056539Z", "modified": "2026-01-27T05:12:58.056539Z", "relationship_type": "indicates", "source_ref": "indicator--0e02e7e6-9b6d-4c97-b1dc-297c68f2addf", "target_ref": "malware--c04093c5-9eea-4c8b-8eff-41fe85dc67c4"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3", "created": "2026-01-27T05:12:58.056714Z", "modified": "2026-01-27T05:12:58.056714Z", "name": "FlexiSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5821121-2e2e-42ec-bee3-23b0e84151dc", "created": "2026-01-27T05:12:58.056914Z", "modified": "2026-01-27T05:12:58.056914Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.056914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f90cdaef-13fa-4911-8bc4-9083163f31f3", "created": "2026-01-27T05:12:58.057595Z", "modified": "2026-01-27T05:12:58.057595Z", "relationship_type": "indicates", "source_ref": "indicator--d5821121-2e2e-42ec-bee3-23b0e84151dc", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb4ce70-1a0a-4799-a0d6-e374db30ce4d", "created": "2026-01-27T05:12:58.057785Z", "modified": "2026-01-27T05:12:58.057785Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.057785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21d64b4b-d969-451a-9436-8e6ee3bbea84", "created": "2026-01-27T05:12:58.058455Z", "modified": "2026-01-27T05:12:58.058455Z", "relationship_type": "indicates", "source_ref": "indicator--5cb4ce70-1a0a-4799-a0d6-e374db30ce4d", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5affe51a-0488-437d-a7ba-b1f370b830f4", "created": "2026-01-27T05:12:58.058635Z", "modified": "2026-01-27T05:12:58.058635Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='client.mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.058635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d700803-c92b-4592-ad0c-27f21f6b81cf", "created": "2026-01-27T05:12:58.059332Z", "modified": "2026-01-27T05:12:58.059332Z", "relationship_type": "indicates", "source_ref": "indicator--5affe51a-0488-437d-a7ba-b1f370b830f4", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d99b96-dcf2-4b78-9c62-a909dc3800c3", "created": "2026-01-27T05:12:58.059512Z", "modified": "2026-01-27T05:12:58.059512Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='djp.bz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.059512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e810fb78-923a-4e85-9fa5-02cdb3256ca0", "created": "2026-01-27T05:12:58.060307Z", "modified": "2026-01-27T05:12:58.060307Z", "relationship_type": "indicates", "source_ref": "indicator--75d99b96-dcf2-4b78-9c62-a909dc3800c3", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0065c7ed-658f-4e30-8abb-d402fdff204d", "created": "2026-01-27T05:12:58.060485Z", "modified": "2026-01-27T05:12:58.060485Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dmw.bz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.060485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--806394b8-95ce-4112-98d7-854add8ab257", "created": "2026-01-27T05:12:58.061161Z", "modified": "2026-01-27T05:12:58.061161Z", "relationship_type": "indicates", "source_ref": "indicator--0065c7ed-658f-4e30-8abb-d402fdff204d", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070dd52d-38da-45c7-b8b1-7af2a0f74afb", "created": "2026-01-27T05:12:58.061345Z", "modified": "2026-01-27T05:12:58.061345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dmw.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.061345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b974be03-c6c8-4ebc-86e8-4abd41540947", "created": "2026-01-27T05:12:58.062024Z", "modified": "2026-01-27T05:12:58.062024Z", "relationship_type": "indicates", "source_ref": "indicator--070dd52d-38da-45c7-b8b1-7af2a0f74afb", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133c9eca-89ec-437e-8406-7c52146250b8", "created": "2026-01-27T05:12:58.062201Z", "modified": "2026-01-27T05:12:58.062201Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ecom.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.062201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eea1340-c80a-4371-b14f-d4e326c86bf3", "created": "2026-01-27T05:12:58.062907Z", "modified": "2026-01-27T05:12:58.062907Z", "relationship_type": "indicates", "source_ref": "indicator--133c9eca-89ec-437e-8406-7c52146250b8", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b426ef3-8caf-4e86-90de-d2bfffebd605", "created": "2026-01-27T05:12:58.063084Z", "modified": "2026-01-27T05:12:58.063084Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mflx.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.063084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bae6ca74-2a83-4470-93a2-edb4e22655b2", "created": "2026-01-27T05:12:58.063762Z", "modified": "2026-01-27T05:12:58.063762Z", "relationship_type": "indicates", "source_ref": "indicator--1b426ef3-8caf-4e86-90de-d2bfffebd605", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77042e4-941c-42f4-a5cb-cae104d8e31c", "created": "2026-01-27T05:12:58.063941Z", "modified": "2026-01-27T05:12:58.063941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.063941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49e57d39-9484-45a7-8f41-9d6691c757a3", "created": "2026-01-27T05:12:58.064611Z", "modified": "2026-01-27T05:12:58.064611Z", "relationship_type": "indicates", "source_ref": "indicator--c77042e4-941c-42f4-a5cb-cae104d8e31c", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a16f2b4-4d9e-4954-9092-a613166fbe7e", "created": "2026-01-27T05:12:58.064801Z", "modified": "2026-01-27T05:12:58.064801Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='push.mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.064801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc001c64-0d26-4547-b7b7-4410bcaa8364", "created": "2026-01-27T05:12:58.065484Z", "modified": "2026-01-27T05:12:58.065484Z", "relationship_type": "indicates", "source_ref": "indicator--1a16f2b4-4d9e-4954-9092-a613166fbe7e", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0a54ad-950e-49fa-91db-1a0688518575", "created": "2026-01-27T05:12:58.065657Z", "modified": "2026-01-27T05:12:58.065657Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test-client.mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.065657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6004d8d-570b-4290-aa39-d6ec9b951af6", "created": "2026-01-27T05:12:58.066367Z", "modified": "2026-01-27T05:12:58.066367Z", "relationship_type": "indicates", "source_ref": "indicator--ec0a54ad-950e-49fa-91db-1a0688518575", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d4b3f7-bfd3-4e4c-94d6-5fd903ac6a93", "created": "2026-01-27T05:12:58.066541Z", "modified": "2026-01-27T05:12:58.066541Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trkps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.066541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc85856c-17ca-40d1-90b5-132ad767d846", "created": "2026-01-27T05:12:58.067232Z", "modified": "2026-01-27T05:12:58.067232Z", "relationship_type": "indicates", "source_ref": "indicator--26d4b3f7-bfd3-4e4c-94d6-5fd903ac6a93", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46fe283-239f-4a34-b6ca-e638164f04a3", "created": "2026-01-27T05:12:58.067407Z", "modified": "2026-01-27T05:12:58.067407Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.067407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42d4edac-17ce-4394-947a-6c3d2f7a1d20", "created": "2026-01-27T05:12:58.068209Z", "modified": "2026-01-27T05:12:58.068209Z", "relationship_type": "indicates", "source_ref": "indicator--b46fe283-239f-4a34-b6ca-e638164f04a3", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde61760-adfb-42ae-a399-36bc461ea2bb", "created": "2026-01-27T05:12:58.068387Z", "modified": "2026-01-27T05:12:58.068387Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='community.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.068387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2369381a-1dbe-4fac-a417-8323eb956f4c", "created": "2026-01-27T05:12:58.069085Z", "modified": "2026-01-27T05:12:58.069085Z", "relationship_type": "indicates", "source_ref": "indicator--dde61760-adfb-42ae-a399-36bc461ea2bb", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da326ffb-6ffa-4b62-b9a1-12e1c51d52c2", "created": "2026-01-27T05:12:58.069264Z", "modified": "2026-01-27T05:12:58.069264Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='blog.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.069264Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97c8f8e0-2855-48f9-b144-4e97a5a08c54", "created": "2026-01-27T05:12:58.069981Z", "modified": "2026-01-27T05:12:58.069981Z", "relationship_type": "indicates", "source_ref": "indicator--da326ffb-6ffa-4b62-b9a1-12e1c51d52c2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a812513-8f1c-499b-9b37-8fc8a5945982", "created": "2026-01-27T05:12:58.070163Z", "modified": "2026-01-27T05:12:58.070163Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.070163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d97ba72-43fd-4943-b891-4224ce117a54", "created": "2026-01-27T05:12:58.070859Z", "modified": "2026-01-27T05:12:58.070859Z", "relationship_type": "indicates", "source_ref": "indicator--2a812513-8f1c-499b-9b37-8fc8a5945982", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49230f5c-95a4-469a-8af1-19d075f9cb0e", "created": "2026-01-27T05:12:58.071044Z", "modified": "2026-01-27T05:12:58.071044Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilefonex.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.071044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--776a3e4a-6f00-47fa-bbf2-4640208ce2d5", "created": "2026-01-27T05:12:58.07171Z", "modified": "2026-01-27T05:12:58.07171Z", "relationship_type": "indicates", "source_ref": "indicator--49230f5c-95a4-469a-8af1-19d075f9cb0e", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43964df-ee78-40d5-8e7d-0d01abb74a5c", "created": "2026-01-27T05:12:58.071907Z", "modified": "2026-01-27T05:12:58.071907Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobileapps.com.my']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.071907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3ae3d95-bdcf-415e-8a04-7248d70f304c", "created": "2026-01-27T05:12:58.072588Z", "modified": "2026-01-27T05:12:58.072588Z", "relationship_type": "indicates", "source_ref": "indicator--d43964df-ee78-40d5-8e7d-0d01abb74a5c", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7b16c2-352c-4ec8-bc97-7c6e42a05b0f", "created": "2026-01-27T05:12:58.072783Z", "modified": "2026-01-27T05:12:58.072783Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flexispy.mobileapps.com.my']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.072783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28de8132-c217-4de2-a510-d09ed1b3a254", "created": "2026-01-27T05:12:58.073474Z", "modified": "2026-01-27T05:12:58.073474Z", "relationship_type": "indicates", "source_ref": "indicator--1e7b16c2-352c-4ec8-bc97-7c6e42a05b0f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90c1fac-06ad-4f7c-a549-2267ded8cd67", "created": "2026-01-27T05:12:58.073649Z", "modified": "2026-01-27T05:12:58.073649Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.flexispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.073649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2b734c1-66ed-4600-9983-c0a7143627f6", "created": "2026-01-27T05:12:58.074341Z", "modified": "2026-01-27T05:12:58.074341Z", "relationship_type": "indicates", "source_ref": "indicator--c90c1fac-06ad-4f7c-a549-2267ded8cd67", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c6feb0-8b99-4425-b645-051bbd9e4a62", "created": "2026-01-27T05:12:58.074514Z", "modified": "2026-01-27T05:12:58.074514Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='svlogin.asia']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.074514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--036fdf3e-3f64-4bc2-99c3-93c2040fc80b", "created": "2026-01-27T05:12:58.075199Z", "modified": "2026-01-27T05:12:58.075199Z", "relationship_type": "indicates", "source_ref": "indicator--a1c6feb0-8b99-4425-b645-051bbd9e4a62", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e4421e-9317-4429-b7e6-d4782704f965", "created": "2026-01-27T05:12:58.075373Z", "modified": "2026-01-27T05:12:58.075373Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyphonereview.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.075373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53c75f44-a4cf-49ef-aab9-1a87e496e065", "created": "2026-01-27T05:12:58.076182Z", "modified": "2026-01-27T05:12:58.076182Z", "relationship_type": "indicates", "source_ref": "indicator--91e4421e-9317-4429-b7e6-d4782704f965", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86b48ad-aa8c-4791-8fdf-a58875577808", "created": "2026-01-27T05:12:58.076361Z", "modified": "2026-01-27T05:12:58.076361Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyphonereview.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.076361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23ee66ed-368c-4b5f-bf2c-c83b5691f284", "created": "2026-01-27T05:12:58.077052Z", "modified": "2026-01-27T05:12:58.077052Z", "relationship_type": "indicates", "source_ref": "indicator--b86b48ad-aa8c-4791-8fdf-a58875577808", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c94063-77bf-4feb-b813-c3500456bef7", "created": "2026-01-27T05:12:58.077231Z", "modified": "2026-01-27T05:12:58.077231Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='store.mycustomdevice.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.077231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--845d822d-3d45-4781-ad0f-055efccf03a0", "created": "2026-01-27T05:12:58.07793Z", "modified": "2026-01-27T05:12:58.07793Z", "relationship_type": "indicates", "source_ref": "indicator--39c94063-77bf-4feb-b813-c3500456bef7", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85bc655-fdd6-44be-85f5-986eb7b6e472", "created": "2026-01-27T05:12:58.078107Z", "modified": "2026-01-27T05:12:58.078107Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='504475cf9bc3d997a6657d9ffd49a65ea96d333924615f158e3f992c33c4df65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.078107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69ce7a92-dc56-45e2-82e2-c93efa90b008", "created": "2026-01-27T05:12:58.078998Z", "modified": "2026-01-27T05:12:58.078998Z", "relationship_type": "indicates", "source_ref": "indicator--a85bc655-fdd6-44be-85f5-986eb7b6e472", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16921f9-c4ca-405a-89fc-63a3de5d7d82", "created": "2026-01-27T05:12:58.079182Z", "modified": "2026-01-27T05:12:58.079182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ded02bf772eee8a4f8536372bf36ebf77158766518462f30c435d9ee4b28987d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.079182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0cb973c-fdfe-49ae-98a8-f3647c147bcc", "created": "2026-01-27T05:12:58.080039Z", "modified": "2026-01-27T05:12:58.080039Z", "relationship_type": "indicates", "source_ref": "indicator--e16921f9-c4ca-405a-89fc-63a3de5d7d82", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3cd303-2217-4971-a695-9e73aeb1a0d4", "created": "2026-01-27T05:12:58.08022Z", "modified": "2026-01-27T05:12:58.08022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='891c7a96df0a0096186530d9fb76675af3c8b47e253f78aa393d8b89d8fdca7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.08022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe04857f-5c4f-44b0-be3c-11d1333aef44", "created": "2026-01-27T05:12:58.081078Z", "modified": "2026-01-27T05:12:58.081078Z", "relationship_type": "indicates", "source_ref": "indicator--9e3cd303-2217-4971-a695-9e73aeb1a0d4", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87968a9-6968-4c65-b0d4-3a1301d2f6e6", "created": "2026-01-27T05:12:58.081256Z", "modified": "2026-01-27T05:12:58.081256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18b6ea2b5ccb594d9591556e9928d9745d6ebf4fad91d1e0b59b9b304234f46c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.081256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ba794c3-2b43-4b63-8d04-dd3a8fadddd6", "created": "2026-01-27T05:12:58.082117Z", "modified": "2026-01-27T05:12:58.082117Z", "relationship_type": "indicates", "source_ref": "indicator--c87968a9-6968-4c65-b0d4-3a1301d2f6e6", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28f59c4-c158-47a8-bd7b-034c5977b6bc", "created": "2026-01-27T05:12:58.082301Z", "modified": "2026-01-27T05:12:58.082301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73dcb593e6884c8727df4e214214b58fa5de719a4d2b91c7a209123ee64d3040']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.082301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e07a514-ebea-4550-abd8-c91498a8312d", "created": "2026-01-27T05:12:58.083152Z", "modified": "2026-01-27T05:12:58.083152Z", "relationship_type": "indicates", "source_ref": "indicator--c28f59c4-c158-47a8-bd7b-034c5977b6bc", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de5c4b8-e5e2-4d5c-aa05-5bccdfbd56e2", "created": "2026-01-27T05:12:58.083333Z", "modified": "2026-01-27T05:12:58.083333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6e4983f344777a35d5d671b9bae8058a6789ee76c7b0188635b79a161bca4e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.083333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e760a5b-5d81-40fd-ac30-82aadfa882a2", "created": "2026-01-27T05:12:58.084192Z", "modified": "2026-01-27T05:12:58.084192Z", "relationship_type": "indicates", "source_ref": "indicator--7de5c4b8-e5e2-4d5c-aa05-5bccdfbd56e2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264e84c9-e4fd-4249-90e6-3462d7a45b41", "created": "2026-01-27T05:12:58.084374Z", "modified": "2026-01-27T05:12:58.084374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2d37e1ad33b35341e91823aaaa715f8cb6faf9cede6e0dd33f193b7142ee034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.084374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b1460e4-f45b-47fb-80d4-baba7da3115a", "created": "2026-01-27T05:12:58.085343Z", "modified": "2026-01-27T05:12:58.085343Z", "relationship_type": "indicates", "source_ref": "indicator--264e84c9-e4fd-4249-90e6-3462d7a45b41", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542d1ee4-ae52-4001-92cb-0b3e4a451259", "created": "2026-01-27T05:12:58.085521Z", "modified": "2026-01-27T05:12:58.085521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7a23301118ed495f62f01ee99df45d14928e14e5c7a2606278e8b3a8d949b8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.085521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--580b0ca1-26f3-42d0-8fc9-35855c7618d4", "created": "2026-01-27T05:12:58.086365Z", "modified": "2026-01-27T05:12:58.086365Z", "relationship_type": "indicates", "source_ref": "indicator--542d1ee4-ae52-4001-92cb-0b3e4a451259", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f11a17-ca2b-4f6b-90c9-82d776ea6269", "created": "2026-01-27T05:12:58.086546Z", "modified": "2026-01-27T05:12:58.086546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d11ecfd27befbbff688b87d2cde7653f8d283ee1e255a891a7ba589337fbc8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.086546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ba746f8-2929-4cfb-93f4-484501065781", "created": "2026-01-27T05:12:58.087385Z", "modified": "2026-01-27T05:12:58.087385Z", "relationship_type": "indicates", "source_ref": "indicator--40f11a17-ca2b-4f6b-90c9-82d776ea6269", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef3f4c7-917a-45b3-b51e-e5460dfed744", "created": "2026-01-27T05:12:58.087563Z", "modified": "2026-01-27T05:12:58.087563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cba7ae61dd553d033d353f000ea1b3484835000571be66b91e9dace1e21bf87a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.087563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0523718e-97c2-4d85-9afa-06af042dc97a", "created": "2026-01-27T05:12:58.088397Z", "modified": "2026-01-27T05:12:58.088397Z", "relationship_type": "indicates", "source_ref": "indicator--bef3f4c7-917a-45b3-b51e-e5460dfed744", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ffd24c-bb78-4073-b377-531374e39ef6", "created": "2026-01-27T05:12:58.088574Z", "modified": "2026-01-27T05:12:58.088574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8d613ed8e7df9dc1d675fdc0693e9cd6aef1c8e8452648af54a628cc1e71408']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.088574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b73167b-a06b-42a7-a9e3-a2558859c652", "created": "2026-01-27T05:12:58.089413Z", "modified": "2026-01-27T05:12:58.089413Z", "relationship_type": "indicates", "source_ref": "indicator--b3ffd24c-bb78-4073-b377-531374e39ef6", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de12473-c56e-4f92-88a4-65672716063e", "created": "2026-01-27T05:12:58.08959Z", "modified": "2026-01-27T05:12:58.08959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='263219f185aa2a847bcb4ca981ec4a7c7eff8ded2d3b49d6fb2b4a578b43af60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.08959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74f766b0-2293-4557-bc26-87d8e5862dc1", "created": "2026-01-27T05:12:58.090436Z", "modified": "2026-01-27T05:12:58.090436Z", "relationship_type": "indicates", "source_ref": "indicator--4de12473-c56e-4f92-88a4-65672716063e", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701db868-a0be-4b89-ba8f-8c33dfd92140", "created": "2026-01-27T05:12:58.090614Z", "modified": "2026-01-27T05:12:58.090614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27407f291d9c51296950f0a37357583b1abf9968a24944df857bf241912bb792']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.090614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbc731be-c3a9-4414-84da-a328d9d22eec", "created": "2026-01-27T05:12:58.091466Z", "modified": "2026-01-27T05:12:58.091466Z", "relationship_type": "indicates", "source_ref": "indicator--701db868-a0be-4b89-ba8f-8c33dfd92140", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff2c3ea-dac1-4c2f-a96e-9c9b122df173", "created": "2026-01-27T05:12:58.091643Z", "modified": "2026-01-27T05:12:58.091643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='390534af533e709ea543b3f8b013d4ecc173dd7def431d6209886b23f37ca23d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.091643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed9c4e57-cf43-4761-aa79-d29d4ebf5d73", "created": "2026-01-27T05:12:58.092492Z", "modified": "2026-01-27T05:12:58.092492Z", "relationship_type": "indicates", "source_ref": "indicator--8ff2c3ea-dac1-4c2f-a96e-9c9b122df173", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6521c11d-cc95-4217-b044-69d114f518d2", "created": "2026-01-27T05:12:58.092671Z", "modified": "2026-01-27T05:12:58.092671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82b9a2e301f8de29a212777fd3402979ad61429b6b2606d800b6194405573a8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.092671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbd2d740-54ed-4d7a-b559-24466a28ef04", "created": "2026-01-27T05:12:58.09352Z", "modified": "2026-01-27T05:12:58.09352Z", "relationship_type": "indicates", "source_ref": "indicator--6521c11d-cc95-4217-b044-69d114f518d2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee054f4f-3dc0-4a00-bb0f-2f4edfd16cb2", "created": "2026-01-27T05:12:58.093694Z", "modified": "2026-01-27T05:12:58.093694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d65dc0e9a6dbaf9cd17fec2a46d6dc30d91abeb21404ea8468cf7dc15d3fb62c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.093694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef85b79f-2f74-43d3-afb7-7fac3be8ed62", "created": "2026-01-27T05:12:58.094662Z", "modified": "2026-01-27T05:12:58.094662Z", "relationship_type": "indicates", "source_ref": "indicator--ee054f4f-3dc0-4a00-bb0f-2f4edfd16cb2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e282bf0-e2f5-42b1-8d9b-445e7cfb7a80", "created": "2026-01-27T05:12:58.094864Z", "modified": "2026-01-27T05:12:58.094864Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b60c93c5ef18d8562c21fd6bda4bb9cc629b47913a32fc4fd05acffc7df2cbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.094864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92723394-1167-438a-aae8-aaebc12fed53", "created": "2026-01-27T05:12:58.095681Z", "modified": "2026-01-27T05:12:58.095681Z", "relationship_type": "indicates", "source_ref": "indicator--6e282bf0-e2f5-42b1-8d9b-445e7cfb7a80", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1bf35b-9728-4599-8eed-2504b893c8c4", "created": "2026-01-27T05:12:58.095881Z", "modified": "2026-01-27T05:12:58.095881Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acce32692b0737b9d6446500ef609e9e50e60849820f9669c428d6e18d3ec026']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.095881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f79e9ac0-c807-4680-9f51-6a6c9fa3ac1f", "created": "2026-01-27T05:12:58.096701Z", "modified": "2026-01-27T05:12:58.096701Z", "relationship_type": "indicates", "source_ref": "indicator--da1bf35b-9728-4599-8eed-2504b893c8c4", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31889861-a0de-41ac-8609-ea79741d2d1b", "created": "2026-01-27T05:12:58.096898Z", "modified": "2026-01-27T05:12:58.096898Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0dcca2c94eae4d6f84f27ed91ff678e9234aa675abadd6f7d47c401874295a2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.096898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30a6dd28-2ad8-4134-befa-211a31e1e9fe", "created": "2026-01-27T05:12:58.09772Z", "modified": "2026-01-27T05:12:58.09772Z", "relationship_type": "indicates", "source_ref": "indicator--31889861-a0de-41ac-8609-ea79741d2d1b", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5e48c1-d13c-48f5-87c3-510ab2e4d868", "created": "2026-01-27T05:12:58.097915Z", "modified": "2026-01-27T05:12:58.097915Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='093076b9a75cab66895dfefde626f969c0147cf60c83e2311925a050285727e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.097915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8c07a47-a4ca-401d-bcdf-285c9425a997", "created": "2026-01-27T05:12:58.098759Z", "modified": "2026-01-27T05:12:58.098759Z", "relationship_type": "indicates", "source_ref": "indicator--3e5e48c1-d13c-48f5-87c3-510ab2e4d868", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240ca89a-2d92-45e3-af0a-2558e3bc7c90", "created": "2026-01-27T05:12:58.09894Z", "modified": "2026-01-27T05:12:58.09894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0ebd581890e0cc562205e71ca2868375b4349ec2961828117cb866032445be8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.09894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d88cade-fac2-4e38-841c-f01567f6c9c5", "created": "2026-01-27T05:12:58.099784Z", "modified": "2026-01-27T05:12:58.099784Z", "relationship_type": "indicates", "source_ref": "indicator--240ca89a-2d92-45e3-af0a-2558e3bc7c90", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e373ff-9e25-4915-89b0-d95446df8c80", "created": "2026-01-27T05:12:58.099965Z", "modified": "2026-01-27T05:12:58.099965Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2230455762c1bcfa9e646612b2bfc9685b1dae9dcc908be1d0fe5ce88d8d059a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.099965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ebfb5b2-b952-426e-987d-8aaea79d2c31", "created": "2026-01-27T05:12:58.100806Z", "modified": "2026-01-27T05:12:58.100806Z", "relationship_type": "indicates", "source_ref": "indicator--16e373ff-9e25-4915-89b0-d95446df8c80", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491a604e-fd9d-4657-b098-9ca40eb89ecb", "created": "2026-01-27T05:12:58.100983Z", "modified": "2026-01-27T05:12:58.100983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58e036f627f0d56a4c52c69aa195c6e190c0c92e9c7b59908eb03dbc44d81540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.100983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91368865-4865-41e0-9ad5-c0449e8c993a", "created": "2026-01-27T05:12:58.101824Z", "modified": "2026-01-27T05:12:58.101824Z", "relationship_type": "indicates", "source_ref": "indicator--491a604e-fd9d-4657-b098-9ca40eb89ecb", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ae10a4-2f17-4949-9d0a-87385084e120", "created": "2026-01-27T05:12:58.102006Z", "modified": "2026-01-27T05:12:58.102006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a1be708e64e987bb08e475e48fb9970624d1d473c647926991b8fe18dd706aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.102006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f210f936-df3d-4c30-a019-3135ffe3af0e", "created": "2026-01-27T05:12:58.10285Z", "modified": "2026-01-27T05:12:58.10285Z", "relationship_type": "indicates", "source_ref": "indicator--d8ae10a4-2f17-4949-9d0a-87385084e120", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72940eb2-5394-44c1-a50b-7433b53943aa", "created": "2026-01-27T05:12:58.103029Z", "modified": "2026-01-27T05:12:58.103029Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d70ad214e2fe251b312b7740753e5a2ac0eae852bb13fcc06d98ff46970e98d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.103029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e904fb6-e45e-4e34-a7bc-deef263c8dbe", "created": "2026-01-27T05:12:58.104012Z", "modified": "2026-01-27T05:12:58.104012Z", "relationship_type": "indicates", "source_ref": "indicator--72940eb2-5394-44c1-a50b-7433b53943aa", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2ef62f-5207-4071-84d1-d9f882e0f870", "created": "2026-01-27T05:12:58.104192Z", "modified": "2026-01-27T05:12:58.104192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e711734c571f89ad89015bde8956fdf76dfe8ab5140a7fe988214bf0c37db9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.104192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d36c3c5d-198f-469f-bd6a-35ceed1faad3", "created": "2026-01-27T05:12:58.105037Z", "modified": "2026-01-27T05:12:58.105037Z", "relationship_type": "indicates", "source_ref": "indicator--aa2ef62f-5207-4071-84d1-d9f882e0f870", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82af32cd-4185-4eee-87fa-2b59fae28ebd", "created": "2026-01-27T05:12:58.105214Z", "modified": "2026-01-27T05:12:58.105214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5129bfdd8ed1c48d085a6b7602712a1127ee763540823f8a69181f58207c4fdd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.105214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d835560-49ad-4684-ba7b-a5ebf9a1e7b2", "created": "2026-01-27T05:12:58.106053Z", "modified": "2026-01-27T05:12:58.106053Z", "relationship_type": "indicates", "source_ref": "indicator--82af32cd-4185-4eee-87fa-2b59fae28ebd", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6865d9b5-a299-4389-b5f6-0e15c0187a77", "created": "2026-01-27T05:12:58.106232Z", "modified": "2026-01-27T05:12:58.106232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='520f8d78b3ccd3a772394225df7324003606aa0308753e5705ae4a87fedc9337']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.106232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46ba9a27-5ec3-4e6d-aad3-42afc3ceaf6a", "created": "2026-01-27T05:12:58.107078Z", "modified": "2026-01-27T05:12:58.107078Z", "relationship_type": "indicates", "source_ref": "indicator--6865d9b5-a299-4389-b5f6-0e15c0187a77", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcceae76-7efb-45a7-a208-7c10802d9293", "created": "2026-01-27T05:12:58.107261Z", "modified": "2026-01-27T05:12:58.107261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8324ae4a0a721029a219d3f2e9fd2cd20c33a5cb1ac99f4f078b59f7939b3546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.107261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eb74cf6-a041-4455-bd44-079a40bb0740", "created": "2026-01-27T05:12:58.108101Z", "modified": "2026-01-27T05:12:58.108101Z", "relationship_type": "indicates", "source_ref": "indicator--fcceae76-7efb-45a7-a208-7c10802d9293", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c14626-e5c0-410a-a85f-e68e8a39e12d", "created": "2026-01-27T05:12:58.108278Z", "modified": "2026-01-27T05:12:58.108278Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8b29c1a9d041bd40d125e429c361abac9173e185c438f888b2e6fd185300055']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.108278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21cad7eb-701c-4944-921a-d31606993fcc", "created": "2026-01-27T05:12:58.109118Z", "modified": "2026-01-27T05:12:58.109118Z", "relationship_type": "indicates", "source_ref": "indicator--87c14626-e5c0-410a-a85f-e68e8a39e12d", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01668d5-9988-4e69-8f56-d1e75ce26256", "created": "2026-01-27T05:12:58.109298Z", "modified": "2026-01-27T05:12:58.109298Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e8aba856583237cabb2a418dbd81557998900416750df51a626a6ad6b1f37f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.109298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--491f64d7-3ef7-40c5-aae5-8f9aff177793", "created": "2026-01-27T05:12:58.110137Z", "modified": "2026-01-27T05:12:58.110137Z", "relationship_type": "indicates", "source_ref": "indicator--e01668d5-9988-4e69-8f56-d1e75ce26256", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f79cd5-6a71-40a0-8baa-51888a3b893b", "created": "2026-01-27T05:12:58.110313Z", "modified": "2026-01-27T05:12:58.110313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f92141215556f23b0f27e540edc6a46a6a6eea4fac8275f2386a14f9584beee4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.110313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dea01f8-b7bc-4271-89cf-1eec53191426", "created": "2026-01-27T05:12:58.111186Z", "modified": "2026-01-27T05:12:58.111186Z", "relationship_type": "indicates", "source_ref": "indicator--c4f79cd5-6a71-40a0-8baa-51888a3b893b", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adce7530-54a7-481f-8e6b-094cd869ed62", "created": "2026-01-27T05:12:58.111373Z", "modified": "2026-01-27T05:12:58.111373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9876ffb4ade94291f96b53fe7900cf6ac859f72faae855fb640dad233bee4673']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.111373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7660bf08-de50-4cd2-8f24-42c395fbef86", "created": "2026-01-27T05:12:58.112354Z", "modified": "2026-01-27T05:12:58.112354Z", "relationship_type": "indicates", "source_ref": "indicator--adce7530-54a7-481f-8e6b-094cd869ed62", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bb3f86-8ba7-49b0-b910-0878d5bacba2", "created": "2026-01-27T05:12:58.112535Z", "modified": "2026-01-27T05:12:58.112535Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03060cf094cfcb9b9dff2c9b91e58ab554b3608e7d0a8b606e9761d81ab67c2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.112535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88327d6c-6372-4d1b-ae2f-cc1980174027", "created": "2026-01-27T05:12:58.113387Z", "modified": "2026-01-27T05:12:58.113387Z", "relationship_type": "indicates", "source_ref": "indicator--e2bb3f86-8ba7-49b0-b910-0878d5bacba2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31ced71-6cbe-412d-9bbf-a01b74d5c238", "created": "2026-01-27T05:12:58.113566Z", "modified": "2026-01-27T05:12:58.113566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cad96486bad1db79f65433cf71935b6d9404f9c91786479141274ad6a6b52cf5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.113566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29335edf-d354-4bb4-a7ba-2196cfaa97dc", "created": "2026-01-27T05:12:58.114411Z", "modified": "2026-01-27T05:12:58.114411Z", "relationship_type": "indicates", "source_ref": "indicator--a31ced71-6cbe-412d-9bbf-a01b74d5c238", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459090e0-362c-43c9-8514-b8b707c7cb5f", "created": "2026-01-27T05:12:58.114588Z", "modified": "2026-01-27T05:12:58.114588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d77efd4d77c74bfeddbbcb498429b1fb8c8e5e89bea76ce789d61946f34e1ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.114588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75afd0ae-c0ab-4f40-8bfc-2e78c317f439", "created": "2026-01-27T05:12:58.115437Z", "modified": "2026-01-27T05:12:58.115437Z", "relationship_type": "indicates", "source_ref": "indicator--459090e0-362c-43c9-8514-b8b707c7cb5f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d235820-f3f5-4234-8006-6a37f6fb9c59", "created": "2026-01-27T05:12:58.115616Z", "modified": "2026-01-27T05:12:58.115616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4b9d0fbde6e33f835e2f59a2a53e1795648de6850404fceb72e6896cf8a529b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.115616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a3da566-e1f0-4089-b82a-83ec05a76462", "created": "2026-01-27T05:12:58.116459Z", "modified": "2026-01-27T05:12:58.116459Z", "relationship_type": "indicates", "source_ref": "indicator--6d235820-f3f5-4234-8006-6a37f6fb9c59", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba5d3a1-c4bc-4f08-9995-55bb0a6debcd", "created": "2026-01-27T05:12:58.116636Z", "modified": "2026-01-27T05:12:58.116636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2283cc6dffe003313ddb8f27f265bf2b2e0d780560d98b38bb9ee4f3771bf07a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.116636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24a490e0-27d8-4f69-b3c8-2689b17c9d80", "created": "2026-01-27T05:12:58.117485Z", "modified": "2026-01-27T05:12:58.117485Z", "relationship_type": "indicates", "source_ref": "indicator--3ba5d3a1-c4bc-4f08-9995-55bb0a6debcd", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98af49cb-ac8e-4e8e-b112-f325c0e01f22", "created": "2026-01-27T05:12:58.117659Z", "modified": "2026-01-27T05:12:58.117659Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a75266cb760660918103793a953b23081cb3f71068f6bfd2b2a9218f08a5c203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.117659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f69408e-73d4-4011-927e-22bc31d9b614", "created": "2026-01-27T05:12:58.118505Z", "modified": "2026-01-27T05:12:58.118505Z", "relationship_type": "indicates", "source_ref": "indicator--98af49cb-ac8e-4e8e-b112-f325c0e01f22", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b81c8f-9de9-48d1-af61-2a989cdb951f", "created": "2026-01-27T05:12:58.11868Z", "modified": "2026-01-27T05:12:58.11868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='147d59d853429661fec7c0020fd06cfd6a49a3b4dcfd9e412800f58854c655d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.11868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44cf2107-bc0d-447b-84c3-4b2c5c812976", "created": "2026-01-27T05:12:58.119529Z", "modified": "2026-01-27T05:12:58.119529Z", "relationship_type": "indicates", "source_ref": "indicator--08b81c8f-9de9-48d1-af61-2a989cdb951f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57c1620-1d3f-475b-8a9b-87829cc09c1f", "created": "2026-01-27T05:12:58.119706Z", "modified": "2026-01-27T05:12:58.119706Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b3ddf2432581270677918128fb89c65e02f5e3955bb71bdc1d1d2622db5aa53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.119706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d4537e6-d514-490e-96b7-e4c0043fe43c", "created": "2026-01-27T05:12:58.120557Z", "modified": "2026-01-27T05:12:58.120557Z", "relationship_type": "indicates", "source_ref": "indicator--b57c1620-1d3f-475b-8a9b-87829cc09c1f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dee26b-c518-420a-963d-ba3c6d5bc305", "created": "2026-01-27T05:12:58.120732Z", "modified": "2026-01-27T05:12:58.120732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='652a3041b5f5d4a213a4a3c6f2e37c85ec6dc51dba81752e98c7729b5ec9af00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.120732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--908e02c5-d5a7-4772-abd0-6386e1cd098f", "created": "2026-01-27T05:12:58.121955Z", "modified": "2026-01-27T05:12:58.121955Z", "relationship_type": "indicates", "source_ref": "indicator--d0dee26b-c518-420a-963d-ba3c6d5bc305", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaf651b-bd7a-4d3a-8239-33a3fb76cd83", "created": "2026-01-27T05:12:58.122137Z", "modified": "2026-01-27T05:12:58.122137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f873a95f8d26798663c07dfd7460fedb3908612d3a1ebd1049a6c9b2fdd11f29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.122137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4fb9d06-350d-4c32-a1d2-33b524b03d1d", "created": "2026-01-27T05:12:58.122989Z", "modified": "2026-01-27T05:12:58.122989Z", "relationship_type": "indicates", "source_ref": "indicator--caaf651b-bd7a-4d3a-8239-33a3fb76cd83", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab320aa4-b5bf-4c23-84bb-c73350b1e018", "created": "2026-01-27T05:12:58.123169Z", "modified": "2026-01-27T05:12:58.123169Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af66f53ec62cfd40fbf5970e647eaea9344b00e3071ca826dd5069f7368b9c89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.123169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a637926e-ebd2-4f21-9acd-e34c03533cca", "created": "2026-01-27T05:12:58.124017Z", "modified": "2026-01-27T05:12:58.124017Z", "relationship_type": "indicates", "source_ref": "indicator--ab320aa4-b5bf-4c23-84bb-c73350b1e018", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac13a33-9ca3-4c3c-9cd7-8b4013f25174", "created": "2026-01-27T05:12:58.124196Z", "modified": "2026-01-27T05:12:58.124196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='585de082b8eef0da4e4f0bf9e411a1981d1aeae17c4af3777cfaf7baa8f611df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.124196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e32b53a-4445-4dce-a16e-51b0b5428128", "created": "2026-01-27T05:12:58.125041Z", "modified": "2026-01-27T05:12:58.125041Z", "relationship_type": "indicates", "source_ref": "indicator--aac13a33-9ca3-4c3c-9cd7-8b4013f25174", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe9c706-1769-4770-8808-1771e49f68d2", "created": "2026-01-27T05:12:58.12522Z", "modified": "2026-01-27T05:12:58.12522Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c308d3c41f8dffd0360f5c42863133ed9393b128ff5fec9d54a75cd562bfe88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.12522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91bedbeb-25b6-4430-a581-fcd5f5869b71", "created": "2026-01-27T05:12:58.126068Z", "modified": "2026-01-27T05:12:58.126068Z", "relationship_type": "indicates", "source_ref": "indicator--dfe9c706-1769-4770-8808-1771e49f68d2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ba916d-9fde-43f3-90f0-0dfb005b1963", "created": "2026-01-27T05:12:58.126247Z", "modified": "2026-01-27T05:12:58.126247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80e9696f77364874cde7a23400e9272f8a485a943ee74a003e03c3b8a73098d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.126247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41502e4a-fb26-4326-a3fd-b5e33e4bb98d", "created": "2026-01-27T05:12:58.127107Z", "modified": "2026-01-27T05:12:58.127107Z", "relationship_type": "indicates", "source_ref": "indicator--30ba916d-9fde-43f3-90f0-0dfb005b1963", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8a5d5a-d21c-4b83-8fa7-769e5bcf961a", "created": "2026-01-27T05:12:58.127284Z", "modified": "2026-01-27T05:12:58.127284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='524a8f152fbb35f63d4dadd4eca7d791976e3ebf9c69073b0fd896b118719dd4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.127284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60590ee9-09e5-4330-8b96-4b79b8bf1de6", "created": "2026-01-27T05:12:58.128123Z", "modified": "2026-01-27T05:12:58.128123Z", "relationship_type": "indicates", "source_ref": "indicator--9a8a5d5a-d21c-4b83-8fa7-769e5bcf961a", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524edb34-0d01-49ca-b774-17c55f606bc4", "created": "2026-01-27T05:12:58.128301Z", "modified": "2026-01-27T05:12:58.128301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d6e2a682c5e9588b77832cc34d3165a17895ce1ab39207c047421ec005bd1d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.128301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7aa0af09-7bc9-4bb3-8ffc-d9c4f8996969", "created": "2026-01-27T05:12:58.129137Z", "modified": "2026-01-27T05:12:58.129137Z", "relationship_type": "indicates", "source_ref": "indicator--524edb34-0d01-49ca-b774-17c55f606bc4", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9feddc-f110-44de-b8e2-e0f5341c1515", "created": "2026-01-27T05:12:58.129314Z", "modified": "2026-01-27T05:12:58.129314Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='556e3b6460db768e576cfb7c95cce80d8fac0d464a4e04a1ae30da52d00161a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.129314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--382642f7-2f39-4f6e-a9a9-2fa57211383c", "created": "2026-01-27T05:12:58.130156Z", "modified": "2026-01-27T05:12:58.130156Z", "relationship_type": "indicates", "source_ref": "indicator--3f9feddc-f110-44de-b8e2-e0f5341c1515", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8140e55c-f68a-4080-bc16-ebd898a9ec7b", "created": "2026-01-27T05:12:58.130333Z", "modified": "2026-01-27T05:12:58.130333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14e5272ab2e72d6dbf7da98156b2ed2f8e4706a6b8948fcc527d44deb2304db4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.130333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--904f9e12-fa2a-4ce9-bbca-608b22a6c1f5", "created": "2026-01-27T05:12:58.131307Z", "modified": "2026-01-27T05:12:58.131307Z", "relationship_type": "indicates", "source_ref": "indicator--8140e55c-f68a-4080-bc16-ebd898a9ec7b", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aadebe5-f77b-42f2-b132-40e6a6183a8c", "created": "2026-01-27T05:12:58.131488Z", "modified": "2026-01-27T05:12:58.131488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dfd2ca20f81b6472cb4e74576871a1f57bfe5282b586c0d25050f512230619a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.131488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f659403-475f-4435-8a02-0a6fa03e62b3", "created": "2026-01-27T05:12:58.132334Z", "modified": "2026-01-27T05:12:58.132334Z", "relationship_type": "indicates", "source_ref": "indicator--2aadebe5-f77b-42f2-b132-40e6a6183a8c", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9209bbec-c5e0-4b31-b570-fda6a464dbbf", "created": "2026-01-27T05:12:58.132513Z", "modified": "2026-01-27T05:12:58.132513Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f278d8755ca9eddf7aa5b80270d3363a1204543576ace51047bda967e8abe7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.132513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--082e9da0-2bd0-4229-b7af-7fa70bed323b", "created": "2026-01-27T05:12:58.13335Z", "modified": "2026-01-27T05:12:58.13335Z", "relationship_type": "indicates", "source_ref": "indicator--9209bbec-c5e0-4b31-b570-fda6a464dbbf", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac55d98b-3cb0-4d9c-b25a-88dbbc642dbc", "created": "2026-01-27T05:12:58.133526Z", "modified": "2026-01-27T05:12:58.133526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b424e7e6cea215d3b4ef4f4d8577681b5adef42e739c744b10fcfc9fa1d09651']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.133526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b241171-2dd3-4c4e-9782-9208bf187cb6", "created": "2026-01-27T05:12:58.134368Z", "modified": "2026-01-27T05:12:58.134368Z", "relationship_type": "indicates", "source_ref": "indicator--ac55d98b-3cb0-4d9c-b25a-88dbbc642dbc", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba01d881-3450-4e9c-afae-cdff139e0d58", "created": "2026-01-27T05:12:58.134545Z", "modified": "2026-01-27T05:12:58.134545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='292ae1988fe6189ccb2ff4b48708eed4907c191e0832fce16a095d908a13af23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.134545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b3109d3-6870-4239-a6b3-e123e21ca8a2", "created": "2026-01-27T05:12:58.135386Z", "modified": "2026-01-27T05:12:58.135386Z", "relationship_type": "indicates", "source_ref": "indicator--ba01d881-3450-4e9c-afae-cdff139e0d58", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb97cf4e-3ee9-42a5-af97-47a929980d97", "created": "2026-01-27T05:12:58.13558Z", "modified": "2026-01-27T05:12:58.13558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63cb196bb96066e3dde59c01ed17d2ad00c236dc8c39f30702210d3d2978c8bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.13558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6aa4ebcc-344a-450b-b318-741b3cdc5f7a", "created": "2026-01-27T05:12:58.136422Z", "modified": "2026-01-27T05:12:58.136422Z", "relationship_type": "indicates", "source_ref": "indicator--cb97cf4e-3ee9-42a5-af97-47a929980d97", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a99ab1-783e-43dc-bb35-4433b61c5499", "created": "2026-01-27T05:12:58.136603Z", "modified": "2026-01-27T05:12:58.136603Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1b93bd9d49499356fc34bb4e6d15dfa61f5629fce87c971739978ee5ed43d7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.136603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd8f13e8-b662-4a1b-a673-6346514241d6", "created": "2026-01-27T05:12:58.137454Z", "modified": "2026-01-27T05:12:58.137454Z", "relationship_type": "indicates", "source_ref": "indicator--52a99ab1-783e-43dc-bb35-4433b61c5499", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3656ef-7882-4580-83a8-e6e75293db2a", "created": "2026-01-27T05:12:58.137632Z", "modified": "2026-01-27T05:12:58.137632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='127d342107c75a177516ab409da7df8cd0ac84984841684ab1a1aafce0eb8332']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.137632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15ecd097-e36c-4f7f-a4d7-29c6a569d94e", "created": "2026-01-27T05:12:58.138477Z", "modified": "2026-01-27T05:12:58.138477Z", "relationship_type": "indicates", "source_ref": "indicator--9f3656ef-7882-4580-83a8-e6e75293db2a", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ead012-ede9-46c3-acea-89e1a810080f", "created": "2026-01-27T05:12:58.138653Z", "modified": "2026-01-27T05:12:58.138653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d7cf15f08898313e87d36853532005ddf258ac11c4ae222c042ace22fa9859cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.138653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57c7c835-f9f7-4fc9-b811-1189292e3d3d", "created": "2026-01-27T05:12:58.139499Z", "modified": "2026-01-27T05:12:58.139499Z", "relationship_type": "indicates", "source_ref": "indicator--30ead012-ede9-46c3-acea-89e1a810080f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828f3388-c3a9-4a6f-b3a5-782eddeb06eb", "created": "2026-01-27T05:12:58.139678Z", "modified": "2026-01-27T05:12:58.139678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c33396a9b73a8ce66681b9badac7fe463e37c7f5917fad08be4d49bc4e6513eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.139678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5554e89c-b731-4ccf-97f6-e1cc18211eff", "created": "2026-01-27T05:12:58.140649Z", "modified": "2026-01-27T05:12:58.140649Z", "relationship_type": "indicates", "source_ref": "indicator--828f3388-c3a9-4a6f-b3a5-782eddeb06eb", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b084e8-c15c-42df-a7c5-17735612c34d", "created": "2026-01-27T05:12:58.140846Z", "modified": "2026-01-27T05:12:58.140846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ba9575f107c2fdeab000b4c65c44dc8d92e1371d26651d78776b157f8ce2bb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.140846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f3b9010-cb8d-4363-8fcf-fca982db2aca", "created": "2026-01-27T05:12:58.141679Z", "modified": "2026-01-27T05:12:58.141679Z", "relationship_type": "indicates", "source_ref": "indicator--b2b084e8-c15c-42df-a7c5-17735612c34d", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393ef13b-e4ab-41ea-98d7-95c995b1dc86", "created": "2026-01-27T05:12:58.141872Z", "modified": "2026-01-27T05:12:58.141872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91039e7c4700b0a1d6a44da6090b6eb06a8974e00ba27f54be399aaa50d3509a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.141872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3790c1f2-19c0-4081-8661-553ef236fb04", "created": "2026-01-27T05:12:58.142703Z", "modified": "2026-01-27T05:12:58.142703Z", "relationship_type": "indicates", "source_ref": "indicator--393ef13b-e4ab-41ea-98d7-95c995b1dc86", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fb3552-e5b7-4804-819e-df8f9a5ff651", "created": "2026-01-27T05:12:58.142913Z", "modified": "2026-01-27T05:12:58.142913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='505086563ff31206caacb2d80cb1351f101cf471b625b49e1750f39f9461f2e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.142913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef3afefb-1fd6-4924-9c42-90160980d8aa", "created": "2026-01-27T05:12:58.143742Z", "modified": "2026-01-27T05:12:58.143742Z", "relationship_type": "indicates", "source_ref": "indicator--e9fb3552-e5b7-4804-819e-df8f9a5ff651", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb910ce-06ff-4667-a485-2317fc4f3a38", "created": "2026-01-27T05:12:58.143934Z", "modified": "2026-01-27T05:12:58.143934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='254788b618c9e4558be3a718dd83aeb8eb87bc06f895a0d1c5b18275379a2860']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.143934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24122ff9-1e75-4e48-b64b-9a59d8eacf82", "created": "2026-01-27T05:12:58.144767Z", "modified": "2026-01-27T05:12:58.144767Z", "relationship_type": "indicates", "source_ref": "indicator--9bb910ce-06ff-4667-a485-2317fc4f3a38", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adb6a65-569b-40d7-98a7-7111051155c9", "created": "2026-01-27T05:12:58.144946Z", "modified": "2026-01-27T05:12:58.144946Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95fab09d873a64584d14a0d902daba42da9ec19a75091caa487f50004b60fefa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.144946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0aa1144f-dfe7-4824-80ad-b9459bf0483f", "created": "2026-01-27T05:12:58.145781Z", "modified": "2026-01-27T05:12:58.145781Z", "relationship_type": "indicates", "source_ref": "indicator--5adb6a65-569b-40d7-98a7-7111051155c9", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54bc01a-06b5-4d69-87c5-db1c00bf847f", "created": "2026-01-27T05:12:58.145969Z", "modified": "2026-01-27T05:12:58.145969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='283b1f5f28bcefe24280befc8b82cf5d762dee195fbcfc26209e75076b9fb288']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.145969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--323ef609-0644-4202-a3bb-c5b10bf3c995", "created": "2026-01-27T05:12:58.146804Z", "modified": "2026-01-27T05:12:58.146804Z", "relationship_type": "indicates", "source_ref": "indicator--f54bc01a-06b5-4d69-87c5-db1c00bf847f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1443690a-7aa1-4471-b6f0-1ec41e5671cf", "created": "2026-01-27T05:12:58.146988Z", "modified": "2026-01-27T05:12:58.146988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1633f820bc6ad7ca13929f7760a42b1905b50bcaeec7475982120850bcae4de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.146988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58acc9b4-d6f1-4854-8353-6346c74cd105", "created": "2026-01-27T05:12:58.14783Z", "modified": "2026-01-27T05:12:58.14783Z", "relationship_type": "indicates", "source_ref": "indicator--1443690a-7aa1-4471-b6f0-1ec41e5671cf", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2167080c-1052-4356-8aca-a77654d67922", "created": "2026-01-27T05:12:58.148006Z", "modified": "2026-01-27T05:12:58.148006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de89b1deda366a5dcdbca15e5ff243341bde19d041593db4b93342b7fdebd5e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.148006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fec432b-abbc-4606-a76e-63270aa1b66c", "created": "2026-01-27T05:12:58.148841Z", "modified": "2026-01-27T05:12:58.148841Z", "relationship_type": "indicates", "source_ref": "indicator--2167080c-1052-4356-8aca-a77654d67922", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0ae050-d81a-4584-afd5-3c75b8bddd07", "created": "2026-01-27T05:12:58.149017Z", "modified": "2026-01-27T05:12:58.149017Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d4956f7a43ed5500dc872a978fe34f6c34bdc8b5a436023dea08e8cf524a82d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.149017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bff30a10-4900-4cb6-9b62-b0c3b930e274", "created": "2026-01-27T05:12:58.149979Z", "modified": "2026-01-27T05:12:58.149979Z", "relationship_type": "indicates", "source_ref": "indicator--ba0ae050-d81a-4584-afd5-3c75b8bddd07", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc93c8c-9bcc-4560-9a9b-87f9b01a359e", "created": "2026-01-27T05:12:58.150162Z", "modified": "2026-01-27T05:12:58.150162Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8975d81eaafecd67e784ffdc4caefd8a7859d1d5c4c36e034db97f89bd61ea09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.150162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--931306c4-2e91-40c8-96eb-21005925838c", "created": "2026-01-27T05:12:58.151004Z", "modified": "2026-01-27T05:12:58.151004Z", "relationship_type": "indicates", "source_ref": "indicator--7dc93c8c-9bcc-4560-9a9b-87f9b01a359e", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9d8b72-6e6a-4cae-be9a-cb5d0f43a16e", "created": "2026-01-27T05:12:58.151198Z", "modified": "2026-01-27T05:12:58.151198Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4000906ce1876a11bbb9645b4dcb8366c8f6bfee8a7208130114180413a29cdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.151198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--746aba94-ff44-4a0b-a320-0faad2aa3eca", "created": "2026-01-27T05:12:58.15204Z", "modified": "2026-01-27T05:12:58.15204Z", "relationship_type": "indicates", "source_ref": "indicator--7e9d8b72-6e6a-4cae-be9a-cb5d0f43a16e", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc27a7d-082b-4170-8425-eec050f583bc", "created": "2026-01-27T05:12:58.152214Z", "modified": "2026-01-27T05:12:58.152214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='842bda5b3c8a095bed05067f75613d5b8bf5b394b814d239cdfcb1265b64d743']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.152214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62e75c5b-03cb-4e18-9424-981cb6c1a882", "created": "2026-01-27T05:12:58.153061Z", "modified": "2026-01-27T05:12:58.153061Z", "relationship_type": "indicates", "source_ref": "indicator--9dc27a7d-082b-4170-8425-eec050f583bc", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cffd830-d797-425f-ba45-a134110faadb", "created": "2026-01-27T05:12:58.153237Z", "modified": "2026-01-27T05:12:58.153237Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='819d52dd948f3d60e63d77de87b4a283b9702062b21d2a222c4049cbfc828f27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.153237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc556a9b-926f-4485-8b66-f169095a0009", "created": "2026-01-27T05:12:58.154086Z", "modified": "2026-01-27T05:12:58.154086Z", "relationship_type": "indicates", "source_ref": "indicator--6cffd830-d797-425f-ba45-a134110faadb", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f06390c-bf40-45e1-8e4d-632d8d2e05a5", "created": "2026-01-27T05:12:58.154261Z", "modified": "2026-01-27T05:12:58.154261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='629d05645708f678964dd536486a92db104c9e4b36c12d7a0602ca0e28be3f19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.154261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--197bd002-fd39-4bfa-a5f4-99d1ee60e43b", "created": "2026-01-27T05:12:58.155109Z", "modified": "2026-01-27T05:12:58.155109Z", "relationship_type": "indicates", "source_ref": "indicator--4f06390c-bf40-45e1-8e4d-632d8d2e05a5", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36708d94-f176-4b4b-a5b9-a6675b2350c5", "created": "2026-01-27T05:12:58.155284Z", "modified": "2026-01-27T05:12:58.155284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b851f5c83f11447d2f57b6d668cd391446b5e73382af827b7e74ff21f8e9cbbe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.155284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5773b74f-dce8-413a-bc90-7b4f5f787d1f", "created": "2026-01-27T05:12:58.156129Z", "modified": "2026-01-27T05:12:58.156129Z", "relationship_type": "indicates", "source_ref": "indicator--36708d94-f176-4b4b-a5b9-a6675b2350c5", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24a8032-023d-44ef-bea0-7d67911c011f", "created": "2026-01-27T05:12:58.156304Z", "modified": "2026-01-27T05:12:58.156304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='385a17abde5f2a08372881383afc7b5afa96560edc23404bbd72d595e1b73c46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.156304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d4a20f7-50c0-4d45-9cc2-01fa746c61da", "created": "2026-01-27T05:12:58.157146Z", "modified": "2026-01-27T05:12:58.157146Z", "relationship_type": "indicates", "source_ref": "indicator--d24a8032-023d-44ef-bea0-7d67911c011f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5014eaa8-c1c7-41f6-913b-85a040f8ab55", "created": "2026-01-27T05:12:58.15732Z", "modified": "2026-01-27T05:12:58.15732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f4ecfc90ef28f3ef1d521cad9a8feb02115df22a3900f415f81c9114eb81b5f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.15732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2374bf04-5196-4417-ba42-40059ac8591d", "created": "2026-01-27T05:12:58.158281Z", "modified": "2026-01-27T05:12:58.158281Z", "relationship_type": "indicates", "source_ref": "indicator--5014eaa8-c1c7-41f6-913b-85a040f8ab55", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccba4d8b-859f-45e9-b676-cd7e9da3b790", "created": "2026-01-27T05:12:58.15846Z", "modified": "2026-01-27T05:12:58.15846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79db438fad26a902b5b51cfb768ef52e1bd8570b576a622f69b563cfb4a6ad70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.15846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9811460b-0c4c-4199-9ff2-06def408b6ca", "created": "2026-01-27T05:12:58.159324Z", "modified": "2026-01-27T05:12:58.159324Z", "relationship_type": "indicates", "source_ref": "indicator--ccba4d8b-859f-45e9-b676-cd7e9da3b790", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d406fc-703a-4dbe-b641-5f86c047e120", "created": "2026-01-27T05:12:58.159505Z", "modified": "2026-01-27T05:12:58.159505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be6726bcb1b986c66a44c9b6b96e91e36d3d486355cc57a546eb3091ede013ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.159505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6120481d-a7ef-4030-b018-5536661a271e", "created": "2026-01-27T05:12:58.160342Z", "modified": "2026-01-27T05:12:58.160342Z", "relationship_type": "indicates", "source_ref": "indicator--93d406fc-703a-4dbe-b641-5f86c047e120", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0b0f91-0178-4bca-8dae-66635e1bb8b8", "created": "2026-01-27T05:12:58.160518Z", "modified": "2026-01-27T05:12:58.160518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf98e618a65d47048f4b7ad8bea6fe7f48a618580bd377f666228942698f34eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.160518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8220459a-afc2-4059-af67-27ba25f39019", "created": "2026-01-27T05:12:58.161358Z", "modified": "2026-01-27T05:12:58.161358Z", "relationship_type": "indicates", "source_ref": "indicator--6c0b0f91-0178-4bca-8dae-66635e1bb8b8", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62af5bb-d52c-47eb-b0da-bb4016e1b1ed", "created": "2026-01-27T05:12:58.161532Z", "modified": "2026-01-27T05:12:58.161532Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='805d9b7d316c37d45564cafc86c82adec7e820db8090ac1a80335074aa14fd91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.161532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b65ad0a8-3153-4f43-897f-efac727bb1b7", "created": "2026-01-27T05:12:58.162369Z", "modified": "2026-01-27T05:12:58.162369Z", "relationship_type": "indicates", "source_ref": "indicator--c62af5bb-d52c-47eb-b0da-bb4016e1b1ed", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0831ca9-0273-4520-8688-947b4a95129a", "created": "2026-01-27T05:12:58.162552Z", "modified": "2026-01-27T05:12:58.162552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3a8a88b9fdd79880e3d2c501831b262a63c7638cfc9f796b7ec38d27e114499']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.162552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dbe8522-c966-47f0-bbea-457e9bb058f8", "created": "2026-01-27T05:12:58.163406Z", "modified": "2026-01-27T05:12:58.163406Z", "relationship_type": "indicates", "source_ref": "indicator--e0831ca9-0273-4520-8688-947b4a95129a", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34af1a0b-5301-4344-8c9e-575dc5163eb1", "created": "2026-01-27T05:12:58.163589Z", "modified": "2026-01-27T05:12:58.163589Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94d82ad0fb1ba8d93038915d43eceea3ab1c7dfcc9c71628d5ec36d0bdf980b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.163589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cf315b4-bb5f-4fbd-b52a-b09070fb71af", "created": "2026-01-27T05:12:58.164439Z", "modified": "2026-01-27T05:12:58.164439Z", "relationship_type": "indicates", "source_ref": "indicator--34af1a0b-5301-4344-8c9e-575dc5163eb1", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acf8f08-4c61-4383-87d7-2692dece058f", "created": "2026-01-27T05:12:58.164622Z", "modified": "2026-01-27T05:12:58.164622Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62349f77e57047221064198a22b78919704df22091e09501c2416ece13e9a31c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.164622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a157be0d-0cf7-4f16-9114-c26f1267482d", "created": "2026-01-27T05:12:58.165467Z", "modified": "2026-01-27T05:12:58.165467Z", "relationship_type": "indicates", "source_ref": "indicator--8acf8f08-4c61-4383-87d7-2692dece058f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ac5a9b-87d7-49ae-9d04-5a9b81f6107e", "created": "2026-01-27T05:12:58.165649Z", "modified": "2026-01-27T05:12:58.165649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b989e458d1f1e921a779308f5b00b0142b13b27b956643c84a4484f11850620']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.165649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed212fa1-a41a-4a4b-87dc-88c4964fe683", "created": "2026-01-27T05:12:58.166488Z", "modified": "2026-01-27T05:12:58.166488Z", "relationship_type": "indicates", "source_ref": "indicator--36ac5a9b-87d7-49ae-9d04-5a9b81f6107e", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee234a39-2a70-483e-803a-1b55757fbd28", "created": "2026-01-27T05:12:58.166666Z", "modified": "2026-01-27T05:12:58.166666Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69341dd6f108d496a32bb33b4afc1f801a048749e4d6f18b1c689bac02d516d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.166666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--080526a7-fd2f-42ee-a412-78b34db97063", "created": "2026-01-27T05:12:58.167629Z", "modified": "2026-01-27T05:12:58.167629Z", "relationship_type": "indicates", "source_ref": "indicator--ee234a39-2a70-483e-803a-1b55757fbd28", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19195593-e985-4e6c-af7f-04555a5fca11", "created": "2026-01-27T05:12:58.167821Z", "modified": "2026-01-27T05:12:58.167821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50d0dc2a515ea00c86b15c7c1bcc2910a05e4ad78eb85d7e553882e810106252']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.167821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffb6f2e6-2b05-4961-aafe-dc5d2e7b2fb7", "created": "2026-01-27T05:12:58.168637Z", "modified": "2026-01-27T05:12:58.168637Z", "relationship_type": "indicates", "source_ref": "indicator--19195593-e985-4e6c-af7f-04555a5fca11", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f044ff8-e124-41d6-9ea3-65d9b583974a", "created": "2026-01-27T05:12:58.168828Z", "modified": "2026-01-27T05:12:58.168828Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e772d5f847aad9584da5647c9fb1b32b47695e80dbe0c41c5f1fc501e0d49a25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.168828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7edf4f2-2519-4df2-9a0f-022e6c90102b", "created": "2026-01-27T05:12:58.169647Z", "modified": "2026-01-27T05:12:58.169647Z", "relationship_type": "indicates", "source_ref": "indicator--0f044ff8-e124-41d6-9ea3-65d9b583974a", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cf62e1-a4cf-4544-800e-187e5abe0bab", "created": "2026-01-27T05:12:58.169848Z", "modified": "2026-01-27T05:12:58.169848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5097b54f3e552a5a30bed7a68fc60e3156d74e84686e35f79e6a5cbc95ae3c96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.169848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6681723e-8e4c-40d4-ae52-b453c771e188", "created": "2026-01-27T05:12:58.170675Z", "modified": "2026-01-27T05:12:58.170675Z", "relationship_type": "indicates", "source_ref": "indicator--98cf62e1-a4cf-4544-800e-187e5abe0bab", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f41b154-73c1-4ba2-ac24-e363941b90e7", "created": "2026-01-27T05:12:58.170895Z", "modified": "2026-01-27T05:12:58.170895Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6eee949f056538041d98233d10e1a1ad9f6c235e88c8475676c9c5b02f5b011']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.170895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d69e320a-cad0-4f24-896c-6f95e23aae39", "created": "2026-01-27T05:12:58.171764Z", "modified": "2026-01-27T05:12:58.171764Z", "relationship_type": "indicates", "source_ref": "indicator--9f41b154-73c1-4ba2-ac24-e363941b90e7", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07f1919-e80f-4524-92f8-476f13450345", "created": "2026-01-27T05:12:58.171977Z", "modified": "2026-01-27T05:12:58.171977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66d0cd34a03c4a1613a638ef596648df724c148b6eb381fd080ab70c203e6022']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.171977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3507ec25-a612-4fd8-8559-7beb1f7644ac", "created": "2026-01-27T05:12:58.172847Z", "modified": "2026-01-27T05:12:58.172847Z", "relationship_type": "indicates", "source_ref": "indicator--c07f1919-e80f-4524-92f8-476f13450345", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0aa0258-d145-4dd5-8541-96ba44bc259d", "created": "2026-01-27T05:12:58.173026Z", "modified": "2026-01-27T05:12:58.173026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7783772328ece39c65c4c11f1dbcf43741b26aed87e778e095957c9f6633d056']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.173026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86a6468c-1c02-4afc-b0d8-4722f45a3ef7", "created": "2026-01-27T05:12:58.173867Z", "modified": "2026-01-27T05:12:58.173867Z", "relationship_type": "indicates", "source_ref": "indicator--f0aa0258-d145-4dd5-8541-96ba44bc259d", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f2abbb-497a-4b66-ad01-6530407a900c", "created": "2026-01-27T05:12:58.174048Z", "modified": "2026-01-27T05:12:58.174048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db872af401506c44cfb9d8fabda8ddd000f6a0692896fa7a113bd8f5e9217aac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.174048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--806633c8-b9aa-4fba-90ef-c21fb0021c90", "created": "2026-01-27T05:12:58.174904Z", "modified": "2026-01-27T05:12:58.174904Z", "relationship_type": "indicates", "source_ref": "indicator--e5f2abbb-497a-4b66-ad01-6530407a900c", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8adabb-97cb-469f-9e68-4c011f37b0f5", "created": "2026-01-27T05:12:58.175087Z", "modified": "2026-01-27T05:12:58.175087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='729e706200803df2e11690cfc55e946eef62471293f2de2bc6bc57fa0b580286']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.175087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e484357d-d372-46db-ae41-4d27f41e2e06", "created": "2026-01-27T05:12:58.175938Z", "modified": "2026-01-27T05:12:58.175938Z", "relationship_type": "indicates", "source_ref": "indicator--2a8adabb-97cb-469f-9e68-4c011f37b0f5", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7733fadf-7537-4a24-b7e5-5fca682d33df", "created": "2026-01-27T05:12:58.176114Z", "modified": "2026-01-27T05:12:58.176114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bd871d3581be83459d6d166ba02fe89cad32549c393cd8a63420a7e02e3968d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.176114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ef0039c-c821-4e5b-82d1-d46758535838", "created": "2026-01-27T05:12:58.177084Z", "modified": "2026-01-27T05:12:58.177084Z", "relationship_type": "indicates", "source_ref": "indicator--7733fadf-7537-4a24-b7e5-5fca682d33df", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12377425-e61a-42e8-a9ed-af879ccf56b7", "created": "2026-01-27T05:12:58.17727Z", "modified": "2026-01-27T05:12:58.17727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4838c60ef16339705f6463513b2bc61bf3003954975541e4ffab6a5c59901b62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.17727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--706754c6-935f-4514-a1fe-6c18e449b3e0", "created": "2026-01-27T05:12:58.178123Z", "modified": "2026-01-27T05:12:58.178123Z", "relationship_type": "indicates", "source_ref": "indicator--12377425-e61a-42e8-a9ed-af879ccf56b7", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5352533d-0dd8-4d43-a908-c5576d771dfd", "created": "2026-01-27T05:12:58.178299Z", "modified": "2026-01-27T05:12:58.178299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a7e00818893e4558d4eb13e7481b65588836d854332deca6efd479930e9063f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.178299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17a89a4b-530a-4883-a949-7c7a8396d177", "created": "2026-01-27T05:12:58.17915Z", "modified": "2026-01-27T05:12:58.17915Z", "relationship_type": "indicates", "source_ref": "indicator--5352533d-0dd8-4d43-a908-c5576d771dfd", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71979db6-61b0-4e5a-bac4-561548e697a2", "created": "2026-01-27T05:12:58.17933Z", "modified": "2026-01-27T05:12:58.17933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a1e5a7dafa54a23fe9050f1fdd1286d3bdfb75a80a90cafebfdbbc451f4f9a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.17933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--caa664bf-03e4-41ee-8edf-81a143a7e30d", "created": "2026-01-27T05:12:58.180182Z", "modified": "2026-01-27T05:12:58.180182Z", "relationship_type": "indicates", "source_ref": "indicator--71979db6-61b0-4e5a-bac4-561548e697a2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c672729-05b7-4ced-be20-5d5f419d25d2", "created": "2026-01-27T05:12:58.180358Z", "modified": "2026-01-27T05:12:58.180358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdffd1415a68c0cd95506b0ebed583174362019cef2132503ccf4579f3f8f8fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.180358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02c9adf1-0409-45d3-9da7-a4a2b0b0d20f", "created": "2026-01-27T05:12:58.18121Z", "modified": "2026-01-27T05:12:58.18121Z", "relationship_type": "indicates", "source_ref": "indicator--9c672729-05b7-4ced-be20-5d5f419d25d2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa15156c-c49b-4705-88b1-eeef53cd051b", "created": "2026-01-27T05:12:58.181401Z", "modified": "2026-01-27T05:12:58.181401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fc4127488d0d321e76fdb05d96270f63445a5d3eb4036f873e5b99fc6073621']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.181401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8a4d53c-244c-4315-b528-b63e3feb2804", "created": "2026-01-27T05:12:58.182266Z", "modified": "2026-01-27T05:12:58.182266Z", "relationship_type": "indicates", "source_ref": "indicator--fa15156c-c49b-4705-88b1-eeef53cd051b", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef63c712-9e9c-473a-90bf-1992c1563dbf", "created": "2026-01-27T05:12:58.182447Z", "modified": "2026-01-27T05:12:58.182447Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2916e11f87c0a12f1412f0b6c4c470ea205e59d7b28f03d090a4960fc6bc26f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.182447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89461681-9cfe-46a6-9469-60f9dab4c74d", "created": "2026-01-27T05:12:58.18331Z", "modified": "2026-01-27T05:12:58.18331Z", "relationship_type": "indicates", "source_ref": "indicator--ef63c712-9e9c-473a-90bf-1992c1563dbf", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67adc3b1-6b8d-41e7-9e29-bdaa1c98a3e2", "created": "2026-01-27T05:12:58.183488Z", "modified": "2026-01-27T05:12:58.183488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd668d5caaf95f9888b0ff7973f58ba819693dff60aac0ef09f1a2702de4aeca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.183488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abe253ed-1811-48a3-8208-8ff17f47d096", "created": "2026-01-27T05:12:58.184344Z", "modified": "2026-01-27T05:12:58.184344Z", "relationship_type": "indicates", "source_ref": "indicator--67adc3b1-6b8d-41e7-9e29-bdaa1c98a3e2", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9d78bc-bb6b-41cb-bc84-2640511d475b", "created": "2026-01-27T05:12:58.184526Z", "modified": "2026-01-27T05:12:58.184526Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.vvt.android.syncmanager']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.184526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afba7f2a-06c9-4bc5-ab2f-651a8e072f08", "created": "2026-01-27T05:12:58.185234Z", "modified": "2026-01-27T05:12:58.185234Z", "relationship_type": "indicates", "source_ref": "indicator--2c9d78bc-bb6b-41cb-bc84-2640511d475b", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dd03dd-b075-4b45-b2db-fcf60847792a", "created": "2026-01-27T05:12:58.185425Z", "modified": "2026-01-27T05:12:58.185425Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.telephony.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.185425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--859308a1-9732-43a7-b4d9-a2926c185f22", "created": "2026-01-27T05:12:58.186217Z", "modified": "2026-01-27T05:12:58.186217Z", "relationship_type": "indicates", "source_ref": "indicator--74dd03dd-b075-4b45-b2db-fcf60847792a", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c49e75-0754-47bd-ae99-b7a46e4a5e5f", "created": "2026-01-27T05:12:58.186395Z", "modified": "2026-01-27T05:12:58.186395Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fp.backup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.186395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a45a261-dfd3-4d00-a28b-c2b82cc2cb99", "created": "2026-01-27T05:12:58.187057Z", "modified": "2026-01-27T05:12:58.187057Z", "relationship_type": "indicates", "source_ref": "indicator--01c49e75-0754-47bd-ae99-b7a46e4a5e5f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de29ab8-259b-4bdd-be3a-657e80374a37", "created": "2026-01-27T05:12:58.187234Z", "modified": "2026-01-27T05:12:58.187234Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.phone.dialer']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.187234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--978d1a80-a6ee-4b8d-8fa0-f6759e0762b9", "created": "2026-01-27T05:12:58.187906Z", "modified": "2026-01-27T05:12:58.187906Z", "relationship_type": "indicates", "source_ref": "indicator--1de29ab8-259b-4bdd-be3a-657e80374a37", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e47d6eb-07cc-4795-8338-e1884ee3bd85", "created": "2026-01-27T05:12:58.188084Z", "modified": "2026-01-27T05:12:58.188084Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='69B327860EDB531DDFFB1B5DBF0C24245A75F3E4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.188084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a29d963d-96a5-49ca-aee5-a7bc2644bb8a", "created": "2026-01-27T05:12:58.188861Z", "modified": "2026-01-27T05:12:58.188861Z", "relationship_type": "indicates", "source_ref": "indicator--8e47d6eb-07cc-4795-8338-e1884ee3bd85", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6fa0ed-6a1c-4ef0-915c-fc2a1d21c8ce", "created": "2026-01-27T05:12:58.189039Z", "modified": "2026-01-27T05:12:58.189039Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='93385A087BB5CAB96EAE83A1AF874E0E39B2990F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.189039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0f6dc9a-d823-4f16-8f44-dbb147ae1bac", "created": "2026-01-27T05:12:58.18982Z", "modified": "2026-01-27T05:12:58.18982Z", "relationship_type": "indicates", "source_ref": "indicator--0a6fa0ed-6a1c-4ef0-915c-fc2a1d21c8ce", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4801f85b-7143-4091-88ba-70b8f683644f", "created": "2026-01-27T05:12:58.190017Z", "modified": "2026-01-27T05:12:58.190017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20C940625B322C487A89B1FEBF6C090845B040C1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.190017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54667505-4295-4629-867f-1ecb56dbfb59", "created": "2026-01-27T05:12:58.190811Z", "modified": "2026-01-27T05:12:58.190811Z", "relationship_type": "indicates", "source_ref": "indicator--4801f85b-7143-4091-88ba-70b8f683644f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1b1207-ec70-429d-b884-ed5f8a5cf526", "created": "2026-01-27T05:12:58.190989Z", "modified": "2026-01-27T05:12:58.190989Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='984F8786102D9BF26E5244BBC93733D3609948F4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.190989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6232aba2-5ef0-413f-af86-a4a906ab8c19", "created": "2026-01-27T05:12:58.191771Z", "modified": "2026-01-27T05:12:58.191771Z", "relationship_type": "indicates", "source_ref": "indicator--5e1b1207-ec70-429d-b884-ed5f8a5cf526", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149340be-c981-42b6-ba01-e10af4b8e96f", "created": "2026-01-27T05:12:58.191949Z", "modified": "2026-01-27T05:12:58.191949Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='45DECBF059864164A4BC644D3EAB8127FC98238A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.191949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e283ec39-22b9-449d-9bd7-35edc414f8ed", "created": "2026-01-27T05:12:58.192717Z", "modified": "2026-01-27T05:12:58.192717Z", "relationship_type": "indicates", "source_ref": "indicator--149340be-c981-42b6-ba01-e10af4b8e96f", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8178348-ecc2-4365-9662-1f5db2f41f61", "created": "2026-01-27T05:12:58.192908Z", "modified": "2026-01-27T05:12:58.192908Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0B6C1B010FBEA4316EB01602F71CDD6A8F365023']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.192908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c220bc42-5257-41a9-b643-24abacc3d7d0", "created": "2026-01-27T05:12:58.19383Z", "modified": "2026-01-27T05:12:58.19383Z", "relationship_type": "indicates", "source_ref": "indicator--e8178348-ecc2-4365-9662-1f5db2f41f61", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb0b80c-1e6e-4d97-82f6-c46f38a2f453", "created": "2026-01-27T05:12:58.194017Z", "modified": "2026-01-27T05:12:58.194017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='636F6FE622D3059B569C9989F3CD491607F23A5D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.194017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff80a893-3df3-4fd1-bb2a-fea9f02d4e11", "created": "2026-01-27T05:12:58.194804Z", "modified": "2026-01-27T05:12:58.194804Z", "relationship_type": "indicates", "source_ref": "indicator--4eb0b80c-1e6e-4d97-82f6-c46f38a2f453", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d76fcf8-8588-4831-85cf-383e10bcc2ee", "created": "2026-01-27T05:12:58.194986Z", "modified": "2026-01-27T05:12:58.194986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='284E4AF2E92E8E49EDC2C8792D7008759813CB68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.194986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--beeeff5e-9edb-4e4d-8642-ea8a233398d5", "created": "2026-01-27T05:12:58.195778Z", "modified": "2026-01-27T05:12:58.195778Z", "relationship_type": "indicates", "source_ref": "indicator--8d76fcf8-8588-4831-85cf-383e10bcc2ee", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9f38a5-a981-4deb-90fc-a2a13f776510", "created": "2026-01-27T05:12:58.195966Z", "modified": "2026-01-27T05:12:58.195966Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F6422B9D4DD3C7370E3ED2879EA4DC8F463CD2A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.195966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84137da2-1611-47ec-a514-90f2c5d65dc3", "created": "2026-01-27T05:12:58.196739Z", "modified": "2026-01-27T05:12:58.196739Z", "relationship_type": "indicates", "source_ref": "indicator--6e9f38a5-a981-4deb-90fc-a2a13f776510", "target_ref": "malware--ac34a3a6-dada-4419-9044-7cceb2d3a4c3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980", "created": "2026-01-27T05:12:58.196931Z", "modified": "2026-01-27T05:12:58.196931Z", "name": "Cerberus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72e5199-3c8c-4765-a8f4-34a73a9d30ec", "created": "2026-01-27T05:12:58.197107Z", "modified": "2026-01-27T05:12:58.197107Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api-project-999803017449.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.197107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e1971b3-6f78-4ded-a431-b1e9876d4d09", "created": "2026-01-27T05:12:58.197834Z", "modified": "2026-01-27T05:12:58.197834Z", "relationship_type": "indicates", "source_ref": "indicator--a72e5199-3c8c-4765-a8f4-34a73a9d30ec", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf93431-c917-4fad-83c0-9ccfae18e6eb", "created": "2026-01-27T05:12:58.198021Z", "modified": "2026-01-27T05:12:58.198021Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.198021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a9469c9-7fb3-47b8-ab3a-67b014b953af", "created": "2026-01-27T05:12:58.198689Z", "modified": "2026-01-27T05:12:58.198689Z", "relationship_type": "indicates", "source_ref": "indicator--bdf93431-c917-4fad-83c0-9ccfae18e6eb", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2ca4d1-8286-405b-9467-8c4b2a44e520", "created": "2026-01-27T05:12:58.198884Z", "modified": "2026-01-27T05:12:58.198884Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.198884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c1d96e4-78c8-449f-9b00-14a0c14b28ed", "created": "2026-01-27T05:12:58.199567Z", "modified": "2026-01-27T05:12:58.199567Z", "relationship_type": "indicates", "source_ref": "indicator--2b2ca4d1-8286-405b-9467-8c4b2a44e520", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622199bc-0c82-491f-a400-411df96a1332", "created": "2026-01-27T05:12:58.199759Z", "modified": "2026-01-27T05:12:58.199759Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphonetrackers.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.199759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0cec038-9fea-4c97-a1fc-59b4d713d0a0", "created": "2026-01-27T05:12:58.200445Z", "modified": "2026-01-27T05:12:58.200445Z", "relationship_type": "indicates", "source_ref": "indicator--622199bc-0c82-491f-a400-411df96a1332", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b296728-3041-4a00-b94e-7beb0a07b2ea", "created": "2026-01-27T05:12:58.200622Z", "modified": "2026-01-27T05:12:58.200622Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.200622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df85746d-7f95-4028-b578-02d6ec05a83a", "created": "2026-01-27T05:12:58.201318Z", "modified": "2026-01-27T05:12:58.201318Z", "relationship_type": "indicates", "source_ref": "indicator--2b296728-3041-4a00-b94e-7beb0a07b2ea", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b1150b-615c-49bf-9f24-68c607ba5502", "created": "2026-01-27T05:12:58.201501Z", "modified": "2026-01-27T05:12:58.201501Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cerberusbrasil.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.201501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c1d4461-5e66-4f56-b2cd-c466d13219f0", "created": "2026-01-27T05:12:58.202306Z", "modified": "2026-01-27T05:12:58.202306Z", "relationship_type": "indicates", "source_ref": "indicator--89b1150b-615c-49bf-9f24-68c607ba5502", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb79f9a-6a40-458e-a5e9-8218d6a38611", "created": "2026-01-27T05:12:58.202484Z", "modified": "2026-01-27T05:12:58.202484Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='enterprise.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.202484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcce3ba4-fb1a-490d-a800-4a3c9606ce7f", "created": "2026-01-27T05:12:58.203202Z", "modified": "2026-01-27T05:12:58.203202Z", "relationship_type": "indicates", "source_ref": "indicator--ebb79f9a-6a40-458e-a5e9-8218d6a38611", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457ef295-aaa0-4136-bf4e-385a86219047", "created": "2026-01-27T05:12:58.20338Z", "modified": "2026-01-27T05:12:58.20338Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cerberusapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.20338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0283912d-6f14-4730-b0f0-e9bc61b97525", "created": "2026-01-27T05:12:58.204075Z", "modified": "2026-01-27T05:12:58.204075Z", "relationship_type": "indicates", "source_ref": "indicator--457ef295-aaa0-4136-bf4e-385a86219047", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcbcc5c-f8c9-462d-958e-9b5769a878d8", "created": "2026-01-27T05:12:58.204252Z", "modified": "2026-01-27T05:12:58.204252Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cerberusbrasil.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.204252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e1220ea-85d6-42cb-a20f-3a2aa8c2381b", "created": "2026-01-27T05:12:58.204944Z", "modified": "2026-01-27T05:12:58.204944Z", "relationship_type": "indicates", "source_ref": "indicator--7dcbcc5c-f8c9-462d-958e-9b5769a878d8", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbac92b-ab30-4486-af66-74408bd30ea6", "created": "2026-01-27T05:12:58.205123Z", "modified": "2026-01-27T05:12:58.205123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f23de045919828b23bc093e33249860939350f0800148e9f8e1b48ffa4f113b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.205123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81d08d19-0e84-4b54-aded-3d80306b914f", "created": "2026-01-27T05:12:58.205972Z", "modified": "2026-01-27T05:12:58.205972Z", "relationship_type": "indicates", "source_ref": "indicator--4dbac92b-ab30-4486-af66-74408bd30ea6", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ca114a-a1bb-473a-bb32-094af7f1a0d0", "created": "2026-01-27T05:12:58.206164Z", "modified": "2026-01-27T05:12:58.206164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a05497647a879afec62bc7e916005f729fbfee48cfd56423481e0600061678b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.206164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03260735-e22f-4d23-ba49-0e8c88d158eb", "created": "2026-01-27T05:12:58.207006Z", "modified": "2026-01-27T05:12:58.207006Z", "relationship_type": "indicates", "source_ref": "indicator--58ca114a-a1bb-473a-bb32-094af7f1a0d0", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a248d451-0327-484d-83f4-0412858a69ef", "created": "2026-01-27T05:12:58.207186Z", "modified": "2026-01-27T05:12:58.207186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98c2fe30c335bcd89c2ca4eff4b3ec92184344c5a498b01cb48534bbff7b32f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.207186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f23d772-b6c7-436e-9e2c-8ec65c904572", "created": "2026-01-27T05:12:58.208036Z", "modified": "2026-01-27T05:12:58.208036Z", "relationship_type": "indicates", "source_ref": "indicator--a248d451-0327-484d-83f4-0412858a69ef", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5a2faa-b66c-450f-ac3b-1870aa251f92", "created": "2026-01-27T05:12:58.208218Z", "modified": "2026-01-27T05:12:58.208218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a445c9d1263b4349121466f0883864392cbc246bab34e0ee2bbe4cbb1faedd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.208218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7a6c5c8-2b0d-48a5-8128-1624ed413320", "created": "2026-01-27T05:12:58.20907Z", "modified": "2026-01-27T05:12:58.20907Z", "relationship_type": "indicates", "source_ref": "indicator--8a5a2faa-b66c-450f-ac3b-1870aa251f92", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddad34b-e6dd-4dd5-ac61-683e1246f155", "created": "2026-01-27T05:12:58.209248Z", "modified": "2026-01-27T05:12:58.209248Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='612683622ab49d8b52f893aa54b988e4badbcb4f0fae73d48c086e90f023d371']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.209248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7065712f-0a11-44b0-afb0-0756d7667b6d", "created": "2026-01-27T05:12:58.210095Z", "modified": "2026-01-27T05:12:58.210095Z", "relationship_type": "indicates", "source_ref": "indicator--6ddad34b-e6dd-4dd5-ac61-683e1246f155", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567bd9c9-19b8-4081-97bd-9216a7d7d292", "created": "2026-01-27T05:12:58.210277Z", "modified": "2026-01-27T05:12:58.210277Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c29fef7ae07b6209b608bd91a9704594c587d7bb846181d3a8df7a37803f28f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.210277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--170d8e44-8695-4956-9567-9a2a93f29ecb", "created": "2026-01-27T05:12:58.211282Z", "modified": "2026-01-27T05:12:58.211282Z", "relationship_type": "indicates", "source_ref": "indicator--567bd9c9-19b8-4081-97bd-9216a7d7d292", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206ed9a6-120c-4083-8fba-18d6af8ff097", "created": "2026-01-27T05:12:58.211465Z", "modified": "2026-01-27T05:12:58.211465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f091196126df6461ff0e659e04f48b98bb6dccab30833dcae4f0b9d603a00de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.211465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8db9cab1-ef35-4606-9492-42199fa9b638", "created": "2026-01-27T05:12:58.212312Z", "modified": "2026-01-27T05:12:58.212312Z", "relationship_type": "indicates", "source_ref": "indicator--206ed9a6-120c-4083-8fba-18d6af8ff097", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--badd44c0-0fa6-4c83-807c-8267e899e69e", "created": "2026-01-27T05:12:58.212493Z", "modified": "2026-01-27T05:12:58.212493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7c612a24cde80de65d92273ce35d85c95275fd97f653b71e3a7d2151f3b45bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.212493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d973d54-1dbd-46e2-8bca-4ca29a3f8ad5", "created": "2026-01-27T05:12:58.213344Z", "modified": "2026-01-27T05:12:58.213344Z", "relationship_type": "indicates", "source_ref": "indicator--badd44c0-0fa6-4c83-807c-8267e899e69e", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8d22f9-3688-460e-9cdc-100b15638938", "created": "2026-01-27T05:12:58.213522Z", "modified": "2026-01-27T05:12:58.213522Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c8dd2ee7c332951b69de477c2fa95e727bee57a60ac0d6567f18b292f6efd21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.213522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54445ad7-61c9-4657-ab62-117a5c2d1023", "created": "2026-01-27T05:12:58.214363Z", "modified": "2026-01-27T05:12:58.214363Z", "relationship_type": "indicates", "source_ref": "indicator--7d8d22f9-3688-460e-9cdc-100b15638938", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a5c197-770e-45e4-9538-4213584a9ebe", "created": "2026-01-27T05:12:58.214542Z", "modified": "2026-01-27T05:12:58.214542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc86f2ac1741ba158c7a7949347d801eb71c1b6f1da7fc991978f6b4a02b6bdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.214542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3f8777c-0cbc-46bf-8954-0e829a6bed14", "created": "2026-01-27T05:12:58.215396Z", "modified": "2026-01-27T05:12:58.215396Z", "relationship_type": "indicates", "source_ref": "indicator--c1a5c197-770e-45e4-9538-4213584a9ebe", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4595f7a7-90c4-4015-82b7-52dde8887cd4", "created": "2026-01-27T05:12:58.215576Z", "modified": "2026-01-27T05:12:58.215576Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23edea9968a85b9b7fd8637a06312a376a529d6db55abca70a191e71c82b81b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.215576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6a6377-53ef-405d-ad93-59e21699e06d", "created": "2026-01-27T05:12:58.216426Z", "modified": "2026-01-27T05:12:58.216426Z", "relationship_type": "indicates", "source_ref": "indicator--4595f7a7-90c4-4015-82b7-52dde8887cd4", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09da7866-d9ac-4468-a27e-1b3a2fd7b7b8", "created": "2026-01-27T05:12:58.216605Z", "modified": "2026-01-27T05:12:58.216605Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e06a17b2f2410e54cd8a830ea8dbb1bb5fd14e55b3ee31b971d82e9ac5ab55c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.216605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b415ea8-c10b-450b-ae1b-842b8816218b", "created": "2026-01-27T05:12:58.217452Z", "modified": "2026-01-27T05:12:58.217452Z", "relationship_type": "indicates", "source_ref": "indicator--09da7866-d9ac-4468-a27e-1b3a2fd7b7b8", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a38151-2389-4811-8129-4e8ae08eb32b", "created": "2026-01-27T05:12:58.217631Z", "modified": "2026-01-27T05:12:58.217631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ea0a03485b81c507fa2cdf5b1e59db92117ad07c36653b1f9e8b35b048ab2f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.217631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a740342f-3b60-412a-b0f4-327631ae7422", "created": "2026-01-27T05:12:58.218466Z", "modified": "2026-01-27T05:12:58.218466Z", "relationship_type": "indicates", "source_ref": "indicator--84a38151-2389-4811-8129-4e8ae08eb32b", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cb581e-c8de-4161-bb35-9803b14c6e57", "created": "2026-01-27T05:12:58.218649Z", "modified": "2026-01-27T05:12:58.218649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3638ca8c45d7a5c495a68d32fa0fd09df2687ce91c91813b3c9ff4c352adac0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.218649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afd4933d-fefc-401d-8a03-b599abc47aaa", "created": "2026-01-27T05:12:58.219495Z", "modified": "2026-01-27T05:12:58.219495Z", "relationship_type": "indicates", "source_ref": "indicator--82cb581e-c8de-4161-bb35-9803b14c6e57", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5408fa2-6e05-44af-b50a-f9a3089a128a", "created": "2026-01-27T05:12:58.219674Z", "modified": "2026-01-27T05:12:58.219674Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90a0b5a532734653239bf2709d8d1cf3f9a6bb43d0fbff1fd872c6ddab37198e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.219674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--217c8374-90d2-4901-8045-c9062315c2f9", "created": "2026-01-27T05:12:58.22064Z", "modified": "2026-01-27T05:12:58.22064Z", "relationship_type": "indicates", "source_ref": "indicator--c5408fa2-6e05-44af-b50a-f9a3089a128a", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bff31d-c9db-47ea-9751-9def577bd6a9", "created": "2026-01-27T05:12:58.220838Z", "modified": "2026-01-27T05:12:58.220838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3e19b106287edb6fd9204f176bbac37467d0e72f9c987cd2c69085aff3bc213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.220838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--754ff7ae-9a83-4d4a-b3bb-4aefe29f6103", "created": "2026-01-27T05:12:58.221728Z", "modified": "2026-01-27T05:12:58.221728Z", "relationship_type": "indicates", "source_ref": "indicator--57bff31d-c9db-47ea-9751-9def577bd6a9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604e2261-f5c3-4577-b1a9-55f35d8e9322", "created": "2026-01-27T05:12:58.22196Z", "modified": "2026-01-27T05:12:58.22196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d958a3505ad55fb55f9381d3e14201b68dbab38754ddb741fbf32d6aa493e9fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.22196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3141015-eaa6-453a-adf1-de09314a6b56", "created": "2026-01-27T05:12:58.22283Z", "modified": "2026-01-27T05:12:58.22283Z", "relationship_type": "indicates", "source_ref": "indicator--604e2261-f5c3-4577-b1a9-55f35d8e9322", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ce7951-369a-4c47-bc4f-86eb754b0259", "created": "2026-01-27T05:12:58.223012Z", "modified": "2026-01-27T05:12:58.223012Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04b5f3df56e473b9d936535e784b8d6eddc45d12031608c54d098450c00cbff4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.223012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e44f025b-30bc-403d-acc0-e2116a94d231", "created": "2026-01-27T05:12:58.223868Z", "modified": "2026-01-27T05:12:58.223868Z", "relationship_type": "indicates", "source_ref": "indicator--a4ce7951-369a-4c47-bc4f-86eb754b0259", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe31a608-8cbe-461d-8004-7224954ae4eb", "created": "2026-01-27T05:12:58.22405Z", "modified": "2026-01-27T05:12:58.22405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e874ee18137ab71db82f77008e25f26d42b8ba43ab348ef8e0e2399a59c19995']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.22405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d4d6d26-1a6c-4a7a-bbe3-a7ee74d6b699", "created": "2026-01-27T05:12:58.224894Z", "modified": "2026-01-27T05:12:58.224894Z", "relationship_type": "indicates", "source_ref": "indicator--fe31a608-8cbe-461d-8004-7224954ae4eb", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a98741d-09b2-4398-ac63-c1897a7d6f77", "created": "2026-01-27T05:12:58.225073Z", "modified": "2026-01-27T05:12:58.225073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5eef3c6c8c5d19a070029be8030af6b37a10d3f1daa643e1156dbce0bbf30ca0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.225073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--247f9d25-781f-4694-a350-e57a6f1b5ec0", "created": "2026-01-27T05:12:58.225912Z", "modified": "2026-01-27T05:12:58.225912Z", "relationship_type": "indicates", "source_ref": "indicator--8a98741d-09b2-4398-ac63-c1897a7d6f77", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3430c734-aaca-44af-b223-1bc781d0d3ef", "created": "2026-01-27T05:12:58.226091Z", "modified": "2026-01-27T05:12:58.226091Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7af5da575ef4aab70f6c1eace5ac224a7abf61d1aa10c68239c3ec6237e9a58f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.226091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b461a20-dda9-4e09-9e82-a6ee090e1816", "created": "2026-01-27T05:12:58.226925Z", "modified": "2026-01-27T05:12:58.226925Z", "relationship_type": "indicates", "source_ref": "indicator--3430c734-aaca-44af-b223-1bc781d0d3ef", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a094bf28-f22d-4229-9e6b-33da336e5614", "created": "2026-01-27T05:12:58.227103Z", "modified": "2026-01-27T05:12:58.227103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ffb1824ae4ebe89792e49a7516eb0cb5edd459725c53828405717769d913520']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.227103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d01f9c95-10b8-4f5c-bf8a-89588c9c2025", "created": "2026-01-27T05:12:58.227958Z", "modified": "2026-01-27T05:12:58.227958Z", "relationship_type": "indicates", "source_ref": "indicator--a094bf28-f22d-4229-9e6b-33da336e5614", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e86cb62-9fe3-4b71-a0c8-9a97731dd408", "created": "2026-01-27T05:12:58.228147Z", "modified": "2026-01-27T05:12:58.228147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de45510a354a6f6e479acf13cb3857576ba32e1613d744b64b04f0ea14987efb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.228147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03ae58c9-49fd-4ccc-9321-e2ff97abba38", "created": "2026-01-27T05:12:58.229012Z", "modified": "2026-01-27T05:12:58.229012Z", "relationship_type": "indicates", "source_ref": "indicator--3e86cb62-9fe3-4b71-a0c8-9a97731dd408", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf7211e-b399-4846-ad28-c4fbb27e0e90", "created": "2026-01-27T05:12:58.229196Z", "modified": "2026-01-27T05:12:58.229196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7193cdd49b786ad7c837257b7f451f5da8d4b9dc5e35b706361994b72318fc10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.229196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--beed659f-1b47-499e-b338-cb83350503ad", "created": "2026-01-27T05:12:58.230452Z", "modified": "2026-01-27T05:12:58.230452Z", "relationship_type": "indicates", "source_ref": "indicator--1cf7211e-b399-4846-ad28-c4fbb27e0e90", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05abcbe0-fd43-4f64-aea9-ed662c98ffba", "created": "2026-01-27T05:12:58.230631Z", "modified": "2026-01-27T05:12:58.230631Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fde4af34b9d436e87918c31388086e1a498f45990198da603bd051635830f0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.230631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d1f4988-89a5-42a9-b4c4-e481c560723e", "created": "2026-01-27T05:12:58.231494Z", "modified": "2026-01-27T05:12:58.231494Z", "relationship_type": "indicates", "source_ref": "indicator--05abcbe0-fd43-4f64-aea9-ed662c98ffba", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4154fbf2-3256-4c2a-92c0-7d433b18eac9", "created": "2026-01-27T05:12:58.231673Z", "modified": "2026-01-27T05:12:58.231673Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ebaaf97580389dc501d317fa582196f1c530c770491a8b1a17028cfeaf971811']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.231673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39b6a866-b772-4794-8f47-543ab97e0d5a", "created": "2026-01-27T05:12:58.232519Z", "modified": "2026-01-27T05:12:58.232519Z", "relationship_type": "indicates", "source_ref": "indicator--4154fbf2-3256-4c2a-92c0-7d433b18eac9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d88db7-5075-4ef9-8435-3747ee048089", "created": "2026-01-27T05:12:58.2327Z", "modified": "2026-01-27T05:12:58.2327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69bc10d678014dd31013ed7ad63f79166344e37e0c93a1f26d929eb5a57be5c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.2327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--108f358d-203a-45f6-8b3e-320c84d51ff5", "created": "2026-01-27T05:12:58.233537Z", "modified": "2026-01-27T05:12:58.233537Z", "relationship_type": "indicates", "source_ref": "indicator--73d88db7-5075-4ef9-8435-3747ee048089", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085aca01-7ac5-4962-87ee-2ccd89382e03", "created": "2026-01-27T05:12:58.233715Z", "modified": "2026-01-27T05:12:58.233715Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b15f7bc5c4a773f7c1d5889dd9070a5d8e8f926a6e456eb1e60338aa1855345']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.233715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4c6e0ce-854a-48b3-ac0e-f124451d3c76", "created": "2026-01-27T05:12:58.234562Z", "modified": "2026-01-27T05:12:58.234562Z", "relationship_type": "indicates", "source_ref": "indicator--085aca01-7ac5-4962-87ee-2ccd89382e03", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305d1e67-a17e-41f2-ba50-e498ea0bc3ee", "created": "2026-01-27T05:12:58.23474Z", "modified": "2026-01-27T05:12:58.23474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a2d93e6833f2d520f0f94c9e319ee995e1182147d587e74620dcba949d134da8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.23474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0465abbb-8545-46cb-b1a4-747aab48de71", "created": "2026-01-27T05:12:58.235588Z", "modified": "2026-01-27T05:12:58.235588Z", "relationship_type": "indicates", "source_ref": "indicator--305d1e67-a17e-41f2-ba50-e498ea0bc3ee", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffb1075-c80c-4ff6-b56a-198667841db9", "created": "2026-01-27T05:12:58.235784Z", "modified": "2026-01-27T05:12:58.235784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb7f8d93c28a35a88020f950864ad347f9700864f03838591bc126416dbc59a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.235784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bd38871-cda9-4e06-b974-f973846921dd", "created": "2026-01-27T05:12:58.236613Z", "modified": "2026-01-27T05:12:58.236613Z", "relationship_type": "indicates", "source_ref": "indicator--7ffb1075-c80c-4ff6-b56a-198667841db9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce10620b-6513-4e52-8e24-e2dd78ed0424", "created": "2026-01-27T05:12:58.236807Z", "modified": "2026-01-27T05:12:58.236807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c18f91c5a54b5bcb866a181773b56ee3c0e573169929317d858aa332c1c3d7a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.236807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74be3778-3090-44b2-bba3-61d943646903", "created": "2026-01-27T05:12:58.237632Z", "modified": "2026-01-27T05:12:58.237632Z", "relationship_type": "indicates", "source_ref": "indicator--ce10620b-6513-4e52-8e24-e2dd78ed0424", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6650fcce-1526-426c-959c-fd0aa201f2ee", "created": "2026-01-27T05:12:58.237826Z", "modified": "2026-01-27T05:12:58.237826Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='390152f181af51b3bbfde605eecafc3a7f816ce2f94554e8590d638b0c4e094f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.237826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d99b152f-acc4-4f69-b7e9-40d0f421ae82", "created": "2026-01-27T05:12:58.238794Z", "modified": "2026-01-27T05:12:58.238794Z", "relationship_type": "indicates", "source_ref": "indicator--6650fcce-1526-426c-959c-fd0aa201f2ee", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62032d29-ef01-42c5-b400-a22ee190d2f5", "created": "2026-01-27T05:12:58.238983Z", "modified": "2026-01-27T05:12:58.238983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='30a04f90abe86750f5d63af04408ab5d5caf4197780f5087e46aae466f5f223b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.238983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d308fd84-34ad-4811-b162-c9238c284d40", "created": "2026-01-27T05:12:58.239834Z", "modified": "2026-01-27T05:12:58.239834Z", "relationship_type": "indicates", "source_ref": "indicator--62032d29-ef01-42c5-b400-a22ee190d2f5", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12db498-7eb7-4190-b953-4b7c9c697184", "created": "2026-01-27T05:12:58.240015Z", "modified": "2026-01-27T05:12:58.240015Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccb7fb6f3d46b752e028a642f03891b8c64ffd538a28a3e089f547a4ae3050f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.240015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e147a9e-034e-4a74-9d20-e875c497cb1c", "created": "2026-01-27T05:12:58.240854Z", "modified": "2026-01-27T05:12:58.240854Z", "relationship_type": "indicates", "source_ref": "indicator--f12db498-7eb7-4190-b953-4b7c9c697184", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9629098-3325-409c-9e6f-ac9bc04eb8ac", "created": "2026-01-27T05:12:58.241033Z", "modified": "2026-01-27T05:12:58.241033Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='296cac079673fa68d20d5880dd006f30ee0579ffb24a60b44d30ca3cf8fe2a06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.241033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1b87b37-d82c-46ff-b956-f361f75cbe91", "created": "2026-01-27T05:12:58.241877Z", "modified": "2026-01-27T05:12:58.241877Z", "relationship_type": "indicates", "source_ref": "indicator--e9629098-3325-409c-9e6f-ac9bc04eb8ac", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f082ab-e42e-4884-a544-61dfbb87d047", "created": "2026-01-27T05:12:58.242062Z", "modified": "2026-01-27T05:12:58.242062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='107c79b245dce3d1352f5b9b4c24336c6dd84041458f6bf5a4e522148ec37ddf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.242062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e255f6c6-718d-48eb-a4cc-499a3e09d4c2", "created": "2026-01-27T05:12:58.242901Z", "modified": "2026-01-27T05:12:58.242901Z", "relationship_type": "indicates", "source_ref": "indicator--25f082ab-e42e-4884-a544-61dfbb87d047", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05c1e3f-9c46-4ff7-89c2-cee213cf6538", "created": "2026-01-27T05:12:58.243086Z", "modified": "2026-01-27T05:12:58.243086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14d6ef76cf0202162553f1dc09c83abd3ca48845ac0e6604e104887cdb8a6008']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.243086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0281123-76de-4acf-9b24-b24a82e0acba", "created": "2026-01-27T05:12:58.243924Z", "modified": "2026-01-27T05:12:58.243924Z", "relationship_type": "indicates", "source_ref": "indicator--d05c1e3f-9c46-4ff7-89c2-cee213cf6538", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac65152-e1ff-451d-8e5c-f9c76d9b0f5c", "created": "2026-01-27T05:12:58.244101Z", "modified": "2026-01-27T05:12:58.244101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b8baba194af82fff3dbcc4534ca98691bbf2d488179970b39e3d25e86951263']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.244101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f777cba-6fbe-4a02-bf78-bb6c20936571", "created": "2026-01-27T05:12:58.244937Z", "modified": "2026-01-27T05:12:58.244937Z", "relationship_type": "indicates", "source_ref": "indicator--1ac65152-e1ff-451d-8e5c-f9c76d9b0f5c", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1536bef-d54a-49b8-89c1-5c7e444ac3be", "created": "2026-01-27T05:12:58.245113Z", "modified": "2026-01-27T05:12:58.245113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9818505c5bd59787507394c1bdca6a8420d5ad23a269db324f0773e6a8eecaa0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.245113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bb3ca9e-82d1-4b6e-8222-afc70fb47102", "created": "2026-01-27T05:12:58.24595Z", "modified": "2026-01-27T05:12:58.24595Z", "relationship_type": "indicates", "source_ref": "indicator--f1536bef-d54a-49b8-89c1-5c7e444ac3be", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97676d12-bc7e-4335-bdc3-b01b52e1fdc5", "created": "2026-01-27T05:12:58.246126Z", "modified": "2026-01-27T05:12:58.246126Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb576cb72bd89024c477591f3f409d8b7442187c3eaa01c96fc010d83fa8de75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.246126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b0c95b-72f4-4806-b7fd-6c0fbd7638c6", "created": "2026-01-27T05:12:58.246974Z", "modified": "2026-01-27T05:12:58.246974Z", "relationship_type": "indicates", "source_ref": "indicator--97676d12-bc7e-4335-bdc3-b01b52e1fdc5", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcb9a49-eca8-4c4b-b2cf-2cdbe004efaf", "created": "2026-01-27T05:12:58.247152Z", "modified": "2026-01-27T05:12:58.247152Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f3cf212099992f1e810721e61259d2035743469d31bf21633f399532dcda63d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.247152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eb34272-3bb1-4a2a-89a1-a75241826019", "created": "2026-01-27T05:12:58.248125Z", "modified": "2026-01-27T05:12:58.248125Z", "relationship_type": "indicates", "source_ref": "indicator--fdcb9a49-eca8-4c4b-b2cf-2cdbe004efaf", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--722fb1f3-153a-4067-8163-92ebd47e52c3", "created": "2026-01-27T05:12:58.248304Z", "modified": "2026-01-27T05:12:58.248304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbccb5de6c125a90effc42f15fdf6de9cf867ae519fb181354ac318cb92d3d91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.248304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee95cdf-6883-4663-94f8-787a04387689", "created": "2026-01-27T05:12:58.249144Z", "modified": "2026-01-27T05:12:58.249144Z", "relationship_type": "indicates", "source_ref": "indicator--722fb1f3-153a-4067-8163-92ebd47e52c3", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9e874a-0f5d-441a-91bf-2f32f5348827", "created": "2026-01-27T05:12:58.249321Z", "modified": "2026-01-27T05:12:58.249321Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6e1ed8a10db9f522c14da5e32eefb59f4e559ecc2de434242f157542fc8d7dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.249321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ada14edc-0277-484d-9de6-0bc83cd13ea7", "created": "2026-01-27T05:12:58.250162Z", "modified": "2026-01-27T05:12:58.250162Z", "relationship_type": "indicates", "source_ref": "indicator--2e9e874a-0f5d-441a-91bf-2f32f5348827", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24c4d18-ba61-429e-8848-805a8ac36be1", "created": "2026-01-27T05:12:58.250341Z", "modified": "2026-01-27T05:12:58.250341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f99642f097d882c0ed84ca3e3cd1a5bc71addbeae9a8382b3d536e78b959445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.250341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2762a4bb-119f-4e01-bf3b-abc15a053212", "created": "2026-01-27T05:12:58.251184Z", "modified": "2026-01-27T05:12:58.251184Z", "relationship_type": "indicates", "source_ref": "indicator--c24c4d18-ba61-429e-8848-805a8ac36be1", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e63bf4-03e1-46f3-937a-d8fa4b02d154", "created": "2026-01-27T05:12:58.251362Z", "modified": "2026-01-27T05:12:58.251362Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d35b2e66894572c23fd22274aec55f7386e7ba4d6f9f421b36205237d455520']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.251362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69313ed8-0270-4a4d-8462-4e53e9dd469f", "created": "2026-01-27T05:12:58.252201Z", "modified": "2026-01-27T05:12:58.252201Z", "relationship_type": "indicates", "source_ref": "indicator--16e63bf4-03e1-46f3-937a-d8fa4b02d154", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccea832c-d730-43fa-ae4f-bae5d5d088f3", "created": "2026-01-27T05:12:58.252377Z", "modified": "2026-01-27T05:12:58.252377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9dcd9769489c9b0d9ce1ce12d07ce183cc8111e7400a7c2d3c68dbb57f770494']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.252377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34bfeb5d-7ce0-480f-ad95-d4ccf2029555", "created": "2026-01-27T05:12:58.25322Z", "modified": "2026-01-27T05:12:58.25322Z", "relationship_type": "indicates", "source_ref": "indicator--ccea832c-d730-43fa-ae4f-bae5d5d088f3", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a297fbb0-1ce7-4428-9bf5-cca02b1f9a46", "created": "2026-01-27T05:12:58.253396Z", "modified": "2026-01-27T05:12:58.253396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17286a07d28d5322c3fc327b310d06864d46ce1dbb442dd9c458d7dd43042525']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.253396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e27d42-d7f7-4e17-a9c0-80e21054c087", "created": "2026-01-27T05:12:58.254259Z", "modified": "2026-01-27T05:12:58.254259Z", "relationship_type": "indicates", "source_ref": "indicator--a297fbb0-1ce7-4428-9bf5-cca02b1f9a46", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e53499-99ef-4857-a9b7-de829692e429", "created": "2026-01-27T05:12:58.254434Z", "modified": "2026-01-27T05:12:58.254434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c47536b476ce3f78e856de261cf80150eb0e330fb5f0aa84829a41bac8658153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.254434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65486a5c-a73c-4daf-83b8-d307df647a43", "created": "2026-01-27T05:12:58.255284Z", "modified": "2026-01-27T05:12:58.255284Z", "relationship_type": "indicates", "source_ref": "indicator--d4e53499-99ef-4857-a9b7-de829692e429", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a2ed86-16ad-46d7-9d97-15e424ed6eb5", "created": "2026-01-27T05:12:58.255465Z", "modified": "2026-01-27T05:12:58.255465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7f4e8107365877e88b3cc70c334ae959f84d08e7ea8da663ace1ebc41212c5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.255465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bff65a12-2cc2-4e14-b36b-bddc10911f59", "created": "2026-01-27T05:12:58.256304Z", "modified": "2026-01-27T05:12:58.256304Z", "relationship_type": "indicates", "source_ref": "indicator--f6a2ed86-16ad-46d7-9d97-15e424ed6eb5", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade7306b-b98f-424d-a9fd-259306eff990", "created": "2026-01-27T05:12:58.256488Z", "modified": "2026-01-27T05:12:58.256488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a177e2d78c6156f9bda619c823411eae7006bce89105a66c40a6c1d28efd2993']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.256488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81524d3c-a768-4d71-8ead-7915d3865d85", "created": "2026-01-27T05:12:58.257455Z", "modified": "2026-01-27T05:12:58.257455Z", "relationship_type": "indicates", "source_ref": "indicator--ade7306b-b98f-424d-a9fd-259306eff990", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508b4e0c-75a1-4db3-ba39-a88409efcdca", "created": "2026-01-27T05:12:58.257632Z", "modified": "2026-01-27T05:12:58.257632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3fb79d7235abd7c01a4d4d204baf6b31d2da1a45370fa00acbe40b916e040b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.257632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22d65c3d-a364-49ac-8a58-b6222dd844c4", "created": "2026-01-27T05:12:58.258482Z", "modified": "2026-01-27T05:12:58.258482Z", "relationship_type": "indicates", "source_ref": "indicator--508b4e0c-75a1-4db3-ba39-a88409efcdca", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587a1f02-02c6-49f3-a29c-530d84444f11", "created": "2026-01-27T05:12:58.258661Z", "modified": "2026-01-27T05:12:58.258661Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21b9ee90d26b44f4044fd53567cddfe6d17317ee8ed9d6131f92b2a56ce36478']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.258661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d351b96-2b48-482c-8b28-4b78138a45ec", "created": "2026-01-27T05:12:58.259501Z", "modified": "2026-01-27T05:12:58.259501Z", "relationship_type": "indicates", "source_ref": "indicator--587a1f02-02c6-49f3-a29c-530d84444f11", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f24407b-58fd-4105-97ab-1b64fc2f323e", "created": "2026-01-27T05:12:58.259678Z", "modified": "2026-01-27T05:12:58.259678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a5c15412f8761a80cb73f651f5cb26600af1cdc614d815b0928070d54ec6a2c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.259678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f7e3ecd-bfe9-4f2f-be6e-78405bf91eb9", "created": "2026-01-27T05:12:58.260517Z", "modified": "2026-01-27T05:12:58.260517Z", "relationship_type": "indicates", "source_ref": "indicator--1f24407b-58fd-4105-97ab-1b64fc2f323e", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bee8bd2-8bc2-4267-b933-550deb320295", "created": "2026-01-27T05:12:58.260692Z", "modified": "2026-01-27T05:12:58.260692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbf16231002ec4d6b938ab1d13f9be65f311ae50b88ef7650df5e63e64d9201d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.260692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef423e0-ea9a-4b70-9860-38d32a811fdf", "created": "2026-01-27T05:12:58.261531Z", "modified": "2026-01-27T05:12:58.261531Z", "relationship_type": "indicates", "source_ref": "indicator--0bee8bd2-8bc2-4267-b933-550deb320295", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b55e231-2e66-49d6-ae2d-10b173e8851c", "created": "2026-01-27T05:12:58.261707Z", "modified": "2026-01-27T05:12:58.261707Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='134ec5be40cff4267996caa0d0112ab90fd4d5ac7c57a5fe823ed024e8af8558']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.261707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e149c39-7461-4b5c-89a0-1e7e628db13a", "created": "2026-01-27T05:12:58.262548Z", "modified": "2026-01-27T05:12:58.262548Z", "relationship_type": "indicates", "source_ref": "indicator--7b55e231-2e66-49d6-ae2d-10b173e8851c", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434f5b3d-2eaa-454a-a586-c196e2ed82f9", "created": "2026-01-27T05:12:58.262729Z", "modified": "2026-01-27T05:12:58.262729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='501ddb6420159994a344fa02be86dc8603667899009906edb473e393d91a7237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.262729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82a87ad3-2b5d-4e8b-bc6b-e900bbe372db", "created": "2026-01-27T05:12:58.26358Z", "modified": "2026-01-27T05:12:58.26358Z", "relationship_type": "indicates", "source_ref": "indicator--434f5b3d-2eaa-454a-a586-c196e2ed82f9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5deafe-16ff-4f65-abf8-c0d6dcc6fa51", "created": "2026-01-27T05:12:58.263771Z", "modified": "2026-01-27T05:12:58.263771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15d84d734ea5feaee6221dd9bbfd26ebe93a3d663c4aff02940c9bca3c464d52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.263771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65ba0b7b-5516-4eee-bd85-41e53e65078a", "created": "2026-01-27T05:12:58.264613Z", "modified": "2026-01-27T05:12:58.264613Z", "relationship_type": "indicates", "source_ref": "indicator--3b5deafe-16ff-4f65-abf8-c0d6dcc6fa51", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4e8df4-4990-4428-a93a-310390865e30", "created": "2026-01-27T05:12:58.264803Z", "modified": "2026-01-27T05:12:58.264803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4aa64965d1c1e2e1dd1acf4c3d604af5de50fcb1235ff1709216a28b0882abc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.264803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb068498-62de-441b-9d93-36d96cd416c7", "created": "2026-01-27T05:12:58.265629Z", "modified": "2026-01-27T05:12:58.265629Z", "relationship_type": "indicates", "source_ref": "indicator--3b4e8df4-4990-4428-a93a-310390865e30", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c64ded1-ee27-4b0f-b74d-549a4b150ae9", "created": "2026-01-27T05:12:58.265821Z", "modified": "2026-01-27T05:12:58.265821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bc87b3228185cf54a2d5be5da23820c2ee88962546402a88755219c4f084997']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.265821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a411aff5-f1ff-4f2a-954e-9926ed14358b", "created": "2026-01-27T05:12:58.266779Z", "modified": "2026-01-27T05:12:58.266779Z", "relationship_type": "indicates", "source_ref": "indicator--5c64ded1-ee27-4b0f-b74d-549a4b150ae9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c552f9-3b1a-463f-8ec6-19c3f897085f", "created": "2026-01-27T05:12:58.266959Z", "modified": "2026-01-27T05:12:58.266959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='663fac6c8596e6e330a281ec72f2eed59a70247f123b0c0ad00c7b728b543294']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.266959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64dc9eec-93e5-44a8-b0f4-3defe4d23e84", "created": "2026-01-27T05:12:58.267801Z", "modified": "2026-01-27T05:12:58.267801Z", "relationship_type": "indicates", "source_ref": "indicator--90c552f9-3b1a-463f-8ec6-19c3f897085f", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eee9167-ad91-4802-ba0d-4bf1acff07ac", "created": "2026-01-27T05:12:58.267982Z", "modified": "2026-01-27T05:12:58.267982Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a07519e35578e06abea58b877be6b51fab3e21ac1c0697e7d4d4dce2956168ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.267982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a16cef83-94ee-4e1c-ade8-afd4bfe3a020", "created": "2026-01-27T05:12:58.268827Z", "modified": "2026-01-27T05:12:58.268827Z", "relationship_type": "indicates", "source_ref": "indicator--1eee9167-ad91-4802-ba0d-4bf1acff07ac", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9711c466-c93d-40ea-a181-98633e762d8d", "created": "2026-01-27T05:12:58.269016Z", "modified": "2026-01-27T05:12:58.269016Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='002cd8c6e3f67b6b8563b7164bb06a5b0235635d6a5b53357a75016d01aeed27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.269016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--025df8c3-68c7-41d3-834b-1f0c8c002d12", "created": "2026-01-27T05:12:58.269865Z", "modified": "2026-01-27T05:12:58.269865Z", "relationship_type": "indicates", "source_ref": "indicator--9711c466-c93d-40ea-a181-98633e762d8d", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74695c1-b50e-44c6-90fc-706ed1d315f8", "created": "2026-01-27T05:12:58.270053Z", "modified": "2026-01-27T05:12:58.270053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4df74d42567fe4bea1d0e50fa7404406a92719fc8d48f287ec0af3e4451c2df8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.270053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9548a666-aa3c-489c-8967-a409251063ae", "created": "2026-01-27T05:12:58.270903Z", "modified": "2026-01-27T05:12:58.270903Z", "relationship_type": "indicates", "source_ref": "indicator--b74695c1-b50e-44c6-90fc-706ed1d315f8", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9ec8bc-9d8e-46ed-bdc3-da093aa93496", "created": "2026-01-27T05:12:58.271079Z", "modified": "2026-01-27T05:12:58.271079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b4c4c6ae454a5fe79e019667661fc2c9532e32be17d9d7ed98adbeb70c547e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.271079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76c5e0cf-62b6-405f-9fd9-f54f4cdc4764", "created": "2026-01-27T05:12:58.271929Z", "modified": "2026-01-27T05:12:58.271929Z", "relationship_type": "indicates", "source_ref": "indicator--8d9ec8bc-9d8e-46ed-bdc3-da093aa93496", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db27337b-7b59-442b-b042-b9b601bf881d", "created": "2026-01-27T05:12:58.272106Z", "modified": "2026-01-27T05:12:58.272106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20ac33ae8111ccc34bcf7a7a33053d181a394dbf53e791dffbf78032184b97a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.272106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0bee53f-32a6-440b-9431-294808bb8276", "created": "2026-01-27T05:12:58.273024Z", "modified": "2026-01-27T05:12:58.273024Z", "relationship_type": "indicates", "source_ref": "indicator--db27337b-7b59-442b-b042-b9b601bf881d", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3c5674-3acc-4f1a-a10e-bfd379eecea9", "created": "2026-01-27T05:12:58.273212Z", "modified": "2026-01-27T05:12:58.273212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1724f15eb4e7c55a5bc7af6cdfe76bf6ae42c1a389e4a5b8f9cc42a535093dff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.273212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--496cab20-ad56-4426-bdc6-c9a81ea80f30", "created": "2026-01-27T05:12:58.274064Z", "modified": "2026-01-27T05:12:58.274064Z", "relationship_type": "indicates", "source_ref": "indicator--3c3c5674-3acc-4f1a-a10e-bfd379eecea9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dc1aef-a020-44ec-b16f-d934fe39658b", "created": "2026-01-27T05:12:58.274242Z", "modified": "2026-01-27T05:12:58.274242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8caf04eb2f7aeb72dd7844a3401e5ef188766cf0f655f837d17b566009e69b6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.274242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b215585-75c3-4bbf-b5e3-b206d77d0aee", "created": "2026-01-27T05:12:58.275221Z", "modified": "2026-01-27T05:12:58.275221Z", "relationship_type": "indicates", "source_ref": "indicator--c4dc1aef-a020-44ec-b16f-d934fe39658b", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926a7aa8-9eaa-4efb-a963-d28b83c406ea", "created": "2026-01-27T05:12:58.275405Z", "modified": "2026-01-27T05:12:58.275405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d59ebd8ef23a5bc501c503b234a8524ac1aa7689cae3bcb58aa8997470566ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.275405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67f45d4e-dc80-43e3-b1d0-71cd4923e151", "created": "2026-01-27T05:12:58.276258Z", "modified": "2026-01-27T05:12:58.276258Z", "relationship_type": "indicates", "source_ref": "indicator--926a7aa8-9eaa-4efb-a963-d28b83c406ea", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed14a6d-e369-4219-bd6a-c5216c62d8d6", "created": "2026-01-27T05:12:58.27644Z", "modified": "2026-01-27T05:12:58.27644Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='489b6a49d868a32ca3b019f64f2bd26d77a876cbb53cdb72b145c26adba667b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.27644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0d70f5d-de88-49b1-bdfd-b5706c00b81d", "created": "2026-01-27T05:12:58.277288Z", "modified": "2026-01-27T05:12:58.277288Z", "relationship_type": "indicates", "source_ref": "indicator--4ed14a6d-e369-4219-bd6a-c5216c62d8d6", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2e8b84-6588-4384-8544-fdb188261ba6", "created": "2026-01-27T05:12:58.277468Z", "modified": "2026-01-27T05:12:58.277468Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ba5d45eafffd7e2feae9a2a9af61b7fa89550927664810f67db2dd7ed803851']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.277468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4dd5f81d-a44c-4d5e-81c8-4973e7fca54d", "created": "2026-01-27T05:12:58.278324Z", "modified": "2026-01-27T05:12:58.278324Z", "relationship_type": "indicates", "source_ref": "indicator--0c2e8b84-6588-4384-8544-fdb188261ba6", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3d0273-ac3d-4cfc-ba1e-e7325c052063", "created": "2026-01-27T05:12:58.278505Z", "modified": "2026-01-27T05:12:58.278505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5203ccda246412f86334687f61bee49226c836eb4c2b772ea6c086d4593be6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.278505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d87fe8b-5f50-4ae3-90ed-1414b089bf15", "created": "2026-01-27T05:12:58.279343Z", "modified": "2026-01-27T05:12:58.279343Z", "relationship_type": "indicates", "source_ref": "indicator--0d3d0273-ac3d-4cfc-ba1e-e7325c052063", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0007df-6625-4fe2-965d-e253d1ce8994", "created": "2026-01-27T05:12:58.279527Z", "modified": "2026-01-27T05:12:58.279527Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14c414d2892a76f19671406d24cb12db3af3106c5925b5732b26c73c3a97e2c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.279527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cc2bb8a-239b-4d20-b0e8-347042f91641", "created": "2026-01-27T05:12:58.280377Z", "modified": "2026-01-27T05:12:58.280377Z", "relationship_type": "indicates", "source_ref": "indicator--1b0007df-6625-4fe2-965d-e253d1ce8994", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e012c8bd-e52a-4450-8846-41ca97ebb310", "created": "2026-01-27T05:12:58.280558Z", "modified": "2026-01-27T05:12:58.280558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f41fa15a2f0f89c96ff292d0f64caecaa17fd5fadc566e4918e5ab6bcdd6e12b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.280558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09155d91-8c32-47d7-ae25-0c3351337955", "created": "2026-01-27T05:12:58.281398Z", "modified": "2026-01-27T05:12:58.281398Z", "relationship_type": "indicates", "source_ref": "indicator--e012c8bd-e52a-4450-8846-41ca97ebb310", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b446127e-cb4f-4389-b675-93e16266e38b", "created": "2026-01-27T05:12:58.281574Z", "modified": "2026-01-27T05:12:58.281574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ecb4970eb7c4e570aa8611e8bdd094b6372ed03b815149c1bcd4b5be67eaf5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.281574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7a2f20d-0fc2-4ffe-938a-7fd9a88bff9d", "created": "2026-01-27T05:12:58.282422Z", "modified": "2026-01-27T05:12:58.282422Z", "relationship_type": "indicates", "source_ref": "indicator--b446127e-cb4f-4389-b675-93e16266e38b", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2134765a-d752-40ae-8169-ca153aee0094", "created": "2026-01-27T05:12:58.282604Z", "modified": "2026-01-27T05:12:58.282604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4504937d81feb23d6f80e158518336bb319734c3af182d91e5864bcf62a0d6c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.282604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab26e4db-0a7a-41c3-8615-6f800d5a1eb0", "created": "2026-01-27T05:12:58.283463Z", "modified": "2026-01-27T05:12:58.283463Z", "relationship_type": "indicates", "source_ref": "indicator--2134765a-d752-40ae-8169-ca153aee0094", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87e4b0e-9128-4985-9ca3-5e3d8f44f438", "created": "2026-01-27T05:12:58.283649Z", "modified": "2026-01-27T05:12:58.283649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59978b1dc7227708a05add05d752b7cccdad2b9fdc8e0009f247619015796d95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.283649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c40ac11b-ca38-46ba-8fdb-06b09fc36e51", "created": "2026-01-27T05:12:58.284615Z", "modified": "2026-01-27T05:12:58.284615Z", "relationship_type": "indicates", "source_ref": "indicator--c87e4b0e-9128-4985-9ca3-5e3d8f44f438", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24377ed4-561f-4591-af69-e792cb4088ad", "created": "2026-01-27T05:12:58.28481Z", "modified": "2026-01-27T05:12:58.28481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e5bc1dba5530f53144df8f2325d9c3c66ffea8646b5678ab88492ca56a15e41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.28481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bf05300-7a74-4bcc-897d-88e3d1016e38", "created": "2026-01-27T05:12:58.285639Z", "modified": "2026-01-27T05:12:58.285639Z", "relationship_type": "indicates", "source_ref": "indicator--24377ed4-561f-4591-af69-e792cb4088ad", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f625c98-074c-4d50-a57e-a1155369e42a", "created": "2026-01-27T05:12:58.285846Z", "modified": "2026-01-27T05:12:58.285846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18d8df481f25012c7997847dea274190e73b6d513ed90381b7dca23c63c820ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.285846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b23df14-8125-407b-b9c1-ad21b49daf23", "created": "2026-01-27T05:12:58.286683Z", "modified": "2026-01-27T05:12:58.286683Z", "relationship_type": "indicates", "source_ref": "indicator--3f625c98-074c-4d50-a57e-a1155369e42a", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2712f55-922a-42a1-bb3d-b75ed0ec5448", "created": "2026-01-27T05:12:58.286879Z", "modified": "2026-01-27T05:12:58.286879Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='494ac65f3cc919ca2324ce53123bf24e66780da71c494bac0ee0aca84a4d11d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.286879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17d6a473-9db8-48d8-94bf-71873977b8a5", "created": "2026-01-27T05:12:58.287704Z", "modified": "2026-01-27T05:12:58.287704Z", "relationship_type": "indicates", "source_ref": "indicator--c2712f55-922a-42a1-bb3d-b75ed0ec5448", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca3e0ba-5ac6-4316-8fca-b2dd206ae0fb", "created": "2026-01-27T05:12:58.287902Z", "modified": "2026-01-27T05:12:58.287902Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6f03f6950a15a60ce52357430755255d381a625d41dd791e62b58bab983f1f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.287902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0c9b74a-f54f-42f4-84e0-d3f6c2552f13", "created": "2026-01-27T05:12:58.288732Z", "modified": "2026-01-27T05:12:58.288732Z", "relationship_type": "indicates", "source_ref": "indicator--1ca3e0ba-5ac6-4316-8fca-b2dd206ae0fb", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73e12b7-6d94-4b35-b2a5-415d386906a1", "created": "2026-01-27T05:12:58.288934Z", "modified": "2026-01-27T05:12:58.288934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21906fd407287ee32a1d72582d039878a1778707b3c640028bd820fa5e973a45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.288934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e57116a0-03e0-4b2f-99e7-dd9dc770a983", "created": "2026-01-27T05:12:58.289766Z", "modified": "2026-01-27T05:12:58.289766Z", "relationship_type": "indicates", "source_ref": "indicator--d73e12b7-6d94-4b35-b2a5-415d386906a1", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc323d-eebd-48e3-b1ee-e500d54d5e5d", "created": "2026-01-27T05:12:58.289944Z", "modified": "2026-01-27T05:12:58.289944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c00adefe81b8519bfde28b4268e3fb0e7678fe8af884f40ce612bb3e682a5da7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.289944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e58579b-ce1e-4861-be6f-7f8a35902707", "created": "2026-01-27T05:12:58.290775Z", "modified": "2026-01-27T05:12:58.290775Z", "relationship_type": "indicates", "source_ref": "indicator--bafc323d-eebd-48e3-b1ee-e500d54d5e5d", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdbfd05-0141-4266-a155-05c8c31d95cd", "created": "2026-01-27T05:12:58.290964Z", "modified": "2026-01-27T05:12:58.290964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e2d0dde40dc8afb8a3fc5005f15fe79da60db989436545d20616b10824a17d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.290964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe7e0a86-fe2a-4b75-9fbc-a005bcaf0f88", "created": "2026-01-27T05:12:58.29179Z", "modified": "2026-01-27T05:12:58.29179Z", "relationship_type": "indicates", "source_ref": "indicator--9bdbfd05-0141-4266-a155-05c8c31d95cd", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ac7a39-d33e-447c-b56a-a3c7b061f190", "created": "2026-01-27T05:12:58.291966Z", "modified": "2026-01-27T05:12:58.291966Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='203e8ecb5a4b9efbc5a15e598ab1b3227814a50ab49bb0d80fd47e4d8ebed502']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.291966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33edf3a2-d159-4535-af3d-4db90061792a", "created": "2026-01-27T05:12:58.292811Z", "modified": "2026-01-27T05:12:58.292811Z", "relationship_type": "indicates", "source_ref": "indicator--12ac7a39-d33e-447c-b56a-a3c7b061f190", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e421b2-e596-4077-af3a-78eb99cb2ff1", "created": "2026-01-27T05:12:58.292989Z", "modified": "2026-01-27T05:12:58.292989Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec32249ef4d671f4320c343c6ddcff2c2767a055a41e29a6c7aaf866310dae9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.292989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cdb5014-5e13-4b15-a0bf-5ab10ebf881d", "created": "2026-01-27T05:12:58.294028Z", "modified": "2026-01-27T05:12:58.294028Z", "relationship_type": "indicates", "source_ref": "indicator--70e421b2-e596-4077-af3a-78eb99cb2ff1", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cdb118-6616-43b1-8dab-accce1281903", "created": "2026-01-27T05:12:58.294215Z", "modified": "2026-01-27T05:12:58.294215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='24bfa61267cc51de3b38e5d5f3361826b590ebcf380325ec42e5855785360269']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.294215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c835b9d-9e8d-44b6-a6b2-fd96483e6518", "created": "2026-01-27T05:12:58.295074Z", "modified": "2026-01-27T05:12:58.295074Z", "relationship_type": "indicates", "source_ref": "indicator--f3cdb118-6616-43b1-8dab-accce1281903", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e47615-4ea4-4014-9134-d8ecb5b65b3e", "created": "2026-01-27T05:12:58.295255Z", "modified": "2026-01-27T05:12:58.295255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f050fe6731bad4a1144b35bf71f11940504a3bbd925c32ce014f040b3fdf7d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.295255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3570c20-03cf-417b-8622-e9be8aa441a1", "created": "2026-01-27T05:12:58.296099Z", "modified": "2026-01-27T05:12:58.296099Z", "relationship_type": "indicates", "source_ref": "indicator--e2e47615-4ea4-4014-9134-d8ecb5b65b3e", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026b570e-3337-4939-911b-56ff3e026da2", "created": "2026-01-27T05:12:58.296281Z", "modified": "2026-01-27T05:12:58.296281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7db18faba5b25ef971206f4cc8be7eb87aadc7e48fb1be638de71dd4ef510861']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.296281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c311eff-cf30-4d0a-ae84-9f74578eb9cd", "created": "2026-01-27T05:12:58.297128Z", "modified": "2026-01-27T05:12:58.297128Z", "relationship_type": "indicates", "source_ref": "indicator--026b570e-3337-4939-911b-56ff3e026da2", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2b6749-20a8-461d-a888-8752c772585f", "created": "2026-01-27T05:12:58.297308Z", "modified": "2026-01-27T05:12:58.297308Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8700ee8ba1a5dfbfaf8a31b0f9c3750ab3054977c9bac5ac14a4feca4a40bc9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.297308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09a5f2fa-258c-45d3-a187-b49875ee6e69", "created": "2026-01-27T05:12:58.298148Z", "modified": "2026-01-27T05:12:58.298148Z", "relationship_type": "indicates", "source_ref": "indicator--0e2b6749-20a8-461d-a888-8752c772585f", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839e91bc-feb7-43d6-b440-d69662f83997", "created": "2026-01-27T05:12:58.298325Z", "modified": "2026-01-27T05:12:58.298325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f6ea7265d007a7206c9e2434ae9a7092fab73f80840b266be87d54c234cbff3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.298325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca6d1d36-82a1-44ab-bd0e-28d9cdef786f", "created": "2026-01-27T05:12:58.299246Z", "modified": "2026-01-27T05:12:58.299246Z", "relationship_type": "indicates", "source_ref": "indicator--839e91bc-feb7-43d6-b440-d69662f83997", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b79462e-abd9-4ff2-b2dc-38cee7635da1", "created": "2026-01-27T05:12:58.29943Z", "modified": "2026-01-27T05:12:58.29943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd9062afe3ac12c5c5cdc964349536007880869221cbf5dd94b46a926afdddd4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.29943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f189ad9-cda7-46be-8b8b-46e261aeb4ab", "created": "2026-01-27T05:12:58.300288Z", "modified": "2026-01-27T05:12:58.300288Z", "relationship_type": "indicates", "source_ref": "indicator--4b79462e-abd9-4ff2-b2dc-38cee7635da1", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3ad819-ef88-418f-a3fa-a79c726c4995", "created": "2026-01-27T05:12:58.300466Z", "modified": "2026-01-27T05:12:58.300466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e5d37d253fe2f6fe951c864574b0a41375d0d3e045a8b4a5860daab61bfc1d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.300466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f668fbb2-9546-4320-8ff5-7bbd5c243498", "created": "2026-01-27T05:12:58.301345Z", "modified": "2026-01-27T05:12:58.301345Z", "relationship_type": "indicates", "source_ref": "indicator--5b3ad819-ef88-418f-a3fa-a79c726c4995", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acc743a-b63b-4283-aaf5-9c9a0dbfab23", "created": "2026-01-27T05:12:58.301525Z", "modified": "2026-01-27T05:12:58.301525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d9ed7d93e4a84865da85196f220fbe7da684cb965e3d497d99ed02ff24da566']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.301525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1284dbb8-1533-4a1b-955b-77954335fda6", "created": "2026-01-27T05:12:58.302498Z", "modified": "2026-01-27T05:12:58.302498Z", "relationship_type": "indicates", "source_ref": "indicator--8acc743a-b63b-4283-aaf5-9c9a0dbfab23", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf0fc15-df62-49f2-989d-796f1160388c", "created": "2026-01-27T05:12:58.302686Z", "modified": "2026-01-27T05:12:58.302686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7def7aa2f1efd31194492451f32be88836b61035738b441ae6f416f9cb9cee9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.302686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b6d6f42-ece5-4764-8cfb-eda97c65f59e", "created": "2026-01-27T05:12:58.303542Z", "modified": "2026-01-27T05:12:58.303542Z", "relationship_type": "indicates", "source_ref": "indicator--2bf0fc15-df62-49f2-989d-796f1160388c", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954160ff-07e1-40a9-a9bd-6414d7f9a16f", "created": "2026-01-27T05:12:58.303717Z", "modified": "2026-01-27T05:12:58.303717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0b89e87f4d8d0127c930ab87891f8c0cf500d1424735ba47ab139c6ccd0665c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.303717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c86461bf-139d-42a1-bd46-d2ec9005769e", "created": "2026-01-27T05:12:58.304559Z", "modified": "2026-01-27T05:12:58.304559Z", "relationship_type": "indicates", "source_ref": "indicator--954160ff-07e1-40a9-a9bd-6414d7f9a16f", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22a2200-9d77-40da-b61b-6804ae59050c", "created": "2026-01-27T05:12:58.304755Z", "modified": "2026-01-27T05:12:58.304755Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8dbc12619d968342ec4ebbdfcc58f18e0904ad79d53ebb56445c29b31f9f6c26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.304755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--453e9b86-c255-4a8d-a9d1-40d607013fa1", "created": "2026-01-27T05:12:58.305582Z", "modified": "2026-01-27T05:12:58.305582Z", "relationship_type": "indicates", "source_ref": "indicator--d22a2200-9d77-40da-b61b-6804ae59050c", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f01c22-c0a3-4836-bba6-f68a825959da", "created": "2026-01-27T05:12:58.305773Z", "modified": "2026-01-27T05:12:58.305773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1301d019bd48c4874944b5897cbe9b1f0593d324ad413c818692a76af36b4e01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.305773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32b95a9a-aa86-4565-a460-6e3ba64e620e", "created": "2026-01-27T05:12:58.306602Z", "modified": "2026-01-27T05:12:58.306602Z", "relationship_type": "indicates", "source_ref": "indicator--88f01c22-c0a3-4836-bba6-f68a825959da", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f85df4e-8aef-45d1-8522-5bfc7ff9f767", "created": "2026-01-27T05:12:58.306802Z", "modified": "2026-01-27T05:12:58.306802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67623c4c5ae742a48f832f373637709553c786b44af632120b48189de93c8d67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.306802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61a3b946-0d7d-4a95-b631-949bf1b6047a", "created": "2026-01-27T05:12:58.307632Z", "modified": "2026-01-27T05:12:58.307632Z", "relationship_type": "indicates", "source_ref": "indicator--8f85df4e-8aef-45d1-8522-5bfc7ff9f767", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827eb382-66be-42db-8932-b408c641248e", "created": "2026-01-27T05:12:58.307825Z", "modified": "2026-01-27T05:12:58.307825Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='046d45f815ba13432d393d58842e70f87124a89d77b87d6c0fb6581cc60eab74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.307825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b751194-06af-448b-b58f-abff60328f96", "created": "2026-01-27T05:12:58.308652Z", "modified": "2026-01-27T05:12:58.308652Z", "relationship_type": "indicates", "source_ref": "indicator--827eb382-66be-42db-8932-b408c641248e", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3098a3-593a-4a10-96c6-a36f7a25b2af", "created": "2026-01-27T05:12:58.308847Z", "modified": "2026-01-27T05:12:58.308847Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='414e1b4af56a923d7c61608fc909610f321787ef841ba6ec5b32e0daef2b215e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.308847Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61606b7c-ba54-4abf-b723-f22c717e5f59", "created": "2026-01-27T05:12:58.309686Z", "modified": "2026-01-27T05:12:58.309686Z", "relationship_type": "indicates", "source_ref": "indicator--ae3098a3-593a-4a10-96c6-a36f7a25b2af", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cec364-e5b4-4e55-b884-9a6286aae13e", "created": "2026-01-27T05:12:58.309889Z", "modified": "2026-01-27T05:12:58.309889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='325143730618dc75a5801736072483973c9b96451e30de2be3620eb48a0eab7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.309889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c7346e4-6bb3-46b6-959a-f22e0fc92736", "created": "2026-01-27T05:12:58.310716Z", "modified": "2026-01-27T05:12:58.310716Z", "relationship_type": "indicates", "source_ref": "indicator--02cec364-e5b4-4e55-b884-9a6286aae13e", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9cb8e1-b786-4e84-aea8-2d2786e08726", "created": "2026-01-27T05:12:58.310916Z", "modified": "2026-01-27T05:12:58.310916Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberuss']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.310916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03d00f3c-4497-4cc2-9d1b-1a9dc1ebca0c", "created": "2026-01-27T05:12:58.311694Z", "modified": "2026-01-27T05:12:58.311694Z", "relationship_type": "indicates", "source_ref": "indicator--cc9cb8e1-b786-4e84-aea8-2d2786e08726", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45cf86a-a6b2-4beb-b4a9-7cd376d92b19", "created": "2026-01-27T05:12:58.311892Z", "modified": "2026-01-27T05:12:58.311892Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.persona']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.311892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29bd6275-c19a-4d24-a871-8fd69ef74f62", "created": "2026-01-27T05:12:58.312559Z", "modified": "2026-01-27T05:12:58.312559Z", "relationship_type": "indicates", "source_ref": "indicator--d45cf86a-a6b2-4beb-b4a9-7cd376d92b19", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96e1395-1a1b-41ce-b09d-220670d72ed6", "created": "2026-01-27T05:12:58.312757Z", "modified": "2026-01-27T05:12:58.312757Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.persona2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.312757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ee11baf-5e30-4e44-bc47-67d90b6cdc67", "created": "2026-01-27T05:12:58.313438Z", "modified": "2026-01-27T05:12:58.313438Z", "relationship_type": "indicates", "source_ref": "indicator--d96e1395-1a1b-41ce-b09d-220670d72ed6", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f5539f-7284-4e4d-869d-7722843fa4a6", "created": "2026-01-27T05:12:58.313615Z", "modified": "2026-01-27T05:12:58.313615Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.kids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.313615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dfa7e26-531d-4216-ad89-fd1638b606f7", "created": "2026-01-27T05:12:58.314296Z", "modified": "2026-01-27T05:12:58.314296Z", "relationship_type": "indicates", "source_ref": "indicator--e6f5539f-7284-4e4d-869d-7722843fa4a6", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a59942-6611-4e1a-9554-27d83726cfef", "created": "2026-01-27T05:12:58.314472Z", "modified": "2026-01-27T05:12:58.314472Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.314472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d62748b-833d-4b74-b44f-37c4f382635f", "created": "2026-01-27T05:12:58.315167Z", "modified": "2026-01-27T05:12:58.315167Z", "relationship_type": "indicates", "source_ref": "indicator--58a59942-6611-4e1a-9554-27d83726cfef", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777186d9-b955-42d6-823a-12acde6608b4", "created": "2026-01-27T05:12:58.315345Z", "modified": "2026-01-27T05:12:58.315345Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lsdroid.cerberus']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.315345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce53b2d6-a244-4de2-bbe5-67076eaf8438", "created": "2026-01-27T05:12:58.316027Z", "modified": "2026-01-27T05:12:58.316027Z", "relationship_type": "indicates", "source_ref": "indicator--777186d9-b955-42d6-823a-12acde6608b4", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ae7ebd-603d-4e10-a977-8b7f90cbc25c", "created": "2026-01-27T05:12:58.316204Z", "modified": "2026-01-27T05:12:58.316204Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.surebrec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.316204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1fd1784-e0b0-4c90-a575-42a1106b5dff", "created": "2026-01-27T05:12:58.316865Z", "modified": "2026-01-27T05:12:58.316865Z", "relationship_type": "indicates", "source_ref": "indicator--b6ae7ebd-603d-4e10-a977-8b7f90cbc25c", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ddb2d2-b7e1-40b7-8705-c69ce0d473d1", "created": "2026-01-27T05:12:58.317041Z", "modified": "2026-01-27T05:12:58.317041Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ssurebrec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.317041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40dfd1f3-72cb-4b76-a44b-ad229ef5c9ec", "created": "2026-01-27T05:12:58.317696Z", "modified": "2026-01-27T05:12:58.317696Z", "relationship_type": "indicates", "source_ref": "indicator--16ddb2d2-b7e1-40b7-8705-c69ce0d473d1", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe14a84-43c5-4790-b6ca-98607637efb9", "created": "2026-01-27T05:12:58.317893Z", "modified": "2026-01-27T05:12:58.317893Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BC693B48B7EC988E275CF9E1CDAA1447A31717D9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.317893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc4a3d6d-def4-44fa-a0ae-4d454e4d29bf", "created": "2026-01-27T05:12:58.318664Z", "modified": "2026-01-27T05:12:58.318664Z", "relationship_type": "indicates", "source_ref": "indicator--9fe14a84-43c5-4790-b6ca-98607637efb9", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f56e4e-2647-4bb1-9c0b-9c1595c6da7f", "created": "2026-01-27T05:12:58.318857Z", "modified": "2026-01-27T05:12:58.318857Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='724C6500F11737C12C0B89185A60427989656697']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.318857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28bac013-4c16-40d2-b17b-930ed41f665c", "created": "2026-01-27T05:12:58.319755Z", "modified": "2026-01-27T05:12:58.319755Z", "relationship_type": "indicates", "source_ref": "indicator--83f56e4e-2647-4bb1-9c0b-9c1595c6da7f", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e44751e-bb6a-4041-b59e-19b6f8e7e4ac", "created": "2026-01-27T05:12:58.319935Z", "modified": "2026-01-27T05:12:58.319935Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='69C28343A4D0F2156D7B56AE4616E1386173A047']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.319935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--045185d9-f188-446e-bb0c-c465963ed3d7", "created": "2026-01-27T05:12:58.320704Z", "modified": "2026-01-27T05:12:58.320704Z", "relationship_type": "indicates", "source_ref": "indicator--4e44751e-bb6a-4041-b59e-19b6f8e7e4ac", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba808bd3-7ae4-4b46-9a8a-466c51238d42", "created": "2026-01-27T05:12:58.320898Z", "modified": "2026-01-27T05:12:58.320898Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F2633353631EE72F7B7A7B946FABE1EF0A339041']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.320898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--723615e0-c43e-4139-ab0d-928effed3d34", "created": "2026-01-27T05:12:58.321681Z", "modified": "2026-01-27T05:12:58.321681Z", "relationship_type": "indicates", "source_ref": "indicator--ba808bd3-7ae4-4b46-9a8a-466c51238d42", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5682aa-790b-497a-8e4c-bcd66f861d81", "created": "2026-01-27T05:12:58.321881Z", "modified": "2026-01-27T05:12:58.321881Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B4ED5FA9E2A9176DA53324717A9B10F57191859C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.321881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f76d458b-d63a-4893-beea-2af46aaeb197", "created": "2026-01-27T05:12:58.322657Z", "modified": "2026-01-27T05:12:58.322657Z", "relationship_type": "indicates", "source_ref": "indicator--7e5682aa-790b-497a-8e4c-bcd66f861d81", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69402199-2061-499e-af6d-b287130afcf0", "created": "2026-01-27T05:12:58.322854Z", "modified": "2026-01-27T05:12:58.322854Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='409B589FDEAE073A94D609E2B41A6C0EA952B35A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.322854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a9b315f-b6f5-4dc8-ae67-0491221dd881", "created": "2026-01-27T05:12:58.323631Z", "modified": "2026-01-27T05:12:58.323631Z", "relationship_type": "indicates", "source_ref": "indicator--69402199-2061-499e-af6d-b287130afcf0", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dbcf64-c76f-4dd4-9c73-e54fcd1c0530", "created": "2026-01-27T05:12:58.323824Z", "modified": "2026-01-27T05:12:58.323824Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C87A87F7F5EDE2D279DDA0CCDE55E6AB85549D70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.323824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3402b55-e25f-4f58-ad4f-f643736693d5", "created": "2026-01-27T05:12:58.324591Z", "modified": "2026-01-27T05:12:58.324591Z", "relationship_type": "indicates", "source_ref": "indicator--d9dbcf64-c76f-4dd4-9c73-e54fcd1c0530", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8de9111-4579-40cd-83dd-ce049db6912c", "created": "2026-01-27T05:12:58.324779Z", "modified": "2026-01-27T05:12:58.324779Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='52B12772C6558D6A44A2DAF9E18FFAE48C577CA7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.324779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83f8ccbd-a04e-4fc1-a611-b9efca7780c9", "created": "2026-01-27T05:12:58.32556Z", "modified": "2026-01-27T05:12:58.32556Z", "relationship_type": "indicates", "source_ref": "indicator--c8de9111-4579-40cd-83dd-ce049db6912c", "target_ref": "malware--eb9b8d60-4da4-4973-bb1e-4d54ee26d980"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9996d524-fae1-440b-b78a-541b4106e580", "created": "2026-01-27T05:12:58.325734Z", "modified": "2026-01-27T05:12:58.325734Z", "name": "mSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3982915-4a9f-4ce0-84fb-4814c2913400", "created": "2026-01-27T05:12:58.325928Z", "modified": "2026-01-27T05:12:58.325928Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a-qa3.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.325928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92cd3d8b-bf6e-4840-8a66-97bdc36ced69", "created": "2026-01-27T05:12:58.326604Z", "modified": "2026-01-27T05:12:58.326604Z", "relationship_type": "indicates", "source_ref": "indicator--c3982915-4a9f-4ce0-84fb-4814c2913400", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d095dbd5-7b8e-4a96-8f66-c3f2f0aec651", "created": "2026-01-27T05:12:58.326802Z", "modified": "2026-01-27T05:12:58.326802Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.326802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8137e35b-ae4c-4e65-b47b-347df5becd81", "created": "2026-01-27T05:12:58.327471Z", "modified": "2026-01-27T05:12:58.327471Z", "relationship_type": "indicates", "source_ref": "indicator--d095dbd5-7b8e-4a96-8f66-c3f2f0aec651", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ddcf85-d122-4750-ae25-0046ecf15b2f", "created": "2026-01-27T05:12:58.327645Z", "modified": "2026-01-27T05:12:58.327645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.327645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9906925e-a4f4-456d-8a41-b8ae346b3d94", "created": "2026-01-27T05:12:58.328458Z", "modified": "2026-01-27T05:12:58.328458Z", "relationship_type": "indicates", "source_ref": "indicator--b0ddcf85-d122-4750-ae25-0046ecf15b2f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa9f9b8-7297-4b33-9f3e-556b5a6329f2", "created": "2026-01-27T05:12:58.328635Z", "modified": "2026-01-27T05:12:58.328635Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.328635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98a9f421-a4b5-440b-8fa4-ac5e7b2695b1", "created": "2026-01-27T05:12:58.329312Z", "modified": "2026-01-27T05:12:58.329312Z", "relationship_type": "indicates", "source_ref": "indicator--eaa9f9b8-7297-4b33-9f3e-556b5a6329f2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c71a058-8ba0-4457-aa5f-ff2d6829aec3", "created": "2026-01-27T05:12:58.329485Z", "modified": "2026-01-27T05:12:58.329485Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apiv4.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.329485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fc74de6-1a94-4f90-8d5c-2dd62f236d2d", "created": "2026-01-27T05:12:58.33018Z", "modified": "2026-01-27T05:12:58.33018Z", "relationship_type": "indicates", "source_ref": "indicator--2c71a058-8ba0-4457-aa5f-ff2d6829aec3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f60eec0-2957-43f8-8d6d-3afa203e1f9c", "created": "2026-01-27T05:12:58.330354Z", "modified": "2026-01-27T05:12:58.330354Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='b55y.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.330354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b73f1013-7915-4b17-af32-3622500a0097", "created": "2026-01-27T05:12:58.331033Z", "modified": "2026-01-27T05:12:58.331033Z", "relationship_type": "indicates", "source_ref": "indicator--9f60eec0-2957-43f8-8d6d-3afa203e1f9c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe268a4d-42cb-4f13-85d0-aae2c0958ee6", "created": "2026-01-27T05:12:58.331211Z", "modified": "2026-01-27T05:12:58.331211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bbrp.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.331211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f83429c9-60e2-472b-80ef-26743e10dfe7", "created": "2026-01-27T05:12:58.33189Z", "modified": "2026-01-27T05:12:58.33189Z", "relationship_type": "indicates", "source_ref": "indicator--fe268a4d-42cb-4f13-85d0-aae2c0958ee6", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc674de-b5eb-42e6-a358-1542e257eb81", "created": "2026-01-27T05:12:58.332067Z", "modified": "2026-01-27T05:12:58.332067Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bi.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.332067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dc9a883-cdbb-414e-9680-93491aaa8a1a", "created": "2026-01-27T05:12:58.332729Z", "modified": "2026-01-27T05:12:58.332729Z", "relationship_type": "indicates", "source_ref": "indicator--efc674de-b5eb-42e6-a358-1542e257eb81", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f737b0bf-89e9-4738-9a60-5260e005c9a7", "created": "2026-01-27T05:12:58.332926Z", "modified": "2026-01-27T05:12:58.332926Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.332926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29d1f43e-a200-4737-b5f2-7a1a309a43f1", "created": "2026-01-27T05:12:58.333617Z", "modified": "2026-01-27T05:12:58.333617Z", "relationship_type": "indicates", "source_ref": "indicator--f737b0bf-89e9-4738-9a60-5260e005c9a7", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9d14ef-be70-4075-b8bb-079c42635f39", "created": "2026-01-27T05:12:58.333809Z", "modified": "2026-01-27T05:12:58.333809Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='eyezyapp.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.333809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d49f5bc7-3992-4af4-bdfc-814456a81ee9", "created": "2026-01-27T05:12:58.334494Z", "modified": "2026-01-27T05:12:58.334494Z", "relationship_type": "indicates", "source_ref": "indicator--6f9d14ef-be70-4075-b8bb-079c42635f39", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7356a65a-5957-4427-86cd-f0d6946d4c9d", "created": "2026-01-27T05:12:58.334668Z", "modified": "2026-01-27T05:12:58.334668Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getmspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.334668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34a3a3ac-3029-4030-bfc4-dfd4aa640de4", "created": "2026-01-27T05:12:58.335363Z", "modified": "2026-01-27T05:12:58.335363Z", "relationship_type": "indicates", "source_ref": "indicator--7356a65a-5957-4427-86cd-f0d6946d4c9d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d446ee-c183-4045-89be-52212b24f1f5", "created": "2026-01-27T05:12:58.335538Z", "modified": "2026-01-27T05:12:58.335538Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hz-service.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.335538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--613d1f21-143e-46d1-b8e7-679dec6f6797", "created": "2026-01-27T05:12:58.33658Z", "modified": "2026-01-27T05:12:58.33658Z", "relationship_type": "indicates", "source_ref": "indicator--60d446ee-c183-4045-89be-52212b24f1f5", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e596e1-5f18-4372-ae34-67860e56025f", "created": "2026-01-27T05:12:58.336776Z", "modified": "2026-01-27T05:12:58.336776Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hz7.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.336776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bda6db44-086a-4cf8-810a-b5621d6d88b0", "created": "2026-01-27T05:12:58.337443Z", "modified": "2026-01-27T05:12:58.337443Z", "relationship_type": "indicates", "source_ref": "indicator--c7e596e1-5f18-4372-ae34-67860e56025f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258fec38-cbae-4629-9fcb-a81d674ebe02", "created": "2026-01-27T05:12:58.33762Z", "modified": "2026-01-27T05:12:58.33762Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='idevs.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.33762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74546bd6-860b-481d-b0cd-b4652dfd9917", "created": "2026-01-27T05:12:58.338297Z", "modified": "2026-01-27T05:12:58.338297Z", "relationship_type": "indicates", "source_ref": "indicator--258fec38-cbae-4629-9fcb-a81d674ebe02", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa5916b-c2f1-491a-b74d-80e1fda23124", "created": "2026-01-27T05:12:58.338476Z", "modified": "2026-01-27T05:12:58.338476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='jailbreak-gateway.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.338476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--857f4d9e-6e99-4b16-a93c-05a9795199a3", "created": "2026-01-27T05:12:58.339304Z", "modified": "2026-01-27T05:12:58.339304Z", "relationship_type": "indicates", "source_ref": "indicator--daa5916b-c2f1-491a-b74d-80e1fda23124", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bcdd6a-6249-4c43-ab1b-d2a64046e1b6", "created": "2026-01-27T05:12:58.339488Z", "modified": "2026-01-27T05:12:58.339488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kypler.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.339488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--691513e8-51d9-47c7-b61f-14ca62b32ecc", "created": "2026-01-27T05:12:58.340177Z", "modified": "2026-01-27T05:12:58.340177Z", "relationship_type": "indicates", "source_ref": "indicator--12bcdd6a-6249-4c43-ab1b-d2a64046e1b6", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f508f89-7bdf-43d7-a62d-d698ab903236", "created": "2026-01-27T05:12:58.340358Z", "modified": "2026-01-27T05:12:58.340358Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m-media.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.340358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--281f6f17-1de2-4dca-b9f1-80a155484db4", "created": "2026-01-27T05:12:58.341045Z", "modified": "2026-01-27T05:12:58.341045Z", "relationship_type": "indicates", "source_ref": "indicator--0f508f89-7bdf-43d7-a62d-d698ab903236", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5409087a-a5ab-470d-a4ea-4d7e48160ac1", "created": "2026-01-27T05:12:58.341224Z", "modified": "2026-01-27T05:12:58.341224Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mcloud-api.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.341224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f75f9e5-94de-4d5c-8282-92ecd6803ad9", "created": "2026-01-27T05:12:58.341911Z", "modified": "2026-01-27T05:12:58.341911Z", "relationship_type": "indicates", "source_ref": "indicator--5409087a-a5ab-470d-a4ea-4d7e48160ac1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f65842-6de9-4e3a-8ea7-c5795273981b", "created": "2026-01-27T05:12:58.342087Z", "modified": "2026-01-27T05:12:58.342087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mi.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.342087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0985865e-cac9-4b28-bed4-4e2614de1c74", "created": "2026-01-27T05:12:58.342777Z", "modified": "2026-01-27T05:12:58.342777Z", "relationship_type": "indicates", "source_ref": "indicator--c1f65842-6de9-4e3a-8ea7-c5795273981b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edffc756-171c-4c87-91a1-65663d8711b6", "created": "2026-01-27T05:12:58.342957Z", "modified": "2026-01-27T05:12:58.342957Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mlite-app.livekit.cloud']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.342957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--738b40f5-98bb-4551-b74e-03a41951cec9", "created": "2026-01-27T05:12:58.343643Z", "modified": "2026-01-27T05:12:58.343643Z", "relationship_type": "indicates", "source_ref": "indicator--edffc756-171c-4c87-91a1-65663d8711b6", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813bcbbb-2208-451a-9d75-e943a614f9cf", "created": "2026-01-27T05:12:58.343838Z", "modified": "2026-01-27T05:12:58.343838Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mlite-app.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.343838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f063a84d-337e-43cc-b7da-788cb8a6e331", "created": "2026-01-27T05:12:58.344515Z", "modified": "2026-01-27T05:12:58.344515Z", "relationship_type": "indicates", "source_ref": "indicator--813bcbbb-2208-451a-9d75-e943a614f9cf", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d62b55-6f8d-49b4-95b6-5e7d7121d8b2", "created": "2026-01-27T05:12:58.344698Z", "modified": "2026-01-27T05:12:58.344698Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mlite-socket.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.344698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c48d8786-9f07-486f-a9f3-c12c3c3d81df", "created": "2026-01-27T05:12:58.361835Z", "modified": "2026-01-27T05:12:58.361835Z", "relationship_type": "indicates", "source_ref": "indicator--89d62b55-6f8d-49b4-95b6-5e7d7121d8b2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06fd561-c4ab-46e1-979f-19b1eb119719", "created": "2026-01-27T05:12:58.362063Z", "modified": "2026-01-27T05:12:58.362063Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mliteapp.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.362063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8e7afc7-35c4-47c4-938c-73b48f547b9a", "created": "2026-01-27T05:12:58.362797Z", "modified": "2026-01-27T05:12:58.362797Z", "relationship_type": "indicates", "source_ref": "indicator--a06fd561-c4ab-46e1-979f-19b1eb119719", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55937fa-8445-4680-97ed-ec07aede3fd0", "created": "2026-01-27T05:12:58.362985Z", "modified": "2026-01-27T05:12:58.362985Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-gw.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.362985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96a139b2-ed64-4d3d-938e-3347604e0862", "created": "2026-01-27T05:12:58.363663Z", "modified": "2026-01-27T05:12:58.363663Z", "relationship_type": "indicates", "source_ref": "indicator--d55937fa-8445-4680-97ed-ec07aede3fd0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8f6bf6-4716-4fce-a75c-8d527ac6f7a2", "created": "2026-01-27T05:12:58.363862Z", "modified": "2026-01-27T05:12:58.363862Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.363862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbe8c23c-a620-4541-b263-1d88df93ebc1", "created": "2026-01-27T05:12:58.364539Z", "modified": "2026-01-27T05:12:58.364539Z", "relationship_type": "indicates", "source_ref": "indicator--5b8f6bf6-4716-4fce-a75c-8d527ac6f7a2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13acb7e-23cc-47b9-8c13-8ee32f102f75", "created": "2026-01-27T05:12:58.364718Z", "modified": "2026-01-27T05:12:58.364718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.364718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3effc283-897d-41d9-81a1-05c4b9b4bb87", "created": "2026-01-27T05:12:58.365417Z", "modified": "2026-01-27T05:12:58.365417Z", "relationship_type": "indicates", "source_ref": "indicator--b13acb7e-23cc-47b9-8c13-8ee32f102f75", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e434e16b-f4b3-40fa-a15d-49e97514eb8f", "created": "2026-01-27T05:12:58.365598Z", "modified": "2026-01-27T05:12:58.365598Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspytrackercom.alter757.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.365598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9abd7863-7b51-4aab-be50-44dc2f7e1cef", "created": "2026-01-27T05:12:58.366312Z", "modified": "2026-01-27T05:12:58.366312Z", "relationship_type": "indicates", "source_ref": "indicator--e434e16b-f4b3-40fa-a15d-49e97514eb8f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754e2532-7aa4-4c63-9546-0e53e66fefc5", "created": "2026-01-27T05:12:58.366489Z", "modified": "2026-01-27T05:12:58.366489Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtechn.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.366489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e19ca60-4b3a-4d13-88cf-848afa003547", "created": "2026-01-27T05:12:58.367189Z", "modified": "2026-01-27T05:12:58.367189Z", "relationship_type": "indicates", "source_ref": "indicator--754e2532-7aa4-4c63-9546-0e53e66fefc5", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0304412d-ca8c-4b74-90be-9a0e397c46c1", "created": "2026-01-27T05:12:58.367368Z", "modified": "2026-01-27T05:12:58.367368Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.kidsecured.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.367368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1ef1ed9-a6ee-4291-bb21-b157a08b4e73", "created": "2026-01-27T05:12:58.36818Z", "modified": "2026-01-27T05:12:58.36818Z", "relationship_type": "indicates", "source_ref": "indicator--0304412d-ca8c-4b74-90be-9a0e397c46c1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e704167-29b5-4299-9c9f-0126d275f727", "created": "2026-01-27T05:12:58.368362Z", "modified": "2026-01-27T05:12:58.368362Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.368362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25dd39ba-024f-4d4a-82e2-4d1a5f224b85", "created": "2026-01-27T05:12:58.369087Z", "modified": "2026-01-27T05:12:58.369087Z", "relationship_type": "indicates", "source_ref": "indicator--3e704167-29b5-4299-9c9f-0126d275f727", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9d3466-e421-49ea-9c32-22822e566061", "created": "2026-01-27T05:12:58.369275Z", "modified": "2026-01-27T05:12:58.369275Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.phonsee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.369275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cedf4a1-f39d-4fcf-9f33-86113e22d13b", "created": "2026-01-27T05:12:58.369962Z", "modified": "2026-01-27T05:12:58.369962Z", "relationship_type": "indicates", "source_ref": "indicator--2b9d3466-e421-49ea-9c32-22822e566061", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71dfcd88-6443-44ef-b283-7f66fe0daef1", "created": "2026-01-27T05:12:58.370142Z", "modified": "2026-01-27T05:12:58.370142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.securechildren.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.370142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81252edc-8567-4081-b91a-305d7fde5d78", "created": "2026-01-27T05:12:58.370836Z", "modified": "2026-01-27T05:12:58.370836Z", "relationship_type": "indicates", "source_ref": "indicator--71dfcd88-6443-44ef-b283-7f66fe0daef1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea0b4db-d474-476d-aaa1-2958728cb823", "created": "2026-01-27T05:12:58.371013Z", "modified": "2026-01-27T05:12:58.371013Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pipe.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.371013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7653639d-60ce-473f-82e5-be03054d7c7a", "created": "2026-01-27T05:12:58.371666Z", "modified": "2026-01-27T05:12:58.371666Z", "relationship_type": "indicates", "source_ref": "indicator--1ea0b4db-d474-476d-aaa1-2958728cb823", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a81abd0-7b42-43c9-a739-d501d8b57e66", "created": "2026-01-27T05:12:58.371855Z", "modified": "2026-01-27T05:12:58.371855Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='project-323448153542050953.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.371855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7ddf144-f8d4-49f7-82f7-b58b54c3bdf4", "created": "2026-01-27T05:12:58.372554Z", "modified": "2026-01-27T05:12:58.372554Z", "relationship_type": "indicates", "source_ref": "indicator--1a81abd0-7b42-43c9-a739-d501d8b57e66", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499f52f0-04af-4e5c-a82e-3804f5b097df", "created": "2026-01-27T05:12:58.372731Z", "modified": "2026-01-27T05:12:58.372731Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='q12z.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.372731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e03ccfe1-7e75-49ca-8f58-1d040b4741aa", "created": "2026-01-27T05:12:58.37351Z", "modified": "2026-01-27T05:12:58.37351Z", "relationship_type": "indicates", "source_ref": "indicator--499f52f0-04af-4e5c-a82e-3804f5b097df", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3829b6-cd3c-4491-957b-cbaa91c791b3", "created": "2026-01-27T05:12:58.373689Z", "modified": "2026-01-27T05:12:58.373689Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='repo.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.373689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eed6a739-50b1-46ce-8f20-376e8584c5ad", "created": "2026-01-27T05:12:58.374388Z", "modified": "2026-01-27T05:12:58.374388Z", "relationship_type": "indicates", "source_ref": "indicator--1c3829b6-cd3c-4491-957b-cbaa91c791b3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7162a9a-512c-4364-9d05-8036b561b6c8", "created": "2026-01-27T05:12:58.374562Z", "modified": "2026-01-27T05:12:58.374562Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rockalab.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.374562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e250666e-4ff2-49ef-bd88-76730b9fd0fd", "created": "2026-01-27T05:12:58.375252Z", "modified": "2026-01-27T05:12:58.375252Z", "relationship_type": "indicates", "source_ref": "indicator--a7162a9a-512c-4364-9d05-8036b561b6c8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b6d7dd-ed0c-4ec9-ae7d-65792ef837e3", "created": "2026-01-27T05:12:58.375428Z", "modified": "2026-01-27T05:12:58.375428Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s3.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.375428Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5ea876-bfd9-4df0-829a-b3fd6cd06179", "created": "2026-01-27T05:12:58.376217Z", "modified": "2026-01-27T05:12:58.376217Z", "relationship_type": "indicates", "source_ref": "indicator--78b6d7dd-ed0c-4ec9-ae7d-65792ef837e3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5ba16f-f8cf-4f45-9500-9dbe92db3afd", "created": "2026-01-27T05:12:58.376396Z", "modified": "2026-01-27T05:12:58.376396Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-01.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.376396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67edaa17-de47-42b1-be12-4f1a342f3245", "created": "2026-01-27T05:12:58.37708Z", "modified": "2026-01-27T05:12:58.37708Z", "relationship_type": "indicates", "source_ref": "indicator--5e5ba16f-f8cf-4f45-9500-9dbe92db3afd", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c08056-ebf9-4de8-aded-98220a49e435", "created": "2026-01-27T05:12:58.377256Z", "modified": "2026-01-27T05:12:58.377256Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-02.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.377256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95604d2c-590b-4132-bb81-2f1d854e9baa", "created": "2026-01-27T05:12:58.377941Z", "modified": "2026-01-27T05:12:58.377941Z", "relationship_type": "indicates", "source_ref": "indicator--44c08056-ebf9-4de8-aded-98220a49e435", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe58d24-9f69-4f58-ad2f-460dc66351d4", "created": "2026-01-27T05:12:58.378117Z", "modified": "2026-01-27T05:12:58.378117Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-03.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.378117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88a5939f-0ee1-4bda-82a0-7a4b83a16214", "created": "2026-01-27T05:12:58.378793Z", "modified": "2026-01-27T05:12:58.378793Z", "relationship_type": "indicates", "source_ref": "indicator--bfe58d24-9f69-4f58-ad2f-460dc66351d4", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c505f4-533c-4193-b55a-57a076a729da", "created": "2026-01-27T05:12:58.37897Z", "modified": "2026-01-27T05:12:58.37897Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-04.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.37897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--decf6e72-73a1-4c8a-a5b4-83a5e5b09ac3", "created": "2026-01-27T05:12:58.37963Z", "modified": "2026-01-27T05:12:58.37963Z", "relationship_type": "indicates", "source_ref": "indicator--93c505f4-533c-4193-b55a-57a076a729da", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e5e7b8-bcde-4c38-b2de-1fccccdc3105", "created": "2026-01-27T05:12:58.379822Z", "modified": "2026-01-27T05:12:58.379822Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-05.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.379822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5832470-5cf6-480c-9888-1a3a903ca663", "created": "2026-01-27T05:12:58.380482Z", "modified": "2026-01-27T05:12:58.380482Z", "relationship_type": "indicates", "source_ref": "indicator--42e5e7b8-bcde-4c38-b2de-1fccccdc3105", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e133bef3-1994-4b39-aec6-baf24fea5c1b", "created": "2026-01-27T05:12:58.380654Z", "modified": "2026-01-27T05:12:58.380654Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-06.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.380654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe09c979-3d0a-45ce-8653-54a532bce5e1", "created": "2026-01-27T05:12:58.38136Z", "modified": "2026-01-27T05:12:58.38136Z", "relationship_type": "indicates", "source_ref": "indicator--e133bef3-1994-4b39-aec6-baf24fea5c1b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2210c92-bb73-4838-b6f4-5c02572645a6", "created": "2026-01-27T05:12:58.381535Z", "modified": "2026-01-27T05:12:58.381535Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-07.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.381535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--499537e5-25a4-4128-8557-4c8e56454a10", "created": "2026-01-27T05:12:58.382218Z", "modified": "2026-01-27T05:12:58.382218Z", "relationship_type": "indicates", "source_ref": "indicator--d2210c92-bb73-4838-b6f4-5c02572645a6", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3784e0b-36c2-4b8f-afaf-bc0bee182e4e", "created": "2026-01-27T05:12:58.382401Z", "modified": "2026-01-27T05:12:58.382401Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentry-product-new.bbrp.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.382401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10616b1b-a938-4909-a87f-a48f6b7a4c70", "created": "2026-01-27T05:12:58.383105Z", "modified": "2026-01-27T05:12:58.383105Z", "relationship_type": "indicates", "source_ref": "indicator--b3784e0b-36c2-4b8f-afaf-bc0bee182e4e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204d49ff-8f27-4f16-ba48-82df5e6a2c73", "created": "2026-01-27T05:12:58.38328Z", "modified": "2026-01-27T05:12:58.38328Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.38328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c9bd4da-c362-486a-88be-4a842f032af8", "created": "2026-01-27T05:12:58.384061Z", "modified": "2026-01-27T05:12:58.384061Z", "relationship_type": "indicates", "source_ref": "indicator--204d49ff-8f27-4f16-ba48-82df5e6a2c73", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aaf186-7846-4136-aba3-629dc97e903d", "created": "2026-01-27T05:12:58.384244Z", "modified": "2026-01-27T05:12:58.384244Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracking.mliteapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.384244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8c8442b-f8f7-409d-bc67-d23c3d4b1186", "created": "2026-01-27T05:12:58.384935Z", "modified": "2026-01-27T05:12:58.384935Z", "relationship_type": "indicates", "source_ref": "indicator--d4aaf186-7846-4136-aba3-629dc97e903d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d293e94c-88b2-47ed-90d9-b441b7216b69", "created": "2026-01-27T05:12:58.385111Z", "modified": "2026-01-27T05:12:58.385111Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracking.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.385111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eae3978e-020b-41b8-8781-188e1290ce44", "created": "2026-01-27T05:12:58.385811Z", "modified": "2026-01-27T05:12:58.385811Z", "relationship_type": "indicates", "source_ref": "indicator--d293e94c-88b2-47ed-90d9-b441b7216b69", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087fe46b-2dea-4d38-a45c-4339e81caa0c", "created": "2026-01-27T05:12:58.385991Z", "modified": "2026-01-27T05:12:58.385991Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='update-service-7e59f.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.385991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7334c43-d6cd-448b-b10d-5641f323e4a9", "created": "2026-01-27T05:12:58.386692Z", "modified": "2026-01-27T05:12:58.386692Z", "relationship_type": "indicates", "source_ref": "indicator--087fe46b-2dea-4d38-a45c-4339e81caa0c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0276d67a-e4dc-4e17-a0a7-8bbeae321e1c", "created": "2026-01-27T05:12:58.386886Z", "modified": "2026-01-27T05:12:58.386886Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webrtc.thd.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.386886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ac20776-94ea-46b4-99ae-f4b164c9f020", "created": "2026-01-27T05:12:58.387555Z", "modified": "2026-01-27T05:12:58.387555Z", "relationship_type": "indicates", "source_ref": "indicator--0276d67a-e4dc-4e17-a0a7-8bbeae321e1c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8815af-5c52-421c-a88a-66f6af41225c", "created": "2026-01-27T05:12:58.387728Z", "modified": "2026-01-27T05:12:58.387728Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.387728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39916db0-8a96-47b5-b2bf-bd26600c0968", "created": "2026-01-27T05:12:58.38841Z", "modified": "2026-01-27T05:12:58.38841Z", "relationship_type": "indicates", "source_ref": "indicator--2b8815af-5c52-421c-a88a-66f6af41225c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7450bb-afa9-4f17-aede-bb2b4fd4ea36", "created": "2026-01-27T05:12:58.388583Z", "modified": "2026-01-27T05:12:58.388583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.388583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53d13032-9581-4ffa-aaad-016a958601fc", "created": "2026-01-27T05:12:58.389275Z", "modified": "2026-01-27T05:12:58.389275Z", "relationship_type": "indicates", "source_ref": "indicator--3a7450bb-afa9-4f17-aede-bb2b4fd4ea36", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9312da39-8978-4fb3-b7c3-93668807d2d8", "created": "2026-01-27T05:12:58.389451Z", "modified": "2026-01-27T05:12:58.389451Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bill-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.389451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce6e5d90-0f68-41a2-b6fc-f64369eeb156", "created": "2026-01-27T05:12:58.390127Z", "modified": "2026-01-27T05:12:58.390127Z", "relationship_type": "indicates", "source_ref": "indicator--9312da39-8978-4fb3-b7c3-93668807d2d8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad292cd-a790-4740-a054-c2f202f71a3e", "created": "2026-01-27T05:12:58.390298Z", "modified": "2026-01-27T05:12:58.390298Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cart.mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.390298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c2a44ac-3188-482b-865a-8fc2bedfe188", "created": "2026-01-27T05:12:58.390971Z", "modified": "2026-01-27T05:12:58.390971Z", "relationship_type": "indicates", "source_ref": "indicator--bad292cd-a790-4740-a054-c2f202f71a3e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f789134-36c0-4336-a1e7-3ab61dc387d3", "created": "2026-01-27T05:12:58.391143Z", "modified": "2026-01-27T05:12:58.391143Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ctrl-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.391143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df082912-edd8-4a02-af9d-a5eda153be85", "created": "2026-01-27T05:12:58.391923Z", "modified": "2026-01-27T05:12:58.391923Z", "relationship_type": "indicates", "source_ref": "indicator--4f789134-36c0-4336-a1e7-3ab61dc387d3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9ccf6f-0c5d-47be-82f0-a97d3b58c3db", "created": "2026-01-27T05:12:58.3921Z", "modified": "2026-01-27T05:12:58.3921Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freefonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.3921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccd53eda-1615-4a33-81e0-5d4f9214f5ad", "created": "2026-01-27T05:12:58.392783Z", "modified": "2026-01-27T05:12:58.392783Z", "relationship_type": "indicates", "source_ref": "indicator--9a9ccf6f-0c5d-47be-82f0-a97d3b58c3db", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b536d1-374e-4b71-b1fe-d1c67cc589e0", "created": "2026-01-27T05:12:58.392959Z", "modified": "2026-01-27T05:12:58.392959Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsecured.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.392959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5044fa00-125c-4c9e-9723-5f2d49b6536c", "created": "2026-01-27T05:12:58.393617Z", "modified": "2026-01-27T05:12:58.393617Z", "relationship_type": "indicates", "source_ref": "indicator--46b536d1-374e-4b71-b1fe-d1c67cc589e0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09d5b32-17e6-450c-85f1-5c1198736d95", "created": "2026-01-27T05:12:58.393808Z", "modified": "2026-01-27T05:12:58.393808Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m-services.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.393808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3392e9fc-9036-4ce7-a394-e6af3673af71", "created": "2026-01-27T05:12:58.394463Z", "modified": "2026-01-27T05:12:58.394463Z", "relationship_type": "indicates", "source_ref": "indicator--f09d5b32-17e6-450c-85f1-5c1198736d95", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e140686-3b0f-42b0-8937-3aff55e59a70", "created": "2026-01-27T05:12:58.394635Z", "modified": "2026-01-27T05:12:58.394635Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mbill.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.394635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e293d8c-ae2e-4dd8-a8c5-1e06fb64c495", "created": "2026-01-27T05:12:58.395312Z", "modified": "2026-01-27T05:12:58.395312Z", "relationship_type": "indicates", "source_ref": "indicator--0e140686-3b0f-42b0-8937-3aff55e59a70", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4adeefd-0c89-412d-9669-9b1393fd08eb", "created": "2026-01-27T05:12:58.395492Z", "modified": "2026-01-27T05:12:58.395492Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mcontrolapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.395492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5244772e-c6ae-410d-a2f1-21173fa04feb", "created": "2026-01-27T05:12:58.396173Z", "modified": "2026-01-27T05:12:58.396173Z", "relationship_type": "indicates", "source_ref": "indicator--b4adeefd-0c89-412d-9669-9b1393fd08eb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b07edb-be1c-4482-9ac1-cca99b22b6ca", "created": "2026-01-27T05:12:58.396347Z", "modified": "2026-01-27T05:12:58.396347Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mkid.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.396347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f85ec35f-d66c-4c43-994d-30995b302eb9", "created": "2026-01-27T05:12:58.397037Z", "modified": "2026-01-27T05:12:58.397037Z", "relationship_type": "indicates", "source_ref": "indicator--78b07edb-be1c-4482-9ac1-cca99b22b6ca", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e008b8-6605-49cf-9672-01a8b27ad61a", "created": "2026-01-27T05:12:58.397209Z", "modified": "2026-01-27T05:12:58.397209Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mkidctrl.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.397209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a12886c-ea17-472d-bfff-027c7976f9d7", "created": "2026-01-27T05:12:58.397876Z", "modified": "2026-01-27T05:12:58.397876Z", "relationship_type": "indicates", "source_ref": "indicator--31e008b8-6605-49cf-9672-01a8b27ad61a", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c26b7c9-afb3-478e-b55a-547a3e086b76", "created": "2026-01-27T05:12:58.398054Z", "modified": "2026-01-27T05:12:58.398054Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mkidsecure.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.398054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84c9ccad-5c0e-4ad2-86f7-303268f4441e", "created": "2026-01-27T05:12:58.398716Z", "modified": "2026-01-27T05:12:58.398716Z", "relationship_type": "indicates", "source_ref": "indicator--1c26b7c9-afb3-478e-b55a-547a3e086b76", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0b0c7d-9a41-4a95-b4ad-d7c3ca9a74e2", "created": "2026-01-27T05:12:58.398908Z", "modified": "2026-01-27T05:12:58.398908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mliteapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.398908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed8df763-97e1-4be9-987a-04d38df3ae48", "created": "2026-01-27T05:12:58.399692Z", "modified": "2026-01-27T05:12:58.399692Z", "relationship_type": "indicates", "source_ref": "indicator--8c0b0c7d-9a41-4a95-b4ad-d7c3ca9a74e2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcafd1fc-8146-4588-ac68-2674eacbade2", "created": "2026-01-27T05:12:58.399887Z", "modified": "2026-01-27T05:12:58.399887Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mpotect.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.399887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6436ea0-62cd-4f21-8e10-bda7d7d676fc", "created": "2026-01-27T05:12:58.400541Z", "modified": "2026-01-27T05:12:58.400541Z", "relationship_type": "indicates", "source_ref": "indicator--bcafd1fc-8146-4588-ac68-2674eacbade2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e56de31-b335-40ed-8c8f-09cdeebb33f2", "created": "2026-01-27T05:12:58.400714Z", "modified": "2026-01-27T05:12:58.400714Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msafety.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.400714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--973b7484-9e76-4e09-91ac-0cb908ab8ce8", "created": "2026-01-27T05:12:58.401399Z", "modified": "2026-01-27T05:12:58.401399Z", "relationship_type": "indicates", "source_ref": "indicator--3e56de31-b335-40ed-8c8f-09cdeebb33f2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29048849-af65-406a-8969-0a99e14ee2d4", "created": "2026-01-27T05:12:58.401575Z", "modified": "2026-01-27T05:12:58.401575Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msecureapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.401575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b2bc425-e243-4c2d-8952-3499673450cb", "created": "2026-01-27T05:12:58.402252Z", "modified": "2026-01-27T05:12:58.402252Z", "relationship_type": "indicates", "source_ref": "indicator--29048849-af65-406a-8969-0a99e14ee2d4", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4ab6c7-4d17-4df4-9614-2b4d41ceb5f1", "created": "2026-01-27T05:12:58.402429Z", "modified": "2026-01-27T05:12:58.402429Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msp-control.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.402429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73b8e2a8-581c-4ce4-a5f9-77ba4c601a5b", "created": "2026-01-27T05:12:58.403111Z", "modified": "2026-01-27T05:12:58.403111Z", "relationship_type": "indicates", "source_ref": "indicator--9c4ab6c7-4d17-4df4-9614-2b4d41ceb5f1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2011007-9f9f-4ffa-9f7f-9f89fa41e732", "created": "2026-01-27T05:12:58.403288Z", "modified": "2026-01-27T05:12:58.403288Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspkid.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.403288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d940c4ed-bc14-40aa-bb58-5c3eaddd5f9f", "created": "2026-01-27T05:12:58.40398Z", "modified": "2026-01-27T05:12:58.40398Z", "relationship_type": "indicates", "source_ref": "indicator--f2011007-9f9f-4ffa-9f7f-9f89fa41e732", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b62180-bb85-4285-ae14-d09a4f16a53d", "created": "2026-01-27T05:12:58.404155Z", "modified": "2026-01-27T05:12:58.404155Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.co.il']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.404155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a6571b4-2ad9-4fc3-8602-29f63efb9ac5", "created": "2026-01-27T05:12:58.404816Z", "modified": "2026-01-27T05:12:58.404816Z", "relationship_type": "indicates", "source_ref": "indicator--16b62180-bb85-4285-ae14-d09a4f16a53d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a5f3da-879c-4dbe-b2a6-d2bf4a9673cb", "created": "2026-01-27T05:12:58.40499Z", "modified": "2026-01-27T05:12:58.40499Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.co.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.40499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d45dfd71-2a29-48e9-a204-c34382f8f96b", "created": "2026-01-27T05:12:58.405652Z", "modified": "2026-01-27T05:12:58.405652Z", "relationship_type": "indicates", "source_ref": "indicator--27a5f3da-879c-4dbe-b2a6-d2bf4a9673cb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8320d91-4c37-40b0-887b-a044bfd42821", "created": "2026-01-27T05:12:58.405846Z", "modified": "2026-01-27T05:12:58.405846Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.405846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7968c212-b2ec-4f94-8bd3-28b96f15d677", "created": "2026-01-27T05:12:58.406514Z", "modified": "2026-01-27T05:12:58.406514Z", "relationship_type": "indicates", "source_ref": "indicator--b8320d91-4c37-40b0-887b-a044bfd42821", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4604e8bd-9a87-4cc5-bcf3-793f471fa6d3", "created": "2026-01-27T05:12:58.406691Z", "modified": "2026-01-27T05:12:58.406691Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.ar']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.406691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b709584-163e-4025-81b2-6def7c442ee0", "created": "2026-01-27T05:12:58.407467Z", "modified": "2026-01-27T05:12:58.407467Z", "relationship_type": "indicates", "source_ref": "indicator--4604e8bd-9a87-4cc5-bcf3-793f471fa6d3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2319a1-3832-49c8-a126-17ed340903a3", "created": "2026-01-27T05:12:58.407641Z", "modified": "2026-01-27T05:12:58.407641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.407641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb2feeb2-131b-48b8-8a0b-7db3fd09a845", "created": "2026-01-27T05:12:58.40831Z", "modified": "2026-01-27T05:12:58.40831Z", "relationship_type": "indicates", "source_ref": "indicator--8d2319a1-3832-49c8-a126-17ed340903a3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fb55d0-1cf2-4023-abcc-255b5ec8edb8", "created": "2026-01-27T05:12:58.408482Z", "modified": "2026-01-27T05:12:58.408482Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.408482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--355a9590-9459-4231-9e78-249a5f0f6805", "created": "2026-01-27T05:12:58.409155Z", "modified": "2026-01-27T05:12:58.409155Z", "relationship_type": "indicates", "source_ref": "indicator--43fb55d0-1cf2-4023-abcc-255b5ec8edb8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3748965d-131c-4488-a582-b723af2624ce", "created": "2026-01-27T05:12:58.409329Z", "modified": "2026-01-27T05:12:58.409329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.com.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.409329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df8ec8d7-ac0b-478e-aedd-d6917d60dbb7", "created": "2026-01-27T05:12:58.410002Z", "modified": "2026-01-27T05:12:58.410002Z", "relationship_type": "indicates", "source_ref": "indicator--3748965d-131c-4488-a582-b723af2624ce", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325d7343-43f0-4f28-9e17-dfbab5664e3c", "created": "2026-01-27T05:12:58.410176Z", "modified": "2026-01-27T05:12:58.410176Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.410176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5013b03e-05d2-4e81-8de4-35c05c181316", "created": "2026-01-27T05:12:58.41084Z", "modified": "2026-01-27T05:12:58.41084Z", "relationship_type": "indicates", "source_ref": "indicator--325d7343-43f0-4f28-9e17-dfbab5664e3c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3964eec6-2c18-4fb8-a814-690f2dff4080", "created": "2026-01-27T05:12:58.411014Z", "modified": "2026-01-27T05:12:58.411014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.411014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c340de1-044e-4683-b17b-91bd2c8ac17f", "created": "2026-01-27T05:12:58.411661Z", "modified": "2026-01-27T05:12:58.411661Z", "relationship_type": "indicates", "source_ref": "indicator--3964eec6-2c18-4fb8-a814-690f2dff4080", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbc40bd-9fe0-44de-8b1f-5c122a516da0", "created": "2026-01-27T05:12:58.411853Z", "modified": "2026-01-27T05:12:58.411853Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.411853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1fb8c33-3f9c-44bd-a121-e9d3ebf5b96e", "created": "2026-01-27T05:12:58.412518Z", "modified": "2026-01-27T05:12:58.412518Z", "relationship_type": "indicates", "source_ref": "indicator--bfbc40bd-9fe0-44de-8b1f-5c122a516da0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c02dcf-7862-48c4-a330-bbd6bb920013", "created": "2026-01-27T05:12:58.412696Z", "modified": "2026-01-27T05:12:58.412696Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.jp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.412696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--014bd1fd-59d4-4c79-803c-d537ea0a94e6", "created": "2026-01-27T05:12:58.413375Z", "modified": "2026-01-27T05:12:58.413375Z", "relationship_type": "indicates", "source_ref": "indicator--f8c02dcf-7862-48c4-a330-bbd6bb920013", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c39515-ee9a-4c60-bfcf-fa813da6d03e", "created": "2026-01-27T05:12:58.413549Z", "modified": "2026-01-27T05:12:58.413549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.413549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39e44372-dcef-4fe5-9f07-f479287394d8", "created": "2026-01-27T05:12:58.414213Z", "modified": "2026-01-27T05:12:58.414213Z", "relationship_type": "indicates", "source_ref": "indicator--63c39515-ee9a-4c60-bfcf-fa813da6d03e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b423cf72-4493-41b9-9587-df3d98b13f6b", "created": "2026-01-27T05:12:58.414386Z", "modified": "2026-01-27T05:12:58.414386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.nl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.414386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb09737c-74ed-4712-addf-0a4c2d25cb4e", "created": "2026-01-27T05:12:58.41517Z", "modified": "2026-01-27T05:12:58.41517Z", "relationship_type": "indicates", "source_ref": "indicator--b423cf72-4493-41b9-9587-df3d98b13f6b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21d661e-401d-493f-bab8-459724fefc73", "created": "2026-01-27T05:12:58.415346Z", "modified": "2026-01-27T05:12:58.415346Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspy.support']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.415346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3da18aa6-64c4-4734-a023-3c887692f57a", "created": "2026-01-27T05:12:58.41602Z", "modified": "2026-01-27T05:12:58.41602Z", "relationship_type": "indicates", "source_ref": "indicator--e21d661e-401d-493f-bab8-459724fefc73", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d673cf2-675d-401e-b83e-98f3f290e57c", "created": "2026-01-27T05:12:58.416196Z", "modified": "2026-01-27T05:12:58.416196Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspylite.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.416196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f2d9d83-1c1c-4fef-91f1-45b11eb6829b", "created": "2026-01-27T05:12:58.416928Z", "modified": "2026-01-27T05:12:58.416928Z", "relationship_type": "indicates", "source_ref": "indicator--6d673cf2-675d-401e-b83e-98f3f290e57c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea35261e-289d-4cc4-b990-c27e1619378c", "created": "2026-01-27T05:12:58.417107Z", "modified": "2026-01-27T05:12:58.417107Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.417107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a340444c-0ec2-48b3-bc17-1e7d905eda7e", "created": "2026-01-27T05:12:58.41784Z", "modified": "2026-01-27T05:12:58.41784Z", "relationship_type": "indicates", "source_ref": "indicator--ea35261e-289d-4cc4-b990-c27e1619378c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fd2c13-d0f6-43dc-97d6-d80536092a3b", "created": "2026-01-27T05:12:58.41803Z", "modified": "2026-01-27T05:12:58.41803Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyplus.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.41803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d25434f-a1b8-4834-bd5b-8cd679f3ded6", "created": "2026-01-27T05:12:58.418689Z", "modified": "2026-01-27T05:12:58.418689Z", "relationship_type": "indicates", "source_ref": "indicator--e2fd2c13-d0f6-43dc-97d6-d80536092a3b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec10eb79-67b0-476e-911d-20164f2ff194", "created": "2026-01-27T05:12:58.418882Z", "modified": "2026-01-27T05:12:58.418882Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='myfonemate.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.418882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--392225aa-cabc-47b1-be09-71e8a0ca28f8", "created": "2026-01-27T05:12:58.41955Z", "modified": "2026-01-27T05:12:58.41955Z", "relationship_type": "indicates", "source_ref": "indicator--ec10eb79-67b0-476e-911d-20164f2ff194", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df38532-6fae-4987-a622-62f473a50b77", "created": "2026-01-27T05:12:58.419721Z", "modified": "2026-01-27T05:12:58.419721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinecontrol.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.419721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3e13cc1-e5de-4d6c-aabb-0921ff678517", "created": "2026-01-27T05:12:58.420404Z", "modified": "2026-01-27T05:12:58.420404Z", "relationship_type": "indicates", "source_ref": "indicator--3df38532-6fae-4987-a622-62f473a50b77", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dbd8e0-9a51-474d-b23e-1033e32ecc8d", "created": "2026-01-27T05:12:58.42058Z", "modified": "2026-01-27T05:12:58.42058Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinesecure.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.42058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a99e8a37-d536-4410-9dbf-4408e8bee6b0", "created": "2026-01-27T05:12:58.421259Z", "modified": "2026-01-27T05:12:58.421259Z", "relationship_type": "indicates", "source_ref": "indicator--58dbd8e0-9a51-474d-b23e-1033e32ecc8d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc103e2-8111-440c-b907-e4c61bb7da0d", "created": "2026-01-27T05:12:58.421435Z", "modified": "2026-01-27T05:12:58.421435Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='parent-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.421435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa791f95-5ec3-4c82-95a9-4fb3524fb20d", "created": "2026-01-27T05:12:58.422133Z", "modified": "2026-01-27T05:12:58.422133Z", "relationship_type": "indicates", "source_ref": "indicator--ebc103e2-8111-440c-b907-e4c61bb7da0d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dea006-2115-4b47-890d-08e2def97213", "created": "2026-01-27T05:12:58.422305Z", "modified": "2026-01-27T05:12:58.422305Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonsee.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.422305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3155940-413b-40bd-99f1-97611000fb96", "created": "2026-01-27T05:12:58.423111Z", "modified": "2026-01-27T05:12:58.423111Z", "relationship_type": "indicates", "source_ref": "indicator--33dea006-2115-4b47-890d-08e2def97213", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09614f2e-bc9a-4117-9b51-8316eff30380", "created": "2026-01-27T05:12:58.423287Z", "modified": "2026-01-27T05:12:58.423287Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safe-root.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.423287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b20f095e-8129-42e5-836f-b640e86fe0fe", "created": "2026-01-27T05:12:58.423957Z", "modified": "2026-01-27T05:12:58.423957Z", "relationship_type": "indicates", "source_ref": "indicator--09614f2e-bc9a-4117-9b51-8316eff30380", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9023a401-e7a8-4a50-92b5-d388c8f4ce35", "created": "2026-01-27T05:12:58.42413Z", "modified": "2026-01-27T05:12:58.42413Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='secure-msp.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.42413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93cd4e77-68bf-4612-8666-fa23adf2e409", "created": "2026-01-27T05:12:58.4248Z", "modified": "2026-01-27T05:12:58.4248Z", "relationship_type": "indicates", "source_ref": "indicator--9023a401-e7a8-4a50-92b5-d388c8f4ce35", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503224e6-baf6-4501-a9ed-32cb75d2d8d8", "created": "2026-01-27T05:12:58.424976Z", "modified": "2026-01-27T05:12:58.424976Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='securechildren.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.424976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86bd0d11-5553-46b0-ba1b-d3427ed6a7ea", "created": "2026-01-27T05:12:58.425642Z", "modified": "2026-01-27T05:12:58.425642Z", "relationship_type": "indicates", "source_ref": "indicator--503224e6-baf6-4501-a9ed-32cb75d2d8d8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4eb7a2-e56b-462a-8d05-82093212dbdb", "created": "2026-01-27T05:12:58.425834Z", "modified": "2026-01-27T05:12:58.425834Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='theispyoo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.425834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfd2ae63-c1c5-438e-af94-564d214f5dcf", "created": "2026-01-27T05:12:58.426495Z", "modified": "2026-01-27T05:12:58.426495Z", "relationship_type": "indicates", "source_ref": "indicator--ae4eb7a2-e56b-462a-8d05-82093212dbdb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5329db37-c183-45ad-bc29-4f94e48ed904", "created": "2026-01-27T05:12:58.426666Z", "modified": "2026-01-27T05:12:58.426666Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.eyezy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.426666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f332d017-6dac-4c8a-8d6b-8adf202dec2c", "created": "2026-01-27T05:12:58.427338Z", "modified": "2026-01-27T05:12:58.427338Z", "relationship_type": "indicates", "source_ref": "indicator--5329db37-c183-45ad-bc29-4f94e48ed904", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c5c01f-93b6-4b71-9b25-f140436a6547", "created": "2026-01-27T05:12:58.427508Z", "modified": "2026-01-27T05:12:58.427508Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.427508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38b68527-f8fc-4219-93f8-7dcd5b2ee0ec", "created": "2026-01-27T05:12:58.428176Z", "modified": "2026-01-27T05:12:58.428176Z", "relationship_type": "indicates", "source_ref": "indicator--36c5c01f-93b6-4b71-9b25-f140436a6547", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bd34bc-545e-43e0-bae9-27cc64591bb9", "created": "2026-01-27T05:12:58.428349Z", "modified": "2026-01-27T05:12:58.428349Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspyonline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.428349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bac9241e-536b-457e-8503-01735db49958", "created": "2026-01-27T05:12:58.429058Z", "modified": "2026-01-27T05:12:58.429058Z", "relationship_type": "indicates", "source_ref": "indicator--a9bd34bc-545e-43e0-bae9-27cc64591bb9", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb62f5b-6b8e-48c7-8c75-95fd8200b55e", "created": "2026-01-27T05:12:58.429237Z", "modified": "2026-01-27T05:12:58.429237Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='q12z.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.429237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6971d25f-8291-4aca-bbbf-7263fbc94020", "created": "2026-01-27T05:12:58.429903Z", "modified": "2026-01-27T05:12:58.429903Z", "relationship_type": "indicates", "source_ref": "indicator--5fb62f5b-6b8e-48c7-8c75-95fd8200b55e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c1cff2-0525-48e6-bf5d-eef9da4faf81", "created": "2026-01-27T05:12:58.430087Z", "modified": "2026-01-27T05:12:58.430087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getmspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.430087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9ed1baf-827d-4056-8c3b-c7cc743a23e6", "created": "2026-01-27T05:12:58.430866Z", "modified": "2026-01-27T05:12:58.430866Z", "relationship_type": "indicates", "source_ref": "indicator--b3c1cff2-0525-48e6-bf5d-eef9da4faf81", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd4863f-1541-47c7-afc0-3e08a68501c1", "created": "2026-01-27T05:12:58.431041Z", "modified": "2026-01-27T05:12:58.431041Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a72bafdcbf7635f7128fe0e7490ea5a92f878a38de90e80c166a41732437e39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.431041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17153a34-4b93-45db-ae2c-edaaf54c0ed7", "created": "2026-01-27T05:12:58.431921Z", "modified": "2026-01-27T05:12:58.431921Z", "relationship_type": "indicates", "source_ref": "indicator--dfd4863f-1541-47c7-afc0-3e08a68501c1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992900fd-1a94-41dd-bcec-50e7ea8e23e8", "created": "2026-01-27T05:12:58.432102Z", "modified": "2026-01-27T05:12:58.432102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1d6d79fcbe0414924f8ebed39b0e7967b9e06ba9be638917dfe8b58b49bbf7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.432102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e63f8f83-1a28-4165-bdbe-a6383bc290b2", "created": "2026-01-27T05:12:58.432949Z", "modified": "2026-01-27T05:12:58.432949Z", "relationship_type": "indicates", "source_ref": "indicator--992900fd-1a94-41dd-bcec-50e7ea8e23e8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb2ad28-28d7-44e8-9b01-99c58c3d1b42", "created": "2026-01-27T05:12:58.433127Z", "modified": "2026-01-27T05:12:58.433127Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ec27607644332121b1effd38ac6a854aa640aa4463118aaf4de4c49b5477014']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.433127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f12ffb7-373a-4198-a1fb-235fcd430e31", "created": "2026-01-27T05:12:58.433971Z", "modified": "2026-01-27T05:12:58.433971Z", "relationship_type": "indicates", "source_ref": "indicator--ceb2ad28-28d7-44e8-9b01-99c58c3d1b42", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4706cf-e20a-43c2-8c27-d626b25fcc8c", "created": "2026-01-27T05:12:58.434149Z", "modified": "2026-01-27T05:12:58.434149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='908c111d553e75fc8a6cf297fa67a7ab5a4b573ea1a7006dcf943356df272985']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.434149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a1de3fe-f063-4694-bac1-b6f5501bbb13", "created": "2026-01-27T05:12:58.434997Z", "modified": "2026-01-27T05:12:58.434997Z", "relationship_type": "indicates", "source_ref": "indicator--eb4706cf-e20a-43c2-8c27-d626b25fcc8c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be25c7e0-1358-4797-8b75-8e4e44c5b5b0", "created": "2026-01-27T05:12:58.435171Z", "modified": "2026-01-27T05:12:58.435171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c452916371a86977eb246c6841d87790ecfb73984481b3913335622425d5fc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.435171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fda3abf1-0a30-4cb2-b20d-445b1f17caa0", "created": "2026-01-27T05:12:58.436011Z", "modified": "2026-01-27T05:12:58.436011Z", "relationship_type": "indicates", "source_ref": "indicator--be25c7e0-1358-4797-8b75-8e4e44c5b5b0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7550c993-7b26-4342-8cde-e40e1092d713", "created": "2026-01-27T05:12:58.436187Z", "modified": "2026-01-27T05:12:58.436187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e96e997112bc9926d393506358909a1026c595bd1032eb88672004ffa5529fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.436187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec0a3e5b-cafe-4266-ba83-c1a44b37d47e", "created": "2026-01-27T05:12:58.437024Z", "modified": "2026-01-27T05:12:58.437024Z", "relationship_type": "indicates", "source_ref": "indicator--7550c993-7b26-4342-8cde-e40e1092d713", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94543069-971a-40a0-bce8-18134c6768f0", "created": "2026-01-27T05:12:58.437198Z", "modified": "2026-01-27T05:12:58.437198Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7e40293cca0ebac7d6cbb280c108cdd04bfdf5306cb08501f9490c47b6d4255']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.437198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7468eb6f-cfc9-406f-8aa0-abfd8e74dc19", "created": "2026-01-27T05:12:58.438042Z", "modified": "2026-01-27T05:12:58.438042Z", "relationship_type": "indicates", "source_ref": "indicator--94543069-971a-40a0-bce8-18134c6768f0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3e220b-ed79-4ebe-ae8f-441cc15f7110", "created": "2026-01-27T05:12:58.438217Z", "modified": "2026-01-27T05:12:58.438217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d73ac6f56c008885da798193cf8f35b6bc6d9d1ab11203e75666a67e5741e29d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.438217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e851714e-fb43-45fd-be10-c57474e7b58f", "created": "2026-01-27T05:12:58.439068Z", "modified": "2026-01-27T05:12:58.439068Z", "relationship_type": "indicates", "source_ref": "indicator--6d3e220b-ed79-4ebe-ae8f-441cc15f7110", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e295699e-ce94-4f9e-99df-b238f1c8f2a6", "created": "2026-01-27T05:12:58.439247Z", "modified": "2026-01-27T05:12:58.439247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8705f071aeea7a4865719e335aa784d37b8e06a0830f4073d0d5b14b41c01d3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.439247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92686fb3-02a4-4a2a-b85b-f4d327da0975", "created": "2026-01-27T05:12:58.440206Z", "modified": "2026-01-27T05:12:58.440206Z", "relationship_type": "indicates", "source_ref": "indicator--e295699e-ce94-4f9e-99df-b238f1c8f2a6", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0411e774-bccd-48ab-ba9a-bfff7d171854", "created": "2026-01-27T05:12:58.440382Z", "modified": "2026-01-27T05:12:58.440382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed9ddba2c932cac15eac9764baf4d66825bc7e236d09e4fb3a9820bdc667acc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.440382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec7dd705-2f32-4c5b-a2a6-7132dd967bba", "created": "2026-01-27T05:12:58.441215Z", "modified": "2026-01-27T05:12:58.441215Z", "relationship_type": "indicates", "source_ref": "indicator--0411e774-bccd-48ab-ba9a-bfff7d171854", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd140c72-9c4d-4c02-8640-bdfe206f8495", "created": "2026-01-27T05:12:58.441395Z", "modified": "2026-01-27T05:12:58.441395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c666d6e4ed464aecfcdc097b672c6cc4ee290e5a528f6225976c105a11f62773']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.441395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05179429-b91d-4a3e-9240-3e810188a7b9", "created": "2026-01-27T05:12:58.442226Z", "modified": "2026-01-27T05:12:58.442226Z", "relationship_type": "indicates", "source_ref": "indicator--cd140c72-9c4d-4c02-8640-bdfe206f8495", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f477c63-6cc8-4b1f-92c4-78f5b65b6b75", "created": "2026-01-27T05:12:58.442403Z", "modified": "2026-01-27T05:12:58.442403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85df23f6550b3edbe532e503ad82f2b4f918fbfeb6e707f087abd8b72ffd1b2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.442403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c290aec-3c30-4ff5-ac10-5a7a5796ade4", "created": "2026-01-27T05:12:58.443248Z", "modified": "2026-01-27T05:12:58.443248Z", "relationship_type": "indicates", "source_ref": "indicator--0f477c63-6cc8-4b1f-92c4-78f5b65b6b75", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964231f9-9e25-4960-b8a0-c070570033b9", "created": "2026-01-27T05:12:58.443423Z", "modified": "2026-01-27T05:12:58.443423Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9fac3cd5e7866cb1ceb25e95e2705a9d359df77b095f6115eff9ad427b22a5ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.443423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--752c9493-c850-45da-bdf0-ce447a151ecb", "created": "2026-01-27T05:12:58.444266Z", "modified": "2026-01-27T05:12:58.444266Z", "relationship_type": "indicates", "source_ref": "indicator--964231f9-9e25-4960-b8a0-c070570033b9", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83ea74e-fe3e-4462-b26e-bba74b9a2b65", "created": "2026-01-27T05:12:58.444451Z", "modified": "2026-01-27T05:12:58.444451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='370adbdcea209d4b3728d540ebbc90a376302bb9b82c1ab1f7b6490d15652057']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.444451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8edef35b-6109-4197-bb55-b2a069ba55f0", "created": "2026-01-27T05:12:58.445279Z", "modified": "2026-01-27T05:12:58.445279Z", "relationship_type": "indicates", "source_ref": "indicator--f83ea74e-fe3e-4462-b26e-bba74b9a2b65", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374d1d30-3afa-4c45-9c07-8d9806fe19aa", "created": "2026-01-27T05:12:58.445452Z", "modified": "2026-01-27T05:12:58.445452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d93743c4425f9e4d80531b9cfec734278ba0c7692e7efcfc9d700128efa4b53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.445452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d268498-692f-4b66-9298-d07b8f42101f", "created": "2026-01-27T05:12:58.446288Z", "modified": "2026-01-27T05:12:58.446288Z", "relationship_type": "indicates", "source_ref": "indicator--374d1d30-3afa-4c45-9c07-8d9806fe19aa", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f70a4207-5765-445a-ab40-1fbc11a5dc04", "created": "2026-01-27T05:12:58.446462Z", "modified": "2026-01-27T05:12:58.446462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c39ffcd61f1aa08945483157fead9a60844e844151e7b9670ad64b5b2381aeaa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.446462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52842ed2-9b6a-4e71-a971-72d32d6a9203", "created": "2026-01-27T05:12:58.447308Z", "modified": "2026-01-27T05:12:58.447308Z", "relationship_type": "indicates", "source_ref": "indicator--f70a4207-5765-445a-ab40-1fbc11a5dc04", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bc9dfb-955e-4a19-847c-c8de9286a2af", "created": "2026-01-27T05:12:58.447483Z", "modified": "2026-01-27T05:12:58.447483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc9f6820fdf94d4eb4278d201d6449c896c54c163a90665de4c5b862aed2622e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.447483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fecddde6-42b1-48a6-89c4-5cbc4b4fda56", "created": "2026-01-27T05:12:58.448331Z", "modified": "2026-01-27T05:12:58.448331Z", "relationship_type": "indicates", "source_ref": "indicator--52bc9dfb-955e-4a19-847c-c8de9286a2af", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1de427-2e93-44c5-a2a4-2a1ac9454bb9", "created": "2026-01-27T05:12:58.448506Z", "modified": "2026-01-27T05:12:58.448506Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8eeba8744bbee35172387138eda7af15e07d10b31f826da086e4f9ae113408d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.448506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3638a796-4299-44a2-986a-921767fbb51f", "created": "2026-01-27T05:12:58.449456Z", "modified": "2026-01-27T05:12:58.449456Z", "relationship_type": "indicates", "source_ref": "indicator--3d1de427-2e93-44c5-a2a4-2a1ac9454bb9", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8f2fe7-a13a-4564-b75c-8e393eac9b13", "created": "2026-01-27T05:12:58.449632Z", "modified": "2026-01-27T05:12:58.449632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='323aeb2a3a47fb41c002f53336f1d289bced3f6a78fdcefaf42638309b7dd090']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.449632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cec9541-e0d7-4333-8ad4-6410565bd200", "created": "2026-01-27T05:12:58.450465Z", "modified": "2026-01-27T05:12:58.450465Z", "relationship_type": "indicates", "source_ref": "indicator--fe8f2fe7-a13a-4564-b75c-8e393eac9b13", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28f6714b-4318-4cc3-91ee-b93a8b65080b", "created": "2026-01-27T05:12:58.450641Z", "modified": "2026-01-27T05:12:58.450641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df6f3b19b1bedc24d1f4ad27352d307e8aa8f691ded118ad5e23a3bfb71c7735']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.450641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37439dae-c0b2-4144-8abe-bada20bd5f0b", "created": "2026-01-27T05:12:58.451475Z", "modified": "2026-01-27T05:12:58.451475Z", "relationship_type": "indicates", "source_ref": "indicator--28f6714b-4318-4cc3-91ee-b93a8b65080b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03508262-78aa-4b8e-83ef-5dfd455717ca", "created": "2026-01-27T05:12:58.451649Z", "modified": "2026-01-27T05:12:58.451649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='edac129da979cc46e8a0fb8b02d2fa17f7736ce2d58a73672512304094158bef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.451649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0d465bd-83f0-48d4-9591-6a5333986887", "created": "2026-01-27T05:12:58.452483Z", "modified": "2026-01-27T05:12:58.452483Z", "relationship_type": "indicates", "source_ref": "indicator--03508262-78aa-4b8e-83ef-5dfd455717ca", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e48239-21aa-436a-a124-e35ceeac4be9", "created": "2026-01-27T05:12:58.452661Z", "modified": "2026-01-27T05:12:58.452661Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08b06c85ee7e55589dad092518b62975678d386ad811f8533cb3a2184a5cf387']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.452661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ff61378-9541-48d1-a0fc-cb4c0a2de94b", "created": "2026-01-27T05:12:58.453513Z", "modified": "2026-01-27T05:12:58.453513Z", "relationship_type": "indicates", "source_ref": "indicator--e3e48239-21aa-436a-a124-e35ceeac4be9", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdf6892-f9cd-4f2e-86a8-03efac592fc0", "created": "2026-01-27T05:12:58.453689Z", "modified": "2026-01-27T05:12:58.453689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d12eefaee51f6b4eae7be39835ff51f7398f2ee84d2c8fbf4831b62cd185b6bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.453689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e2e0efd-f30c-4da3-a717-322a7493def7", "created": "2026-01-27T05:12:58.454526Z", "modified": "2026-01-27T05:12:58.454526Z", "relationship_type": "indicates", "source_ref": "indicator--3cdf6892-f9cd-4f2e-86a8-03efac592fc0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bd6b84-8592-4fea-8f24-fa1e0eb47c4b", "created": "2026-01-27T05:12:58.454699Z", "modified": "2026-01-27T05:12:58.454699Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='916eeb482717a0aef9e97ede57db9485e5165103b0dbfa6c7d07d748c99f4ba4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.454699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfbe1e66-bb55-4ee4-ae87-422eda8333c3", "created": "2026-01-27T05:12:58.455531Z", "modified": "2026-01-27T05:12:58.455531Z", "relationship_type": "indicates", "source_ref": "indicator--d1bd6b84-8592-4fea-8f24-fa1e0eb47c4b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fdb647-14f8-4905-a2ca-163a546948b2", "created": "2026-01-27T05:12:58.455708Z", "modified": "2026-01-27T05:12:58.455708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='085247cbee6743c55e7eb9c443c0f6309707be99c5dd68e35992568f69bd0959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.455708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca360871-c9f3-4583-a32c-435ecdfc189e", "created": "2026-01-27T05:12:58.456545Z", "modified": "2026-01-27T05:12:58.456545Z", "relationship_type": "indicates", "source_ref": "indicator--01fdb647-14f8-4905-a2ca-163a546948b2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d726e0da-b536-45be-ace0-e9910cfd3289", "created": "2026-01-27T05:12:58.456728Z", "modified": "2026-01-27T05:12:58.456728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bfb653f8f7ed32dc607513979c680982f214380e2675daef9b62a1254868b3eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.456728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e17e9311-1678-4d9a-bbbb-cc5883b15230", "created": "2026-01-27T05:12:58.457945Z", "modified": "2026-01-27T05:12:58.457945Z", "relationship_type": "indicates", "source_ref": "indicator--d726e0da-b536-45be-ace0-e9910cfd3289", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7f4741-f76c-4664-9570-f474d26f36a7", "created": "2026-01-27T05:12:58.458124Z", "modified": "2026-01-27T05:12:58.458124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47e560c6631d899abef1851054cc8d560619307c0f8c8360f155e64013fcd624']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.458124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79d327d2-7aaa-46ad-881a-9e99a6fb989b", "created": "2026-01-27T05:12:58.458956Z", "modified": "2026-01-27T05:12:58.458956Z", "relationship_type": "indicates", "source_ref": "indicator--0a7f4741-f76c-4664-9570-f474d26f36a7", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73ca5af-002b-47cf-9a89-181c40f10b16", "created": "2026-01-27T05:12:58.459134Z", "modified": "2026-01-27T05:12:58.459134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84ef3a7833d1c8e0fefaffafecec669a56bc534c5ad4e82d88553c8c91252a4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.459134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1802aa09-63a3-48a8-b5f7-9cd65ac5ce37", "created": "2026-01-27T05:12:58.459968Z", "modified": "2026-01-27T05:12:58.459968Z", "relationship_type": "indicates", "source_ref": "indicator--c73ca5af-002b-47cf-9a89-181c40f10b16", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2e5f24-55d6-4f9e-ba7a-68ae1383a94b", "created": "2026-01-27T05:12:58.460166Z", "modified": "2026-01-27T05:12:58.460166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b97258d931cc4419b8a62f2bbf6ac189f6929d446542c7cc790e82678d464f78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.460166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e0b7b74-e77b-47f3-9b5d-98b448b42e96", "created": "2026-01-27T05:12:58.461002Z", "modified": "2026-01-27T05:12:58.461002Z", "relationship_type": "indicates", "source_ref": "indicator--ba2e5f24-55d6-4f9e-ba7a-68ae1383a94b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a01248e-7189-4e3b-a561-a1ef10475d05", "created": "2026-01-27T05:12:58.461182Z", "modified": "2026-01-27T05:12:58.461182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2891097e941e0b110811290c99e3e51fa653b87ec98aaebaf78c20bb181bbb77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.461182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dba169a0-d551-4af0-bc36-9fc5b2c6151e", "created": "2026-01-27T05:12:58.46202Z", "modified": "2026-01-27T05:12:58.46202Z", "relationship_type": "indicates", "source_ref": "indicator--3a01248e-7189-4e3b-a561-a1ef10475d05", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b7eab7-fafd-4cb3-9d47-1359af699bfe", "created": "2026-01-27T05:12:58.462199Z", "modified": "2026-01-27T05:12:58.462199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76dd98737513cefa2d86e3d8b58a26ebf3bf08cdeb64180ea11a93dfc64948d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.462199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69263e8d-0e33-4fba-93c9-2427cf7c7e50", "created": "2026-01-27T05:12:58.463032Z", "modified": "2026-01-27T05:12:58.463032Z", "relationship_type": "indicates", "source_ref": "indicator--56b7eab7-fafd-4cb3-9d47-1359af699bfe", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbe1de4-4aac-40a1-a614-a2aacf68b606", "created": "2026-01-27T05:12:58.463209Z", "modified": "2026-01-27T05:12:58.463209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9b38a66424087a0543997fbe518eaaec677e6c726e7449aed61572743c54fbe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.463209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0873a29f-8348-482f-9fdd-088792dd5dd2", "created": "2026-01-27T05:12:58.464036Z", "modified": "2026-01-27T05:12:58.464036Z", "relationship_type": "indicates", "source_ref": "indicator--ccbe1de4-4aac-40a1-a614-a2aacf68b606", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c9ed3c-65eb-4a25-a35a-55c855f84b5e", "created": "2026-01-27T05:12:58.464211Z", "modified": "2026-01-27T05:12:58.464211Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9db57d7c719721d797f37a8e7fc31cfbfb2399edff6283610ae84e32cb7e7a6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.464211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8795a043-2b9b-48d9-bf73-99ed1c8431b4", "created": "2026-01-27T05:12:58.465036Z", "modified": "2026-01-27T05:12:58.465036Z", "relationship_type": "indicates", "source_ref": "indicator--a9c9ed3c-65eb-4a25-a35a-55c855f84b5e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe219cf-b42d-4823-b22f-6e6823b8ec96", "created": "2026-01-27T05:12:58.46521Z", "modified": "2026-01-27T05:12:58.46521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6da4ab778b34634530db84b20a131cc1c951680c213474e21c2bf3933a97f3cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.46521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--678e9718-53f4-41dd-a087-6bb8608093ce", "created": "2026-01-27T05:12:58.466036Z", "modified": "2026-01-27T05:12:58.466036Z", "relationship_type": "indicates", "source_ref": "indicator--fbe219cf-b42d-4823-b22f-6e6823b8ec96", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc449f01-aee6-4882-8515-2b82d1c4452c", "created": "2026-01-27T05:12:58.466213Z", "modified": "2026-01-27T05:12:58.466213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e99337ee42bf5e8595ff6b7241e3e401b8b4f38f8be5158d1034e8f370281419']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.466213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29957a95-74d1-42a4-b84b-5fdd7220a274", "created": "2026-01-27T05:12:58.467186Z", "modified": "2026-01-27T05:12:58.467186Z", "relationship_type": "indicates", "source_ref": "indicator--fc449f01-aee6-4882-8515-2b82d1c4452c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2a4102-1e7c-4544-ae70-441b3543ae48", "created": "2026-01-27T05:12:58.467363Z", "modified": "2026-01-27T05:12:58.467363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f735c37978eac0e3cd314a522595727e7be2a89ad8918ff66b5a4d268a8f93cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.467363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdc3c1e9-0a96-4411-83c9-d0fde33749ba", "created": "2026-01-27T05:12:58.468201Z", "modified": "2026-01-27T05:12:58.468201Z", "relationship_type": "indicates", "source_ref": "indicator--0f2a4102-1e7c-4544-ae70-441b3543ae48", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b023499d-720b-4acd-91d8-ed6684017dba", "created": "2026-01-27T05:12:58.468378Z", "modified": "2026-01-27T05:12:58.468378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ff41f27d438b69332d45c140c3b838fce4cdc69c90d7f4bace4ee3dae47a50f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.468378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbe45061-d6e9-4b86-8636-dc9c52cf02bd", "created": "2026-01-27T05:12:58.469209Z", "modified": "2026-01-27T05:12:58.469209Z", "relationship_type": "indicates", "source_ref": "indicator--b023499d-720b-4acd-91d8-ed6684017dba", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66758dd0-31cc-4c6a-acdc-c556e6d1e6cc", "created": "2026-01-27T05:12:58.469387Z", "modified": "2026-01-27T05:12:58.469387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd5b6d46a5d17e26cdb30d3de2de17a53b82d43144b770f9b9407c34e4ac5c72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.469387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd1d714c-3973-464a-a75d-3dae1559cd29", "created": "2026-01-27T05:12:58.470217Z", "modified": "2026-01-27T05:12:58.470217Z", "relationship_type": "indicates", "source_ref": "indicator--66758dd0-31cc-4c6a-acdc-c556e6d1e6cc", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b21c4e-85d6-435d-af58-1712387a9863", "created": "2026-01-27T05:12:58.470394Z", "modified": "2026-01-27T05:12:58.470394Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46bb1d48c7254122bf629bf4b5da56b8c14abe8d4cf3dd9d6853b99ee1b63fdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.470394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--205df2d6-fdac-4b80-bc77-5b0c3db806a4", "created": "2026-01-27T05:12:58.47123Z", "modified": "2026-01-27T05:12:58.47123Z", "relationship_type": "indicates", "source_ref": "indicator--d1b21c4e-85d6-435d-af58-1712387a9863", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102de0b5-5d65-4a60-9f29-bfad645b7521", "created": "2026-01-27T05:12:58.471404Z", "modified": "2026-01-27T05:12:58.471404Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87a87973e7a7452cc63ed855f32511723acc0803b75c68e649cbe62bb4ddbbdd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.471404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25e1ec5d-6857-451d-b5cc-a4d979fb056f", "created": "2026-01-27T05:12:58.472229Z", "modified": "2026-01-27T05:12:58.472229Z", "relationship_type": "indicates", "source_ref": "indicator--102de0b5-5d65-4a60-9f29-bfad645b7521", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426cefdf-3c50-4c40-8fa8-33647a4b97b7", "created": "2026-01-27T05:12:58.472402Z", "modified": "2026-01-27T05:12:58.472402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55d5fea9f5e2dd4284e53c1061560c2878cfb525a525356727f7f6e9eaf4913f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.472402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--884795b8-0e5d-44b0-8fca-290d191ae2fa", "created": "2026-01-27T05:12:58.47323Z", "modified": "2026-01-27T05:12:58.47323Z", "relationship_type": "indicates", "source_ref": "indicator--426cefdf-3c50-4c40-8fa8-33647a4b97b7", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eca127d-f1d7-467b-9c4f-672fbdcada8e", "created": "2026-01-27T05:12:58.473402Z", "modified": "2026-01-27T05:12:58.473402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6cb5e58f081baeeecf82a912324c20c90259e2b13c85d8bf54d7379e747c3a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.473402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33959ebe-e969-4bce-ad05-e53ff5719003", "created": "2026-01-27T05:12:58.474229Z", "modified": "2026-01-27T05:12:58.474229Z", "relationship_type": "indicates", "source_ref": "indicator--7eca127d-f1d7-467b-9c4f-672fbdcada8e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef80f06-ae13-4f94-9019-54db3334032b", "created": "2026-01-27T05:12:58.474411Z", "modified": "2026-01-27T05:12:58.474411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f94e12dfa2bea040d9bd5e21107365dfdf5db1e7d67f7eb39ea96956092d932a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.474411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fad56665-bb40-450f-b799-440c005d5fc6", "created": "2026-01-27T05:12:58.475241Z", "modified": "2026-01-27T05:12:58.475241Z", "relationship_type": "indicates", "source_ref": "indicator--aef80f06-ae13-4f94-9019-54db3334032b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db4d5d1-9edf-44c3-985d-b0adcd002ca7", "created": "2026-01-27T05:12:58.475414Z", "modified": "2026-01-27T05:12:58.475414Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b427d08be352393ad21a48ff59c2b828e762e3c9601862c8eeba1e14f237e76e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.475414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91a8b1c7-9d02-43b5-8800-243a8c9346aa", "created": "2026-01-27T05:12:58.476378Z", "modified": "2026-01-27T05:12:58.476378Z", "relationship_type": "indicates", "source_ref": "indicator--4db4d5d1-9edf-44c3-985d-b0adcd002ca7", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48993e4-ec90-471e-a304-c8c592869568", "created": "2026-01-27T05:12:58.476555Z", "modified": "2026-01-27T05:12:58.476555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='86f1e1f3a143b283806d045d455b1e9856079a46ab1e28a67ba5553bae71f89c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.476555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9d2b5f5-426b-4726-bb2f-2063abfb0bf5", "created": "2026-01-27T05:12:58.477381Z", "modified": "2026-01-27T05:12:58.477381Z", "relationship_type": "indicates", "source_ref": "indicator--e48993e4-ec90-471e-a304-c8c592869568", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc81221b-593e-4296-9f36-8730c1e2121e", "created": "2026-01-27T05:12:58.477558Z", "modified": "2026-01-27T05:12:58.477558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c17d26d205648793ef3033f957bb01695bed7e6d4658fa1ddb8ca32a2c430577']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.477558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e7020eb-1421-4d3b-875c-a9f4135891b3", "created": "2026-01-27T05:12:58.478387Z", "modified": "2026-01-27T05:12:58.478387Z", "relationship_type": "indicates", "source_ref": "indicator--bc81221b-593e-4296-9f36-8730c1e2121e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd224d7d-8181-473a-8f19-1c3bae5c7d45", "created": "2026-01-27T05:12:58.478561Z", "modified": "2026-01-27T05:12:58.478561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8432579e565fa483359a3c780e111a62f05bb651acf7bcedfd987cc655e9a4ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.478561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07aa6576-913c-445e-8fa3-d275b4486ab4", "created": "2026-01-27T05:12:58.479402Z", "modified": "2026-01-27T05:12:58.479402Z", "relationship_type": "indicates", "source_ref": "indicator--bd224d7d-8181-473a-8f19-1c3bae5c7d45", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f936fe6-b9f5-4ea8-b674-c0c2c22bd1ab", "created": "2026-01-27T05:12:58.479579Z", "modified": "2026-01-27T05:12:58.479579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8866edde22cf865b2e3d3e0316af56346256c01b6783337e95ca73b2434fadde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.479579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58998b47-fe63-48c6-87d2-03b77601c459", "created": "2026-01-27T05:12:58.480413Z", "modified": "2026-01-27T05:12:58.480413Z", "relationship_type": "indicates", "source_ref": "indicator--1f936fe6-b9f5-4ea8-b674-c0c2c22bd1ab", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f73fc0-6c93-4a54-aa0b-312f522bb83a", "created": "2026-01-27T05:12:58.480589Z", "modified": "2026-01-27T05:12:58.480589Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b54ada1d3ef333d82e6bfc0e3ffb7b3abfa9d783d18fd89dac05097eebfeb3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.480589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96d4c780-5418-43e7-85af-5bf4ad4811b5", "created": "2026-01-27T05:12:58.48141Z", "modified": "2026-01-27T05:12:58.48141Z", "relationship_type": "indicates", "source_ref": "indicator--d1f73fc0-6c93-4a54-aa0b-312f522bb83a", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707e376f-b995-4e4d-8f74-4f7633f7aaf1", "created": "2026-01-27T05:12:58.481584Z", "modified": "2026-01-27T05:12:58.481584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='627f9abeb2a949bd39a7c855bf5de4cec1814d20953b709bfd1f83a155b302e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.481584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bcaac83-fb60-4300-ab05-d2e223a13dc0", "created": "2026-01-27T05:12:58.48242Z", "modified": "2026-01-27T05:12:58.48242Z", "relationship_type": "indicates", "source_ref": "indicator--707e376f-b995-4e4d-8f74-4f7633f7aaf1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6589afab-602b-44c3-b563-8bc96e250c0e", "created": "2026-01-27T05:12:58.4826Z", "modified": "2026-01-27T05:12:58.4826Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5423afeaf7793dd1001d883fd5dde713c7fb85ea11df4bbd399471c305485134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.4826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d0ce4c2-1edd-49e6-9961-55d0240b6341", "created": "2026-01-27T05:12:58.483434Z", "modified": "2026-01-27T05:12:58.483434Z", "relationship_type": "indicates", "source_ref": "indicator--6589afab-602b-44c3-b563-8bc96e250c0e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4c75b5-f42b-4d81-ba38-84f1365b46a4", "created": "2026-01-27T05:12:58.483614Z", "modified": "2026-01-27T05:12:58.483614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc6b6da244cba2d3705eb3f7c0074ceaa8fa31f62c0e7ce1e4afb9c301882e06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.483614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7660b5b5-955b-4212-9315-226f6a0d6bf4", "created": "2026-01-27T05:12:58.484467Z", "modified": "2026-01-27T05:12:58.484467Z", "relationship_type": "indicates", "source_ref": "indicator--0b4c75b5-f42b-4d81-ba38-84f1365b46a4", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2686d54b-2943-4ae1-bf7b-75d632ae1f3a", "created": "2026-01-27T05:12:58.484643Z", "modified": "2026-01-27T05:12:58.484643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37e00b010f093ca48523cdc0efb41a8c488880734f7e5de1b06588ad626d1302']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.484643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8405b2b-87af-49b1-a2d5-c4f1deb97ef6", "created": "2026-01-27T05:12:58.485596Z", "modified": "2026-01-27T05:12:58.485596Z", "relationship_type": "indicates", "source_ref": "indicator--2686d54b-2943-4ae1-bf7b-75d632ae1f3a", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed043e70-fa33-45d2-9c51-a11ad7a244d1", "created": "2026-01-27T05:12:58.485787Z", "modified": "2026-01-27T05:12:58.485787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b53b7016e7d1b1b2133afd7da9baac29b3accae1671f057fa15b17ab77a3d78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.485787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b613828-d8ad-44cf-b855-7e39edd254aa", "created": "2026-01-27T05:12:58.486597Z", "modified": "2026-01-27T05:12:58.486597Z", "relationship_type": "indicates", "source_ref": "indicator--ed043e70-fa33-45d2-9c51-a11ad7a244d1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6f74d4-922c-4ca6-a3ce-96dc3eea61ec", "created": "2026-01-27T05:12:58.486786Z", "modified": "2026-01-27T05:12:58.486786Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f421b018aa5a87d4d7f14e623d1a54a171aa048a99c3a11c745dc744b3bcb995']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.486786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f4e1235-7530-42ba-af36-ac9d2d0dbe60", "created": "2026-01-27T05:12:58.487599Z", "modified": "2026-01-27T05:12:58.487599Z", "relationship_type": "indicates", "source_ref": "indicator--9d6f74d4-922c-4ca6-a3ce-96dc3eea61ec", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f434b6d-10c2-4e4e-9f61-a63232a364d6", "created": "2026-01-27T05:12:58.487789Z", "modified": "2026-01-27T05:12:58.487789Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e76bc1df01262d5bf69988cf1fbe1c403a8dcd3bbc36b3d172579b5c3fd46d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.487789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64c64352-df44-4f43-868c-2ee4e98d607d", "created": "2026-01-27T05:12:58.488599Z", "modified": "2026-01-27T05:12:58.488599Z", "relationship_type": "indicates", "source_ref": "indicator--2f434b6d-10c2-4e4e-9f61-a63232a364d6", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154e5f34-0fdf-4509-ad8f-bbdc3cb8e304", "created": "2026-01-27T05:12:58.488787Z", "modified": "2026-01-27T05:12:58.488787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed68dc86b533df5158c8c95973c5c0f03706821a926eaec524e596f7146a7b04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.488787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6a1bea0-c63a-4193-a0ea-2a4b9c4c8986", "created": "2026-01-27T05:12:58.489604Z", "modified": "2026-01-27T05:12:58.489604Z", "relationship_type": "indicates", "source_ref": "indicator--154e5f34-0fdf-4509-ad8f-bbdc3cb8e304", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a150dbd5-f16f-428d-bded-ba2f0862b962", "created": "2026-01-27T05:12:58.489794Z", "modified": "2026-01-27T05:12:58.489794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4a365aa68fd78cdae40ef867683dacead675e1c01dc3ff27aad25b47ab405a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.489794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c84c9a0-e5c4-4cd5-b626-cb5c7bd91ace", "created": "2026-01-27T05:12:58.490605Z", "modified": "2026-01-27T05:12:58.490605Z", "relationship_type": "indicates", "source_ref": "indicator--a150dbd5-f16f-428d-bded-ba2f0862b962", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253ba4f8-1424-4603-ac2d-074932c8aa48", "created": "2026-01-27T05:12:58.490792Z", "modified": "2026-01-27T05:12:58.490792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8812752b8cc6f0a5a7b2396a0f0ca4aa1da8e54152b2b009b1d2261ff28c978']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.490792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7797eaee-24de-444d-b519-4d1c956efbe9", "created": "2026-01-27T05:12:58.491605Z", "modified": "2026-01-27T05:12:58.491605Z", "relationship_type": "indicates", "source_ref": "indicator--253ba4f8-1424-4603-ac2d-074932c8aa48", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f4a672-c7b4-4ac2-98ba-f84735744e57", "created": "2026-01-27T05:12:58.491803Z", "modified": "2026-01-27T05:12:58.491803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f3a354527bc832ccbaae4ab3c1ac71559b3df284873e0a91f90278bdb765d3b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.491803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c127966-25a5-4283-9c52-3b04d6833708", "created": "2026-01-27T05:12:58.492623Z", "modified": "2026-01-27T05:12:58.492623Z", "relationship_type": "indicates", "source_ref": "indicator--61f4a672-c7b4-4ac2-98ba-f84735744e57", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982d2cb9-e93d-431d-bee1-2531f71372cb", "created": "2026-01-27T05:12:58.492824Z", "modified": "2026-01-27T05:12:58.492824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee81106b607814edde77aed4db925fe02f9af9e7a4f84ac584713b2b5324ba57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.492824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70e5ce42-bf90-4eb7-b025-035cde864da9", "created": "2026-01-27T05:12:58.493764Z", "modified": "2026-01-27T05:12:58.493764Z", "relationship_type": "indicates", "source_ref": "indicator--982d2cb9-e93d-431d-bee1-2531f71372cb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da356485-976e-495e-95a1-434e034e855f", "created": "2026-01-27T05:12:58.493946Z", "modified": "2026-01-27T05:12:58.493946Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9987d97fa44821bd2d9756cb949e88a97ee528b6676cfc45b77ccff775e1c3c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.493946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa627232-7ebf-49fd-81cf-b17183f8233e", "created": "2026-01-27T05:12:58.49486Z", "modified": "2026-01-27T05:12:58.49486Z", "relationship_type": "indicates", "source_ref": "indicator--da356485-976e-495e-95a1-434e034e855f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045f755b-9a97-4aa1-8b53-8319055607be", "created": "2026-01-27T05:12:58.495076Z", "modified": "2026-01-27T05:12:58.495076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8ff45ea892a09c449972a06d435f9cdc5befaa1e422249f18b779766d528e7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.495076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd21f1b7-bbf4-47f6-a3e2-80eaa64b36c1", "created": "2026-01-27T05:12:58.49596Z", "modified": "2026-01-27T05:12:58.49596Z", "relationship_type": "indicates", "source_ref": "indicator--045f755b-9a97-4aa1-8b53-8319055607be", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca505f20-211a-42cf-b758-7c228b38baac", "created": "2026-01-27T05:12:58.496143Z", "modified": "2026-01-27T05:12:58.496143Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='536b024aa90699cae1cdee59cf4702c87a15db20465701a2dccf6ef7a5be5512']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.496143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56924723-a41c-4604-9ac0-4b78aa1d7309", "created": "2026-01-27T05:12:58.496981Z", "modified": "2026-01-27T05:12:58.496981Z", "relationship_type": "indicates", "source_ref": "indicator--ca505f20-211a-42cf-b758-7c228b38baac", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fa1e2a-4e97-43de-b841-993870f1c745", "created": "2026-01-27T05:12:58.497164Z", "modified": "2026-01-27T05:12:58.497164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5737fd8755d36b3d0f2cc4e09fa31feee01a27d1ce2c60af072838aeadf33720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.497164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7effb97-8bf2-40f8-9e1c-a9fdc7b76961", "created": "2026-01-27T05:12:58.498021Z", "modified": "2026-01-27T05:12:58.498021Z", "relationship_type": "indicates", "source_ref": "indicator--b3fa1e2a-4e97-43de-b841-993870f1c745", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa21bab2-0698-44e6-9b50-d22202ff3d68", "created": "2026-01-27T05:12:58.498196Z", "modified": "2026-01-27T05:12:58.498196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c9a1cb9eb2d4670583b373f60ff07a187dd42eb5684939484984d846346a6cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.498196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d130227-cf37-4bc1-8647-f4fbf2c8fa2b", "created": "2026-01-27T05:12:58.499049Z", "modified": "2026-01-27T05:12:58.499049Z", "relationship_type": "indicates", "source_ref": "indicator--aa21bab2-0698-44e6-9b50-d22202ff3d68", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef78e0e-efcc-408b-a55f-0bda4772793b", "created": "2026-01-27T05:12:58.499232Z", "modified": "2026-01-27T05:12:58.499232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2396540902e94ae196838e7ad4799842af881b6c01600ddb1c233765bd9b506']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.499232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b6444a8-5711-4338-96d7-af74200fdb82", "created": "2026-01-27T05:12:58.500123Z", "modified": "2026-01-27T05:12:58.500123Z", "relationship_type": "indicates", "source_ref": "indicator--9ef78e0e-efcc-408b-a55f-0bda4772793b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9ad343-f0f8-41ff-b9f7-3efcba95ec6f", "created": "2026-01-27T05:12:58.500322Z", "modified": "2026-01-27T05:12:58.500322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65433cd4a24d64a84f62f4d3b0b9389516028a413f0cc2346c6735e76de1f46e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.500322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c705df7-7f97-4894-bf98-cadae7678075", "created": "2026-01-27T05:12:58.501195Z", "modified": "2026-01-27T05:12:58.501195Z", "relationship_type": "indicates", "source_ref": "indicator--6b9ad343-f0f8-41ff-b9f7-3efcba95ec6f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9322a17b-2d28-422a-9211-0307aa029175", "created": "2026-01-27T05:12:58.501369Z", "modified": "2026-01-27T05:12:58.501369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b928427e0d8192c0b817b67068f6b5ba68652cf4314aa5c124efeaea7bddb6aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.501369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40db232e-c8c3-4417-aeb2-a9015860b1bd", "created": "2026-01-27T05:12:58.50221Z", "modified": "2026-01-27T05:12:58.50221Z", "relationship_type": "indicates", "source_ref": "indicator--9322a17b-2d28-422a-9211-0307aa029175", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dddec2-794c-4b04-b8fe-b6531b1ec061", "created": "2026-01-27T05:12:58.502387Z", "modified": "2026-01-27T05:12:58.502387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='830dcbf277fb9048cd3a1392fc8ed45c0ea3a84148ba33852289dfb1dac297c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.502387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d199a09-2ba4-4d5b-b33c-8c62517b7f82", "created": "2026-01-27T05:12:58.503379Z", "modified": "2026-01-27T05:12:58.503379Z", "relationship_type": "indicates", "source_ref": "indicator--d6dddec2-794c-4b04-b8fe-b6531b1ec061", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a3c268-1529-4d78-8429-3f982c5c3e0e", "created": "2026-01-27T05:12:58.503564Z", "modified": "2026-01-27T05:12:58.503564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='518b7d6c1aa9cc690701f6d949a6c5dfb6b9485bb3d457030a4fb3200c08adb9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.503564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e3dedf-3f5f-4ad4-a04c-7724b341ceed", "created": "2026-01-27T05:12:58.504407Z", "modified": "2026-01-27T05:12:58.504407Z", "relationship_type": "indicates", "source_ref": "indicator--95a3c268-1529-4d78-8429-3f982c5c3e0e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c311829d-9e77-4caf-9961-d631359e7b73", "created": "2026-01-27T05:12:58.504584Z", "modified": "2026-01-27T05:12:58.504584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be77672e111d3d90698acf07f39c1a36c59b5723f05185e86fade1c2d6c75a09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.504584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98f5bd80-c386-4c95-9af0-29b0a2a3d4bb", "created": "2026-01-27T05:12:58.505437Z", "modified": "2026-01-27T05:12:58.505437Z", "relationship_type": "indicates", "source_ref": "indicator--c311829d-9e77-4caf-9961-d631359e7b73", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee5e0d8-85df-4688-a090-885a2bfaa196", "created": "2026-01-27T05:12:58.505617Z", "modified": "2026-01-27T05:12:58.505617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ce89bc268d34bc8a9acdb4e1e0910423420ab7127b0629bca77778551a0a62d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.505617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--815af730-11ef-4e63-b4dc-5ba8947b88e8", "created": "2026-01-27T05:12:58.506463Z", "modified": "2026-01-27T05:12:58.506463Z", "relationship_type": "indicates", "source_ref": "indicator--3ee5e0d8-85df-4688-a090-885a2bfaa196", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8874a0-a37a-45c9-925c-e9eef9880e02", "created": "2026-01-27T05:12:58.506639Z", "modified": "2026-01-27T05:12:58.506639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75c0210e138f4ab490f9e59d1b1d586771910c61b0e87a27d011a56ca3933384']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.506639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b37d21-08db-4ba9-baae-303f04d29cba", "created": "2026-01-27T05:12:58.507472Z", "modified": "2026-01-27T05:12:58.507472Z", "relationship_type": "indicates", "source_ref": "indicator--4e8874a0-a37a-45c9-925c-e9eef9880e02", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e6cf8f-92d9-46fc-87b5-57949a6ad987", "created": "2026-01-27T05:12:58.507649Z", "modified": "2026-01-27T05:12:58.507649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d8dd1c7a2a7cce465aa7852a29b5cf819d99dd13c9ce60c3f30f9f9250c77e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.507649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4732a3b0-a9c9-4305-ae03-c13ec990a894", "created": "2026-01-27T05:12:58.508502Z", "modified": "2026-01-27T05:12:58.508502Z", "relationship_type": "indicates", "source_ref": "indicator--77e6cf8f-92d9-46fc-87b5-57949a6ad987", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdb80c0-5144-47b4-a049-9fd01c4068e9", "created": "2026-01-27T05:12:58.50868Z", "modified": "2026-01-27T05:12:58.50868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d99836459f75c5280e775d4a39365e12bf2591c60a033a0f6236e14c467d6af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.50868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1c3d682-238c-4af9-89fc-42c93c2a3d92", "created": "2026-01-27T05:12:58.509518Z", "modified": "2026-01-27T05:12:58.509518Z", "relationship_type": "indicates", "source_ref": "indicator--abdb80c0-5144-47b4-a049-9fd01c4068e9", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1629ceb1-645e-4df8-9ea2-63ca0cea5175", "created": "2026-01-27T05:12:58.5097Z", "modified": "2026-01-27T05:12:58.5097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4aabc151cb75b3ef289c5f9288f1a2d8cf67c5c86fab93ecd6c4c5922e20fab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.5097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e60b1c2f-187b-4821-a23f-f61cc0f72912", "created": "2026-01-27T05:12:58.510551Z", "modified": "2026-01-27T05:12:58.510551Z", "relationship_type": "indicates", "source_ref": "indicator--1629ceb1-645e-4df8-9ea2-63ca0cea5175", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715aa03c-e34b-411d-a086-973904b7b83f", "created": "2026-01-27T05:12:58.51073Z", "modified": "2026-01-27T05:12:58.51073Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8754b595aa85bed501a9f7d084245a4d8040f3f019e42e2d1de02de22cb061f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ff036c0-fec6-46ee-82fa-4faeb909dbbb", "created": "2026-01-27T05:12:58.511573Z", "modified": "2026-01-27T05:12:58.511573Z", "relationship_type": "indicates", "source_ref": "indicator--715aa03c-e34b-411d-a086-973904b7b83f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ab0311-dc6e-45fb-bdd5-66722c2f878f", "created": "2026-01-27T05:12:58.51177Z", "modified": "2026-01-27T05:12:58.51177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='501ca9e6893b2df4694bdfd828cb3a90265ef365bf8b7e0934d1fa4bebb67c71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6098f89-2440-4ddf-9545-839a49410ed0", "created": "2026-01-27T05:12:58.512723Z", "modified": "2026-01-27T05:12:58.512723Z", "relationship_type": "indicates", "source_ref": "indicator--01ab0311-dc6e-45fb-bdd5-66722c2f878f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e056d8a-cbd2-4a91-a506-c38f7d01036e", "created": "2026-01-27T05:12:58.51292Z", "modified": "2026-01-27T05:12:58.51292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a030b46e6769dbcec4353878f0d53d25fbe97cd3156285163791de4e2a730c7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da989ad6-9634-437b-af7e-4c8144a1f90b", "created": "2026-01-27T05:12:58.513735Z", "modified": "2026-01-27T05:12:58.513735Z", "relationship_type": "indicates", "source_ref": "indicator--0e056d8a-cbd2-4a91-a506-c38f7d01036e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc59095-83e9-4326-99b2-158371563fb8", "created": "2026-01-27T05:12:58.51393Z", "modified": "2026-01-27T05:12:58.51393Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='305dcea07ceb1dff25a041d10a95d08c7d485d63253c6ec5ce3b57ed0e588887']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f1b0259-4fad-4b2b-b024-b3ed149fc34c", "created": "2026-01-27T05:12:58.514761Z", "modified": "2026-01-27T05:12:58.514761Z", "relationship_type": "indicates", "source_ref": "indicator--8bc59095-83e9-4326-99b2-158371563fb8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be59a033-40f5-421f-b1c9-eb7f080e8847", "created": "2026-01-27T05:12:58.51494Z", "modified": "2026-01-27T05:12:58.51494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fa9be198abadc44e904e60418e7cd9dd1d51a55cad2ffac1c38ccd5b46e752a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86b76316-cd8e-4557-ade6-313febb2cd7e", "created": "2026-01-27T05:12:58.515773Z", "modified": "2026-01-27T05:12:58.515773Z", "relationship_type": "indicates", "source_ref": "indicator--be59a033-40f5-421f-b1c9-eb7f080e8847", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797c694e-d2d6-4dcf-ab9b-b97cc574018f", "created": "2026-01-27T05:12:58.51595Z", "modified": "2026-01-27T05:12:58.51595Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d090c5ea725bb7bdf76adfa3d3be1dab42612e289be0e5efb98e87417eb8de7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c679ab2-96fd-4e58-a6c0-fece9ecd401b", "created": "2026-01-27T05:12:58.516785Z", "modified": "2026-01-27T05:12:58.516785Z", "relationship_type": "indicates", "source_ref": "indicator--797c694e-d2d6-4dcf-ab9b-b97cc574018f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec26ac29-f97c-429f-bad7-3519005a8141", "created": "2026-01-27T05:12:58.51697Z", "modified": "2026-01-27T05:12:58.51697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a08a591e8aac40f2d226f05777fac82a6e5929c85291e97c33eac58825a12396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.51697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--355c347f-f5d6-4c18-adc0-9a7a48c1a5f1", "created": "2026-01-27T05:12:58.517817Z", "modified": "2026-01-27T05:12:58.517817Z", "relationship_type": "indicates", "source_ref": "indicator--ec26ac29-f97c-429f-bad7-3519005a8141", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34ba6ac-9671-40e2-abf2-38dde5d63236", "created": "2026-01-27T05:12:58.517995Z", "modified": "2026-01-27T05:12:58.517995Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8828ba55ff66bc703641de3cee4d393bed542e30ef63033c426dffc8d711f1dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.517995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15e514b1-55f1-46c4-a86e-1406ca62235d", "created": "2026-01-27T05:12:58.518838Z", "modified": "2026-01-27T05:12:58.518838Z", "relationship_type": "indicates", "source_ref": "indicator--d34ba6ac-9671-40e2-abf2-38dde5d63236", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bafc106d-1cbb-4594-8931-561dfc85a6f3", "created": "2026-01-27T05:12:58.519022Z", "modified": "2026-01-27T05:12:58.519022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5884a5df598be76473128c8bf7f92fc1450b794d2cf7db5f3c3a7efef508158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.519022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd2465c0-0471-43a2-a5e7-51de70e0c254", "created": "2026-01-27T05:12:58.519871Z", "modified": "2026-01-27T05:12:58.519871Z", "relationship_type": "indicates", "source_ref": "indicator--bafc106d-1cbb-4594-8931-561dfc85a6f3", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09acc28-0629-4265-a1c0-843edd100865", "created": "2026-01-27T05:12:58.520047Z", "modified": "2026-01-27T05:12:58.520047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac364112ed1229280ddd799d82d16f664500eb46c27ac317acc2b7d439eff72b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.520047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--367c8383-1c5c-4aca-9068-4923816b159f", "created": "2026-01-27T05:12:58.521019Z", "modified": "2026-01-27T05:12:58.521019Z", "relationship_type": "indicates", "source_ref": "indicator--d09acc28-0629-4265-a1c0-843edd100865", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4805e7-7060-445d-bbe2-cbb9b96aa883", "created": "2026-01-27T05:12:58.521196Z", "modified": "2026-01-27T05:12:58.521196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e82c639bc8a4f59045a130a7696e1523d34d15895b98a1adb75d2547b3d17e6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.521196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f58c7a28-0eed-4eac-96c1-778c0d239e93", "created": "2026-01-27T05:12:58.522033Z", "modified": "2026-01-27T05:12:58.522033Z", "relationship_type": "indicates", "source_ref": "indicator--1c4805e7-7060-445d-bbe2-cbb9b96aa883", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d802e90-aec9-401d-9139-ed14a0f9a451", "created": "2026-01-27T05:12:58.522207Z", "modified": "2026-01-27T05:12:58.522207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c721a94374b54c7fb2b2a61b626eac53a68a208db6e8efdb5c9cf6246f4622b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.522207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0874064-22a2-41a5-8698-cf1ac1afd412", "created": "2026-01-27T05:12:58.5231Z", "modified": "2026-01-27T05:12:58.5231Z", "relationship_type": "indicates", "source_ref": "indicator--5d802e90-aec9-401d-9139-ed14a0f9a451", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c59a63-920d-4c9c-9b8a-4b0bb4026666", "created": "2026-01-27T05:12:58.523293Z", "modified": "2026-01-27T05:12:58.523293Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7b0301524262df91b1af8af58fb4472b7faff4d4b651d36ea18b4615ca0df18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.523293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4559f909-4672-4f7c-8c7f-172614bc5173", "created": "2026-01-27T05:12:58.524138Z", "modified": "2026-01-27T05:12:58.524138Z", "relationship_type": "indicates", "source_ref": "indicator--93c59a63-920d-4c9c-9b8a-4b0bb4026666", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfdbb0e-413a-4191-8197-1bc0fc3ce513", "created": "2026-01-27T05:12:58.524315Z", "modified": "2026-01-27T05:12:58.524315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97715ba24db091958df5dc8c7a7f67ed1f051e5c90f426d1f873ec29cd7eb3a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.524315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66193c64-d7dd-4789-8a8a-5fd3bee7aaf9", "created": "2026-01-27T05:12:58.525166Z", "modified": "2026-01-27T05:12:58.525166Z", "relationship_type": "indicates", "source_ref": "indicator--2bfdbb0e-413a-4191-8197-1bc0fc3ce513", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc40f0a-8000-4862-b67b-cb30c7ed5da0", "created": "2026-01-27T05:12:58.525341Z", "modified": "2026-01-27T05:12:58.525341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cf27d94116caaa62da0aedc3a70336ae46fbc409667b32d02e6621a6ab74720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.525341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--523556ed-8a87-438b-bc01-34e9c7cd614f", "created": "2026-01-27T05:12:58.526198Z", "modified": "2026-01-27T05:12:58.526198Z", "relationship_type": "indicates", "source_ref": "indicator--0bc40f0a-8000-4862-b67b-cb30c7ed5da0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d25de9-c733-49d5-af6a-2ccd4a16e946", "created": "2026-01-27T05:12:58.526372Z", "modified": "2026-01-27T05:12:58.526372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='baf843b6c8fbf36d586a29ada5722b02e21d6ee885d98e7765eb0c4fc6250dfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.526372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e003ac31-388c-4ffa-883a-fd33232f945f", "created": "2026-01-27T05:12:58.527213Z", "modified": "2026-01-27T05:12:58.527213Z", "relationship_type": "indicates", "source_ref": "indicator--57d25de9-c733-49d5-af6a-2ccd4a16e946", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdc7411-8d2e-4d32-b849-c0d07d831d95", "created": "2026-01-27T05:12:58.527387Z", "modified": "2026-01-27T05:12:58.527387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cba6dcfdea71a91898ecbd83971bd7aedfe0d8dd5c8748ef171e8184142e4009']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.527387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d05eb96-bbfe-48f3-b853-1424f3e7e45d", "created": "2026-01-27T05:12:58.528235Z", "modified": "2026-01-27T05:12:58.528235Z", "relationship_type": "indicates", "source_ref": "indicator--2bdc7411-8d2e-4d32-b849-c0d07d831d95", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fa89e4-91e7-48e2-a787-91a2a9fffbbe", "created": "2026-01-27T05:12:58.52841Z", "modified": "2026-01-27T05:12:58.52841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33f5c93d68126a0c5b172c874b618d5680c45ebe7f9679d61537f0d475b56b52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.52841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da0161ed-200e-4cf4-80fa-f62b4852a783", "created": "2026-01-27T05:12:58.529247Z", "modified": "2026-01-27T05:12:58.529247Z", "relationship_type": "indicates", "source_ref": "indicator--76fa89e4-91e7-48e2-a787-91a2a9fffbbe", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55db141f-90fe-4b77-8cca-91893b279ec5", "created": "2026-01-27T05:12:58.529421Z", "modified": "2026-01-27T05:12:58.529421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4332a21d82c077b3729d1a2c9cdca62451eec1012a14d7aa6fa6456e48adfd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.529421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7c58e74-c56f-466a-8f2d-05625c074875", "created": "2026-01-27T05:12:58.530385Z", "modified": "2026-01-27T05:12:58.530385Z", "relationship_type": "indicates", "source_ref": "indicator--55db141f-90fe-4b77-8cca-91893b279ec5", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd79156c-a292-4cac-9855-a50f5ed63c70", "created": "2026-01-27T05:12:58.530564Z", "modified": "2026-01-27T05:12:58.530564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f4112d1d0fb449fb1c83ac1644c0b3e5a28439a5ee3ddde5f02d7d96745ec14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.530564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1203490a-37da-424a-bc9e-b3ecd055f763", "created": "2026-01-27T05:12:58.531404Z", "modified": "2026-01-27T05:12:58.531404Z", "relationship_type": "indicates", "source_ref": "indicator--cd79156c-a292-4cac-9855-a50f5ed63c70", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d2e36b-124b-435f-903a-6bd9cfaa8dd9", "created": "2026-01-27T05:12:58.531582Z", "modified": "2026-01-27T05:12:58.531582Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='549289995e5c6bae3f7f9cee7b851bc83e4c1fc9410e93d0de01f5f10040bd02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.531582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01a2976a-bc74-4571-bb76-f82896e17dca", "created": "2026-01-27T05:12:58.532412Z", "modified": "2026-01-27T05:12:58.532412Z", "relationship_type": "indicates", "source_ref": "indicator--b9d2e36b-124b-435f-903a-6bd9cfaa8dd9", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bde3c40-2a0d-459b-9112-a75e6338342b", "created": "2026-01-27T05:12:58.532589Z", "modified": "2026-01-27T05:12:58.532589Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cb6a5ee1b623f173073aeb19a9a6ea1f4278a3f1fa3226792e2e55007011203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.532589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90a861d0-a4ce-421a-9bcc-86ed0ef43dcf", "created": "2026-01-27T05:12:58.533449Z", "modified": "2026-01-27T05:12:58.533449Z", "relationship_type": "indicates", "source_ref": "indicator--5bde3c40-2a0d-459b-9112-a75e6338342b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1252dd84-4c64-4340-be43-e18130c43eaa", "created": "2026-01-27T05:12:58.533626Z", "modified": "2026-01-27T05:12:58.533626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='767304f6cbdd6ffb366727522df761fb96c09643b31c992b6342270f1bef4562']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.533626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9786b4d0-48b5-48cb-a1d4-d6dc469432e1", "created": "2026-01-27T05:12:58.53446Z", "modified": "2026-01-27T05:12:58.53446Z", "relationship_type": "indicates", "source_ref": "indicator--1252dd84-4c64-4340-be43-e18130c43eaa", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d456f6b8-2e95-4198-a7dc-8aed5c5252c5", "created": "2026-01-27T05:12:58.534635Z", "modified": "2026-01-27T05:12:58.534635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='166fe98608bc815ee66047a278e432118c745d39f8fd42d5ef65b65d95ef0369']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.534635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b92ef485-2cce-444d-8f9b-4f41d50514dd", "created": "2026-01-27T05:12:58.535466Z", "modified": "2026-01-27T05:12:58.535466Z", "relationship_type": "indicates", "source_ref": "indicator--d456f6b8-2e95-4198-a7dc-8aed5c5252c5", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd1607b-3ad7-4f78-ad71-4c24bf917bed", "created": "2026-01-27T05:12:58.535639Z", "modified": "2026-01-27T05:12:58.535639Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d57febeb66a6fd289604ca3993cbeda26cd67facfe67ff7861380faff1a638de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.535639Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6865f7ea-cc9f-4993-b501-54e5f2571424", "created": "2026-01-27T05:12:58.536472Z", "modified": "2026-01-27T05:12:58.536472Z", "relationship_type": "indicates", "source_ref": "indicator--8dd1607b-3ad7-4f78-ad71-4c24bf917bed", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f98fe4-b658-4409-97df-4b49c994ab72", "created": "2026-01-27T05:12:58.536651Z", "modified": "2026-01-27T05:12:58.536651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='759a2c3079c80814929b02e42d7c2f0120da433505bf2b4a1efdda5ef088a25c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.536651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6ad8414-45ee-489b-827d-f93081e5c589", "created": "2026-01-27T05:12:58.537475Z", "modified": "2026-01-27T05:12:58.537475Z", "relationship_type": "indicates", "source_ref": "indicator--57f98fe4-b658-4409-97df-4b49c994ab72", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd489c8-c516-4620-84b1-145a2d4fe772", "created": "2026-01-27T05:12:58.537654Z", "modified": "2026-01-27T05:12:58.537654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc014d2237668f688dfa2872558cbb13ac55293533642cab773eb64c33350a05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.537654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c44a826-c7b6-409c-b9b8-985275670da2", "created": "2026-01-27T05:12:58.538493Z", "modified": "2026-01-27T05:12:58.538493Z", "relationship_type": "indicates", "source_ref": "indicator--0cd489c8-c516-4620-84b1-145a2d4fe772", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46de7f3-8e0e-42f6-9408-572aa2717263", "created": "2026-01-27T05:12:58.538696Z", "modified": "2026-01-27T05:12:58.538696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0df406d88bd0e184090750bb2e7db58a9a9f87f794ad8fe1a20c2744bef6ee3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.538696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df4c627b-7a10-485c-9eeb-d4d41a16c703", "created": "2026-01-27T05:12:58.539767Z", "modified": "2026-01-27T05:12:58.539767Z", "relationship_type": "indicates", "source_ref": "indicator--a46de7f3-8e0e-42f6-9408-572aa2717263", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c85021-4403-49df-8c06-bcff06638b40", "created": "2026-01-27T05:12:58.539968Z", "modified": "2026-01-27T05:12:58.539968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='218204686f868406698c45124d7010ada3fb3b2bc5abffcbdd3ee53adb2c824e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.539968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--498569f6-87c1-4682-a3fc-883e9e92c822", "created": "2026-01-27T05:12:58.540847Z", "modified": "2026-01-27T05:12:58.540847Z", "relationship_type": "indicates", "source_ref": "indicator--e5c85021-4403-49df-8c06-bcff06638b40", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eb2f09-9033-4e5e-811d-fd36fb60c622", "created": "2026-01-27T05:12:58.541035Z", "modified": "2026-01-27T05:12:58.541035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5005671403dee02aed2a0a8a63c372b713b4a64030886f796618a28c447f3fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.541035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d9e916a-59c0-4166-ac2b-5e66fd65e605", "created": "2026-01-27T05:12:58.541923Z", "modified": "2026-01-27T05:12:58.541923Z", "relationship_type": "indicates", "source_ref": "indicator--44eb2f09-9033-4e5e-811d-fd36fb60c622", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4803fc8c-f48e-45d6-bddb-6add0391ef51", "created": "2026-01-27T05:12:58.542102Z", "modified": "2026-01-27T05:12:58.542102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0402fac1ebba70be44930201bf46564b2434c771acf606aa6b35b40f07633e97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.542102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e625133b-58ef-47a2-a662-18d25bebd788", "created": "2026-01-27T05:12:58.542962Z", "modified": "2026-01-27T05:12:58.542962Z", "relationship_type": "indicates", "source_ref": "indicator--4803fc8c-f48e-45d6-bddb-6add0391ef51", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079c6ab0-c4b8-4f62-be7a-b3f06e9bedb1", "created": "2026-01-27T05:12:58.54314Z", "modified": "2026-01-27T05:12:58.54314Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab3226bc92a30c5ff9e187e24f2138997141ce56f3d53642223edfd96ae5af03']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.54314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d8286b8-ee8e-4b46-912c-89c095dbe355", "created": "2026-01-27T05:12:58.544067Z", "modified": "2026-01-27T05:12:58.544067Z", "relationship_type": "indicates", "source_ref": "indicator--079c6ab0-c4b8-4f62-be7a-b3f06e9bedb1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863e1291-ad4a-493e-a320-42a1f765abb2", "created": "2026-01-27T05:12:58.544251Z", "modified": "2026-01-27T05:12:58.544251Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='392e97f9d95ca9472df41423116ad60bdae397b3fb0c60e3c0bc71525ec0e5fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.544251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31a62726-1517-43e6-b8d2-05ab0f004aef", "created": "2026-01-27T05:12:58.545094Z", "modified": "2026-01-27T05:12:58.545094Z", "relationship_type": "indicates", "source_ref": "indicator--863e1291-ad4a-493e-a320-42a1f765abb2", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11fc316-90f9-4d84-92aa-6cf6eeeceb53", "created": "2026-01-27T05:12:58.54527Z", "modified": "2026-01-27T05:12:58.54527Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80d78ff98b6aeee7b371c8b3609428dcec9b059920748600afc38e7c9c6aa84c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.54527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfee2640-4c18-4379-bbe5-e069cefd9a76", "created": "2026-01-27T05:12:58.546111Z", "modified": "2026-01-27T05:12:58.546111Z", "relationship_type": "indicates", "source_ref": "indicator--f11fc316-90f9-4d84-92aa-6cf6eeeceb53", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57905f4-64af-44a4-a34b-23c4a6acafbd", "created": "2026-01-27T05:12:58.546288Z", "modified": "2026-01-27T05:12:58.546288Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2eeabe41570f8b997c48fdac5ce1680ec0f9a478db3a2932de5c0a9711bd42ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.546288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbb12118-f973-4d1f-9008-c585bce1fa2d", "created": "2026-01-27T05:12:58.547135Z", "modified": "2026-01-27T05:12:58.547135Z", "relationship_type": "indicates", "source_ref": "indicator--f57905f4-64af-44a4-a34b-23c4a6acafbd", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27c672f-9a5b-49ba-aa23-49578e05a5a7", "created": "2026-01-27T05:12:58.547312Z", "modified": "2026-01-27T05:12:58.547312Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4dc2d3808d9d0b4355db4598455805fd08ffe0b04206eaf6e0c73e165a1c3a94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.547312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be8346fb-48c5-42b5-bef3-471be430a9bc", "created": "2026-01-27T05:12:58.548283Z", "modified": "2026-01-27T05:12:58.548283Z", "relationship_type": "indicates", "source_ref": "indicator--e27c672f-9a5b-49ba-aa23-49578e05a5a7", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497e2c26-4f3c-4894-b1ba-cde258ab1b60", "created": "2026-01-27T05:12:58.548461Z", "modified": "2026-01-27T05:12:58.548461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a89d65d8143b8c08bbcf804937b637690e786c9a2ebc0a37f7069c31f6ba6e9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.548461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c76ee013-ec3b-47e3-9094-a9008a2d837d", "created": "2026-01-27T05:12:58.549309Z", "modified": "2026-01-27T05:12:58.549309Z", "relationship_type": "indicates", "source_ref": "indicator--497e2c26-4f3c-4894-b1ba-cde258ab1b60", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925677b6-bd26-4df7-81ec-d01edf48cdef", "created": "2026-01-27T05:12:58.549485Z", "modified": "2026-01-27T05:12:58.549485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd87a57a655aa415367e2c9717a194f6d3169d58a7983c33464d1f005c8a8b92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.549485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b58bba6-73d3-4ff6-86b2-c39638c07383", "created": "2026-01-27T05:12:58.550322Z", "modified": "2026-01-27T05:12:58.550322Z", "relationship_type": "indicates", "source_ref": "indicator--925677b6-bd26-4df7-81ec-d01edf48cdef", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ac4da1-591e-4b5d-b75f-41b7ab9dc992", "created": "2026-01-27T05:12:58.550498Z", "modified": "2026-01-27T05:12:58.550498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e2af470ab97da2415093e6bfdc9cdebc38c513e8f0fb5ab91b87f1a3bfb9ee6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.550498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3363a48-cfdb-4093-a405-07493a752fa9", "created": "2026-01-27T05:12:58.551337Z", "modified": "2026-01-27T05:12:58.551337Z", "relationship_type": "indicates", "source_ref": "indicator--51ac4da1-591e-4b5d-b75f-41b7ab9dc992", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3224ce3-0230-4de1-bee2-1ec4b667f37e", "created": "2026-01-27T05:12:58.551518Z", "modified": "2026-01-27T05:12:58.551518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7956bbbf94a5984dd67ff85ac7f14fcf3d9ab46f463c8d7c6cb7a2d2654378da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.551518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28364398-550a-4e3f-bc7f-e4e33781f58d", "created": "2026-01-27T05:12:58.55235Z", "modified": "2026-01-27T05:12:58.55235Z", "relationship_type": "indicates", "source_ref": "indicator--c3224ce3-0230-4de1-bee2-1ec4b667f37e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c280c60c-8fe1-48e7-8b82-e05d011720fb", "created": "2026-01-27T05:12:58.552525Z", "modified": "2026-01-27T05:12:58.552525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af804926e9e99351f69ab929e43fd34418df830e2d467e27ed42e5aa3d49c818']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.552525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdf0447b-ee35-4c17-9502-7fb22cde3d89", "created": "2026-01-27T05:12:58.553369Z", "modified": "2026-01-27T05:12:58.553369Z", "relationship_type": "indicates", "source_ref": "indicator--c280c60c-8fe1-48e7-8b82-e05d011720fb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a259f2-ef6c-4fe1-969d-a0c1dec5de7e", "created": "2026-01-27T05:12:58.553543Z", "modified": "2026-01-27T05:12:58.553543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc65e2ca2bff6cbf5262396fc3d8451a189bb43c2c1054847cf328ef1fce1c09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.553543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cf412cc-746a-4b79-9584-d6cfad379b15", "created": "2026-01-27T05:12:58.554382Z", "modified": "2026-01-27T05:12:58.554382Z", "relationship_type": "indicates", "source_ref": "indicator--25a259f2-ef6c-4fe1-969d-a0c1dec5de7e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e66cc23-1bb2-4d8d-a76d-12d060fb1cba", "created": "2026-01-27T05:12:58.554559Z", "modified": "2026-01-27T05:12:58.554559Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97c44463c157d4a3e5e2401856e5376edd1b75463b923f0463cfe294daf7d2f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.554559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dd8501a-35e3-48a2-a83a-6fb2120166ae", "created": "2026-01-27T05:12:58.555412Z", "modified": "2026-01-27T05:12:58.555412Z", "relationship_type": "indicates", "source_ref": "indicator--5e66cc23-1bb2-4d8d-a76d-12d060fb1cba", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09aab17f-1d3e-40d6-88a0-5651eafd7c92", "created": "2026-01-27T05:12:58.555588Z", "modified": "2026-01-27T05:12:58.555588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c8bb9b83627908b7c5f512ecdceaab5d1d7771dfb0905a4b4bb18e82b77b9c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.555588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--250105bf-1598-449e-be3f-5f1b0b094f27", "created": "2026-01-27T05:12:58.556426Z", "modified": "2026-01-27T05:12:58.556426Z", "relationship_type": "indicates", "source_ref": "indicator--09aab17f-1d3e-40d6-88a0-5651eafd7c92", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75a31c9-cc4a-43c5-a37c-0c28086d7999", "created": "2026-01-27T05:12:58.556601Z", "modified": "2026-01-27T05:12:58.556601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fcc10df7f2e68aeb144dbf1e672fae0211c4c8d96d1ce1d181734670cc8c9d83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.556601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--507e9ebb-628d-4059-8a93-855acba86a1f", "created": "2026-01-27T05:12:58.557573Z", "modified": "2026-01-27T05:12:58.557573Z", "relationship_type": "indicates", "source_ref": "indicator--c75a31c9-cc4a-43c5-a37c-0c28086d7999", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c599a934-5f13-41ee-9985-2b6a4e12e783", "created": "2026-01-27T05:12:58.557769Z", "modified": "2026-01-27T05:12:58.557769Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a15ebe89884deab73056b0f84b2bebd46149db37eb64e6567955d7b8d45e3368']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.557769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13031302-36ac-4e88-8e64-7ad8b693ce2f", "created": "2026-01-27T05:12:58.558585Z", "modified": "2026-01-27T05:12:58.558585Z", "relationship_type": "indicates", "source_ref": "indicator--c599a934-5f13-41ee-9985-2b6a4e12e783", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646fe603-5c79-4518-9ad5-87988a05bee8", "created": "2026-01-27T05:12:58.558772Z", "modified": "2026-01-27T05:12:58.558772Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='483d896f6b276543ff7e63c9904fd2f44f9e84bda93472ca117cb5c079e221e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.558772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03f48f45-3268-4b6c-9fd8-773713dc1b35", "created": "2026-01-27T05:12:58.559597Z", "modified": "2026-01-27T05:12:58.559597Z", "relationship_type": "indicates", "source_ref": "indicator--646fe603-5c79-4518-9ad5-87988a05bee8", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21686bce-f572-4d03-b631-f05ca15b058d", "created": "2026-01-27T05:12:58.559784Z", "modified": "2026-01-27T05:12:58.559784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d9c2b030895af7f5be38a527d6d08de0aa2f6be58b594c1abc250b6984821ecd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.559784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da2d0e52-5cd9-4efc-a914-b54f5c921cbc", "created": "2026-01-27T05:12:58.560605Z", "modified": "2026-01-27T05:12:58.560605Z", "relationship_type": "indicates", "source_ref": "indicator--21686bce-f572-4d03-b631-f05ca15b058d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe51bb4-247f-4cbe-9188-99020abeb72a", "created": "2026-01-27T05:12:58.560794Z", "modified": "2026-01-27T05:12:58.560794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0ed21d5fd144f23a58c5775472387a0d4fa6647013d948db307143d7a0b20e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.560794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da1a1b27-ddf3-48d1-b1e9-02b9a3ebce2e", "created": "2026-01-27T05:12:58.561608Z", "modified": "2026-01-27T05:12:58.561608Z", "relationship_type": "indicates", "source_ref": "indicator--cbe51bb4-247f-4cbe-9188-99020abeb72a", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a000ce0-2e11-4af9-8137-d1580c658806", "created": "2026-01-27T05:12:58.561804Z", "modified": "2026-01-27T05:12:58.561804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='207a9ae2aa59a198ede58839008dc24d8ebf9ba99fe41f732ebdebd79423be18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.561804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b17a5ad0-856a-4f8f-8563-a2cae87492ec", "created": "2026-01-27T05:12:58.56263Z", "modified": "2026-01-27T05:12:58.56263Z", "relationship_type": "indicates", "source_ref": "indicator--4a000ce0-2e11-4af9-8137-d1580c658806", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136511d6-36ce-4a98-af3d-87f47ab9a6ee", "created": "2026-01-27T05:12:58.562825Z", "modified": "2026-01-27T05:12:58.562825Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95cdd80a64b9c6e1327d7a2dcb0e852612f05aad8c981200a98fdfaea5ce7a0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.562825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82080cd2-d749-47bc-9b5f-5c519ec2b4e4", "created": "2026-01-27T05:12:58.563654Z", "modified": "2026-01-27T05:12:58.563654Z", "relationship_type": "indicates", "source_ref": "indicator--136511d6-36ce-4a98-af3d-87f47ab9a6ee", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a594e2-3a20-42a4-995d-69bc92ecea53", "created": "2026-01-27T05:12:58.563848Z", "modified": "2026-01-27T05:12:58.563848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3cfc59af419701a70713e049b1d5c896d1876ff931a7018c41de101faf24958']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.563848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da8f2d33-474a-4508-b0b9-b3a401ee18f7", "created": "2026-01-27T05:12:58.564681Z", "modified": "2026-01-27T05:12:58.564681Z", "relationship_type": "indicates", "source_ref": "indicator--00a594e2-3a20-42a4-995d-69bc92ecea53", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5b1e1a-21b6-4ca0-9c6a-c75da0d95b76", "created": "2026-01-27T05:12:58.564872Z", "modified": "2026-01-27T05:12:58.564872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c99e7f942e8299cbb4a652e204b5528904975db3f0db40234ba0b20ea4fd83e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.564872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35e281c1-a863-48df-8c6a-cd87bb5d30cc", "created": "2026-01-27T05:12:58.565703Z", "modified": "2026-01-27T05:12:58.565703Z", "relationship_type": "indicates", "source_ref": "indicator--2e5b1e1a-21b6-4ca0-9c6a-c75da0d95b76", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5783007f-ca6e-4f34-b7ed-3f2a1fc572af", "created": "2026-01-27T05:12:58.565894Z", "modified": "2026-01-27T05:12:58.565894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='468fe728ed93b83460db66108135a40233b3a97bc91b5164df32d2110544087f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.565894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb8b28b8-00b9-47d6-95f6-e45888af6822", "created": "2026-01-27T05:12:58.567161Z", "modified": "2026-01-27T05:12:58.567161Z", "relationship_type": "indicates", "source_ref": "indicator--5783007f-ca6e-4f34-b7ed-3f2a1fc572af", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513a346f-08a5-461a-92d9-4b3143448c4a", "created": "2026-01-27T05:12:58.567339Z", "modified": "2026-01-27T05:12:58.567339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da730bb1514d9707dbf223f8b0c33145e7be98584b96de947f52dc377aa0e697']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.567339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b001229-cc39-48ed-9216-5b83842c70ff", "created": "2026-01-27T05:12:58.568174Z", "modified": "2026-01-27T05:12:58.568174Z", "relationship_type": "indicates", "source_ref": "indicator--513a346f-08a5-461a-92d9-4b3143448c4a", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c67b4b1-362a-4a63-9d88-f41e0a14352d", "created": "2026-01-27T05:12:58.56835Z", "modified": "2026-01-27T05:12:58.56835Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f6cf25c7cf6eacff554971e37a2f9e82f61b515694312ea1b3e3ded5cbb767e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.56835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba57b227-6113-4028-aa9b-44116f5ab165", "created": "2026-01-27T05:12:58.569184Z", "modified": "2026-01-27T05:12:58.569184Z", "relationship_type": "indicates", "source_ref": "indicator--5c67b4b1-362a-4a63-9d88-f41e0a14352d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d9ef51-f51d-4698-9669-b8ded17d95d1", "created": "2026-01-27T05:12:58.569359Z", "modified": "2026-01-27T05:12:58.569359Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82272188b1f2e5802e09eaa2b3f46f25c81b071390a75da5a0eb991d807f2064']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.569359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce8dba0d-248d-497a-806d-a037d2b3f4b5", "created": "2026-01-27T05:12:58.570191Z", "modified": "2026-01-27T05:12:58.570191Z", "relationship_type": "indicates", "source_ref": "indicator--f8d9ef51-f51d-4698-9669-b8ded17d95d1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c52b47-cebe-4d2b-a4b4-77c5c9ed5381", "created": "2026-01-27T05:12:58.570368Z", "modified": "2026-01-27T05:12:58.570368Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cf24d982ba3399722e871fb7b7ce3f54299ab5201946906f8dc32a846883956']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.570368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06d39cc8-e112-4b8a-94c8-e2ff1213eefb", "created": "2026-01-27T05:12:58.571205Z", "modified": "2026-01-27T05:12:58.571205Z", "relationship_type": "indicates", "source_ref": "indicator--d1c52b47-cebe-4d2b-a4b4-77c5c9ed5381", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcae0b7-1ac2-4f2e-a9dd-5ff0fbcbaffb", "created": "2026-01-27T05:12:58.571381Z", "modified": "2026-01-27T05:12:58.571381Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff8990ed2a42c2bccee6e3bda634198a3f74513bb129c93c8d61f963e833aa7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.571381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb5c8eb8-eca6-42c8-9d6e-454a23cbd7f3", "created": "2026-01-27T05:12:58.572271Z", "modified": "2026-01-27T05:12:58.572271Z", "relationship_type": "indicates", "source_ref": "indicator--1bcae0b7-1ac2-4f2e-a9dd-5ff0fbcbaffb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48a2fef-9e04-48c1-9972-710061964eae", "created": "2026-01-27T05:12:58.572448Z", "modified": "2026-01-27T05:12:58.572448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27509254cf91e223a476757e930ec471f7ba20a4922099c4c645520af763de00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.572448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dd600ae-abfa-4a7f-843c-bf874aeee9c7", "created": "2026-01-27T05:12:58.573285Z", "modified": "2026-01-27T05:12:58.573285Z", "relationship_type": "indicates", "source_ref": "indicator--f48a2fef-9e04-48c1-9972-710061964eae", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c39004-2cf1-4133-a289-703fd4d43657", "created": "2026-01-27T05:12:58.573459Z", "modified": "2026-01-27T05:12:58.573459Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00eed6c09ef87c6a39e7412d835d7a686f9e964d13199390715f2b80bdc31cf3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.573459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d2dd546-e25b-44e4-a2e2-c9e928476efb", "created": "2026-01-27T05:12:58.57429Z", "modified": "2026-01-27T05:12:58.57429Z", "relationship_type": "indicates", "source_ref": "indicator--e5c39004-2cf1-4133-a289-703fd4d43657", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b72576-561c-4a75-8b52-0660eb2e25dc", "created": "2026-01-27T05:12:58.574463Z", "modified": "2026-01-27T05:12:58.574463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='157c3c266202e4a424c94119d70d6ae15dc0f7604f986e64e8e68530b8e84916']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.574463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3bf6161-1cb3-4984-814c-eb38eb3e7634", "created": "2026-01-27T05:12:58.575425Z", "modified": "2026-01-27T05:12:58.575425Z", "relationship_type": "indicates", "source_ref": "indicator--05b72576-561c-4a75-8b52-0660eb2e25dc", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca35d7f-0787-4d35-b0f7-5d7d4fd2de3d", "created": "2026-01-27T05:12:58.575605Z", "modified": "2026-01-27T05:12:58.575605Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8946aa2f8e12a5752fed44b5b17a45721b2d9bccc80d3c9c7fad56e44a30b2d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.575605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--687efa24-356a-4718-8967-95f5db73d0a8", "created": "2026-01-27T05:12:58.576552Z", "modified": "2026-01-27T05:12:58.576552Z", "relationship_type": "indicates", "source_ref": "indicator--9ca35d7f-0787-4d35-b0f7-5d7d4fd2de3d", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fac96a4-4cc3-4e6f-8e65-415cde952fb0", "created": "2026-01-27T05:12:58.5768Z", "modified": "2026-01-27T05:12:58.5768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dde982934a97318d1b69a42fd83017cf674e46febb8aa45e9be6e8e50ca4e957']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.5768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22f223a4-4cb0-4c71-850e-db52a7908914", "created": "2026-01-27T05:12:58.577634Z", "modified": "2026-01-27T05:12:58.577634Z", "relationship_type": "indicates", "source_ref": "indicator--9fac96a4-4cc3-4e6f-8e65-415cde952fb0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f525b9-8c48-47bf-a449-a7cc85e12f72", "created": "2026-01-27T05:12:58.577831Z", "modified": "2026-01-27T05:12:58.577831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2ddfb877aa8aa08bb7edfd070a3a0b48983c56f30bc8d51dd9985e8c33e689e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.577831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c784c7a-7d5a-43d5-8d57-9a4dc8f7d8d3", "created": "2026-01-27T05:12:58.578649Z", "modified": "2026-01-27T05:12:58.578649Z", "relationship_type": "indicates", "source_ref": "indicator--59f525b9-8c48-47bf-a449-a7cc85e12f72", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59143a80-32e1-45b2-823c-b70931499282", "created": "2026-01-27T05:12:58.578842Z", "modified": "2026-01-27T05:12:58.578842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00416236b1aef68e56acdbade8d86fb9c052fcd28af17d72e015552af99a6a4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.578842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13e6e2d1-01d4-4499-8e5a-e9d88c82fc19", "created": "2026-01-27T05:12:58.579663Z", "modified": "2026-01-27T05:12:58.579663Z", "relationship_type": "indicates", "source_ref": "indicator--59143a80-32e1-45b2-823c-b70931499282", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66a9786-bf26-4ef2-b1a2-38f046b5178f", "created": "2026-01-27T05:12:58.579859Z", "modified": "2026-01-27T05:12:58.579859Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c19504fc67483d88991016df4fa6a8bce60e9d41ac4a6a25545437d37c809de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.579859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11ef2970-a00b-445c-a00c-6a92fab182b3", "created": "2026-01-27T05:12:58.580675Z", "modified": "2026-01-27T05:12:58.580675Z", "relationship_type": "indicates", "source_ref": "indicator--b66a9786-bf26-4ef2-b1a2-38f046b5178f", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d9c77b-0b81-4d18-8bac-f15764b4f3d1", "created": "2026-01-27T05:12:58.580867Z", "modified": "2026-01-27T05:12:58.580867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c12763bd29097d6c09d53656186d11cad0eaf974879d5385ebeff668f67ad9c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.580867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ecde775-a09c-48b5-92a3-c62f15a62744", "created": "2026-01-27T05:12:58.581681Z", "modified": "2026-01-27T05:12:58.581681Z", "relationship_type": "indicates", "source_ref": "indicator--a0d9c77b-0b81-4d18-8bac-f15764b4f3d1", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e008c3-765f-4bbf-ad43-d8c40a8b6237", "created": "2026-01-27T05:12:58.581873Z", "modified": "2026-01-27T05:12:58.581873Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='android.helper.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.581873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--916bbbed-52bb-4b9e-8b84-358752b5e24a", "created": "2026-01-27T05:12:58.582525Z", "modified": "2026-01-27T05:12:58.582525Z", "relationship_type": "indicates", "source_ref": "indicator--78e008c3-765f-4bbf-ad43-d8c40a8b6237", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bfcf78-81a6-4a19-bab4-6e3014e5afdb", "created": "2026-01-27T05:12:58.582696Z", "modified": "2026-01-27T05:12:58.582696Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='android.sys.process']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.582696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f663934-5c7c-4bbb-a4a8-4bd434636eb8", "created": "2026-01-27T05:12:58.583403Z", "modified": "2026-01-27T05:12:58.583403Z", "relationship_type": "indicates", "source_ref": "indicator--f9bfcf78-81a6-4a19-bab4-6e3014e5afdb", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f4bca0-f95e-4d31-baed-a8f84fc7662c", "created": "2026-01-27T05:12:58.583582Z", "modified": "2026-01-27T05:12:58.583582Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.keyboardhelper']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.583582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3878f920-6f96-42b0-ac94-be2b3c865e01", "created": "2026-01-27T05:12:58.584415Z", "modified": "2026-01-27T05:12:58.584415Z", "relationship_type": "indicates", "source_ref": "indicator--79f4bca0-f95e-4d31-baed-a8f84fc7662c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb14a89-88aa-46eb-8a44-11ed8d0f60ae", "created": "2026-01-27T05:12:58.584598Z", "modified": "2026-01-27T05:12:58.584598Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mspy.lite']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.584598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7d76ebd-1cb3-4e42-ba74-7348b40cc1fb", "created": "2026-01-27T05:12:58.585272Z", "modified": "2026-01-27T05:12:58.585272Z", "relationship_type": "indicates", "source_ref": "indicator--bbb14a89-88aa-46eb-8a44-11ed8d0f60ae", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da72836-1ef6-4f1c-8248-24993e6b6141", "created": "2026-01-27T05:12:58.585455Z", "modified": "2026-01-27T05:12:58.585455Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='core.framework']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.585455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--188d7dd5-6fbb-499a-bfd9-630cf8fec1a9", "created": "2026-01-27T05:12:58.586143Z", "modified": "2026-01-27T05:12:58.586143Z", "relationship_type": "indicates", "source_ref": "indicator--0da72836-1ef6-4f1c-8248-24993e6b6141", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e480c897-4eaa-4bde-af6c-e2a5cd5ae8d0", "created": "2026-01-27T05:12:58.58633Z", "modified": "2026-01-27T05:12:58.58633Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.eyezy.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.58633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c71914f1-ac14-4613-bce2-bd36f797b4ce", "created": "2026-01-27T05:12:58.587018Z", "modified": "2026-01-27T05:12:58.587018Z", "relationship_type": "indicates", "source_ref": "indicator--e480c897-4eaa-4bde-af6c-e2a5cd5ae8d0", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea4ab56-5c4d-4c2e-9e2a-ea4e70c8d8c7", "created": "2026-01-27T05:12:58.58721Z", "modified": "2026-01-27T05:12:58.58721Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='core.update.framework']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.58721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34fb94ef-735e-4f6b-8eca-618db22df867", "created": "2026-01-27T05:12:58.587906Z", "modified": "2026-01-27T05:12:58.587906Z", "relationship_type": "indicates", "source_ref": "indicator--0ea4ab56-5c4d-4c2e-9e2a-ea4e70c8d8c7", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b886c20-7dd0-4a42-a7ed-deabf793172b", "created": "2026-01-27T05:12:58.588096Z", "modified": "2026-01-27T05:12:58.588096Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='med.mspy.mspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.588096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efe51434-e68d-4fbf-8831-8bac204fed55", "created": "2026-01-27T05:12:58.588755Z", "modified": "2026-01-27T05:12:58.588755Z", "relationship_type": "indicates", "source_ref": "indicator--7b886c20-7dd0-4a42-a7ed-deabf793172b", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956cecc9-034f-43c8-96c4-e9d31a10cf3e", "created": "2026-01-27T05:12:58.588938Z", "modified": "2026-01-27T05:12:58.588938Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='system.framework']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.588938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46c6a876-d82d-4833-9c5b-508692b2356b", "created": "2026-01-27T05:12:58.589581Z", "modified": "2026-01-27T05:12:58.589581Z", "relationship_type": "indicates", "source_ref": "indicator--956cecc9-034f-43c8-96c4-e9d31a10cf3e", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87991091-e9ef-4c7a-8526-baa1ba86e4ec", "created": "2026-01-27T05:12:58.589773Z", "modified": "2026-01-27T05:12:58.589773Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='update.service.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.589773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11aa8fd6-1f26-4e01-a2a7-6f5b2d08aabb", "created": "2026-01-27T05:12:58.590424Z", "modified": "2026-01-27T05:12:58.590424Z", "relationship_type": "indicates", "source_ref": "indicator--87991091-e9ef-4c7a-8526-baa1ba86e4ec", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26288244-6933-41b7-9a41-b462e24f0047", "created": "2026-01-27T05:12:58.590601Z", "modified": "2026-01-27T05:12:58.590601Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='update.service.android.installer']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.590601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--feba35ba-b50b-49d8-ad09-cc4bb27d277d", "created": "2026-01-27T05:12:58.591327Z", "modified": "2026-01-27T05:12:58.591327Z", "relationship_type": "indicates", "source_ref": "indicator--26288244-6933-41b7-9a41-b462e24f0047", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14157f9b-940b-4a94-b7d0-42f213ec6f46", "created": "2026-01-27T05:12:58.591506Z", "modified": "2026-01-27T05:12:58.591506Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='021985CEA754D8E58D538D2FEDFF6B1565A6B45B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.591506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--764dbd70-abae-42e2-a518-41efc73c9297", "created": "2026-01-27T05:12:58.592424Z", "modified": "2026-01-27T05:12:58.592424Z", "relationship_type": "indicates", "source_ref": "indicator--14157f9b-940b-4a94-b7d0-42f213ec6f46", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9867c83c-3f89-4dca-b2d5-fe1468482642", "created": "2026-01-27T05:12:58.59261Z", "modified": "2026-01-27T05:12:58.59261Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3930B621F30D13D24692CBBBBC67C59F92F1C9BD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.59261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b78ded87-c019-4442-81de-f2d38bd05525", "created": "2026-01-27T05:12:58.593401Z", "modified": "2026-01-27T05:12:58.593401Z", "relationship_type": "indicates", "source_ref": "indicator--9867c83c-3f89-4dca-b2d5-fe1468482642", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19afc36a-e060-43fc-99ac-1c52c5f7e9db", "created": "2026-01-27T05:12:58.593577Z", "modified": "2026-01-27T05:12:58.593577Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5EEC898F0DBBD70A9B33DD16EE5FF06B6DE26EA6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.593577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3a79da0-f5f3-4891-bf65-f6084057b631", "created": "2026-01-27T05:12:58.594402Z", "modified": "2026-01-27T05:12:58.594402Z", "relationship_type": "indicates", "source_ref": "indicator--19afc36a-e060-43fc-99ac-1c52c5f7e9db", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dfa8ee-5746-4f3a-8961-066a963947af", "created": "2026-01-27T05:12:58.594589Z", "modified": "2026-01-27T05:12:58.594589Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7FFE6DA96346FEE822E1F791176CD6970A1DC770']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.594589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ec5e66c-b890-4f89-b1e2-37a57230d6df", "created": "2026-01-27T05:12:58.595374Z", "modified": "2026-01-27T05:12:58.595374Z", "relationship_type": "indicates", "source_ref": "indicator--d6dfa8ee-5746-4f3a-8961-066a963947af", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a0b3e3-627f-449e-a62e-a7ffbb1358d5", "created": "2026-01-27T05:12:58.59555Z", "modified": "2026-01-27T05:12:58.59555Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E1A6646C93A7423A25104A88DA5BECE2F35EFF0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.59555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbf3823f-890f-40db-9395-6b0e81593a4a", "created": "2026-01-27T05:12:58.596338Z", "modified": "2026-01-27T05:12:58.596338Z", "relationship_type": "indicates", "source_ref": "indicator--17a0b3e3-627f-449e-a62e-a7ffbb1358d5", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d5827c-7342-4908-8b3d-81b81a38bc83", "created": "2026-01-27T05:12:58.596516Z", "modified": "2026-01-27T05:12:58.596516Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CB28ADFD818FBFFDF5542F2EFC5140D596EE957E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.596516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7683b3d5-3d8f-4352-8a69-7e77419ac4d4", "created": "2026-01-27T05:12:58.597298Z", "modified": "2026-01-27T05:12:58.597298Z", "relationship_type": "indicates", "source_ref": "indicator--78d5827c-7342-4908-8b3d-81b81a38bc83", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f875850b-254e-44b8-a55d-2acf63cecb04", "created": "2026-01-27T05:12:58.597474Z", "modified": "2026-01-27T05:12:58.597474Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FE821A533BDC31822D9EB5F98243EB16917C8EE7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.597474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e247177-c949-4e13-b684-56c17a36eae5", "created": "2026-01-27T05:12:58.598297Z", "modified": "2026-01-27T05:12:58.598297Z", "relationship_type": "indicates", "source_ref": "indicator--f875850b-254e-44b8-a55d-2acf63cecb04", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e44ab9-bb33-44fd-a786-9e17e11de31c", "created": "2026-01-27T05:12:58.598478Z", "modified": "2026-01-27T05:12:58.598478Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1ECC7F67BBD1BFAB97ADDCB05A496BCA7B6B135F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.598478Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74074c55-ab45-4649-af46-2cf733d600cb", "created": "2026-01-27T05:12:58.599295Z", "modified": "2026-01-27T05:12:58.599295Z", "relationship_type": "indicates", "source_ref": "indicator--56e44ab9-bb33-44fd-a786-9e17e11de31c", "target_ref": "malware--9996d524-fae1-440b-b78a-541b4106e580"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc", "created": "2026-01-27T05:12:58.599468Z", "modified": "2026-01-27T05:12:58.599468Z", "name": "MeuSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b0d898-b630-49da-9891-f26ed7f0a58e", "created": "2026-01-27T05:12:58.599641Z", "modified": "2026-01-27T05:12:58.599641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.599641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a2e3686-7bab-4fbb-9e65-b20512ae1765", "created": "2026-01-27T05:12:58.600364Z", "modified": "2026-01-27T05:12:58.600364Z", "relationship_type": "indicates", "source_ref": "indicator--a0b0d898-b630-49da-9891-f26ed7f0a58e", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25884dff-2531-4969-8842-c8ba9dfec9e5", "created": "2026-01-27T05:12:58.600538Z", "modified": "2026-01-27T05:12:58.600538Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='n.servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.600538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5084976a-9917-4749-86bc-274791e1e352", "created": "2026-01-27T05:12:58.601365Z", "modified": "2026-01-27T05:12:58.601365Z", "relationship_type": "indicates", "source_ref": "indicator--25884dff-2531-4969-8842-c8ba9dfec9e5", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ff48ae-129f-42a5-bd7f-ece85a5f02b8", "created": "2026-01-27T05:12:58.601548Z", "modified": "2026-01-27T05:12:58.601548Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='l.servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.601548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2d01b7b-e1fb-4836-aac3-1d106cb82dfd", "created": "2026-01-27T05:12:58.602231Z", "modified": "2026-01-27T05:12:58.602231Z", "relationship_type": "indicates", "source_ref": "indicator--91ff48ae-129f-42a5-bd7f-ece85a5f02b8", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c41ccba-5f0d-4930-9855-70f20a926218", "created": "2026-01-27T05:12:58.60241Z", "modified": "2026-01-27T05:12:58.60241Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s.servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.60241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ccf1fdf-ec93-474c-bc14-72bd89840a01", "created": "2026-01-27T05:12:58.603117Z", "modified": "2026-01-27T05:12:58.603117Z", "relationship_type": "indicates", "source_ref": "indicator--9c41ccba-5f0d-4930-9855-70f20a926218", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4d3abe-9b90-4180-bd0a-21be595b6f6b", "created": "2026-01-27T05:12:58.603298Z", "modified": "2026-01-27T05:12:58.603298Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='play-store-3bb64.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.603298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffe9813c-03c9-4435-886d-082cfcb9346e", "created": "2026-01-27T05:12:58.604073Z", "modified": "2026-01-27T05:12:58.604073Z", "relationship_type": "indicates", "source_ref": "indicator--fc4d3abe-9b90-4180-bd0a-21be595b6f6b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b0120b-34ac-4b76-898a-bdea0bad50bf", "created": "2026-01-27T05:12:58.604251Z", "modified": "2026-01-27T05:12:58.604251Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='meuspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.604251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f22ffec9-506d-4a88-808c-8180c4bc6741", "created": "2026-01-27T05:12:58.60495Z", "modified": "2026-01-27T05:12:58.60495Z", "relationship_type": "indicates", "source_ref": "indicator--43b0120b-34ac-4b76-898a-bdea0bad50bf", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10d30a1-1f50-4cac-b127-36782a02a55b", "created": "2026-01-27T05:12:58.605125Z", "modified": "2026-01-27T05:12:58.605125Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitorecell.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.605125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3deee80c-ac06-458d-8c63-569345e19d74", "created": "2026-01-27T05:12:58.60582Z", "modified": "2026-01-27T05:12:58.60582Z", "relationship_type": "indicates", "source_ref": "indicator--f10d30a1-1f50-4cac-b127-36782a02a55b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0eac02-8722-4ef4-8b33-ab08483bc70a", "created": "2026-01-27T05:12:58.605996Z", "modified": "2026-01-27T05:12:58.605996Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='espiao.meuspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.605996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59dd9e64-e8b0-4ad4-ba94-76c1be201f9d", "created": "2026-01-27T05:12:58.606665Z", "modified": "2026-01-27T05:12:58.606665Z", "relationship_type": "indicates", "source_ref": "indicator--2a0eac02-8722-4ef4-8b33-ab08483bc70a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f872c93e-56da-4571-ae16-4d0c0135b6f1", "created": "2026-01-27T05:12:58.606883Z", "modified": "2026-01-27T05:12:58.606883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.espiaodecelulargratis.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.606883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acbc6289-9981-49ba-8932-ad939970240f", "created": "2026-01-27T05:12:58.607585Z", "modified": "2026-01-27T05:12:58.607585Z", "relationship_type": "indicates", "source_ref": "indicator--f872c93e-56da-4571-ae16-4d0c0135b6f1", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e33e3f-45c1-4672-9449-c287df29d0c6", "created": "2026-01-27T05:12:58.607774Z", "modified": "2026-01-27T05:12:58.607774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='espiaodecelulargratis.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.607774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2c78082-1f6d-4060-a082-d261d1577933", "created": "2026-01-27T05:12:58.608468Z", "modified": "2026-01-27T05:12:58.608468Z", "relationship_type": "indicates", "source_ref": "indicator--63e33e3f-45c1-4672-9449-c287df29d0c6", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d60fdd-e7d4-4d6b-ab9d-4a5e05cb8721", "created": "2026-01-27T05:12:58.60864Z", "modified": "2026-01-27T05:12:58.60864Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='servidor.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.60864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2585334-9303-4772-b915-661d39b5e21d", "created": "2026-01-27T05:12:58.609446Z", "modified": "2026-01-27T05:12:58.609446Z", "relationship_type": "indicates", "source_ref": "indicator--83d60fdd-e7d4-4d6b-ab9d-4a5e05cb8721", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c927b67-965f-4526-89a7-be85ba402d5a", "created": "2026-01-27T05:12:58.609624Z", "modified": "2026-01-27T05:12:58.609624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d61488b453037935909bb79aa318f2eb6df007e80e6b3e53014e76630b27b7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.609624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17fb71b6-d3fe-4131-9479-5d61d72e9425", "created": "2026-01-27T05:12:58.610477Z", "modified": "2026-01-27T05:12:58.610477Z", "relationship_type": "indicates", "source_ref": "indicator--9c927b67-965f-4526-89a7-be85ba402d5a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7321d33b-d668-45e2-8e41-bcc7285dcbed", "created": "2026-01-27T05:12:58.61066Z", "modified": "2026-01-27T05:12:58.61066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ead6cfddfe5283c747bc6920d884c8a335722e463a69572b752010d37d499e9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.61066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c50080a1-f6b0-4153-ac50-1303e8adc54b", "created": "2026-01-27T05:12:58.611532Z", "modified": "2026-01-27T05:12:58.611532Z", "relationship_type": "indicates", "source_ref": "indicator--7321d33b-d668-45e2-8e41-bcc7285dcbed", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ebc3c32-6c8a-450b-9e92-6eaeae8b6862", "created": "2026-01-27T05:12:58.61171Z", "modified": "2026-01-27T05:12:58.61171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd5a2f7d4c53b28c6aa43508dfd0d27c8163d57a66f2e2e8c7025aaf8b16ab48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.61171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce685ee0-058e-4d5f-b280-28416c082144", "created": "2026-01-27T05:12:58.612563Z", "modified": "2026-01-27T05:12:58.612563Z", "relationship_type": "indicates", "source_ref": "indicator--2ebc3c32-6c8a-450b-9e92-6eaeae8b6862", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cee8989-c899-4e7f-910a-6f2546fabe41", "created": "2026-01-27T05:12:58.612742Z", "modified": "2026-01-27T05:12:58.612742Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e9f94fdb423395396c4bebccbeb4543d7d729fe41ade6111693be1112ee8f4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.612742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d78defb0-7468-4b49-9e07-5bd8dd803ccb", "created": "2026-01-27T05:12:58.613594Z", "modified": "2026-01-27T05:12:58.613594Z", "relationship_type": "indicates", "source_ref": "indicator--9cee8989-c899-4e7f-910a-6f2546fabe41", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aba3f79-03db-4fff-9c1d-96dcf11c3bea", "created": "2026-01-27T05:12:58.613792Z", "modified": "2026-01-27T05:12:58.613792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12880e5a23c20885a76aecf132a3026f6ca05480b1aa3ce8f64616f7a5df552d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.613792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f96f9ba9-5f41-4bfe-95b9-917e0070d17b", "created": "2026-01-27T05:12:58.614623Z", "modified": "2026-01-27T05:12:58.614623Z", "relationship_type": "indicates", "source_ref": "indicator--8aba3f79-03db-4fff-9c1d-96dcf11c3bea", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648e3c8c-8006-425e-a6fb-19b9ce256a47", "created": "2026-01-27T05:12:58.61483Z", "modified": "2026-01-27T05:12:58.61483Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ea2c19aa256b90129be460a7bb21705b98cb91e8d432dbaeba7124628788e56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.61483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a8bc158-a8b6-4823-a9cb-26c21d417d43", "created": "2026-01-27T05:12:58.615663Z", "modified": "2026-01-27T05:12:58.615663Z", "relationship_type": "indicates", "source_ref": "indicator--648e3c8c-8006-425e-a6fb-19b9ce256a47", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e027645-62c5-4507-aa6a-881e571da6fc", "created": "2026-01-27T05:12:58.615859Z", "modified": "2026-01-27T05:12:58.615859Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70c49c4abb40861f9195e17231952f303dfc3203fa8578efadbfcda8cb20c25d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.615859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eac5a23-2473-44a4-9891-a56f8cac8e9d", "created": "2026-01-27T05:12:58.616691Z", "modified": "2026-01-27T05:12:58.616691Z", "relationship_type": "indicates", "source_ref": "indicator--8e027645-62c5-4507-aa6a-881e571da6fc", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e8d889-889e-488f-a34c-d93e4d6c5acd", "created": "2026-01-27T05:12:58.616882Z", "modified": "2026-01-27T05:12:58.616882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b77358edbfa99450d2b93fc4860d388f8b235b7e99e5dc04f38840f90fe6d823']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.616882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--892fc7fc-0eba-4e58-897c-11ca400eb56e", "created": "2026-01-27T05:12:58.617737Z", "modified": "2026-01-27T05:12:58.617737Z", "relationship_type": "indicates", "source_ref": "indicator--f2e8d889-889e-488f-a34c-d93e4d6c5acd", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316f4be5-b813-4045-897f-47ec58f3c199", "created": "2026-01-27T05:12:58.617931Z", "modified": "2026-01-27T05:12:58.617931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19e83992f9001a6afe25f6bb7537ec13642cece0e697b646156e77c4f83450c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.617931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9de00ae8-21ba-4c62-8e3a-dbc4d77d62f4", "created": "2026-01-27T05:12:58.618939Z", "modified": "2026-01-27T05:12:58.618939Z", "relationship_type": "indicates", "source_ref": "indicator--316f4be5-b813-4045-897f-47ec58f3c199", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05f2f5f-6383-4e05-9a58-232f4cdf382b", "created": "2026-01-27T05:12:58.619136Z", "modified": "2026-01-27T05:12:58.619136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aede95542d2ddbfaa828586f71e031227f40c98f9b2df7b1025ddb241ad638d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.619136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c8c27c4-e6ac-4962-8e09-5a28f1660d65", "created": "2026-01-27T05:12:58.620022Z", "modified": "2026-01-27T05:12:58.620022Z", "relationship_type": "indicates", "source_ref": "indicator--c05f2f5f-6383-4e05-9a58-232f4cdf382b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e158852-f914-49e2-a697-12957c885770", "created": "2026-01-27T05:12:58.620199Z", "modified": "2026-01-27T05:12:58.620199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9f4ecbfb0d0c7efe637527572f6681e10f727a0ff202061a14267a2ab2f9d1a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.620199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2bfde263-8259-405b-a1be-376aaf615359", "created": "2026-01-27T05:12:58.621053Z", "modified": "2026-01-27T05:12:58.621053Z", "relationship_type": "indicates", "source_ref": "indicator--1e158852-f914-49e2-a697-12957c885770", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bbcdea-514b-414c-be5d-6fb678f68c6c", "created": "2026-01-27T05:12:58.621232Z", "modified": "2026-01-27T05:12:58.621232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fcbc5f3bb8f8aa8a44cec1ce98195e0265389dcc367a6e6e443fa1c42f95bd7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.621232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8539ecc-03a4-4957-bddf-8dd97c588ceb", "created": "2026-01-27T05:12:58.622078Z", "modified": "2026-01-27T05:12:58.622078Z", "relationship_type": "indicates", "source_ref": "indicator--d0bbcdea-514b-414c-be5d-6fb678f68c6c", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8068f7bd-79e0-45d3-be7c-7238c26c30e0", "created": "2026-01-27T05:12:58.622255Z", "modified": "2026-01-27T05:12:58.622255Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87396d68345c4d7825be02221868f3897e11333afd0fb2b4f8070d8ba8765e80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.622255Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--377a7382-2046-4489-8de7-1519ae11d727", "created": "2026-01-27T05:12:58.623101Z", "modified": "2026-01-27T05:12:58.623101Z", "relationship_type": "indicates", "source_ref": "indicator--8068f7bd-79e0-45d3-be7c-7238c26c30e0", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0434bb1b-0411-4202-9cf6-fe5673ed478a", "created": "2026-01-27T05:12:58.623275Z", "modified": "2026-01-27T05:12:58.623275Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='051e178449098ea7932917618c7587d54f18eab1d906febc193801d37e2b9caa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.623275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--421a0b1e-4e74-431d-a6e2-dfd1ba621547", "created": "2026-01-27T05:12:58.624112Z", "modified": "2026-01-27T05:12:58.624112Z", "relationship_type": "indicates", "source_ref": "indicator--0434bb1b-0411-4202-9cf6-fe5673ed478a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbee1b05-9f7a-4078-ad25-4763f8c1d24f", "created": "2026-01-27T05:12:58.624286Z", "modified": "2026-01-27T05:12:58.624286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c76a9f0999854fd7ff0aeeb52fa90a49c206d6d63386f7a4a63bf58119c8db1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.624286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5140bd53-f39e-4eda-a8a7-7df216f67166", "created": "2026-01-27T05:12:58.625136Z", "modified": "2026-01-27T05:12:58.625136Z", "relationship_type": "indicates", "source_ref": "indicator--cbee1b05-9f7a-4078-ad25-4763f8c1d24f", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9570b0c-b1f2-4734-9681-5bfd41a638d1", "created": "2026-01-27T05:12:58.62531Z", "modified": "2026-01-27T05:12:58.62531Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0447f1679c8a783bb36d89a6e851c8a3b6640eead26994fe9486f027a665959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.62531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1aa238e7-f7ed-4dfc-b520-948222428953", "created": "2026-01-27T05:12:58.626164Z", "modified": "2026-01-27T05:12:58.626164Z", "relationship_type": "indicates", "source_ref": "indicator--b9570b0c-b1f2-4734-9681-5bfd41a638d1", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61042e8f-791a-48c3-a773-e414e163598e", "created": "2026-01-27T05:12:58.626341Z", "modified": "2026-01-27T05:12:58.626341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='081c92a6b126002c38085eeac0d553c76bed6ba8687f80ea0e760bf6b2f9ad1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.626341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9ce1e4f-6c1b-4cd7-b833-93dd7a7dbd4e", "created": "2026-01-27T05:12:58.627268Z", "modified": "2026-01-27T05:12:58.627268Z", "relationship_type": "indicates", "source_ref": "indicator--61042e8f-791a-48c3-a773-e414e163598e", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adbdef6-9985-42ec-86b3-64639700cf35", "created": "2026-01-27T05:12:58.62747Z", "modified": "2026-01-27T05:12:58.62747Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b04f7fe0ec9e58d950f8f36a7eaa80fe9c42449f3cab32ec5dd413fdbf2ae1c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.62747Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--651a87f0-1d67-4059-a11a-85a3c8d57a2f", "created": "2026-01-27T05:12:58.628456Z", "modified": "2026-01-27T05:12:58.628456Z", "relationship_type": "indicates", "source_ref": "indicator--2adbdef6-9985-42ec-86b3-64639700cf35", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2508315-3e65-47f3-bfd2-25f471512734", "created": "2026-01-27T05:12:58.628634Z", "modified": "2026-01-27T05:12:58.628634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52ad2c5d6ff126e15d37cdf487dd0b1c109df3194fbe0397360d8f841d627f93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.628634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--521e79dc-e4f5-486b-9019-9ec603a67679", "created": "2026-01-27T05:12:58.629483Z", "modified": "2026-01-27T05:12:58.629483Z", "relationship_type": "indicates", "source_ref": "indicator--e2508315-3e65-47f3-bfd2-25f471512734", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18713d77-a4d6-429d-ac7a-c59d2ec8ec4c", "created": "2026-01-27T05:12:58.629661Z", "modified": "2026-01-27T05:12:58.629661Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b2e214a5df407cf5bf5b40046f90b545e096d150d1e5d7e95a2f18959cf6f46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.629661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ed09f3f-77b7-4a76-83ff-86ba1ee6cdac", "created": "2026-01-27T05:12:58.630502Z", "modified": "2026-01-27T05:12:58.630502Z", "relationship_type": "indicates", "source_ref": "indicator--18713d77-a4d6-429d-ac7a-c59d2ec8ec4c", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4c7282-86ca-4a5a-998f-335de228668a", "created": "2026-01-27T05:12:58.63068Z", "modified": "2026-01-27T05:12:58.63068Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb5a23d0a66652f110017a7309578d7f4e79e7f0cd2ea62052bc6cada8bebd59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.63068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e510bec6-4222-4c59-ae62-54fd20e981b2", "created": "2026-01-27T05:12:58.631528Z", "modified": "2026-01-27T05:12:58.631528Z", "relationship_type": "indicates", "source_ref": "indicator--cf4c7282-86ca-4a5a-998f-335de228668a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f04c3c-cd84-4fab-b4ac-0c1ce475b796", "created": "2026-01-27T05:12:58.631703Z", "modified": "2026-01-27T05:12:58.631703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0565a08105be8401c46c73a7966de8cf842785671ab9a60beb2a8828b2ede4d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.631703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0420155b-b6c4-4a09-a8a0-05e61d086fcf", "created": "2026-01-27T05:12:58.632637Z", "modified": "2026-01-27T05:12:58.632637Z", "relationship_type": "indicates", "source_ref": "indicator--80f04c3c-cd84-4fab-b4ac-0c1ce475b796", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1946b21-649d-4cf4-b49f-f2d13d36a0fe", "created": "2026-01-27T05:12:58.632861Z", "modified": "2026-01-27T05:12:58.632861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0121e555be6023ef689f3f0c1a5c9b1941cff26d391eba2501738988b8ea5c18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.632861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c57d87a-6205-4bf5-80d2-606e7b7ceae3", "created": "2026-01-27T05:12:58.633703Z", "modified": "2026-01-27T05:12:58.633703Z", "relationship_type": "indicates", "source_ref": "indicator--c1946b21-649d-4cf4-b49f-f2d13d36a0fe", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea32bdde-3501-4b7c-aabc-bfdd7c91f435", "created": "2026-01-27T05:12:58.6339Z", "modified": "2026-01-27T05:12:58.6339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aac13c7dec7b5acb804d4b896245962c395f1cd6dfce79bc9c96edcf65ae8e68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.6339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af4e360a-d663-41c8-be33-16a4022d4ffe", "created": "2026-01-27T05:12:58.634736Z", "modified": "2026-01-27T05:12:58.634736Z", "relationship_type": "indicates", "source_ref": "indicator--ea32bdde-3501-4b7c-aabc-bfdd7c91f435", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a93c22b-31d8-4bfc-b488-7d1455028229", "created": "2026-01-27T05:12:58.634941Z", "modified": "2026-01-27T05:12:58.634941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b42a90a982744bf601da86e0e938f22f7757367099f39caff40186318621df43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.634941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df9b3c12-c447-4255-96f6-eab5c5c1c2b2", "created": "2026-01-27T05:12:58.635803Z", "modified": "2026-01-27T05:12:58.635803Z", "relationship_type": "indicates", "source_ref": "indicator--9a93c22b-31d8-4bfc-b488-7d1455028229", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe3ce19-7d39-4248-a582-c5f71d31cc6c", "created": "2026-01-27T05:12:58.635987Z", "modified": "2026-01-27T05:12:58.635987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1b06c6e54e7c8ba1ea0579e2751785b554ec0af000d47168483002cdd37878b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.635987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af83b0ae-0e2f-48ec-bdd2-b215bbb4e5cf", "created": "2026-01-27T05:12:58.636985Z", "modified": "2026-01-27T05:12:58.636985Z", "relationship_type": "indicates", "source_ref": "indicator--2fe3ce19-7d39-4248-a582-c5f71d31cc6c", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ab3d84-ee87-469e-bf96-57eec3ce4267", "created": "2026-01-27T05:12:58.637171Z", "modified": "2026-01-27T05:12:58.637171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9619395db1a3eed472b792cc62e216d72f4015c8d1e0de20f50e0aa5b74fb0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.637171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52cf69e4-9940-459f-9d69-0b1e2eded216", "created": "2026-01-27T05:12:58.638054Z", "modified": "2026-01-27T05:12:58.638054Z", "relationship_type": "indicates", "source_ref": "indicator--36ab3d84-ee87-469e-bf96-57eec3ce4267", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a31672-ec4a-42e6-86bb-77a3a3927eca", "created": "2026-01-27T05:12:58.638232Z", "modified": "2026-01-27T05:12:58.638232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e681b1313af537c0ac807e301692ef4b0177e25fe2e2283776ba752892d47f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.638232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f84fb607-6637-4f57-a0f9-f58ecdbf766d", "created": "2026-01-27T05:12:58.639075Z", "modified": "2026-01-27T05:12:58.639075Z", "relationship_type": "indicates", "source_ref": "indicator--e2a31672-ec4a-42e6-86bb-77a3a3927eca", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d82be43-707d-474d-badb-2f3f08ab3c37", "created": "2026-01-27T05:12:58.639249Z", "modified": "2026-01-27T05:12:58.639249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48fa7886cceccec35236eb219100e55f17a77648617e96f66282489e72c2d0d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.639249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9935e72-bb36-4e59-848f-51a110138b83", "created": "2026-01-27T05:12:58.640085Z", "modified": "2026-01-27T05:12:58.640085Z", "relationship_type": "indicates", "source_ref": "indicator--0d82be43-707d-474d-badb-2f3f08ab3c37", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6699ff24-5057-47e7-98f1-bbbcc851fb1f", "created": "2026-01-27T05:12:58.640267Z", "modified": "2026-01-27T05:12:58.640267Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f302340a037576c7765b24c3dfdc8c30f11275ee2e004c3f28ddf883df9969d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.640267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b5ec81-20d7-46f5-b3e5-fa88c293c898", "created": "2026-01-27T05:12:58.641114Z", "modified": "2026-01-27T05:12:58.641114Z", "relationship_type": "indicates", "source_ref": "indicator--6699ff24-5057-47e7-98f1-bbbcc851fb1f", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3496453-b686-42e5-9196-774cea7b2866", "created": "2026-01-27T05:12:58.641295Z", "modified": "2026-01-27T05:12:58.641295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9803ede6da0685e9a71d2d0b6352d2aec8f0d6480c5b40d2fffbeac4b26cd580']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.641295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04633798-2f49-40db-b176-10547a9841e6", "created": "2026-01-27T05:12:58.642137Z", "modified": "2026-01-27T05:12:58.642137Z", "relationship_type": "indicates", "source_ref": "indicator--d3496453-b686-42e5-9196-774cea7b2866", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd389b29-4728-4ce6-a987-72375a7666db", "created": "2026-01-27T05:12:58.642319Z", "modified": "2026-01-27T05:12:58.642319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d333a05b9c0fe70145ace7656d373fc656a97de35bf1f2bf11783de7fec14274']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.642319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea58b414-c2fa-4787-8c1e-410d31429517", "created": "2026-01-27T05:12:58.643169Z", "modified": "2026-01-27T05:12:58.643169Z", "relationship_type": "indicates", "source_ref": "indicator--bd389b29-4728-4ce6-a987-72375a7666db", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfe5066-a938-45e2-8481-09d3674b1139", "created": "2026-01-27T05:12:58.643344Z", "modified": "2026-01-27T05:12:58.643344Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ba7505b93e251ea5b32285b0da00ce741ee52472a4277e1321eb6de3c4371f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.643344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5063177e-2a8b-47cb-bafd-a9fa1d38fc3c", "created": "2026-01-27T05:12:58.64419Z", "modified": "2026-01-27T05:12:58.64419Z", "relationship_type": "indicates", "source_ref": "indicator--8bfe5066-a938-45e2-8481-09d3674b1139", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfb5942-7477-4331-9163-f9745394e7e3", "created": "2026-01-27T05:12:58.644363Z", "modified": "2026-01-27T05:12:58.644363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0892a28616f3ab5c71f3cef7089f9e361ef9c71355d54cb38fe13bc5feae24c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.644363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a84d2fa2-de4b-4752-8274-8ebd0ad4d1e5", "created": "2026-01-27T05:12:58.645195Z", "modified": "2026-01-27T05:12:58.645195Z", "relationship_type": "indicates", "source_ref": "indicator--8dfb5942-7477-4331-9163-f9745394e7e3", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d951157-9c7d-44b4-b95b-bba33dfbe93d", "created": "2026-01-27T05:12:58.645369Z", "modified": "2026-01-27T05:12:58.645369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3126ef39783b476ecf5ab14d5993afe899edf720638e409226afa23a9dbc384c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.645369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6bdfe85-7036-4a00-be5f-11cb0b80041b", "created": "2026-01-27T05:12:58.646334Z", "modified": "2026-01-27T05:12:58.646334Z", "relationship_type": "indicates", "source_ref": "indicator--0d951157-9c7d-44b4-b95b-bba33dfbe93d", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dda4ffd-9d76-4f98-bbfd-c13b1a9ff5a8", "created": "2026-01-27T05:12:58.646513Z", "modified": "2026-01-27T05:12:58.646513Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dffa24c101779b97416f7570f969cd5913cd7e153aa35ae84a20f3302f684101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.646513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95e3495c-125c-499e-9c0e-ba3869af08f7", "created": "2026-01-27T05:12:58.647381Z", "modified": "2026-01-27T05:12:58.647381Z", "relationship_type": "indicates", "source_ref": "indicator--5dda4ffd-9d76-4f98-bbfd-c13b1a9ff5a8", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5b60af-13d7-4c40-a938-127544f415f3", "created": "2026-01-27T05:12:58.647561Z", "modified": "2026-01-27T05:12:58.647561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d8a447321b65b72b95d1dbb4edf3426bed820952fded12de2faa98562498363']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.647561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--932e36ab-a7f4-4b0b-8641-d909ceb2c501", "created": "2026-01-27T05:12:58.648405Z", "modified": "2026-01-27T05:12:58.648405Z", "relationship_type": "indicates", "source_ref": "indicator--3d5b60af-13d7-4c40-a938-127544f415f3", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f0a03d-1e26-45ed-9a40-d4b4a1a9cc1e", "created": "2026-01-27T05:12:58.648582Z", "modified": "2026-01-27T05:12:58.648582Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fee230123d03d9608afc1d89491dafab4d57b5c68a42315b97efd9ff6d1d8480']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.648582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03683dbf-0b78-4471-8d54-163e816f86be", "created": "2026-01-27T05:12:58.649411Z", "modified": "2026-01-27T05:12:58.649411Z", "relationship_type": "indicates", "source_ref": "indicator--f8f0a03d-1e26-45ed-9a40-d4b4a1a9cc1e", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88de2cb-a3a7-46e4-a82b-749b90dfe116", "created": "2026-01-27T05:12:58.649586Z", "modified": "2026-01-27T05:12:58.649586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5de38f37d7b7d8eceeae0909b26c822540fe29fbc9fd0b924b81e41cfbb363e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.649586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a41f77c5-3219-4a7a-bd5f-d62176b11262", "created": "2026-01-27T05:12:58.650433Z", "modified": "2026-01-27T05:12:58.650433Z", "relationship_type": "indicates", "source_ref": "indicator--b88de2cb-a3a7-46e4-a82b-749b90dfe116", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a7abb5-1e6d-4442-8231-cd1300bc4ee1", "created": "2026-01-27T05:12:58.650617Z", "modified": "2026-01-27T05:12:58.650617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f56ed465e9c3d0ffa2dc3695367d29d9874717c2d76418b6a78efdb0bf47b53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.650617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85ec5be2-a6a2-451a-91ac-4404939bfdc2", "created": "2026-01-27T05:12:58.651478Z", "modified": "2026-01-27T05:12:58.651478Z", "relationship_type": "indicates", "source_ref": "indicator--21a7abb5-1e6d-4442-8231-cd1300bc4ee1", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5812f83-2bcd-416d-8f44-4007bf6c4bf7", "created": "2026-01-27T05:12:58.651656Z", "modified": "2026-01-27T05:12:58.651656Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6994f6b58f84f5c1cf9dc36edd9a28b846873036372e4ebb2ebb85e91c780e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.651656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96351c06-4381-43a4-9c74-63327c63878f", "created": "2026-01-27T05:12:58.652491Z", "modified": "2026-01-27T05:12:58.652491Z", "relationship_type": "indicates", "source_ref": "indicator--a5812f83-2bcd-416d-8f44-4007bf6c4bf7", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6f88ff-ae23-4d03-9d04-0725b6cbd98a", "created": "2026-01-27T05:12:58.65267Z", "modified": "2026-01-27T05:12:58.65267Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8dc9a426cc79d3a50cf8349e722dbd568326b24bc2cce3dda286176fc9e24ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.65267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d820b89a-ab51-4d30-814c-4140927a1b0b", "created": "2026-01-27T05:12:58.653518Z", "modified": "2026-01-27T05:12:58.653518Z", "relationship_type": "indicates", "source_ref": "indicator--8a6f88ff-ae23-4d03-9d04-0725b6cbd98a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2fe349-b06e-463b-91a4-cd9dad7a10ff", "created": "2026-01-27T05:12:58.653701Z", "modified": "2026-01-27T05:12:58.653701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66e2e38bd9a88bc47b83f940ddd332ad3da1129f906a511412be00f7f6a9cf92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.653701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--520c91a0-2940-4a9e-8b7b-0c4dbd7e0e98", "created": "2026-01-27T05:12:58.654565Z", "modified": "2026-01-27T05:12:58.654565Z", "relationship_type": "indicates", "source_ref": "indicator--fa2fe349-b06e-463b-91a4-cd9dad7a10ff", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16221229-a892-43b1-a086-78a0a2b6bfd3", "created": "2026-01-27T05:12:58.65474Z", "modified": "2026-01-27T05:12:58.65474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d7a7aea398c58f4c3fde8c37abbae54be531717932dc16bce84637e7cf5d11b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.65474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d8bd0cc-8522-4395-8df0-18d4068ed31b", "created": "2026-01-27T05:12:58.655711Z", "modified": "2026-01-27T05:12:58.655711Z", "relationship_type": "indicates", "source_ref": "indicator--16221229-a892-43b1-a086-78a0a2b6bfd3", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b887100-b172-49d9-bdf6-ee5e0024b91d", "created": "2026-01-27T05:12:58.655906Z", "modified": "2026-01-27T05:12:58.655906Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8a33d82cb0f981250175e789bc585599b7745565b28fef522451ca6c7b898da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.655906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21c8ab58-b273-43fd-b951-36925d750517", "created": "2026-01-27T05:12:58.656765Z", "modified": "2026-01-27T05:12:58.656765Z", "relationship_type": "indicates", "source_ref": "indicator--4b887100-b172-49d9-bdf6-ee5e0024b91d", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc06ccc-96ca-453f-b1b2-458c0ba1812b", "created": "2026-01-27T05:12:58.656946Z", "modified": "2026-01-27T05:12:58.656946Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c06594c3f7684d633161c99bd53d86d340aaece23f96d3a951fa02dbe8c7061a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.656946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4a89ae9-cf7d-47a7-8b93-b94cab1a4e97", "created": "2026-01-27T05:12:58.657775Z", "modified": "2026-01-27T05:12:58.657775Z", "relationship_type": "indicates", "source_ref": "indicator--cfc06ccc-96ca-453f-b1b2-458c0ba1812b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1963df60-4469-4645-87e9-d33b5f163e54", "created": "2026-01-27T05:12:58.657962Z", "modified": "2026-01-27T05:12:58.657962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b367dc7ebf8f5e8ade0d70c1f24376b3edb133aa6ba539e411dfe55accfc5938']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.657962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29e2a87d-5f3c-485f-8573-2d2e7285a55b", "created": "2026-01-27T05:12:58.65879Z", "modified": "2026-01-27T05:12:58.65879Z", "relationship_type": "indicates", "source_ref": "indicator--1963df60-4469-4645-87e9-d33b5f163e54", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef0395b-eb39-4d49-9cde-2df496eebe24", "created": "2026-01-27T05:12:58.658968Z", "modified": "2026-01-27T05:12:58.658968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36946639ff7a0edd11857ab93956de4d2efc567c6d9b91f67bfd76972dd89d68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.658968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--049a9303-deb1-42bb-a76c-5353ed3143f2", "created": "2026-01-27T05:12:58.659797Z", "modified": "2026-01-27T05:12:58.659797Z", "relationship_type": "indicates", "source_ref": "indicator--3ef0395b-eb39-4d49-9cde-2df496eebe24", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85422b2e-db87-46de-bd9c-18f5d3d1f09f", "created": "2026-01-27T05:12:58.659972Z", "modified": "2026-01-27T05:12:58.659972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40a209d5a72553f5a22cb14ea642cdec95aea8749189a8aa47d84bac87de530f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.659972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb68a1b1-1aec-4f9a-a21a-cd0bec06f1ce", "created": "2026-01-27T05:12:58.660795Z", "modified": "2026-01-27T05:12:58.660795Z", "relationship_type": "indicates", "source_ref": "indicator--85422b2e-db87-46de-bd9c-18f5d3d1f09f", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ba935f-6beb-468b-b345-ae8efcff9578", "created": "2026-01-27T05:12:58.660968Z", "modified": "2026-01-27T05:12:58.660968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3991e8bd37ec6fc2f03df9fe5f2e5ef8ace526c0d5c0f54cb9dbc99c4e1b9bd7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.660968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbb44312-e569-48be-a839-88e538e19734", "created": "2026-01-27T05:12:58.661861Z", "modified": "2026-01-27T05:12:58.661861Z", "relationship_type": "indicates", "source_ref": "indicator--86ba935f-6beb-468b-b345-ae8efcff9578", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0038c9fd-3509-4cec-9db9-d41a85288444", "created": "2026-01-27T05:12:58.662045Z", "modified": "2026-01-27T05:12:58.662045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c8d28b5bfb26976a1b02403a8b21a13d73bf3f677c66b77515fa71cdae97dac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.662045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58958aa9-b8be-44f2-8a45-f1c1b532d898", "created": "2026-01-27T05:12:58.662969Z", "modified": "2026-01-27T05:12:58.662969Z", "relationship_type": "indicates", "source_ref": "indicator--0038c9fd-3509-4cec-9db9-d41a85288444", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31efaaa-fdf7-498a-8b5d-1e923e427232", "created": "2026-01-27T05:12:58.663156Z", "modified": "2026-01-27T05:12:58.663156Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9bc5bb5b7dbe2b4298d419f0e6de987cd270b5c6442e6326b61775ca704ab4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.663156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--931acdde-e675-4141-943b-1777551a98f9", "created": "2026-01-27T05:12:58.664146Z", "modified": "2026-01-27T05:12:58.664146Z", "relationship_type": "indicates", "source_ref": "indicator--c31efaaa-fdf7-498a-8b5d-1e923e427232", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d5b3b5-130f-4959-871e-684b156b462b", "created": "2026-01-27T05:12:58.664329Z", "modified": "2026-01-27T05:12:58.664329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66142abed999f8fb22ae48836009508de97a6ccf08634166c5a263121dafd995']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.664329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e88f5c64-4029-444a-8728-37c4e8e1c016", "created": "2026-01-27T05:12:58.665213Z", "modified": "2026-01-27T05:12:58.665213Z", "relationship_type": "indicates", "source_ref": "indicator--27d5b3b5-130f-4959-871e-684b156b462b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ea48bc-8671-46c1-8177-2a5604717e63", "created": "2026-01-27T05:12:58.665403Z", "modified": "2026-01-27T05:12:58.665403Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01dba4e95ff4afd9938f9f7889c36060722041665d96d1a19ff6a7c40f431dd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.665403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a9457ad-4733-4e9c-865b-6ac9b9135786", "created": "2026-01-27T05:12:58.666286Z", "modified": "2026-01-27T05:12:58.666286Z", "relationship_type": "indicates", "source_ref": "indicator--c4ea48bc-8671-46c1-8177-2a5604717e63", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbea70c8-2a5c-49e2-a525-2465ddd40e53", "created": "2026-01-27T05:12:58.666496Z", "modified": "2026-01-27T05:12:58.666496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='092608edcf4e1cdf564cc520ec7c4f2c9ccb80a017df2610c3988783269ebff5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.666496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0670b61e-8031-4747-a4f1-8b36b9f971d5", "created": "2026-01-27T05:12:58.667378Z", "modified": "2026-01-27T05:12:58.667378Z", "relationship_type": "indicates", "source_ref": "indicator--fbea70c8-2a5c-49e2-a525-2465ddd40e53", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db934921-afd7-420a-b1d9-44d70a9ff481", "created": "2026-01-27T05:12:58.667558Z", "modified": "2026-01-27T05:12:58.667558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06a58b4d9a363abf3112ac61d74ba02587d80917534de68e6951ecf211f8fe26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.667558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--061093b2-f2d4-4284-b442-88bd568ed671", "created": "2026-01-27T05:12:58.668392Z", "modified": "2026-01-27T05:12:58.668392Z", "relationship_type": "indicates", "source_ref": "indicator--db934921-afd7-420a-b1d9-44d70a9ff481", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d84a3ff-c41b-4254-85c9-625160b6390d", "created": "2026-01-27T05:12:58.668577Z", "modified": "2026-01-27T05:12:58.668577Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34725136b028210b7f852f5dd3dd501aadfad62501bc31a1bcdc891d27b38ab8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.668577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3e407ac-1b17-4a73-aba6-f978e896a423", "created": "2026-01-27T05:12:58.669421Z", "modified": "2026-01-27T05:12:58.669421Z", "relationship_type": "indicates", "source_ref": "indicator--3d84a3ff-c41b-4254-85c9-625160b6390d", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944c84f8-ce2b-40cb-9a8c-d0ba5a6c5742", "created": "2026-01-27T05:12:58.669605Z", "modified": "2026-01-27T05:12:58.669605Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5acbab149609464f49cb403ca206b2573f479b563b522bf1eb3735b58b757245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.669605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00286a3a-2b47-46fc-859b-a466c2a32cf6", "created": "2026-01-27T05:12:58.670455Z", "modified": "2026-01-27T05:12:58.670455Z", "relationship_type": "indicates", "source_ref": "indicator--944c84f8-ce2b-40cb-9a8c-d0ba5a6c5742", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5375dd7c-62ce-42bc-b007-867d11d4568a", "created": "2026-01-27T05:12:58.670632Z", "modified": "2026-01-27T05:12:58.670632Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='762f37796fb724ccff5f38e7f172b2a74803df051d717560930bd2e7033f5238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.670632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bc36805-1c41-4c9a-ab3c-17b987e15edc", "created": "2026-01-27T05:12:58.671497Z", "modified": "2026-01-27T05:12:58.671497Z", "relationship_type": "indicates", "source_ref": "indicator--5375dd7c-62ce-42bc-b007-867d11d4568a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff461b69-b74f-491a-b972-bb0374779965", "created": "2026-01-27T05:12:58.671677Z", "modified": "2026-01-27T05:12:58.671677Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9147f641d3a8799e51f2b5164e2a481b2c2b0ef4baae28edbbcc7f7b7536d13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.671677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92182ee5-6ff8-4761-8982-da29c9732d4b", "created": "2026-01-27T05:12:58.672517Z", "modified": "2026-01-27T05:12:58.672517Z", "relationship_type": "indicates", "source_ref": "indicator--ff461b69-b74f-491a-b972-bb0374779965", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232c960a-01c7-414d-8e47-da8cf6696081", "created": "2026-01-27T05:12:58.67269Z", "modified": "2026-01-27T05:12:58.67269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='851f99ddf2ba43c0a3b09cf43863e25cc707a51558669417663c74c48dc2df0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.67269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--162b010a-1eae-4ceb-98c0-3d11ee9765c7", "created": "2026-01-27T05:12:58.674073Z", "modified": "2026-01-27T05:12:58.674073Z", "relationship_type": "indicates", "source_ref": "indicator--232c960a-01c7-414d-8e47-da8cf6696081", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffdfb22-5c2d-4943-b982-082e42c70f73", "created": "2026-01-27T05:12:58.674252Z", "modified": "2026-01-27T05:12:58.674252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d916c4b0f60c745011b8a5c764cfb444d225339c89517b1a2a8542ac225c80d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.674252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5087bfd2-303b-4920-b194-b2f997b31b4e", "created": "2026-01-27T05:12:58.675097Z", "modified": "2026-01-27T05:12:58.675097Z", "relationship_type": "indicates", "source_ref": "indicator--fffdfb22-5c2d-4943-b982-082e42c70f73", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03103d15-9da6-466b-9bf7-6f8ab226a0ca", "created": "2026-01-27T05:12:58.675276Z", "modified": "2026-01-27T05:12:58.675276Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.com.app.com.app.aplintal']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.675276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e41de8b6-4857-4fc3-8a35-fc9acd97280b", "created": "2026-01-27T05:12:58.675965Z", "modified": "2026-01-27T05:12:58.675965Z", "relationship_type": "indicates", "source_ref": "indicator--03103d15-9da6-466b-9bf7-6f8ab226a0ca", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00ca951-5de2-4150-90b2-3c95f7cc42f1", "created": "2026-01-27T05:12:58.676141Z", "modified": "2026-01-27T05:12:58.676141Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.insapp2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.676141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f206398a-01aa-400e-8981-257030f5bbb5", "created": "2026-01-27T05:12:58.676805Z", "modified": "2026-01-27T05:12:58.676805Z", "relationship_type": "indicates", "source_ref": "indicator--b00ca951-5de2-4150-90b2-3c95f7cc42f1", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2d0fc8-621b-43fd-803b-157cc9d8391a", "created": "2026-01-27T05:12:58.676996Z", "modified": "2026-01-27T05:12:58.676996Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.meuspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.676996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b68f675-2ded-49f3-be2f-02bf4b82dd55", "created": "2026-01-27T05:12:58.67763Z", "modified": "2026-01-27T05:12:58.67763Z", "relationship_type": "indicates", "source_ref": "indicator--8a2d0fc8-621b-43fd-803b-157cc9d8391a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0b678e-b59c-4f6a-8a11-d7e14efd3ef0", "created": "2026-01-27T05:12:58.677835Z", "modified": "2026-01-27T05:12:58.677835Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.cloud.aplicativo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.677835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31ee0fc7-be31-4131-b855-d3f8e280a3fd", "created": "2026-01-27T05:12:58.678492Z", "modified": "2026-01-27T05:12:58.678492Z", "relationship_type": "indicates", "source_ref": "indicator--0c0b678e-b59c-4f6a-8a11-d7e14efd3ef0", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d556f5-e164-4b5e-afc2-de847bdbcdbe", "created": "2026-01-27T05:12:58.678669Z", "modified": "2026-01-27T05:12:58.678669Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.cloud.backup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.678669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e85b1715-def7-469d-b657-a7750d9767e5", "created": "2026-01-27T05:12:58.679338Z", "modified": "2026-01-27T05:12:58.679338Z", "relationship_type": "indicates", "source_ref": "indicator--36d556f5-e164-4b5e-afc2-de847bdbcdbe", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990b50c9-c914-4aa5-bf8a-8754cb82853c", "created": "2026-01-27T05:12:58.679514Z", "modified": "2026-01-27T05:12:58.679514Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.daggers.gameap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.679514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6805e99c-0aea-4f42-bde2-384e6f7c7d3a", "created": "2026-01-27T05:12:58.680222Z", "modified": "2026-01-27T05:12:58.680222Z", "relationship_type": "indicates", "source_ref": "indicator--990b50c9-c914-4aa5-bf8a-8754cb82853c", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98016d4d-3cdc-49e2-8966-f0606040de96", "created": "2026-01-27T05:12:58.680399Z", "modified": "2026-01-27T05:12:58.680399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.daggers.toshtec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.680399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6010fcf-1400-4706-8a02-178afde394a5", "created": "2026-01-27T05:12:58.68107Z", "modified": "2026-01-27T05:12:58.68107Z", "relationship_type": "indicates", "source_ref": "indicator--98016d4d-3cdc-49e2-8966-f0606040de96", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2529f3a8-69ea-4cc4-8688-53fe094bc373", "created": "2026-01-27T05:12:58.681245Z", "modified": "2026-01-27T05:12:58.681245Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.cloud1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.681245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a7fa01d-86f2-46e2-86e1-d2b45fae1a34", "created": "2026-01-27T05:12:58.68204Z", "modified": "2026-01-27T05:12:58.68204Z", "relationship_type": "indicates", "source_ref": "indicator--2529f3a8-69ea-4cc4-8688-53fe094bc373", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af59856c-f94c-467b-9396-a6961b1bca1e", "created": "2026-01-27T05:12:58.682219Z", "modified": "2026-01-27T05:12:58.682219Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.go5ge']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.682219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--799f2de4-a2f9-4cf8-8a54-edf85c60cbc4", "created": "2026-01-27T05:12:58.682894Z", "modified": "2026-01-27T05:12:58.682894Z", "relationship_type": "indicates", "source_ref": "indicator--af59856c-f94c-467b-9396-a6961b1bca1e", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d28b94-bb54-4cd2-8754-25fcfc0b26de", "created": "2026-01-27T05:12:58.683079Z", "modified": "2026-01-27T05:12:58.683079Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.maps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.683079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4044e53a-fb5c-4c41-a84c-e701f9e12803", "created": "2026-01-27T05:12:58.683728Z", "modified": "2026-01-27T05:12:58.683728Z", "relationship_type": "indicates", "source_ref": "indicator--33d28b94-bb54-4cd2-8754-25fcfc0b26de", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68685505-f479-4906-90d4-a0fed3eb1760", "created": "2026-01-27T05:12:58.683919Z", "modified": "2026-01-27T05:12:58.683919Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.radio']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.683919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54d56249-2030-476d-92af-73daf3f2e57a", "created": "2026-01-27T05:12:58.684568Z", "modified": "2026-01-27T05:12:58.684568Z", "relationship_type": "indicates", "source_ref": "indicator--68685505-f479-4906-90d4-a0fed3eb1760", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8223e60b-05cb-4ca2-b1d5-a0c0508e0203", "created": "2026-01-27T05:12:58.684741Z", "modified": "2026-01-27T05:12:58.684741Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.phonecell.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.684741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9948cf90-8985-478b-b482-8a191eb2a170", "created": "2026-01-27T05:12:58.685449Z", "modified": "2026-01-27T05:12:58.685449Z", "relationship_type": "indicates", "source_ref": "indicator--8223e60b-05cb-4ca2-b1d5-a0c0508e0203", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56775e2f-159c-4f0a-8029-d0cc2c4bb942", "created": "2026-01-27T05:12:58.685626Z", "modified": "2026-01-27T05:12:58.685626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.sistema.aplicativo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.685626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac60b5cf-7f85-4260-9e93-747e91cc8384", "created": "2026-01-27T05:12:58.686307Z", "modified": "2026-01-27T05:12:58.686307Z", "relationship_type": "indicates", "source_ref": "indicator--56775e2f-159c-4f0a-8029-d0cc2c4bb942", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bb33a2-2e8b-42e3-b99d-084b47384d4a", "created": "2026-01-27T05:12:58.68648Z", "modified": "2026-01-27T05:12:58.68648Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.monsthers.gameap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.68648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70520a6f-4311-4f86-bd08-a0091bfe3269", "created": "2026-01-27T05:12:58.687151Z", "modified": "2026-01-27T05:12:58.687151Z", "relationship_type": "indicates", "source_ref": "indicator--e7bb33a2-2e8b-42e3-b99d-084b47384d4a", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206edb1-f281-457a-996b-fa7dbf4d15eb", "created": "2026-01-27T05:12:58.687326Z", "modified": "2026-01-27T05:12:58.687326Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='in.servidor.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.687326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f0cefe5-8ddd-45a7-b8e1-aada4c6f2014", "created": "2026-01-27T05:12:58.688042Z", "modified": "2026-01-27T05:12:58.688042Z", "relationship_type": "indicates", "source_ref": "indicator--4206edb1-f281-457a-996b-fa7dbf4d15eb", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c81d22-7311-4135-aaf1-23bb23cfab0d", "created": "2026-01-27T05:12:58.688223Z", "modified": "2026-01-27T05:12:58.688223Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.galaxys.gameap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.688223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d10c9027-16bd-474c-a9ff-8caf65d03796", "created": "2026-01-27T05:12:58.688923Z", "modified": "2026-01-27T05:12:58.688923Z", "relationship_type": "indicates", "source_ref": "indicator--c2c81d22-7311-4135-aaf1-23bb23cfab0d", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415d6d8b-d770-4bd3-bde3-519ce946acf0", "created": "2026-01-27T05:12:58.689101Z", "modified": "2026-01-27T05:12:58.689101Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.gamelevel.playstart']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.689101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23d5e42d-35a4-4582-a469-7f7dc9a6bb97", "created": "2026-01-27T05:12:58.689783Z", "modified": "2026-01-27T05:12:58.689783Z", "relationship_type": "indicates", "source_ref": "indicator--415d6d8b-d770-4bd3-bde3-519ce946acf0", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef870fc8-6072-4ba2-97d7-e83dec26f24b", "created": "2026-01-27T05:12:58.689959Z", "modified": "2026-01-27T05:12:58.689959Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.gamelevel.cloudv3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.689959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9f349c3-3aaf-4f41-a266-7449a734c57b", "created": "2026-01-27T05:12:58.690761Z", "modified": "2026-01-27T05:12:58.690761Z", "relationship_type": "indicates", "source_ref": "indicator--ef870fc8-6072-4ba2-97d7-e83dec26f24b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8813b3-220b-44a0-9f80-0b6db450ad1b", "created": "2026-01-27T05:12:58.69094Z", "modified": "2026-01-27T05:12:58.69094Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tutorial.instalao']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.69094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee6fa92d-e8ad-4d3f-a039-2a40e6d3e242", "created": "2026-01-27T05:12:58.691592Z", "modified": "2026-01-27T05:12:58.691592Z", "relationship_type": "indicates", "source_ref": "indicator--8e8813b3-220b-44a0-9f80-0b6db450ad1b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7a0d32-a2cf-4499-80a7-e053083b9212", "created": "2026-01-27T05:12:58.691791Z", "modified": "2026-01-27T05:12:58.691791Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aisistem.instalao']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.691791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4fc71c5-df9b-4bc3-a021-daa6eaf5f00a", "created": "2026-01-27T05:12:58.692461Z", "modified": "2026-01-27T05:12:58.692461Z", "relationship_type": "indicates", "source_ref": "indicator--8d7a0d32-a2cf-4499-80a7-e053083b9212", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a84a4f-839c-423e-9d8f-868ca788d9fa", "created": "2026-01-27T05:12:58.692637Z", "modified": "2026-01-27T05:12:58.692637Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.appfornecedor.legal']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.692637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--550fa8ec-063f-4fd0-87fc-81a9bac35479", "created": "2026-01-27T05:12:58.693314Z", "modified": "2026-01-27T05:12:58.693314Z", "relationship_type": "indicates", "source_ref": "indicator--02a84a4f-839c-423e-9d8f-868ca788d9fa", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec75e47a-f41d-4ac5-b190-b0e126a85adf", "created": "2026-01-27T05:12:58.693488Z", "modified": "2026-01-27T05:12:58.693488Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77E86A5C583256B5A52A5AEEB70542CD1BE34A99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.693488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ff85793-8cb9-4a9e-b714-f7724484f8fe", "created": "2026-01-27T05:12:58.694291Z", "modified": "2026-01-27T05:12:58.694291Z", "relationship_type": "indicates", "source_ref": "indicator--ec75e47a-f41d-4ac5-b190-b0e126a85adf", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97af598d-1b4b-4b8d-9380-12a5fe03f40c", "created": "2026-01-27T05:12:58.694469Z", "modified": "2026-01-27T05:12:58.694469Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E929DB5941C185EA4FAC2B0D7BA7589D40A379E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.694469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78ad4d49-a13e-4b81-8979-8567e2f4abfe", "created": "2026-01-27T05:12:58.695254Z", "modified": "2026-01-27T05:12:58.695254Z", "relationship_type": "indicates", "source_ref": "indicator--97af598d-1b4b-4b8d-9380-12a5fe03f40c", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210b6bb1-2be6-41c9-b8ed-95f5fec0e85f", "created": "2026-01-27T05:12:58.695462Z", "modified": "2026-01-27T05:12:58.695462Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8CA103D22C39282D7A1E8028D93333E481CCA83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.695462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca0f6f79-6a57-448c-8719-84ec9a3d31c5", "created": "2026-01-27T05:12:58.69626Z", "modified": "2026-01-27T05:12:58.69626Z", "relationship_type": "indicates", "source_ref": "indicator--210b6bb1-2be6-41c9-b8ed-95f5fec0e85f", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fea5c4-4a0e-4609-87ad-38303633e0a3", "created": "2026-01-27T05:12:58.696436Z", "modified": "2026-01-27T05:12:58.696436Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='018D06B4A5679892572CB9DA44BA1A8C1E3B68A5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.696436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7ced869-dc84-4c16-a43e-2172e20227fc", "created": "2026-01-27T05:12:58.697232Z", "modified": "2026-01-27T05:12:58.697232Z", "relationship_type": "indicates", "source_ref": "indicator--46fea5c4-4a0e-4609-87ad-38303633e0a3", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e05ec80-f2f3-4f9a-bc32-1a655c2b775d", "created": "2026-01-27T05:12:58.697405Z", "modified": "2026-01-27T05:12:58.697405Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B0A100360B029E0B2105F60E2C8EEB9053998A7E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.697405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3d79a4b-2e76-4dde-ba72-5dd64ecac285", "created": "2026-01-27T05:12:58.698223Z", "modified": "2026-01-27T05:12:58.698223Z", "relationship_type": "indicates", "source_ref": "indicator--3e05ec80-f2f3-4f9a-bc32-1a655c2b775d", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cc809be-3b10-4ef0-a75b-0d6510eab4fe", "created": "2026-01-27T05:12:58.698403Z", "modified": "2026-01-27T05:12:58.698403Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E0E02AD30F042E096A7A5654217B846EA08C02D1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.698403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bedb14d-5ca2-4595-8500-8c3187b1832e", "created": "2026-01-27T05:12:58.699333Z", "modified": "2026-01-27T05:12:58.699333Z", "relationship_type": "indicates", "source_ref": "indicator--6cc809be-3b10-4ef0-a75b-0d6510eab4fe", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7335ad-a47f-4616-9481-2fe66a2cde84", "created": "2026-01-27T05:12:58.699512Z", "modified": "2026-01-27T05:12:58.699512Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='493812991A9A1CC7BEEFD45F2180CD2FC0AF8913']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.699512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af8baf68-3f81-4bbd-8654-7532d3a62b43", "created": "2026-01-27T05:12:58.700299Z", "modified": "2026-01-27T05:12:58.700299Z", "relationship_type": "indicates", "source_ref": "indicator--ff7335ad-a47f-4616-9481-2fe66a2cde84", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365f9ad7-d7db-4481-9e26-8132aa173516", "created": "2026-01-27T05:12:58.700474Z", "modified": "2026-01-27T05:12:58.700474Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35B05ACC96D02849E20D9ED3BA9CEA41C2B83FFA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.700474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71b79b1d-231b-45ce-8352-c63ddddb9556", "created": "2026-01-27T05:12:58.701253Z", "modified": "2026-01-27T05:12:58.701253Z", "relationship_type": "indicates", "source_ref": "indicator--365f9ad7-d7db-4481-9e26-8132aa173516", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d570f36-10e1-484b-8b1d-cc2730537b76", "created": "2026-01-27T05:12:58.701431Z", "modified": "2026-01-27T05:12:58.701431Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6C0B8CF7F47DB7A82A2C06D410690935FDD912DF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.701431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--802eb7eb-4aaa-47f1-a1c8-18d358b3a43c", "created": "2026-01-27T05:12:58.702222Z", "modified": "2026-01-27T05:12:58.702222Z", "relationship_type": "indicates", "source_ref": "indicator--0d570f36-10e1-484b-8b1d-cc2730537b76", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36be0129-e225-467d-81a8-9c6564d1684b", "created": "2026-01-27T05:12:58.702394Z", "modified": "2026-01-27T05:12:58.702394Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='18C94FAB82F77F89546600F84D2D2B48A0C0B927']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.702394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de0abc17-795c-4966-8d23-8079390eda71", "created": "2026-01-27T05:12:58.70318Z", "modified": "2026-01-27T05:12:58.70318Z", "relationship_type": "indicates", "source_ref": "indicator--36be0129-e225-467d-81a8-9c6564d1684b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9717746e-4656-4f86-a696-0639f93538d9", "created": "2026-01-27T05:12:58.703353Z", "modified": "2026-01-27T05:12:58.703353Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0AF3219D3A9525CB4A618215DB7A29CBFD9FFE78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.703353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--642e3341-7c6c-467c-8bd1-1307bef476ca", "created": "2026-01-27T05:12:58.704151Z", "modified": "2026-01-27T05:12:58.704151Z", "relationship_type": "indicates", "source_ref": "indicator--9717746e-4656-4f86-a696-0639f93538d9", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf66bf94-5916-49fd-b42c-00cb489dd64f", "created": "2026-01-27T05:12:58.704324Z", "modified": "2026-01-27T05:12:58.704324Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6B1DC3EAE0E8C59E7769A6E0A1BAA1938620A191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.704324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--910db25f-eb63-4b25-b5f4-f0cce2d75e6e", "created": "2026-01-27T05:12:58.705119Z", "modified": "2026-01-27T05:12:58.705119Z", "relationship_type": "indicates", "source_ref": "indicator--cf66bf94-5916-49fd-b42c-00cb489dd64f", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b074137e-8367-46ab-bda6-436dd0507caf", "created": "2026-01-27T05:12:58.705301Z", "modified": "2026-01-27T05:12:58.705301Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8508603AE680C3BCDE91E6F909BF400F6DC878B4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.705301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52d2b2f-bc41-4b56-a0dc-7df37d14abb7", "created": "2026-01-27T05:12:58.706092Z", "modified": "2026-01-27T05:12:58.706092Z", "relationship_type": "indicates", "source_ref": "indicator--b074137e-8367-46ab-bda6-436dd0507caf", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0a3695-6308-4d2d-9b2f-0ed85e78a3a7", "created": "2026-01-27T05:12:58.706272Z", "modified": "2026-01-27T05:12:58.706272Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DD34B4E5125F07BA50738192FBE7B745785FC15A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.706272Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4af6a921-7dba-4dc7-a9f1-36a092a25bee", "created": "2026-01-27T05:12:58.707177Z", "modified": "2026-01-27T05:12:58.707177Z", "relationship_type": "indicates", "source_ref": "indicator--ea0a3695-6308-4d2d-9b2f-0ed85e78a3a7", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22d7e35-a09a-4c8b-932b-01ef65c3488b", "created": "2026-01-27T05:12:58.707353Z", "modified": "2026-01-27T05:12:58.707353Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AF113D18054A6B8DE74644BCE3F0AE41206B16AC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.707353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d463218-0e12-4338-b1d6-c084cc8858b1", "created": "2026-01-27T05:12:58.708143Z", "modified": "2026-01-27T05:12:58.708143Z", "relationship_type": "indicates", "source_ref": "indicator--e22d7e35-a09a-4c8b-932b-01ef65c3488b", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44cf362d-48ea-4009-858c-31a6da2bbaad", "created": "2026-01-27T05:12:58.708322Z", "modified": "2026-01-27T05:12:58.708322Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A7E75010B3709D54D52CCE914AF06946744F5F67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.708322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--daf64de8-fa18-4bd9-a6c1-7cc34367c72d", "created": "2026-01-27T05:12:58.709111Z", "modified": "2026-01-27T05:12:58.709111Z", "relationship_type": "indicates", "source_ref": "indicator--44cf362d-48ea-4009-858c-31a6da2bbaad", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647cfcec-703e-4d35-8ee0-1f38fb7d6d02", "created": "2026-01-27T05:12:58.709287Z", "modified": "2026-01-27T05:12:58.709287Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='53486B8F8790D1848E0842F37B5C6DFA15CD3EBB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.709287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53bf1626-90b3-45bd-84e6-01760066d1ab", "created": "2026-01-27T05:12:58.710098Z", "modified": "2026-01-27T05:12:58.710098Z", "relationship_type": "indicates", "source_ref": "indicator--647cfcec-703e-4d35-8ee0-1f38fb7d6d02", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9293eb-af31-43e4-8ecb-283914e57743", "created": "2026-01-27T05:12:58.710273Z", "modified": "2026-01-27T05:12:58.710273Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='114C4DC0F254EFD81F0AC7F41DBE882FFDB2E127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.710273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--694263ef-6ab4-42c0-bf4b-44fcacde6ae2", "created": "2026-01-27T05:12:58.71106Z", "modified": "2026-01-27T05:12:58.71106Z", "relationship_type": "indicates", "source_ref": "indicator--ba9293eb-af31-43e4-8ecb-283914e57743", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79fd0c9-a34c-4c70-a8fa-cf147450873d", "created": "2026-01-27T05:12:58.711243Z", "modified": "2026-01-27T05:12:58.711243Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='50CADBA5487E7C00D67C8FF0D3A952D7B62BEE9A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.711243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25d27f66-8996-499f-98e6-d430b87c7bd6", "created": "2026-01-27T05:12:58.712032Z", "modified": "2026-01-27T05:12:58.712032Z", "relationship_type": "indicates", "source_ref": "indicator--a79fd0c9-a34c-4c70-a8fa-cf147450873d", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adadac8-0ccb-4cfa-ab6c-b9902d3cf192", "created": "2026-01-27T05:12:58.712207Z", "modified": "2026-01-27T05:12:58.712207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B9F546776987F0F2FF893325D2CCDF7F62F0D56E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.712207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75755f73-0c1d-4000-9743-65d6d727295b", "created": "2026-01-27T05:12:58.713021Z", "modified": "2026-01-27T05:12:58.713021Z", "relationship_type": "indicates", "source_ref": "indicator--5adadac8-0ccb-4cfa-ab6c-b9902d3cf192", "target_ref": "malware--a457f1fa-b1fa-482d-af0a-73803d1ac9dc"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6", "created": "2026-01-27T05:12:58.7132Z", "modified": "2026-01-27T05:12:58.7132Z", "name": "AppSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6c42dc-a093-477b-82ae-010ab4099a2f", "created": "2026-01-27T05:12:58.713374Z", "modified": "2026-01-27T05:12:58.713374Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.free-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.713374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c36a129-54c2-4e76-9ef7-7a54d0b402cf", "created": "2026-01-27T05:12:58.71407Z", "modified": "2026-01-27T05:12:58.71407Z", "relationship_type": "indicates", "source_ref": "indicator--9c6c42dc-a093-477b-82ae-010ab4099a2f", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c29a66-de9a-4075-a84f-a66df4a50fa9", "created": "2026-01-27T05:12:58.714253Z", "modified": "2026-01-27T05:12:58.714253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.714253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80b93f95-a363-42df-8897-88e82e481a46", "created": "2026-01-27T05:12:58.714954Z", "modified": "2026-01-27T05:12:58.714954Z", "relationship_type": "indicates", "source_ref": "indicator--77c29a66-de9a-4075-a84f-a66df4a50fa9", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e98595-a5c2-4826-a658-37f7e1277536", "created": "2026-01-27T05:12:58.715132Z", "modified": "2026-01-27T05:12:58.715132Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy-net.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.715132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2a7816e-2719-4f84-9726-dfb93f1b0613", "created": "2026-01-27T05:12:58.715978Z", "modified": "2026-01-27T05:12:58.715978Z", "relationship_type": "indicates", "source_ref": "indicator--70e98595-a5c2-4826-a658-37f7e1277536", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c780f92-c0b0-4244-b220-33b7fc0808c2", "created": "2026-01-27T05:12:58.716155Z", "modified": "2026-01-27T05:12:58.716155Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.716155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47fd2b79-9fad-42be-b257-04fdff3bb923", "created": "2026-01-27T05:12:58.716826Z", "modified": "2026-01-27T05:12:58.716826Z", "relationship_type": "indicates", "source_ref": "indicator--4c780f92-c0b0-4244-b220-33b7fc0808c2", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5804e68f-96b1-4383-97ce-92583c6e35ea", "created": "2026-01-27T05:12:58.717008Z", "modified": "2026-01-27T05:12:58.717008Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freemobilespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.717008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04367252-ec9d-4ad6-ac83-8243b39a7030", "created": "2026-01-27T05:12:58.717675Z", "modified": "2026-01-27T05:12:58.717675Z", "relationship_type": "indicates", "source_ref": "indicator--5804e68f-96b1-4383-97ce-92583c6e35ea", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edfdc7a-0ebc-4e0a-bdde-a48f181d1979", "created": "2026-01-27T05:12:58.717875Z", "modified": "2026-01-27T05:12:58.717875Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.717875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4aee4f8-3a59-4a3e-8282-8c453ce0b9cb", "created": "2026-01-27T05:12:58.718542Z", "modified": "2026-01-27T05:12:58.718542Z", "relationship_type": "indicates", "source_ref": "indicator--8edfdc7a-0ebc-4e0a-bdde-a48f181d1979", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7df165-8505-4c87-8b32-6f0a99305613", "created": "2026-01-27T05:12:58.718723Z", "modified": "2026-01-27T05:12:58.718723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.appspyfree.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.718723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--972407a6-8a20-4d6e-936e-ed164e929133", "created": "2026-01-27T05:12:58.719419Z", "modified": "2026-01-27T05:12:58.719419Z", "relationship_type": "indicates", "source_ref": "indicator--6d7df165-8505-4c87-8b32-6f0a99305613", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57773bdb-acda-4a59-ae01-a67593e114de", "created": "2026-01-27T05:12:58.719596Z", "modified": "2026-01-27T05:12:58.719596Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.freephonespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.719596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74c4c561-85d4-4543-a55b-303ae7ca6602", "created": "2026-01-27T05:12:58.720287Z", "modified": "2026-01-27T05:12:58.720287Z", "relationship_type": "indicates", "source_ref": "indicator--57773bdb-acda-4a59-ae01-a67593e114de", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b780fe3-a29d-4e36-b578-d3f5b4d94657", "created": "2026-01-27T05:12:58.720461Z", "modified": "2026-01-27T05:12:58.720461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.mobilespyfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.720461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d6da0cc-d381-4490-a9b3-803e2eefc1a9", "created": "2026-01-27T05:12:58.721163Z", "modified": "2026-01-27T05:12:58.721163Z", "relationship_type": "indicates", "source_ref": "indicator--2b780fe3-a29d-4e36-b578-d3f5b4d94657", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bdb991-56e8-4de5-8271-0257015a0324", "created": "2026-01-27T05:12:58.721338Z", "modified": "2026-01-27T05:12:58.721338Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.721338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5111a666-4d8b-4e39-8b38-7fa07ab613c0", "created": "2026-01-27T05:12:58.722027Z", "modified": "2026-01-27T05:12:58.722027Z", "relationship_type": "indicates", "source_ref": "indicator--23bdb991-56e8-4de5-8271-0257015a0324", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de07a6f-842a-408b-a01d-61e8571cfcf5", "created": "2026-01-27T05:12:58.722199Z", "modified": "2026-01-27T05:12:58.722199Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.722199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--094af1e0-f4fe-4040-9d27-44377f4ebfbd", "created": "2026-01-27T05:12:58.722889Z", "modified": "2026-01-27T05:12:58.722889Z", "relationship_type": "indicates", "source_ref": "indicator--9de07a6f-842a-408b-a01d-61e8571cfcf5", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2e1844-7c9d-480a-850f-5f144652cfd8", "created": "2026-01-27T05:12:58.723064Z", "modified": "2026-01-27T05:12:58.723064Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appspyfree.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.723064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5430984-b5fc-43d0-abf1-1115e91a7187", "created": "2026-01-27T05:12:58.723863Z", "modified": "2026-01-27T05:12:58.723863Z", "relationship_type": "indicates", "source_ref": "indicator--5a2e1844-7c9d-480a-850f-5f144652cfd8", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e66b80-8cad-4bdf-8b3e-dcd6dec1e316", "created": "2026-01-27T05:12:58.724041Z", "modified": "2026-01-27T05:12:58.724041Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apptracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.724041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ccf52a3-926c-48c4-9016-f08b892bd134", "created": "2026-01-27T05:12:58.724701Z", "modified": "2026-01-27T05:12:58.724701Z", "relationship_type": "indicates", "source_ref": "indicator--b1e66b80-8cad-4bdf-8b3e-dcd6dec1e316", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0478d19c-7f1a-4ef9-9f97-099e0f74bd9f", "created": "2026-01-27T05:12:58.724893Z", "modified": "2026-01-27T05:12:58.724893Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphonespyappon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.724893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbf2552-f58a-4e48-902f-e4193e3b304c", "created": "2026-01-27T05:12:58.72557Z", "modified": "2026-01-27T05:12:58.72557Z", "relationship_type": "indicates", "source_ref": "indicator--0478d19c-7f1a-4ef9-9f97-099e0f74bd9f", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f464cce-9f12-4f09-af05-8bac26df3981", "created": "2026-01-27T05:12:58.725742Z", "modified": "2026-01-27T05:12:58.725742Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='free-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.725742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1025417-2329-4eaf-8152-488302ceffde", "created": "2026-01-27T05:12:58.726419Z", "modified": "2026-01-27T05:12:58.726419Z", "relationship_type": "indicates", "source_ref": "indicator--6f464cce-9f12-4f09-af05-8bac26df3981", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa5740c-6f84-42d3-9726-4b146d97620b", "created": "2026-01-27T05:12:58.726592Z", "modified": "2026-01-27T05:12:58.726592Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='free.apptracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.726592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bc5128e-f828-4da3-b0bd-916b1d773fec", "created": "2026-01-27T05:12:58.727281Z", "modified": "2026-01-27T05:12:58.727281Z", "relationship_type": "indicates", "source_ref": "indicator--5aa5740c-6f84-42d3-9726-4b146d97620b", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566ba4a9-2058-48b1-97cf-1691334d7d77", "created": "2026-01-27T05:12:58.727454Z", "modified": "2026-01-27T05:12:58.727454Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freemobilespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.727454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51834c45-7bbe-4f89-9520-00d44e42f7b1", "created": "2026-01-27T05:12:58.728195Z", "modified": "2026-01-27T05:12:58.728195Z", "relationship_type": "indicates", "source_ref": "indicator--566ba4a9-2058-48b1-97cf-1691334d7d77", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31217981-a954-4d5f-96a0-a8232828e033", "created": "2026-01-27T05:12:58.728368Z", "modified": "2026-01-27T05:12:58.728368Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freephonespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.728368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1158141c-237b-4e92-b973-d82bb3f3ea0f", "created": "2026-01-27T05:12:58.729049Z", "modified": "2026-01-27T05:12:58.729049Z", "relationship_type": "indicates", "source_ref": "indicator--31217981-a954-4d5f-96a0-a8232828e033", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4993b43b-6fc2-4391-b7a3-cd7e40e8b06a", "created": "2026-01-27T05:12:58.729233Z", "modified": "2026-01-27T05:12:58.729233Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='justseries.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.729233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e41f13d9-69ab-4f9d-a79f-a26759ad994b", "created": "2026-01-27T05:12:58.729911Z", "modified": "2026-01-27T05:12:58.729911Z", "relationship_type": "indicates", "source_ref": "indicator--4993b43b-6fc2-4391-b7a3-cd7e40e8b06a", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af690767-afd6-4954-bfaf-9a6bf6debd8c", "created": "2026-01-27T05:12:58.730086Z", "modified": "2026-01-27T05:12:58.730086Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespyfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.730086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9718711-6be8-474b-97ba-616d121b1a5a", "created": "2026-01-27T05:12:58.730808Z", "modified": "2026-01-27T05:12:58.730808Z", "relationship_type": "indicates", "source_ref": "indicator--af690767-afd6-4954-bfaf-9a6bf6debd8c", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba87be04-1745-4d87-9b4e-47cfa78b5583", "created": "2026-01-27T05:12:58.730988Z", "modified": "2026-01-27T05:12:58.730988Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyren.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.730988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c25db1b0-953c-46a2-b9f6-d4570fa3ffde", "created": "2026-01-27T05:12:58.731797Z", "modified": "2026-01-27T05:12:58.731797Z", "relationship_type": "indicates", "source_ref": "indicator--ba87be04-1745-4d87-9b4e-47cfa78b5583", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c846d0e9-7731-4ee4-9162-622f0f0cc4c8", "created": "2026-01-27T05:12:58.731975Z", "modified": "2026-01-27T05:12:58.731975Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackerfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.731975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7adba10d-901e-4e3b-963c-cac6b90805ba", "created": "2026-01-27T05:12:58.732636Z", "modified": "2026-01-27T05:12:58.732636Z", "relationship_type": "indicates", "source_ref": "indicator--c846d0e9-7731-4ee4-9162-622f0f0cc4c8", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1913e1a6-72a4-422b-88fa-7b88a84d9c9b", "created": "2026-01-27T05:12:58.732834Z", "modified": "2026-01-27T05:12:58.732834Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.appspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.732834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afddefc0-6401-4da7-8a86-bb9b5b8895f3", "created": "2026-01-27T05:12:58.733503Z", "modified": "2026-01-27T05:12:58.733503Z", "relationship_type": "indicates", "source_ref": "indicator--1913e1a6-72a4-422b-88fa-7b88a84d9c9b", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac39791-33bf-4348-8cd9-a9ef946a84d1", "created": "2026-01-27T05:12:58.733678Z", "modified": "2026-01-27T05:12:58.733678Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.appspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.733678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8445282-975a-4aa8-a352-b725b7a4afb5", "created": "2026-01-27T05:12:58.734359Z", "modified": "2026-01-27T05:12:58.734359Z", "relationship_type": "indicates", "source_ref": "indicator--cac39791-33bf-4348-8cd9-a9ef946a84d1", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6e8e5a-699f-41c4-9ca7-1154ed0722ad", "created": "2026-01-27T05:12:58.734535Z", "modified": "2026-01-27T05:12:58.734535Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.apptracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.734535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--467e2957-1b42-4b4c-b456-8ed758f56cc4", "created": "2026-01-27T05:12:58.735223Z", "modified": "2026-01-27T05:12:58.735223Z", "relationship_type": "indicates", "source_ref": "indicator--6c6e8e5a-699f-41c4-9ca7-1154ed0722ad", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9360a6-e40e-45b9-9259-2868518ea040", "created": "2026-01-27T05:12:58.735397Z", "modified": "2026-01-27T05:12:58.735397Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.cellphonespyappon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.735397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d7c97b9-7c47-4b8c-ad54-7d6f9193a1e2", "created": "2026-01-27T05:12:58.736139Z", "modified": "2026-01-27T05:12:58.736139Z", "relationship_type": "indicates", "source_ref": "indicator--4f9360a6-e40e-45b9-9259-2868518ea040", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c847892b-713a-4980-84b9-390970456aa6", "created": "2026-01-27T05:12:58.736317Z", "modified": "2026-01-27T05:12:58.736317Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.freemobilespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.736317Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ecfdf5b-1455-45a6-bc66-a7d130ef0ced", "created": "2026-01-27T05:12:58.737045Z", "modified": "2026-01-27T05:12:58.737045Z", "relationship_type": "indicates", "source_ref": "indicator--c847892b-713a-4980-84b9-390970456aa6", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbd115c-e50c-4a6a-9cb0-0050323b6b39", "created": "2026-01-27T05:12:58.73722Z", "modified": "2026-01-27T05:12:58.73722Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.freephonespy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.73722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44631d88-8998-4c2b-a576-dfb668c4a36a", "created": "2026-01-27T05:12:58.737932Z", "modified": "2026-01-27T05:12:58.737932Z", "relationship_type": "indicates", "source_ref": "indicator--fdbd115c-e50c-4a6a-9cb0-0050323b6b39", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e6d14b-f97a-4f1d-bf3c-e1bfa02268e5", "created": "2026-01-27T05:12:58.738117Z", "modified": "2026-01-27T05:12:58.738117Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilespyfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.738117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--989016d6-7b51-406e-a126-9b189da0cee4", "created": "2026-01-27T05:12:58.738825Z", "modified": "2026-01-27T05:12:58.738825Z", "relationship_type": "indicates", "source_ref": "indicator--e6e6d14b-f97a-4f1d-bf3c-e1bfa02268e5", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829be271-69f2-4e3b-9c0b-4eb8bf697a59", "created": "2026-01-27T05:12:58.738999Z", "modified": "2026-01-27T05:12:58.738999Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyren.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.738999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75ab2f22-936b-4476-84b3-f49a0802b621", "created": "2026-01-27T05:12:58.739799Z", "modified": "2026-01-27T05:12:58.739799Z", "relationship_type": "indicates", "source_ref": "indicator--829be271-69f2-4e3b-9c0b-4eb8bf697a59", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b814e1f1-7cb7-4a3c-8433-88c8acf033bc", "created": "2026-01-27T05:12:58.739977Z", "modified": "2026-01-27T05:12:58.739977Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackerfree.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.739977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96af8e02-e7e8-449c-b8ef-76da5729e6b5", "created": "2026-01-27T05:12:58.740645Z", "modified": "2026-01-27T05:12:58.740645Z", "relationship_type": "indicates", "source_ref": "indicator--b814e1f1-7cb7-4a3c-8433-88c8acf033bc", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c5844d-b1a4-45eb-aaf2-b7f4364fe37c", "created": "2026-01-27T05:12:58.740835Z", "modified": "2026-01-27T05:12:58.740835Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.xvids.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.740835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f23e7e5-cf41-43f4-993b-e8cdaa18a99f", "created": "2026-01-27T05:12:58.741495Z", "modified": "2026-01-27T05:12:58.741495Z", "relationship_type": "indicates", "source_ref": "indicator--59c5844d-b1a4-45eb-aaf2-b7f4364fe37c", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3802db-0591-4db4-9070-5503641e7dc3", "created": "2026-01-27T05:12:58.741665Z", "modified": "2026-01-27T05:12:58.741665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xvids.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.741665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3ef4535-c1f2-4069-b57d-14fd75b3f1b9", "created": "2026-01-27T05:12:58.742337Z", "modified": "2026-01-27T05:12:58.742337Z", "relationship_type": "indicates", "source_ref": "indicator--ed3802db-0591-4db4-9070-5503641e7dc3", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac2ea2d-1264-4087-9ed3-9ddd2d611dc8", "created": "2026-01-27T05:12:58.742515Z", "modified": "2026-01-27T05:12:58.742515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6c9b63eda49c6f00b47e4fc1a2320a91378a9e9eadeff5324cc972e59d43046']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.742515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8d9c254-03b9-43bf-8055-9cc91e8c337c", "created": "2026-01-27T05:12:58.743384Z", "modified": "2026-01-27T05:12:58.743384Z", "relationship_type": "indicates", "source_ref": "indicator--bac2ea2d-1264-4087-9ed3-9ddd2d611dc8", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b1b755-0180-4f6a-b233-0b85fa374122", "created": "2026-01-27T05:12:58.743559Z", "modified": "2026-01-27T05:12:58.743559Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2986278fb13c2ee360235ca814d3c42c03a41b14bddf0ab222caec30d974b529']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.743559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4533151f-cf17-4f2e-9780-a0c811564e6b", "created": "2026-01-27T05:12:58.744396Z", "modified": "2026-01-27T05:12:58.744396Z", "relationship_type": "indicates", "source_ref": "indicator--55b1b755-0180-4f6a-b233-0b85fa374122", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4067e2eb-ac70-4fd1-bc19-63558a9002d3", "created": "2026-01-27T05:12:58.744573Z", "modified": "2026-01-27T05:12:58.744573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a4f4e4d3d0eea2128f112c759ef7561d4109813c909b5675096a4c4e1fedebe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.744573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2ae0ae2-dcc2-4017-bad7-bca5967a0642", "created": "2026-01-27T05:12:58.745411Z", "modified": "2026-01-27T05:12:58.745411Z", "relationship_type": "indicates", "source_ref": "indicator--4067e2eb-ac70-4fd1-bc19-63558a9002d3", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd7b332-a521-4fbc-9197-095ffb024658", "created": "2026-01-27T05:12:58.745592Z", "modified": "2026-01-27T05:12:58.745592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c332a7aa934516020b4736cb1fa92380a6c9aec4fd24b02f3db19d4c7639b1a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.745592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0ab3895-28e7-45e5-9afe-2969f310c5ee", "created": "2026-01-27T05:12:58.746434Z", "modified": "2026-01-27T05:12:58.746434Z", "relationship_type": "indicates", "source_ref": "indicator--cdd7b332-a521-4fbc-9197-095ffb024658", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0443e8-1de2-4851-b6f7-4f7a142026ca", "created": "2026-01-27T05:12:58.746634Z", "modified": "2026-01-27T05:12:58.746634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1a45094b55f6d581c1de2b3267ffa71f717567af493cf3ca953b7c38f4b3a60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.746634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a46262c5-5315-4167-92ba-0bcf33d5c804", "created": "2026-01-27T05:12:58.747517Z", "modified": "2026-01-27T05:12:58.747517Z", "relationship_type": "indicates", "source_ref": "indicator--2a0443e8-1de2-4851-b6f7-4f7a142026ca", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b530ed7a-ad40-4bc8-8030-6b0ee73e7a5b", "created": "2026-01-27T05:12:58.747711Z", "modified": "2026-01-27T05:12:58.747711Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.atracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.747711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce7d4e6b-80e0-4566-a242-b0ca8ebfdc11", "created": "2026-01-27T05:12:58.748508Z", "modified": "2026-01-27T05:12:58.748508Z", "relationship_type": "indicates", "source_ref": "indicator--b530ed7a-ad40-4bc8-8030-6b0ee73e7a5b", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305953dd-3eb9-447d-8854-0db65382eb91", "created": "2026-01-27T05:12:58.748683Z", "modified": "2026-01-27T05:12:58.748683Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.agpstracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.748683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3867f441-2291-430a-845f-e99ff3102522", "created": "2026-01-27T05:12:58.74935Z", "modified": "2026-01-27T05:12:58.74935Z", "relationship_type": "indicates", "source_ref": "indicator--305953dd-3eb9-447d-8854-0db65382eb91", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6603b0d1-5309-4d99-a62b-52dd4c72c8db", "created": "2026-01-27T05:12:58.749523Z", "modified": "2026-01-27T05:12:58.749523Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aphonetracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.749523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3328609b-50bf-4169-bcbe-78d8a994fd3a", "created": "2026-01-27T05:12:58.750192Z", "modified": "2026-01-27T05:12:58.750192Z", "relationship_type": "indicates", "source_ref": "indicator--6603b0d1-5309-4d99-a62b-52dd4c72c8db", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaf7401-027a-4f65-aa4f-1276688c8a59", "created": "2026-01-27T05:12:58.750364Z", "modified": "2026-01-27T05:12:58.750364Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.afreesmstracker.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.750364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6320fd89-dd05-4087-9866-f30a969abf1a", "created": "2026-01-27T05:12:58.751034Z", "modified": "2026-01-27T05:12:58.751034Z", "relationship_type": "indicates", "source_ref": "indicator--5eaf7401-027a-4f65-aa4f-1276688c8a59", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d314595-c62b-4571-b74e-d55aae5c934a", "created": "2026-01-27T05:12:58.751206Z", "modified": "2026-01-27T05:12:58.751206Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobilefindfree']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.751206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a450569d-0715-4afb-becc-3280d67468fd", "created": "2026-01-27T05:12:58.751877Z", "modified": "2026-01-27T05:12:58.751877Z", "relationship_type": "indicates", "source_ref": "indicator--8d314595-c62b-4571-b74e-d55aae5c934a", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c1989a-798b-493c-b380-51e9c158b88e", "created": "2026-01-27T05:12:58.752058Z", "modified": "2026-01-27T05:12:58.752058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='07525D7D2E83CE865F98E1B9C0F6095B1C29D48A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.752058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1db03d7d-3927-452e-aafb-41ad5abfbd61", "created": "2026-01-27T05:12:58.752847Z", "modified": "2026-01-27T05:12:58.752847Z", "relationship_type": "indicates", "source_ref": "indicator--62c1989a-798b-493c-b380-51e9c158b88e", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce2a91f-c232-47ce-b320-e76aabcb1a1a", "created": "2026-01-27T05:12:58.753024Z", "modified": "2026-01-27T05:12:58.753024Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0AD33649F0D0532B5EB0A36A81712962AA79BF54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.753024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9ad7aaa-9ec5-457d-9744-0844000396d4", "created": "2026-01-27T05:12:58.753802Z", "modified": "2026-01-27T05:12:58.753802Z", "relationship_type": "indicates", "source_ref": "indicator--0ce2a91f-c232-47ce-b320-e76aabcb1a1a", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9124c4c7-80bf-42e2-965f-531825897b8f", "created": "2026-01-27T05:12:58.753988Z", "modified": "2026-01-27T05:12:58.753988Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='492FF617A79F6C8D80B453815CFE6586E21C5F72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.753988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16805bd1-7a3a-41d0-b768-2bb80202cca2", "created": "2026-01-27T05:12:58.754781Z", "modified": "2026-01-27T05:12:58.754781Z", "relationship_type": "indicates", "source_ref": "indicator--9124c4c7-80bf-42e2-965f-531825897b8f", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6be499a-ee0b-4bb3-b060-5b585fb835cc", "created": "2026-01-27T05:12:58.754957Z", "modified": "2026-01-27T05:12:58.754957Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9E09874197988F20DB51EB6A34BFD908AC42C35B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.754957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07dbf5c1-6485-405d-98a4-b8523805d3dc", "created": "2026-01-27T05:12:58.755735Z", "modified": "2026-01-27T05:12:58.755735Z", "relationship_type": "indicates", "source_ref": "indicator--d6be499a-ee0b-4bb3-b060-5b585fb835cc", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38affd0e-40b2-4c7f-86e1-7500f1d08025", "created": "2026-01-27T05:12:58.755928Z", "modified": "2026-01-27T05:12:58.755928Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D98C69B50C1092FE21F7CF748DC8B2F91BE56B64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.755928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9e240bb-01ad-423c-a4be-413e1986bdc1", "created": "2026-01-27T05:12:58.756844Z", "modified": "2026-01-27T05:12:58.756844Z", "relationship_type": "indicates", "source_ref": "indicator--38affd0e-40b2-4c7f-86e1-7500f1d08025", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ce4fd9-7231-4404-9d7f-2a821e677169", "created": "2026-01-27T05:12:58.757022Z", "modified": "2026-01-27T05:12:58.757022Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FB926CF2937331BB8A46E2C5280233C04DA2342E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.757022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--191e761b-3bcf-4147-a83f-0e7fa5bc0799", "created": "2026-01-27T05:12:58.757805Z", "modified": "2026-01-27T05:12:58.757805Z", "relationship_type": "indicates", "source_ref": "indicator--f6ce4fd9-7231-4404-9d7f-2a821e677169", "target_ref": "malware--9eebe56b-10fb-4c33-9918-f4506a23f9b6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f84d2780-0b84-470a-b5dd-89501a464d55", "created": "2026-01-27T05:12:58.757979Z", "modified": "2026-01-27T05:12:58.757979Z", "name": "MobileTrackerFree", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efdb38e-ab17-42fc-a05d-bb5a5e18a480", "created": "2026-01-27T05:12:58.758153Z", "modified": "2026-01-27T05:12:58.758153Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api1.easydoc.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.758153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--136d1d33-d77c-414f-a512-cb5abcb928bd", "created": "2026-01-27T05:12:58.758838Z", "modified": "2026-01-27T05:12:58.758838Z", "relationship_type": "indicates", "source_ref": "indicator--4efdb38e-ab17-42fc-a05d-bb5a5e18a480", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed82542-e794-449f-a2f2-047a30a7970f", "created": "2026-01-27T05:12:58.759014Z", "modified": "2026-01-27T05:12:58.759014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api3.easydoc.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.759014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6193945a-fa84-4ba1-aaf8-63cdf16c095d", "created": "2026-01-27T05:12:58.759682Z", "modified": "2026-01-27T05:12:58.759682Z", "relationship_type": "indicates", "source_ref": "indicator--0ed82542-e794-449f-a2f2-047a30a7970f", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee7606a-941d-407e-a282-d4849e607ca7", "created": "2026-01-27T05:12:58.759874Z", "modified": "2026-01-27T05:12:58.759874Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk.mtf.re']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.759874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e054468-77d7-489d-a9c2-9a339277ff91", "created": "2026-01-27T05:12:58.76053Z", "modified": "2026-01-27T05:12:58.76053Z", "relationship_type": "indicates", "source_ref": "indicator--fee7606a-941d-407e-a282-d4849e607ca7", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6a98e6-7149-455b-85af-95f6de174f16", "created": "2026-01-27T05:12:58.760712Z", "modified": "2026-01-27T05:12:58.760712Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celltrackernew.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.760712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9fcee43-86b7-4102-af15-4e9b4a9a85ea", "created": "2026-01-27T05:12:58.76142Z", "modified": "2026-01-27T05:12:58.76142Z", "relationship_type": "indicates", "source_ref": "indicator--7c6a98e6-7149-455b-85af-95f6de174f16", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec127295-3314-4bdc-9c32-88ed1a581232", "created": "2026-01-27T05:12:58.761594Z", "modified": "2026-01-27T05:12:58.761594Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d-app-apk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.761594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e936441c-2c55-42cf-9c26-83f06b6bc7c3", "created": "2026-01-27T05:12:58.762287Z", "modified": "2026-01-27T05:12:58.762287Z", "relationship_type": "indicates", "source_ref": "indicator--ec127295-3314-4bdc-9c32-88ed1a581232", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c428551b-138d-40ab-9a50-3094f4eb6000", "created": "2026-01-27T05:12:58.762546Z", "modified": "2026-01-27T05:12:58.762546Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.d-app-apk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.762546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46cc5c95-bb7f-4028-a968-67f0cf39d4e8", "created": "2026-01-27T05:12:58.763315Z", "modified": "2026-01-27T05:12:58.763315Z", "relationship_type": "indicates", "source_ref": "indicator--c428551b-138d-40ab-9a50-3094f4eb6000", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9d0a63-a066-4d82-a35f-3b821bb49683", "created": "2026-01-27T05:12:58.763515Z", "modified": "2026-01-27T05:12:58.763515Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easydoc.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.763515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79733ab0-af0a-4654-b4ff-3a69091dbf86", "created": "2026-01-27T05:12:58.764199Z", "modified": "2026-01-27T05:12:58.764199Z", "relationship_type": "indicates", "source_ref": "indicator--eb9d0a63-a066-4d82-a35f-3b821bb49683", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69371099-e1d3-41ec-95ff-76a6344eebad", "created": "2026-01-27T05:12:58.764381Z", "modified": "2026-01-27T05:12:58.764381Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.764381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f992aab-6001-4283-be27-239f1e9b31e4", "created": "2026-01-27T05:12:58.765178Z", "modified": "2026-01-27T05:12:58.765178Z", "relationship_type": "indicates", "source_ref": "indicator--69371099-e1d3-41ec-95ff-76a6344eebad", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961008cd-8b50-4825-aa17-e587e048f1de", "created": "2026-01-27T05:12:58.765355Z", "modified": "2026-01-27T05:12:58.765355Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-data.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.765355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c239633-84ca-4376-8f81-7e1a9ec8aa2d", "created": "2026-01-27T05:12:58.766054Z", "modified": "2026-01-27T05:12:58.766054Z", "relationship_type": "indicates", "source_ref": "indicator--961008cd-8b50-4825-aa17-e587e048f1de", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f889729f-1579-4841-98a0-176a4ca25df2", "created": "2026-01-27T05:12:58.766229Z", "modified": "2026-01-27T05:12:58.766229Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtf.re']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.766229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fdc9596-b7a8-4242-aabd-a695bf9fca49", "created": "2026-01-27T05:12:58.766916Z", "modified": "2026-01-27T05:12:58.766916Z", "relationship_type": "indicates", "source_ref": "indicator--f889729f-1579-4841-98a0-176a4ca25df2", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c02c27-4330-4f71-a1e8-1ca056c97fb5", "created": "2026-01-27T05:12:58.767092Z", "modified": "2026-01-27T05:12:58.767092Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='myappmobile-537f7.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.767092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63d2d393-e6d9-4aec-87cd-f4021138f3cd", "created": "2026-01-27T05:12:58.767812Z", "modified": "2026-01-27T05:12:58.767812Z", "relationship_type": "indicates", "source_ref": "indicator--58c02c27-4330-4f71-a1e8-1ca056c97fb5", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f448e99c-4c75-415e-973a-e952e2edd606", "created": "2026-01-27T05:12:58.76799Z", "modified": "2026-01-27T05:12:58.76799Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='n6sm2m.celltracker.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.76799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb25d5c5-631b-4ed5-8753-80bc5ff9bce3", "created": "2026-01-27T05:12:58.768672Z", "modified": "2026-01-27T05:12:58.768672Z", "relationship_type": "indicates", "source_ref": "indicator--f448e99c-4c75-415e-973a-e952e2edd606", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5220cce9-df64-4263-a630-5e86b1742c6e", "created": "2026-01-27T05:12:58.768863Z", "modified": "2026-01-27T05:12:58.768863Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='olurdaolurdediler.shop']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.768863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99cf87fa-fb02-4219-a366-19d2ab6c8f4d", "created": "2026-01-27T05:12:58.769548Z", "modified": "2026-01-27T05:12:58.769548Z", "relationship_type": "indicates", "source_ref": "indicator--5220cce9-df64-4263-a630-5e86b1742c6e", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829d627a-3f49-41d8-a0d9-ed45dcdf0781", "created": "2026-01-27T05:12:58.76972Z", "modified": "2026-01-27T05:12:58.76972Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sapient-flight-837.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.76972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e16a3bbf-e9b7-4fc9-84d4-a1fab9263134", "created": "2026-01-27T05:12:58.770452Z", "modified": "2026-01-27T05:12:58.770452Z", "relationship_type": "indicates", "source_ref": "indicator--829d627a-3f49-41d8-a0d9-ed45dcdf0781", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d3ccd5e-ac87-4345-8976-e3bd6250be14", "created": "2026-01-27T05:12:58.770629Z", "modified": "2026-01-27T05:12:58.770629Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.770629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d8486c7-a39e-4ad9-9c16-1d3d3ebe40bc", "created": "2026-01-27T05:12:58.771326Z", "modified": "2026-01-27T05:12:58.771326Z", "relationship_type": "indicates", "source_ref": "indicator--6d3ccd5e-ac87-4345-8976-e3bd6250be14", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515dd339-0ccb-4345-b443-0ba6db729575", "created": "2026-01-27T05:12:58.7715Z", "modified": "2026-01-27T05:12:58.7715Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.7715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--822d9744-6ea0-426d-9cf4-5cf8ffca697c", "created": "2026-01-27T05:12:58.772209Z", "modified": "2026-01-27T05:12:58.772209Z", "relationship_type": "indicates", "source_ref": "indicator--515dd339-0ccb-4345-b443-0ba6db729575", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea06428c-436c-4605-8428-36e227e0ff65", "created": "2026-01-27T05:12:58.772385Z", "modified": "2026-01-27T05:12:58.772385Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.772385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a420a506-7307-410a-8dbf-e558fa96a6fb", "created": "2026-01-27T05:12:58.773552Z", "modified": "2026-01-27T05:12:58.773552Z", "relationship_type": "indicates", "source_ref": "indicator--ea06428c-436c-4605-8428-36e227e0ff65", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2573ac-d117-4ff0-bc9a-ac4d67bc85d5", "created": "2026-01-27T05:12:58.773761Z", "modified": "2026-01-27T05:12:58.773761Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celltracker.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.773761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64b81489-cf77-4afc-949b-de5e6e9a9ae3", "created": "2026-01-27T05:12:58.774453Z", "modified": "2026-01-27T05:12:58.774453Z", "relationship_type": "indicates", "source_ref": "indicator--1f2573ac-d117-4ff0-bc9a-ac4d67bc85d5", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c45a49-9244-43ee-81db-09aabd46da79", "created": "2026-01-27T05:12:58.774631Z", "modified": "2026-01-27T05:12:58.774631Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.774631Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b8cccca-ddf7-43fd-b655-eed6a67b8581", "created": "2026-01-27T05:12:58.775325Z", "modified": "2026-01-27T05:12:58.775325Z", "relationship_type": "indicates", "source_ref": "indicator--f1c45a49-9244-43ee-81db-09aabd46da79", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639ee11f-a154-4b78-a1a1-3d4c04c7b416", "created": "2026-01-27T05:12:58.775502Z", "modified": "2026-01-27T05:12:58.775502Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-family.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.775502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3d3c1a0-c6bf-493a-bc2b-e8e34ecf140f", "created": "2026-01-27T05:12:58.77621Z", "modified": "2026-01-27T05:12:58.77621Z", "relationship_type": "indicates", "source_ref": "indicator--639ee11f-a154-4b78-a1a1-3d4c04c7b416", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f05b8a-3e5e-4850-aa5f-0479ece4dd6a", "created": "2026-01-27T05:12:58.776386Z", "modified": "2026-01-27T05:12:58.776386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.776386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5926f6c5-0bcf-4e98-aa44-11160079f991", "created": "2026-01-27T05:12:58.777085Z", "modified": "2026-01-27T05:12:58.777085Z", "relationship_type": "indicates", "source_ref": "indicator--95f05b8a-3e5e-4850-aa5f-0479ece4dd6a", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e06eb9-d364-4d6a-80ca-926e6fc88b6e", "created": "2026-01-27T05:12:58.77726Z", "modified": "2026-01-27T05:12:58.77726Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.77726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e655c7a8-4367-49f3-a57b-aa414d49f762", "created": "2026-01-27T05:12:58.777963Z", "modified": "2026-01-27T05:12:58.777963Z", "relationship_type": "indicates", "source_ref": "indicator--e6e06eb9-d364-4d6a-80ca-926e6fc88b6e", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5688bb-7393-486e-8398-15f246e971e9", "created": "2026-01-27T05:12:58.778149Z", "modified": "2026-01-27T05:12:58.778149Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.778149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c19c25c-7b2b-4a2c-a4a2-c1ba2317cc4f", "created": "2026-01-27T05:12:58.77907Z", "modified": "2026-01-27T05:12:58.77907Z", "relationship_type": "indicates", "source_ref": "indicator--0f5688bb-7393-486e-8398-15f246e971e9", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53002f3b-ac4c-45fd-b671-ef41d9337b65", "created": "2026-01-27T05:12:58.779249Z", "modified": "2026-01-27T05:12:58.779249Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.779249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52e832df-9734-4b18-b851-cb39b5b2db8e", "created": "2026-01-27T05:12:58.779946Z", "modified": "2026-01-27T05:12:58.779946Z", "relationship_type": "indicates", "source_ref": "indicator--53002f3b-ac4c-45fd-b671-ef41d9337b65", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb26fd3c-5c8d-466f-8243-e25220377b11", "created": "2026-01-27T05:12:58.78012Z", "modified": "2026-01-27T05:12:58.78012Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.78012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17d33b09-4c80-4fe3-a6dc-030afa9039d9", "created": "2026-01-27T05:12:58.780813Z", "modified": "2026-01-27T05:12:58.780813Z", "relationship_type": "indicates", "source_ref": "indicator--bb26fd3c-5c8d-466f-8243-e25220377b11", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57785502-b790-4eeb-ad3e-3a43c17893eb", "created": "2026-01-27T05:12:58.78099Z", "modified": "2026-01-27T05:12:58.78099Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.78099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1472186c-1388-4535-bcb8-f2692715e5d3", "created": "2026-01-27T05:12:58.781675Z", "modified": "2026-01-27T05:12:58.781675Z", "relationship_type": "indicates", "source_ref": "indicator--57785502-b790-4eeb-ad3e-3a43c17893eb", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5b3be6-21c8-4f59-b82e-8071fd94399d", "created": "2026-01-27T05:12:58.781876Z", "modified": "2026-01-27T05:12:58.781876Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.781876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d242281-af7e-4f0c-8562-8e79d34dd86e", "created": "2026-01-27T05:12:58.782693Z", "modified": "2026-01-27T05:12:58.782693Z", "relationship_type": "indicates", "source_ref": "indicator--be5b3be6-21c8-4f59-b82e-8071fd94399d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc715298-0676-48a6-87f8-6b94617f4e2a", "created": "2026-01-27T05:12:58.782894Z", "modified": "2026-01-27T05:12:58.782894Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.782894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10b5ce2d-dde3-492d-ae5b-2c13970a4353", "created": "2026-01-27T05:12:58.783571Z", "modified": "2026-01-27T05:12:58.783571Z", "relationship_type": "indicates", "source_ref": "indicator--bc715298-0676-48a6-87f8-6b94617f4e2a", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3dac74-ebc3-4af3-9754-927e9f96caad", "created": "2026-01-27T05:12:58.78376Z", "modified": "2026-01-27T05:12:58.78376Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.78376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40b66260-7626-4128-948e-536a1c9e2b92", "created": "2026-01-27T05:12:58.78444Z", "modified": "2026-01-27T05:12:58.78444Z", "relationship_type": "indicates", "source_ref": "indicator--2a3dac74-ebc3-4af3-9754-927e9f96caad", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28435311-08d5-4366-bf43-fa97beded3fc", "created": "2026-01-27T05:12:58.784614Z", "modified": "2026-01-27T05:12:58.784614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.ir']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.784614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f1a19f7-942d-4624-bff3-d99c734592d5", "created": "2026-01-27T05:12:58.785301Z", "modified": "2026-01-27T05:12:58.785301Z", "relationship_type": "indicates", "source_ref": "indicator--28435311-08d5-4366-bf43-fa97beded3fc", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6620f83-87b8-41f6-ac59-bfabc5af76b4", "created": "2026-01-27T05:12:58.785482Z", "modified": "2026-01-27T05:12:58.785482Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.785482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad1e3f67-afb1-4b14-952a-6871596b8c3b", "created": "2026-01-27T05:12:58.786174Z", "modified": "2026-01-27T05:12:58.786174Z", "relationship_type": "indicates", "source_ref": "indicator--c6620f83-87b8-41f6-ac59-bfabc5af76b4", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49282168-ed2a-465e-a459-542286e3890c", "created": "2026-01-27T05:12:58.786347Z", "modified": "2026-01-27T05:12:58.786347Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.786347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--062884c6-5096-4c0c-a0c7-c777ae80741a", "created": "2026-01-27T05:12:58.787035Z", "modified": "2026-01-27T05:12:58.787035Z", "relationship_type": "indicates", "source_ref": "indicator--49282168-ed2a-465e-a459-542286e3890c", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9217825-bdbe-41c4-8c76-cf14554dcd4d", "created": "2026-01-27T05:12:58.787214Z", "modified": "2026-01-27T05:12:58.787214Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.787214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66ad570a-b981-4a5a-a053-c1f4eca8f358", "created": "2026-01-27T05:12:58.787915Z", "modified": "2026-01-27T05:12:58.787915Z", "relationship_type": "indicates", "source_ref": "indicator--a9217825-bdbe-41c4-8c76-cf14554dcd4d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f94641-51c5-4c9c-ba98-d01d874d0c98", "created": "2026-01-27T05:12:58.788091Z", "modified": "2026-01-27T05:12:58.788091Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.788091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94c3015e-a2ab-4920-9a9a-96d5a5981041", "created": "2026-01-27T05:12:58.788791Z", "modified": "2026-01-27T05:12:58.788791Z", "relationship_type": "indicates", "source_ref": "indicator--66f94641-51c5-4c9c-ba98-d01d874d0c98", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f626bccd-e34e-49ec-b081-db811f96c8a0", "created": "2026-01-27T05:12:58.788964Z", "modified": "2026-01-27T05:12:58.788964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.788964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66a3d14d-57b3-486f-91fd-aab8a1d8d8cb", "created": "2026-01-27T05:12:58.789639Z", "modified": "2026-01-27T05:12:58.789639Z", "relationship_type": "indicates", "source_ref": "indicator--f626bccd-e34e-49ec-b081-db811f96c8a0", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a122cde1-d610-4f15-8945-f1aa78705bf9", "created": "2026-01-27T05:12:58.789827Z", "modified": "2026-01-27T05:12:58.789827Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker-free.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.789827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7a86833-0b7a-4e46-96c5-e9a205cbbc98", "created": "2026-01-27T05:12:58.790624Z", "modified": "2026-01-27T05:12:58.790624Z", "relationship_type": "indicates", "source_ref": "indicator--a122cde1-d610-4f15-8945-f1aa78705bf9", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7d6e2c-e3c6-480b-a499-9dde0eb4721c", "created": "2026-01-27T05:12:58.790816Z", "modified": "2026-01-27T05:12:58.790816Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.mobile-tracker-free.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.790816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52a294a0-e6db-4f64-8c37-b030d07998a3", "created": "2026-01-27T05:12:58.791506Z", "modified": "2026-01-27T05:12:58.791506Z", "relationship_type": "indicates", "source_ref": "indicator--fe7d6e2c-e3c6-480b-a499-9dde0eb4721c", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04524718-2fe3-4609-bb76-74e724c3d19f", "created": "2026-01-27T05:12:58.791678Z", "modified": "2026-01-27T05:12:58.791678Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.loverman.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.791678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af6c5198-c558-4f1a-bb87-a5cd7be37e7d", "created": "2026-01-27T05:12:58.792367Z", "modified": "2026-01-27T05:12:58.792367Z", "relationship_type": "indicates", "source_ref": "indicator--04524718-2fe3-4609-bb76-74e724c3d19f", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1844d387-a438-44c2-a84b-b4b616387339", "created": "2026-01-27T05:12:58.792539Z", "modified": "2026-01-27T05:12:58.792539Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-tracker.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.792539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c6bd8f4-3f6f-4c52-82bb-306b5188d77a", "created": "2026-01-27T05:12:58.793227Z", "modified": "2026-01-27T05:12:58.793227Z", "relationship_type": "indicates", "source_ref": "indicator--1844d387-a438-44c2-a84b-b4b616387339", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5e5fa8-e229-4128-8ee7-00308712a747", "created": "2026-01-27T05:12:58.793402Z", "modified": "2026-01-27T05:12:58.793402Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobitrackapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.793402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1583d75d-3225-4664-b0fb-6b18632b837e", "created": "2026-01-27T05:12:58.794153Z", "modified": "2026-01-27T05:12:58.794153Z", "relationship_type": "indicates", "source_ref": "indicator--bd5e5fa8-e229-4128-8ee7-00308712a747", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2c9e22-dfa6-412c-bba2-5d57f7e267c4", "created": "2026-01-27T05:12:58.794402Z", "modified": "2026-01-27T05:12:58.794402Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='download.mobile-tracker-free.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.794402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d42e2682-f5f8-4c7d-b179-8d1943049a79", "created": "2026-01-27T05:12:58.795272Z", "modified": "2026-01-27T05:12:58.795272Z", "relationship_type": "indicates", "source_ref": "indicator--3e2c9e22-dfa6-412c-bba2-5d57f7e267c4", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36fb470-8938-4d01-88df-8ae42d698d51", "created": "2026-01-27T05:12:58.795462Z", "modified": "2026-01-27T05:12:58.795462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2de500618c8ba340dbbe615cef8df65d9864e8b6bee7fa78c16421a38b1bd185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.795462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20ac8463-04c6-470f-b9ac-f8580df1bea9", "created": "2026-01-27T05:12:58.796323Z", "modified": "2026-01-27T05:12:58.796323Z", "relationship_type": "indicates", "source_ref": "indicator--f36fb470-8938-4d01-88df-8ae42d698d51", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c32652-3607-45aa-911a-a4a9ea1f4a6a", "created": "2026-01-27T05:12:58.796497Z", "modified": "2026-01-27T05:12:58.796497Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='362affec49bd9735b781cc11a6984ac1dfc018e35a26ca33cde4a64256a4675a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.796497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58f7b151-22cf-4121-a99a-117e08afe400", "created": "2026-01-27T05:12:58.797343Z", "modified": "2026-01-27T05:12:58.797343Z", "relationship_type": "indicates", "source_ref": "indicator--85c32652-3607-45aa-911a-a4a9ea1f4a6a", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a599f8c-d9b5-4d92-8ab0-8aa800e872ce", "created": "2026-01-27T05:12:58.797515Z", "modified": "2026-01-27T05:12:58.797515Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5cd3375434ab83a9edea2e4828f938cbf5790786dc786074c627e5fb74f8ba3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.797515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4709c25-e8d7-466d-aaa4-bd700dbaf38d", "created": "2026-01-27T05:12:58.798353Z", "modified": "2026-01-27T05:12:58.798353Z", "relationship_type": "indicates", "source_ref": "indicator--6a599f8c-d9b5-4d92-8ab0-8aa800e872ce", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--685330f3-1233-4faa-b131-40a733867986", "created": "2026-01-27T05:12:58.798528Z", "modified": "2026-01-27T05:12:58.798528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='148032ea08c82329bb4e8faaf0d0eacf161e818286f7d0eacacfa77bcb53c48b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.798528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6b2034b-b0bc-4716-81fc-4f5df6741171", "created": "2026-01-27T05:12:58.799494Z", "modified": "2026-01-27T05:12:58.799494Z", "relationship_type": "indicates", "source_ref": "indicator--685330f3-1233-4faa-b131-40a733867986", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d78bf0f-8205-48bd-aaed-e8bbc69e54d3", "created": "2026-01-27T05:12:58.799675Z", "modified": "2026-01-27T05:12:58.799675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6db8dfaf7c15c37328fdd30aea6807a38147e1676f259059387af1bcaa1a88b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.799675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dde9e54-636e-41e6-8921-6b69ed7f59a7", "created": "2026-01-27T05:12:58.800514Z", "modified": "2026-01-27T05:12:58.800514Z", "relationship_type": "indicates", "source_ref": "indicator--9d78bf0f-8205-48bd-aaed-e8bbc69e54d3", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c208e7e-ce83-47ec-865c-123de48fa2da", "created": "2026-01-27T05:12:58.800688Z", "modified": "2026-01-27T05:12:58.800688Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a0e47181a540418be8c1d20b295a77768ac5e83f7dccab3ac7f26e30440d1af5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.800688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00dc0faf-ceb1-4c35-a2e7-6481b3afc2d8", "created": "2026-01-27T05:12:58.801517Z", "modified": "2026-01-27T05:12:58.801517Z", "relationship_type": "indicates", "source_ref": "indicator--6c208e7e-ce83-47ec-865c-123de48fa2da", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02a9865-7abd-4b3c-a0c2-67e7c7915795", "created": "2026-01-27T05:12:58.801691Z", "modified": "2026-01-27T05:12:58.801691Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc4efa3286518427ea1e14e1b614783b044e59ffa4e00abf609fef1f9f96b054']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.801691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fddb8b95-9967-4370-b72c-0030867b7cca", "created": "2026-01-27T05:12:58.80253Z", "modified": "2026-01-27T05:12:58.80253Z", "relationship_type": "indicates", "source_ref": "indicator--a02a9865-7abd-4b3c-a0c2-67e7c7915795", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fda284c-1838-4428-a345-5f35f43e5455", "created": "2026-01-27T05:12:58.802702Z", "modified": "2026-01-27T05:12:58.802702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1c55e0d5b14d535b09ba8fa7f507a88ef8f08120a49aa333ca4d4a2d8f918c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.802702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe053e52-b0ad-4d90-a1fd-317253ad37de", "created": "2026-01-27T05:12:58.803566Z", "modified": "2026-01-27T05:12:58.803566Z", "relationship_type": "indicates", "source_ref": "indicator--5fda284c-1838-4428-a345-5f35f43e5455", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fa8fc9-f085-4c93-a426-d39a2a10ca65", "created": "2026-01-27T05:12:58.803739Z", "modified": "2026-01-27T05:12:58.803739Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a1ce22914b95014469ff80e3d30bf570bb75af97db933c21561767789632859']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.803739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07bab5ef-f1d9-4079-855d-e9a31b116072", "created": "2026-01-27T05:12:58.80457Z", "modified": "2026-01-27T05:12:58.80457Z", "relationship_type": "indicates", "source_ref": "indicator--90fa8fc9-f085-4c93-a426-d39a2a10ca65", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb81ad95-7e28-408c-b482-2a1cd98ecd06", "created": "2026-01-27T05:12:58.804756Z", "modified": "2026-01-27T05:12:58.804756Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4f6d8c0bb4149f2e494caf6ad9f9d120068bc7f33962b3746e89171d1de18c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.804756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a02b1fa0-d091-456a-9768-3944757f3a91", "created": "2026-01-27T05:12:58.805563Z", "modified": "2026-01-27T05:12:58.805563Z", "relationship_type": "indicates", "source_ref": "indicator--cb81ad95-7e28-408c-b482-2a1cd98ecd06", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba877e7-a1d6-41ee-9281-1f3df4a58ae7", "created": "2026-01-27T05:12:58.805733Z", "modified": "2026-01-27T05:12:58.805733Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91b76ed0a4005d5cbb6e59d454d21368040093f721d07c8f5c3e2abe7ad19ddc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.805733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27dcc444-544d-44a2-a6de-d810f22acf8a", "created": "2026-01-27T05:12:58.806575Z", "modified": "2026-01-27T05:12:58.806575Z", "relationship_type": "indicates", "source_ref": "indicator--eba877e7-a1d6-41ee-9281-1f3df4a58ae7", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe8e0e4-897c-4330-a4d2-1aae3a957ae6", "created": "2026-01-27T05:12:58.80676Z", "modified": "2026-01-27T05:12:58.80676Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='585ff51e2cb9cd41dd0c0c931f4804ab475cc73cf1aea718883d0e78a891f946']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.80676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7af0adce-5208-4979-aad8-49f395a2de15", "created": "2026-01-27T05:12:58.807582Z", "modified": "2026-01-27T05:12:58.807582Z", "relationship_type": "indicates", "source_ref": "indicator--8fe8e0e4-897c-4330-a4d2-1aae3a957ae6", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b1c10c-441d-4ae6-aa21-0c4b2718289d", "created": "2026-01-27T05:12:58.807768Z", "modified": "2026-01-27T05:12:58.807768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='833e332dc7a23004cf9da9714c7d4522571617c174f654957c173ebcc74ede67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.807768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29042bc2-21e0-4198-8541-2038db21a842", "created": "2026-01-27T05:12:58.808709Z", "modified": "2026-01-27T05:12:58.808709Z", "relationship_type": "indicates", "source_ref": "indicator--24b1c10c-441d-4ae6-aa21-0c4b2718289d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7d59be-228e-46d3-9d0b-87c5a09c7b8e", "created": "2026-01-27T05:12:58.808901Z", "modified": "2026-01-27T05:12:58.808901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d72f5e0aa70f6968bde4d36befbf64624d66200b6f7c12443b9055a2bfb48cf6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.808901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--166f226f-086d-4fde-ba45-0d5daacc3f01", "created": "2026-01-27T05:12:58.809713Z", "modified": "2026-01-27T05:12:58.809713Z", "relationship_type": "indicates", "source_ref": "indicator--da7d59be-228e-46d3-9d0b-87c5a09c7b8e", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8d98c4-ed80-4924-9b9f-380a4701f9d3", "created": "2026-01-27T05:12:58.809905Z", "modified": "2026-01-27T05:12:58.809905Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da8a66f41d052f78d3a7045776728d3db899a14551cde89c6cf9900d59971ef7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.809905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--105a5211-d459-4c25-8afb-cef3504e5767", "created": "2026-01-27T05:12:58.810838Z", "modified": "2026-01-27T05:12:58.810838Z", "relationship_type": "indicates", "source_ref": "indicator--2e8d98c4-ed80-4924-9b9f-380a4701f9d3", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c4dce-1015-455d-91e6-ac28a80a6f94", "created": "2026-01-27T05:12:58.811044Z", "modified": "2026-01-27T05:12:58.811044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fdb988c774b0499099d1818d8ed5a8b2b9d27880b885211e9a7dbf5c2fe32a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.811044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15a9b399-58a1-405a-a3e4-3f2c6d3d7668", "created": "2026-01-27T05:12:58.811888Z", "modified": "2026-01-27T05:12:58.811888Z", "relationship_type": "indicates", "source_ref": "indicator--392c4dce-1015-455d-91e6-ac28a80a6f94", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2b9f9f-f88a-4934-bb08-02f4570a8cac", "created": "2026-01-27T05:12:58.812064Z", "modified": "2026-01-27T05:12:58.812064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e12027382b28c141e0358a6796d3d9dbfb0fc850aa60f656f9864c95a76c412']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.812064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dad6f2c7-cfe7-4d21-b933-aa19c2fc56cf", "created": "2026-01-27T05:12:58.812893Z", "modified": "2026-01-27T05:12:58.812893Z", "relationship_type": "indicates", "source_ref": "indicator--0e2b9f9f-f88a-4934-bb08-02f4570a8cac", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b49fc0-c88d-4201-93b3-702f12bab4f6", "created": "2026-01-27T05:12:58.813076Z", "modified": "2026-01-27T05:12:58.813076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c002b5ea002542055462150cf5b42e69b6ae34bb7b7b9247113986effe0eef91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.813076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb2e36a4-e014-415b-b438-18dde5a5eb3e", "created": "2026-01-27T05:12:58.813931Z", "modified": "2026-01-27T05:12:58.813931Z", "relationship_type": "indicates", "source_ref": "indicator--57b49fc0-c88d-4201-93b3-702f12bab4f6", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba6b7a4-e0ef-4a24-9f84-3873e26b8c8f", "created": "2026-01-27T05:12:58.81411Z", "modified": "2026-01-27T05:12:58.81411Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08cd793840d56aac534f46fd468cbd6e5209116c006ff046f58ee3018d6fd17d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.81411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7361e99-56a1-4df0-b113-9fd07978fb74", "created": "2026-01-27T05:12:58.81494Z", "modified": "2026-01-27T05:12:58.81494Z", "relationship_type": "indicates", "source_ref": "indicator--cba6b7a4-e0ef-4a24-9f84-3873e26b8c8f", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230e7031-94db-4d45-8324-7010c17fa1e2", "created": "2026-01-27T05:12:58.815113Z", "modified": "2026-01-27T05:12:58.815113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11880d737423d29ff7412988f48ba450d32c5be76d264b60e3f4fff4d739c1a7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.815113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--153eead2-15c8-4a86-8e44-789e92188b32", "created": "2026-01-27T05:12:58.81595Z", "modified": "2026-01-27T05:12:58.81595Z", "relationship_type": "indicates", "source_ref": "indicator--230e7031-94db-4d45-8324-7010c17fa1e2", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff234528-5830-48de-90ee-794712570818", "created": "2026-01-27T05:12:58.816127Z", "modified": "2026-01-27T05:12:58.816127Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7ed24a3142962727a2e215c284777a709fd38f3dc6006cd7a802d95f1f14cc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.816127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5034dcf4-4f22-4790-af95-4bb7c0edb2a6", "created": "2026-01-27T05:12:58.816971Z", "modified": "2026-01-27T05:12:58.816971Z", "relationship_type": "indicates", "source_ref": "indicator--ff234528-5830-48de-90ee-794712570818", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df7d709-3b6c-46fa-a5e1-0b69173cc036", "created": "2026-01-27T05:12:58.817145Z", "modified": "2026-01-27T05:12:58.817145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='88e5fc20c108a3a7486eaad3a79feb73bbf92d614bf55fc005fc0a995ba34afd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.817145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2083fc3f-514e-451f-97ca-5dc158727726", "created": "2026-01-27T05:12:58.818108Z", "modified": "2026-01-27T05:12:58.818108Z", "relationship_type": "indicates", "source_ref": "indicator--5df7d709-3b6c-46fa-a5e1-0b69173cc036", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9dc2f0-dff1-4a69-91ee-34782033114c", "created": "2026-01-27T05:12:58.818283Z", "modified": "2026-01-27T05:12:58.818283Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='864afc39b095d481c983b011e85768a424027af1ceefbdcaeb552b9dcdec2592']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.818283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee83f15d-e940-4461-97ba-bdb70971eb06", "created": "2026-01-27T05:12:58.819113Z", "modified": "2026-01-27T05:12:58.819113Z", "relationship_type": "indicates", "source_ref": "indicator--ad9dc2f0-dff1-4a69-91ee-34782033114c", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013f54e6-0510-4751-8509-b1104aa5178a", "created": "2026-01-27T05:12:58.819289Z", "modified": "2026-01-27T05:12:58.819289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbf73d0d2ad2491b7086fd13ea1378002ca0950a777172f90d320c879ce70753']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.819289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--090ad223-9d97-4897-b7a1-c75eca2a66cc", "created": "2026-01-27T05:12:58.820118Z", "modified": "2026-01-27T05:12:58.820118Z", "relationship_type": "indicates", "source_ref": "indicator--013f54e6-0510-4751-8509-b1104aa5178a", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0881fec4-970a-4b6a-8aed-0082241df208", "created": "2026-01-27T05:12:58.820295Z", "modified": "2026-01-27T05:12:58.820295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='268eea5eecf51d1013e63fbcd3c690a222366d5a73493e76f570fbf106b4d1e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.820295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5eed2a31-3a90-4964-967f-488c1b56c6ff", "created": "2026-01-27T05:12:58.821124Z", "modified": "2026-01-27T05:12:58.821124Z", "relationship_type": "indicates", "source_ref": "indicator--0881fec4-970a-4b6a-8aed-0082241df208", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068ba63c-f714-4b35-a463-f3c65f9ea367", "created": "2026-01-27T05:12:58.821299Z", "modified": "2026-01-27T05:12:58.821299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7e3e1434a7701c49c0d07c88ecaad13df4d03e14a58da3937d0e5e278dc624c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.821299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cff56ca8-bbea-4cc1-bae4-78866e9c39b3", "created": "2026-01-27T05:12:58.822126Z", "modified": "2026-01-27T05:12:58.822126Z", "relationship_type": "indicates", "source_ref": "indicator--068ba63c-f714-4b35-a463-f3c65f9ea367", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8562b706-dc47-44f2-a9f0-85a29109ff6d", "created": "2026-01-27T05:12:58.8223Z", "modified": "2026-01-27T05:12:58.8223Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c3ad1cdef70ce9964f71ae654b3f1ddabc422b2c8bc50048b7c7b1190584bac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.8223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93e687f2-5478-436b-a180-8ae90e014936", "created": "2026-01-27T05:12:58.823139Z", "modified": "2026-01-27T05:12:58.823139Z", "relationship_type": "indicates", "source_ref": "indicator--8562b706-dc47-44f2-a9f0-85a29109ff6d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b35bcb-6f3a-4542-a55a-33aac7364f43", "created": "2026-01-27T05:12:58.823314Z", "modified": "2026-01-27T05:12:58.823314Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='a.tck.lvmchi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.823314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79d4dc66-1319-45e3-ad4a-79fa8eaf266e", "created": "2026-01-27T05:12:58.823974Z", "modified": "2026-01-27T05:12:58.823974Z", "relationship_type": "indicates", "source_ref": "indicator--31b35bcb-6f3a-4542-a55a-33aac7364f43", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d825b35-8074-4fa8-851e-8fb35c1fc307", "created": "2026-01-27T05:12:58.82415Z", "modified": "2026-01-27T05:12:58.82415Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.androdid.inteernet.aa21111227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.82415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1712354d-ba04-46c8-82c6-23b037ddbd87", "created": "2026-01-27T05:12:58.824833Z", "modified": "2026-01-27T05:12:58.824833Z", "relationship_type": "indicates", "source_ref": "indicator--2d825b35-8074-4fa8-851e-8fb35c1fc307", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8fd06e1-6866-4cc3-a781-4a615c45c865", "created": "2026-01-27T05:12:58.825009Z", "modified": "2026-01-27T05:12:58.825009Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.jyotin.ct']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.825009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e47473f-e7f2-47a9-9a97-57feb6457310", "created": "2026-01-27T05:12:58.82565Z", "modified": "2026-01-27T05:12:58.82565Z", "relationship_type": "indicates", "source_ref": "indicator--a8fd06e1-6866-4cc3-a781-4a615c45c865", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7b8581-1776-4608-bef7-80bf6bb22cb9", "created": "2026-01-27T05:12:58.82588Z", "modified": "2026-01-27T05:12:58.82588Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.lrvciyti.unrxnfig']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.82588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--402ec915-061f-4783-989e-3338b4d70aa9", "created": "2026-01-27T05:12:58.826694Z", "modified": "2026-01-27T05:12:58.826694Z", "relationship_type": "indicates", "source_ref": "indicator--da7b8581-1776-4608-bef7-80bf6bb22cb9", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd846d04-81c7-4d18-a2be-8e2f64ebbd3c", "created": "2026-01-27T05:12:58.826931Z", "modified": "2026-01-27T05:12:58.826931Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.m.service.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.826931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49399823-be0c-4c63-bcea-ba8906209532", "created": "2026-01-27T05:12:58.827602Z", "modified": "2026-01-27T05:12:58.827602Z", "relationship_type": "indicates", "source_ref": "indicator--bd846d04-81c7-4d18-a2be-8e2f64ebbd3c", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b6cea5-9858-4a13-8cc0-d78841266093", "created": "2026-01-27T05:12:58.827798Z", "modified": "2026-01-27T05:12:58.827798Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mob.service.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.827798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6ad30e2-3945-4892-ac1d-a6b9ab3ac024", "created": "2026-01-27T05:12:58.82846Z", "modified": "2026-01-27T05:12:58.82846Z", "relationship_type": "indicates", "source_ref": "indicator--85b6cea5-9858-4a13-8cc0-d78841266093", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7889c6-ebad-40b2-9a6d-6dcd0c225eef", "created": "2026-01-27T05:12:58.828633Z", "modified": "2026-01-27T05:12:58.828633Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.gps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.828633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae2eb998-5926-4bf8-8a64-4befeceab11a", "created": "2026-01-27T05:12:58.829295Z", "modified": "2026-01-27T05:12:58.829295Z", "relationship_type": "indicates", "source_ref": "indicator--0f7889c6-ebad-40b2-9a6d-6dcd0c225eef", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5011cc13-7252-47b9-83be-af5628443847", "created": "2026-01-27T05:12:58.829468Z", "modified": "2026-01-27T05:12:58.829468Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.loc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.829468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c960adc7-d3d9-4d91-8204-d9f5027f6fa6", "created": "2026-01-27T05:12:58.830127Z", "modified": "2026-01-27T05:12:58.830127Z", "relationship_type": "indicates", "source_ref": "indicator--5011cc13-7252-47b9-83be-af5628443847", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fa0785-bbc7-4b39-9f20-75d3e80eea41", "created": "2026-01-27T05:12:58.830301Z", "modified": "2026-01-27T05:12:58.830301Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiletracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.830301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2d37d84-d0d9-499b-bcd7-d82431ccc61a", "created": "2026-01-27T05:12:58.83097Z", "modified": "2026-01-27T05:12:58.83097Z", "relationship_type": "indicates", "source_ref": "indicator--09fa0785-bbc7-4b39-9f20-75d3e80eea41", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa92844-4e4f-4968-a224-4d73b1ce7d14", "created": "2026-01-27T05:12:58.831144Z", "modified": "2026-01-27T05:12:58.831144Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiletrackerfree.secondapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.831144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b25f650-b49d-4dab-92d1-a8b8adeccd97", "created": "2026-01-27T05:12:58.83183Z", "modified": "2026-01-27T05:12:58.83183Z", "relationship_type": "indicates", "source_ref": "indicator--cfa92844-4e4f-4968-a224-4d73b1ce7d14", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9768b497-4212-41b6-b464-4cb361de2e7f", "created": "2026-01-27T05:12:58.832004Z", "modified": "2026-01-27T05:12:58.832004Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobiletrackerfree.www']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.832004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34a601e9-0b93-4a90-90c3-f6e71823fe99", "created": "2026-01-27T05:12:58.832661Z", "modified": "2026-01-27T05:12:58.832661Z", "relationship_type": "indicates", "source_ref": "indicator--9768b497-4212-41b6-b464-4cb361de2e7f", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8038c0fe-7368-441e-b1a8-141cb4283a04", "created": "2026-01-27T05:12:58.832861Z", "modified": "2026-01-27T05:12:58.832861Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mtf.d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.832861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--480b1b77-7bcd-4f10-afa8-c2a64b43393f", "created": "2026-01-27T05:12:58.833501Z", "modified": "2026-01-27T05:12:58.833501Z", "relationship_type": "indicates", "source_ref": "indicator--8038c0fe-7368-441e-b1a8-141cb4283a04", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f8a426-3ded-44a5-8f17-82a89f3455e6", "created": "2026-01-27T05:12:58.833676Z", "modified": "2026-01-27T05:12:58.833676Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.netowrk.service']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.833676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--185dd0f6-867f-4c42-87fd-a544db5000a9", "created": "2026-01-27T05:12:58.834481Z", "modified": "2026-01-27T05:12:58.834481Z", "relationship_type": "indicates", "source_ref": "indicator--22f8a426-3ded-44a5-8f17-82a89f3455e6", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b246ca-1851-47b2-8625-d6d9a0931590", "created": "2026-01-27T05:12:58.834657Z", "modified": "2026-01-27T05:12:58.834657Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.services.phone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.834657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0e0fc22-3bdc-48b1-8f66-94ca82f0403f", "created": "2026-01-27T05:12:58.835318Z", "modified": "2026-01-27T05:12:58.835318Z", "relationship_type": "indicates", "source_ref": "indicator--60b246ca-1851-47b2-8625-d6d9a0931590", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6dd27d-d40a-48c2-bd3f-e057c6240616", "created": "2026-01-27T05:12:58.835491Z", "modified": "2026-01-27T05:12:58.835491Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='g.google.llc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.835491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--973e62df-5ab5-4973-a414-15764e758ab9", "created": "2026-01-27T05:12:58.836164Z", "modified": "2026-01-27T05:12:58.836164Z", "relationship_type": "indicates", "source_ref": "indicator--ff6dd27d-d40a-48c2-bd3f-e057c6240616", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f435274d-07ef-41bf-8191-018bea8713f4", "created": "2026-01-27T05:12:58.83634Z", "modified": "2026-01-27T05:12:58.83634Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.mob.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.83634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45393f1e-31b9-4592-94dd-1537d8f5952e", "created": "2026-01-27T05:12:58.836997Z", "modified": "2026-01-27T05:12:58.836997Z", "relationship_type": "indicates", "source_ref": "indicator--f435274d-07ef-41bf-8191-018bea8713f4", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bcdd62-4f70-437d-8b01-63bb40f8c12d", "created": "2026-01-27T05:12:58.837176Z", "modified": "2026-01-27T05:12:58.837176Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.mob.service2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.837176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bd0681d-6929-498d-b6a9-3a6e47b823aa", "created": "2026-01-27T05:12:58.837833Z", "modified": "2026-01-27T05:12:58.837833Z", "relationship_type": "indicates", "source_ref": "indicator--45bcdd62-4f70-437d-8b01-63bb40f8c12d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0378761-3ee5-4a0e-bd2e-79d4392625cb", "created": "2026-01-27T05:12:58.838015Z", "modified": "2026-01-27T05:12:58.838015Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.phone.control2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.838015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--563260a0-c55b-4b47-b7cc-467ba7e0d876", "created": "2026-01-27T05:12:58.838664Z", "modified": "2026-01-27T05:12:58.838664Z", "relationship_type": "indicates", "source_ref": "indicator--b0378761-3ee5-4a0e-bd2e-79d4392625cb", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672a187d-5025-438d-a516-7e9a2637b371", "created": "2026-01-27T05:12:58.838855Z", "modified": "2026-01-27T05:12:58.838855Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.protect.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.838855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e38abf89-7391-4b50-aac2-de2b435d8211", "created": "2026-01-27T05:12:58.839504Z", "modified": "2026-01-27T05:12:58.839504Z", "relationship_type": "indicates", "source_ref": "indicator--672a187d-5025-438d-a516-7e9a2637b371", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47731a05-8f7b-444d-9044-65ef912d38f0", "created": "2026-01-27T05:12:58.839676Z", "modified": "2026-01-27T05:12:58.839676Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.protect.parental']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.839676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d7b0353-83fa-4efd-ad2f-f94a7e2f7d37", "created": "2026-01-27T05:12:58.840347Z", "modified": "2026-01-27T05:12:58.840347Z", "relationship_type": "indicates", "source_ref": "indicator--47731a05-8f7b-444d-9044-65ef912d38f0", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcb2ed1-5f03-4592-9ba5-abda768d9f36", "created": "2026-01-27T05:12:58.840521Z", "modified": "2026-01-27T05:12:58.840521Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.secu.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.840521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--012950ef-2c03-4a3b-973b-74ad98a36167", "created": "2026-01-27T05:12:58.841189Z", "modified": "2026-01-27T05:12:58.841189Z", "relationship_type": "indicates", "source_ref": "indicator--3dcb2ed1-5f03-4592-9ba5-abda768d9f36", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616fcde3-b3fa-45c6-9166-373645a31c48", "created": "2026-01-27T05:12:58.841367Z", "modified": "2026-01-27T05:12:58.841367Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.security.parental']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.841367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9650eb0c-0e3c-44d7-9a85-9f7797e3c364", "created": "2026-01-27T05:12:58.842243Z", "modified": "2026-01-27T05:12:58.842243Z", "relationship_type": "indicates", "source_ref": "indicator--616fcde3-b3fa-45c6-9166-373645a31c48", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bad273-9150-4e33-8128-72fbb914ab72", "created": "2026-01-27T05:12:58.842426Z", "modified": "2026-01-27T05:12:58.842426Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mob.protect.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.842426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49824621-7467-4cec-85e6-074c1927f3da", "created": "2026-01-27T05:12:58.843155Z", "modified": "2026-01-27T05:12:58.843155Z", "relationship_type": "indicates", "source_ref": "indicator--40bad273-9150-4e33-8128-72fbb914ab72", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1623ac46-ad15-4e02-8bf8-bfb38b1350e6", "created": "2026-01-27T05:12:58.843335Z", "modified": "2026-01-27T05:12:58.843335Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mob.service.parental2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.843335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7065d75c-99b6-4515-a8f1-b2ab7b68cfc8", "created": "2026-01-27T05:12:58.844006Z", "modified": "2026-01-27T05:12:58.844006Z", "relationship_type": "indicates", "source_ref": "indicator--1623ac46-ad15-4e02-8bf8-bfb38b1350e6", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668e86ab-646c-41b0-bc02-e57f77380be7", "created": "2026-01-27T05:12:58.84418Z", "modified": "2026-01-27T05:12:58.84418Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.controlparental2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.84418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f7d1b44-e5d5-4da5-ac74-958ca1f5dd90", "created": "2026-01-27T05:12:58.84485Z", "modified": "2026-01-27T05:12:58.84485Z", "relationship_type": "indicates", "source_ref": "indicator--668e86ab-646c-41b0-bc02-e57f77380be7", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a2742a-3d69-485f-9bbf-4d5e941b6082", "created": "2026-01-27T05:12:58.845026Z", "modified": "2026-01-27T05:12:58.845026Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2021']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.845026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--777c1c73-f7cd-41da-b8be-1fb83e6d389b", "created": "2026-01-27T05:12:58.845689Z", "modified": "2026-01-27T05:12:58.845689Z", "relationship_type": "indicates", "source_ref": "indicator--53a2742a-3d69-485f-9bbf-4d5e941b6082", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f338e18-b7aa-4324-88d2-4abc5cdb7fd4", "created": "2026-01-27T05:12:58.845879Z", "modified": "2026-01-27T05:12:58.845879Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2022']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.845879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d7a1dde-7594-419c-9401-f7c0aa61da8a", "created": "2026-01-27T05:12:58.846538Z", "modified": "2026-01-27T05:12:58.846538Z", "relationship_type": "indicates", "source_ref": "indicator--2f338e18-b7aa-4324-88d2-4abc5cdb7fd4", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b400de-7a7f-4f44-a96f-e21c689e822b", "created": "2026-01-27T05:12:58.84671Z", "modified": "2026-01-27T05:12:58.84671Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2023']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.84671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba46aa1a-4d0d-4db1-938b-9283794d7fc2", "created": "2026-01-27T05:12:58.847387Z", "modified": "2026-01-27T05:12:58.847387Z", "relationship_type": "indicates", "source_ref": "indicator--14b400de-7a7f-4f44-a96f-e21c689e822b", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6529077-cc2c-4499-9c84-45ab9d22fd44", "created": "2026-01-27T05:12:58.847559Z", "modified": "2026-01-27T05:12:58.847559Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.monitor.child2034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.847559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18d4b544-6b73-47dc-9956-f43e461a0928", "created": "2026-01-27T05:12:58.848238Z", "modified": "2026-01-27T05:12:58.848238Z", "relationship_type": "indicates", "source_ref": "indicator--f6529077-cc2c-4499-9c84-45ab9d22fd44", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bee6e05-9c43-4ed4-b9b0-23e9e1964c88", "created": "2026-01-27T05:12:58.848419Z", "modified": "2026-01-27T05:12:58.848419Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.parental2021']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.848419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f08c15ff-e9fe-4b09-91f0-2789e1b9eac5", "created": "2026-01-27T05:12:58.849084Z", "modified": "2026-01-27T05:12:58.849084Z", "relationship_type": "indicates", "source_ref": "indicator--6bee6e05-9c43-4ed4-b9b0-23e9e1964c88", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff81ecda-7631-4bff-9b9f-793032bd1706", "created": "2026-01-27T05:12:58.849281Z", "modified": "2026-01-27T05:12:58.849281Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.protect.children']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.849281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00c518ea-ab7e-48db-a228-400476fcbc6f", "created": "2026-01-27T05:12:58.850071Z", "modified": "2026-01-27T05:12:58.850071Z", "relationship_type": "indicates", "source_ref": "indicator--ff81ecda-7631-4bff-9b9f-793032bd1706", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336bce99-03dc-46da-ac5a-ca426e0eb046", "created": "2026-01-27T05:12:58.850248Z", "modified": "2026-01-27T05:12:58.850248Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mobile.protect.children2020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.850248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--146d7416-b083-4702-a682-710c5728b6dc", "created": "2026-01-27T05:12:58.850926Z", "modified": "2026-01-27T05:12:58.850926Z", "relationship_type": "indicates", "source_ref": "indicator--336bce99-03dc-46da-ac5a-ca426e0eb046", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719eb13d-e546-406e-99ef-d803e3cb82cc", "created": "2026-01-27T05:12:58.851102Z", "modified": "2026-01-27T05:12:58.851102Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='security.mobile.parental']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.851102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83d0d99b-823a-4d51-be7a-835443bfa406", "created": "2026-01-27T05:12:58.851775Z", "modified": "2026-01-27T05:12:58.851775Z", "relationship_type": "indicates", "source_ref": "indicator--719eb13d-e546-406e-99ef-d803e3cb82cc", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e898877-5c23-428a-ab43-e9205cfdd889", "created": "2026-01-27T05:12:58.851952Z", "modified": "2026-01-27T05:12:58.851952Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='service.download.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.851952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9a732b5-6595-452f-95cd-9a2267746564", "created": "2026-01-27T05:12:58.852604Z", "modified": "2026-01-27T05:12:58.852604Z", "relationship_type": "indicates", "source_ref": "indicator--2e898877-5c23-428a-ab43-e9205cfdd889", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59b040d-a14b-42a5-889f-56beea993f57", "created": "2026-01-27T05:12:58.852793Z", "modified": "2026-01-27T05:12:58.852793Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tracker.mob.gps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.852793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--368748ea-7f77-47c7-b608-2703a5cf36b1", "created": "2026-01-27T05:12:58.85344Z", "modified": "2026-01-27T05:12:58.85344Z", "relationship_type": "indicates", "source_ref": "indicator--b59b040d-a14b-42a5-889f-56beea993f57", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3334e67-33a7-4b3d-9bc2-bb4ef4a816f9", "created": "2026-01-27T05:12:58.853613Z", "modified": "2026-01-27T05:12:58.853613Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='yogaworkouts.dailyyoga.yogafitness']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.853613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc72e874-2995-4631-b598-32d1934c9f42", "created": "2026-01-27T05:12:58.854299Z", "modified": "2026-01-27T05:12:58.854299Z", "relationship_type": "indicates", "source_ref": "indicator--d3334e67-33a7-4b3d-9bc2-bb4ef4a816f9", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e59eb31-e03e-454a-a51b-3932ea0289d7", "created": "2026-01-27T05:12:58.854472Z", "modified": "2026-01-27T05:12:58.854472Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.get.mtf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.854472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a40358c4-34bf-4cb5-84e5-c9e9fe07c2cd", "created": "2026-01-27T05:12:58.855156Z", "modified": "2026-01-27T05:12:58.855156Z", "relationship_type": "indicates", "source_ref": "indicator--6e59eb31-e03e-454a-a51b-3932ea0289d7", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5480c7f-eb36-4818-adaa-ded0af9bb36f", "created": "2026-01-27T05:12:58.855339Z", "modified": "2026-01-27T05:12:58.855339Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mtf.download']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.855339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97b86af4-8d75-479a-8bef-0f4db98cd9aa", "created": "2026-01-27T05:12:58.856011Z", "modified": "2026-01-27T05:12:58.856011Z", "relationship_type": "indicates", "source_ref": "indicator--e5480c7f-eb36-4818-adaa-ded0af9bb36f", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09160c84-5a24-46c2-b120-c8c57cc37605", "created": "2026-01-27T05:12:58.856187Z", "modified": "2026-01-27T05:12:58.856187Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.protect.download']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.856187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d8a852a-a5e8-41b9-8591-63eb2d4c821a", "created": "2026-01-27T05:12:58.85686Z", "modified": "2026-01-27T05:12:58.85686Z", "relationship_type": "indicates", "source_ref": "indicator--09160c84-5a24-46c2-b120-c8c57cc37605", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e3a51e-67ec-4c33-8c73-7051fa75a4a6", "created": "2026-01-27T05:12:58.857034Z", "modified": "2026-01-27T05:12:58.857034Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='021A3F097EDA780798DF5ECB16EF338C08236847']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.857034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d36014ac-99e0-48a8-a650-955964cf343c", "created": "2026-01-27T05:12:58.857973Z", "modified": "2026-01-27T05:12:58.857973Z", "relationship_type": "indicates", "source_ref": "indicator--60e3a51e-67ec-4c33-8c73-7051fa75a4a6", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb8c763-66c2-445d-92aa-79019022125c", "created": "2026-01-27T05:12:58.858153Z", "modified": "2026-01-27T05:12:58.858153Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0568E0400308CBFC58E11A324EA233F5B2E923BF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.858153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c8af335-55b9-4962-9833-ef166e9491b4", "created": "2026-01-27T05:12:58.858959Z", "modified": "2026-01-27T05:12:58.858959Z", "relationship_type": "indicates", "source_ref": "indicator--3bb8c763-66c2-445d-92aa-79019022125c", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfa5c20-237f-4dab-9058-b71e110f4cca", "created": "2026-01-27T05:12:58.859149Z", "modified": "2026-01-27T05:12:58.859149Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='09DCBFDB7C7262F143089C5493435AB07564FD67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.859149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1ef1aad-4e5a-4e74-bbd8-25836681270a", "created": "2026-01-27T05:12:58.859937Z", "modified": "2026-01-27T05:12:58.859937Z", "relationship_type": "indicates", "source_ref": "indicator--5bfa5c20-237f-4dab-9058-b71e110f4cca", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1399bbbd-c2c8-4676-b1b1-21d1c55a6a91", "created": "2026-01-27T05:12:58.860119Z", "modified": "2026-01-27T05:12:58.860119Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0FB6108D34289681BA0181ED9A4350514EB07665']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.860119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cec82cdf-6400-42fe-a4c9-05d8865c7db9", "created": "2026-01-27T05:12:58.860897Z", "modified": "2026-01-27T05:12:58.860897Z", "relationship_type": "indicates", "source_ref": "indicator--1399bbbd-c2c8-4676-b1b1-21d1c55a6a91", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888173e8-ab48-4411-8002-01643670e757", "created": "2026-01-27T05:12:58.861073Z", "modified": "2026-01-27T05:12:58.861073Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1128939E0D8B8BAEAB14C41AEBFAA100C319AD8F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.861073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0c18bf2-49b0-4934-b201-303943411c3d", "created": "2026-01-27T05:12:58.861854Z", "modified": "2026-01-27T05:12:58.861854Z", "relationship_type": "indicates", "source_ref": "indicator--888173e8-ab48-4411-8002-01643670e757", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e06d087-a876-4bcc-a090-1619d570dad0", "created": "2026-01-27T05:12:58.862029Z", "modified": "2026-01-27T05:12:58.862029Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='16254E7CBDFEC82B6CCE599DFCE6A6E84CF25504']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.862029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd82ff5e-0fac-4585-8fe8-3470208fc85a", "created": "2026-01-27T05:12:58.862824Z", "modified": "2026-01-27T05:12:58.862824Z", "relationship_type": "indicates", "source_ref": "indicator--2e06d087-a876-4bcc-a090-1619d570dad0", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f95e151-9a43-4ae4-aa04-cd6a3c215a2a", "created": "2026-01-27T05:12:58.863007Z", "modified": "2026-01-27T05:12:58.863007Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='29FFFE437675D2B55512953759C40776E547592D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.863007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c71fd01-c50e-4a28-976c-629a630bb695", "created": "2026-01-27T05:12:58.863783Z", "modified": "2026-01-27T05:12:58.863783Z", "relationship_type": "indicates", "source_ref": "indicator--7f95e151-9a43-4ae4-aa04-cd6a3c215a2a", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae91c9a6-e5cf-43b2-8f2c-c58011434368", "created": "2026-01-27T05:12:58.86396Z", "modified": "2026-01-27T05:12:58.86396Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2F033070A8CD93CEAC60F9E203BA33C9A9A3D226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.86396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7212c9a9-72f3-455d-92e5-14501dbd2755", "created": "2026-01-27T05:12:58.86474Z", "modified": "2026-01-27T05:12:58.86474Z", "relationship_type": "indicates", "source_ref": "indicator--ae91c9a6-e5cf-43b2-8f2c-c58011434368", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b18609-5aa1-4295-bfd7-5e00d6f2f931", "created": "2026-01-27T05:12:58.864929Z", "modified": "2026-01-27T05:12:58.864929Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35CD797D1736484786152A231920575FABC5C12A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.864929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38aaeb03-f61b-4bfa-b070-7b1c0ddf2a5b", "created": "2026-01-27T05:12:58.865721Z", "modified": "2026-01-27T05:12:58.865721Z", "relationship_type": "indicates", "source_ref": "indicator--60b18609-5aa1-4295-bfd7-5e00d6f2f931", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e3b3c7-d02b-42e7-97e2-33e85ed39f78", "created": "2026-01-27T05:12:58.865911Z", "modified": "2026-01-27T05:12:58.865911Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='377223C40330F7925BB238E3A2AC6E1BE1A05749']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.865911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85a5c229-8f20-4ff3-af17-315512b3800c", "created": "2026-01-27T05:12:58.866808Z", "modified": "2026-01-27T05:12:58.866808Z", "relationship_type": "indicates", "source_ref": "indicator--d3e3b3c7-d02b-42e7-97e2-33e85ed39f78", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036c43df-d309-4e44-9b2c-f9018bbd709e", "created": "2026-01-27T05:12:58.866984Z", "modified": "2026-01-27T05:12:58.866984Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3935E474CD6EDACB19F24192809B337D376656F6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.866984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4624a537-bf54-4d2e-8fe1-8a1a3c414027", "created": "2026-01-27T05:12:58.867757Z", "modified": "2026-01-27T05:12:58.867757Z", "relationship_type": "indicates", "source_ref": "indicator--036c43df-d309-4e44-9b2c-f9018bbd709e", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e29724-f289-4fb1-8476-24f34dd865cf", "created": "2026-01-27T05:12:58.867937Z", "modified": "2026-01-27T05:12:58.867937Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='457D2470CA3E635178D224C14C0D743B7C7F9F80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.867937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6929522-07b4-490d-813a-bcfaceb1b5e8", "created": "2026-01-27T05:12:58.868694Z", "modified": "2026-01-27T05:12:58.868694Z", "relationship_type": "indicates", "source_ref": "indicator--f9e29724-f289-4fb1-8476-24f34dd865cf", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ca32fc-fa38-4d02-95be-95367dd1aaed", "created": "2026-01-27T05:12:58.868899Z", "modified": "2026-01-27T05:12:58.868899Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='57178BA7BE0677C3143C24362FD35A9CF0E311A8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.868899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a34513e2-b7e0-4ffe-9367-bc7493e14b80", "created": "2026-01-27T05:12:58.86966Z", "modified": "2026-01-27T05:12:58.86966Z", "relationship_type": "indicates", "source_ref": "indicator--d6ca32fc-fa38-4d02-95be-95367dd1aaed", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a74122-1c9d-4f69-aab1-09f1858f1083", "created": "2026-01-27T05:12:58.869852Z", "modified": "2026-01-27T05:12:58.869852Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='575A730BC2411897A318DEB23B3C3CC4F63422F5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.869852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b1029d-4939-44f1-815d-f34cdc33a7e0", "created": "2026-01-27T05:12:58.87063Z", "modified": "2026-01-27T05:12:58.87063Z", "relationship_type": "indicates", "source_ref": "indicator--e4a74122-1c9d-4f69-aab1-09f1858f1083", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb2dfb2-cd3c-4436-a9ea-2c4ea436cef0", "created": "2026-01-27T05:12:58.87082Z", "modified": "2026-01-27T05:12:58.87082Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5F43A60BFC663FB37F419A40015495431649310B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.87082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d80881e-3bd6-41f8-a962-c4b30a8fea62", "created": "2026-01-27T05:12:58.871581Z", "modified": "2026-01-27T05:12:58.871581Z", "relationship_type": "indicates", "source_ref": "indicator--6fb2dfb2-cd3c-4436-a9ea-2c4ea436cef0", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294cabab-b1fd-4d23-9ab6-18a8a65b7276", "created": "2026-01-27T05:12:58.871767Z", "modified": "2026-01-27T05:12:58.871767Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6000C3F6A35C81C0AE6ACA73DBF7B7D19DCDB7BC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.871767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f91a5d55-4131-4b82-9ff7-f504cc340dfe", "created": "2026-01-27T05:12:58.872548Z", "modified": "2026-01-27T05:12:58.872548Z", "relationship_type": "indicates", "source_ref": "indicator--294cabab-b1fd-4d23-9ab6-18a8a65b7276", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf7a574-2e0e-4365-ac58-1d3929e3f93d", "created": "2026-01-27T05:12:58.872724Z", "modified": "2026-01-27T05:12:58.872724Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6F1CE95315749AC6F377B310C0B831CF05B04C68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.872724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9701ca3-8f0a-4970-a631-0868fedd2965", "created": "2026-01-27T05:12:58.873554Z", "modified": "2026-01-27T05:12:58.873554Z", "relationship_type": "indicates", "source_ref": "indicator--3bf7a574-2e0e-4365-ac58-1d3929e3f93d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9c0cef-f7dd-45bb-be1a-21a071247a1e", "created": "2026-01-27T05:12:58.873761Z", "modified": "2026-01-27T05:12:58.873761Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='845705FB0FE177970768CE3F5241AEBD99F3BEEE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.873761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91da9896-f1c4-46f2-b292-bfc72d1c7017", "created": "2026-01-27T05:12:58.874586Z", "modified": "2026-01-27T05:12:58.874586Z", "relationship_type": "indicates", "source_ref": "indicator--ad9c0cef-f7dd-45bb-be1a-21a071247a1e", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a8746b-9013-4100-b254-65a5841fd3fe", "created": "2026-01-27T05:12:58.874789Z", "modified": "2026-01-27T05:12:58.874789Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='85F12B25CEB58B8376F83209D8D128841132DC51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.874789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e8cc60d-5af5-4afa-a95a-30db7e35c9d1", "created": "2026-01-27T05:12:58.876074Z", "modified": "2026-01-27T05:12:58.876074Z", "relationship_type": "indicates", "source_ref": "indicator--79a8746b-9013-4100-b254-65a5841fd3fe", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55d940d-0537-422d-b39f-42b5afbe84ff", "created": "2026-01-27T05:12:58.876254Z", "modified": "2026-01-27T05:12:58.876254Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8A718113C6EDE9473FE4BF1F29E2E807B7EB7B56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.876254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48277a4d-030b-4153-922f-ba99b455e262", "created": "2026-01-27T05:12:58.877045Z", "modified": "2026-01-27T05:12:58.877045Z", "relationship_type": "indicates", "source_ref": "indicator--e55d940d-0537-422d-b39f-42b5afbe84ff", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee725d4-531c-4baa-830c-ec159acb4a99", "created": "2026-01-27T05:12:58.87723Z", "modified": "2026-01-27T05:12:58.87723Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8A92A4F6F9FC52BC8788F17704944614C744716C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.87723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ce777b7-f4ef-4211-afb1-9fd0cf1e0303", "created": "2026-01-27T05:12:58.878014Z", "modified": "2026-01-27T05:12:58.878014Z", "relationship_type": "indicates", "source_ref": "indicator--7ee725d4-531c-4baa-830c-ec159acb4a99", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe21ddc-6554-4916-b79d-45ed7df8771b", "created": "2026-01-27T05:12:58.878188Z", "modified": "2026-01-27T05:12:58.878188Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8B9540311C46184984B48BF9CB51F1742A8AFB42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.878188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4559345c-cdfd-426d-a2f6-d3e0369a2ede", "created": "2026-01-27T05:12:58.878962Z", "modified": "2026-01-27T05:12:58.878962Z", "relationship_type": "indicates", "source_ref": "indicator--3fe21ddc-6554-4916-b79d-45ed7df8771b", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3e8cd5-d175-4f83-a3f9-58443300561b", "created": "2026-01-27T05:12:58.879137Z", "modified": "2026-01-27T05:12:58.879137Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8CED75E875A2F11B3327A73A6DBD0B25E26533F2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.879137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95f30ce7-77e7-4f28-893e-7bc852c321ff", "created": "2026-01-27T05:12:58.879915Z", "modified": "2026-01-27T05:12:58.879915Z", "relationship_type": "indicates", "source_ref": "indicator--5d3e8cd5-d175-4f83-a3f9-58443300561b", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc8c92c-3cc1-4f2f-9626-604a60389429", "created": "2026-01-27T05:12:58.880091Z", "modified": "2026-01-27T05:12:58.880091Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9225C8FD380154467908AE344FBE75CE7EF996B8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.880091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2218be23-0f0a-4cf8-b039-0cf710fa302a", "created": "2026-01-27T05:12:58.88088Z", "modified": "2026-01-27T05:12:58.88088Z", "relationship_type": "indicates", "source_ref": "indicator--5bc8c92c-3cc1-4f2f-9626-604a60389429", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcbdf70-6391-45f8-ae96-feabb6d36ed7", "created": "2026-01-27T05:12:58.881058Z", "modified": "2026-01-27T05:12:58.881058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='927CA44949D7788AA86F9D7F04D7FDACECD1DFB9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.881058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c364061e-0555-40ca-be23-91876e914e48", "created": "2026-01-27T05:12:58.881834Z", "modified": "2026-01-27T05:12:58.881834Z", "relationship_type": "indicates", "source_ref": "indicator--edcbdf70-6391-45f8-ae96-feabb6d36ed7", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d98e97-323d-44fb-8f8d-1c7e6d3b4a34", "created": "2026-01-27T05:12:58.88201Z", "modified": "2026-01-27T05:12:58.88201Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9442F1D40FBAAD7053D130986C4487D0BA5C079F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.88201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9573b619-eec7-4045-884e-1fcf50f03847", "created": "2026-01-27T05:12:58.882797Z", "modified": "2026-01-27T05:12:58.882797Z", "relationship_type": "indicates", "source_ref": "indicator--88d98e97-323d-44fb-8f8d-1c7e6d3b4a34", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8eca0a1-9514-4e1a-bee2-fb8048eef24e", "created": "2026-01-27T05:12:58.882982Z", "modified": "2026-01-27T05:12:58.882982Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A75B340A58545B28B7E837582259C1CC2CE21512']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.882982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4050a09-2e14-45d5-93c4-79a1d244d60b", "created": "2026-01-27T05:12:58.88376Z", "modified": "2026-01-27T05:12:58.88376Z", "relationship_type": "indicates", "source_ref": "indicator--d8eca0a1-9514-4e1a-bee2-fb8048eef24e", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1820404d-20df-49ce-b221-161d6e77f92b", "created": "2026-01-27T05:12:58.88394Z", "modified": "2026-01-27T05:12:58.88394Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B0B09157DC34E3D20DF6A92EBA0014D36A27C451']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.88394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc5016bf-760d-473d-b89f-4316c8e20223", "created": "2026-01-27T05:12:58.884834Z", "modified": "2026-01-27T05:12:58.884834Z", "relationship_type": "indicates", "source_ref": "indicator--1820404d-20df-49ce-b221-161d6e77f92b", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c6f4b7-5ff0-4a5c-aef0-5b090d1cbd39", "created": "2026-01-27T05:12:58.885016Z", "modified": "2026-01-27T05:12:58.885016Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7322B2126B2C4F4DED940D719FE1E63FD233D35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.885016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--421978fd-247a-4505-9c5e-5d3dd5aef1f5", "created": "2026-01-27T05:12:58.885795Z", "modified": "2026-01-27T05:12:58.885795Z", "relationship_type": "indicates", "source_ref": "indicator--69c6f4b7-5ff0-4a5c-aef0-5b090d1cbd39", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d65691-792e-4543-bf75-9d3d61eece10", "created": "2026-01-27T05:12:58.885974Z", "modified": "2026-01-27T05:12:58.885974Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8D8C25B1CFE2829D397C8FB166895A6791A43D5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.885974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4957271d-8d79-4a03-bdce-5cb605edc08b", "created": "2026-01-27T05:12:58.886736Z", "modified": "2026-01-27T05:12:58.886736Z", "relationship_type": "indicates", "source_ref": "indicator--b2d65691-792e-4543-bf75-9d3d61eece10", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117ea5f6-2c4c-434c-b521-1f1272ea5a66", "created": "2026-01-27T05:12:58.886933Z", "modified": "2026-01-27T05:12:58.886933Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C656605BDB536B842319AC008FBB249D8B0A7422']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.886933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32396fd3-ccf1-4bc5-8c71-998161ce0d37", "created": "2026-01-27T05:12:58.887701Z", "modified": "2026-01-27T05:12:58.887701Z", "relationship_type": "indicates", "source_ref": "indicator--117ea5f6-2c4c-434c-b521-1f1272ea5a66", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4020db1-ca75-4ef6-b1a6-c31e4798fd7a", "created": "2026-01-27T05:12:58.887891Z", "modified": "2026-01-27T05:12:58.887891Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CB6E6DEB296275EDF70DC71A62A75AB7B9C8DB89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.887891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61aec538-261e-46d6-a74c-84bd4066e627", "created": "2026-01-27T05:12:58.888653Z", "modified": "2026-01-27T05:12:58.888653Z", "relationship_type": "indicates", "source_ref": "indicator--d4020db1-ca75-4ef6-b1a6-c31e4798fd7a", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602902e9-e7c2-47e6-b3ed-8d248a5cdf37", "created": "2026-01-27T05:12:58.888843Z", "modified": "2026-01-27T05:12:58.888843Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CD5724426B602C1CD0BF3BD65EF75B9021C0EC3A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.888843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a56cad3-a334-42c4-b2ff-fd265c8c0e03", "created": "2026-01-27T05:12:58.889639Z", "modified": "2026-01-27T05:12:58.889639Z", "relationship_type": "indicates", "source_ref": "indicator--602902e9-e7c2-47e6-b3ed-8d248a5cdf37", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c095b40c-6067-4102-99b0-404d6f263a27", "created": "2026-01-27T05:12:58.889829Z", "modified": "2026-01-27T05:12:58.889829Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CE3BB9701274C15D26A92C1D7D34110961EB73F1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.889829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ff951ac-5331-40eb-914b-e63a04a7470e", "created": "2026-01-27T05:12:58.8906Z", "modified": "2026-01-27T05:12:58.8906Z", "relationship_type": "indicates", "source_ref": "indicator--c095b40c-6067-4102-99b0-404d6f263a27", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53855a82-475c-41e5-9181-c78520f272c8", "created": "2026-01-27T05:12:58.890802Z", "modified": "2026-01-27T05:12:58.890802Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D244AA1DD3D4296CE875EDA2E1B0332459F7DACE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.890802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10301f51-ff56-418b-8e48-c951fcbafcb7", "created": "2026-01-27T05:12:58.891582Z", "modified": "2026-01-27T05:12:58.891582Z", "relationship_type": "indicates", "source_ref": "indicator--53855a82-475c-41e5-9181-c78520f272c8", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5657c0ae-f7bd-4ddd-9466-a78b0829225d", "created": "2026-01-27T05:12:58.891767Z", "modified": "2026-01-27T05:12:58.891767Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D943998AEC15B3D70DA3BF00FF7BF580A41F6E4B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.891767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e237ff19-c4f9-4159-ade9-601d99522dc2", "created": "2026-01-27T05:12:58.892544Z", "modified": "2026-01-27T05:12:58.892544Z", "relationship_type": "indicates", "source_ref": "indicator--5657c0ae-f7bd-4ddd-9466-a78b0829225d", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70eebaa3-82e9-4d7b-bc10-682a8d2bcf24", "created": "2026-01-27T05:12:58.892732Z", "modified": "2026-01-27T05:12:58.892732Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DDCF7F1032E7D9DA4E3D245A5145363F69F9C393']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.892732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0b4e02e-3a12-4f6b-862c-a183a9ef9cfc", "created": "2026-01-27T05:12:58.893667Z", "modified": "2026-01-27T05:12:58.893667Z", "relationship_type": "indicates", "source_ref": "indicator--70eebaa3-82e9-4d7b-bc10-682a8d2bcf24", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fd2ab4-592a-4e49-b5f7-5fe40a0b6cd3", "created": "2026-01-27T05:12:58.893861Z", "modified": "2026-01-27T05:12:58.893861Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E8395BE2A32B62C1BA21E37663E3BF1583E00FAA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.893861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7fff6a7-4fe0-4844-9313-0882987c294a", "created": "2026-01-27T05:12:58.894634Z", "modified": "2026-01-27T05:12:58.894634Z", "relationship_type": "indicates", "source_ref": "indicator--e7fd2ab4-592a-4e49-b5f7-5fe40a0b6cd3", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a73b7c-9a94-4c11-bac9-d3a66bb059c7", "created": "2026-01-27T05:12:58.894827Z", "modified": "2026-01-27T05:12:58.894827Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FB2EEA183C183B486B3001EC5FC4E8C906593356']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.894827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--425aadbc-ab21-448e-994c-b564decc82da", "created": "2026-01-27T05:12:58.895596Z", "modified": "2026-01-27T05:12:58.895596Z", "relationship_type": "indicates", "source_ref": "indicator--d9a73b7c-9a94-4c11-bac9-d3a66bb059c7", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405191ae-a280-4847-ad30-5707860c2800", "created": "2026-01-27T05:12:58.895788Z", "modified": "2026-01-27T05:12:58.895788Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='09273A6004A46078991F3FBA2A4868DA26DBB508']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.895788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3883d24f-603a-4a6e-bb1f-e4df9d286b65", "created": "2026-01-27T05:12:58.896562Z", "modified": "2026-01-27T05:12:58.896562Z", "relationship_type": "indicates", "source_ref": "indicator--405191ae-a280-4847-ad30-5707860c2800", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131a3627-8457-48e2-8a60-2dd9aacc4c73", "created": "2026-01-27T05:12:58.896737Z", "modified": "2026-01-27T05:12:58.896737Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2A84B79A7E17E1F49642E8D5EA9828CFEA763E8C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.896737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8622e1b5-f24b-4fc7-80d0-d9532c77d521", "created": "2026-01-27T05:12:58.897528Z", "modified": "2026-01-27T05:12:58.897528Z", "relationship_type": "indicates", "source_ref": "indicator--131a3627-8457-48e2-8a60-2dd9aacc4c73", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c70820-4517-463a-8383-9c2ca3fc5f96", "created": "2026-01-27T05:12:58.897706Z", "modified": "2026-01-27T05:12:58.897706Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A4817668612688754B4905C44AB9F70C58C25CB2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.897706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dd0facd-ba29-4d9d-91d5-af1e8e14fa63", "created": "2026-01-27T05:12:58.8985Z", "modified": "2026-01-27T05:12:58.8985Z", "relationship_type": "indicates", "source_ref": "indicator--b0c70820-4517-463a-8383-9c2ca3fc5f96", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1a1140-4b4e-46a9-8d18-2710b2136f80", "created": "2026-01-27T05:12:58.898685Z", "modified": "2026-01-27T05:12:58.898685Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1CE722F401C3FA8FE498FF824669C0007A200AA9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.898685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--694f0807-0a2c-4e6b-b5ce-61b39d22a774", "created": "2026-01-27T05:12:58.899475Z", "modified": "2026-01-27T05:12:58.899475Z", "relationship_type": "indicates", "source_ref": "indicator--1a1a1140-4b4e-46a9-8d18-2710b2136f80", "target_ref": "malware--f84d2780-0b84-470a-b5dd-89501a464d55"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a", "created": "2026-01-27T05:12:58.899648Z", "modified": "2026-01-27T05:12:58.899648Z", "name": "iKeyMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4ca225-20e9-41bd-8821-7262e76965dd", "created": "2026-01-27T05:12:58.899848Z", "modified": "2026-01-27T05:12:58.899848Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='83dd4.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.899848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82d4406a-dc79-4da5-bd0c-dc7463c5210a", "created": "2026-01-27T05:12:58.900524Z", "modified": "2026-01-27T05:12:58.900524Z", "relationship_type": "indicates", "source_ref": "indicator--0a4ca225-20e9-41bd-8821-7262e76965dd", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba8005f-9d30-4c4b-8bfa-742683c3a92d", "created": "2026-01-27T05:12:58.900697Z", "modified": "2026-01-27T05:12:58.900697Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awsapi.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.900697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef7a2df4-7132-4148-a1d2-76d187140e55", "created": "2026-01-27T05:12:58.9015Z", "modified": "2026-01-27T05:12:58.9015Z", "relationship_type": "indicates", "source_ref": "indicator--dba8005f-9d30-4c4b-8bfa-742683c3a92d", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe126c85-0eeb-4b42-a3cc-ce9c0ab625f4", "created": "2026-01-27T05:12:58.901678Z", "modified": "2026-01-27T05:12:58.901678Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='em.awsapi.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.901678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edbca8dd-8474-4498-ab49-37984af5f68c", "created": "2026-01-27T05:12:58.902379Z", "modified": "2026-01-27T05:12:58.902379Z", "relationship_type": "indicates", "source_ref": "indicator--fe126c85-0eeb-4b42-a3cc-ce9c0ab625f4", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33828cee-d796-4aa1-a50d-9b19910d62c8", "created": "2026-01-27T05:12:58.902557Z", "modified": "2026-01-27T05:12:58.902557Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ikm.awsapi.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.902557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b15fed1-719d-435e-9f1a-d269688ee7a5", "created": "2026-01-27T05:12:58.903258Z", "modified": "2026-01-27T05:12:58.903258Z", "relationship_type": "indicates", "source_ref": "indicator--33828cee-d796-4aa1-a50d-9b19910d62c8", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6beb80a-4b8f-41ab-9a16-46bc61237209", "created": "2026-01-27T05:12:58.903436Z", "modified": "2026-01-27T05:12:58.903436Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='emcpanel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.903436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba109d4a-27f4-42ba-ae06-b06f5eed805c", "created": "2026-01-27T05:12:58.90412Z", "modified": "2026-01-27T05:12:58.90412Z", "relationship_type": "indicates", "source_ref": "indicator--e6beb80a-4b8f-41ab-9a16-46bc61237209", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f8e0df-5c0d-4334-8e23-005d080abed3", "created": "2026-01-27T05:12:58.904296Z", "modified": "2026-01-27T05:12:58.904296Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.easemon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.904296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1dc015e-b437-4ca1-933c-ade109283995", "created": "2026-01-27T05:12:58.905077Z", "modified": "2026-01-27T05:12:58.905077Z", "relationship_type": "indicates", "source_ref": "indicator--a4f8e0df-5c0d-4334-8e23-005d080abed3", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c9bdca-3b44-4a36-b668-4263ec2680b2", "created": "2026-01-27T05:12:58.905259Z", "modified": "2026-01-27T05:12:58.905259Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ikeymonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.905259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f651031-2c22-4297-8a35-209fd9d4a89c", "created": "2026-01-27T05:12:58.905957Z", "modified": "2026-01-27T05:12:58.905957Z", "relationship_type": "indicates", "source_ref": "indicator--f0c9bdca-3b44-4a36-b668-4263ec2680b2", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef0e8b4-153c-4a59-bc6c-bfb7ee50962b", "created": "2026-01-27T05:12:58.90614Z", "modified": "2026-01-27T05:12:58.90614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ikeymonitor.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.90614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2c2f609-a4cb-4ded-a2ae-fceb91c48916", "created": "2026-01-27T05:12:58.906823Z", "modified": "2026-01-27T05:12:58.906823Z", "relationship_type": "indicates", "source_ref": "indicator--5ef0e8b4-153c-4a59-bc6c-bfb7ee50962b", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae20881f-7bc9-4741-98c6-2f1c9f047842", "created": "2026-01-27T05:12:58.907Z", "modified": "2026-01-27T05:12:58.907Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.awosoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fe5f13f-1f01-4e14-ae59-d5ff36f399e0", "created": "2026-01-27T05:12:58.907725Z", "modified": "2026-01-27T05:12:58.907725Z", "relationship_type": "indicates", "source_ref": "indicator--ae20881f-7bc9-4741-98c6-2f1c9f047842", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55d87a0-da28-40f6-b7de-a8441ffd5ef6", "created": "2026-01-27T05:12:58.907945Z", "modified": "2026-01-27T05:12:58.907945Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easemon.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.907945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31887ca9-354a-496d-9ab0-9532263802dc", "created": "2026-01-27T05:12:58.90869Z", "modified": "2026-01-27T05:12:58.90869Z", "relationship_type": "indicates", "source_ref": "indicator--a55d87a0-da28-40f6-b7de-a8441ffd5ef6", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5944f7-21ee-4eeb-be34-cd01a7cbd6c1", "created": "2026-01-27T05:12:58.908909Z", "modified": "2026-01-27T05:12:58.908909Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b6216005c45b9d12cb12921340bd5db6a9eb7b0684e6db456a02d04ceb9b908']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.908909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d1db3da-9f49-45a5-a4a3-9d6940823eb8", "created": "2026-01-27T05:12:58.9099Z", "modified": "2026-01-27T05:12:58.9099Z", "relationship_type": "indicates", "source_ref": "indicator--4d5944f7-21ee-4eeb-be34-cd01a7cbd6c1", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa348ddd-111e-4b3c-9061-ed95fd722c9c", "created": "2026-01-27T05:12:58.910085Z", "modified": "2026-01-27T05:12:58.910085Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2929f77cd59baf6ea8f759b3c5284075b8daa60b04c5b3333a1be1f857f19ec0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.910085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfb78c0a-04f1-47ba-a9aa-1b0afced282a", "created": "2026-01-27T05:12:58.91093Z", "modified": "2026-01-27T05:12:58.91093Z", "relationship_type": "indicates", "source_ref": "indicator--fa348ddd-111e-4b3c-9061-ed95fd722c9c", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa79f18-cadc-4162-9169-c29196b3088e", "created": "2026-01-27T05:12:58.911108Z", "modified": "2026-01-27T05:12:58.911108Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1b5e6af98dfa2c8e1ceddf4eb4d8c533db415cbea5047c6bd3ec041ae642a36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.911108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8035c75-8be9-4457-9abe-4cdd1fc3d319", "created": "2026-01-27T05:12:58.911946Z", "modified": "2026-01-27T05:12:58.911946Z", "relationship_type": "indicates", "source_ref": "indicator--faa79f18-cadc-4162-9169-c29196b3088e", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dd3919-bb2f-4b74-812d-66879bf04b1e", "created": "2026-01-27T05:12:58.912123Z", "modified": "2026-01-27T05:12:58.912123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8b8190a1d7f54dfc26b73c0915f9cf15df57a7812b805857f6fd6314dfdcb51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.912123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--605491bd-98a5-490b-b92a-408137c5e18b", "created": "2026-01-27T05:12:58.912975Z", "modified": "2026-01-27T05:12:58.912975Z", "relationship_type": "indicates", "source_ref": "indicator--b9dd3919-bb2f-4b74-812d-66879bf04b1e", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a42af1-09c5-460f-a404-3802103e29ff", "created": "2026-01-27T05:12:58.913155Z", "modified": "2026-01-27T05:12:58.913155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34eeabc826dc4f8e9aeb981b6f2738572bc8c5b7ae351aef7ecd71899754dc34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.913155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69426eee-da07-4119-b68e-83c5f91feedb", "created": "2026-01-27T05:12:58.914002Z", "modified": "2026-01-27T05:12:58.914002Z", "relationship_type": "indicates", "source_ref": "indicator--90a42af1-09c5-460f-a404-3802103e29ff", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43230c7-f3d3-4736-8591-48ec5304d0a6", "created": "2026-01-27T05:12:58.91418Z", "modified": "2026-01-27T05:12:58.91418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34be41a01b632ca4b4b011b80cbaf381f0e81e76f94e5024b8fbeb44969df419']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.91418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--611eb9d7-7350-4d3d-a57d-a45ad437f3cb", "created": "2026-01-27T05:12:58.915036Z", "modified": "2026-01-27T05:12:58.915036Z", "relationship_type": "indicates", "source_ref": "indicator--a43230c7-f3d3-4736-8591-48ec5304d0a6", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf5557b-3217-4c66-b089-a618cc34d392", "created": "2026-01-27T05:12:58.915213Z", "modified": "2026-01-27T05:12:58.915213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63c22cbd47fccaff2b3ed583cefd694a8f2c64060b0fb83577c8beea35743f6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.915213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--568162da-a8b8-4af2-adc3-e1f4f1993cdb", "created": "2026-01-27T05:12:58.916063Z", "modified": "2026-01-27T05:12:58.916063Z", "relationship_type": "indicates", "source_ref": "indicator--2cf5557b-3217-4c66-b089-a618cc34d392", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f17eab-67b8-48dd-ac0a-a78f8bb55672", "created": "2026-01-27T05:12:58.91624Z", "modified": "2026-01-27T05:12:58.91624Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20200817']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.91624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--262b2b47-4ac2-4192-bff7-ed881debbf77", "created": "2026-01-27T05:12:58.916936Z", "modified": "2026-01-27T05:12:58.916936Z", "relationship_type": "indicates", "source_ref": "indicator--25f17eab-67b8-48dd-ac0a-a78f8bb55672", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1baca97-ccbb-4626-bdcb-ca42e92def8f", "created": "2026-01-27T05:12:58.917119Z", "modified": "2026-01-27T05:12:58.917119Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20210916']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.917119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--280c3b7b-9b99-4dcb-9818-c14d04c7d365", "created": "2026-01-27T05:12:58.917804Z", "modified": "2026-01-27T05:12:58.917804Z", "relationship_type": "indicates", "source_ref": "indicator--b1baca97-ccbb-4626-bdcb-ca42e92def8f", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23a6a72-b9b8-4f0a-888a-130fba5d816e", "created": "2026-01-27T05:12:58.917981Z", "modified": "2026-01-27T05:12:58.917981Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20220729']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.917981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99a1c5ae-631f-4f0d-9607-6a12eb9e4db7", "created": "2026-01-27T05:12:58.918805Z", "modified": "2026-01-27T05:12:58.918805Z", "relationship_type": "indicates", "source_ref": "indicator--f23a6a72-b9b8-4f0a-888a-130fba5d816e", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb57949-f487-4b06-9dab-03fd8af4b3c4", "created": "2026-01-27T05:12:58.918986Z", "modified": "2026-01-27T05:12:58.918986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20220829']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.918986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb6179f1-10ac-49f2-83f2-4e0624c31d82", "created": "2026-01-27T05:12:58.919655Z", "modified": "2026-01-27T05:12:58.919655Z", "relationship_type": "indicates", "source_ref": "indicator--0fb57949-f487-4b06-9dab-03fd8af4b3c4", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ab7757-88a4-4e50-9e59-58b40bb223b5", "created": "2026-01-27T05:12:58.919849Z", "modified": "2026-01-27T05:12:58.919849Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.internet.a20220914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.919849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--561c6a28-7fc2-417e-b21f-46a5d754de8c", "created": "2026-01-27T05:12:58.920532Z", "modified": "2026-01-27T05:12:58.920532Z", "relationship_type": "indicates", "source_ref": "indicator--e1ab7757-88a4-4e50-9e59-58b40bb223b5", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d73d1b-c60b-499d-952c-4737bc8a61f4", "created": "2026-01-27T05:12:58.920714Z", "modified": "2026-01-27T05:12:58.920714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.android.internet.im.service.im20190118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.920714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ca282e6-197f-4a88-a2a3-56be004676f6", "created": "2026-01-27T05:12:58.921432Z", "modified": "2026-01-27T05:12:58.921432Z", "relationship_type": "indicates", "source_ref": "indicator--43d73d1b-c60b-499d-952c-4737bc8a61f4", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225e0127-2ed7-44a7-9675-3a87947afd9a", "created": "2026-01-27T05:12:58.921608Z", "modified": "2026-01-27T05:12:58.921608Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.android.internet.im.service.im20190419']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.921608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2a0e994-ec5f-42d9-b794-cc81e8b40c2d", "created": "2026-01-27T05:12:58.922338Z", "modified": "2026-01-27T05:12:58.922338Z", "relationship_type": "indicates", "source_ref": "indicator--225e0127-2ed7-44a7-9675-3a87947afd9a", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0949b799-721f-4400-aefe-9438b1df4e60", "created": "2026-01-27T05:12:58.922519Z", "modified": "2026-01-27T05:12:58.922519Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.android.internet.im.service.im20210815']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.922519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e789ec2-3e4a-4aa4-943f-77df7f924158", "created": "2026-01-27T05:12:58.923237Z", "modified": "2026-01-27T05:12:58.923237Z", "relationship_type": "indicates", "source_ref": "indicator--0949b799-721f-4400-aefe-9438b1df4e60", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df6e0b2-e6cc-451d-a989-42a0fa9be483", "created": "2026-01-27T05:12:58.923415Z", "modified": "2026-01-27T05:12:58.923415Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C1D83F5FFE3EC319FF103EC7346CDDF218B5634D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.923415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14a0a2a4-a73f-4c28-8bad-f9ccb66d9472", "created": "2026-01-27T05:12:58.924205Z", "modified": "2026-01-27T05:12:58.924205Z", "relationship_type": "indicates", "source_ref": "indicator--3df6e0b2-e6cc-451d-a989-42a0fa9be483", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--305a2898-fd40-4050-af55-709b60c95145", "created": "2026-01-27T05:12:58.924381Z", "modified": "2026-01-27T05:12:58.924381Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4DAD108F915E237CA2834FAC70C077AD8105E804']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.924381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8ffc28e-a478-4222-ba32-30f74cddf0a9", "created": "2026-01-27T05:12:58.925168Z", "modified": "2026-01-27T05:12:58.925168Z", "relationship_type": "indicates", "source_ref": "indicator--305a2898-fd40-4050-af55-709b60c95145", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189b8d9f-7652-4f54-984a-0b80e2083e29", "created": "2026-01-27T05:12:58.925343Z", "modified": "2026-01-27T05:12:58.925343Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8F5FDFAE5920C4CFB6ACE214D39327F299FA76D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.925343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--579b1c98-7d2b-49b4-be8b-1fece819c3a4", "created": "2026-01-27T05:12:58.926143Z", "modified": "2026-01-27T05:12:58.926143Z", "relationship_type": "indicates", "source_ref": "indicator--189b8d9f-7652-4f54-984a-0b80e2083e29", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb72e2a-4613-4bdb-b10f-5533b6d90a5c", "created": "2026-01-27T05:12:58.926318Z", "modified": "2026-01-27T05:12:58.926318Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9284CB43B87E9F9C77DA509F1672E884BD6CA876']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.926318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca592620-72c6-4be9-831b-8e2212cec7be", "created": "2026-01-27T05:12:58.927216Z", "modified": "2026-01-27T05:12:58.927216Z", "relationship_type": "indicates", "source_ref": "indicator--6cb72e2a-4613-4bdb-b10f-5533b6d90a5c", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1230c7b6-bb02-45a0-936f-cbf123aa8ed3", "created": "2026-01-27T05:12:58.927392Z", "modified": "2026-01-27T05:12:58.927392Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='786325AB3E614F868CA2A7F2F0E75EC76A047311']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.927392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--154fc41c-3011-4a0b-bdca-fa05368bdfd1", "created": "2026-01-27T05:12:58.928172Z", "modified": "2026-01-27T05:12:58.928172Z", "relationship_type": "indicates", "source_ref": "indicator--1230c7b6-bb02-45a0-936f-cbf123aa8ed3", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5feb13b-66a0-495b-b9a8-532fefc03e02", "created": "2026-01-27T05:12:58.928349Z", "modified": "2026-01-27T05:12:58.928349Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F747F0BBEF33FFEE6AFC4E7CFA03B28215985F24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.928349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b26b87b-56d3-44c8-ab28-0cf39e868928", "created": "2026-01-27T05:12:58.929132Z", "modified": "2026-01-27T05:12:58.929132Z", "relationship_type": "indicates", "source_ref": "indicator--a5feb13b-66a0-495b-b9a8-532fefc03e02", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bed7214-08df-4513-810d-c71e9a9e3dd3", "created": "2026-01-27T05:12:58.929307Z", "modified": "2026-01-27T05:12:58.929307Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0C422F0025F866C311DF61A7549FCD519683898D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.929307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e008c3d-81d3-469c-8d4d-bcfa9997bbd2", "created": "2026-01-27T05:12:58.930088Z", "modified": "2026-01-27T05:12:58.930088Z", "relationship_type": "indicates", "source_ref": "indicator--6bed7214-08df-4513-810d-c71e9a9e3dd3", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e89f0a-9699-49b5-9cb4-531f0ab9ccb9", "created": "2026-01-27T05:12:58.930261Z", "modified": "2026-01-27T05:12:58.930261Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='98ED5841256A44FB1525FE154C0516ACED82FFF3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.930261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba322039-51c1-46cb-98fe-63cf155f35a4", "created": "2026-01-27T05:12:58.931047Z", "modified": "2026-01-27T05:12:58.931047Z", "relationship_type": "indicates", "source_ref": "indicator--07e89f0a-9699-49b5-9cb4-531f0ab9ccb9", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e2a81a-241f-41df-b931-920e9f22b8d5", "created": "2026-01-27T05:12:58.931222Z", "modified": "2026-01-27T05:12:58.931222Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='ACB2CA50376456FD81B5C6C19CF6D717CFBB888B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.931222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fe5057a-08cb-473a-9be0-2b5cbf6afa67", "created": "2026-01-27T05:12:58.932008Z", "modified": "2026-01-27T05:12:58.932008Z", "relationship_type": "indicates", "source_ref": "indicator--78e2a81a-241f-41df-b931-920e9f22b8d5", "target_ref": "malware--a8d10a8b-8754-45cd-9e8e-8cd29ad2b00a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1", "created": "2026-01-27T05:12:58.932179Z", "modified": "2026-01-27T05:12:58.932179Z", "name": "PanSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f901e3-4140-43b1-bbd7-706647259217", "created": "2026-01-27T05:12:58.932391Z", "modified": "2026-01-27T05:12:58.932391Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.932391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--484e1e6d-58c6-4aec-ab24-436a1c546cd2", "created": "2026-01-27T05:12:58.933114Z", "modified": "2026-01-27T05:12:58.933114Z", "relationship_type": "indicates", "source_ref": "indicator--65f901e3-4140-43b1-bbd7-706647259217", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b06b45-92fb-420a-b6c8-4387948829ca", "created": "2026-01-27T05:12:58.93329Z", "modified": "2026-01-27T05:12:58.93329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.93329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29f7b7bf-12f0-4ef4-b54d-8dc6b89441f1", "created": "2026-01-27T05:12:58.934045Z", "modified": "2026-01-27T05:12:58.934045Z", "relationship_type": "indicates", "source_ref": "indicator--45b06b45-92fb-420a-b6c8-4387948829ca", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65540623-7623-4d28-b6ff-bbc14135f758", "created": "2026-01-27T05:12:58.934233Z", "modified": "2026-01-27T05:12:58.934233Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ali.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.934233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d95804f-e669-4583-b415-3e19af6ea4f7", "created": "2026-01-27T05:12:58.934922Z", "modified": "2026-01-27T05:12:58.934922Z", "relationship_type": "indicates", "source_ref": "indicator--65540623-7623-4d28-b6ff-bbc14135f758", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a76779e-c137-406e-9ff7-839a66b09974", "created": "2026-01-27T05:12:58.935114Z", "modified": "2026-01-27T05:12:58.935114Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.935114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ec73586-22f4-4ca9-aa2c-91f8b4636c56", "created": "2026-01-27T05:12:58.935921Z", "modified": "2026-01-27T05:12:58.935921Z", "relationship_type": "indicates", "source_ref": "indicator--5a76779e-c137-406e-9ff7-839a66b09974", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d3d21d-51ac-4e67-aa0c-8ff60540e7a3", "created": "2026-01-27T05:12:58.936124Z", "modified": "2026-01-27T05:12:58.936124Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.936124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08dc088a-2060-4876-860d-fdb26b3d0f20", "created": "2026-01-27T05:12:58.936867Z", "modified": "2026-01-27T05:12:58.936867Z", "relationship_type": "indicates", "source_ref": "indicator--f6d3d21d-51ac-4e67-aa0c-8ff60540e7a3", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e800e67-350e-43fc-9141-a574d13ab319", "created": "2026-01-27T05:12:58.937045Z", "modified": "2026-01-27T05:12:58.937045Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.937045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5def0035-6532-46fd-a267-0d6df1153f6d", "created": "2026-01-27T05:12:58.937717Z", "modified": "2026-01-27T05:12:58.937717Z", "relationship_type": "indicates", "source_ref": "indicator--0e800e67-350e-43fc-9141-a574d13ab319", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c833687c-5475-4e58-9a8e-6141a665a367", "created": "2026-01-27T05:12:58.937911Z", "modified": "2026-01-27T05:12:58.937911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='u1.panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.937911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49beff11-e122-48f1-b694-4dbb85494473", "created": "2026-01-27T05:12:58.93859Z", "modified": "2026-01-27T05:12:58.93859Z", "relationship_type": "indicates", "source_ref": "indicator--c833687c-5475-4e58-9a8e-6141a665a367", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fea0e0-eeef-4cf4-a39e-366d5fd863e4", "created": "2026-01-27T05:12:58.938781Z", "modified": "2026-01-27T05:12:58.938781Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy-1.oss-us-west-1.aliyuncs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.938781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4767f531-8223-4a0f-8f22-2fb4da7d8fd8", "created": "2026-01-27T05:12:58.939503Z", "modified": "2026-01-27T05:12:58.939503Z", "relationship_type": "indicates", "source_ref": "indicator--63fea0e0-eeef-4cf4-a39e-366d5fd863e4", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd82b18-2f53-4c65-88b9-5608b654dccd", "created": "2026-01-27T05:12:58.939678Z", "modified": "2026-01-27T05:12:58.939678Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.939678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4038957-9877-4e38-b029-2a85f1e67836", "created": "2026-01-27T05:12:58.940351Z", "modified": "2026-01-27T05:12:58.940351Z", "relationship_type": "indicates", "source_ref": "indicator--dfd82b18-2f53-4c65-88b9-5608b654dccd", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c8916d-642f-44ed-8bf5-dfce3fc72830", "created": "2026-01-27T05:12:58.940523Z", "modified": "2026-01-27T05:12:58.940523Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='surveilstar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.940523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1472dee-87da-4a0c-a67d-97c80a0465a9", "created": "2026-01-27T05:12:58.941198Z", "modified": "2026-01-27T05:12:58.941198Z", "relationship_type": "indicates", "source_ref": "indicator--d0c8916d-642f-44ed-8bf5-dfce3fc72830", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadff06e-913a-459b-8a66-ba6c06cf7e19", "created": "2026-01-27T05:12:58.941371Z", "modified": "2026-01-27T05:12:58.941371Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panspy.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.941371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9949ddc-b8d1-490c-b0d7-0875c8ff1708", "created": "2026-01-27T05:12:58.942062Z", "modified": "2026-01-27T05:12:58.942062Z", "relationship_type": "indicates", "source_ref": "indicator--fadff06e-913a-459b-8a66-ba6c06cf7e19", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3fc86b-a864-4034-9055-79e3f5a35b29", "created": "2026-01-27T05:12:58.942235Z", "modified": "2026-01-27T05:12:58.942235Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc3235263174fe8f05b5db49c36094549a2597e8d57b586fd0374d28d1c0a5c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.942235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--968bf7a0-1353-463f-bec2-3d97c5d3af36", "created": "2026-01-27T05:12:58.94309Z", "modified": "2026-01-27T05:12:58.94309Z", "relationship_type": "indicates", "source_ref": "indicator--de3fc86b-a864-4034-9055-79e3f5a35b29", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c86e64e-b1dd-4713-a51f-9f5ec8b1ac9c", "created": "2026-01-27T05:12:58.943274Z", "modified": "2026-01-27T05:12:58.943274Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5aa4fe0c11404baaa2d3ce8fe1b284d66b9020397083616df85aa9c06afe94fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.943274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e1917b0-66d4-48ee-9872-18bafdff45cb", "created": "2026-01-27T05:12:58.94423Z", "modified": "2026-01-27T05:12:58.94423Z", "relationship_type": "indicates", "source_ref": "indicator--5c86e64e-b1dd-4713-a51f-9f5ec8b1ac9c", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bd7f36-55a6-42c1-8065-23fb7e318f14", "created": "2026-01-27T05:12:58.944409Z", "modified": "2026-01-27T05:12:58.944409Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.panspy.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.944409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07001dc4-7930-4017-83f1-fb57079f6df0", "created": "2026-01-27T05:12:58.945086Z", "modified": "2026-01-27T05:12:58.945086Z", "relationship_type": "indicates", "source_ref": "indicator--f9bd7f36-55a6-42c1-8065-23fb7e318f14", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb732e0-6ac2-4df5-a4c6-cb271b194790", "created": "2026-01-27T05:12:58.945262Z", "modified": "2026-01-27T05:12:58.945262Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CCD5678FF73D6ECF4E74317166422AFE67D77406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.945262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--921988be-3893-4e7a-a8a6-46d1d4f98b21", "created": "2026-01-27T05:12:58.946046Z", "modified": "2026-01-27T05:12:58.946046Z", "relationship_type": "indicates", "source_ref": "indicator--7eb732e0-6ac2-4df5-a4c6-cb271b194790", "target_ref": "malware--facc95d8-62f3-4b46-b6b1-dfad71d833e1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1ed460d3-052f-4682-8467-2326f3914478", "created": "2026-01-27T05:12:58.946225Z", "modified": "2026-01-27T05:12:58.946225Z", "name": "AndroidLost", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a3eb2a-c430-4c9c-9d60-565c6bf89ae5", "created": "2026-01-27T05:12:58.946398Z", "modified": "2026-01-27T05:12:58.946398Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.946398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08b80133-7729-4160-9f0d-e6a06e1e04b2", "created": "2026-01-27T05:12:58.947094Z", "modified": "2026-01-27T05:12:58.947094Z", "relationship_type": "indicates", "source_ref": "indicator--99a3eb2a-c430-4c9c-9d60-565c6bf89ae5", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e412b1-94c5-4183-a0d9-67da394046e2", "created": "2026-01-27T05:12:58.94727Z", "modified": "2026-01-27T05:12:58.94727Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.94727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf8f41ec-4bc4-4491-b8ff-8a6399cc8153", "created": "2026-01-27T05:12:58.947961Z", "modified": "2026-01-27T05:12:58.947961Z", "relationship_type": "indicates", "source_ref": "indicator--b5e412b1-94c5-4183-a0d9-67da394046e2", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df321f1b-8a17-40cc-a1cc-7fd5140cdb0e", "created": "2026-01-27T05:12:58.948135Z", "modified": "2026-01-27T05:12:58.948135Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.948135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--214268bb-d632-4626-a6c0-42f828dbca2a", "created": "2026-01-27T05:12:58.948812Z", "modified": "2026-01-27T05:12:58.948812Z", "relationship_type": "indicates", "source_ref": "indicator--df321f1b-8a17-40cc-a1cc-7fd5140cdb0e", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639050bb-c8d3-4e21-ac1a-b8f54956ebcb", "created": "2026-01-27T05:12:58.948985Z", "modified": "2026-01-27T05:12:58.948985Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.948985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b58f349-6bb2-4ab9-868c-c1623b408cb1", "created": "2026-01-27T05:12:58.949646Z", "modified": "2026-01-27T05:12:58.949646Z", "relationship_type": "indicates", "source_ref": "indicator--639050bb-c8d3-4e21-ac1a-b8f54956ebcb", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750b6abf-6181-465b-971e-91e298d20b44", "created": "2026-01-27T05:12:58.949834Z", "modified": "2026-01-27T05:12:58.949834Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.949834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee7ff9e0-88b7-41d2-9921-499db723ff88", "created": "2026-01-27T05:12:58.95053Z", "modified": "2026-01-27T05:12:58.95053Z", "relationship_type": "indicates", "source_ref": "indicator--750b6abf-6181-465b-971e-91e298d20b44", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f464254-4591-472c-8e56-021092e26a0c", "created": "2026-01-27T05:12:58.950706Z", "modified": "2026-01-27T05:12:58.950706Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='new.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.950706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c969719b-0450-4246-9e84-8255104e5c36", "created": "2026-01-27T05:12:58.951412Z", "modified": "2026-01-27T05:12:58.951412Z", "relationship_type": "indicates", "source_ref": "indicator--9f464254-4591-472c-8e56-021092e26a0c", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ec6ca4-ce48-477b-857e-e9ca3292556d", "created": "2026-01-27T05:12:58.951585Z", "modified": "2026-01-27T05:12:58.951585Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.951585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25a81808-582d-4bb4-bc79-bf5a8eb45937", "created": "2026-01-27T05:12:58.952406Z", "modified": "2026-01-27T05:12:58.952406Z", "relationship_type": "indicates", "source_ref": "indicator--e1ec6ca4-ce48-477b-857e-e9ca3292556d", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7006c4a4-405b-4d13-9ea3-135d897d85fa", "created": "2026-01-27T05:12:58.952593Z", "modified": "2026-01-27T05:12:58.952593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.androidlost.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.952593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56b4c0ee-9eef-4d0a-a7fc-310f3e3dbc90", "created": "2026-01-27T05:12:58.953293Z", "modified": "2026-01-27T05:12:58.953293Z", "relationship_type": "indicates", "source_ref": "indicator--7006c4a4-405b-4d13-9ea3-135d897d85fa", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3958c8d5-9843-4ff8-88fc-b3d6788c9ebc", "created": "2026-01-27T05:12:58.953472Z", "modified": "2026-01-27T05:12:58.953472Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.androidlost']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.953472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c46af367-7d52-4084-b2a8-958941e92c39", "created": "2026-01-27T05:12:58.954134Z", "modified": "2026-01-27T05:12:58.954134Z", "relationship_type": "indicates", "source_ref": "indicator--3958c8d5-9843-4ff8-88fc-b3d6788c9ebc", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f5d7b0-1cb0-41c0-a969-c3943aed5196", "created": "2026-01-27T05:12:58.954308Z", "modified": "2026-01-27T05:12:58.954308Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.androidlost.smshandler']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.954308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7bb9daf-b78c-4712-83d5-6d1c51b3da51", "created": "2026-01-27T05:12:58.954984Z", "modified": "2026-01-27T05:12:58.954984Z", "relationship_type": "indicates", "source_ref": "indicator--b1f5d7b0-1cb0-41c0-a969-c3943aed5196", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edafcf9-8de0-4e91-9169-745f5259fd46", "created": "2026-01-27T05:12:58.955161Z", "modified": "2026-01-27T05:12:58.955161Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9EECE9B4ECF4DC0C5981FEACFB271E1C0A2967FF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.955161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61659506-3385-4ee0-8ae7-dc76c25f72dd", "created": "2026-01-27T05:12:58.955955Z", "modified": "2026-01-27T05:12:58.955955Z", "relationship_type": "indicates", "source_ref": "indicator--9edafcf9-8de0-4e91-9169-745f5259fd46", "target_ref": "malware--1ed460d3-052f-4682-8467-2326f3914478"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e1cf116c-0b02-42af-b82c-a46609ba514f", "created": "2026-01-27T05:12:58.956128Z", "modified": "2026-01-27T05:12:58.956128Z", "name": "Metasploit", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fab9e32-aac3-49ea-a4df-41e29cb5c631", "created": "2026-01-27T05:12:58.956309Z", "modified": "2026-01-27T05:12:58.956309Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='foreverspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.956309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7775bf79-3da7-4a0e-a922-a0a91e15805b", "created": "2026-01-27T05:12:58.957002Z", "modified": "2026-01-27T05:12:58.957002Z", "relationship_type": "indicates", "source_ref": "indicator--5fab9e32-aac3-49ea-a4df-41e29cb5c631", "target_ref": "malware--e1cf116c-0b02-42af-b82c-a46609ba514f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a2286e-6d0d-481b-b8de-beeb3af5968d", "created": "2026-01-27T05:12:58.957183Z", "modified": "2026-01-27T05:12:58.957183Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.foreverspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.957183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30e0b394-4ab4-4299-8de9-429a22b162a6", "created": "2026-01-27T05:12:58.957877Z", "modified": "2026-01-27T05:12:58.957877Z", "relationship_type": "indicates", "source_ref": "indicator--e2a2286e-6d0d-481b-b8de-beeb3af5968d", "target_ref": "malware--e1cf116c-0b02-42af-b82c-a46609ba514f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4831fe8a-97b4-4e32-9546-5007d0905cd0", "created": "2026-01-27T05:12:58.958052Z", "modified": "2026-01-27T05:12:58.958052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='foreverspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.958052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b52a85f5-cbee-48b3-8996-5bb46a2c0b17", "created": "2026-01-27T05:12:58.958719Z", "modified": "2026-01-27T05:12:58.958719Z", "relationship_type": "indicates", "source_ref": "indicator--4831fe8a-97b4-4e32-9546-5007d0905cd0", "target_ref": "malware--e1cf116c-0b02-42af-b82c-a46609ba514f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c56987-e093-478e-8a5d-e08f7b5e6da2", "created": "2026-01-27T05:12:58.95891Z", "modified": "2026-01-27T05:12:58.95891Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.metasploit.stage']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.95891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ce07bc2-d89e-4b3a-b2ba-bc0bd16bfc74", "created": "2026-01-27T05:12:58.959562Z", "modified": "2026-01-27T05:12:58.959562Z", "relationship_type": "indicates", "source_ref": "indicator--d5c56987-e093-478e-8a5d-e08f7b5e6da2", "target_ref": "malware--e1cf116c-0b02-42af-b82c-a46609ba514f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24", "created": "2026-01-27T05:12:58.959732Z", "modified": "2026-01-27T05:12:58.959732Z", "name": "Spy24", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54da1d4b-5a78-46fa-bbf6-8b8b5faa8cba", "created": "2026-01-27T05:12:58.959918Z", "modified": "2026-01-27T05:12:58.959918Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy24.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.959918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02d59c9b-b47e-4707-90ef-779b8cf3ec46", "created": "2026-01-27T05:12:58.960704Z", "modified": "2026-01-27T05:12:58.960704Z", "relationship_type": "indicates", "source_ref": "indicator--54da1d4b-5a78-46fa-bbf6-8b8b5faa8cba", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbb6b8d-597a-43cf-8978-4d850cf768d6", "created": "2026-01-27T05:12:58.960899Z", "modified": "2026-01-27T05:12:58.960899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.spy24.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.960899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97720988-783e-41cf-aa1a-f9bbab42e4fa", "created": "2026-01-27T05:12:58.961567Z", "modified": "2026-01-27T05:12:58.961567Z", "relationship_type": "indicates", "source_ref": "indicator--7fbb6b8d-597a-43cf-8978-4d850cf768d6", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01fb491-5575-4d83-a04d-bf565de28c3a", "created": "2026-01-27T05:12:58.961741Z", "modified": "2026-01-27T05:12:58.961741Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel24.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.961741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7adf5b5d-b51c-4e8c-b84a-71a7cbe7158e", "created": "2026-01-27T05:12:58.962417Z", "modified": "2026-01-27T05:12:58.962417Z", "relationship_type": "indicates", "source_ref": "indicator--b01fb491-5575-4d83-a04d-bf565de28c3a", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdc9f14-d3b6-43ef-906e-45bed673ebd2", "created": "2026-01-27T05:12:58.962591Z", "modified": "2026-01-27T05:12:58.962591Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.spy24.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.962591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc397868-0923-4d02-a078-445c8b6d6fae", "created": "2026-01-27T05:12:58.963293Z", "modified": "2026-01-27T05:12:58.963293Z", "relationship_type": "indicates", "source_ref": "indicator--ffdc9f14-d3b6-43ef-906e-45bed673ebd2", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd2e58b-4cd6-4ea1-86ad-2120da5e1e83", "created": "2026-01-27T05:12:58.963473Z", "modified": "2026-01-27T05:12:58.963473Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy24.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.963473Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89626826-5ff5-487d-b334-1a1e08fce59c", "created": "2026-01-27T05:12:58.964148Z", "modified": "2026-01-27T05:12:58.964148Z", "relationship_type": "indicates", "source_ref": "indicator--0bd2e58b-4cd6-4ea1-86ad-2120da5e1e83", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854c035e-44c7-4321-8894-375db8a0ccea", "created": "2026-01-27T05:12:58.964322Z", "modified": "2026-01-27T05:12:58.964322Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy24.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.964322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--271a6d72-d89d-4ea1-a795-b395ecfd08de", "created": "2026-01-27T05:12:58.964993Z", "modified": "2026-01-27T05:12:58.964993Z", "relationship_type": "indicates", "source_ref": "indicator--854c035e-44c7-4321-8894-375db8a0ccea", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53591a7-8dea-4a45-ba7b-042ccbf0c091", "created": "2026-01-27T05:12:58.965168Z", "modified": "2026-01-27T05:12:58.965168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='913b6ce2b37b667106287d36f2e675eb177d28a270b3e815e90bdd9d2cc44dcb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.965168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2518b65-3a54-49e2-b208-9d2aeb3a9500", "created": "2026-01-27T05:12:58.966012Z", "modified": "2026-01-27T05:12:58.966012Z", "relationship_type": "indicates", "source_ref": "indicator--d53591a7-8dea-4a45-ba7b-042ccbf0c091", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2558e493-7290-4653-b254-6e907b586d59", "created": "2026-01-27T05:12:58.96619Z", "modified": "2026-01-27T05:12:58.96619Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b264075a58febc9c89a534723c543750e5f1df23aea03eafebba4b0ff8823599']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.96619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b53789cc-a452-4412-a8d9-a9a133b6d23d", "created": "2026-01-27T05:12:58.967168Z", "modified": "2026-01-27T05:12:58.967168Z", "relationship_type": "indicates", "source_ref": "indicator--2558e493-7290-4653-b254-6e907b586d59", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0b2acd-903e-4561-8287-4c95d0fb2fa6", "created": "2026-01-27T05:12:58.967362Z", "modified": "2026-01-27T05:12:58.967362Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='780afa15f99c85055f93bff4ad40c5f4a7d7252cbc7dc1716c8db866d2a3ff53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.967362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd9a9038-4a75-4123-a38e-2c307b342526", "created": "2026-01-27T05:12:58.968271Z", "modified": "2026-01-27T05:12:58.968271Z", "relationship_type": "indicates", "source_ref": "indicator--5f0b2acd-903e-4561-8287-4c95d0fb2fa6", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53133ec0-2996-4c05-a6b4-6ca5076eb389", "created": "2026-01-27T05:12:58.968463Z", "modified": "2026-01-27T05:12:58.968463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77d4f937b2855137ed14dadab49da6e1f0be27b9c032dd9316af97ea3f139893']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.968463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a68c8ea-9236-4d0f-9b94-bc27975ea10e", "created": "2026-01-27T05:12:58.969428Z", "modified": "2026-01-27T05:12:58.969428Z", "relationship_type": "indicates", "source_ref": "indicator--53133ec0-2996-4c05-a6b4-6ca5076eb389", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d91bf4-e292-4649-9dee-aeb36fd1dd95", "created": "2026-01-27T05:12:58.969611Z", "modified": "2026-01-27T05:12:58.969611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='037323bb567391a8d55ce2361942cda125b4fcccd8e559027356f8f7e65d9445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.969611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85b37da4-8b91-4973-8283-7c219e655bc4", "created": "2026-01-27T05:12:58.970502Z", "modified": "2026-01-27T05:12:58.970502Z", "relationship_type": "indicates", "source_ref": "indicator--29d91bf4-e292-4649-9dee-aeb36fd1dd95", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dfdb98-279e-4e39-b1c9-5c8c2fd2ae84", "created": "2026-01-27T05:12:58.970685Z", "modified": "2026-01-27T05:12:58.970685Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e01118a89e9a8bab0a36b93ad15caf1432fc615afa61d7dccd99773debeba818']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.970685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--085e9961-eb55-4444-9425-c0c6df109b64", "created": "2026-01-27T05:12:58.97153Z", "modified": "2026-01-27T05:12:58.97153Z", "relationship_type": "indicates", "source_ref": "indicator--91dfdb98-279e-4e39-b1c9-5c8c2fd2ae84", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81578c8-7440-466e-b9df-e6f42d4e1b9e", "created": "2026-01-27T05:12:58.971705Z", "modified": "2026-01-27T05:12:58.971705Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f4c694c0cd43327da1d20781fa2e4a6e4467432b09c6050b0446007576a0f4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.971705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2cae663-89c1-4fb9-8af4-ca1da288c7cf", "created": "2026-01-27T05:12:58.972538Z", "modified": "2026-01-27T05:12:58.972538Z", "relationship_type": "indicates", "source_ref": "indicator--a81578c8-7440-466e-b9df-e6f42d4e1b9e", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724a220c-59c1-47d1-92e0-d3d6f9dd440e", "created": "2026-01-27T05:12:58.972713Z", "modified": "2026-01-27T05:12:58.972713Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.spy24.wifi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.972713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8a21323-cb3d-4cb0-921e-266a2afdaadb", "created": "2026-01-27T05:12:58.973378Z", "modified": "2026-01-27T05:12:58.973378Z", "relationship_type": "indicates", "source_ref": "indicator--724a220c-59c1-47d1-92e0-d3d6f9dd440e", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656beb7d-a1d7-4c75-9045-64696d05d708", "created": "2026-01-27T05:12:58.973552Z", "modified": "2026-01-27T05:12:58.973552Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.openanotherapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.973552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14810fcb-6817-49bf-80cb-4ee870d5bc6f", "created": "2026-01-27T05:12:58.974227Z", "modified": "2026-01-27T05:12:58.974227Z", "relationship_type": "indicates", "source_ref": "indicator--656beb7d-a1d7-4c75-9045-64696d05d708", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd2043a-2edd-407e-8603-6cb938a9bfe6", "created": "2026-01-27T05:12:58.974401Z", "modified": "2026-01-27T05:12:58.974401Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ir.spy24.updater']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.974401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b834294-ea2a-4891-bcdb-78c34a7a70c9", "created": "2026-01-27T05:12:58.97506Z", "modified": "2026-01-27T05:12:58.97506Z", "relationship_type": "indicates", "source_ref": "indicator--9bd2043a-2edd-407e-8603-6cb938a9bfe6", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0e77a0-1def-4029-aae9-46087fbfe790", "created": "2026-01-27T05:12:58.975241Z", "modified": "2026-01-27T05:12:58.975241Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ir.spy24.wifi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.975241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--270765a5-808a-4e58-a257-062b62f7e841", "created": "2026-01-27T05:12:58.975915Z", "modified": "2026-01-27T05:12:58.975915Z", "relationship_type": "indicates", "source_ref": "indicator--bb0e77a0-1def-4029-aae9-46087fbfe790", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3353123a-1723-4de1-b994-f2180e2a128f", "created": "2026-01-27T05:12:58.97609Z", "modified": "2026-01-27T05:12:58.97609Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.spy24.systemwifi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.97609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e803f33-7ea7-479d-bf52-9938260eaaa6", "created": "2026-01-27T05:12:58.976737Z", "modified": "2026-01-27T05:12:58.976737Z", "relationship_type": "indicates", "source_ref": "indicator--3353123a-1723-4de1-b994-f2180e2a128f", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd113297-2edb-4bab-b597-2738377e4fd4", "created": "2026-01-27T05:12:58.976926Z", "modified": "2026-01-27T05:12:58.976926Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.spy24.spy24installer']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.976926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d4e4744-1a51-4005-977b-238ad8a0647a", "created": "2026-01-27T05:12:58.978082Z", "modified": "2026-01-27T05:12:58.978082Z", "relationship_type": "indicates", "source_ref": "indicator--bd113297-2edb-4bab-b597-2738377e4fd4", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c263cab-9912-4627-ae88-11de1a888212", "created": "2026-01-27T05:12:58.978265Z", "modified": "2026-01-27T05:12:58.978265Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='79C395148C34F0826E04B37A6632A53A7977A1AA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.978265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f68cf6af-8de3-43a1-a92c-3a26f3751065", "created": "2026-01-27T05:12:58.97905Z", "modified": "2026-01-27T05:12:58.97905Z", "relationship_type": "indicates", "source_ref": "indicator--9c263cab-9912-4627-ae88-11de1a888212", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cbb9b8-13a8-4493-8755-a2cb4d9803a6", "created": "2026-01-27T05:12:58.979226Z", "modified": "2026-01-27T05:12:58.979226Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F5C25A3B800311E8053295676ADB112753E03F0B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.979226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf2b4aed-8272-4a6f-ba5a-187372ac3e03", "created": "2026-01-27T05:12:58.980011Z", "modified": "2026-01-27T05:12:58.980011Z", "relationship_type": "indicates", "source_ref": "indicator--93cbb9b8-13a8-4493-8755-a2cb4d9803a6", "target_ref": "malware--ee83ece4-38df-40c1-93b9-079aac1c7a24"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c", "created": "2026-01-27T05:12:58.980186Z", "modified": "2026-01-27T05:12:58.980186Z", "name": "CatWatchful", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd832a79-e5f8-49e0-bc5c-848475994e26", "created": "2026-01-27T05:12:58.980359Z", "modified": "2026-01-27T05:12:58.980359Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.980359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f5f4c41-8b63-415e-a064-84a521d88ab2", "created": "2026-01-27T05:12:58.981042Z", "modified": "2026-01-27T05:12:58.981042Z", "relationship_type": "indicates", "source_ref": "indicator--bd832a79-e5f8-49e0-bc5c-848475994e26", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af9aac5-f281-457a-80d0-97a58aa40347", "created": "2026-01-27T05:12:58.981219Z", "modified": "2026-01-27T05:12:58.981219Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful-e03b8.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.981219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--826aaf83-4959-4771-9a3a-c4ae42057037", "created": "2026-01-27T05:12:58.981927Z", "modified": "2026-01-27T05:12:58.981927Z", "relationship_type": "indicates", "source_ref": "indicator--2af9aac5-f281-457a-80d0-97a58aa40347", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bef46c4-2594-4f80-b645-9acd6f75415e", "created": "2026-01-27T05:12:58.982105Z", "modified": "2026-01-27T05:12:58.982105Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful-e03b8-2.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.982105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5062f793-781c-4c69-b09f-5a0c3b09584f", "created": "2026-01-27T05:12:58.982812Z", "modified": "2026-01-27T05:12:58.982812Z", "relationship_type": "indicates", "source_ref": "indicator--5bef46c4-2594-4f80-b645-9acd6f75415e", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00007237-afda-4291-b225-e11acda9f415", "created": "2026-01-27T05:12:58.982992Z", "modified": "2026-01-27T05:12:58.982992Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us-central1-catwatchful-e03b8.cloudfunctions.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.982992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--152c430f-1df1-4de1-b0ac-ec8941b3be8c", "created": "2026-01-27T05:12:58.983708Z", "modified": "2026-01-27T05:12:58.983708Z", "relationship_type": "indicates", "source_ref": "indicator--00007237-afda-4291-b225-e11acda9f415", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3e4729-93ed-43b6-bbc0-7c08657caebf", "created": "2026-01-27T05:12:58.983941Z", "modified": "2026-01-27T05:12:58.983941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.983941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8978c082-b7a1-40dc-a92c-83a9eb1a9948", "created": "2026-01-27T05:12:58.984639Z", "modified": "2026-01-27T05:12:58.984639Z", "relationship_type": "indicates", "source_ref": "indicator--0a3e4729-93ed-43b6-bbc0-7c08657caebf", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04602ee-0285-4a04-9b57-c8cabf8f1c62", "created": "2026-01-27T05:12:58.984832Z", "modified": "2026-01-27T05:12:58.984832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.online']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.984832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c38533a3-5fba-4b8e-a128-e15229678db2", "created": "2026-01-27T05:12:58.98551Z", "modified": "2026-01-27T05:12:58.98551Z", "relationship_type": "indicates", "source_ref": "indicator--a04602ee-0285-4a04-9b57-c8cabf8f1c62", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb5de9-bdcd-412c-88be-ce26a593195a", "created": "2026-01-27T05:12:58.985691Z", "modified": "2026-01-27T05:12:58.985691Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful.pink']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.985691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38fc87eb-20c6-41c6-8b2c-70c91efd9382", "created": "2026-01-27T05:12:58.986517Z", "modified": "2026-01-27T05:12:58.986517Z", "relationship_type": "indicates", "source_ref": "indicator--98bb5de9-bdcd-412c-88be-ce26a593195a", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50dc7cdf-bb6c-411c-acf8-692405294d59", "created": "2026-01-27T05:12:58.986692Z", "modified": "2026-01-27T05:12:58.986692Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='catwatchful-e03b8.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.986692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73191ad5-141c-4abc-963a-8711d625b21c", "created": "2026-01-27T05:12:58.987401Z", "modified": "2026-01-27T05:12:58.987401Z", "relationship_type": "indicates", "source_ref": "indicator--50dc7cdf-bb6c-411c-acf8-692405294d59", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b134a9-9a81-4932-be47-f69a45725682", "created": "2026-01-27T05:12:58.987579Z", "modified": "2026-01-27T05:12:58.987579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44b85adf22f7d194be044f1150bdc1a8338ebd47c952172c5bf54cfd9e0cb4e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.987579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0200450-64f3-4349-a664-d174e715bc15", "created": "2026-01-27T05:12:58.98846Z", "modified": "2026-01-27T05:12:58.98846Z", "relationship_type": "indicates", "source_ref": "indicator--42b134a9-9a81-4932-be47-f69a45725682", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f8fa02-42df-4e34-87c1-0bfbc97f6d62", "created": "2026-01-27T05:12:58.988638Z", "modified": "2026-01-27T05:12:58.988638Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60b15caf1287b9f15923d30fb853e1b2cb44366c15720c55ce0f4eb90d5f85b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.988638Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fc60d02-a3c7-4e8a-bffe-0cb7b201af97", "created": "2026-01-27T05:12:58.98947Z", "modified": "2026-01-27T05:12:58.98947Z", "relationship_type": "indicates", "source_ref": "indicator--c4f8fa02-42df-4e34-87c1-0bfbc97f6d62", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de13a454-4874-466c-bf19-7d64c88b75fc", "created": "2026-01-27T05:12:58.989647Z", "modified": "2026-01-27T05:12:58.989647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c6194edfac89a1342a122880efa264ff68fff6aafeb9b12796993d7afc0acdd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.989647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ad4a3e2-30a8-431a-b6a3-ba6a093349f5", "created": "2026-01-27T05:12:58.990474Z", "modified": "2026-01-27T05:12:58.990474Z", "relationship_type": "indicates", "source_ref": "indicator--de13a454-4874-466c-bf19-7d64c88b75fc", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb4ee50-2246-4cce-beb1-e58170ec4db0", "created": "2026-01-27T05:12:58.990648Z", "modified": "2026-01-27T05:12:58.990648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='553e5ac25765c2b2761f59f09119ae25776d7b472ebadad202b665ed0e67a9d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.990648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eac3a941-cc50-4acb-a201-3d6ebfbf0e43", "created": "2026-01-27T05:12:58.991496Z", "modified": "2026-01-27T05:12:58.991496Z", "relationship_type": "indicates", "source_ref": "indicator--6cb4ee50-2246-4cce-beb1-e58170ec4db0", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0d5fd0-b6f3-4084-9edc-363b2d4d7997", "created": "2026-01-27T05:12:58.991675Z", "modified": "2026-01-27T05:12:58.991675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b08acf93dc801ed4f2622b803f5aa064802fd93c740815e734d6c5f1dd3f1fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.991675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2504a7e1-c5e4-442d-be8d-5c84d8306877", "created": "2026-01-27T05:12:58.992516Z", "modified": "2026-01-27T05:12:58.992516Z", "relationship_type": "indicates", "source_ref": "indicator--7f0d5fd0-b6f3-4084-9edc-363b2d4d7997", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871d50d7-4d93-4f87-8ae3-e2182026026e", "created": "2026-01-27T05:12:58.992689Z", "modified": "2026-01-27T05:12:58.992689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c063bd99b668f3723031f7fd5597e8d55fe2d054038a1c91094fb543e69a04ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.992689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eba40516-aeaa-40ce-b5f3-a9ef8fc3eb72", "created": "2026-01-27T05:12:58.993515Z", "modified": "2026-01-27T05:12:58.993515Z", "relationship_type": "indicates", "source_ref": "indicator--871d50d7-4d93-4f87-8ae3-e2182026026e", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0026c8-6b82-4954-be45-2b18104ee553", "created": "2026-01-27T05:12:58.993687Z", "modified": "2026-01-27T05:12:58.993687Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c797afcca01bcca459de144b6e4f604d320898012745b4f09190e2734e23fd33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.993687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a84a6a82-142f-428d-8419-b1a97e5f766a", "created": "2026-01-27T05:12:58.994523Z", "modified": "2026-01-27T05:12:58.994523Z", "relationship_type": "indicates", "source_ref": "indicator--da0026c8-6b82-4954-be45-2b18104ee553", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a740c79b-5779-4a95-98b2-7eb2c3889afd", "created": "2026-01-27T05:12:58.994694Z", "modified": "2026-01-27T05:12:58.994694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd3b233be7017f03139f323f38ff0d049ec9a67fe1b4b1a4989b0ae84b495297']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.994694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbd9dfb-c496-41ab-97bd-ad59cfa79054", "created": "2026-01-27T05:12:58.995655Z", "modified": "2026-01-27T05:12:58.995655Z", "relationship_type": "indicates", "source_ref": "indicator--a740c79b-5779-4a95-98b2-7eb2c3889afd", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e998c1b-64d9-4a1b-83d4-b8f3c83452e0", "created": "2026-01-27T05:12:58.99585Z", "modified": "2026-01-27T05:12:58.99585Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00fa503b424e90e4556e4dadab20293d279bf893c34ca988d76e3d1e540c5d59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.99585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50af4c1a-f307-4964-b787-f8db7f982af4", "created": "2026-01-27T05:12:58.996665Z", "modified": "2026-01-27T05:12:58.996665Z", "relationship_type": "indicates", "source_ref": "indicator--0e998c1b-64d9-4a1b-83d4-b8f3c83452e0", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaab7f4-0638-45c1-bc89-64761868c860", "created": "2026-01-27T05:12:58.996854Z", "modified": "2026-01-27T05:12:58.996854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc2796d634e3d919ff69a8bce4498d1f2c526dcec5e88259bf7f04e389d2507b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.996854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac760914-2104-4c65-86af-f258baae02c8", "created": "2026-01-27T05:12:58.997673Z", "modified": "2026-01-27T05:12:58.997673Z", "relationship_type": "indicates", "source_ref": "indicator--1eaab7f4-0638-45c1-bc89-64761868c860", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1836a2c-9d8e-4509-808d-15433edad482", "created": "2026-01-27T05:12:58.997868Z", "modified": "2026-01-27T05:12:58.997868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be2117b85fe9011bb225757f2b5aa60b37fd2b9e9456b1646fe157e82c151730']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.997868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cefeedd-ef51-47b5-bfdd-a31618e748d4", "created": "2026-01-27T05:12:58.998689Z", "modified": "2026-01-27T05:12:58.998689Z", "relationship_type": "indicates", "source_ref": "indicator--c1836a2c-9d8e-4509-808d-15433edad482", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2869cc02-3ea9-4806-8be2-5e863ae15f19", "created": "2026-01-27T05:12:58.998882Z", "modified": "2026-01-27T05:12:58.998882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aee5c850ff5e443f1e4d97a5e248c806b619d55db3769093a7b4723ff96fe1d9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.998882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b1da6c2-94a8-4919-9dbe-04d6c7244339", "created": "2026-01-27T05:12:58.99972Z", "modified": "2026-01-27T05:12:58.99972Z", "relationship_type": "indicates", "source_ref": "indicator--2869cc02-3ea9-4806-8be2-5e863ae15f19", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6f3305-5bc5-481e-9ea8-31c044e39821", "created": "2026-01-27T05:12:58.999935Z", "modified": "2026-01-27T05:12:58.999935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6a5d1fb355c7b32f0c3a8ab2dd03321ea7b3c77cf3334cf74c790bc038c7cc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:58.999935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--531f835b-8de8-457f-8837-9b1262784e90", "created": "2026-01-27T05:12:59.000765Z", "modified": "2026-01-27T05:12:59.000765Z", "relationship_type": "indicates", "source_ref": "indicator--9f6f3305-5bc5-481e-9ea8-31c044e39821", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208d90c6-1147-40b2-a2a8-e5c9aba642a6", "created": "2026-01-27T05:12:59.000941Z", "modified": "2026-01-27T05:12:59.000941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39e8e58f3ff50d1635195d0e671db701325bc2d6114b1545d6feca04c26f074c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.000941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d36de911-88b0-43f2-908e-91055dfadd01", "created": "2026-01-27T05:12:59.001784Z", "modified": "2026-01-27T05:12:59.001784Z", "relationship_type": "indicates", "source_ref": "indicator--208d90c6-1147-40b2-a2a8-e5c9aba642a6", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b200427-dca6-45cc-9e5c-8fe25dc28a47", "created": "2026-01-27T05:12:59.001968Z", "modified": "2026-01-27T05:12:59.001968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53368734b4a4726c046b686f9cd65f49b3fc974a447e49d12263686969093733']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.001968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7183a3d-2582-4b9c-9748-996267694b4a", "created": "2026-01-27T05:12:59.002804Z", "modified": "2026-01-27T05:12:59.002804Z", "relationship_type": "indicates", "source_ref": "indicator--1b200427-dca6-45cc-9e5c-8fe25dc28a47", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc68d479-b56d-4343-8dbf-7cb362c20cad", "created": "2026-01-27T05:12:59.002987Z", "modified": "2026-01-27T05:12:59.002987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3155d15a07478d5ee9e4b6398a0c789e538a90cc3eff88755544f3376fccdc7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.002987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d97432f-4494-4b9d-899f-0990fb5c33df", "created": "2026-01-27T05:12:59.003822Z", "modified": "2026-01-27T05:12:59.003822Z", "relationship_type": "indicates", "source_ref": "indicator--cc68d479-b56d-4343-8dbf-7cb362c20cad", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab1783b-d41f-4f72-9e90-733fe51a147b", "created": "2026-01-27T05:12:59.003999Z", "modified": "2026-01-27T05:12:59.003999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a17f2827ae21e9fadd35d2d49a873ed5bf5fd3c004dcd01464580cf956250f87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.003999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eabbb151-c835-439d-8ab9-9a825bb157fb", "created": "2026-01-27T05:12:59.004967Z", "modified": "2026-01-27T05:12:59.004967Z", "relationship_type": "indicates", "source_ref": "indicator--cab1783b-d41f-4f72-9e90-733fe51a147b", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46d4db2-b43c-468b-b7e3-d47863109970", "created": "2026-01-27T05:12:59.005156Z", "modified": "2026-01-27T05:12:59.005156Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2976d9a27f1c6eaa04d08e25209c86cbd856c54afc78134289a05f26823c7963']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.005156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37ae1702-45d9-4b3f-a9f6-7df7b9e3a271", "created": "2026-01-27T05:12:59.005988Z", "modified": "2026-01-27T05:12:59.005988Z", "relationship_type": "indicates", "source_ref": "indicator--f46d4db2-b43c-468b-b7e3-d47863109970", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af591687-52f3-47c1-9e48-4a9901bda034", "created": "2026-01-27T05:12:59.006166Z", "modified": "2026-01-27T05:12:59.006166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e048ff6e9fe5f197ec94399dc832a12f6f614fb8850336e097f86f951dc6478']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.006166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c153d80-7df2-4c9a-a67a-b96eec7a7563", "created": "2026-01-27T05:12:59.006996Z", "modified": "2026-01-27T05:12:59.006996Z", "relationship_type": "indicates", "source_ref": "indicator--af591687-52f3-47c1-9e48-4a9901bda034", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85407ae-4d21-4192-a0e6-c17120ce741e", "created": "2026-01-27T05:12:59.007172Z", "modified": "2026-01-27T05:12:59.007172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f9eaa5e9c1ac6ca975988d1e0c513e325e8d52f61dc046f56c4f42bcb720827']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.007172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3eb27f6-0dab-429b-9a09-665bc2fb058e", "created": "2026-01-27T05:12:59.008004Z", "modified": "2026-01-27T05:12:59.008004Z", "relationship_type": "indicates", "source_ref": "indicator--b85407ae-4d21-4192-a0e6-c17120ce741e", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079b45c8-a2ad-4c2f-9b0b-70267bfbbb26", "created": "2026-01-27T05:12:59.008178Z", "modified": "2026-01-27T05:12:59.008178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3eb43fedce4110046c24ce5817a4ad498004ef6de6e1aa957394394a9b5fcb4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.008178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48df8dc9-d070-4a82-ba20-03b26c38d0e4", "created": "2026-01-27T05:12:59.009019Z", "modified": "2026-01-27T05:12:59.009019Z", "relationship_type": "indicates", "source_ref": "indicator--079b45c8-a2ad-4c2f-9b0b-70267bfbbb26", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d0ab5a-4665-4d37-ac09-fceec61ac3ef", "created": "2026-01-27T05:12:59.009194Z", "modified": "2026-01-27T05:12:59.009194Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cd408a676818c03bac423ed3f6a661a5e68a2160344f8147c10d0552d7a7bfc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.009194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0359411e-85cf-4b05-b60e-4850daf80ac4", "created": "2026-01-27T05:12:59.010035Z", "modified": "2026-01-27T05:12:59.010035Z", "relationship_type": "indicates", "source_ref": "indicator--86d0ab5a-4665-4d37-ac09-fceec61ac3ef", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e443046-a61e-48d1-86c7-ee86ef3069f5", "created": "2026-01-27T05:12:59.01021Z", "modified": "2026-01-27T05:12:59.01021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c24fa3a293241cc75638bcc206ccb05291b03c18bccf915df339b232eb083a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.01021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f618df82-ca2f-42f4-bb27-45837f946676", "created": "2026-01-27T05:12:59.011054Z", "modified": "2026-01-27T05:12:59.011054Z", "relationship_type": "indicates", "source_ref": "indicator--0e443046-a61e-48d1-86c7-ee86ef3069f5", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87022d5f-0493-4079-a4b8-05d19877b89f", "created": "2026-01-27T05:12:59.011228Z", "modified": "2026-01-27T05:12:59.011228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe77dd56ebf17341fdf8fee28ce8ddd344fa01542d73ac97284dd5242940573e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.011228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e1651ef-f918-4ff4-b7ca-fa1b5e649715", "created": "2026-01-27T05:12:59.012067Z", "modified": "2026-01-27T05:12:59.012067Z", "relationship_type": "indicates", "source_ref": "indicator--87022d5f-0493-4079-a4b8-05d19877b89f", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8bf157-eee5-4eda-ac99-19991515a8a6", "created": "2026-01-27T05:12:59.012243Z", "modified": "2026-01-27T05:12:59.012243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81797af37afe240298962963e764ec4ad7f791a7ba0c4ecc6080898ea26199fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.012243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9602acff-0d49-4af6-8b3b-53f3ba4f0450", "created": "2026-01-27T05:12:59.013087Z", "modified": "2026-01-27T05:12:59.013087Z", "relationship_type": "indicates", "source_ref": "indicator--2d8bf157-eee5-4eda-ac99-19991515a8a6", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58811028-5371-4d26-81eb-25bea2bb1cd8", "created": "2026-01-27T05:12:59.013261Z", "modified": "2026-01-27T05:12:59.013261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47897df4aa0f0533b67381cbc051a75adaae8d2caab10a6d9e31fa6435c09118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.013261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b8bf23c-cd1e-4f2f-9d77-47d43f5aa9db", "created": "2026-01-27T05:12:59.014215Z", "modified": "2026-01-27T05:12:59.014215Z", "relationship_type": "indicates", "source_ref": "indicator--58811028-5371-4d26-81eb-25bea2bb1cd8", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16786857-b1d8-419e-b95c-4f9ad61f2988", "created": "2026-01-27T05:12:59.01439Z", "modified": "2026-01-27T05:12:59.01439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4601c28bb41bcc466c28a4f07d714bd9ee0a40923021ef6f80cffbb52e5b886a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.01439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b170e0e9-08b0-44b4-a4be-61d70cc74f43", "created": "2026-01-27T05:12:59.015253Z", "modified": "2026-01-27T05:12:59.015253Z", "relationship_type": "indicates", "source_ref": "indicator--16786857-b1d8-419e-b95c-4f9ad61f2988", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27b4d3a-a9e9-41ce-a05e-5a09e9f19bd4", "created": "2026-01-27T05:12:59.015438Z", "modified": "2026-01-27T05:12:59.015438Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ff34cfc43b9611f1c78f39d062a9e41f98b88ea86568f3480e69f37e772d188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.015438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dd5dcf0-670e-47e6-909d-a4a9fe753ced", "created": "2026-01-27T05:12:59.016284Z", "modified": "2026-01-27T05:12:59.016284Z", "relationship_type": "indicates", "source_ref": "indicator--e27b4d3a-a9e9-41ce-a05e-5a09e9f19bd4", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfa779d-6293-4f7c-8662-64ce11e62034", "created": "2026-01-27T05:12:59.016481Z", "modified": "2026-01-27T05:12:59.016481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3baadde6121e589205577d8b372c6d10097823c0a14d6d68a9b656dce6750596']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.016481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1062d3fa-34a3-49f2-843c-41235a7498ad", "created": "2026-01-27T05:12:59.017337Z", "modified": "2026-01-27T05:12:59.017337Z", "relationship_type": "indicates", "source_ref": "indicator--0cfa779d-6293-4f7c-8662-64ce11e62034", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--087bc66e-6418-472f-97f9-b49c5160f1c0", "created": "2026-01-27T05:12:59.017511Z", "modified": "2026-01-27T05:12:59.017511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47a2eeece313d88f73ec09b927c405edb232ba8d6a37b1df3b9990490f993590']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.017511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--593b5c2c-4a52-4035-8dd1-37fede787fa6", "created": "2026-01-27T05:12:59.018341Z", "modified": "2026-01-27T05:12:59.018341Z", "relationship_type": "indicates", "source_ref": "indicator--087bc66e-6418-472f-97f9-b49c5160f1c0", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3254da-0540-4423-9a12-f71b61f441f2", "created": "2026-01-27T05:12:59.018517Z", "modified": "2026-01-27T05:12:59.018517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5dfe44c5acec25511e1307b7bd1ae715fbfd66d2925a286904fc6e483635eb7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.018517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f771ac6-6aab-471c-8ccb-96dbc590adce", "created": "2026-01-27T05:12:59.019371Z", "modified": "2026-01-27T05:12:59.019371Z", "relationship_type": "indicates", "source_ref": "indicator--bf3254da-0540-4423-9a12-f71b61f441f2", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81465aba-72bf-4ac5-8f67-ccb2ae3a5592", "created": "2026-01-27T05:12:59.019552Z", "modified": "2026-01-27T05:12:59.019552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a41dd50ce93b251a9f3442202389a596766e5c9d5fbf31817a8c68066c57a8d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.019552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f8e7f96-1698-4ace-a49e-b32f92296b6a", "created": "2026-01-27T05:12:59.020471Z", "modified": "2026-01-27T05:12:59.020471Z", "relationship_type": "indicates", "source_ref": "indicator--81465aba-72bf-4ac5-8f67-ccb2ae3a5592", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69c5086-2281-4f37-bbf3-6e40bc5e08e5", "created": "2026-01-27T05:12:59.020658Z", "modified": "2026-01-27T05:12:59.020658Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='wosc.cwf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.020658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e36b9d15-848a-461c-aef4-369daa5c22ae", "created": "2026-01-27T05:12:59.021328Z", "modified": "2026-01-27T05:12:59.021328Z", "relationship_type": "indicates", "source_ref": "indicator--d69c5086-2281-4f37-bbf3-6e40bc5e08e5", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e67fdc-6056-4a07-ad55-305a87f6f32e", "created": "2026-01-27T05:12:59.021501Z", "modified": "2026-01-27T05:12:59.021501Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='wosc.cwf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.021501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69105460-f573-4282-8723-8867a4b80f53", "created": "2026-01-27T05:12:59.02229Z", "modified": "2026-01-27T05:12:59.02229Z", "relationship_type": "indicates", "source_ref": "indicator--f7e67fdc-6056-4a07-ad55-305a87f6f32e", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af5e7fe-fc99-4778-802e-0370242393aa", "created": "2026-01-27T05:12:59.022468Z", "modified": "2026-01-27T05:12:59.022468Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.wosc.androidclient']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.022468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3821adb7-acfd-443b-a4c0-4fc29cf09bc1", "created": "2026-01-27T05:12:59.023164Z", "modified": "2026-01-27T05:12:59.023164Z", "relationship_type": "indicates", "source_ref": "indicator--3af5e7fe-fc99-4778-802e-0370242393aa", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e9bbc6-7b25-4cbd-8f82-d459a557af5a", "created": "2026-01-27T05:12:59.023345Z", "modified": "2026-01-27T05:12:59.023345Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5037E917539B4F31E0B92EBB7A9089C5DC567518']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.023345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eae5080c-a484-40a5-ab8e-c38735796223", "created": "2026-01-27T05:12:59.024202Z", "modified": "2026-01-27T05:12:59.024202Z", "relationship_type": "indicates", "source_ref": "indicator--f8e9bbc6-7b25-4cbd-8f82-d459a557af5a", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d063757-9c6c-4524-b087-d20d82b8b7e2", "created": "2026-01-27T05:12:59.024384Z", "modified": "2026-01-27T05:12:59.024384Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='68E4A16FD2B8D41E817CC5A06BA95B9CED9BD9F9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.024384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad81ecfd-0fd2-4a24-b3d4-800fab372792", "created": "2026-01-27T05:12:59.025172Z", "modified": "2026-01-27T05:12:59.025172Z", "relationship_type": "indicates", "source_ref": "indicator--0d063757-9c6c-4524-b087-d20d82b8b7e2", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c8a1d4-9fbe-458b-a372-44c530690db5", "created": "2026-01-27T05:12:59.025348Z", "modified": "2026-01-27T05:12:59.025348Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='757DB1C635344324B665BAF056DC3E4B1D0CC39B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.025348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--596ddea7-d31b-45d3-b1db-97091d3ddf2b", "created": "2026-01-27T05:12:59.026145Z", "modified": "2026-01-27T05:12:59.026145Z", "relationship_type": "indicates", "source_ref": "indicator--93c8a1d4-9fbe-458b-a372-44c530690db5", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a437142b-16a2-4387-8563-88ad3462f4cf", "created": "2026-01-27T05:12:59.026325Z", "modified": "2026-01-27T05:12:59.026325Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='783B1880ECDC5E75620A4C484E3BDBE08D6D4397']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.026325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--367342ba-97aa-4b42-8ad5-65e5f896fa42", "created": "2026-01-27T05:12:59.027108Z", "modified": "2026-01-27T05:12:59.027108Z", "relationship_type": "indicates", "source_ref": "indicator--a437142b-16a2-4387-8563-88ad3462f4cf", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c51cfa-0ab6-4b8d-93aa-a1f88c192c11", "created": "2026-01-27T05:12:59.027283Z", "modified": "2026-01-27T05:12:59.027283Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8E352F2EE18054DF97C238915C0375AA13305DEC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.027283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c060732-bbce-4ffe-ba0b-698b14c5c133", "created": "2026-01-27T05:12:59.028061Z", "modified": "2026-01-27T05:12:59.028061Z", "relationship_type": "indicates", "source_ref": "indicator--d3c51cfa-0ab6-4b8d-93aa-a1f88c192c11", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf159b1-1258-43b5-b818-41eea76c5779", "created": "2026-01-27T05:12:59.028232Z", "modified": "2026-01-27T05:12:59.028232Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='92DF71DB15BEEAB77DF36FD879A89E5E0DEF4617']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.028232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed39690b-168e-4e1d-b1cb-1ed6c1f7ec33", "created": "2026-01-27T05:12:59.029022Z", "modified": "2026-01-27T05:12:59.029022Z", "relationship_type": "indicates", "source_ref": "indicator--8bf159b1-1258-43b5-b818-41eea76c5779", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acd1362-0b0e-44a2-a5ec-0c9549f33997", "created": "2026-01-27T05:12:59.029196Z", "modified": "2026-01-27T05:12:59.029196Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='93135ABA6FF4B6CFE9B06153B9BDF769AEBC1D87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.029196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1373c2c5-16e5-42f5-b3fa-e264a4bccd25", "created": "2026-01-27T05:12:59.02998Z", "modified": "2026-01-27T05:12:59.02998Z", "relationship_type": "indicates", "source_ref": "indicator--2acd1362-0b0e-44a2-a5ec-0c9549f33997", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c04674e-57ed-4b7b-aade-598a1aa3c21a", "created": "2026-01-27T05:12:59.030155Z", "modified": "2026-01-27T05:12:59.030155Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9FE876AF76CDCB685102A38528A3A732B0872DC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.030155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29babbdb-e776-499e-9f6e-3e31511bb196", "created": "2026-01-27T05:12:59.031057Z", "modified": "2026-01-27T05:12:59.031057Z", "relationship_type": "indicates", "source_ref": "indicator--8c04674e-57ed-4b7b-aade-598a1aa3c21a", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04a0d6a-34ec-43aa-894d-65c0b47d64dd", "created": "2026-01-27T05:12:59.031254Z", "modified": "2026-01-27T05:12:59.031254Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B927DACA3BB3876523E2E8B1BDB56CE84B0DFFF7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.031254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0213ac8-ecd3-4821-a77f-543e202c8185", "created": "2026-01-27T05:12:59.032036Z", "modified": "2026-01-27T05:12:59.032036Z", "relationship_type": "indicates", "source_ref": "indicator--c04a0d6a-34ec-43aa-894d-65c0b47d64dd", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed40c74-fffa-4c37-8cee-2c52b52946ce", "created": "2026-01-27T05:12:59.032209Z", "modified": "2026-01-27T05:12:59.032209Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F18B3369F152EC3C74EC884BE977B3CA0E0C996D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.032209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68c3e715-1487-4257-98b9-67043e268f0b", "created": "2026-01-27T05:12:59.033008Z", "modified": "2026-01-27T05:12:59.033008Z", "relationship_type": "indicates", "source_ref": "indicator--7ed40c74-fffa-4c37-8cee-2c52b52946ce", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437b64fe-3dd0-4d01-9c65-858f927be1a8", "created": "2026-01-27T05:12:59.033184Z", "modified": "2026-01-27T05:12:59.033184Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='523C42BF2F6CBAFC78BE41043E8E3E3BB311CBA2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.033184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8854d50a-fdc6-4ff0-b9cd-a4c300859a27", "created": "2026-01-27T05:12:59.033973Z", "modified": "2026-01-27T05:12:59.033973Z", "relationship_type": "indicates", "source_ref": "indicator--437b64fe-3dd0-4d01-9c65-858f927be1a8", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67339975-cbac-4b6c-8a64-fc35ee52a958", "created": "2026-01-27T05:12:59.034148Z", "modified": "2026-01-27T05:12:59.034148Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77032E80CC0ECEE49B8F2F58F9999330026E0DB3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.034148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7d3e1ef-5752-496d-bcc6-ba049185004c", "created": "2026-01-27T05:12:59.034925Z", "modified": "2026-01-27T05:12:59.034925Z", "relationship_type": "indicates", "source_ref": "indicator--67339975-cbac-4b6c-8a64-fc35ee52a958", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af71b620-d993-470b-bd64-ea25c0ccbb76", "created": "2026-01-27T05:12:59.035097Z", "modified": "2026-01-27T05:12:59.035097Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7688EA09EE353ED077E0A90D401881B63F115A3F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.035097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2052e903-9b05-4567-8d79-79c0eaa13e1e", "created": "2026-01-27T05:12:59.035876Z", "modified": "2026-01-27T05:12:59.035876Z", "relationship_type": "indicates", "source_ref": "indicator--af71b620-d993-470b-bd64-ea25c0ccbb76", "target_ref": "malware--a7f6d539-da08-40e1-abbf-1775ca7e835c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d", "created": "2026-01-27T05:12:59.036048Z", "modified": "2026-01-27T05:12:59.036048Z", "name": "HighsterMobile", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1791cedd-f19c-4cbd-9760-20ea159ef444", "created": "2026-01-27T05:12:59.03622Z", "modified": "2026-01-27T05:12:59.03622Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a71f4.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.03622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c91b9a16-eed6-4bcc-8595-181885ddd615", "created": "2026-01-27T05:12:59.036934Z", "modified": "2026-01-27T05:12:59.036934Z", "relationship_type": "indicates", "source_ref": "indicator--1791cedd-f19c-4cbd-9760-20ea159ef444", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb75394-f093-484f-92e1-f16f08118ca4", "created": "2026-01-27T05:12:59.037111Z", "modified": "2026-01-27T05:12:59.037111Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ac480.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.037111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3936a03d-c3cf-49e5-8004-92fdf685ac45", "created": "2026-01-27T05:12:59.037806Z", "modified": "2026-01-27T05:12:59.037806Z", "relationship_type": "indicates", "source_ref": "indicator--8cb75394-f093-484f-92e1-f16f08118ca4", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ffaadb-3b85-4068-9daf-2768097aea12", "created": "2026-01-27T05:12:59.03799Z", "modified": "2026-01-27T05:12:59.03799Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='auto-forward.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.03799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d347d4f-6155-48c8-81e8-b44f650defb1", "created": "2026-01-27T05:12:59.03878Z", "modified": "2026-01-27T05:12:59.03878Z", "relationship_type": "indicates", "source_ref": "indicator--d3ffaadb-3b85-4068-9daf-2768097aea12", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2dfe64-2e59-4a1e-818f-ddf5369a146b", "created": "2026-01-27T05:12:59.038963Z", "modified": "2026-01-27T05:12:59.038963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='autoforward-8433d.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.038963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a888ff59-936f-41da-af02-68d46c08b38e", "created": "2026-01-27T05:12:59.039802Z", "modified": "2026-01-27T05:12:59.039802Z", "relationship_type": "indicates", "source_ref": "indicator--bb2dfe64-2e59-4a1e-818f-ddf5369a146b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f27af20-2ddd-46e2-9b5e-a5b58ef0056b", "created": "2026-01-27T05:12:59.039983Z", "modified": "2026-01-27T05:12:59.039983Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='backup-a71f4.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.039983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70f9886e-810a-499a-834f-4382d5d139d4", "created": "2026-01-27T05:12:59.040674Z", "modified": "2026-01-27T05:12:59.040674Z", "relationship_type": "indicates", "source_ref": "indicator--9f27af20-2ddd-46e2-9b5e-a5b58ef0056b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e11503c-2b87-444f-9f92-36ba60a6edc4", "created": "2026-01-27T05:12:59.040871Z", "modified": "2026-01-27T05:12:59.040871Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphoneservices.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.040871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cfa77d5-9131-4cc8-971e-2ff4144ac866", "created": "2026-01-27T05:12:59.041548Z", "modified": "2026-01-27T05:12:59.041548Z", "relationship_type": "indicates", "source_ref": "indicator--4e11503c-2b87-444f-9f92-36ba60a6edc4", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1962a6e4-1328-44cb-a42b-e65e88ba8519", "created": "2026-01-27T05:12:59.041724Z", "modified": "2026-01-27T05:12:59.041724Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ddiutilities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.041724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b535139c-dd1d-44b8-a095-4fc39edf2555", "created": "2026-01-27T05:12:59.042416Z", "modified": "2026-01-27T05:12:59.042416Z", "relationship_type": "indicates", "source_ref": "indicator--1962a6e4-1328-44cb-a42b-e65e88ba8519", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c9fb8e-e3d6-4937-9bac-5b1e4e3eb25e", "created": "2026-01-27T05:12:59.042603Z", "modified": "2026-01-27T05:12:59.042603Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='device-ac480.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.042603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7f72f64-f230-4a17-88ca-d8f686270d45", "created": "2026-01-27T05:12:59.043311Z", "modified": "2026-01-27T05:12:59.043311Z", "relationship_type": "indicates", "source_ref": "indicator--84c9fb8e-e3d6-4937-9bac-5b1e4e3eb25e", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7600defd-cf06-4747-951c-bad1ff846f4b", "created": "2026-01-27T05:12:59.043486Z", "modified": "2026-01-27T05:12:59.043486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='device-ac480.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.043486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7bd294a-94fd-47fe-bc1b-0fb868b1cae1", "created": "2026-01-27T05:12:59.04423Z", "modified": "2026-01-27T05:12:59.04423Z", "relationship_type": "indicates", "source_ref": "indicator--7600defd-cf06-4747-951c-bad1ff846f4b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94585d1-c65d-4a2a-a1fc-6c35704ed56c", "created": "2026-01-27T05:12:59.044485Z", "modified": "2026-01-27T05:12:59.044485Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='evt17.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.044485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30a3e83f-93ed-4f0a-9d7c-ec411441f5b8", "created": "2026-01-27T05:12:59.045191Z", "modified": "2026-01-27T05:12:59.045191Z", "relationship_type": "indicates", "source_ref": "indicator--a94585d1-c65d-4a2a-a1fc-6c35704ed56c", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea481a2-e7d7-4715-949a-bc3f64e1aebb", "created": "2026-01-27T05:12:59.045372Z", "modified": "2026-01-27T05:12:59.045372Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ngc77.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.045372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79253e69-1414-4973-94f5-0a4578be6ab8", "created": "2026-01-27T05:12:59.046063Z", "modified": "2026-01-27T05:12:59.046063Z", "relationship_type": "indicates", "source_ref": "indicator--fea481a2-e7d7-4715-949a-bc3f64e1aebb", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67e9077-b591-4c41-9106-398ccff9f2f7", "created": "2026-01-27T05:12:59.04624Z", "modified": "2026-01-27T05:12:59.04624Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespector-b2f13.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.04624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ad4b027-ec44-4434-bb53-39feaaef490b", "created": "2026-01-27T05:12:59.047043Z", "modified": "2026-01-27T05:12:59.047043Z", "relationship_type": "indicates", "source_ref": "indicator--b67e9077-b591-4c41-9106-398ccff9f2f7", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e18c7b-b6b1-4f9e-8c70-8a45d966f868", "created": "2026-01-27T05:12:59.047233Z", "modified": "2026-01-27T05:12:59.047233Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespector.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.047233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31236db1-3d7d-47db-a5c6-f61f04163fb7", "created": "2026-01-27T05:12:59.04807Z", "modified": "2026-01-27T05:12:59.04807Z", "relationship_type": "indicates", "source_ref": "indicator--f3e18c7b-b6b1-4f9e-8c70-8a45d966f868", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23826a01-9527-45c9-94bf-3fde99a178d4", "created": "2026-01-27T05:12:59.048248Z", "modified": "2026-01-27T05:12:59.048248Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='auto-forward.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.048248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--711cec17-c551-4df1-9e43-38c12ab6e304", "created": "2026-01-27T05:12:59.048933Z", "modified": "2026-01-27T05:12:59.048933Z", "relationship_type": "indicates", "source_ref": "indicator--23826a01-9527-45c9-94bf-3fde99a178d4", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1379de0e-c2bb-4517-855f-a3a595275f7c", "created": "2026-01-27T05:12:59.049111Z", "modified": "2026-01-27T05:12:59.049111Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='autoforward.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.049111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20c47d9e-5bef-4fdb-b3dd-d00bfd80ea4f", "created": "2026-01-27T05:12:59.049791Z", "modified": "2026-01-27T05:12:59.049791Z", "relationship_type": "indicates", "source_ref": "indicator--1379de0e-c2bb-4517-855f-a3a595275f7c", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f14ca9-1f92-448f-8bc4-c7e35d677b16", "created": "2026-01-27T05:12:59.049966Z", "modified": "2026-01-27T05:12:59.049966Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='autoforward.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.049966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--487aadf9-50ea-43f1-8f1a-30ea9cc71d63", "created": "2026-01-27T05:12:59.050626Z", "modified": "2026-01-27T05:12:59.050626Z", "relationship_type": "indicates", "source_ref": "indicator--04f14ca9-1f92-448f-8bc4-c7e35d677b16", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5e8b48-8a75-4e02-97aa-262ac1f19a10", "created": "2026-01-27T05:12:59.050814Z", "modified": "2026-01-27T05:12:59.050814Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bestcellphonespyapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.050814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27324cec-9905-461a-8031-3ab6ea14e147", "created": "2026-01-27T05:12:59.051492Z", "modified": "2026-01-27T05:12:59.051492Z", "relationship_type": "indicates", "source_ref": "indicator--ac5e8b48-8a75-4e02-97aa-262ac1f19a10", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1979f020-bfa4-4ec8-b3ca-c2c13f0d44f5", "created": "2026-01-27T05:12:59.051673Z", "modified": "2026-01-27T05:12:59.051673Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='buyeasyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.051673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9547015a-1dc7-4b64-91c5-ed1b14be6b08", "created": "2026-01-27T05:12:59.052359Z", "modified": "2026-01-27T05:12:59.052359Z", "relationship_type": "indicates", "source_ref": "indicator--1979f020-bfa4-4ec8-b3ca-c2c13f0d44f5", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc01f26e-4943-41f1-b7cc-c282865b62b7", "created": "2026-01-27T05:12:59.05253Z", "modified": "2026-01-27T05:12:59.05253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cellphoneservices.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.05253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d02a8d0-adfa-4adb-b693-31c6c96e475c", "created": "2026-01-27T05:12:59.053235Z", "modified": "2026-01-27T05:12:59.053235Z", "relationship_type": "indicates", "source_ref": "indicator--dc01f26e-4943-41f1-b7cc-c282865b62b7", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6488398-3eef-4a49-9eea-a5eaced1731a", "created": "2026-01-27T05:12:59.053416Z", "modified": "2026-01-27T05:12:59.053416Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ddiutilities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.053416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c40ff6d-68ac-425a-91ed-151f86bc412e", "created": "2026-01-27T05:12:59.054103Z", "modified": "2026-01-27T05:12:59.054103Z", "relationship_type": "indicates", "source_ref": "indicator--a6488398-3eef-4a49-9eea-a5eaced1731a", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4230a7be-338d-458d-9c5a-518d1cce77b9", "created": "2026-01-27T05:12:59.054282Z", "modified": "2026-01-27T05:12:59.054282Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dev.safeguarde.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.054282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f90fca9e-f99f-4dec-ab0f-b536cb15cd67", "created": "2026-01-27T05:12:59.05501Z", "modified": "2026-01-27T05:12:59.05501Z", "relationship_type": "indicates", "source_ref": "indicator--4230a7be-338d-458d-9c5a-518d1cce77b9", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbd8ea7-8bf8-4443-a968-e635e255f86b", "created": "2026-01-27T05:12:59.055198Z", "modified": "2026-01-27T05:12:59.055198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='digitalsecurityworld.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.055198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae791eae-ad38-45b1-b326-cd9922c4241f", "created": "2026-01-27T05:12:59.05606Z", "modified": "2026-01-27T05:12:59.05606Z", "relationship_type": "indicates", "source_ref": "indicator--afbd8ea7-8bf8-4443-a968-e635e255f86b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b6e532-ceb7-4f93-b4f0-9061a2883332", "created": "2026-01-27T05:12:59.056237Z", "modified": "2026-01-27T05:12:59.056237Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='evt17.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.056237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30c0a18c-6031-42b1-a6d3-479946001154", "created": "2026-01-27T05:12:59.056906Z", "modified": "2026-01-27T05:12:59.056906Z", "relationship_type": "indicates", "source_ref": "indicator--13b6e532-ceb7-4f93-b4f0-9061a2883332", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49643fca-b63e-4b6f-9388-6d9d9dd4d336", "created": "2026-01-27T05:12:59.057087Z", "modified": "2026-01-27T05:12:59.057087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='highstermobile.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.057087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d5f1f85-5800-4d51-809c-ad957ae7e82c", "created": "2026-01-27T05:12:59.05778Z", "modified": "2026-01-27T05:12:59.05778Z", "relationship_type": "indicates", "source_ref": "indicator--49643fca-b63e-4b6f-9388-6d9d9dd4d336", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dde8d03-131d-4a7f-b55f-a72173f1ced6", "created": "2026-01-27T05:12:59.057955Z", "modified": "2026-01-27T05:12:59.057955Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='highstermobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.057955Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99855257-af38-4f5d-a9e3-53e566017df9", "created": "2026-01-27T05:12:59.05865Z", "modified": "2026-01-27T05:12:59.05865Z", "relationship_type": "indicates", "source_ref": "indicator--2dde8d03-131d-4a7f-b55f-a72173f1ced6", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717d4bf6-9a1c-406d-b632-02f8d23813f8", "created": "2026-01-27T05:12:59.058848Z", "modified": "2026-01-27T05:12:59.058848Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ilfmobileapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.058848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1e8d468-83b6-4a68-b400-d0b80625a2b4", "created": "2026-01-27T05:12:59.059523Z", "modified": "2026-01-27T05:12:59.059523Z", "relationship_type": "indicates", "source_ref": "indicator--717d4bf6-9a1c-406d-b632-02f8d23813f8", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d377fa-e618-4f73-b08b-b92b84add5dc", "created": "2026-01-27T05:12:59.059693Z", "modified": "2026-01-27T05:12:59.059693Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.surepointspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.059693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6d1de12-e35e-4fdf-a5b0-f813d85614a8", "created": "2026-01-27T05:12:59.060405Z", "modified": "2026-01-27T05:12:59.060405Z", "relationship_type": "indicates", "source_ref": "indicator--54d377fa-e618-4f73-b08b-b92b84add5dc", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb299393-a293-480e-9c41-2e469d6d32dd", "created": "2026-01-27T05:12:59.060577Z", "modified": "2026-01-27T05:12:59.060577Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonespector.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.060577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2816dbce-1951-4637-b23d-41d0029708bc", "created": "2026-01-27T05:12:59.061264Z", "modified": "2026-01-27T05:12:59.061264Z", "relationship_type": "indicates", "source_ref": "indicator--fb299393-a293-480e-9c41-2e469d6d32dd", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb22295-5d7c-4ad8-8596-f92311c0efec", "created": "2026-01-27T05:12:59.061437Z", "modified": "2026-01-27T05:12:59.061437Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safeguarde.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.061437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46caf797-4b71-45c3-b200-c95d4c1130c2", "created": "2026-01-27T05:12:59.062164Z", "modified": "2026-01-27T05:12:59.062164Z", "relationship_type": "indicates", "source_ref": "indicator--1cb22295-5d7c-4ad8-8596-f92311c0efec", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4370e1f-b857-4461-ade6-bd295f9df48a", "created": "2026-01-27T05:12:59.062346Z", "modified": "2026-01-27T05:12:59.062346Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='surepointspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.062346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eb9a60f-420b-4192-b538-6b9e2e41703e", "created": "2026-01-27T05:12:59.063079Z", "modified": "2026-01-27T05:12:59.063079Z", "relationship_type": "indicates", "source_ref": "indicator--d4370e1f-b857-4461-ade6-bd295f9df48a", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a634313-34d1-4aad-b85f-05cb64561b0f", "created": "2026-01-27T05:12:59.063262Z", "modified": "2026-01-27T05:12:59.063262Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thepowerlinegroup.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.063262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec1a35f9-608e-4255-94b8-45104f2b2a6b", "created": "2026-01-27T05:12:59.064163Z", "modified": "2026-01-27T05:12:59.064163Z", "relationship_type": "indicates", "source_ref": "indicator--2a634313-34d1-4aad-b85f-05cb64561b0f", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3abcb86-e543-4b4f-a99f-9937a3467d8d", "created": "2026-01-27T05:12:59.064346Z", "modified": "2026-01-27T05:12:59.064346Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='turbophonepsy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.064346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ff507b2-3a1e-4fc6-af23-e95f616f13c6", "created": "2026-01-27T05:12:59.065093Z", "modified": "2026-01-27T05:12:59.065093Z", "relationship_type": "indicates", "source_ref": "indicator--a3abcb86-e543-4b4f-a99f-9937a3467d8d", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c0c223-5b22-4aa9-a522-2cb4e4169320", "created": "2026-01-27T05:12:59.065269Z", "modified": "2026-01-27T05:12:59.065269Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.surepointspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.065269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eaf45616-7d51-4285-a322-10d2adcea92a", "created": "2026-01-27T05:12:59.065973Z", "modified": "2026-01-27T05:12:59.065973Z", "relationship_type": "indicates", "source_ref": "indicator--33c0c223-5b22-4aa9-a522-2cb4e4169320", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9db77e-93c2-4fdf-a34a-e293bd507585", "created": "2026-01-27T05:12:59.066149Z", "modified": "2026-01-27T05:12:59.066149Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='daad66a7133509b7947973e2936def4451a0ecf5782fde3f3b0cfa0a9756cc6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.066149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d62023c1-0f38-48b4-b33d-3467e6732e9f", "created": "2026-01-27T05:12:59.06701Z", "modified": "2026-01-27T05:12:59.06701Z", "relationship_type": "indicates", "source_ref": "indicator--bc9db77e-93c2-4fdf-a34a-e293bd507585", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009ebe8e-9794-4b95-9c68-8bfcecb2e678", "created": "2026-01-27T05:12:59.067188Z", "modified": "2026-01-27T05:12:59.067188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61d6a412c8082fbaa7781accc8c830a422d182a94ff8a6b0cde8611d4c2c097d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.067188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--791a0353-9e23-45e3-9dc1-da9fd24307a7", "created": "2026-01-27T05:12:59.068035Z", "modified": "2026-01-27T05:12:59.068035Z", "relationship_type": "indicates", "source_ref": "indicator--009ebe8e-9794-4b95-9c68-8bfcecb2e678", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e9f39c-2f64-4ae6-850f-af22ab14b25b", "created": "2026-01-27T05:12:59.068213Z", "modified": "2026-01-27T05:12:59.068213Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64fe966d4848f43f4a9fbd21c0fd1184cb8f97b297316ee0468fcec81b3960d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.068213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdf7d851-8ad6-4c73-b522-7f419299bbcb", "created": "2026-01-27T05:12:59.069069Z", "modified": "2026-01-27T05:12:59.069069Z", "relationship_type": "indicates", "source_ref": "indicator--34e9f39c-2f64-4ae6-850f-af22ab14b25b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c8001c-ee94-4292-9c94-d73d5a03c626", "created": "2026-01-27T05:12:59.069242Z", "modified": "2026-01-27T05:12:59.069242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b0e9ab177668fce3385a9d8f5eaa30b23d1057e926240d062b1632d4fd820f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.069242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6439f7e7-41db-4cfe-826a-dd717a48d7b3", "created": "2026-01-27T05:12:59.070079Z", "modified": "2026-01-27T05:12:59.070079Z", "relationship_type": "indicates", "source_ref": "indicator--e3c8001c-ee94-4292-9c94-d73d5a03c626", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af35d3a9-fe7b-4121-9e71-aa47bce29957", "created": "2026-01-27T05:12:59.070256Z", "modified": "2026-01-27T05:12:59.070256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82ee68050c19f9f23e5c670e9c219c1a8d1e45be5f1b378152a9e9d9858e55b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.070256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--759ce3ad-9a6f-4358-947d-d5428212ad8b", "created": "2026-01-27T05:12:59.071101Z", "modified": "2026-01-27T05:12:59.071101Z", "relationship_type": "indicates", "source_ref": "indicator--af35d3a9-fe7b-4121-9e71-aa47bce29957", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9feb395-2e67-4e2e-9c72-72edce32855a", "created": "2026-01-27T05:12:59.071273Z", "modified": "2026-01-27T05:12:59.071273Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51d3969fc75c16c92eff45e851196b7e78f882bd798f1fc0431818b619e1470e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.071273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad548d37-2db1-4da1-a0c8-73f439dd20b6", "created": "2026-01-27T05:12:59.072122Z", "modified": "2026-01-27T05:12:59.072122Z", "relationship_type": "indicates", "source_ref": "indicator--f9feb395-2e67-4e2e-9c72-72edce32855a", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4430a5-79d2-4f15-8f96-b73565736772", "created": "2026-01-27T05:12:59.072296Z", "modified": "2026-01-27T05:12:59.072296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71481a24df261719216803424bd209a2456e7e79d2dda74849bab907e44d8b9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.072296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8752d8c2-5672-4372-938b-0073a77c2893", "created": "2026-01-27T05:12:59.073252Z", "modified": "2026-01-27T05:12:59.073252Z", "relationship_type": "indicates", "source_ref": "indicator--4f4430a5-79d2-4f15-8f96-b73565736772", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442cfe4d-3e21-44e9-9521-11e6098dbba2", "created": "2026-01-27T05:12:59.073427Z", "modified": "2026-01-27T05:12:59.073427Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b38a9a7142daa7db2c9f919435efe3cb9297e5e0ac1367dd8b5a958664eec360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.073427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4dad927-5072-4601-a3c3-9a355daa49a3", "created": "2026-01-27T05:12:59.074258Z", "modified": "2026-01-27T05:12:59.074258Z", "relationship_type": "indicates", "source_ref": "indicator--442cfe4d-3e21-44e9-9521-11e6098dbba2", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef79500-5841-441c-93ca-94200ae70d12", "created": "2026-01-27T05:12:59.074435Z", "modified": "2026-01-27T05:12:59.074435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2bbb8e87b338a26a035b922225ae1f6f57fcfc749495185268d12318886a292']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.074435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52ea4312-e4a1-41be-b29b-c6ae1e691b81", "created": "2026-01-27T05:12:59.075263Z", "modified": "2026-01-27T05:12:59.075263Z", "relationship_type": "indicates", "source_ref": "indicator--8ef79500-5841-441c-93ca-94200ae70d12", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd827a8d-c1aa-4252-8700-25dcc5ef67e1", "created": "2026-01-27T05:12:59.075437Z", "modified": "2026-01-27T05:12:59.075437Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ab873c0b420b224fc1df482eec9d59a1309bec4afd675f5010a162d17998b59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.075437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2510ea4-c23c-47c8-b19f-8d169b8b1bec", "created": "2026-01-27T05:12:59.076265Z", "modified": "2026-01-27T05:12:59.076265Z", "relationship_type": "indicates", "source_ref": "indicator--dd827a8d-c1aa-4252-8700-25dcc5ef67e1", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9cb360-37de-4090-88f7-f7ad858a5428", "created": "2026-01-27T05:12:59.076437Z", "modified": "2026-01-27T05:12:59.076437Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f991701ef188d167a860c3696cb3ced8dbbebfa7008c695a345fb90005bf4c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.076437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38006f4e-be41-477a-93a0-4b6c7ddbb58f", "created": "2026-01-27T05:12:59.077271Z", "modified": "2026-01-27T05:12:59.077271Z", "relationship_type": "indicates", "source_ref": "indicator--2d9cb360-37de-4090-88f7-f7ad858a5428", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e853b045-1209-4e94-b134-f7d4b353ef49", "created": "2026-01-27T05:12:59.077447Z", "modified": "2026-01-27T05:12:59.077447Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='357f344ce7c6f639f5e55db509d655f11bf88a853cbd01092e13b08460fa1af2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.077447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9495f8ff-50c5-477b-aaa9-1b5ac74df052", "created": "2026-01-27T05:12:59.078355Z", "modified": "2026-01-27T05:12:59.078355Z", "relationship_type": "indicates", "source_ref": "indicator--e853b045-1209-4e94-b134-f7d4b353ef49", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce8201d-15fc-4731-b186-d781e0f14680", "created": "2026-01-27T05:12:59.078536Z", "modified": "2026-01-27T05:12:59.078536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d90b0da4c46c19a853a0c91869b925a414bf5a99c9cf157cd8cf158fa02c840']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.078536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5e7c1e6-1bce-463e-bf5c-b687cdb858fb", "created": "2026-01-27T05:12:59.07942Z", "modified": "2026-01-27T05:12:59.07942Z", "relationship_type": "indicates", "source_ref": "indicator--2ce8201d-15fc-4731-b186-d781e0f14680", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757edb90-1632-40af-9b89-75d9ea40166f", "created": "2026-01-27T05:12:59.079604Z", "modified": "2026-01-27T05:12:59.079604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3aa6bdc2d66e9842bde47c8c79010106966a2f0dc24dbe62a51a5e0314994fe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.079604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--546a8e94-ab15-4e6a-a3ba-4f32c04d57d4", "created": "2026-01-27T05:12:59.080449Z", "modified": "2026-01-27T05:12:59.080449Z", "relationship_type": "indicates", "source_ref": "indicator--757edb90-1632-40af-9b89-75d9ea40166f", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4daa349e-c0a2-494b-933b-2b6b6a54916f", "created": "2026-01-27T05:12:59.080626Z", "modified": "2026-01-27T05:12:59.080626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4708c8e8132f14b0e19af0aa285eb486adee3cb762d81791c5d5a9baf7b2f2f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.080626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecc8e6bb-8ee6-4500-8841-7f9e37b5a328", "created": "2026-01-27T05:12:59.081463Z", "modified": "2026-01-27T05:12:59.081463Z", "relationship_type": "indicates", "source_ref": "indicator--4daa349e-c0a2-494b-933b-2b6b6a54916f", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0add27-8111-4608-a336-8ee426b6318a", "created": "2026-01-27T05:12:59.081634Z", "modified": "2026-01-27T05:12:59.081634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='938db24aae3b4af828f8cea815c01535e0ea8bb759560d66544097aba4262624']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.081634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55a2182c-1dab-45f4-ba79-661061495ee1", "created": "2026-01-27T05:12:59.08302Z", "modified": "2026-01-27T05:12:59.08302Z", "relationship_type": "indicates", "source_ref": "indicator--2b0add27-8111-4608-a336-8ee426b6318a", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dddb381-58e0-4686-bca8-45e05a62cc9a", "created": "2026-01-27T05:12:59.083201Z", "modified": "2026-01-27T05:12:59.083201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e55858f1aee6a230f9459ffa50e018b4b12222c7fb66843c1658a2419726db99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.083201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4eccdb6b-e48a-4eed-b275-8c97bad5724d", "created": "2026-01-27T05:12:59.084038Z", "modified": "2026-01-27T05:12:59.084038Z", "relationship_type": "indicates", "source_ref": "indicator--3dddb381-58e0-4686-bca8-45e05a62cc9a", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452e5b64-f2ab-432a-9f4c-c0bd47f6563b", "created": "2026-01-27T05:12:59.084212Z", "modified": "2026-01-27T05:12:59.084212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e7bdf0f6386de43c6a4e6373988919035c331dd447210db3ec24f59253d8f98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.084212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5caf7ecb-0f6c-4af7-8ad5-9d21732c796b", "created": "2026-01-27T05:12:59.085041Z", "modified": "2026-01-27T05:12:59.085041Z", "relationship_type": "indicates", "source_ref": "indicator--452e5b64-f2ab-432a-9f4c-c0bd47f6563b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b7119d-8ad4-4ecc-aab2-8d62ee85c7ef", "created": "2026-01-27T05:12:59.085216Z", "modified": "2026-01-27T05:12:59.085216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51380dc4104bb6172a5a1402de4e69d9271a1ba87177a2c217c795f36d468f53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.085216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8fed854-b6f7-4690-b656-a36959e084d5", "created": "2026-01-27T05:12:59.086048Z", "modified": "2026-01-27T05:12:59.086048Z", "relationship_type": "indicates", "source_ref": "indicator--83b7119d-8ad4-4ecc-aab2-8d62ee85c7ef", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca7aede-6dac-4e4b-a068-a26a247a96ef", "created": "2026-01-27T05:12:59.086221Z", "modified": "2026-01-27T05:12:59.086221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c23327f795fe4f5eba98d0fa5d74dc925fa0e1d223236d8f5729d0a6b116401f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.086221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49e485e1-13cb-4ba1-8e43-8a33c240b6a2", "created": "2026-01-27T05:12:59.087098Z", "modified": "2026-01-27T05:12:59.087098Z", "relationship_type": "indicates", "source_ref": "indicator--5ca7aede-6dac-4e4b-a068-a26a247a96ef", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--758c3af9-cd21-4e5a-9cff-4bfbf19c79e1", "created": "2026-01-27T05:12:59.087279Z", "modified": "2026-01-27T05:12:59.087279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='653b02c2a96033605a7c6d896053c8b7ad8fad4a2ab383acb08613ea0f75e41d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.087279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26324f01-179d-4390-b554-971e7d644cb4", "created": "2026-01-27T05:12:59.088112Z", "modified": "2026-01-27T05:12:59.088112Z", "relationship_type": "indicates", "source_ref": "indicator--758c3af9-cd21-4e5a-9cff-4bfbf19c79e1", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f89c56-f784-4abe-ae9a-4e6f184257b8", "created": "2026-01-27T05:12:59.088288Z", "modified": "2026-01-27T05:12:59.088288Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50db15ff369972f11e4ced9872c7cb4a00044745f1a666a81b74227e8f3a07fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.088288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16a6adfe-521d-4f09-8133-a1a0cc784155", "created": "2026-01-27T05:12:59.089124Z", "modified": "2026-01-27T05:12:59.089124Z", "relationship_type": "indicates", "source_ref": "indicator--42f89c56-f784-4abe-ae9a-4e6f184257b8", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34330895-4862-4732-8b65-bced29a9eb97", "created": "2026-01-27T05:12:59.089297Z", "modified": "2026-01-27T05:12:59.089297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e13d931a2ae1e85361f90230cd3cde659a547a5b2685bfb4e2bf131b9adea5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.089297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1e6b5ff-4f26-4f12-809b-c7427f687036", "created": "2026-01-27T05:12:59.090125Z", "modified": "2026-01-27T05:12:59.090125Z", "relationship_type": "indicates", "source_ref": "indicator--34330895-4862-4732-8b65-bced29a9eb97", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cb0418-4b2a-410f-863b-a3f5b925da92", "created": "2026-01-27T05:12:59.090296Z", "modified": "2026-01-27T05:12:59.090296Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e792db1d59f079d73c7792aead58eceefe0d05a063810a8403be9009a88b7fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.090296Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3416fcf-4bcd-4f29-be81-7f2dfc1d9f95", "created": "2026-01-27T05:12:59.091137Z", "modified": "2026-01-27T05:12:59.091137Z", "relationship_type": "indicates", "source_ref": "indicator--f5cb0418-4b2a-410f-863b-a3f5b925da92", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36aea0c-a733-483a-8751-d0d0931f2260", "created": "2026-01-27T05:12:59.091311Z", "modified": "2026-01-27T05:12:59.091311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf9ce377ecb808318dc1737d38ec56283183ae8512ef3f9af10870c0c2efa3f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.091311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bfdef51-93e6-4428-9464-269234043c7e", "created": "2026-01-27T05:12:59.092269Z", "modified": "2026-01-27T05:12:59.092269Z", "relationship_type": "indicates", "source_ref": "indicator--b36aea0c-a733-483a-8751-d0d0931f2260", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6fc752-2614-4d3b-826e-4ef82aaef172", "created": "2026-01-27T05:12:59.092444Z", "modified": "2026-01-27T05:12:59.092444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='effd675d65adcaa283d2832e3f60c3c4c678c46aaf219fa4569ea116cfe3b463']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.092444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2746978c-1d6f-4ecd-95d7-2382c05c5996", "created": "2026-01-27T05:12:59.093297Z", "modified": "2026-01-27T05:12:59.093297Z", "relationship_type": "indicates", "source_ref": "indicator--2b6fc752-2614-4d3b-826e-4ef82aaef172", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d9778c-365f-4721-8572-12480e1b4dbd", "created": "2026-01-27T05:12:59.093512Z", "modified": "2026-01-27T05:12:59.093512Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ca4345795db838ac77809cb0037ea792b0d0f5ac0ad804a0ff0523309010e34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.093512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--464da309-4e42-4d58-bb7d-8c5b0cbe17bb", "created": "2026-01-27T05:12:59.094427Z", "modified": "2026-01-27T05:12:59.094427Z", "relationship_type": "indicates", "source_ref": "indicator--31d9778c-365f-4721-8572-12480e1b4dbd", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2ea84b-6529-435e-95e3-8e652c7f357b", "created": "2026-01-27T05:12:59.094616Z", "modified": "2026-01-27T05:12:59.094616Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acc61d9b97eb173ec23a4aeda6765b02830a6a47bcd3c16fa6d18f26c8b2abbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.094616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b439bac-57d9-465b-bdfa-b176d55cf81c", "created": "2026-01-27T05:12:59.095459Z", "modified": "2026-01-27T05:12:59.095459Z", "relationship_type": "indicates", "source_ref": "indicator--df2ea84b-6529-435e-95e3-8e652c7f357b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778358d8-3b3f-40c2-b37f-daa6e58f8886", "created": "2026-01-27T05:12:59.095636Z", "modified": "2026-01-27T05:12:59.095636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f35d0b6c48b3392791ac52edec41ff8f770967fb8c120a933e2c5bb08675b40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.095636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be3a69ed-fe1e-4df4-972c-a43e13b58066", "created": "2026-01-27T05:12:59.09648Z", "modified": "2026-01-27T05:12:59.09648Z", "relationship_type": "indicates", "source_ref": "indicator--778358d8-3b3f-40c2-b37f-daa6e58f8886", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8ea123-436e-42fe-a827-d26e28e780a7", "created": "2026-01-27T05:12:59.096654Z", "modified": "2026-01-27T05:12:59.096654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef5e17260944003fa58ecc3d3032ae86bb332f666cb4cb3d8b0d8940ba97d790']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.096654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8164ed9-04c9-4740-81e2-1d02b6be609d", "created": "2026-01-27T05:12:59.097489Z", "modified": "2026-01-27T05:12:59.097489Z", "relationship_type": "indicates", "source_ref": "indicator--fa8ea123-436e-42fe-a827-d26e28e780a7", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf16658-9404-45b3-82ba-0a15b151267e", "created": "2026-01-27T05:12:59.097665Z", "modified": "2026-01-27T05:12:59.097665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b63023f964f51fd8f401a23dccadf848cd80777406baeb3f63ec54f2821a2179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.097665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fe66a27-93ad-4368-94fe-a9bfd258c4d6", "created": "2026-01-27T05:12:59.098509Z", "modified": "2026-01-27T05:12:59.098509Z", "relationship_type": "indicates", "source_ref": "indicator--ddf16658-9404-45b3-82ba-0a15b151267e", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f08b19-662b-4af4-ba8f-3a9086462ff2", "created": "2026-01-27T05:12:59.098683Z", "modified": "2026-01-27T05:12:59.098683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1093b4d504fd4909d8487e115826be4461fa0e0ca9b9bdab65039b6b1c8285d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.098683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc794baa-831d-48ad-9563-027ba1b405e4", "created": "2026-01-27T05:12:59.099537Z", "modified": "2026-01-27T05:12:59.099537Z", "relationship_type": "indicates", "source_ref": "indicator--b6f08b19-662b-4af4-ba8f-3a9086462ff2", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d968758-808b-4729-9338-e0a67739ca71", "created": "2026-01-27T05:12:59.099715Z", "modified": "2026-01-27T05:12:59.099715Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28808594b8679d9646d31a999575d78131195209487c084187142c0db8ac4338']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.099715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--076a68b6-8fea-49bb-8201-822ec9cb867a", "created": "2026-01-27T05:12:59.100556Z", "modified": "2026-01-27T05:12:59.100556Z", "relationship_type": "indicates", "source_ref": "indicator--9d968758-808b-4729-9338-e0a67739ca71", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37d1f28-bd82-471c-81d2-55942b050d30", "created": "2026-01-27T05:12:59.100732Z", "modified": "2026-01-27T05:12:59.100732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9aa3af4c99f29f640db11571f48902c49683899c9caadc3cd1de6aeba9e275e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.100732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f851cf7-ff08-4acf-bc8c-48ec93d04ab3", "created": "2026-01-27T05:12:59.1017Z", "modified": "2026-01-27T05:12:59.1017Z", "relationship_type": "indicates", "source_ref": "indicator--e37d1f28-bd82-471c-81d2-55942b050d30", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccb7ee4-3bbe-4363-a91e-25c5cce67965", "created": "2026-01-27T05:12:59.101897Z", "modified": "2026-01-27T05:12:59.101897Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e05f2a8472efcbb340841ea6bc6b3345d63ba867db5435bc2b4d9fc5f2ae92d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.101897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--059a8e33-e96e-4f9b-8d50-beeef631db2a", "created": "2026-01-27T05:12:59.102715Z", "modified": "2026-01-27T05:12:59.102715Z", "relationship_type": "indicates", "source_ref": "indicator--fccb7ee4-3bbe-4363-a91e-25c5cce67965", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14530755-0f46-4f95-b530-24516cdf0c62", "created": "2026-01-27T05:12:59.102914Z", "modified": "2026-01-27T05:12:59.102914Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b94bd72ec7d64f8a9e213837c38e26c328d3d3f8be47ea720029a050b5244990']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.102914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--690f6e96-2b1e-460b-b10d-6c677a66984a", "created": "2026-01-27T05:12:59.103737Z", "modified": "2026-01-27T05:12:59.103737Z", "relationship_type": "indicates", "source_ref": "indicator--14530755-0f46-4f95-b530-24516cdf0c62", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7950e74-09ec-4d7c-8465-fe9387434106", "created": "2026-01-27T05:12:59.103932Z", "modified": "2026-01-27T05:12:59.103932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0f84fc8159f08475d560fa458317cad5140bde80d5798a92ba6e1ae9364eff1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.103932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43fb729d-22cd-407f-a533-d956583cf2bb", "created": "2026-01-27T05:12:59.104771Z", "modified": "2026-01-27T05:12:59.104771Z", "relationship_type": "indicates", "source_ref": "indicator--e7950e74-09ec-4d7c-8465-fe9387434106", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ccceda-3fa7-4278-b8aa-3cf1c4e222aa", "created": "2026-01-27T05:12:59.10495Z", "modified": "2026-01-27T05:12:59.10495Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='528eede62b2e0ebe848717e72fd68fcbaa5fc473941c8012e6f064dae32f9967']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.10495Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--577ff779-182a-4935-82e0-570066b7fdd6", "created": "2026-01-27T05:12:59.105777Z", "modified": "2026-01-27T05:12:59.105777Z", "relationship_type": "indicates", "source_ref": "indicator--25ccceda-3fa7-4278-b8aa-3cf1c4e222aa", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42867f3-8738-4eef-8c4e-5e5868a7663b", "created": "2026-01-27T05:12:59.105952Z", "modified": "2026-01-27T05:12:59.105952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0257b232b9293dd72ce7b8db1c460d54f7fb2b52e452a3dd639e1cd66e1dab9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.105952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29b57c99-3f59-4efb-9acd-f55326868d7d", "created": "2026-01-27T05:12:59.106777Z", "modified": "2026-01-27T05:12:59.106777Z", "relationship_type": "indicates", "source_ref": "indicator--c42867f3-8738-4eef-8c4e-5e5868a7663b", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179b0346-953f-437e-a59c-ef1380d6cbbd", "created": "2026-01-27T05:12:59.106958Z", "modified": "2026-01-27T05:12:59.106958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b183e8c52ad4b6ed725d0dc13c995ea8981b7d8e06578b1c00485a3a615003b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.106958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98bc0ab6-36fd-4531-af25-3e19dd6e3e02", "created": "2026-01-27T05:12:59.107782Z", "modified": "2026-01-27T05:12:59.107782Z", "relationship_type": "indicates", "source_ref": "indicator--179b0346-953f-437e-a59c-ef1380d6cbbd", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caca533-6c47-4439-a049-79f2a418ec82", "created": "2026-01-27T05:12:59.107962Z", "modified": "2026-01-27T05:12:59.107962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e1dc9a39d44f210312b5f9ef2c70f5857ca5522e056180b490c70fc7a27e7da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.107962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75619dc9-3484-4f73-a619-630c83013641", "created": "2026-01-27T05:12:59.108792Z", "modified": "2026-01-27T05:12:59.108792Z", "relationship_type": "indicates", "source_ref": "indicator--2caca533-6c47-4439-a049-79f2a418ec82", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88812b3a-62be-46eb-9167-c986b48f9732", "created": "2026-01-27T05:12:59.108971Z", "modified": "2026-01-27T05:12:59.108971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='163b206a7f9cc0e53b1a889b612090e1215535dee162be42bb09d4b47afde461']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.108971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbbdaa0b-d56e-425c-9016-cbbf1a050859", "created": "2026-01-27T05:12:59.109983Z", "modified": "2026-01-27T05:12:59.109983Z", "relationship_type": "indicates", "source_ref": "indicator--88812b3a-62be-46eb-9167-c986b48f9732", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56186bd-e4e9-48eb-8aa1-aa94123f3132", "created": "2026-01-27T05:12:59.110172Z", "modified": "2026-01-27T05:12:59.110172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c330a8c09c63297153a5cfcff81eb41712ed1c8da3c8c654e4443f17ae461da9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.110172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a4d7b24-bf96-40e0-aaa5-4e5dc555c16d", "created": "2026-01-27T05:12:59.111055Z", "modified": "2026-01-27T05:12:59.111055Z", "relationship_type": "indicates", "source_ref": "indicator--b56186bd-e4e9-48eb-8aa1-aa94123f3132", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8a6f42-a80c-4322-975d-e2337856e895", "created": "2026-01-27T05:12:59.111232Z", "modified": "2026-01-27T05:12:59.111232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2155b7bd208559e5839fe74feba9044ee4d548b6775b3cd49eda3fbd4fbc4b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.111232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2fd2866b-396d-4ffd-b2e4-06f9626be17a", "created": "2026-01-27T05:12:59.112069Z", "modified": "2026-01-27T05:12:59.112069Z", "relationship_type": "indicates", "source_ref": "indicator--5c8a6f42-a80c-4322-975d-e2337856e895", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd49e90-951d-4296-92da-2662c14303b4", "created": "2026-01-27T05:12:59.112245Z", "modified": "2026-01-27T05:12:59.112245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ddd56982c1c475a2f805bd9715147233aa8af24182f099bc9372235324719e9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.112245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d84a68f8-7fde-42d7-8b43-8dbdca91284b", "created": "2026-01-27T05:12:59.113089Z", "modified": "2026-01-27T05:12:59.113089Z", "relationship_type": "indicates", "source_ref": "indicator--ccd49e90-951d-4296-92da-2662c14303b4", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82b90c11-9a4f-4a8d-a7b5-26776d079b74", "created": "2026-01-27T05:12:59.113264Z", "modified": "2026-01-27T05:12:59.113264Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8cdf8f9864c7b47f61308681201eaf08a32d6de08b1b0a1c4219a541b580899']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.113264Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77acba0e-838a-4ff9-a480-41e53bc237a0", "created": "2026-01-27T05:12:59.114093Z", "modified": "2026-01-27T05:12:59.114093Z", "relationship_type": "indicates", "source_ref": "indicator--82b90c11-9a4f-4a8d-a7b5-26776d079b74", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9b34e3-b7e7-43f0-acbd-8dd768aeda5d", "created": "2026-01-27T05:12:59.114266Z", "modified": "2026-01-27T05:12:59.114266Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce378d29e5529337bdd4ae34220529c240a4f56f1bd6904559d34d0d21ab4443']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.114266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91d40a2c-ac02-42dd-b402-fef68b326fa3", "created": "2026-01-27T05:12:59.115113Z", "modified": "2026-01-27T05:12:59.115113Z", "relationship_type": "indicates", "source_ref": "indicator--6c9b34e3-b7e7-43f0-acbd-8dd768aeda5d", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab834b97-7c6a-4e02-8e1b-5d828211a6e3", "created": "2026-01-27T05:12:59.115289Z", "modified": "2026-01-27T05:12:59.115289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e690fbf9a7d02cf2430c7b323c09ba4e00ddccee1befd00c428bb89c9628ef37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.115289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1298e595-ce0c-421a-9cde-0026790211ed", "created": "2026-01-27T05:12:59.116139Z", "modified": "2026-01-27T05:12:59.116139Z", "relationship_type": "indicates", "source_ref": "indicator--ab834b97-7c6a-4e02-8e1b-5d828211a6e3", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b63fd0-7587-494b-b461-f7d7bf4403e3", "created": "2026-01-27T05:12:59.116315Z", "modified": "2026-01-27T05:12:59.116315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d836c14377dcd6bb9db88db2b0de8ea11bd9787390f8b46960d78836acccc207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.116315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb1472f9-cfe7-40bd-b2f3-ae9daebd9ad5", "created": "2026-01-27T05:12:59.117165Z", "modified": "2026-01-27T05:12:59.117165Z", "relationship_type": "indicates", "source_ref": "indicator--67b63fd0-7587-494b-b461-f7d7bf4403e3", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91eb07bb-3b63-4d9b-81b0-e566a7647a7c", "created": "2026-01-27T05:12:59.11734Z", "modified": "2026-01-27T05:12:59.11734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='364596f30e98e90233470aa5fb647fb57c412ac103bbf09ab63938e2dcfa8f35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.11734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a615142-acc7-4b90-9de4-81f208b6d63d", "created": "2026-01-27T05:12:59.118182Z", "modified": "2026-01-27T05:12:59.118182Z", "relationship_type": "indicates", "source_ref": "indicator--91eb07bb-3b63-4d9b-81b0-e566a7647a7c", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b828a8-ac1b-42fd-981b-17a3e4942cb4", "created": "2026-01-27T05:12:59.118355Z", "modified": "2026-01-27T05:12:59.118355Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d49a80d2fa2033c9cb7e1534b36f9632b9f19078c5bd81e16abb70cd4bf66d92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.118355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c47bd8f-8ff3-472b-aeba-02546768cbbf", "created": "2026-01-27T05:12:59.119355Z", "modified": "2026-01-27T05:12:59.119355Z", "relationship_type": "indicates", "source_ref": "indicator--08b828a8-ac1b-42fd-981b-17a3e4942cb4", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ba8c7-4594-478c-a706-2e5d411ecbe0", "created": "2026-01-27T05:12:59.119538Z", "modified": "2026-01-27T05:12:59.119538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78e35033a73beba28fe46725093fe91eb5839ca93d59e18b83edb63b85e53a8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.119538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35e7b4dc-1327-4f41-bd37-5015528fb13c", "created": "2026-01-27T05:12:59.120378Z", "modified": "2026-01-27T05:12:59.120378Z", "relationship_type": "indicates", "source_ref": "indicator--455ba8c7-4594-478c-a706-2e5d411ecbe0", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd9a5f4-870b-4db5-a671-d16dafdcfc68", "created": "2026-01-27T05:12:59.120556Z", "modified": "2026-01-27T05:12:59.120556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='217c1440567b34d8d37f2ae3f7a9166c5c4d0315ef912bea44c4e8e62c2e1db7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.120556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f27ff44-c9cf-485b-bbb0-0937bd0c4dea", "created": "2026-01-27T05:12:59.121384Z", "modified": "2026-01-27T05:12:59.121384Z", "relationship_type": "indicates", "source_ref": "indicator--edd9a5f4-870b-4db5-a671-d16dafdcfc68", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8907bf26-9f46-43a2-afa8-6788c95abc53", "created": "2026-01-27T05:12:59.121558Z", "modified": "2026-01-27T05:12:59.121558Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3122101efc547ef00c2a784526daef090db876148d36d5588bd6513b079ffa0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.121558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5096a9cb-9886-4d84-82f5-a0d77882e936", "created": "2026-01-27T05:12:59.122388Z", "modified": "2026-01-27T05:12:59.122388Z", "relationship_type": "indicates", "source_ref": "indicator--8907bf26-9f46-43a2-afa8-6788c95abc53", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad42b44-e8c7-4cfe-b1b5-a2dc8859ae63", "created": "2026-01-27T05:12:59.122562Z", "modified": "2026-01-27T05:12:59.122562Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59e3c677ba56be2f662346d707705a8ff3220e8f5f99d9a4b9f4fc650b41de88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.122562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccaff9da-1296-4749-b655-c537c13b4d35", "created": "2026-01-27T05:12:59.123401Z", "modified": "2026-01-27T05:12:59.123401Z", "relationship_type": "indicates", "source_ref": "indicator--3ad42b44-e8c7-4cfe-b1b5-a2dc8859ae63", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4f2c72-e094-4d4e-b291-123b51ddd1d8", "created": "2026-01-27T05:12:59.123578Z", "modified": "2026-01-27T05:12:59.123578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41b621292bd2d4fb7ec3f6928e65f85fdad647bd7c1687808be06dd8d76260ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.123578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2ea3d2d-a812-4358-91a5-f295c1c6fc2a", "created": "2026-01-27T05:12:59.124422Z", "modified": "2026-01-27T05:12:59.124422Z", "relationship_type": "indicates", "source_ref": "indicator--9d4f2c72-e094-4d4e-b291-123b51ddd1d8", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35468bc-7a65-44e1-9d02-edb364d4d98e", "created": "2026-01-27T05:12:59.124623Z", "modified": "2026-01-27T05:12:59.124623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a71b17d433953f3add4788c5a12e08af94a286c9464f219db4fcd7d13a115ade']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.124623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff771f51-e08d-4735-b664-d24133e50c29", "created": "2026-01-27T05:12:59.125499Z", "modified": "2026-01-27T05:12:59.125499Z", "relationship_type": "indicates", "source_ref": "indicator--a35468bc-7a65-44e1-9d02-edb364d4d98e", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ce91bf-f7ce-4156-af84-90759fd03408", "created": "2026-01-27T05:12:59.125678Z", "modified": "2026-01-27T05:12:59.125678Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.secure.smsgps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.125678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--496598e5-8bcc-42b1-84f7-97bdfd5704a6", "created": "2026-01-27T05:12:59.126352Z", "modified": "2026-01-27T05:12:59.126352Z", "relationship_type": "indicates", "source_ref": "indicator--18ce91bf-f7ce-4156-af84-90759fd03408", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c9e7fe-4a4b-42c8-84ef-ff193241f45f", "created": "2026-01-27T05:12:59.126535Z", "modified": "2026-01-27T05:12:59.126535Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.autoforward.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.126535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--355dc474-2aab-4398-9bf0-56ef44e50fc9", "created": "2026-01-27T05:12:59.127226Z", "modified": "2026-01-27T05:12:59.127226Z", "relationship_type": "indicates", "source_ref": "indicator--42c9e7fe-4a4b-42c8-84ef-ff193241f45f", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d612133-5f4d-4ca9-89c9-30e0c8bdc811", "created": "2026-01-27T05:12:59.127407Z", "modified": "2026-01-27T05:12:59.127407Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phonespector.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.127407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76e0ad05-050e-494c-830e-0b7b67b7cec8", "created": "2026-01-27T05:12:59.128213Z", "modified": "2026-01-27T05:12:59.128213Z", "relationship_type": "indicates", "source_ref": "indicator--3d612133-5f4d-4ca9-89c9-30e0c8bdc811", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df22d937-c52c-415a-82e0-3746760559eb", "created": "2026-01-27T05:12:59.128393Z", "modified": "2026-01-27T05:12:59.128393Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ddiutilities.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.128393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a4915eb-4fa3-4876-a414-b17b852c90b7", "created": "2026-01-27T05:12:59.129087Z", "modified": "2026-01-27T05:12:59.129087Z", "relationship_type": "indicates", "source_ref": "indicator--df22d937-c52c-415a-82e0-3746760559eb", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d7a071-486c-4b86-9221-7739f8e7240d", "created": "2026-01-27T05:12:59.129266Z", "modified": "2026-01-27T05:12:59.129266Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='683722A1C629AD5734B93E08ADFAA61775AD196F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.129266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f240e1f9-eaf0-4793-beba-ec9ab45cb660", "created": "2026-01-27T05:12:59.130057Z", "modified": "2026-01-27T05:12:59.130057Z", "relationship_type": "indicates", "source_ref": "indicator--b2d7a071-486c-4b86-9221-7739f8e7240d", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8709406-c8cc-44a3-ae3d-e4b724dde8c2", "created": "2026-01-27T05:12:59.130234Z", "modified": "2026-01-27T05:12:59.130234Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='48A2190050B80F31E1E3CCFAF9909FAD238D9849']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.130234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16c1b0b8-ca76-4f37-b75e-c711d2d5ba94", "created": "2026-01-27T05:12:59.131028Z", "modified": "2026-01-27T05:12:59.131028Z", "relationship_type": "indicates", "source_ref": "indicator--d8709406-c8cc-44a3-ae3d-e4b724dde8c2", "target_ref": "malware--129e9617-b0e5-4e8b-a089-b0daaa76b97d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441", "created": "2026-01-27T05:12:59.131211Z", "modified": "2026-01-27T05:12:59.131211Z", "name": "iMonitorSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dd57e7-deb7-4e82-95a1-8bfb5fcf97ea", "created": "2026-01-27T05:12:59.131388Z", "modified": "2026-01-27T05:12:59.131388Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitor-da8b2.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.131388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6595eef6-2c00-4634-8dee-574bf901839f", "created": "2026-01-27T05:12:59.132112Z", "modified": "2026-01-27T05:12:59.132112Z", "relationship_type": "indicates", "source_ref": "indicator--01dd57e7-deb7-4e82-95a1-8bfb5fcf97ea", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a14780-9a61-4331-bc73-fc691b4f443b", "created": "2026-01-27T05:12:59.13229Z", "modified": "2026-01-27T05:12:59.13229Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorke.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.13229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceb980de-334e-4de3-8575-ef5773f94197", "created": "2026-01-27T05:12:59.132976Z", "modified": "2026-01-27T05:12:59.132976Z", "relationship_type": "indicates", "source_ref": "indicator--15a14780-9a61-4331-bc73-fc691b4f443b", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e57201-0ef5-4903-8f1f-a7480d7f9dc2", "created": "2026-01-27T05:12:59.133156Z", "modified": "2026-01-27T05:12:59.133156Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.133156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abadbd24-8fee-4fb0-ab5d-f0dcf32a6eac", "created": "2026-01-27T05:12:59.133843Z", "modified": "2026-01-27T05:12:59.133843Z", "relationship_type": "indicates", "source_ref": "indicator--e2e57201-0ef5-4903-8f1f-a7480d7f9dc2", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61247d9a-f919-4e4d-8b23-a11090f7ad79", "created": "2026-01-27T05:12:59.134023Z", "modified": "2026-01-27T05:12:59.134023Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.134023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--410a87b7-08e1-4bfb-93fd-d1d405b2e9ef", "created": "2026-01-27T05:12:59.13469Z", "modified": "2026-01-27T05:12:59.13469Z", "relationship_type": "indicates", "source_ref": "indicator--61247d9a-f919-4e4d-8b23-a11090f7ad79", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb4ed56-bb59-4e97-898f-18dbd501b1df", "created": "2026-01-27T05:12:59.134887Z", "modified": "2026-01-27T05:12:59.134887Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.134887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62497065-d722-4dc0-b5a0-1ef8b4e54827", "created": "2026-01-27T05:12:59.135567Z", "modified": "2026-01-27T05:12:59.135567Z", "relationship_type": "indicates", "source_ref": "indicator--4fb4ed56-bb59-4e97-898f-18dbd501b1df", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641cf338-fcbd-4cf1-8e94-659e7efdf37c", "created": "2026-01-27T05:12:59.135767Z", "modified": "2026-01-27T05:12:59.135767Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.135767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d491d7d-4a86-4c02-9c4e-46fd05bd1570", "created": "2026-01-27T05:12:59.136572Z", "modified": "2026-01-27T05:12:59.136572Z", "relationship_type": "indicates", "source_ref": "indicator--641cf338-fcbd-4cf1-8e94-659e7efdf37c", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf471997-8d68-47d9-86ef-50b7521fc8a5", "created": "2026-01-27T05:12:59.136765Z", "modified": "2026-01-27T05:12:59.136765Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.136765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3805a07a-6930-4620-b75b-b9935173d0d1", "created": "2026-01-27T05:12:59.137446Z", "modified": "2026-01-27T05:12:59.137446Z", "relationship_type": "indicates", "source_ref": "indicator--cf471997-8d68-47d9-86ef-50b7521fc8a5", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3021ba-ac83-4c5e-b8f5-edc73426ef55", "created": "2026-01-27T05:12:59.137619Z", "modified": "2026-01-27T05:12:59.137619Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.imonitorsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.137619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9c2620b-485b-4460-ab4b-6bd7d63350e2", "created": "2026-01-27T05:12:59.13831Z", "modified": "2026-01-27T05:12:59.13831Z", "relationship_type": "indicates", "source_ref": "indicator--7c3021ba-ac83-4c5e-b8f5-edc73426ef55", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a84822b-c653-4f86-83db-b8ae9f6dbc03", "created": "2026-01-27T05:12:59.138486Z", "modified": "2026-01-27T05:12:59.138486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imonitorsoft.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.138486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c16ac6c9-c0d5-4b97-adaf-edb21f744465", "created": "2026-01-27T05:12:59.139171Z", "modified": "2026-01-27T05:12:59.139171Z", "relationship_type": "indicates", "source_ref": "indicator--3a84822b-c653-4f86-83db-b8ae9f6dbc03", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99ddb74-c192-43db-be11-b1dc9e19fc42", "created": "2026-01-27T05:12:59.139348Z", "modified": "2026-01-27T05:12:59.139348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf626709db2c441d78f3772cb53bf3ea2cdf1061b52a6fe938d2e7ec2c4b5551']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.139348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a1e4372-9552-4138-bb95-3680708c5110", "created": "2026-01-27T05:12:59.14019Z", "modified": "2026-01-27T05:12:59.14019Z", "relationship_type": "indicates", "source_ref": "indicator--c99ddb74-c192-43db-be11-b1dc9e19fc42", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6301083d-6472-4415-b539-93a8a07f2df5", "created": "2026-01-27T05:12:59.140365Z", "modified": "2026-01-27T05:12:59.140365Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78cb36cc9aba70bc902b3c8ba1b86c7a5d72b056fd624349bbd3fd972341aacf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.140365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24cb47db-6134-403a-9841-f849d6aa67d9", "created": "2026-01-27T05:12:59.14124Z", "modified": "2026-01-27T05:12:59.14124Z", "relationship_type": "indicates", "source_ref": "indicator--6301083d-6472-4415-b539-93a8a07f2df5", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee3cd32-40f6-4d24-861b-a2c583e304c7", "created": "2026-01-27T05:12:59.14142Z", "modified": "2026-01-27T05:12:59.14142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2b46db1c0f6c239965f0bd688de394c32e825c0d782f2bd9ef61b4e14bc0def']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.14142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c563720-1d0c-4003-b7d7-676e988b743d", "created": "2026-01-27T05:12:59.14226Z", "modified": "2026-01-27T05:12:59.14226Z", "relationship_type": "indicates", "source_ref": "indicator--5ee3cd32-40f6-4d24-861b-a2c583e304c7", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb2113c-fe88-45fe-b4e0-d22ea764e190", "created": "2026-01-27T05:12:59.142435Z", "modified": "2026-01-27T05:12:59.142435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48dc6a29b6e44f0dfb1b45fbe02f982ede42875e6faef744998aec67869e4f3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.142435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c2bcc0e-e980-4398-9d10-9673586b92f9", "created": "2026-01-27T05:12:59.143294Z", "modified": "2026-01-27T05:12:59.143294Z", "relationship_type": "indicates", "source_ref": "indicator--edb2113c-fe88-45fe-b4e0-d22ea764e190", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0779bb84-b608-40f3-a8c4-f05e2bbd12ab", "created": "2026-01-27T05:12:59.143474Z", "modified": "2026-01-27T05:12:59.143474Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.imonitor.ainfo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.143474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6782a30-eb50-437c-b15a-73da1ae95b24", "created": "2026-01-27T05:12:59.144165Z", "modified": "2026-01-27T05:12:59.144165Z", "relationship_type": "indicates", "source_ref": "indicator--0779bb84-b608-40f3-a8c4-f05e2bbd12ab", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcafcab-c327-44b4-84ec-c88d83851f17", "created": "2026-01-27T05:12:59.144345Z", "modified": "2026-01-27T05:12:59.144345Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='inc.imonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.144345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0e5ad49-8642-4555-83b1-ad1902842b4e", "created": "2026-01-27T05:12:59.145151Z", "modified": "2026-01-27T05:12:59.145151Z", "relationship_type": "indicates", "source_ref": "indicator--0fcafcab-c327-44b4-84ec-c88d83851f17", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3ca46f-6b25-4081-b9de-2b7abd261380", "created": "2026-01-27T05:12:59.14533Z", "modified": "2026-01-27T05:12:59.14533Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3EA68714AE224B0C0EEED64A14B11D3983C3D6F8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.14533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37cd9069-d048-43f0-be40-3db1c0d40583", "created": "2026-01-27T05:12:59.146115Z", "modified": "2026-01-27T05:12:59.146115Z", "relationship_type": "indicates", "source_ref": "indicator--7d3ca46f-6b25-4081-b9de-2b7abd261380", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9605dc76-3ddd-4991-81ba-96d616563f33", "created": "2026-01-27T05:12:59.146294Z", "modified": "2026-01-27T05:12:59.146294Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BFC4C15E35E3506095B42E2B428E4016B1FFA1AB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.146294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9dc7b72-24b2-4958-8b13-8b02f19c80eb", "created": "2026-01-27T05:12:59.147076Z", "modified": "2026-01-27T05:12:59.147076Z", "relationship_type": "indicates", "source_ref": "indicator--9605dc76-3ddd-4991-81ba-96d616563f33", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb626a9c-7c3f-4236-8483-8554d5623708", "created": "2026-01-27T05:12:59.147251Z", "modified": "2026-01-27T05:12:59.147251Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5C5EF3DFE98B02251A6EC82609F22A092562AFEE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.147251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf1a3b14-e874-43d3-b8b0-03dd5f4fea96", "created": "2026-01-27T05:12:59.148036Z", "modified": "2026-01-27T05:12:59.148036Z", "relationship_type": "indicates", "source_ref": "indicator--eb626a9c-7c3f-4236-8483-8554d5623708", "target_ref": "malware--bc88403a-44ed-4a9b-ada0-6cb492b61441"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5", "created": "2026-01-27T05:12:59.14821Z", "modified": "2026-01-27T05:12:59.14821Z", "name": "MobileTool", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bedba912-3d29-49b0-93ed-35a29650241e", "created": "2026-01-27T05:12:59.148381Z", "modified": "2026-01-27T05:12:59.148381Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='6kvses.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.148381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14f0bb6c-f07c-49b3-8bcb-a0ffffef207a", "created": "2026-01-27T05:12:59.149059Z", "modified": "2026-01-27T05:12:59.149059Z", "relationship_type": "indicates", "source_ref": "indicator--bedba912-3d29-49b0-93ed-35a29650241e", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a854aa2e-bc84-4f6b-a045-16b194b61672", "created": "2026-01-27T05:12:59.149235Z", "modified": "2026-01-27T05:12:59.149235Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bincdi.6kvses.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.149235Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6a92e96-ba83-42ba-a3c7-b5ea07603198", "created": "2026-01-27T05:12:59.149938Z", "modified": "2026-01-27T05:12:59.149938Z", "relationship_type": "indicates", "source_ref": "indicator--a854aa2e-bc84-4f6b-a045-16b194b61672", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a4c968-f6d9-492a-b886-764298d8f50d", "created": "2026-01-27T05:12:59.150113Z", "modified": "2026-01-27T05:12:59.150113Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bincdi.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.150113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88ceb752-4268-4a7b-8082-5e676e85a0d2", "created": "2026-01-27T05:12:59.150807Z", "modified": "2026-01-27T05:12:59.150807Z", "relationship_type": "indicates", "source_ref": "indicator--f9a4c968-f6d9-492a-b886-764298d8f50d", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8370cd0-ba00-4f70-8069-f7405b013847", "created": "2026-01-27T05:12:59.150987Z", "modified": "2026-01-27T05:12:59.150987Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.150987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff29cec5-73ec-4ad6-87a8-6a1f838ace46", "created": "2026-01-27T05:12:59.151653Z", "modified": "2026-01-27T05:12:59.151653Z", "relationship_type": "indicates", "source_ref": "indicator--a8370cd0-ba00-4f70-8069-f7405b013847", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c81c38-4120-436d-8c01-d036759344f5", "created": "2026-01-27T05:12:59.151845Z", "modified": "2026-01-27T05:12:59.151845Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dz7.wethnc067.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.151845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac9f84bb-2722-455d-8b52-6a6add43453d", "created": "2026-01-27T05:12:59.15251Z", "modified": "2026-01-27T05:12:59.15251Z", "relationship_type": "indicates", "source_ref": "indicator--f3c81c38-4120-436d-8c01-d036759344f5", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00906625-1e4d-431f-8c6e-165876692d58", "created": "2026-01-27T05:12:59.152688Z", "modified": "2026-01-27T05:12:59.152688Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hzdy.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.152688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68ab5337-5b97-4bd8-9a66-ed27a7969c4c", "created": "2026-01-27T05:12:59.153551Z", "modified": "2026-01-27T05:12:59.153551Z", "relationship_type": "indicates", "source_ref": "indicator--00906625-1e4d-431f-8c6e-165876692d58", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a2e66c-b25a-418b-8c53-55263a1abb9c", "created": "2026-01-27T05:12:59.153725Z", "modified": "2026-01-27T05:12:59.153725Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ixhtb.s9gxw8.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.153725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a056112c-68fe-4ecc-8fc5-ca2357b938a9", "created": "2026-01-27T05:12:59.154459Z", "modified": "2026-01-27T05:12:59.154459Z", "relationship_type": "indicates", "source_ref": "indicator--42a2e66c-b25a-418b-8c53-55263a1abb9c", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1818c1f4-a9dd-4fa7-bfc0-af6ac7534c18", "created": "2026-01-27T05:12:59.154641Z", "modified": "2026-01-27T05:12:59.154641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kvshdi.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.154641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1227723-ad23-49da-b93f-1e2addf2c3ee", "created": "2026-01-27T05:12:59.155336Z", "modified": "2026-01-27T05:12:59.155336Z", "relationship_type": "indicates", "source_ref": "indicator--1818c1f4-a9dd-4fa7-bfc0-af6ac7534c18", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6562e762-dfe4-42a7-8398-ea35c77229be", "created": "2026-01-27T05:12:59.155512Z", "modified": "2026-01-27T05:12:59.155512Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.155512Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18c36b5b-36a1-4a30-94dc-ba996b90338b", "created": "2026-01-27T05:12:59.156196Z", "modified": "2026-01-27T05:12:59.156196Z", "relationship_type": "indicates", "source_ref": "indicator--6562e762-dfe4-42a7-8398-ea35c77229be", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da37538-404a-4053-aa06-8b792d3b6c10", "created": "2026-01-27T05:12:59.156372Z", "modified": "2026-01-27T05:12:59.156372Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mrswd.wo87sf.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.156372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6655a91d-6768-458b-9eb4-10fc4a671a5b", "created": "2026-01-27T05:12:59.157104Z", "modified": "2026-01-27T05:12:59.157104Z", "relationship_type": "indicates", "source_ref": "indicator--2da37538-404a-4053-aa06-8b792d3b6c10", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d8fd16-5680-4a22-aba8-5708c4e67f29", "created": "2026-01-27T05:12:59.157292Z", "modified": "2026-01-27T05:12:59.157292Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.157292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73f30a09-87fe-4866-b5b6-80420b83ca9e", "created": "2026-01-27T05:12:59.157976Z", "modified": "2026-01-27T05:12:59.157976Z", "relationship_type": "indicates", "source_ref": "indicator--c1d8fd16-5680-4a22-aba8-5708c4e67f29", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d006556a-d4e9-4889-bd8c-4e93345d3fdd", "created": "2026-01-27T05:12:59.15815Z", "modified": "2026-01-27T05:12:59.15815Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.15815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78b886d1-d4e6-4c62-910d-c265ea567c1b", "created": "2026-01-27T05:12:59.158828Z", "modified": "2026-01-27T05:12:59.158828Z", "relationship_type": "indicates", "source_ref": "indicator--d006556a-d4e9-4889-bd8c-4e93345d3fdd", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d1af2b-8c97-4a3c-8d11-48f7a0e26cd0", "created": "2026-01-27T05:12:59.159014Z", "modified": "2026-01-27T05:12:59.159014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.159014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e407f5df-72fa-4aa1-ad8d-c1b27bff7077", "created": "2026-01-27T05:12:59.159675Z", "modified": "2026-01-27T05:12:59.159675Z", "relationship_type": "indicates", "source_ref": "indicator--e6d1af2b-8c97-4a3c-8d11-48f7a0e26cd0", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d229bf-af4f-4610-85a8-ed7ff1aeeb69", "created": "2026-01-27T05:12:59.159871Z", "modified": "2026-01-27T05:12:59.159871Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.159871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51ae705c-2288-4624-8b57-9df9b90e2e18", "created": "2026-01-27T05:12:59.160555Z", "modified": "2026-01-27T05:12:59.160555Z", "relationship_type": "indicates", "source_ref": "indicator--53d229bf-af4f-4610-85a8-ed7ff1aeeb69", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cec0a9-0a97-4d45-997b-35b83459e4fb", "created": "2026-01-27T05:12:59.160733Z", "modified": "2026-01-27T05:12:59.160733Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mzpgfh.uhabq9.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.160733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76b987dc-7aa9-45f8-af1a-d2865568d03d", "created": "2026-01-27T05:12:59.161555Z", "modified": "2026-01-27T05:12:59.161555Z", "relationship_type": "indicates", "source_ref": "indicator--c9cec0a9-0a97-4d45-997b-35b83459e4fb", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b657fdf-eda8-4cdc-9983-32a563128032", "created": "2026-01-27T05:12:59.161729Z", "modified": "2026-01-27T05:12:59.161729Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='noujx.s9gxw8.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.161729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a18f1f6d-3644-4cac-8b94-502970ddf152", "created": "2026-01-27T05:12:59.162411Z", "modified": "2026-01-27T05:12:59.162411Z", "relationship_type": "indicates", "source_ref": "indicator--0b657fdf-eda8-4cdc-9983-32a563128032", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d206a6a3-b7d2-4003-9a24-24b0a368dd71", "created": "2026-01-27T05:12:59.162582Z", "modified": "2026-01-27T05:12:59.162582Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s9gxw8.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.162582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb1600d2-a037-4dba-b065-3f8f43933572", "created": "2026-01-27T05:12:59.163255Z", "modified": "2026-01-27T05:12:59.163255Z", "relationship_type": "indicates", "source_ref": "indicator--d206a6a3-b7d2-4003-9a24-24b0a368dd71", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131f51f5-3726-4523-b51a-c482ef8722c8", "created": "2026-01-27T05:12:59.163428Z", "modified": "2026-01-27T05:12:59.163428Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.mtoolapp.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.163428Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--962bd86e-3bd0-4f6d-84ed-f01f8afbdbf0", "created": "2026-01-27T05:12:59.164127Z", "modified": "2026-01-27T05:12:59.164127Z", "relationship_type": "indicates", "source_ref": "indicator--131f51f5-3726-4523-b51a-c482ef8722c8", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4cfa10-f627-494f-914f-8f584252070f", "created": "2026-01-27T05:12:59.164301Z", "modified": "2026-01-27T05:12:59.164301Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ug1c5v.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.164301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1975ee8-3f3b-4907-b3e6-8f23d2276c01", "created": "2026-01-27T05:12:59.164993Z", "modified": "2026-01-27T05:12:59.164993Z", "relationship_type": "indicates", "source_ref": "indicator--5a4cfa10-f627-494f-914f-8f584252070f", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbc9bed-0dc2-4421-8a7e-fc06a5e18afc", "created": "2026-01-27T05:12:59.16517Z", "modified": "2026-01-27T05:12:59.16517Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wethnc067.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.16517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29669326-0e9c-4cfc-a6c7-21e5fd3df1b5", "created": "2026-01-27T05:12:59.165859Z", "modified": "2026-01-27T05:12:59.165859Z", "relationship_type": "indicates", "source_ref": "indicator--fbbc9bed-0dc2-4421-8a7e-fc06a5e18afc", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788b6cdd-ac37-44f8-9acc-2e9ffa6385a4", "created": "2026-01-27T05:12:59.166031Z", "modified": "2026-01-27T05:12:59.166031Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.166031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e70f70b3-6786-47e5-8083-41f895d9405e", "created": "2026-01-27T05:12:59.166695Z", "modified": "2026-01-27T05:12:59.166695Z", "relationship_type": "indicates", "source_ref": "indicator--788b6cdd-ac37-44f8-9acc-2e9ffa6385a4", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92002ec9-9c7a-496f-9d13-38962f24b045", "created": "2026-01-27T05:12:59.166884Z", "modified": "2026-01-27T05:12:59.166884Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xmyevq.birxpk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.166884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73f90caf-1eb3-446e-a59f-86052d3cf400", "created": "2026-01-27T05:12:59.167568Z", "modified": "2026-01-27T05:12:59.167568Z", "relationship_type": "indicates", "source_ref": "indicator--92002ec9-9c7a-496f-9d13-38962f24b045", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90de660f-8aba-447b-9e7d-f6c187ed2718", "created": "2026-01-27T05:12:59.167763Z", "modified": "2026-01-27T05:12:59.167763Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.167763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--871a0a5e-ddea-4e33-80d1-a5ec771f168d", "created": "2026-01-27T05:12:59.168429Z", "modified": "2026-01-27T05:12:59.168429Z", "relationship_type": "indicates", "source_ref": "indicator--90de660f-8aba-447b-9e7d-f6c187ed2718", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac58a70-dd47-439c-abf4-9aea84b4474c", "created": "2026-01-27T05:12:59.168601Z", "modified": "2026-01-27T05:12:59.168601Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobiletool.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.168601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf9ea745-fbc5-40ef-b99c-8d398332fb76", "created": "2026-01-27T05:12:59.169393Z", "modified": "2026-01-27T05:12:59.169393Z", "relationship_type": "indicates", "source_ref": "indicator--1ac58a70-dd47-439c-abf4-9aea84b4474c", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c627b213-3624-4ffb-aefa-f1bf667ef22c", "created": "2026-01-27T05:12:59.169569Z", "modified": "2026-01-27T05:12:59.169569Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.169569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e2b780-fc68-405e-85b7-2a4c9ba084e7", "created": "2026-01-27T05:12:59.170239Z", "modified": "2026-01-27T05:12:59.170239Z", "relationship_type": "indicates", "source_ref": "indicator--c627b213-3624-4ffb-aefa-f1bf667ef22c", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cdf79e-492e-4e4e-88e9-ea17ae81363c", "created": "2026-01-27T05:12:59.170415Z", "modified": "2026-01-27T05:12:59.170415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mtoolapp.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.170415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb2c5d0e-08ba-4846-93b4-f084534f2e30", "created": "2026-01-27T05:12:59.171096Z", "modified": "2026-01-27T05:12:59.171096Z", "relationship_type": "indicates", "source_ref": "indicator--64cdf79e-492e-4e4e-88e9-ea17ae81363c", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32eab2a1-30cf-4bc1-882e-f6985a27c4e9", "created": "2026-01-27T05:12:59.171271Z", "modified": "2026-01-27T05:12:59.171271Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtoolapp.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.171271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--158a3512-d1d5-49c6-86fd-394dad70cb1a", "created": "2026-01-27T05:12:59.17195Z", "modified": "2026-01-27T05:12:59.17195Z", "relationship_type": "indicates", "source_ref": "indicator--32eab2a1-30cf-4bc1-882e-f6985a27c4e9", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cb0b0e-a093-4877-9ad1-f4cec99b1bf9", "created": "2026-01-27T05:12:59.172124Z", "modified": "2026-01-27T05:12:59.172124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c00914e230123a5a9bf28b602a4231c8f594abeb72e224f7c004a13f454022b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.172124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37027c2a-5143-4fe8-a3e6-8666dd546da5", "created": "2026-01-27T05:12:59.173045Z", "modified": "2026-01-27T05:12:59.173045Z", "relationship_type": "indicates", "source_ref": "indicator--80cb0b0e-a093-4877-9ad1-f4cec99b1bf9", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540fc5e6-4d6b-4c84-87b7-2c7b130de9b1", "created": "2026-01-27T05:12:59.173228Z", "modified": "2026-01-27T05:12:59.173228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e192a106795784bcf53eb7a30c35b0b09225419821f2a3ef247f48ee460ca93f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.173228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69c703c3-b8ce-4183-a87c-3571155c8662", "created": "2026-01-27T05:12:59.174101Z", "modified": "2026-01-27T05:12:59.174101Z", "relationship_type": "indicates", "source_ref": "indicator--540fc5e6-4d6b-4c84-87b7-2c7b130de9b1", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18490b18-0275-4e9b-be25-7ce0b5cb1748", "created": "2026-01-27T05:12:59.174283Z", "modified": "2026-01-27T05:12:59.174283Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='688787f02a05bd757b1a42a1c1e3d738b79a86bb25e55d9d0840ac81b20181c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.174283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7f1e93a-428e-4bdd-bbf9-dd27cae42b9d", "created": "2026-01-27T05:12:59.17516Z", "modified": "2026-01-27T05:12:59.17516Z", "relationship_type": "indicates", "source_ref": "indicator--18490b18-0275-4e9b-be25-7ce0b5cb1748", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5677801-005f-4091-8643-a5aa43824ecb", "created": "2026-01-27T05:12:59.175337Z", "modified": "2026-01-27T05:12:59.175337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae7031250999ea1691ae338a68a019cf3b94b8ffa8cc4543c35871329a266c82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.175337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56b56552-6158-40db-b7ea-5aec34adcdf6", "created": "2026-01-27T05:12:59.176175Z", "modified": "2026-01-27T05:12:59.176175Z", "relationship_type": "indicates", "source_ref": "indicator--a5677801-005f-4091-8643-a5aa43824ecb", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bced82-7f38-4219-ad90-91d74bd77d53", "created": "2026-01-27T05:12:59.176353Z", "modified": "2026-01-27T05:12:59.176353Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e903cfbb68be63c44d9d24bc5540133f2b24b6231c79a1b472a6d7d738852346']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.176353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--335ff983-97c2-42f1-8bd9-11c3fb0dbb51", "created": "2026-01-27T05:12:59.177201Z", "modified": "2026-01-27T05:12:59.177201Z", "relationship_type": "indicates", "source_ref": "indicator--c6bced82-7f38-4219-ad90-91d74bd77d53", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b2a67c-05c2-4188-a542-f78f5fc8ac36", "created": "2026-01-27T05:12:59.177382Z", "modified": "2026-01-27T05:12:59.177382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f62c540f21d26f0330abc1decf13ae06b12ec884d0530173b86ead1d8ae9a1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.177382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb5f224f-3dd3-4f33-b3ed-b958e938f83e", "created": "2026-01-27T05:12:59.178369Z", "modified": "2026-01-27T05:12:59.178369Z", "relationship_type": "indicates", "source_ref": "indicator--b7b2a67c-05c2-4188-a542-f78f5fc8ac36", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cf961e-86d7-4e98-98db-d92e32956f45", "created": "2026-01-27T05:12:59.178546Z", "modified": "2026-01-27T05:12:59.178546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89367091e3404fe46f5e500442eec0169c56b31e8a03438aaf41387ee44fb6fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.178546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfb6da99-def2-4169-ba5f-74150a32a3fc", "created": "2026-01-27T05:12:59.179382Z", "modified": "2026-01-27T05:12:59.179382Z", "relationship_type": "indicates", "source_ref": "indicator--d2cf961e-86d7-4e98-98db-d92e32956f45", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6489ec1-f5b7-4358-88bc-3ec14229de82", "created": "2026-01-27T05:12:59.179566Z", "modified": "2026-01-27T05:12:59.179566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2aaff9b722c64fbf1a14f321121ed6f048f6355178ae8ef432660bd8f63ad06f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.179566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd3c0cac-a21a-4200-ac48-b170e7ef6eaa", "created": "2026-01-27T05:12:59.180404Z", "modified": "2026-01-27T05:12:59.180404Z", "relationship_type": "indicates", "source_ref": "indicator--c6489ec1-f5b7-4358-88bc-3ec14229de82", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebf056f-f528-411e-b95c-31c031e8761b", "created": "2026-01-27T05:12:59.180579Z", "modified": "2026-01-27T05:12:59.180579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e96ed84d650d4f2dd427674b4466c0abe816fcb14c336c14fc52333222fd848']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.180579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a29ce737-3ae8-4b35-b3db-a9d683083226", "created": "2026-01-27T05:12:59.181417Z", "modified": "2026-01-27T05:12:59.181417Z", "relationship_type": "indicates", "source_ref": "indicator--eebf056f-f528-411e-b95c-31c031e8761b", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97187c2-2e08-40fe-8be1-fe29aa55a980", "created": "2026-01-27T05:12:59.181603Z", "modified": "2026-01-27T05:12:59.181603Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2974b2985779df9d6f7d6ad3a990b9db697f3e12cf1be764840097dc2263b0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.181603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9005c5f6-65d2-45e8-81bc-b6f6f580cf7c", "created": "2026-01-27T05:12:59.18246Z", "modified": "2026-01-27T05:12:59.18246Z", "relationship_type": "indicates", "source_ref": "indicator--b97187c2-2e08-40fe-8be1-fe29aa55a980", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36df43e-2d70-4c21-8bfc-a537a31610e2", "created": "2026-01-27T05:12:59.182645Z", "modified": "2026-01-27T05:12:59.182645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c55f8061468d7f1f59283c966c35615c3a5840ef0e868208ff2ae260fb90c497']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.182645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8765a6c-174c-48fc-a748-d65432bfee96", "created": "2026-01-27T05:12:59.18354Z", "modified": "2026-01-27T05:12:59.18354Z", "relationship_type": "indicates", "source_ref": "indicator--c36df43e-2d70-4c21-8bfc-a537a31610e2", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c3c28b-666b-47da-a624-d354163b5f3e", "created": "2026-01-27T05:12:59.183727Z", "modified": "2026-01-27T05:12:59.183727Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='834796b0ff9ddf5275cec0843e6886dcea174ee185dbd0e2bb0c9cd7485be06c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.183727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86f77596-e00a-4af0-b9c8-c2d2377c7f60", "created": "2026-01-27T05:12:59.184561Z", "modified": "2026-01-27T05:12:59.184561Z", "relationship_type": "indicates", "source_ref": "indicator--44c3c28b-666b-47da-a624-d354163b5f3e", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1c491c-47da-427b-ab2b-9f9c87b31dc9", "created": "2026-01-27T05:12:59.184762Z", "modified": "2026-01-27T05:12:59.184762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc3b974977486f4706e23d935a6d58a2708d48d2c88e4a5d8213daf4585509ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.184762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d293928-0486-4a6b-b926-6c673f8be010", "created": "2026-01-27T05:12:59.185618Z", "modified": "2026-01-27T05:12:59.185618Z", "relationship_type": "indicates", "source_ref": "indicator--cc1c491c-47da-427b-ab2b-9f9c87b31dc9", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db5e7a5-3e5d-43c0-9280-2d0d140d1d82", "created": "2026-01-27T05:12:59.185807Z", "modified": "2026-01-27T05:12:59.185807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='30162c493f80446c61aef3bb7a1584ebd8f587a7962cdf61fd949e208bffcbfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.185807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91b5a9dc-338a-469e-873b-e910fb261f60", "created": "2026-01-27T05:12:59.186632Z", "modified": "2026-01-27T05:12:59.186632Z", "relationship_type": "indicates", "source_ref": "indicator--7db5e7a5-3e5d-43c0-9280-2d0d140d1d82", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f882b6e7-a34b-446b-a2ed-e609fa22763f", "created": "2026-01-27T05:12:59.186821Z", "modified": "2026-01-27T05:12:59.186821Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7a3a7f1fbd7c428f1dc8c913234d8c486950d9c61f41a411f7efc6b467203dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.186821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77a91f8f-da71-41d2-a222-c1dd6b9050fc", "created": "2026-01-27T05:12:59.188167Z", "modified": "2026-01-27T05:12:59.188167Z", "relationship_type": "indicates", "source_ref": "indicator--f882b6e7-a34b-446b-a2ed-e609fa22763f", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb76dfe3-17f9-44a2-b588-b785c1f60973", "created": "2026-01-27T05:12:59.188347Z", "modified": "2026-01-27T05:12:59.188347Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b21d5f9bff20271cb69f4c228d0cf57e8ae5acc6d7af11eabb77ccf3b6cb4bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.188347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77f11e09-ea73-4c23-87c5-7ee759f1a9f9", "created": "2026-01-27T05:12:59.189271Z", "modified": "2026-01-27T05:12:59.189271Z", "relationship_type": "indicates", "source_ref": "indicator--cb76dfe3-17f9-44a2-b588-b785c1f60973", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4156812-2eb2-4a8f-8e0e-589b8f8a0a30", "created": "2026-01-27T05:12:59.189479Z", "modified": "2026-01-27T05:12:59.189479Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.poleward.burghs.hydrotherapy.homonymously']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.189479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f18a9f8-0356-42e1-ac2b-57dd0ab4fe00", "created": "2026-01-27T05:12:59.190225Z", "modified": "2026-01-27T05:12:59.190225Z", "relationship_type": "indicates", "source_ref": "indicator--f4156812-2eb2-4a8f-8e0e-589b8f8a0a30", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd805bd-1aeb-4772-a445-b4d8790a6d72", "created": "2026-01-27T05:12:59.190403Z", "modified": "2026-01-27T05:12:59.190403Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.urates.amirates.suffocate.chiliast']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.190403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39dc2719-a7f8-43a5-99b5-3e7d7e72ce92", "created": "2026-01-27T05:12:59.191102Z", "modified": "2026-01-27T05:12:59.191102Z", "relationship_type": "indicates", "source_ref": "indicator--6fd805bd-1aeb-4772-a445-b4d8790a6d72", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a7c805-f3c8-450d-a940-870e35515ed8", "created": "2026-01-27T05:12:59.191278Z", "modified": "2026-01-27T05:12:59.191278Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.connecting.updived.hygeist.interplays']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.191278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fadc53e4-05ef-4d48-ba35-57c8c86b2984", "created": "2026-01-27T05:12:59.191977Z", "modified": "2026-01-27T05:12:59.191977Z", "relationship_type": "indicates", "source_ref": "indicator--17a7c805-f3c8-450d-a940-870e35515ed8", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8a3804-30fc-4714-8228-6af54360006c", "created": "2026-01-27T05:12:59.192152Z", "modified": "2026-01-27T05:12:59.192152Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E9B3E5190F64BA9A952B7F57942AA21FFDA50BA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.192152Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--491eb47a-2e0a-481e-9308-60cd0aacdc8d", "created": "2026-01-27T05:12:59.192938Z", "modified": "2026-01-27T05:12:59.192938Z", "relationship_type": "indicates", "source_ref": "indicator--fe8a3804-30fc-4714-8228-6af54360006c", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162803bf-1b39-4498-8f26-bc89c184a16b", "created": "2026-01-27T05:12:59.193115Z", "modified": "2026-01-27T05:12:59.193115Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7F11358AC560C5E90B735A21B907F1C8143353DF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.193115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1355c224-d225-4e59-9d60-15c44a084ab2", "created": "2026-01-27T05:12:59.193894Z", "modified": "2026-01-27T05:12:59.193894Z", "relationship_type": "indicates", "source_ref": "indicator--162803bf-1b39-4498-8f26-bc89c184a16b", "target_ref": "malware--8ce8cec3-5ded-4292-86d9-011a4963c0b5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e", "created": "2026-01-27T05:12:59.194069Z", "modified": "2026-01-27T05:12:59.194069Z", "name": "ShadowSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d186ba-cfce-4069-ab86-b26f96b4adcc", "created": "2026-01-27T05:12:59.194244Z", "modified": "2026-01-27T05:12:59.194244Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='runaki-support.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.194244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3996eeea-26fc-4620-b91c-7f0662441540", "created": "2026-01-27T05:12:59.194955Z", "modified": "2026-01-27T05:12:59.194955Z", "relationship_type": "indicates", "source_ref": "indicator--64d186ba-cfce-4069-ab86-b26f96b4adcc", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cab7d5-1ae6-480c-808e-689b84a25e9e", "created": "2026-01-27T05:12:59.195133Z", "modified": "2026-01-27T05:12:59.195133Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.195133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7f3b0d-ed5e-40b8-9295-2acc34ea3679", "created": "2026-01-27T05:12:59.195815Z", "modified": "2026-01-27T05:12:59.195815Z", "relationship_type": "indicates", "source_ref": "indicator--03cab7d5-1ae6-480c-808e-689b84a25e9e", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea7d8b9-11ca-4f6f-bfb3-98fd936343ef", "created": "2026-01-27T05:12:59.195992Z", "modified": "2026-01-27T05:12:59.195992Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.195992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3b84147-f608-4046-b53f-40043ae15363", "created": "2026-01-27T05:12:59.196809Z", "modified": "2026-01-27T05:12:59.196809Z", "relationship_type": "indicates", "source_ref": "indicator--1ea7d8b9-11ca-4f6f-bfb3-98fd936343ef", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ece6b6-3327-4adc-afb9-39ce5556abd2", "created": "2026-01-27T05:12:59.196988Z", "modified": "2026-01-27T05:12:59.196988Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadowappbundle-default-rtdb.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.196988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d8695e2-ac7c-46e1-986b-f4ac3b3756b8", "created": "2026-01-27T05:12:59.197699Z", "modified": "2026-01-27T05:12:59.197699Z", "relationship_type": "indicates", "source_ref": "indicator--76ece6b6-3327-4adc-afb9-39ce5556abd2", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31642765-b7d1-4d80-8842-d53ad6254b36", "created": "2026-01-27T05:12:59.197901Z", "modified": "2026-01-27T05:12:59.197901Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadowlogspanel.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.197901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06347793-5d42-4a84-9e7c-dc7de2d723a4", "created": "2026-01-27T05:12:59.198607Z", "modified": "2026-01-27T05:12:59.198607Z", "relationship_type": "indicates", "source_ref": "indicator--31642765-b7d1-4d80-8842-d53ad6254b36", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3004bd8c-e89a-45e5-b53d-dbca1e8d390b", "created": "2026-01-27T05:12:59.198808Z", "modified": "2026-01-27T05:12:59.198808Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.198808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12820d1b-5a66-4428-8218-2c0ed13875b0", "created": "2026-01-27T05:12:59.199482Z", "modified": "2026-01-27T05:12:59.199482Z", "relationship_type": "indicates", "source_ref": "indicator--3004bd8c-e89a-45e5-b53d-dbca1e8d390b", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54678345-48db-422f-9eb1-74e64e3d1712", "created": "2026-01-27T05:12:59.199656Z", "modified": "2026-01-27T05:12:59.199656Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.199656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83461119-5b3f-475f-bd02-f97daa49fc03", "created": "2026-01-27T05:12:59.200337Z", "modified": "2026-01-27T05:12:59.200337Z", "relationship_type": "indicates", "source_ref": "indicator--54678345-48db-422f-9eb1-74e64e3d1712", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a83451-351f-44f6-8ec6-5ee93cddb1a8", "created": "2026-01-27T05:12:59.200508Z", "modified": "2026-01-27T05:12:59.200508Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.200508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33c261ab-15a1-457a-887e-13b3f8ca53a4", "created": "2026-01-27T05:12:59.201194Z", "modified": "2026-01-27T05:12:59.201194Z", "relationship_type": "indicates", "source_ref": "indicator--84a83451-351f-44f6-8ec6-5ee93cddb1a8", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51c8214-c758-42d0-a022-10e7346f5e28", "created": "2026-01-27T05:12:59.20137Z", "modified": "2026-01-27T05:12:59.20137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadow-logs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.20137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2530010d-a0be-4738-86cd-990323f8e72a", "created": "2026-01-27T05:12:59.202073Z", "modified": "2026-01-27T05:12:59.202073Z", "relationship_type": "indicates", "source_ref": "indicator--e51c8214-c758-42d0-a022-10e7346f5e28", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7493750d-81d5-4a76-87d2-663209bdf297", "created": "2026-01-27T05:12:59.202251Z", "modified": "2026-01-27T05:12:59.202251Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.202251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8b3bc97-64ec-4e0a-8542-02fc3e4c6eb6", "created": "2026-01-27T05:12:59.202979Z", "modified": "2026-01-27T05:12:59.202979Z", "relationship_type": "indicates", "source_ref": "indicator--7493750d-81d5-4a76-87d2-663209bdf297", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b556f164-e12e-43ae-93a5-94a4cdbb3432", "created": "2026-01-27T05:12:59.203158Z", "modified": "2026-01-27T05:12:59.203158Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='downloads.shadow-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.203158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af661970-3f54-4fa1-b083-ccf0e92af991", "created": "2026-01-27T05:12:59.203868Z", "modified": "2026-01-27T05:12:59.203868Z", "relationship_type": "indicates", "source_ref": "indicator--b556f164-e12e-43ae-93a5-94a4cdbb3432", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e24bd14-7a0c-4237-a91a-a1e18eeaaa81", "created": "2026-01-27T05:12:59.20405Z", "modified": "2026-01-27T05:12:59.20405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ef2e208a4634ae90c6f36c0995ee3f90b43d4968795d18f2a68192b78a72601']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.20405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--760b1bf7-f88c-444c-bc58-b7d1440f39ef", "created": "2026-01-27T05:12:59.205063Z", "modified": "2026-01-27T05:12:59.205063Z", "relationship_type": "indicates", "source_ref": "indicator--0e24bd14-7a0c-4237-a91a-a1e18eeaaa81", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897055a5-6fb9-4576-a095-702f51d9bcea", "created": "2026-01-27T05:12:59.205246Z", "modified": "2026-01-27T05:12:59.205246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa3f65dbe91cc87d3a2deb040cecb13397a169f7e5d6ddc9b622b69cfbc1c41d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.205246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--511a48eb-7a4f-4ace-9ded-9f113b4dfeae", "created": "2026-01-27T05:12:59.206092Z", "modified": "2026-01-27T05:12:59.206092Z", "relationship_type": "indicates", "source_ref": "indicator--897055a5-6fb9-4576-a095-702f51d9bcea", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c283baf-abea-48aa-a40d-56737435ab3a", "created": "2026-01-27T05:12:59.206272Z", "modified": "2026-01-27T05:12:59.206272Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a5425fc6e6933eef19a34eac1557e8364baec3c0ea112dbd453662035656adb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.206272Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9184e3b-8801-442b-8572-85e51659276d", "created": "2026-01-27T05:12:59.207128Z", "modified": "2026-01-27T05:12:59.207128Z", "relationship_type": "indicates", "source_ref": "indicator--7c283baf-abea-48aa-a40d-56737435ab3a", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8728491f-ea91-4af0-8b94-a2d1ee8fd8ec", "created": "2026-01-27T05:12:59.207308Z", "modified": "2026-01-27T05:12:59.207308Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91ddf0f129973ee862900895f6d72e7a680a6e755ed14703657aa7dd7cf921a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.207308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3548a932-2a30-416a-89f6-6b108a272d60", "created": "2026-01-27T05:12:59.208149Z", "modified": "2026-01-27T05:12:59.208149Z", "relationship_type": "indicates", "source_ref": "indicator--8728491f-ea91-4af0-8b94-a2d1ee8fd8ec", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b07cf7d-ef37-405e-97c3-8111e6da360d", "created": "2026-01-27T05:12:59.208325Z", "modified": "2026-01-27T05:12:59.208325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd62e9a9b810cd8d478426fe10265726d8044986a7662e6364e6ab3694408e6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.208325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--695f804f-a951-4f66-9bbe-a2d70b8e15ca", "created": "2026-01-27T05:12:59.20919Z", "modified": "2026-01-27T05:12:59.20919Z", "relationship_type": "indicates", "source_ref": "indicator--5b07cf7d-ef37-405e-97c3-8111e6da360d", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4338d378-72c9-4cc6-ac56-3f6c42504528", "created": "2026-01-27T05:12:59.209369Z", "modified": "2026-01-27T05:12:59.209369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f44362503765ef80b51c5db69b1ee2b2f027b98cecefbcad59800867c2c21206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.209369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cccfa0c-c725-4c9d-822c-c57f75be2db2", "created": "2026-01-27T05:12:59.210219Z", "modified": "2026-01-27T05:12:59.210219Z", "relationship_type": "indicates", "source_ref": "indicator--4338d378-72c9-4cc6-ac56-3f6c42504528", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04042cdf-5cad-4d06-9200-9f83e8896309", "created": "2026-01-27T05:12:59.210392Z", "modified": "2026-01-27T05:12:59.210392Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e06da44828957c44edbd4b4249f4a68f3ca30ef5569f38b62a81f6d05bfd65fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.210392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--810284dd-0a89-4f0f-b934-315c2e38af02", "created": "2026-01-27T05:12:59.211236Z", "modified": "2026-01-27T05:12:59.211236Z", "relationship_type": "indicates", "source_ref": "indicator--04042cdf-5cad-4d06-9200-9f83e8896309", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a771462a-53c0-40bc-ad13-1d2484ecf0ab", "created": "2026-01-27T05:12:59.21141Z", "modified": "2026-01-27T05:12:59.21141Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32f14f7b5fa51dac3391047e45a9dfbd339cbadacbf6603646564d2e6c386eb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.21141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8383bad3-8088-4085-b86e-b3ea1e17f856", "created": "2026-01-27T05:12:59.212284Z", "modified": "2026-01-27T05:12:59.212284Z", "relationship_type": "indicates", "source_ref": "indicator--a771462a-53c0-40bc-ad13-1d2484ecf0ab", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349df53b-e3ba-419b-b5cf-fd1969a9fca6", "created": "2026-01-27T05:12:59.212459Z", "modified": "2026-01-27T05:12:59.212459Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3c8494ea7b5f943cba317df63455d9012c514931d9402761a44725a35be7738']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.212459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20f5218f-c67a-4498-90a7-690cf09196a6", "created": "2026-01-27T05:12:59.21331Z", "modified": "2026-01-27T05:12:59.21331Z", "relationship_type": "indicates", "source_ref": "indicator--349df53b-e3ba-419b-b5cf-fd1969a9fca6", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c712570-a910-435f-b527-ae5821b443b8", "created": "2026-01-27T05:12:59.21349Z", "modified": "2026-01-27T05:12:59.21349Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8aa7f3faf867fb08d9403d2ca36fa0ec68eddaed9d0175302a27949187c6e87a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.21349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccc0382c-48d5-4d39-94fd-c4edd5abe60f", "created": "2026-01-27T05:12:59.21446Z", "modified": "2026-01-27T05:12:59.21446Z", "relationship_type": "indicates", "source_ref": "indicator--3c712570-a910-435f-b527-ae5821b443b8", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c93ae67-3e97-4da0-8b48-ebfc296dcb38", "created": "2026-01-27T05:12:59.214636Z", "modified": "2026-01-27T05:12:59.214636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ebdd719b01b484e75ea477feec129390204c3e7b02d9b11b7290ee3233728bd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.214636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0f79691-cef6-4a27-90d6-ae2777af4560", "created": "2026-01-27T05:12:59.215467Z", "modified": "2026-01-27T05:12:59.215467Z", "relationship_type": "indicates", "source_ref": "indicator--4c93ae67-3e97-4da0-8b48-ebfc296dcb38", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7710736a-8c6a-4bf1-b09b-2de71897a9d0", "created": "2026-01-27T05:12:59.215642Z", "modified": "2026-01-27T05:12:59.215642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bdb600952547731a01b792e45489c97faca0cadbe696241166be3bab39e6b9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.215642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca427b44-4658-430e-a64e-3c1696c0f92b", "created": "2026-01-27T05:12:59.216536Z", "modified": "2026-01-27T05:12:59.216536Z", "relationship_type": "indicates", "source_ref": "indicator--7710736a-8c6a-4bf1-b09b-2de71897a9d0", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480a2b6-da06-42d2-b173-345adda31203", "created": "2026-01-27T05:12:59.216715Z", "modified": "2026-01-27T05:12:59.216715Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='450403109acca7d483c1ab247e8af3703df3f7bac626f4f74a48ca959526b9cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.216715Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31dec463-ff8a-4997-ab11-57ac7780fa28", "created": "2026-01-27T05:12:59.217561Z", "modified": "2026-01-27T05:12:59.217561Z", "relationship_type": "indicates", "source_ref": "indicator--7480a2b6-da06-42d2-b173-345adda31203", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5603ec14-d78e-4d62-a949-812604815b59", "created": "2026-01-27T05:12:59.217735Z", "modified": "2026-01-27T05:12:59.217735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea0936c14dc8edf98c07e82e38914838e1915f452f0969c8e50b7b09fc8cf6c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.217735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--011e0da2-eb08-4acc-8ccd-8ea94f28eb3a", "created": "2026-01-27T05:12:59.218584Z", "modified": "2026-01-27T05:12:59.218584Z", "relationship_type": "indicates", "source_ref": "indicator--5603ec14-d78e-4d62-a949-812604815b59", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd60e01-6c4d-4fe6-9cb0-45dfdc30f995", "created": "2026-01-27T05:12:59.218779Z", "modified": "2026-01-27T05:12:59.218779Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.runaki.synclogs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.218779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5903cb94-9d8e-4a41-90ef-b8e173e658ad", "created": "2026-01-27T05:12:59.219434Z", "modified": "2026-01-27T05:12:59.219434Z", "relationship_type": "indicates", "source_ref": "indicator--3fd60e01-6c4d-4fe6-9cb0-45dfdc30f995", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9659836d-bd7a-4d02-8455-382426379f5c", "created": "2026-01-27T05:12:59.219605Z", "modified": "2026-01-27T05:12:59.219605Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.client.requestlogs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.219605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4204972-7801-4fa8-a5ef-2f2a522c9e11", "created": "2026-01-27T05:12:59.220289Z", "modified": "2026-01-27T05:12:59.220289Z", "relationship_type": "indicates", "source_ref": "indicator--9659836d-bd7a-4d02-8455-382426379f5c", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff404b1e-d2a5-422f-9558-463aa3e8e0c4", "created": "2026-01-27T05:12:59.220467Z", "modified": "2026-01-27T05:12:59.220467Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.shadow.client.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.220467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aee513d8-cbe5-4425-8d70-2fa8c9bb2ec6", "created": "2026-01-27T05:12:59.221148Z", "modified": "2026-01-27T05:12:59.221148Z", "relationship_type": "indicates", "source_ref": "indicator--ff404b1e-d2a5-422f-9558-463aa3e8e0c4", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e703b1d4-37a9-4aca-93a7-b22fc0444128", "created": "2026-01-27T05:12:59.221322Z", "modified": "2026-01-27T05:12:59.221322Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FE7626A8D3C38FD78EA2A729B39B943BA814F014']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.221322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e553fbf-9f57-427b-8d63-b064c817749f", "created": "2026-01-27T05:12:59.222211Z", "modified": "2026-01-27T05:12:59.222211Z", "relationship_type": "indicates", "source_ref": "indicator--e703b1d4-37a9-4aca-93a7-b22fc0444128", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e702d61-fbec-462e-a8d3-898bef636034", "created": "2026-01-27T05:12:59.222411Z", "modified": "2026-01-27T05:12:59.222411Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='01E49C220A9776D4978C1D28D6C32F86D145B8AE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.222411Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6910d2ad-e647-4de3-8cf5-c91994341a26", "created": "2026-01-27T05:12:59.223341Z", "modified": "2026-01-27T05:12:59.223341Z", "relationship_type": "indicates", "source_ref": "indicator--0e702d61-fbec-462e-a8d3-898bef636034", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ad1f4e-4dc2-4587-9df3-649b868cd2b7", "created": "2026-01-27T05:12:59.223519Z", "modified": "2026-01-27T05:12:59.223519Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AD231A7CD57E2CEF8162F4D341C3573DE2B8F443']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.223519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e38a025c-786b-41d8-aea3-4608d0c98754", "created": "2026-01-27T05:12:59.224303Z", "modified": "2026-01-27T05:12:59.224303Z", "relationship_type": "indicates", "source_ref": "indicator--b3ad1f4e-4dc2-4587-9df3-649b868cd2b7", "target_ref": "malware--cc4ff81e-962c-4c13-a021-4b0c1170ea8e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd", "created": "2026-01-27T05:12:59.224476Z", "modified": "2026-01-27T05:12:59.224476Z", "name": "SpyHuman", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb73b54-bb42-4c55-ab85-e6b25fc3a7aa", "created": "2026-01-27T05:12:59.224648Z", "modified": "2026-01-27T05:12:59.224648Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apispyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.224648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79f2876c-8d15-423f-8d89-8b1425dbdd72", "created": "2026-01-27T05:12:59.225336Z", "modified": "2026-01-27T05:12:59.225336Z", "relationship_type": "indicates", "source_ref": "indicator--3eb73b54-bb42-4c55-ab85-e6b25fc3a7aa", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105b50c9-1161-49c0-8a0e-89aac4939d5b", "created": "2026-01-27T05:12:59.225515Z", "modified": "2026-01-27T05:12:59.225515Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps22.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.225515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae5e93a4-7bf4-4a1c-a2f3-08e33a95b209", "created": "2026-01-27T05:12:59.226209Z", "modified": "2026-01-27T05:12:59.226209Z", "relationship_type": "indicates", "source_ref": "indicator--105b50c9-1161-49c0-8a0e-89aac4939d5b", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6fcda7-eae4-45dd-8f22-0267ce629cc9", "created": "2026-01-27T05:12:59.226384Z", "modified": "2026-01-27T05:12:59.226384Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps12.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.226384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1409c28-2e59-41ca-83c0-86faa8da3df0", "created": "2026-01-27T05:12:59.227074Z", "modified": "2026-01-27T05:12:59.227074Z", "relationship_type": "indicates", "source_ref": "indicator--dd6fcda7-eae4-45dd-8f22-0267ce629cc9", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1e736c-707e-4017-82b6-b64beb8fbc4d", "created": "2026-01-27T05:12:59.227249Z", "modified": "2026-01-27T05:12:59.227249Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps13.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.227249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4004d330-dc8f-41d8-ac88-7cca5af517c1", "created": "2026-01-27T05:12:59.227933Z", "modified": "2026-01-27T05:12:59.227933Z", "relationship_type": "indicates", "source_ref": "indicator--1e1e736c-707e-4017-82b6-b64beb8fbc4d", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5610260c-33b0-4bbb-9b32-cfc4b1653c1b", "created": "2026-01-27T05:12:59.228107Z", "modified": "2026-01-27T05:12:59.228107Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps14.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.228107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd4764af-e3b2-4d2f-940a-ca588fa06798", "created": "2026-01-27T05:12:59.228789Z", "modified": "2026-01-27T05:12:59.228789Z", "relationship_type": "indicates", "source_ref": "indicator--5610260c-33b0-4bbb-9b32-cfc4b1653c1b", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faca5abd-9f2a-4e1b-98b5-577ce7262d57", "created": "2026-01-27T05:12:59.228964Z", "modified": "2026-01-27T05:12:59.228964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps15.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.228964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f90123b-d929-4499-91ed-2f9ddb76075e", "created": "2026-01-27T05:12:59.229645Z", "modified": "2026-01-27T05:12:59.229645Z", "relationship_type": "indicates", "source_ref": "indicator--faca5abd-9f2a-4e1b-98b5-577ce7262d57", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bc13c1-f147-43c7-800a-a97db8d9e7ce", "created": "2026-01-27T05:12:59.229836Z", "modified": "2026-01-27T05:12:59.229836Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps16.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.229836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff2b65d1-73bf-4a75-b538-0c78c4f7d733", "created": "2026-01-27T05:12:59.230525Z", "modified": "2026-01-27T05:12:59.230525Z", "relationship_type": "indicates", "source_ref": "indicator--41bc13c1-f147-43c7-800a-a97db8d9e7ce", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb689e6-a081-4f0d-9372-bba479f1d8d1", "created": "2026-01-27T05:12:59.230697Z", "modified": "2026-01-27T05:12:59.230697Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps17.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.230697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a167e50d-587c-4d20-beb5-894c89b494a2", "created": "2026-01-27T05:12:59.231516Z", "modified": "2026-01-27T05:12:59.231516Z", "relationship_type": "indicates", "source_ref": "indicator--dfb689e6-a081-4f0d-9372-bba479f1d8d1", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddb7eb7-605b-46f8-835b-200eb80e30b5", "created": "2026-01-27T05:12:59.231691Z", "modified": "2026-01-27T05:12:59.231691Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps16042016.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.231691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65b06180-535e-4798-afa8-10c6185bcb32", "created": "2026-01-27T05:12:59.232384Z", "modified": "2026-01-27T05:12:59.232384Z", "relationship_type": "indicates", "source_ref": "indicator--2ddb7eb7-605b-46f8-835b-200eb80e30b5", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49740fe-793f-487c-850b-d616f2880d1c", "created": "2026-01-27T05:12:59.232559Z", "modified": "2026-01-27T05:12:59.232559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps18data.securebackuponline.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.232559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--141644de-214e-4941-a5f6-41c96c37dac8", "created": "2026-01-27T05:12:59.233273Z", "modified": "2026-01-27T05:12:59.233273Z", "relationship_type": "indicates", "source_ref": "indicator--d49740fe-793f-487c-850b-d616f2880d1c", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78d96ce-fa62-41e0-b29c-84918d3c1cce", "created": "2026-01-27T05:12:59.233449Z", "modified": "2026-01-27T05:12:59.233449Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps18file.securebackuponline.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.233449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e03a39fa-9791-4a49-8aa7-058699ac2760", "created": "2026-01-27T05:12:59.234163Z", "modified": "2026-01-27T05:12:59.234163Z", "relationship_type": "indicates", "source_ref": "indicator--b78d96ce-fa62-41e0-b29c-84918d3c1cce", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72922ed3-6432-4fab-afe0-9b42f4c66188", "created": "2026-01-27T05:12:59.234339Z", "modified": "2026-01-27T05:12:59.234339Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aps2.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.234339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db9ebe26-87d6-4f16-a457-c5935edef6f8", "created": "2026-01-27T05:12:59.235027Z", "modified": "2026-01-27T05:12:59.235027Z", "relationship_type": "indicates", "source_ref": "indicator--72922ed3-6432-4fab-afe0-9b42f4c66188", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f971f4-b892-4f0c-acb5-1eedcfdda0db", "created": "2026-01-27T05:12:59.235202Z", "modified": "2026-01-27T05:12:59.235202Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nodejs.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.235202Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c12ba3c-8f07-4a7b-82c3-834cb937dda5", "created": "2026-01-27T05:12:59.235899Z", "modified": "2026-01-27T05:12:59.235899Z", "relationship_type": "indicates", "source_ref": "indicator--b3f971f4-b892-4f0c-acb5-1eedcfdda0db", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66981456-1ded-423d-915d-c3fb478a75eb", "created": "2026-01-27T05:12:59.236075Z", "modified": "2026-01-27T05:12:59.236075Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='securebackuponline.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.236075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbf855c2-1f51-4c98-9880-0a28e962ede6", "created": "2026-01-27T05:12:59.236856Z", "modified": "2026-01-27T05:12:59.236856Z", "relationship_type": "indicates", "source_ref": "indicator--66981456-1ded-423d-915d-c3fb478a75eb", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54aa6d9-a67e-4e18-81af-87a08c766adb", "created": "2026-01-27T05:12:59.237038Z", "modified": "2026-01-27T05:12:59.237038Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sp18022019.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.237038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fbcb1240-3fde-4ca6-9954-8570ff60b94b", "created": "2026-01-27T05:12:59.237737Z", "modified": "2026-01-27T05:12:59.237737Z", "relationship_type": "indicates", "source_ref": "indicator--e54aa6d9-a67e-4e18-81af-87a08c766adb", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d5cabc-f1b9-4539-b25b-f0d234c9cd3b", "created": "2026-01-27T05:12:59.237935Z", "modified": "2026-01-27T05:12:59.237935Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhuman-97943.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.237935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebfe7a9b-8638-4a05-a72e-4348f61355e7", "created": "2026-01-27T05:12:59.238642Z", "modified": "2026-01-27T05:12:59.238642Z", "relationship_type": "indicates", "source_ref": "indicator--56d5cabc-f1b9-4539-b25b-f0d234c9cd3b", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ea417f-c545-40e0-8fd4-f231e4507298", "created": "2026-01-27T05:12:59.23885Z", "modified": "2026-01-27T05:12:59.23885Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.23885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--047aee8b-0ee9-4c19-b82e-f412ab349a82", "created": "2026-01-27T05:12:59.239647Z", "modified": "2026-01-27T05:12:59.239647Z", "relationship_type": "indicates", "source_ref": "indicator--b7ea417f-c545-40e0-8fd4-f231e4507298", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50aa8bf8-75fa-4fa1-bcde-c2ca6930a185", "created": "2026-01-27T05:12:59.239843Z", "modified": "2026-01-27T05:12:59.239843Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.239843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca75f27d-8146-4770-81df-e793f9675357", "created": "2026-01-27T05:12:59.240504Z", "modified": "2026-01-27T05:12:59.240504Z", "relationship_type": "indicates", "source_ref": "indicator--50aa8bf8-75fa-4fa1-bcde-c2ca6930a185", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2789604f-100f-48be-83ed-2a551ba7c525", "created": "2026-01-27T05:12:59.240684Z", "modified": "2026-01-27T05:12:59.240684Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='services.spyhuman.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.240684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f2a5739-c70b-4566-b30d-9577f09af495", "created": "2026-01-27T05:12:59.241377Z", "modified": "2026-01-27T05:12:59.241377Z", "relationship_type": "indicates", "source_ref": "indicator--2789604f-100f-48be-83ed-2a551ba7c525", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cb32ac-9492-4c69-b18a-142635bfcc27", "created": "2026-01-27T05:12:59.241554Z", "modified": "2026-01-27T05:12:59.241554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4336f17e5f5aec06fa8a5f2f3b213597f176a1941af3e91616e2fdd54cc9b8ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.241554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--736df990-0517-4293-9467-2eff78ec08a1", "created": "2026-01-27T05:12:59.242396Z", "modified": "2026-01-27T05:12:59.242396Z", "relationship_type": "indicates", "source_ref": "indicator--e1cb32ac-9492-4c69-b18a-142635bfcc27", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b475521e-b1cc-4a98-864f-a1f4db54f3d9", "created": "2026-01-27T05:12:59.242572Z", "modified": "2026-01-27T05:12:59.242572Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fe1264cf5c44fc7e1df682020c1c55999dc38988d7d33aee4bb4c40b270b92b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.242572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebf213f6-05b0-4a66-b678-51ded635c5b4", "created": "2026-01-27T05:12:59.243425Z", "modified": "2026-01-27T05:12:59.243425Z", "relationship_type": "indicates", "source_ref": "indicator--b475521e-b1cc-4a98-864f-a1f4db54f3d9", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d90b0c3-5820-463c-988a-ed1f9eb9d559", "created": "2026-01-27T05:12:59.243609Z", "modified": "2026-01-27T05:12:59.243609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cad3083109f41d10cf6a8ac127a0622260f08074d1dcfde76135c1c73bddbe7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.243609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72e33eb3-ea5e-4213-ad47-7286147c09a6", "created": "2026-01-27T05:12:59.244446Z", "modified": "2026-01-27T05:12:59.244446Z", "relationship_type": "indicates", "source_ref": "indicator--0d90b0c3-5820-463c-988a-ed1f9eb9d559", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc89d5c-8624-453d-90e2-f5b8710d830f", "created": "2026-01-27T05:12:59.24462Z", "modified": "2026-01-27T05:12:59.24462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='961fb6983f9cbdbc105943650c69049f94c69f3e2c5cecfd2a5d001dc972ad99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.24462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72de4494-70d7-4524-af7a-e3bbdb2ce208", "created": "2026-01-27T05:12:59.245467Z", "modified": "2026-01-27T05:12:59.245467Z", "relationship_type": "indicates", "source_ref": "indicator--8bc89d5c-8624-453d-90e2-f5b8710d830f", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eafa6ba-71e7-44cd-a272-66a959c595ba", "created": "2026-01-27T05:12:59.245642Z", "modified": "2026-01-27T05:12:59.245642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4929cd572e6ff12d0fb634e91e6eaede233647c1f933b4a1151d443466297c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.245642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d33c48a3-f7ca-4259-8d93-1f1b70e8aeb0", "created": "2026-01-27T05:12:59.246483Z", "modified": "2026-01-27T05:12:59.246483Z", "relationship_type": "indicates", "source_ref": "indicator--8eafa6ba-71e7-44cd-a272-66a959c595ba", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bba6880-7079-459f-b17e-6e4818bf943e", "created": "2026-01-27T05:12:59.246661Z", "modified": "2026-01-27T05:12:59.246661Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92f3944d95608095c528904bb548f8d1e3740bc7fa37ec1ed0962eef37fa6aa9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.246661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c6e4327-abfe-4906-b6f1-85969e8572f8", "created": "2026-01-27T05:12:59.247529Z", "modified": "2026-01-27T05:12:59.247529Z", "relationship_type": "indicates", "source_ref": "indicator--9bba6880-7079-459f-b17e-6e4818bf943e", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a25ed6f-bf92-40c9-8e6f-02c2bacbc3d9", "created": "2026-01-27T05:12:59.247703Z", "modified": "2026-01-27T05:12:59.247703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d62be7e176f35c56b41a5682d9b7d4b6eaea365ae424dad5d123f3897d48175f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.247703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a7e59a2-2979-4eeb-8d8f-8bf8d61c36a9", "created": "2026-01-27T05:12:59.248672Z", "modified": "2026-01-27T05:12:59.248672Z", "relationship_type": "indicates", "source_ref": "indicator--6a25ed6f-bf92-40c9-8e6f-02c2bacbc3d9", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2317861-fa24-4524-8251-1e63777ff7df", "created": "2026-01-27T05:12:59.248868Z", "modified": "2026-01-27T05:12:59.248868Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3392b6d1214ec1278036c34d0c10e48671f3766ccb73248ee336572db400d946']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.248868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc3abb21-26e4-4a9f-bbb2-8e7ced3a8214", "created": "2026-01-27T05:12:59.249698Z", "modified": "2026-01-27T05:12:59.249698Z", "relationship_type": "indicates", "source_ref": "indicator--e2317861-fa24-4524-8251-1e63777ff7df", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c637e555-ec24-4f03-9c7e-01f955989dd7", "created": "2026-01-27T05:12:59.249893Z", "modified": "2026-01-27T05:12:59.249893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4861f15690f2dfb68e73b1ffdbe8aa4c93cc63ea85bc7269595a5964f6e4d653']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.249893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9addd0c-9b03-4293-88fd-89586d56b195", "created": "2026-01-27T05:12:59.25071Z", "modified": "2026-01-27T05:12:59.25071Z", "relationship_type": "indicates", "source_ref": "indicator--c637e555-ec24-4f03-9c7e-01f955989dd7", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b624febb-df11-461b-bdcc-9cfa967b48e1", "created": "2026-01-27T05:12:59.250903Z", "modified": "2026-01-27T05:12:59.250903Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2bd85ed717dce397c5271e52436bfd8d2ac95b733b2ed065d62e1e7d56e4641']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.250903Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3a7ffcd-cadc-40a5-a353-0aaeaadf957f", "created": "2026-01-27T05:12:59.251759Z", "modified": "2026-01-27T05:12:59.251759Z", "relationship_type": "indicates", "source_ref": "indicator--b624febb-df11-461b-bdcc-9cfa967b48e1", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cdf19d-50b2-4dcb-b320-58f482b5a1cd", "created": "2026-01-27T05:12:59.251941Z", "modified": "2026-01-27T05:12:59.251941Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ee25a50014e7b5d393ac0c9c2e1e35857597af39ee7fcb404c3170bd58757f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.251941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e84b756-7d34-47fb-a49b-5b0d01aad69a", "created": "2026-01-27T05:12:59.252861Z", "modified": "2026-01-27T05:12:59.252861Z", "relationship_type": "indicates", "source_ref": "indicator--99cdf19d-50b2-4dcb-b320-58f482b5a1cd", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bff828-b825-466b-b8e8-1dcc241a3afa", "created": "2026-01-27T05:12:59.253074Z", "modified": "2026-01-27T05:12:59.253074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08c2ff278ea4cfbfb0560b1be52bfebe422b892345fcb89283bc6ecf4374b36b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.253074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33ec5190-3c1e-4bba-a023-ed9d8546d8c5", "created": "2026-01-27T05:12:59.253912Z", "modified": "2026-01-27T05:12:59.253912Z", "relationship_type": "indicates", "source_ref": "indicator--93bff828-b825-466b-b8e8-1dcc241a3afa", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c337b53-6122-4b46-b4dc-2ee8e83d7b38", "created": "2026-01-27T05:12:59.254099Z", "modified": "2026-01-27T05:12:59.254099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d63cdd585d86beebfba2f6a660851b685e05e7326f966949f7c33995919c4cfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.254099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--baa4ff17-4f00-4f4a-99a5-5517222fdc7f", "created": "2026-01-27T05:12:59.254931Z", "modified": "2026-01-27T05:12:59.254931Z", "relationship_type": "indicates", "source_ref": "indicator--6c337b53-6122-4b46-b4dc-2ee8e83d7b38", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a2a61a-00d5-4176-831b-018d38e9bc86", "created": "2026-01-27T05:12:59.255105Z", "modified": "2026-01-27T05:12:59.255105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64e4b9bce5c6ab60cf1800860f3ab13b6f7a246381512ed4fb3c429fa26aadfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.255105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34a0f0c0-183f-4fd3-9d19-404a09f56827", "created": "2026-01-27T05:12:59.255953Z", "modified": "2026-01-27T05:12:59.255953Z", "relationship_type": "indicates", "source_ref": "indicator--17a2a61a-00d5-4176-831b-018d38e9bc86", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc880d4-d222-4315-ba77-a525f6865155", "created": "2026-01-27T05:12:59.256129Z", "modified": "2026-01-27T05:12:59.256129Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1408db265a20e78eb1df9675ff2cfdf60a959c8445a9241a45218e72c0826b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.256129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b605e12c-7449-4f2a-87b6-56662bef6f69", "created": "2026-01-27T05:12:59.256974Z", "modified": "2026-01-27T05:12:59.256974Z", "relationship_type": "indicates", "source_ref": "indicator--cdc880d4-d222-4315-ba77-a525f6865155", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f736c9-01c7-45d6-8796-b17e995c3ca2", "created": "2026-01-27T05:12:59.257155Z", "modified": "2026-01-27T05:12:59.257155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8ece4fda85f0613d63d7792ff803b65621e0fbd47f02e6a7fc4b22f5ab87293']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.257155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e16cff4-61ef-46db-bb39-cac27a4ce897", "created": "2026-01-27T05:12:59.258126Z", "modified": "2026-01-27T05:12:59.258126Z", "relationship_type": "indicates", "source_ref": "indicator--24f736c9-01c7-45d6-8796-b17e995c3ca2", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec67a68-7dab-4fba-a4fb-553ef636588e", "created": "2026-01-27T05:12:59.258302Z", "modified": "2026-01-27T05:12:59.258302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef633f4259b85b0e5fd9722a1e6eac56ad640a282b0e4b1623da5d1453aaeb37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.258302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f1e0e40-a138-4605-87af-2b27cdb378f9", "created": "2026-01-27T05:12:59.25914Z", "modified": "2026-01-27T05:12:59.25914Z", "relationship_type": "indicates", "source_ref": "indicator--5ec67a68-7dab-4fba-a4fb-553ef636588e", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ccf255-3bb9-4dbc-a856-3bb8f3b9c181", "created": "2026-01-27T05:12:59.259316Z", "modified": "2026-01-27T05:12:59.259316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='862b6c3279e9dd7d0033e33b04960a7a9922e7d5e14975d4dd62c0785da94f82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.259316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a812d23-2cd7-4076-ab50-a92731d703c6", "created": "2026-01-27T05:12:59.26015Z", "modified": "2026-01-27T05:12:59.26015Z", "relationship_type": "indicates", "source_ref": "indicator--81ccf255-3bb9-4dbc-a856-3bb8f3b9c181", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9691e252-1f92-41e3-8550-dd1b78656d75", "created": "2026-01-27T05:12:59.260329Z", "modified": "2026-01-27T05:12:59.260329Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cldprotect']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.260329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6857f561-c97b-4510-8575-e77ac333a476", "created": "2026-01-27T05:12:59.260992Z", "modified": "2026-01-27T05:12:59.260992Z", "relationship_type": "indicates", "source_ref": "indicator--9691e252-1f92-41e3-8550-dd1b78656d75", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b918b6-93ff-4110-9f73-3f5ee97b3656", "created": "2026-01-27T05:12:59.261169Z", "modified": "2026-01-27T05:12:59.261169Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='m.mobile.control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.261169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71203987-a68b-46d7-8e66-ca9f24ef957f", "created": "2026-01-27T05:12:59.261832Z", "modified": "2026-01-27T05:12:59.261832Z", "relationship_type": "indicates", "source_ref": "indicator--59b918b6-93ff-4110-9f73-3f5ee97b3656", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b47ac5-6769-457b-9485-9dd04f6ad1df", "created": "2026-01-27T05:12:59.262006Z", "modified": "2026-01-27T05:12:59.262006Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.saxfamqvxj']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.262006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--915ec361-40ff-466b-bed8-928a6948cd5d", "created": "2026-01-27T05:12:59.262649Z", "modified": "2026-01-27T05:12:59.262649Z", "relationship_type": "indicates", "source_ref": "indicator--c6b47ac5-6769-457b-9485-9dd04f6ad1df", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e3e32d-8e56-4fc9-bd4e-5a5b7fb68d07", "created": "2026-01-27T05:12:59.262841Z", "modified": "2026-01-27T05:12:59.262841Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.safesecureservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.262841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae13763d-f052-4a03-9e09-d9a986850cb8", "created": "2026-01-27T05:12:59.263515Z", "modified": "2026-01-27T05:12:59.263515Z", "relationship_type": "indicates", "source_ref": "indicator--f8e3e32d-8e56-4fc9-bd4e-5a5b7fb68d07", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f3bf2c-8407-4467-95ec-1ecba1290e7c", "created": "2026-01-27T05:12:59.263692Z", "modified": "2026-01-27T05:12:59.263692Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.myappspqwddeexo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.263692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f90afaac-2710-449f-bb32-02792e7e34bc", "created": "2026-01-27T05:12:59.264384Z", "modified": "2026-01-27T05:12:59.264384Z", "relationship_type": "indicates", "source_ref": "indicator--46f3bf2c-8407-4467-95ec-1ecba1290e7c", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab1f71e-75dd-48f9-90c4-5e07d6d95272", "created": "2026-01-27T05:12:59.264561Z", "modified": "2026-01-27T05:12:59.264561Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.yurpdpvxnybmlgh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.264561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70938a17-472e-4d71-b1f9-b5032d57c1bd", "created": "2026-01-27T05:12:59.265238Z", "modified": "2026-01-27T05:12:59.265238Z", "relationship_type": "indicates", "source_ref": "indicator--8ab1f71e-75dd-48f9-90c4-5e07d6d95272", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2635779-9b82-4574-9545-32f1072ec72f", "created": "2026-01-27T05:12:59.265416Z", "modified": "2026-01-27T05:12:59.265416Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyhumanrev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.265416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97ab6462-21da-4c3e-82b0-5f95545d66f7", "created": "2026-01-27T05:12:59.266202Z", "modified": "2026-01-27T05:12:59.266202Z", "relationship_type": "indicates", "source_ref": "indicator--f2635779-9b82-4574-9545-32f1072ec72f", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683a64ee-36d5-442e-ad0d-ea63d3f684d0", "created": "2026-01-27T05:12:59.266389Z", "modified": "2026-01-27T05:12:59.266389Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='76F6C302533751BED738D40882AC219BAAD65E7B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.266389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--914aef7a-e9e8-474d-b9f7-26c72496715d", "created": "2026-01-27T05:12:59.267183Z", "modified": "2026-01-27T05:12:59.267183Z", "relationship_type": "indicates", "source_ref": "indicator--683a64ee-36d5-442e-ad0d-ea63d3f684d0", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2bb6e5-0a35-44f5-98e0-bc58f54e6c12", "created": "2026-01-27T05:12:59.267363Z", "modified": "2026-01-27T05:12:59.267363Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F9265164219A1C5DEE4A76D66BEA0C35A1FD6032']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.267363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6c4052f-7d11-4967-b3f7-fb84477713c8", "created": "2026-01-27T05:12:59.268228Z", "modified": "2026-01-27T05:12:59.268228Z", "relationship_type": "indicates", "source_ref": "indicator--9a2bb6e5-0a35-44f5-98e0-bc58f54e6c12", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb0eec1-2418-4249-923f-fd23b94b22e5", "created": "2026-01-27T05:12:59.268423Z", "modified": "2026-01-27T05:12:59.268423Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='597C0169D8C27DE7C6B62C2C252F9ECAC0E562C4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.268423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c813ca94-eddc-46fa-a786-eab39ac692bd", "created": "2026-01-27T05:12:59.26921Z", "modified": "2026-01-27T05:12:59.26921Z", "relationship_type": "indicates", "source_ref": "indicator--2bb0eec1-2418-4249-923f-fd23b94b22e5", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2c376e-2125-4e32-a5c5-43b902d421b0", "created": "2026-01-27T05:12:59.269388Z", "modified": "2026-01-27T05:12:59.269388Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E2AC495C52B9FBD49B83CFAE0C167878A2F796A5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.269388Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cad5565e-a568-40aa-8a41-ab622ab6efae", "created": "2026-01-27T05:12:59.270169Z", "modified": "2026-01-27T05:12:59.270169Z", "relationship_type": "indicates", "source_ref": "indicator--3b2c376e-2125-4e32-a5c5-43b902d421b0", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d84694a-f1ff-4f20-8234-f4040e32fab1", "created": "2026-01-27T05:12:59.270354Z", "modified": "2026-01-27T05:12:59.270354Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E169250B134E5C46C3064F166E457CDBFCC16524']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.270354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a20c5bbe-7c70-4362-9fdb-216ca0f48e38", "created": "2026-01-27T05:12:59.271172Z", "modified": "2026-01-27T05:12:59.271172Z", "relationship_type": "indicates", "source_ref": "indicator--5d84694a-f1ff-4f20-8234-f4040e32fab1", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a2ec7d-7831-4f3a-a632-1279ef47872c", "created": "2026-01-27T05:12:59.271369Z", "modified": "2026-01-27T05:12:59.271369Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C270531A6D75EB4EA2AA0F4D6DF2980AFB494CB3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.271369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ccb90d8-f3ed-4962-baa7-579b6fee9ba6", "created": "2026-01-27T05:12:59.272184Z", "modified": "2026-01-27T05:12:59.272184Z", "relationship_type": "indicates", "source_ref": "indicator--17a2ec7d-7831-4f3a-a632-1279ef47872c", "target_ref": "malware--7dafb140-1886-4e6c-bc58-1786a16035fd"}, {"type": "malware", "spec_version": "2.1", "id": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7", "created": "2026-01-27T05:12:59.272359Z", "modified": "2026-01-27T05:12:59.272359Z", "name": "uMobix", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098487bc-51ae-48ab-87c3-ad9443917184", "created": "2026-01-27T05:12:59.272531Z", "modified": "2026-01-27T05:12:59.272531Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-api.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.272531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88f8e2a1-8087-4a49-ad4f-9c330b88c37c", "created": "2026-01-27T05:12:59.273242Z", "modified": "2026-01-27T05:12:59.273242Z", "relationship_type": "indicates", "source_ref": "indicator--098487bc-51ae-48ab-87c3-ad9443917184", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169423c2-02bc-4a94-9ae6-eea2af5eb58c", "created": "2026-01-27T05:12:59.273422Z", "modified": "2026-01-27T05:12:59.273422Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.273422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84b38a8b-5a2e-4aa2-9f0e-664bbdb6468e", "created": "2026-01-27T05:12:59.274167Z", "modified": "2026-01-27T05:12:59.274167Z", "relationship_type": "indicates", "source_ref": "indicator--169423c2-02bc-4a94-9ae6-eea2af5eb58c", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b92b89-f3c9-426e-a332-191c4e255ec2", "created": "2026-01-27T05:12:59.274352Z", "modified": "2026-01-27T05:12:59.274352Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.274352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d374bf1-b730-4ae7-878a-18c6cb146e85", "created": "2026-01-27T05:12:59.275156Z", "modified": "2026-01-27T05:12:59.275156Z", "relationship_type": "indicates", "source_ref": "indicator--39b92b89-f3c9-426e-a332-191c4e255ec2", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b270676e-4046-4d28-9f4c-9012a2f2a7f4", "created": "2026-01-27T05:12:59.275334Z", "modified": "2026-01-27T05:12:59.275334Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='n.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.275334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1733c113-a488-43ad-bc54-1cb59f3ecc46", "created": "2026-01-27T05:12:59.276017Z", "modified": "2026-01-27T05:12:59.276017Z", "relationship_type": "indicates", "source_ref": "indicator--b270676e-4046-4d28-9f4c-9012a2f2a7f4", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb5cfe2-38c9-4e98-994e-f64d660c404b", "created": "2026-01-27T05:12:59.276196Z", "modified": "2026-01-27T05:12:59.276196Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tt.umobix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.276196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a30fe53-b50f-4381-b343-894c8b081770", "created": "2026-01-27T05:12:59.276876Z", "modified": "2026-01-27T05:12:59.276876Z", "relationship_type": "indicates", "source_ref": "indicator--5bb5cfe2-38c9-4e98-994e-f64d660c404b", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dd7190-49a8-4af2-bfce-7ca3c63ff9f5", "created": "2026-01-27T05:12:59.277052Z", "modified": "2026-01-27T05:12:59.277052Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyfer.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.277052Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b7d0939-1bf0-44a7-94bf-688581a9ca15", "created": "2026-01-27T05:12:59.277718Z", "modified": "2026-01-27T05:12:59.277718Z", "relationship_type": "indicates", "source_ref": "indicator--92dd7190-49a8-4af2-bfce-7ca3c63ff9f5", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc6aab1-c492-4a10-8870-3ac32057a1fd", "created": "2026-01-27T05:12:59.277912Z", "modified": "2026-01-27T05:12:59.277912Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='surveillance-enfants.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.277912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e051af-1bd7-46dd-bab2-ac17ddee3d19", "created": "2026-01-27T05:12:59.278605Z", "modified": "2026-01-27T05:12:59.278605Z", "relationship_type": "indicates", "source_ref": "indicator--5fc6aab1-c492-4a10-8870-3ac32057a1fd", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7888c5-0e6c-4caf-9225-c9a35c05697e", "created": "2026-01-27T05:12:59.278796Z", "modified": "2026-01-27T05:12:59.278796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='445b039865b8d8ebe9708eaf665c3ca23dacbbe5bc818c9df15b3c9848ba7ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.278796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e51776f4-0763-43da-a17a-ca3d560ec6e9", "created": "2026-01-27T05:12:59.279632Z", "modified": "2026-01-27T05:12:59.279632Z", "relationship_type": "indicates", "source_ref": "indicator--5c7888c5-0e6c-4caf-9225-c9a35c05697e", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d2014e-0ec7-4d31-9f1b-de9fa658a387", "created": "2026-01-27T05:12:59.279829Z", "modified": "2026-01-27T05:12:59.279829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fbdc384094cc89a6905d13ed8df8c0064e89e9cfdcaf80d000a366ea5d10b76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.279829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee787c0d-6c7e-49f3-b80b-69c083aa4e38", "created": "2026-01-27T05:12:59.280662Z", "modified": "2026-01-27T05:12:59.280662Z", "relationship_type": "indicates", "source_ref": "indicator--67d2014e-0ec7-4d31-9f1b-de9fa658a387", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0150caa-f9e5-47d9-858a-9f0ecc1a371d", "created": "2026-01-27T05:12:59.280854Z", "modified": "2026-01-27T05:12:59.280854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15175706fef839d9d913389420ec133905ea30feb6baf064a2eafa37f4b8496a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.280854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56256e25-dddd-4584-abb9-f56b4a75edfb", "created": "2026-01-27T05:12:59.281689Z", "modified": "2026-01-27T05:12:59.281689Z", "relationship_type": "indicates", "source_ref": "indicator--d0150caa-f9e5-47d9-858a-9f0ecc1a371d", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e0b25e-219b-41b1-bb3c-a59542be4089", "created": "2026-01-27T05:12:59.281883Z", "modified": "2026-01-27T05:12:59.281883Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b44246c402445eea943dceabef5a87535333a219a87c1c57e06d44f79194412']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.281883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef45e97-84da-4bd9-8025-422fb705b332", "created": "2026-01-27T05:12:59.282722Z", "modified": "2026-01-27T05:12:59.282722Z", "relationship_type": "indicates", "source_ref": "indicator--33e0b25e-219b-41b1-bb3c-a59542be4089", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fd353b-1d59-43aa-99b7-70811ec2cf03", "created": "2026-01-27T05:12:59.282919Z", "modified": "2026-01-27T05:12:59.282919Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3427cd043c913d318eda4167294848518ed18dffb791c3c44599c246ca603eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.282919Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4d633ba-5044-4ced-855b-5093eac83c79", "created": "2026-01-27T05:12:59.283898Z", "modified": "2026-01-27T05:12:59.283898Z", "relationship_type": "indicates", "source_ref": "indicator--02fd353b-1d59-43aa-99b7-70811ec2cf03", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2a6035-bd2a-4cef-b526-d47cc4dcbd73", "created": "2026-01-27T05:12:59.284117Z", "modified": "2026-01-27T05:12:59.284117Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tuner.funnelwebview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.284117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f57d3c57-0373-4ace-b034-560531767670", "created": "2026-01-27T05:12:59.284862Z", "modified": "2026-01-27T05:12:59.284862Z", "relationship_type": "indicates", "source_ref": "indicator--9c2a6035-bd2a-4cef-b526-d47cc4dcbd73", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87b3c8a-197a-4496-87e9-dc0ee4e202ee", "created": "2026-01-27T05:12:59.285063Z", "modified": "2026-01-27T05:12:59.285063Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.system.user']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.285063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8414a93-7c07-470f-b48c-dca3390b488f", "created": "2026-01-27T05:12:59.285713Z", "modified": "2026-01-27T05:12:59.285713Z", "relationship_type": "indicates", "source_ref": "indicator--b87b3c8a-197a-4496-87e9-dc0ee4e202ee", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e286232-1d6f-483f-986a-f9530e701858", "created": "2026-01-27T05:12:59.285942Z", "modified": "2026-01-27T05:12:59.285942Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.play.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.285942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e1a97cb-0987-478f-93de-5faca3b649ca", "created": "2026-01-27T05:12:59.286599Z", "modified": "2026-01-27T05:12:59.286599Z", "relationship_type": "indicates", "source_ref": "indicator--3e286232-1d6f-483f-986a-f9530e701858", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b132765-8705-4f55-8132-3371408a4c54", "created": "2026-01-27T05:12:59.286791Z", "modified": "2026-01-27T05:12:59.286791Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='575F8E8A04A5967E78BC5B5A3E31FDACF42F4FB1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.286791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98552441-1a49-40fa-82f2-1a0131f1e0b5", "created": "2026-01-27T05:12:59.287565Z", "modified": "2026-01-27T05:12:59.287565Z", "relationship_type": "indicates", "source_ref": "indicator--4b132765-8705-4f55-8132-3371408a4c54", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91784b92-c911-476f-ab85-0659518d15fd", "created": "2026-01-27T05:12:59.28774Z", "modified": "2026-01-27T05:12:59.28774Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6696449AA96EBA57CDF4707F0F84274958BE4523']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.28774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efefaaf5-66ec-42de-9b00-bf4c05419ec3", "created": "2026-01-27T05:12:59.288545Z", "modified": "2026-01-27T05:12:59.288545Z", "relationship_type": "indicates", "source_ref": "indicator--91784b92-c911-476f-ab85-0659518d15fd", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58189cfe-be6d-44a2-9ba6-2503f2d7aa2d", "created": "2026-01-27T05:12:59.28872Z", "modified": "2026-01-27T05:12:59.28872Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F4E6DA34F0071AEB70010EBB69875E5212D69140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.28872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--407a52ae-cb09-4084-a0e2-104f32c7eecf", "created": "2026-01-27T05:12:59.289518Z", "modified": "2026-01-27T05:12:59.289518Z", "relationship_type": "indicates", "source_ref": "indicator--58189cfe-be6d-44a2-9ba6-2503f2d7aa2d", "target_ref": "malware--602bbf74-417b-494f-b9f7-80f10e640dd7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5f420692-5a18-4980-9980-ebb408752164", "created": "2026-01-27T05:12:59.289689Z", "modified": "2026-01-27T05:12:59.289689Z", "name": "Spymie", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31757a5-b285-465c-a0a1-b3eaa92d28f4", "created": "2026-01-27T05:12:59.289885Z", "modified": "2026-01-27T05:12:59.289885Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0afb0b4d44f36eed6f214d468defb2beda5cc689f890a64c5b258783714628c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.289885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f534e325-b038-4bd9-afe1-e469ccab4d51", "created": "2026-01-27T05:12:59.290712Z", "modified": "2026-01-27T05:12:59.290712Z", "relationship_type": "indicates", "source_ref": "indicator--c31757a5-b285-465c-a0a1-b3eaa92d28f4", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4783b0-794c-4e20-977e-6394e78bd014", "created": "2026-01-27T05:12:59.290907Z", "modified": "2026-01-27T05:12:59.290907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='816c1eba8e7597d4e0ca19f039d92e28d2e3122c7444949d59577384f874a573']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.290907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b29042fb-1cbf-4909-a3ea-b0575d87a71b", "created": "2026-01-27T05:12:59.291733Z", "modified": "2026-01-27T05:12:59.291733Z", "relationship_type": "indicates", "source_ref": "indicator--8e4783b0-794c-4e20-977e-6394e78bd014", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af69ae1-30e8-49de-89da-b60eec1e152c", "created": "2026-01-27T05:12:59.291929Z", "modified": "2026-01-27T05:12:59.291929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5b24ea08a84efd89c4a245a8c9b617097884a75dfb05e3e73679f9c80347855']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.291929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c04ef5f7-d55a-4f8c-80f8-1f3cb1f61fc1", "created": "2026-01-27T05:12:59.293279Z", "modified": "2026-01-27T05:12:59.293279Z", "relationship_type": "indicates", "source_ref": "indicator--8af69ae1-30e8-49de-89da-b60eec1e152c", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc10de3-71ca-4d31-af26-52acdbf724b1", "created": "2026-01-27T05:12:59.293462Z", "modified": "2026-01-27T05:12:59.293462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8a3f9704dd11f4a0a035477cd7f461babd0f47c3bb5757294cc7d1c6b98e3cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.293462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da5c02fb-e102-4297-bf0f-afa47855e89b", "created": "2026-01-27T05:12:59.294301Z", "modified": "2026-01-27T05:12:59.294301Z", "relationship_type": "indicates", "source_ref": "indicator--8cc10de3-71ca-4d31-af26-52acdbf724b1", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742125f9-b8a0-4462-bb45-f64902833a0a", "created": "2026-01-27T05:12:59.29448Z", "modified": "2026-01-27T05:12:59.29448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3e857546e5ab6765fcc89c144f50eb2b35cef7270f7de7b0d790cf40375fe7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.29448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5dfa169-2027-41fd-b0d4-ee37ef1b1388", "created": "2026-01-27T05:12:59.295401Z", "modified": "2026-01-27T05:12:59.295401Z", "relationship_type": "indicates", "source_ref": "indicator--742125f9-b8a0-4462-bb45-f64902833a0a", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2482891-4a5f-45cd-8f5f-db423ec201c0", "created": "2026-01-27T05:12:59.295589Z", "modified": "2026-01-27T05:12:59.295589Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ant.spymie.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.295589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7953b4ed-e26b-42e6-8403-70384798e554", "created": "2026-01-27T05:12:59.296279Z", "modified": "2026-01-27T05:12:59.296279Z", "relationship_type": "indicates", "source_ref": "indicator--b2482891-4a5f-45cd-8f5f-db423ec201c0", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0977ba64-0673-4f41-8944-b2860e2c6beb", "created": "2026-01-27T05:12:59.296463Z", "modified": "2026-01-27T05:12:59.296463Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='05B23C7E9156A4C55768DA27936FF2D7AF09BB8F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.296463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54da859b-8a85-453d-9071-1ab39c96678e", "created": "2026-01-27T05:12:59.297255Z", "modified": "2026-01-27T05:12:59.297255Z", "relationship_type": "indicates", "source_ref": "indicator--0977ba64-0673-4f41-8944-b2860e2c6beb", "target_ref": "malware--5f420692-5a18-4980-9980-ebb408752164"}, {"type": "malware", "spec_version": "2.1", "id": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543", "created": "2026-01-27T05:12:59.297434Z", "modified": "2026-01-27T05:12:59.297434Z", "name": "TheOneSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef54c451-c35f-4055-9a79-09e30c9cbbe2", "created": "2026-01-27T05:12:59.297613Z", "modified": "2026-01-27T05:12:59.297613Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.ogymogy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.297613Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f835111c-5697-4a6b-bccc-ad05a8fde8b8", "created": "2026-01-27T05:12:59.298303Z", "modified": "2026-01-27T05:12:59.298303Z", "relationship_type": "indicates", "source_ref": "indicator--ef54c451-c35f-4055-9a79-09e30c9cbbe2", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8965dbf-4951-4f29-9680-ac5b9c866a5a", "created": "2026-01-27T05:12:59.298479Z", "modified": "2026-01-27T05:12:59.298479Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lb.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.298479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fff09453-1a96-4b8f-880e-bc08db23c1de", "created": "2026-01-27T05:12:59.299168Z", "modified": "2026-01-27T05:12:59.299168Z", "relationship_type": "indicates", "source_ref": "indicator--f8965dbf-4951-4f29-9680-ac5b9c866a5a", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a5b962-2b9f-4624-8fd2-b08707bacd0a", "created": "2026-01-27T05:12:59.299346Z", "modified": "2026-01-27T05:12:59.299346Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='im.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.299346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e4d228c-7fce-4ff5-afaa-00333b1f8305", "created": "2026-01-27T05:12:59.300089Z", "modified": "2026-01-27T05:12:59.300089Z", "relationship_type": "indicates", "source_ref": "indicator--92a5b962-2b9f-4624-8fd2-b08707bacd0a", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f6c553-f01a-46d0-a322-c69571c546d1", "created": "2026-01-27T05:12:59.300263Z", "modified": "2026-01-27T05:12:59.300263Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node-api.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.300263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10214326-fd4f-4f6f-b5ee-8960d4b6be44", "created": "2026-01-27T05:12:59.301033Z", "modified": "2026-01-27T05:12:59.301033Z", "relationship_type": "indicates", "source_ref": "indicator--c4f6c553-f01a-46d0-a322-c69571c546d1", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443049ce-aa8b-4bcc-82bb-e9e7f83e0525", "created": "2026-01-27T05:12:59.301229Z", "modified": "2026-01-27T05:12:59.301229Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node1.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.301229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e296b1b2-a7fb-4ac2-b941-0d7321ca4c69", "created": "2026-01-27T05:12:59.302082Z", "modified": "2026-01-27T05:12:59.302082Z", "relationship_type": "indicates", "source_ref": "indicator--443049ce-aa8b-4bcc-82bb-e9e7f83e0525", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c02031-c56f-47dc-87b0-fada4472c0d0", "created": "2026-01-27T05:12:59.302276Z", "modified": "2026-01-27T05:12:59.302276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node2.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.302276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--234a23a5-13ce-4b1e-bb97-829f20907df5", "created": "2026-01-27T05:12:59.302992Z", "modified": "2026-01-27T05:12:59.302992Z", "relationship_type": "indicates", "source_ref": "indicator--a9c02031-c56f-47dc-87b0-fada4472c0d0", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4bf7ec-383f-4ea5-8735-61b550a09710", "created": "2026-01-27T05:12:59.303173Z", "modified": "2026-01-27T05:12:59.303173Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node3.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.303173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c5b98de-553a-40fb-a0ec-aa9af3129312", "created": "2026-01-27T05:12:59.303862Z", "modified": "2026-01-27T05:12:59.303862Z", "relationship_type": "indicates", "source_ref": "indicator--da4bf7ec-383f-4ea5-8735-61b550a09710", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6989bc1-4640-41e3-926b-85644a03f216", "created": "2026-01-27T05:12:59.304038Z", "modified": "2026-01-27T05:12:59.304038Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node4.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.304038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0de208c5-a82c-47fa-97e9-4689f2d3a886", "created": "2026-01-27T05:12:59.304703Z", "modified": "2026-01-27T05:12:59.304703Z", "relationship_type": "indicates", "source_ref": "indicator--c6989bc1-4640-41e3-926b-85644a03f216", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8147200-e6ad-4237-a36c-2dbe56723060", "created": "2026-01-27T05:12:59.304894Z", "modified": "2026-01-27T05:12:59.304894Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='node5.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.304894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7b3137b-8b6f-405f-8f5c-ecfe8488f205", "created": "2026-01-27T05:12:59.305568Z", "modified": "2026-01-27T05:12:59.305568Z", "relationship_type": "indicates", "source_ref": "indicator--c8147200-e6ad-4237-a36c-2dbe56723060", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205c9c6c-0ed5-45ef-93f4-8b70ff76b2aa", "created": "2026-01-27T05:12:59.305757Z", "modified": "2026-01-27T05:12:59.305757Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ogymoggy.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.305757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5852f0a-7866-4dfd-8b66-ee1ebb2bcc5a", "created": "2026-01-27T05:12:59.306434Z", "modified": "2026-01-27T05:12:59.306434Z", "relationship_type": "indicates", "source_ref": "indicator--205c9c6c-0ed5-45ef-93f4-8b70ff76b2aa", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dbfc9a-5085-49d7-944e-e91cc5132de9", "created": "2026-01-27T05:12:59.306607Z", "modified": "2026-01-27T05:12:59.306607Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.306607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4915b9d6-e975-4593-af67-3f759cc5ef96", "created": "2026-01-27T05:12:59.30728Z", "modified": "2026-01-27T05:12:59.30728Z", "relationship_type": "indicates", "source_ref": "indicator--f8dbfc9a-5085-49d7-944e-e91cc5132de9", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659a2b9e-9603-4ac1-9f3c-572d3c37f1fb", "created": "2026-01-27T05:12:59.307455Z", "modified": "2026-01-27T05:12:59.307455Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ogymogy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.307455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b553b5d0-7ddc-4ec5-a3e9-a4b74b7f90dc", "created": "2026-01-27T05:12:59.308128Z", "modified": "2026-01-27T05:12:59.308128Z", "relationship_type": "indicates", "source_ref": "indicator--659a2b9e-9603-4ac1-9f3c-572d3c37f1fb", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7434bce-7690-4f50-8121-0ab9cab1a402", "created": "2026-01-27T05:12:59.308299Z", "modified": "2026-01-27T05:12:59.308299Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.theonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.308299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5adb77ca-1b3b-4ec0-9752-5bc254e66799", "created": "2026-01-27T05:12:59.309001Z", "modified": "2026-01-27T05:12:59.309001Z", "relationship_type": "indicates", "source_ref": "indicator--f7434bce-7690-4f50-8121-0ab9cab1a402", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f09ee0-86bc-4cb9-a72c-775f0257c880", "created": "2026-01-27T05:12:59.309175Z", "modified": "2026-01-27T05:12:59.309175Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.ogymogy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.309175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e24fb3ae-8889-4906-99e7-6b6050e2a71c", "created": "2026-01-27T05:12:59.309982Z", "modified": "2026-01-27T05:12:59.309982Z", "relationship_type": "indicates", "source_ref": "indicator--96f09ee0-86bc-4cb9-a72c-775f0257c880", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ebaeca-983b-4d6a-86aa-86bed299a8ac", "created": "2026-01-27T05:12:59.31016Z", "modified": "2026-01-27T05:12:59.31016Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tos-assigned-build.sfo2.digitaloceanspaces.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.31016Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4289a67c-dc09-4ce2-aa94-2efb80b4c044", "created": "2026-01-27T05:12:59.310941Z", "modified": "2026-01-27T05:12:59.310941Z", "relationship_type": "indicates", "source_ref": "indicator--c7ebaeca-983b-4d6a-86aa-86bed299a8ac", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e5f770-8450-4c20-b253-3b771aea97ee", "created": "2026-01-27T05:12:59.311124Z", "modified": "2026-01-27T05:12:59.311124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cc3bb5f510f39abb65925dabff7cca7580edf265af592f93f0e19f4ae343651']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.311124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18d51439-8021-4412-87c7-bd82a4c1d291", "created": "2026-01-27T05:12:59.311982Z", "modified": "2026-01-27T05:12:59.311982Z", "relationship_type": "indicates", "source_ref": "indicator--c8e5f770-8450-4c20-b253-3b771aea97ee", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebea81d-f308-4b60-bb3a-ba1577a6b6ca", "created": "2026-01-27T05:12:59.312161Z", "modified": "2026-01-27T05:12:59.312161Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f628f3df8e15f7ccc35f5e72683a09eaf3cb48adc5f46f4323537b4302f09f42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.312161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f9ddf5f-e1d5-4584-8190-05dc539464a2", "created": "2026-01-27T05:12:59.313013Z", "modified": "2026-01-27T05:12:59.313013Z", "relationship_type": "indicates", "source_ref": "indicator--9ebea81d-f308-4b60-bb3a-ba1577a6b6ca", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a92309-6427-428f-a564-22fa74027c41", "created": "2026-01-27T05:12:59.31319Z", "modified": "2026-01-27T05:12:59.31319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b63fe1ecad9f894d7de2f11240989b882cc021647b27ef644d4798dd2d4a175b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.31319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c90cd278-d9fe-4aa8-9727-f8f5894a3991", "created": "2026-01-27T05:12:59.314035Z", "modified": "2026-01-27T05:12:59.314035Z", "relationship_type": "indicates", "source_ref": "indicator--50a92309-6427-428f-a564-22fa74027c41", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc717076-283b-4ec9-90da-bf602bd88e7b", "created": "2026-01-27T05:12:59.314221Z", "modified": "2026-01-27T05:12:59.314221Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='941b0c08acdcde91c3cc2da81c8149474150d49e629640d3a301af991a739333']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.314221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6321ef54-acc3-4dca-8b66-2ceede33054b", "created": "2026-01-27T05:12:59.315066Z", "modified": "2026-01-27T05:12:59.315066Z", "relationship_type": "indicates", "source_ref": "indicator--cc717076-283b-4ec9-90da-bf602bd88e7b", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6faebf-b14b-436d-ab74-becfb82b6ab2", "created": "2026-01-27T05:12:59.315249Z", "modified": "2026-01-27T05:12:59.315249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ef1465816dedc8aa073eb532ef10ec984263352e5e9899d74bb1ffb668bd402']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.315249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb21e27f-624e-45f2-8a89-21a3689dc990", "created": "2026-01-27T05:12:59.316117Z", "modified": "2026-01-27T05:12:59.316117Z", "relationship_type": "indicates", "source_ref": "indicator--3f6faebf-b14b-436d-ab74-becfb82b6ab2", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345b07ec-14aa-4faa-8085-fefa1cde04d8", "created": "2026-01-27T05:12:59.316304Z", "modified": "2026-01-27T05:12:59.316304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1888ca6e593bff1fd3fc00f7a4a2c9a5c5a405bc5399666fc264d52d540c7c86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.316304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76bc3651-7513-4fa3-880f-65ccfdca6b81", "created": "2026-01-27T05:12:59.317179Z", "modified": "2026-01-27T05:12:59.317179Z", "relationship_type": "indicates", "source_ref": "indicator--345b07ec-14aa-4faa-8085-fefa1cde04d8", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301fc8a6-acad-4730-a00b-95482fe821b5", "created": "2026-01-27T05:12:59.317358Z", "modified": "2026-01-27T05:12:59.317358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b23b0dbf6998492f5bc1f13568d04fc454b8f33c9dea979c00e234a5e19869ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.317358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3acc530-3442-461c-a3b3-e312d71188ea", "created": "2026-01-27T05:12:59.3182Z", "modified": "2026-01-27T05:12:59.3182Z", "relationship_type": "indicates", "source_ref": "indicator--301fc8a6-acad-4730-a00b-95482fe821b5", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b76473-d9fa-4dc9-a087-8295b37c3c62", "created": "2026-01-27T05:12:59.318384Z", "modified": "2026-01-27T05:12:59.318384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01e36ccb585f44b70ec8bb6c25c721b47c6fb801570c65c3187d3ab21b397640']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.318384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--949b80b7-5507-49b4-949f-8c95cd06798c", "created": "2026-01-27T05:12:59.319366Z", "modified": "2026-01-27T05:12:59.319366Z", "relationship_type": "indicates", "source_ref": "indicator--a2b76473-d9fa-4dc9-a087-8295b37c3c62", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c755ddef-cc7a-4046-851b-50652e0c3486", "created": "2026-01-27T05:12:59.319543Z", "modified": "2026-01-27T05:12:59.319543Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.services']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.319543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af83801c-b2ed-4de3-b861-8c53748ad30c", "created": "2026-01-27T05:12:59.320208Z", "modified": "2026-01-27T05:12:59.320208Z", "relationship_type": "indicates", "source_ref": "indicator--c755ddef-cc7a-4046-851b-50652e0c3486", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342d1740-936f-4fd4-b5e3-be1a39d59928", "created": "2026-01-27T05:12:59.320387Z", "modified": "2026-01-27T05:12:59.320387Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.omg']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.320387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c01f2222-e99d-4277-8356-a4a19679c32c", "created": "2026-01-27T05:12:59.321051Z", "modified": "2026-01-27T05:12:59.321051Z", "relationship_type": "indicates", "source_ref": "indicator--342d1740-936f-4fd4-b5e3-be1a39d59928", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5638897-d133-476d-88da-a0d13a0d0ac9", "created": "2026-01-27T05:12:59.321229Z", "modified": "2026-01-27T05:12:59.321229Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D46492F02F25877E9F5D6CFFA4CE99DAC64D981A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.321229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--799d5c8f-1678-4f71-862e-5dbb5f641d4f", "created": "2026-01-27T05:12:59.322018Z", "modified": "2026-01-27T05:12:59.322018Z", "relationship_type": "indicates", "source_ref": "indicator--d5638897-d133-476d-88da-a0d13a0d0ac9", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af307a4-1413-4682-b492-462035ed24b3", "created": "2026-01-27T05:12:59.322195Z", "modified": "2026-01-27T05:12:59.322195Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9DE8D6C6757152EC819C1A09F5665B77F72493A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.322195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68c63fee-1671-42a8-8406-e5c6f6eb22ff", "created": "2026-01-27T05:12:59.32298Z", "modified": "2026-01-27T05:12:59.32298Z", "relationship_type": "indicates", "source_ref": "indicator--6af307a4-1413-4682-b492-462035ed24b3", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28145513-36c8-48df-acf8-78b5b0c37190", "created": "2026-01-27T05:12:59.323159Z", "modified": "2026-01-27T05:12:59.323159Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B6D2D36C75931CCA18538B79C5DE3A04EF4AF777']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.323159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dcf6f2f-34ee-460a-bbcc-dfd5a0384147", "created": "2026-01-27T05:12:59.323943Z", "modified": "2026-01-27T05:12:59.323943Z", "relationship_type": "indicates", "source_ref": "indicator--28145513-36c8-48df-acf8-78b5b0c37190", "target_ref": "malware--399d5036-25b6-4251-9b3f-0332c2b2d543"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b", "created": "2026-01-27T05:12:59.324119Z", "modified": "2026-01-27T05:12:59.324119Z", "name": "ClevGuard", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07948f0f-18b0-411b-8d25-d6b6ebd30f53", "created": "2026-01-27T05:12:59.324293Z", "modified": "2026-01-27T05:12:59.324293Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.324293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90adadc6-4780-4ede-bce4-93706f2342fe", "created": "2026-01-27T05:12:59.324996Z", "modified": "2026-01-27T05:12:59.324996Z", "relationship_type": "indicates", "source_ref": "indicator--07948f0f-18b0-411b-8d25-d6b6ebd30f53", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef26a54-5677-4165-a636-de0be619cc31", "created": "2026-01-27T05:12:59.325179Z", "modified": "2026-01-27T05:12:59.325179Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsguard-6c6a9.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.325179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--176ac483-7e86-4b99-b08e-7b8f4fc8e969", "created": "2026-01-27T05:12:59.325896Z", "modified": "2026-01-27T05:12:59.325896Z", "relationship_type": "indicates", "source_ref": "indicator--2ef26a54-5677-4165-a636-de0be619cc31", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a14320-bf19-4c6f-9829-9525685f991d", "created": "2026-01-27T05:12:59.326078Z", "modified": "2026-01-27T05:12:59.326078Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clevguard.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.326078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--380c95df-e0b3-4694-9e18-bd22a9132109", "created": "2026-01-27T05:12:59.326735Z", "modified": "2026-01-27T05:12:59.326735Z", "relationship_type": "indicates", "source_ref": "indicator--f4a14320-bf19-4c6f-9829-9525685f991d", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58686661-185b-4d93-805d-b810b412ecad", "created": "2026-01-27T05:12:59.32693Z", "modified": "2026-01-27T05:12:59.32693Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clevguard.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.32693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64dd7d5e-80de-462b-8e98-adcd7d0b5c6a", "created": "2026-01-27T05:12:59.327719Z", "modified": "2026-01-27T05:12:59.327719Z", "relationship_type": "indicates", "source_ref": "indicator--58686661-185b-4d93-805d-b810b412ecad", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf175c4f-4c96-4223-88e2-4a2af0c5e7b0", "created": "2026-01-27T05:12:59.327929Z", "modified": "2026-01-27T05:12:59.327929Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.327929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86b33748-3de9-42c4-b4bc-1efe617c63a7", "created": "2026-01-27T05:12:59.328599Z", "modified": "2026-01-27T05:12:59.328599Z", "relationship_type": "indicates", "source_ref": "indicator--bf175c4f-4c96-4223-88e2-4a2af0c5e7b0", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66864d44-7029-40c6-99a4-876da5ed87db", "created": "2026-01-27T05:12:59.328791Z", "modified": "2026-01-27T05:12:59.328791Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.328791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39528196-b13d-44e7-bd8e-642d41564720", "created": "2026-01-27T05:12:59.32946Z", "modified": "2026-01-27T05:12:59.32946Z", "relationship_type": "indicates", "source_ref": "indicator--66864d44-7029-40c6-99a4-876da5ed87db", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ec7786-b744-4d54-8c65-c3a9b4a30c04", "created": "2026-01-27T05:12:59.329641Z", "modified": "2026-01-27T05:12:59.329641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.clevguard.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.329641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--544e8952-716a-4ee1-95af-a3f140d354c2", "created": "2026-01-27T05:12:59.330352Z", "modified": "2026-01-27T05:12:59.330352Z", "relationship_type": "indicates", "source_ref": "indicator--91ec7786-b744-4d54-8c65-c3a9b4a30c04", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23229223-adb8-4398-a7d2-91d61d46a7f8", "created": "2026-01-27T05:12:59.330529Z", "modified": "2026-01-27T05:12:59.330529Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='075d6d9d905014bd07da1d97ad50e18b8d028460d7378ef460d69a2786ee179d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.330529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8194e664-a629-4508-8365-f5e0a7b377bd", "created": "2026-01-27T05:12:59.331413Z", "modified": "2026-01-27T05:12:59.331413Z", "relationship_type": "indicates", "source_ref": "indicator--23229223-adb8-4398-a7d2-91d61d46a7f8", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead4ad44-8f56-4427-9b58-a81a5aceb37c", "created": "2026-01-27T05:12:59.331607Z", "modified": "2026-01-27T05:12:59.331607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e7830a079ad9f90bc8c6d249f77613695a14869bb0c635c376b2235beb3f41c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.331607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6604fce6-701a-4ab4-b426-ee1b551a6bec", "created": "2026-01-27T05:12:59.332472Z", "modified": "2026-01-27T05:12:59.332472Z", "relationship_type": "indicates", "source_ref": "indicator--ead4ad44-8f56-4427-9b58-a81a5aceb37c", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f809cde-a21d-4192-816e-c10f4f76f2c2", "created": "2026-01-27T05:12:59.33265Z", "modified": "2026-01-27T05:12:59.33265Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kids.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.33265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86715b48-a10c-45e8-9ee9-bab62a29a1ec", "created": "2026-01-27T05:12:59.333312Z", "modified": "2026-01-27T05:12:59.333312Z", "relationship_type": "indicates", "source_ref": "indicator--7f809cde-a21d-4192-816e-c10f4f76f2c2", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b140d36-4178-426f-9572-47ad7e28c917", "created": "2026-01-27T05:12:59.333497Z", "modified": "2026-01-27T05:12:59.333497Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kids.whatsapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.333497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--574bee06-8a7e-4f35-a958-833f1fc175ec", "created": "2026-01-27T05:12:59.334178Z", "modified": "2026-01-27T05:12:59.334178Z", "relationship_type": "indicates", "source_ref": "indicator--2b140d36-4178-426f-9572-47ad7e28c917", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5402a2-2184-4650-8812-0826f3d09bab", "created": "2026-01-27T05:12:59.334355Z", "modified": "2026-01-27T05:12:59.334355Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CCE55D4C3E844E8A7542036D40BFBB4AA98B89D7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.334355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c167cd26-c7b6-4f26-9557-d5f42484e7aa", "created": "2026-01-27T05:12:59.335148Z", "modified": "2026-01-27T05:12:59.335148Z", "relationship_type": "indicates", "source_ref": "indicator--8f5402a2-2184-4650-8812-0826f3d09bab", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92bb0cc6-b4eb-40ac-bb54-c6ffb5c78dab", "created": "2026-01-27T05:12:59.335323Z", "modified": "2026-01-27T05:12:59.335323Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E48C6714DBFD2AB6E5CF85C87EFD05BD8E11E6FB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.335323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4423302f-e6fb-4dcb-aa48-4ec5b416b8b2", "created": "2026-01-27T05:12:59.336249Z", "modified": "2026-01-27T05:12:59.336249Z", "relationship_type": "indicates", "source_ref": "indicator--92bb0cc6-b4eb-40ac-bb54-c6ffb5c78dab", "target_ref": "malware--0fcfcf3b-94cf-4b9b-affa-f642d702635b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8", "created": "2026-01-27T05:12:59.336425Z", "modified": "2026-01-27T05:12:59.336425Z", "name": "EasyPhoneTrack", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15377ae1-0acd-470d-bbb1-bd994a63cf3d", "created": "2026-01-27T05:12:59.3366Z", "modified": "2026-01-27T05:12:59.3366Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cell-phones-tracker.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.3366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8edbc01-df1e-46f0-8ce7-0cfac3095bd1", "created": "2026-01-27T05:12:59.337297Z", "modified": "2026-01-27T05:12:59.337297Z", "relationship_type": "indicates", "source_ref": "indicator--15377ae1-0acd-470d-bbb1-bd994a63cf3d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4b9add-af69-4a9a-87fb-53ecf8261132", "created": "2026-01-27T05:12:59.33748Z", "modified": "2026-01-27T05:12:59.33748Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celltracker.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.33748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27f87ac9-de87-4163-9fad-2c3ea5affcc8", "created": "2026-01-27T05:12:59.338167Z", "modified": "2026-01-27T05:12:59.338167Z", "relationship_type": "indicates", "source_ref": "indicator--ff4b9add-af69-4a9a-87fb-53ecf8261132", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e64dcb6-cfe0-47b6-9531-f689bf2d3df0", "created": "2026-01-27T05:12:59.33835Z", "modified": "2026-01-27T05:12:59.33835Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easyphonetrack.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.33835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b20a18c-af24-44e1-82e5-1b61f08e573b", "created": "2026-01-27T05:12:59.339052Z", "modified": "2026-01-27T05:12:59.339052Z", "relationship_type": "indicates", "source_ref": "indicator--6e64dcb6-cfe0-47b6-9531-f689bf2d3df0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b23f783-1bbd-4495-9683-29ec7f3f749f", "created": "2026-01-27T05:12:59.33923Z", "modified": "2026-01-27T05:12:59.33923Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetrack.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.33923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3482a7e3-56b4-4ca5-90bd-c3eb2f3f6f15", "created": "2026-01-27T05:12:59.33992Z", "modified": "2026-01-27T05:12:59.33992Z", "relationship_type": "indicates", "source_ref": "indicator--0b23f783-1bbd-4495-9683-29ec7f3f749f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb02e2a6-04e3-48a1-8098-8acd8b45cbb2", "created": "2026-01-27T05:12:59.340098Z", "modified": "2026-01-27T05:12:59.340098Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy-datacenter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.340098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--252ec47a-6e74-4694-8fe0-823f6711f48a", "created": "2026-01-27T05:12:59.340781Z", "modified": "2026-01-27T05:12:59.340781Z", "relationship_type": "indicates", "source_ref": "indicator--fb02e2a6-04e3-48a1-8098-8acd8b45cbb2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb219f9-bc9b-4bf9-9f6d-2977a5879a75", "created": "2026-01-27T05:12:59.340959Z", "modified": "2026-01-27T05:12:59.340959Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='studio11-7e288.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.340959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc4d65ea-8c28-4fd9-b73e-79ba5e3bec87", "created": "2026-01-27T05:12:59.34165Z", "modified": "2026-01-27T05:12:59.34165Z", "relationship_type": "indicates", "source_ref": "indicator--3eb219f9-bc9b-4bf9-9f6d-2977a5879a75", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aad3fea-fc26-4b2a-a7ac-3e65e5ffdc7b", "created": "2026-01-27T05:12:59.34184Z", "modified": "2026-01-27T05:12:59.34184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackmy.mobi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.34184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ae0a8e6-01e9-484b-8da1-a1eacd84973f", "created": "2026-01-27T05:12:59.342518Z", "modified": "2026-01-27T05:12:59.342518Z", "relationship_type": "indicates", "source_ref": "indicator--1aad3fea-fc26-4b2a-a7ac-3e65e5ffdc7b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3caae7ad-2fbd-4e4c-b0dd-e611e2fddebb", "created": "2026-01-27T05:12:59.342694Z", "modified": "2026-01-27T05:12:59.342694Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spy-datacenter.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.342694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6be70e9d-bfef-4714-8d63-b2337bee46b5", "created": "2026-01-27T05:12:59.343417Z", "modified": "2026-01-27T05:12:59.343417Z", "relationship_type": "indicates", "source_ref": "indicator--3caae7ad-2fbd-4e4c-b0dd-e611e2fddebb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2831e2-7521-47fc-b4c5-27e91a774b26", "created": "2026-01-27T05:12:59.343594Z", "modified": "2026-01-27T05:12:59.343594Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spappmonitoring.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.343594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3df4a3c6-e664-478f-a75a-a6a5d08c928b", "created": "2026-01-27T05:12:59.344392Z", "modified": "2026-01-27T05:12:59.344392Z", "relationship_type": "indicates", "source_ref": "indicator--8d2831e2-7521-47fc-b4c5-27e91a774b26", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef09f8b-1da3-4fb1-949a-49f380d37a40", "created": "2026-01-27T05:12:59.344568Z", "modified": "2026-01-27T05:12:59.344568Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spappmonitoring.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.344568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c45b3726-7837-4290-b23f-146b2f08b6fe", "created": "2026-01-27T05:12:59.345266Z", "modified": "2026-01-27T05:12:59.345266Z", "relationship_type": "indicates", "source_ref": "indicator--aef09f8b-1da3-4fb1-949a-49f380d37a40", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29823e1d-bc19-4056-bc45-e48b8ad3f382", "created": "2026-01-27T05:12:59.345441Z", "modified": "2026-01-27T05:12:59.345441Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobil-kem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.345441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b70114bd-1ce0-4b64-9323-d3667c1f5193", "created": "2026-01-27T05:12:59.34613Z", "modified": "2026-01-27T05:12:59.34613Z", "relationship_type": "indicates", "source_ref": "indicator--29823e1d-bc19-4056-bc45-e48b8ad3f382", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe1e51b-79e7-4a1b-9406-e97c28a8d1d7", "created": "2026-01-27T05:12:59.346311Z", "modified": "2026-01-27T05:12:59.346311Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='easyphonetrack.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.346311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50c8c4cd-702f-437c-9d9a-2549c18bd1b2", "created": "2026-01-27T05:12:59.347Z", "modified": "2026-01-27T05:12:59.347Z", "relationship_type": "indicates", "source_ref": "indicator--4fe1e51b-79e7-4a1b-9406-e97c28a8d1d7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1f6999-6a54-47be-9320-17b6889ac505", "created": "2026-01-27T05:12:59.34724Z", "modified": "2026-01-27T05:12:59.34724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2bc5c88d184829fc3addc8c085e8b0135e8b9a612aefb52630037ec3efe4460']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.34724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7ad1223-ec76-43f1-a799-beec20f3191d", "created": "2026-01-27T05:12:59.348104Z", "modified": "2026-01-27T05:12:59.348104Z", "relationship_type": "indicates", "source_ref": "indicator--cb1f6999-6a54-47be-9320-17b6889ac505", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7054d487-20c1-4fb3-8b9f-72fcf860ede0", "created": "2026-01-27T05:12:59.348286Z", "modified": "2026-01-27T05:12:59.348286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6030d118246c2c71ab37599f2bdd95eb56915cd115edae5b30456d987945d55d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.348286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9160928-6a48-47a5-b5fb-7bc1f7069c75", "created": "2026-01-27T05:12:59.349145Z", "modified": "2026-01-27T05:12:59.349145Z", "relationship_type": "indicates", "source_ref": "indicator--7054d487-20c1-4fb3-8b9f-72fcf860ede0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6699e98d-4afe-4848-8b92-28407b60ef44", "created": "2026-01-27T05:12:59.349327Z", "modified": "2026-01-27T05:12:59.349327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4076323296ffa0b025e11d271f11b92db3dda5cbc8969fa0aea1b105c3bc03fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.349327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80ab1f44-991c-4d2d-8b57-17d847a41ec3", "created": "2026-01-27T05:12:59.350179Z", "modified": "2026-01-27T05:12:59.350179Z", "relationship_type": "indicates", "source_ref": "indicator--6699e98d-4afe-4848-8b92-28407b60ef44", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386103b9-6092-40de-9175-0139129af134", "created": "2026-01-27T05:12:59.350356Z", "modified": "2026-01-27T05:12:59.350356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9f948b73717ded8700c77bd775a375fd7db6f5a133108589399d3c1ec1becf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.350356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--645b6ea0-0660-4e19-b4f8-f83c153eb1ad", "created": "2026-01-27T05:12:59.351209Z", "modified": "2026-01-27T05:12:59.351209Z", "relationship_type": "indicates", "source_ref": "indicator--386103b9-6092-40de-9175-0139129af134", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3689cc14-ac57-417d-8356-874158b00bc4", "created": "2026-01-27T05:12:59.351387Z", "modified": "2026-01-27T05:12:59.351387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3608b243fe48ff4506688f5ac1bada2a955a9ce31f85ff7abac26257af48453a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.351387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ad34569-e801-4c95-a78f-0e041c6ee862", "created": "2026-01-27T05:12:59.352226Z", "modified": "2026-01-27T05:12:59.352226Z", "relationship_type": "indicates", "source_ref": "indicator--3689cc14-ac57-417d-8356-874158b00bc4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9000c570-7e48-49c0-9655-54ac45c02330", "created": "2026-01-27T05:12:59.352401Z", "modified": "2026-01-27T05:12:59.352401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e1dcaa681acd6620e1639c2bf8304742a531c2489a40e19601305bba004fe62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.352401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a64479ff-9f10-4118-a6f3-e418ce94f502", "created": "2026-01-27T05:12:59.353384Z", "modified": "2026-01-27T05:12:59.353384Z", "relationship_type": "indicates", "source_ref": "indicator--9000c570-7e48-49c0-9655-54ac45c02330", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a6abee-42bf-4f8e-bbb6-0d5072b23b49", "created": "2026-01-27T05:12:59.353563Z", "modified": "2026-01-27T05:12:59.353563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd1e3425f0e2d6197267a8f12750c32be908386ad4159176ce37c547a00bed2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.353563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4054cee6-57bf-4940-af01-07f6f7eaeccc", "created": "2026-01-27T05:12:59.354402Z", "modified": "2026-01-27T05:12:59.354402Z", "relationship_type": "indicates", "source_ref": "indicator--77a6abee-42bf-4f8e-bbb6-0d5072b23b49", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda97e9a-4b95-45a3-8a00-9624250ad8c4", "created": "2026-01-27T05:12:59.354579Z", "modified": "2026-01-27T05:12:59.354579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2ebb54c6eb37acf50ab7519e2d3a6e626c3a441aa91dadcefc3cf1e86918cdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.354579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b0a42bd-79fc-417c-893e-60f51911c7f4", "created": "2026-01-27T05:12:59.355415Z", "modified": "2026-01-27T05:12:59.355415Z", "relationship_type": "indicates", "source_ref": "indicator--cda97e9a-4b95-45a3-8a00-9624250ad8c4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b535d0d-18fb-41e5-a753-72e049354c5e", "created": "2026-01-27T05:12:59.355591Z", "modified": "2026-01-27T05:12:59.355591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7920df89c7c2da25b8708b78fb05129eb23281f28c94ff6961dfa80950ef866a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.355591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2115bbf-9c41-47b0-aa98-b3595e28910a", "created": "2026-01-27T05:12:59.35643Z", "modified": "2026-01-27T05:12:59.35643Z", "relationship_type": "indicates", "source_ref": "indicator--7b535d0d-18fb-41e5-a753-72e049354c5e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f752784-3f46-4bac-9dbe-098e7b1332d8", "created": "2026-01-27T05:12:59.356607Z", "modified": "2026-01-27T05:12:59.356607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fb450daa54a6133a313644aa9695965ee3c8c15cbfb60edfc3e13f4e9c0931c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.356607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--951808fc-20cb-42d4-8377-18f74deaf0c7", "created": "2026-01-27T05:12:59.357441Z", "modified": "2026-01-27T05:12:59.357441Z", "relationship_type": "indicates", "source_ref": "indicator--4f752784-3f46-4bac-9dbe-098e7b1332d8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85450c73-e451-4223-918d-a369ef6bd0b0", "created": "2026-01-27T05:12:59.357623Z", "modified": "2026-01-27T05:12:59.357623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='68db5698a81f61afe367ab7f9cf423c12f974571e00eea4e7e135694d35b8abb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.357623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9b59ea4-d1f1-409b-97fc-5dd064a9cae0", "created": "2026-01-27T05:12:59.358464Z", "modified": "2026-01-27T05:12:59.358464Z", "relationship_type": "indicates", "source_ref": "indicator--85450c73-e451-4223-918d-a369ef6bd0b0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8496561-370f-444b-8735-8246d874c086", "created": "2026-01-27T05:12:59.358644Z", "modified": "2026-01-27T05:12:59.358644Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f1d64d8b0cbc30930b182f350d27ed1becd6a7a0473a7d86283bb4da3da143b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.358644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b5b80dd-e68c-42e0-b5bb-4bc7ae0c9f49", "created": "2026-01-27T05:12:59.359477Z", "modified": "2026-01-27T05:12:59.359477Z", "relationship_type": "indicates", "source_ref": "indicator--b8496561-370f-444b-8735-8246d874c086", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a688f75b-7495-4148-b9e4-342dfd0a8c9c", "created": "2026-01-27T05:12:59.359657Z", "modified": "2026-01-27T05:12:59.359657Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a7cfc132c31e15de202a6386f4ef61187a31ffce31d38a7fff8b10a71ad7d92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.359657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e795d16c-9c61-4708-ac6c-a9f8f8cd94d9", "created": "2026-01-27T05:12:59.360502Z", "modified": "2026-01-27T05:12:59.360502Z", "relationship_type": "indicates", "source_ref": "indicator--a688f75b-7495-4148-b9e4-342dfd0a8c9c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d0cacf-553c-4efa-9250-9f57f7dd4d26", "created": "2026-01-27T05:12:59.360678Z", "modified": "2026-01-27T05:12:59.360678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3feeb95c3b497ccaf7f6e2cd1d71e5e9ce178e64c0069165a6831995c0fe634a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.360678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c4d5f33-c94c-4e1d-99f0-f7b0a1059241", "created": "2026-01-27T05:12:59.361536Z", "modified": "2026-01-27T05:12:59.361536Z", "relationship_type": "indicates", "source_ref": "indicator--53d0cacf-553c-4efa-9250-9f57f7dd4d26", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48777763-42a7-4b31-980f-c755f3e7afd2", "created": "2026-01-27T05:12:59.361709Z", "modified": "2026-01-27T05:12:59.361709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94dbfb884b6c61e97534b7ae0bc20d9bb45040f661f1f6c49fafbffd411e0201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.361709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f6a6967-50d0-4d52-9781-0a424a8b408d", "created": "2026-01-27T05:12:59.362689Z", "modified": "2026-01-27T05:12:59.362689Z", "relationship_type": "indicates", "source_ref": "indicator--48777763-42a7-4b31-980f-c755f3e7afd2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e80608-e504-4110-bbdb-25bec34cbfae", "created": "2026-01-27T05:12:59.362913Z", "modified": "2026-01-27T05:12:59.362913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b29bd3e09155d7a49813fa8af702a1f1f844269d9b83ec143a060da9661654e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.362913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e89c6082-7246-42cc-96fa-327bdcb7a706", "created": "2026-01-27T05:12:59.363785Z", "modified": "2026-01-27T05:12:59.363785Z", "relationship_type": "indicates", "source_ref": "indicator--f0e80608-e504-4110-bbdb-25bec34cbfae", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a150cb1e-7b27-4fac-87ed-35870f8bf977", "created": "2026-01-27T05:12:59.36402Z", "modified": "2026-01-27T05:12:59.36402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f63417b981cd71e74b30e3dd5fc3081c59daf4421f7aff0c41292d59cc00042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.36402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7d8b783-71cf-493c-8157-18b61421faf5", "created": "2026-01-27T05:12:59.364921Z", "modified": "2026-01-27T05:12:59.364921Z", "relationship_type": "indicates", "source_ref": "indicator--a150cb1e-7b27-4fac-87ed-35870f8bf977", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff40b3f8-eaad-4c88-852e-820dbe80a2e7", "created": "2026-01-27T05:12:59.365102Z", "modified": "2026-01-27T05:12:59.365102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56c445a581b29c776d0770a18a8b3681df618b3bfe3752fdc0f7c5f3fc46879b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.365102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--324801ec-60eb-4340-bab7-81f95e0ecb06", "created": "2026-01-27T05:12:59.365948Z", "modified": "2026-01-27T05:12:59.365948Z", "relationship_type": "indicates", "source_ref": "indicator--ff40b3f8-eaad-4c88-852e-820dbe80a2e7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27230a54-21d1-487a-bdbf-16e291fb9585", "created": "2026-01-27T05:12:59.366128Z", "modified": "2026-01-27T05:12:59.366128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cef0bc1d7964274a9bf3974ba21dda7a8bbf0a18c955b0d494882bd656cb9f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.366128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4614b146-cbf8-44bc-b64b-b546d8801ad2", "created": "2026-01-27T05:12:59.366976Z", "modified": "2026-01-27T05:12:59.366976Z", "relationship_type": "indicates", "source_ref": "indicator--27230a54-21d1-487a-bdbf-16e291fb9585", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ca91e2-3edc-44cc-83cd-b35f04a6416d", "created": "2026-01-27T05:12:59.367157Z", "modified": "2026-01-27T05:12:59.367157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fef1e2bb2a80e28750490b1c9aea09e8a62a06c667268e3b7d732fdd78f9ccb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.367157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--023d2faa-6ace-4457-be59-defe26af1d37", "created": "2026-01-27T05:12:59.368012Z", "modified": "2026-01-27T05:12:59.368012Z", "relationship_type": "indicates", "source_ref": "indicator--71ca91e2-3edc-44cc-83cd-b35f04a6416d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9873e092-59f7-46a4-8434-5e763a385e5e", "created": "2026-01-27T05:12:59.368189Z", "modified": "2026-01-27T05:12:59.368189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0abedcadd7f451207b2f43a3b3953239a192dfee0623e0510ebe47abd1d9e4cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.368189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3165be9f-7f89-49ac-8ea7-8bb3348941b9", "created": "2026-01-27T05:12:59.36903Z", "modified": "2026-01-27T05:12:59.36903Z", "relationship_type": "indicates", "source_ref": "indicator--9873e092-59f7-46a4-8434-5e763a385e5e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563d18d6-53af-4ab3-9d3f-699f0b62a074", "created": "2026-01-27T05:12:59.369205Z", "modified": "2026-01-27T05:12:59.369205Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='606b00397a93e198be1103d8fcbfac6a4ad9e2b0f92259a0efb6462a86e73d15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.369205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b82f32a-7fb3-4236-894a-f7839896434c", "created": "2026-01-27T05:12:59.370045Z", "modified": "2026-01-27T05:12:59.370045Z", "relationship_type": "indicates", "source_ref": "indicator--563d18d6-53af-4ab3-9d3f-699f0b62a074", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09441ff-73fc-46c4-b6bc-709806ae6485", "created": "2026-01-27T05:12:59.370218Z", "modified": "2026-01-27T05:12:59.370218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e74e4a4b4602e2fb140176da799b0a8b6d8aa334f331d41341f6597fb0dacef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.370218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e29e41a2-8816-4472-86c1-8660b00a15e5", "created": "2026-01-27T05:12:59.371069Z", "modified": "2026-01-27T05:12:59.371069Z", "relationship_type": "indicates", "source_ref": "indicator--a09441ff-73fc-46c4-b6bc-709806ae6485", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c594c955-8e6f-4031-b78c-5f31eac6508c", "created": "2026-01-27T05:12:59.371244Z", "modified": "2026-01-27T05:12:59.371244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e29098919f23b41b95bb363224d7cc5bc388571fa6ba069262f7e858a29d4127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.371244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--101ba23d-2ee0-4428-9417-2a453229f402", "created": "2026-01-27T05:12:59.3722Z", "modified": "2026-01-27T05:12:59.3722Z", "relationship_type": "indicates", "source_ref": "indicator--c594c955-8e6f-4031-b78c-5f31eac6508c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c9e216b-ba7d-4f65-851a-437f80e1b965", "created": "2026-01-27T05:12:59.372378Z", "modified": "2026-01-27T05:12:59.372378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='889a7a40ae025f9367adde8f24136e771764986d46c32efaa27bc6e670bc36e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.372378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b96255f4-c8b5-47d9-81bf-2aa7d1057f53", "created": "2026-01-27T05:12:59.37322Z", "modified": "2026-01-27T05:12:59.37322Z", "relationship_type": "indicates", "source_ref": "indicator--3c9e216b-ba7d-4f65-851a-437f80e1b965", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f7ff65-3ea4-482b-9ab3-ed03a25e05d6", "created": "2026-01-27T05:12:59.373396Z", "modified": "2026-01-27T05:12:59.373396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bb114baa7e01701b0cffb499127b6bd9dfe39f4183fbb3e0d8000cd1d001147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.373396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--527aa574-ddec-4812-8607-7ee6e9dce938", "created": "2026-01-27T05:12:59.374227Z", "modified": "2026-01-27T05:12:59.374227Z", "relationship_type": "indicates", "source_ref": "indicator--d9f7ff65-3ea4-482b-9ab3-ed03a25e05d6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c132487-a227-4dc4-81c6-52c40a41de22", "created": "2026-01-27T05:12:59.374402Z", "modified": "2026-01-27T05:12:59.374402Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eaab7396e895936d1cd05e8afafd6cb5f45261cca14f2860518b798e06b2c3a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.374402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a458150-ee03-463a-a5b8-e12dd2a44084", "created": "2026-01-27T05:12:59.375273Z", "modified": "2026-01-27T05:12:59.375273Z", "relationship_type": "indicates", "source_ref": "indicator--4c132487-a227-4dc4-81c6-52c40a41de22", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a679e0c-32d7-4216-b950-2c7907c6518a", "created": "2026-01-27T05:12:59.375453Z", "modified": "2026-01-27T05:12:59.375453Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40eee1116b999dad2563bbe76aac3802ce960c48697bc12cee9bc54dfe0eb0e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.375453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--755f4e70-5205-4091-9f98-02db0691bae4", "created": "2026-01-27T05:12:59.376288Z", "modified": "2026-01-27T05:12:59.376288Z", "relationship_type": "indicates", "source_ref": "indicator--1a679e0c-32d7-4216-b950-2c7907c6518a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e5eb8c5-3138-4b90-8308-3b14fe3ed7ab", "created": "2026-01-27T05:12:59.37647Z", "modified": "2026-01-27T05:12:59.37647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0214d5c4e90196540b51d5cbf4cbfeece955b5c8c79e62dc80e8b663dafa4daa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.37647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4d045ef-0368-49c6-8314-522912805ff8", "created": "2026-01-27T05:12:59.377309Z", "modified": "2026-01-27T05:12:59.377309Z", "relationship_type": "indicates", "source_ref": "indicator--9e5eb8c5-3138-4b90-8308-3b14fe3ed7ab", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afe492e-fe12-4c6c-a821-18044c5240c1", "created": "2026-01-27T05:12:59.377491Z", "modified": "2026-01-27T05:12:59.377491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cc126ea05fb7b3a39d95303176ca42f19fd3c8bb0a53f1d5ac913842e91e70e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.377491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fe069c4-1221-4f70-94c9-7fc4ea427358", "created": "2026-01-27T05:12:59.37834Z", "modified": "2026-01-27T05:12:59.37834Z", "relationship_type": "indicates", "source_ref": "indicator--3afe492e-fe12-4c6c-a821-18044c5240c1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa231cd-c9fb-40f1-982e-a5f36b5fb5cd", "created": "2026-01-27T05:12:59.378573Z", "modified": "2026-01-27T05:12:59.378573Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77b6f31aae8fe2b07cd157d429cbd1c0f837628016feb67fad617d49ef9c3385']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.378573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fd1c427-4257-433c-80f5-155ba15cf254", "created": "2026-01-27T05:12:59.379451Z", "modified": "2026-01-27T05:12:59.379451Z", "relationship_type": "indicates", "source_ref": "indicator--5fa231cd-c9fb-40f1-982e-a5f36b5fb5cd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569772fc-7e3c-4668-a212-5959f9f614b4", "created": "2026-01-27T05:12:59.379633Z", "modified": "2026-01-27T05:12:59.379633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9a1b725e2906f21354a8b90bf411ebb585a5ad486feb185912a9609127f4a1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.379633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--091def60-a8c3-4735-abc4-54f8bbfd8c3f", "created": "2026-01-27T05:12:59.380648Z", "modified": "2026-01-27T05:12:59.380648Z", "relationship_type": "indicates", "source_ref": "indicator--569772fc-7e3c-4668-a212-5959f9f614b4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25edc580-a297-4950-b0e5-35ebb69cc820", "created": "2026-01-27T05:12:59.380856Z", "modified": "2026-01-27T05:12:59.380856Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='795c87b2b71e3d2f1bc0368ae16e0b830007bc5a880e5605dbb7683e9636f7f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.380856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7732218e-9831-4944-b04b-b72d9c5e9874", "created": "2026-01-27T05:12:59.381699Z", "modified": "2026-01-27T05:12:59.381699Z", "relationship_type": "indicates", "source_ref": "indicator--25edc580-a297-4950-b0e5-35ebb69cc820", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c6723a-a437-4be8-ba13-fbf0ed36da10", "created": "2026-01-27T05:12:59.381893Z", "modified": "2026-01-27T05:12:59.381893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9871cb36269ba18f2a0b80ee0e3a01843b2ac190ea2be8e1b582af515295dfd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.381893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a85ceac-23aa-4468-af10-015d20f1ae03", "created": "2026-01-27T05:12:59.382716Z", "modified": "2026-01-27T05:12:59.382716Z", "relationship_type": "indicates", "source_ref": "indicator--73c6723a-a437-4be8-ba13-fbf0ed36da10", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5535b2-ce89-41fb-89f3-95f7c09ecbd1", "created": "2026-01-27T05:12:59.382911Z", "modified": "2026-01-27T05:12:59.382911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffac75e8020fcb44db4354d59d7fb8674709f28c52142215ec7c68c0667ba3a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.382911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1caed3d9-219c-41dd-bc97-fe7adc039079", "created": "2026-01-27T05:12:59.383735Z", "modified": "2026-01-27T05:12:59.383735Z", "relationship_type": "indicates", "source_ref": "indicator--9a5535b2-ce89-41fb-89f3-95f7c09ecbd1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d8a283-3971-4c74-8ebe-8232294eb2d4", "created": "2026-01-27T05:12:59.383929Z", "modified": "2026-01-27T05:12:59.383929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3eb30b454ce08240f0ddf1c91da97e1370c5e6aa90ea94055cfcc1132b41bed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.383929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d71d222-cf2b-4186-84e6-234a42d7c108", "created": "2026-01-27T05:12:59.384761Z", "modified": "2026-01-27T05:12:59.384761Z", "relationship_type": "indicates", "source_ref": "indicator--a6d8a283-3971-4c74-8ebe-8232294eb2d4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207825da-7663-4ec1-a248-50cac0901f6e", "created": "2026-01-27T05:12:59.384938Z", "modified": "2026-01-27T05:12:59.384938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce6532d06c6aabddcbafc0061030edea5acb33cd6246346695b8996ea44242ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.384938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d9e0dac-f23f-4f0b-9bdf-ddccc61f7628", "created": "2026-01-27T05:12:59.385766Z", "modified": "2026-01-27T05:12:59.385766Z", "relationship_type": "indicates", "source_ref": "indicator--207825da-7663-4ec1-a248-50cac0901f6e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72f1b86-46ce-4ce5-b929-4fb4f3ee8cec", "created": "2026-01-27T05:12:59.385943Z", "modified": "2026-01-27T05:12:59.385943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b9979b601de3c9ae83cd6f7671e161f1ebdda7761a4086a93d53210c33310f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.385943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75880f29-d037-4af6-be3a-184aa3fee2c7", "created": "2026-01-27T05:12:59.38678Z", "modified": "2026-01-27T05:12:59.38678Z", "relationship_type": "indicates", "source_ref": "indicator--d72f1b86-46ce-4ce5-b929-4fb4f3ee8cec", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a153d6b9-f7f9-43c3-ac01-0c191cb4a35b", "created": "2026-01-27T05:12:59.386958Z", "modified": "2026-01-27T05:12:59.386958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='255c13be70626dffe5465155c13717a275ad2982b2d863dcd8ff45b4544476b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.386958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f6fc7b6-f2d2-44e0-8fbc-fd3a675f49ab", "created": "2026-01-27T05:12:59.387807Z", "modified": "2026-01-27T05:12:59.387807Z", "relationship_type": "indicates", "source_ref": "indicator--a153d6b9-f7f9-43c3-ac01-0c191cb4a35b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5071c9-f884-414b-a949-fa359e27bb93", "created": "2026-01-27T05:12:59.387985Z", "modified": "2026-01-27T05:12:59.387985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3c3bbb80b8da68d981239f2d011524b30418d77cb9946f7ed2f2644adaa8d5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.387985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2d26a87-d6e6-4831-8f9b-d3c8fcdac9e4", "created": "2026-01-27T05:12:59.388821Z", "modified": "2026-01-27T05:12:59.388821Z", "relationship_type": "indicates", "source_ref": "indicator--da5071c9-f884-414b-a949-fa359e27bb93", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b63c36-9a07-4b00-9fbe-99dd8252c0a4", "created": "2026-01-27T05:12:59.388996Z", "modified": "2026-01-27T05:12:59.388996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c214d170a86ac57e486785f290bc88e561bbc1ded1127ddbf7bf5c0cd77f7c1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.388996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8422e84c-31ab-4ba7-8ef9-ef8029abe07c", "created": "2026-01-27T05:12:59.389962Z", "modified": "2026-01-27T05:12:59.389962Z", "relationship_type": "indicates", "source_ref": "indicator--69b63c36-9a07-4b00-9fbe-99dd8252c0a4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6dec88-f0cc-4910-a0f4-6eb22d4b80c7", "created": "2026-01-27T05:12:59.390138Z", "modified": "2026-01-27T05:12:59.390138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d765bf6a1ba2b84965120cea904aaea94e6bd339bc789e4c326823fe07bba5e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.390138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--546b472d-19d2-4d41-ab94-d89f6ab3cafd", "created": "2026-01-27T05:12:59.39098Z", "modified": "2026-01-27T05:12:59.39098Z", "relationship_type": "indicates", "source_ref": "indicator--cf6dec88-f0cc-4910-a0f4-6eb22d4b80c7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14129713-104c-40b9-9e11-50b6586739af", "created": "2026-01-27T05:12:59.391157Z", "modified": "2026-01-27T05:12:59.391157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d36e3bfa5183b8bd6a1c5e9f76ec42a3094167c9be24a428d6e496721bbb64f4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.391157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6064e9eb-a95b-4285-803e-0a578f4eb54c", "created": "2026-01-27T05:12:59.391992Z", "modified": "2026-01-27T05:12:59.391992Z", "relationship_type": "indicates", "source_ref": "indicator--14129713-104c-40b9-9e11-50b6586739af", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafaad0e-041a-4488-8e5c-684a8e84a153", "created": "2026-01-27T05:12:59.392168Z", "modified": "2026-01-27T05:12:59.392168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63abe59172b8a43d7ecdd9aee350254c9ab169276c618bb5fe5f370821a753c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.392168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df0e16dd-a421-49df-b12f-3b75ddbb8034", "created": "2026-01-27T05:12:59.393002Z", "modified": "2026-01-27T05:12:59.393002Z", "relationship_type": "indicates", "source_ref": "indicator--aafaad0e-041a-4488-8e5c-684a8e84a153", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acfbf92c-d9fb-43bb-94d0-3984ad87330b", "created": "2026-01-27T05:12:59.393179Z", "modified": "2026-01-27T05:12:59.393179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='736d3e9a4094acfddd0fc2f90325a3acec4d945e46244e20362d3fda27d51411']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.393179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4867cdc5-700f-4d87-a466-bc81c623d846", "created": "2026-01-27T05:12:59.394028Z", "modified": "2026-01-27T05:12:59.394028Z", "relationship_type": "indicates", "source_ref": "indicator--acfbf92c-d9fb-43bb-94d0-3984ad87330b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db79d96-a012-4569-a537-56961ac2837c", "created": "2026-01-27T05:12:59.394203Z", "modified": "2026-01-27T05:12:59.394203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d50b5551bc53f712681b8308e8c50a2433bfd9a346e052b68e01e2f6ffdf7845']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.394203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fbcc944-1e77-4c10-b0e7-0c72da83293a", "created": "2026-01-27T05:12:59.395101Z", "modified": "2026-01-27T05:12:59.395101Z", "relationship_type": "indicates", "source_ref": "indicator--4db79d96-a012-4569-a537-56961ac2837c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe893db-6a47-49a3-a71a-499512e3090a", "created": "2026-01-27T05:12:59.395284Z", "modified": "2026-01-27T05:12:59.395284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ea85bbd75306210e4bd8494c934d2c1b9e016d9f11a2b502b9c9a08e2acc5a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.395284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afdea5e6-b619-4140-aa1b-3346129ad9f0", "created": "2026-01-27T05:12:59.396134Z", "modified": "2026-01-27T05:12:59.396134Z", "relationship_type": "indicates", "source_ref": "indicator--dfe893db-6a47-49a3-a71a-499512e3090a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6772823a-ecb3-46ba-b16f-8021f61180ea", "created": "2026-01-27T05:12:59.396312Z", "modified": "2026-01-27T05:12:59.396312Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27e8e68e258485ff87c695791b21f6523992f438eda39682eff8bf2cf78f77d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.396312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--379151d7-57e2-4b2b-9afd-77c4f22ee696", "created": "2026-01-27T05:12:59.397157Z", "modified": "2026-01-27T05:12:59.397157Z", "relationship_type": "indicates", "source_ref": "indicator--6772823a-ecb3-46ba-b16f-8021f61180ea", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e56a31-01a8-43f0-972a-aa6c40399a9c", "created": "2026-01-27T05:12:59.397335Z", "modified": "2026-01-27T05:12:59.397335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='645575cce8fab323c471d4c750f1f502a1cc18287ba81a54a68f7645c177a63b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.397335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6cb1e0c-b8cc-41b7-ad16-ae42857a0756", "created": "2026-01-27T05:12:59.398209Z", "modified": "2026-01-27T05:12:59.398209Z", "relationship_type": "indicates", "source_ref": "indicator--71e56a31-01a8-43f0-972a-aa6c40399a9c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f235621-da33-403f-b25a-a1beee55f42e", "created": "2026-01-27T05:12:59.398404Z", "modified": "2026-01-27T05:12:59.398404Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91f3435971395cbc2cd95760b1520de2d4ca0202e77abfc40b464d079fb87944']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.398404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67f1b64f-c360-4914-8aba-72531b83d9d9", "created": "2026-01-27T05:12:59.399832Z", "modified": "2026-01-27T05:12:59.399832Z", "relationship_type": "indicates", "source_ref": "indicator--0f235621-da33-403f-b25a-a1beee55f42e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb3a14f-5066-4d3e-8499-913dda1fee2d", "created": "2026-01-27T05:12:59.400021Z", "modified": "2026-01-27T05:12:59.400021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6dae39f366fa6f5063b0767da755485ca3fa30ebc7d164f89fe328cb0f5c7979']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.400021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8508a2fb-5282-4572-85b0-631cb353ed2e", "created": "2026-01-27T05:12:59.400863Z", "modified": "2026-01-27T05:12:59.400863Z", "relationship_type": "indicates", "source_ref": "indicator--fbb3a14f-5066-4d3e-8499-913dda1fee2d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0100aaa6-8eb6-45b1-9517-23368aaea075", "created": "2026-01-27T05:12:59.401044Z", "modified": "2026-01-27T05:12:59.401044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eadc38555fac1ee82cc56ca02b651da95c670bfec717c03fa59ef593d209337c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.401044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eb11ad7-c2d2-44f6-9046-1e37dd3ed915", "created": "2026-01-27T05:12:59.401883Z", "modified": "2026-01-27T05:12:59.401883Z", "relationship_type": "indicates", "source_ref": "indicator--0100aaa6-8eb6-45b1-9517-23368aaea075", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2c483b-507d-4fd4-86c9-9dac436e30ee", "created": "2026-01-27T05:12:59.402062Z", "modified": "2026-01-27T05:12:59.402062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e5d183427459595f40fb0409c7126aad3b2f5127b46b5f3d6211c1d0c9e62d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.402062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3595ccdb-a7c7-44eb-8475-273a2459675c", "created": "2026-01-27T05:12:59.402898Z", "modified": "2026-01-27T05:12:59.402898Z", "relationship_type": "indicates", "source_ref": "indicator--4b2c483b-507d-4fd4-86c9-9dac436e30ee", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fb49f3-5de4-4e77-b34f-041161398ade", "created": "2026-01-27T05:12:59.403082Z", "modified": "2026-01-27T05:12:59.403082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1258bfeec7ca454c47ea9081c8fdce415eeb2287cc16675fd0818ab6e8128dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.403082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c1e0137-a359-4d7a-9e15-96ad6737420b", "created": "2026-01-27T05:12:59.403921Z", "modified": "2026-01-27T05:12:59.403921Z", "relationship_type": "indicates", "source_ref": "indicator--93fb49f3-5de4-4e77-b34f-041161398ade", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c920a1aa-29fb-43d0-a81a-b74ccddab479", "created": "2026-01-27T05:12:59.404104Z", "modified": "2026-01-27T05:12:59.404104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20b7571f705f9e5c073b8cb558505d06366f5b4d71b0a634abe1ea7292931e83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.404104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e8b633f-6a36-4a54-a9df-4e5575477c60", "created": "2026-01-27T05:12:59.404947Z", "modified": "2026-01-27T05:12:59.404947Z", "relationship_type": "indicates", "source_ref": "indicator--c920a1aa-29fb-43d0-a81a-b74ccddab479", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3ecfeb-6fbd-4ea9-8bac-62dfa128e89d", "created": "2026-01-27T05:12:59.405125Z", "modified": "2026-01-27T05:12:59.405125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9145f2248ebb3a7bbfad88da09fd7a0a9ed58455418376cefa530887ebb1d000']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.405125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6cf88e9-29c9-474b-8d77-d4a580c71d79", "created": "2026-01-27T05:12:59.40596Z", "modified": "2026-01-27T05:12:59.40596Z", "relationship_type": "indicates", "source_ref": "indicator--db3ecfeb-6fbd-4ea9-8bac-62dfa128e89d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51d81f5-2caf-48f2-a655-41a1a8df7c11", "created": "2026-01-27T05:12:59.406134Z", "modified": "2026-01-27T05:12:59.406134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d51aa5d0821fbd9a011b681dc02cb1e606e5b62a80575dfade8dc70a6492646d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.406134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e7a209c-2dbc-4070-88e3-ae102b4b3ef7", "created": "2026-01-27T05:12:59.406965Z", "modified": "2026-01-27T05:12:59.406965Z", "relationship_type": "indicates", "source_ref": "indicator--f51d81f5-2caf-48f2-a655-41a1a8df7c11", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3826ae7-0749-45db-9602-c72356504cbd", "created": "2026-01-27T05:12:59.407142Z", "modified": "2026-01-27T05:12:59.407142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ee8fdf725ba44f16b8a45b826ef02d35580c9f1cb02bbe19695a097f4e2c9da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.407142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb1b6c10-435e-4405-bf5c-b3dcd79db3ea", "created": "2026-01-27T05:12:59.407978Z", "modified": "2026-01-27T05:12:59.407978Z", "relationship_type": "indicates", "source_ref": "indicator--b3826ae7-0749-45db-9602-c72356504cbd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1702639-cb20-440e-958d-35efba1cf1ec", "created": "2026-01-27T05:12:59.408154Z", "modified": "2026-01-27T05:12:59.408154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d313c47097568ad7bd2c9b3a0c8cf2e879d5d0ec66588a3751432551286f6a6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.408154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a523e995-0337-4084-a166-6a00981c6b54", "created": "2026-01-27T05:12:59.409122Z", "modified": "2026-01-27T05:12:59.409122Z", "relationship_type": "indicates", "source_ref": "indicator--a1702639-cb20-440e-958d-35efba1cf1ec", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bc1490-8efc-40c1-9ad6-5bd37b763450", "created": "2026-01-27T05:12:59.409311Z", "modified": "2026-01-27T05:12:59.409311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab938bcfffde58bd145e6bb1e265c9ea1f81db35d4376839f074c4551059bd2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.409311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69489faf-bf66-42ca-bed0-b9be4298f373", "created": "2026-01-27T05:12:59.410157Z", "modified": "2026-01-27T05:12:59.410157Z", "relationship_type": "indicates", "source_ref": "indicator--85bc1490-8efc-40c1-9ad6-5bd37b763450", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd56fa5-81e0-4cb1-90ff-c432bca963b6", "created": "2026-01-27T05:12:59.410344Z", "modified": "2026-01-27T05:12:59.410344Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='381219902afac8d8007275a64a99c1012e82521086e8db1fad5ecd30290bb531']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.410344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c17317e-1dab-4d7d-a092-487a44c43b55", "created": "2026-01-27T05:12:59.411214Z", "modified": "2026-01-27T05:12:59.411214Z", "relationship_type": "indicates", "source_ref": "indicator--bbd56fa5-81e0-4cb1-90ff-c432bca963b6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a10056-322f-4d52-ae61-eb359a386717", "created": "2026-01-27T05:12:59.411395Z", "modified": "2026-01-27T05:12:59.411395Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85707c14853a499961197ba8d2a07434a42c31e863d54287c3d8cae94b6e1a2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.411395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066df595-2a77-4496-a7cc-9d8b5229e612", "created": "2026-01-27T05:12:59.412274Z", "modified": "2026-01-27T05:12:59.412274Z", "relationship_type": "indicates", "source_ref": "indicator--86a10056-322f-4d52-ae61-eb359a386717", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dfb6ce-28b0-4038-aa43-df6b1f7a6f41", "created": "2026-01-27T05:12:59.412462Z", "modified": "2026-01-27T05:12:59.412462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b24256be131fd2c3a6147bcb0f55d686caf7b5c9c65c992cbc9aa6ffeadda0fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.412462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7c1c27c-55d9-415c-af1f-0ed36f31cce0", "created": "2026-01-27T05:12:59.413303Z", "modified": "2026-01-27T05:12:59.413303Z", "relationship_type": "indicates", "source_ref": "indicator--19dfb6ce-28b0-4038-aa43-df6b1f7a6f41", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb45a3d-9709-4924-840a-308c4aba7367", "created": "2026-01-27T05:12:59.413489Z", "modified": "2026-01-27T05:12:59.413489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7aa0e75673f0ad17b1e5bdb63651bb04f4f86c43ab41a309939588016dfafdba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.413489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41677e85-bd35-4ed0-96ab-7ce03f63a389", "created": "2026-01-27T05:12:59.414323Z", "modified": "2026-01-27T05:12:59.414323Z", "relationship_type": "indicates", "source_ref": "indicator--5eb45a3d-9709-4924-840a-308c4aba7367", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99aa57bc-d796-4397-ba87-01a60b1b52cd", "created": "2026-01-27T05:12:59.414498Z", "modified": "2026-01-27T05:12:59.414498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9f727d24e1c692c9b66176e9521b95bd39343b5abbeff5cd37544764c5b9bed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.414498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a06fa82-68fa-4be6-9891-20fec0a13138", "created": "2026-01-27T05:12:59.415327Z", "modified": "2026-01-27T05:12:59.415327Z", "relationship_type": "indicates", "source_ref": "indicator--99aa57bc-d796-4397-ba87-01a60b1b52cd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0100b31f-ce84-4b3e-83ef-e731247d8c70", "created": "2026-01-27T05:12:59.415499Z", "modified": "2026-01-27T05:12:59.415499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='030fb136b810b70d242540a628b537f567ac32ee95d0a81c8001eeecf3ee2670']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.415499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3abaac0-5384-43b2-9270-96d5f7974545", "created": "2026-01-27T05:12:59.416347Z", "modified": "2026-01-27T05:12:59.416347Z", "relationship_type": "indicates", "source_ref": "indicator--0100b31f-ce84-4b3e-83ef-e731247d8c70", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae205b3-b479-4af6-952c-9963c01de1ee", "created": "2026-01-27T05:12:59.416522Z", "modified": "2026-01-27T05:12:59.416522Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='787e0401672c7470b4c9f4dcc3531d26256c94aa38c5f781d12e7d2971607b51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.416522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f096b17f-e3c1-4dbe-a749-5647fa668b44", "created": "2026-01-27T05:12:59.417363Z", "modified": "2026-01-27T05:12:59.417363Z", "relationship_type": "indicates", "source_ref": "indicator--8ae205b3-b479-4af6-952c-9963c01de1ee", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8ca2bd-3fdc-4062-9b09-777cdf3d3919", "created": "2026-01-27T05:12:59.417543Z", "modified": "2026-01-27T05:12:59.417543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38c3ab08039cd92aa861f58398d96c8af1cbcad6d7df8692379ce4d92591d04f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.417543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8def46f9-3afb-46da-aa5e-8ca9ee6ee096", "created": "2026-01-27T05:12:59.418518Z", "modified": "2026-01-27T05:12:59.418518Z", "relationship_type": "indicates", "source_ref": "indicator--0a8ca2bd-3fdc-4062-9b09-777cdf3d3919", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05df0237-02cb-4698-8ff9-62bb962f2e06", "created": "2026-01-27T05:12:59.418696Z", "modified": "2026-01-27T05:12:59.418696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b1ed5b560acf5097b5ad94f295eefdd04462ad7b81195a19d235a3764f68dbf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.418696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6856ef1e-730f-45d8-a10a-d7a20d5fb55b", "created": "2026-01-27T05:12:59.41954Z", "modified": "2026-01-27T05:12:59.41954Z", "relationship_type": "indicates", "source_ref": "indicator--05df0237-02cb-4698-8ff9-62bb962f2e06", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c331087-7ff4-4d62-8cd6-61e679350dce", "created": "2026-01-27T05:12:59.419717Z", "modified": "2026-01-27T05:12:59.419717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e0515add0a382f4dbc901506798b9a8a61ac67814633ff7c5499210442d5142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.419717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac793197-9ade-4e63-86ab-271e513b4c48", "created": "2026-01-27T05:12:59.420563Z", "modified": "2026-01-27T05:12:59.420563Z", "relationship_type": "indicates", "source_ref": "indicator--4c331087-7ff4-4d62-8cd6-61e679350dce", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf4f6a4-d077-4f28-9801-d5c062673b68", "created": "2026-01-27T05:12:59.42074Z", "modified": "2026-01-27T05:12:59.42074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a22a028a905acf5e23979be83e0b70e329de2e58e61b0e2a436f42a395126e13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.42074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9654b406-6bea-43c9-9f89-280428124ee2", "created": "2026-01-27T05:12:59.421572Z", "modified": "2026-01-27T05:12:59.421572Z", "relationship_type": "indicates", "source_ref": "indicator--fcf4f6a4-d077-4f28-9801-d5c062673b68", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f27c06-00de-4091-bb9a-c1d9b6bc52df", "created": "2026-01-27T05:12:59.421756Z", "modified": "2026-01-27T05:12:59.421756Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbfffb70081d7415e446453b5839ea07939ec683aaff58da6b20cdcf5e2b649e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.421756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98c103c2-9563-495f-877f-be26473e2298", "created": "2026-01-27T05:12:59.422574Z", "modified": "2026-01-27T05:12:59.422574Z", "relationship_type": "indicates", "source_ref": "indicator--e2f27c06-00de-4091-bb9a-c1d9b6bc52df", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e49a55c-c990-4c11-b364-4937b58c64fa", "created": "2026-01-27T05:12:59.422758Z", "modified": "2026-01-27T05:12:59.422758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7377788e2ca1975c6f2cdc8654832533232f1863a76bf2cfba9f2e63b285580']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.422758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cfa9c3d-aee9-4fdd-b9da-87767a0fd7c3", "created": "2026-01-27T05:12:59.423586Z", "modified": "2026-01-27T05:12:59.423586Z", "relationship_type": "indicates", "source_ref": "indicator--6e49a55c-c990-4c11-b364-4937b58c64fa", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c67092a-1e17-4c6f-8621-89a5d3434da4", "created": "2026-01-27T05:12:59.423773Z", "modified": "2026-01-27T05:12:59.423773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4795eab2c6fcafbf12b7bf4b20bad8adbf92571f4c492239ceb33bd5fba18759']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.423773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0dae107-85ec-4f65-92a4-87913304319c", "created": "2026-01-27T05:12:59.424593Z", "modified": "2026-01-27T05:12:59.424593Z", "relationship_type": "indicates", "source_ref": "indicator--3c67092a-1e17-4c6f-8621-89a5d3434da4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e5a7c2-9111-4bcb-bda9-177a91e2ad3f", "created": "2026-01-27T05:12:59.424784Z", "modified": "2026-01-27T05:12:59.424784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54347a279f595270f5f88247b1f3cba62559489f4f4200ca6738352412dd8c7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.424784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a346071-7b81-4201-9bc3-ffa45bd6f0c0", "created": "2026-01-27T05:12:59.425602Z", "modified": "2026-01-27T05:12:59.425602Z", "relationship_type": "indicates", "source_ref": "indicator--24e5a7c2-9111-4bcb-bda9-177a91e2ad3f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911349af-3579-4ae3-9eca-7205ca26d277", "created": "2026-01-27T05:12:59.425796Z", "modified": "2026-01-27T05:12:59.425796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='888f9787cd5800e8558a2601467f344bf99cb62708ca93b665a54922ef617b1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.425796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e878ff27-55a0-4ee7-928c-c850161ad242", "created": "2026-01-27T05:12:59.426788Z", "modified": "2026-01-27T05:12:59.426788Z", "relationship_type": "indicates", "source_ref": "indicator--911349af-3579-4ae3-9eca-7205ca26d277", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060eab2e-303d-4f2e-af2b-e66e44e263df", "created": "2026-01-27T05:12:59.426977Z", "modified": "2026-01-27T05:12:59.426977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd2e841a648a331d08b51a9353ae42710375ea31812f61ec3afe4fdd8903cb96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.426977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77216032-bf8b-46de-a24a-997431af4409", "created": "2026-01-27T05:12:59.427829Z", "modified": "2026-01-27T05:12:59.427829Z", "relationship_type": "indicates", "source_ref": "indicator--060eab2e-303d-4f2e-af2b-e66e44e263df", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aca246e-f4a7-449a-a1a2-c4602b836eaf", "created": "2026-01-27T05:12:59.428015Z", "modified": "2026-01-27T05:12:59.428015Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87705e036769ef87784195ccede0dc2fcc650e25835d8f160eff5080e4fec47a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.428015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--652e1959-71df-48a9-b827-ec57aa88dea8", "created": "2026-01-27T05:12:59.428851Z", "modified": "2026-01-27T05:12:59.428851Z", "relationship_type": "indicates", "source_ref": "indicator--0aca246e-f4a7-449a-a1a2-c4602b836eaf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd96bfc-de21-494e-bea5-b56f84e74f7a", "created": "2026-01-27T05:12:59.42904Z", "modified": "2026-01-27T05:12:59.42904Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4adb375bee81c52f1ebf73dcc55525aaba65d1d1486a6815c7f32f93ffb9a400']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.42904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3eb76cc6-a2e3-4769-82a5-5d666bc6a831", "created": "2026-01-27T05:12:59.42991Z", "modified": "2026-01-27T05:12:59.42991Z", "relationship_type": "indicates", "source_ref": "indicator--edd96bfc-de21-494e-bea5-b56f84e74f7a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0037ae6f-7032-4e0e-9ea2-ab5263cae9d5", "created": "2026-01-27T05:12:59.430085Z", "modified": "2026-01-27T05:12:59.430085Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc3aba522087a99df5fdf8eec8bdfb628ed9e4e763d9f9240ec3f903f6a48339']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.430085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5217a97a-3c59-4a3a-9bb9-4ae690335cf4", "created": "2026-01-27T05:12:59.430923Z", "modified": "2026-01-27T05:12:59.430923Z", "relationship_type": "indicates", "source_ref": "indicator--0037ae6f-7032-4e0e-9ea2-ab5263cae9d5", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbcf08d-827c-4c22-963e-da37fe2bb92a", "created": "2026-01-27T05:12:59.431112Z", "modified": "2026-01-27T05:12:59.431112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7166dac8b98567d6b7fb21f96bdd31a106a734aae00524ac54bd6468d55e1397']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.431112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b600083b-b658-4c64-b302-c340cbc6bb1f", "created": "2026-01-27T05:12:59.431964Z", "modified": "2026-01-27T05:12:59.431964Z", "relationship_type": "indicates", "source_ref": "indicator--1bbcf08d-827c-4c22-963e-da37fe2bb92a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c09ce0-ab8e-4c94-912e-c55328954fd9", "created": "2026-01-27T05:12:59.432142Z", "modified": "2026-01-27T05:12:59.432142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e06961253eb21c6b3fa27b95af94bcfc065ea6026c587878006fd35bf5c4680']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.432142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00ae2180-708a-4a5f-b7e7-c76917200cbd", "created": "2026-01-27T05:12:59.43301Z", "modified": "2026-01-27T05:12:59.43301Z", "relationship_type": "indicates", "source_ref": "indicator--33c09ce0-ab8e-4c94-912e-c55328954fd9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3affc682-1b6f-4566-b052-ed444f055be5", "created": "2026-01-27T05:12:59.433192Z", "modified": "2026-01-27T05:12:59.433192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1ce7584aa4b56164853d0d93ce377ada7e55f0a87487eb7cad4978d2fd2a32b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.433192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3278d8e-d391-4fc6-88f5-a4cc550cab31", "created": "2026-01-27T05:12:59.43405Z", "modified": "2026-01-27T05:12:59.43405Z", "relationship_type": "indicates", "source_ref": "indicator--3affc682-1b6f-4566-b052-ed444f055be5", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189054fc-e8b1-4fff-866f-66790bf900ce", "created": "2026-01-27T05:12:59.434232Z", "modified": "2026-01-27T05:12:59.434232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8758c685f4b96377b74d71bc3049498517d55fa1b059a516125162fbc1edd18b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.434232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed0d0bb4-c6db-42d5-8c67-7602fabe6e31", "created": "2026-01-27T05:12:59.435078Z", "modified": "2026-01-27T05:12:59.435078Z", "relationship_type": "indicates", "source_ref": "indicator--189054fc-e8b1-4fff-866f-66790bf900ce", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c95f9f4-c8e5-4cd1-ad94-7fa30edfed7a", "created": "2026-01-27T05:12:59.435254Z", "modified": "2026-01-27T05:12:59.435254Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c13432bc075debc27fa85dc71919b940c127706a37384b7304c49ef15f1e260']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.435254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--645ed08a-6e98-44f1-9caf-ccf2c19ce932", "created": "2026-01-27T05:12:59.436239Z", "modified": "2026-01-27T05:12:59.436239Z", "relationship_type": "indicates", "source_ref": "indicator--1c95f9f4-c8e5-4cd1-ad94-7fa30edfed7a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c31bb8d-a84f-4705-bf8d-53cfbb1fdfeb", "created": "2026-01-27T05:12:59.436419Z", "modified": "2026-01-27T05:12:59.436419Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d99a6d20932e7af87c3bcdfad5140eae9ce8c762e4b96bb990cef4edea09b52d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.436419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c96960d0-7d3f-49c4-b429-30699d534f87", "created": "2026-01-27T05:12:59.437258Z", "modified": "2026-01-27T05:12:59.437258Z", "relationship_type": "indicates", "source_ref": "indicator--8c31bb8d-a84f-4705-bf8d-53cfbb1fdfeb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f77e08-aad5-4aae-87a7-7683fce46e61", "created": "2026-01-27T05:12:59.437437Z", "modified": "2026-01-27T05:12:59.437437Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ffc2fa4bc91a575905ea9979bb2f5ddd76d3148101d5d60456b7f2c27e63847']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.437437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f050a3d0-e273-44d5-8e33-2786f0903178", "created": "2026-01-27T05:12:59.438276Z", "modified": "2026-01-27T05:12:59.438276Z", "relationship_type": "indicates", "source_ref": "indicator--c4f77e08-aad5-4aae-87a7-7683fce46e61", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b869c9b-474e-46f1-a32f-6038f9fab9ef", "created": "2026-01-27T05:12:59.438453Z", "modified": "2026-01-27T05:12:59.438453Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4ff7453ea26e5afe1979d4b747a3217e8971a86c2807582f257610bd884e693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.438453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95e7163b-dd08-4e44-8246-ccde476db834", "created": "2026-01-27T05:12:59.43932Z", "modified": "2026-01-27T05:12:59.43932Z", "relationship_type": "indicates", "source_ref": "indicator--9b869c9b-474e-46f1-a32f-6038f9fab9ef", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801810a5-f37e-4899-9d16-e11e3aa21b7d", "created": "2026-01-27T05:12:59.439499Z", "modified": "2026-01-27T05:12:59.439499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3b1ac81e5a34052d1848632fd2a6a7ceb548d34306236d8bd5e8b67989b4a3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.439499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38b95dab-e820-4853-af17-1c5dd5358809", "created": "2026-01-27T05:12:59.440341Z", "modified": "2026-01-27T05:12:59.440341Z", "relationship_type": "indicates", "source_ref": "indicator--801810a5-f37e-4899-9d16-e11e3aa21b7d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c23903-cbe2-4cc3-b767-9898e0140e72", "created": "2026-01-27T05:12:59.440517Z", "modified": "2026-01-27T05:12:59.440517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3789a93366736cd64a9e39b21d132835cb8c19294c8fd38718771c7a24934768']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.440517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--044dac7e-e676-48d4-9068-53e1b029bde8", "created": "2026-01-27T05:12:59.441371Z", "modified": "2026-01-27T05:12:59.441371Z", "relationship_type": "indicates", "source_ref": "indicator--d9c23903-cbe2-4cc3-b767-9898e0140e72", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdbbe22-df28-4b66-b6ce-5426c622808a", "created": "2026-01-27T05:12:59.441551Z", "modified": "2026-01-27T05:12:59.441551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='146684cebab862629bc9c5714001fef50ad9525deb7bab9b8afb40e6cbc130a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.441551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5ec998d-c15b-47fc-a79d-990cd7e6f861", "created": "2026-01-27T05:12:59.44242Z", "modified": "2026-01-27T05:12:59.44242Z", "relationship_type": "indicates", "source_ref": "indicator--5bdbbe22-df28-4b66-b6ce-5426c622808a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85830945-c7cb-4666-bc8b-96acc6504120", "created": "2026-01-27T05:12:59.4426Z", "modified": "2026-01-27T05:12:59.4426Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c5e12558f44e583e111d86e19b2895e61f4b7075ee4381cdeb31c3db30045e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.4426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2226340-fbfe-4206-84ea-27e84e333eaa", "created": "2026-01-27T05:12:59.443454Z", "modified": "2026-01-27T05:12:59.443454Z", "relationship_type": "indicates", "source_ref": "indicator--85830945-c7cb-4666-bc8b-96acc6504120", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576db055-5111-462d-9823-5b3ddaaea387", "created": "2026-01-27T05:12:59.44363Z", "modified": "2026-01-27T05:12:59.44363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60b7bf65a51125c2addb017ae12089425ef554d4552e2d0f9d29c882d47b623b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.44363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07406159-7345-4882-b6ab-a3c317ffff2a", "created": "2026-01-27T05:12:59.444471Z", "modified": "2026-01-27T05:12:59.444471Z", "relationship_type": "indicates", "source_ref": "indicator--576db055-5111-462d-9823-5b3ddaaea387", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6b99d6-1393-42ec-ba09-bfc95b7145c9", "created": "2026-01-27T05:12:59.444651Z", "modified": "2026-01-27T05:12:59.444651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03568c7c92c144516816bbdf4eaa504a399a6a78c0a1cc0c9ed20c859cad8539']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.444651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36fe4ec7-bcdd-4cdb-868b-a3dad1d1d0d0", "created": "2026-01-27T05:12:59.445613Z", "modified": "2026-01-27T05:12:59.445613Z", "relationship_type": "indicates", "source_ref": "indicator--bf6b99d6-1393-42ec-ba09-bfc95b7145c9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015b5715-fe9f-46ab-aa91-be05e88cb148", "created": "2026-01-27T05:12:59.445806Z", "modified": "2026-01-27T05:12:59.445806Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce0077cadbd80e76292a96c1236102f5633cb992c10fd1b9419968bfcbccd826']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.445806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e210dea-0478-4283-8107-dcad53f8c2b3", "created": "2026-01-27T05:12:59.446634Z", "modified": "2026-01-27T05:12:59.446634Z", "relationship_type": "indicates", "source_ref": "indicator--015b5715-fe9f-46ab-aa91-be05e88cb148", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c502894-b86c-4516-aeb9-8a5301b927cb", "created": "2026-01-27T05:12:59.446827Z", "modified": "2026-01-27T05:12:59.446827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6688fc2d774c9282055b90036d5fed6a31b4bf08526becb2b90af14b1ac0a61e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.446827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f27026a5-2d78-45ed-9e0f-2f84ffd7ceb3", "created": "2026-01-27T05:12:59.447651Z", "modified": "2026-01-27T05:12:59.447651Z", "relationship_type": "indicates", "source_ref": "indicator--8c502894-b86c-4516-aeb9-8a5301b927cb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6819c90b-e77a-4ae8-8fc6-edccd97f27ec", "created": "2026-01-27T05:12:59.447845Z", "modified": "2026-01-27T05:12:59.447845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8329429d0c260f342aeaa9bb46a862f62f5c4ab8f93549fbd682e99d285fc1e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.447845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f444c7fe-f193-4e91-b9ea-86597c01bbfc", "created": "2026-01-27T05:12:59.448665Z", "modified": "2026-01-27T05:12:59.448665Z", "relationship_type": "indicates", "source_ref": "indicator--6819c90b-e77a-4ae8-8fc6-edccd97f27ec", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71974f5-ee1b-4be2-86e8-7f722c9db713", "created": "2026-01-27T05:12:59.448863Z", "modified": "2026-01-27T05:12:59.448863Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='717367f0edc134d00f14298469a24cd8222ed0bafe15485eba59c10e542a7ce1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.448863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4e56908-173a-4831-980a-7ab68cc9efda", "created": "2026-01-27T05:12:59.44969Z", "modified": "2026-01-27T05:12:59.44969Z", "relationship_type": "indicates", "source_ref": "indicator--b71974f5-ee1b-4be2-86e8-7f722c9db713", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17743f7-cc6e-4e97-8d4e-5f534d68565c", "created": "2026-01-27T05:12:59.449883Z", "modified": "2026-01-27T05:12:59.449883Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26bd56b34e54c8349794c71f569bf84c631694700805882ff07ca09fad35afc7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.449883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d373269-c79c-46f3-9faa-7df801877aa6", "created": "2026-01-27T05:12:59.450706Z", "modified": "2026-01-27T05:12:59.450706Z", "relationship_type": "indicates", "source_ref": "indicator--c17743f7-cc6e-4e97-8d4e-5f534d68565c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c663222a-2e5d-46a7-89af-44b45c86a557", "created": "2026-01-27T05:12:59.450897Z", "modified": "2026-01-27T05:12:59.450897Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90004b2490a72e626787feaec13233a5f8d25d0fd85055292a7d441d06937418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.450897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0731ca6d-b595-4a08-8e45-69bd9eecbdd3", "created": "2026-01-27T05:12:59.451724Z", "modified": "2026-01-27T05:12:59.451724Z", "relationship_type": "indicates", "source_ref": "indicator--c663222a-2e5d-46a7-89af-44b45c86a557", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ec0132-6df6-4c09-836a-82d361f4514c", "created": "2026-01-27T05:12:59.451918Z", "modified": "2026-01-27T05:12:59.451918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79b0a0b73290ed87deadfb7c696b22c4748bf9d6695f50fb1d8cf932840d2d80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.451918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b865fc50-2865-4c9e-9648-dd3f8088514a", "created": "2026-01-27T05:12:59.452781Z", "modified": "2026-01-27T05:12:59.452781Z", "relationship_type": "indicates", "source_ref": "indicator--39ec0132-6df6-4c09-836a-82d361f4514c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4505f630-3ed8-4e76-b11e-ea6d8ab8f9c9", "created": "2026-01-27T05:12:59.452962Z", "modified": "2026-01-27T05:12:59.452962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b55fd3b1c5f4a561d4e17c3b67de23b9677c0a8556717a7dc5c77703bd0aecb2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.452962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8452c65-6d99-4321-9317-ffa3e516e533", "created": "2026-01-27T05:12:59.453918Z", "modified": "2026-01-27T05:12:59.453918Z", "relationship_type": "indicates", "source_ref": "indicator--4505f630-3ed8-4e76-b11e-ea6d8ab8f9c9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bec0703-967f-40a3-a4ee-df1a3478a466", "created": "2026-01-27T05:12:59.454099Z", "modified": "2026-01-27T05:12:59.454099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6daef6c4b551daf5d319274a8f7dddf5ade40cc27ef65fe12ebd0f8f6a02af2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.454099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02ca5231-e165-40d7-b0ed-d62ade1ea0fb", "created": "2026-01-27T05:12:59.454944Z", "modified": "2026-01-27T05:12:59.454944Z", "relationship_type": "indicates", "source_ref": "indicator--9bec0703-967f-40a3-a4ee-df1a3478a466", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f07914c-2c40-480d-b4b0-5c51e8ee352f", "created": "2026-01-27T05:12:59.455122Z", "modified": "2026-01-27T05:12:59.455122Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d53918204ee54a09693f29d40aecc2b07e6deeb7c905713a60feaff39c6dedc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.455122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d2176f3-2764-4733-86ea-f3051c6f146c", "created": "2026-01-27T05:12:59.45596Z", "modified": "2026-01-27T05:12:59.45596Z", "relationship_type": "indicates", "source_ref": "indicator--3f07914c-2c40-480d-b4b0-5c51e8ee352f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3d94be-26e4-4eab-ac01-f0007e3c6b11", "created": "2026-01-27T05:12:59.456138Z", "modified": "2026-01-27T05:12:59.456138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ddc1d342dbee8468b0a88cc1cafcfd6990704be172ebae0564ffb970d85cd64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.456138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7722eda-6006-4323-b99d-9c8ce07caf79", "created": "2026-01-27T05:12:59.456981Z", "modified": "2026-01-27T05:12:59.456981Z", "relationship_type": "indicates", "source_ref": "indicator--cc3d94be-26e4-4eab-ac01-f0007e3c6b11", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7403209f-bd14-4be0-bd17-399d13307056", "created": "2026-01-27T05:12:59.457157Z", "modified": "2026-01-27T05:12:59.457157Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2d207a6a069119ea3456f5510d660279d737a35e559af68d0ce384484507daf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.457157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76be5ef8-4a4c-49da-a1cc-0d098d33114c", "created": "2026-01-27T05:12:59.458003Z", "modified": "2026-01-27T05:12:59.458003Z", "relationship_type": "indicates", "source_ref": "indicator--7403209f-bd14-4be0-bd17-399d13307056", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7509cdee-16c2-4ee6-ad1f-8371e0b6b9a3", "created": "2026-01-27T05:12:59.458191Z", "modified": "2026-01-27T05:12:59.458191Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19ad56b2db7f6aa36c07a1528cbd5fb0db32115d7b15a6bc46b1049628480c8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.458191Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--516f1e2c-76ef-446c-8a77-84ab4b23a56e", "created": "2026-01-27T05:12:59.459071Z", "modified": "2026-01-27T05:12:59.459071Z", "relationship_type": "indicates", "source_ref": "indicator--7509cdee-16c2-4ee6-ad1f-8371e0b6b9a3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e3c1cdf-084c-4061-8f6b-259d98db2f28", "created": "2026-01-27T05:12:59.459264Z", "modified": "2026-01-27T05:12:59.459264Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fca1c6dc20e0ab59b143ffcdec2baa15288292167b1cf985551c3f83fd737140']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.459264Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdd213cf-a071-48fd-abf0-5c85885621bc", "created": "2026-01-27T05:12:59.460139Z", "modified": "2026-01-27T05:12:59.460139Z", "relationship_type": "indicates", "source_ref": "indicator--3e3c1cdf-084c-4061-8f6b-259d98db2f28", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52953be9-f444-47db-923b-4a3e9ebd2e81", "created": "2026-01-27T05:12:59.460315Z", "modified": "2026-01-27T05:12:59.460315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77c71585adb1425ad64981b609116d97901d6523c41f91a0d6b9a3d9dd458da0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.460315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d90329d-47c8-4920-804f-b60ca65e45e8", "created": "2026-01-27T05:12:59.461166Z", "modified": "2026-01-27T05:12:59.461166Z", "relationship_type": "indicates", "source_ref": "indicator--52953be9-f444-47db-923b-4a3e9ebd2e81", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc91aa68-3a1a-4cbe-a624-9dacb9d61194", "created": "2026-01-27T05:12:59.461341Z", "modified": "2026-01-27T05:12:59.461341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='691044d89ec772196fb1909b458b73281995ebcd497cdc6fd0c8113527ed4402']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.461341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--074d9159-6a30-457e-a108-8f96f1c6a5d6", "created": "2026-01-27T05:12:59.462196Z", "modified": "2026-01-27T05:12:59.462196Z", "relationship_type": "indicates", "source_ref": "indicator--bc91aa68-3a1a-4cbe-a624-9dacb9d61194", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4be4511-3b3b-4fd3-bc25-c680a8317984", "created": "2026-01-27T05:12:59.462372Z", "modified": "2026-01-27T05:12:59.462372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e792756be17a0c5dd2258ae9a9c614f53cb06d7991e2388c8ad810b55423003']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.462372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aaee0880-fb07-43fd-b78b-6ca3621a659b", "created": "2026-01-27T05:12:59.463341Z", "modified": "2026-01-27T05:12:59.463341Z", "relationship_type": "indicates", "source_ref": "indicator--f4be4511-3b3b-4fd3-bc25-c680a8317984", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aee2c2d-36d4-4b72-80eb-539154f665b4", "created": "2026-01-27T05:12:59.463521Z", "modified": "2026-01-27T05:12:59.463521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05af721cc21d3e7e2e03255652ba248521a9a0296857d95d4b22edbbdae3996e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.463521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f9aed55-9dfc-4b3f-8ec0-f087ad5e365c", "created": "2026-01-27T05:12:59.464357Z", "modified": "2026-01-27T05:12:59.464357Z", "relationship_type": "indicates", "source_ref": "indicator--5aee2c2d-36d4-4b72-80eb-539154f665b4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff1a2ad-ff33-4613-b0ba-a8e3e2c603a1", "created": "2026-01-27T05:12:59.464539Z", "modified": "2026-01-27T05:12:59.464539Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3050ed7208a32e1602422a3460c5d74536c806c37020150546b5bb20a6be46e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.464539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d55f0dee-bc20-4ab5-ad3b-994f4bb5f10b", "created": "2026-01-27T05:12:59.465371Z", "modified": "2026-01-27T05:12:59.465371Z", "relationship_type": "indicates", "source_ref": "indicator--9ff1a2ad-ff33-4613-b0ba-a8e3e2c603a1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bcc9c6e-9ee6-440b-9fff-ce67acca0633", "created": "2026-01-27T05:12:59.465546Z", "modified": "2026-01-27T05:12:59.465546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc95484a97d0635f33a606a3796886765af788f95d4982230dc070bee29e6e25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.465546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4e2469d-99ca-413d-b0ee-44b3aa74566c", "created": "2026-01-27T05:12:59.466379Z", "modified": "2026-01-27T05:12:59.466379Z", "relationship_type": "indicates", "source_ref": "indicator--3bcc9c6e-9ee6-440b-9fff-ce67acca0633", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9375d81a-4ae2-4814-abb4-ad1aed23a580", "created": "2026-01-27T05:12:59.466557Z", "modified": "2026-01-27T05:12:59.466557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f390cae3d742be8db686dbbb095e3bf41bd212992d3370fd5345735f95ce3376']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.466557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e0e1453-006f-4fd5-8dae-622f5bcc1ece", "created": "2026-01-27T05:12:59.467404Z", "modified": "2026-01-27T05:12:59.467404Z", "relationship_type": "indicates", "source_ref": "indicator--9375d81a-4ae2-4814-abb4-ad1aed23a580", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c6b54c-c9e5-43f2-bc38-ce89776d54bc", "created": "2026-01-27T05:12:59.467582Z", "modified": "2026-01-27T05:12:59.467582Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69f66fdc7d210dee6bf8cdc8a3dfb1dba7210babf881a52df5aff330a7da6add']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.467582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7e102c3-052c-4c26-a55b-ce9358cdf838", "created": "2026-01-27T05:12:59.468415Z", "modified": "2026-01-27T05:12:59.468415Z", "relationship_type": "indicates", "source_ref": "indicator--93c6b54c-c9e5-43f2-bc38-ce89776d54bc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22bfadf-01c1-40c2-b2fd-4281fbbf1b1e", "created": "2026-01-27T05:12:59.468592Z", "modified": "2026-01-27T05:12:59.468592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8316c3cada6a7dfb8cd564727ca17a8059d4abbad53858e3fe5206428d6a6139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.468592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c5f82b8-4e5a-4993-8545-9e6063216458", "created": "2026-01-27T05:12:59.469448Z", "modified": "2026-01-27T05:12:59.469448Z", "relationship_type": "indicates", "source_ref": "indicator--d22bfadf-01c1-40c2-b2fd-4281fbbf1b1e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487f0f87-61d1-4bdd-98fd-90a2b864611a", "created": "2026-01-27T05:12:59.46964Z", "modified": "2026-01-27T05:12:59.46964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='760be7b18bf7f6f9632deba03ee26d7e9691438ac5d05ab0b6b4b3684f67997a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.46964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3b0b3bc-cddb-4162-ac78-7debc8920049", "created": "2026-01-27T05:12:59.470488Z", "modified": "2026-01-27T05:12:59.470488Z", "relationship_type": "indicates", "source_ref": "indicator--487f0f87-61d1-4bdd-98fd-90a2b864611a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e8753a-e003-4adc-898a-f38c17de2fc9", "created": "2026-01-27T05:12:59.470663Z", "modified": "2026-01-27T05:12:59.470663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3804206a56eb2de7c19d867f09763cc8e9953516a101319454b2564ee0a1ad5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.470663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66f766c9-4712-4ac3-9caf-e0717dd8c4eb", "created": "2026-01-27T05:12:59.471527Z", "modified": "2026-01-27T05:12:59.471527Z", "relationship_type": "indicates", "source_ref": "indicator--85e8753a-e003-4adc-898a-f38c17de2fc9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2226f3-e3a9-4787-a2ff-bb08b8788bf2", "created": "2026-01-27T05:12:59.471708Z", "modified": "2026-01-27T05:12:59.471708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2102e5a12741c12ed963e52a12b17b854e9482d2d473cf1913d90583039d9a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.471708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8369caf5-37a4-4c22-8a01-bf2a9ad35c3f", "created": "2026-01-27T05:12:59.472682Z", "modified": "2026-01-27T05:12:59.472682Z", "relationship_type": "indicates", "source_ref": "indicator--ea2226f3-e3a9-4787-a2ff-bb08b8788bf2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7a868b-2682-4545-8c9d-ba2e90415cd5", "created": "2026-01-27T05:12:59.472874Z", "modified": "2026-01-27T05:12:59.472874Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0217728c4c9872a3d704bcd28787d72b4a309d4d1f90c284040c172d87259db1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.472874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--753eec17-a2ca-4e27-a42f-17ab43e8f2b2", "created": "2026-01-27T05:12:59.473729Z", "modified": "2026-01-27T05:12:59.473729Z", "relationship_type": "indicates", "source_ref": "indicator--1f7a868b-2682-4545-8c9d-ba2e90415cd5", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12dbed5-d2ed-48ab-97e8-5e2b5b2381ca", "created": "2026-01-27T05:12:59.473934Z", "modified": "2026-01-27T05:12:59.473934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d67c9d81f6ee7d343cdae10a836f3e8b80790def50c0d11966f66e069a50205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.473934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a62245b-2b55-4ea1-bef7-801279b185a1", "created": "2026-01-27T05:12:59.474792Z", "modified": "2026-01-27T05:12:59.474792Z", "relationship_type": "indicates", "source_ref": "indicator--d12dbed5-d2ed-48ab-97e8-5e2b5b2381ca", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6762ba79-fecd-4e33-9dd9-aac5d420dbde", "created": "2026-01-27T05:12:59.474973Z", "modified": "2026-01-27T05:12:59.474973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b870031727fa75c54e412ed2555337c2ad64e17c5d3a7cc9c5a64e5eac302cf1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.474973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--922fc354-3ebd-40ee-a2ed-a8d0b2e4a7b4", "created": "2026-01-27T05:12:59.475844Z", "modified": "2026-01-27T05:12:59.475844Z", "relationship_type": "indicates", "source_ref": "indicator--6762ba79-fecd-4e33-9dd9-aac5d420dbde", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7dc65d-4c94-4de0-b986-da83943a6787", "created": "2026-01-27T05:12:59.476021Z", "modified": "2026-01-27T05:12:59.476021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b43fea62b338d2121019668c43887d31370b46f0f16e6385dc08d761cb268809']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.476021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf960494-6499-46cb-ac5a-e831a09c1a2f", "created": "2026-01-27T05:12:59.476855Z", "modified": "2026-01-27T05:12:59.476855Z", "relationship_type": "indicates", "source_ref": "indicator--2f7dc65d-4c94-4de0-b986-da83943a6787", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826ef9c6-f0e4-4fc5-b182-a2a69e656cf4", "created": "2026-01-27T05:12:59.477033Z", "modified": "2026-01-27T05:12:59.477033Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a44cf392d5df17ef62abbcfa93d06169261e836ef0a67f4683694af5d6cb031a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.477033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83b13e13-c607-45e3-b5e6-1c3297860e49", "created": "2026-01-27T05:12:59.47788Z", "modified": "2026-01-27T05:12:59.47788Z", "relationship_type": "indicates", "source_ref": "indicator--826ef9c6-f0e4-4fc5-b182-a2a69e656cf4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc51e28f-7d1b-4241-8d7c-f9f00ae3fa27", "created": "2026-01-27T05:12:59.478057Z", "modified": "2026-01-27T05:12:59.478057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbe9d4009a3cef482dfb53aa9fa0e62a335225976cef1bedc014e6c8697661a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.478057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13e4ca1c-0ee1-4ec6-89db-3d0ce0025166", "created": "2026-01-27T05:12:59.47892Z", "modified": "2026-01-27T05:12:59.47892Z", "relationship_type": "indicates", "source_ref": "indicator--dc51e28f-7d1b-4241-8d7c-f9f00ae3fa27", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b885d04f-4773-40d3-869a-f055930fa672", "created": "2026-01-27T05:12:59.47911Z", "modified": "2026-01-27T05:12:59.47911Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='130767496a5214ae3635db5fe8abda1c464502355b2dcb261aeb719bbd7efc45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.47911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9452a41e-d25e-47fb-9862-5a6a20f161f5", "created": "2026-01-27T05:12:59.479976Z", "modified": "2026-01-27T05:12:59.479976Z", "relationship_type": "indicates", "source_ref": "indicator--b885d04f-4773-40d3-869a-f055930fa672", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5820ca59-33cd-4c26-8e67-abcba52002da", "created": "2026-01-27T05:12:59.480155Z", "modified": "2026-01-27T05:12:59.480155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e86acd9f88cdd1cfb985867d89bf9ae60966561fc8e8d4dbd5feed09a5b03edf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.480155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10575fe0-10cb-40c4-9817-7cb0d90c3ca7", "created": "2026-01-27T05:12:59.481127Z", "modified": "2026-01-27T05:12:59.481127Z", "relationship_type": "indicates", "source_ref": "indicator--5820ca59-33cd-4c26-8e67-abcba52002da", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b105b3-9d3c-4dd9-89c9-4099a768dcd5", "created": "2026-01-27T05:12:59.481306Z", "modified": "2026-01-27T05:12:59.481306Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef70e55216a3a9bd3782e02a3d7fe9d97a52e7caf62ffa7b49a3b0c50b6ce1d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.481306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46581797-a88d-480a-b64c-9445a67780e3", "created": "2026-01-27T05:12:59.482177Z", "modified": "2026-01-27T05:12:59.482177Z", "relationship_type": "indicates", "source_ref": "indicator--64b105b3-9d3c-4dd9-89c9-4099a768dcd5", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8315c8af-d624-4832-bdf1-c6e2e96b5543", "created": "2026-01-27T05:12:59.482361Z", "modified": "2026-01-27T05:12:59.482361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8209d35af1c5d3d5eed3ae5318506894d7c71fb0a20d082a65be8391200b02f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.482361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f39f5168-6de7-4104-9aec-9d3f41f3806c", "created": "2026-01-27T05:12:59.48321Z", "modified": "2026-01-27T05:12:59.48321Z", "relationship_type": "indicates", "source_ref": "indicator--8315c8af-d624-4832-bdf1-c6e2e96b5543", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f423832-9e09-478f-b59d-69da9a2977c3", "created": "2026-01-27T05:12:59.483387Z", "modified": "2026-01-27T05:12:59.483387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b39cb99bb65c871f3f757b1e2c2e1bff2809315f66922860480fa3f7c21e7334']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.483387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0eb78e72-3365-4305-8eeb-3f6de96e4325", "created": "2026-01-27T05:12:59.484251Z", "modified": "2026-01-27T05:12:59.484251Z", "relationship_type": "indicates", "source_ref": "indicator--8f423832-9e09-478f-b59d-69da9a2977c3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d40c832-3d3e-4622-a18f-31dcf1e1f851", "created": "2026-01-27T05:12:59.48443Z", "modified": "2026-01-27T05:12:59.48443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77c99ba1700015d0c449bb50df336ebe003bb271037eac9603cbd1dfdb8219af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.48443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--565cbe6d-7427-41b4-b402-d38eb9bdd6d6", "created": "2026-01-27T05:12:59.48529Z", "modified": "2026-01-27T05:12:59.48529Z", "relationship_type": "indicates", "source_ref": "indicator--7d40c832-3d3e-4622-a18f-31dcf1e1f851", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2503b78d-b399-49bf-b952-96eeb30a4b06", "created": "2026-01-27T05:12:59.485474Z", "modified": "2026-01-27T05:12:59.485474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2234c4bacb02b05960cf94782567f20c2161a509763109415b0c86bc85f6ea66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.485474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9764c771-4866-4026-9cad-588335896a3b", "created": "2026-01-27T05:12:59.486316Z", "modified": "2026-01-27T05:12:59.486316Z", "relationship_type": "indicates", "source_ref": "indicator--2503b78d-b399-49bf-b952-96eeb30a4b06", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571ce4ad-b46c-4f4d-be84-06cfb58555d3", "created": "2026-01-27T05:12:59.486493Z", "modified": "2026-01-27T05:12:59.486493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ee8775190e2a867db7a53622ad7da40039bcc2ee67ea82ac9f053674ac26a57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.486493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b37ce56-c30f-4742-a5b6-f621321e07a0", "created": "2026-01-27T05:12:59.48735Z", "modified": "2026-01-27T05:12:59.48735Z", "relationship_type": "indicates", "source_ref": "indicator--571ce4ad-b46c-4f4d-be84-06cfb58555d3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323a140e-98d3-4c2c-bb0a-5083ecdb7c25", "created": "2026-01-27T05:12:59.487526Z", "modified": "2026-01-27T05:12:59.487526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fd57ba73cf80bdaa5b21bb37aec1247e52843838553d639a56379542b5bcd76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.487526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--572b00c6-a15e-491b-815c-ca611b2386b7", "created": "2026-01-27T05:12:59.488374Z", "modified": "2026-01-27T05:12:59.488374Z", "relationship_type": "indicates", "source_ref": "indicator--323a140e-98d3-4c2c-bb0a-5083ecdb7c25", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ce5e20-d0a6-4387-a6fc-9bd04802aa3f", "created": "2026-01-27T05:12:59.488552Z", "modified": "2026-01-27T05:12:59.488552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a27d496eea2238ceb99b4b2b6bb4318fc50a4b866333cefc93536160593569b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.488552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94dab3d2-5918-485f-921f-90c6369bfd52", "created": "2026-01-27T05:12:59.489405Z", "modified": "2026-01-27T05:12:59.489405Z", "relationship_type": "indicates", "source_ref": "indicator--e1ce5e20-d0a6-4387-a6fc-9bd04802aa3f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb35df7d-4b1c-4565-871c-2dd7af707f8c", "created": "2026-01-27T05:12:59.489601Z", "modified": "2026-01-27T05:12:59.489601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='561291c0484cf0058ecf5b0df0fd853fe8056217c788cc785ae304e41b2a1224']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.489601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e13cbb5-ad33-4396-9330-5a7b85b67057", "created": "2026-01-27T05:12:59.490589Z", "modified": "2026-01-27T05:12:59.490589Z", "relationship_type": "indicates", "source_ref": "indicator--bb35df7d-4b1c-4565-871c-2dd7af707f8c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cb351a-6b71-4340-ac03-93f6c7877ada", "created": "2026-01-27T05:12:59.490781Z", "modified": "2026-01-27T05:12:59.490781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15b87ccca0ee58b8fecde2ec6af68a1cdeb1732894004a0afc51a0d28c8aa68b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.490781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb1810fc-aaf3-413e-b2de-c78de276d300", "created": "2026-01-27T05:12:59.491602Z", "modified": "2026-01-27T05:12:59.491602Z", "relationship_type": "indicates", "source_ref": "indicator--74cb351a-6b71-4340-ac03-93f6c7877ada", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46b093e-8b3f-41fb-bdc2-bb333f09171c", "created": "2026-01-27T05:12:59.491794Z", "modified": "2026-01-27T05:12:59.491794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d3deefa89c7bcb856826e4f56b23fd58645ac69e1e5acbd72290ce5a525206f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.491794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c745706-6d28-4e1d-9b05-a5b00af6523a", "created": "2026-01-27T05:12:59.492616Z", "modified": "2026-01-27T05:12:59.492616Z", "relationship_type": "indicates", "source_ref": "indicator--b46b093e-8b3f-41fb-bdc2-bb333f09171c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b22c94-6f5c-42eb-85a5-c567d33c560c", "created": "2026-01-27T05:12:59.492827Z", "modified": "2026-01-27T05:12:59.492827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f672683b687edecc8022639c7884b20f9b211cc5ca1b04893a65377c7e5af0d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.492827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43e4d823-f3dd-4078-8a62-13dce154f024", "created": "2026-01-27T05:12:59.493675Z", "modified": "2026-01-27T05:12:59.493675Z", "relationship_type": "indicates", "source_ref": "indicator--86b22c94-6f5c-42eb-85a5-c567d33c560c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20222fb3-3155-4838-ae6f-dd2477fc5305", "created": "2026-01-27T05:12:59.493869Z", "modified": "2026-01-27T05:12:59.493869Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e142f71c7c0b0a367bde4f8b6a146739345e6618bca4166a91982779a595ee26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.493869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a9fd938-654b-4887-a006-162f8c807c4e", "created": "2026-01-27T05:12:59.494713Z", "modified": "2026-01-27T05:12:59.494713Z", "relationship_type": "indicates", "source_ref": "indicator--20222fb3-3155-4838-ae6f-dd2477fc5305", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb2bc0c-d257-4970-95ee-8ae28c990057", "created": "2026-01-27T05:12:59.494909Z", "modified": "2026-01-27T05:12:59.494909Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbd776c7f0fffba0b7fc308c19ae5e135e0480dd68e8b1678fa317653bade712']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.494909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1ef670f-54db-4e06-a80a-f1b914464b3b", "created": "2026-01-27T05:12:59.495733Z", "modified": "2026-01-27T05:12:59.495733Z", "relationship_type": "indicates", "source_ref": "indicator--9eb2bc0c-d257-4970-95ee-8ae28c990057", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1152e4-2b5b-4bf8-aabf-bc16383593f2", "created": "2026-01-27T05:12:59.495924Z", "modified": "2026-01-27T05:12:59.495924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f19ee3003436f36b46aed94f076f5ead7b0439dc4a6dba909758f85b6d1e296b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.495924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae6f61a2-8e05-41e4-9015-f6ba9b2b2c7c", "created": "2026-01-27T05:12:59.49677Z", "modified": "2026-01-27T05:12:59.49677Z", "relationship_type": "indicates", "source_ref": "indicator--0f1152e4-2b5b-4bf8-aabf-bc16383593f2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ec3c52-346b-45a6-852c-0cde30443a57", "created": "2026-01-27T05:12:59.496948Z", "modified": "2026-01-27T05:12:59.496948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ded982e6848816f165f816e9b964ccdb8189cac669063be7d0e6c29c8179be66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.496948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dba4c12-0a36-4d2c-a3c5-a5e2948a784d", "created": "2026-01-27T05:12:59.497789Z", "modified": "2026-01-27T05:12:59.497789Z", "relationship_type": "indicates", "source_ref": "indicator--26ec3c52-346b-45a6-852c-0cde30443a57", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630d3ef2-86b9-4a15-95c0-a655f74be831", "created": "2026-01-27T05:12:59.497966Z", "modified": "2026-01-27T05:12:59.497966Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0332a94883a7dfc09ac83e116e87547c71eed80bf05c0f5f58751374fa2bc35c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.497966Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed795c05-6ac3-4d6b-b33e-05a1e456c747", "created": "2026-01-27T05:12:59.49882Z", "modified": "2026-01-27T05:12:59.49882Z", "relationship_type": "indicates", "source_ref": "indicator--630d3ef2-86b9-4a15-95c0-a655f74be831", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0209e3-90f3-4b89-87ef-5877fce2ee5f", "created": "2026-01-27T05:12:59.49901Z", "modified": "2026-01-27T05:12:59.49901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7edb964e827d0a7d994a228b364f9bfe63a30cb02407b88895c45dc15377cbea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.49901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ec84da1-395f-465b-b4f2-0477fe2df0a1", "created": "2026-01-27T05:12:59.49997Z", "modified": "2026-01-27T05:12:59.49997Z", "relationship_type": "indicates", "source_ref": "indicator--9b0209e3-90f3-4b89-87ef-5877fce2ee5f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e056d2fb-59b5-4209-8c6c-d9c20822828d", "created": "2026-01-27T05:12:59.500155Z", "modified": "2026-01-27T05:12:59.500155Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aae91cb530612d8ecb4ee6cf681e1cd69638c62898c8c956a651db3bce2b0ec1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.500155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38695574-8bdf-4841-bcbf-78f7fba33fc2", "created": "2026-01-27T05:12:59.500994Z", "modified": "2026-01-27T05:12:59.500994Z", "relationship_type": "indicates", "source_ref": "indicator--e056d2fb-59b5-4209-8c6c-d9c20822828d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ea3250-e49f-47c9-8fd5-8495303bee53", "created": "2026-01-27T05:12:59.501171Z", "modified": "2026-01-27T05:12:59.501171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b541150bd9b5634ba5ca91df8c5ac04181d56afd3de8f21bbc33d37e4b0b7084']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.501171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--452c8718-82f7-4ba0-be16-51e23122213b", "created": "2026-01-27T05:12:59.502013Z", "modified": "2026-01-27T05:12:59.502013Z", "relationship_type": "indicates", "source_ref": "indicator--71ea3250-e49f-47c9-8fd5-8495303bee53", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556e642b-b378-48d4-9303-94da598a48f1", "created": "2026-01-27T05:12:59.50219Z", "modified": "2026-01-27T05:12:59.50219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d632f671ba2e4a596e5b439aaa2178c394474695633b1a0fb99ab9238c0866f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.50219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1734e77-e4d9-46e1-bc9d-e38b29dd4ffb", "created": "2026-01-27T05:12:59.503066Z", "modified": "2026-01-27T05:12:59.503066Z", "relationship_type": "indicates", "source_ref": "indicator--556e642b-b378-48d4-9303-94da598a48f1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7cb6cc-b336-4caf-8aca-9cba8bd0468e", "created": "2026-01-27T05:12:59.503247Z", "modified": "2026-01-27T05:12:59.503247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96a297295e4ad49dd7749d98c6040b6e25d6296a07640f5bd0d6b74281f74c05']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.503247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb2869c0-231a-4f39-97f2-693c6244c5e4", "created": "2026-01-27T05:12:59.504098Z", "modified": "2026-01-27T05:12:59.504098Z", "relationship_type": "indicates", "source_ref": "indicator--da7cb6cc-b336-4caf-8aca-9cba8bd0468e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948d2e8b-16d8-4079-bf15-5a25223df7dd", "created": "2026-01-27T05:12:59.504275Z", "modified": "2026-01-27T05:12:59.504275Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01f4f2d69a3c046da1faa6f228e80d0cbca88d86888e15945dc10feb4f3570a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.504275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c323fb4-06ce-44f2-8772-d5358ef7bad9", "created": "2026-01-27T05:12:59.505116Z", "modified": "2026-01-27T05:12:59.505116Z", "relationship_type": "indicates", "source_ref": "indicator--948d2e8b-16d8-4079-bf15-5a25223df7dd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354a3a3c-adf7-4def-9bdb-cab8ca62639c", "created": "2026-01-27T05:12:59.505289Z", "modified": "2026-01-27T05:12:59.505289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a980d929c516072f203533d556d14305e19b10668ceb3acb0a322016024da10b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.505289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a233fdfe-bef8-43a1-bf73-4702e6041343", "created": "2026-01-27T05:12:59.506141Z", "modified": "2026-01-27T05:12:59.506141Z", "relationship_type": "indicates", "source_ref": "indicator--354a3a3c-adf7-4def-9bdb-cab8ca62639c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf596067-7f49-4dc8-b229-b15e530e22ee", "created": "2026-01-27T05:12:59.506318Z", "modified": "2026-01-27T05:12:59.506318Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22fe6b0b2ce6df645ac15e2deada4acb7592e2a3a2c3072e090e49c865ee1c7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.506318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73caab61-0c18-4317-993f-a5672aabf441", "created": "2026-01-27T05:12:59.507173Z", "modified": "2026-01-27T05:12:59.507173Z", "relationship_type": "indicates", "source_ref": "indicator--cf596067-7f49-4dc8-b229-b15e530e22ee", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cc0783-c9c3-415f-a5a1-5468659c22d2", "created": "2026-01-27T05:12:59.507349Z", "modified": "2026-01-27T05:12:59.507349Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49ace4f595a1452a99b0aee6b3f8a9d5a8b873da72075efd21a7b677e727d465']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.507349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2a35b03-421e-4c90-979b-03b5d547786f", "created": "2026-01-27T05:12:59.508649Z", "modified": "2026-01-27T05:12:59.508649Z", "relationship_type": "indicates", "source_ref": "indicator--86cc0783-c9c3-415f-a5a1-5468659c22d2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff14649-7173-43e8-b4a0-06c3a3f3217f", "created": "2026-01-27T05:12:59.508849Z", "modified": "2026-01-27T05:12:59.508849Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a46c576479689a9c165d1b1c95a478740bfce0b6629f30f5cf427b33a025b1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.508849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a470d11-9f1e-4d8e-9d43-6e3b8bb54054", "created": "2026-01-27T05:12:59.509679Z", "modified": "2026-01-27T05:12:59.509679Z", "relationship_type": "indicates", "source_ref": "indicator--7ff14649-7173-43e8-b4a0-06c3a3f3217f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc55fad-6926-4f91-9c41-14163fae14a3", "created": "2026-01-27T05:12:59.509872Z", "modified": "2026-01-27T05:12:59.509872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91fb519a20789b5b1d1b567a888c28bd1820cecd35c198c6600de2e4e8b568b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.509872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97b97bad-b3fe-401b-a409-4f81df959b8b", "created": "2026-01-27T05:12:59.510697Z", "modified": "2026-01-27T05:12:59.510697Z", "relationship_type": "indicates", "source_ref": "indicator--2fc55fad-6926-4f91-9c41-14163fae14a3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac62cada-5444-47f4-b37f-566c6aa09ea1", "created": "2026-01-27T05:12:59.510889Z", "modified": "2026-01-27T05:12:59.510889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d337e9957cec08e56bd1ac1e97b675c286d0d8292e972d24f7f6dad0738bf3ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.510889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--153602d7-2d7a-4085-8e0a-2e45d085f61c", "created": "2026-01-27T05:12:59.511713Z", "modified": "2026-01-27T05:12:59.511713Z", "relationship_type": "indicates", "source_ref": "indicator--ac62cada-5444-47f4-b37f-566c6aa09ea1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1905faf9-b682-4842-b726-4377951775f9", "created": "2026-01-27T05:12:59.511906Z", "modified": "2026-01-27T05:12:59.511906Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c2d3161d2198c99ce6966a4bacfec842ed90872eee17a183f5c2b326afeaed3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.511906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f4fdff0-5292-4f04-9fa1-b36753315b37", "created": "2026-01-27T05:12:59.512723Z", "modified": "2026-01-27T05:12:59.512723Z", "relationship_type": "indicates", "source_ref": "indicator--1905faf9-b682-4842-b726-4377951775f9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d451cd5-24ca-4645-899e-506ab8011a20", "created": "2026-01-27T05:12:59.512921Z", "modified": "2026-01-27T05:12:59.512921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fa2daf9a232b9848c19174b4709caf2be8dad84cb532b5b5ba03feacd62daa7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.512921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27d2ff56-f564-4c7b-9de1-d3eceab8089f", "created": "2026-01-27T05:12:59.513765Z", "modified": "2026-01-27T05:12:59.513765Z", "relationship_type": "indicates", "source_ref": "indicator--0d451cd5-24ca-4645-899e-506ab8011a20", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aaf556-5431-4fff-b1c0-0b40d86e0614", "created": "2026-01-27T05:12:59.513943Z", "modified": "2026-01-27T05:12:59.513943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea4be8ec8260770961734dafb3b0c5cdfe37cd3d1f4edee10cd2fc858ddd91bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.513943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9224082-7221-44b2-92e7-8dfb0d02848b", "created": "2026-01-27T05:12:59.514777Z", "modified": "2026-01-27T05:12:59.514777Z", "relationship_type": "indicates", "source_ref": "indicator--41aaf556-5431-4fff-b1c0-0b40d86e0614", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c798b5-1ab9-46fd-a81f-1ee0d6b027c5", "created": "2026-01-27T05:12:59.514956Z", "modified": "2026-01-27T05:12:59.514956Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c7d8e7df1ede04018b9ec36fc512d0566cc314f375daa6d7823edd1f559ce29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.514956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--786191f9-b12e-4fe7-93aa-d0be6e63e194", "created": "2026-01-27T05:12:59.515793Z", "modified": "2026-01-27T05:12:59.515793Z", "relationship_type": "indicates", "source_ref": "indicator--91c798b5-1ab9-46fd-a81f-1ee0d6b027c5", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d0eeee-77e3-4d4d-b880-efee35977007", "created": "2026-01-27T05:12:59.515977Z", "modified": "2026-01-27T05:12:59.515977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55152b6eaa7fea9dab42a0e5cf210d823a788c03fea27c53c5516ee9c99ab4e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.515977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb40ed70-76ae-4d4d-9ada-15991ab561e3", "created": "2026-01-27T05:12:59.51681Z", "modified": "2026-01-27T05:12:59.51681Z", "relationship_type": "indicates", "source_ref": "indicator--35d0eeee-77e3-4d4d-b880-efee35977007", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea5821b-7c96-4101-83ca-4c9f8dccdacf", "created": "2026-01-27T05:12:59.516986Z", "modified": "2026-01-27T05:12:59.516986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d69ac38434dddea5a2d9775007bca4889654fc06a61d81e081de398214ba1130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.516986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3aa0d484-6f3c-48d0-b134-79e3bd282df2", "created": "2026-01-27T05:12:59.548882Z", "modified": "2026-01-27T05:12:59.548882Z", "relationship_type": "indicates", "source_ref": "indicator--cea5821b-7c96-4101-83ca-4c9f8dccdacf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f63becc-a9b6-4bb7-a6de-61e80dff1c26", "created": "2026-01-27T05:12:59.549161Z", "modified": "2026-01-27T05:12:59.549161Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27bcaa966f298d423e6914893bf3209186c272d5bc60d1f8cb8a3416b1cbee3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.549161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4175b9d1-3dc8-47ae-9589-a05c188e9296", "created": "2026-01-27T05:12:59.550088Z", "modified": "2026-01-27T05:12:59.550088Z", "relationship_type": "indicates", "source_ref": "indicator--8f63becc-a9b6-4bb7-a6de-61e80dff1c26", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec635c66-07ca-4f08-aa06-26df2542792b", "created": "2026-01-27T05:12:59.55028Z", "modified": "2026-01-27T05:12:59.55028Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58d07a6a0b7318a9c44e4bb1f8d4a6b7b10c3db67661d91310be03dd86fd0a69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.55028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfe387d5-5b96-4e1c-a507-502dad4e0049", "created": "2026-01-27T05:12:59.551141Z", "modified": "2026-01-27T05:12:59.551141Z", "relationship_type": "indicates", "source_ref": "indicator--ec635c66-07ca-4f08-aa06-26df2542792b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba82fff-58ae-4d38-a81f-6c348eaaff64", "created": "2026-01-27T05:12:59.551326Z", "modified": "2026-01-27T05:12:59.551326Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='768718652efda9215b4102fa7baadbfbd6a5e655d42a9064a3a47a74adc9ac34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.551326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--404fd3a6-bcbd-4ee6-a6e5-0452bb5df5d7", "created": "2026-01-27T05:12:59.552206Z", "modified": "2026-01-27T05:12:59.552206Z", "relationship_type": "indicates", "source_ref": "indicator--eba82fff-58ae-4d38-a81f-6c348eaaff64", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbc37bd-390b-4193-bb43-77e32d9d1b11", "created": "2026-01-27T05:12:59.552391Z", "modified": "2026-01-27T05:12:59.552391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e9c50936b2011590c981be8e78c029cabed4b7f5a8d2fb880070c57e875d090b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.552391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15ab857e-d930-4f10-bbbd-2b92130f7808", "created": "2026-01-27T05:12:59.553256Z", "modified": "2026-01-27T05:12:59.553256Z", "relationship_type": "indicates", "source_ref": "indicator--acbc37bd-390b-4193-bb43-77e32d9d1b11", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56c10c0-06ee-4f57-9940-16dfd596cb6a", "created": "2026-01-27T05:12:59.553439Z", "modified": "2026-01-27T05:12:59.553439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be99fd2e473d6fa4284fbd30bb1cfe8b004ed9ad7647c5ea312b9ba7334d2ab4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.553439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eb5cee8-9bdb-4cc0-b52b-e7ea3be8cdf2", "created": "2026-01-27T05:12:59.554278Z", "modified": "2026-01-27T05:12:59.554278Z", "relationship_type": "indicates", "source_ref": "indicator--d56c10c0-06ee-4f57-9940-16dfd596cb6a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ba40d5-92c9-42ae-9b6b-c08a222c1602", "created": "2026-01-27T05:12:59.554457Z", "modified": "2026-01-27T05:12:59.554457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74f9f34a8ee53bbeefca63c17a198602b5115ebb7227826dc1240ad7a21be0e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.554457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65617fda-2c03-4e04-b6a2-2e1576806c1c", "created": "2026-01-27T05:12:59.555288Z", "modified": "2026-01-27T05:12:59.555288Z", "relationship_type": "indicates", "source_ref": "indicator--b2ba40d5-92c9-42ae-9b6b-c08a222c1602", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4cc209-8bcc-490c-bdb8-870b30415baf", "created": "2026-01-27T05:12:59.555464Z", "modified": "2026-01-27T05:12:59.555464Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49bcab232df65d16130c28b86a4930c1a3545f434db68476f7e5c491a903a98f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.555464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--478dd1fa-24fb-48dc-a06e-b01b49d8941c", "created": "2026-01-27T05:12:59.556418Z", "modified": "2026-01-27T05:12:59.556418Z", "relationship_type": "indicates", "source_ref": "indicator--5f4cc209-8bcc-490c-bdb8-870b30415baf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5edf56-f332-43a8-a744-5cfbfb6a7dc8", "created": "2026-01-27T05:12:59.556601Z", "modified": "2026-01-27T05:12:59.556601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='533c4200b72a2441567ac3cd687acab8d27ac99ff66a46aaed5905ecfffb9bfe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.556601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a351f006-4014-477d-9143-220a1e847e71", "created": "2026-01-27T05:12:59.557429Z", "modified": "2026-01-27T05:12:59.557429Z", "relationship_type": "indicates", "source_ref": "indicator--ca5edf56-f332-43a8-a744-5cfbfb6a7dc8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40a941c-62b7-49f0-a503-5ec52bcdaaf3", "created": "2026-01-27T05:12:59.557611Z", "modified": "2026-01-27T05:12:59.557611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f1b3f4f49477a4c3296c6fd78aa4f77bb6480a6b0233377fbe40c3f70e9f343']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.557611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b843fcc-e983-43b9-9630-84355df652ab", "created": "2026-01-27T05:12:59.558445Z", "modified": "2026-01-27T05:12:59.558445Z", "relationship_type": "indicates", "source_ref": "indicator--b40a941c-62b7-49f0-a503-5ec52bcdaaf3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3117e630-0d98-4ac8-921c-5b481cd1004d", "created": "2026-01-27T05:12:59.558625Z", "modified": "2026-01-27T05:12:59.558625Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd98ecf65137cdc0976e7ac148e6534d9a35ba35b80c29355fb61e1268f1e3b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.558625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb46e6a3-a5b2-427f-82a1-f7b09a9ac0cc", "created": "2026-01-27T05:12:59.559472Z", "modified": "2026-01-27T05:12:59.559472Z", "relationship_type": "indicates", "source_ref": "indicator--3117e630-0d98-4ac8-921c-5b481cd1004d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3a9d23-8a6d-4685-8ea7-06e3f14fe68b", "created": "2026-01-27T05:12:59.559651Z", "modified": "2026-01-27T05:12:59.559651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19d290b4cd197f099953e7b4b1ec57078f9f1bf467297c7d50720765b10ba7c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.559651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bfee7c8-4154-4f0a-af73-88a3b9efcb07", "created": "2026-01-27T05:12:59.56048Z", "modified": "2026-01-27T05:12:59.56048Z", "relationship_type": "indicates", "source_ref": "indicator--1c3a9d23-8a6d-4685-8ea7-06e3f14fe68b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5539cf12-6501-4f18-af43-7459b1533bf3", "created": "2026-01-27T05:12:59.560658Z", "modified": "2026-01-27T05:12:59.560658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f74c8fb055f13616b25bf0d8e2c0f31b2636fd981e61fdd7ceb863b90160cf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.560658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00f69db2-434c-4b5d-9dce-12a46d478a3e", "created": "2026-01-27T05:12:59.561484Z", "modified": "2026-01-27T05:12:59.561484Z", "relationship_type": "indicates", "source_ref": "indicator--5539cf12-6501-4f18-af43-7459b1533bf3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42c67e9-fa42-4372-aea4-5eb40bf33502", "created": "2026-01-27T05:12:59.56166Z", "modified": "2026-01-27T05:12:59.56166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10c50638a54606799f8d8ce310a9dec9dc131f8675aff8f6f161db90f19c0709']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.56166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d11178e7-901c-432f-a3c9-a79864677ad5", "created": "2026-01-27T05:12:59.562487Z", "modified": "2026-01-27T05:12:59.562487Z", "relationship_type": "indicates", "source_ref": "indicator--f42c67e9-fa42-4372-aea4-5eb40bf33502", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e43925-67e8-49dc-8934-7717e97cc3eb", "created": "2026-01-27T05:12:59.562664Z", "modified": "2026-01-27T05:12:59.562664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b7e67bc048811ec30efcdf7fef67c4f16799185ebd1e4ce2d9bcc4381baed17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.562664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd1c9de3-8e28-470b-81fa-ef8e787024ba", "created": "2026-01-27T05:12:59.563496Z", "modified": "2026-01-27T05:12:59.563496Z", "relationship_type": "indicates", "source_ref": "indicator--18e43925-67e8-49dc-8934-7717e97cc3eb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad333ac4-6f70-4dd6-b360-2f3f3bcb061b", "created": "2026-01-27T05:12:59.563672Z", "modified": "2026-01-27T05:12:59.563672Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48ab101be2db649e79189f674f21cbcd30622a4cb09a64970aec14617e78f2aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.563672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ce4be4c-ca57-4c11-b201-315831a223cc", "created": "2026-01-27T05:12:59.564518Z", "modified": "2026-01-27T05:12:59.564518Z", "relationship_type": "indicates", "source_ref": "indicator--ad333ac4-6f70-4dd6-b360-2f3f3bcb061b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7615f68d-83c5-4900-be62-4d1689bb876d", "created": "2026-01-27T05:12:59.564692Z", "modified": "2026-01-27T05:12:59.564692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33cef8e720777aab12c73aee039d2713a051cf1b3a52253925f99ab45676ea35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.564692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42075e40-c7c3-4fc9-8015-a2c3e811f624", "created": "2026-01-27T05:12:59.565639Z", "modified": "2026-01-27T05:12:59.565639Z", "relationship_type": "indicates", "source_ref": "indicator--7615f68d-83c5-4900-be62-4d1689bb876d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ae5730-92d9-431e-9d02-d80ef31b29e6", "created": "2026-01-27T05:12:59.565834Z", "modified": "2026-01-27T05:12:59.565834Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='746a328f0176c0b0bcd8d9529946977cb31a85bf2fc9776c2f11cac3176a25dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.565834Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cae2e501-db28-46b4-a3b5-cb93347f2d10", "created": "2026-01-27T05:12:59.566647Z", "modified": "2026-01-27T05:12:59.566647Z", "relationship_type": "indicates", "source_ref": "indicator--03ae5730-92d9-431e-9d02-d80ef31b29e6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189f6028-29d3-422f-a24c-c25b03f70abb", "created": "2026-01-27T05:12:59.566841Z", "modified": "2026-01-27T05:12:59.566841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aca47dc2efdf562646215b65e27ef6b67a5b2ce907884ad876ce4c98c871e067']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.566841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a685732-e787-45f0-a306-8647a7eb89c9", "created": "2026-01-27T05:12:59.567712Z", "modified": "2026-01-27T05:12:59.567712Z", "relationship_type": "indicates", "source_ref": "indicator--189f6028-29d3-422f-a24c-c25b03f70abb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04a8a78-e3aa-4f31-8685-6222ae1fdd03", "created": "2026-01-27T05:12:59.567923Z", "modified": "2026-01-27T05:12:59.567923Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35c461700a9c10c2590c3ef4849308193a30213ddc997a2d2032e7e8a6e0b6b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.567923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c6da1b9-73f1-4b22-bb44-8dd018668c22", "created": "2026-01-27T05:12:59.56877Z", "modified": "2026-01-27T05:12:59.56877Z", "relationship_type": "indicates", "source_ref": "indicator--e04a8a78-e3aa-4f31-8685-6222ae1fdd03", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ad9ac1-08af-4392-a0cb-678c4d170331", "created": "2026-01-27T05:12:59.568959Z", "modified": "2026-01-27T05:12:59.568959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65aa15695a0a7fbec98e8164c07a71838cd5a6cf4fd54c4abc0df6d4dd9f3d1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.568959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d50188f-d07a-40eb-a6b1-4a910f7fade0", "created": "2026-01-27T05:12:59.569786Z", "modified": "2026-01-27T05:12:59.569786Z", "relationship_type": "indicates", "source_ref": "indicator--59ad9ac1-08af-4392-a0cb-678c4d170331", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c7cb26-d93a-47fc-90e1-f8cc0a57586a", "created": "2026-01-27T05:12:59.569973Z", "modified": "2026-01-27T05:12:59.569973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='063adbcaa46f9273e58ac4840f0b5a362f0b35b77abb3b05458295dec5944281']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.569973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46577b38-3217-4143-b5bf-3abafb8a34aa", "created": "2026-01-27T05:12:59.570798Z", "modified": "2026-01-27T05:12:59.570798Z", "relationship_type": "indicates", "source_ref": "indicator--16c7cb26-d93a-47fc-90e1-f8cc0a57586a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aee6c47-0799-4494-99a6-622a9c214f32", "created": "2026-01-27T05:12:59.570975Z", "modified": "2026-01-27T05:12:59.570975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4dd850ad75d318839e823f7ea90ce6b4505022a9eea69a027850b05b6ceda299']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.570975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--456ef353-6eeb-4507-ab22-8f5cdd8387e0", "created": "2026-01-27T05:12:59.571813Z", "modified": "2026-01-27T05:12:59.571813Z", "relationship_type": "indicates", "source_ref": "indicator--4aee6c47-0799-4494-99a6-622a9c214f32", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6623a5-3b84-43b4-bc13-3779f1d1be0a", "created": "2026-01-27T05:12:59.571996Z", "modified": "2026-01-27T05:12:59.571996Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a77a6280a534a9ffc98996cdca81a5e2d950b9d566299f398d641b5ba0853d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.571996Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ef727b6-a8be-4fc4-8dc7-c9f3807cf7aa", "created": "2026-01-27T05:12:59.572824Z", "modified": "2026-01-27T05:12:59.572824Z", "relationship_type": "indicates", "source_ref": "indicator--aa6623a5-3b84-43b4-bc13-3779f1d1be0a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea01d3a-c644-49eb-b6b9-75f3e55e1163", "created": "2026-01-27T05:12:59.573008Z", "modified": "2026-01-27T05:12:59.573008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1461934e90e9d85235c560c7fd6cba63d164ad3131637887c26a11fa072e44eb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.573008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16f55cf0-f40f-4f6c-886a-e7f58ca98150", "created": "2026-01-27T05:12:59.573971Z", "modified": "2026-01-27T05:12:59.573971Z", "relationship_type": "indicates", "source_ref": "indicator--4ea01d3a-c644-49eb-b6b9-75f3e55e1163", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11be9766-278f-4877-a886-b00db772a254", "created": "2026-01-27T05:12:59.574153Z", "modified": "2026-01-27T05:12:59.574153Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='647fbae1912fc58278fa03a5753360223aea974e54b924d750edc2738298dd74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.574153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50259e2a-48fc-4522-9c8b-01cfd75ae71d", "created": "2026-01-27T05:12:59.574995Z", "modified": "2026-01-27T05:12:59.574995Z", "relationship_type": "indicates", "source_ref": "indicator--11be9766-278f-4877-a886-b00db772a254", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0e4d8f-06c3-40e5-99c5-de027dfe30df", "created": "2026-01-27T05:12:59.575174Z", "modified": "2026-01-27T05:12:59.575174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55254d5e91fd4c3ae69adc269c5723f864ca94bb8c346cce663d2ff583e47598']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.575174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce374902-e1ef-4185-a52b-8c86a244c894", "created": "2026-01-27T05:12:59.576001Z", "modified": "2026-01-27T05:12:59.576001Z", "relationship_type": "indicates", "source_ref": "indicator--dc0e4d8f-06c3-40e5-99c5-de027dfe30df", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c914da2-8269-4b7f-a88c-11ddd65a2c3b", "created": "2026-01-27T05:12:59.576176Z", "modified": "2026-01-27T05:12:59.576176Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1477676b1041fe049d39dd7cb1e8eff3ee4b5ebfd65597982f1844e4e7b712d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.576176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03b9f09d-bb68-45bc-8f17-ada1efae3f81", "created": "2026-01-27T05:12:59.577117Z", "modified": "2026-01-27T05:12:59.577117Z", "relationship_type": "indicates", "source_ref": "indicator--7c914da2-8269-4b7f-a88c-11ddd65a2c3b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd390585-0a3d-4388-8418-6d9421326888", "created": "2026-01-27T05:12:59.577361Z", "modified": "2026-01-27T05:12:59.577361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0164550f14e9dec6e7d9444f13fecacefd7fd520f1ad51abb2ac81f81a954672']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.577361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79ebcd23-86d2-4c93-b768-3c89bc2872a3", "created": "2026-01-27T05:12:59.578232Z", "modified": "2026-01-27T05:12:59.578232Z", "relationship_type": "indicates", "source_ref": "indicator--fd390585-0a3d-4388-8418-6d9421326888", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ebd70e-0a30-438c-a29f-86e1dd799a41", "created": "2026-01-27T05:12:59.578415Z", "modified": "2026-01-27T05:12:59.578415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='af2db574ad76f630c6c8b4022b35ca883cc36d6739e64c155b2369373b38c40a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.578415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd710c4f-17f5-440c-ba29-e9d741e83394", "created": "2026-01-27T05:12:59.579253Z", "modified": "2026-01-27T05:12:59.579253Z", "relationship_type": "indicates", "source_ref": "indicator--86ebd70e-0a30-438c-a29f-86e1dd799a41", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ca05d7-a05b-4074-85bf-5b596ca65ca3", "created": "2026-01-27T05:12:59.579431Z", "modified": "2026-01-27T05:12:59.579431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4855a825bbf817f59295ae27a729e0694697c816c21fc78485dd0db706c73745']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.579431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c5d7a5d-d117-495a-bf56-f1bf0bbec0a9", "created": "2026-01-27T05:12:59.580269Z", "modified": "2026-01-27T05:12:59.580269Z", "relationship_type": "indicates", "source_ref": "indicator--d2ca05d7-a05b-4074-85bf-5b596ca65ca3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2948ba-f62f-4269-b5f3-2d0f1277ca4f", "created": "2026-01-27T05:12:59.580448Z", "modified": "2026-01-27T05:12:59.580448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03f016b0d6aae365d81529018f7f5ad917b92cf24d14d9448c13b2215c5fe4f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.580448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa9c20cd-dc4e-4c64-9faf-fb7f8efdd19a", "created": "2026-01-27T05:12:59.581299Z", "modified": "2026-01-27T05:12:59.581299Z", "relationship_type": "indicates", "source_ref": "indicator--1b2948ba-f62f-4269-b5f3-2d0f1277ca4f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a7d8e5-c6e4-401e-921c-5d0d2283ba44", "created": "2026-01-27T05:12:59.581475Z", "modified": "2026-01-27T05:12:59.581475Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73a8aafaff910334bed846ada3d68116d6fa5b136ab3d4091151dff89b77923f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.581475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcbeb87f-d9bf-4985-8800-a8fb6e4a5327", "created": "2026-01-27T05:12:59.582308Z", "modified": "2026-01-27T05:12:59.582308Z", "relationship_type": "indicates", "source_ref": "indicator--a2a7d8e5-c6e4-401e-921c-5d0d2283ba44", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24244d5b-7580-495c-a611-680e532ab9ef", "created": "2026-01-27T05:12:59.582492Z", "modified": "2026-01-27T05:12:59.582492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7f9e394324f0782cdf0a3c9ec3e7e687e011f0f1001589a3c9d0fbacb12ec3d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.582492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff6c6d98-6dff-4466-96ed-face1ef5b855", "created": "2026-01-27T05:12:59.583488Z", "modified": "2026-01-27T05:12:59.583488Z", "relationship_type": "indicates", "source_ref": "indicator--24244d5b-7580-495c-a611-680e532ab9ef", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef86db5-3f54-4e28-a252-1435d2fd86ce", "created": "2026-01-27T05:12:59.58371Z", "modified": "2026-01-27T05:12:59.58371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9df64068aebebfba3359e2241d3ecbcf857c4e5c072eba9771fffc9745df1fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.58371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61c4ec53-e438-44ba-8bd8-16d01506dfd8", "created": "2026-01-27T05:12:59.584588Z", "modified": "2026-01-27T05:12:59.584588Z", "relationship_type": "indicates", "source_ref": "indicator--7ef86db5-3f54-4e28-a252-1435d2fd86ce", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecde0035-6456-479e-89ca-712d030dd27a", "created": "2026-01-27T05:12:59.584795Z", "modified": "2026-01-27T05:12:59.584795Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9eb502f6e2f4ae428996d2b5c10b30185df5e0733b8df07e6b8076f03674ef1f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.584795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7265532-69d7-4531-a110-9275ee7c1de0", "created": "2026-01-27T05:12:59.585618Z", "modified": "2026-01-27T05:12:59.585618Z", "relationship_type": "indicates", "source_ref": "indicator--ecde0035-6456-479e-89ca-712d030dd27a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2172cc-8cb7-47aa-b46f-883f9aea54c3", "created": "2026-01-27T05:12:59.585811Z", "modified": "2026-01-27T05:12:59.585811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c0a45388c27e9820eacc8e14c29672f64cb47c87089fb9996f23926099b4dba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.585811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d8a5237-9cdb-41a5-ab5d-7d8f555bd156", "created": "2026-01-27T05:12:59.586636Z", "modified": "2026-01-27T05:12:59.586636Z", "relationship_type": "indicates", "source_ref": "indicator--4d2172cc-8cb7-47aa-b46f-883f9aea54c3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270076ce-3fb0-4f42-b0a3-c0e84b092f44", "created": "2026-01-27T05:12:59.586825Z", "modified": "2026-01-27T05:12:59.586825Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba7200a969fca1315d24f798eaabf0710ea33947ea338b27f39390c6f0819e9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.586825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0482b2a0-0e81-4913-84c6-3cd62dbeb5df", "created": "2026-01-27T05:12:59.587638Z", "modified": "2026-01-27T05:12:59.587638Z", "relationship_type": "indicates", "source_ref": "indicator--270076ce-3fb0-4f42-b0a3-c0e84b092f44", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3056376-14cd-4567-8f86-8e34485581be", "created": "2026-01-27T05:12:59.587832Z", "modified": "2026-01-27T05:12:59.587832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2863db2fc37341d56cd482bb8cc4dbd8a82dc986383ddb810816319852803c40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.587832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36cea46f-9eba-43d1-83d3-ebbcbd38c7ad", "created": "2026-01-27T05:12:59.588666Z", "modified": "2026-01-27T05:12:59.588666Z", "relationship_type": "indicates", "source_ref": "indicator--a3056376-14cd-4567-8f86-8e34485581be", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701de27d-13db-4738-b3b4-8ae6676d0aaf", "created": "2026-01-27T05:12:59.588859Z", "modified": "2026-01-27T05:12:59.588859Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de9c15401ebe87721c3bfc31ee1c8550a3c74810fb8a76d449835c72997a4744']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.588859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1970774-670b-446c-a1c6-3d5f8a7088ca", "created": "2026-01-27T05:12:59.589683Z", "modified": "2026-01-27T05:12:59.589683Z", "relationship_type": "indicates", "source_ref": "indicator--701de27d-13db-4738-b3b4-8ae6676d0aaf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae332268-5544-4606-a3cd-d7cf2da03748", "created": "2026-01-27T05:12:59.589877Z", "modified": "2026-01-27T05:12:59.589877Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b03583bcd534de7c33b8108ab879e4f87bb612dda3f28f86e927929ad29b64e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.589877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f400ca9-461e-4c1f-b411-771f7509ad01", "created": "2026-01-27T05:12:59.590688Z", "modified": "2026-01-27T05:12:59.590688Z", "relationship_type": "indicates", "source_ref": "indicator--ae332268-5544-4606-a3cd-d7cf2da03748", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55ebb23-10e6-42de-80ae-3d776e1b40fc", "created": "2026-01-27T05:12:59.590913Z", "modified": "2026-01-27T05:12:59.590913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55cff1b05b3a83b3d3945a45cc05117920d80b19c8013a7c8131c3fe728fcb53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.590913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7162f974-3bcd-40e4-962b-5ea1602aa7f0", "created": "2026-01-27T05:12:59.591742Z", "modified": "2026-01-27T05:12:59.591742Z", "relationship_type": "indicates", "source_ref": "indicator--e55ebb23-10e6-42de-80ae-3d776e1b40fc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579beb89-c009-451b-94c8-84d3361472fa", "created": "2026-01-27T05:12:59.591935Z", "modified": "2026-01-27T05:12:59.591935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f02287d99b38f82880a6e36f671538be7bdc1961798b309d36158343837c586']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.591935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6171430-913a-4e54-ad4b-5efdd7f15b52", "created": "2026-01-27T05:12:59.592884Z", "modified": "2026-01-27T05:12:59.592884Z", "relationship_type": "indicates", "source_ref": "indicator--579beb89-c009-451b-94c8-84d3361472fa", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248dadca-2f7e-4960-909a-ac69cf0ff110", "created": "2026-01-27T05:12:59.593067Z", "modified": "2026-01-27T05:12:59.593067Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54336cdba02838a3804ecbd512ba99a4dcf11a84367b10083438f83c0a7040f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.593067Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d11d14cb-8474-4137-bfc6-306f0ff0eebf", "created": "2026-01-27T05:12:59.593898Z", "modified": "2026-01-27T05:12:59.593898Z", "relationship_type": "indicates", "source_ref": "indicator--248dadca-2f7e-4960-909a-ac69cf0ff110", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c1d231-30d1-4448-b9c7-8f690a48bf90", "created": "2026-01-27T05:12:59.594074Z", "modified": "2026-01-27T05:12:59.594074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62c7a19ae381667b5e9a05381b0ae26f93d7065340a4bbdd6035173373609be7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.594074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--128d57bd-271e-4842-a3b1-ab023146b6d8", "created": "2026-01-27T05:12:59.5949Z", "modified": "2026-01-27T05:12:59.5949Z", "relationship_type": "indicates", "source_ref": "indicator--83c1d231-30d1-4448-b9c7-8f690a48bf90", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faa3163-0de7-4efe-a693-a3ec4e87e9a0", "created": "2026-01-27T05:12:59.595074Z", "modified": "2026-01-27T05:12:59.595074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='708976ba66421e4fe8086d077efc2d7bea2c7c34f74bfc4ca4132aa18a66309a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.595074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09e2ec38-9215-46a8-af22-306ade0d9a15", "created": "2026-01-27T05:12:59.595906Z", "modified": "2026-01-27T05:12:59.595906Z", "relationship_type": "indicates", "source_ref": "indicator--8faa3163-0de7-4efe-a693-a3ec4e87e9a0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdb83ee-65a4-4a88-b941-0bc18e188c4c", "created": "2026-01-27T05:12:59.596082Z", "modified": "2026-01-27T05:12:59.596082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb9a7fcb48b029f436ab85d81328150e9173a83bfbba051549d3283afb339a0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.596082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--236bd4bf-b668-4feb-b6c0-4a067dba6de9", "created": "2026-01-27T05:12:59.596908Z", "modified": "2026-01-27T05:12:59.596908Z", "relationship_type": "indicates", "source_ref": "indicator--dfdb83ee-65a4-4a88-b941-0bc18e188c4c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca80550-00e2-49b1-86e2-b45994911fbf", "created": "2026-01-27T05:12:59.597084Z", "modified": "2026-01-27T05:12:59.597084Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d16d292e090d7ee9762ffdb09c9e5c5739937db387b3c36e358817d5b320b9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.597084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b239d7f8-9af4-4ec2-a532-76ffc331274a", "created": "2026-01-27T05:12:59.597906Z", "modified": "2026-01-27T05:12:59.597906Z", "relationship_type": "indicates", "source_ref": "indicator--dca80550-00e2-49b1-86e2-b45994911fbf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f573bbda-69c5-4c4e-aec5-021a5e10f362", "created": "2026-01-27T05:12:59.598085Z", "modified": "2026-01-27T05:12:59.598085Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03635184546ac7d8304edc2e4dc68f7a21a97bdfeffeb0fb1b5a06244902a046']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.598085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33448711-355c-4a4a-a36f-e2c0a642e0c0", "created": "2026-01-27T05:12:59.598942Z", "modified": "2026-01-27T05:12:59.598942Z", "relationship_type": "indicates", "source_ref": "indicator--f573bbda-69c5-4c4e-aec5-021a5e10f362", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc6e07a-9b5c-4116-814f-a898f445ed7b", "created": "2026-01-27T05:12:59.599133Z", "modified": "2026-01-27T05:12:59.599133Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bb4414e4c0a2d5beab99e0a9add2c4f9e49f5623ce3031d92abb68dc565c6e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.599133Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67877e8b-1dd9-4f96-877f-d42677190ca4", "created": "2026-01-27T05:12:59.599986Z", "modified": "2026-01-27T05:12:59.599986Z", "relationship_type": "indicates", "source_ref": "indicator--5dc6e07a-9b5c-4116-814f-a898f445ed7b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366b09b4-66f1-48b5-b75b-7c919c6b8115", "created": "2026-01-27T05:12:59.600159Z", "modified": "2026-01-27T05:12:59.600159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d01c3f0408fb1762a15517276d73f362ab64461f58242f4066da883bb2b95c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.600159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46659520-6b8d-4985-bf13-e650fc08c9e0", "created": "2026-01-27T05:12:59.601116Z", "modified": "2026-01-27T05:12:59.601116Z", "relationship_type": "indicates", "source_ref": "indicator--366b09b4-66f1-48b5-b75b-7c919c6b8115", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f989b3-c2b4-49ae-b1c5-8673b63e3330", "created": "2026-01-27T05:12:59.601292Z", "modified": "2026-01-27T05:12:59.601292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d6cf144b9271318dc6ff69f816b1146d4a98df1fde683cf094f56643fe303a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.601292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eaf73c1a-086f-4052-b496-519356a3438b", "created": "2026-01-27T05:12:59.602115Z", "modified": "2026-01-27T05:12:59.602115Z", "relationship_type": "indicates", "source_ref": "indicator--b2f989b3-c2b4-49ae-b1c5-8673b63e3330", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11318707-57b0-4535-9481-d4b2a2ebe625", "created": "2026-01-27T05:12:59.602292Z", "modified": "2026-01-27T05:12:59.602292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbabc6599de4d321f584c858f8214fa0f78c5eeb94209b02978f45ab1f61739c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.602292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c6b96c9-d02e-4151-b404-2917a1dd4dce", "created": "2026-01-27T05:12:59.603138Z", "modified": "2026-01-27T05:12:59.603138Z", "relationship_type": "indicates", "source_ref": "indicator--11318707-57b0-4535-9481-d4b2a2ebe625", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e889c5db-fd49-4cef-9e38-26ef42d90847", "created": "2026-01-27T05:12:59.603316Z", "modified": "2026-01-27T05:12:59.603316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cea29a8f5b3531dbdc2b9c9ac71ac1475ca695545a3a5074728ad567316e518e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.603316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85be0a92-3e9f-4ee5-8e38-cbdb5ea41fa2", "created": "2026-01-27T05:12:59.604139Z", "modified": "2026-01-27T05:12:59.604139Z", "relationship_type": "indicates", "source_ref": "indicator--e889c5db-fd49-4cef-9e38-26ef42d90847", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185e2c9a-1f36-4f03-8553-1f8354009326", "created": "2026-01-27T05:12:59.604313Z", "modified": "2026-01-27T05:12:59.604313Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c94c6c7602208bd54bb3ac379799bdb742d25cfc434ac2d395945509d7e376e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.604313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f95d44f8-be8b-4b13-8918-d7eed8510d3d", "created": "2026-01-27T05:12:59.605139Z", "modified": "2026-01-27T05:12:59.605139Z", "relationship_type": "indicates", "source_ref": "indicator--185e2c9a-1f36-4f03-8553-1f8354009326", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebe305b-fadb-4ccf-b285-fc615495c0af", "created": "2026-01-27T05:12:59.605316Z", "modified": "2026-01-27T05:12:59.605316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43fdbd49d1f197ef8a083c13ba9ef93bfd215cb03c172a70c1218c638131cf31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.605316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbc46f58-619f-48c1-85dc-dc03e31dda33", "created": "2026-01-27T05:12:59.606152Z", "modified": "2026-01-27T05:12:59.606152Z", "relationship_type": "indicates", "source_ref": "indicator--8ebe305b-fadb-4ccf-b285-fc615495c0af", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be4bd03-322b-4b84-aeac-c77dc7c288f3", "created": "2026-01-27T05:12:59.606327Z", "modified": "2026-01-27T05:12:59.606327Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9cdc9649966c22d20412c3ff0e42f2b781b1f723289867b2dc4e5d9232430bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.606327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5e983a9-948e-434f-8450-8e96e3ab1396", "created": "2026-01-27T05:12:59.607148Z", "modified": "2026-01-27T05:12:59.607148Z", "relationship_type": "indicates", "source_ref": "indicator--8be4bd03-322b-4b84-aeac-c77dc7c288f3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547df3d5-c146-4abd-8983-6bd6f5f8a818", "created": "2026-01-27T05:12:59.60732Z", "modified": "2026-01-27T05:12:59.60732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a774189b1f2fdd739b44496c45af6ad34217631d66761c5a5f3f19ccf126e28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.60732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b8253d0-136b-4287-8b20-64fce910ceaa", "created": "2026-01-27T05:12:59.608151Z", "modified": "2026-01-27T05:12:59.608151Z", "relationship_type": "indicates", "source_ref": "indicator--547df3d5-c146-4abd-8983-6bd6f5f8a818", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9625c956-7bea-4897-a796-fcf73e26ae18", "created": "2026-01-27T05:12:59.608325Z", "modified": "2026-01-27T05:12:59.608325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bfb7418dd56c05708b905b6b85e0109fd4ef0121d0938cca6ecdb69760a41808']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.608325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--528e5a1f-c9a7-4cec-90af-d9bf6a12ba30", "created": "2026-01-27T05:12:59.609157Z", "modified": "2026-01-27T05:12:59.609157Z", "relationship_type": "indicates", "source_ref": "indicator--9625c956-7bea-4897-a796-fcf73e26ae18", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d67bf52-675e-4dfc-b123-9302cf045d78", "created": "2026-01-27T05:12:59.609329Z", "modified": "2026-01-27T05:12:59.609329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d885eadb2b760b80901cb8ec78e81f8194ac1c63f11406548797c49fba486969']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.609329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d010e0f-c335-46e8-b520-dd2a86706eaa", "created": "2026-01-27T05:12:59.610286Z", "modified": "2026-01-27T05:12:59.610286Z", "relationship_type": "indicates", "source_ref": "indicator--7d67bf52-675e-4dfc-b123-9302cf045d78", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf97744-51a6-4ba6-9ce4-d1d5f7bc31e6", "created": "2026-01-27T05:12:59.610462Z", "modified": "2026-01-27T05:12:59.610462Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6bbf82f4c49a54814d5b2f0531ba3db08e38f098afa633dfcf275cac9109757']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.610462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc3d5921-2f7b-4043-9b9e-9e72116e1545", "created": "2026-01-27T05:12:59.611289Z", "modified": "2026-01-27T05:12:59.611289Z", "relationship_type": "indicates", "source_ref": "indicator--5cf97744-51a6-4ba6-9ce4-d1d5f7bc31e6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8494f2f0-33e8-4673-9726-1d14fbed690f", "created": "2026-01-27T05:12:59.611468Z", "modified": "2026-01-27T05:12:59.611468Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca3e9753a1d65c23a597accb972f8e77914623e66d6b00b40b2bcf671d65650a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.611468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82985d72-03d2-421e-8943-9db8ad7fc2b2", "created": "2026-01-27T05:12:59.612303Z", "modified": "2026-01-27T05:12:59.612303Z", "relationship_type": "indicates", "source_ref": "indicator--8494f2f0-33e8-4673-9726-1d14fbed690f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486dac73-f39c-4d36-bd09-9db613d21ee4", "created": "2026-01-27T05:12:59.61248Z", "modified": "2026-01-27T05:12:59.61248Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26313cde7a803b322793edf848c53d73beb4516ac439cc2d5e5dee5c593b7f31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.61248Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95ac6741-b31d-421e-ba34-9d235a6fbfaf", "created": "2026-01-27T05:12:59.613317Z", "modified": "2026-01-27T05:12:59.613317Z", "relationship_type": "indicates", "source_ref": "indicator--486dac73-f39c-4d36-bd09-9db613d21ee4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce1f204a-a065-40df-bf5b-2f254df716fc", "created": "2026-01-27T05:12:59.613494Z", "modified": "2026-01-27T05:12:59.613494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a8e5aaa90bd6bda0a70d7596d4488a7207b177fbfd4c227975140b020196f66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.613494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--469a5c9c-a18c-4bc2-a388-ed1ee896b92b", "created": "2026-01-27T05:12:59.614336Z", "modified": "2026-01-27T05:12:59.614336Z", "relationship_type": "indicates", "source_ref": "indicator--ce1f204a-a065-40df-bf5b-2f254df716fc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afac7c9b-09fb-48aa-a597-094642a09d96", "created": "2026-01-27T05:12:59.614514Z", "modified": "2026-01-27T05:12:59.614514Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d307fcb74218842623ce48fcf0ff41767ee56982e3ea8e7a94b9fcb1885de06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.614514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7b1e909-9f87-4564-95b3-1e223c5e9dbb", "created": "2026-01-27T05:12:59.61536Z", "modified": "2026-01-27T05:12:59.61536Z", "relationship_type": "indicates", "source_ref": "indicator--afac7c9b-09fb-48aa-a597-094642a09d96", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8b9d2a-356e-496c-a301-926b6ff4480e", "created": "2026-01-27T05:12:59.615539Z", "modified": "2026-01-27T05:12:59.615539Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc13bcd3fadc30737f2ad032730122ef7f7f504cd0c422764f8dee29d49c4874']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.615539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1720595a-0de9-47a2-b730-bbaaec08a2b8", "created": "2026-01-27T05:12:59.616377Z", "modified": "2026-01-27T05:12:59.616377Z", "relationship_type": "indicates", "source_ref": "indicator--3d8b9d2a-356e-496c-a301-926b6ff4480e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dfd722-4605-424f-853a-f31d96a09f84", "created": "2026-01-27T05:12:59.616552Z", "modified": "2026-01-27T05:12:59.616552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38be0f005972cc07cc79064389dd21b47058571c9bfc31f3e87e0d8df3dc7378']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.616552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25d7d579-8eee-484f-8fdd-45ad22168af2", "created": "2026-01-27T05:12:59.617381Z", "modified": "2026-01-27T05:12:59.617381Z", "relationship_type": "indicates", "source_ref": "indicator--30dfd722-4605-424f-853a-f31d96a09f84", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55934528-e2b4-4782-bbcf-815e177d85c4", "created": "2026-01-27T05:12:59.617555Z", "modified": "2026-01-27T05:12:59.617555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb63a800759e3ef4328654e19765912fb7f20eac6a88f3779c5a89cc63541931']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.617555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3199b700-796e-4a14-9553-ba631cac7e8b", "created": "2026-01-27T05:12:59.618384Z", "modified": "2026-01-27T05:12:59.618384Z", "relationship_type": "indicates", "source_ref": "indicator--55934528-e2b4-4782-bbcf-815e177d85c4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a1e38b-8cf5-42e3-b22f-c9cda64a4d90", "created": "2026-01-27T05:12:59.618555Z", "modified": "2026-01-27T05:12:59.618555Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a8f775f0d589663fbe6b2b4b98056f5ea6bab9273425dfed58281234e429d17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.618555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5dd215b5-1371-48c1-ad50-85263d891616", "created": "2026-01-27T05:12:59.619513Z", "modified": "2026-01-27T05:12:59.619513Z", "relationship_type": "indicates", "source_ref": "indicator--b7a1e38b-8cf5-42e3-b22f-c9cda64a4d90", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3622b9f5-08f0-48bd-9ada-c8eba35a0c00", "created": "2026-01-27T05:12:59.619693Z", "modified": "2026-01-27T05:12:59.619693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e90dfb63ed8cd79ceb4ea4b3a95d561afa95cafbf80d0d75029a50faca535f53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.619693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a88b255e-6a3b-4a13-a988-40d5c92f79b9", "created": "2026-01-27T05:12:59.620541Z", "modified": "2026-01-27T05:12:59.620541Z", "relationship_type": "indicates", "source_ref": "indicator--3622b9f5-08f0-48bd-9ada-c8eba35a0c00", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85661356-eab6-4bf2-ba55-9eaf2ab50fc8", "created": "2026-01-27T05:12:59.62072Z", "modified": "2026-01-27T05:12:59.62072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='88997c10e8a844e834bf0febff9614ba63f8802d40e863c40fba760b7340524f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.62072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34aa4f00-7107-4606-94d3-c2609af5325b", "created": "2026-01-27T05:12:59.621554Z", "modified": "2026-01-27T05:12:59.621554Z", "relationship_type": "indicates", "source_ref": "indicator--85661356-eab6-4bf2-ba55-9eaf2ab50fc8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dee2e8c-9970-4fc6-8131-14a973c9a9ba", "created": "2026-01-27T05:12:59.621734Z", "modified": "2026-01-27T05:12:59.621734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='406baa9efd3223891eb32796154d91d65e9d0903ee5a4f1c7ee78b8a41c21496']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.621734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--625a73cf-da5f-4b35-a016-c45663cf3a6e", "created": "2026-01-27T05:12:59.622561Z", "modified": "2026-01-27T05:12:59.622561Z", "relationship_type": "indicates", "source_ref": "indicator--8dee2e8c-9970-4fc6-8131-14a973c9a9ba", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507ab673-91bb-4000-929f-962a409b6624", "created": "2026-01-27T05:12:59.622735Z", "modified": "2026-01-27T05:12:59.622735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6443a4d618a84a9f9b1d71a25794a2b0f52c3889a0ce1b681018e944d9ed1374']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.622735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df978638-4c7f-4448-ac48-d9f1c43ccd0b", "created": "2026-01-27T05:12:59.623572Z", "modified": "2026-01-27T05:12:59.623572Z", "relationship_type": "indicates", "source_ref": "indicator--507ab673-91bb-4000-929f-962a409b6624", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50de266-c21a-45a9-b272-3a992f1f3ba9", "created": "2026-01-27T05:12:59.623776Z", "modified": "2026-01-27T05:12:59.623776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36c9d7149af2dadfacaa0c34b7b5992dbe6aaa05f008d5f3536e14590a903cbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.623776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96fb3f94-132b-4c24-bef3-091a078919ab", "created": "2026-01-27T05:12:59.624609Z", "modified": "2026-01-27T05:12:59.624609Z", "relationship_type": "indicates", "source_ref": "indicator--d50de266-c21a-45a9-b272-3a992f1f3ba9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db5affe-a3b0-4d93-ac2b-83959c066259", "created": "2026-01-27T05:12:59.624807Z", "modified": "2026-01-27T05:12:59.624807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e43e24373749fc62fe1934fe5bda69e0ab7198c27a32c5fc8161078248f5df7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.624807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c37ca377-af12-4cda-9efa-049d7f989b1b", "created": "2026-01-27T05:12:59.625636Z", "modified": "2026-01-27T05:12:59.625636Z", "relationship_type": "indicates", "source_ref": "indicator--3db5affe-a3b0-4d93-ac2b-83959c066259", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87058328-5442-44d8-a1a7-2297982f4d38", "created": "2026-01-27T05:12:59.625836Z", "modified": "2026-01-27T05:12:59.625836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='307673aceb86f12d2edfcce8a642eafa000c2eca9625aea17c38397f7a11f804']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.625836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c3ea215-59d3-4134-a1f9-f61c502b06a6", "created": "2026-01-27T05:12:59.626669Z", "modified": "2026-01-27T05:12:59.626669Z", "relationship_type": "indicates", "source_ref": "indicator--87058328-5442-44d8-a1a7-2297982f4d38", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa31eb9c-9c17-44ac-a030-1545116f454a", "created": "2026-01-27T05:12:59.626864Z", "modified": "2026-01-27T05:12:59.626864Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e636d97d015a677110826d93ddbaa3fc6ede7d11f404777e4d65694f7db61f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.626864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42803cbb-53c9-4fdb-9165-4647438fdc3c", "created": "2026-01-27T05:12:59.62784Z", "modified": "2026-01-27T05:12:59.62784Z", "relationship_type": "indicates", "source_ref": "indicator--fa31eb9c-9c17-44ac-a030-1545116f454a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaea63f-5cab-4ce5-b540-a9d28bc66818", "created": "2026-01-27T05:12:59.628027Z", "modified": "2026-01-27T05:12:59.628027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69a483676741f0f8e8cf20b3f674d4f08d40bb1f53438f414d93bb148c31bad2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.628027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ca2cedb-6439-495b-94e0-61c6cdbf4a56", "created": "2026-01-27T05:12:59.628856Z", "modified": "2026-01-27T05:12:59.628856Z", "relationship_type": "indicates", "source_ref": "indicator--cbaea63f-5cab-4ce5-b540-a9d28bc66818", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfa3764-af01-4986-a6da-691086ae889c", "created": "2026-01-27T05:12:59.629036Z", "modified": "2026-01-27T05:12:59.629036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5840208d279346be5eee45d37974ac84b0544ba4ab5bf33cf43fc2856229532d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.629036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e9897de-78a1-41b7-bca3-8837dd9a2e0b", "created": "2026-01-27T05:12:59.629859Z", "modified": "2026-01-27T05:12:59.629859Z", "relationship_type": "indicates", "source_ref": "indicator--1cfa3764-af01-4986-a6da-691086ae889c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1e14f3-6e97-456d-b7a5-a4ebdae98261", "created": "2026-01-27T05:12:59.630036Z", "modified": "2026-01-27T05:12:59.630036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c3a1f6f315067f4b17fe0002979356cd214f1eb9885bd86e5d66acc8f1638df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.630036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--683ec8fa-fc88-4c18-80cd-feb7ff40bfa5", "created": "2026-01-27T05:12:59.630979Z", "modified": "2026-01-27T05:12:59.630979Z", "relationship_type": "indicates", "source_ref": "indicator--fd1e14f3-6e97-456d-b7a5-a4ebdae98261", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d960aabb-3288-459e-ab9d-437515e97e48", "created": "2026-01-27T05:12:59.631171Z", "modified": "2026-01-27T05:12:59.631171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='094bd694fbab7b564090b817a8f6725e7d2c537a5d0e2258a882b2be6fc4ec08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.631171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c696a4a-a1fe-4a3c-a3c6-e3fd66fb5a69", "created": "2026-01-27T05:12:59.632031Z", "modified": "2026-01-27T05:12:59.632031Z", "relationship_type": "indicates", "source_ref": "indicator--d960aabb-3288-459e-ab9d-437515e97e48", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa139ba-db95-4f77-a73f-e4bc90f1214f", "created": "2026-01-27T05:12:59.632207Z", "modified": "2026-01-27T05:12:59.632207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36f51eb821052396c0bc16b19614ab479566c448abe5d26d425096d83bcc18fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.632207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0f6b08e-e165-4dce-a4dc-2a461b58a501", "created": "2026-01-27T05:12:59.63305Z", "modified": "2026-01-27T05:12:59.63305Z", "relationship_type": "indicates", "source_ref": "indicator--dfa139ba-db95-4f77-a73f-e4bc90f1214f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5a6978-889d-42d1-9526-90b9d773b207", "created": "2026-01-27T05:12:59.633226Z", "modified": "2026-01-27T05:12:59.633226Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aab56075fc070e71a5a2ae628341d3896b95b6ddd5bfb1942e7de53775514172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.633226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0cd6f7db-fae9-4d85-a92b-d36077955bf1", "created": "2026-01-27T05:12:59.634076Z", "modified": "2026-01-27T05:12:59.634076Z", "relationship_type": "indicates", "source_ref": "indicator--6a5a6978-889d-42d1-9526-90b9d773b207", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aae3c80-2014-4ab8-a63e-ae0bbed30d1f", "created": "2026-01-27T05:12:59.634256Z", "modified": "2026-01-27T05:12:59.634256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65f49b8e40888aa2ac46d9d82539ba0abdfcb3923937988664ed472816ee2cc1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.634256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8fee94a-0de1-4e39-adb1-e57d910430a0", "created": "2026-01-27T05:12:59.635091Z", "modified": "2026-01-27T05:12:59.635091Z", "relationship_type": "indicates", "source_ref": "indicator--3aae3c80-2014-4ab8-a63e-ae0bbed30d1f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc82a16-7270-47df-8333-969719dad864", "created": "2026-01-27T05:12:59.635267Z", "modified": "2026-01-27T05:12:59.635267Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fbbd5ad30ac6baf5ca5221157a1697c94d733c387196619eab25fadc010f8ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.635267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0052d64-ee5a-4ada-b1cd-177059318c5e", "created": "2026-01-27T05:12:59.636168Z", "modified": "2026-01-27T05:12:59.636168Z", "relationship_type": "indicates", "source_ref": "indicator--ccc82a16-7270-47df-8333-969719dad864", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffe7914-6b37-4ffe-8ce7-0c8823e7fa25", "created": "2026-01-27T05:12:59.636351Z", "modified": "2026-01-27T05:12:59.636351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5348ea91af006dc2f9aaab7ffbbf37433fcb48e939d4af5dec4707f662242db3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.636351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8fb9f2b-90c7-4c85-be9c-0260a04efc50", "created": "2026-01-27T05:12:59.63734Z", "modified": "2026-01-27T05:12:59.63734Z", "relationship_type": "indicates", "source_ref": "indicator--1ffe7914-6b37-4ffe-8ce7-0c8823e7fa25", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a262df44-9e3b-4d28-917e-da18a243f184", "created": "2026-01-27T05:12:59.63752Z", "modified": "2026-01-27T05:12:59.63752Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a8a013f6a8569ddf7c7f031f6fe23871808c946861448258b063325bbd06827']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.63752Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5d3288a-9537-407e-b950-80e4a1e2cbcd", "created": "2026-01-27T05:12:59.638347Z", "modified": "2026-01-27T05:12:59.638347Z", "relationship_type": "indicates", "source_ref": "indicator--a262df44-9e3b-4d28-917e-da18a243f184", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0def7766-3d8b-4751-8c01-02fdda20574c", "created": "2026-01-27T05:12:59.638525Z", "modified": "2026-01-27T05:12:59.638525Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96e1d8a20a9efb64e492a02cdabd3fc967237c12418c1e0441271be2e2307c36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.638525Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80e42147-0235-46be-b0b7-4e263e3a50c5", "created": "2026-01-27T05:12:59.639357Z", "modified": "2026-01-27T05:12:59.639357Z", "relationship_type": "indicates", "source_ref": "indicator--0def7766-3d8b-4751-8c01-02fdda20574c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75370be2-a23f-4f80-bdc7-0645ec44c3f3", "created": "2026-01-27T05:12:59.639533Z", "modified": "2026-01-27T05:12:59.639533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='296e2b1013ffdb4ca9e1f2aeac43cdb616bf21ca4db89dd365e55a41c9a97d8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.639533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a20d12c6-2ec3-4ba2-9246-96e9ff501c9d", "created": "2026-01-27T05:12:59.640357Z", "modified": "2026-01-27T05:12:59.640357Z", "relationship_type": "indicates", "source_ref": "indicator--75370be2-a23f-4f80-bdc7-0645ec44c3f3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9137945b-2c81-4d1c-82ef-7ba55ce9ab58", "created": "2026-01-27T05:12:59.640534Z", "modified": "2026-01-27T05:12:59.640534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8ba715d1dbdca8365d9708b44c3b5fa6345fede8941597cdd61eb49361380c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.640534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93ed866c-d419-49a6-a7dc-9d5eaf73b064", "created": "2026-01-27T05:12:59.641372Z", "modified": "2026-01-27T05:12:59.641372Z", "relationship_type": "indicates", "source_ref": "indicator--9137945b-2c81-4d1c-82ef-7ba55ce9ab58", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e367e4a8-3558-46d2-98ae-d75386da212b", "created": "2026-01-27T05:12:59.641551Z", "modified": "2026-01-27T05:12:59.641551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='034305be6dd08950069e3d3b0d93c43328350a9c86ddba310084d86eb44427aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.641551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73ab035c-116f-450f-a652-443f18124884", "created": "2026-01-27T05:12:59.642382Z", "modified": "2026-01-27T05:12:59.642382Z", "relationship_type": "indicates", "source_ref": "indicator--e367e4a8-3558-46d2-98ae-d75386da212b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342ecbca-bd01-4399-a872-97e418d631d4", "created": "2026-01-27T05:12:59.642557Z", "modified": "2026-01-27T05:12:59.642557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a76c939219a8d201abdb791d8c96ce1bcfd88755471de039f1497749a2d5e39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.642557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b27407dd-106f-40d1-88d3-6745a2d9f20a", "created": "2026-01-27T05:12:59.643403Z", "modified": "2026-01-27T05:12:59.643403Z", "relationship_type": "indicates", "source_ref": "indicator--342ecbca-bd01-4399-a872-97e418d631d4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d42fb3-2273-4969-afe9-40d081eaa69b", "created": "2026-01-27T05:12:59.643601Z", "modified": "2026-01-27T05:12:59.643601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c341e34f9c38afe6db3310caa8bcce72361193c45b411e59d992c6d395dd2ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.643601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebbb6096-9ae1-407d-93c6-5cd91ef0e681", "created": "2026-01-27T05:12:59.644477Z", "modified": "2026-01-27T05:12:59.644477Z", "relationship_type": "indicates", "source_ref": "indicator--48d42fb3-2273-4969-afe9-40d081eaa69b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73b38a0-f1fb-42b7-a87a-303ccea992fb", "created": "2026-01-27T05:12:59.644683Z", "modified": "2026-01-27T05:12:59.644683Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='234158ab8cb8969ac6199bc5e9caebb98f1c07f418824262bfa08ea4872b0503']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.644683Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dd1a26d-57d2-448d-8aed-24895bc2fe13", "created": "2026-01-27T05:12:59.645605Z", "modified": "2026-01-27T05:12:59.645605Z", "relationship_type": "indicates", "source_ref": "indicator--c73b38a0-f1fb-42b7-a87a-303ccea992fb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3acde0-2915-40c6-a914-7a6ed010ebeb", "created": "2026-01-27T05:12:59.645831Z", "modified": "2026-01-27T05:12:59.645831Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='408524777b2f32cf95ee37494383a587adc1007de008eb12946d1e4d1a3ff9bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.645831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19d584fb-afdc-473f-b471-317dac3718fd", "created": "2026-01-27T05:12:59.646801Z", "modified": "2026-01-27T05:12:59.646801Z", "relationship_type": "indicates", "source_ref": "indicator--3c3acde0-2915-40c6-a914-7a6ed010ebeb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f506025-0a9c-428b-a65c-f11a3c867f97", "created": "2026-01-27T05:12:59.646978Z", "modified": "2026-01-27T05:12:59.646978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e027d400899ace8c01964fb7a9056ffc3dadd321ad1b4db4edcb812c290d2097']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.646978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5213f00d-9c81-43b6-80b9-784042f4ec31", "created": "2026-01-27T05:12:59.647804Z", "modified": "2026-01-27T05:12:59.647804Z", "relationship_type": "indicates", "source_ref": "indicator--9f506025-0a9c-428b-a65c-f11a3c867f97", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f993a8-7dcb-422e-8823-c4b9a71749fc", "created": "2026-01-27T05:12:59.647981Z", "modified": "2026-01-27T05:12:59.647981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d998b2405935560a16213001b1eccb0e10f4d2ed0790c282bdc91aa5d78bae2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.647981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e830d776-8db3-406c-bfcf-68505d431d2f", "created": "2026-01-27T05:12:59.648803Z", "modified": "2026-01-27T05:12:59.648803Z", "relationship_type": "indicates", "source_ref": "indicator--e2f993a8-7dcb-422e-8823-c4b9a71749fc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b8ef3a-7182-4e3f-ae44-af70dd369854", "created": "2026-01-27T05:12:59.648979Z", "modified": "2026-01-27T05:12:59.648979Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a383edd42b333ffa1a9a8475c0e2534b8f37d329886cc5d4e67c3da8b2ae2d9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.648979Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--503633cd-da46-4314-9142-57e507032484", "created": "2026-01-27T05:12:59.649792Z", "modified": "2026-01-27T05:12:59.649792Z", "relationship_type": "indicates", "source_ref": "indicator--72b8ef3a-7182-4e3f-ae44-af70dd369854", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150fa063-2a30-4679-b9cb-ae99e297d590", "created": "2026-01-27T05:12:59.649968Z", "modified": "2026-01-27T05:12:59.649968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17dbdaa0b17821cf041a32c198841c28d7b591a737a8784577f3129017803e4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.649968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c5eebcc-5f70-463b-9962-2c6e8e853a48", "created": "2026-01-27T05:12:59.65079Z", "modified": "2026-01-27T05:12:59.65079Z", "relationship_type": "indicates", "source_ref": "indicator--150fa063-2a30-4679-b9cb-ae99e297d590", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b82011c-55c3-4848-93f2-cae085095c47", "created": "2026-01-27T05:12:59.650965Z", "modified": "2026-01-27T05:12:59.650965Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ebf31fc49291f5ef492bf9945f76dc17aee2e8bda550f4177f757dd731ec9524']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.650965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b11673d-ea02-4e13-94ac-58ed38ccbf9a", "created": "2026-01-27T05:12:59.651787Z", "modified": "2026-01-27T05:12:59.651787Z", "relationship_type": "indicates", "source_ref": "indicator--3b82011c-55c3-4848-93f2-cae085095c47", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fba8a6-737e-4f2f-886a-4f3eb46c8b98", "created": "2026-01-27T05:12:59.651968Z", "modified": "2026-01-27T05:12:59.651968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2f426ba2bf79b40ff9a7c420439fa005d104eea04f67385aacae64e77836127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.651968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecc8a5c5-ecc7-4726-b081-62677bb7b124", "created": "2026-01-27T05:12:59.652783Z", "modified": "2026-01-27T05:12:59.652783Z", "relationship_type": "indicates", "source_ref": "indicator--07fba8a6-737e-4f2f-886a-4f3eb46c8b98", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede939f5-f918-466c-aa92-529180596830", "created": "2026-01-27T05:12:59.652961Z", "modified": "2026-01-27T05:12:59.652961Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5316d09ab58704857dbf4a94c928edb9880cba704be929c9e1040e0e0d76a0dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.652961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11273614-9be9-4bb2-a856-84fa08317f73", "created": "2026-01-27T05:12:59.653787Z", "modified": "2026-01-27T05:12:59.653787Z", "relationship_type": "indicates", "source_ref": "indicator--ede939f5-f918-466c-aa92-529180596830", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9777e484-d021-43a1-811c-e4373fcd4960", "created": "2026-01-27T05:12:59.653962Z", "modified": "2026-01-27T05:12:59.653962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c35bbabda056857c859b9fe74d89f80e5f5459d8985ed392d0bd9857879e8eb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.653962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb5221a8-4209-4b98-b431-98b0b251ceaa", "created": "2026-01-27T05:12:59.655255Z", "modified": "2026-01-27T05:12:59.655255Z", "relationship_type": "indicates", "source_ref": "indicator--9777e484-d021-43a1-811c-e4373fcd4960", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb38919-05e5-4b70-a60e-ab1fef8fb149", "created": "2026-01-27T05:12:59.655435Z", "modified": "2026-01-27T05:12:59.655435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e9c0d7d0639dc0a7b6ce62add35c09766916a45b70f7867a7a03ca85bafc0a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.655435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0be5c55-bd0a-4826-97b8-65eb4345fcce", "created": "2026-01-27T05:12:59.656269Z", "modified": "2026-01-27T05:12:59.656269Z", "relationship_type": "indicates", "source_ref": "indicator--7fb38919-05e5-4b70-a60e-ab1fef8fb149", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae56da89-5986-4e83-ab9e-d9f167236b27", "created": "2026-01-27T05:12:59.656445Z", "modified": "2026-01-27T05:12:59.656445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3067369d294e3e2f163b1f9947efe38a9eb330e2fbf021d03cae8318bb9bfad3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.656445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--033070e5-33a8-4fa2-a0ff-dfecfdc5bef1", "created": "2026-01-27T05:12:59.657274Z", "modified": "2026-01-27T05:12:59.657274Z", "relationship_type": "indicates", "source_ref": "indicator--ae56da89-5986-4e83-ab9e-d9f167236b27", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8391c38a-11f7-4aad-8537-0c715c892de4", "created": "2026-01-27T05:12:59.657449Z", "modified": "2026-01-27T05:12:59.657449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f82a411b43762d4143d8586582d8c2432b08c5ef43493d99733fc9848f56c0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.657449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41397ec1-79cc-416d-a1bc-4d03958373ad", "created": "2026-01-27T05:12:59.658271Z", "modified": "2026-01-27T05:12:59.658271Z", "relationship_type": "indicates", "source_ref": "indicator--8391c38a-11f7-4aad-8537-0c715c892de4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df31cfe0-f6d7-479a-b5b2-8144023b20c0", "created": "2026-01-27T05:12:59.658451Z", "modified": "2026-01-27T05:12:59.658451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ca1d73777daae74434554bacc4117aab2e8f59f23a2da27abf28b9fa3eff70c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.658451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--727b8e45-2bcc-4661-ae8c-79a12fdc1335", "created": "2026-01-27T05:12:59.659279Z", "modified": "2026-01-27T05:12:59.659279Z", "relationship_type": "indicates", "source_ref": "indicator--df31cfe0-f6d7-479a-b5b2-8144023b20c0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31189ca0-12b7-43a4-a49e-9e7444c7beac", "created": "2026-01-27T05:12:59.659455Z", "modified": "2026-01-27T05:12:59.659455Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a01634521ba9419bc4b0e593110a8e5d9acab61e0e25b9758038e40ce215372']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.659455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e0830f2-e949-474a-9d9c-b55ecd858cb0", "created": "2026-01-27T05:12:59.660285Z", "modified": "2026-01-27T05:12:59.660285Z", "relationship_type": "indicates", "source_ref": "indicator--31189ca0-12b7-43a4-a49e-9e7444c7beac", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e33bb5-c514-4e7d-b04f-56d745495212", "created": "2026-01-27T05:12:59.660463Z", "modified": "2026-01-27T05:12:59.660463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='642bdc30ebad0bebff4923886c7cb734f866a14fb6f1f4d304ae20b122bcc3f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.660463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--239ca402-64c5-4a6d-b5b4-da295b94e98f", "created": "2026-01-27T05:12:59.661296Z", "modified": "2026-01-27T05:12:59.661296Z", "relationship_type": "indicates", "source_ref": "indicator--d6e33bb5-c514-4e7d-b04f-56d745495212", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dc4d47-7a5d-4b3b-a676-407e47604920", "created": "2026-01-27T05:12:59.661472Z", "modified": "2026-01-27T05:12:59.661472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d7e92f04e032d07e446b5146fdb6719ba571b954f89ee28425e82d277f76132']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.661472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55d3ba31-b9e8-41a1-b468-43801e0694e9", "created": "2026-01-27T05:12:59.662301Z", "modified": "2026-01-27T05:12:59.662301Z", "relationship_type": "indicates", "source_ref": "indicator--11dc4d47-7a5d-4b3b-a676-407e47604920", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564bf6a4-29b5-4bdd-b0eb-1931156480de", "created": "2026-01-27T05:12:59.662476Z", "modified": "2026-01-27T05:12:59.662476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f6dd220e294b24fb07cd6d83cbaa22c95843d53bf42dac3171c718b4a54a2b6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.662476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9657a0f0-07a0-4dde-896c-0faa94cc6882", "created": "2026-01-27T05:12:59.663355Z", "modified": "2026-01-27T05:12:59.663355Z", "relationship_type": "indicates", "source_ref": "indicator--564bf6a4-29b5-4bdd-b0eb-1931156480de", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701cc352-aa5e-4c73-9e0d-e6c9f025af81", "created": "2026-01-27T05:12:59.663537Z", "modified": "2026-01-27T05:12:59.663537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5daaed2f68988eee55c824524bdf6cbc139f8f567ffb745aae4e897df4059a8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.663537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf73bc70-70b0-498f-afa7-499042463c6c", "created": "2026-01-27T05:12:59.664509Z", "modified": "2026-01-27T05:12:59.664509Z", "relationship_type": "indicates", "source_ref": "indicator--701cc352-aa5e-4c73-9e0d-e6c9f025af81", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713ef376-a4cd-4eee-9516-1b2735a41407", "created": "2026-01-27T05:12:59.664689Z", "modified": "2026-01-27T05:12:59.664689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67d81c5e1cd237314e5fc327c3063fe6647d803ecebf3728ee8508f1f4088938']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.664689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79fd5340-a8b2-41ee-be6b-a43647528ddc", "created": "2026-01-27T05:12:59.665576Z", "modified": "2026-01-27T05:12:59.665576Z", "relationship_type": "indicates", "source_ref": "indicator--713ef376-a4cd-4eee-9516-1b2735a41407", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--742a20d4-e06b-4757-a5e9-7b24899f5956", "created": "2026-01-27T05:12:59.665776Z", "modified": "2026-01-27T05:12:59.665776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e53687abb8896380e0ed3f8d24b6ee06b4e54bdeb9ec44d20cf9cba0437c59d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.665776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43c3bfed-c430-49f7-8be8-c239335b4622", "created": "2026-01-27T05:12:59.666596Z", "modified": "2026-01-27T05:12:59.666596Z", "relationship_type": "indicates", "source_ref": "indicator--742a20d4-e06b-4757-a5e9-7b24899f5956", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6914d112-da0d-4b6f-aebc-f831175ce9d9", "created": "2026-01-27T05:12:59.666787Z", "modified": "2026-01-27T05:12:59.666787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4b3f2287959ca5691c322ffb81f91ced2a44fc08a274d7ca12b053eb91d5700']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.666787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1807eaef-5419-4e88-85e6-19124028af53", "created": "2026-01-27T05:12:59.667593Z", "modified": "2026-01-27T05:12:59.667593Z", "relationship_type": "indicates", "source_ref": "indicator--6914d112-da0d-4b6f-aebc-f831175ce9d9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d910e96-fe45-41af-a9c8-d8bb83bc0194", "created": "2026-01-27T05:12:59.667779Z", "modified": "2026-01-27T05:12:59.667779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eeb8cd56ac99ce268e4c145af20f30fd7b955ed1a67e1bd97ecfd6a8961c937a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.667779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3500e796-f9b4-4251-92e3-1258bf63d868", "created": "2026-01-27T05:12:59.668593Z", "modified": "2026-01-27T05:12:59.668593Z", "relationship_type": "indicates", "source_ref": "indicator--8d910e96-fe45-41af-a9c8-d8bb83bc0194", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5f665a-6e3b-4f66-936e-e117a4547e77", "created": "2026-01-27T05:12:59.668788Z", "modified": "2026-01-27T05:12:59.668788Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='353263db1e90be8aacc7b990f53943888de945698fab9d3afae8733fff0d831b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.668788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cd50e84-61f0-4a6e-b6a9-edd16718b967", "created": "2026-01-27T05:12:59.669604Z", "modified": "2026-01-27T05:12:59.669604Z", "relationship_type": "indicates", "source_ref": "indicator--fa5f665a-6e3b-4f66-936e-e117a4547e77", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d61386-3dac-47cd-80c5-996c27205c40", "created": "2026-01-27T05:12:59.669798Z", "modified": "2026-01-27T05:12:59.669798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='000495e16975af33575bd1b17f1ca7ac34cf5b8fd59cae00729b4917903a1c7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.669798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8f7e4a9-97c2-4815-9ade-869cabb30fe0", "created": "2026-01-27T05:12:59.670604Z", "modified": "2026-01-27T05:12:59.670604Z", "relationship_type": "indicates", "source_ref": "indicator--d9d61386-3dac-47cd-80c5-996c27205c40", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d546cb54-3164-4a9a-9e42-fa919f92b55e", "created": "2026-01-27T05:12:59.670791Z", "modified": "2026-01-27T05:12:59.670791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38a0c2554d39f68d9269d96cafa20d2216593cc7df65afefa9472204ae97f1dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.670791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2082145-6319-485e-a380-5f8d2b011df2", "created": "2026-01-27T05:12:59.671602Z", "modified": "2026-01-27T05:12:59.671602Z", "relationship_type": "indicates", "source_ref": "indicator--d546cb54-3164-4a9a-9e42-fa919f92b55e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605f7fb9-c5b5-42ac-b658-35ac44c8c6d9", "created": "2026-01-27T05:12:59.67179Z", "modified": "2026-01-27T05:12:59.67179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fefb027306a82a227d1d33675ec33f0458769ae24a38f3a22781219035bc18db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.67179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f319614-0b31-4b01-8ff0-ea444e54bdef", "created": "2026-01-27T05:12:59.6726Z", "modified": "2026-01-27T05:12:59.6726Z", "relationship_type": "indicates", "source_ref": "indicator--605f7fb9-c5b5-42ac-b658-35ac44c8c6d9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2da0a2-1b16-4d28-9ead-0d125b9ddad7", "created": "2026-01-27T05:12:59.672795Z", "modified": "2026-01-27T05:12:59.672795Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a304272b070238e90a46b469981c1d202266ef92e14077a40a2649001240f4d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.672795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cf5afe7-0101-4120-80a4-3736a2026325", "created": "2026-01-27T05:12:59.673763Z", "modified": "2026-01-27T05:12:59.673763Z", "relationship_type": "indicates", "source_ref": "indicator--2b2da0a2-1b16-4d28-9ead-0d125b9ddad7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c675c45-789f-41ef-923d-5bc6e6d51e9c", "created": "2026-01-27T05:12:59.673943Z", "modified": "2026-01-27T05:12:59.673943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c499c5281bf3984546ae71e0d63cb1f66850b350e76ab4504f4832a6025562d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.673943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--257d645c-73e1-4ff6-9d7e-95389b0b1094", "created": "2026-01-27T05:12:59.674773Z", "modified": "2026-01-27T05:12:59.674773Z", "relationship_type": "indicates", "source_ref": "indicator--0c675c45-789f-41ef-923d-5bc6e6d51e9c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fcaa1a-add7-4028-b2f5-428839c7c0f1", "created": "2026-01-27T05:12:59.674954Z", "modified": "2026-01-27T05:12:59.674954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e25c5b688fa10f5271c991458549f84503e88e5a73dba4899d60beda2bac91e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.674954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce278a71-5b8d-491c-ab1f-70bc4a6eece7", "created": "2026-01-27T05:12:59.675778Z", "modified": "2026-01-27T05:12:59.675778Z", "relationship_type": "indicates", "source_ref": "indicator--91fcaa1a-add7-4028-b2f5-428839c7c0f1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2541786a-5fe6-4a95-a24e-2ad4e52b0e26", "created": "2026-01-27T05:12:59.67596Z", "modified": "2026-01-27T05:12:59.67596Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04c560ef6a701d50893c86f7bafbef50784a396ee0a92055a9efaf9925f5fe04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.67596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--237df403-e185-41e1-a993-e37781834d40", "created": "2026-01-27T05:12:59.676795Z", "modified": "2026-01-27T05:12:59.676795Z", "relationship_type": "indicates", "source_ref": "indicator--2541786a-5fe6-4a95-a24e-2ad4e52b0e26", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8445073b-b372-4cd5-9ace-66e833bae39a", "created": "2026-01-27T05:12:59.676975Z", "modified": "2026-01-27T05:12:59.676975Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7340232f6574f9b56126fb1a919dcb7ae506c7303794561fe4a50a93e9d084c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.676975Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--524244c2-d6b7-4a16-854f-10efb96a0f50", "created": "2026-01-27T05:12:59.677869Z", "modified": "2026-01-27T05:12:59.677869Z", "relationship_type": "indicates", "source_ref": "indicator--8445073b-b372-4cd5-9ace-66e833bae39a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70ed513-3aaf-443c-a3a8-17df76502a6b", "created": "2026-01-27T05:12:59.678046Z", "modified": "2026-01-27T05:12:59.678046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d307581534d775ad5c10fc8d228d58710ef3b13af296d1aff0c79350d3eb939']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.678046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e421e803-9d4e-4ed4-bd61-8fb2cc6080ef", "created": "2026-01-27T05:12:59.678867Z", "modified": "2026-01-27T05:12:59.678867Z", "relationship_type": "indicates", "source_ref": "indicator--c70ed513-3aaf-443c-a3a8-17df76502a6b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fdbd08-611a-4151-bbf2-2acd8b134d95", "created": "2026-01-27T05:12:59.679045Z", "modified": "2026-01-27T05:12:59.679045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56da18be2d94cb7de04a528f4cd4aa7274278e36a931f8f513f6573ae5298d25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.679045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fc4758e-a1b1-4080-a7b4-0c781c552971", "created": "2026-01-27T05:12:59.679871Z", "modified": "2026-01-27T05:12:59.679871Z", "relationship_type": "indicates", "source_ref": "indicator--64fdbd08-611a-4151-bbf2-2acd8b134d95", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f56da8-f572-4b67-8a6e-0f4461de6c34", "created": "2026-01-27T05:12:59.680051Z", "modified": "2026-01-27T05:12:59.680051Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20fd84cf4f1becfb13a569d9864c4036f3c548dbaaa3448c7a456611523c9e35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.680051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53bbaed5-a5d7-4577-b9fe-f9a1339e0f3a", "created": "2026-01-27T05:12:59.680878Z", "modified": "2026-01-27T05:12:59.680878Z", "relationship_type": "indicates", "source_ref": "indicator--31f56da8-f572-4b67-8a6e-0f4461de6c34", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465262e7-daed-4c63-a748-3a82edfa066e", "created": "2026-01-27T05:12:59.681055Z", "modified": "2026-01-27T05:12:59.681055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3076f6af45e2d720ab4f5c3c38ef3ea3e9afad3ab7ca68876264418a3b54a977']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.681055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a24a3e8-7c3d-4fbc-8725-c5d9f45a5be7", "created": "2026-01-27T05:12:59.681895Z", "modified": "2026-01-27T05:12:59.681895Z", "relationship_type": "indicates", "source_ref": "indicator--465262e7-daed-4c63-a748-3a82edfa066e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ddeaf8-7fed-4e80-964f-3e3b07f74b78", "created": "2026-01-27T05:12:59.682075Z", "modified": "2026-01-27T05:12:59.682075Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bb4d82a06d99680bce6406826cb212368bddc603fae947c288a59fc49221b6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.682075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--581ceb63-3006-4446-9bf6-ffea453fab2e", "created": "2026-01-27T05:12:59.683037Z", "modified": "2026-01-27T05:12:59.683037Z", "relationship_type": "indicates", "source_ref": "indicator--d6ddeaf8-7fed-4e80-964f-3e3b07f74b78", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be9717a-3410-4382-b128-44093e6fe186", "created": "2026-01-27T05:12:59.683214Z", "modified": "2026-01-27T05:12:59.683214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ad5fa60ab2d8748d456167b844246f5cbbb7758cff71894ae78b0e37cc82b1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.683214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5669da9b-f968-42b6-b1af-afb7840dbb26", "created": "2026-01-27T05:12:59.684034Z", "modified": "2026-01-27T05:12:59.684034Z", "relationship_type": "indicates", "source_ref": "indicator--3be9717a-3410-4382-b128-44093e6fe186", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd37b3cd-7a9d-475a-b358-942df81e6242", "created": "2026-01-27T05:12:59.684207Z", "modified": "2026-01-27T05:12:59.684207Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62e3cafac27bbbfad3ae5a702823187eb5497ed7674578081612f627a12e3ce5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.684207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c0f852a-7d6b-4f8b-83b0-305c7a9b8ad5", "created": "2026-01-27T05:12:59.685037Z", "modified": "2026-01-27T05:12:59.685037Z", "relationship_type": "indicates", "source_ref": "indicator--bd37b3cd-7a9d-475a-b358-942df81e6242", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce711cf5-81ab-4bf5-bffa-36ef6114facf", "created": "2026-01-27T05:12:59.685212Z", "modified": "2026-01-27T05:12:59.685212Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='171b69637f68af1a9a094e74fda224b1631a87cf76af8fa6f949305d02f34910']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.685212Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2f961af-0868-4a7a-9fea-b40ace7e51c6", "created": "2026-01-27T05:12:59.68604Z", "modified": "2026-01-27T05:12:59.68604Z", "relationship_type": "indicates", "source_ref": "indicator--ce711cf5-81ab-4bf5-bffa-36ef6114facf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d328c5cb-e9ae-49c3-8a3a-fea449598b16", "created": "2026-01-27T05:12:59.686214Z", "modified": "2026-01-27T05:12:59.686214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a8217e1de107a32e386a9f79f75244a615350fb0a7cd390cf2a5780e4e3ca89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.686214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77357b4a-7669-442d-9461-b5d0b402e2b2", "created": "2026-01-27T05:12:59.687061Z", "modified": "2026-01-27T05:12:59.687061Z", "relationship_type": "indicates", "source_ref": "indicator--d328c5cb-e9ae-49c3-8a3a-fea449598b16", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16c93be-d1c9-4638-b910-6970efcb1345", "created": "2026-01-27T05:12:59.687243Z", "modified": "2026-01-27T05:12:59.687243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63049630438d289affdeb4bf03c2b0a234857eb1d646aa7e6b654cb21840cc3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.687243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--581ca17d-44f9-415f-8f4b-3733d746127c", "created": "2026-01-27T05:12:59.688068Z", "modified": "2026-01-27T05:12:59.688068Z", "relationship_type": "indicates", "source_ref": "indicator--d16c93be-d1c9-4638-b910-6970efcb1345", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fc8b82-d690-4295-b757-59be076eb18e", "created": "2026-01-27T05:12:59.688242Z", "modified": "2026-01-27T05:12:59.688242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5d855f2a34009f120fbf9497492e41d7f5bd0a27565687670ef55d539614311']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.688242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6f96ce1-c394-4f0c-8a0c-f66ffac13ed0", "created": "2026-01-27T05:12:59.689064Z", "modified": "2026-01-27T05:12:59.689064Z", "relationship_type": "indicates", "source_ref": "indicator--93fc8b82-d690-4295-b757-59be076eb18e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b238d4f7-37d7-4fed-8840-a1dc1e9931a1", "created": "2026-01-27T05:12:59.689243Z", "modified": "2026-01-27T05:12:59.689243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d966c90a4cfe44bf37cbcba09903eec9bdf9dc07453d479a9eb041bb26cebfe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.689243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d4ffb2d-f518-4a73-be33-fe2c105ff91b", "created": "2026-01-27T05:12:59.690074Z", "modified": "2026-01-27T05:12:59.690074Z", "relationship_type": "indicates", "source_ref": "indicator--b238d4f7-37d7-4fed-8840-a1dc1e9931a1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb3d9b1-df13-476d-82af-d06bc9bb1283", "created": "2026-01-27T05:12:59.690249Z", "modified": "2026-01-27T05:12:59.690249Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f81a732fba79f56a4e625a843fd67c3159f93afb5045d9781d2dfa2a9ba18f22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.690249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aba53be-a889-4f0b-96ce-a5d69bec9077", "created": "2026-01-27T05:12:59.691196Z", "modified": "2026-01-27T05:12:59.691196Z", "relationship_type": "indicates", "source_ref": "indicator--aeb3d9b1-df13-476d-82af-d06bc9bb1283", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a281b31-f0f5-4cba-96d4-6749be8127cc", "created": "2026-01-27T05:12:59.691389Z", "modified": "2026-01-27T05:12:59.691389Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52957703e8152f9fdf84b58ee0a2f82e9003c038b33898e91553245df207a9f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.691389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efaa65bb-0778-4ec9-b287-fff610f2f480", "created": "2026-01-27T05:12:59.692233Z", "modified": "2026-01-27T05:12:59.692233Z", "relationship_type": "indicates", "source_ref": "indicator--3a281b31-f0f5-4cba-96d4-6749be8127cc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f63b56-7ac4-4a22-8a51-7072c142fadf", "created": "2026-01-27T05:12:59.692412Z", "modified": "2026-01-27T05:12:59.692412Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3026851071062c290424bc25e1d4677d828cd997e593af4448252865cfb88769']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.692412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e51f1e04-32ac-49c2-a4bb-142597cca611", "created": "2026-01-27T05:12:59.693272Z", "modified": "2026-01-27T05:12:59.693272Z", "relationship_type": "indicates", "source_ref": "indicator--f5f63b56-7ac4-4a22-8a51-7072c142fadf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74a1179-03a7-4328-bb61-429e60f49295", "created": "2026-01-27T05:12:59.693458Z", "modified": "2026-01-27T05:12:59.693458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e9608176088fad14802ea68fd60c4985c586f97b73efce9cc34228001770820']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.693458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e97d4d89-bdf2-445d-beef-9ed6f6de8e70", "created": "2026-01-27T05:12:59.694334Z", "modified": "2026-01-27T05:12:59.694334Z", "relationship_type": "indicates", "source_ref": "indicator--c74a1179-03a7-4328-bb61-429e60f49295", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43ed55b-2e23-4606-abb3-b43af206faf7", "created": "2026-01-27T05:12:59.694522Z", "modified": "2026-01-27T05:12:59.694522Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e4354851a8f1d5d2c083a9263eb0ad71896f7800bdcfea74dfd4d8a458a2e23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.694522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55e04030-781a-4710-a607-b19a9a0ac871", "created": "2026-01-27T05:12:59.695382Z", "modified": "2026-01-27T05:12:59.695382Z", "relationship_type": "indicates", "source_ref": "indicator--a43ed55b-2e23-4606-abb3-b43af206faf7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228fa8de-772a-4e45-b51f-507c40edee1b", "created": "2026-01-27T05:12:59.695587Z", "modified": "2026-01-27T05:12:59.695587Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2ff365818fa63576435843da88215be9d29cf5681f0243fa3121c6093a74eb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.695587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae695cb5-c54a-4edc-a793-b1cc147e5441", "created": "2026-01-27T05:12:59.696422Z", "modified": "2026-01-27T05:12:59.696422Z", "relationship_type": "indicates", "source_ref": "indicator--228fa8de-772a-4e45-b51f-507c40edee1b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16044074-6f9d-45f7-aa60-0020425f5860", "created": "2026-01-27T05:12:59.696596Z", "modified": "2026-01-27T05:12:59.696596Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34bb1a47a7893d5dff59a36bb8ac11d2c5354cd618e25f8609e5844d555c67a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.696596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c41e7318-1f07-4403-bf16-567a1ce215d3", "created": "2026-01-27T05:12:59.697438Z", "modified": "2026-01-27T05:12:59.697438Z", "relationship_type": "indicates", "source_ref": "indicator--16044074-6f9d-45f7-aa60-0020425f5860", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc1a3117-3f30-460c-accb-5d17cef09382", "created": "2026-01-27T05:12:59.697615Z", "modified": "2026-01-27T05:12:59.697615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99a71fb4c0293e3fd35a4ab3fd4ba31ccdd818642fd8a6d3b88c3b6c3bd9d09c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.697615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c795720-bc45-4db6-a32f-7ae238a00d54", "created": "2026-01-27T05:12:59.698441Z", "modified": "2026-01-27T05:12:59.698441Z", "relationship_type": "indicates", "source_ref": "indicator--cc1a3117-3f30-460c-accb-5d17cef09382", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e18072a-217c-481a-861d-17a45286ee90", "created": "2026-01-27T05:12:59.698615Z", "modified": "2026-01-27T05:12:59.698615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1a626fa763e2459c767090d6f8cdbb138f2318e62541d4a9fe36819b09c1464']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.698615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7eaa4b6e-1e08-46a2-9066-c977da540e9d", "created": "2026-01-27T05:12:59.699446Z", "modified": "2026-01-27T05:12:59.699446Z", "relationship_type": "indicates", "source_ref": "indicator--2e18072a-217c-481a-861d-17a45286ee90", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eff3f2e-86d2-433d-a5a7-f4c341dae00f", "created": "2026-01-27T05:12:59.699623Z", "modified": "2026-01-27T05:12:59.699623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93fdc1971e3527e41f98eefbec17db75d462907b1c04d69fbb7e1073c476ce51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.699623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dff4ed9-68ec-4226-90ec-abb82f3337de", "created": "2026-01-27T05:12:59.700578Z", "modified": "2026-01-27T05:12:59.700578Z", "relationship_type": "indicates", "source_ref": "indicator--4eff3f2e-86d2-433d-a5a7-f4c341dae00f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f216413-51dd-40ee-9777-d4a2b9c9b725", "created": "2026-01-27T05:12:59.700768Z", "modified": "2026-01-27T05:12:59.700768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1b57fad2928ea3bf56b8636bb13f3defa2e6744fc0b1c3a3208b22d84bcdbe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.700768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28faa213-648f-4dfd-bc1c-7e0107723b8d", "created": "2026-01-27T05:12:59.701576Z", "modified": "2026-01-27T05:12:59.701576Z", "relationship_type": "indicates", "source_ref": "indicator--1f216413-51dd-40ee-9777-d4a2b9c9b725", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb45b1b-1e01-49fe-b16d-377355209e0b", "created": "2026-01-27T05:12:59.701771Z", "modified": "2026-01-27T05:12:59.701771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3575ab63de1d2e74fc4f293fc53ab7a36df358ddf30689d5084fd1fa0751b6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.701771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6015405e-75da-4d32-b649-22477b66f7d5", "created": "2026-01-27T05:12:59.702586Z", "modified": "2026-01-27T05:12:59.702586Z", "relationship_type": "indicates", "source_ref": "indicator--6eb45b1b-1e01-49fe-b16d-377355209e0b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c1bfc4-fd1b-426b-b8d7-0fac38d3ff49", "created": "2026-01-27T05:12:59.702775Z", "modified": "2026-01-27T05:12:59.702775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10f2bfae246c6cf2490757d2f0cb5776a1ce32728eee4c0a8c1a824dc208c710']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.702775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f304c896-8fae-49b4-b4e2-38cf6d0c2788", "created": "2026-01-27T05:12:59.703597Z", "modified": "2026-01-27T05:12:59.703597Z", "relationship_type": "indicates", "source_ref": "indicator--99c1bfc4-fd1b-426b-b8d7-0fac38d3ff49", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0076c133-0a81-44df-86bb-871017f8da4c", "created": "2026-01-27T05:12:59.703783Z", "modified": "2026-01-27T05:12:59.703783Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e85f080ad48882a3fd4ba3299bb63ec9a78fd280cdc5c449aa2641870dec6cc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.703783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6eb5374-9fa1-4ae4-b979-8b63bccd9487", "created": "2026-01-27T05:12:59.704602Z", "modified": "2026-01-27T05:12:59.704602Z", "relationship_type": "indicates", "source_ref": "indicator--0076c133-0a81-44df-86bb-871017f8da4c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147e804f-53f4-4c74-ba0d-1b0698dbf264", "created": "2026-01-27T05:12:59.704793Z", "modified": "2026-01-27T05:12:59.704793Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f1d4da89c8c0f5374f433c50509171260a4b9850d57af5bf36bf3fdb3a0c0bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.704793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b826da26-3f26-4685-b6cf-070b2437314d", "created": "2026-01-27T05:12:59.705606Z", "modified": "2026-01-27T05:12:59.705606Z", "relationship_type": "indicates", "source_ref": "indicator--147e804f-53f4-4c74-ba0d-1b0698dbf264", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64847018-764a-4364-931f-4d7cd8a94ec0", "created": "2026-01-27T05:12:59.705795Z", "modified": "2026-01-27T05:12:59.705795Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dffac6948985ec7f2aebbe2b4e5f39f2ce847707d4e7ab0cff3694cf916e603']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.705795Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--214224bd-d507-40a4-9bca-8d782e2faa92", "created": "2026-01-27T05:12:59.706612Z", "modified": "2026-01-27T05:12:59.706612Z", "relationship_type": "indicates", "source_ref": "indicator--64847018-764a-4364-931f-4d7cd8a94ec0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7129f7-fbfc-43c9-a280-a39d86bc22ed", "created": "2026-01-27T05:12:59.706807Z", "modified": "2026-01-27T05:12:59.706807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cb20c4a392e092082b773cddc4c4f2de95c1b000dc8bd81b060a38be0c9d7c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.706807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bebdf2a-cfb0-49e9-bed8-97a84fc160d8", "created": "2026-01-27T05:12:59.707618Z", "modified": "2026-01-27T05:12:59.707618Z", "relationship_type": "indicates", "source_ref": "indicator--6d7129f7-fbfc-43c9-a280-a39d86bc22ed", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c1fe85-501d-45fb-b580-12bd828bae9e", "created": "2026-01-27T05:12:59.707809Z", "modified": "2026-01-27T05:12:59.707809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c33b687048e9956deccdf126c60d1ecdfae11da0f41bac012960cea5f87a1017']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.707809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4127e70d-b222-439c-a8dd-24be49ea3d41", "created": "2026-01-27T05:12:59.708619Z", "modified": "2026-01-27T05:12:59.708619Z", "relationship_type": "indicates", "source_ref": "indicator--09c1fe85-501d-45fb-b580-12bd828bae9e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f361aea1-fa48-4f81-a029-650b035b7ff3", "created": "2026-01-27T05:12:59.708842Z", "modified": "2026-01-27T05:12:59.708842Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c37b209b057203da8f37e4530399752d13ece45e2c7d37b72616267b5e569a18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.708842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9769d22a-0934-465c-9ba0-16d540db7a24", "created": "2026-01-27T05:12:59.709817Z", "modified": "2026-01-27T05:12:59.709817Z", "relationship_type": "indicates", "source_ref": "indicator--f361aea1-fa48-4f81-a029-650b035b7ff3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1adede6-9277-40bc-a366-5fced69516a7", "created": "2026-01-27T05:12:59.709994Z", "modified": "2026-01-27T05:12:59.709994Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca2382d2dc9a479a12c52e92247f16087f557713d379ae02a251f6a1448b3dd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.709994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c47de0b5-011e-4a82-979e-474126edb441", "created": "2026-01-27T05:12:59.710822Z", "modified": "2026-01-27T05:12:59.710822Z", "relationship_type": "indicates", "source_ref": "indicator--f1adede6-9277-40bc-a366-5fced69516a7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26d26be-2b61-4dab-9b74-2010a53bfbfb", "created": "2026-01-27T05:12:59.710999Z", "modified": "2026-01-27T05:12:59.710999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1d8691e3756806f5acfad6e80996ad01627492e231f0df5672d917f322fbccc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.710999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9573a720-7d07-42d2-a0e3-e8567c5d7589", "created": "2026-01-27T05:12:59.71183Z", "modified": "2026-01-27T05:12:59.71183Z", "relationship_type": "indicates", "source_ref": "indicator--e26d26be-2b61-4dab-9b74-2010a53bfbfb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b78dbe-78b0-41fe-834a-314c00e668bd", "created": "2026-01-27T05:12:59.712013Z", "modified": "2026-01-27T05:12:59.712013Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8ddfb75a8481f27c13b8397469225420bfd819ee0f6b6bfad1f54feca0874f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.712013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7979135-be86-477f-8d3c-33687418aef1", "created": "2026-01-27T05:12:59.712842Z", "modified": "2026-01-27T05:12:59.712842Z", "relationship_type": "indicates", "source_ref": "indicator--62b78dbe-78b0-41fe-834a-314c00e668bd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d044c3-59cf-4956-aeef-378dc492348c", "created": "2026-01-27T05:12:59.713021Z", "modified": "2026-01-27T05:12:59.713021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3dc8b5aa1df931f2a9dc9d8ad860854f8d94a9b08ab9c1139704b763aecd54ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.713021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc1a189a-21d2-4910-9bf3-7295165b044c", "created": "2026-01-27T05:12:59.71386Z", "modified": "2026-01-27T05:12:59.71386Z", "relationship_type": "indicates", "source_ref": "indicator--35d044c3-59cf-4956-aeef-378dc492348c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db66e40-2fdb-4fd7-9a42-e5f0942b10c2", "created": "2026-01-27T05:12:59.714037Z", "modified": "2026-01-27T05:12:59.714037Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75c510ac2a06e776aa06ebf5f90bf2f64a57776e6fb9686e1f421f9545a0f5f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.714037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--247dc1a1-19ad-4279-83b9-2d54ed5c76f9", "created": "2026-01-27T05:12:59.714865Z", "modified": "2026-01-27T05:12:59.714865Z", "relationship_type": "indicates", "source_ref": "indicator--4db66e40-2fdb-4fd7-9a42-e5f0942b10c2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af32d17-5365-4eca-9a36-50719834a0ed", "created": "2026-01-27T05:12:59.71504Z", "modified": "2026-01-27T05:12:59.71504Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9016616e016c21f87dc55069670caadd0f5ebb6835e5b7d4b7ef13d3c0cb13f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.71504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23eafd86-87cf-4355-acaf-e65b4584109b", "created": "2026-01-27T05:12:59.715872Z", "modified": "2026-01-27T05:12:59.715872Z", "relationship_type": "indicates", "source_ref": "indicator--9af32d17-5365-4eca-9a36-50719834a0ed", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4241f053-01e8-4f79-a053-d630569231d2", "created": "2026-01-27T05:12:59.716048Z", "modified": "2026-01-27T05:12:59.716048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f053b9b516fc4b03180e7da2aec5dfe4c8ebe159bf3d2ba7ed5bd63ee16eb14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.716048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ce0e88f-d242-433b-a617-c626c76bca28", "created": "2026-01-27T05:12:59.716877Z", "modified": "2026-01-27T05:12:59.716877Z", "relationship_type": "indicates", "source_ref": "indicator--4241f053-01e8-4f79-a053-d630569231d2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2cb525-6623-41da-b91f-51f4b34a7bc0", "created": "2026-01-27T05:12:59.717053Z", "modified": "2026-01-27T05:12:59.717053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='baa00d3080831e5026661a0324004cf977000cf97d4b9cff8daa30953a65f9e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.717053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e638a6a8-1e93-4902-94c9-114862bd2e18", "created": "2026-01-27T05:12:59.71801Z", "modified": "2026-01-27T05:12:59.71801Z", "relationship_type": "indicates", "source_ref": "indicator--6e2cb525-6623-41da-b91f-51f4b34a7bc0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0da68b3-c8e6-42a4-b314-a4e0ca0cc9c3", "created": "2026-01-27T05:12:59.718189Z", "modified": "2026-01-27T05:12:59.718189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fb2a9ffe8ce6638b37deece47306004057b4f579c3acc1e52831f474205de75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.718189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef5deb91-6606-4a5f-9f83-7de6260116ba", "created": "2026-01-27T05:12:59.719026Z", "modified": "2026-01-27T05:12:59.719026Z", "relationship_type": "indicates", "source_ref": "indicator--e0da68b3-c8e6-42a4-b314-a4e0ca0cc9c3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deed28a7-bd96-4d3e-8233-e4d25414b861", "created": "2026-01-27T05:12:59.719201Z", "modified": "2026-01-27T05:12:59.719201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43ee3624363465d2bde6c2e9da04ebc42ef295bc920a335f833f9393c806ec9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.719201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6a9d825-86ae-4d9b-b91e-11bcfdd565d1", "created": "2026-01-27T05:12:59.720036Z", "modified": "2026-01-27T05:12:59.720036Z", "relationship_type": "indicates", "source_ref": "indicator--deed28a7-bd96-4d3e-8233-e4d25414b861", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d41acd-471e-414e-a0d1-5b4cd948128b", "created": "2026-01-27T05:12:59.72021Z", "modified": "2026-01-27T05:12:59.72021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04dd2e4d0011e42aee32f3dcfa0cc41e3ac03f845f3948aad1c590739960cfab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.72021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--def05fd2-27d0-47ba-8235-f773cd81e210", "created": "2026-01-27T05:12:59.72103Z", "modified": "2026-01-27T05:12:59.72103Z", "relationship_type": "indicates", "source_ref": "indicator--f5d41acd-471e-414e-a0d1-5b4cd948128b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6539be89-c346-4a5e-963d-817ecfc557ad", "created": "2026-01-27T05:12:59.721204Z", "modified": "2026-01-27T05:12:59.721204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99f0740005c3aa3ee140879867898728be3a06a5e6df68b4da9f387a09a9f01b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.721204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e1a5216-4cce-4a1e-8007-267ccc71712a", "created": "2026-01-27T05:12:59.722111Z", "modified": "2026-01-27T05:12:59.722111Z", "relationship_type": "indicates", "source_ref": "indicator--6539be89-c346-4a5e-963d-817ecfc557ad", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d803ba4-b05b-404e-8f30-fb13400206ec", "created": "2026-01-27T05:12:59.722289Z", "modified": "2026-01-27T05:12:59.722289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='605f76b007462720ef62df00e8a9b6aa20db90d7ab2e59d4653a1f352c5482a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.722289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--131038bd-f5d9-4e45-95a7-4bef5172c97d", "created": "2026-01-27T05:12:59.723122Z", "modified": "2026-01-27T05:12:59.723122Z", "relationship_type": "indicates", "source_ref": "indicator--1d803ba4-b05b-404e-8f30-fb13400206ec", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df19ac14-51e3-49ed-b25b-80bcb25bf90c", "created": "2026-01-27T05:12:59.723301Z", "modified": "2026-01-27T05:12:59.723301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8912d83c93fbe88c96884e66653e4ad95d3ccd9ba6939de5cbdb246854e3c49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.723301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2f79dc3-916b-4c78-9707-69547a663ff9", "created": "2026-01-27T05:12:59.724136Z", "modified": "2026-01-27T05:12:59.724136Z", "relationship_type": "indicates", "source_ref": "indicator--df19ac14-51e3-49ed-b25b-80bcb25bf90c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73d5f44-3db2-46df-8fc1-c7586effdf59", "created": "2026-01-27T05:12:59.724311Z", "modified": "2026-01-27T05:12:59.724311Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8faa900b48d6978504e7a3088e8cee47c11e5addd6c75f4aafd9fbfc3d3a6650']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.724311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4d2aca1-1730-459b-b809-e4770651c4a7", "created": "2026-01-27T05:12:59.725174Z", "modified": "2026-01-27T05:12:59.725174Z", "relationship_type": "indicates", "source_ref": "indicator--f73d5f44-3db2-46df-8fc1-c7586effdf59", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bbbe93-b299-45fe-a3ce-cfc1106c33c2", "created": "2026-01-27T05:12:59.725373Z", "modified": "2026-01-27T05:12:59.725373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20fafd15c2f2551f2bf73fbcb1ca4f782e9c9ba9d19f1433fde482324f965826']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.725373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c26cf2af-0a5f-48dd-ad02-2074fcf4e653", "created": "2026-01-27T05:12:59.726232Z", "modified": "2026-01-27T05:12:59.726232Z", "relationship_type": "indicates", "source_ref": "indicator--19bbbe93-b299-45fe-a3ce-cfc1106c33c2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8fe272-12f6-4a7c-aff8-784fc166117f", "created": "2026-01-27T05:12:59.726431Z", "modified": "2026-01-27T05:12:59.726431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61552e1b86c655b9396266b57dd53367610db4a84915d928490e201bc3da17ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.726431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e34c2cb6-032e-4df1-935a-d1662aa8cb4a", "created": "2026-01-27T05:12:59.727408Z", "modified": "2026-01-27T05:12:59.727408Z", "relationship_type": "indicates", "source_ref": "indicator--2c8fe272-12f6-4a7c-aff8-784fc166117f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ed6519-01c1-4fd7-9969-87beebfa9143", "created": "2026-01-27T05:12:59.727586Z", "modified": "2026-01-27T05:12:59.727586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e1bf2d14177f8a2f6a741a7c10dde10cf1b978dba5348d5a3c833063324a8da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.727586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c33edbc1-9549-4265-ab9e-b25cc60a44a6", "created": "2026-01-27T05:12:59.728416Z", "modified": "2026-01-27T05:12:59.728416Z", "relationship_type": "indicates", "source_ref": "indicator--72ed6519-01c1-4fd7-9969-87beebfa9143", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6164e590-07c5-44fb-9197-bea4bd80b05c", "created": "2026-01-27T05:12:59.728592Z", "modified": "2026-01-27T05:12:59.728592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='50e227bdc728d0ff8e012adb43fb198b36a4b1cb65f09f8fabcec909cd6bbc16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.728592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c7ac63c-567b-4461-93cc-ef9341b7bf91", "created": "2026-01-27T05:12:59.729411Z", "modified": "2026-01-27T05:12:59.729411Z", "relationship_type": "indicates", "source_ref": "indicator--6164e590-07c5-44fb-9197-bea4bd80b05c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aece3089-9367-4dec-95fa-25ed9bb1ce4d", "created": "2026-01-27T05:12:59.729589Z", "modified": "2026-01-27T05:12:59.729589Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fa174b5abbca955983e91b7ac2028cfe557cda18c31d989d463338ad9b2c0a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.729589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e92d2807-cab0-4b5c-97a0-44b7107ca701", "created": "2026-01-27T05:12:59.730417Z", "modified": "2026-01-27T05:12:59.730417Z", "relationship_type": "indicates", "source_ref": "indicator--aece3089-9367-4dec-95fa-25ed9bb1ce4d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961330f2-c546-4c49-83b2-81e17c0a0a5c", "created": "2026-01-27T05:12:59.7306Z", "modified": "2026-01-27T05:12:59.7306Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51e07b4092892b661b3873fe55ec622efcea9d942bf1dbe0b3d92035ddf48c53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.7306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e2658c4-a080-4b56-952f-d8eaae9a46fa", "created": "2026-01-27T05:12:59.731421Z", "modified": "2026-01-27T05:12:59.731421Z", "relationship_type": "indicates", "source_ref": "indicator--961330f2-c546-4c49-83b2-81e17c0a0a5c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5dbdf6-c2d9-413e-a468-9dfe4e99de7c", "created": "2026-01-27T05:12:59.731598Z", "modified": "2026-01-27T05:12:59.731598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b96c8a5c8cd05f22f709c2cc91e4518fec319c251c24e1c64358bbe21c4a19f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.731598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a683543-96cd-4170-a32b-4cb289f7041e", "created": "2026-01-27T05:12:59.732416Z", "modified": "2026-01-27T05:12:59.732416Z", "relationship_type": "indicates", "source_ref": "indicator--ea5dbdf6-c2d9-413e-a468-9dfe4e99de7c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15251d09-f24f-4288-b6d3-ff54410d4319", "created": "2026-01-27T05:12:59.732594Z", "modified": "2026-01-27T05:12:59.732594Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa7cde8b5274189351a23180949d8e8eeadc8ec3dd5099088d617ca71d94dab8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.732594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41d9db37-890f-42db-a0a8-a52a519df5ca", "created": "2026-01-27T05:12:59.733422Z", "modified": "2026-01-27T05:12:59.733422Z", "relationship_type": "indicates", "source_ref": "indicator--15251d09-f24f-4288-b6d3-ff54410d4319", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301703e0-f6f2-4cab-a71a-01ebfcda0b44", "created": "2026-01-27T05:12:59.733599Z", "modified": "2026-01-27T05:12:59.733599Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='377fc8fd59a7ced2eac1b992198d45ce28069a972ba054dfd1d6acc29c261d26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.733599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa0c4060-0591-4407-9b54-a385eb507182", "created": "2026-01-27T05:12:59.734436Z", "modified": "2026-01-27T05:12:59.734436Z", "relationship_type": "indicates", "source_ref": "indicator--301703e0-f6f2-4cab-a71a-01ebfcda0b44", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd99f0af-f4ce-4903-b9f3-ad2dba9179fa", "created": "2026-01-27T05:12:59.734609Z", "modified": "2026-01-27T05:12:59.734609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39c0a1d76e258019c166fcdcfba06a99d8a3071a0dd2f453a6f314ffbd5023fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.734609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b746d4ce-7af1-4528-80dc-6db18c1fe919", "created": "2026-01-27T05:12:59.735439Z", "modified": "2026-01-27T05:12:59.735439Z", "relationship_type": "indicates", "source_ref": "indicator--bd99f0af-f4ce-4903-b9f3-ad2dba9179fa", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3e14cb-f525-49e7-bcd4-06f9a59803a6", "created": "2026-01-27T05:12:59.735611Z", "modified": "2026-01-27T05:12:59.735611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c1666d714f893b601358d37e81a3a4fcfbd7c6cb28fcbc27fccdbb449ae66c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.735611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb9d55f5-8600-4efd-abe7-061662163dee", "created": "2026-01-27T05:12:59.736544Z", "modified": "2026-01-27T05:12:59.736544Z", "relationship_type": "indicates", "source_ref": "indicator--cb3e14cb-f525-49e7-bcd4-06f9a59803a6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdafcee-911b-41a3-b489-1cd70faa989b", "created": "2026-01-27T05:12:59.736718Z", "modified": "2026-01-27T05:12:59.736718Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='699937805f079f81daf9ae3b94d375776c10ff9472f8f2492a9458239e0bc8e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.736718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdaa4cd6-f307-4389-acac-f5e577bf38e7", "created": "2026-01-27T05:12:59.737538Z", "modified": "2026-01-27T05:12:59.737538Z", "relationship_type": "indicates", "source_ref": "indicator--8bdafcee-911b-41a3-b489-1cd70faa989b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e625fc-b085-4751-9b85-9d9707f78ef3", "created": "2026-01-27T05:12:59.73771Z", "modified": "2026-01-27T05:12:59.73771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e2384f3d31a1e7c1de6981c12f161c394f847d5f4aa30f18d57303858486b62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.73771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de6d69ad-f3a2-4274-8684-64be3fa179c8", "created": "2026-01-27T05:12:59.738535Z", "modified": "2026-01-27T05:12:59.738535Z", "relationship_type": "indicates", "source_ref": "indicator--e9e625fc-b085-4751-9b85-9d9707f78ef3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c5fced-4ddb-47d4-b17a-1fd1853630a6", "created": "2026-01-27T05:12:59.738708Z", "modified": "2026-01-27T05:12:59.738708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e09db4f4b440124f948564ca08cb625d23d61f28f7e2ef8b8f33a46c07bd289']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.738708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--677cab83-c34a-4081-81c7-70d256a45dd1", "created": "2026-01-27T05:12:59.739538Z", "modified": "2026-01-27T05:12:59.739538Z", "relationship_type": "indicates", "source_ref": "indicator--10c5fced-4ddb-47d4-b17a-1fd1853630a6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697fa7bb-5271-4d59-aa2e-faf495027203", "created": "2026-01-27T05:12:59.739711Z", "modified": "2026-01-27T05:12:59.739711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d182efcf3897d00e844e748246ec746b7bf8eb69b0af444cfeef4df7c8e8e4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.739711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d974340f-1f7f-4bfe-8a03-1cdb38266d07", "created": "2026-01-27T05:12:59.740587Z", "modified": "2026-01-27T05:12:59.740587Z", "relationship_type": "indicates", "source_ref": "indicator--697fa7bb-5271-4d59-aa2e-faf495027203", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942b810e-48b7-4347-aa74-ff6592d990d8", "created": "2026-01-27T05:12:59.740798Z", "modified": "2026-01-27T05:12:59.740798Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87610a79b296570d4e6791e18fa05aa7f737f1e1e676e1beee37259515ab092b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.740798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c20f0d3-fe6a-4c56-9dbe-1a799b47cfa2", "created": "2026-01-27T05:12:59.741607Z", "modified": "2026-01-27T05:12:59.741607Z", "relationship_type": "indicates", "source_ref": "indicator--942b810e-48b7-4347-aa74-ff6592d990d8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8695e4-2685-4f2e-92ab-8ee5053164fe", "created": "2026-01-27T05:12:59.741801Z", "modified": "2026-01-27T05:12:59.741801Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='548ee47f11e4f5effa9bec1a8eae3cc265189d7312d176e4976670483184524d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.741801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c809998-f2d6-4baa-80c4-2859ff681d54", "created": "2026-01-27T05:12:59.74262Z", "modified": "2026-01-27T05:12:59.74262Z", "relationship_type": "indicates", "source_ref": "indicator--fa8695e4-2685-4f2e-92ab-8ee5053164fe", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb98087-2c7f-4f5c-b92f-1f5dc295f054", "created": "2026-01-27T05:12:59.742809Z", "modified": "2026-01-27T05:12:59.742809Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20d23614f89fd772a624e0a92a1408250b2bbe0e78e67d42d3d1fce830a7c12a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.742809Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dacc9fcf-50d3-4707-9ff8-50ab519faf78", "created": "2026-01-27T05:12:59.743628Z", "modified": "2026-01-27T05:12:59.743628Z", "relationship_type": "indicates", "source_ref": "indicator--4cb98087-2c7f-4f5c-b92f-1f5dc295f054", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2f7328-4254-49c6-8315-ed9ba1c26813", "created": "2026-01-27T05:12:59.743816Z", "modified": "2026-01-27T05:12:59.743816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed50b3cba42d9ededdb86a7c4465df0db40a7551b4da4b3b609961ba8c22d00a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.743816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e009e82-7184-4844-83cd-912df22e98ba", "created": "2026-01-27T05:12:59.744764Z", "modified": "2026-01-27T05:12:59.744764Z", "relationship_type": "indicates", "source_ref": "indicator--1f2f7328-4254-49c6-8315-ed9ba1c26813", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0e0316-2f38-416b-a982-8af6c2a5c340", "created": "2026-01-27T05:12:59.744945Z", "modified": "2026-01-27T05:12:59.744945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1496e08ba26522563eb1529ba213ad2de6c4e25ce35cc5e851efbcc36c2d223f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.744945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f53740f8-dabf-4468-b139-00605e6dbf5e", "created": "2026-01-27T05:12:59.745776Z", "modified": "2026-01-27T05:12:59.745776Z", "relationship_type": "indicates", "source_ref": "indicator--1c0e0316-2f38-416b-a982-8af6c2a5c340", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992a30ec-d2e5-4013-bef7-5f92e80affaa", "created": "2026-01-27T05:12:59.745963Z", "modified": "2026-01-27T05:12:59.745963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e75af7b6c9b13e3c2ec71ad5468c901dbd8f262affbedef3b3372101859b4a3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.745963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ce1ba1a-1e25-41fb-ab24-07b0213a1568", "created": "2026-01-27T05:12:59.746791Z", "modified": "2026-01-27T05:12:59.746791Z", "relationship_type": "indicates", "source_ref": "indicator--992a30ec-d2e5-4013-bef7-5f92e80affaa", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d4415d-2ae0-4757-8e30-d044cf473108", "created": "2026-01-27T05:12:59.74697Z", "modified": "2026-01-27T05:12:59.74697Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='68480ed3ec94e8d4d3bee024c9deaf6976ac8c22e307e03ed5b3dc64ba327996']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.74697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6db10f20-5279-48e5-b0f1-ca140b2ae16d", "created": "2026-01-27T05:12:59.747791Z", "modified": "2026-01-27T05:12:59.747791Z", "relationship_type": "indicates", "source_ref": "indicator--98d4415d-2ae0-4757-8e30-d044cf473108", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69200176-3e5d-4e88-b350-068365ae30f9", "created": "2026-01-27T05:12:59.747971Z", "modified": "2026-01-27T05:12:59.747971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff9dd3707cb58fdda6049a6678eef56cb47595616dda38b2c5b3c24c49b16147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.747971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d36f169-216d-447c-808e-2ee44406c353", "created": "2026-01-27T05:12:59.748794Z", "modified": "2026-01-27T05:12:59.748794Z", "relationship_type": "indicates", "source_ref": "indicator--69200176-3e5d-4e88-b350-068365ae30f9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec492f52-056a-4119-b159-3ac0dd2ddb5a", "created": "2026-01-27T05:12:59.748974Z", "modified": "2026-01-27T05:12:59.748974Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0af347fa7253923d267ccf9f24006c9bfd16e5023ecc0c601cc3bcebeda9691']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.748974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--781170e0-4edb-4ab5-ba41-28a41d534c9c", "created": "2026-01-27T05:12:59.749806Z", "modified": "2026-01-27T05:12:59.749806Z", "relationship_type": "indicates", "source_ref": "indicator--ec492f52-056a-4119-b159-3ac0dd2ddb5a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ffa62d5-b02e-4218-a239-e3447de2e682", "created": "2026-01-27T05:12:59.749985Z", "modified": "2026-01-27T05:12:59.749985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c888c1d8c326aead99264bff007477199acd67dabd2d50a45d0f2e75fee99ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.749985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7d05fb5-e284-473b-9924-d5da62b813df", "created": "2026-01-27T05:12:59.750812Z", "modified": "2026-01-27T05:12:59.750812Z", "relationship_type": "indicates", "source_ref": "indicator--9ffa62d5-b02e-4218-a239-e3447de2e682", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d3f75e-9929-4d70-b079-9a6e94f2d125", "created": "2026-01-27T05:12:59.750987Z", "modified": "2026-01-27T05:12:59.750987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42792d85d613c2187b879fc6991cef2d385a9837e93727d7dc6466d1ff759b53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.750987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--def956c5-0bc1-4a3d-9545-96d05321cdc6", "created": "2026-01-27T05:12:59.751848Z", "modified": "2026-01-27T05:12:59.751848Z", "relationship_type": "indicates", "source_ref": "indicator--c6d3f75e-9929-4d70-b079-9a6e94f2d125", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94afe6c-cb45-4748-8b4d-5d5d5e65ef40", "created": "2026-01-27T05:12:59.752029Z", "modified": "2026-01-27T05:12:59.752029Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63275b2086bba6c999735a3908e884daf495533109d0ab90562de4fbbe78eaca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.752029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f41ff062-9305-4d5c-8c7d-f4f4cdfae438", "created": "2026-01-27T05:12:59.752887Z", "modified": "2026-01-27T05:12:59.752887Z", "relationship_type": "indicates", "source_ref": "indicator--a94afe6c-cb45-4748-8b4d-5d5d5e65ef40", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb952ae-8fe2-4dd2-81f4-d1b4123f351d", "created": "2026-01-27T05:12:59.753066Z", "modified": "2026-01-27T05:12:59.753066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac18d94ff99daa1a1ea85da44b707c7953a71c871ff9ae8d3725adb90f650022']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.753066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eef49303-cc7c-40ba-8cba-f00259551b59", "created": "2026-01-27T05:12:59.754034Z", "modified": "2026-01-27T05:12:59.754034Z", "relationship_type": "indicates", "source_ref": "indicator--2fb952ae-8fe2-4dd2-81f4-d1b4123f351d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e88ddc-5871-4cb6-bfd6-1ca41a184d9b", "created": "2026-01-27T05:12:59.754208Z", "modified": "2026-01-27T05:12:59.754208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea8782a6ee011850462fa374bb014477dc7dd7f569c3da7424920d7aaf9b9e3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.754208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7735bfb5-64b8-414d-9e0f-b26bd2762f9e", "created": "2026-01-27T05:12:59.75505Z", "modified": "2026-01-27T05:12:59.75505Z", "relationship_type": "indicates", "source_ref": "indicator--f9e88ddc-5871-4cb6-bfd6-1ca41a184d9b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34abb4cf-6f54-4f4e-aa2e-739932935c45", "created": "2026-01-27T05:12:59.755233Z", "modified": "2026-01-27T05:12:59.755233Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41c4421c73d06e7295bafd788e5f654c6caa7fcc5db4042bdf49a1bc00c790cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.755233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff062bbb-74ab-4492-9f20-7e2d5aef8f7b", "created": "2026-01-27T05:12:59.756082Z", "modified": "2026-01-27T05:12:59.756082Z", "relationship_type": "indicates", "source_ref": "indicator--34abb4cf-6f54-4f4e-aa2e-739932935c45", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce3246f6-bacc-4f3a-99be-5e849367152f", "created": "2026-01-27T05:12:59.756272Z", "modified": "2026-01-27T05:12:59.756272Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fd292152669ac42d67cfb11d73ea721edd6639e07bbbaafcd8f744b0b31c9a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.756272Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f98d1924-910f-4a18-9ab9-0fe705105358", "created": "2026-01-27T05:12:59.757139Z", "modified": "2026-01-27T05:12:59.757139Z", "relationship_type": "indicates", "source_ref": "indicator--ce3246f6-bacc-4f3a-99be-5e849367152f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67920827-b878-4e9e-843d-a44a6babb4d3", "created": "2026-01-27T05:12:59.757332Z", "modified": "2026-01-27T05:12:59.757332Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33879d80457a1e345b9b46359667bdc531c66190c32aa725522295049d03e1e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.757332Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e6d5deb-dae9-4712-981c-106f3374ddb4", "created": "2026-01-27T05:12:59.758175Z", "modified": "2026-01-27T05:12:59.758175Z", "relationship_type": "indicates", "source_ref": "indicator--67920827-b878-4e9e-843d-a44a6babb4d3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854d0863-c864-4d36-b2dd-821cbfcd6b9d", "created": "2026-01-27T05:12:59.75835Z", "modified": "2026-01-27T05:12:59.75835Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f45e01efdd8fb3541468a7e11d0db42f8b8aa78b5c8d889b6177c18f9778e287']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.75835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de8dc839-43f0-42fb-8abd-1af24f586afc", "created": "2026-01-27T05:12:59.759182Z", "modified": "2026-01-27T05:12:59.759182Z", "relationship_type": "indicates", "source_ref": "indicator--854d0863-c864-4d36-b2dd-821cbfcd6b9d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17cfebf-faab-43e8-8aed-d25ede80e948", "created": "2026-01-27T05:12:59.759363Z", "modified": "2026-01-27T05:12:59.759363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4aec0c6f000a9a3efd31a068ac8147071f5cd643158e1e12b9dbe76079523e8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.759363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--432c26a6-803a-46a0-bf8d-561fb5e0dc3e", "created": "2026-01-27T05:12:59.760189Z", "modified": "2026-01-27T05:12:59.760189Z", "relationship_type": "indicates", "source_ref": "indicator--b17cfebf-faab-43e8-8aed-d25ede80e948", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea4f6d5-6db4-4cfb-81e3-2bd5116e842d", "created": "2026-01-27T05:12:59.760373Z", "modified": "2026-01-27T05:12:59.760373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6c797286880d0215deb0fae7c51f785034ea8b28dcce407a2cea2ded81ea396']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.760373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40695cf2-e870-42d8-8a04-65958e80f9ff", "created": "2026-01-27T05:12:59.761211Z", "modified": "2026-01-27T05:12:59.761211Z", "relationship_type": "indicates", "source_ref": "indicator--fea4f6d5-6db4-4cfb-81e3-2bd5116e842d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d44f54-a1fa-48f7-be1e-024b1f4cac13", "created": "2026-01-27T05:12:59.761394Z", "modified": "2026-01-27T05:12:59.761394Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84844503f75810fc187976bc38128729b7f3ae60d613e99702e899d12af1f006']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.761394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23d0d883-52c4-49f1-96df-116aa19e5d3a", "created": "2026-01-27T05:12:59.762242Z", "modified": "2026-01-27T05:12:59.762242Z", "relationship_type": "indicates", "source_ref": "indicator--e8d44f54-a1fa-48f7-be1e-024b1f4cac13", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ec759e-9b4e-4164-8f49-fd8334dc6b59", "created": "2026-01-27T05:12:59.76242Z", "modified": "2026-01-27T05:12:59.76242Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa6f421c9af6f27f683923f1b3d7cf72dabaab2b68aa84fcc511aaaeab4dfda4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.76242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c5be68b-229c-4616-8bc0-a91430ee177a", "created": "2026-01-27T05:12:59.763788Z", "modified": "2026-01-27T05:12:59.763788Z", "relationship_type": "indicates", "source_ref": "indicator--a0ec759e-9b4e-4164-8f49-fd8334dc6b59", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d49c70-e097-4e68-ac21-861da2a97e6d", "created": "2026-01-27T05:12:59.763969Z", "modified": "2026-01-27T05:12:59.763969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adbce8d4ffac225f726ee42bb25b1a9a0661b5ff2ae53f45f4e4417ceec0349d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.763969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17be14cf-c60d-4892-8135-d0da5b48254b", "created": "2026-01-27T05:12:59.7648Z", "modified": "2026-01-27T05:12:59.7648Z", "relationship_type": "indicates", "source_ref": "indicator--00d49c70-e097-4e68-ac21-861da2a97e6d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0cae61-fc17-4a24-8a82-50b49f4bde36", "created": "2026-01-27T05:12:59.764978Z", "modified": "2026-01-27T05:12:59.764978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09359f6b5b02e1265d455f24eb231346ac0efc9706aa76e7eafff8b505051d55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.764978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4011371-dc20-41a0-971e-cd32d0f063c9", "created": "2026-01-27T05:12:59.765802Z", "modified": "2026-01-27T05:12:59.765802Z", "relationship_type": "indicates", "source_ref": "indicator--9b0cae61-fc17-4a24-8a82-50b49f4bde36", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbf2a70-72b2-438f-8548-c6cd048b3fbd", "created": "2026-01-27T05:12:59.765981Z", "modified": "2026-01-27T05:12:59.765981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60a51597403d38eb461348d812074730d832d1b99e1184a6618c19a2a4d2ab99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.765981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bd67134-5a03-4381-b7c6-9f31d01555c8", "created": "2026-01-27T05:12:59.766809Z", "modified": "2026-01-27T05:12:59.766809Z", "relationship_type": "indicates", "source_ref": "indicator--9bbf2a70-72b2-438f-8548-c6cd048b3fbd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebc7d7d-d58b-4375-bcc9-09c98a750656", "created": "2026-01-27T05:12:59.766988Z", "modified": "2026-01-27T05:12:59.766988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2c82d96a1598fe621d5afc427393b940d4e0c1ec7b5c421e01ef1c96caf74d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.766988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b197c0af-84fe-4ad5-ae12-b723cc7a1dbc", "created": "2026-01-27T05:12:59.767823Z", "modified": "2026-01-27T05:12:59.767823Z", "relationship_type": "indicates", "source_ref": "indicator--bebc7d7d-d58b-4375-bcc9-09c98a750656", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c602f7f-c568-4938-9b1e-76c8eab4380b", "created": "2026-01-27T05:12:59.768006Z", "modified": "2026-01-27T05:12:59.768006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='abe0f911850cc3bd67f6c2679461cf86cbe4b970075d9bbdfca8ecdba91f365f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.768006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0113eecf-58b2-4c9f-ac23-56d96f645fc7", "created": "2026-01-27T05:12:59.768831Z", "modified": "2026-01-27T05:12:59.768831Z", "relationship_type": "indicates", "source_ref": "indicator--2c602f7f-c568-4938-9b1e-76c8eab4380b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b7e81a-9b23-4387-8b3b-f2c57e4c7b65", "created": "2026-01-27T05:12:59.769008Z", "modified": "2026-01-27T05:12:59.769008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6e91913493baf331a9c308b38d1571001b3794bd150138b87742b0dfea0b26d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.769008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcc3801c-22d9-4c3f-9e39-657017d51016", "created": "2026-01-27T05:12:59.769861Z", "modified": "2026-01-27T05:12:59.769861Z", "relationship_type": "indicates", "source_ref": "indicator--86b7e81a-9b23-4387-8b3b-f2c57e4c7b65", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f97026-73be-43cf-9d70-74b1a10bf3f4", "created": "2026-01-27T05:12:59.770036Z", "modified": "2026-01-27T05:12:59.770036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e42916197982c3201f29fb9e9ac8e671c2c1fb6deaea6f036f21b6fcb6434ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.770036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a41901a1-2626-4835-82ad-387db78eaf97", "created": "2026-01-27T05:12:59.77092Z", "modified": "2026-01-27T05:12:59.77092Z", "relationship_type": "indicates", "source_ref": "indicator--f7f97026-73be-43cf-9d70-74b1a10bf3f4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3e94c6-31a7-4284-b1a6-82b41380c6a7", "created": "2026-01-27T05:12:59.771103Z", "modified": "2026-01-27T05:12:59.771103Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6938f4eb11b9d33b6edf1a720a23575662658c492cdf44b94b2cae70507e77a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.771103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a5c8072-d877-44e2-9e68-d52859e7c5a6", "created": "2026-01-27T05:12:59.772068Z", "modified": "2026-01-27T05:12:59.772068Z", "relationship_type": "indicates", "source_ref": "indicator--0f3e94c6-31a7-4284-b1a6-82b41380c6a7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bab6b68-c071-4f48-b399-2dc14d97b5c8", "created": "2026-01-27T05:12:59.772253Z", "modified": "2026-01-27T05:12:59.772253Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc892d305a344bb4499d37e42aebb14eb2c41d8efae723860f25310559203cf0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.772253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf505aba-222d-4777-ac5b-4dffb0cc5c62", "created": "2026-01-27T05:12:59.773136Z", "modified": "2026-01-27T05:12:59.773136Z", "relationship_type": "indicates", "source_ref": "indicator--8bab6b68-c071-4f48-b399-2dc14d97b5c8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea533ed-2cbd-48b4-b7d2-db193748dbfb", "created": "2026-01-27T05:12:59.773314Z", "modified": "2026-01-27T05:12:59.773314Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c5017868c917f6bc7208328095d46e45c34ce3a19d94127e91bd819ff3d204c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.773314Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24a928a2-5a33-4dee-a260-9a72b4715083", "created": "2026-01-27T05:12:59.774146Z", "modified": "2026-01-27T05:12:59.774146Z", "relationship_type": "indicates", "source_ref": "indicator--5ea533ed-2cbd-48b4-b7d2-db193748dbfb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374ec9cb-63e7-4e55-971b-87e6d24ff71a", "created": "2026-01-27T05:12:59.774323Z", "modified": "2026-01-27T05:12:59.774323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb850d4de49c9fc53a0e48087cca852cafb6ef21125e7cb54d680283f6740d9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.774323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--175c4a7d-f549-4fae-879d-f868be592645", "created": "2026-01-27T05:12:59.775196Z", "modified": "2026-01-27T05:12:59.775196Z", "relationship_type": "indicates", "source_ref": "indicator--374ec9cb-63e7-4e55-971b-87e6d24ff71a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4206295-c1ca-4209-abcc-75a0acd1cf62", "created": "2026-01-27T05:12:59.77538Z", "modified": "2026-01-27T05:12:59.77538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66d235680510108e24bc46a9fcba2cbf0def62e3260af9c4a0e632290977dfa9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.77538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19291859-410a-4b82-9bc6-3a605473a725", "created": "2026-01-27T05:12:59.776214Z", "modified": "2026-01-27T05:12:59.776214Z", "relationship_type": "indicates", "source_ref": "indicator--d4206295-c1ca-4209-abcc-75a0acd1cf62", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cf0906-d119-4e24-8912-774682f044a2", "created": "2026-01-27T05:12:59.776392Z", "modified": "2026-01-27T05:12:59.776392Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32575e207ac94065d198e9c3240f008c59d7c8ecb334211ee10f030ea91a62b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.776392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6372cd16-eabb-4582-83a1-eef6076d5418", "created": "2026-01-27T05:12:59.77723Z", "modified": "2026-01-27T05:12:59.77723Z", "relationship_type": "indicates", "source_ref": "indicator--e1cf0906-d119-4e24-8912-774682f044a2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6820baa6-bf7a-40e0-803b-835ac2a9272d", "created": "2026-01-27T05:12:59.777405Z", "modified": "2026-01-27T05:12:59.777405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3df6e61bfea5cac005163c3428685c5140fb975a1ec674e79db1a2e00e816f79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.777405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c90306ad-abb6-4aea-8e4c-a3e0253008a6", "created": "2026-01-27T05:12:59.778239Z", "modified": "2026-01-27T05:12:59.778239Z", "relationship_type": "indicates", "source_ref": "indicator--6820baa6-bf7a-40e0-803b-835ac2a9272d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a343050-65c6-4d49-a661-7960a728fdac", "created": "2026-01-27T05:12:59.778416Z", "modified": "2026-01-27T05:12:59.778416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8b8c3c427964b36e09d94177b40f1ea7df84f7883622f03936445617c6bb6d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.778416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd570adb-41c2-4c99-bd1d-ae74d5aa31c7", "created": "2026-01-27T05:12:59.779266Z", "modified": "2026-01-27T05:12:59.779266Z", "relationship_type": "indicates", "source_ref": "indicator--3a343050-65c6-4d49-a661-7960a728fdac", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70066fba-3e00-430b-95ab-78768bab3098", "created": "2026-01-27T05:12:59.779442Z", "modified": "2026-01-27T05:12:59.779442Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='946c1caf95131f5743f070e8cbdc07d8386df739754dc15026dcb0d03103a66d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.779442Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--530af1fd-4cab-4eef-bf3e-017a98d38729", "created": "2026-01-27T05:12:59.78028Z", "modified": "2026-01-27T05:12:59.78028Z", "relationship_type": "indicates", "source_ref": "indicator--70066fba-3e00-430b-95ab-78768bab3098", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e479671b-3c67-44cd-9753-291b1a6b2ca3", "created": "2026-01-27T05:12:59.780454Z", "modified": "2026-01-27T05:12:59.780454Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca70975da016eab694816eca008e401df221f3102cb5aa84277346f452f414f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.780454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--505e624f-0d01-490b-845a-740a5410dd25", "created": "2026-01-27T05:12:59.781414Z", "modified": "2026-01-27T05:12:59.781414Z", "relationship_type": "indicates", "source_ref": "indicator--e479671b-3c67-44cd-9753-291b1a6b2ca3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d187b6df-2a78-42d6-af55-ec4446ff7729", "created": "2026-01-27T05:12:59.781593Z", "modified": "2026-01-27T05:12:59.781593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c7361891f99343f09120f259c27de9e961606737b31c989054a150acc1e4096']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.781593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c9a952f-0777-475e-b70d-8db155d27ff0", "created": "2026-01-27T05:12:59.782416Z", "modified": "2026-01-27T05:12:59.782416Z", "relationship_type": "indicates", "source_ref": "indicator--d187b6df-2a78-42d6-af55-ec4446ff7729", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a7b774-668d-4271-8b4b-d46c2fcc6ff7", "created": "2026-01-27T05:12:59.782594Z", "modified": "2026-01-27T05:12:59.782594Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='182121c89d9964f7c006f1033baeac832c84494f3351705379231baa3e790af0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.782594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40c5931a-a658-47b1-a1bb-83c851a13889", "created": "2026-01-27T05:12:59.783425Z", "modified": "2026-01-27T05:12:59.783425Z", "relationship_type": "indicates", "source_ref": "indicator--27a7b774-668d-4271-8b4b-d46c2fcc6ff7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2139545-4f20-4234-8fe2-94814e0f9e7c", "created": "2026-01-27T05:12:59.783601Z", "modified": "2026-01-27T05:12:59.783601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4378359371a780e7b92e0b447887092ce4f10b116dd0a2eec358e7b3519bd4a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.783601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8545c0b5-e006-4c64-b02a-0313b742a104", "created": "2026-01-27T05:12:59.784423Z", "modified": "2026-01-27T05:12:59.784423Z", "relationship_type": "indicates", "source_ref": "indicator--f2139545-4f20-4234-8fe2-94814e0f9e7c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ef8b36-dee1-4804-bd8e-ef28058fb14c", "created": "2026-01-27T05:12:59.7846Z", "modified": "2026-01-27T05:12:59.7846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd1e8aff7cd92fd8d002a0f4edefea78846cf23c867c5bd05a7f5f41b3196a6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.7846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9aea3d8-e86b-44f6-a501-ba9096d3980e", "created": "2026-01-27T05:12:59.785428Z", "modified": "2026-01-27T05:12:59.785428Z", "relationship_type": "indicates", "source_ref": "indicator--06ef8b36-dee1-4804-bd8e-ef28058fb14c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9076a2-91dd-42f7-8f64-dc211d5d5f38", "created": "2026-01-27T05:12:59.785604Z", "modified": "2026-01-27T05:12:59.785604Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='927a692155b548bc38b0fac64e9a760f68ed64b5a4bc0837a1502c0f653a30e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.785604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a9f4feb-9cd7-4a90-9ea7-1063fe70207a", "created": "2026-01-27T05:12:59.786434Z", "modified": "2026-01-27T05:12:59.786434Z", "relationship_type": "indicates", "source_ref": "indicator--ee9076a2-91dd-42f7-8f64-dc211d5d5f38", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e471309a-1ba5-4941-91b5-71534f11d07e", "created": "2026-01-27T05:12:59.786621Z", "modified": "2026-01-27T05:12:59.786621Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fb165c856a50491452058bbcf758e4e047cc70d74928b4229dc3241bd7f5615']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.786621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4623b34-1c3b-4a28-ab4b-e8ec64036787", "created": "2026-01-27T05:12:59.787457Z", "modified": "2026-01-27T05:12:59.787457Z", "relationship_type": "indicates", "source_ref": "indicator--e471309a-1ba5-4941-91b5-71534f11d07e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f72a93-d3d8-4334-8afe-5c0bec66bc35", "created": "2026-01-27T05:12:59.787633Z", "modified": "2026-01-27T05:12:59.787633Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fc6215c588649523c4a6dcbd361fcbe167da4c25959cacb7e58ccc04c653f2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.787633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebd845c8-2794-4e09-b335-040314ff7fcc", "created": "2026-01-27T05:12:59.788479Z", "modified": "2026-01-27T05:12:59.788479Z", "relationship_type": "indicates", "source_ref": "indicator--b6f72a93-d3d8-4334-8afe-5c0bec66bc35", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94fca13-0d77-4398-bbf1-df89b7d92a84", "created": "2026-01-27T05:12:59.788665Z", "modified": "2026-01-27T05:12:59.788665Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5965beb9234bc5f13f23e523f938f28bfdc963d2abc6b9df2764e52e57485be6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.788665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eb5945b-0fa9-4b78-b14a-5c1d04e44299", "created": "2026-01-27T05:12:59.789548Z", "modified": "2026-01-27T05:12:59.789548Z", "relationship_type": "indicates", "source_ref": "indicator--a94fca13-0d77-4398-bbf1-df89b7d92a84", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7038fcf1-5b5c-40fa-a9c8-953d2e3689f7", "created": "2026-01-27T05:12:59.789735Z", "modified": "2026-01-27T05:12:59.789735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cc3806e3c4a4e1ade6354cca446cad5b19e9df849240df66efab79ea9383cd2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.789735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82ae43e3-fdcc-49cd-88ab-bc6eca88ae10", "created": "2026-01-27T05:12:59.790714Z", "modified": "2026-01-27T05:12:59.790714Z", "relationship_type": "indicates", "source_ref": "indicator--7038fcf1-5b5c-40fa-a9c8-953d2e3689f7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30bcb2b2-c109-4e4c-8ca2-5bbf2da24679", "created": "2026-01-27T05:12:59.790905Z", "modified": "2026-01-27T05:12:59.790905Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76f39e72a82d16eec9ca3d5e950a8bfc2909cc96d034e3490485dc5d0de23846']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.790905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d72d9d3-3ea1-4989-97b1-90fdba882203", "created": "2026-01-27T05:12:59.791719Z", "modified": "2026-01-27T05:12:59.791719Z", "relationship_type": "indicates", "source_ref": "indicator--30bcb2b2-c109-4e4c-8ca2-5bbf2da24679", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb86d40-4ec3-436b-9a4d-7ab82b1ab9dd", "created": "2026-01-27T05:12:59.791912Z", "modified": "2026-01-27T05:12:59.791912Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3ad570197d34d0ca84ab49cd56061bb97ff44b0d6c041674b74bfb49892feac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.791912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b91fbbb-53f9-46a3-bc05-579cd5c50f3e", "created": "2026-01-27T05:12:59.792716Z", "modified": "2026-01-27T05:12:59.792716Z", "relationship_type": "indicates", "source_ref": "indicator--bdb86d40-4ec3-436b-9a4d-7ab82b1ab9dd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3548ad4-cade-44a6-9285-7e9de10de565", "created": "2026-01-27T05:12:59.792913Z", "modified": "2026-01-27T05:12:59.792913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3bfbba550cc1e342d822e4bb5f617bfd4a90f7210fc293f7743333cff617fb44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.792913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea15e341-025b-4958-85b5-815af682e8d6", "created": "2026-01-27T05:12:59.793725Z", "modified": "2026-01-27T05:12:59.793725Z", "relationship_type": "indicates", "source_ref": "indicator--c3548ad4-cade-44a6-9285-7e9de10de565", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee811c9-9cf1-496f-a741-8f977e1b416c", "created": "2026-01-27T05:12:59.793915Z", "modified": "2026-01-27T05:12:59.793915Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='179209f54755ddfb0310287abf2a5b23cd6bf651da4a7c17119844a954c3bc1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.793915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c3f03f3-9046-4567-908a-dc08820eca2f", "created": "2026-01-27T05:12:59.794779Z", "modified": "2026-01-27T05:12:59.794779Z", "relationship_type": "indicates", "source_ref": "indicator--bee811c9-9cf1-496f-a741-8f977e1b416c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99d7726-71b7-4ffd-ad65-7f775901bbe4", "created": "2026-01-27T05:12:59.794969Z", "modified": "2026-01-27T05:12:59.794969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='180a8385d40084cfc30b149289f63bbb1ce1a26ae39b7116546bf03d0bb5d20c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.794969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4694becf-e530-4475-b366-77cf932c2186", "created": "2026-01-27T05:12:59.7958Z", "modified": "2026-01-27T05:12:59.7958Z", "relationship_type": "indicates", "source_ref": "indicator--e99d7726-71b7-4ffd-ad65-7f775901bbe4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23c3fdc-1ef6-4e01-9f5c-4d57d06b23f7", "created": "2026-01-27T05:12:59.795978Z", "modified": "2026-01-27T05:12:59.795978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ff0984bde36d11d1c533fd23d0132405d5679444ad812439f7928756e5559d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.795978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6227d315-87d1-4657-9f65-2e97552aac0f", "created": "2026-01-27T05:12:59.796806Z", "modified": "2026-01-27T05:12:59.796806Z", "relationship_type": "indicates", "source_ref": "indicator--f23c3fdc-1ef6-4e01-9f5c-4d57d06b23f7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7af3912-bc08-4439-a65b-2dddf2ec6dae", "created": "2026-01-27T05:12:59.796984Z", "modified": "2026-01-27T05:12:59.796984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5f5bb223fadef66c77296512c8bed72654fa1f53289e6bf9e1d1bbb6a6e252e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.796984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc0d986a-5a29-4443-bc6c-0af98bbbfc22", "created": "2026-01-27T05:12:59.797799Z", "modified": "2026-01-27T05:12:59.797799Z", "relationship_type": "indicates", "source_ref": "indicator--f7af3912-bc08-4439-a65b-2dddf2ec6dae", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0f1d0f-4f56-40d8-a290-1f30772b69b8", "created": "2026-01-27T05:12:59.797973Z", "modified": "2026-01-27T05:12:59.797973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='127b364902fc97fb6cabc3cfbfec068bf9b918d8832774fd776f2794407a3c80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.797973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9334e627-7e40-48fc-a58d-13b6570a2a55", "created": "2026-01-27T05:12:59.798794Z", "modified": "2026-01-27T05:12:59.798794Z", "relationship_type": "indicates", "source_ref": "indicator--1a0f1d0f-4f56-40d8-a290-1f30772b69b8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09be12e3-0f1e-4d60-ab06-138843ccf1cc", "created": "2026-01-27T05:12:59.798969Z", "modified": "2026-01-27T05:12:59.798969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1bca5899d9136bad875cf6fd52bc45a6e2df28434d7f9e8c99315b299771df3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.798969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4944da43-df0b-4c2d-93b3-b2afb0d0976d", "created": "2026-01-27T05:12:59.799909Z", "modified": "2026-01-27T05:12:59.799909Z", "relationship_type": "indicates", "source_ref": "indicator--09be12e3-0f1e-4d60-ab06-138843ccf1cc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b6a214-5703-4b24-881e-941f795a6928", "created": "2026-01-27T05:12:59.800092Z", "modified": "2026-01-27T05:12:59.800092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1945b2911a078227c9035503754de19d83f4c716da98924293fc289cb1975628']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.800092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96b907cb-bd10-43b5-b26a-ef9ae4b50b8f", "created": "2026-01-27T05:12:59.800927Z", "modified": "2026-01-27T05:12:59.800927Z", "relationship_type": "indicates", "source_ref": "indicator--18b6a214-5703-4b24-881e-941f795a6928", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12b91cf-2e3b-4822-98ad-4d0316124f5d", "created": "2026-01-27T05:12:59.801104Z", "modified": "2026-01-27T05:12:59.801104Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85f268850edb49fd3b652f9ee0daacccc10b876cd9263d8233326d7a7546dfc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.801104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2f0990f-804d-4a96-bcf0-00cfceae04f9", "created": "2026-01-27T05:12:59.801938Z", "modified": "2026-01-27T05:12:59.801938Z", "relationship_type": "indicates", "source_ref": "indicator--f12b91cf-2e3b-4822-98ad-4d0316124f5d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c10227-3003-4ee4-a67a-c80fbae2408e", "created": "2026-01-27T05:12:59.802112Z", "modified": "2026-01-27T05:12:59.802112Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4859f1e98bdc7e02d7170099b09bb1cf90dbd7686e95a5a3661b10086976308c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.802112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebdf25b4-ff79-4c64-a78c-78df53581f08", "created": "2026-01-27T05:12:59.802959Z", "modified": "2026-01-27T05:12:59.802959Z", "relationship_type": "indicates", "source_ref": "indicator--b7c10227-3003-4ee4-a67a-c80fbae2408e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ef3867-eb5b-4edb-b54f-8bf0941855bc", "created": "2026-01-27T05:12:59.803144Z", "modified": "2026-01-27T05:12:59.803144Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d67e3f792cd1e22e6e07d26e31eca0094aeba376145849abaf4dc79b168c952']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.803144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbf57486-00d7-4cdf-8718-e302857cfdea", "created": "2026-01-27T05:12:59.803996Z", "modified": "2026-01-27T05:12:59.803996Z", "relationship_type": "indicates", "source_ref": "indicator--05ef3867-eb5b-4edb-b54f-8bf0941855bc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bc6c97-d19f-4e30-baed-830a0528b451", "created": "2026-01-27T05:12:59.804229Z", "modified": "2026-01-27T05:12:59.804229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d230e77465ddce1510fb6f337ec7b69cd99430de3dd7a221d5306f4546eabe95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.804229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98848946-e949-4dc1-9831-574400ddaff7", "created": "2026-01-27T05:12:59.805118Z", "modified": "2026-01-27T05:12:59.805118Z", "relationship_type": "indicates", "source_ref": "indicator--05bc6c97-d19f-4e30-baed-830a0528b451", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bec9ba-8a38-4558-a59c-8c3744c58c89", "created": "2026-01-27T05:12:59.805299Z", "modified": "2026-01-27T05:12:59.805299Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fbf61398603583e1306fca94af0363b35427129487b0928bd1b291f5e591c7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.805299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc51e09b-c3b3-4e0e-922e-4b0383e258ed", "created": "2026-01-27T05:12:59.80615Z", "modified": "2026-01-27T05:12:59.80615Z", "relationship_type": "indicates", "source_ref": "indicator--63bec9ba-8a38-4558-a59c-8c3744c58c89", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1105cd3-c436-42f8-85b8-7c63da7fc886", "created": "2026-01-27T05:12:59.806325Z", "modified": "2026-01-27T05:12:59.806325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='058e356571251488f0e238c11ba3ab2aa2adbe1ec955f5f284bc86a21fc131da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.806325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d389406-dc3a-49f9-8f43-bf9b378d36e7", "created": "2026-01-27T05:12:59.807166Z", "modified": "2026-01-27T05:12:59.807166Z", "relationship_type": "indicates", "source_ref": "indicator--e1105cd3-c436-42f8-85b8-7c63da7fc886", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e966271-557b-466c-b1e4-de840ee39667", "created": "2026-01-27T05:12:59.807346Z", "modified": "2026-01-27T05:12:59.807346Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae34ef4c4ebcc0c9ac71d3849890fa4b5029f5180b90292becd19a7e24b20df5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.807346Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--159a6ab9-7a05-4889-97cf-42f1fc8691bc", "created": "2026-01-27T05:12:59.808309Z", "modified": "2026-01-27T05:12:59.808309Z", "relationship_type": "indicates", "source_ref": "indicator--1e966271-557b-466c-b1e4-de840ee39667", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475091ea-c9ed-4359-b177-edc7e0b23a6d", "created": "2026-01-27T05:12:59.80849Z", "modified": "2026-01-27T05:12:59.80849Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37a07d490b07e95f433c04882f16282aa940b8c5d55438e8a69045fa65a5e943']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.80849Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16150f1e-f9ca-4f1e-9188-fac302cb5e77", "created": "2026-01-27T05:12:59.809341Z", "modified": "2026-01-27T05:12:59.809341Z", "relationship_type": "indicates", "source_ref": "indicator--475091ea-c9ed-4359-b177-edc7e0b23a6d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e8231a-dd6d-4108-aa51-49963f54e9c8", "created": "2026-01-27T05:12:59.809517Z", "modified": "2026-01-27T05:12:59.809517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c2e365d6dd85c4ed51c36f54dc7d2fb391d1e6c7586f15ca3e1dcccf61cc499']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.809517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41cc1bc1-269a-4fcb-8725-c9a876a00ee8", "created": "2026-01-27T05:12:59.810359Z", "modified": "2026-01-27T05:12:59.810359Z", "relationship_type": "indicates", "source_ref": "indicator--b4e8231a-dd6d-4108-aa51-49963f54e9c8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9724ec0a-7fbc-4b9e-9b7d-70e7a87d6fd7", "created": "2026-01-27T05:12:59.810537Z", "modified": "2026-01-27T05:12:59.810537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb3c6ff48850500fb4ddcac25f93f2ed3591c5bed41ae41221d9cd2f56d40cb3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.810537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8e32411-31c6-45b1-bbc5-ce907a4169f1", "created": "2026-01-27T05:12:59.811371Z", "modified": "2026-01-27T05:12:59.811371Z", "relationship_type": "indicates", "source_ref": "indicator--9724ec0a-7fbc-4b9e-9b7d-70e7a87d6fd7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b41f7fc-e460-45ca-a71e-b06ee405c0a6", "created": "2026-01-27T05:12:59.811546Z", "modified": "2026-01-27T05:12:59.811546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='637587d5016c125b3c3e9fbe6f8bbf2f1281c229cef448a1079bf2a6c9ce8678']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.811546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfedbffe-c738-4f96-a40f-1a606e1dc66a", "created": "2026-01-27T05:12:59.812376Z", "modified": "2026-01-27T05:12:59.812376Z", "relationship_type": "indicates", "source_ref": "indicator--0b41f7fc-e460-45ca-a71e-b06ee405c0a6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c401ace-449f-4a50-ad74-541bf5b6d1c1", "created": "2026-01-27T05:12:59.812551Z", "modified": "2026-01-27T05:12:59.812551Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5754e39685ee1fd32e5ade10febf1915758a52eb96e8cb3a21e0e7e78c50430f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.812551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ead513b3-988e-4c76-9c21-27fa8311133d", "created": "2026-01-27T05:12:59.813386Z", "modified": "2026-01-27T05:12:59.813386Z", "relationship_type": "indicates", "source_ref": "indicator--8c401ace-449f-4a50-ad74-541bf5b6d1c1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa80eb0-ae4c-480c-b0ab-5cb18dee2371", "created": "2026-01-27T05:12:59.813566Z", "modified": "2026-01-27T05:12:59.813566Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bcbe9db3960691a7c91d911b94e4fd1eaf862e4e0965c3b738cfe0c1837aa35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.813566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f1af92f-84d9-4f07-afb0-25409bc6ad8a", "created": "2026-01-27T05:12:59.814393Z", "modified": "2026-01-27T05:12:59.814393Z", "relationship_type": "indicates", "source_ref": "indicator--3fa80eb0-ae4c-480c-b0ab-5cb18dee2371", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276fbdd2-2b3a-4237-82c3-d52143ca8402", "created": "2026-01-27T05:12:59.814574Z", "modified": "2026-01-27T05:12:59.814574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b87b363dbd9f90f088e32b86a8c8a04058b18daf2ed27fdda83b42104a30279']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.814574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2c098fa-1675-42ac-ae62-8dde2fa0d3d3", "created": "2026-01-27T05:12:59.815415Z", "modified": "2026-01-27T05:12:59.815415Z", "relationship_type": "indicates", "source_ref": "indicator--276fbdd2-2b3a-4237-82c3-d52143ca8402", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8ac5f7-4c1f-4884-b06f-14703a5a7f90", "created": "2026-01-27T05:12:59.815593Z", "modified": "2026-01-27T05:12:59.815593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c023042671eb96c219e5239ebd5b4f4f848b01dc56f70407ea3aec1c81dffbb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.815593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4454cb1a-cdcb-4df1-82fb-5b11da3bad42", "created": "2026-01-27T05:12:59.816439Z", "modified": "2026-01-27T05:12:59.816439Z", "relationship_type": "indicates", "source_ref": "indicator--0a8ac5f7-4c1f-4884-b06f-14703a5a7f90", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60dbd65-0917-4c1e-b461-0db809d729ff", "created": "2026-01-27T05:12:59.816617Z", "modified": "2026-01-27T05:12:59.816617Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='557adab50bd78627bca0cc31784de498f384e6eb1a09dcc6c273b1ed00ba7ccd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.816617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef2c0156-64b3-4e87-9bd0-b1d8bcca39de", "created": "2026-01-27T05:12:59.81757Z", "modified": "2026-01-27T05:12:59.81757Z", "relationship_type": "indicates", "source_ref": "indicator--f60dbd65-0917-4c1e-b461-0db809d729ff", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b6be80-3ffe-458a-82ec-14b5cee3df65", "created": "2026-01-27T05:12:59.817759Z", "modified": "2026-01-27T05:12:59.817759Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1f4692d9cbcefefbfe1b92705a08cce408a6881da227b7b7d739bf2aa2cfb46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.817759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62ad9107-27ff-4e61-9781-461f8d82ebff", "created": "2026-01-27T05:12:59.818573Z", "modified": "2026-01-27T05:12:59.818573Z", "relationship_type": "indicates", "source_ref": "indicator--72b6be80-3ffe-458a-82ec-14b5cee3df65", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cc98ee-8055-4fd9-8a50-11d43407d27e", "created": "2026-01-27T05:12:59.818761Z", "modified": "2026-01-27T05:12:59.818761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e6d2fc66305c4dc9573e4e8128abf4a83c4df4825b323c26cebd076258552bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.818761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c79deec-8e07-42e4-bccd-c3ff1729dce0", "created": "2026-01-27T05:12:59.819575Z", "modified": "2026-01-27T05:12:59.819575Z", "relationship_type": "indicates", "source_ref": "indicator--69cc98ee-8055-4fd9-8a50-11d43407d27e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337ef78a-c3a0-41c8-8120-66b7f6384363", "created": "2026-01-27T05:12:59.819762Z", "modified": "2026-01-27T05:12:59.819762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c60e35243c48ecbb1e3f0125b919939cd9d20757e1fd59b876fc93185e31f36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.819762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b9eccb7-4955-451c-bb87-2e170aa96dc3", "created": "2026-01-27T05:12:59.820655Z", "modified": "2026-01-27T05:12:59.820655Z", "relationship_type": "indicates", "source_ref": "indicator--337ef78a-c3a0-41c8-8120-66b7f6384363", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a43faa1-4032-4b2b-ae4f-778d22147ddb", "created": "2026-01-27T05:12:59.820873Z", "modified": "2026-01-27T05:12:59.820873Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34bd975ff82df67173e7b09ab1cfb4202460c4d855a5eafcb1e017abbc0adb79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.820873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--767c240d-597a-4ff2-ba71-5c56ceffaccf", "created": "2026-01-27T05:12:59.821697Z", "modified": "2026-01-27T05:12:59.821697Z", "relationship_type": "indicates", "source_ref": "indicator--2a43faa1-4032-4b2b-ae4f-778d22147ddb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec42cecb-0eda-457f-b972-a2a4737d10b2", "created": "2026-01-27T05:12:59.821895Z", "modified": "2026-01-27T05:12:59.821895Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8c615971da21464145f4ce476a85d6514a6e8fb07fd35f37162fbc9abd1f6b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.821895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--476b7f3f-d9ed-445a-b4cf-c59114cb533a", "created": "2026-01-27T05:12:59.822712Z", "modified": "2026-01-27T05:12:59.822712Z", "relationship_type": "indicates", "source_ref": "indicator--ec42cecb-0eda-457f-b972-a2a4737d10b2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a64b97d-7033-4196-be61-902a8896276e", "created": "2026-01-27T05:12:59.822906Z", "modified": "2026-01-27T05:12:59.822906Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='499de21830f6e03001446af6900364a670f3ee92347aa5a0f7023d94b1b2806e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.822906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--662f8f3c-4613-452f-ac5a-71ea361ac6f9", "created": "2026-01-27T05:12:59.823738Z", "modified": "2026-01-27T05:12:59.823738Z", "relationship_type": "indicates", "source_ref": "indicator--4a64b97d-7033-4196-be61-902a8896276e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6edf33b-3d22-4d91-be96-712e85f4dbdc", "created": "2026-01-27T05:12:59.823928Z", "modified": "2026-01-27T05:12:59.823928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed1d5029db8345fda2abee2056fed8659324578f6be4b4662c108ebf9f51e6e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.823928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6ccc0d3-7402-4c79-abaa-73d0dc1d8ef2", "created": "2026-01-27T05:12:59.824767Z", "modified": "2026-01-27T05:12:59.824767Z", "relationship_type": "indicates", "source_ref": "indicator--a6edf33b-3d22-4d91-be96-712e85f4dbdc", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becf584a-c09a-4196-b9d1-acbaf37ccb0a", "created": "2026-01-27T05:12:59.824944Z", "modified": "2026-01-27T05:12:59.824944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d94dc59ee70e7be0ef363e9719761c0635df8d30af82a9465f00093b0f8d64d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.824944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c468fa90-bfb8-4a85-8e10-50c42958ea64", "created": "2026-01-27T05:12:59.825794Z", "modified": "2026-01-27T05:12:59.825794Z", "relationship_type": "indicates", "source_ref": "indicator--becf584a-c09a-4196-b9d1-acbaf37ccb0a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03546985-b947-4ee6-afdb-e9b9d23a2409", "created": "2026-01-27T05:12:59.825972Z", "modified": "2026-01-27T05:12:59.825972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f177397044a6db88316fd65eb09b70ea9e2ce0de3462d32585d86903125a44f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.825972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--064cb1e5-67b4-4ece-b533-671257a1180e", "created": "2026-01-27T05:12:59.82693Z", "modified": "2026-01-27T05:12:59.82693Z", "relationship_type": "indicates", "source_ref": "indicator--03546985-b947-4ee6-afdb-e9b9d23a2409", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabaa851-638e-4d1b-9512-861a0e1a517f", "created": "2026-01-27T05:12:59.827114Z", "modified": "2026-01-27T05:12:59.827114Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29cc4d3ffe3d463da88e4f754b9493a95803ae4fbfa3fef923a3462b6ff6edcc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.827114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75e22ac0-3ae8-4624-85c1-33757d33f5e5", "created": "2026-01-27T05:12:59.827943Z", "modified": "2026-01-27T05:12:59.827943Z", "relationship_type": "indicates", "source_ref": "indicator--dabaa851-638e-4d1b-9512-861a0e1a517f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef64f6a-6ee5-48c3-b79a-176884d157b3", "created": "2026-01-27T05:12:59.828123Z", "modified": "2026-01-27T05:12:59.828123Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73bd967166f9ad284bc688fae581a9331ea5404cbcbbb5f3b0dbfe412163f89d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.828123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2129351d-035c-4323-81e9-8089246a2b0c", "created": "2026-01-27T05:12:59.828951Z", "modified": "2026-01-27T05:12:59.828951Z", "relationship_type": "indicates", "source_ref": "indicator--aef64f6a-6ee5-48c3-b79a-176884d157b3", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cda802-117c-44c9-b4ca-a82bc96197cb", "created": "2026-01-27T05:12:59.829125Z", "modified": "2026-01-27T05:12:59.829125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d183fc9b7d51daf326fe97b6f6f455f21919c58686afd9da13c43cede10cc9fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.829125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da27d8c1-f859-4f21-accb-93d3073f7021", "created": "2026-01-27T05:12:59.829953Z", "modified": "2026-01-27T05:12:59.829953Z", "relationship_type": "indicates", "source_ref": "indicator--d9cda802-117c-44c9-b4ca-a82bc96197cb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac736fa1-1ebf-4892-8429-ba52245e4524", "created": "2026-01-27T05:12:59.830134Z", "modified": "2026-01-27T05:12:59.830134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00bafdcf83a2de713df75cde140d004176baa836ee397f90f22b3324c763d853']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.830134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40a9dcdd-3b92-4eda-a2a2-f1daebea57ab", "created": "2026-01-27T05:12:59.830967Z", "modified": "2026-01-27T05:12:59.830967Z", "relationship_type": "indicates", "source_ref": "indicator--ac736fa1-1ebf-4892-8429-ba52245e4524", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d61a52-f0c7-4eb3-b42e-fff1f354cec0", "created": "2026-01-27T05:12:59.831142Z", "modified": "2026-01-27T05:12:59.831142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3f1719faac2f90a2ee1c93142e371cca8dea878b719595d9782e0abaaa18efa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.831142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--582722fd-6dd8-4ce0-b58c-0dc2fa7b7b03", "created": "2026-01-27T05:12:59.831968Z", "modified": "2026-01-27T05:12:59.831968Z", "relationship_type": "indicates", "source_ref": "indicator--55d61a52-f0c7-4eb3-b42e-fff1f354cec0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210ed8c0-1828-4482-9045-86bb1aa7b269", "created": "2026-01-27T05:12:59.83215Z", "modified": "2026-01-27T05:12:59.83215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d3dcf99a83ec253a07e02ead39675446a20f66403b241d7a7aff24a65a7af8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.83215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a7349d5-44c2-493d-a866-8890dfef55d0", "created": "2026-01-27T05:12:59.832974Z", "modified": "2026-01-27T05:12:59.832974Z", "relationship_type": "indicates", "source_ref": "indicator--210ed8c0-1828-4482-9045-86bb1aa7b269", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943d30f2-0381-427a-88be-b3d7730102b2", "created": "2026-01-27T05:12:59.833153Z", "modified": "2026-01-27T05:12:59.833153Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cd9b30463e655bf19cbe85af02328e09fa88e8d1d19a42be6656c58c403e573']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.833153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38c07154-2c35-45e5-8536-759852bc142b", "created": "2026-01-27T05:12:59.833999Z", "modified": "2026-01-27T05:12:59.833999Z", "relationship_type": "indicates", "source_ref": "indicator--943d30f2-0381-427a-88be-b3d7730102b2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5932cba-51d2-45a4-b292-b29d62ff49a8", "created": "2026-01-27T05:12:59.834173Z", "modified": "2026-01-27T05:12:59.834173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3764cd2c6d131a38e94ad14604e80249116bb135547d1a46f3b0ca3f6b4bcbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.834173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b226bcdf-97e5-4e1f-a693-f58c1d2c5a78", "created": "2026-01-27T05:12:59.835136Z", "modified": "2026-01-27T05:12:59.835136Z", "relationship_type": "indicates", "source_ref": "indicator--a5932cba-51d2-45a4-b292-b29d62ff49a8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af1dd23-93e1-413e-a0ee-d4b14401651d", "created": "2026-01-27T05:12:59.835315Z", "modified": "2026-01-27T05:12:59.835315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13af57edaec6b0eb16cfed80563bda07f4e03fce787f56a851b7bc2d8322e9ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.835315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a49b825a-ff3e-45c1-8cb6-f7ebd82f4188", "created": "2026-01-27T05:12:59.836206Z", "modified": "2026-01-27T05:12:59.836206Z", "relationship_type": "indicates", "source_ref": "indicator--3af1dd23-93e1-413e-a0ee-d4b14401651d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa38ef1-c6ff-431d-b68a-7ccb2acffd0f", "created": "2026-01-27T05:12:59.836397Z", "modified": "2026-01-27T05:12:59.836397Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7cd5c8754b36c4fa8444d8e6463b7fa67462222944bf5d272484028ad2c05539']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.836397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30333e54-127f-4059-a1e9-a74d8962eb1b", "created": "2026-01-27T05:12:59.837276Z", "modified": "2026-01-27T05:12:59.837276Z", "relationship_type": "indicates", "source_ref": "indicator--9aa38ef1-c6ff-431d-b68a-7ccb2acffd0f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5447ce-314c-45b6-9864-0eb5cadec294", "created": "2026-01-27T05:12:59.837458Z", "modified": "2026-01-27T05:12:59.837458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbce138d2b08f52091d925cdcf9490bcd850785338a1f377e94caaf09fe21aeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.837458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f55962b8-25de-470b-bc11-fc5a4d24eed4", "created": "2026-01-27T05:12:59.8383Z", "modified": "2026-01-27T05:12:59.8383Z", "relationship_type": "indicates", "source_ref": "indicator--ab5447ce-314c-45b6-9864-0eb5cadec294", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a28c5b-f074-417d-81f9-a29acaff3835", "created": "2026-01-27T05:12:59.838476Z", "modified": "2026-01-27T05:12:59.838476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='239dbce4da6af63cd5611ac6e1492ae4afdd3ecc3ac598502ba1a99c62221bd4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.838476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb78c2d7-0b62-4dca-9083-5f8f14a17860", "created": "2026-01-27T05:12:59.839313Z", "modified": "2026-01-27T05:12:59.839313Z", "relationship_type": "indicates", "source_ref": "indicator--b5a28c5b-f074-417d-81f9-a29acaff3835", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cdbc469-d5dc-4c11-b3c7-b51cc5cc6646", "created": "2026-01-27T05:12:59.839491Z", "modified": "2026-01-27T05:12:59.839491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e8e0f67fc90f457b5f5ab6f90577a506af1e34f2119f5c9b25e8643e0c57322']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.839491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7da54cb7-3a98-4c03-9da2-8d4e5f08e6fa", "created": "2026-01-27T05:12:59.840336Z", "modified": "2026-01-27T05:12:59.840336Z", "relationship_type": "indicates", "source_ref": "indicator--0cdbc469-d5dc-4c11-b3c7-b51cc5cc6646", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1c74db-d424-4af9-8c40-5fd906f68ee2", "created": "2026-01-27T05:12:59.840526Z", "modified": "2026-01-27T05:12:59.840526Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eef3ec88d673971aaea091f470bc5f4b1d905e3973cabf95ad7855fd544e46c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.840526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85e544ce-8956-4413-9e73-bba49ae7a656", "created": "2026-01-27T05:12:59.841353Z", "modified": "2026-01-27T05:12:59.841353Z", "relationship_type": "indicates", "source_ref": "indicator--0e1c74db-d424-4af9-8c40-5fd906f68ee2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8c0f85-4438-4ec4-aa52-49a6ffc9dd8f", "created": "2026-01-27T05:12:59.841537Z", "modified": "2026-01-27T05:12:59.841537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b336a74a85635956783e20b2546df1629b82777eacac25c42de6232aff46623']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.841537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--275ff63d-3f3e-4cc4-abe3-c61bcd5ee98c", "created": "2026-01-27T05:12:59.842366Z", "modified": "2026-01-27T05:12:59.842366Z", "relationship_type": "indicates", "source_ref": "indicator--7b8c0f85-4438-4ec4-aa52-49a6ffc9dd8f", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ce8a55-09a1-437a-804f-61edc7c34531", "created": "2026-01-27T05:12:59.842541Z", "modified": "2026-01-27T05:12:59.842541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71c45ae9a11ad8d137597466235da80a5cc934b36f2756797ad545c7aa50481d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.842541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdc7a0c3-fa8e-4845-a48c-31fec3249058", "created": "2026-01-27T05:12:59.843388Z", "modified": "2026-01-27T05:12:59.843388Z", "relationship_type": "indicates", "source_ref": "indicator--71ce8a55-09a1-437a-804f-61edc7c34531", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc2a6c9-5390-494d-990a-a2fd408260a1", "created": "2026-01-27T05:12:59.843565Z", "modified": "2026-01-27T05:12:59.843565Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b29d29ed9adddc41f8cf452c2307ae13f544d8eeadb5896968d32ef9cdf6c739']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.843565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--983a421a-37c8-4a98-b3e6-35c48de89470", "created": "2026-01-27T05:12:59.844524Z", "modified": "2026-01-27T05:12:59.844524Z", "relationship_type": "indicates", "source_ref": "indicator--6fc2a6c9-5390-494d-990a-a2fd408260a1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9126ac-aa34-4f7d-baff-687ff5c0dcb4", "created": "2026-01-27T05:12:59.8447Z", "modified": "2026-01-27T05:12:59.8447Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bcfa73ca0eb5ca0b041246eae9318e655d3a0062a6910912c57aa8e5e18fd32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.8447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30e39679-d7d5-4c0f-b434-382b373f0116", "created": "2026-01-27T05:12:59.845531Z", "modified": "2026-01-27T05:12:59.845531Z", "relationship_type": "indicates", "source_ref": "indicator--9e9126ac-aa34-4f7d-baff-687ff5c0dcb4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6378798-2e35-4869-937c-5857bfb028f9", "created": "2026-01-27T05:12:59.845709Z", "modified": "2026-01-27T05:12:59.845709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5dc775518a877754e11e71e3fbd494db5721c729fc7b98af014ad64dea4f90c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.845709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf5980e8-9b24-43ce-9ba3-09ba0813d73a", "created": "2026-01-27T05:12:59.846537Z", "modified": "2026-01-27T05:12:59.846537Z", "relationship_type": "indicates", "source_ref": "indicator--f6378798-2e35-4869-937c-5857bfb028f9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8d16fc-fd81-42a1-86da-3a7b1d927f23", "created": "2026-01-27T05:12:59.846712Z", "modified": "2026-01-27T05:12:59.846712Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b6e24fc8652b016267c2f7f448cfa2a0f4b1ce84a2f2db72baf206a3287b9a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.846712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d8c63c3-3aad-4690-83f5-04b76474a068", "created": "2026-01-27T05:12:59.847536Z", "modified": "2026-01-27T05:12:59.847536Z", "relationship_type": "indicates", "source_ref": "indicator--cd8d16fc-fd81-42a1-86da-3a7b1d927f23", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5685740a-37d5-49ca-8bfc-ee9be76a76dd", "created": "2026-01-27T05:12:59.847709Z", "modified": "2026-01-27T05:12:59.847709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37d72bd21da473d9cc556a5dfd5a9bb7330e651dc90aeae1f549ff2db728fe43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.847709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58a6fedc-9a2a-40bf-acf5-23fa5f1849bc", "created": "2026-01-27T05:12:59.848534Z", "modified": "2026-01-27T05:12:59.848534Z", "relationship_type": "indicates", "source_ref": "indicator--5685740a-37d5-49ca-8bfc-ee9be76a76dd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8358c550-6fc4-48dd-a6f4-2b7520075efe", "created": "2026-01-27T05:12:59.848709Z", "modified": "2026-01-27T05:12:59.848709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cf967ebb0a57c49db8d2e87d1a685ae2662f4f6ba68f892bcdde5a2304cc71b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.848709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80f21b28-9430-45a3-ac20-5c209a23d313", "created": "2026-01-27T05:12:59.849529Z", "modified": "2026-01-27T05:12:59.849529Z", "relationship_type": "indicates", "source_ref": "indicator--8358c550-6fc4-48dd-a6f4-2b7520075efe", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c403d0-e6ce-4ea4-9d7e-cf4820ff19b0", "created": "2026-01-27T05:12:59.849707Z", "modified": "2026-01-27T05:12:59.849707Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37ab5e7cb66400d16430bdefbc091374cbf3746f7505b4878d9c095239a29723']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.849707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d4141bd-8806-4377-9697-e01767c10b32", "created": "2026-01-27T05:12:59.850534Z", "modified": "2026-01-27T05:12:59.850534Z", "relationship_type": "indicates", "source_ref": "indicator--48c403d0-e6ce-4ea4-9d7e-cf4820ff19b0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b890d22-4dc8-4550-a21c-1abcc08aae35", "created": "2026-01-27T05:12:59.850724Z", "modified": "2026-01-27T05:12:59.850724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='661f9fd1e9466d9673cb3c4b25e3122cbc5899873966c0680bb8ff496f7a6b0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.850724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd8d9016-0f32-4613-ae98-d7f0f1c19273", "created": "2026-01-27T05:12:59.851572Z", "modified": "2026-01-27T05:12:59.851572Z", "relationship_type": "indicates", "source_ref": "indicator--5b890d22-4dc8-4550-a21c-1abcc08aae35", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d9efd3-0b21-4a54-9713-966de4eca879", "created": "2026-01-27T05:12:59.851827Z", "modified": "2026-01-27T05:12:59.851827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0079ae7c362d6a5a50696144670238df84d33a24e66b82ca055d508dab90a535']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.851827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1657ad39-04eb-4b41-8cb7-65e15af27a52", "created": "2026-01-27T05:12:59.852721Z", "modified": "2026-01-27T05:12:59.852721Z", "relationship_type": "indicates", "source_ref": "indicator--89d9efd3-0b21-4a54-9713-966de4eca879", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1177fc6c-4f79-41f6-8720-e9e243862a4a", "created": "2026-01-27T05:12:59.852925Z", "modified": "2026-01-27T05:12:59.852925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a866315ced21a133b792e1159933be6242364f87aeca8dc73053e02f0b923f11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.852925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd2beb14-f6eb-4430-83c6-10315f301bc6", "created": "2026-01-27T05:12:59.853901Z", "modified": "2026-01-27T05:12:59.853901Z", "relationship_type": "indicates", "source_ref": "indicator--1177fc6c-4f79-41f6-8720-e9e243862a4a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a37274-2bef-4935-8e42-0cb3c9c0b7d9", "created": "2026-01-27T05:12:59.854083Z", "modified": "2026-01-27T05:12:59.854083Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd61a3adb5bdf9542ff6c076d76d53243beb01a85f3d98e6ab4147b9252629a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.854083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--145a81c0-53cc-483f-bc5e-616de602bb1f", "created": "2026-01-27T05:12:59.854913Z", "modified": "2026-01-27T05:12:59.854913Z", "relationship_type": "indicates", "source_ref": "indicator--20a37274-2bef-4935-8e42-0cb3c9c0b7d9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcba464d-118f-43d5-ac95-b025bfff3ed0", "created": "2026-01-27T05:12:59.855089Z", "modified": "2026-01-27T05:12:59.855089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a361de33a47ca78bb19bfff26990ffcb6a432acf0533afd319a975127fe31e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.855089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08541d17-285a-4960-8e18-9813663d9d5d", "created": "2026-01-27T05:12:59.855913Z", "modified": "2026-01-27T05:12:59.855913Z", "relationship_type": "indicates", "source_ref": "indicator--fcba464d-118f-43d5-ac95-b025bfff3ed0", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e06c6e-9840-49dc-bdcc-db1d2ee76ed6", "created": "2026-01-27T05:12:59.85609Z", "modified": "2026-01-27T05:12:59.85609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93a6dcbfbad555c6f750f103fcd971aa74c5c5bb482f528e81ef645691d4c7cb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.85609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--176df26d-f6f7-4bdc-8ce7-82709c68cd86", "created": "2026-01-27T05:12:59.856936Z", "modified": "2026-01-27T05:12:59.856936Z", "relationship_type": "indicates", "source_ref": "indicator--20e06c6e-9840-49dc-bdcc-db1d2ee76ed6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd6ec3a-2149-4c90-aacc-a581ff81d7db", "created": "2026-01-27T05:12:59.857111Z", "modified": "2026-01-27T05:12:59.857111Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ff171f92a7d436f7a35cb0b7105b265568da8acb23370a2850b5c265f483a4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.857111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cab9901e-f8fc-44ec-af1a-705aa911e746", "created": "2026-01-27T05:12:59.857949Z", "modified": "2026-01-27T05:12:59.857949Z", "relationship_type": "indicates", "source_ref": "indicator--3bd6ec3a-2149-4c90-aacc-a581ff81d7db", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2987ac16-9769-46d1-886f-a08b71ddf16e", "created": "2026-01-27T05:12:59.858125Z", "modified": "2026-01-27T05:12:59.858125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3dc91ef223977927b1f294f5d3d62a882413cf4c875b009a65963752c33bdd0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.858125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7153449a-eaec-4070-8d1d-64d1a2f9dc20", "created": "2026-01-27T05:12:59.858964Z", "modified": "2026-01-27T05:12:59.858964Z", "relationship_type": "indicates", "source_ref": "indicator--2987ac16-9769-46d1-886f-a08b71ddf16e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ec317c-f106-40a6-8d54-834473d5f147", "created": "2026-01-27T05:12:59.859139Z", "modified": "2026-01-27T05:12:59.859139Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1d9ac7935b969851f8e4cefeddff92d10b80e2cb20b59f392298e45b614bb98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.859139Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--396748c3-519d-4177-bf03-513f2c5c1ab9", "created": "2026-01-27T05:12:59.859976Z", "modified": "2026-01-27T05:12:59.859976Z", "relationship_type": "indicates", "source_ref": "indicator--20ec317c-f106-40a6-8d54-834473d5f147", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366ba151-aa00-40ca-81b9-b957886af5bd", "created": "2026-01-27T05:12:59.860153Z", "modified": "2026-01-27T05:12:59.860153Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f331bced99ab2c557d9e0ed88c650651926768fa0eec894273991f78352bc9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.860153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46469f74-6360-4ce7-bd79-0f56eb1fc6e5", "created": "2026-01-27T05:12:59.860987Z", "modified": "2026-01-27T05:12:59.860987Z", "relationship_type": "indicates", "source_ref": "indicator--366ba151-aa00-40ca-81b9-b957886af5bd", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f882fc74-768d-4d6b-8ab9-372afdd1e6bb", "created": "2026-01-27T05:12:59.861165Z", "modified": "2026-01-27T05:12:59.861165Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0b2bede8b38c50c90b5978f1156eec32cfe2bfa7b488d3fedda5d34114e2bd3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.861165Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--426dc8d1-29f1-46bf-98a9-037b2b4bb117", "created": "2026-01-27T05:12:59.862123Z", "modified": "2026-01-27T05:12:59.862123Z", "relationship_type": "indicates", "source_ref": "indicator--f882fc74-768d-4d6b-8ab9-372afdd1e6bb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11236d4a-3159-4730-8d45-f45109986870", "created": "2026-01-27T05:12:59.8623Z", "modified": "2026-01-27T05:12:59.8623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b39744abd0e18d0add341168afd09d6835de13d9ccd3ba29a820e8141aabca6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.8623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ffd16b8-40b8-4369-8711-be6a22e0f127", "created": "2026-01-27T05:12:59.863137Z", "modified": "2026-01-27T05:12:59.863137Z", "relationship_type": "indicates", "source_ref": "indicator--11236d4a-3159-4730-8d45-f45109986870", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cb25cc-2c19-4d7e-9af1-a76cc0b4f4ea", "created": "2026-01-27T05:12:59.863312Z", "modified": "2026-01-27T05:12:59.863312Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35e81a20d78741cd201cdb2f7475590a01f5bdc1fb86dc600ceac80753d74714']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.863312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d40709ba-5597-438f-9397-b8cc3e4ad027", "created": "2026-01-27T05:12:59.864142Z", "modified": "2026-01-27T05:12:59.864142Z", "relationship_type": "indicates", "source_ref": "indicator--d4cb25cc-2c19-4d7e-9af1-a76cc0b4f4ea", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa7085d-3852-479b-af1c-cd22202a4c9a", "created": "2026-01-27T05:12:59.864318Z", "modified": "2026-01-27T05:12:59.864318Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3e804ed9238263c7ab1398402ee37f121adbe69b33feb86219c30f3b80b3204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.864318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18827835-cdc1-4de0-8fbf-de3b5b6dcaf3", "created": "2026-01-27T05:12:59.865147Z", "modified": "2026-01-27T05:12:59.865147Z", "relationship_type": "indicates", "source_ref": "indicator--0aa7085d-3852-479b-af1c-cd22202a4c9a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcce501-33b8-4e81-965a-b5870112f9ae", "created": "2026-01-27T05:12:59.865323Z", "modified": "2026-01-27T05:12:59.865323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e35d62604b673c4c99d8717042a25761ca31c2d61af34ee6ffdcc12bb59f6269']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.865323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fde2df8d-5874-47e3-a3bf-932835d00281", "created": "2026-01-27T05:12:59.86616Z", "modified": "2026-01-27T05:12:59.86616Z", "relationship_type": "indicates", "source_ref": "indicator--9dcce501-33b8-4e81-965a-b5870112f9ae", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c337be7-5ae2-4115-a6ed-65272f070e40", "created": "2026-01-27T05:12:59.866336Z", "modified": "2026-01-27T05:12:59.866336Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c42f0f95516195ff77951a3e91f42ecee67c499017909d357092f85bcdcd046']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.866336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f732092e-9ed7-40fb-ac5f-6f21f8e8850b", "created": "2026-01-27T05:12:59.867166Z", "modified": "2026-01-27T05:12:59.867166Z", "relationship_type": "indicates", "source_ref": "indicator--4c337be7-5ae2-4115-a6ed-65272f070e40", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7233a568-09a2-4f8f-8048-083228b45756", "created": "2026-01-27T05:12:59.86735Z", "modified": "2026-01-27T05:12:59.86735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='07743812754dbe7c41fd0a9b706126285c4f4dc33747a9e7933fd6150a14c77b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.86735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46dcd39a-bf29-40af-a5f4-bff51e155cf0", "created": "2026-01-27T05:12:59.868236Z", "modified": "2026-01-27T05:12:59.868236Z", "relationship_type": "indicates", "source_ref": "indicator--7233a568-09a2-4f8f-8048-083228b45756", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e1252c-0476-47cb-81d0-020e115f2140", "created": "2026-01-27T05:12:59.868416Z", "modified": "2026-01-27T05:12:59.868416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7f907c58ee650acccb28feadeec573004333865973f695038e640e836e1566f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.868416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7873e112-6182-433d-b076-ed95402bb9cc", "created": "2026-01-27T05:12:59.869307Z", "modified": "2026-01-27T05:12:59.869307Z", "relationship_type": "indicates", "source_ref": "indicator--16e1252c-0476-47cb-81d0-020e115f2140", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ffdbb5-e01d-4523-a497-7d6497d0b7eb", "created": "2026-01-27T05:12:59.869488Z", "modified": "2026-01-27T05:12:59.869488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='182ba41d9930c78bfff28e5e7fda9fda85d99331864e5bff5b646dd6209ae7a7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.869488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55947771-c288-4403-943e-47d24606273a", "created": "2026-01-27T05:12:59.870318Z", "modified": "2026-01-27T05:12:59.870318Z", "relationship_type": "indicates", "source_ref": "indicator--77ffdbb5-e01d-4523-a497-7d6497d0b7eb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c5554c-d72b-404c-a719-3c2aefbfb8e9", "created": "2026-01-27T05:12:59.870492Z", "modified": "2026-01-27T05:12:59.870492Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08dda0f5cde18f13678e5a49c993a31f8497da14dde2bc61a515c0ca4bceaf34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.870492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66bd9a16-4fce-4f0a-b62e-d2dc1c0a5c76", "created": "2026-01-27T05:12:59.871816Z", "modified": "2026-01-27T05:12:59.871816Z", "relationship_type": "indicates", "source_ref": "indicator--e0c5554c-d72b-404c-a719-3c2aefbfb8e9", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5ddb77-2d9a-4a99-b79c-c760104ad0c5", "created": "2026-01-27T05:12:59.872014Z", "modified": "2026-01-27T05:12:59.872014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23cb760d891e09ad1877cc12282e3ca095fc70b66709dfe68c4c5429dd0ab46d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.872014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f61ce84-61e2-4878-929f-eb16345d9dad", "created": "2026-01-27T05:12:59.872865Z", "modified": "2026-01-27T05:12:59.872865Z", "relationship_type": "indicates", "source_ref": "indicator--cf5ddb77-2d9a-4a99-b79c-c760104ad0c5", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714114e1-cfbe-4e60-a2d0-db14f990b38d", "created": "2026-01-27T05:12:59.873048Z", "modified": "2026-01-27T05:12:59.873048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='caa2da2ec151ea5e674fb5d9c164b4eacf6479bb39592c8d3afba3a8adfede5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.873048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2550652d-2160-409e-a613-2c64ee889295", "created": "2026-01-27T05:12:59.873882Z", "modified": "2026-01-27T05:12:59.873882Z", "relationship_type": "indicates", "source_ref": "indicator--714114e1-cfbe-4e60-a2d0-db14f990b38d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8201b0-92ac-4e7f-be11-f7a5c707cc55", "created": "2026-01-27T05:12:59.874059Z", "modified": "2026-01-27T05:12:59.874059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3518d11ddc3a58720ae78bd727842cf1b3830968fee8da1617b04ca3deae8e64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.874059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--799fa757-ac86-4fbc-a5cd-1e9cd3d0920b", "created": "2026-01-27T05:12:59.874886Z", "modified": "2026-01-27T05:12:59.874886Z", "relationship_type": "indicates", "source_ref": "indicator--8b8201b0-92ac-4e7f-be11-f7a5c707cc55", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc53daec-3dd8-49b7-85eb-aedf431f8c90", "created": "2026-01-27T05:12:59.875065Z", "modified": "2026-01-27T05:12:59.875065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc7ea52c74c764f8208a4c7dee31a52b9e4ac694d1e61b02b5174b5ff983dd15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.875065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac0d53c7-8337-4edc-81cd-b5c06b5d4bc4", "created": "2026-01-27T05:12:59.875893Z", "modified": "2026-01-27T05:12:59.875893Z", "relationship_type": "indicates", "source_ref": "indicator--bc53daec-3dd8-49b7-85eb-aedf431f8c90", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a72573-9ff3-4e6d-8a43-8c5ff0a9886b", "created": "2026-01-27T05:12:59.876072Z", "modified": "2026-01-27T05:12:59.876072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66061074802c19ec95b0f7e29a2c457a88f44fcf7ff6ba0d488a21967c25d94b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.876072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cf039ca-89c4-4e24-9442-93ce3a13a282", "created": "2026-01-27T05:12:59.876902Z", "modified": "2026-01-27T05:12:59.876902Z", "relationship_type": "indicates", "source_ref": "indicator--36a72573-9ff3-4e6d-8a43-8c5ff0a9886b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ae0e1c1-3f2d-4f49-8f2c-013c82998c4a", "created": "2026-01-27T05:12:59.877079Z", "modified": "2026-01-27T05:12:59.877079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='303c176194263051c4fd10c646cd5dc154474fd294d93530343f39add00c3c3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.877079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a96af37-c0f8-4714-beca-1ba3da8a4c0f", "created": "2026-01-27T05:12:59.877904Z", "modified": "2026-01-27T05:12:59.877904Z", "relationship_type": "indicates", "source_ref": "indicator--9ae0e1c1-3f2d-4f49-8f2c-013c82998c4a", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a0d3ea-84c8-462c-b6c0-d5c4d5ae8cde", "created": "2026-01-27T05:12:59.878088Z", "modified": "2026-01-27T05:12:59.878088Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59e04f912f12bae1ae97596d3bfae4033cf9761b0e39f700010941f4ea86f0fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.878088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb401097-b9be-4d30-824c-068ff2987102", "created": "2026-01-27T05:12:59.878917Z", "modified": "2026-01-27T05:12:59.878917Z", "relationship_type": "indicates", "source_ref": "indicator--a4a0d3ea-84c8-462c-b6c0-d5c4d5ae8cde", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835697ca-219c-405a-9ebe-a02e0c651ae2", "created": "2026-01-27T05:12:59.879097Z", "modified": "2026-01-27T05:12:59.879097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5efd374cfa16e22b98dae9dcb7271f2fa6ef7ea2dd9bfc4aca69c63316598b67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.879097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ca7c3d2-55ee-45e6-a150-6a3fdcc66895", "created": "2026-01-27T05:12:59.879929Z", "modified": "2026-01-27T05:12:59.879929Z", "relationship_type": "indicates", "source_ref": "indicator--835697ca-219c-405a-9ebe-a02e0c651ae2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc4b73a-1ce8-4a69-b8cd-37ab4e0b4cee", "created": "2026-01-27T05:12:59.880106Z", "modified": "2026-01-27T05:12:59.880106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8ae8875dce34565f229e521c2f1cd02d272342d0dc4dbafbd9cd5a1b5caf7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.880106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5da8216c-4948-49be-b9ea-facb8dadfe10", "created": "2026-01-27T05:12:59.881066Z", "modified": "2026-01-27T05:12:59.881066Z", "relationship_type": "indicates", "source_ref": "indicator--acc4b73a-1ce8-4a69-b8cd-37ab4e0b4cee", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af844ac6-a4cd-4d72-a020-a6f70ce976ff", "created": "2026-01-27T05:12:59.881244Z", "modified": "2026-01-27T05:12:59.881244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b70565df8148c3003bf185accc4b51ed49e4c06f3f0f04bfb3f2a56bace794e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.881244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4b1c8da-4061-4b75-b514-aa99a39d109d", "created": "2026-01-27T05:12:59.882094Z", "modified": "2026-01-27T05:12:59.882094Z", "relationship_type": "indicates", "source_ref": "indicator--af844ac6-a4cd-4d72-a020-a6f70ce976ff", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4e252e-bb02-4f08-8fbf-afeed6f3de32", "created": "2026-01-27T05:12:59.882286Z", "modified": "2026-01-27T05:12:59.882286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b035c10d9b384e9b80164ef142b9038862775fe2c78ed361257eb6ad02d75bf5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.882286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--224bd893-bf1d-441e-bcc4-a00d8150b721", "created": "2026-01-27T05:12:59.883136Z", "modified": "2026-01-27T05:12:59.883136Z", "relationship_type": "indicates", "source_ref": "indicator--ff4e252e-bb02-4f08-8fbf-afeed6f3de32", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc78888-45d9-40e6-a24f-e22466eda615", "created": "2026-01-27T05:12:59.883343Z", "modified": "2026-01-27T05:12:59.883343Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1e08ee27df652dfc750868f39d3b45c4eb3915b817e2eafdf641b5f2e7adbfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.883343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e64d5ab-fed2-4689-8a51-dd118123e6ee", "created": "2026-01-27T05:12:59.884232Z", "modified": "2026-01-27T05:12:59.884232Z", "relationship_type": "indicates", "source_ref": "indicator--9dc78888-45d9-40e6-a24f-e22466eda615", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67270d38-74cf-439d-92a9-1ae78ee50538", "created": "2026-01-27T05:12:59.884415Z", "modified": "2026-01-27T05:12:59.884415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b76cc7754a21347701446a4331e571bcb1a4a71cebea712b53553bfa4026232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.884415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7435dec-30a1-40bc-9a59-cac0478188e6", "created": "2026-01-27T05:12:59.885246Z", "modified": "2026-01-27T05:12:59.885246Z", "relationship_type": "indicates", "source_ref": "indicator--67270d38-74cf-439d-92a9-1ae78ee50538", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfec0e32-e4ec-4afc-9f76-0f7c4b055d39", "created": "2026-01-27T05:12:59.885424Z", "modified": "2026-01-27T05:12:59.885424Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65ae3fc73af0553b21c96a5525f0437976907e5a004f534e23cd7fcc64167cfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.885424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2a07c70-8619-42cc-87de-94aec8a62e03", "created": "2026-01-27T05:12:59.886266Z", "modified": "2026-01-27T05:12:59.886266Z", "relationship_type": "indicates", "source_ref": "indicator--cfec0e32-e4ec-4afc-9f76-0f7c4b055d39", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a169bcf-979c-495c-8c9b-a56000ea5b99", "created": "2026-01-27T05:12:59.886445Z", "modified": "2026-01-27T05:12:59.886445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e23e63e90e7e28e8d11ffc4737e1e4eb57a1f12b1b870238e2b55e9f7e84f351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.886445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--815b7c94-f42a-44e6-bb04-8cd9f2871c3f", "created": "2026-01-27T05:12:59.88729Z", "modified": "2026-01-27T05:12:59.88729Z", "relationship_type": "indicates", "source_ref": "indicator--2a169bcf-979c-495c-8c9b-a56000ea5b99", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46edad8a-a95e-41d1-8e69-6992178b7562", "created": "2026-01-27T05:12:59.887465Z", "modified": "2026-01-27T05:12:59.887465Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3d5caa2e70d930416e5140cf0fca20a2c26e7766b3f2daadef3e509b4ff58db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.887465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd7bdcae-2d09-4978-9051-76f3484069c3", "created": "2026-01-27T05:12:59.88834Z", "modified": "2026-01-27T05:12:59.88834Z", "relationship_type": "indicates", "source_ref": "indicator--46edad8a-a95e-41d1-8e69-6992178b7562", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fa88c8-2d35-4d7c-a76c-517f16295972", "created": "2026-01-27T05:12:59.888518Z", "modified": "2026-01-27T05:12:59.888518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd22e41762bb73dfba7b781457d4d4351984d7e0f451e7e10f6dc23745f67537']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.888518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b529e2e-5c5e-47b5-b071-147e192cf8ab", "created": "2026-01-27T05:12:59.889402Z", "modified": "2026-01-27T05:12:59.889402Z", "relationship_type": "indicates", "source_ref": "indicator--e5fa88c8-2d35-4d7c-a76c-517f16295972", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871123ed-8d48-4bea-8002-2070d0d85a4d", "created": "2026-01-27T05:12:59.889591Z", "modified": "2026-01-27T05:12:59.889591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e6141f894baeabe75731b4a9ff20cfee32bd5c94cc9ac1250978c5344eaa5669']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.889591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b783b37-fda3-4e3b-bb80-da146a7d62b8", "created": "2026-01-27T05:12:59.890667Z", "modified": "2026-01-27T05:12:59.890667Z", "relationship_type": "indicates", "source_ref": "indicator--871123ed-8d48-4bea-8002-2070d0d85a4d", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb456ec-1ae0-4be9-a936-a336f765ca40", "created": "2026-01-27T05:12:59.890882Z", "modified": "2026-01-27T05:12:59.890882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c74f73f8d7ac1f548af9d9bff635c6856ec8820aa58a8fdb4c8672b43308db02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.890882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82360c8b-1a08-4ded-8e01-b6149a670cf8", "created": "2026-01-27T05:12:59.891724Z", "modified": "2026-01-27T05:12:59.891724Z", "relationship_type": "indicates", "source_ref": "indicator--2fb456ec-1ae0-4be9-a936-a336f765ca40", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ecea77-ce73-4a98-acce-b77a4bfa22c1", "created": "2026-01-27T05:12:59.891929Z", "modified": "2026-01-27T05:12:59.891929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2586e31cbf5a15b90fd0222924d65d91cdb6cf9bbc6f217fd296fef374148904']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.891929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d128ab08-52f5-4eb5-b294-c534d2f28171", "created": "2026-01-27T05:12:59.892779Z", "modified": "2026-01-27T05:12:59.892779Z", "relationship_type": "indicates", "source_ref": "indicator--c1ecea77-ce73-4a98-acce-b77a4bfa22c1", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e860efa-2d79-4aa7-94c1-2b5991df1107", "created": "2026-01-27T05:12:59.892958Z", "modified": "2026-01-27T05:12:59.892958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c043700e76721f0807d6ca882fe5e268fc561fb45e159e95253771c97c6d4d04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.892958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d53b0e55-349b-4941-823e-feb3ddc0a4b1", "created": "2026-01-27T05:12:59.893794Z", "modified": "2026-01-27T05:12:59.893794Z", "relationship_type": "indicates", "source_ref": "indicator--2e860efa-2d79-4aa7-94c1-2b5991df1107", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45881e69-1817-48de-97cc-afd46d74243e", "created": "2026-01-27T05:12:59.893971Z", "modified": "2026-01-27T05:12:59.893971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0e9abf69a032b9410e2fb5435a746281a03106798b9ebf5ee4c16179ebcb8cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.893971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d509a1b1-1978-4e3b-8dd8-ab38ef374a1b", "created": "2026-01-27T05:12:59.89481Z", "modified": "2026-01-27T05:12:59.89481Z", "relationship_type": "indicates", "source_ref": "indicator--45881e69-1817-48de-97cc-afd46d74243e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf22a571-3004-440d-ace0-20dd00f1437c", "created": "2026-01-27T05:12:59.895007Z", "modified": "2026-01-27T05:12:59.895007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21ae4d2d711f8e43d9c6c392eb500fb4e50ebe3619374fdcaca5f4bcf0d80097']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.895007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1c0251b-a7ba-46e2-ac98-c222f78f0f0a", "created": "2026-01-27T05:12:59.895848Z", "modified": "2026-01-27T05:12:59.895848Z", "relationship_type": "indicates", "source_ref": "indicator--bf22a571-3004-440d-ace0-20dd00f1437c", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416d356d-9a49-4ae4-b509-912fe06a8dbb", "created": "2026-01-27T05:12:59.896026Z", "modified": "2026-01-27T05:12:59.896026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c96c5b31bf47184da6b54e033882db875daf90a9b4567b115245dc438ef5c0a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.896026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1a45b27-d49d-47cf-be30-ea0683c19d22", "created": "2026-01-27T05:12:59.896881Z", "modified": "2026-01-27T05:12:59.896881Z", "relationship_type": "indicates", "source_ref": "indicator--416d356d-9a49-4ae4-b509-912fe06a8dbb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3be5390-a389-4aa7-bebd-c2cd78d642ad", "created": "2026-01-27T05:12:59.897059Z", "modified": "2026-01-27T05:12:59.897059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea39dabcd601407d10389f9924f82e3b6f0cbf78f07f202eb6007369bcc21d53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.897059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--840e9612-37ec-4364-bac2-b4d1d2fe2220", "created": "2026-01-27T05:12:59.897914Z", "modified": "2026-01-27T05:12:59.897914Z", "relationship_type": "indicates", "source_ref": "indicator--a3be5390-a389-4aa7-bebd-c2cd78d642ad", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258613d6-179c-4df7-88e4-8885cea3eff7", "created": "2026-01-27T05:12:59.898093Z", "modified": "2026-01-27T05:12:59.898093Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23ae1191f4d119ecb777b6a8b3c5e0345f1060811ad41f6d679c1c513c98031c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.898093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad4f97b1-0e61-4430-9566-2c041b7fa017", "created": "2026-01-27T05:12:59.898952Z", "modified": "2026-01-27T05:12:59.898952Z", "relationship_type": "indicates", "source_ref": "indicator--258613d6-179c-4df7-88e4-8885cea3eff7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55080533-55e9-4c20-9d20-b10cfb9a7e02", "created": "2026-01-27T05:12:59.899134Z", "modified": "2026-01-27T05:12:59.899134Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf66c6a2d374f6a92efb23851ea186ea2ebe119a62124a8bdceb7e9c5ade68ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.899134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a941721-0d4b-40d3-ba0f-ff2b8a9600ab", "created": "2026-01-27T05:12:59.900187Z", "modified": "2026-01-27T05:12:59.900187Z", "relationship_type": "indicates", "source_ref": "indicator--55080533-55e9-4c20-9d20-b10cfb9a7e02", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b217c63a-572e-4ac6-a822-2c7b6967b79e", "created": "2026-01-27T05:12:59.900363Z", "modified": "2026-01-27T05:12:59.900363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74f4ef7aeb79df11b972d369f18dd15c67c3cb63473f8cd99321b5953dfdc3ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.900363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5bc685a-9daa-4156-9e07-a00fcb7f1272", "created": "2026-01-27T05:12:59.901189Z", "modified": "2026-01-27T05:12:59.901189Z", "relationship_type": "indicates", "source_ref": "indicator--b217c63a-572e-4ac6-a822-2c7b6967b79e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c7d043-b780-4a62-8346-7ba8919f05b4", "created": "2026-01-27T05:12:59.901366Z", "modified": "2026-01-27T05:12:59.901366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='634461e4ad76964922ced08828d9625532a5eaa6f6fe1e4c6d7f1cd365350c74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.901366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae698a4f-e2e2-44eb-9ff7-1c18f7d10480", "created": "2026-01-27T05:12:59.902193Z", "modified": "2026-01-27T05:12:59.902193Z", "relationship_type": "indicates", "source_ref": "indicator--f1c7d043-b780-4a62-8346-7ba8919f05b4", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9120067f-8ffe-4406-8f30-10300defeb99", "created": "2026-01-27T05:12:59.902369Z", "modified": "2026-01-27T05:12:59.902369Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94e18a9df302aa032db37fc26035c86d830425f54c14cf7439112827fb27211a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.902369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2410c2a3-d0e8-4627-8bbb-2e9cece3dcd3", "created": "2026-01-27T05:12:59.9032Z", "modified": "2026-01-27T05:12:59.9032Z", "relationship_type": "indicates", "source_ref": "indicator--9120067f-8ffe-4406-8f30-10300defeb99", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4afb36c-bf53-425d-8bf2-de0596d0888b", "created": "2026-01-27T05:12:59.903374Z", "modified": "2026-01-27T05:12:59.903374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4abe6d883fde6edbc61112d9f52c75dfccfaba24cb901a5592358e1876f6b63c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.903374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ce463c9-557a-4357-a461-bb53c61245d5", "created": "2026-01-27T05:12:59.904213Z", "modified": "2026-01-27T05:12:59.904213Z", "relationship_type": "indicates", "source_ref": "indicator--e4afb36c-bf53-425d-8bf2-de0596d0888b", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb334024-6f99-46b6-b4c0-00dffd5ffba6", "created": "2026-01-27T05:12:59.904396Z", "modified": "2026-01-27T05:12:59.904396Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='889f3a02114ddaf13744814e8c2dbbd2a09763233ce7a7d754a0e81522e63a21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.904396Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea3070d8-9892-437a-b6d4-8c196991b0cd", "created": "2026-01-27T05:12:59.905228Z", "modified": "2026-01-27T05:12:59.905228Z", "relationship_type": "indicates", "source_ref": "indicator--eb334024-6f99-46b6-b4c0-00dffd5ffba6", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde3607e-daea-4ea9-a255-83dbc31293ed", "created": "2026-01-27T05:12:59.905404Z", "modified": "2026-01-27T05:12:59.905404Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d47c8dea59b28cf7a102eb7f8619bf78575b44647ac4d03592683f75ff562370']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.905404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00ab3a32-2dc5-4679-8d92-970e105c1dae", "created": "2026-01-27T05:12:59.906251Z", "modified": "2026-01-27T05:12:59.906251Z", "relationship_type": "indicates", "source_ref": "indicator--dde3607e-daea-4ea9-a255-83dbc31293ed", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96f56db-a544-47ad-a54d-c83e059120f8", "created": "2026-01-27T05:12:59.906436Z", "modified": "2026-01-27T05:12:59.906436Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd4bf12105b2fa82f9e503eb716c840e9b0c46e9af056c2f494e93bacf17f8c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.906436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b450f323-dae0-49b5-ac2b-749a8b00eed3", "created": "2026-01-27T05:12:59.907271Z", "modified": "2026-01-27T05:12:59.907271Z", "relationship_type": "indicates", "source_ref": "indicator--c96f56db-a544-47ad-a54d-c83e059120f8", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e49c16c-ec32-4ee7-b8c5-c58956872337", "created": "2026-01-27T05:12:59.907445Z", "modified": "2026-01-27T05:12:59.907445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b2961b5fb0ddbd70ef6745c0fc7708a32d6576c964b5e05628e5b6dd4b1ad40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.907445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d68ca7eb-5ea3-4f42-b87a-103145b9eb74", "created": "2026-01-27T05:12:59.908409Z", "modified": "2026-01-27T05:12:59.908409Z", "relationship_type": "indicates", "source_ref": "indicator--2e49c16c-ec32-4ee7-b8c5-c58956872337", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c827e17-c6ce-460e-b961-1ad0ef323526", "created": "2026-01-27T05:12:59.908593Z", "modified": "2026-01-27T05:12:59.908593Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c478df25642ef866dc69779f52bd7c72e6f1f85256f30d958beb7fa321c2511']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.908593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a679dbcb-4105-499d-a058-5b8ab4a7db70", "created": "2026-01-27T05:12:59.90943Z", "modified": "2026-01-27T05:12:59.90943Z", "relationship_type": "indicates", "source_ref": "indicator--1c827e17-c6ce-460e-b961-1ad0ef323526", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19cea15-b9ed-41f5-b9c0-9266ce949517", "created": "2026-01-27T05:12:59.909607Z", "modified": "2026-01-27T05:12:59.909607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21f6c21f2711657788f3c21ddde7908a4aeae1a184bc99312b5e53e4aae5e387']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.909607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c5108f6-02b4-4c5d-998e-0c77f0aa683c", "created": "2026-01-27T05:12:59.910441Z", "modified": "2026-01-27T05:12:59.910441Z", "relationship_type": "indicates", "source_ref": "indicator--e19cea15-b9ed-41f5-b9c0-9266ce949517", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a6a984-0063-44db-beca-7008c04acde7", "created": "2026-01-27T05:12:59.910618Z", "modified": "2026-01-27T05:12:59.910618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdc71e5343eb64330b6ebd3a779941c39498b3cae42445d38032d1ebd0b6d5e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.910618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecdb6303-9603-4723-8a3f-0f194efd50d0", "created": "2026-01-27T05:12:59.911447Z", "modified": "2026-01-27T05:12:59.911447Z", "relationship_type": "indicates", "source_ref": "indicator--37a6a984-0063-44db-beca-7008c04acde7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68648b9c-d065-44b7-9461-23cc69c3c537", "created": "2026-01-27T05:12:59.911623Z", "modified": "2026-01-27T05:12:59.911623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccba6153005cde4e21a7f6ef61b539e5aa54e6ac1124f5aa53ac78f44eb0d9b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.911623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65b76f9f-45b3-4b59-acc8-d3c77f741e56", "created": "2026-01-27T05:12:59.912452Z", "modified": "2026-01-27T05:12:59.912452Z", "relationship_type": "indicates", "source_ref": "indicator--68648b9c-d065-44b7-9461-23cc69c3c537", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d4aba2-9071-4863-814b-08f66ae10abf", "created": "2026-01-27T05:12:59.912634Z", "modified": "2026-01-27T05:12:59.912634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fc00da3101f237d1354af1be897fff7c03578637d8151c863efcc26c613de95a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.912634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9586e5d-e2ba-4735-936b-de3df5606238", "created": "2026-01-27T05:12:59.913498Z", "modified": "2026-01-27T05:12:59.913498Z", "relationship_type": "indicates", "source_ref": "indicator--f5d4aba2-9071-4863-814b-08f66ae10abf", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab99e26-fa4d-4b00-a4eb-b61c2b55e678", "created": "2026-01-27T05:12:59.913673Z", "modified": "2026-01-27T05:12:59.913673Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad8d0ce4e319e040e6b934e20c55c8c5f92b59ee261e55911aa2494fcdd2cccc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.913673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f04f4e04-669e-4ce9-94ae-e1c243b2dabc", "created": "2026-01-27T05:12:59.914504Z", "modified": "2026-01-27T05:12:59.914504Z", "relationship_type": "indicates", "source_ref": "indicator--bab99e26-fa4d-4b00-a4eb-b61c2b55e678", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbb0133-59e5-475c-a0fc-09d4c3695a85", "created": "2026-01-27T05:12:59.914678Z", "modified": "2026-01-27T05:12:59.914678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='569686b2405f58cefe0e4caa057740e9afde7a9d87e14507e740541242284dec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.914678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--416b9697-ec7f-41cc-9c11-12ae4d43d8c7", "created": "2026-01-27T05:12:59.915544Z", "modified": "2026-01-27T05:12:59.915544Z", "relationship_type": "indicates", "source_ref": "indicator--9fbb0133-59e5-475c-a0fc-09d4c3695a85", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bef1014-f9a7-4757-8fdf-2c381b5c5f42", "created": "2026-01-27T05:12:59.915725Z", "modified": "2026-01-27T05:12:59.915725Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e6bd874ec39b692e59dccc334ff6f047030c4bc3843ab7003bc6088ca720639c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.915725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--444c80e1-a0bb-43bf-b51c-996b565f7f6a", "created": "2026-01-27T05:12:59.916595Z", "modified": "2026-01-27T05:12:59.916595Z", "relationship_type": "indicates", "source_ref": "indicator--4bef1014-f9a7-4757-8fdf-2c381b5c5f42", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd9db2e-e66f-473a-83e5-d3db3f89b9bb", "created": "2026-01-27T05:12:59.916789Z", "modified": "2026-01-27T05:12:59.916789Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed35de1346634a83394b5cfdaa79fecc59bcdbeea742efb7022b3f606e19fbeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.916789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--176ebf8a-cbe4-43e6-97b5-dafc5fdcbffb", "created": "2026-01-27T05:12:59.917728Z", "modified": "2026-01-27T05:12:59.917728Z", "relationship_type": "indicates", "source_ref": "indicator--cfd9db2e-e66f-473a-83e5-d3db3f89b9bb", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fb1b02-b0f6-44d4-bf3b-78251571a941", "created": "2026-01-27T05:12:59.917921Z", "modified": "2026-01-27T05:12:59.917921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d08adb83e47cffb0aa54e11937eb020d9b7afff068c7d46600acaef0560b102d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.917921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90881a78-8f0a-4e20-b336-6e7689f39537", "created": "2026-01-27T05:12:59.918732Z", "modified": "2026-01-27T05:12:59.918732Z", "relationship_type": "indicates", "source_ref": "indicator--b9fb1b02-b0f6-44d4-bf3b-78251571a941", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647b8dee-3506-449b-8744-68c7f86ce724", "created": "2026-01-27T05:12:59.918928Z", "modified": "2026-01-27T05:12:59.918928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d835e22aacfa5934d6ebd84e58006dde2811d80330ed19a738dfee2f006132b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.918928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3382ddbf-037a-4199-800f-023606f2ae4c", "created": "2026-01-27T05:12:59.919761Z", "modified": "2026-01-27T05:12:59.919761Z", "relationship_type": "indicates", "source_ref": "indicator--647b8dee-3506-449b-8744-68c7f86ce724", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1000c198-b366-4424-9a8d-cb392b4dbeec", "created": "2026-01-27T05:12:59.919939Z", "modified": "2026-01-27T05:12:59.919939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='04abe757b1cac8e9d61010906b8067e6bcf2530f8dc1d7a5a9004ee2b02ce546']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.919939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cea33704-a32e-4ea2-b997-f473014fdad2", "created": "2026-01-27T05:12:59.920771Z", "modified": "2026-01-27T05:12:59.920771Z", "relationship_type": "indicates", "source_ref": "indicator--1000c198-b366-4424-9a8d-cb392b4dbeec", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df7b0b0-204b-42ef-9c02-2352121a8618", "created": "2026-01-27T05:12:59.920949Z", "modified": "2026-01-27T05:12:59.920949Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ad54dd356c77d70e5463eb4abdff4b152e494e74a59292c5200453980b1bcb3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.920949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2ae114c-1081-47e8-b94c-02aac5f42421", "created": "2026-01-27T05:12:59.921785Z", "modified": "2026-01-27T05:12:59.921785Z", "relationship_type": "indicates", "source_ref": "indicator--6df7b0b0-204b-42ef-9c02-2352121a8618", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d29d8f-0f30-4e09-aaad-46d1527a8028", "created": "2026-01-27T05:12:59.921971Z", "modified": "2026-01-27T05:12:59.921971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6ae9663d1b19c24535aeaaab2e30850127678156714c5ecfa57de344c6bc587']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.921971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--259eb93a-413c-47ff-8158-5ce470df0c96", "created": "2026-01-27T05:12:59.922801Z", "modified": "2026-01-27T05:12:59.922801Z", "relationship_type": "indicates", "source_ref": "indicator--a2d29d8f-0f30-4e09-aaad-46d1527a8028", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff955a05-a982-4c3d-9cfd-a6179414f1e7", "created": "2026-01-27T05:12:59.922977Z", "modified": "2026-01-27T05:12:59.922977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ea39df6e6d68aadeedbf3058e50d3dedd388c1ce5b580e0a1afd90156ed10c73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.922977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f13be96-c7e1-49b9-acd9-3c80dc94e637", "created": "2026-01-27T05:12:59.92383Z", "modified": "2026-01-27T05:12:59.92383Z", "relationship_type": "indicates", "source_ref": "indicator--ff955a05-a982-4c3d-9cfd-a6179414f1e7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b43613-59ad-42f2-b4fa-023f9718a041", "created": "2026-01-27T05:12:59.924006Z", "modified": "2026-01-27T05:12:59.924006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08539a1c6b48a5b5a080f9bc74dcd6a473a1f94dfd478705f5a385f667178e4f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.924006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6f333b0-9597-4e56-8ff5-9820530f49fc", "created": "2026-01-27T05:12:59.924839Z", "modified": "2026-01-27T05:12:59.924839Z", "relationship_type": "indicates", "source_ref": "indicator--52b43613-59ad-42f2-b4fa-023f9718a041", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4ae782-7571-4263-a974-c713322321ec", "created": "2026-01-27T05:12:59.925014Z", "modified": "2026-01-27T05:12:59.925014Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c174af86a5cd60e1b6869c596eca0e7e41056736c6834b73799983ce5da3dd15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.925014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5766432-5d99-43c0-9b29-1aa10a33f6c6", "created": "2026-01-27T05:12:59.925855Z", "modified": "2026-01-27T05:12:59.925855Z", "relationship_type": "indicates", "source_ref": "indicator--fd4ae782-7571-4263-a974-c713322321ec", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d383fc4-81c9-4b3c-aff6-3cf9a93cd755", "created": "2026-01-27T05:12:59.926032Z", "modified": "2026-01-27T05:12:59.926032Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37921be90c512bb77cdfe27424008ede319551b4f76d62618ab01fd661342775']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.926032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85e4a1ce-cd80-484f-b5d1-a09f8d82948d", "created": "2026-01-27T05:12:59.926988Z", "modified": "2026-01-27T05:12:59.926988Z", "relationship_type": "indicates", "source_ref": "indicator--1d383fc4-81c9-4b3c-aff6-3cf9a93cd755", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ae4687-bd47-427a-82a2-567b0079a0c7", "created": "2026-01-27T05:12:59.927166Z", "modified": "2026-01-27T05:12:59.927166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='046a837cffe19580034be1cb421545e02b173f8d5a091f7e6d69b7c0c559c468']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.927166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2145f33c-b043-4363-84e8-a2fcabd264b7", "created": "2026-01-27T05:12:59.928002Z", "modified": "2026-01-27T05:12:59.928002Z", "relationship_type": "indicates", "source_ref": "indicator--44ae4687-bd47-427a-82a2-567b0079a0c7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f1b322-ebdf-44aa-8cf9-dd276af78f07", "created": "2026-01-27T05:12:59.928178Z", "modified": "2026-01-27T05:12:59.928178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8905ebaf922c371624800306e39b9e6b227183db4eeaaa0c892c1284516e1b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.928178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbf5e917-5b32-4c62-88b9-1ce9dc07534a", "created": "2026-01-27T05:12:59.929013Z", "modified": "2026-01-27T05:12:59.929013Z", "relationship_type": "indicates", "source_ref": "indicator--77f1b322-ebdf-44aa-8cf9-dd276af78f07", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d601e2-ab61-46de-9876-8ff53592c553", "created": "2026-01-27T05:12:59.929188Z", "modified": "2026-01-27T05:12:59.929188Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f4cf3c62d3ffc4b765b2ac35c9bd23d13cbaf126c6052cb1991c27a152c1cb02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.929188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0313120-ca07-4f9b-a6a7-43e854a2a1ce", "created": "2026-01-27T05:12:59.930029Z", "modified": "2026-01-27T05:12:59.930029Z", "relationship_type": "indicates", "source_ref": "indicator--c2d601e2-ab61-46de-9876-8ff53592c553", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edeaaf0-c49d-4b01-9cef-6865e1594c84", "created": "2026-01-27T05:12:59.930203Z", "modified": "2026-01-27T05:12:59.930203Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fab561bbc37225394bed700a591bb5a031256dc2407877069c33a77d251639db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.930203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5900f23-ce6b-4afc-8c0a-522c281bd3f4", "created": "2026-01-27T05:12:59.931073Z", "modified": "2026-01-27T05:12:59.931073Z", "relationship_type": "indicates", "source_ref": "indicator--7edeaaf0-c49d-4b01-9cef-6865e1594c84", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccac6ca-07af-4d06-80e6-d6f3093563b2", "created": "2026-01-27T05:12:59.931263Z", "modified": "2026-01-27T05:12:59.931263Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spappm_mondow.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.931263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--786486d9-dcd6-4e91-a505-5b3753472895", "created": "2026-01-27T05:12:59.931978Z", "modified": "2026-01-27T05:12:59.931978Z", "relationship_type": "indicates", "source_ref": "indicator--4ccac6ca-07af-4d06-80e6-d6f3093563b2", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af05e91a-01ae-4562-9e55-f2b6bc895671", "created": "2026-01-27T05:12:59.932184Z", "modified": "2026-01-27T05:12:59.932184Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.monspap.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.932184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--056287a5-54b7-4f05-a16c-54d742c6fa42", "created": "2026-01-27T05:12:59.93291Z", "modified": "2026-01-27T05:12:59.93291Z", "relationship_type": "indicates", "source_ref": "indicator--af05e91a-01ae-4562-9e55-f2b6bc895671", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18aa1bd8-16b9-438e-9309-0e4a0be07258", "created": "2026-01-27T05:12:59.933115Z", "modified": "2026-01-27T05:12:59.933115Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.snapchat.trmonap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.933115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42b875dd-56ae-431e-9055-b43fe9e73a43", "created": "2026-01-27T05:12:59.93387Z", "modified": "2026-01-27T05:12:59.93387Z", "relationship_type": "indicates", "source_ref": "indicator--18aa1bd8-16b9-438e-9309-0e4a0be07258", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4d115c-1036-4661-8d00-44c2668ad1e7", "created": "2026-01-27T05:12:59.934066Z", "modified": "2026-01-27T05:12:59.934066Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.snapch.monabcab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.934066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efb6d74f-a76c-4f1b-adb6-3e60df0e1902", "created": "2026-01-27T05:12:59.934729Z", "modified": "2026-01-27T05:12:59.934729Z", "relationship_type": "indicates", "source_ref": "indicator--7a4d115c-1036-4661-8d00-44c2668ad1e7", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc880f5-2d12-45e2-8cb8-583554a9567e", "created": "2026-01-27T05:12:59.934926Z", "modified": "2026-01-27T05:12:59.934926Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4A3742E0C96AFB91954D613AAA637076750E5A0B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.934926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2cafdc7-a380-4eda-9da1-6c7faa2370df", "created": "2026-01-27T05:12:59.935842Z", "modified": "2026-01-27T05:12:59.935842Z", "relationship_type": "indicates", "source_ref": "indicator--6dc880f5-2d12-45e2-8cb8-583554a9567e", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca8ba2c-31d0-4423-adaf-8fdac80f3127", "created": "2026-01-27T05:12:59.936021Z", "modified": "2026-01-27T05:12:59.936021Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FC5A4AD10F0686AA8EAE2C08BA13CC451CBD6037']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.936021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e910e9d-4200-4206-87a4-986a0216d507", "created": "2026-01-27T05:12:59.936802Z", "modified": "2026-01-27T05:12:59.936802Z", "relationship_type": "indicates", "source_ref": "indicator--eca8ba2c-31d0-4423-adaf-8fdac80f3127", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ba97fe-5437-44cb-a5b9-748b87bf2ece", "created": "2026-01-27T05:12:59.936981Z", "modified": "2026-01-27T05:12:59.936981Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='892C4F172AD3262EC398B40BBF8130C6421040A1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.936981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82cbf9d8-1132-472c-958f-9109589d8e83", "created": "2026-01-27T05:12:59.937763Z", "modified": "2026-01-27T05:12:59.937763Z", "relationship_type": "indicates", "source_ref": "indicator--34ba97fe-5437-44cb-a5b9-748b87bf2ece", "target_ref": "malware--452ccb3b-8fc1-4c81-8d9e-b53110f563b8"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6", "created": "2026-01-27T05:12:59.937945Z", "modified": "2026-01-27T05:12:59.937945Z", "name": "bark", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fe2a5d-a17d-4e94-89c2-b849bf2336c4", "created": "2026-01-27T05:12:59.93812Z", "modified": "2026-01-27T05:12:59.93812Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bark-android-media.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.93812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b225bcb-5e36-491a-9124-088091cc2758", "created": "2026-01-27T05:12:59.938846Z", "modified": "2026-01-27T05:12:59.938846Z", "relationship_type": "indicates", "source_ref": "indicator--26fe2a5d-a17d-4e94-89c2-b849bf2336c4", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f048ac-2689-4e25-8117-f526c3cb061e", "created": "2026-01-27T05:12:59.939028Z", "modified": "2026-01-27T05:12:59.939028Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.bark.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.939028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f919ab0-6b1b-44aa-b555-a21fe27751fa", "created": "2026-01-27T05:12:59.939685Z", "modified": "2026-01-27T05:12:59.939685Z", "relationship_type": "indicates", "source_ref": "indicator--65f048ac-2689-4e25-8117-f526c3cb061e", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e749086d-daf3-4b08-aa1b-bc1a93cc3f21", "created": "2026-01-27T05:12:59.939878Z", "modified": "2026-01-27T05:12:59.939878Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bark.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.939878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61d5124a-7da0-48fd-b057-9809e636eeda", "created": "2026-01-27T05:12:59.940544Z", "modified": "2026-01-27T05:12:59.940544Z", "relationship_type": "indicates", "source_ref": "indicator--e749086d-daf3-4b08-aa1b-bc1a93cc3f21", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f660fa0-9b31-44ea-97fc-d73b1dfbd0ba", "created": "2026-01-27T05:12:59.940718Z", "modified": "2026-01-27T05:12:59.940718Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.bark.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.940718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dee05562-6222-4fa7-8843-c2e4ee8cd6e2", "created": "2026-01-27T05:12:59.9414Z", "modified": "2026-01-27T05:12:59.9414Z", "relationship_type": "indicates", "source_ref": "indicator--0f660fa0-9b31-44ea-97fc-d73b1dfbd0ba", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc0a961-f9e5-4754-9614-2398a1af4cb2", "created": "2026-01-27T05:12:59.941574Z", "modified": "2026-01-27T05:12:59.941574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d36a693ab2b8de1049231e3e69238a9834dd4b5a2658ed672f8a94e971cdac0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.941574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e1c1ee4-37ae-4c22-b802-cdbd2d08ae1a", "created": "2026-01-27T05:12:59.942414Z", "modified": "2026-01-27T05:12:59.942414Z", "relationship_type": "indicates", "source_ref": "indicator--1cc0a961-f9e5-4754-9614-2398a1af4cb2", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26fbef4-be91-4245-b913-c055c65fc915", "created": "2026-01-27T05:12:59.942589Z", "modified": "2026-01-27T05:12:59.942589Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='056214972afaad012b421bbf196b8f2252e99563b7c32c0ba326b2f0989c5b47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.942589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbd14495-ee5b-4c83-994e-3f183f6b49a9", "created": "2026-01-27T05:12:59.943434Z", "modified": "2026-01-27T05:12:59.943434Z", "relationship_type": "indicates", "source_ref": "indicator--d26fbef4-be91-4245-b913-c055c65fc915", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6172ee54-72e7-4d6d-9a78-27750a013120", "created": "2026-01-27T05:12:59.943609Z", "modified": "2026-01-27T05:12:59.943609Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15e1f4f4aba5f8b7a6a7240e8b4de60457ba98deb148d8173b52dba85970bee3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.943609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8707e552-231f-4b72-a8e9-a28b113ea930", "created": "2026-01-27T05:12:59.944556Z", "modified": "2026-01-27T05:12:59.944556Z", "relationship_type": "indicates", "source_ref": "indicator--6172ee54-72e7-4d6d-9a78-27750a013120", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f529a147-c884-4de4-b13b-fd3226667e75", "created": "2026-01-27T05:12:59.944757Z", "modified": "2026-01-27T05:12:59.944757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6429aea12fce67d62396222506b8b1b02ad18b14eaf78e10a00d836d9fe8954a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.944757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49a083ae-fed3-4962-90d4-d5a4ad9eff97", "created": "2026-01-27T05:12:59.945587Z", "modified": "2026-01-27T05:12:59.945587Z", "relationship_type": "indicates", "source_ref": "indicator--f529a147-c884-4de4-b13b-fd3226667e75", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35febb86-ceac-4c1d-a7f8-95ad2acc1897", "created": "2026-01-27T05:12:59.945779Z", "modified": "2026-01-27T05:12:59.945779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='718b0cb36352f59b4749b26e7851978f1dc0fe24228711ae4f21fe62a41b314a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.945779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2874d0bb-1857-4bfb-a9f1-4f294a0f3c6f", "created": "2026-01-27T05:12:59.946594Z", "modified": "2026-01-27T05:12:59.946594Z", "relationship_type": "indicates", "source_ref": "indicator--35febb86-ceac-4c1d-a7f8-95ad2acc1897", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8ed5e1-e735-466a-a2bf-c08db56af235", "created": "2026-01-27T05:12:59.946851Z", "modified": "2026-01-27T05:12:59.946851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b574045c8983e1ca4c9a0a0103844296994ecc304cada4d9830cd3427d270b54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.946851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbce10e7-65cc-4082-a945-d1e5154aaf48", "created": "2026-01-27T05:12:59.94774Z", "modified": "2026-01-27T05:12:59.94774Z", "relationship_type": "indicates", "source_ref": "indicator--9b8ed5e1-e735-466a-a2bf-c08db56af235", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488d04e8-585f-45f0-95ff-401e32972833", "created": "2026-01-27T05:12:59.947963Z", "modified": "2026-01-27T05:12:59.947963Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='835514ca64e0930f805eaf1d815ebef083d3ae20db42909f0ea4f8763d1a1db5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.947963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4c10e9c-b3da-4a02-ba16-467f3002cd39", "created": "2026-01-27T05:12:59.948828Z", "modified": "2026-01-27T05:12:59.948828Z", "relationship_type": "indicates", "source_ref": "indicator--488d04e8-585f-45f0-95ff-401e32972833", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36dded5-c894-483e-ae9c-076f6fc3e938", "created": "2026-01-27T05:12:59.949007Z", "modified": "2026-01-27T05:12:59.949007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb381588f8d94518930f0cfd4f2b70810eddc1e0cff2bfd1e5981f5615d7a0a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.949007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0218be8-041a-464b-84c0-2b76fedd49e8", "created": "2026-01-27T05:12:59.949854Z", "modified": "2026-01-27T05:12:59.949854Z", "relationship_type": "indicates", "source_ref": "indicator--f36dded5-c894-483e-ae9c-076f6fc3e938", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bf64ef-aa68-422c-bc98-4f4c095efb30", "created": "2026-01-27T05:12:59.950033Z", "modified": "2026-01-27T05:12:59.950033Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.pt.bark']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.950033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5ae1dc3-bc38-4a68-bd3a-18099a48e8ee", "created": "2026-01-27T05:12:59.95068Z", "modified": "2026-01-27T05:12:59.95068Z", "relationship_type": "indicates", "source_ref": "indicator--b6bf64ef-aa68-422c-bc98-4f4c095efb30", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036c72d2-9317-4b4f-b13a-f6ed63196e5e", "created": "2026-01-27T05:12:59.950873Z", "modified": "2026-01-27T05:12:59.950873Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='473F919A69BBAD3457AF2F0E3AFC34E513F103F1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.950873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc854783-f409-4f96-87a9-2c46b49f0a49", "created": "2026-01-27T05:12:59.951647Z", "modified": "2026-01-27T05:12:59.951647Z", "relationship_type": "indicates", "source_ref": "indicator--036c72d2-9317-4b4f-b13a-f6ed63196e5e", "target_ref": "malware--9fcc91a8-ec81-4e53-8c1f-9b33044ec3f6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d5685db3-730e-4509-998f-4dd4c204b535", "created": "2026-01-27T05:12:59.951836Z", "modified": "2026-01-27T05:12:59.951836Z", "name": "SpyLive360", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb58bce-24b1-41cb-ba71-1c71329e071e", "created": "2026-01-27T05:12:59.952009Z", "modified": "2026-01-27T05:12:59.952009Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s1.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.952009Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--442aa271-1a8c-475d-950f-91a39ba3b0bb", "created": "2026-01-27T05:12:59.952822Z", "modified": "2026-01-27T05:12:59.952822Z", "relationship_type": "indicates", "source_ref": "indicator--beb58bce-24b1-41cb-ba71-1c71329e071e", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1270a7b0-f42e-4967-af52-fbe1d3f56dde", "created": "2026-01-27T05:12:59.953002Z", "modified": "2026-01-27T05:12:59.953002Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s2.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.953002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77faab24-b5e7-41ef-91fb-4a740bc39bf0", "created": "2026-01-27T05:12:59.953682Z", "modified": "2026-01-27T05:12:59.953682Z", "relationship_type": "indicates", "source_ref": "indicator--1270a7b0-f42e-4967-af52-fbe1d3f56dde", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f9d959-7b5f-4b6d-9b0c-c8983b999bb6", "created": "2026-01-27T05:12:59.953877Z", "modified": "2026-01-27T05:12:59.953877Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s3.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.953877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec0b15b5-f78f-4c8e-8aef-d7d025c21cd2", "created": "2026-01-27T05:12:59.954543Z", "modified": "2026-01-27T05:12:59.954543Z", "relationship_type": "indicates", "source_ref": "indicator--b1f9d959-7b5f-4b6d-9b0c-c8983b999bb6", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce30c9b7-2a3a-41dc-998f-a656d429ce5a", "created": "2026-01-27T05:12:59.954717Z", "modified": "2026-01-27T05:12:59.954717Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.954717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a056c76-39f7-4618-a9d2-266b694c414e", "created": "2026-01-27T05:12:59.955403Z", "modified": "2026-01-27T05:12:59.955403Z", "relationship_type": "indicates", "source_ref": "indicator--ce30c9b7-2a3a-41dc-998f-a656d429ce5a", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68b5511-86fb-4b1c-8f2d-542f8e851302", "created": "2026-01-27T05:12:59.955577Z", "modified": "2026-01-27T05:12:59.955577Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sl360-7ba65.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.955577Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6684ba47-0e35-4fe0-b813-cc3eb99bcd3b", "created": "2026-01-27T05:12:59.956275Z", "modified": "2026-01-27T05:12:59.956275Z", "relationship_type": "indicates", "source_ref": "indicator--f68b5511-86fb-4b1c-8f2d-542f8e851302", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4741da2-8f68-43d0-9327-0279e67824c0", "created": "2026-01-27T05:12:59.95645Z", "modified": "2026-01-27T05:12:59.95645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.95645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7bc2116-bbef-471a-948c-cbfee09d2029", "created": "2026-01-27T05:12:59.957129Z", "modified": "2026-01-27T05:12:59.957129Z", "relationship_type": "indicates", "source_ref": "indicator--d4741da2-8f68-43d0-9327-0279e67824c0", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b1f0ac-237c-4200-8096-efde9ba97fe0", "created": "2026-01-27T05:12:59.957306Z", "modified": "2026-01-27T05:12:59.957306Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spylive360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.957306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf32a6ad-3ede-49f1-82ae-cc7a311f965b", "created": "2026-01-27T05:12:59.958005Z", "modified": "2026-01-27T05:12:59.958005Z", "relationship_type": "indicates", "source_ref": "indicator--41b1f0ac-237c-4200-8096-efde9ba97fe0", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df37440-0ee4-46f8-a2ab-c022dc189936", "created": "2026-01-27T05:12:59.958186Z", "modified": "2026-01-27T05:12:59.958186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe3b4aa318a7f9c16c9afb8dda2d20fa92ce3c2e16573bffb5b7c21c4330e71f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.958186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcc20b02-85ce-4cc9-8a14-08d27ab05807", "created": "2026-01-27T05:12:59.95902Z", "modified": "2026-01-27T05:12:59.95902Z", "relationship_type": "indicates", "source_ref": "indicator--9df37440-0ee4-46f8-a2ab-c022dc189936", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cbfd8df-f4c6-4387-a454-fb51b2dec835", "created": "2026-01-27T05:12:59.959201Z", "modified": "2026-01-27T05:12:59.959201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac4d5c7dc1bfd8cb544360da6b48530d69f784132ed76e340f27d7f6c93db42d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.959201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--528e98ea-9c44-4ec4-99d8-2950ffb8f22b", "created": "2026-01-27T05:12:59.960042Z", "modified": "2026-01-27T05:12:59.960042Z", "relationship_type": "indicates", "source_ref": "indicator--8cbfd8df-f4c6-4387-a454-fb51b2dec835", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1514e888-5fde-4460-bf9e-bb1148b3a212", "created": "2026-01-27T05:12:59.960219Z", "modified": "2026-01-27T05:12:59.960219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ffa1751b7677a762d006f4c8fed57253cbf592db98e1914c252965a8de621cb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.960219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7be6bcfe-e850-49de-a133-3945da49a1f2", "created": "2026-01-27T05:12:59.961176Z", "modified": "2026-01-27T05:12:59.961176Z", "relationship_type": "indicates", "source_ref": "indicator--1514e888-5fde-4460-bf9e-bb1148b3a212", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3d8038-4ec1-474f-9c24-e8be07660695", "created": "2026-01-27T05:12:59.961357Z", "modified": "2026-01-27T05:12:59.961357Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sl360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.961357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11f37b41-ed53-4ce2-8c07-7c6dda42abaa", "created": "2026-01-27T05:12:59.962028Z", "modified": "2026-01-27T05:12:59.962028Z", "relationship_type": "indicates", "source_ref": "indicator--9e3d8038-4ec1-474f-9c24-e8be07660695", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69211c11-4fad-4adf-b852-e5e4d363a648", "created": "2026-01-27T05:12:59.962207Z", "modified": "2026-01-27T05:12:59.962207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.itqredn8dzrl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.962207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5d787b7-75f5-4a19-bd95-0253a5b82097", "created": "2026-01-27T05:12:59.962941Z", "modified": "2026-01-27T05:12:59.962941Z", "relationship_type": "indicates", "source_ref": "indicator--69211c11-4fad-4adf-b852-e5e4d363a648", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8147a26-49be-4d8d-9407-40595b0d07fb", "created": "2026-01-27T05:12:59.963147Z", "modified": "2026-01-27T05:12:59.963147Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wifi0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.963147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86627bb3-1c12-47b4-89c7-eba417c2ba82", "created": "2026-01-27T05:12:59.96382Z", "modified": "2026-01-27T05:12:59.96382Z", "relationship_type": "indicates", "source_ref": "indicator--a8147a26-49be-4d8d-9407-40595b0d07fb", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bb37f9-eb1f-43dc-8f86-6c6c5698ae5d", "created": "2026-01-27T05:12:59.964007Z", "modified": "2026-01-27T05:12:59.964007Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.w0f0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.964007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ca45a5f-1715-44f6-9fe4-f2a14ce61109", "created": "2026-01-27T05:12:59.964653Z", "modified": "2026-01-27T05:12:59.964653Z", "relationship_type": "indicates", "source_ref": "indicator--c8bb37f9-eb1f-43dc-8f86-6c6c5698ae5d", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336823db-acc1-45ef-8282-e36edfa632e4", "created": "2026-01-27T05:12:59.964846Z", "modified": "2026-01-27T05:12:59.964846Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.w1f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.964846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dff9e528-43dc-4026-b8cd-d94596ef3474", "created": "2026-01-27T05:12:59.965492Z", "modified": "2026-01-27T05:12:59.965492Z", "relationship_type": "indicates", "source_ref": "indicator--336823db-acc1-45ef-8282-e36edfa632e4", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8044e29-711a-4968-89a2-32f34d6c5ede", "created": "2026-01-27T05:12:59.965666Z", "modified": "2026-01-27T05:12:59.965666Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='73BF44A503427F7682C7136B109631E3BE4114DE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.965666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37b0f072-590d-417f-87a0-e32632198bdc", "created": "2026-01-27T05:12:59.966456Z", "modified": "2026-01-27T05:12:59.966456Z", "relationship_type": "indicates", "source_ref": "indicator--a8044e29-711a-4968-89a2-32f34d6c5ede", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6d155d-159c-4a92-a97b-7f854af5bc9a", "created": "2026-01-27T05:12:59.966629Z", "modified": "2026-01-27T05:12:59.966629Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='630BB83172B184A6571126229E2B2DCA2EB4123F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.966629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--068be70b-9d48-4701-91eb-db5c51f1070e", "created": "2026-01-27T05:12:59.967423Z", "modified": "2026-01-27T05:12:59.967423Z", "relationship_type": "indicates", "source_ref": "indicator--6f6d155d-159c-4a92-a97b-7f854af5bc9a", "target_ref": "malware--d5685db3-730e-4509-998f-4dd4c204b535"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297", "created": "2026-01-27T05:12:59.967616Z", "modified": "2026-01-27T05:12:59.967616Z", "name": "XNSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996b0a38-4e4f-48f4-9bf5-a6005d0297d3", "created": "2026-01-27T05:12:59.967804Z", "modified": "2026-01-27T05:12:59.967804Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.967804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04875585-6aa9-4977-a2b1-4f0cfe0f3d1f", "created": "2026-01-27T05:12:59.968467Z", "modified": "2026-01-27T05:12:59.968467Z", "relationship_type": "indicates", "source_ref": "indicator--996b0a38-4e4f-48f4-9bf5-a6005d0297d3", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03e3204-2a52-4704-8d14-2e4b36bef39d", "created": "2026-01-27T05:12:59.968641Z", "modified": "2026-01-27T05:12:59.968641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync.xiz4me.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.968641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f690808d-a221-4469-8e28-fa3fdaa70868", "created": "2026-01-27T05:12:59.969445Z", "modified": "2026-01-27T05:12:59.969445Z", "relationship_type": "indicates", "source_ref": "indicator--d03e3204-2a52-4704-8d14-2e4b36bef39d", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8c44f7-e0da-452a-a229-c75563475746", "created": "2026-01-27T05:12:59.969623Z", "modified": "2026-01-27T05:12:59.969623Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alert.xiz4me.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.969623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f73cba1-0c2f-4063-827e-92bb1027f253", "created": "2026-01-27T05:12:59.970304Z", "modified": "2026-01-27T05:12:59.970304Z", "relationship_type": "indicates", "source_ref": "indicator--4f8c44f7-e0da-452a-a229-c75563475746", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dfb990-3cdd-4a0f-adeb-96883713470f", "created": "2026-01-27T05:12:59.97048Z", "modified": "2026-01-27T05:12:59.97048Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mydwnd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.97048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--424116b1-d79f-48a2-adfa-6ec3673e86e2", "created": "2026-01-27T05:12:59.971154Z", "modified": "2026-01-27T05:12:59.971154Z", "relationship_type": "indicates", "source_ref": "indicator--52dfb990-3cdd-4a0f-adeb-96883713470f", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585b792b-a434-458d-aa6c-dc96ed20d13b", "created": "2026-01-27T05:12:59.971336Z", "modified": "2026-01-27T05:12:59.971336Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mydwnd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.971336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3017984c-a433-422d-a7c3-06c2ecb71869", "created": "2026-01-27T05:12:59.972017Z", "modified": "2026-01-27T05:12:59.972017Z", "relationship_type": "indicates", "source_ref": "indicator--585b792b-a434-458d-aa6c-dc96ed20d13b", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804b959d-9221-4cad-97f7-427f1539b014", "created": "2026-01-27T05:12:59.972193Z", "modified": "2026-01-27T05:12:59.972193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brilliant-flame-585.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.972193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f5bafd0-00a6-435f-9b37-a18b2f2a7512", "created": "2026-01-27T05:12:59.972902Z", "modified": "2026-01-27T05:12:59.972902Z", "relationship_type": "indicates", "source_ref": "indicator--804b959d-9221-4cad-97f7-427f1539b014", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6d3012-7d09-4bdb-8377-1b7ca9327d6b", "created": "2026-01-27T05:12:59.973082Z", "modified": "2026-01-27T05:12:59.973082Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='true-truck-86810.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.973082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab58c93a-03fb-489a-ade3-162268bba3a0", "created": "2026-01-27T05:12:59.973788Z", "modified": "2026-01-27T05:12:59.973788Z", "relationship_type": "indicates", "source_ref": "indicator--ed6d3012-7d09-4bdb-8377-1b7ca9327d6b", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8b9aed-a221-4038-a3df-90f2539a9d77", "created": "2026-01-27T05:12:59.973964Z", "modified": "2026-01-27T05:12:59.973964Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sync.bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.973964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1268b5a0-272a-4edc-8a68-203629d5339e", "created": "2026-01-27T05:12:59.974634Z", "modified": "2026-01-27T05:12:59.974634Z", "relationship_type": "indicates", "source_ref": "indicator--cf8b9aed-a221-4038-a3df-90f2539a9d77", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb5fd02-b67a-463a-a595-253baa119973", "created": "2026-01-27T05:12:59.974824Z", "modified": "2026-01-27T05:12:59.974824Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='asset.bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.974824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62de6470-063e-4a41-b162-81247dff5679", "created": "2026-01-27T05:12:59.975493Z", "modified": "2026-01-27T05:12:59.975493Z", "relationship_type": "indicates", "source_ref": "indicator--ebb5fd02-b67a-463a-a595-253baa119973", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13455353-290e-432e-9c32-1f067526c3cb", "created": "2026-01-27T05:12:59.975665Z", "modified": "2026-01-27T05:12:59.975665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alert.bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.975665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c550270-fa10-4ddd-bed4-2d6c8b50d5c4", "created": "2026-01-27T05:12:59.976354Z", "modified": "2026-01-27T05:12:59.976354Z", "relationship_type": "indicates", "source_ref": "indicator--13455353-290e-432e-9c32-1f067526c3cb", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd98eef-9460-41f0-b750-e90541993a80", "created": "2026-01-27T05:12:59.976526Z", "modified": "2026-01-27T05:12:59.976526Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bk128.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.976526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4af098ce-08ed-457c-a86c-acdac741fb3b", "created": "2026-01-27T05:12:59.977677Z", "modified": "2026-01-27T05:12:59.977677Z", "relationship_type": "indicates", "source_ref": "indicator--ddd98eef-9460-41f0-b750-e90541993a80", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e6846e-4158-4322-abbd-e91d5abf2a41", "created": "2026-01-27T05:12:59.977871Z", "modified": "2026-01-27T05:12:59.977871Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wppspy.tech']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.977871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bee1ff3f-e277-4d61-84a0-492b36939c27", "created": "2026-01-27T05:12:59.978575Z", "modified": "2026-01-27T05:12:59.978575Z", "relationship_type": "indicates", "source_ref": "indicator--72e6846e-4158-4322-abbd-e91d5abf2a41", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa1cd43-4549-4374-8e15-e94710926ce5", "created": "2026-01-27T05:12:59.978786Z", "modified": "2026-01-27T05:12:59.978786Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.978786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c55f706-6d64-4e53-81ef-0f03ae5c0def", "created": "2026-01-27T05:12:59.979483Z", "modified": "2026-01-27T05:12:59.979483Z", "relationship_type": "indicates", "source_ref": "indicator--dfa1cd43-4549-4374-8e15-e94710926ce5", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a253e96-c209-4601-b61e-3de07c87d5ac", "created": "2026-01-27T05:12:59.979665Z", "modified": "2026-01-27T05:12:59.979665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.xnspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.979665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58ceda77-aca8-4260-b917-176b24b9e767", "created": "2026-01-27T05:12:59.980351Z", "modified": "2026-01-27T05:12:59.980351Z", "relationship_type": "indicates", "source_ref": "indicator--2a253e96-c209-4601-b61e-3de07c87d5ac", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52ab92e-37c2-4a39-b0d2-76044aad3251", "created": "2026-01-27T05:12:59.980534Z", "modified": "2026-01-27T05:12:59.980534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52687bd196db137bb7faa99d84c104dc9eb48f2fbfb69af3f5ed3d713095fd65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.980534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b58e945-8803-4f40-a963-1a5600d03648", "created": "2026-01-27T05:12:59.981377Z", "modified": "2026-01-27T05:12:59.981377Z", "relationship_type": "indicates", "source_ref": "indicator--a52ab92e-37c2-4a39-b0d2-76044aad3251", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d781528e-ea4c-4b95-ba44-0c6a5f89e6ac", "created": "2026-01-27T05:12:59.981554Z", "modified": "2026-01-27T05:12:59.981554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='532a61d269dd1e19d7ff75db2b6b35f1bb8a67b3bf219a1f63520e87737e79bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.981554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e81c80ad-3887-477e-a744-41cb1324ba4f", "created": "2026-01-27T05:12:59.982378Z", "modified": "2026-01-27T05:12:59.982378Z", "relationship_type": "indicates", "source_ref": "indicator--d781528e-ea4c-4b95-ba44-0c6a5f89e6ac", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8143ebee-afc8-443d-a2fc-3cd8b3825254", "created": "2026-01-27T05:12:59.982556Z", "modified": "2026-01-27T05:12:59.982556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f23f1638a083b6f2a44cfe766cad2f703b4396b2dab9a0706292583f20b0579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.982556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c3f55f8-1296-4958-af10-dfe27d192b48", "created": "2026-01-27T05:12:59.983407Z", "modified": "2026-01-27T05:12:59.983407Z", "relationship_type": "indicates", "source_ref": "indicator--8143ebee-afc8-443d-a2fc-3cd8b3825254", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c494ae3-a379-49da-85d8-d7341d2148f3", "created": "2026-01-27T05:12:59.983583Z", "modified": "2026-01-27T05:12:59.983583Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9114e561c42ea19b183ef5d8a36e743f2b873874e43d805b11e3753035c7900d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.983583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb8c254d-941d-4daf-992a-ce9b3ccaec86", "created": "2026-01-27T05:12:59.98441Z", "modified": "2026-01-27T05:12:59.98441Z", "relationship_type": "indicates", "source_ref": "indicator--6c494ae3-a379-49da-85d8-d7341d2148f3", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72825fd-dadf-48a0-bce0-4346bd96af82", "created": "2026-01-27T05:12:59.984584Z", "modified": "2026-01-27T05:12:59.984584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9bf9399f29e7d1a551a2a1c5f1072046b94096bd7ea8ccb359db2ad0642a2718']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.984584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--696e24f7-4a9a-40d5-bc1b-7843c2439a24", "created": "2026-01-27T05:12:59.985428Z", "modified": "2026-01-27T05:12:59.985428Z", "relationship_type": "indicates", "source_ref": "indicator--e72825fd-dadf-48a0-bce0-4346bd96af82", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9844494e-0a10-42f7-baa8-e153a58ba213", "created": "2026-01-27T05:12:59.985607Z", "modified": "2026-01-27T05:12:59.985607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8454811237761ef9998e9826a596afffb6d07506c7d7c78168135b4f3387e4c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.985607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--276e5f19-1886-4d30-abc8-36f0452c3540", "created": "2026-01-27T05:12:59.986563Z", "modified": "2026-01-27T05:12:59.986563Z", "relationship_type": "indicates", "source_ref": "indicator--9844494e-0a10-42f7-baa8-e153a58ba213", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d563bc5-2a31-473f-b06d-1ec3a4a19f3b", "created": "2026-01-27T05:12:59.986742Z", "modified": "2026-01-27T05:12:59.986742Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53f8d8f3aed24c4775d45b6a39a74f56a1711a874f76a57f1e2f454d09cca2ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.986742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76e3ae2f-23aa-4b57-83cd-06061a073898", "created": "2026-01-27T05:12:59.987577Z", "modified": "2026-01-27T05:12:59.987577Z", "relationship_type": "indicates", "source_ref": "indicator--2d563bc5-2a31-473f-b06d-1ec3a4a19f3b", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21d8f25-e82c-48dc-915a-534e682da265", "created": "2026-01-27T05:12:59.987767Z", "modified": "2026-01-27T05:12:59.987767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71bb5bdba97dda0d31f800d806474cde6bc048046e04c7fcb4ac45160eb20632']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.987767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb7f50a7-28b9-4060-855f-153fac315d6a", "created": "2026-01-27T05:12:59.988583Z", "modified": "2026-01-27T05:12:59.988583Z", "relationship_type": "indicates", "source_ref": "indicator--c21d8f25-e82c-48dc-915a-534e682da265", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca8b6c7-0a2b-4f8f-aa2e-20eb7d1c28b9", "created": "2026-01-27T05:12:59.988771Z", "modified": "2026-01-27T05:12:59.988771Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='291ab79d3b98067b3a2374df1d12e09b3f46076caa698366b0b443c0f1cca1a0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.988771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64224c43-ce62-40b3-a62f-cf2295435973", "created": "2026-01-27T05:12:59.989589Z", "modified": "2026-01-27T05:12:59.989589Z", "relationship_type": "indicates", "source_ref": "indicator--7ca8b6c7-0a2b-4f8f-aa2e-20eb7d1c28b9", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d2446c-4d17-4f64-807c-bfc6d0320525", "created": "2026-01-27T05:12:59.989776Z", "modified": "2026-01-27T05:12:59.989776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c5feab2d8e94bff833f60281f10b22b2c08ec23ce1eb2a3f125f6cf268268d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.989776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--170abeca-6ff0-4cbe-b5b7-c32d93a38f04", "created": "2026-01-27T05:12:59.990589Z", "modified": "2026-01-27T05:12:59.990589Z", "relationship_type": "indicates", "source_ref": "indicator--70d2446c-4d17-4f64-807c-bfc6d0320525", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c04a00b-fb37-41d7-9791-105bdbc698e7", "created": "2026-01-27T05:12:59.990774Z", "modified": "2026-01-27T05:12:59.990774Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5117edc8842b8790506923c1e43516b7d7e2d2a0ef47ddd30e3cce145632f97c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.990774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e87796d2-8685-4894-a2a4-f9ca04e947f6", "created": "2026-01-27T05:12:59.991593Z", "modified": "2026-01-27T05:12:59.991593Z", "relationship_type": "indicates", "source_ref": "indicator--8c04a00b-fb37-41d7-9791-105bdbc698e7", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb0eba4-360b-4e9a-af46-f8d9b7a66bde", "created": "2026-01-27T05:12:59.991786Z", "modified": "2026-01-27T05:12:59.991786Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.system.task']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.991786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1368b5a5-9b65-40f4-a103-ecc6e41d8300", "created": "2026-01-27T05:12:59.992431Z", "modified": "2026-01-27T05:12:59.992431Z", "relationship_type": "indicates", "source_ref": "indicator--3fb0eba4-360b-4e9a-af46-f8d9b7a66bde", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835ba631-715e-4f6a-a976-16e93f9c71cc", "created": "2026-01-27T05:12:59.992609Z", "modified": "2026-01-27T05:12:59.992609Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.map.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.992609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34ade638-f4ad-4738-b5d6-2ddc9036a836", "created": "2026-01-27T05:12:59.993284Z", "modified": "2026-01-27T05:12:59.993284Z", "relationship_type": "indicates", "source_ref": "indicator--835ba631-715e-4f6a-a976-16e93f9c71cc", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd4d909-7422-4a65-b939-833690a87547", "created": "2026-01-27T05:12:59.993462Z", "modified": "2026-01-27T05:12:59.993462Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.xnspy.dashboard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.993462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4f48039-bc71-47ea-8b44-0bd0de7a199f", "created": "2026-01-27T05:12:59.994139Z", "modified": "2026-01-27T05:12:59.994139Z", "relationship_type": "indicates", "source_ref": "indicator--8fd4d909-7422-4a65-b939-833690a87547", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b2f808-b7e5-4183-9297-c02910bc57d9", "created": "2026-01-27T05:12:59.994347Z", "modified": "2026-01-27T05:12:59.994347Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C276C3B087207C9D3CEEDA766C01E0BDEF7EAC71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.994347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f7e494c-ee44-44a8-a679-324bc5365693", "created": "2026-01-27T05:12:59.995314Z", "modified": "2026-01-27T05:12:59.995314Z", "relationship_type": "indicates", "source_ref": "indicator--05b2f808-b7e5-4183-9297-c02910bc57d9", "target_ref": "malware--0131c3f5-c34c-40eb-a411-c0d573d63297"}, {"type": "malware", "spec_version": "2.1", "id": "malware--750be323-1be1-46ff-a782-04f7201b1b0f", "created": "2026-01-27T05:12:59.995501Z", "modified": "2026-01-27T05:12:59.995501Z", "name": "MobiSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fa7553-6058-473a-98f3-3d46cf216253", "created": "2026-01-27T05:12:59.995676Z", "modified": "2026-01-27T05:12:59.995676Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mobispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.995676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ba3bf44-bb90-4cdf-90c1-6c08633d5301", "created": "2026-01-27T05:12:59.996376Z", "modified": "2026-01-27T05:12:59.996376Z", "relationship_type": "indicates", "source_ref": "indicator--01fa7553-6058-473a-98f3-3d46cf216253", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9a5b68-05a1-47ce-8f7a-998965438393", "created": "2026-01-27T05:12:59.996554Z", "modified": "2026-01-27T05:12:59.996554Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.996554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e87abf5-8e7c-4b3a-aea6-9d1ada10bee8", "created": "2026-01-27T05:12:59.997232Z", "modified": "2026-01-27T05:12:59.997232Z", "relationship_type": "indicates", "source_ref": "indicator--ad9a5b68-05a1-47ce-8f7a-998965438393", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff32aed-38c0-4f79-a5f6-70c729c4ec4f", "created": "2026-01-27T05:12:59.99741Z", "modified": "2026-01-27T05:12:59.99741Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f864889f6e2759e3ffb59cc875fbd0a2e5530a709a77efbdd28bae920890b55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.99741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afacdeab-c250-420d-8fcd-5ab0ce693a8b", "created": "2026-01-27T05:12:59.998271Z", "modified": "2026-01-27T05:12:59.998271Z", "relationship_type": "indicates", "source_ref": "indicator--0ff32aed-38c0-4f79-a5f6-70c729c4ec4f", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3220b905-336b-4ccd-ac78-362d96e2148d", "created": "2026-01-27T05:12:59.998445Z", "modified": "2026-01-27T05:12:59.998445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cf12b594f12d9146b488da9083a9f2937aaff6e74a89c269727a73907d2e8ac1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.998445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b85e7a8-654f-47ea-a53e-91fc4d5765f0", "created": "2026-01-27T05:12:59.999281Z", "modified": "2026-01-27T05:12:59.999281Z", "relationship_type": "indicates", "source_ref": "indicator--3220b905-336b-4ccd-ac78-362d96e2148d", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c8203d-a019-4363-ad0e-f766e64918ff", "created": "2026-01-27T05:12:59.999473Z", "modified": "2026-01-27T05:12:59.999473Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83415b4623010d1c8c724b9e3a55514dc869dc491bdfb0e114259ccca9ed4a81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:12:59.999473Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd05f673-648e-48bb-8f41-4e765f3f458e", "created": "2026-01-27T05:13:00.000309Z", "modified": "2026-01-27T05:13:00.000309Z", "relationship_type": "indicates", "source_ref": "indicator--64c8203d-a019-4363-ad0e-f766e64918ff", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93b7113-0ef0-4616-bcb3-59661859e749", "created": "2026-01-27T05:13:00.000485Z", "modified": "2026-01-27T05:13:00.000485Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='57bc00fd1672eb98ac23c43ac6d1c93db4ccfe0fa99a3971a4b5c7b4b87e3020']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.000485Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aeaec158-add4-4800-b83f-ed4cd64fbe6b", "created": "2026-01-27T05:13:00.001323Z", "modified": "2026-01-27T05:13:00.001323Z", "relationship_type": "indicates", "source_ref": "indicator--e93b7113-0ef0-4616-bcb3-59661859e749", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f02310-a2be-4b89-9f89-7e1cac92ca5e", "created": "2026-01-27T05:13:00.001499Z", "modified": "2026-01-27T05:13:00.001499Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.psac.a.processservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.001499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69147c26-3d46-48c4-a639-0006c07e12da", "created": "2026-01-27T05:13:00.002186Z", "modified": "2026-01-27T05:13:00.002186Z", "relationship_type": "indicates", "source_ref": "indicator--47f02310-a2be-4b89-9f89-7e1cac92ca5e", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44db2f44-956a-4879-bf7b-bd06421c9428", "created": "2026-01-27T05:13:00.002362Z", "modified": "2026-01-27T05:13:00.002362Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B5075AB201EE483C8ECADE1BC4FC711293D6932B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.002362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e3674e6-245e-4e7a-97b8-062252d46bad", "created": "2026-01-27T05:13:00.003156Z", "modified": "2026-01-27T05:13:00.003156Z", "relationship_type": "indicates", "source_ref": "indicator--44db2f44-956a-4879-bf7b-bd06421c9428", "target_ref": "malware--750be323-1be1-46ff-a782-04f7201b1b0f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55", "created": "2026-01-27T05:13:00.00333Z", "modified": "2026-01-27T05:13:00.00333Z", "name": "NeoSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2848b1af-e21b-47c0-9112-0a909f66c7d2", "created": "2026-01-27T05:13:00.0035Z", "modified": "2026-01-27T05:13:00.0035Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i6.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.0035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ca3d85c-f496-4361-85b4-93a1ced0d492", "created": "2026-01-27T05:13:00.004311Z", "modified": "2026-01-27T05:13:00.004311Z", "relationship_type": "indicates", "source_ref": "indicator--2848b1af-e21b-47c0-9112-0a909f66c7d2", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a535d0-936c-4374-893c-fb4be3d696e7", "created": "2026-01-27T05:13:00.004488Z", "modified": "2026-01-27T05:13:00.004488Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i7.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.004488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0af80865-ed99-4b36-9c73-3883c0c151f2", "created": "2026-01-27T05:13:00.0052Z", "modified": "2026-01-27T05:13:00.0052Z", "relationship_type": "indicates", "source_ref": "indicator--e2a535d0-936c-4374-893c-fb4be3d696e7", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69195ac6-0e0e-4aad-a184-4c9b315e6e1f", "created": "2026-01-27T05:13:00.005386Z", "modified": "2026-01-27T05:13:00.005386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i8.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.005386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5788ba20-f56f-49b3-bb12-9b06a0e4d78c", "created": "2026-01-27T05:13:00.006084Z", "modified": "2026-01-27T05:13:00.006084Z", "relationship_type": "indicates", "source_ref": "indicator--69195ac6-0e0e-4aad-a184-4c9b315e6e1f", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaa4182-5bd0-48e8-9f5b-827623f58208", "created": "2026-01-27T05:13:00.006268Z", "modified": "2026-01-27T05:13:00.006268Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i9.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.006268Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1155eb10-135b-4cd6-8509-bc7d524c723f", "created": "2026-01-27T05:13:00.006959Z", "modified": "2026-01-27T05:13:00.006959Z", "relationship_type": "indicates", "source_ref": "indicator--bbaa4182-5bd0-48e8-9f5b-827623f58208", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877dac4f-1a97-4e4a-8f65-84ee731cbedc", "created": "2026-01-27T05:13:00.007134Z", "modified": "2026-01-27T05:13:00.007134Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i10.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.007134Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7e50846-196a-4a07-ae12-9d7d7c4f8ed6", "created": "2026-01-27T05:13:00.007854Z", "modified": "2026-01-27T05:13:00.007854Z", "relationship_type": "indicates", "source_ref": "indicator--877dac4f-1a97-4e4a-8f65-84ee731cbedc", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ed733c-06e1-4851-ac5d-577e7b74fa65", "created": "2026-01-27T05:13:00.008032Z", "modified": "2026-01-27T05:13:00.008032Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i11.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.008032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--511fa132-f84d-431a-9c46-de29b7b56180", "created": "2026-01-27T05:13:00.008706Z", "modified": "2026-01-27T05:13:00.008706Z", "relationship_type": "indicates", "source_ref": "indicator--a4ed733c-06e1-4851-ac5d-577e7b74fa65", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317f15f0-d282-482e-9046-aae96b82ccc6", "created": "2026-01-27T05:13:00.008895Z", "modified": "2026-01-27T05:13:00.008895Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i12.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.008895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9cb6d07-4a7c-4089-9405-9bd33859374b", "created": "2026-01-27T05:13:00.009577Z", "modified": "2026-01-27T05:13:00.009577Z", "relationship_type": "indicates", "source_ref": "indicator--317f15f0-d282-482e-9046-aae96b82ccc6", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e8bcb1-8520-473f-a1c7-8c9c43506bae", "created": "2026-01-27T05:13:00.009763Z", "modified": "2026-01-27T05:13:00.009763Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i13.clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.009763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc1aa415-83c1-4fe9-9c42-7a091661dea3", "created": "2026-01-27T05:13:00.010495Z", "modified": "2026-01-27T05:13:00.010495Z", "relationship_type": "indicates", "source_ref": "indicator--02e8bcb1-8520-473f-a1c7-8c9c43506bae", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16203af-fd34-4289-8318-8eccd9a7e4fd", "created": "2026-01-27T05:13:00.01068Z", "modified": "2026-01-27T05:13:00.01068Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clientreport.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.01068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77a18a7e-61ad-4427-930d-fad7b346a6bc", "created": "2026-01-27T05:13:00.01144Z", "modified": "2026-01-27T05:13:00.01144Z", "relationship_type": "indicates", "source_ref": "indicator--f16203af-fd34-4289-8318-8eccd9a7e4fd", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff7808c-ba08-466c-b54b-ec87389c3304", "created": "2026-01-27T05:13:00.011622Z", "modified": "2026-01-27T05:13:00.011622Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neospy.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.011622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7239e53-29fe-4e6a-8e22-d68b995bc3bd", "created": "2026-01-27T05:13:00.012452Z", "modified": "2026-01-27T05:13:00.012452Z", "relationship_type": "indicates", "source_ref": "indicator--dff7808c-ba08-466c-b54b-ec87389c3304", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c1116a-73b8-4d11-a8d3-bbb92f68c060", "created": "2026-01-27T05:13:00.012637Z", "modified": "2026-01-27T05:13:00.012637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.012637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b2d67ae-df01-4838-816c-7754838a86b3", "created": "2026-01-27T05:13:00.013326Z", "modified": "2026-01-27T05:13:00.013326Z", "relationship_type": "indicates", "source_ref": "indicator--75c1116a-73b8-4d11-a8d3-bbb92f68c060", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a50a3e3-67fa-41f4-a800-e4c764c29a59", "created": "2026-01-27T05:13:00.013503Z", "modified": "2026-01-27T05:13:00.013503Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='neospy.tech']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.013503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3503b516-896f-450d-b2a4-cd656f52f86e", "created": "2026-01-27T05:13:00.014183Z", "modified": "2026-01-27T05:13:00.014183Z", "relationship_type": "indicates", "source_ref": "indicator--2a50a3e3-67fa-41f4-a800-e4c764c29a59", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e32d59-9772-4290-b838-cccd53ac97d4", "created": "2026-01-27T05:13:00.01436Z", "modified": "2026-01-27T05:13:00.01436Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ru.neospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.01436Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35dec440-088e-4f47-8069-1b8d6def4950", "created": "2026-01-27T05:13:00.015047Z", "modified": "2026-01-27T05:13:00.015047Z", "relationship_type": "indicates", "source_ref": "indicator--26e32d59-9772-4290-b838-cccd53ac97d4", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15406c78-7f9f-407c-b8a0-2635bcfcb93e", "created": "2026-01-27T05:13:00.015244Z", "modified": "2026-01-27T05:13:00.015244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a380f48bd7879692015bc71be978d546a06667e0bf1e2f970291dc41b1a35908']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.015244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0808fb5-bff3-4911-9339-0f1ad860291c", "created": "2026-01-27T05:13:00.016174Z", "modified": "2026-01-27T05:13:00.016174Z", "relationship_type": "indicates", "source_ref": "indicator--15406c78-7f9f-407c-b8a0-2635bcfcb93e", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7b5478-3bcc-4fe4-bb8e-abf32f77ed9a", "created": "2026-01-27T05:13:00.016378Z", "modified": "2026-01-27T05:13:00.016378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28574a65287da00c18f5c50e08720d1ab6d4e49448ad2774ab5ac53dc7263b94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.016378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--201715c4-ab5e-4522-a9b0-736a73b1d316", "created": "2026-01-27T05:13:00.017231Z", "modified": "2026-01-27T05:13:00.017231Z", "relationship_type": "indicates", "source_ref": "indicator--4d7b5478-3bcc-4fe4-bb8e-abf32f77ed9a", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd9be9d-cd0c-43ae-8259-9dd453c09010", "created": "2026-01-27T05:13:00.01742Z", "modified": "2026-01-27T05:13:00.01742Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a937eb632ffb438205521964d99ac1a91a13179487de2a36a0568bb217a0c8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.01742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--239ef5b9-c692-482f-9def-9f81ace885c2", "created": "2026-01-27T05:13:00.018443Z", "modified": "2026-01-27T05:13:00.018443Z", "relationship_type": "indicates", "source_ref": "indicator--5fd9be9d-cd0c-43ae-8259-9dd453c09010", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581c0f4f-34ce-4ec9-95d2-7be25c80d86c", "created": "2026-01-27T05:13:00.018629Z", "modified": "2026-01-27T05:13:00.018629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44477a6274931fe6780d4b8b3931e65e7e1acf2032ca67125c68dcdb2bdfd4a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.018629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4afae9ff-f806-4aa3-adf3-c40cfa26f0f1", "created": "2026-01-27T05:13:00.019488Z", "modified": "2026-01-27T05:13:00.019488Z", "relationship_type": "indicates", "source_ref": "indicator--581c0f4f-34ce-4ec9-95d2-7be25c80d86c", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d069bb8f-dbcf-47d9-8113-90de7312577c", "created": "2026-01-27T05:13:00.01967Z", "modified": "2026-01-27T05:13:00.01967Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56ba521bb81719f0f725cf4bcd7dad94e35897e074b67cb235f1ea748da0ff49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.01967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e667d4d-4a50-418e-9f38-de4f66a7a185", "created": "2026-01-27T05:13:00.020523Z", "modified": "2026-01-27T05:13:00.020523Z", "relationship_type": "indicates", "source_ref": "indicator--d069bb8f-dbcf-47d9-8113-90de7312577c", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9160f9ea-86c1-4eba-ab64-d97dc91dd16f", "created": "2026-01-27T05:13:00.020702Z", "modified": "2026-01-27T05:13:00.020702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95d8489172374df3d47f2aedb07cd16ec6d436e17e2811d11a423af7be6c9be7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.020702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efea8bc8-ffd5-4024-9d7a-3faadfbb8a22", "created": "2026-01-27T05:13:00.021811Z", "modified": "2026-01-27T05:13:00.021811Z", "relationship_type": "indicates", "source_ref": "indicator--9160f9ea-86c1-4eba-ab64-d97dc91dd16f", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011941b2-6f06-49b0-8a11-9428d3bb0355", "created": "2026-01-27T05:13:00.022004Z", "modified": "2026-01-27T05:13:00.022004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2494c9169489f369ded620f77e4b8500dd3e5fe0d2f613090ed6632aa2058b3d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.022004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c62a6846-4358-4339-89bf-e702e29ce794", "created": "2026-01-27T05:13:00.022852Z", "modified": "2026-01-27T05:13:00.022852Z", "relationship_type": "indicates", "source_ref": "indicator--011941b2-6f06-49b0-8a11-9428d3bb0355", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d17e6f6-5acb-4f9a-ac16-e61d69e38fa5", "created": "2026-01-27T05:13:00.023034Z", "modified": "2026-01-27T05:13:00.023034Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed7abe2be74c19b2cd6547126d54f9a2e883c0d4ba7d65212639133add54bccf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.023034Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af576010-6b01-4a85-83d8-8614890bb210", "created": "2026-01-27T05:13:00.02389Z", "modified": "2026-01-27T05:13:00.02389Z", "relationship_type": "indicates", "source_ref": "indicator--4d17e6f6-5acb-4f9a-ac16-e61d69e38fa5", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6948f509-d299-41b0-a127-ede110ef98dc", "created": "2026-01-27T05:13:00.02407Z", "modified": "2026-01-27T05:13:00.02407Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2a8eb751d2c0dba78ec40c582c27ab9a85d89ba5169aac80cbaafa22b4abb2b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.02407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c97d257-5754-476d-944e-08f37f4f36fd", "created": "2026-01-27T05:13:00.024935Z", "modified": "2026-01-27T05:13:00.024935Z", "relationship_type": "indicates", "source_ref": "indicator--6948f509-d299-41b0-a127-ede110ef98dc", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573625e3-20f8-4d76-86c4-c933473d12b0", "created": "2026-01-27T05:13:00.025138Z", "modified": "2026-01-27T05:13:00.025138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ec672b865c303b61afbdc9133d790ca39440e1c3f515cc55c4d7c6334c6478a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.025138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--889a6128-e811-4d1a-b510-3432bead81c6", "created": "2026-01-27T05:13:00.026062Z", "modified": "2026-01-27T05:13:00.026062Z", "relationship_type": "indicates", "source_ref": "indicator--573625e3-20f8-4d76-86c4-c933473d12b0", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cc77ca-3fec-4414-83cb-fcbab12a388d", "created": "2026-01-27T05:13:00.026287Z", "modified": "2026-01-27T05:13:00.026287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87afab88c771c27e1f30776066573f1e0db84f647bee6d8701ca012f0db4f256']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.026287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44a7d759-eccf-4ccb-b72f-4e859a1a29d2", "created": "2026-01-27T05:13:00.027194Z", "modified": "2026-01-27T05:13:00.027194Z", "relationship_type": "indicates", "source_ref": "indicator--e8cc77ca-3fec-4414-83cb-fcbab12a388d", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4830a6-1bbb-4f16-866e-00583fa4babc", "created": "2026-01-27T05:13:00.027375Z", "modified": "2026-01-27T05:13:00.027375Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec28d480130f225855cca7de283b004fac4a9338afad01e48234a5c49d32e033']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.027375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f37612dd-4209-4277-966c-60684e9963f1", "created": "2026-01-27T05:13:00.028225Z", "modified": "2026-01-27T05:13:00.028225Z", "relationship_type": "indicates", "source_ref": "indicator--ac4830a6-1bbb-4f16-866e-00583fa4babc", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0bb692-b5ac-479c-952e-dde724811cbf", "created": "2026-01-27T05:13:00.028406Z", "modified": "2026-01-27T05:13:00.028406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c59ab687a265e9e6b7244713c352ce325a0c007bbd8b07dfe451af10075147c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.028406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16cba52c-cff1-4aa7-8550-bd2ee8aaa407", "created": "2026-01-27T05:13:00.029258Z", "modified": "2026-01-27T05:13:00.029258Z", "relationship_type": "indicates", "source_ref": "indicator--9b0bb692-b5ac-479c-952e-dde724811cbf", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18185f0b-24bc-4d8d-ac14-67e5aaf3f4a2", "created": "2026-01-27T05:13:00.029435Z", "modified": "2026-01-27T05:13:00.029435Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83a85cd1b9ad46cb2005afe3f488004468e7b1cfc61c75a350369c59fcbbc5a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.029435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10b87905-6116-40d4-804a-26a0d3597b38", "created": "2026-01-27T05:13:00.030292Z", "modified": "2026-01-27T05:13:00.030292Z", "relationship_type": "indicates", "source_ref": "indicator--18185f0b-24bc-4d8d-ac14-67e5aaf3f4a2", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fbd2de-549b-42a4-b0e7-a7fdfb85100b", "created": "2026-01-27T05:13:00.030469Z", "modified": "2026-01-27T05:13:00.030469Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0aa5814549c2aeea043c8f1274820e82f8286741f7e7f0075af293d470f3a4f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.030469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--971eb6b7-75e5-4ef3-850d-1bdd2802d3b6", "created": "2026-01-27T05:13:00.031444Z", "modified": "2026-01-27T05:13:00.031444Z", "relationship_type": "indicates", "source_ref": "indicator--c1fbd2de-549b-42a4-b0e7-a7fdfb85100b", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8f9cdc-8d33-46c6-b56d-491a5850df81", "created": "2026-01-27T05:13:00.031623Z", "modified": "2026-01-27T05:13:00.031623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e30482e964523c47eee6077f013e07b7a4e8776bd6031fef17193b5c287af180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.031623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40d30267-daf7-4b17-b81a-165e85c0e0f1", "created": "2026-01-27T05:13:00.032472Z", "modified": "2026-01-27T05:13:00.032472Z", "relationship_type": "indicates", "source_ref": "indicator--5a8f9cdc-8d33-46c6-b56d-491a5850df81", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e1d247-4570-4169-9037-6750128421b9", "created": "2026-01-27T05:13:00.03265Z", "modified": "2026-01-27T05:13:00.03265Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2399ba8758f0b52c82b452c4f85d48642da8e9e37eac6018168783858ee12403']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.03265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58952f2a-8d72-4d26-852f-a3945e04192f", "created": "2026-01-27T05:13:00.033491Z", "modified": "2026-01-27T05:13:00.033491Z", "relationship_type": "indicates", "source_ref": "indicator--79e1d247-4570-4169-9037-6750128421b9", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0bf473-8293-4c0b-9f0c-03721e7c95e6", "created": "2026-01-27T05:13:00.033666Z", "modified": "2026-01-27T05:13:00.033666Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c439ebc00aa2bffa2d09ed54236ddba33a59bcda8aed2bb19e8ad5a2656d4f6e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.033666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6904beb1-6dc9-48fc-9dec-15fc4f7aa93a", "created": "2026-01-27T05:13:00.034502Z", "modified": "2026-01-27T05:13:00.034502Z", "relationship_type": "indicates", "source_ref": "indicator--4e0bf473-8293-4c0b-9f0c-03721e7c95e6", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54accc07-8075-47bb-9d68-ef451f4af32d", "created": "2026-01-27T05:13:00.034675Z", "modified": "2026-01-27T05:13:00.034675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='581560a4f4d657d611ae8998d8eae0a0c8b9b275f9d04d271f7c43c44ed3c038']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.034675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c28ae08-5dc7-4a59-951d-0701ad5d0259", "created": "2026-01-27T05:13:00.035511Z", "modified": "2026-01-27T05:13:00.035511Z", "relationship_type": "indicates", "source_ref": "indicator--54accc07-8075-47bb-9d68-ef451f4af32d", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18249e0-17a6-49c9-bdb3-ef74ea975e7e", "created": "2026-01-27T05:13:00.035686Z", "modified": "2026-01-27T05:13:00.035686Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8073cfab22f3a700345ce0d6352e4dbd6d0ef6466a1a0d8a4bea34bbca01c7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.035686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--306de160-eb84-4825-a868-7ac7820f6d34", "created": "2026-01-27T05:13:00.03652Z", "modified": "2026-01-27T05:13:00.03652Z", "relationship_type": "indicates", "source_ref": "indicator--d18249e0-17a6-49c9-bdb3-ef74ea975e7e", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9355e5b1-8b5a-41fa-b1cd-d5efd003c348", "created": "2026-01-27T05:13:00.036693Z", "modified": "2026-01-27T05:13:00.036693Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='56c683661e0c6e654a09f64c233834f8e43b08fa9a2dfa0ec3cc59719e1a8ac5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.036693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac7e1fb5-a768-4f7b-bc76-5380aa4b0e88", "created": "2026-01-27T05:13:00.037531Z", "modified": "2026-01-27T05:13:00.037531Z", "relationship_type": "indicates", "source_ref": "indicator--9355e5b1-8b5a-41fa-b1cd-d5efd003c348", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f1a9e0-f6de-47d0-a636-c243b9dddccc", "created": "2026-01-27T05:13:00.037704Z", "modified": "2026-01-27T05:13:00.037704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f75796c604bd9da8b280d4c0d7b96476e0846c0b4b5c02f5b553f8404c1e0dc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.037704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--346e50a4-2c7f-4c99-b84e-5541be4ef19d", "created": "2026-01-27T05:13:00.038625Z", "modified": "2026-01-27T05:13:00.038625Z", "relationship_type": "indicates", "source_ref": "indicator--84f1a9e0-f6de-47d0-a636-c243b9dddccc", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2489031b-009d-4857-b687-720abbd584cd", "created": "2026-01-27T05:13:00.038828Z", "modified": "2026-01-27T05:13:00.038828Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8719517cd9d6bfadf4cf2eddfe18014479ec67a4ada72e8cab12aa7d23a40b90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.038828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0785832-067f-40f7-9e42-8b10e628edfe", "created": "2026-01-27T05:13:00.039654Z", "modified": "2026-01-27T05:13:00.039654Z", "relationship_type": "indicates", "source_ref": "indicator--2489031b-009d-4857-b687-720abbd584cd", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd10d0bb-0234-43b0-99a8-7e6bf6f37a22", "created": "2026-01-27T05:13:00.039853Z", "modified": "2026-01-27T05:13:00.039853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f97788f7559124ced1a9eed679ebbab0e9f20527bae78274d035eb51d3952b5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.039853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64ec31c6-bd54-487b-b951-537855a50e2b", "created": "2026-01-27T05:13:00.040808Z", "modified": "2026-01-27T05:13:00.040808Z", "relationship_type": "indicates", "source_ref": "indicator--bd10d0bb-0234-43b0-99a8-7e6bf6f37a22", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a54730-bdd7-4156-a13f-53cc4cadf94c", "created": "2026-01-27T05:13:00.040987Z", "modified": "2026-01-27T05:13:00.040987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2aee2a87dd94516072c9d385d33928e01f3d3a2ce885189f56b3cae94be7a9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.040987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a55a901b-0080-457f-bcb7-5f2740dcd193", "created": "2026-01-27T05:13:00.041818Z", "modified": "2026-01-27T05:13:00.041818Z", "relationship_type": "indicates", "source_ref": "indicator--51a54730-bdd7-4156-a13f-53cc4cadf94c", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385012e7-79aa-43f8-bd74-fd0af41f10e5", "created": "2026-01-27T05:13:00.042042Z", "modified": "2026-01-27T05:13:00.042042Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1b9c82d6a94407cec3bf70ec24f0a8dcc762e6128e9bb982571d971e6ee9790']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.042042Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--368e76d5-b09a-4e3e-ae09-870e18a4565a", "created": "2026-01-27T05:13:00.042877Z", "modified": "2026-01-27T05:13:00.042877Z", "relationship_type": "indicates", "source_ref": "indicator--385012e7-79aa-43f8-bd74-fd0af41f10e5", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d457fcbf-b5b2-4d2c-8b4d-53a9d2428d79", "created": "2026-01-27T05:13:00.043055Z", "modified": "2026-01-27T05:13:00.043055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71c0e407e87d2e932404a604047a83ed0529e397f16b1e3d90fc9cfd9f47c988']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.043055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a404e15e-f14d-4c4d-8bd4-e4d13a6adf07", "created": "2026-01-27T05:13:00.043899Z", "modified": "2026-01-27T05:13:00.043899Z", "relationship_type": "indicates", "source_ref": "indicator--d457fcbf-b5b2-4d2c-8b4d-53a9d2428d79", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5703de-f8a6-4014-b826-16caf8592fea", "created": "2026-01-27T05:13:00.044076Z", "modified": "2026-01-27T05:13:00.044076Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8c2754c97133074db23009dddcaee9de93f1933342d627d29c141682702e186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.044076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17a87295-06ea-4fa9-bced-b389bb49caa7", "created": "2026-01-27T05:13:00.044999Z", "modified": "2026-01-27T05:13:00.044999Z", "relationship_type": "indicates", "source_ref": "indicator--ad5703de-f8a6-4014-b826-16caf8592fea", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb01aaa-1761-4956-a7b2-bcc665c1a20d", "created": "2026-01-27T05:13:00.045189Z", "modified": "2026-01-27T05:13:00.045189Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00028565c848d277e82cae6a06212bd2bb30f25ab6b5e34f8e5af60e175cfe56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.045189Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a31687aa-5028-4b94-a703-7c4f7af65ca4", "created": "2026-01-27T05:13:00.046031Z", "modified": "2026-01-27T05:13:00.046031Z", "relationship_type": "indicates", "source_ref": "indicator--ecb01aaa-1761-4956-a7b2-bcc665c1a20d", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32c936e-1f40-4029-88e1-345b094779e5", "created": "2026-01-27T05:13:00.046206Z", "modified": "2026-01-27T05:13:00.046206Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f923f59957b05842df426236b2408bcd5172e3c2d6ccb2fde9a1c4dce8a2955c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.046206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f11c7ad-56c1-4f83-b8eb-8ddf6b78634a", "created": "2026-01-27T05:13:00.04704Z", "modified": "2026-01-27T05:13:00.04704Z", "relationship_type": "indicates", "source_ref": "indicator--d32c936e-1f40-4029-88e1-345b094779e5", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc711512-763a-4357-87f8-df489fb9b37e", "created": "2026-01-27T05:13:00.047214Z", "modified": "2026-01-27T05:13:00.047214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='236c8ce2feeabce9e90144dd05f7aae51e38ad0654ca1589481b2880a1eb8368']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.047214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfcf0564-b216-4b47-b6a0-a7a001be082f", "created": "2026-01-27T05:13:00.048057Z", "modified": "2026-01-27T05:13:00.048057Z", "relationship_type": "indicates", "source_ref": "indicator--bc711512-763a-4357-87f8-df489fb9b37e", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216ba792-0c65-4c6f-8083-fba66db61006", "created": "2026-01-27T05:13:00.048232Z", "modified": "2026-01-27T05:13:00.048232Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a234d0408429ab569735f9a02a5490e25bd02d5daff74bb9fe5f28988ce50cbd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.048232Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99b4d5de-078d-428a-9be8-5e89359636af", "created": "2026-01-27T05:13:00.049189Z", "modified": "2026-01-27T05:13:00.049189Z", "relationship_type": "indicates", "source_ref": "indicator--216ba792-0c65-4c6f-8083-fba66db61006", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ffa33a-1410-4849-a290-4e5ee04f2ee3", "created": "2026-01-27T05:13:00.049366Z", "modified": "2026-01-27T05:13:00.049366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='416d36e38c3bd4e07a70b5b9f99de5c30f56d4d92052c04d6a9ea0b4cacfe5fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.049366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06181049-dbaf-4547-85bf-cd2db9516138", "created": "2026-01-27T05:13:00.050202Z", "modified": "2026-01-27T05:13:00.050202Z", "relationship_type": "indicates", "source_ref": "indicator--b3ffa33a-1410-4849-a290-4e5ee04f2ee3", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d63ca9-3878-4e4c-84f6-c0907298c834", "created": "2026-01-27T05:13:00.050378Z", "modified": "2026-01-27T05:13:00.050378Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='565904a90bac551601d50468d2d9c7d2ea09f76edfae0c696d716bc0932bb343']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.050378Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a741b3d9-2a3c-45a0-a283-7727141b1c02", "created": "2026-01-27T05:13:00.051211Z", "modified": "2026-01-27T05:13:00.051211Z", "relationship_type": "indicates", "source_ref": "indicator--83d63ca9-3878-4e4c-84f6-c0907298c834", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaf5c38-0f79-45bd-ba37-d893d90e4f44", "created": "2026-01-27T05:13:00.051386Z", "modified": "2026-01-27T05:13:00.051386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='271a23036a6b645c7d998745c0f0a516cc4846f3f6cc63a617f63836ff6bfa5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.051386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e588a23-bc5a-4626-ac5a-b5ad1c57f871", "created": "2026-01-27T05:13:00.052275Z", "modified": "2026-01-27T05:13:00.052275Z", "relationship_type": "indicates", "source_ref": "indicator--9aaf5c38-0f79-45bd-ba37-d893d90e4f44", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0aa2a58-75a7-4730-9423-1bb5f32e29ca", "created": "2026-01-27T05:13:00.052454Z", "modified": "2026-01-27T05:13:00.052454Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ns.antapp.module']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.052454Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90999bdc-cb1a-4059-9690-561ab06189f0", "created": "2026-01-27T05:13:00.053154Z", "modified": "2026-01-27T05:13:00.053154Z", "relationship_type": "indicates", "source_ref": "indicator--e0aa2a58-75a7-4730-9423-1bb5f32e29ca", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8f8bda-410b-44fc-bdff-94c93147deb8", "created": "2026-01-27T05:13:00.053344Z", "modified": "2026-01-27T05:13:00.053344Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.nsmon.guard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.053344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91a61e1f-073a-4213-b55b-fc4a8c0e9657", "created": "2026-01-27T05:13:00.054025Z", "modified": "2026-01-27T05:13:00.054025Z", "relationship_type": "indicates", "source_ref": "indicator--2e8f8bda-410b-44fc-bdff-94c93147deb8", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf97e1a9-a602-4408-8ace-97c8edfcc8fb", "created": "2026-01-27T05:13:00.054205Z", "modified": "2026-01-27T05:13:00.054205Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9ED8DD944D3EB545E1EEEEEC1D8174772CF37C07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.054205Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--243f42d0-c03d-4dcb-aed7-e120eef5bf1b", "created": "2026-01-27T05:13:00.05503Z", "modified": "2026-01-27T05:13:00.05503Z", "relationship_type": "indicates", "source_ref": "indicator--bf97e1a9-a602-4408-8ace-97c8edfcc8fb", "target_ref": "malware--b1a1afea-830d-40b5-b53a-a9e91decad55"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e149757c-8bd8-4068-8a38-57e84969255c", "created": "2026-01-27T05:13:00.055203Z", "modified": "2026-01-27T05:13:00.055203Z", "name": "AllTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b311a4f9-ef4d-4ef9-a8c6-f1ca1c846bc2", "created": "2026-01-27T05:13:00.055383Z", "modified": "2026-01-27T05:13:00.055383Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='4-dot-all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.055383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6428934f-8245-4a5c-b7c3-017242b2f3f9", "created": "2026-01-27T05:13:00.056093Z", "modified": "2026-01-27T05:13:00.056093Z", "relationship_type": "indicates", "source_ref": "indicator--b311a4f9-ef4d-4ef9-a8c6-f1ca1c846bc2", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c556fba-5786-4bf8-8be4-8b58f3ba8b0a", "created": "2026-01-27T05:13:00.056271Z", "modified": "2026-01-27T05:13:00.056271Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='6-dot-all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.056271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9d1a70c-10ca-452b-bd04-d6e1cff14d94", "created": "2026-01-27T05:13:00.056981Z", "modified": "2026-01-27T05:13:00.056981Z", "relationship_type": "indicates", "source_ref": "indicator--7c556fba-5786-4bf8-8be4-8b58f3ba8b0a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e51ea982-df76-4064-9b67-6c780328422d", "created": "2026-01-27T05:13:00.057161Z", "modified": "2026-01-27T05:13:00.057161Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.057161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3266f078-20d5-4069-b19d-11b9314fb49b", "created": "2026-01-27T05:13:00.058031Z", "modified": "2026-01-27T05:13:00.058031Z", "relationship_type": "indicates", "source_ref": "indicator--e51ea982-df76-4064-9b67-6c780328422d", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd1800d-e04d-4669-89d5-81e892cc31ed", "created": "2026-01-27T05:13:00.058217Z", "modified": "2026-01-27T05:13:00.058217Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='all-tracker.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.058217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c842580a-53f2-4ccc-b52d-b719851fd762", "created": "2026-01-27T05:13:00.058998Z", "modified": "2026-01-27T05:13:00.058998Z", "relationship_type": "indicates", "source_ref": "indicator--0dd1800d-e04d-4669-89d5-81e892cc31ed", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5886cd29-721b-47cf-b5bd-2669154ff6ec", "created": "2026-01-27T05:13:00.059176Z", "modified": "2026-01-27T05:13:00.059176Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alltracker.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.059176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa23021f-be11-4da8-8834-951e9f5b313e", "created": "2026-01-27T05:13:00.059859Z", "modified": "2026-01-27T05:13:00.059859Z", "relationship_type": "indicates", "source_ref": "indicator--5886cd29-721b-47cf-b5bd-2669154ff6ec", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc46b63a-970c-44c6-a457-5788d6131c2e", "created": "2026-01-27T05:13:00.060039Z", "modified": "2026-01-27T05:13:00.060039Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='staging-all-tracker.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.060039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e14a1fea-66fe-4873-b693-f2431aedb805", "created": "2026-01-27T05:13:00.060725Z", "modified": "2026-01-27T05:13:00.060725Z", "relationship_type": "indicates", "source_ref": "indicator--dc46b63a-970c-44c6-a457-5788d6131c2e", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c50bba-a9cb-4b4f-a4cc-de9fea6b5ace", "created": "2026-01-27T05:13:00.060916Z", "modified": "2026-01-27T05:13:00.060916Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='alltracker.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.060916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c220dbc-63df-4c23-b4e3-2c09879ce42a", "created": "2026-01-27T05:13:00.061589Z", "modified": "2026-01-27T05:13:00.061589Z", "relationship_type": "indicates", "source_ref": "indicator--c6c50bba-a9cb-4b4f-a4cc-de9fea6b5ace", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe26c14-2399-4fa7-b914-157bd5efd6e0", "created": "2026-01-27T05:13:00.061778Z", "modified": "2026-01-27T05:13:00.061778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4bc17c972a4baf2b5a75a35c00287d37d69cb46a13bc2a4c01e7ac2fae0a3d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.061778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1be8e44c-b51d-4f8e-8dcf-229c3f75d4b7", "created": "2026-01-27T05:13:00.062604Z", "modified": "2026-01-27T05:13:00.062604Z", "relationship_type": "indicates", "source_ref": "indicator--7fe26c14-2399-4fa7-b914-157bd5efd6e0", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba391709-ebe8-4156-bb5f-a9cad414fa06", "created": "2026-01-27T05:13:00.062794Z", "modified": "2026-01-27T05:13:00.062794Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6adaf17462a23c966009297fd8c367bde7cb7e357659b96a4622060496cf04e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.062794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--716cc13d-42bb-4a95-9125-1c255406151d", "created": "2026-01-27T05:13:00.06363Z", "modified": "2026-01-27T05:13:00.06363Z", "relationship_type": "indicates", "source_ref": "indicator--ba391709-ebe8-4156-bb5f-a9cad414fa06", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abbc36f-6df9-4b38-9341-ffd8f1b9cacb", "created": "2026-01-27T05:13:00.063822Z", "modified": "2026-01-27T05:13:00.063822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59a58144f5b6fd868dc49a099b537bf32d686d105e3fcab360d6dd5af3b3b400']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.063822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--277e4667-f412-414f-bd70-1881fc3afe29", "created": "2026-01-27T05:13:00.064646Z", "modified": "2026-01-27T05:13:00.064646Z", "relationship_type": "indicates", "source_ref": "indicator--9abbc36f-6df9-4b38-9341-ffd8f1b9cacb", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e82de90-6db4-4da7-b944-aa8b6e1410df", "created": "2026-01-27T05:13:00.064838Z", "modified": "2026-01-27T05:13:00.064838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63542c55379492ce3c63cd5e488da279fa92c00ccb6c078dcbc4f509de313d20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.064838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e675498-9003-4e2c-a54e-bdb4465840af", "created": "2026-01-27T05:13:00.065655Z", "modified": "2026-01-27T05:13:00.065655Z", "relationship_type": "indicates", "source_ref": "indicator--5e82de90-6db4-4da7-b944-aa8b6e1410df", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8ccdc8-722b-43d7-bbce-2ca479a59cbb", "created": "2026-01-27T05:13:00.06585Z", "modified": "2026-01-27T05:13:00.06585Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3275e39a4e24ce11f826ff59be82848b3c19b10481ca1c41ca226752a5dcbe50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.06585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ca574a3-9323-4abb-a12b-2f60e83788a6", "created": "2026-01-27T05:13:00.066811Z", "modified": "2026-01-27T05:13:00.066811Z", "relationship_type": "indicates", "source_ref": "indicator--7f8ccdc8-722b-43d7-bbce-2ca479a59cbb", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c142c70-d92a-43de-8534-9b25674560ad", "created": "2026-01-27T05:13:00.066992Z", "modified": "2026-01-27T05:13:00.066992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73d198f13c598ef5088571805ab0ea012ee3ee6786b680d8e8ffc88e25a81647']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.066992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ac61bb0-a7ca-4b11-96bb-5561941c143d", "created": "2026-01-27T05:13:00.067852Z", "modified": "2026-01-27T05:13:00.067852Z", "relationship_type": "indicates", "source_ref": "indicator--1c142c70-d92a-43de-8534-9b25674560ad", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7bb188-9956-4681-99de-90215f91547c", "created": "2026-01-27T05:13:00.06803Z", "modified": "2026-01-27T05:13:00.06803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7227da0e85765e5e67972b5d41bab7230040b7f8af62fd7115dfdc361c749674']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.06803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23abe9ce-233b-4f59-9775-9a10a1fb344e", "created": "2026-01-27T05:13:00.068861Z", "modified": "2026-01-27T05:13:00.068861Z", "relationship_type": "indicates", "source_ref": "indicator--9c7bb188-9956-4681-99de-90215f91547c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f671e5d-37bf-44f2-9061-b75868043127", "created": "2026-01-27T05:13:00.069036Z", "modified": "2026-01-27T05:13:00.069036Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e8133c6e9d7d77e8e8e1b226e430a96a73a2edf6b065d6f1caf262120827026']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.069036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a6afe09-69ba-45ff-9723-219e098465eb", "created": "2026-01-27T05:13:00.069862Z", "modified": "2026-01-27T05:13:00.069862Z", "relationship_type": "indicates", "source_ref": "indicator--1f671e5d-37bf-44f2-9061-b75868043127", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8522c16-0336-42b5-9cf0-13990949e827", "created": "2026-01-27T05:13:00.07004Z", "modified": "2026-01-27T05:13:00.07004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87d4e281b968e3c61dbce08fc8fa19a871d730b431fbbe2217902c07dae3cde9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.07004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6bb7d40-5064-4b98-960b-0de0ebd34d58", "created": "2026-01-27T05:13:00.070873Z", "modified": "2026-01-27T05:13:00.070873Z", "relationship_type": "indicates", "source_ref": "indicator--c8522c16-0336-42b5-9cf0-13990949e827", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cbf062-0d7f-4b51-9202-33d4ef423206", "created": "2026-01-27T05:13:00.071049Z", "modified": "2026-01-27T05:13:00.071049Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72558262a74c9969fff0acd29ec1e31545938347ec09268aadabc61424581e14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.071049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3524119e-e989-4c5e-be93-1760acdcc093", "created": "2026-01-27T05:13:00.071885Z", "modified": "2026-01-27T05:13:00.071885Z", "relationship_type": "indicates", "source_ref": "indicator--f9cbf062-0d7f-4b51-9202-33d4ef423206", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1c70cd-1f33-4e91-ab89-e1c09de1f1d3", "created": "2026-01-27T05:13:00.072061Z", "modified": "2026-01-27T05:13:00.072061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ae57e06794429609c74943bf4725f3d71cbef34cbcfa2ca00a5284a672c6693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.072061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d9f8298-6ba3-4165-8554-24ab62d784dc", "created": "2026-01-27T05:13:00.072897Z", "modified": "2026-01-27T05:13:00.072897Z", "relationship_type": "indicates", "source_ref": "indicator--1d1c70cd-1f33-4e91-ab89-e1c09de1f1d3", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ea2b77-a201-4fec-a8f5-62207d6ff332", "created": "2026-01-27T05:13:00.07307Z", "modified": "2026-01-27T05:13:00.07307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c6718833cdfb07c7870e243296ab4a755caedf06946c26a12f759c06238f0da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.07307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1ebc3b1-ef69-4dee-869d-0398e7923a81", "created": "2026-01-27T05:13:00.073961Z", "modified": "2026-01-27T05:13:00.073961Z", "relationship_type": "indicates", "source_ref": "indicator--80ea2b77-a201-4fec-a8f5-62207d6ff332", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ac8284-46b1-40c1-9138-5a19aa018c6e", "created": "2026-01-27T05:13:00.074147Z", "modified": "2026-01-27T05:13:00.074147Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e84e623505f0cf2064f58c7134fb22ad2e21db12768ad4aa4c815b81b1acfd7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.074147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7c869cb-345a-4b3c-abf5-578e7e25ff4b", "created": "2026-01-27T05:13:00.075023Z", "modified": "2026-01-27T05:13:00.075023Z", "relationship_type": "indicates", "source_ref": "indicator--16ac8284-46b1-40c1-9138-5a19aa018c6e", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34aead23-75ad-4b93-850a-2833068e1792", "created": "2026-01-27T05:13:00.075197Z", "modified": "2026-01-27T05:13:00.075197Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b292b99df19ca036d2715a864ce1c777aa46fc54c5c1046881268731d1dbb621']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.075197Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--286efe00-3f2b-4e1b-9149-679444155baa", "created": "2026-01-27T05:13:00.076175Z", "modified": "2026-01-27T05:13:00.076175Z", "relationship_type": "indicates", "source_ref": "indicator--34aead23-75ad-4b93-850a-2833068e1792", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36113b10-0e28-47ba-a58f-80e1fe51d972", "created": "2026-01-27T05:13:00.07635Z", "modified": "2026-01-27T05:13:00.07635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26cfe77dcefd4ce3e771e02f039b1e71f41397e318cf5bbd528c5fcecd4547a9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.07635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4131a59-541a-455b-88a9-2ed1a1832418", "created": "2026-01-27T05:13:00.077183Z", "modified": "2026-01-27T05:13:00.077183Z", "relationship_type": "indicates", "source_ref": "indicator--36113b10-0e28-47ba-a58f-80e1fe51d972", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07466cfd-1c4a-45cf-9008-2238f86a5395", "created": "2026-01-27T05:13:00.07736Z", "modified": "2026-01-27T05:13:00.07736Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80be1fb12eaaf5374d56c7b09cd6abd213be69e90ad8b264e3c31411cbcaf24b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.07736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81b360b5-a28b-4805-8e30-3c8b730dd7ff", "created": "2026-01-27T05:13:00.078189Z", "modified": "2026-01-27T05:13:00.078189Z", "relationship_type": "indicates", "source_ref": "indicator--07466cfd-1c4a-45cf-9008-2238f86a5395", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e3d39b-8757-4918-9aac-973020477a0d", "created": "2026-01-27T05:13:00.078365Z", "modified": "2026-01-27T05:13:00.078365Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='933538d63eea0a89bb7c38d8e454fa3a502b8b6f733720e6dbced6c9ddd95f8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.078365Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7995a8ee-b156-4041-91d4-08720c4daaf4", "created": "2026-01-27T05:13:00.079218Z", "modified": "2026-01-27T05:13:00.079218Z", "relationship_type": "indicates", "source_ref": "indicator--42e3d39b-8757-4918-9aac-973020477a0d", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce67ec12-588c-4c1f-8bbb-ada253b9e7f6", "created": "2026-01-27T05:13:00.079399Z", "modified": "2026-01-27T05:13:00.079399Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73f5c41df593a66e9c53ca908688957ef6721fdc02412f27eb40929b680429d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.079399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a65da03-fb30-4690-85ce-e39b531d3d7c", "created": "2026-01-27T05:13:00.080247Z", "modified": "2026-01-27T05:13:00.080247Z", "relationship_type": "indicates", "source_ref": "indicator--ce67ec12-588c-4c1f-8bbb-ada253b9e7f6", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4e8152-4520-4d26-bb61-5a2821ccf684", "created": "2026-01-27T05:13:00.080426Z", "modified": "2026-01-27T05:13:00.080426Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b70cf946ed1e42fa1db427ee83bf74054aba56ecad4332680e63d945f42ad7ed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.080426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--320171b9-5b7e-4fa2-8551-96cb9f40a373", "created": "2026-01-27T05:13:00.081264Z", "modified": "2026-01-27T05:13:00.081264Z", "relationship_type": "indicates", "source_ref": "indicator--fa4e8152-4520-4d26-bb61-5a2821ccf684", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c5402b-6562-4a4e-bdcd-bc077ac1d7c7", "created": "2026-01-27T05:13:00.081439Z", "modified": "2026-01-27T05:13:00.081439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a72f4b1b7555fd6b2c07211ff04618f9dc474640bc641b76753a98b4f08c849d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.081439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29582b4c-f91c-4816-9563-3f82980763b7", "created": "2026-01-27T05:13:00.082269Z", "modified": "2026-01-27T05:13:00.082269Z", "relationship_type": "indicates", "source_ref": "indicator--f4c5402b-6562-4a4e-bdcd-bc077ac1d7c7", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021f4df7-b345-4965-be03-c1e5d8f86307", "created": "2026-01-27T05:13:00.082443Z", "modified": "2026-01-27T05:13:00.082443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d521e56654fbe96b0ac38da6b339a3183da370b59bd66ea62a2645637d13182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.082443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f2a9f29-be1e-4684-92e8-67ddc3b84fba", "created": "2026-01-27T05:13:00.083286Z", "modified": "2026-01-27T05:13:00.083286Z", "relationship_type": "indicates", "source_ref": "indicator--021f4df7-b345-4965-be03-c1e5d8f86307", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991d90f3-2fcc-4b38-bcb9-e02fe69fb7d1", "created": "2026-01-27T05:13:00.083467Z", "modified": "2026-01-27T05:13:00.083467Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b65de3b3ab3775efa6ec3a2caab9476a26625a8c22debcda505f07151c8fdbc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.083467Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a186b7dc-32ca-479e-999b-4fdef13ef9cf", "created": "2026-01-27T05:13:00.084325Z", "modified": "2026-01-27T05:13:00.084325Z", "relationship_type": "indicates", "source_ref": "indicator--991d90f3-2fcc-4b38-bcb9-e02fe69fb7d1", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1b175b-2c22-4255-99d2-3ae1c75c025f", "created": "2026-01-27T05:13:00.084505Z", "modified": "2026-01-27T05:13:00.084505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f0ffae5d334c0fed88e772750a675f4d3c66fb116e8c9fbbdb444ba679366bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.084505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--032c30ba-f701-4d4f-b4f1-92a0fadcff67", "created": "2026-01-27T05:13:00.085827Z", "modified": "2026-01-27T05:13:00.085827Z", "relationship_type": "indicates", "source_ref": "indicator--eb1b175b-2c22-4255-99d2-3ae1c75c025f", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec33d9f7-9f3f-45ae-a5f9-20b439d1e3fc", "created": "2026-01-27T05:13:00.08601Z", "modified": "2026-01-27T05:13:00.08601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c25567012c3c626a6b97bc8f335d8776f219592ddc29b1100359ec4b4cd8a3df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.08601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dccf686f-a683-4434-88a8-6c20dd1be5f4", "created": "2026-01-27T05:13:00.086842Z", "modified": "2026-01-27T05:13:00.086842Z", "relationship_type": "indicates", "source_ref": "indicator--ec33d9f7-9f3f-45ae-a5f9-20b439d1e3fc", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26220154-52bc-4aa7-8653-ccb5876abf2b", "created": "2026-01-27T05:13:00.087019Z", "modified": "2026-01-27T05:13:00.087019Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2aef1d2e9d77df98fe856bd749baae9fb2548f46b30f06edbedd09ea26c8f691']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.087019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbc35415-cf5e-4d18-803b-14537dae6c13", "created": "2026-01-27T05:13:00.08786Z", "modified": "2026-01-27T05:13:00.08786Z", "relationship_type": "indicates", "source_ref": "indicator--26220154-52bc-4aa7-8653-ccb5876abf2b", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021efee9-188e-4ade-b480-d06f2dd6b549", "created": "2026-01-27T05:13:00.088047Z", "modified": "2026-01-27T05:13:00.088047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='789043331b3f55a1a0ce52371e875f929663e13501c476a340fafaff2dbd836f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.088047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87e9c931-c048-4574-b4da-4ee5f05d81ad", "created": "2026-01-27T05:13:00.088886Z", "modified": "2026-01-27T05:13:00.088886Z", "relationship_type": "indicates", "source_ref": "indicator--021efee9-188e-4ade-b480-d06f2dd6b549", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e480c2-eff9-43f9-9b85-e6ccc79b258e", "created": "2026-01-27T05:13:00.089065Z", "modified": "2026-01-27T05:13:00.089065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41d1e4544ad4f6b01cae9ef7990b946f77d2bdf5ec2c76883a1e6952a193cf0e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.089065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cdad3bb-6994-4b55-a7a0-28b4a2a3984e", "created": "2026-01-27T05:13:00.089952Z", "modified": "2026-01-27T05:13:00.089952Z", "relationship_type": "indicates", "source_ref": "indicator--23e480c2-eff9-43f9-9b85-e6ccc79b258e", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465bc367-ceb7-4ed4-a739-f34a9d97e404", "created": "2026-01-27T05:13:00.090142Z", "modified": "2026-01-27T05:13:00.090142Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a73808b195ea07139d634547d2b30a10cf56d7e9784d7fd2bafdf0efd5772475']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.090142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c70cc49-8f54-44df-b610-57ad1a990858", "created": "2026-01-27T05:13:00.090991Z", "modified": "2026-01-27T05:13:00.090991Z", "relationship_type": "indicates", "source_ref": "indicator--465bc367-ceb7-4ed4-a739-f34a9d97e404", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dcaa4d9-2a1a-4541-b5ad-68062f243b60", "created": "2026-01-27T05:13:00.091168Z", "modified": "2026-01-27T05:13:00.091168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47b4005037da0dd5110b1165e4ced99e0108b2c1965c91b3e0fe23dfd77adf23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.091168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44ac920d-b3db-438e-a73c-ee7f522dc733", "created": "2026-01-27T05:13:00.092005Z", "modified": "2026-01-27T05:13:00.092005Z", "relationship_type": "indicates", "source_ref": "indicator--4dcaa4d9-2a1a-4541-b5ad-68062f243b60", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a64e22c-f958-43b4-8f5f-505f58244708", "created": "2026-01-27T05:13:00.092178Z", "modified": "2026-01-27T05:13:00.092178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51af8a022a29df350e1f6287c25ccd9a50cfdba33cfa3d8ac946298046e0b8be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.092178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b0c8c41-862f-4789-a05f-26fa60353310", "created": "2026-01-27T05:13:00.093005Z", "modified": "2026-01-27T05:13:00.093005Z", "relationship_type": "indicates", "source_ref": "indicator--4a64e22c-f958-43b4-8f5f-505f58244708", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92b6b37-b34d-4670-90c7-cf0b8bb7b8bd", "created": "2026-01-27T05:13:00.093185Z", "modified": "2026-01-27T05:13:00.093185Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b43df2e11179e4abf6dc6980e73258f48e41a21bb216e3aed645c772e5b0307']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.093185Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066258e7-44b1-421c-a8df-138d0bf58842", "created": "2026-01-27T05:13:00.094146Z", "modified": "2026-01-27T05:13:00.094146Z", "relationship_type": "indicates", "source_ref": "indicator--d92b6b37-b34d-4670-90c7-cf0b8bb7b8bd", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29147df9-7b8c-4a34-9791-d494417ce306", "created": "2026-01-27T05:13:00.09433Z", "modified": "2026-01-27T05:13:00.09433Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7ee7b26ec75ca139a47651cbdce8a527fb802b929cd852f703dcf8393af3b3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.09433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3e6f6bf-fa1d-4b00-9ced-a1023c4b4bd4", "created": "2026-01-27T05:13:00.095205Z", "modified": "2026-01-27T05:13:00.095205Z", "relationship_type": "indicates", "source_ref": "indicator--29147df9-7b8c-4a34-9791-d494417ce306", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b42c0b-9608-4ddd-b1bb-ed1657dcf485", "created": "2026-01-27T05:13:00.095391Z", "modified": "2026-01-27T05:13:00.095391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6bfe958c84508a86879509c6c1df0f17d27ac9310457cea34f28b673e606344']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.095391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f34f39e7-8bdf-4787-be92-6b6e499f48ce", "created": "2026-01-27T05:13:00.096227Z", "modified": "2026-01-27T05:13:00.096227Z", "relationship_type": "indicates", "source_ref": "indicator--61b42c0b-9608-4ddd-b1bb-ed1657dcf485", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0d451a-f00d-4c0b-8c19-b778e194eee8", "created": "2026-01-27T05:13:00.096404Z", "modified": "2026-01-27T05:13:00.096404Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e73bbfd60330424b93869884aadf6a17b576e49f240c080c187a3d73fef8302']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.096404Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76481a4a-bfa5-4aef-b63b-cfda2745f9f3", "created": "2026-01-27T05:13:00.097233Z", "modified": "2026-01-27T05:13:00.097233Z", "relationship_type": "indicates", "source_ref": "indicator--3e0d451a-f00d-4c0b-8c19-b778e194eee8", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f22c8d-5cf9-4df0-98dd-daccde5cd091", "created": "2026-01-27T05:13:00.097408Z", "modified": "2026-01-27T05:13:00.097408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b331c63e09ad7f2924ec7cda9edbf65177ad5c868057eb2cbb1ba85184372c7f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.097408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94f12069-3887-4643-af76-4285450a53d2", "created": "2026-01-27T05:13:00.098232Z", "modified": "2026-01-27T05:13:00.098232Z", "relationship_type": "indicates", "source_ref": "indicator--d2f22c8d-5cf9-4df0-98dd-daccde5cd091", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bb3aa6-502c-4e06-9a94-83add2cde278", "created": "2026-01-27T05:13:00.098407Z", "modified": "2026-01-27T05:13:00.098407Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ccb7f587989ea6acda25c913029f2eee533290ee51e3df1a5353aec2cf18a634']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.098407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5938780-0643-4fe9-b417-df3f8c077e57", "created": "2026-01-27T05:13:00.099232Z", "modified": "2026-01-27T05:13:00.099232Z", "relationship_type": "indicates", "source_ref": "indicator--26bb3aa6-502c-4e06-9a94-83add2cde278", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7402664-3846-4c78-b81d-cf62efa4d22b", "created": "2026-01-27T05:13:00.099406Z", "modified": "2026-01-27T05:13:00.099406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='237c6815f2a4c64fbeeb30205ab9097f1439985cc4acc558ec7d4000e8d5fed0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.099406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c609e9d9-4bee-4c38-93f7-39ab944cb411", "created": "2026-01-27T05:13:00.10027Z", "modified": "2026-01-27T05:13:00.10027Z", "relationship_type": "indicates", "source_ref": "indicator--a7402664-3846-4c78-b81d-cf62efa4d22b", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5938940a-14c2-451f-b69f-a5efd7afb12a", "created": "2026-01-27T05:13:00.100446Z", "modified": "2026-01-27T05:13:00.100446Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c84e4a6d28b988d33b6761d8ea6a04c277c9379d262d7a9a8d4bf88fd716f6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.100446Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a1edeef-8978-492f-a5a3-6187c8497f6d", "created": "2026-01-27T05:13:00.101281Z", "modified": "2026-01-27T05:13:00.101281Z", "relationship_type": "indicates", "source_ref": "indicator--5938940a-14c2-451f-b69f-a5efd7afb12a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fea0de5-0943-4701-b9bf-bb5d17604736", "created": "2026-01-27T05:13:00.101456Z", "modified": "2026-01-27T05:13:00.101456Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c4fb64a3166c39cccc9363a93ac1dfecc32e27d70539dce595b00ec78749e69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.101456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69ceba42-2b52-45ee-acc9-3ff9c6320ee9", "created": "2026-01-27T05:13:00.102277Z", "modified": "2026-01-27T05:13:00.102277Z", "relationship_type": "indicates", "source_ref": "indicator--9fea0de5-0943-4701-b9bf-bb5d17604736", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235bb77a-a3cd-41e1-9781-935ea9594dc2", "created": "2026-01-27T05:13:00.102452Z", "modified": "2026-01-27T05:13:00.102452Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4a74d5e2935e503d11457fd13263eef49e629213bec5bcef9c42aee75bca7c5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.102452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06fb710d-0545-49f0-975c-8e3cd2f5ae4c", "created": "2026-01-27T05:13:00.103434Z", "modified": "2026-01-27T05:13:00.103434Z", "relationship_type": "indicates", "source_ref": "indicator--235bb77a-a3cd-41e1-9781-935ea9594dc2", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c26b565-e710-4bba-a70d-8ddfd9d66239", "created": "2026-01-27T05:13:00.103615Z", "modified": "2026-01-27T05:13:00.103615Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89b679292734df69ce35224f2e49206dbb9e4708cb822f96dcc16ddd881f6e5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.103615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9dcc336-f5ad-4c03-a31e-58d843e0d0cf", "created": "2026-01-27T05:13:00.104449Z", "modified": "2026-01-27T05:13:00.104449Z", "relationship_type": "indicates", "source_ref": "indicator--2c26b565-e710-4bba-a70d-8ddfd9d66239", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9899274c-9b8f-4923-875b-56a6a9591dbd", "created": "2026-01-27T05:13:00.104627Z", "modified": "2026-01-27T05:13:00.104627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e2b515af81a4b3048b66cbd0a9822f34850ba77173c6d8a34303b52dba0023f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.104627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e51ea45b-c408-43f5-8f01-e66d51362e43", "created": "2026-01-27T05:13:00.105476Z", "modified": "2026-01-27T05:13:00.105476Z", "relationship_type": "indicates", "source_ref": "indicator--9899274c-9b8f-4923-875b-56a6a9591dbd", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace77107-bc27-4e10-b982-3cf65655cdfb", "created": "2026-01-27T05:13:00.105664Z", "modified": "2026-01-27T05:13:00.105664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c209580b91f1ef1a82613030735bc8f62c3a929579594bd5f26c763dd891831']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.105664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--634b9805-af9f-477b-8844-6142e743a2b8", "created": "2026-01-27T05:13:00.10653Z", "modified": "2026-01-27T05:13:00.10653Z", "relationship_type": "indicates", "source_ref": "indicator--ace77107-bc27-4e10-b982-3cf65655cdfb", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a31b327-3dc9-40dd-9b83-3c0b97834bbe", "created": "2026-01-27T05:13:00.106711Z", "modified": "2026-01-27T05:13:00.106711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87d920c67040c74e5836e54c20d0e61ce7e6d076c6e2a45971ae90d920d11b74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.106711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f811a40-c1d6-4067-ad17-edb4f75de538", "created": "2026-01-27T05:13:00.107548Z", "modified": "2026-01-27T05:13:00.107548Z", "relationship_type": "indicates", "source_ref": "indicator--5a31b327-3dc9-40dd-9b83-3c0b97834bbe", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac1da0e-1c7c-4e20-8a76-09cdbcfa758c", "created": "2026-01-27T05:13:00.107724Z", "modified": "2026-01-27T05:13:00.107724Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0bce46e00204797ad4eb3d92d8579559ad3f20243816521647231fc1ca02ab6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.107724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c046ed4-af1d-493e-b375-3586dcc2772a", "created": "2026-01-27T05:13:00.108553Z", "modified": "2026-01-27T05:13:00.108553Z", "relationship_type": "indicates", "source_ref": "indicator--7ac1da0e-1c7c-4e20-8a76-09cdbcfa758c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb3fda0-252f-4b64-a5f5-8fc6fed095fa", "created": "2026-01-27T05:13:00.108731Z", "modified": "2026-01-27T05:13:00.108731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c897bdf61ad8b5457f7f8fd59a55c191c2ed51d404dcf3b9ae057092a9d832e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.108731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecdc9ef7-ec08-44ce-ad9e-3c00684a8a57", "created": "2026-01-27T05:13:00.109561Z", "modified": "2026-01-27T05:13:00.109561Z", "relationship_type": "indicates", "source_ref": "indicator--6eb3fda0-252f-4b64-a5f5-8fc6fed095fa", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3b77e7-8d72-4133-9f91-92994be75eb6", "created": "2026-01-27T05:13:00.109734Z", "modified": "2026-01-27T05:13:00.109734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d8b107b73dcb93507e1bfa102b032666038b5c938b079b60b47b1dcd67335247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.109734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b21197ce-c530-4f06-8bef-8afc92a94bee", "created": "2026-01-27T05:13:00.110559Z", "modified": "2026-01-27T05:13:00.110559Z", "relationship_type": "indicates", "source_ref": "indicator--bb3b77e7-8d72-4133-9f91-92994be75eb6", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af243263-3ce7-446c-827b-dcb130c27e38", "created": "2026-01-27T05:13:00.11074Z", "modified": "2026-01-27T05:13:00.11074Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0475d101795c8b78bda318a568de8e8ee17bdf3a23d83f3701a381fe0235384']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.11074Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ebfd659-4a52-4ff2-a0db-2e1de7cf83fd", "created": "2026-01-27T05:13:00.111575Z", "modified": "2026-01-27T05:13:00.111575Z", "relationship_type": "indicates", "source_ref": "indicator--af243263-3ce7-446c-827b-dcb130c27e38", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2af44c-cd02-4f35-8d16-d18795c27d4d", "created": "2026-01-27T05:13:00.111772Z", "modified": "2026-01-27T05:13:00.111772Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14bb7783317ae3ce9009a93ae19fbafd20b8e21f106fcb5b018f331dbfab710d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.111772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45ae6738-735e-43f1-9aae-7f0867a841b7", "created": "2026-01-27T05:13:00.112705Z", "modified": "2026-01-27T05:13:00.112705Z", "relationship_type": "indicates", "source_ref": "indicator--4a2af44c-cd02-4f35-8d16-d18795c27d4d", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e4cfeb-c6d7-430e-a816-83b9e6c4b5c3", "created": "2026-01-27T05:13:00.112898Z", "modified": "2026-01-27T05:13:00.112898Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='687056ee6576f3f860173e85f46d3313c7353b6bed2a245690320a74c031530d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.112898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0406456d-cd96-4367-8197-f84fc3c032c1", "created": "2026-01-27T05:13:00.113722Z", "modified": "2026-01-27T05:13:00.113722Z", "relationship_type": "indicates", "source_ref": "indicator--37e4cfeb-c6d7-430e-a816-83b9e6c4b5c3", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1286e05-c2e6-45eb-a722-111523311088", "created": "2026-01-27T05:13:00.113916Z", "modified": "2026-01-27T05:13:00.113916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09b58d844b7c6cfb97f75efb2aa59ad10127fe33b178573260ee0032b5ef8791']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.113916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db9c8278-4126-42f0-a4d9-2288bea2cf25", "created": "2026-01-27T05:13:00.114732Z", "modified": "2026-01-27T05:13:00.114732Z", "relationship_type": "indicates", "source_ref": "indicator--f1286e05-c2e6-45eb-a722-111523311088", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba4b88a-6b19-43f4-88d8-8dc7ca5066f5", "created": "2026-01-27T05:13:00.114931Z", "modified": "2026-01-27T05:13:00.114931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a748db885f24cf94cdc68d1e5fbdd09c4523b34a100d128b9bf3a8cfeb03f996']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.114931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a34483c9-3518-4675-b78f-7231f56924ac", "created": "2026-01-27T05:13:00.115756Z", "modified": "2026-01-27T05:13:00.115756Z", "relationship_type": "indicates", "source_ref": "indicator--aba4b88a-6b19-43f4-88d8-8dc7ca5066f5", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8e5b04-b687-4929-af67-065bee36b4e0", "created": "2026-01-27T05:13:00.115935Z", "modified": "2026-01-27T05:13:00.115935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8078b5b023bcc128626adb4848ca2223a7962dcefa1d803f3b8f632a9feaa04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.115935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--064d6a24-8e3e-4adc-9433-fd9527f588e1", "created": "2026-01-27T05:13:00.116762Z", "modified": "2026-01-27T05:13:00.116762Z", "relationship_type": "indicates", "source_ref": "indicator--9b8e5b04-b687-4929-af67-065bee36b4e0", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbb17e9-951e-4530-abef-a9e3998a1300", "created": "2026-01-27T05:13:00.116972Z", "modified": "2026-01-27T05:13:00.116972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48808ad0c3775ca6b8958fc2cfcce3336524c13128fb9c3b7ae806f486ec054a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.116972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--664e9c8f-b4b7-4eda-94da-0192ded91ff4", "created": "2026-01-27T05:13:00.117805Z", "modified": "2026-01-27T05:13:00.117805Z", "relationship_type": "indicates", "source_ref": "indicator--6dbb17e9-951e-4530-abef-a9e3998a1300", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c7c7ad-616f-4275-b632-af8d516849f3", "created": "2026-01-27T05:13:00.117981Z", "modified": "2026-01-27T05:13:00.117981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32d8cba77a144a9c871fe00747d2a98c5dfe6fdec28f330827fc2a199ea40185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.117981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6278642b-4b3f-49eb-bcd2-9732c7222df7", "created": "2026-01-27T05:13:00.118808Z", "modified": "2026-01-27T05:13:00.118808Z", "relationship_type": "indicates", "source_ref": "indicator--e0c7c7ad-616f-4275-b632-af8d516849f3", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4c131f-f093-4604-a4d4-cb46b2c85a4a", "created": "2026-01-27T05:13:00.118983Z", "modified": "2026-01-27T05:13:00.118983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dad778b97ccb0457cadf9fc91f70cfabcc8086d0b25fceb9f9d81aa160c6b187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.118983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e3511a3-fa1b-4266-91c1-24eb58f894a3", "created": "2026-01-27T05:13:00.119808Z", "modified": "2026-01-27T05:13:00.119808Z", "relationship_type": "indicates", "source_ref": "indicator--ba4c131f-f093-4604-a4d4-cb46b2c85a4a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c5e835-2652-4a2f-af7c-5e296cceed45", "created": "2026-01-27T05:13:00.119984Z", "modified": "2026-01-27T05:13:00.119984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0c82497403759f73c7d51086a75e80f8556d3786bc8e0de77fb7f6e02e9cd3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.119984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de6c0aa8-5b5c-4916-9db3-0d15ad26dac1", "created": "2026-01-27T05:13:00.120812Z", "modified": "2026-01-27T05:13:00.120812Z", "relationship_type": "indicates", "source_ref": "indicator--e6c5e835-2652-4a2f-af7c-5e296cceed45", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754fb5c3-2ddd-45ca-8a35-365fadda9322", "created": "2026-01-27T05:13:00.121011Z", "modified": "2026-01-27T05:13:00.121011Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='535534d3558fe8b403ee4abebee3207d8d7e4aafa301c524389a1c168b6b31b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.121011Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae2e6a92-6f01-41ff-bd24-c1507fbee03d", "created": "2026-01-27T05:13:00.122053Z", "modified": "2026-01-27T05:13:00.122053Z", "relationship_type": "indicates", "source_ref": "indicator--754fb5c3-2ddd-45ca-8a35-365fadda9322", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f6b399-8e22-4359-8417-536703627f50", "created": "2026-01-27T05:13:00.12225Z", "modified": "2026-01-27T05:13:00.12225Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='699f50bcba47a86f1c85621f4cc3a1035bca0fbda851e8ae7b1f6cd81709bd6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.12225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a1df892-88d0-48eb-8817-45da73bd6dbf", "created": "2026-01-27T05:13:00.1231Z", "modified": "2026-01-27T05:13:00.1231Z", "relationship_type": "indicates", "source_ref": "indicator--e9f6b399-8e22-4359-8417-536703627f50", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db6f9db-3392-4f49-aeff-fdc02b1efe91", "created": "2026-01-27T05:13:00.123277Z", "modified": "2026-01-27T05:13:00.123277Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fe44faf1707301911a9d1bc92e03b808cc2deacb322d2919346be866e7d8730']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.123277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c7444f2-8887-4a9e-a8ad-210e17e3c769", "created": "2026-01-27T05:13:00.124106Z", "modified": "2026-01-27T05:13:00.124106Z", "relationship_type": "indicates", "source_ref": "indicator--3db6f9db-3392-4f49-aeff-fdc02b1efe91", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6422ad75-db51-4231-b567-969eecf57c37", "created": "2026-01-27T05:13:00.12429Z", "modified": "2026-01-27T05:13:00.12429Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e0cee5d3ec493faecddb1d312b1215e586ac12a5613d67be337c71b8bbc2ffa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.12429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7093dc7-0d7f-429d-a1f6-da84128b9703", "created": "2026-01-27T05:13:00.12514Z", "modified": "2026-01-27T05:13:00.12514Z", "relationship_type": "indicates", "source_ref": "indicator--6422ad75-db51-4231-b567-969eecf57c37", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b99a37-d403-4bc2-a9fb-f96e1b86a525", "created": "2026-01-27T05:13:00.125323Z", "modified": "2026-01-27T05:13:00.125323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='16df130f595dfc8fded1ea8860e131bf5f1122c65ed798aa6ac9ad0e6b6ba032']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.125323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a636553-c6a4-49e1-8ef5-6d2bb6dba290", "created": "2026-01-27T05:13:00.126157Z", "modified": "2026-01-27T05:13:00.126157Z", "relationship_type": "indicates", "source_ref": "indicator--58b99a37-d403-4bc2-a9fb-f96e1b86a525", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd48d5f-7b9f-4125-83e6-23af9d6aacc0", "created": "2026-01-27T05:13:00.126334Z", "modified": "2026-01-27T05:13:00.126334Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32e9aafdae7d8fb2a99d52b82dc38d164d89d9b45c87bc38ad877f45beb95de0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.126334Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93d0c1a6-865b-4b84-bf43-75728261ebfe", "created": "2026-01-27T05:13:00.127163Z", "modified": "2026-01-27T05:13:00.127163Z", "relationship_type": "indicates", "source_ref": "indicator--bdd48d5f-7b9f-4125-83e6-23af9d6aacc0", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81487ef4-dc44-4f7c-8dde-9e3dc1ce1144", "created": "2026-01-27T05:13:00.127336Z", "modified": "2026-01-27T05:13:00.127336Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e3d87b0943d8713204b40c6a99eaf18599217f04d003cdee732bd4d97fe08aac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.127336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bb17b75-06e6-4c04-a0e6-11f9e9b75390", "created": "2026-01-27T05:13:00.128169Z", "modified": "2026-01-27T05:13:00.128169Z", "relationship_type": "indicates", "source_ref": "indicator--81487ef4-dc44-4f7c-8dde-9e3dc1ce1144", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a224fa-2454-4a55-90ec-1bf9c40c28ae", "created": "2026-01-27T05:13:00.128349Z", "modified": "2026-01-27T05:13:00.128349Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c9a65cdbeda09530b695e19eb8f334b9a30d7a4bcccf31ad226ceb034a92e87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.128349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4141a48d-20b1-4d71-ba88-faad0e6ea422", "created": "2026-01-27T05:13:00.129294Z", "modified": "2026-01-27T05:13:00.129294Z", "relationship_type": "indicates", "source_ref": "indicator--e2a224fa-2454-4a55-90ec-1bf9c40c28ae", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb7025a-c595-49a0-a2d0-8906ed065b3c", "created": "2026-01-27T05:13:00.129474Z", "modified": "2026-01-27T05:13:00.129474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='418fb40741803d03f096e3bbacb5ca1e4328436e4a1b933badb580a7f68f792e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.129474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3994315b-0384-4698-b753-42ece6da34b5", "created": "2026-01-27T05:13:00.130435Z", "modified": "2026-01-27T05:13:00.130435Z", "relationship_type": "indicates", "source_ref": "indicator--cfb7025a-c595-49a0-a2d0-8906ed065b3c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907204c2-165e-4052-9e5b-19567cb3e88c", "created": "2026-01-27T05:13:00.130614Z", "modified": "2026-01-27T05:13:00.130614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e439a57f66751605bddb539b98b4d846c0dabfa6a3a851f62c8a3d45935b4569']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.130614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ce33b63-07d0-4c22-b3ec-a1460d3d9960", "created": "2026-01-27T05:13:00.131443Z", "modified": "2026-01-27T05:13:00.131443Z", "relationship_type": "indicates", "source_ref": "indicator--907204c2-165e-4052-9e5b-19567cb3e88c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2a71af-51ec-4834-886e-3fcc58183724", "created": "2026-01-27T05:13:00.131618Z", "modified": "2026-01-27T05:13:00.131618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d13f821731d3346fb84cf6a22f41f1886a2cc216c59d4f463bc0d800d95105f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.131618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5dca56b-2c30-4807-bfe3-0b6bd0503ebe", "created": "2026-01-27T05:13:00.132448Z", "modified": "2026-01-27T05:13:00.132448Z", "relationship_type": "indicates", "source_ref": "indicator--4a2a71af-51ec-4834-886e-3fcc58183724", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208aafa3-4997-4f4b-a7f5-b59dde6e59fa", "created": "2026-01-27T05:13:00.132623Z", "modified": "2026-01-27T05:13:00.132623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41bc7afbb4a6c410f6d9d70a5a12447c0f052ed80424ae12dd2c03189182c115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.132623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32673245-fd59-4f82-8641-284ed2781f7c", "created": "2026-01-27T05:13:00.133452Z", "modified": "2026-01-27T05:13:00.133452Z", "relationship_type": "indicates", "source_ref": "indicator--208aafa3-4997-4f4b-a7f5-b59dde6e59fa", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200bb699-100e-4a00-86bc-93837a4dfb6a", "created": "2026-01-27T05:13:00.133626Z", "modified": "2026-01-27T05:13:00.133626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cc3067d419e8346e5115da8dedf846843dc52402cac41326fbf1d1c610d0184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.133626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a568111d-4161-4d9c-9306-f208bf125d42", "created": "2026-01-27T05:13:00.134451Z", "modified": "2026-01-27T05:13:00.134451Z", "relationship_type": "indicates", "source_ref": "indicator--200bb699-100e-4a00-86bc-93837a4dfb6a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4eb90a6-a4cb-432f-8aac-0f8502d46bf7", "created": "2026-01-27T05:13:00.134651Z", "modified": "2026-01-27T05:13:00.134651Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dce589fdac0fc35e2c7224c6eaabc999453124ab1ed16974cf5aec7757b17257']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.134651Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a11f47b4-db1a-4790-9f84-468f2354f8f6", "created": "2026-01-27T05:13:00.135496Z", "modified": "2026-01-27T05:13:00.135496Z", "relationship_type": "indicates", "source_ref": "indicator--f4eb90a6-a4cb-432f-8aac-0f8502d46bf7", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ef80d8-c0d9-4f98-957d-8595890ff0f5", "created": "2026-01-27T05:13:00.135677Z", "modified": "2026-01-27T05:13:00.135677Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ee81c8a45cd12c8389212485afbd3e63fc89e3dbf6e075b367d65b63bd3311d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.135677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4bb1471-9884-4455-bc01-4a72fb1a473c", "created": "2026-01-27T05:13:00.136548Z", "modified": "2026-01-27T05:13:00.136548Z", "relationship_type": "indicates", "source_ref": "indicator--41ef80d8-c0d9-4f98-957d-8595890ff0f5", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6add465c-51fb-4640-be65-e88875854ac0", "created": "2026-01-27T05:13:00.136725Z", "modified": "2026-01-27T05:13:00.136725Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c06f9e06f7398c491fc4bed26621c81e18ba9938f40d1354241a9cebcd0b67d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.136725Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c63ec694-9d38-488e-8fde-866b1c57f909", "created": "2026-01-27T05:13:00.137637Z", "modified": "2026-01-27T05:13:00.137637Z", "relationship_type": "indicates", "source_ref": "indicator--6add465c-51fb-4640-be65-e88875854ac0", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f03ac13-1fa9-4e27-8db3-92cc89a9cf11", "created": "2026-01-27T05:13:00.137854Z", "modified": "2026-01-27T05:13:00.137854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a58bc4aa70a511a8427e6fe2885436e30a07b1cc2bb87599d5460f1ff808b1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.137854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0751fce-d2d5-4219-b8f6-9783e5ba31a8", "created": "2026-01-27T05:13:00.138694Z", "modified": "2026-01-27T05:13:00.138694Z", "relationship_type": "indicates", "source_ref": "indicator--1f03ac13-1fa9-4e27-8db3-92cc89a9cf11", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3617dc8f-7fca-4cba-975f-c70dbea72932", "created": "2026-01-27T05:13:00.138893Z", "modified": "2026-01-27T05:13:00.138893Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='657d04f1c74ef6b6eb55ef3f63652987464c37c1b9f18089eba4e043d17e666d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.138893Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1e2feea-001c-4647-bcfe-579582d48f76", "created": "2026-01-27T05:13:00.139862Z", "modified": "2026-01-27T05:13:00.139862Z", "relationship_type": "indicates", "source_ref": "indicator--3617dc8f-7fca-4cba-975f-c70dbea72932", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053c8669-9b84-4a7c-b821-bbab24ffef3d", "created": "2026-01-27T05:13:00.140041Z", "modified": "2026-01-27T05:13:00.140041Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2aa01a5501073cb42bba7f36c63b57981783e10287e625eda71247cd6e72170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.140041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1fd613e-b5b6-4866-8115-b88e97ce7f54", "created": "2026-01-27T05:13:00.140867Z", "modified": "2026-01-27T05:13:00.140867Z", "relationship_type": "indicates", "source_ref": "indicator--053c8669-9b84-4a7c-b821-bbab24ffef3d", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426244c3-15e3-4d8c-bae8-c38624571e0b", "created": "2026-01-27T05:13:00.141045Z", "modified": "2026-01-27T05:13:00.141045Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08938fc634c293560834aa6b2188f4dac07ed35b1198b18b186972ea93aa7ece']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.141045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11ae9f4e-53d3-499a-bda5-9a4a1a4d9cc3", "created": "2026-01-27T05:13:00.141869Z", "modified": "2026-01-27T05:13:00.141869Z", "relationship_type": "indicates", "source_ref": "indicator--426244c3-15e3-4d8c-bae8-c38624571e0b", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101ec616-4b17-4e0a-af68-a69c1593471c", "created": "2026-01-27T05:13:00.142048Z", "modified": "2026-01-27T05:13:00.142048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19e43023d8bd7fc446041fdac8123b356405b4d41a2140d791af5e9d908efe65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.142048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--342ca431-fd2e-45da-96c9-ba648ae06a94", "created": "2026-01-27T05:13:00.142884Z", "modified": "2026-01-27T05:13:00.142884Z", "relationship_type": "indicates", "source_ref": "indicator--101ec616-4b17-4e0a-af68-a69c1593471c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c4ea4d-b011-49b7-81c6-1805c060a062", "created": "2026-01-27T05:13:00.143059Z", "modified": "2026-01-27T05:13:00.143059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3c578a7211aec09ed87a2903c34a22a2731d63bbc4b27a2431b69bd16fb564f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.143059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa14cc40-23f7-43ba-858a-f7da0eacdd03", "created": "2026-01-27T05:13:00.143906Z", "modified": "2026-01-27T05:13:00.143906Z", "relationship_type": "indicates", "source_ref": "indicator--d4c4ea4d-b011-49b7-81c6-1805c060a062", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d2bb9f-d8c7-4cae-86ad-5aab7f181290", "created": "2026-01-27T05:13:00.144084Z", "modified": "2026-01-27T05:13:00.144084Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72748f121d9975e5f5c3e4854b90e0057443dcc38e6424389a2f31199511cdd1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.144084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--362e1c54-660e-40e5-9aaf-61900e438e99", "created": "2026-01-27T05:13:00.144917Z", "modified": "2026-01-27T05:13:00.144917Z", "relationship_type": "indicates", "source_ref": "indicator--a7d2bb9f-d8c7-4cae-86ad-5aab7f181290", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca37f8d0-1f71-4154-8338-4d11568ccfc9", "created": "2026-01-27T05:13:00.145091Z", "modified": "2026-01-27T05:13:00.145091Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45796047ce057280b20f83345682f4065282db9dfbed4d85daa110385f3dbf0f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.145091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--809ac02e-c9f0-4f90-b1b2-a5540fe9e98f", "created": "2026-01-27T05:13:00.145955Z", "modified": "2026-01-27T05:13:00.145955Z", "relationship_type": "indicates", "source_ref": "indicator--ca37f8d0-1f71-4154-8338-4d11568ccfc9", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c0a98f-db3f-4d14-bcd7-dfa243c0ea65", "created": "2026-01-27T05:13:00.14614Z", "modified": "2026-01-27T05:13:00.14614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5571c1e45261d36472dd5bca2a51cbabe647480e9af35532e36ebf246f07f070']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.14614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cf29a8b-3334-4f98-8dca-93cfee1c85a6", "created": "2026-01-27T05:13:00.146979Z", "modified": "2026-01-27T05:13:00.146979Z", "relationship_type": "indicates", "source_ref": "indicator--c7c0a98f-db3f-4d14-bcd7-dfa243c0ea65", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f13d1cf-6071-4915-b6b4-64fc07e78302", "created": "2026-01-27T05:13:00.147157Z", "modified": "2026-01-27T05:13:00.147157Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='city.russ.alltrackercorp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.147157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae5b572d-e848-4c07-9e71-6bcec45de915", "created": "2026-01-27T05:13:00.147828Z", "modified": "2026-01-27T05:13:00.147828Z", "relationship_type": "indicates", "source_ref": "indicator--5f13d1cf-6071-4915-b6b4-64fc07e78302", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c6e57b-6dda-490d-b649-df27f5c9c08c", "created": "2026-01-27T05:13:00.148008Z", "modified": "2026-01-27T05:13:00.148008Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='city.russ.alltrackerfamily']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.148008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bf6d7a3-7229-493b-a710-a85a41e2e464", "created": "2026-01-27T05:13:00.14881Z", "modified": "2026-01-27T05:13:00.14881Z", "relationship_type": "indicates", "source_ref": "indicator--49c6e57b-6dda-490d-b649-df27f5c9c08c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b781d693-8b86-44f8-bb9a-9b234633f8f6", "created": "2026-01-27T05:13:00.148989Z", "modified": "2026-01-27T05:13:00.148989Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='city.russ.alltrackerinstaller']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.148989Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbb57142-3382-4498-95ea-4cbe27b1586e", "created": "2026-01-27T05:13:00.149659Z", "modified": "2026-01-27T05:13:00.149659Z", "relationship_type": "indicates", "source_ref": "indicator--b781d693-8b86-44f8-bb9a-9b234633f8f6", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78246ce-bbf4-4503-871b-77576f921e5c", "created": "2026-01-27T05:13:00.149853Z", "modified": "2026-01-27T05:13:00.149853Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.alltracker.security']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.149853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a40090a-1be7-4daa-9cdc-d0ab6c4c749c", "created": "2026-01-27T05:13:00.150515Z", "modified": "2026-01-27T05:13:00.150515Z", "relationship_type": "indicates", "source_ref": "indicator--c78246ce-bbf4-4503-871b-77576f921e5c", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122fe92b-2883-404f-81fe-e4db8c876b8a", "created": "2026-01-27T05:13:00.150701Z", "modified": "2026-01-27T05:13:00.150701Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='219D2D7FEC2B2DA6E25693A75FC15D2C6F4F6E67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.150701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a5a15e2-f671-4090-b631-1617bc3fb7ca", "created": "2026-01-27T05:13:00.151482Z", "modified": "2026-01-27T05:13:00.151482Z", "relationship_type": "indicates", "source_ref": "indicator--122fe92b-2883-404f-81fe-e4db8c876b8a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900dc6ae-4bde-4356-b403-098063a46162", "created": "2026-01-27T05:13:00.151655Z", "modified": "2026-01-27T05:13:00.151655Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='43D45CE7BEE36E449434C14973B7D285209414C7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.151655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c98af50b-ba5a-4a0d-9751-fdbf24f6318e", "created": "2026-01-27T05:13:00.152459Z", "modified": "2026-01-27T05:13:00.152459Z", "relationship_type": "indicates", "source_ref": "indicator--900dc6ae-4bde-4356-b403-098063a46162", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f34737-09bf-464c-a1c7-6f1f2d000f2a", "created": "2026-01-27T05:13:00.152649Z", "modified": "2026-01-27T05:13:00.152649Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6C4E74FD002AEC131F8D05852566055C349E0A54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.152649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ff42c00-fcdd-4d7b-9113-2a7770a6a6d3", "created": "2026-01-27T05:13:00.15349Z", "modified": "2026-01-27T05:13:00.15349Z", "relationship_type": "indicates", "source_ref": "indicator--39f34737-09bf-464c-a1c7-6f1f2d000f2a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d4a923-1f7f-4ed8-9d51-3a4d1f6ee3fb", "created": "2026-01-27T05:13:00.153666Z", "modified": "2026-01-27T05:13:00.153666Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B6A744B0E8AE049AC0C20402EBC137B1192699A9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.153666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9990422-3cb3-4e16-92ec-7d69b66cb803", "created": "2026-01-27T05:13:00.154453Z", "modified": "2026-01-27T05:13:00.154453Z", "relationship_type": "indicates", "source_ref": "indicator--a6d4a923-1f7f-4ed8-9d51-3a4d1f6ee3fb", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9cd3e6-079e-4d9c-8d72-f2c8e007453a", "created": "2026-01-27T05:13:00.15463Z", "modified": "2026-01-27T05:13:00.15463Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F1912CEE4B5D6C1EA4070B53B440E2F660FFCBBD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.15463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b0389e9-105e-4ab9-81bc-28043a79aaaf", "created": "2026-01-27T05:13:00.155414Z", "modified": "2026-01-27T05:13:00.155414Z", "relationship_type": "indicates", "source_ref": "indicator--7d9cd3e6-079e-4d9c-8d72-f2c8e007453a", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816744c7-20df-4af2-85e0-dd977479743d", "created": "2026-01-27T05:13:00.155586Z", "modified": "2026-01-27T05:13:00.155586Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F7871F09D6E58B9BEA5913FB2FA879E5427725E3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.155586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0c6382d-f40c-4346-93c6-c63954202d06", "created": "2026-01-27T05:13:00.156368Z", "modified": "2026-01-27T05:13:00.156368Z", "relationship_type": "indicates", "source_ref": "indicator--816744c7-20df-4af2-85e0-dd977479743d", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77331d23-2a92-453d-ba76-39e817219759", "created": "2026-01-27T05:13:00.156541Z", "modified": "2026-01-27T05:13:00.156541Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6EF8C27EBCF808FFA377A391DB9892B997AF16C9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.156541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b9b22c5-7621-4086-9edc-ce347bdf3be9", "created": "2026-01-27T05:13:00.157447Z", "modified": "2026-01-27T05:13:00.157447Z", "relationship_type": "indicates", "source_ref": "indicator--77331d23-2a92-453d-ba76-39e817219759", "target_ref": "malware--e149757c-8bd8-4068-8a38-57e84969255c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d0582928-bab5-4599-b79e-29c33f23d589", "created": "2026-01-27T05:13:00.157627Z", "modified": "2026-01-27T05:13:00.157627Z", "name": "SpyPhoneApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ad7b57-7126-4656-9412-390e79d647f1", "created": "2026-01-27T05:13:00.157827Z", "modified": "2026-01-27T05:13:00.157827Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spy-phone-app.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.157827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccb1539e-35a2-4255-9244-9074b0902262", "created": "2026-01-27T05:13:00.158518Z", "modified": "2026-01-27T05:13:00.158518Z", "relationship_type": "indicates", "source_ref": "indicator--43ad7b57-7126-4656-9412-390e79d647f1", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc83127d-de60-49e6-b0a9-aa1ea9e92d6a", "created": "2026-01-27T05:13:00.158695Z", "modified": "2026-01-27T05:13:00.158695Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spappmonitoring.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.158695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afc87231-d990-4ea5-a221-5a4608b22f8c", "created": "2026-01-27T05:13:00.1594Z", "modified": "2026-01-27T05:13:00.1594Z", "relationship_type": "indicates", "source_ref": "indicator--fc83127d-de60-49e6-b0a9-aa1ea9e92d6a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e6bc6a-77d4-4c0c-bb9d-f3be1727fd8f", "created": "2026-01-27T05:13:00.159576Z", "modified": "2026-01-27T05:13:00.159576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobil-kem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.159576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfec4bba-2784-4eda-86da-06f2e26a6888", "created": "2026-01-27T05:13:00.160257Z", "modified": "2026-01-27T05:13:00.160257Z", "relationship_type": "indicates", "source_ref": "indicator--c8e6bc6a-77d4-4c0c-bb9d-f3be1727fd8f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9167c72-29cf-4db5-ab96-cda4d6a21794", "created": "2026-01-27T05:13:00.160431Z", "modified": "2026-01-27T05:13:00.160431Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.app-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.160431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a784cb2-29d6-4b8c-881f-4066d831a216", "created": "2026-01-27T05:13:00.161112Z", "modified": "2026-01-27T05:13:00.161112Z", "relationship_type": "indicates", "source_ref": "indicator--c9167c72-29cf-4db5-ab96-cda4d6a21794", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150b61c9-644c-4c16-8c25-18dd1a7c909c", "created": "2026-01-27T05:13:00.161286Z", "modified": "2026-01-27T05:13:00.161286Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b0f927fa0f3253aaac7c15499c477d22b1d8b5e69f443d16abbf16441a5549e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.161286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a433893-44fd-42fa-a5ff-d40e9387b4fc", "created": "2026-01-27T05:13:00.162121Z", "modified": "2026-01-27T05:13:00.162121Z", "relationship_type": "indicates", "source_ref": "indicator--150b61c9-644c-4c16-8c25-18dd1a7c909c", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d827375-0b28-4152-8164-ea04bd4a7143", "created": "2026-01-27T05:13:00.162302Z", "modified": "2026-01-27T05:13:00.162302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ae0373c2ae106c51526a075cec95f3a409d06254354c009ddd954ae570b6c4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.162302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a78109c-41c7-407f-82ec-bc377987fd1c", "created": "2026-01-27T05:13:00.163153Z", "modified": "2026-01-27T05:13:00.163153Z", "relationship_type": "indicates", "source_ref": "indicator--0d827375-0b28-4152-8164-ea04bd4a7143", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfacba82-ec8b-43de-98e2-2f847a50376b", "created": "2026-01-27T05:13:00.163333Z", "modified": "2026-01-27T05:13:00.163333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c95f211dfd1fce7214b46fa2a70c699d136eb7249f5889b9c960b1c400862adf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.163333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c114c71b-a0ea-43b8-b9cc-ec1e82ef2e3b", "created": "2026-01-27T05:13:00.164167Z", "modified": "2026-01-27T05:13:00.164167Z", "relationship_type": "indicates", "source_ref": "indicator--cfacba82-ec8b-43de-98e2-2f847a50376b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7340847c-a3f1-4be7-a5d4-b55763316543", "created": "2026-01-27T05:13:00.164345Z", "modified": "2026-01-27T05:13:00.164345Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79d64a009b634761d747ad566ed740f5f656e99112380b02b590035dc3faa2c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.164345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87a70e2d-8e19-4532-9a10-c169edb59418", "created": "2026-01-27T05:13:00.165185Z", "modified": "2026-01-27T05:13:00.165185Z", "relationship_type": "indicates", "source_ref": "indicator--7340847c-a3f1-4be7-a5d4-b55763316543", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85b99ed-3e93-4466-a2c6-221b0b63e649", "created": "2026-01-27T05:13:00.165361Z", "modified": "2026-01-27T05:13:00.165361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ee3060ca4c7a9606cbd67fdbe3a9c41ba5e41bfac2718674610c0ed9a156afb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.165361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--923dfb61-912d-4d66-b402-40b6753d99db", "created": "2026-01-27T05:13:00.166312Z", "modified": "2026-01-27T05:13:00.166312Z", "relationship_type": "indicates", "source_ref": "indicator--e85b99ed-3e93-4466-a2c6-221b0b63e649", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d03356-73b4-454d-ad02-e300f7b6ea50", "created": "2026-01-27T05:13:00.166487Z", "modified": "2026-01-27T05:13:00.166487Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43f121b66bf5f0cab6940ef24491340de6efd027725ef63d7ea6cfa7cc0ec160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.166487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32c8656d-2a9c-4d75-be1d-43bba3222af3", "created": "2026-01-27T05:13:00.167315Z", "modified": "2026-01-27T05:13:00.167315Z", "relationship_type": "indicates", "source_ref": "indicator--56d03356-73b4-454d-ad02-e300f7b6ea50", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6142bd47-bd29-4c6d-bcb6-09eda5742177", "created": "2026-01-27T05:13:00.167488Z", "modified": "2026-01-27T05:13:00.167488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6fc2a8dc9fd413e35b09f25f7125fc1c3fdd1e7aa8117701c5bba704f846553']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.167488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dacdc76-4678-476e-ac14-5e893fa7144b", "created": "2026-01-27T05:13:00.168349Z", "modified": "2026-01-27T05:13:00.168349Z", "relationship_type": "indicates", "source_ref": "indicator--6142bd47-bd29-4c6d-bcb6-09eda5742177", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b974d2ea-f031-42a5-a81f-b4a18a0467dd", "created": "2026-01-27T05:13:00.168544Z", "modified": "2026-01-27T05:13:00.168544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ddc1acc748d908bfbc04ee792c2e3cd07795f8528bf9229a0350b6627c33e848']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.168544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d928e1e-5a7d-46b6-ad50-f14508ec8cd9", "created": "2026-01-27T05:13:00.169403Z", "modified": "2026-01-27T05:13:00.169403Z", "relationship_type": "indicates", "source_ref": "indicator--b974d2ea-f031-42a5-a81f-b4a18a0467dd", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73596964-99fe-486c-a831-c11f98ad8c34", "created": "2026-01-27T05:13:00.169578Z", "modified": "2026-01-27T05:13:00.169578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e41a3ddd8a52d5c6f3e8896df74b5ea81f27b83dad1e79dd49e32910306b816']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.169578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3514c490-4c47-4ad1-8416-5a21606e4285", "created": "2026-01-27T05:13:00.170414Z", "modified": "2026-01-27T05:13:00.170414Z", "relationship_type": "indicates", "source_ref": "indicator--73596964-99fe-486c-a831-c11f98ad8c34", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596c82cb-12dc-4a14-b6f9-1933c4a90c79", "created": "2026-01-27T05:13:00.170588Z", "modified": "2026-01-27T05:13:00.170588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd1e9250b890860c58b26553cf87cdf8defe59bb12ca928009b43227b2c988cd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.170588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6eebad7-6eb1-4e49-8686-1d0298ccf67f", "created": "2026-01-27T05:13:00.171413Z", "modified": "2026-01-27T05:13:00.171413Z", "relationship_type": "indicates", "source_ref": "indicator--596c82cb-12dc-4a14-b6f9-1933c4a90c79", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae6d7dc-1ce1-4e4f-ac30-9289fbcc15b2", "created": "2026-01-27T05:13:00.171588Z", "modified": "2026-01-27T05:13:00.171588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4afbec9afda9b56b0762a2a6a0e8e37d5110e7095b7453c8bf4ac012ea331bd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.171588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--002cad1c-6e4f-4638-979b-6e2860813817", "created": "2026-01-27T05:13:00.172417Z", "modified": "2026-01-27T05:13:00.172417Z", "relationship_type": "indicates", "source_ref": "indicator--4ae6d7dc-1ce1-4e4f-ac30-9289fbcc15b2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7121a63d-e621-4964-aa74-b68fd483bf90", "created": "2026-01-27T05:13:00.172592Z", "modified": "2026-01-27T05:13:00.172592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cf5f78109ff842af53b425b0f4843b6e4cb14e54d690b4ac32f36356d5eb2f3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.172592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c6a6569-a25b-4de7-8385-15d9970700c2", "created": "2026-01-27T05:13:00.173443Z", "modified": "2026-01-27T05:13:00.173443Z", "relationship_type": "indicates", "source_ref": "indicator--7121a63d-e621-4964-aa74-b68fd483bf90", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08627428-bb2a-4419-9120-000b151c7f08", "created": "2026-01-27T05:13:00.173619Z", "modified": "2026-01-27T05:13:00.173619Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b196afa9834363920e62b421c7d9bf9695b274b4eebaa7edbb9cd650d2cb952e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.173619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb44a511-5f38-443a-817d-611b5afc0f8c", "created": "2026-01-27T05:13:00.174567Z", "modified": "2026-01-27T05:13:00.174567Z", "relationship_type": "indicates", "source_ref": "indicator--08627428-bb2a-4419-9120-000b151c7f08", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d313266-c490-4369-951c-f41d09da92b0", "created": "2026-01-27T05:13:00.174757Z", "modified": "2026-01-27T05:13:00.174757Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3439c51463259c43d2898efdbad2fe7b01e1931bbad572441e1080fe643d00b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.174757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a98a37c-b70c-434f-b383-9c8000ccd81d", "created": "2026-01-27T05:13:00.175577Z", "modified": "2026-01-27T05:13:00.175577Z", "relationship_type": "indicates", "source_ref": "indicator--5d313266-c490-4369-951c-f41d09da92b0", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfabfc4-bd07-4d87-b76d-252ab4563925", "created": "2026-01-27T05:13:00.175765Z", "modified": "2026-01-27T05:13:00.175765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9a7edf9c1f471583e1e93dbefc175f3b42c33b059d3d28b938b207b6de998660']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.175765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35e4aafd-93d0-4dd0-9681-8ed9c402173f", "created": "2026-01-27T05:13:00.176584Z", "modified": "2026-01-27T05:13:00.176584Z", "relationship_type": "indicates", "source_ref": "indicator--6bfabfc4-bd07-4d87-b76d-252ab4563925", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea51c6d-fe2b-4d78-9772-09b10d617198", "created": "2026-01-27T05:13:00.176773Z", "modified": "2026-01-27T05:13:00.176773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='535b0e944d4495f9494e5c914594f3b5b6b71a9f9d5fded0f0b36ed8b2c7c8d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.176773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--141adf4c-cb5f-439d-9661-15b10e3e831f", "created": "2026-01-27T05:13:00.177586Z", "modified": "2026-01-27T05:13:00.177586Z", "relationship_type": "indicates", "source_ref": "indicator--dea51c6d-fe2b-4d78-9772-09b10d617198", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024a9241-a931-4194-8d65-43629c51285a", "created": "2026-01-27T05:13:00.17778Z", "modified": "2026-01-27T05:13:00.17778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81da4710cac6d81fa3a34af3a095a265107e4d49d5596a830c769679ad8a8457']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.17778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77272a6a-1bed-4fdf-9dc5-e20df985aed3", "created": "2026-01-27T05:13:00.178594Z", "modified": "2026-01-27T05:13:00.178594Z", "relationship_type": "indicates", "source_ref": "indicator--024a9241-a931-4194-8d65-43629c51285a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560a4e2b-75ec-460b-a9c8-42f02e47a2b2", "created": "2026-01-27T05:13:00.178782Z", "modified": "2026-01-27T05:13:00.178782Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a92083d1a0ef2520b6177d640b8fa9107b3e3019e4b4c02e4838b74ab6a881ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.178782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef485b2-761a-44e9-8c90-6c188597f1e1", "created": "2026-01-27T05:13:00.179588Z", "modified": "2026-01-27T05:13:00.179588Z", "relationship_type": "indicates", "source_ref": "indicator--560a4e2b-75ec-460b-a9c8-42f02e47a2b2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3177b614-c4f1-435b-8dad-4753f9983d94", "created": "2026-01-27T05:13:00.179773Z", "modified": "2026-01-27T05:13:00.179773Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12c17b6e4486259f25d5adab4ff6b825b2993a7de7315d2dce5dcfee00e718ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.179773Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80761156-ace4-49ae-968f-8986b0618691", "created": "2026-01-27T05:13:00.180593Z", "modified": "2026-01-27T05:13:00.180593Z", "relationship_type": "indicates", "source_ref": "indicator--3177b614-c4f1-435b-8dad-4753f9983d94", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a603dc1-7a06-4ed2-901e-01d7b5416447", "created": "2026-01-27T05:13:00.180789Z", "modified": "2026-01-27T05:13:00.180789Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26c0cb46a5dda9d2828a1727a0b92e1fc576924dec69b0495785ff0ac34c437f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.180789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ff91dc2-1bd4-4bd9-90f8-f97e0721ac30", "created": "2026-01-27T05:13:00.181617Z", "modified": "2026-01-27T05:13:00.181617Z", "relationship_type": "indicates", "source_ref": "indicator--9a603dc1-7a06-4ed2-901e-01d7b5416447", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6068f91a-f7e3-40cb-8d4b-936035e12fc1", "created": "2026-01-27T05:13:00.181816Z", "modified": "2026-01-27T05:13:00.181816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87de51d23823614324bf81bb3f161c9df9ad4125248c750f670eb085682a2fe1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.181816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d9c4b84-f6fd-44eb-8dc0-091097c03894", "created": "2026-01-27T05:13:00.182636Z", "modified": "2026-01-27T05:13:00.182636Z", "relationship_type": "indicates", "source_ref": "indicator--6068f91a-f7e3-40cb-8d4b-936035e12fc1", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbb0d28-b229-47ab-98cc-17f4686b4f07", "created": "2026-01-27T05:13:00.182827Z", "modified": "2026-01-27T05:13:00.182827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31175b492bfcce407d165fbcf3e9e220411d14a84e928aa6b26404876f214a21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.182827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26f04a7a-8e01-4440-a085-5ea44c31268d", "created": "2026-01-27T05:13:00.183813Z", "modified": "2026-01-27T05:13:00.183813Z", "relationship_type": "indicates", "source_ref": "indicator--2fbb0d28-b229-47ab-98cc-17f4686b4f07", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dda28d1-abfc-4f95-b543-d1b4871bd6fb", "created": "2026-01-27T05:13:00.184026Z", "modified": "2026-01-27T05:13:00.184026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='844880a3c36cad107868a516861df2be60dcd9747c0a364e6d2512ab0e33afa2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.184026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--357486bc-883b-49ce-aeab-bc4fae20ca5c", "created": "2026-01-27T05:13:00.184876Z", "modified": "2026-01-27T05:13:00.184876Z", "relationship_type": "indicates", "source_ref": "indicator--3dda28d1-abfc-4f95-b543-d1b4871bd6fb", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57e1374-073a-4aa1-8de4-6102d967ce78", "created": "2026-01-27T05:13:00.185057Z", "modified": "2026-01-27T05:13:00.185057Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2928168521a5058942eab3fcbcf202178f0e7620919f914da111e867b3c03a21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.185057Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0e3bb25-add0-4739-b8ff-7a04ad62b66f", "created": "2026-01-27T05:13:00.18591Z", "modified": "2026-01-27T05:13:00.18591Z", "relationship_type": "indicates", "source_ref": "indicator--e57e1374-073a-4aa1-8de4-6102d967ce78", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c088ea-8304-4e11-9185-4fc2716ffc93", "created": "2026-01-27T05:13:00.186086Z", "modified": "2026-01-27T05:13:00.186086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08a61ce334fb22ad0fb6ff828e11bcbc4969950dae9532bf24d63a23b4141c6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.186086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc5f7d28-dcad-41e6-b1a4-33c78ee00178", "created": "2026-01-27T05:13:00.186909Z", "modified": "2026-01-27T05:13:00.186909Z", "relationship_type": "indicates", "source_ref": "indicator--78c088ea-8304-4e11-9185-4fc2716ffc93", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6793443a-a481-47bc-90cd-e8f4e4ec2907", "created": "2026-01-27T05:13:00.187085Z", "modified": "2026-01-27T05:13:00.187085Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c86e08eb26492a6934174981e4abdfb32f823446f50ec418e4613dbf95fd6a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.187085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--534e417c-5345-474a-a868-4387d2444deb", "created": "2026-01-27T05:13:00.18791Z", "modified": "2026-01-27T05:13:00.18791Z", "relationship_type": "indicates", "source_ref": "indicator--6793443a-a481-47bc-90cd-e8f4e4ec2907", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8f8392-6e6c-4c86-b81c-1acacf29a7ae", "created": "2026-01-27T05:13:00.188086Z", "modified": "2026-01-27T05:13:00.188086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c548cf4c04595df7ceb97df200761129f015b79f492ec113cffb65c4fa5f959']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.188086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--676a64c3-b33f-40f6-bc6f-99ca719e25d5", "created": "2026-01-27T05:13:00.188913Z", "modified": "2026-01-27T05:13:00.188913Z", "relationship_type": "indicates", "source_ref": "indicator--9b8f8392-6e6c-4c86-b81c-1acacf29a7ae", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02ea951-f2f0-4a7f-bcba-af71c17226db", "created": "2026-01-27T05:13:00.189092Z", "modified": "2026-01-27T05:13:00.189092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53e6e0d302a98f49c324a8f49a2ab0950b1a496bb6cff2a5bca385bae1c370ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.189092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e539e9a-495b-4b51-af16-abda13c01aca", "created": "2026-01-27T05:13:00.189923Z", "modified": "2026-01-27T05:13:00.189923Z", "relationship_type": "indicates", "source_ref": "indicator--e02ea951-f2f0-4a7f-bcba-af71c17226db", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3286e208-1aa8-4a46-9d6b-a20491c87e45", "created": "2026-01-27T05:13:00.190098Z", "modified": "2026-01-27T05:13:00.190098Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d77c3e748a0520c399f5a403d3fee0cb57740497bacd285a80cb48159778488d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.190098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--929d9cc6-dd27-4843-bf22-9c783d12eedf", "created": "2026-01-27T05:13:00.190935Z", "modified": "2026-01-27T05:13:00.190935Z", "relationship_type": "indicates", "source_ref": "indicator--3286e208-1aa8-4a46-9d6b-a20491c87e45", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df658acd-383b-4db8-bd18-6c507e441a95", "created": "2026-01-27T05:13:00.191118Z", "modified": "2026-01-27T05:13:00.191118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18ede40421c034aaa6a9bd065358a4583a2b7ac0dba384222b4390a9af366042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.191118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2608cded-5996-4c58-9774-0095590ae17d", "created": "2026-01-27T05:13:00.191951Z", "modified": "2026-01-27T05:13:00.191951Z", "relationship_type": "indicates", "source_ref": "indicator--df658acd-383b-4db8-bd18-6c507e441a95", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e4dd8e-7392-49c9-bff6-b29a80da5c44", "created": "2026-01-27T05:13:00.192125Z", "modified": "2026-01-27T05:13:00.192125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='373685763d14dc7361a745ed2f75c50c8f52f07ced615a2c98434016dd766451']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.192125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee9bbddc-2fa0-4dff-bf54-5a788b78e02b", "created": "2026-01-27T05:13:00.193401Z", "modified": "2026-01-27T05:13:00.193401Z", "relationship_type": "indicates", "source_ref": "indicator--57e4dd8e-7392-49c9-bff6-b29a80da5c44", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4c8a04-fec5-44de-a1b5-992acd1a0262", "created": "2026-01-27T05:13:00.19358Z", "modified": "2026-01-27T05:13:00.19358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5767f69b110a2c2900f6a307002b661d8868934e082dd0114a141da315f142f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.19358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--739c78bb-6248-41b7-a3e9-21d0ca1dbce1", "created": "2026-01-27T05:13:00.194409Z", "modified": "2026-01-27T05:13:00.194409Z", "relationship_type": "indicates", "source_ref": "indicator--3e4c8a04-fec5-44de-a1b5-992acd1a0262", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd60aa9e-cd33-4a27-bc08-40933bb728d3", "created": "2026-01-27T05:13:00.194586Z", "modified": "2026-01-27T05:13:00.194586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7c3d3ce0b1f56fce9a4dce38c69df0377c7e5c5f2440335a4108f9a9c33d3d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.194586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef05101a-0d3e-4e73-881e-509f3a8e9927", "created": "2026-01-27T05:13:00.195413Z", "modified": "2026-01-27T05:13:00.195413Z", "relationship_type": "indicates", "source_ref": "indicator--fd60aa9e-cd33-4a27-bc08-40933bb728d3", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bd8a17-43ec-45e6-9c18-b390083638df", "created": "2026-01-27T05:13:00.195588Z", "modified": "2026-01-27T05:13:00.195588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81e5760591786510e8828ca988b429209ebc3a0feeb8a20555fe76c6bb91a142']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.195588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a89e6985-78e6-4dc9-b90f-5405add61c79", "created": "2026-01-27T05:13:00.196416Z", "modified": "2026-01-27T05:13:00.196416Z", "relationship_type": "indicates", "source_ref": "indicator--a6bd8a17-43ec-45e6-9c18-b390083638df", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f7c4a4-3600-47ad-9be5-ab3cbd10395e", "created": "2026-01-27T05:13:00.196591Z", "modified": "2026-01-27T05:13:00.196591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c9d8441d0635e9b63aa25eaf2f1b7859bbd0e7ed83ef033d40d26add116a676']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.196591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--293425c8-c421-4493-a696-a007b263dc7c", "created": "2026-01-27T05:13:00.197414Z", "modified": "2026-01-27T05:13:00.197414Z", "relationship_type": "indicates", "source_ref": "indicator--16f7c4a4-3600-47ad-9be5-ab3cbd10395e", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057ad2f8-bffc-4748-b263-cbe0d245af77", "created": "2026-01-27T05:13:00.197591Z", "modified": "2026-01-27T05:13:00.197591Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6536299186ffc8652c757a02baad87d96d8a2642282e962528e63a407781d89b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.197591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb409c59-5376-49bb-8c0a-2a2ed644c9fd", "created": "2026-01-27T05:13:00.198415Z", "modified": "2026-01-27T05:13:00.198415Z", "relationship_type": "indicates", "source_ref": "indicator--057ad2f8-bffc-4748-b263-cbe0d245af77", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baaa7bcd-b63b-4335-aa71-e7db33ed6351", "created": "2026-01-27T05:13:00.19859Z", "modified": "2026-01-27T05:13:00.19859Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3512ba4341d0ec9a6365ed00310cbc9808c49325f37fb6356b9f6fe135c5085']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.19859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0798dc0-f9b0-4fc3-9b2d-d0dd86aa6eeb", "created": "2026-01-27T05:13:00.19941Z", "modified": "2026-01-27T05:13:00.19941Z", "relationship_type": "indicates", "source_ref": "indicator--baaa7bcd-b63b-4335-aa71-e7db33ed6351", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3b2036-b25d-48a2-84f4-08f55e455f5f", "created": "2026-01-27T05:13:00.199637Z", "modified": "2026-01-27T05:13:00.199637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5d7104647d90441d6cf147ab943e5d9cff8361a4eaae5f5031f1c3cf8648abd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.199637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87afd5e8-77ad-443f-b31e-8b41e907351c", "created": "2026-01-27T05:13:00.200536Z", "modified": "2026-01-27T05:13:00.200536Z", "relationship_type": "indicates", "source_ref": "indicator--5c3b2036-b25d-48a2-84f4-08f55e455f5f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08c7a3c-6073-4849-8c35-19d3a2fc0413", "created": "2026-01-27T05:13:00.200728Z", "modified": "2026-01-27T05:13:00.200728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='77acc2ea27e3c5f6628355a28cf79f946769d1891cd6e87f26817dd466e7616e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.200728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2acc5414-ab4f-410a-89bb-4074add8a695", "created": "2026-01-27T05:13:00.201577Z", "modified": "2026-01-27T05:13:00.201577Z", "relationship_type": "indicates", "source_ref": "indicator--f08c7a3c-6073-4849-8c35-19d3a2fc0413", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b845fa44-fb7c-443a-b74c-21227b54550c", "created": "2026-01-27T05:13:00.201764Z", "modified": "2026-01-27T05:13:00.201764Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e25096a15acde0e653d476069529485e54c936539c316ac6d27f5666e01a29c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.201764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d6661c1-e66e-4baf-8005-4bcc01761384", "created": "2026-01-27T05:13:00.202709Z", "modified": "2026-01-27T05:13:00.202709Z", "relationship_type": "indicates", "source_ref": "indicator--b845fa44-fb7c-443a-b74c-21227b54550c", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f5e86d-4744-4397-9148-d48aaed8166f", "created": "2026-01-27T05:13:00.20291Z", "modified": "2026-01-27T05:13:00.20291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb059a134929016e67ecdf414866cc3c4e88bf5e50dcfbbe842fe99187b49375']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.20291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67968ff8-38d9-42dc-a7b4-729b878b5803", "created": "2026-01-27T05:13:00.20373Z", "modified": "2026-01-27T05:13:00.20373Z", "relationship_type": "indicates", "source_ref": "indicator--18f5e86d-4744-4397-9148-d48aaed8166f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f0e245-38db-489d-b3b2-87296daecda2", "created": "2026-01-27T05:13:00.203924Z", "modified": "2026-01-27T05:13:00.203924Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d81f411939f76641bcfc03d01cacdf98195db9386589c45bd80ad0e29dbc7a86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.203924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7cc1fe3-8bba-4f8f-9a50-25daacb6dd0b", "created": "2026-01-27T05:13:00.204731Z", "modified": "2026-01-27T05:13:00.204731Z", "relationship_type": "indicates", "source_ref": "indicator--43f0e245-38db-489d-b3b2-87296daecda2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f90202-4786-4719-a383-1585a4b7ddcd", "created": "2026-01-27T05:13:00.204925Z", "modified": "2026-01-27T05:13:00.204925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1df055fd523073863d664421b311a01c4343d4f5587027425ed6644d62e6babc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.204925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50d75cce-6bdb-4c0d-bf60-8000e5a4a095", "created": "2026-01-27T05:13:00.20576Z", "modified": "2026-01-27T05:13:00.20576Z", "relationship_type": "indicates", "source_ref": "indicator--58f90202-4786-4719-a383-1585a4b7ddcd", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61874517-fb20-4573-ab3b-5079b5e8b479", "created": "2026-01-27T05:13:00.205937Z", "modified": "2026-01-27T05:13:00.205937Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f28176e25d402c46f0a9a4099a9c8fdbe684607bb4843ac58f8812e7cb4a86e0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.205937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b09fd945-ce08-484a-90c3-c98d807fb92f", "created": "2026-01-27T05:13:00.206741Z", "modified": "2026-01-27T05:13:00.206741Z", "relationship_type": "indicates", "source_ref": "indicator--61874517-fb20-4573-ab3b-5079b5e8b479", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c697c4b-189f-427c-af58-b5d422cef6fa", "created": "2026-01-27T05:13:00.206932Z", "modified": "2026-01-27T05:13:00.206932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adcba2cac74787de4c38f42c2be04717725d5f85eb5d4a693717acc750fe65a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.206932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d431646-c13f-47ff-8a8a-41aaace9b7e3", "created": "2026-01-27T05:13:00.207736Z", "modified": "2026-01-27T05:13:00.207736Z", "relationship_type": "indicates", "source_ref": "indicator--9c697c4b-189f-427c-af58-b5d422cef6fa", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb43722-1af2-42db-8903-1593ee3d0385", "created": "2026-01-27T05:13:00.207927Z", "modified": "2026-01-27T05:13:00.207927Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93df66bac396653bbb529b8aae87a3cacfd0153c0dade097cf7ba8095f0a1e51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.207927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01fc02f5-58fd-47b1-ab66-0d3dfd4a22e7", "created": "2026-01-27T05:13:00.208742Z", "modified": "2026-01-27T05:13:00.208742Z", "relationship_type": "indicates", "source_ref": "indicator--acb43722-1af2-42db-8903-1593ee3d0385", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695465d3-d3e5-466f-950e-21d3d61f5536", "created": "2026-01-27T05:13:00.208944Z", "modified": "2026-01-27T05:13:00.208944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba5904684801434db9ee1fbf510c36ac8b4384e089b42b8fd2acc548c8f93b0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.208944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c857cccc-e6e4-4beb-bf0d-a1acac96a585", "created": "2026-01-27T05:13:00.209778Z", "modified": "2026-01-27T05:13:00.209778Z", "relationship_type": "indicates", "source_ref": "indicator--695465d3-d3e5-466f-950e-21d3d61f5536", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a904b4-7497-4d79-9132-ca738608f29c", "created": "2026-01-27T05:13:00.209953Z", "modified": "2026-01-27T05:13:00.209953Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cefce4824352ae240a0b2d381a6c8a5ef0bd20a51a23c9c8420bf70a17c54de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.209953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bbed56f-238b-419f-9801-5d598008fde9", "created": "2026-01-27T05:13:00.210773Z", "modified": "2026-01-27T05:13:00.210773Z", "relationship_type": "indicates", "source_ref": "indicator--03a904b4-7497-4d79-9132-ca738608f29c", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90edd98-115e-4e6d-a952-3ac7933e5fa4", "created": "2026-01-27T05:13:00.210952Z", "modified": "2026-01-27T05:13:00.210952Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b2ecb53eed14e4129c08bfbe477b9478221f5bda481a6a39f7b2d8daa888458']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.210952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e82670d-555f-4e94-b7c4-4b38e4518f17", "created": "2026-01-27T05:13:00.211906Z", "modified": "2026-01-27T05:13:00.211906Z", "relationship_type": "indicates", "source_ref": "indicator--b90edd98-115e-4e6d-a952-3ac7933e5fa4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcf3d75-0630-4e67-86d5-65b00c5e335d", "created": "2026-01-27T05:13:00.212084Z", "modified": "2026-01-27T05:13:00.212084Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c617b714eacf8626c4bfb6688a29cdcce5e68d71fd66ad41f12f23a481368ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.212084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--389d74ab-b978-4188-ba9d-fa9e6917e6b6", "created": "2026-01-27T05:13:00.212912Z", "modified": "2026-01-27T05:13:00.212912Z", "relationship_type": "indicates", "source_ref": "indicator--9fcf3d75-0630-4e67-86d5-65b00c5e335d", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac002e2c-b4c7-44f1-a49d-84f251653313", "created": "2026-01-27T05:13:00.213091Z", "modified": "2026-01-27T05:13:00.213091Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6862e54ad16d6cfe8682504a1397d5f129a35455062fb18fdd2d06abc54d65a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.213091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80f7d3ee-6567-4b32-841f-c3f53faf194c", "created": "2026-01-27T05:13:00.213941Z", "modified": "2026-01-27T05:13:00.213941Z", "relationship_type": "indicates", "source_ref": "indicator--ac002e2c-b4c7-44f1-a49d-84f251653313", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b4c81d-3c5f-447c-8e22-ff893fd2a156", "created": "2026-01-27T05:13:00.214119Z", "modified": "2026-01-27T05:13:00.214119Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='503c6d96d8a31c05aadd8b28574e191065584fd06416b497b6e5681cfb7e536e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.214119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d610772f-d26c-4eb0-8d62-1e5c19b42662", "created": "2026-01-27T05:13:00.21495Z", "modified": "2026-01-27T05:13:00.21495Z", "relationship_type": "indicates", "source_ref": "indicator--63b4c81d-3c5f-447c-8e22-ff893fd2a156", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35987e0e-69ed-4705-9fbf-0d535026adaf", "created": "2026-01-27T05:13:00.21517Z", "modified": "2026-01-27T05:13:00.21517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b01b24f660ab4d03c3f4a5eeeab83b17215a544c0044b39110abacfc29c7c206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.21517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcb5c634-2fd0-48ff-8135-9cb0bb50c683", "created": "2026-01-27T05:13:00.216073Z", "modified": "2026-01-27T05:13:00.216073Z", "relationship_type": "indicates", "source_ref": "indicator--35987e0e-69ed-4705-9fbf-0d535026adaf", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ec41c8-6ff6-4f60-8739-0df669ef1b03", "created": "2026-01-27T05:13:00.216268Z", "modified": "2026-01-27T05:13:00.216268Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e876dc2c58359989f61369bd107ef792bd11d19d74023296300f2799a8a8a30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.216268Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45afb5a0-612c-4318-8be5-9da3f6743f39", "created": "2026-01-27T05:13:00.217143Z", "modified": "2026-01-27T05:13:00.217143Z", "relationship_type": "indicates", "source_ref": "indicator--e1ec41c8-6ff6-4f60-8739-0df669ef1b03", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5438b769-99b7-4e9e-991a-094a19ea98a2", "created": "2026-01-27T05:13:00.217319Z", "modified": "2026-01-27T05:13:00.217319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='00dbf6f340048b3ebd087b3b34b582f2875b4fd8ba9b16361db0cd07e7021232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.217319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96393254-6735-4830-ae8a-c612e0eee0d2", "created": "2026-01-27T05:13:00.218162Z", "modified": "2026-01-27T05:13:00.218162Z", "relationship_type": "indicates", "source_ref": "indicator--5438b769-99b7-4e9e-991a-094a19ea98a2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385c8548-c4c5-4958-95ff-57274820b850", "created": "2026-01-27T05:13:00.218337Z", "modified": "2026-01-27T05:13:00.218337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df07566ebdc1021800a7639e3ad660d2341abe7f0be0c5796a37ad69b1596448']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.218337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce6b9e12-cc9b-4a85-aff7-65330ca3f8a7", "created": "2026-01-27T05:13:00.219176Z", "modified": "2026-01-27T05:13:00.219176Z", "relationship_type": "indicates", "source_ref": "indicator--385c8548-c4c5-4958-95ff-57274820b850", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5bf501-935b-4005-9f0c-a8ec9f2e276b", "created": "2026-01-27T05:13:00.219352Z", "modified": "2026-01-27T05:13:00.219352Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e0987bcefdf439fe6a841768db67f219179693f7068cf4b74d553b06f987707']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.219352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e594fef-8699-41a9-a30d-e6ea011a909b", "created": "2026-01-27T05:13:00.220323Z", "modified": "2026-01-27T05:13:00.220323Z", "relationship_type": "indicates", "source_ref": "indicator--ac5bf501-935b-4005-9f0c-a8ec9f2e276b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193ff202-67bf-43a2-a587-be6fa1da4d55", "created": "2026-01-27T05:13:00.220501Z", "modified": "2026-01-27T05:13:00.220501Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='103168909a5e5b626b1d77eff4c3a7262f48ed93915c96496c1eb56af669e921']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.220501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b50a494-2f02-4724-93c3-9583e8a0da5d", "created": "2026-01-27T05:13:00.221341Z", "modified": "2026-01-27T05:13:00.221341Z", "relationship_type": "indicates", "source_ref": "indicator--193ff202-67bf-43a2-a587-be6fa1da4d55", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aaa2d39-67e5-4921-832b-b4fe2f714820", "created": "2026-01-27T05:13:00.221519Z", "modified": "2026-01-27T05:13:00.221519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b440e8ed6d0696e50a070030a64900a2881c285cff118ddd3bbe75d66203262']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.221519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ae5988b-bd71-4867-9b4c-2499fb4bd067", "created": "2026-01-27T05:13:00.222466Z", "modified": "2026-01-27T05:13:00.222466Z", "relationship_type": "indicates", "source_ref": "indicator--2aaa2d39-67e5-4921-832b-b4fe2f714820", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0a4a5f-63c1-4ba0-8217-5c539f98b1ce", "created": "2026-01-27T05:13:00.222649Z", "modified": "2026-01-27T05:13:00.222649Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa7e7a4af9d27088f579e79029ad68bfced4305bc1bff3e9a7b27fe71d1fa666']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.222649Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bca6bc5-9949-4a0f-9609-1cd82da07567", "created": "2026-01-27T05:13:00.223508Z", "modified": "2026-01-27T05:13:00.223508Z", "relationship_type": "indicates", "source_ref": "indicator--ff0a4a5f-63c1-4ba0-8217-5c539f98b1ce", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c148d4-2893-487b-9972-eed08f7b9ec0", "created": "2026-01-27T05:13:00.223685Z", "modified": "2026-01-27T05:13:00.223685Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ae908a5055c5e0d858645bab25ece364d6930031ab3975155d6c09526dd0f11b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.223685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88b99258-d323-4360-8433-bda4b5aa11db", "created": "2026-01-27T05:13:00.224542Z", "modified": "2026-01-27T05:13:00.224542Z", "relationship_type": "indicates", "source_ref": "indicator--c9c148d4-2893-487b-9972-eed08f7b9ec0", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756d49e9-1cbd-47f8-b69a-924c947c5a68", "created": "2026-01-27T05:13:00.224714Z", "modified": "2026-01-27T05:13:00.224714Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='940523a4581857a3db71ee79a00e54dbac37ea3e778748573c0e6fda31a97e80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.224714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a9ebe5b-3401-4b81-902c-b665130f5340", "created": "2026-01-27T05:13:00.225559Z", "modified": "2026-01-27T05:13:00.225559Z", "relationship_type": "indicates", "source_ref": "indicator--756d49e9-1cbd-47f8-b69a-924c947c5a68", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b554239e-efd9-4965-aab9-68781f4f1a93", "created": "2026-01-27T05:13:00.225734Z", "modified": "2026-01-27T05:13:00.225734Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47bd745481f7fb660750d1ae807ba75e0438208a1ae52e3478dacb78e9da0006']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.225734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--397aee34-eb22-4bc8-a285-6e2afc540a92", "created": "2026-01-27T05:13:00.226567Z", "modified": "2026-01-27T05:13:00.226567Z", "relationship_type": "indicates", "source_ref": "indicator--b554239e-efd9-4965-aab9-68781f4f1a93", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56e8b16-f254-4efd-a142-cd5d3ff07af8", "created": "2026-01-27T05:13:00.226742Z", "modified": "2026-01-27T05:13:00.226742Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5b647bad40dbb2bda2b4afa8a4764434b86bca4771c417a88f287309b19026d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.226742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f70accd-d001-4d67-a899-28509323a1cf", "created": "2026-01-27T05:13:00.227586Z", "modified": "2026-01-27T05:13:00.227586Z", "relationship_type": "indicates", "source_ref": "indicator--b56e8b16-f254-4efd-a142-cd5d3ff07af8", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31ae11f-0084-4788-9bb5-2b8a08d81bcf", "created": "2026-01-27T05:13:00.227775Z", "modified": "2026-01-27T05:13:00.227775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba8d5fa4a1b42023eb2e88836d3b5deaa7db0625222b057e2f96f775e2140ea1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.227775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14ca2cae-7efb-4d34-9600-01f4ddcba3b9", "created": "2026-01-27T05:13:00.22859Z", "modified": "2026-01-27T05:13:00.22859Z", "relationship_type": "indicates", "source_ref": "indicator--a31ae11f-0084-4788-9bb5-2b8a08d81bcf", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e1644a-7f3b-4860-8a4b-988e0a1381af", "created": "2026-01-27T05:13:00.228783Z", "modified": "2026-01-27T05:13:00.228783Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f47e23ab070335c456242be99382fd0e4a210b4fa2f48abe798b032e1893abd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.228783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94063c74-ebfb-4859-a579-f8841a46a407", "created": "2026-01-27T05:13:00.229737Z", "modified": "2026-01-27T05:13:00.229737Z", "relationship_type": "indicates", "source_ref": "indicator--66e1644a-7f3b-4860-8a4b-988e0a1381af", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd565ef-51a9-4185-aa71-68a5a33a44a2", "created": "2026-01-27T05:13:00.229931Z", "modified": "2026-01-27T05:13:00.229931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5934f112c69e2ac72522b2e45f907533ec747a9f4bdd9d9d68431a6f520eeb0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.229931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--723a0aa2-2ec7-4b66-99ad-fded71ffee55", "created": "2026-01-27T05:13:00.230765Z", "modified": "2026-01-27T05:13:00.230765Z", "relationship_type": "indicates", "source_ref": "indicator--4bd565ef-51a9-4185-aa71-68a5a33a44a2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1571bf18-703a-4c12-9ac5-496472c03051", "created": "2026-01-27T05:13:00.230945Z", "modified": "2026-01-27T05:13:00.230945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e36337275d56f7b6246811a00e4c8f2299b1ce8e61babca980d49f7e0b318742']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.230945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8785ae0-f390-4032-89c9-b90d27dc5200", "created": "2026-01-27T05:13:00.23183Z", "modified": "2026-01-27T05:13:00.23183Z", "relationship_type": "indicates", "source_ref": "indicator--1571bf18-703a-4c12-9ac5-496472c03051", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dce93bb-e82c-4cff-9c27-91faca93a9f9", "created": "2026-01-27T05:13:00.232027Z", "modified": "2026-01-27T05:13:00.232027Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='946bb191f66732fe679ef8288479be63976148e3d980ca2987ddc6661f0e5c47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.232027Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ccbb1be-c5ce-4f1a-850e-575bdfdd8121", "created": "2026-01-27T05:13:00.23287Z", "modified": "2026-01-27T05:13:00.23287Z", "relationship_type": "indicates", "source_ref": "indicator--2dce93bb-e82c-4cff-9c27-91faca93a9f9", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63c4300-f291-4405-969c-c5635c54f113", "created": "2026-01-27T05:13:00.233053Z", "modified": "2026-01-27T05:13:00.233053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='31c8e60d8cbe5a82e86d28a43829659f212e0d40a7fed4c4997714240452edc2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.233053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebbb3a4a-5134-4e61-a206-fd1ffb519a01", "created": "2026-01-27T05:13:00.233903Z", "modified": "2026-01-27T05:13:00.233903Z", "relationship_type": "indicates", "source_ref": "indicator--e63c4300-f291-4405-969c-c5635c54f113", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad99b74d-3793-4495-8000-37eaf19165cb", "created": "2026-01-27T05:13:00.234089Z", "modified": "2026-01-27T05:13:00.234089Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91f0518802ae099336383e00360188544b5dda2461ad5c957b1521961f73d7bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.234089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b41babda-f188-4dba-9e62-f23d5439e96a", "created": "2026-01-27T05:13:00.234924Z", "modified": "2026-01-27T05:13:00.234924Z", "relationship_type": "indicates", "source_ref": "indicator--ad99b74d-3793-4495-8000-37eaf19165cb", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf66d3e-4d4b-4ac8-95c0-25c74d5213b6", "created": "2026-01-27T05:13:00.2351Z", "modified": "2026-01-27T05:13:00.2351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='44eae4482460f0de30ded0605c3da8c24b09cada7d63dba34430b4e71a561089']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.2351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98364243-a8a0-490b-97d4-9ebc7edad3ab", "created": "2026-01-27T05:13:00.235936Z", "modified": "2026-01-27T05:13:00.235936Z", "relationship_type": "indicates", "source_ref": "indicator--eaf66d3e-4d4b-4ac8-95c0-25c74d5213b6", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c03eae4-01c6-49ca-9004-93f43afa8bdb", "created": "2026-01-27T05:13:00.23612Z", "modified": "2026-01-27T05:13:00.23612Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc3c22871c3b6874f109c123b6023edccf771db86d7ed2ee7db60b56f54c63f8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.23612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb976138-7432-41bb-b428-67a08d635219", "created": "2026-01-27T05:13:00.23695Z", "modified": "2026-01-27T05:13:00.23695Z", "relationship_type": "indicates", "source_ref": "indicator--2c03eae4-01c6-49ca-9004-93f43afa8bdb", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127b195d-307d-4e1d-8bca-3c6eddf5b96d", "created": "2026-01-27T05:13:00.237124Z", "modified": "2026-01-27T05:13:00.237124Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d3a207a9ad86169183f2222ccaac898ed2d88ee29dcbbfde24f821c1cf324e39']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.237124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb42e9f2-27ed-4682-b33f-fbe014dcebbe", "created": "2026-01-27T05:13:00.237984Z", "modified": "2026-01-27T05:13:00.237984Z", "relationship_type": "indicates", "source_ref": "indicator--127b195d-307d-4e1d-8bca-3c6eddf5b96d", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd83f5f3-51e6-493f-893d-8b6048c38a70", "created": "2026-01-27T05:13:00.23816Z", "modified": "2026-01-27T05:13:00.23816Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79397d86c27b9a48f7e63f52561907b06b8f63e099cc552b885be4efd6a6caa5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.23816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4591859-692f-4433-8521-7ce774898b99", "created": "2026-01-27T05:13:00.239128Z", "modified": "2026-01-27T05:13:00.239128Z", "relationship_type": "indicates", "source_ref": "indicator--fd83f5f3-51e6-493f-893d-8b6048c38a70", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feefb00a-3ba7-45bd-9e82-218c209f6ba9", "created": "2026-01-27T05:13:00.239305Z", "modified": "2026-01-27T05:13:00.239305Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e2050490ac0140780984c528dd0d05fbd82f2e90a18cda2e54b4ed3dbd45865']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.239305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e97f8d7d-e9b4-48cc-8622-d28caee5c29f", "created": "2026-01-27T05:13:00.240139Z", "modified": "2026-01-27T05:13:00.240139Z", "relationship_type": "indicates", "source_ref": "indicator--feefb00a-3ba7-45bd-9e82-218c209f6ba9", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb3871a-8e2a-4735-8035-ac1d219aec81", "created": "2026-01-27T05:13:00.240316Z", "modified": "2026-01-27T05:13:00.240316Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d1b5e337030f6919678f45177ce8962da9e07fca1ef92b0633b75c77acc86d4e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.240316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8ce0f41-b903-479a-9bd4-4f900dff9d70", "created": "2026-01-27T05:13:00.241146Z", "modified": "2026-01-27T05:13:00.241146Z", "relationship_type": "indicates", "source_ref": "indicator--fcb3871a-8e2a-4735-8035-ac1d219aec81", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568b3666-4511-4d80-b53d-ce72b215fa2e", "created": "2026-01-27T05:13:00.241323Z", "modified": "2026-01-27T05:13:00.241323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fbac144cac26439c9293f2bb1489957dca1351e8918ae2373b53040b9a9a4faa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.241323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01791e20-4a39-4e9f-9948-08e2056ac67b", "created": "2026-01-27T05:13:00.242158Z", "modified": "2026-01-27T05:13:00.242158Z", "relationship_type": "indicates", "source_ref": "indicator--568b3666-4511-4d80-b53d-ce72b215fa2e", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81da809c-3430-45db-8288-fe35829e4cfe", "created": "2026-01-27T05:13:00.242335Z", "modified": "2026-01-27T05:13:00.242335Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='11a7de1a0cadd32e4678416255291e458c741351158230830860734d2d64d679']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.242335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdc536e2-f9ce-4a0b-a775-c3ebde0d770f", "created": "2026-01-27T05:13:00.243175Z", "modified": "2026-01-27T05:13:00.243175Z", "relationship_type": "indicates", "source_ref": "indicator--81da809c-3430-45db-8288-fe35829e4cfe", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9312a7-1696-4835-a543-5d9696ce539b", "created": "2026-01-27T05:13:00.243356Z", "modified": "2026-01-27T05:13:00.243356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49c49f29b891dbb58efca0330a60d4b58b324794a3f4d48f764198eff7f3e7e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.243356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad1b4a7c-ffc9-4718-b35b-9b902d4864ea", "created": "2026-01-27T05:13:00.244193Z", "modified": "2026-01-27T05:13:00.244193Z", "relationship_type": "indicates", "source_ref": "indicator--5c9312a7-1696-4835-a543-5d9696ce539b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30251279-7cd9-4857-8ff4-aae4c4ca697c", "created": "2026-01-27T05:13:00.244367Z", "modified": "2026-01-27T05:13:00.244367Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='703fbfca4675a382ca95bf218408f3b80356cf02bd22b13535e317b54e5f8a64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.244367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c0e13f8-abcf-4534-b291-b36e8b36ec69", "created": "2026-01-27T05:13:00.245222Z", "modified": "2026-01-27T05:13:00.245222Z", "relationship_type": "indicates", "source_ref": "indicator--30251279-7cd9-4857-8ff4-aae4c4ca697c", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd1dd34-5c5b-40d7-b6a2-03337467a514", "created": "2026-01-27T05:13:00.245397Z", "modified": "2026-01-27T05:13:00.245397Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec3cfd829d6579edb1b3ce4cc944442c6a52473da0ef52b82565a3da5a5d7e47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.245397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51dd913a-9ddf-46bf-b494-7430b51e9685", "created": "2026-01-27T05:13:00.246247Z", "modified": "2026-01-27T05:13:00.246247Z", "relationship_type": "indicates", "source_ref": "indicator--acd1dd34-5c5b-40d7-b6a2-03337467a514", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353395bc-57e5-44fa-b0a4-fae20da1b0dd", "created": "2026-01-27T05:13:00.246422Z", "modified": "2026-01-27T05:13:00.246422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9e609321129db484b58dd632df2493af11791517ff7f49aee8b061f50542fe31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.246422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d16b4f20-a0e7-4210-b84b-3b70cc4694dd", "created": "2026-01-27T05:13:00.247479Z", "modified": "2026-01-27T05:13:00.247479Z", "relationship_type": "indicates", "source_ref": "indicator--353395bc-57e5-44fa-b0a4-fae20da1b0dd", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84b5fc0-026a-40bc-bcdc-a0f25e07e650", "created": "2026-01-27T05:13:00.247682Z", "modified": "2026-01-27T05:13:00.247682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='321d8c52eef9357a646606b171cac0afc9f06b2f2323ce0a55b19645dfe15879']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.247682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e53ea36d-9d6e-4186-9993-9d7b15e705ce", "created": "2026-01-27T05:13:00.248561Z", "modified": "2026-01-27T05:13:00.248561Z", "relationship_type": "indicates", "source_ref": "indicator--f84b5fc0-026a-40bc-bcdc-a0f25e07e650", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6f235b-8e12-454a-81e9-2db7f8d452c3", "created": "2026-01-27T05:13:00.248737Z", "modified": "2026-01-27T05:13:00.248737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7b9a4f380f85dbbab3d7548db29cd841811752708ff447e0d2e1674cc7c81af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.248737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25b7c4ec-a403-4336-a685-6eb8b3150981", "created": "2026-01-27T05:13:00.249574Z", "modified": "2026-01-27T05:13:00.249574Z", "relationship_type": "indicates", "source_ref": "indicator--ca6f235b-8e12-454a-81e9-2db7f8d452c3", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c9b61c-727a-4554-84f0-a57d5a2c60ad", "created": "2026-01-27T05:13:00.249763Z", "modified": "2026-01-27T05:13:00.249763Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba95c43e0ed63cdc74b9c359258bb9b1071778ee1ac61d1507bd1b3e0d9438df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.249763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d32e931-925f-490c-bf0a-80769bcd63bc", "created": "2026-01-27T05:13:00.250578Z", "modified": "2026-01-27T05:13:00.250578Z", "relationship_type": "indicates", "source_ref": "indicator--98c9b61c-727a-4554-84f0-a57d5a2c60ad", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a15faa-70f6-47d9-ba6d-fe81bf2e89f5", "created": "2026-01-27T05:13:00.250766Z", "modified": "2026-01-27T05:13:00.250766Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2aed477e002318fd9e0c1a7304f2f1124060af66175722aa7d67e932ef77687d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.250766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90d3b6ef-529e-4365-a7cf-b79897caec52", "created": "2026-01-27T05:13:00.251587Z", "modified": "2026-01-27T05:13:00.251587Z", "relationship_type": "indicates", "source_ref": "indicator--a3a15faa-70f6-47d9-ba6d-fe81bf2e89f5", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b735a937-c0a6-488c-b507-9ea05cfe305d", "created": "2026-01-27T05:13:00.251774Z", "modified": "2026-01-27T05:13:00.251774Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4200f119e4adaa23436dd6ea25571aa51309457a21fad3f9816ef2e537a8245']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.251774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc2693cf-31d2-42b6-814a-985c9301f1f8", "created": "2026-01-27T05:13:00.252599Z", "modified": "2026-01-27T05:13:00.252599Z", "relationship_type": "indicates", "source_ref": "indicator--b735a937-c0a6-488c-b507-9ea05cfe305d", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c603e3-b340-48f5-a498-e8413f8b6b4a", "created": "2026-01-27T05:13:00.25279Z", "modified": "2026-01-27T05:13:00.25279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ef36ee6bce11c71e3052499d2a270bb772f6f151fb642e0880130587b11d9b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.25279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f07638f0-14f0-4fc6-8c51-98b6bb3e5023", "created": "2026-01-27T05:13:00.253611Z", "modified": "2026-01-27T05:13:00.253611Z", "relationship_type": "indicates", "source_ref": "indicator--27c603e3-b340-48f5-a498-e8413f8b6b4a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e01711b-b758-49f7-a1e7-67e90d598835", "created": "2026-01-27T05:13:00.253805Z", "modified": "2026-01-27T05:13:00.253805Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='918613502256a1e72261abaf392c1b19720d6667fdb5eabfd937c8a2a3411e29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.253805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f86f9a05-8af7-4d4a-abda-9762f096011b", "created": "2026-01-27T05:13:00.25463Z", "modified": "2026-01-27T05:13:00.25463Z", "relationship_type": "indicates", "source_ref": "indicator--6e01711b-b758-49f7-a1e7-67e90d598835", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463463e2-435b-4c23-a537-8e61a92aa828", "created": "2026-01-27T05:13:00.25482Z", "modified": "2026-01-27T05:13:00.25482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a003d405f17a8b2693be99bf80f1765e13b8b0e98d7bde994e1390c5b758319']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.25482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e616f06-e37c-488f-8068-7291e8926b7d", "created": "2026-01-27T05:13:00.255639Z", "modified": "2026-01-27T05:13:00.255639Z", "relationship_type": "indicates", "source_ref": "indicator--463463e2-435b-4c23-a537-8e61a92aa828", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36afe32-1eee-4e01-8789-661834ae36b9", "created": "2026-01-27T05:13:00.255829Z", "modified": "2026-01-27T05:13:00.255829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1791a3325085fdcc7714ee4ecb3cbe269558e0bb7e63ecfbd481310672471036']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.255829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58910e2f-7dec-4243-af83-f421a2f815fa", "created": "2026-01-27T05:13:00.256783Z", "modified": "2026-01-27T05:13:00.256783Z", "relationship_type": "indicates", "source_ref": "indicator--a36afe32-1eee-4e01-8789-661834ae36b9", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c8fda8-1863-478c-bced-edf8832e2f14", "created": "2026-01-27T05:13:00.256974Z", "modified": "2026-01-27T05:13:00.256974Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d843f6cb10c8d5014a108a3e066e958b99b27acd1abdcc0a349d7fb8dc0739e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.256974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aef238a8-96da-4547-b646-3e71da331eb5", "created": "2026-01-27T05:13:00.25781Z", "modified": "2026-01-27T05:13:00.25781Z", "relationship_type": "indicates", "source_ref": "indicator--c3c8fda8-1863-478c-bced-edf8832e2f14", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d72a3bd-a48d-4ec4-b7d8-83d9ccdac35d", "created": "2026-01-27T05:13:00.257988Z", "modified": "2026-01-27T05:13:00.257988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e19f6b265f4e42b3dbd98f11cbeaf366739f6b2f75509d01162266ffac9e6ea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.257988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5027659d-d631-49ac-8a13-ee95f0fe8606", "created": "2026-01-27T05:13:00.25882Z", "modified": "2026-01-27T05:13:00.25882Z", "relationship_type": "indicates", "source_ref": "indicator--5d72a3bd-a48d-4ec4-b7d8-83d9ccdac35d", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c8f81-0e71-4085-bd7d-f693ab72150d", "created": "2026-01-27T05:13:00.258999Z", "modified": "2026-01-27T05:13:00.258999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='81b66d6cf555055361d8f797a31d2c21a9848479d8bffefd75302abb52c74ec9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.258999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab898311-a7d3-4382-8f1d-39f58da2566d", "created": "2026-01-27T05:13:00.259835Z", "modified": "2026-01-27T05:13:00.259835Z", "relationship_type": "indicates", "source_ref": "indicator--381c8f81-0e71-4085-bd7d-f693ab72150d", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5058051b-bfbd-4438-aa76-a0f7115bd352", "created": "2026-01-27T05:13:00.260013Z", "modified": "2026-01-27T05:13:00.260013Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='870f9b6681b9fc5f865c4c2af7770f956d7c301160f7520f6abd0523ba0c0f3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.260013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa0a6f92-0555-4f6a-a3a7-282bd69d6db5", "created": "2026-01-27T05:13:00.260857Z", "modified": "2026-01-27T05:13:00.260857Z", "relationship_type": "indicates", "source_ref": "indicator--5058051b-bfbd-4438-aa76-a0f7115bd352", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d59a041-fefd-473c-be81-6b2491e7c520", "created": "2026-01-27T05:13:00.261033Z", "modified": "2026-01-27T05:13:00.261033Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee72fe4b278fcf70f54decb15a318bedb743bed5576d6f784f574827c1b08939']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.261033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58b239b6-9608-49f3-ae0a-e2c11e5b15e1", "created": "2026-01-27T05:13:00.261868Z", "modified": "2026-01-27T05:13:00.261868Z", "relationship_type": "indicates", "source_ref": "indicator--7d59a041-fefd-473c-be81-6b2491e7c520", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf089ed9-86db-40e1-8323-e30495f562cb", "created": "2026-01-27T05:13:00.262055Z", "modified": "2026-01-27T05:13:00.262055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e1e42209e42031aeeee27f45f0173efc7da0b0d7784cb09f078ba275a73da70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.262055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a519e30-0ae0-42f6-adab-e650c99f9ba6", "created": "2026-01-27T05:13:00.262949Z", "modified": "2026-01-27T05:13:00.262949Z", "relationship_type": "indicates", "source_ref": "indicator--bf089ed9-86db-40e1-8323-e30495f562cb", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c725cd1-68cc-4038-9c5d-f1ffedba3bba", "created": "2026-01-27T05:13:00.263151Z", "modified": "2026-01-27T05:13:00.263151Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ff99c6053fa88560857581143a3a25dee2d1e9096aa60618bfc00aa3f747e3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.263151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25dd9156-7f54-4243-a77c-7142c1244ac9", "created": "2026-01-27T05:13:00.264064Z", "modified": "2026-01-27T05:13:00.264064Z", "relationship_type": "indicates", "source_ref": "indicator--6c725cd1-68cc-4038-9c5d-f1ffedba3bba", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd291718-c430-45ad-af81-b98165bb73e3", "created": "2026-01-27T05:13:00.26424Z", "modified": "2026-01-27T05:13:00.26424Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dc422284737eef623f759955d55ced95f32454e076347e8cd41778fd8058cb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.26424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70ec5bbf-07be-47b9-938a-e2cc6fa92770", "created": "2026-01-27T05:13:00.26508Z", "modified": "2026-01-27T05:13:00.26508Z", "relationship_type": "indicates", "source_ref": "indicator--fd291718-c430-45ad-af81-b98165bb73e3", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--879ef166-2512-4383-9625-1ded419bc004", "created": "2026-01-27T05:13:00.265253Z", "modified": "2026-01-27T05:13:00.265253Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='37360f260a1bc248256889b1c679367f74167451f18caccda3573b7ea304b50a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.265253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8a7616d-e23a-4605-87e4-5f7793421967", "created": "2026-01-27T05:13:00.266215Z", "modified": "2026-01-27T05:13:00.266215Z", "relationship_type": "indicates", "source_ref": "indicator--879ef166-2512-4383-9625-1ded419bc004", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ffd935-45e6-4630-a51a-520422aff68a", "created": "2026-01-27T05:13:00.266391Z", "modified": "2026-01-27T05:13:00.266391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a25522eb8d356bcb2a98dd2f013002e76795f41ffc3dff7cc2ebb542b5919cf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.266391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74eb69dd-031f-48a1-9d31-2a9b6ce65565", "created": "2026-01-27T05:13:00.267224Z", "modified": "2026-01-27T05:13:00.267224Z", "relationship_type": "indicates", "source_ref": "indicator--d0ffd935-45e6-4630-a51a-520422aff68a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91437504-2e22-4363-8981-1edf09dd3e15", "created": "2026-01-27T05:13:00.267401Z", "modified": "2026-01-27T05:13:00.267401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e2a7536f5a094b4bf415ff766313f3ccd8ec147ae73f677690f533a12f79e55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.267401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43bf244f-6b56-4a48-b9ed-a4f4f7341cfb", "created": "2026-01-27T05:13:00.268235Z", "modified": "2026-01-27T05:13:00.268235Z", "relationship_type": "indicates", "source_ref": "indicator--91437504-2e22-4363-8981-1edf09dd3e15", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d701e3-95d2-4c93-9585-5db9cab28e32", "created": "2026-01-27T05:13:00.26841Z", "modified": "2026-01-27T05:13:00.26841Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3238aaf009f9450cf0da78861e56bf824b4f329d469a13f26b808977f8f2c00f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.26841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9601215-5d6a-4fbd-b767-0f4caf042c02", "created": "2026-01-27T05:13:00.269238Z", "modified": "2026-01-27T05:13:00.269238Z", "relationship_type": "indicates", "source_ref": "indicator--93d701e3-95d2-4c93-9585-5db9cab28e32", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c8f922-9275-4f20-879d-693b7769f496", "created": "2026-01-27T05:13:00.269413Z", "modified": "2026-01-27T05:13:00.269413Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1e4c545a76aa8ac403f288480e1fec578f699e24bb88e26e6c43614bf32dd6c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.269413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa0d44b9-8e2b-405d-80b1-84402affda39", "created": "2026-01-27T05:13:00.270252Z", "modified": "2026-01-27T05:13:00.270252Z", "relationship_type": "indicates", "source_ref": "indicator--21c8f922-9275-4f20-879d-693b7769f496", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61218c7-ef6b-490e-869f-4c14e0148b77", "created": "2026-01-27T05:13:00.270428Z", "modified": "2026-01-27T05:13:00.270428Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b2473541272180ee6d6b311e093cebfd9ae63dda4e640297b425c15963d2f21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.270428Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7dcdd219-3e47-45e3-ad06-d622e3ba02ea", "created": "2026-01-27T05:13:00.271283Z", "modified": "2026-01-27T05:13:00.271283Z", "relationship_type": "indicates", "source_ref": "indicator--e61218c7-ef6b-490e-869f-4c14e0148b77", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290c4de3-838b-4c56-b68d-bac829aa760b", "created": "2026-01-27T05:13:00.271466Z", "modified": "2026-01-27T05:13:00.271466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='151caa8573da4d9a9d90d62066b777d66444ea4fff8728275aaed79285d5bacc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.271466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b9ce043-2e36-4286-8c6e-37b033c7e81f", "created": "2026-01-27T05:13:00.2723Z", "modified": "2026-01-27T05:13:00.2723Z", "relationship_type": "indicates", "source_ref": "indicator--290c4de3-838b-4c56-b68d-bac829aa760b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cba593-f259-46a7-bc3b-f583a59d067a", "created": "2026-01-27T05:13:00.272475Z", "modified": "2026-01-27T05:13:00.272475Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a53df9fc7e33bec85c7c592da63245864335f4d133c820513570c4463d9bcb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.272475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73227930-f1d3-46dc-9bad-bc7560ab128c", "created": "2026-01-27T05:13:00.273314Z", "modified": "2026-01-27T05:13:00.273314Z", "relationship_type": "indicates", "source_ref": "indicator--85cba593-f259-46a7-bc3b-f583a59d067a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14dd7c68-ee15-4f81-8ae3-b13a827c9b49", "created": "2026-01-27T05:13:00.273497Z", "modified": "2026-01-27T05:13:00.273497Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4acd6f5bc13eb8b987e11cdbc60e448dbec2bba7448360776bbd3375389b3349']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.273497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf56ebc3-3667-47ef-b6b7-7e15db95f90c", "created": "2026-01-27T05:13:00.274456Z", "modified": "2026-01-27T05:13:00.274456Z", "relationship_type": "indicates", "source_ref": "indicator--14dd7c68-ee15-4f81-8ae3-b13a827c9b49", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353e35fe-5609-41f0-9371-95f5704b7735", "created": "2026-01-27T05:13:00.274634Z", "modified": "2026-01-27T05:13:00.274634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fbfd0d6b01c4fc8e6760a37b47fc960236448171b11cac1f17ee7229b51fb44']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.274634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df9b0ee3-ab64-4374-8936-903d2ed882fd", "created": "2026-01-27T05:13:00.275524Z", "modified": "2026-01-27T05:13:00.275524Z", "relationship_type": "indicates", "source_ref": "indicator--353e35fe-5609-41f0-9371-95f5704b7735", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb5f345-be77-4558-abff-4dcdc324cc90", "created": "2026-01-27T05:13:00.275711Z", "modified": "2026-01-27T05:13:00.275711Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b70317cbb1e0149108b78b2da741f0dc1283c0c55a4e83e3601e4feb8147b5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.275711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75eee7eb-3a0a-4203-aa55-e22737425d95", "created": "2026-01-27T05:13:00.276566Z", "modified": "2026-01-27T05:13:00.276566Z", "relationship_type": "indicates", "source_ref": "indicator--bdb5f345-be77-4558-abff-4dcdc324cc90", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bf17c1-22a4-4c54-ba7d-3ac11fb8c429", "created": "2026-01-27T05:13:00.276758Z", "modified": "2026-01-27T05:13:00.276758Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='76995bb264e10568116dc46136cca89ede77d915bdb0e469926afa7a6f1dc696']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.276758Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6fc9121-2358-4b11-817b-dcf74ec46aa5", "created": "2026-01-27T05:13:00.277575Z", "modified": "2026-01-27T05:13:00.277575Z", "relationship_type": "indicates", "source_ref": "indicator--e1bf17c1-22a4-4c54-ba7d-3ac11fb8c429", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d843c23-0ae1-419e-ac1a-8fbc434f83f4", "created": "2026-01-27T05:13:00.277766Z", "modified": "2026-01-27T05:13:00.277766Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df05cab15423d5ffb9ecca54815dcd7282690ca7236c38af27ee561d7ba50606']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.277766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12e74481-a936-4a83-8306-8f503c4a14f0", "created": "2026-01-27T05:13:00.278613Z", "modified": "2026-01-27T05:13:00.278613Z", "relationship_type": "indicates", "source_ref": "indicator--3d843c23-0ae1-419e-ac1a-8fbc434f83f4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6924576d-4159-4a4f-9c66-c5acfe20b95f", "created": "2026-01-27T05:13:00.278814Z", "modified": "2026-01-27T05:13:00.278814Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2599a54cd2ddb160bd266f6fe07d8e9ec30026f539f0c6d28e584fca7752c5fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.278814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c51297a4-ff1e-45fe-be7c-dd1003289ff4", "created": "2026-01-27T05:13:00.279677Z", "modified": "2026-01-27T05:13:00.279677Z", "relationship_type": "indicates", "source_ref": "indicator--6924576d-4159-4a4f-9c66-c5acfe20b95f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358458fa-cdf9-445d-a504-a6c89bf0310a", "created": "2026-01-27T05:13:00.279887Z", "modified": "2026-01-27T05:13:00.279887Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff1bef0286f4c8ec2dba5c11c3e7292ba94de7f42226b137da291113c7887905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.279887Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--743fe70d-19d5-4681-bfbc-aa3a245a46e6", "created": "2026-01-27T05:13:00.280732Z", "modified": "2026-01-27T05:13:00.280732Z", "relationship_type": "indicates", "source_ref": "indicator--358458fa-cdf9-445d-a504-a6c89bf0310a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54239d1f-b7e2-43a7-b4a7-fe86e5fc3403", "created": "2026-01-27T05:13:00.28093Z", "modified": "2026-01-27T05:13:00.28093Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35f8ccce467f18a0fefda35010a9695a00e3120cc77fd77461826f9c592e8ba0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.28093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e51ba82a-26cb-4530-9ac5-3cc0a3c7d2ca", "created": "2026-01-27T05:13:00.281764Z", "modified": "2026-01-27T05:13:00.281764Z", "relationship_type": "indicates", "source_ref": "indicator--54239d1f-b7e2-43a7-b4a7-fe86e5fc3403", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c383e12-8160-41a1-8015-51c55b6774b1", "created": "2026-01-27T05:13:00.28194Z", "modified": "2026-01-27T05:13:00.28194Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='acd51f141d10b99bc46b00e010162f95f2065f39174c1df1da1041b7e27d425c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.28194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6147af93-fa7c-4af5-9c8f-e18e69c806a2", "created": "2026-01-27T05:13:00.282763Z", "modified": "2026-01-27T05:13:00.282763Z", "relationship_type": "indicates", "source_ref": "indicator--5c383e12-8160-41a1-8015-51c55b6774b1", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7bbe04-4030-4a41-80f6-9065fbe3dd85", "created": "2026-01-27T05:13:00.282935Z", "modified": "2026-01-27T05:13:00.282935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cfd949b8cd102676ce9f5e6fccf49fa0902e833df962568f4cf1784269cf00c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.282935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f34ce279-5cb2-4927-acbe-105571632a79", "created": "2026-01-27T05:13:00.283914Z", "modified": "2026-01-27T05:13:00.283914Z", "relationship_type": "indicates", "source_ref": "indicator--0a7bbe04-4030-4a41-80f6-9065fbe3dd85", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a40ad8e-32be-476c-a8a8-0309a2ed3158", "created": "2026-01-27T05:13:00.284097Z", "modified": "2026-01-27T05:13:00.284097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e622fa66a216b80611144c0970acfa5cafd8b58afa9bca572cfd0f6f2f713a5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.284097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29162ef9-4389-4714-81f6-5015396563fa", "created": "2026-01-27T05:13:00.28493Z", "modified": "2026-01-27T05:13:00.28493Z", "relationship_type": "indicates", "source_ref": "indicator--8a40ad8e-32be-476c-a8a8-0309a2ed3158", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74afd0af-e856-4700-83d0-1eab997cb57f", "created": "2026-01-27T05:13:00.285105Z", "modified": "2026-01-27T05:13:00.285105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eed1bbe50c15fc351c0b36d3d114beada5da5fd79c3d1cddee369bd07fd33b33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.285105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edc22b47-5780-4d09-bd43-15e26ccfcbb6", "created": "2026-01-27T05:13:00.285942Z", "modified": "2026-01-27T05:13:00.285942Z", "relationship_type": "indicates", "source_ref": "indicator--74afd0af-e856-4700-83d0-1eab997cb57f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb445ca-951f-41e8-bb32-45cb8b192fb0", "created": "2026-01-27T05:13:00.286126Z", "modified": "2026-01-27T05:13:00.286126Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1245b4b95500a6a4aaee171df1c7c523ece54e8d5f4165cea78930ab144ab1e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.286126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fc6b894-675c-477c-b8b3-13daf823ba1e", "created": "2026-01-27T05:13:00.286959Z", "modified": "2026-01-27T05:13:00.286959Z", "relationship_type": "indicates", "source_ref": "indicator--bfb445ca-951f-41e8-bb32-45cb8b192fb0", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b834d4d-5b27-4ad6-908a-7a37b5535a27", "created": "2026-01-27T05:13:00.287137Z", "modified": "2026-01-27T05:13:00.287137Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e5ae8c92eefa4444bcf0b54d895829797eff18a73f8ca8d49079a8d65559a612']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.287137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f67c107-ea11-4e62-8415-2ecc167560cd", "created": "2026-01-27T05:13:00.287971Z", "modified": "2026-01-27T05:13:00.287971Z", "relationship_type": "indicates", "source_ref": "indicator--8b834d4d-5b27-4ad6-908a-7a37b5535a27", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814d5931-faff-41ad-96f9-cbb67f622dbe", "created": "2026-01-27T05:13:00.288145Z", "modified": "2026-01-27T05:13:00.288145Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c82a7f8f31f38dcbda4c632f42489385b523bfebdc6a959a61b9a38b8d36bf42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.288145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ec5adac-0524-487d-a2f3-145a70f50440", "created": "2026-01-27T05:13:00.288996Z", "modified": "2026-01-27T05:13:00.288996Z", "relationship_type": "indicates", "source_ref": "indicator--814d5931-faff-41ad-96f9-cbb67f622dbe", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5d38ca-9566-44f2-a6e3-1389559d1add", "created": "2026-01-27T05:13:00.289174Z", "modified": "2026-01-27T05:13:00.289174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c92917e6f6e15e65d0c3d7a36b584abb9e8ec9da45bba7a3816e039439bae38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.289174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94a3e901-2b28-4be5-ad4b-e937ac27bb47", "created": "2026-01-27T05:13:00.290038Z", "modified": "2026-01-27T05:13:00.290038Z", "relationship_type": "indicates", "source_ref": "indicator--5d5d38ca-9566-44f2-a6e3-1389559d1add", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6a3b20-3658-4fdb-bcb9-5495a690879b", "created": "2026-01-27T05:13:00.290215Z", "modified": "2026-01-27T05:13:00.290215Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5436de45b447aa918fcf0bd9c7889e3b8ba67f35ba84674a98852809d5b25a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.290215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f05825e-a9a2-49bf-b9e2-91dc80511c56", "created": "2026-01-27T05:13:00.291073Z", "modified": "2026-01-27T05:13:00.291073Z", "relationship_type": "indicates", "source_ref": "indicator--5a6a3b20-3658-4fdb-bcb9-5495a690879b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2025a2-6a24-4aec-8922-95147b1e0a04", "created": "2026-01-27T05:13:00.291251Z", "modified": "2026-01-27T05:13:00.291251Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20a6671a0b5afde14124863de5f6ed10331beb7bebb5edcd991c8865f0d7c456']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.291251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--103e505b-3b9f-4853-959e-9aef59f08eea", "created": "2026-01-27T05:13:00.292097Z", "modified": "2026-01-27T05:13:00.292097Z", "relationship_type": "indicates", "source_ref": "indicator--2f2025a2-6a24-4aec-8922-95147b1e0a04", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a556f25c-4b19-4c20-b2fa-c7bdc49b62ba", "created": "2026-01-27T05:13:00.292269Z", "modified": "2026-01-27T05:13:00.292269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1739099d7bb4027a10102840e38cedef13227d57d9db553656f430cbd279fdef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.292269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08814321-0e25-4432-83b9-b043e851c0ea", "created": "2026-01-27T05:13:00.293237Z", "modified": "2026-01-27T05:13:00.293237Z", "relationship_type": "indicates", "source_ref": "indicator--a556f25c-4b19-4c20-b2fa-c7bdc49b62ba", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e85d22-ee82-4fd0-abc3-d52c3d2158a2", "created": "2026-01-27T05:13:00.293416Z", "modified": "2026-01-27T05:13:00.293416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='338cfbc4732e77a47b434ac899e57388e5b70737ab40ad6323197c98fd6db2c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.293416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48bb581b-b55a-47f6-8ad5-e552e059f24c", "created": "2026-01-27T05:13:00.294256Z", "modified": "2026-01-27T05:13:00.294256Z", "relationship_type": "indicates", "source_ref": "indicator--99e85d22-ee82-4fd0-abc3-d52c3d2158a2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7703387-3a8e-40ff-9a77-50e2af41431b", "created": "2026-01-27T05:13:00.294472Z", "modified": "2026-01-27T05:13:00.294472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='58e38a769eb9710251042b9a15b70e8f2cd476170e22fff63c97ba8cca263418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.294472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4b61540-18e1-4141-a075-a80c3bc6a1d9", "created": "2026-01-27T05:13:00.295457Z", "modified": "2026-01-27T05:13:00.295457Z", "relationship_type": "indicates", "source_ref": "indicator--e7703387-3a8e-40ff-9a77-50e2af41431b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34006356-2cd7-43a1-907b-c6d61a7637b8", "created": "2026-01-27T05:13:00.295646Z", "modified": "2026-01-27T05:13:00.295646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e650f370cd0b02dfdee4b3b1479f62d28ddce7611751db3af6811b5fbb4389ef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.295646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b293441-6d5f-42d7-87fd-e9e72f764d6c", "created": "2026-01-27T05:13:00.296497Z", "modified": "2026-01-27T05:13:00.296497Z", "relationship_type": "indicates", "source_ref": "indicator--34006356-2cd7-43a1-907b-c6d61a7637b8", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d30a2c-1dd9-4b8b-a308-bbc4e2d1a4b5", "created": "2026-01-27T05:13:00.296681Z", "modified": "2026-01-27T05:13:00.296681Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b65ae109aded97d82dfe6c7f7af2c128efc8ce12b240ae429a135eaabb2c13dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.296681Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04e384dc-90c1-4d41-8fb2-c476121fc370", "created": "2026-01-27T05:13:00.29752Z", "modified": "2026-01-27T05:13:00.29752Z", "relationship_type": "indicates", "source_ref": "indicator--34d30a2c-1dd9-4b8b-a308-bbc4e2d1a4b5", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e4945e-ba08-42ad-a31a-71d3aff526be", "created": "2026-01-27T05:13:00.297702Z", "modified": "2026-01-27T05:13:00.297702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1fff53defe2fb4180b3af985bada0692302c66e0f16e1c5550161d3ca6906a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.297702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a01c5f83-fe3e-4deb-9fc4-50cddcadb5a7", "created": "2026-01-27T05:13:00.298549Z", "modified": "2026-01-27T05:13:00.298549Z", "relationship_type": "indicates", "source_ref": "indicator--33e4945e-ba08-42ad-a31a-71d3aff526be", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adcfe70e-df0c-45f2-a8b0-6fab7055185e", "created": "2026-01-27T05:13:00.298722Z", "modified": "2026-01-27T05:13:00.298722Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bdfed5002e08698d298b57ffaef71b1b2cf35f56c8a03c4b584cb5bc1496fc53']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.298722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb653c00-59c7-439c-90d3-c31e465435fc", "created": "2026-01-27T05:13:00.299564Z", "modified": "2026-01-27T05:13:00.299564Z", "relationship_type": "indicates", "source_ref": "indicator--adcfe70e-df0c-45f2-a8b0-6fab7055185e", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ed8a0e-d1d4-4217-9fb4-cb0e64b46178", "created": "2026-01-27T05:13:00.299736Z", "modified": "2026-01-27T05:13:00.299736Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f50bee9ace6b951a8fe2f0a8eb77ff693ec66b53fac992ad32b45d29eb95f63']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.299736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c06564f0-2334-4ca2-bdbd-2ef61c9d08d2", "created": "2026-01-27T05:13:00.300571Z", "modified": "2026-01-27T05:13:00.300571Z", "relationship_type": "indicates", "source_ref": "indicator--45ed8a0e-d1d4-4217-9fb4-cb0e64b46178", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78755364-e942-4a0f-a3aa-9d86e7e9f3a7", "created": "2026-01-27T05:13:00.300761Z", "modified": "2026-01-27T05:13:00.300761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e16b4af407118a5f0256cbd9a5d271f9aa4420bca01b7d9eccbe4ae6f3685198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.300761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd9abe41-ef7c-4be4-b84d-14b5ec6a5d2d", "created": "2026-01-27T05:13:00.302102Z", "modified": "2026-01-27T05:13:00.302102Z", "relationship_type": "indicates", "source_ref": "indicator--78755364-e942-4a0f-a3aa-9d86e7e9f3a7", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d878c753-150f-4a93-b82c-fe1a3b7cf8da", "created": "2026-01-27T05:13:00.302285Z", "modified": "2026-01-27T05:13:00.302285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70143655cc7708c79f29ff9b9a3f89c2183d4276a3515ea0d8c75c93e60a236c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.302285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b4d4f27-6b4d-4bed-bf05-8a3ef3ff6398", "created": "2026-01-27T05:13:00.303151Z", "modified": "2026-01-27T05:13:00.303151Z", "relationship_type": "indicates", "source_ref": "indicator--d878c753-150f-4a93-b82c-fe1a3b7cf8da", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27265f8a-ce1d-4311-b580-6149a06ff268", "created": "2026-01-27T05:13:00.303336Z", "modified": "2026-01-27T05:13:00.303336Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32c8d7d418badddbdb30bd4917138d7f21f1920233f3f67d2f4f0b6476d02e59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.303336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3876d315-8603-4405-b85a-51aca8bb51bc", "created": "2026-01-27T05:13:00.304174Z", "modified": "2026-01-27T05:13:00.304174Z", "relationship_type": "indicates", "source_ref": "indicator--27265f8a-ce1d-4311-b580-6149a06ff268", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8a0ce7-9181-4c19-9701-aec4715c6c83", "created": "2026-01-27T05:13:00.304353Z", "modified": "2026-01-27T05:13:00.304353Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2eecd6550df9851dd0564b1fa3a4d76d04edf17f20344724d847d8c691405598']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.304353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bd6a1ce-acc7-4a8a-ac76-4322e01ea8df", "created": "2026-01-27T05:13:00.305189Z", "modified": "2026-01-27T05:13:00.305189Z", "relationship_type": "indicates", "source_ref": "indicator--6b8a0ce7-9181-4c19-9701-aec4715c6c83", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2267ba-d462-490e-9945-85e4856d02ab", "created": "2026-01-27T05:13:00.305367Z", "modified": "2026-01-27T05:13:00.305367Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c84b2d12099e881a008814c4a3504e97fef91a555aa5ba4f69dc690d8a1bb12b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.305367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c39f07e-d073-41b0-a17c-bc897df710bf", "created": "2026-01-27T05:13:00.306189Z", "modified": "2026-01-27T05:13:00.306189Z", "relationship_type": "indicates", "source_ref": "indicator--cd2267ba-d462-490e-9945-85e4856d02ab", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80106a3d-8d0e-47a3-a0b2-8b4c3a5511dc", "created": "2026-01-27T05:13:00.306366Z", "modified": "2026-01-27T05:13:00.306366Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e8cdd4accc4bac8606a4095fcd05b357455606bf445d79ded87d427aa31a9b02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.306366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deeae3d1-7dab-450b-b803-715a28740db9", "created": "2026-01-27T05:13:00.307204Z", "modified": "2026-01-27T05:13:00.307204Z", "relationship_type": "indicates", "source_ref": "indicator--80106a3d-8d0e-47a3-a0b2-8b4c3a5511dc", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855c3b4a-0043-4c69-bf45-7076f09358ac", "created": "2026-01-27T05:13:00.307379Z", "modified": "2026-01-27T05:13:00.307379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab08badfcb47ea0a9f9cb9d501f0b1b4a222c99f90730303d19c781e8b61c791']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.307379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b823763e-1fee-46cc-9e27-633523a1be3d", "created": "2026-01-27T05:13:00.308209Z", "modified": "2026-01-27T05:13:00.308209Z", "relationship_type": "indicates", "source_ref": "indicator--855c3b4a-0043-4c69-bf45-7076f09358ac", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213e8a34-af9b-4938-9bb3-7c3937ab2dab", "created": "2026-01-27T05:13:00.308382Z", "modified": "2026-01-27T05:13:00.308382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b932f64bfa8b42d53c3fd8b6e2891181b7b22ee8c0494effb637105228191c9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.308382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4672ef0b-83c2-4c95-9f2f-733b4252f387", "created": "2026-01-27T05:13:00.309215Z", "modified": "2026-01-27T05:13:00.309215Z", "relationship_type": "indicates", "source_ref": "indicator--213e8a34-af9b-4938-9bb3-7c3937ab2dab", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f280a2ab-1a8e-4a49-b787-0feb1a3e8a65", "created": "2026-01-27T05:13:00.309386Z", "modified": "2026-01-27T05:13:00.309386Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='86a321cf03e78e6f00da9407c9f3550c24dab0a441e8b17cf672e81edff8bb88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.309386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a28b076a-b339-474a-bd96-be19e2bffc1b", "created": "2026-01-27T05:13:00.310241Z", "modified": "2026-01-27T05:13:00.310241Z", "relationship_type": "indicates", "source_ref": "indicator--f280a2ab-1a8e-4a49-b787-0feb1a3e8a65", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4ea0cd-7cba-4428-b90b-814d2ee4ff12", "created": "2026-01-27T05:13:00.310439Z", "modified": "2026-01-27T05:13:00.310439Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7621c99fef651d4106366f9c40dfc088105c92c6deeba15ca0dabdb4f8a55d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.310439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1dd58af-debd-427d-8967-dc40a262c30f", "created": "2026-01-27T05:13:00.31144Z", "modified": "2026-01-27T05:13:00.31144Z", "relationship_type": "indicates", "source_ref": "indicator--3b4ea0cd-7cba-4428-b90b-814d2ee4ff12", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07614a5-3472-4c88-9081-5e6c7c786074", "created": "2026-01-27T05:13:00.311629Z", "modified": "2026-01-27T05:13:00.311629Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='215ad5f337c1b753f5ba4b00b7dfe71976d2f7a781cd0eb7dd778e625298b101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.311629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1ee490c-455f-44ee-9743-d7f6c8805d37", "created": "2026-01-27T05:13:00.31247Z", "modified": "2026-01-27T05:13:00.31247Z", "relationship_type": "indicates", "source_ref": "indicator--f07614a5-3472-4c88-9081-5e6c7c786074", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39961b04-a020-4319-826d-3b919c0fa7da", "created": "2026-01-27T05:13:00.312645Z", "modified": "2026-01-27T05:13:00.312645Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8377e4e20e1c2e2076f3422e804101cf6b13a88af1a89c47cd582d32919e0360']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.312645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a88ffc85-42e2-4829-b389-3be19754034d", "created": "2026-01-27T05:13:00.313478Z", "modified": "2026-01-27T05:13:00.313478Z", "relationship_type": "indicates", "source_ref": "indicator--39961b04-a020-4319-826d-3b919c0fa7da", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee8e65e-45d0-48a6-9ff1-92d33b6770e3", "created": "2026-01-27T05:13:00.313654Z", "modified": "2026-01-27T05:13:00.313654Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0411cfd7e4c579dfb7561304264ec3e789cdd1ffb68fdf03791a3e5cf4179dc3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.313654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e526a60-656d-4c32-964f-08b021c96e76", "created": "2026-01-27T05:13:00.314496Z", "modified": "2026-01-27T05:13:00.314496Z", "relationship_type": "indicates", "source_ref": "indicator--5ee8e65e-45d0-48a6-9ff1-92d33b6770e3", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f32b90c-1a00-434f-84db-ba90d8b0021e", "created": "2026-01-27T05:13:00.314671Z", "modified": "2026-01-27T05:13:00.314671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06f0398d3336b156fe9fea954f5d46342dff31b9c6d5799cd8fce548f06f06f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.314671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41179ad9-d86e-49dd-a3a1-88918a0f0ec2", "created": "2026-01-27T05:13:00.315506Z", "modified": "2026-01-27T05:13:00.315506Z", "relationship_type": "indicates", "source_ref": "indicator--5f32b90c-1a00-434f-84db-ba90d8b0021e", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56cbe60-f39e-492e-89bf-d8e04b82d7dd", "created": "2026-01-27T05:13:00.315682Z", "modified": "2026-01-27T05:13:00.315682Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be2443d5b3f28feeafd6ecaee6947e6e7079f71d32b3b7debe6a91bf8c726fbf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.315682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a9f31c2-2c53-4348-b342-a89138947c13", "created": "2026-01-27T05:13:00.31652Z", "modified": "2026-01-27T05:13:00.31652Z", "relationship_type": "indicates", "source_ref": "indicator--e56cbe60-f39e-492e-89bf-d8e04b82d7dd", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61a8ff9-62d2-4e52-b699-478aef58c230", "created": "2026-01-27T05:13:00.316694Z", "modified": "2026-01-27T05:13:00.316694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74934adf14c2d3230b074e5f88da27fc0b3e149c56ee2edf721fa9eb32bf10ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.316694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2cf5612-1d35-4b99-b668-53a2df2b07e2", "created": "2026-01-27T05:13:00.317536Z", "modified": "2026-01-27T05:13:00.317536Z", "relationship_type": "indicates", "source_ref": "indicator--e61a8ff9-62d2-4e52-b699-478aef58c230", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35a44f6-f92d-4837-9898-084446f857e2", "created": "2026-01-27T05:13:00.317712Z", "modified": "2026-01-27T05:13:00.317712Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84c6dcc255c7315b6c173d11d25dddad465329336d2be61204b6ded44ae58418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.317712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd91fd4b-88c6-4ab3-9dd9-066f4fce741f", "created": "2026-01-27T05:13:00.318552Z", "modified": "2026-01-27T05:13:00.318552Z", "relationship_type": "indicates", "source_ref": "indicator--c35a44f6-f92d-4837-9898-084446f857e2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c615effd-471a-4ace-905b-4e8276e143d7", "created": "2026-01-27T05:13:00.318731Z", "modified": "2026-01-27T05:13:00.318731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1709bac275ac6e89607756c2d5591bcd6c91d769fd88b98753f806ec2b40ecd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.318731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8768fe9d-3dc5-4a8c-8a78-017eb0a37e54", "created": "2026-01-27T05:13:00.319567Z", "modified": "2026-01-27T05:13:00.319567Z", "relationship_type": "indicates", "source_ref": "indicator--c615effd-471a-4ace-905b-4e8276e143d7", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2daed04d-be26-4b38-b568-56dc16fb0428", "created": "2026-01-27T05:13:00.319765Z", "modified": "2026-01-27T05:13:00.319765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cbb22309a0f76a60ca6e2c586b182b758b57463a3731900687eaeddb86ef540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.319765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4e26f22-a1c1-4b30-a726-7cf1f0b85e29", "created": "2026-01-27T05:13:00.320714Z", "modified": "2026-01-27T05:13:00.320714Z", "relationship_type": "indicates", "source_ref": "indicator--2daed04d-be26-4b38-b568-56dc16fb0428", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54727ad0-f117-4a51-8fea-b46d0a0bbe63", "created": "2026-01-27T05:13:00.320908Z", "modified": "2026-01-27T05:13:00.320908Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2139e569cac6a34d417bf07d1fd118081675d85e1f4eba751a5ed539729988be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.320908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--505a73d7-d009-4b2a-a515-dc4e797d2072", "created": "2026-01-27T05:13:00.321728Z", "modified": "2026-01-27T05:13:00.321728Z", "relationship_type": "indicates", "source_ref": "indicator--54727ad0-f117-4a51-8fea-b46d0a0bbe63", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6da002-ec33-4235-b720-5bcf28d4ab01", "created": "2026-01-27T05:13:00.32192Z", "modified": "2026-01-27T05:13:00.32192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='034f7f129ae80267e94678a5a9c5b5333075100b1464994b14ef13a93769e232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.32192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fdf6eae-84df-45ec-8146-249788dc0691", "created": "2026-01-27T05:13:00.322732Z", "modified": "2026-01-27T05:13:00.322732Z", "relationship_type": "indicates", "source_ref": "indicator--0d6da002-ec33-4235-b720-5bcf28d4ab01", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1013e5-a920-4433-b555-7e395dfd9728", "created": "2026-01-27T05:13:00.322931Z", "modified": "2026-01-27T05:13:00.322931Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1bce7bf45a0e2bb33c7d2b34858427d574935b88768fe2342c944f77797b9a9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.322931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce335626-b47a-4950-a124-c24ed621396b", "created": "2026-01-27T05:13:00.323767Z", "modified": "2026-01-27T05:13:00.323767Z", "relationship_type": "indicates", "source_ref": "indicator--5c1013e5-a920-4433-b555-7e395dfd9728", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21958bd6-1cb5-4056-9226-5ab6eae179a9", "created": "2026-01-27T05:13:00.323947Z", "modified": "2026-01-27T05:13:00.323947Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c3c1e03e976b4751ae711e33999d3cb933ae4a39e8da2397850c099fb525312e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.323947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b05e826-2a31-4f5a-a98a-157c4605b13d", "created": "2026-01-27T05:13:00.324774Z", "modified": "2026-01-27T05:13:00.324774Z", "relationship_type": "indicates", "source_ref": "indicator--21958bd6-1cb5-4056-9226-5ab6eae179a9", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23fbb02-1d49-4ea7-b2d8-2882047a1c0f", "created": "2026-01-27T05:13:00.324957Z", "modified": "2026-01-27T05:13:00.324957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b67f2545922e2c6af5919656af4ceb106db98127465eb1deac726d6214639576']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.324957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e2c8bfe-36ea-4ac4-b7b5-ed939a28813d", "created": "2026-01-27T05:13:00.32578Z", "modified": "2026-01-27T05:13:00.32578Z", "relationship_type": "indicates", "source_ref": "indicator--f23fbb02-1d49-4ea7-b2d8-2882047a1c0f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9cc4b4-a88c-4a08-a5a5-de85bc09d1e1", "created": "2026-01-27T05:13:00.325958Z", "modified": "2026-01-27T05:13:00.325958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70537eabca1944ec239221466d1fb0ccead13fe6cedc6b18f637fa927bd9d1ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.325958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88d5aae1-413e-4889-b697-0621eeb1f5b0", "created": "2026-01-27T05:13:00.326842Z", "modified": "2026-01-27T05:13:00.326842Z", "relationship_type": "indicates", "source_ref": "indicator--df9cc4b4-a88c-4a08-a5a5-de85bc09d1e1", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f8a830e-c14f-4b49-b7d5-5970fdcda507", "created": "2026-01-27T05:13:00.32702Z", "modified": "2026-01-27T05:13:00.32702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9608d8f4e240e5e46d58bc41d754fd05624925cdda8cdbfe088dcf86f71e1038']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.32702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--371ca047-7697-4865-884b-a9c2498fd288", "created": "2026-01-27T05:13:00.32788Z", "modified": "2026-01-27T05:13:00.32788Z", "relationship_type": "indicates", "source_ref": "indicator--1f8a830e-c14f-4b49-b7d5-5970fdcda507", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3575dcae-67a3-4782-808c-93e395bad612", "created": "2026-01-27T05:13:00.328061Z", "modified": "2026-01-27T05:13:00.328061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96c5e525d2f1e64c060c657b3b2c19bd7258b69eee12d00b7182790c9608127b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.328061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54f1df4a-37dd-4a3e-bf9a-ede0943e454d", "created": "2026-01-27T05:13:00.328918Z", "modified": "2026-01-27T05:13:00.328918Z", "relationship_type": "indicates", "source_ref": "indicator--3575dcae-67a3-4782-808c-93e395bad612", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7f7596-8b99-407c-bb80-67b590535813", "created": "2026-01-27T05:13:00.3291Z", "modified": "2026-01-27T05:13:00.3291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='064f43dc9458038f8d96d6cf456e508dd00fb893940e98022ef19da9670adaed']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.3291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--095e476e-f51e-43df-a77a-d01cfc7e0135", "created": "2026-01-27T05:13:00.330062Z", "modified": "2026-01-27T05:13:00.330062Z", "relationship_type": "indicates", "source_ref": "indicator--1c7f7596-8b99-407c-bb80-67b590535813", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcf7caf-0a3b-491e-98d1-012ea5eb46f5", "created": "2026-01-27T05:13:00.33024Z", "modified": "2026-01-27T05:13:00.33024Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='205bb401ec90c70fe39da655aa306ae01ed74fd496692e19aac3b787b7596d8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.33024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f695952e-fe29-43fa-8f58-97fa464190ad", "created": "2026-01-27T05:13:00.331074Z", "modified": "2026-01-27T05:13:00.331074Z", "relationship_type": "indicates", "source_ref": "indicator--0fcf7caf-0a3b-491e-98d1-012ea5eb46f5", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4739c32-e931-49a5-9209-62f5076c7af5", "created": "2026-01-27T05:13:00.33125Z", "modified": "2026-01-27T05:13:00.33125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53c08379c24b331d404eb640e81366776d815c5eaa63a1e3f8e0c67e331fef2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.33125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d15ad0e-b025-4742-a42d-d0353e350ef5", "created": "2026-01-27T05:13:00.332086Z", "modified": "2026-01-27T05:13:00.332086Z", "relationship_type": "indicates", "source_ref": "indicator--d4739c32-e931-49a5-9209-62f5076c7af5", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c231514b-5aa9-4176-bfcc-b1d8bde56295", "created": "2026-01-27T05:13:00.332263Z", "modified": "2026-01-27T05:13:00.332263Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0ac8392d33f7596c2c182279ad603ca7a42d47f9f3e5cd48f8196cfd5dce159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.332263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--03e79595-1669-4473-82b1-c6aed1dc1c5e", "created": "2026-01-27T05:13:00.333098Z", "modified": "2026-01-27T05:13:00.333098Z", "relationship_type": "indicates", "source_ref": "indicator--c231514b-5aa9-4176-bfcc-b1d8bde56295", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9860dcad-97fd-4b5c-b707-72d5ddef668f", "created": "2026-01-27T05:13:00.333287Z", "modified": "2026-01-27T05:13:00.333287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83fbd26daccf396f265aeeeab7f96d96f316f4a2fa720142f436b63d6a1e3259']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.333287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bca8384f-7824-45f6-8cb6-0098a0bf6054", "created": "2026-01-27T05:13:00.334116Z", "modified": "2026-01-27T05:13:00.334116Z", "relationship_type": "indicates", "source_ref": "indicator--9860dcad-97fd-4b5c-b707-72d5ddef668f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de875233-5bbe-448e-9d29-66ffc1c59209", "created": "2026-01-27T05:13:00.334289Z", "modified": "2026-01-27T05:13:00.334289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='14b38aa028242947962da976198da300b7b0af4876da97f068098f93f314769a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.334289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06ddcd36-603e-493b-876e-e0b46721f8a1", "created": "2026-01-27T05:13:00.33513Z", "modified": "2026-01-27T05:13:00.33513Z", "relationship_type": "indicates", "source_ref": "indicator--de875233-5bbe-448e-9d29-66ffc1c59209", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860c60fd-8d56-4ead-a25b-433e505c6ad4", "created": "2026-01-27T05:13:00.335307Z", "modified": "2026-01-27T05:13:00.335307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45116bbc5ee3bd43ead04f4d24ea43f57c4f6040520ddb6cf3b0ef6406e672d6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.335307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5d180bb-27db-4f62-98bd-ab0d55b2ac95", "created": "2026-01-27T05:13:00.336159Z", "modified": "2026-01-27T05:13:00.336159Z", "relationship_type": "indicates", "source_ref": "indicator--860c60fd-8d56-4ead-a25b-433e505c6ad4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86ce130-abb8-4e34-bca9-7a262a35fb70", "created": "2026-01-27T05:13:00.33634Z", "modified": "2026-01-27T05:13:00.33634Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac1f4e10496781bb5e2ee76e5f4872f0dacf0b1de7ff28fce647c296db58e68a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.33634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b67d4eb-a1d6-4453-b1b9-79dea0a10785", "created": "2026-01-27T05:13:00.337179Z", "modified": "2026-01-27T05:13:00.337179Z", "relationship_type": "indicates", "source_ref": "indicator--d86ce130-abb8-4e34-bca9-7a262a35fb70", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc087122-27c3-4697-a817-8e7055f34d6a", "created": "2026-01-27T05:13:00.337354Z", "modified": "2026-01-27T05:13:00.337354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83961bc4a51c96da4c34c36abecc33cdebca69ddda8ae42447c9877b2159d16e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.337354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5505a949-6f40-4469-a769-6bdb638c3ab9", "created": "2026-01-27T05:13:00.338311Z", "modified": "2026-01-27T05:13:00.338311Z", "relationship_type": "indicates", "source_ref": "indicator--dc087122-27c3-4697-a817-8e7055f34d6a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db04b4b3-8b46-4ba1-a52c-a811bd8220e7", "created": "2026-01-27T05:13:00.338496Z", "modified": "2026-01-27T05:13:00.338496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1262145ffeed61d340e61a97043ccad4e1eb1c6eb9e1e8c374bb148dce5931e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.338496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c76f9397-d63a-4211-8adf-af6b86519f0e", "created": "2026-01-27T05:13:00.33934Z", "modified": "2026-01-27T05:13:00.33934Z", "relationship_type": "indicates", "source_ref": "indicator--db04b4b3-8b46-4ba1-a52c-a811bd8220e7", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4457d6-bd9f-415d-ad48-5723e6210e65", "created": "2026-01-27T05:13:00.339518Z", "modified": "2026-01-27T05:13:00.339518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b75f4ffe1267e2b0d0da7a9703669a631b1152e952519c3d1bd35d92e2a61607']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.339518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3e9ec79-9d3e-4236-9adb-b6e213dd2945", "created": "2026-01-27T05:13:00.340356Z", "modified": "2026-01-27T05:13:00.340356Z", "relationship_type": "indicates", "source_ref": "indicator--5d4457d6-bd9f-415d-ad48-5723e6210e65", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92702fd5-201d-4015-889f-f04af9830eb4", "created": "2026-01-27T05:13:00.340531Z", "modified": "2026-01-27T05:13:00.340531Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b34db953db61ba6e49607e0cb36dcbe36993f423cf096309cc857147ac44542']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.340531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--710aed4b-36da-450f-b699-2ac66231fab8", "created": "2026-01-27T05:13:00.341369Z", "modified": "2026-01-27T05:13:00.341369Z", "relationship_type": "indicates", "source_ref": "indicator--92702fd5-201d-4015-889f-f04af9830eb4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83767af3-2d75-49bc-9db4-4eedd9967f37", "created": "2026-01-27T05:13:00.341545Z", "modified": "2026-01-27T05:13:00.341545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='564496e1ecd19ca1ff23818e4255117189402407c7151c88f297e8de0f68d765']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.341545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--52e9c3fa-9723-4a91-84f2-4bb07e598efa", "created": "2026-01-27T05:13:00.342419Z", "modified": "2026-01-27T05:13:00.342419Z", "relationship_type": "indicates", "source_ref": "indicator--83767af3-2d75-49bc-9db4-4eedd9967f37", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c115cab9-1af2-4f89-9102-6b9b44a1d240", "created": "2026-01-27T05:13:00.342598Z", "modified": "2026-01-27T05:13:00.342598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9052d13a25d78f8f0236c6af6034a8406973ed0349d41a51b2478afcf7260f60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.342598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abf5430d-ea6f-4b2e-a98b-76dee3ff574a", "created": "2026-01-27T05:13:00.343469Z", "modified": "2026-01-27T05:13:00.343469Z", "relationship_type": "indicates", "source_ref": "indicator--c115cab9-1af2-4f89-9102-6b9b44a1d240", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc8d62b-ee69-4408-b952-0ec50a8753e8", "created": "2026-01-27T05:13:00.343652Z", "modified": "2026-01-27T05:13:00.343652Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cfdbae49c7ce9891cec42dfc398177ae96209ba56dca89c6f1da4129070cdd93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.343652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c7ed83e-9573-43be-b75b-25e258302b23", "created": "2026-01-27T05:13:00.344503Z", "modified": "2026-01-27T05:13:00.344503Z", "relationship_type": "indicates", "source_ref": "indicator--5bc8d62b-ee69-4408-b952-0ec50a8753e8", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf7308f-952d-4d76-b620-2f566d01601a", "created": "2026-01-27T05:13:00.344678Z", "modified": "2026-01-27T05:13:00.344678Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0112940541de66530817ba9656182b5ed49f3ae0e50df6cd4e354548386071d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.344678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15132c24-d7a3-47e2-8d34-8443c552b072", "created": "2026-01-27T05:13:00.345521Z", "modified": "2026-01-27T05:13:00.345521Z", "relationship_type": "indicates", "source_ref": "indicator--caf7308f-952d-4d76-b620-2f566d01601a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d103569-6009-4cca-9f6c-6c70019d4a12", "created": "2026-01-27T05:13:00.345696Z", "modified": "2026-01-27T05:13:00.345696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4a95ec284092542620ecd963ce38d90b251165bcd9574130843fce4a6f857de4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.345696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--958ab3c0-182c-4970-8722-2cea9d5ff87d", "created": "2026-01-27T05:13:00.346528Z", "modified": "2026-01-27T05:13:00.346528Z", "relationship_type": "indicates", "source_ref": "indicator--5d103569-6009-4cca-9f6c-6c70019d4a12", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906a1fd7-bb50-47b1-9443-294db0d4dc20", "created": "2026-01-27T05:13:00.346713Z", "modified": "2026-01-27T05:13:00.346713Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a640c6c7f7f8b73f0abb63072c95a67b6b84250deeaeed6b98c7b2422169657e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.346713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfa69a73-a044-4316-a672-dee7a93c465d", "created": "2026-01-27T05:13:00.347661Z", "modified": "2026-01-27T05:13:00.347661Z", "relationship_type": "indicates", "source_ref": "indicator--906a1fd7-bb50-47b1-9443-294db0d4dc20", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca44cad-0c45-43a5-a3d9-0f21e6823859", "created": "2026-01-27T05:13:00.347854Z", "modified": "2026-01-27T05:13:00.347854Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2e5fb4a6d873e12ecef387d2c2b0fa6cb1ed022dcf4fecf73c76e305344fa6d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.347854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66ae38db-7be9-438f-aaae-1c931f972fe4", "created": "2026-01-27T05:13:00.348666Z", "modified": "2026-01-27T05:13:00.348666Z", "relationship_type": "indicates", "source_ref": "indicator--3ca44cad-0c45-43a5-a3d9-0f21e6823859", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30c8551-e9fd-40c8-8c95-3a2b82ea993a", "created": "2026-01-27T05:13:00.348861Z", "modified": "2026-01-27T05:13:00.348861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15cc5fc4ae8df156d3b394bd426172f4a207a6de862751209b515b8e27de077d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.348861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ca8b1cd-f6b1-4f7e-8949-148a2d0011a2", "created": "2026-01-27T05:13:00.349672Z", "modified": "2026-01-27T05:13:00.349672Z", "relationship_type": "indicates", "source_ref": "indicator--e30c8551-e9fd-40c8-8c95-3a2b82ea993a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbf4682-eeff-4a87-bed7-ed113f5fdba0", "created": "2026-01-27T05:13:00.349862Z", "modified": "2026-01-27T05:13:00.349862Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fad7714b6b63cb84be42add573fda861811d4087e6cbf3fa687d156beddbb0ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.349862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f665860-4a72-4997-9e15-daf41a9527c1", "created": "2026-01-27T05:13:00.350686Z", "modified": "2026-01-27T05:13:00.350686Z", "relationship_type": "indicates", "source_ref": "indicator--bdbf4682-eeff-4a87-bed7-ed113f5fdba0", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe02fba-0fa1-44b6-a966-9e2f8f131c15", "created": "2026-01-27T05:13:00.350877Z", "modified": "2026-01-27T05:13:00.350877Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4631a0be146eef461b07e69e6319ac70cccb7cebf3631187b6e2ebc22c1d938c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.350877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc00deac-bd33-48c0-b2ab-b4589d1c247d", "created": "2026-01-27T05:13:00.3517Z", "modified": "2026-01-27T05:13:00.3517Z", "relationship_type": "indicates", "source_ref": "indicator--dfe02fba-0fa1-44b6-a966-9e2f8f131c15", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311d996f-cdd8-466a-905e-c44136845be1", "created": "2026-01-27T05:13:00.351897Z", "modified": "2026-01-27T05:13:00.351897Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2abb35cb341e9d3fa0eccc5046047fc8c2a720bdff96345660c7510e7f3ed82e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.351897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73e71770-858f-4c4a-b374-62796a3a5d2b", "created": "2026-01-27T05:13:00.352721Z", "modified": "2026-01-27T05:13:00.352721Z", "relationship_type": "indicates", "source_ref": "indicator--311d996f-cdd8-466a-905e-c44136845be1", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40d5dc9-4cb7-4a61-8321-4535b38455bf", "created": "2026-01-27T05:13:00.352918Z", "modified": "2026-01-27T05:13:00.352918Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fc4bc56da6f6be23a94972cfe1f6deb018ed88d45479d148c3752922ee5efe4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.352918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dee4bbf4-ec82-4467-b247-4435f0f0479a", "created": "2026-01-27T05:13:00.353734Z", "modified": "2026-01-27T05:13:00.353734Z", "relationship_type": "indicates", "source_ref": "indicator--e40d5dc9-4cb7-4a61-8321-4535b38455bf", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1e8fdf-15ed-4d8e-bf1f-0ff38ea4bd85", "created": "2026-01-27T05:13:00.353932Z", "modified": "2026-01-27T05:13:00.353932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17920cc7a6376e196144994341b4821f48fc39b0cf131dc574c5c3f504ea2d8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.353932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ea6b81d-f910-494d-9ecb-05e20e14026b", "created": "2026-01-27T05:13:00.35476Z", "modified": "2026-01-27T05:13:00.35476Z", "relationship_type": "indicates", "source_ref": "indicator--8b1e8fdf-15ed-4d8e-bf1f-0ff38ea4bd85", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a5daa8-67f8-44a1-a87b-3102e7127dd3", "created": "2026-01-27T05:13:00.354935Z", "modified": "2026-01-27T05:13:00.354935Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='317138c6c9ac61f4ea897af38a1564d3dcd30880020ca7dacc78b70bd397ebc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.354935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da9335dc-9c76-4d77-b2e5-d2043cea91f6", "created": "2026-01-27T05:13:00.355878Z", "modified": "2026-01-27T05:13:00.355878Z", "relationship_type": "indicates", "source_ref": "indicator--04a5daa8-67f8-44a1-a87b-3102e7127dd3", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa475cb1-348b-4e59-a9d9-c83136e8b009", "created": "2026-01-27T05:13:00.35606Z", "modified": "2026-01-27T05:13:00.35606Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59b518619cc8c141be7834ea6ee17f251a5dd01c6b2fef5b11e307b47252192a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.35606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--303a4b56-e194-4dc2-9d44-e32898bd00c6", "created": "2026-01-27T05:13:00.357021Z", "modified": "2026-01-27T05:13:00.357021Z", "relationship_type": "indicates", "source_ref": "indicator--fa475cb1-348b-4e59-a9d9-c83136e8b009", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acaae25-ecd1-4872-ac4a-97952ae5a19b", "created": "2026-01-27T05:13:00.357195Z", "modified": "2026-01-27T05:13:00.357195Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aa6a6bcb6cd0fe2f2b38bf25f07230b25318d1a5b03e2e4c532511065aa320a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.357195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90c63adf-15e1-49d9-8a11-afdabbd8d320", "created": "2026-01-27T05:13:00.358082Z", "modified": "2026-01-27T05:13:00.358082Z", "relationship_type": "indicates", "source_ref": "indicator--4acaae25-ecd1-4872-ac4a-97952ae5a19b", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b189341-3ee0-4f2d-a69c-6914f623c0e6", "created": "2026-01-27T05:13:00.358289Z", "modified": "2026-01-27T05:13:00.358289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='be4e8761608e9436c78988a3d288312b4ca733179c22ef504218bf7e3032b36b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.358289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16b4ab75-e971-4993-86d4-eb73cc0cad0a", "created": "2026-01-27T05:13:00.359166Z", "modified": "2026-01-27T05:13:00.359166Z", "relationship_type": "indicates", "source_ref": "indicator--8b189341-3ee0-4f2d-a69c-6914f623c0e6", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d0797a-727c-4ca8-8c5e-27db3bfee320", "created": "2026-01-27T05:13:00.359344Z", "modified": "2026-01-27T05:13:00.359344Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='629d3d4c64c644583a1a35cb162843625c7dcbf4911bcb3cbe319e4685304a8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.359344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--240137fd-ad9c-4ed6-af94-de5de735562d", "created": "2026-01-27T05:13:00.36018Z", "modified": "2026-01-27T05:13:00.36018Z", "relationship_type": "indicates", "source_ref": "indicator--f9d0797a-727c-4ca8-8c5e-27db3bfee320", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a047d3aa-c7ad-4b3a-af27-b265edcdfa10", "created": "2026-01-27T05:13:00.360354Z", "modified": "2026-01-27T05:13:00.360354Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6d66d2ad6f762a59ddffbdb11f580c8a4a5a679453e305152b1b9d53328bb179']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.360354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1397621-8309-47e0-adc6-a31c2aa90dc0", "created": "2026-01-27T05:13:00.361179Z", "modified": "2026-01-27T05:13:00.361179Z", "relationship_type": "indicates", "source_ref": "indicator--a047d3aa-c7ad-4b3a-af27-b265edcdfa10", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4229be5b-0502-43cc-b7f9-4d36cd4a892c", "created": "2026-01-27T05:13:00.361351Z", "modified": "2026-01-27T05:13:00.361351Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a5b1e848f4412007cf7b0c306f658aea967557a1f8647d86d670373d872a66c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.361351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55d4e224-7eec-4411-9c98-e0690003a360", "created": "2026-01-27T05:13:00.362175Z", "modified": "2026-01-27T05:13:00.362175Z", "relationship_type": "indicates", "source_ref": "indicator--4229be5b-0502-43cc-b7f9-4d36cd4a892c", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa72bf2d-dec7-4228-8e94-3f3411851f2f", "created": "2026-01-27T05:13:00.362348Z", "modified": "2026-01-27T05:13:00.362348Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad36bf9006aaa05e9f46591d4ad0cf78971726d1c93a02d59512090a9134b20c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.362348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cf5b0d4-519d-4102-813b-0e5aa1bbd9ea", "created": "2026-01-27T05:13:00.363184Z", "modified": "2026-01-27T05:13:00.363184Z", "relationship_type": "indicates", "source_ref": "indicator--fa72bf2d-dec7-4228-8e94-3f3411851f2f", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a04e5595-9535-4856-9835-0096555697e9", "created": "2026-01-27T05:13:00.363363Z", "modified": "2026-01-27T05:13:00.363363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b826dbf34d15d5ab8ed95b84e318b33fcc51130d6345d0d4a0b7b8c9ed889078']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.363363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--530cc63f-d6f0-49be-93e1-1a8456b533d5", "created": "2026-01-27T05:13:00.364197Z", "modified": "2026-01-27T05:13:00.364197Z", "relationship_type": "indicates", "source_ref": "indicator--a04e5595-9535-4856-9835-0096555697e9", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286a64c6-7bef-4b42-a316-9538e006c646", "created": "2026-01-27T05:13:00.364375Z", "modified": "2026-01-27T05:13:00.364375Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ac161c2ade0ab256c3f5854fcf45264048c050417f488741b1c1d9ffb9ea98f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.364375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55a1ef7c-4b72-4bfc-8869-6c3b7052a838", "created": "2026-01-27T05:13:00.365327Z", "modified": "2026-01-27T05:13:00.365327Z", "relationship_type": "indicates", "source_ref": "indicator--286a64c6-7bef-4b42-a316-9538e006c646", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954791c8-f2ad-4d1d-9160-5009b67ef486", "created": "2026-01-27T05:13:00.365519Z", "modified": "2026-01-27T05:13:00.365519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70b6efec4008204b14118253ed9357add27dea0404c468c417bf02b86159ae08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.365519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--203ae73c-dae3-475d-b3ea-eca1c8bc9809", "created": "2026-01-27T05:13:00.36635Z", "modified": "2026-01-27T05:13:00.36635Z", "relationship_type": "indicates", "source_ref": "indicator--954791c8-f2ad-4d1d-9160-5009b67ef486", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55236378-951c-4afc-8451-c4e76fe82af4", "created": "2026-01-27T05:13:00.366524Z", "modified": "2026-01-27T05:13:00.366524Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3183b3583892fc88ca0df08db257f1000034f0b8b05c8ae90d14515808a2d759']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.366524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68acb626-5165-45cd-be39-d4aab366b77b", "created": "2026-01-27T05:13:00.367363Z", "modified": "2026-01-27T05:13:00.367363Z", "relationship_type": "indicates", "source_ref": "indicator--55236378-951c-4afc-8451-c4e76fe82af4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ad83c2-a8a1-4acc-aebd-9d1c6d1a7c22", "created": "2026-01-27T05:13:00.367542Z", "modified": "2026-01-27T05:13:00.367542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c18d0a056192f42cddf1439e729a4ae352302f765ebd711804925d7bfe742c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.367542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c61892cc-dd9f-4d34-9925-c4885164d7f0", "created": "2026-01-27T05:13:00.368364Z", "modified": "2026-01-27T05:13:00.368364Z", "relationship_type": "indicates", "source_ref": "indicator--77ad83c2-a8a1-4acc-aebd-9d1c6d1a7c22", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235666e5-55e9-4649-a45a-0cac096c1053", "created": "2026-01-27T05:13:00.368537Z", "modified": "2026-01-27T05:13:00.368537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e61328b18e6e0284fdcc0ae7ba590d1dc7cb69606eedbbd6ee1bfa82e55d8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.368537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df7c3d83-3972-4fa6-a185-9e7b5ecebf74", "created": "2026-01-27T05:13:00.369361Z", "modified": "2026-01-27T05:13:00.369361Z", "relationship_type": "indicates", "source_ref": "indicator--235666e5-55e9-4649-a45a-0cac096c1053", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8124707c-53b6-465d-aecd-8a0b597c55f0", "created": "2026-01-27T05:13:00.369533Z", "modified": "2026-01-27T05:13:00.369533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f28a68d14631d70b3d463a196e3d007e96853b57f62cfeb646884c7bb46bcb7c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.369533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36c0763b-caf3-49b3-8215-ad4f08210b59", "created": "2026-01-27T05:13:00.370372Z", "modified": "2026-01-27T05:13:00.370372Z", "relationship_type": "indicates", "source_ref": "indicator--8124707c-53b6-465d-aecd-8a0b597c55f0", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f343ebe-605f-4aa6-b5cc-57ffe42f806a", "created": "2026-01-27T05:13:00.370545Z", "modified": "2026-01-27T05:13:00.370545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb494962c3f69a08bf24eaee626284dd72afb4cbed9e2b206ca9106928fb2c71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.370545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2eaae41-332d-4138-b7db-78d9ee208835", "created": "2026-01-27T05:13:00.371383Z", "modified": "2026-01-27T05:13:00.371383Z", "relationship_type": "indicates", "source_ref": "indicator--1f343ebe-605f-4aa6-b5cc-57ffe42f806a", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93d50b3-5b65-45e1-b7a7-4d028ae84569", "created": "2026-01-27T05:13:00.371557Z", "modified": "2026-01-27T05:13:00.371557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='958fe889b34ff4ff8d867eb1a8fc7aac7e80cd920cb2d03ca68c40a41f15837d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.371557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd61aea7-a335-460a-823b-c13a42a3bdc2", "created": "2026-01-27T05:13:00.372387Z", "modified": "2026-01-27T05:13:00.372387Z", "relationship_type": "indicates", "source_ref": "indicator--c93d50b3-5b65-45e1-b7a7-4d028ae84569", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f07f0d-0ef1-4059-836a-f96dfc75daef", "created": "2026-01-27T05:13:00.372562Z", "modified": "2026-01-27T05:13:00.372562Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ca1649945cd99e0b45e2ab2587cca9fa6f9d0779b530aca2c035f84c1524a1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.372562Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b846d2d5-b521-4c63-b310-150604fc8bd0", "created": "2026-01-27T05:13:00.373393Z", "modified": "2026-01-27T05:13:00.373393Z", "relationship_type": "indicates", "source_ref": "indicator--36f07f0d-0ef1-4059-836a-f96dfc75daef", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35054064-5343-41bc-bcab-75c9ac27c4e7", "created": "2026-01-27T05:13:00.373574Z", "modified": "2026-01-27T05:13:00.373574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='541b5294186230462b8898b2cacd97eb9170109f1bc3098ac1696852a5732720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.373574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dc309689-a64c-4ad1-8b18-40a65587f83a", "created": "2026-01-27T05:13:00.374622Z", "modified": "2026-01-27T05:13:00.374622Z", "relationship_type": "indicates", "source_ref": "indicator--35054064-5343-41bc-bcab-75c9ac27c4e7", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7595c164-c8b9-4a9d-bbef-958f7acbdfe9", "created": "2026-01-27T05:13:00.37482Z", "modified": "2026-01-27T05:13:00.37482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87fe2d97ea733bf50ac80035b83bfc0472e0e998cd4c5c7652b75aa68fff85f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.37482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b83fa947-6514-439c-944f-f21b7796ce70", "created": "2026-01-27T05:13:00.375659Z", "modified": "2026-01-27T05:13:00.375659Z", "relationship_type": "indicates", "source_ref": "indicator--7595c164-c8b9-4a9d-bbef-958f7acbdfe9", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13470db-a1b6-4307-bcac-5e471f4f6d73", "created": "2026-01-27T05:13:00.375853Z", "modified": "2026-01-27T05:13:00.375853Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90e0558a36685d8aa7344c0cf61909792ed2f15eb982e2609c2a7f255989c8ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.375853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01190bdc-8dbe-40b5-9ff8-ec7d96a26a63", "created": "2026-01-27T05:13:00.376682Z", "modified": "2026-01-27T05:13:00.376682Z", "relationship_type": "indicates", "source_ref": "indicator--b13470db-a1b6-4307-bcac-5e471f4f6d73", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c38e9f1-0c2c-447e-9a37-23f2de9001fb", "created": "2026-01-27T05:13:00.376888Z", "modified": "2026-01-27T05:13:00.376888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f6eaeba4fd9f4b0ba71960eddb8909eb500cfe0792270510924956fac6fccb5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.376888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e45f890-b526-4f66-9dc1-2c812f467863", "created": "2026-01-27T05:13:00.377732Z", "modified": "2026-01-27T05:13:00.377732Z", "relationship_type": "indicates", "source_ref": "indicator--4c38e9f1-0c2c-447e-9a37-23f2de9001fb", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab2ef74-4d63-45ab-b4d2-1870fa00f100", "created": "2026-01-27T05:13:00.377926Z", "modified": "2026-01-27T05:13:00.377926Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='98d8d433d6714bd6baedf5717fc6775d7aebd4cfb72e07dde1a4e136c483e24b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.377926Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ab07f48-13fa-4c16-83d6-7d300edbe981", "created": "2026-01-27T05:13:00.378759Z", "modified": "2026-01-27T05:13:00.378759Z", "relationship_type": "indicates", "source_ref": "indicator--1ab2ef74-4d63-45ab-b4d2-1870fa00f100", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc34bb6-394a-4ffd-88e7-e63ea3186b26", "created": "2026-01-27T05:13:00.378943Z", "modified": "2026-01-27T05:13:00.378943Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0e1939bead0f2bc4c8095aa4726d2f7f9ee5ad51ee358ea7582991bebbc28b1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.378943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1dc179a-6c67-419d-9785-b026fa1e100d", "created": "2026-01-27T05:13:00.379769Z", "modified": "2026-01-27T05:13:00.379769Z", "relationship_type": "indicates", "source_ref": "indicator--9cc34bb6-394a-4ffd-88e7-e63ea3186b26", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65a8e82-7125-4289-94d5-2a6b5c0651d7", "created": "2026-01-27T05:13:00.379945Z", "modified": "2026-01-27T05:13:00.379945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93885d2f83497ad7b6114f0f0a7e148911e867d4c51618cd4dca6fd326b918e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.379945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0218a76c-957b-426c-b3bf-a9041587d34b", "created": "2026-01-27T05:13:00.380816Z", "modified": "2026-01-27T05:13:00.380816Z", "relationship_type": "indicates", "source_ref": "indicator--f65a8e82-7125-4289-94d5-2a6b5c0651d7", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729f6847-d3b5-4536-a251-3f08aeadcc9c", "created": "2026-01-27T05:13:00.381007Z", "modified": "2026-01-27T05:13:00.381007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='945bc3dc8faffba440e79d2778d3e994ee2362dac5c6cd852d6e88c02380c694']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.381007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fbf137b-827a-4ad5-b3d1-5d86c6ce12b4", "created": "2026-01-27T05:13:00.381901Z", "modified": "2026-01-27T05:13:00.381901Z", "relationship_type": "indicates", "source_ref": "indicator--729f6847-d3b5-4536-a251-3f08aeadcc9c", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac92981-d1a1-4308-a3d5-069945b54514", "created": "2026-01-27T05:13:00.38208Z", "modified": "2026-01-27T05:13:00.38208Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9802fbe92d73d608ce6702b825174c29d28b1e2112bb3362fb228ab38fada137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.38208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09345baa-ff12-4374-b544-c2f1da7c8ad7", "created": "2026-01-27T05:13:00.382928Z", "modified": "2026-01-27T05:13:00.382928Z", "relationship_type": "indicates", "source_ref": "indicator--cac92981-d1a1-4308-a3d5-069945b54514", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09ac81d-277c-4d42-95ab-ff1ac8439447", "created": "2026-01-27T05:13:00.383105Z", "modified": "2026-01-27T05:13:00.383105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='845d1df7ca94493f746d5d1bbe702de5635143ad32b6a106d0e0c66e78313729']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.383105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10358b28-7a7a-459e-841d-fbfda712a9fe", "created": "2026-01-27T05:13:00.384057Z", "modified": "2026-01-27T05:13:00.384057Z", "relationship_type": "indicates", "source_ref": "indicator--b09ac81d-277c-4d42-95ab-ff1ac8439447", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a23b6bc-7c4b-4863-9fce-25197f476fa4", "created": "2026-01-27T05:13:00.384234Z", "modified": "2026-01-27T05:13:00.384234Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f61b082a1ba7ca18c915ec0ba7bc2fb5a925264147314ed694d0fbdd62568153']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.384234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c31566cc-eddb-475d-bb3d-ffa6af7435b2", "created": "2026-01-27T05:13:00.385068Z", "modified": "2026-01-27T05:13:00.385068Z", "relationship_type": "indicates", "source_ref": "indicator--9a23b6bc-7c4b-4863-9fce-25197f476fa4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54e5107-c899-4f74-9217-876b3731d703", "created": "2026-01-27T05:13:00.385245Z", "modified": "2026-01-27T05:13:00.385245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59ab0cc5b1a9df07c14a01356ea0973ff3559edbefc0b5c295cd97cac067270e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.385245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34bc2454-c9f6-4bcd-8dec-c2d2446373d7", "created": "2026-01-27T05:13:00.386078Z", "modified": "2026-01-27T05:13:00.386078Z", "relationship_type": "indicates", "source_ref": "indicator--d54e5107-c899-4f74-9217-876b3731d703", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc490101-fa80-4f07-8737-e0b57152858d", "created": "2026-01-27T05:13:00.386259Z", "modified": "2026-01-27T05:13:00.386259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c400b4ed590df2279e51f80a121469ccdeb607b172493d9be4e5e416cb861924']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.386259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12866bf2-604b-47d5-9044-420b2cf3700f", "created": "2026-01-27T05:13:00.387085Z", "modified": "2026-01-27T05:13:00.387085Z", "relationship_type": "indicates", "source_ref": "indicator--bc490101-fa80-4f07-8737-e0b57152858d", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9144e15d-e093-4556-b305-bc7e022ad9fd", "created": "2026-01-27T05:13:00.387259Z", "modified": "2026-01-27T05:13:00.387259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d9a193f6a9067b21032db11b8c1db2e2c8c32099d763f7ec96acc65f00f7286']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.387259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f1ed406-7f88-46f1-9c5b-a7e23c39b710", "created": "2026-01-27T05:13:00.388098Z", "modified": "2026-01-27T05:13:00.388098Z", "relationship_type": "indicates", "source_ref": "indicator--9144e15d-e093-4556-b305-bc7e022ad9fd", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e15358c-cb27-4ed9-bf5c-4fc15d2ff9c4", "created": "2026-01-27T05:13:00.388274Z", "modified": "2026-01-27T05:13:00.388274Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f078e3e9b7a96be811ab5c12d766ebefdc76ab9b5c02a38acbc91c0455258c1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.388274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22744b4b-098b-45e3-a1b7-b2576fc2c8e7", "created": "2026-01-27T05:13:00.389103Z", "modified": "2026-01-27T05:13:00.389103Z", "relationship_type": "indicates", "source_ref": "indicator--7e15358c-cb27-4ed9-bf5c-4fc15d2ff9c4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0107d2ff-3882-4ea6-86a0-0f222e47c179", "created": "2026-01-27T05:13:00.389281Z", "modified": "2026-01-27T05:13:00.389281Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89ec89ec8859545437beec1c3e07e4c15723d0df0b79fdd4c67a6f327f558a8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.389281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef0bc131-e0b2-443f-b642-5c0845b17f97", "created": "2026-01-27T05:13:00.390193Z", "modified": "2026-01-27T05:13:00.390193Z", "relationship_type": "indicates", "source_ref": "indicator--0107d2ff-3882-4ea6-86a0-0f222e47c179", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045334d2-4b87-457b-a7d6-28a1f86a4e46", "created": "2026-01-27T05:13:00.39037Z", "modified": "2026-01-27T05:13:00.39037Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0db82562f4412a248751b2392bd32dcb91bb55f31d0d54e354a172e4430b84fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.39037Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93a739b2-5f86-418c-a541-8a0c50afdabd", "created": "2026-01-27T05:13:00.391239Z", "modified": "2026-01-27T05:13:00.391239Z", "relationship_type": "indicates", "source_ref": "indicator--045334d2-4b87-457b-a7d6-28a1f86a4e46", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8450fadd-3ac3-49c9-8f40-d32be06cc787", "created": "2026-01-27T05:13:00.39143Z", "modified": "2026-01-27T05:13:00.39143Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spappm_mondow.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.39143Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a822a36e-c986-4482-9aeb-866405975d2f", "created": "2026-01-27T05:13:00.392116Z", "modified": "2026-01-27T05:13:00.392116Z", "relationship_type": "indicates", "source_ref": "indicator--8450fadd-3ac3-49c9-8f40-d32be06cc787", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62fb267-4f22-4b93-b3b0-3dac175f7cd2", "created": "2026-01-27T05:13:00.392292Z", "modified": "2026-01-27T05:13:00.392292Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spapptrakapp.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.392292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16e05a45-1dee-40c4-9468-77996b1e5536", "created": "2026-01-27T05:13:00.393149Z", "modified": "2026-01-27T05:13:00.393149Z", "relationship_type": "indicates", "source_ref": "indicator--f62fb267-4f22-4b93-b3b0-3dac175f7cd2", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e741fc-d596-41a9-b028-665aff5eb746", "created": "2026-01-27T05:13:00.393331Z", "modified": "2026-01-27T05:13:00.393331Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spatrakappp.alarm']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.393331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--40e84d65-ae60-4b70-a81b-952571f91e4f", "created": "2026-01-27T05:13:00.394003Z", "modified": "2026-01-27T05:13:00.394003Z", "relationship_type": "indicates", "source_ref": "indicator--e7e741fc-d596-41a9-b028-665aff5eb746", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c31d5e-7867-42d6-bdcc-e89f5c1c6528", "created": "2026-01-27T05:13:00.39418Z", "modified": "2026-01-27T05:13:00.39418Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8C017FDB2A81807EC879A8E30F4AB05D5CA02034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.39418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13891232-c9fd-4850-8730-17fdf0703733", "created": "2026-01-27T05:13:00.394954Z", "modified": "2026-01-27T05:13:00.394954Z", "relationship_type": "indicates", "source_ref": "indicator--07c31d5e-7867-42d6-bdcc-e89f5c1c6528", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44ec790-80f6-4d9e-8db5-306855e27cf4", "created": "2026-01-27T05:13:00.395129Z", "modified": "2026-01-27T05:13:00.395129Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9477420001BC79500623374EC586B054AAC97BF9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.395129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3404b288-8aff-4ece-b0c9-cfe41ff8e670", "created": "2026-01-27T05:13:00.395901Z", "modified": "2026-01-27T05:13:00.395901Z", "relationship_type": "indicates", "source_ref": "indicator--d44ec790-80f6-4d9e-8db5-306855e27cf4", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60bfdc6-d228-42d0-9566-8ca09b1d1306", "created": "2026-01-27T05:13:00.396073Z", "modified": "2026-01-27T05:13:00.396073Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='26AF8554EE338D6969FAC51BF4DAC3186098056E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.396073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--251b055c-4aeb-4d25-96b2-e076f5f6fd94", "created": "2026-01-27T05:13:00.396852Z", "modified": "2026-01-27T05:13:00.396852Z", "relationship_type": "indicates", "source_ref": "indicator--c60bfdc6-d228-42d0-9566-8ca09b1d1306", "target_ref": "malware--d0582928-bab5-4599-b79e-29c33f23d589"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac", "created": "2026-01-27T05:13:00.397034Z", "modified": "2026-01-27T05:13:00.397034Z", "name": "AndroidMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696f982c-e35b-4d34-8a8a-e37d48ccebcd", "created": "2026-01-27T05:13:00.39722Z", "modified": "2026-01-27T05:13:00.39722Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='server.androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.39722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e212147d-23ee-4804-a1dc-c1c1c598f157", "created": "2026-01-27T05:13:00.39794Z", "modified": "2026-01-27T05:13:00.39794Z", "relationship_type": "indicates", "source_ref": "indicator--696f982c-e35b-4d34-8a8a-e37d48ccebcd", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1a11b2-f50b-440e-8edd-a2cc1e171c5a", "created": "2026-01-27T05:13:00.398115Z", "modified": "2026-01-27T05:13:00.398115Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.398115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbe9099e-ccbb-4fb9-a6b5-d76e0791fe68", "created": "2026-01-27T05:13:00.398795Z", "modified": "2026-01-27T05:13:00.398795Z", "relationship_type": "indicates", "source_ref": "indicator--0b1a11b2-f50b-440e-8edd-a2cc1e171c5a", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab01ffb-7dd3-43b3-b315-8b57ad566ae5", "created": "2026-01-27T05:13:00.398976Z", "modified": "2026-01-27T05:13:00.398976Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.ultimatephonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.398976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df2c3e25-c81b-451f-b046-275c5f22b269", "created": "2026-01-27T05:13:00.399658Z", "modified": "2026-01-27T05:13:00.399658Z", "relationship_type": "indicates", "source_ref": "indicator--6ab01ffb-7dd3-43b3-b315-8b57ad566ae5", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f927f9-276a-4afa-b8a4-6db822da8492", "created": "2026-01-27T05:13:00.399854Z", "modified": "2026-01-27T05:13:00.399854Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ultimatephonespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.399854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--927a88df-6a32-40fc-a823-de83a5b858b0", "created": "2026-01-27T05:13:00.400549Z", "modified": "2026-01-27T05:13:00.400549Z", "relationship_type": "indicates", "source_ref": "indicator--97f927f9-276a-4afa-b8a4-6db822da8492", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83c8fe3-0e8d-4849-bfe0-37a1ec49d8ba", "created": "2026-01-27T05:13:00.400734Z", "modified": "2026-01-27T05:13:00.400734Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.400734Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6a5b63a-5b3a-47ed-872e-ecbe4dbadfc4", "created": "2026-01-27T05:13:00.401552Z", "modified": "2026-01-27T05:13:00.401552Z", "relationship_type": "indicates", "source_ref": "indicator--b83c8fe3-0e8d-4849-bfe0-37a1ec49d8ba", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7cf4c8-917f-4169-a7db-cf4123356abe", "created": "2026-01-27T05:13:00.401726Z", "modified": "2026-01-27T05:13:00.401726Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.androidmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.401726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94889ff1-3d47-4817-97f3-a07e4a9afb3d", "created": "2026-01-27T05:13:00.402417Z", "modified": "2026-01-27T05:13:00.402417Z", "relationship_type": "indicates", "source_ref": "indicator--1f7cf4c8-917f-4169-a7db-cf4123356abe", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7d4337-4b8d-400f-a0ed-a6773f733cb0", "created": "2026-01-27T05:13:00.402594Z", "modified": "2026-01-27T05:13:00.402594Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='installam.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.402594Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7825eef6-066b-4a08-834e-db48e9436ffb", "created": "2026-01-27T05:13:00.403277Z", "modified": "2026-01-27T05:13:00.403277Z", "relationship_type": "indicates", "source_ref": "indicator--1b7d4337-4b8d-400f-a0ed-a6773f733cb0", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db853ff6-7171-438f-bd21-69f695bfe416", "created": "2026-01-27T05:13:00.403461Z", "modified": "2026-01-27T05:13:00.403461Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8983e9a874a3f457b2de3d4022a3a303b47a010876fbfa6a73086a936f16aaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.403461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59b856fe-d492-4124-b7fe-099be847080e", "created": "2026-01-27T05:13:00.404302Z", "modified": "2026-01-27T05:13:00.404302Z", "relationship_type": "indicates", "source_ref": "indicator--db853ff6-7171-438f-bd21-69f695bfe416", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1b0cdc-a889-439a-be2a-36fea38977af", "created": "2026-01-27T05:13:00.404477Z", "modified": "2026-01-27T05:13:00.404477Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a7b9bf2d08c64d6dcbddf28003903e08e4672e1f4c32dcbcd3a76d48ce9f6164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.404477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16e20cb3-0819-4d1e-8788-86c0561ebee0", "created": "2026-01-27T05:13:00.405322Z", "modified": "2026-01-27T05:13:00.405322Z", "relationship_type": "indicates", "source_ref": "indicator--cd1b0cdc-a889-439a-be2a-36fea38977af", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc58427-d389-4462-8c81-a5ae78991d78", "created": "2026-01-27T05:13:00.405527Z", "modified": "2026-01-27T05:13:00.405527Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1cedf11a9589344f4d2f5b5a1aafef39b543d3e5c390c831d407c47e5f6e4b3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.405527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a91dbf4-23df-4687-88f8-9414ee810c90", "created": "2026-01-27T05:13:00.406367Z", "modified": "2026-01-27T05:13:00.406367Z", "relationship_type": "indicates", "source_ref": "indicator--6fc58427-d389-4462-8c81-a5ae78991d78", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a12828-5bcd-4e81-b2c2-e97f90cc83bb", "created": "2026-01-27T05:13:00.406541Z", "modified": "2026-01-27T05:13:00.406541Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='837237c6fde628eafbd00a737ced265648ee8ab0688e0b4b64fe99f8c7153f2f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.406541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a2a1843-1db4-484b-932a-b3f8a2f4caab", "created": "2026-01-27T05:13:00.407421Z", "modified": "2026-01-27T05:13:00.407421Z", "relationship_type": "indicates", "source_ref": "indicator--56a12828-5bcd-4e81-b2c2-e97f90cc83bb", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee46e45-d28c-4fa0-9e2f-0e23ce912a1d", "created": "2026-01-27T05:13:00.407606Z", "modified": "2026-01-27T05:13:00.407606Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8a76f01c4496299978d366c6b814173a347f05d05f19177cbaa23ad283bbfffc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.407606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--973d1272-b6b4-4317-9619-b1f9e55804af", "created": "2026-01-27T05:13:00.408433Z", "modified": "2026-01-27T05:13:00.408433Z", "relationship_type": "indicates", "source_ref": "indicator--7ee46e45-d28c-4fa0-9e2f-0e23ce912a1d", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166c138e-f8b1-4497-8078-ad8cf7713bd6", "created": "2026-01-27T05:13:00.408611Z", "modified": "2026-01-27T05:13:00.408611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='decae43fdfdb6ff0099ce4afd5c225e9052c37aa25be05287172cffc468122e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.408611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--266e0a63-abaa-4516-af10-130ba6444d59", "created": "2026-01-27T05:13:00.409965Z", "modified": "2026-01-27T05:13:00.409965Z", "relationship_type": "indicates", "source_ref": "indicator--166c138e-f8b1-4497-8078-ad8cf7713bd6", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fef5cf-8236-4ff2-82a7-294bb0b3f3b3", "created": "2026-01-27T05:13:00.410148Z", "modified": "2026-01-27T05:13:00.410148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5829380cf2134da8b65a85fdfabc1dc41e87c51c09944e91768f7165588a3470']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.410148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--475c028f-5b13-416d-9fa8-6b9e9287984e", "created": "2026-01-27T05:13:00.410981Z", "modified": "2026-01-27T05:13:00.410981Z", "relationship_type": "indicates", "source_ref": "indicator--c8fef5cf-8236-4ff2-82a7-294bb0b3f3b3", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c55c08a-3318-431a-afda-8dde851b9d31", "created": "2026-01-27T05:13:00.411159Z", "modified": "2026-01-27T05:13:00.411159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85edce966c0592c85ac0cef3ea15df2d6dd345873be0dcf94f64943586e85714']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.411159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e485e14a-8f24-4b56-8a14-ea1ae213da9d", "created": "2026-01-27T05:13:00.411991Z", "modified": "2026-01-27T05:13:00.411991Z", "relationship_type": "indicates", "source_ref": "indicator--2c55c08a-3318-431a-afda-8dde851b9d31", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19808ce6-9508-4599-99f6-237a74c52341", "created": "2026-01-27T05:13:00.41217Z", "modified": "2026-01-27T05:13:00.41217Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fd7d3615a94cf25b46722e864adc69a1089cf9c31424b5a318e9bd739ca6daa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.41217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a789abfa-a963-4cf9-81ed-e41f909fd342", "created": "2026-01-27T05:13:00.413018Z", "modified": "2026-01-27T05:13:00.413018Z", "relationship_type": "indicates", "source_ref": "indicator--19808ce6-9508-4599-99f6-237a74c52341", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6f71e2-eb4b-431e-a611-981a468b4211", "created": "2026-01-27T05:13:00.413201Z", "modified": "2026-01-27T05:13:00.413201Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0513e57f568f487a52c482fb59041445f486a92bd2c4a322b17032281a815ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.413201Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f28cabf-5061-406d-b3af-af5fb218ef0e", "created": "2026-01-27T05:13:00.414032Z", "modified": "2026-01-27T05:13:00.414032Z", "relationship_type": "indicates", "source_ref": "indicator--fc6f71e2-eb4b-431e-a611-981a468b4211", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762bdad4-7b98-431c-8158-d4c35fa4a178", "created": "2026-01-27T05:13:00.414209Z", "modified": "2026-01-27T05:13:00.414209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08c23b74046637728787fd611584db345701c124987fbeb165fbea65c29c0c7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.414209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55d4b603-9d7c-470a-bf93-823889dea39b", "created": "2026-01-27T05:13:00.415045Z", "modified": "2026-01-27T05:13:00.415045Z", "relationship_type": "indicates", "source_ref": "indicator--762bdad4-7b98-431c-8158-d4c35fa4a178", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd98863-08e5-4d99-8ac3-affbb85ce49b", "created": "2026-01-27T05:13:00.415219Z", "modified": "2026-01-27T05:13:00.415219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ea97385a1ba2fcff5adae16eb63e2efd06ad215883e1775d2caeda886e61eeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.415219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f1b1e48-f851-4860-8ea0-a480a2308474", "created": "2026-01-27T05:13:00.416059Z", "modified": "2026-01-27T05:13:00.416059Z", "relationship_type": "indicates", "source_ref": "indicator--2bd98863-08e5-4d99-8ac3-affbb85ce49b", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c692ac-003e-4af2-88ca-bb3e134abce7", "created": "2026-01-27T05:13:00.416233Z", "modified": "2026-01-27T05:13:00.416233Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3c5bb39e48e777fb32ebf8bf72a338379ab900b450f33087fc4caf3673074ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.416233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e82fcbf-cc48-4040-9eb2-68016945c1cf", "created": "2026-01-27T05:13:00.41708Z", "modified": "2026-01-27T05:13:00.41708Z", "relationship_type": "indicates", "source_ref": "indicator--71c692ac-003e-4af2-88ca-bb3e134abce7", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084609cf-eb78-4339-8449-095b7dbcf3c4", "created": "2026-01-27T05:13:00.417256Z", "modified": "2026-01-27T05:13:00.417256Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb8ce7df08a5dd151f741adce7bc28f05787d50260b79055900f624a04568c5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.417256Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc9c327d-a9f0-4c6b-be19-5e408a9c5d69", "created": "2026-01-27T05:13:00.418091Z", "modified": "2026-01-27T05:13:00.418091Z", "relationship_type": "indicates", "source_ref": "indicator--084609cf-eb78-4339-8449-095b7dbcf3c4", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395a6c14-98be-41e0-a84a-a01736ac73db", "created": "2026-01-27T05:13:00.418267Z", "modified": "2026-01-27T05:13:00.418267Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='240dd787247bac93e6e8ef1becaf1edac2684ae4bae59cb56861b997dc0156a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.418267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13591763-897c-41c8-a1ee-eb9641da6218", "created": "2026-01-27T05:13:00.419227Z", "modified": "2026-01-27T05:13:00.419227Z", "relationship_type": "indicates", "source_ref": "indicator--395a6c14-98be-41e0-a84a-a01736ac73db", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be14dfc-534b-4b08-9984-2a8280482565", "created": "2026-01-27T05:13:00.419407Z", "modified": "2026-01-27T05:13:00.419407Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70d3cb60122e2995f5511c0d6ba05e7c5114d88437685ddf00a6fd80e606c1bf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.419407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be6069b3-320e-41f8-a17e-792c6fcea618", "created": "2026-01-27T05:13:00.420253Z", "modified": "2026-01-27T05:13:00.420253Z", "relationship_type": "indicates", "source_ref": "indicator--0be14dfc-534b-4b08-9984-2a8280482565", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a6829e-2b65-4a72-98f5-d2ba34d3e8c6", "created": "2026-01-27T05:13:00.42043Z", "modified": "2026-01-27T05:13:00.42043Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='90fd50cdbc2fb8add2379d58bac5ed191f19e2557083206efc036273c749e0d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.42043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59f84bf6-e00e-492c-b2ab-cb579b16303c", "created": "2026-01-27T05:13:00.421329Z", "modified": "2026-01-27T05:13:00.421329Z", "relationship_type": "indicates", "source_ref": "indicator--91a6829e-2b65-4a72-98f5-d2ba34d3e8c6", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b54992a-55b5-4050-92c2-0149c89577ea", "created": "2026-01-27T05:13:00.421511Z", "modified": "2026-01-27T05:13:00.421511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c891584b9f9cb410a6ce81b239d88a340e5566ddb4768a1db28f2430f60b509']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.421511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cc553d4-460c-43fd-b771-5b6800158e56", "created": "2026-01-27T05:13:00.422378Z", "modified": "2026-01-27T05:13:00.422378Z", "relationship_type": "indicates", "source_ref": "indicator--7b54992a-55b5-4050-92c2-0149c89577ea", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ecdd66d-9d06-4e42-95d4-8f1d4d3b0747", "created": "2026-01-27T05:13:00.422553Z", "modified": "2026-01-27T05:13:00.422553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c44e8fba94b134f73ca6be0cfbe8778b9ff72201c7ddcfaf4a69a53118ef990']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.422553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4eb12674-46af-4ced-849d-216ea06f4b41", "created": "2026-01-27T05:13:00.423404Z", "modified": "2026-01-27T05:13:00.423404Z", "relationship_type": "indicates", "source_ref": "indicator--8ecdd66d-9d06-4e42-95d4-8f1d4d3b0747", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eaf295d-b038-43d5-95d0-6b25cc336600", "created": "2026-01-27T05:13:00.423579Z", "modified": "2026-01-27T05:13:00.423579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13d5a01a6699f421f6e41e4e3c8d8620d6cff9874087eb2aa741b2d6e065dd71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.423579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b05e30d-47c6-42a0-a2cb-5c629c785808", "created": "2026-01-27T05:13:00.424406Z", "modified": "2026-01-27T05:13:00.424406Z", "relationship_type": "indicates", "source_ref": "indicator--6eaf295d-b038-43d5-95d0-6b25cc336600", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d31c7f-adbb-4352-b991-3308de5c9933", "created": "2026-01-27T05:13:00.424581Z", "modified": "2026-01-27T05:13:00.424581Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3aeb15c4a0bfa4789a1c6eabe0058ad4acf0bae00a65ee3a5a6e21aba04f0905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.424581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cd24f77-3be0-47d4-b734-787c2e4d903c", "created": "2026-01-27T05:13:00.425438Z", "modified": "2026-01-27T05:13:00.425438Z", "relationship_type": "indicates", "source_ref": "indicator--89d31c7f-adbb-4352-b991-3308de5c9933", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb996153-4175-493b-92ef-9667e8017ef3", "created": "2026-01-27T05:13:00.425614Z", "modified": "2026-01-27T05:13:00.425614Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b06ba3a861c4a9b238460543d20c2817c6f0f1fccf2cb50de360655660f7bb04']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.425614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed33311e-4373-4a82-935c-ea17d19c93b2", "created": "2026-01-27T05:13:00.426458Z", "modified": "2026-01-27T05:13:00.426458Z", "relationship_type": "indicates", "source_ref": "indicator--eb996153-4175-493b-92ef-9667e8017ef3", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369ef975-3162-4aed-9917-dab05f1db88b", "created": "2026-01-27T05:13:00.426635Z", "modified": "2026-01-27T05:13:00.426635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fb9df0af4ff6e1e5b950c06959837c50adc85bbeec59db663affa83d0517495']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.426635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca83d0df-d7f3-487f-9266-4d3297ba979b", "created": "2026-01-27T05:13:00.427477Z", "modified": "2026-01-27T05:13:00.427477Z", "relationship_type": "indicates", "source_ref": "indicator--369ef975-3162-4aed-9917-dab05f1db88b", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ceb7fe-3fe5-451e-8d1e-1c6ecc3b3555", "created": "2026-01-27T05:13:00.42767Z", "modified": "2026-01-27T05:13:00.42767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='440cd74c1010ad0f1d2becb5453c0bf2869087c2993522866590db9a77273d3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.42767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2798a414-3ed6-4cd8-8e1b-d97bc09f53fc", "created": "2026-01-27T05:13:00.428668Z", "modified": "2026-01-27T05:13:00.428668Z", "relationship_type": "indicates", "source_ref": "indicator--42ceb7fe-3fe5-451e-8d1e-1c6ecc3b3555", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7136557a-2629-4bfc-a572-70a1d02250d5", "created": "2026-01-27T05:13:00.428867Z", "modified": "2026-01-27T05:13:00.428867Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5d32ca5a51a080fa130956732c7285724f62109a351da35b1775e0432067b7d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.428867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78363587-bc23-4bd0-b174-cb9ca9218259", "created": "2026-01-27T05:13:00.429681Z", "modified": "2026-01-27T05:13:00.429681Z", "relationship_type": "indicates", "source_ref": "indicator--7136557a-2629-4bfc-a572-70a1d02250d5", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a112ca9c-de8b-4719-918d-a0c6d07ea3e7", "created": "2026-01-27T05:13:00.429871Z", "modified": "2026-01-27T05:13:00.429871Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f44e0a6ac19c2214aa3c5dbc1c70afdfe219a7ea893954c67bfb232d9d825da1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.429871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3639048-7ff0-4ef1-8089-bbabf8946314", "created": "2026-01-27T05:13:00.430683Z", "modified": "2026-01-27T05:13:00.430683Z", "relationship_type": "indicates", "source_ref": "indicator--a112ca9c-de8b-4719-918d-a0c6d07ea3e7", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440d0e2d-bb18-4333-8818-02d16cd5fd6e", "created": "2026-01-27T05:13:00.430885Z", "modified": "2026-01-27T05:13:00.430885Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c21d11eced9f4f5ff2606530046f45fd20ff1087fbf914b44918a690ac7d556']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.430885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2480224-5742-4dab-b1bb-98516bcde6e6", "created": "2026-01-27T05:13:00.431693Z", "modified": "2026-01-27T05:13:00.431693Z", "relationship_type": "indicates", "source_ref": "indicator--440d0e2d-bb18-4333-8818-02d16cd5fd6e", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585fd0be-d2b3-4946-9712-0bcf7fa32d58", "created": "2026-01-27T05:13:00.431884Z", "modified": "2026-01-27T05:13:00.431884Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fdacaff9f4bb261737ee16d4b8937c437a2ccc21d058fe7ae8815aa47f19ab6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.431884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--185119f6-9800-409a-9cd7-5a1a1e4ba1d6", "created": "2026-01-27T05:13:00.432692Z", "modified": "2026-01-27T05:13:00.432692Z", "relationship_type": "indicates", "source_ref": "indicator--585fd0be-d2b3-4946-9712-0bcf7fa32d58", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872dd3b4-6014-4413-8fe6-4224facb965d", "created": "2026-01-27T05:13:00.432888Z", "modified": "2026-01-27T05:13:00.432888Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='973981d0d5ba516618f9a10514200e3553cfdd014c3761cd22c859544b6c8d3d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.432888Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6ae7ed5-ba71-4a88-ae6e-5efa0a22abaa", "created": "2026-01-27T05:13:00.433711Z", "modified": "2026-01-27T05:13:00.433711Z", "relationship_type": "indicates", "source_ref": "indicator--872dd3b4-6014-4413-8fe6-4224facb965d", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ba0376-f0ed-40bd-8d70-621a9df6a0c4", "created": "2026-01-27T05:13:00.433904Z", "modified": "2026-01-27T05:13:00.433904Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08476cc59371b4cf91cdb60e7eb947f088b8ae90f8db011e98cbe9ae4110f1c3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.433904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8af3d48-c90f-4a5d-8866-eb55c10d92c6", "created": "2026-01-27T05:13:00.434725Z", "modified": "2026-01-27T05:13:00.434725Z", "relationship_type": "indicates", "source_ref": "indicator--e8ba0376-f0ed-40bd-8d70-621a9df6a0c4", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117a8ec8-7aec-461a-80ff-bb59d788deb7", "created": "2026-01-27T05:13:00.434916Z", "modified": "2026-01-27T05:13:00.434916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18e399c7038bdc97af4afb8a9b9b3f0cd46149235669be6587b094c5b8218e69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.434916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44ca963d-3db7-45c8-ac08-0e4f334686ae", "created": "2026-01-27T05:13:00.435764Z", "modified": "2026-01-27T05:13:00.435764Z", "relationship_type": "indicates", "source_ref": "indicator--117a8ec8-7aec-461a-80ff-bb59d788deb7", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5999f660-edf6-4175-b5f7-51c90742a9ff", "created": "2026-01-27T05:13:00.435944Z", "modified": "2026-01-27T05:13:00.435944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28e92a52070ec1d55e8ffe8a74c4499c05faf9942816f6c1efc495e2939439d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.435944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ace579c2-33e7-4421-8f14-fb8f38f4829c", "created": "2026-01-27T05:13:00.436793Z", "modified": "2026-01-27T05:13:00.436793Z", "relationship_type": "indicates", "source_ref": "indicator--5999f660-edf6-4175-b5f7-51c90742a9ff", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7384e9e-6bfc-4c38-8c9d-4f4c0cbc4b69", "created": "2026-01-27T05:13:00.436977Z", "modified": "2026-01-27T05:13:00.436977Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cad4a1af2a33044c816848d8027ef2d170efcedef06590a63f04b4f309715be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.436977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4814d119-4b05-441a-b8ea-7e01bc081c3d", "created": "2026-01-27T05:13:00.437978Z", "modified": "2026-01-27T05:13:00.437978Z", "relationship_type": "indicates", "source_ref": "indicator--c7384e9e-6bfc-4c38-8c9d-4f4c0cbc4b69", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a68761-7f78-425e-8455-6ead22db2630", "created": "2026-01-27T05:13:00.438154Z", "modified": "2026-01-27T05:13:00.438154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbfa23a975a012d0d111de48923db2f7e2276696678305c75a0799992a333e1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.438154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26fb1fd7-aa2c-43e8-ac49-554e57c44643", "created": "2026-01-27T05:13:00.438998Z", "modified": "2026-01-27T05:13:00.438998Z", "relationship_type": "indicates", "source_ref": "indicator--f6a68761-7f78-425e-8455-6ead22db2630", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32a121e-7292-4b4b-9774-e0c4305f1c62", "created": "2026-01-27T05:13:00.439174Z", "modified": "2026-01-27T05:13:00.439174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d0a0fb3246ca7ad43026ea6f6d37c87679cab459e28e4da5231f76f1a86d8f54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.439174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--037ef447-8794-418b-a211-b31fa9ad6c0f", "created": "2026-01-27T05:13:00.440Z", "modified": "2026-01-27T05:13:00.440Z", "relationship_type": "indicates", "source_ref": "indicator--e32a121e-7292-4b4b-9774-e0c4305f1c62", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae226217-4ae8-4939-8041-6a0e266ffc78", "created": "2026-01-27T05:13:00.440175Z", "modified": "2026-01-27T05:13:00.440175Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='696b78ea404c56571aef1e57f33eb8651fcd70f791bb6ebf09122d9cd0131a69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.440175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4150e1d4-58d6-4500-a130-87563a60d355", "created": "2026-01-27T05:13:00.44101Z", "modified": "2026-01-27T05:13:00.44101Z", "relationship_type": "indicates", "source_ref": "indicator--ae226217-4ae8-4939-8041-6a0e266ffc78", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e85d74-af4f-45cb-99ef-8b6d3be13d19", "created": "2026-01-27T05:13:00.441182Z", "modified": "2026-01-27T05:13:00.441182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7f39de38173248c9e76a0555f486d989e29f7638d4ecfbb4136115bc15d20c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.441182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2536408d-3865-4c0b-a835-ab0e1a2333cb", "created": "2026-01-27T05:13:00.442012Z", "modified": "2026-01-27T05:13:00.442012Z", "relationship_type": "indicates", "source_ref": "indicator--74e85d74-af4f-45cb-99ef-8b6d3be13d19", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d69704e-3d37-4ad5-835c-1c54908d56de", "created": "2026-01-27T05:13:00.442186Z", "modified": "2026-01-27T05:13:00.442186Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='52b3bf5ff42494894fa5a6e8858c68e1a31258117224292ace387e4e52a1ea48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.442186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8b72894-6ecf-4501-b451-7e6f732ddba6", "created": "2026-01-27T05:13:00.443011Z", "modified": "2026-01-27T05:13:00.443011Z", "relationship_type": "indicates", "source_ref": "indicator--0d69704e-3d37-4ad5-835c-1c54908d56de", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea39407-d29a-450f-acb0-d32f2299cfc4", "created": "2026-01-27T05:13:00.44319Z", "modified": "2026-01-27T05:13:00.44319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='264e99bc7820f344934308b237ec7fee109be3d09ccde154b0e7c39d75e09c7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.44319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68cbd427-1e9b-477c-b89b-820cbee8dcc4", "created": "2026-01-27T05:13:00.444026Z", "modified": "2026-01-27T05:13:00.444026Z", "relationship_type": "indicates", "source_ref": "indicator--2ea39407-d29a-450f-acb0-d32f2299cfc4", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6767ad-7c65-4175-bad8-edc287b42b4c", "created": "2026-01-27T05:13:00.444216Z", "modified": "2026-01-27T05:13:00.444216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0da28f868563dbbc53b53f3361c87701a4b1e71641d48c5cb86d39f6fd46444']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.444216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2b1f8a6-d986-4d29-b57f-ddad87081e55", "created": "2026-01-27T05:13:00.445064Z", "modified": "2026-01-27T05:13:00.445064Z", "relationship_type": "indicates", "source_ref": "indicator--9d6767ad-7c65-4175-bad8-edc287b42b4c", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34af5f7-99a9-4dc7-a539-70e70e801489", "created": "2026-01-27T05:13:00.445238Z", "modified": "2026-01-27T05:13:00.445238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c54cd930231b60b2c0f7d49c5cc730d22cab0b2cc115f33e3724d0a9adbc786']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.445238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--134af1e9-16ba-444e-a4df-c80fc53706b9", "created": "2026-01-27T05:13:00.446194Z", "modified": "2026-01-27T05:13:00.446194Z", "relationship_type": "indicates", "source_ref": "indicator--e34af5f7-99a9-4dc7-a539-70e70e801489", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4764e357-3f9d-49fa-b99c-12106e40d9f1", "created": "2026-01-27T05:13:00.446372Z", "modified": "2026-01-27T05:13:00.446372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28b14f4131858b499c1d7eefc4d2e60c6ede317541b2a8fec665d49413ba739e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.446372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ee317ef-1fa3-498a-bca0-35eeb42f3c71", "created": "2026-01-27T05:13:00.447197Z", "modified": "2026-01-27T05:13:00.447197Z", "relationship_type": "indicates", "source_ref": "indicator--4764e357-3f9d-49fa-b99c-12106e40d9f1", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b7993f-abcb-4205-ad07-97196e7fe11d", "created": "2026-01-27T05:13:00.447373Z", "modified": "2026-01-27T05:13:00.447373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0de4d427a919ee9568e873c730703a3a70e4cdcc976f15b86a77f0e7d9e0adeb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.447373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffcd7672-143b-4c37-81a9-2064fb04abeb", "created": "2026-01-27T05:13:00.44821Z", "modified": "2026-01-27T05:13:00.44821Z", "relationship_type": "indicates", "source_ref": "indicator--26b7993f-abcb-4205-ad07-97196e7fe11d", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4cddd4-aa6b-4558-beea-b80df5da376a", "created": "2026-01-27T05:13:00.448385Z", "modified": "2026-01-27T05:13:00.448385Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46787188d2e7077cb6872e0a0c7ff4b43b7e6c1b5d22659953288c9c863583ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.448385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec761efb-37b4-4329-b4fd-5ae5fb3cab05", "created": "2026-01-27T05:13:00.449233Z", "modified": "2026-01-27T05:13:00.449233Z", "relationship_type": "indicates", "source_ref": "indicator--5e4cddd4-aa6b-4558-beea-b80df5da376a", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbce5ec4-305a-427b-add3-e5d0a2ad11bd", "created": "2026-01-27T05:13:00.449406Z", "modified": "2026-01-27T05:13:00.449406Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f57686e7341f5c1f6e301d5e6eed2bd5048d56d14e5bae568370526107d0814']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.449406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8b985bb-b4ef-4602-a6af-f684a166c2ed", "created": "2026-01-27T05:13:00.450242Z", "modified": "2026-01-27T05:13:00.450242Z", "relationship_type": "indicates", "source_ref": "indicator--cbce5ec4-305a-427b-add3-e5d0a2ad11bd", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3b33d1-990e-46b3-a365-154babfd5c27", "created": "2026-01-27T05:13:00.450417Z", "modified": "2026-01-27T05:13:00.450417Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c27aa0e302e2986db9edb3bef46ae2fb5acef73e40606f83fd3ee6893e20163']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.450417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5415391-3475-4ccc-84be-73f12f9988ea", "created": "2026-01-27T05:13:00.45125Z", "modified": "2026-01-27T05:13:00.45125Z", "relationship_type": "indicates", "source_ref": "indicator--0a3b33d1-990e-46b3-a365-154babfd5c27", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f33f88-7200-4316-824e-9b43fc129206", "created": "2026-01-27T05:13:00.451426Z", "modified": "2026-01-27T05:13:00.451426Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51c71773cb0c32953149b5389e90d4be40e58ab985d7c190193a1f2c7b1b47ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.451426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cf4673a-0fe9-4568-ad97-17dd6406d2eb", "created": "2026-01-27T05:13:00.452275Z", "modified": "2026-01-27T05:13:00.452275Z", "relationship_type": "indicates", "source_ref": "indicator--e1f33f88-7200-4316-824e-9b43fc129206", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a534dd-3014-48b4-a6f8-95da3c249604", "created": "2026-01-27T05:13:00.452449Z", "modified": "2026-01-27T05:13:00.452449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='907def04e5331061e27dbb06b7fafbf60c5e895d0d899a258c49de3779bb9103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.452449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7c55366-b082-4a18-8eac-b70c4d93f378", "created": "2026-01-27T05:13:00.453319Z", "modified": "2026-01-27T05:13:00.453319Z", "relationship_type": "indicates", "source_ref": "indicator--95a534dd-3014-48b4-a6f8-95da3c249604", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054f07e4-4bb6-49a2-a137-fb8224908f4f", "created": "2026-01-27T05:13:00.453494Z", "modified": "2026-01-27T05:13:00.453494Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29429319ecc7c736262af7425edaab70f7d9cbe10ea9cf2eeca9ea7da5410427']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.453494Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4b6fc33-c5dc-4f36-95f8-1938d8229bf0", "created": "2026-01-27T05:13:00.45439Z", "modified": "2026-01-27T05:13:00.45439Z", "relationship_type": "indicates", "source_ref": "indicator--054f07e4-4bb6-49a2-a137-fb8224908f4f", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b40b69-3c90-4e81-8e54-e884048d85d8", "created": "2026-01-27T05:13:00.454571Z", "modified": "2026-01-27T05:13:00.454571Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='971a2a5f84f91f8b59a52af0781e0d0b0a1297ae57211c846d358287e198cf81']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.454571Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b23cc6b-4d8a-4e07-9fb3-5b050df1c3a8", "created": "2026-01-27T05:13:00.455535Z", "modified": "2026-01-27T05:13:00.455535Z", "relationship_type": "indicates", "source_ref": "indicator--52b40b69-3c90-4e81-8e54-e884048d85d8", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4907b98-ca43-4686-8643-b246a18e2971", "created": "2026-01-27T05:13:00.455709Z", "modified": "2026-01-27T05:13:00.455709Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='401fcf44aa8f89fe7fb2d6d090ae4499279ddeef7c43092fd0cb690bc7fdff07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.455709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78a44e91-eaaf-4341-a4a3-7f0cbbad0125", "created": "2026-01-27T05:13:00.456539Z", "modified": "2026-01-27T05:13:00.456539Z", "relationship_type": "indicates", "source_ref": "indicator--a4907b98-ca43-4686-8643-b246a18e2971", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9101976a-8141-467e-8ede-206e88a22665", "created": "2026-01-27T05:13:00.456716Z", "modified": "2026-01-27T05:13:00.456716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b99b0499d81078ddba81a35e5fd87d62e1491ee6161ee9f4c59936a9732dbcf8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.456716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2499e95-6150-4091-a0d4-40889893935a", "created": "2026-01-27T05:13:00.457549Z", "modified": "2026-01-27T05:13:00.457549Z", "relationship_type": "indicates", "source_ref": "indicator--9101976a-8141-467e-8ede-206e88a22665", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f77f050-f4ed-4ba0-b588-1373cc0f0fd9", "created": "2026-01-27T05:13:00.457728Z", "modified": "2026-01-27T05:13:00.457728Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='514f4d6272678b21151b8d5bff99ad110b585a2662acaf55c53ec120ff45bbd5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.457728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6567f4f9-9d88-4467-a83f-10233ded716e", "created": "2026-01-27T05:13:00.458557Z", "modified": "2026-01-27T05:13:00.458557Z", "relationship_type": "indicates", "source_ref": "indicator--3f77f050-f4ed-4ba0-b588-1373cc0f0fd9", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee73bfd-daf0-4f30-9bb1-c8436490fb7e", "created": "2026-01-27T05:13:00.458732Z", "modified": "2026-01-27T05:13:00.458732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b7b6d73b18155b6d3a0c63b3799c88105a0fde33bbf96bf78cd6208df2b5e66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.458732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f112a092-148c-48d7-874c-4d19f4f91017", "created": "2026-01-27T05:13:00.459574Z", "modified": "2026-01-27T05:13:00.459574Z", "relationship_type": "indicates", "source_ref": "indicator--2ee73bfd-daf0-4f30-9bb1-c8436490fb7e", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59580db1-9232-4d12-9be5-e982dd980d9c", "created": "2026-01-27T05:13:00.459765Z", "modified": "2026-01-27T05:13:00.459765Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1aa87fa0e6413cd4d196feb41a1d4a9f91cdecca86663a10c30069748c9e03de']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.459765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--547d83c8-cd0d-4b5e-9128-bf85ed51c16c", "created": "2026-01-27T05:13:00.460583Z", "modified": "2026-01-27T05:13:00.460583Z", "relationship_type": "indicates", "source_ref": "indicator--59580db1-9232-4d12-9be5-e982dd980d9c", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18e1db0-ce76-4761-b81a-f584a858a982", "created": "2026-01-27T05:13:00.460769Z", "modified": "2026-01-27T05:13:00.460769Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='03369a8fd9321aabff4d1f68ea1a1afa881074c6301427469f8cb6743d769ba4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.460769Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14cc20b7-327d-4070-b203-96fe75c82e56", "created": "2026-01-27T05:13:00.461585Z", "modified": "2026-01-27T05:13:00.461585Z", "relationship_type": "indicates", "source_ref": "indicator--b18e1db0-ce76-4761-b81a-f584a858a982", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fd0133-d4a6-4fe9-b19f-816043464936", "created": "2026-01-27T05:13:00.461776Z", "modified": "2026-01-27T05:13:00.461776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9b3c311ff86d3d32c08776f5237997410b42f926529a851fef2c8d2c5b6192c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.461776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b328b6c-379c-407f-8ba1-3b1c180d5b43", "created": "2026-01-27T05:13:00.462589Z", "modified": "2026-01-27T05:13:00.462589Z", "relationship_type": "indicates", "source_ref": "indicator--84fd0133-d4a6-4fe9-b19f-816043464936", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d25f07-11cd-495b-a475-6d9fbfdd9054", "created": "2026-01-27T05:13:00.462802Z", "modified": "2026-01-27T05:13:00.462802Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02b7f8f8bcde28780306a64c08d07dec4b568b049f7b0ee716db018e1f3f34bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.462802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa8828e8-3fca-408b-8369-9ca5d49d7df6", "created": "2026-01-27T05:13:00.46364Z", "modified": "2026-01-27T05:13:00.46364Z", "relationship_type": "indicates", "source_ref": "indicator--f5d25f07-11cd-495b-a475-6d9fbfdd9054", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aa5c43-50f9-48da-b0c9-9e3c8d8cf8c3", "created": "2026-01-27T05:13:00.463833Z", "modified": "2026-01-27T05:13:00.463833Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a54fa05e5b6a856ea55ced361faa72e13789ceb2d90e28f911ba586bd43ff937']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.463833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a571d5cc-d22d-4f77-a9aa-1b3cbaef1235", "created": "2026-01-27T05:13:00.464787Z", "modified": "2026-01-27T05:13:00.464787Z", "relationship_type": "indicates", "source_ref": "indicator--16aa5c43-50f9-48da-b0c9-9e3c8d8cf8c3", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cc637e-26db-48c8-8fcc-3770e939c88c", "created": "2026-01-27T05:13:00.464968Z", "modified": "2026-01-27T05:13:00.464968Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84bfb3773b04e4298f92bac9c67bb26b827b81cea83e8b33f9b46c3ee01a5c73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.464968Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30e452fa-fa1e-46cb-ac37-3f0198fe182a", "created": "2026-01-27T05:13:00.465792Z", "modified": "2026-01-27T05:13:00.465792Z", "relationship_type": "indicates", "source_ref": "indicator--39cc637e-26db-48c8-8fcc-3770e939c88c", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8626f66f-529b-4220-9f67-e672b1ced099", "created": "2026-01-27T05:13:00.465972Z", "modified": "2026-01-27T05:13:00.465972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9bf6c7e4b3b6f2c2fae7a8e459c67264a59e7b2b1f24acfb8156460d372f687']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.465972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c1a65f1-b42d-4d13-aa35-ad2106955b0b", "created": "2026-01-27T05:13:00.466798Z", "modified": "2026-01-27T05:13:00.466798Z", "relationship_type": "indicates", "source_ref": "indicator--8626f66f-529b-4220-9f67-e672b1ced099", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6eeb320-3137-47c8-b5e2-0f1ac7a6e027", "created": "2026-01-27T05:13:00.466976Z", "modified": "2026-01-27T05:13:00.466976Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a85549682a145c166a457837ac2898993e6c87a9dae50872e51e07a0691d77e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.466976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0798ecd2-c746-4351-bbb7-47fd67ce62b4", "created": "2026-01-27T05:13:00.467806Z", "modified": "2026-01-27T05:13:00.467806Z", "relationship_type": "indicates", "source_ref": "indicator--d6eeb320-3137-47c8-b5e2-0f1ac7a6e027", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe9b2a5-ada6-4dbc-bf49-25cce5d02def", "created": "2026-01-27T05:13:00.467986Z", "modified": "2026-01-27T05:13:00.467986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f46743fcc63705c337912f831944ff3d7572bf2b5c69e354f95a8401702ba54b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.467986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f411ad8-e28a-4c8c-b8eb-406d7fd90e4c", "created": "2026-01-27T05:13:00.468855Z", "modified": "2026-01-27T05:13:00.468855Z", "relationship_type": "indicates", "source_ref": "indicator--bfe9b2a5-ada6-4dbc-bf49-25cce5d02def", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fac7d14-4912-43e0-8feb-1b54c51801e0", "created": "2026-01-27T05:13:00.469065Z", "modified": "2026-01-27T05:13:00.469065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cafd13c1feb924f1d19dd5120b485a2df52edc1b6fa2199d06dacbcad3a9835']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.469065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46c5ea90-8e0f-4913-bbd5-498eac946789", "created": "2026-01-27T05:13:00.469913Z", "modified": "2026-01-27T05:13:00.469913Z", "relationship_type": "indicates", "source_ref": "indicator--5fac7d14-4912-43e0-8feb-1b54c51801e0", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea65f41-7114-4635-bf12-419339af7e18", "created": "2026-01-27T05:13:00.470106Z", "modified": "2026-01-27T05:13:00.470106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b77cf9c9867d4b52b12c0071b84909119371cea3486eda63ef32b520a204b43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.470106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fded4d46-03c7-45ce-9d93-278665d86fd6", "created": "2026-01-27T05:13:00.470957Z", "modified": "2026-01-27T05:13:00.470957Z", "relationship_type": "indicates", "source_ref": "indicator--5ea65f41-7114-4635-bf12-419339af7e18", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedc8264-04d2-4d8f-af7f-bf4131380dad", "created": "2026-01-27T05:13:00.471141Z", "modified": "2026-01-27T05:13:00.471141Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ee532b687c89d91d4e0b9b59f3056666fdabbbedc5e6e6ec0831d21b72f9814']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.471141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d71c5fe-a40f-4513-9309-0344d4129e12", "created": "2026-01-27T05:13:00.471994Z", "modified": "2026-01-27T05:13:00.471994Z", "relationship_type": "indicates", "source_ref": "indicator--cedc8264-04d2-4d8f-af7f-bf4131380dad", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b741e8d-1483-4d8c-ab96-910ef53119a8", "created": "2026-01-27T05:13:00.472174Z", "modified": "2026-01-27T05:13:00.472174Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a27000eedc04f11e3e450001dcf762e407342b761e27f84ce353890a7bb3fbca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.472174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--297d2db3-b5af-4819-9c08-6e6e5900b2f6", "created": "2026-01-27T05:13:00.473141Z", "modified": "2026-01-27T05:13:00.473141Z", "relationship_type": "indicates", "source_ref": "indicator--1b741e8d-1483-4d8c-ab96-910ef53119a8", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b4bd65-d12e-43b8-aeec-893b9a6997ba", "created": "2026-01-27T05:13:00.473325Z", "modified": "2026-01-27T05:13:00.473325Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='47c5ab71da50ce7f2c26204dc9e00efc32ab501c5b7b185fe14e763c717708f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.473325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c330cc70-fa54-4b05-b01e-c1a08717e750", "created": "2026-01-27T05:13:00.474163Z", "modified": "2026-01-27T05:13:00.474163Z", "relationship_type": "indicates", "source_ref": "indicator--18b4bd65-d12e-43b8-aeec-893b9a6997ba", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04e8348-f5b9-4dc2-8b3c-1df26d707554", "created": "2026-01-27T05:13:00.474339Z", "modified": "2026-01-27T05:13:00.474339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a2a6a648667f5a0ab6a281c2e7af7e7f0cbcbd4ea00652f7d40ec206784faf34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.474339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac13b57a-e772-48ec-a67c-bc1483717832", "created": "2026-01-27T05:13:00.475172Z", "modified": "2026-01-27T05:13:00.475172Z", "relationship_type": "indicates", "source_ref": "indicator--d04e8348-f5b9-4dc2-8b3c-1df26d707554", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2ec98e-47f3-4ebe-8ffc-161aee99c20b", "created": "2026-01-27T05:13:00.475345Z", "modified": "2026-01-27T05:13:00.475345Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e738c526c14227efbd897e819babcc8d0b734ef6da6486d5c20ad13713421f6a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.475345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f82d290a-22c6-45c7-aff3-3c201bab1a55", "created": "2026-01-27T05:13:00.476185Z", "modified": "2026-01-27T05:13:00.476185Z", "relationship_type": "indicates", "source_ref": "indicator--9f2ec98e-47f3-4ebe-8ffc-161aee99c20b", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b281471a-be73-4a79-be45-9ce6bec6bf50", "created": "2026-01-27T05:13:00.47636Z", "modified": "2026-01-27T05:13:00.47636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='32cc4cd60db6e1740aff1bce327580c19b1b7704572bb308ade39e19c982c0b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.47636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e02b1111-3d92-432f-bb01-240489945534", "created": "2026-01-27T05:13:00.47718Z", "modified": "2026-01-27T05:13:00.47718Z", "relationship_type": "indicates", "source_ref": "indicator--b281471a-be73-4a79-be45-9ce6bec6bf50", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7390e525-3515-4f5e-9b14-54ceaca2e667", "created": "2026-01-27T05:13:00.477361Z", "modified": "2026-01-27T05:13:00.477361Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ibm.fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.477361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c14ee0b9-aa72-4e4c-886c-0988ecc90a6d", "created": "2026-01-27T05:13:00.47801Z", "modified": "2026-01-27T05:13:00.47801Z", "relationship_type": "indicates", "source_ref": "indicator--7390e525-3515-4f5e-9b14-54ceaca2e667", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469beed7-3ee5-424a-95b2-b7a342c08260", "created": "2026-01-27T05:13:00.478183Z", "modified": "2026-01-27T05:13:00.478183Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='92EBDB7D7C18A34705A6918B5F327DDB0E8C8452']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.478183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ca4f703-2c79-4865-87c1-bd3c04cf6888", "created": "2026-01-27T05:13:00.478981Z", "modified": "2026-01-27T05:13:00.478981Z", "relationship_type": "indicates", "source_ref": "indicator--469beed7-3ee5-424a-95b2-b7a342c08260", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cddcc3f1-b976-49e4-be70-afdbc1ed5cac", "created": "2026-01-27T05:13:00.479153Z", "modified": "2026-01-27T05:13:00.479153Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='558765849658A3821FE4054ED2C1FF6E28B4B8A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.479153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b7e067f-2742-4c22-970e-46a8868a172f", "created": "2026-01-27T05:13:00.479935Z", "modified": "2026-01-27T05:13:00.479935Z", "relationship_type": "indicates", "source_ref": "indicator--cddcc3f1-b976-49e4-be70-afdbc1ed5cac", "target_ref": "malware--0d29774b-3223-4bec-a5c9-c3ce13afddac"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0", "created": "2026-01-27T05:13:00.480107Z", "modified": "2026-01-27T05:13:00.480107Z", "name": "TalkLog", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337c8415-4f9b-4252-864a-f99f8fe09467", "created": "2026-01-27T05:13:00.480279Z", "modified": "2026-01-27T05:13:00.480279Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='talklog.tools']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.480279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ccd9498-444a-4173-9437-68c8bccfbe00", "created": "2026-01-27T05:13:00.480966Z", "modified": "2026-01-27T05:13:00.480966Z", "relationship_type": "indicates", "source_ref": "indicator--337c8415-4f9b-4252-864a-f99f8fe09467", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a4dc8c-7eca-4fbd-8572-43a1ece9c52c", "created": "2026-01-27T05:13:00.481146Z", "modified": "2026-01-27T05:13:00.481146Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tchsrvce.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.481146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73ee7615-fd3c-4cc2-82c1-d7d4089c2588", "created": "2026-01-27T05:13:00.481943Z", "modified": "2026-01-27T05:13:00.481943Z", "relationship_type": "indicates", "source_ref": "indicator--32a4dc8c-7eca-4fbd-8572-43a1ece9c52c", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6ad9bd-9e9d-41fc-8609-81a4967a5078", "created": "2026-01-27T05:13:00.482119Z", "modified": "2026-01-27T05:13:00.482119Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='talklog.tools']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.482119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83dc55b5-8978-4e7c-840f-288fb68bf33b", "created": "2026-01-27T05:13:00.48279Z", "modified": "2026-01-27T05:13:00.48279Z", "relationship_type": "indicates", "source_ref": "indicator--cf6ad9bd-9e9d-41fc-8609-81a4967a5078", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac4bcf7-044f-4367-838e-367c76faa8c7", "created": "2026-01-27T05:13:00.482973Z", "modified": "2026-01-27T05:13:00.482973Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='83181f0799d197f96d1098fe33d769431ab88f2bb4454e3c4c19a0407e1fbac4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.482973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5c07883-dd4e-4e20-9f79-58a25e9d842f", "created": "2026-01-27T05:13:00.483809Z", "modified": "2026-01-27T05:13:00.483809Z", "relationship_type": "indicates", "source_ref": "indicator--2ac4bcf7-044f-4367-838e-367c76faa8c7", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b263ad35-3d96-4586-8bc0-21a34072ded3", "created": "2026-01-27T05:13:00.483986Z", "modified": "2026-01-27T05:13:00.483986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='955144eb270f4fc675ef26574e993481759a998c4ba1a578902620601d02ba47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.483986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd7d7167-679d-49db-8d7c-de45c8017827", "created": "2026-01-27T05:13:00.484878Z", "modified": "2026-01-27T05:13:00.484878Z", "relationship_type": "indicates", "source_ref": "indicator--b263ad35-3d96-4586-8bc0-21a34072ded3", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d7a7d4-96cd-4346-afa0-8f4a1c85688e", "created": "2026-01-27T05:13:00.485064Z", "modified": "2026-01-27T05:13:00.485064Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34751c3eed1420a90320c73b98aa423cde110d873fff9f71fa05476f2abf365d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.485064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6495132-ecf3-440d-a4a4-95a151882ac5", "created": "2026-01-27T05:13:00.485909Z", "modified": "2026-01-27T05:13:00.485909Z", "relationship_type": "indicates", "source_ref": "indicator--02d7a7d4-96cd-4346-afa0-8f4a1c85688e", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd18dd4-6ec2-4041-860d-0d6a01971235", "created": "2026-01-27T05:13:00.486086Z", "modified": "2026-01-27T05:13:00.486086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7b4eae905d4c9a685c97ef0740a23f8228da77f4be0a708034a77cf5252b7f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.486086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--403e1cdb-ca84-4852-bd9c-a71479c26e29", "created": "2026-01-27T05:13:00.486952Z", "modified": "2026-01-27T05:13:00.486952Z", "relationship_type": "indicates", "source_ref": "indicator--ffd18dd4-6ec2-4041-860d-0d6a01971235", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b166b233-2cb2-4ef2-bfc7-bd2c9c75d828", "created": "2026-01-27T05:13:00.487128Z", "modified": "2026-01-27T05:13:00.487128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d578a21430e6ef89019974813b797809375fa2297b35df08175167a2bad96aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.487128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0b611fa-15a0-480f-88e5-7a9b3ce0b994", "created": "2026-01-27T05:13:00.487972Z", "modified": "2026-01-27T05:13:00.487972Z", "relationship_type": "indicates", "source_ref": "indicator--b166b233-2cb2-4ef2-bfc7-bd2c9c75d828", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c489bc-92ed-4be2-a3f8-eb7a3c33a7dc", "created": "2026-01-27T05:13:00.488164Z", "modified": "2026-01-27T05:13:00.488164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06ca308a9b0a6fbbe20d59aa0bece1f5a7c71825e65da83e8069e4c16b82933e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.488164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5163546e-056e-418f-8b70-07f15c364d87", "created": "2026-01-27T05:13:00.489029Z", "modified": "2026-01-27T05:13:00.489029Z", "relationship_type": "indicates", "source_ref": "indicator--c5c489bc-92ed-4be2-a3f8-eb7a3c33a7dc", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066d18c4-b14a-4299-81f8-f87d0e1e571c", "created": "2026-01-27T05:13:00.489206Z", "modified": "2026-01-27T05:13:00.489206Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09d82667d9d72e8980e78c17898430d05a1419f2e432ee46fae1e40056df1801']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.489206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e19c4b6-7c6f-4638-bf53-e61b2997c029", "created": "2026-01-27T05:13:00.490036Z", "modified": "2026-01-27T05:13:00.490036Z", "relationship_type": "indicates", "source_ref": "indicator--066d18c4-b14a-4299-81f8-f87d0e1e571c", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36295399-760c-418b-acc4-2f3889349e89", "created": "2026-01-27T05:13:00.49021Z", "modified": "2026-01-27T05:13:00.49021Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tech.logsettings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.49021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d66cb03-eaa3-42cb-a108-a09520819522", "created": "2026-01-27T05:13:00.490988Z", "modified": "2026-01-27T05:13:00.490988Z", "relationship_type": "indicates", "source_ref": "indicator--36295399-760c-418b-acc4-2f3889349e89", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c120b25-debc-4c07-b1ef-94efbf5845cf", "created": "2026-01-27T05:13:00.491161Z", "modified": "2026-01-27T05:13:00.491161Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='t.tools.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.491161Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7b8d5a2-ab3b-4288-8419-2c46c2e3f924", "created": "2026-01-27T05:13:00.491804Z", "modified": "2026-01-27T05:13:00.491804Z", "relationship_type": "indicates", "source_ref": "indicator--6c120b25-debc-4c07-b1ef-94efbf5845cf", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f405725f-1f88-462f-aa21-2aad676d720f", "created": "2026-01-27T05:13:00.491981Z", "modified": "2026-01-27T05:13:00.491981Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='technic.settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.491981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--808afca2-b189-49dc-b10d-ac1db317a174", "created": "2026-01-27T05:13:00.492631Z", "modified": "2026-01-27T05:13:00.492631Z", "relationship_type": "indicates", "source_ref": "indicator--f405725f-1f88-462f-aa21-2aad676d720f", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14102ed3-650a-46bd-838b-6cfb384bcde7", "created": "2026-01-27T05:13:00.492823Z", "modified": "2026-01-27T05:13:00.492823Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='08ACB92D02487EBC0CEA42B672A631BA7EA59ADF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.492823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87095946-6168-4de9-b98f-81ac02b5d2a8", "created": "2026-01-27T05:13:00.493597Z", "modified": "2026-01-27T05:13:00.493597Z", "relationship_type": "indicates", "source_ref": "indicator--14102ed3-650a-46bd-838b-6cfb384bcde7", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9cfd13-a389-4c0b-b7f6-dea268fa9539", "created": "2026-01-27T05:13:00.493785Z", "modified": "2026-01-27T05:13:00.493785Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AF821DD021558AEDF49730D2892063BD502DEA14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.493785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98e0277e-d2e6-4ede-ac3a-789d3b6a145d", "created": "2026-01-27T05:13:00.494556Z", "modified": "2026-01-27T05:13:00.494556Z", "relationship_type": "indicates", "source_ref": "indicator--3b9cfd13-a389-4c0b-b7f6-dea268fa9539", "target_ref": "malware--5ce1c8b0-196d-4e72-bc23-83f17cc4bfa0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb", "created": "2026-01-27T05:13:00.494724Z", "modified": "2026-01-27T05:13:00.494724Z", "name": "SpyMasterPro", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3262cdf-3f88-483d-87b7-555c9eb0863f", "created": "2026-01-27T05:13:00.494915Z", "modified": "2026-01-27T05:13:00.494915Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cpcalendars.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.494915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d590c937-7eb8-4ac6-9977-14a633572847", "created": "2026-01-27T05:13:00.495606Z", "modified": "2026-01-27T05:13:00.495606Z", "relationship_type": "indicates", "source_ref": "indicator--d3262cdf-3f88-483d-87b7-555c9eb0863f", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b8fdb7-bbc0-4f54-b5e3-d4ddfac254c4", "created": "2026-01-27T05:13:00.4958Z", "modified": "2026-01-27T05:13:00.4958Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cpcontacts.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.4958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09b4384a-4c2c-4ebf-a5f5-8d5e14136ad8", "created": "2026-01-27T05:13:00.49649Z", "modified": "2026-01-27T05:13:00.49649Z", "relationship_type": "indicates", "source_ref": "indicator--15b8fdb7-bbc0-4f54-b5e3-d4ddfac254c4", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a9e4dc-e47f-449d-9c16-ea43f95b2ed8", "created": "2026-01-27T05:13:00.496662Z", "modified": "2026-01-27T05:13:00.496662Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='imobispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.496662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10a724c8-f841-4136-9288-ebb5bf5630dd", "created": "2026-01-27T05:13:00.497346Z", "modified": "2026-01-27T05:13:00.497346Z", "relationship_type": "indicates", "source_ref": "indicator--f0a9e4dc-e47f-449d-9c16-ea43f95b2ed8", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e185a3-0ef2-4f08-b943-f93d6e2b36f6", "created": "2026-01-27T05:13:00.497518Z", "modified": "2026-01-27T05:13:00.497518Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='senseye.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.497518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b700d4f-3b21-4205-9b42-79809c217dda", "created": "2026-01-27T05:13:00.498216Z", "modified": "2026-01-27T05:13:00.498216Z", "relationship_type": "indicates", "source_ref": "indicator--05e185a3-0ef2-4f08-b943-f93d6e2b36f6", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c832ca-c9b7-4eef-842f-ec73e4fa2754", "created": "2026-01-27T05:13:00.49839Z", "modified": "2026-01-27T05:13:00.49839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spymaster-e535b.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.49839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2ab9565-ba04-4032-a0ec-700b9df27a49", "created": "2026-01-27T05:13:00.49921Z", "modified": "2026-01-27T05:13:00.49921Z", "relationship_type": "indicates", "source_ref": "indicator--c8c832ca-c9b7-4eef-842f-ec73e4fa2754", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d995fa-82d8-4d5d-bf75-29cca19441db", "created": "2026-01-27T05:13:00.499387Z", "modified": "2026-01-27T05:13:00.499387Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.499387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39decfeb-70f7-4e85-b88b-2a91c08afd91", "created": "2026-01-27T05:13:00.500067Z", "modified": "2026-01-27T05:13:00.500067Z", "relationship_type": "indicates", "source_ref": "indicator--20d995fa-82d8-4d5d-bf75-29cca19441db", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3eb437-a134-4b40-8796-5530d0afa5ce", "created": "2026-01-27T05:13:00.500242Z", "modified": "2026-01-27T05:13:00.500242Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spymasterpro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.500242Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--840b1240-6b76-4ec1-a367-1149b1ca22c9", "created": "2026-01-27T05:13:00.500994Z", "modified": "2026-01-27T05:13:00.500994Z", "relationship_type": "indicates", "source_ref": "indicator--6a3eb437-a134-4b40-8796-5530d0afa5ce", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0560c77e-37e1-4c52-a7c5-cc78580fc605", "created": "2026-01-27T05:13:00.501169Z", "modified": "2026-01-27T05:13:00.501169Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6fbd7995982f96211b3b3b1bc9dda0e3bdcfca6dce8fd5e5e1095517cfebdc9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.501169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbca1dc2-4f6f-4f64-8831-2b6e986160fb", "created": "2026-01-27T05:13:00.502003Z", "modified": "2026-01-27T05:13:00.502003Z", "relationship_type": "indicates", "source_ref": "indicator--0560c77e-37e1-4c52-a7c5-cc78580fc605", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567336d5-3cb4-4f2c-abf2-29a0e1d500dc", "created": "2026-01-27T05:13:00.502182Z", "modified": "2026-01-27T05:13:00.502182Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21d3cf611dd719a096b06e5536eb1b93c87fbd0f53f1e70c7010abca73b07e46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.502182Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c8134cb-b616-4f6d-b83f-405c55c0c905", "created": "2026-01-27T05:13:00.503022Z", "modified": "2026-01-27T05:13:00.503022Z", "relationship_type": "indicates", "source_ref": "indicator--567336d5-3cb4-4f2c-abf2-29a0e1d500dc", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95aad01-2f19-400d-a216-b9d8b5321592", "created": "2026-01-27T05:13:00.503206Z", "modified": "2026-01-27T05:13:00.503206Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0ce679c93d4fc3d16bd896c3724365d405e4e610983c728c0b96a1c2f86607db']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.503206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50a8bfa5-7208-4fdb-9c0e-9f0d7c3c321a", "created": "2026-01-27T05:13:00.504065Z", "modified": "2026-01-27T05:13:00.504065Z", "relationship_type": "indicates", "source_ref": "indicator--a95aad01-2f19-400d-a216-b9d8b5321592", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d660055-32f9-45df-825d-e074da780d54", "created": "2026-01-27T05:13:00.504238Z", "modified": "2026-01-27T05:13:00.504238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='99480cb79e0e6a18d18d9c04b329349a582912d50b0f97ce55dad5dcd8fc18ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.504238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b9aad2d-8bee-4cd5-8c24-177771ace983", "created": "2026-01-27T05:13:00.505062Z", "modified": "2026-01-27T05:13:00.505062Z", "relationship_type": "indicates", "source_ref": "indicator--3d660055-32f9-45df-825d-e074da780d54", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90dcd09-c7fb-4a7a-82fc-18a794c2a8f6", "created": "2026-01-27T05:13:00.505243Z", "modified": "2026-01-27T05:13:00.505243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc3da15651bc456152f26f76509e024b690618d1d06886e5d0c0a6d573245dfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.505243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8794a81f-4e79-467e-b0cc-90e12ce4b427", "created": "2026-01-27T05:13:00.506073Z", "modified": "2026-01-27T05:13:00.506073Z", "relationship_type": "indicates", "source_ref": "indicator--e90dcd09-c7fb-4a7a-82fc-18a794c2a8f6", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a993e96b-2867-46b8-9036-3b727d47bd9e", "created": "2026-01-27T05:13:00.506247Z", "modified": "2026-01-27T05:13:00.506247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1960b6d2b896f2c1178d9556e7c487361c5d5bf2411f78a848d8964adffe0975']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.506247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abe101bf-3c70-4ffa-9e95-97f7076c2752", "created": "2026-01-27T05:13:00.507092Z", "modified": "2026-01-27T05:13:00.507092Z", "relationship_type": "indicates", "source_ref": "indicator--a993e96b-2867-46b8-9036-3b727d47bd9e", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb018b5-1c64-4584-ae64-c259955f79c9", "created": "2026-01-27T05:13:00.507271Z", "modified": "2026-01-27T05:13:00.507271Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce7ee8f073f101eb56e2a6467a9c1e68eb54594a0925ee007359db7db8fbab3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.507271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--567bd52c-b11d-4e8d-b2bc-87ba933a668d", "created": "2026-01-27T05:13:00.508225Z", "modified": "2026-01-27T05:13:00.508225Z", "relationship_type": "indicates", "source_ref": "indicator--5fb018b5-1c64-4584-ae64-c259955f79c9", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1466f66c-3a2d-4f47-be13-e326740cf35b", "created": "2026-01-27T05:13:00.508408Z", "modified": "2026-01-27T05:13:00.508408Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='iqual.calculadora.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.508408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63442100-0eea-41dc-9db4-582f4764db77", "created": "2026-01-27T05:13:00.509079Z", "modified": "2026-01-27T05:13:00.509079Z", "relationship_type": "indicates", "source_ref": "indicator--1466f66c-3a2d-4f47-be13-e326740cf35b", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f685d542-19eb-4284-910c-154b50b7ce3a", "created": "2026-01-27T05:13:00.509253Z", "modified": "2026-01-27T05:13:00.509253Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.semantic.childcontrol']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.509253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c05b4f9-dbfa-43af-a3c0-00fe38724934", "created": "2026-01-27T05:13:00.509921Z", "modified": "2026-01-27T05:13:00.509921Z", "relationship_type": "indicates", "source_ref": "indicator--f685d542-19eb-4284-910c-154b50b7ce3a", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8d4074-94f2-4f50-93f8-c7cde37dd765", "created": "2026-01-27T05:13:00.510095Z", "modified": "2026-01-27T05:13:00.510095Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8AD595A53B76014B7B919ED231DB372096D358E7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.510095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6325f640-6ff9-43dc-a321-0a7df1ca3a78", "created": "2026-01-27T05:13:00.510869Z", "modified": "2026-01-27T05:13:00.510869Z", "relationship_type": "indicates", "source_ref": "indicator--ee8d4074-94f2-4f50-93f8-c7cde37dd765", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38cd4d3-0304-4ffe-83b9-5e0cb1a828d9", "created": "2026-01-27T05:13:00.511043Z", "modified": "2026-01-27T05:13:00.511043Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C8BAE63357CA1DCD9B084BCC99399C96A5B67D49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.511043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--093ada56-94c7-45ab-8f27-72dca451f3dd", "created": "2026-01-27T05:13:00.511811Z", "modified": "2026-01-27T05:13:00.511811Z", "relationship_type": "indicates", "source_ref": "indicator--f38cd4d3-0304-4ffe-83b9-5e0cb1a828d9", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523e3d92-bade-4672-b5cd-0c761c43a9a9", "created": "2026-01-27T05:13:00.511986Z", "modified": "2026-01-27T05:13:00.511986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B07A93BC509C0AE614AEAFFCD6B56797CD02166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.511986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb78fa2a-d638-4425-ae8f-e6b4eac4deab", "created": "2026-01-27T05:13:00.512763Z", "modified": "2026-01-27T05:13:00.512763Z", "relationship_type": "indicates", "source_ref": "indicator--523e3d92-bade-4672-b5cd-0c761c43a9a9", "target_ref": "malware--6bb34de7-c7db-42d0-9834-44efca6e4ecb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab", "created": "2026-01-27T05:13:00.512936Z", "modified": "2026-01-27T05:13:00.512936Z", "name": "FreeAndroidSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fa2d80-83be-4db1-bd25-a0199992727c", "created": "2026-01-27T05:13:00.513105Z", "modified": "2026-01-27T05:13:00.513105Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='server.freeandroidspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.513105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--935c3b71-c1ee-4bc8-ac1c-48253f371aa5", "created": "2026-01-27T05:13:00.51381Z", "modified": "2026-01-27T05:13:00.51381Z", "relationship_type": "indicates", "source_ref": "indicator--92fa2d80-83be-4db1-bd25-a0199992727c", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73eeccc-7298-427c-b0fa-8ca8aa50e31f", "created": "2026-01-27T05:13:00.513986Z", "modified": "2026-01-27T05:13:00.513986Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spysetup.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.513986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a202ecba-e23a-4e75-8d73-79c9a16d01f1", "created": "2026-01-27T05:13:00.514648Z", "modified": "2026-01-27T05:13:00.514648Z", "relationship_type": "indicates", "source_ref": "indicator--b73eeccc-7298-427c-b0fa-8ca8aa50e31f", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a6b065-c9be-4200-95cc-7d0a1c543922", "created": "2026-01-27T05:13:00.514839Z", "modified": "2026-01-27T05:13:00.514839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freeandroidspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.514839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7e27ae9-595c-49d9-95ff-732e3ee5356d", "created": "2026-01-27T05:13:00.515509Z", "modified": "2026-01-27T05:13:00.515509Z", "relationship_type": "indicates", "source_ref": "indicator--79a6b065-c9be-4200-95cc-7d0a1c543922", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee6ef4d-158b-45ee-81d4-c3d8b0588af2", "created": "2026-01-27T05:13:00.515687Z", "modified": "2026-01-27T05:13:00.515687Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d88b78792588653d1fec3ac5d5c8c2fc48d1b45f4a43e13516efd28b9d369b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.515687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b639a16-eb56-4b65-9b8d-fe929b1290e5", "created": "2026-01-27T05:13:00.51703Z", "modified": "2026-01-27T05:13:00.51703Z", "relationship_type": "indicates", "source_ref": "indicator--5ee6ef4d-158b-45ee-81d4-c3d8b0588af2", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5542da90-2589-433a-89f6-aa042a767228", "created": "2026-01-27T05:13:00.517209Z", "modified": "2026-01-27T05:13:00.517209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3f7090fcb11816cab2b5bd0f495da8cf017575cb52c8f57da9964693eb63a91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.517209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7364457b-189d-481a-bde5-c14b63cfaae8", "created": "2026-01-27T05:13:00.518049Z", "modified": "2026-01-27T05:13:00.518049Z", "relationship_type": "indicates", "source_ref": "indicator--5542da90-2589-433a-89f6-aa042a767228", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99967b00-d703-4196-828d-c7cff668844b", "created": "2026-01-27T05:13:00.518225Z", "modified": "2026-01-27T05:13:00.518225Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85ad148ef303574ffd6c7e3d98bec0f92db9666a1453dba00616518d3ac39905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.518225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a5d3f1d-e5f3-43eb-baed-e51534dc9b18", "created": "2026-01-27T05:13:00.519117Z", "modified": "2026-01-27T05:13:00.519117Z", "relationship_type": "indicates", "source_ref": "indicator--99967b00-d703-4196-828d-c7cff668844b", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca5c514-fe6a-47de-b797-eb8f5f8b5426", "created": "2026-01-27T05:13:00.519302Z", "modified": "2026-01-27T05:13:00.519302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b945aa55a1ce51d7677a802683bde9de97f185cf14b82a73eb23c02e76233efd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.519302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bba5a5e9-7e1e-42cc-be98-a0aa0149dc1b", "created": "2026-01-27T05:13:00.520147Z", "modified": "2026-01-27T05:13:00.520147Z", "relationship_type": "indicates", "source_ref": "indicator--4ca5c514-fe6a-47de-b797-eb8f5f8b5426", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb912e8-5212-4069-90e7-c8cb625a72f2", "created": "2026-01-27T05:13:00.520323Z", "modified": "2026-01-27T05:13:00.520323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='674e55e45785f58ac50bb3fa497763ba0c227a1918b11f75fc9c14db9ee57d1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.520323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96086401-e2ad-42f4-8d64-a02b09c1ae61", "created": "2026-01-27T05:13:00.521156Z", "modified": "2026-01-27T05:13:00.521156Z", "relationship_type": "indicates", "source_ref": "indicator--ddb912e8-5212-4069-90e7-c8cb625a72f2", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d58f453-bdbf-4a03-b295-fcac93dfd5c8", "created": "2026-01-27T05:13:00.521333Z", "modified": "2026-01-27T05:13:00.521333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85dca8977149b67f508d0d71a7b39d2f08ebbce35c2d20d3df181f4f69736a67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.521333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33542afa-05b4-498b-898e-113500e70527", "created": "2026-01-27T05:13:00.522178Z", "modified": "2026-01-27T05:13:00.522178Z", "relationship_type": "indicates", "source_ref": "indicator--9d58f453-bdbf-4a03-b295-fcac93dfd5c8", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be86bca-e72c-4460-8f62-fd09be0f032f", "created": "2026-01-27T05:13:00.522355Z", "modified": "2026-01-27T05:13:00.522355Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1894d7f1610cdfb98680c84358ee64565eb2ff6944b17517e8f7b7fe5ec9057c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.522355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--571cf2a2-8b0b-469c-a80e-9a1a035d11da", "created": "2026-01-27T05:13:00.523195Z", "modified": "2026-01-27T05:13:00.523195Z", "relationship_type": "indicates", "source_ref": "indicator--1be86bca-e72c-4460-8f62-fd09be0f032f", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c47350-443f-485f-8a84-ff5b025019fb", "created": "2026-01-27T05:13:00.523372Z", "modified": "2026-01-27T05:13:00.523372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee06a32ffc5c6d3295aa951065cb330c2d8f45366ef3078929fc3c25f31a1f77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.523372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1e2ce01-87ff-44a9-b768-3a1a63aff624", "created": "2026-01-27T05:13:00.524212Z", "modified": "2026-01-27T05:13:00.524212Z", "relationship_type": "indicates", "source_ref": "indicator--93c47350-443f-485f-8a84-ff5b025019fb", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bbe7dd-ba07-4369-95d8-8fcbdba1a0d4", "created": "2026-01-27T05:13:00.524387Z", "modified": "2026-01-27T05:13:00.524387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='48393781bbbab26778a14371dbb30ce1d36a42efe420b376f9df41c85fb14d0a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.524387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53012558-8d6e-4013-ab24-24c6d4e1b16b", "created": "2026-01-27T05:13:00.525215Z", "modified": "2026-01-27T05:13:00.525215Z", "relationship_type": "indicates", "source_ref": "indicator--68bbe7dd-ba07-4369-95d8-8fcbdba1a0d4", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907e50c9-c484-4e22-bb25-1568e4775557", "created": "2026-01-27T05:13:00.52539Z", "modified": "2026-01-27T05:13:00.52539Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b23f43efa5f44647551affd92d6ccd60fae79b8a682b7d60bc16ef5913b55f9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.52539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f3c3d86-6d4d-465b-9ba2-db29e39d5ec1", "created": "2026-01-27T05:13:00.526421Z", "modified": "2026-01-27T05:13:00.526421Z", "relationship_type": "indicates", "source_ref": "indicator--907e50c9-c484-4e22-bb25-1568e4775557", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925ab428-560a-4933-918a-3fdd34a02548", "created": "2026-01-27T05:13:00.526608Z", "modified": "2026-01-27T05:13:00.526608Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5386637ed1ae2f5b3a4fdb2bb6d59230edaf023d5ae7a50f7552b9dc1c4d904f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.526608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc49c5c9-e475-4138-9da9-9f0221df0afd", "created": "2026-01-27T05:13:00.527449Z", "modified": "2026-01-27T05:13:00.527449Z", "relationship_type": "indicates", "source_ref": "indicator--925ab428-560a-4933-918a-3fdd34a02548", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17305fa0-3206-470c-bb40-2fdb4cecaad4", "created": "2026-01-27T05:13:00.527626Z", "modified": "2026-01-27T05:13:00.527626Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3950f6aa3054901e2ce3baf83aea7fabef9c0e3af68e35e1a4b25b84d7f4a44c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.527626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00f206db-3971-42b8-9a9b-bb0cd5baae9e", "created": "2026-01-27T05:13:00.528458Z", "modified": "2026-01-27T05:13:00.528458Z", "relationship_type": "indicates", "source_ref": "indicator--17305fa0-3206-470c-bb40-2fdb4cecaad4", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed09b0-6d2d-43b5-b1e9-7d86e37b0c29", "created": "2026-01-27T05:13:00.528636Z", "modified": "2026-01-27T05:13:00.528636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='873524677903fb69a7838ef1a9c1852fe46db32fb667a2167d95c2ccfd4ae099']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.528636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4576db44-8714-4585-8b9d-a4afd8b09305", "created": "2026-01-27T05:13:00.52947Z", "modified": "2026-01-27T05:13:00.52947Z", "relationship_type": "indicates", "source_ref": "indicator--09ed09b0-6d2d-43b5-b1e9-7d86e37b0c29", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6192ad7e-8486-40f2-a27e-07104c569dad", "created": "2026-01-27T05:13:00.529647Z", "modified": "2026-01-27T05:13:00.529647Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9153ecfdd76002e66315a4b18374bf3862a887090b6220b2c6bcbb6a05d1d27e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.529647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0a7c9ac-8ddf-4a39-a915-c2603ff8ca4e", "created": "2026-01-27T05:13:00.530472Z", "modified": "2026-01-27T05:13:00.530472Z", "relationship_type": "indicates", "source_ref": "indicator--6192ad7e-8486-40f2-a27e-07104c569dad", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234fdbc9-d186-4042-b59a-b3332ab52ca8", "created": "2026-01-27T05:13:00.53065Z", "modified": "2026-01-27T05:13:00.53065Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='749667bea97d371734259404b9b4a1557dad9fb5596660d3dbe323c83f157b49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.53065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef2a14f-8eee-42c3-9f99-7710127982f1", "created": "2026-01-27T05:13:00.531485Z", "modified": "2026-01-27T05:13:00.531485Z", "relationship_type": "indicates", "source_ref": "indicator--234fdbc9-d186-4042-b59a-b3332ab52ca8", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a9853b-bc28-4afc-996c-33bee1087162", "created": "2026-01-27T05:13:00.53166Z", "modified": "2026-01-27T05:13:00.53166Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69445f64ff1a4fd92cfbe5f0db84aa084c6d6ef7212410c101b9a750777a47a5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.53166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9b8c6bd-c385-496a-a5ea-cb7c9ffa5719", "created": "2026-01-27T05:13:00.532518Z", "modified": "2026-01-27T05:13:00.532518Z", "relationship_type": "indicates", "source_ref": "indicator--d6a9853b-bc28-4afc-996c-33bee1087162", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f01863-8617-4298-8dff-1054b20aa764", "created": "2026-01-27T05:13:00.532704Z", "modified": "2026-01-27T05:13:00.532704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='06c8650d84a7862fc8bc520578a7f3a5ca754d165d020c07a041af81577f9d8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.532704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f1a43d1-1714-4b10-b33f-631adeea4641", "created": "2026-01-27T05:13:00.533572Z", "modified": "2026-01-27T05:13:00.533572Z", "relationship_type": "indicates", "source_ref": "indicator--76f01863-8617-4298-8dff-1054b20aa764", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e7e7b2-cc3c-42e2-af81-dbd77a0752f6", "created": "2026-01-27T05:13:00.533759Z", "modified": "2026-01-27T05:13:00.533759Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4788449e69d489ad965d1535964f60ddfd71102696fbb7df6f8d2f415f38c755']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.533759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e0d0b4f-26fd-46cb-a1ef-93f0494a105b", "created": "2026-01-27T05:13:00.534601Z", "modified": "2026-01-27T05:13:00.534601Z", "relationship_type": "indicates", "source_ref": "indicator--06e7e7b2-cc3c-42e2-af81-dbd77a0752f6", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e2bd20-7d26-4e52-adb9-b6aeb267813b", "created": "2026-01-27T05:13:00.534793Z", "modified": "2026-01-27T05:13:00.534793Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8118ec1cf205de9f55d04651dbb6b57e24bf9e24df01bfef2b2e973c291e5472']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.534793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e200c105-fcd2-433b-a455-52b0d92219f7", "created": "2026-01-27T05:13:00.535769Z", "modified": "2026-01-27T05:13:00.535769Z", "relationship_type": "indicates", "source_ref": "indicator--d7e2bd20-7d26-4e52-adb9-b6aeb267813b", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a90eb5-8573-4cf5-b197-f985424b7b2a", "created": "2026-01-27T05:13:00.535951Z", "modified": "2026-01-27T05:13:00.535951Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fbdfc5f2d2342c520076c273db0ae794a61263ea810ec2165e2dd19c836fb1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.535951Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65d982cf-a450-485a-94a2-ea24b91593d2", "created": "2026-01-27T05:13:00.536787Z", "modified": "2026-01-27T05:13:00.536787Z", "relationship_type": "indicates", "source_ref": "indicator--11a90eb5-8573-4cf5-b197-f985424b7b2a", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b40d6b-b6ca-444e-8d3b-62bbed22054d", "created": "2026-01-27T05:13:00.536967Z", "modified": "2026-01-27T05:13:00.536967Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c0ccb71872cbffced0b37f086f8931ac85fff069fb007e85070040a474506fa6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.536967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--785e73f0-e7d2-4345-b4c1-328760fbd22c", "created": "2026-01-27T05:13:00.537793Z", "modified": "2026-01-27T05:13:00.537793Z", "relationship_type": "indicates", "source_ref": "indicator--25b40d6b-b6ca-444e-8d3b-62bbed22054d", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85039761-3485-4fa5-9871-13eda4df9265", "created": "2026-01-27T05:13:00.537971Z", "modified": "2026-01-27T05:13:00.537971Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a9e222a1c9a13ede9f5b7a0a58fea50aa90884702c0ee82ea6f94548d7b117f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.537971Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7daa475b-cc41-435d-aaa5-7243c3840bcc", "created": "2026-01-27T05:13:00.539013Z", "modified": "2026-01-27T05:13:00.539013Z", "relationship_type": "indicates", "source_ref": "indicator--85039761-3485-4fa5-9871-13eda4df9265", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbf934a-a8ff-40ae-af50-a6036ff86d94", "created": "2026-01-27T05:13:00.53922Z", "modified": "2026-01-27T05:13:00.53922Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ebd145afe76b4b97c4ceb512791913392607d4e612c6fd556f49b289017a28e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.53922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--183655cb-77e5-4829-a05e-7227a37bcbe9", "created": "2026-01-27T05:13:00.540075Z", "modified": "2026-01-27T05:13:00.540075Z", "relationship_type": "indicates", "source_ref": "indicator--dfbf934a-a8ff-40ae-af50-a6036ff86d94", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60932ec9-91b7-4859-9275-7f2ee21d6ccf", "created": "2026-01-27T05:13:00.540251Z", "modified": "2026-01-27T05:13:00.540251Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7efdb2d71c6fa3484eee91e3be14b24b48a4927d3c48f6e883209bd19c9cf0c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.540251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60c9c5b9-cec7-4f17-a45e-29d71043d96b", "created": "2026-01-27T05:13:00.541092Z", "modified": "2026-01-27T05:13:00.541092Z", "relationship_type": "indicates", "source_ref": "indicator--60932ec9-91b7-4859-9275-7f2ee21d6ccf", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6d2151-73bf-4c96-a686-f8dcb754276e", "created": "2026-01-27T05:13:00.541266Z", "modified": "2026-01-27T05:13:00.541266Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6d5f8471274537c6e1ecd9c53fb4e7c1d06e7e6b586e6ac95dd9096eee07b9b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.541266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a749e328-e850-49a9-89de-8c808d066590", "created": "2026-01-27T05:13:00.542122Z", "modified": "2026-01-27T05:13:00.542122Z", "relationship_type": "indicates", "source_ref": "indicator--4d6d2151-73bf-4c96-a686-f8dcb754276e", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02df5f8-d041-4e00-b60a-5ff6f6c9efa1", "created": "2026-01-27T05:13:00.542297Z", "modified": "2026-01-27T05:13:00.542297Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5d3bc0c7fe63f67c451aa938a42ab0fae873d499d97f9b43106c871481f3481']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.542297Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--409b0585-0cc5-4bd6-81f6-8074802ee484", "created": "2026-01-27T05:13:00.54316Z", "modified": "2026-01-27T05:13:00.54316Z", "relationship_type": "indicates", "source_ref": "indicator--f02df5f8-d041-4e00-b60a-5ff6f6c9efa1", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3bf026-60d1-402f-ab52-ac9edb8966e7", "created": "2026-01-27T05:13:00.543341Z", "modified": "2026-01-27T05:13:00.543341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e895a03867bcda5c6771e2dd981bd07e78d69fc47f8253c9bc733f3f0d431bc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.543341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d4f5dafa-d882-462f-883f-1825b8e92096", "created": "2026-01-27T05:13:00.544315Z", "modified": "2026-01-27T05:13:00.544315Z", "relationship_type": "indicates", "source_ref": "indicator--1b3bf026-60d1-402f-ab52-ac9edb8966e7", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1203e489-ea6a-47e0-b76b-082eb33a44e8", "created": "2026-01-27T05:13:00.5445Z", "modified": "2026-01-27T05:13:00.5445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da94945e6ac3b147aa513a97a0f1d5eeb6ecd2c44acd924d8daf33b145e01217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.5445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa92804a-dfa4-45fc-a8f2-36ae61d2336d", "created": "2026-01-27T05:13:00.545354Z", "modified": "2026-01-27T05:13:00.545354Z", "relationship_type": "indicates", "source_ref": "indicator--1203e489-ea6a-47e0-b76b-082eb33a44e8", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d069847-fcb4-4847-80d4-f4f9b924944f", "created": "2026-01-27T05:13:00.545598Z", "modified": "2026-01-27T05:13:00.545598Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cfa9148c3b2b17de4531404b398ae9b2ebbc210aeef1ca5d68dd2f5c3c3341b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.545598Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0849e32a-065d-498f-ada4-760b3e074956", "created": "2026-01-27T05:13:00.546437Z", "modified": "2026-01-27T05:13:00.546437Z", "relationship_type": "indicates", "source_ref": "indicator--0d069847-fcb4-4847-80d4-f4f9b924944f", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df536455-e386-40aa-8138-5c31ca65cdc4", "created": "2026-01-27T05:13:00.546622Z", "modified": "2026-01-27T05:13:00.546622Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c0d5a7f4f9c1453f80c38ea73d1f905030423cf607be8e6092e5629fe807fe8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.546622Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6e9b356-19f9-4a2f-bdea-9afd016b7eb5", "created": "2026-01-27T05:13:00.547462Z", "modified": "2026-01-27T05:13:00.547462Z", "relationship_type": "indicates", "source_ref": "indicator--df536455-e386-40aa-8138-5c31ca65cdc4", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8079555-1b6c-45f4-90f3-8d2015d4338d", "created": "2026-01-27T05:13:00.547635Z", "modified": "2026-01-27T05:13:00.547635Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bf2ff3e87634115f53a42c705529b2b4155f2a9a29a22fb1188674cba567a158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.547635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4abed3d4-5d90-49fe-9428-7136ccb21b95", "created": "2026-01-27T05:13:00.548512Z", "modified": "2026-01-27T05:13:00.548512Z", "relationship_type": "indicates", "source_ref": "indicator--f8079555-1b6c-45f4-90f3-8d2015d4338d", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b30a2fd-c8af-4275-9eff-a1566397695b", "created": "2026-01-27T05:13:00.548716Z", "modified": "2026-01-27T05:13:00.548716Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='38e4279786f5ff98b1194dc76c51488b71767e553a37d681d1d90c31d54a34f5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.548716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2bce86d-eabe-4629-ae4c-79f10767a24f", "created": "2026-01-27T05:13:00.549595Z", "modified": "2026-01-27T05:13:00.549595Z", "relationship_type": "indicates", "source_ref": "indicator--7b30a2fd-c8af-4275-9eff-a1566397695b", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76eebe3a-65f9-4486-9071-999ddebd21f1", "created": "2026-01-27T05:13:00.549784Z", "modified": "2026-01-27T05:13:00.549784Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d77c5dbcf3d4c076aeadd456d589ebe292c6a0560e48b29a4eba9bdc6232bab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.549784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7f234eb-d72a-4a35-8c5b-b2b53c892c7e", "created": "2026-01-27T05:13:00.55062Z", "modified": "2026-01-27T05:13:00.55062Z", "relationship_type": "indicates", "source_ref": "indicator--76eebe3a-65f9-4486-9071-999ddebd21f1", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0daf0a7a-9243-45ad-bb08-ace2a71dc36f", "created": "2026-01-27T05:13:00.550817Z", "modified": "2026-01-27T05:13:00.550817Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e9d6591f478a2d052c5115e9e419e601f08dfa1f7e79c99400bda76f344fba27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.550817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b6942b2-f8da-4962-881d-0cf4d9083247", "created": "2026-01-27T05:13:00.551639Z", "modified": "2026-01-27T05:13:00.551639Z", "relationship_type": "indicates", "source_ref": "indicator--0daf0a7a-9243-45ad-bb08-ace2a71dc36f", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f36cf2-eb5e-411c-9f31-50c7e7d828a7", "created": "2026-01-27T05:13:00.551837Z", "modified": "2026-01-27T05:13:00.551837Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f590b372192b570bf7b9f93dcf221c65c5ae709b50752c761368fb27c3d85852']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.551837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f64c4b83-8096-47c9-9878-28c1884bf2bb", "created": "2026-01-27T05:13:00.552651Z", "modified": "2026-01-27T05:13:00.552651Z", "relationship_type": "indicates", "source_ref": "indicator--b3f36cf2-eb5e-411c-9f31-50c7e7d828a7", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e82bbff-d530-479e-9fc5-f99b97c5fc30", "created": "2026-01-27T05:13:00.55284Z", "modified": "2026-01-27T05:13:00.55284Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='faae13d358c47a1d581e4b60f7bcdd46d4483e4ab455a38488237e899d744a8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.55284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00de3f51-4f4e-4c8c-9b4c-5bfdf1950ebb", "created": "2026-01-27T05:13:00.553809Z", "modified": "2026-01-27T05:13:00.553809Z", "relationship_type": "indicates", "source_ref": "indicator--2e82bbff-d530-479e-9fc5-f99b97c5fc30", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081b8d13-de7f-4277-8074-75734f1f001d", "created": "2026-01-27T05:13:00.553988Z", "modified": "2026-01-27T05:13:00.553988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a399c37514b718bb5bd4b483dd5537c5558427562c3e525952dfada49674ddee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.553988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a5a7b520-b2a8-4bfc-a19c-b54f8c9845ac", "created": "2026-01-27T05:13:00.55481Z", "modified": "2026-01-27T05:13:00.55481Z", "relationship_type": "indicates", "source_ref": "indicator--081b8d13-de7f-4277-8074-75734f1f001d", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99b4103-58be-46b2-9014-330d7574ab5b", "created": "2026-01-27T05:13:00.554988Z", "modified": "2026-01-27T05:13:00.554988Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9fdd914ac9c092a2ddc81b201366b7aee38e1f497e4414ca5e188f916f5c3e5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.554988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ae802d8-567e-48ae-ae05-ab40a4151c3e", "created": "2026-01-27T05:13:00.555817Z", "modified": "2026-01-27T05:13:00.555817Z", "relationship_type": "indicates", "source_ref": "indicator--a99b4103-58be-46b2-9014-330d7574ab5b", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c838c8-b3d6-45e4-b215-d44a48b63cc7", "created": "2026-01-27T05:13:00.555994Z", "modified": "2026-01-27T05:13:00.555994Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7563435e4d86add1c11e66212228cd7b8aea93e612368811ea67f295159906c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.555994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d45ff591-a31d-47c9-84b1-60298205ecf2", "created": "2026-01-27T05:13:00.556817Z", "modified": "2026-01-27T05:13:00.556817Z", "relationship_type": "indicates", "source_ref": "indicator--21c838c8-b3d6-45e4-b215-d44a48b63cc7", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3158a124-eab1-4cb3-855c-79caa4fdb47c", "created": "2026-01-27T05:13:00.556992Z", "modified": "2026-01-27T05:13:00.556992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='169c9e2ecc84db4f4728569ef4739d8e7f1fe698f548d7ecd1380729ac16b1cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.556992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9536077-dcd8-4254-91a1-5baae82136fe", "created": "2026-01-27T05:13:00.557811Z", "modified": "2026-01-27T05:13:00.557811Z", "relationship_type": "indicates", "source_ref": "indicator--3158a124-eab1-4cb3-855c-79caa4fdb47c", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee00cbd-154a-4339-bf0e-2897ca4deae0", "created": "2026-01-27T05:13:00.557986Z", "modified": "2026-01-27T05:13:00.557986Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0007d207f49016472ed3581fabd1eadf472429aa451db4fc305cef4cfe3cd601']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.557986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29186f56-859c-42fc-ba37-61d90f682c58", "created": "2026-01-27T05:13:00.558827Z", "modified": "2026-01-27T05:13:00.558827Z", "relationship_type": "indicates", "source_ref": "indicator--dee00cbd-154a-4339-bf0e-2897ca4deae0", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f49784-002a-41ce-bd38-3ec1107304b0", "created": "2026-01-27T05:13:00.559008Z", "modified": "2026-01-27T05:13:00.559008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96fa9419cfc95046327bf9d991a27dbc554f59de768221a246dfd6aa45a8fdf3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.559008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81ed0b5b-079c-45d7-9c5b-13da2c829c83", "created": "2026-01-27T05:13:00.559836Z", "modified": "2026-01-27T05:13:00.559836Z", "relationship_type": "indicates", "source_ref": "indicator--40f49784-002a-41ce-bd38-3ec1107304b0", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d62645d-e0ca-49d3-b829-62a11b0a7d4f", "created": "2026-01-27T05:13:00.560021Z", "modified": "2026-01-27T05:13:00.560021Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hp.vd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.560021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffc74f52-3fc6-4e3c-9f7b-ab46df8ef1bd", "created": "2026-01-27T05:13:00.560652Z", "modified": "2026-01-27T05:13:00.560652Z", "relationship_type": "indicates", "source_ref": "indicator--7d62645d-e0ca-49d3-b829-62a11b0a7d4f", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaa7a58-3072-439d-9150-e3938bde0336", "created": "2026-01-27T05:13:00.560846Z", "modified": "2026-01-27T05:13:00.560846Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hp.vc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.560846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b918be7f-48c7-469f-b65e-d1cf5f3af155", "created": "2026-01-27T05:13:00.561486Z", "modified": "2026-01-27T05:13:00.561486Z", "relationship_type": "indicates", "source_ref": "indicator--fbaa7a58-3072-439d-9150-e3938bde0336", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57e341d-5295-43f5-9139-6ffd6d7a39e3", "created": "2026-01-27T05:13:00.56166Z", "modified": "2026-01-27T05:13:00.56166Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E0103BF20E95E826920A3F0F7B3BD03A899127D7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.56166Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc95a75a-a10c-4ca8-8cdc-999336c178d7", "created": "2026-01-27T05:13:00.562561Z", "modified": "2026-01-27T05:13:00.562561Z", "relationship_type": "indicates", "source_ref": "indicator--f57e341d-5295-43f5-9139-6ffd6d7a39e3", "target_ref": "malware--b1976ff4-b9c4-46f4-89dc-6c3e0ec221ab"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda", "created": "2026-01-27T05:13:00.562739Z", "modified": "2026-01-27T05:13:00.562739Z", "name": "NetSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1965ff4-cdfe-4362-9663-3b6544580fd3", "created": "2026-01-27T05:13:00.562932Z", "modified": "2026-01-27T05:13:00.562932Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='netspy-7b8ec.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.562932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65369543-b5f5-41e0-a842-592656853aaf", "created": "2026-01-27T05:13:00.563624Z", "modified": "2026-01-27T05:13:00.563624Z", "relationship_type": "indicates", "source_ref": "indicator--e1965ff4-cdfe-4362-9663-3b6544580fd3", "target_ref": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8c8870-64a3-4663-abc7-7168eeaaefb7", "created": "2026-01-27T05:13:00.563817Z", "modified": "2026-01-27T05:13:00.563817Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.netspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.563817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9189dea8-a2c7-4dd9-873e-747073c575df", "created": "2026-01-27T05:13:00.564556Z", "modified": "2026-01-27T05:13:00.564556Z", "relationship_type": "indicates", "source_ref": "indicator--3f8c8870-64a3-4663-abc7-7168eeaaefb7", "target_ref": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8647dddc-0204-4b9c-80d6-065ee5455c7c", "created": "2026-01-27T05:13:00.564736Z", "modified": "2026-01-27T05:13:00.564736Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='netspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.564736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f143188c-f60d-4d1a-9132-32a88c1e7ac3", "created": "2026-01-27T05:13:00.565433Z", "modified": "2026-01-27T05:13:00.565433Z", "relationship_type": "indicates", "source_ref": "indicator--8647dddc-0204-4b9c-80d6-065ee5455c7c", "target_ref": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a8b305-232b-4c9d-bf39-2919e647626b", "created": "2026-01-27T05:13:00.565618Z", "modified": "2026-01-27T05:13:00.565618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5dc4f281c4def955616c97402dae29d3d4fc7ac6b63d4e54c21f6baf2d36c35c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.565618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1716f0b7-7c8c-416e-b039-33b6c44e9ede", "created": "2026-01-27T05:13:00.566461Z", "modified": "2026-01-27T05:13:00.566461Z", "relationship_type": "indicates", "source_ref": "indicator--74a8b305-232b-4c9d-bf39-2919e647626b", "target_ref": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220ef8f8-b0de-45a8-9e30-2a21676052f7", "created": "2026-01-27T05:13:00.566635Z", "modified": "2026-01-27T05:13:00.566635Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.googleplay.settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.566635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5108b982-1e0d-4b18-b854-497876f1fa32", "created": "2026-01-27T05:13:00.567301Z", "modified": "2026-01-27T05:13:00.567301Z", "relationship_type": "indicates", "source_ref": "indicator--220ef8f8-b0de-45a8-9e30-2a21676052f7", "target_ref": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e67869-1396-4aba-8855-ac22d1397184", "created": "2026-01-27T05:13:00.567472Z", "modified": "2026-01-27T05:13:00.567472Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A4E169AAF0068A1FC5F7900B7F59A438B833364C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.567472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ab1dabf-f0a7-4d12-bcff-eaff918dcfdb", "created": "2026-01-27T05:13:00.568243Z", "modified": "2026-01-27T05:13:00.568243Z", "relationship_type": "indicates", "source_ref": "indicator--95e67869-1396-4aba-8855-ac22d1397184", "target_ref": "malware--3d571ced-7785-43bd-8653-5e4ede19dcda"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5a5ecfd5-b5ea-4587-9f24-486d7f9a392f", "created": "2026-01-27T05:13:00.568415Z", "modified": "2026-01-27T05:13:00.568415Z", "name": "Spyier", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adc8096-c493-4e1b-8feb-ba73621a2182", "created": "2026-01-27T05:13:00.568582Z", "modified": "2026-01-27T05:13:00.568582Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.spyier.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.568582Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16639a30-1400-45db-9491-a2175ea92063", "created": "2026-01-27T05:13:00.56928Z", "modified": "2026-01-27T05:13:00.56928Z", "relationship_type": "indicates", "source_ref": "indicator--5adc8096-c493-4e1b-8feb-ba73621a2182", "target_ref": "malware--5a5ecfd5-b5ea-4587-9f24-486d7f9a392f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a6a054-2d1a-44f7-b3e3-377034a3f03e", "created": "2026-01-27T05:13:00.569457Z", "modified": "2026-01-27T05:13:00.569457Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='v4vw4ytvo4.execute-api.us-east-2.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.569457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--528e3fb8-b1c1-4329-ab2c-10b86e134542", "created": "2026-01-27T05:13:00.570196Z", "modified": "2026-01-27T05:13:00.570196Z", "relationship_type": "indicates", "source_ref": "indicator--c7a6a054-2d1a-44f7-b3e3-377034a3f03e", "target_ref": "malware--5a5ecfd5-b5ea-4587-9f24-486d7f9a392f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e0c65a-3c6c-4126-9c3f-468b2f3580a9", "created": "2026-01-27T05:13:00.570381Z", "modified": "2026-01-27T05:13:00.570381Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyier.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.570381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15791e91-d316-4642-b78b-060f5c4eecdf", "created": "2026-01-27T05:13:00.571167Z", "modified": "2026-01-27T05:13:00.571167Z", "relationship_type": "indicates", "source_ref": "indicator--84e0c65a-3c6c-4126-9c3f-468b2f3580a9", "target_ref": "malware--5a5ecfd5-b5ea-4587-9f24-486d7f9a392f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefcea76-3082-485a-b81c-46abf68804bc", "created": "2026-01-27T05:13:00.571349Z", "modified": "2026-01-27T05:13:00.571349Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sc.spyier.v2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.571349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e9ce685-e0ef-4fe7-8dce-b2b0fbe90a59", "created": "2026-01-27T05:13:00.572023Z", "modified": "2026-01-27T05:13:00.572023Z", "relationship_type": "indicates", "source_ref": "indicator--aefcea76-3082-485a-b81c-46abf68804bc", "target_ref": "malware--5a5ecfd5-b5ea-4587-9f24-486d7f9a392f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b", "created": "2026-01-27T05:13:00.572197Z", "modified": "2026-01-27T05:13:00.572197Z", "name": "CouplerTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93fd537-9861-44db-836c-cf601962cf6b", "created": "2026-01-27T05:13:00.572364Z", "modified": "2026-01-27T05:13:00.572364Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.bytepioner.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.572364Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--763967b9-8f1e-43ce-ac8c-86c605687d09", "created": "2026-01-27T05:13:00.573053Z", "modified": "2026-01-27T05:13:00.573053Z", "relationship_type": "indicates", "source_ref": "indicator--e93fd537-9861-44db-836c-cf601962cf6b", "target_ref": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe5aa93-9a12-4f2b-a387-06821c21c4e5", "created": "2026-01-27T05:13:00.573236Z", "modified": "2026-01-27T05:13:00.573236Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='coupletracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.573236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44243ad7-36c6-4b6c-935a-1a2a9065cd24", "created": "2026-01-27T05:13:00.573917Z", "modified": "2026-01-27T05:13:00.573917Z", "relationship_type": "indicates", "source_ref": "indicator--bfe5aa93-9a12-4f2b-a387-06821c21c4e5", "target_ref": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bc6c93-b3b8-41b2-8303-465decea171b", "created": "2026-01-27T05:13:00.574092Z", "modified": "2026-01-27T05:13:00.574092Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bettertomorrowapps.spyyourlovefree']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.574092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0545bb73-8747-4f91-a4eb-3a5f29bc07a8", "created": "2026-01-27T05:13:00.574782Z", "modified": "2026-01-27T05:13:00.574782Z", "relationship_type": "indicates", "source_ref": "indicator--76bc6c93-b3b8-41b2-8303-465decea171b", "target_ref": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7af03e1-d901-4449-86c0-1326878d0d14", "created": "2026-01-27T05:13:00.57496Z", "modified": "2026-01-27T05:13:00.57496Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bytepioneers.coupletracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.57496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a94bb2a3-207a-46a5-8efb-860371314827", "created": "2026-01-27T05:13:00.575646Z", "modified": "2026-01-27T05:13:00.575646Z", "relationship_type": "indicates", "source_ref": "indicator--b7af03e1-d901-4449-86c0-1326878d0d14", "target_ref": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ba41bb-b464-4f2f-bf06-dce5729307d7", "created": "2026-01-27T05:13:00.575841Z", "modified": "2026-01-27T05:13:00.575841Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='18CD402CC43DF0BC03E9951B0F843DC4B1552DC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.575841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--faf3c77f-7295-498f-9464-2dd21524f417", "created": "2026-01-27T05:13:00.576606Z", "modified": "2026-01-27T05:13:00.576606Z", "relationship_type": "indicates", "source_ref": "indicator--95ba41bb-b464-4f2f-bf06-dce5729307d7", "target_ref": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f089e2-edd0-4ca0-8dc4-9a8dbb92997e", "created": "2026-01-27T05:13:00.576798Z", "modified": "2026-01-27T05:13:00.576798Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BC53CC2A9996DE47BF72348F2A592DC0EBDAF06B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.576798Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d22e22a-ec33-4f9f-96d1-edcfe32ba6fd", "created": "2026-01-27T05:13:00.577631Z", "modified": "2026-01-27T05:13:00.577631Z", "relationship_type": "indicates", "source_ref": "indicator--73f089e2-edd0-4ca0-8dc4-9a8dbb92997e", "target_ref": "malware--1c6cae5a-9e19-47ef-9c3b-c902281e0d6b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--876ebf73-1053-4220-bb51-5e27f01878b3", "created": "2026-01-27T05:13:00.577896Z", "modified": "2026-01-27T05:13:00.577896Z", "name": "GPSTrackerLoki", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236e87e3-3f80-45e7-949d-f3a56f87de16", "created": "2026-01-27T05:13:00.578085Z", "modified": "2026-01-27T05:13:00.578085Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='asgard-f8c53.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.578085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceffe305-3663-4f83-a8b3-d098d943f762", "created": "2026-01-27T05:13:00.578796Z", "modified": "2026-01-27T05:13:00.578796Z", "relationship_type": "indicates", "source_ref": "indicator--236e87e3-3f80-45e7-949d-f3a56f87de16", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8170ec5f-80da-4d87-91cc-35ad5a421dfb", "created": "2026-01-27T05:13:00.578976Z", "modified": "2026-01-27T05:13:00.578976Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.asgardtech.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.578976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3c9e7cb-bdb5-472f-b3f3-96455bb08189", "created": "2026-01-27T05:13:00.579824Z", "modified": "2026-01-27T05:13:00.579824Z", "relationship_type": "indicates", "source_ref": "indicator--8170ec5f-80da-4d87-91cc-35ad5a421dfb", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cd135b-1794-46a3-9ef6-fdf724152c44", "created": "2026-01-27T05:13:00.580006Z", "modified": "2026-01-27T05:13:00.580006Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='asgardtech.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.580006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ceee7153-e58f-43cd-8f02-bcca8b20f482", "created": "2026-01-27T05:13:00.580674Z", "modified": "2026-01-27T05:13:00.580674Z", "relationship_type": "indicates", "source_ref": "indicator--71cd135b-1794-46a3-9ef6-fdf724152c44", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2e22f4-547d-4676-965a-b9463e56a408", "created": "2026-01-27T05:13:00.580879Z", "modified": "2026-01-27T05:13:00.580879Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='75c76fe253a9347427793638b8a73f36a880d320fd440dcb156c9d9308459a9f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.580879Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a48dfdc4-4193-458f-9a22-16ed486f435c", "created": "2026-01-27T05:13:00.581716Z", "modified": "2026-01-27T05:13:00.581716Z", "relationship_type": "indicates", "source_ref": "indicator--2d2e22f4-547d-4676-965a-b9463e56a408", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833e15f7-f16b-4b1f-8ff6-905eb5d299c5", "created": "2026-01-27T05:13:00.581912Z", "modified": "2026-01-27T05:13:00.581912Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.loki']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.581912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80d4f9c6-7f7e-4511-af43-7a8cb89f42a3", "created": "2026-01-27T05:13:00.582547Z", "modified": "2026-01-27T05:13:00.582547Z", "relationship_type": "indicates", "source_ref": "indicator--833e15f7-f16b-4b1f-8ff6-905eb5d299c5", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62bbe42-5013-4d96-8103-7439aae50cf9", "created": "2026-01-27T05:13:00.582731Z", "modified": "2026-01-27T05:13:00.582731Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobile.asgard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.582731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df91e19c-6f03-43e0-9aa7-da80d0eaaabd", "created": "2026-01-27T05:13:00.583404Z", "modified": "2026-01-27T05:13:00.583404Z", "relationship_type": "indicates", "source_ref": "indicator--a62bbe42-5013-4d96-8103-7439aae50cf9", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7145b2-2c68-4b1d-a282-95a96cf44af7", "created": "2026-01-27T05:13:00.58358Z", "modified": "2026-01-27T05:13:00.58358Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6156DB551938BB4560D4643B54527E4F169ED44F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.58358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d0156b2-876e-403f-acb0-0d9a91e0cbc6", "created": "2026-01-27T05:13:00.584362Z", "modified": "2026-01-27T05:13:00.584362Z", "relationship_type": "indicates", "source_ref": "indicator--6e7145b2-2c68-4b1d-a282-95a96cf44af7", "target_ref": "malware--876ebf73-1053-4220-bb51-5e27f01878b3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a2699149-e582-40a6-bf7c-5399f0db9451", "created": "2026-01-27T05:13:00.584537Z", "modified": "2026-01-27T05:13:00.584537Z", "name": "SpyApp247", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c4ecf7-2a29-423b-8f54-4d17b0be7552", "created": "2026-01-27T05:13:00.584703Z", "modified": "2026-01-27T05:13:00.584703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab8c4e659356a2f3b0299e1052122b7f9578e2e1bd7f9f642fa0b23be75d2c14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.584703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6680959-e733-4e3b-bae7-67404befa731", "created": "2026-01-27T05:13:00.585526Z", "modified": "2026-01-27T05:13:00.585526Z", "relationship_type": "indicates", "source_ref": "indicator--e9c4ecf7-2a29-423b-8f54-4d17b0be7552", "target_ref": "malware--a2699149-e582-40a6-bf7c-5399f0db9451"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b987bbb-1a3e-4789-9696-559d34a85a65", "created": "2026-01-27T05:13:00.585703Z", "modified": "2026-01-27T05:13:00.585703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba88c8df9fdfd3fd67cec515b1bfa79ece4ca696681f2671462ba9c7ac7245b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.585703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55e4a03b-cf6d-403d-a318-b721166be9bd", "created": "2026-01-27T05:13:00.586528Z", "modified": "2026-01-27T05:13:00.586528Z", "relationship_type": "indicates", "source_ref": "indicator--9b987bbb-1a3e-4789-9696-559d34a85a65", "target_ref": "malware--a2699149-e582-40a6-bf7c-5399f0db9451"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e985702-adb7-4619-a9e2-79a34196d80b", "created": "2026-01-27T05:13:00.586701Z", "modified": "2026-01-27T05:13:00.586701Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spyapp247.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.586701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02c38833-6b94-4314-9597-1f64d5f2e4e2", "created": "2026-01-27T05:13:00.587368Z", "modified": "2026-01-27T05:13:00.587368Z", "relationship_type": "indicates", "source_ref": "indicator--5e985702-adb7-4619-a9e2-79a34196d80b", "target_ref": "malware--a2699149-e582-40a6-bf7c-5399f0db9451"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3ef05559-bab0-4c36-83cb-d0ec61b12e8e", "created": "2026-01-27T05:13:00.587556Z", "modified": "2026-01-27T05:13:00.587556Z", "name": "SpyMug", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0cf196-b7d9-4928-b67c-0127f1ce3a16", "created": "2026-01-27T05:13:00.587723Z", "modified": "2026-01-27T05:13:00.587723Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.service.mug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.587723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d339dd0f-d398-42d0-be7c-0c93070ff91d", "created": "2026-01-27T05:13:00.588502Z", "modified": "2026-01-27T05:13:00.588502Z", "relationship_type": "indicates", "source_ref": "indicator--df0cf196-b7d9-4928-b67c-0127f1ce3a16", "target_ref": "malware--3ef05559-bab0-4c36-83cb-d0ec61b12e8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc4dafe-f047-42bc-9a7d-c16ba9e7c8bd", "created": "2026-01-27T05:13:00.588678Z", "modified": "2026-01-27T05:13:00.588678Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='56C8FA19250EDBA1A91A37F500DA91FBC0657B1F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.588678Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--712a39c4-0ee4-463a-b001-14983c01cfe3", "created": "2026-01-27T05:13:00.589454Z", "modified": "2026-01-27T05:13:00.589454Z", "relationship_type": "indicates", "source_ref": "indicator--2fc4dafe-f047-42bc-9a7d-c16ba9e7c8bd", "target_ref": "malware--3ef05559-bab0-4c36-83cb-d0ec61b12e8e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e", "created": "2026-01-27T05:13:00.589628Z", "modified": "2026-01-27T05:13:00.589628Z", "name": "WtSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31434a6-125b-4337-8dba-272f1920eacc", "created": "2026-01-27T05:13:00.589854Z", "modified": "2026-01-27T05:13:00.589854Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wt-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.589854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d7d5636-8b7d-4d7b-b50b-771e675d3d6a", "created": "2026-01-27T05:13:00.59053Z", "modified": "2026-01-27T05:13:00.59053Z", "relationship_type": "indicates", "source_ref": "indicator--e31434a6-125b-4337-8dba-272f1920eacc", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d73746-4169-4b3e-93ff-95b003a948eb", "created": "2026-01-27T05:13:00.590708Z", "modified": "2026-01-27T05:13:00.590708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73c1f9b8d9a7926a87d23ed43a4cccced9fbcaa8afba464138b0041f5feb7405']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.590708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecb19aac-8571-4c0e-806c-465ab57539fc", "created": "2026-01-27T05:13:00.591557Z", "modified": "2026-01-27T05:13:00.591557Z", "relationship_type": "indicates", "source_ref": "indicator--c2d73746-4169-4b3e-93ff-95b003a948eb", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cc9123-0b9c-491d-98f7-6426018a3fc7", "created": "2026-01-27T05:13:00.591732Z", "modified": "2026-01-27T05:13:00.591732Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='146a952efd566f847b8b4b095215f5551f7c048d214fedef41b2ccf882385a6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.591732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe555c47-b46a-4855-a436-4f83093097c1", "created": "2026-01-27T05:13:00.592561Z", "modified": "2026-01-27T05:13:00.592561Z", "relationship_type": "indicates", "source_ref": "indicator--d5cc9123-0b9c-491d-98f7-6426018a3fc7", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ec6bad-11ed-4576-98aa-507f65b8b261", "created": "2026-01-27T05:13:00.592731Z", "modified": "2026-01-27T05:13:00.592731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6beb22b8cda1d24e0859b1bd912b60e652ee812db830f2e33192d9530240731']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.592731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aea27b37-6745-4fb0-83a2-aee7008ea0e1", "created": "2026-01-27T05:13:00.593582Z", "modified": "2026-01-27T05:13:00.593582Z", "relationship_type": "indicates", "source_ref": "indicator--59ec6bad-11ed-4576-98aa-507f65b8b261", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db5feb2-1c9f-4bf1-9668-9231b8ecbe21", "created": "2026-01-27T05:13:00.593768Z", "modified": "2026-01-27T05:13:00.593768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8188dec9de61221629b646ed78f125d507384bc993bc4188e1cb1b68810f77d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.593768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b5defeb-fb1a-4d27-a79a-b80a6495126e", "created": "2026-01-27T05:13:00.594588Z", "modified": "2026-01-27T05:13:00.594588Z", "relationship_type": "indicates", "source_ref": "indicator--8db5feb2-1c9f-4bf1-9668-9231b8ecbe21", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e11a73f-0b08-47ae-ab20-6d8e57bfa7d7", "created": "2026-01-27T05:13:00.594779Z", "modified": "2026-01-27T05:13:00.594779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f544e9ad16c329b091dabfa735508105025bc37be93bfac4e6871a644c562b09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.594779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a97589b-3361-4d1d-ae59-3bee32fcdc95", "created": "2026-01-27T05:13:00.595638Z", "modified": "2026-01-27T05:13:00.595638Z", "relationship_type": "indicates", "source_ref": "indicator--3e11a73f-0b08-47ae-ab20-6d8e57bfa7d7", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46633e9f-7b82-4d84-9758-9f62a56b20da", "created": "2026-01-27T05:13:00.595836Z", "modified": "2026-01-27T05:13:00.595836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb769147546c76292e6ab2c78742f8910db40d8f14d7a7ed40d30dbecb259a5c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.595836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0b60fbd-1157-4916-90de-51f0cc49858c", "created": "2026-01-27T05:13:00.596814Z", "modified": "2026-01-27T05:13:00.596814Z", "relationship_type": "indicates", "source_ref": "indicator--46633e9f-7b82-4d84-9758-9f62a56b20da", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8974173e-7848-406d-84ce-696d201c9860", "created": "2026-01-27T05:13:00.596999Z", "modified": "2026-01-27T05:13:00.596999Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wwtspy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.596999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b81d0617-9b98-49d9-994f-46fd672cb603", "created": "2026-01-27T05:13:00.597637Z", "modified": "2026-01-27T05:13:00.597637Z", "relationship_type": "indicates", "source_ref": "indicator--8974173e-7848-406d-84ce-696d201c9860", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7aea59-2455-4f62-becb-f70d7fce20fa", "created": "2026-01-27T05:13:00.597825Z", "modified": "2026-01-27T05:13:00.597825Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wtspy.apps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.597825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50a0f481-039c-490a-9088-9cce14a4ef37", "created": "2026-01-27T05:13:00.598462Z", "modified": "2026-01-27T05:13:00.598462Z", "relationship_type": "indicates", "source_ref": "indicator--fc7aea59-2455-4f62-becb-f70d7fce20fa", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585f29e9-50ec-4337-8cc9-edd40f8b614c", "created": "2026-01-27T05:13:00.598633Z", "modified": "2026-01-27T05:13:00.598633Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BB5E2C0E8DFDC54730C1E9B48754977E7DBCCCF9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.598633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24dc6255-4dd9-415a-a9b1-723fb89a50ee", "created": "2026-01-27T05:13:00.599448Z", "modified": "2026-01-27T05:13:00.599448Z", "relationship_type": "indicates", "source_ref": "indicator--585f29e9-50ec-4337-8cc9-edd40f8b614c", "target_ref": "malware--568a80f2-3090-47e4-9e4e-603a18ac8f6e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404", "created": "2026-01-27T05:13:00.599622Z", "modified": "2026-01-27T05:13:00.599622Z", "name": "Xnore", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91bfdb3-0d4a-4d49-8888-b8742bc823d9", "created": "2026-01-27T05:13:00.599806Z", "modified": "2026-01-27T05:13:00.599806Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.599806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14cb126f-b746-4724-b47d-62b94478c14c", "created": "2026-01-27T05:13:00.600467Z", "modified": "2026-01-27T05:13:00.600467Z", "relationship_type": "indicates", "source_ref": "indicator--a91bfdb3-0d4a-4d49-8888-b8742bc823d9", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7010a197-bae3-4789-ad5a-3302cbebfd5a", "created": "2026-01-27T05:13:00.600641Z", "modified": "2026-01-27T05:13:00.600641Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnore.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.600641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ab736cc-b80e-432a-a4cd-210ab30cbd2a", "created": "2026-01-27T05:13:00.601315Z", "modified": "2026-01-27T05:13:00.601315Z", "relationship_type": "indicates", "source_ref": "indicator--7010a197-bae3-4789-ad5a-3302cbebfd5a", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6571f76f-3b96-4c0c-9fe2-8f73e5a92d2c", "created": "2026-01-27T05:13:00.601487Z", "modified": "2026-01-27T05:13:00.601487Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xnore.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.601487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c38d7e4b-21e8-4195-b439-e2776e1f1691", "created": "2026-01-27T05:13:00.60217Z", "modified": "2026-01-27T05:13:00.60217Z", "relationship_type": "indicates", "source_ref": "indicator--6571f76f-3b96-4c0c-9fe2-8f73e5a92d2c", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e69c8f-726a-4eee-9af6-e003fdf77cfa", "created": "2026-01-27T05:13:00.602347Z", "modified": "2026-01-27T05:13:00.602347Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f9b4a9fa6fab111284dde6834428eab3e1c2c9218c742197fbfd6a7c436eee7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.602347Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d6c6e97-0f7a-4567-93e7-5e707d302cae", "created": "2026-01-27T05:13:00.603194Z", "modified": "2026-01-27T05:13:00.603194Z", "relationship_type": "indicates", "source_ref": "indicator--23e69c8f-726a-4eee-9af6-e003fdf77cfa", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a5ecd0-f430-40b7-a131-1c909fc3c55f", "created": "2026-01-27T05:13:00.603385Z", "modified": "2026-01-27T05:13:00.603385Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35fa07d5a39c670c2143718b6cedf713f32f61d93bc264939439748f6a835cc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.603385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7ff1c4d3-a94d-4430-95e7-026fa246a891", "created": "2026-01-27T05:13:00.604245Z", "modified": "2026-01-27T05:13:00.604245Z", "relationship_type": "indicates", "source_ref": "indicator--06a5ecd0-f430-40b7-a131-1c909fc3c55f", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcfc4f6-7963-4f1e-b993-b69a88e9e71d", "created": "2026-01-27T05:13:00.604421Z", "modified": "2026-01-27T05:13:00.604421Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c6ac542bbc8af52e2fb36a4e2a9b6fb83458821b9fd24865ae1efebbdff4931']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.604421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--297fb15d-ce9e-4c70-b88c-f3b69388d103", "created": "2026-01-27T05:13:00.605374Z", "modified": "2026-01-27T05:13:00.605374Z", "relationship_type": "indicates", "source_ref": "indicator--fdcfc4f6-7963-4f1e-b993-b69a88e9e71d", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b94993-7169-49ee-bbd3-ba11f65dea28", "created": "2026-01-27T05:13:00.605548Z", "modified": "2026-01-27T05:13:00.605548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9ca9a8bed0a17375d6d6d07c20248d0847caae06fdc288533f5748943593c686']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.605548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28b84445-917b-45a5-94d8-c30bf055cf1c", "created": "2026-01-27T05:13:00.60637Z", "modified": "2026-01-27T05:13:00.60637Z", "relationship_type": "indicates", "source_ref": "indicator--d3b94993-7169-49ee-bbd3-ba11f65dea28", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0db872-2acf-40e2-a065-fdb0f1c3d74f", "created": "2026-01-27T05:13:00.606546Z", "modified": "2026-01-27T05:13:00.606546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='24743a29eb173d5674d0f45bc10c92492a730f37b2d558c34e48e22bc740ca4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.606546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c09fbbda-91a6-47e5-befd-ff28efb6d080", "created": "2026-01-27T05:13:00.607376Z", "modified": "2026-01-27T05:13:00.607376Z", "relationship_type": "indicates", "source_ref": "indicator--fe0db872-2acf-40e2-a065-fdb0f1c3d74f", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfdc0ef-2201-4ef7-b508-d9f5348c9819", "created": "2026-01-27T05:13:00.607551Z", "modified": "2026-01-27T05:13:00.607551Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.xno.systemservice']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.607551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf1d4111-7811-426c-ae2a-f9e7d8978c23", "created": "2026-01-27T05:13:00.608225Z", "modified": "2026-01-27T05:13:00.608225Z", "relationship_type": "indicates", "source_ref": "indicator--8bfdc0ef-2201-4ef7-b508-d9f5348c9819", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a92ccc-863a-41c1-943e-0b2c5634b7ba", "created": "2026-01-27T05:13:00.6084Z", "modified": "2026-01-27T05:13:00.6084Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9BCE25527FF174A4AD6CDE233B17038641A5EEF9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.6084Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3db40533-9ddc-4f44-9c41-6819a416908c", "created": "2026-01-27T05:13:00.609172Z", "modified": "2026-01-27T05:13:00.609172Z", "relationship_type": "indicates", "source_ref": "indicator--d4a92ccc-863a-41c1-943e-0b2c5634b7ba", "target_ref": "malware--ea43c360-fcbb-49b2-be25-46dfdae27404"}, {"type": "malware", "spec_version": "2.1", "id": "malware--569d203f-e29c-4fad-a91f-cf2456458a40", "created": "2026-01-27T05:13:00.609343Z", "modified": "2026-01-27T05:13:00.609343Z", "name": "EspiaoAndroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c751046-294e-4ccc-9299-22e31f5557a5", "created": "2026-01-27T05:13:00.609509Z", "modified": "2026-01-27T05:13:00.609509Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aovivo.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.609509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8aa3d350-4eb9-419e-96d9-81f89135ef16", "created": "2026-01-27T05:13:00.610196Z", "modified": "2026-01-27T05:13:00.610196Z", "relationship_type": "indicates", "source_ref": "indicator--1c751046-294e-4ccc-9299-22e31f5557a5", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a516d6ab-7e91-49d9-a484-9c6ecf8f3b02", "created": "2026-01-27T05:13:00.610372Z", "modified": "2026-01-27T05:13:00.610372Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api007.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.610372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dc27d75-1953-4210-b972-b88b7535435a", "created": "2026-01-27T05:13:00.611136Z", "modified": "2026-01-27T05:13:00.611136Z", "relationship_type": "indicates", "source_ref": "indicator--a516d6ab-7e91-49d9-a484-9c6ecf8f3b02", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e77ec78-0ead-4db3-8a1b-5dcd3a4a268d", "created": "2026-01-27T05:13:00.611313Z", "modified": "2026-01-27T05:13:00.611313Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.611313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12bc7a98-ae54-4d38-b634-cab6c35ea522", "created": "2026-01-27T05:13:00.611993Z", "modified": "2026-01-27T05:13:00.611993Z", "relationship_type": "indicates", "source_ref": "indicator--4e77ec78-0ead-4db3-8a1b-5dcd3a4a268d", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092fb0a9-ce87-4c9f-973f-6561e44642e0", "created": "2026-01-27T05:13:00.612168Z", "modified": "2026-01-27T05:13:00.612168Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='celular007.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.612168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8d8f51d-22c0-4b19-9c94-fc30a762c4bb", "created": "2026-01-27T05:13:00.612879Z", "modified": "2026-01-27T05:13:00.612879Z", "relationship_type": "indicates", "source_ref": "indicator--092fb0a9-ce87-4c9f-973f-6561e44642e0", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9258ed-02da-463d-9bbf-46d326a5aab9", "created": "2026-01-27T05:13:00.613062Z", "modified": "2026-01-27T05:13:00.613062Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remoto.foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.613062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3ef3cde-0fb2-454f-9351-d30fdf87252b", "created": "2026-01-27T05:13:00.613906Z", "modified": "2026-01-27T05:13:00.613906Z", "relationship_type": "indicates", "source_ref": "indicator--7f9258ed-02da-463d-9bbf-46d326a5aab9", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88c9587-83c4-4c2f-89fd-d268bbb6504c", "created": "2026-01-27T05:13:00.614087Z", "modified": "2026-01-27T05:13:00.614087Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='foxspy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.614087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25f0f4b6-3184-4b1d-b5b4-b3ad86f61a84", "created": "2026-01-27T05:13:00.61474Z", "modified": "2026-01-27T05:13:00.61474Z", "relationship_type": "indicates", "source_ref": "indicator--f88c9587-83c4-4c2f-89fd-d268bbb6504c", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bd1654-387c-4441-ba86-90d856bfc361", "created": "2026-01-27T05:13:00.614934Z", "modified": "2026-01-27T05:13:00.614934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='551f10c25847ce9932efe180e48fe46954744e1951f974a20a838a64f061d075']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.614934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--91530dfd-959f-4910-9d13-1e2b89545bd1", "created": "2026-01-27T05:13:00.61576Z", "modified": "2026-01-27T05:13:00.61576Z", "relationship_type": "indicates", "source_ref": "indicator--d9bd1654-387c-4441-ba86-90d856bfc361", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feb31b4-fe50-461b-a0dd-d3e24b443107", "created": "2026-01-27T05:13:00.615938Z", "modified": "2026-01-27T05:13:00.615938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e18cb58c46500b046805f494d261b0c43ff5e74865d0e57fdff4c9b44f214b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.615938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cd84685-5426-4c3d-b47e-8d733ffa0ef2", "created": "2026-01-27T05:13:00.616758Z", "modified": "2026-01-27T05:13:00.616758Z", "relationship_type": "indicates", "source_ref": "indicator--6feb31b4-fe50-461b-a0dd-d3e24b443107", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b056b92b-6035-404e-add7-e4dce486e323", "created": "2026-01-27T05:13:00.616933Z", "modified": "2026-01-27T05:13:00.616933Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8dcb8f4dda2fea9dd6c56fa767a122067e1fab937839945103b8ef5abbf4dfa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.616933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae6d7db3-e70a-4337-a1f9-a94fbc550754", "created": "2026-01-27T05:13:00.617766Z", "modified": "2026-01-27T05:13:00.617766Z", "relationship_type": "indicates", "source_ref": "indicator--b056b92b-6035-404e-add7-e4dce486e323", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a4f13e-67b9-457c-be38-bf8e0b8aa399", "created": "2026-01-27T05:13:00.617944Z", "modified": "2026-01-27T05:13:00.617944Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7dc624758c0afa2fbc1dea4c21067fb6ca975f31a01a5b181e4b0b3c5b0fe2b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.617944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f9c62e1-3e32-41f7-95f1-20dd6fda8619", "created": "2026-01-27T05:13:00.618769Z", "modified": "2026-01-27T05:13:00.618769Z", "relationship_type": "indicates", "source_ref": "indicator--62a4f13e-67b9-457c-be38-bf8e0b8aa399", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0279dd9f-231d-4a24-a65a-8154a461b2d9", "created": "2026-01-27T05:13:00.618945Z", "modified": "2026-01-27T05:13:00.618945Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f3ccb51c19613dd53ea9db449d01f0699ef9c68a74d4f0bed1f33f56e711a49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.618945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bb3a3a9-edd9-43fd-be0c-fb13d85448be", "created": "2026-01-27T05:13:00.619803Z", "modified": "2026-01-27T05:13:00.619803Z", "relationship_type": "indicates", "source_ref": "indicator--0279dd9f-231d-4a24-a65a-8154a461b2d9", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1b08ae-b98c-406a-b18b-2166ad8834a9", "created": "2026-01-27T05:13:00.619984Z", "modified": "2026-01-27T05:13:00.619984Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ee8934d85e2bc263bbe91bae8c202f6ff634c69f77e001eb98b3f7be05d8336']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.619984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa8d7b67-8aa3-4ced-9c5d-c63b6d470693", "created": "2026-01-27T05:13:00.620809Z", "modified": "2026-01-27T05:13:00.620809Z", "relationship_type": "indicates", "source_ref": "indicator--4a1b08ae-b98c-406a-b18b-2166ad8834a9", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458c12ba-224e-4189-996f-63a63aef330e", "created": "2026-01-27T05:13:00.620985Z", "modified": "2026-01-27T05:13:00.620985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0fe1f6c1c7eb8bed9ec446abf66b8ad3ff58fe785902044eba275ca11cdb22f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.620985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e0a5ac9-a162-4e8f-8ac9-c23334b38968", "created": "2026-01-27T05:13:00.621831Z", "modified": "2026-01-27T05:13:00.621831Z", "relationship_type": "indicates", "source_ref": "indicator--458c12ba-224e-4189-996f-63a63aef330e", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed97f30a-9ba6-4aab-97c7-f0aa29e7493c", "created": "2026-01-27T05:13:00.622007Z", "modified": "2026-01-27T05:13:00.622007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='429e81dd4c1bb54d390281010c37c60383076f1559a577590c26e4d4baeb2698']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.622007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d24467e5-cea9-428d-842d-8ccbcedc30c2", "created": "2026-01-27T05:13:00.623327Z", "modified": "2026-01-27T05:13:00.623327Z", "relationship_type": "indicates", "source_ref": "indicator--ed97f30a-9ba6-4aab-97c7-f0aa29e7493c", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6799b5-b28b-4214-ba6a-729b881b968d", "created": "2026-01-27T05:13:00.623506Z", "modified": "2026-01-27T05:13:00.623506Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1bafc8bdacb75babe72eaef99d143b50c1ca7a49ed5d5eacb1f8b9dc0581c0c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.623506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c085fc7d-ce0f-4e2a-b7fe-675dc58006ba", "created": "2026-01-27T05:13:00.624339Z", "modified": "2026-01-27T05:13:00.624339Z", "relationship_type": "indicates", "source_ref": "indicator--2c6799b5-b28b-4214-ba6a-729b881b968d", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c80b402a-02b4-4814-9051-7434b2416815", "created": "2026-01-27T05:13:00.624517Z", "modified": "2026-01-27T05:13:00.624517Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5bfa6f8ba7cf4b2be9c11c2b88811ddc0917a71325633fce246cf65245b184e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.624517Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dab3a5c-6187-4f53-9bbd-49f6c0357d3c", "created": "2026-01-27T05:13:00.625341Z", "modified": "2026-01-27T05:13:00.625341Z", "relationship_type": "indicates", "source_ref": "indicator--c80b402a-02b4-4814-9051-7434b2416815", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dc43b1-ab0c-4b15-88e9-068f1056329b", "created": "2026-01-27T05:13:00.625549Z", "modified": "2026-01-27T05:13:00.625549Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2524e3aef6b4971782b11670e6474b10510795adf65d34ad4495078eb98c4b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.625549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--791229c1-d1e4-4d56-a4df-1537cda191f8", "created": "2026-01-27T05:13:00.626394Z", "modified": "2026-01-27T05:13:00.626394Z", "relationship_type": "indicates", "source_ref": "indicator--b3dc43b1-ab0c-4b15-88e9-068f1056329b", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50c308a-5dec-43b0-b653-8275a32f4587", "created": "2026-01-27T05:13:00.62669Z", "modified": "2026-01-27T05:13:00.62669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5f1d1ecbf70f66c606ead243e60230040a9e29f7fdfeeb0849d22367cb4e9f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.62669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5b4242d-97d7-4b74-85b3-9b4d134709dc", "created": "2026-01-27T05:13:00.627558Z", "modified": "2026-01-27T05:13:00.627558Z", "relationship_type": "indicates", "source_ref": "indicator--f50c308a-5dec-43b0-b653-8275a32f4587", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bff08ab-19bb-438c-b903-d89207634c60", "created": "2026-01-27T05:13:00.627739Z", "modified": "2026-01-27T05:13:00.627739Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kfhdha.fkjfgjdi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.627739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--edc5151d-ad9c-4413-8fd2-d47e350f4879", "created": "2026-01-27T05:13:00.628426Z", "modified": "2026-01-27T05:13:00.628426Z", "relationship_type": "indicates", "source_ref": "indicator--2bff08ab-19bb-438c-b903-d89207634c60", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13c7278-ce58-463b-a49e-5cc9741420fb", "created": "2026-01-27T05:13:00.628606Z", "modified": "2026-01-27T05:13:00.628606Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='60DA6A5B04C0100DFCE1213C850EFBDEB0D1E8D7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.628606Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66623764-57b9-4422-bbdd-5127d0dc6f24", "created": "2026-01-27T05:13:00.62941Z", "modified": "2026-01-27T05:13:00.62941Z", "relationship_type": "indicates", "source_ref": "indicator--b13c7278-ce58-463b-a49e-5cc9741420fb", "target_ref": "malware--569d203f-e29c-4fad-a91f-cf2456458a40"}, {"type": "malware", "spec_version": "2.1", "id": "malware--63bf2de1-6720-4866-865d-773afe31b7d6", "created": "2026-01-27T05:13:00.629581Z", "modified": "2026-01-27T05:13:00.629581Z", "name": "pcTattletale", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9d57fe-3394-4cca-843d-5f141978957d", "created": "2026-01-27T05:13:00.629766Z", "modified": "2026-01-27T05:13:00.629766Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pctattletalev2.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.629766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2b32960-792f-41e3-be24-4ab4db195603", "created": "2026-01-27T05:13:00.63047Z", "modified": "2026-01-27T05:13:00.63047Z", "relationship_type": "indicates", "source_ref": "indicator--9c9d57fe-3394-4cca-843d-5f141978957d", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105ae36e-1f79-4a31-815f-13b70723e1b4", "created": "2026-01-27T05:13:00.630644Z", "modified": "2026-01-27T05:13:00.630644Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pctattletale.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.630644Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7fb83471-bdbe-4327-bbc2-25d92a9b3be5", "created": "2026-01-27T05:13:00.631323Z", "modified": "2026-01-27T05:13:00.631323Z", "relationship_type": "indicates", "source_ref": "indicator--105ae36e-1f79-4a31-815f-13b70723e1b4", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cce5426-1887-4003-8e43-c9f535e110f1", "created": "2026-01-27T05:13:00.631498Z", "modified": "2026-01-27T05:13:00.631498Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='truewebmedia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.631498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--28e399f3-1686-452e-847f-e4459907a752", "created": "2026-01-27T05:13:00.632311Z", "modified": "2026-01-27T05:13:00.632311Z", "relationship_type": "indicates", "source_ref": "indicator--9cce5426-1887-4003-8e43-c9f535e110f1", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a7d99c-2fb0-4a34-a5b1-c7124f2cb29b", "created": "2026-01-27T05:13:00.632492Z", "modified": "2026-01-27T05:13:00.632492Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.pctattletale.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.632492Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3120a399-9bf5-45e9-9a45-258ae732675d", "created": "2026-01-27T05:13:00.633188Z", "modified": "2026-01-27T05:13:00.633188Z", "relationship_type": "indicates", "source_ref": "indicator--27a7d99c-2fb0-4a34-a5b1-c7124f2cb29b", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4e0084-df06-44cb-99aa-18249ba80359", "created": "2026-01-27T05:13:00.63337Z", "modified": "2026-01-27T05:13:00.63337Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dc73bd23b40a522a79d8a7ba002c9bc4ee7f92e9055e2c97b233a875e63690d7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.63337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e11c078-5b8d-4504-bcec-a9c78396b1b1", "created": "2026-01-27T05:13:00.634201Z", "modified": "2026-01-27T05:13:00.634201Z", "relationship_type": "indicates", "source_ref": "indicator--fd4e0084-df06-44cb-99aa-18249ba80359", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db222f9-5e3d-4b3a-a9f6-b7ae77464fa2", "created": "2026-01-27T05:13:00.634382Z", "modified": "2026-01-27T05:13:00.634382Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ace73e27ad81f3c7599031468e8c6e8bcf5080c7dd8e1d802d8028f954b57ff3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.634382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8bbff0b1-f7c5-4d02-892e-4c7f89b4593d", "created": "2026-01-27T05:13:00.635216Z", "modified": "2026-01-27T05:13:00.635216Z", "relationship_type": "indicates", "source_ref": "indicator--8db222f9-5e3d-4b3a-a9f6-b7ae77464fa2", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a94b6f-2a02-41e4-a5d0-11f737434559", "created": "2026-01-27T05:13:00.635391Z", "modified": "2026-01-27T05:13:00.635391Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c40f1df2185f6a19126230eb474ad04ce4766c34d2184a9ef7f7f8b2822abd6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.635391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8e8fa00-d308-4b40-9bed-ee85df70e4f9", "created": "2026-01-27T05:13:00.636245Z", "modified": "2026-01-27T05:13:00.636245Z", "relationship_type": "indicates", "source_ref": "indicator--d6a94b6f-2a02-41e4-a5d0-11f737434559", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd320c52-92e2-4a25-be1c-3b0b69e119d2", "created": "2026-01-27T05:13:00.636432Z", "modified": "2026-01-27T05:13:00.636432Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3eb6413aeddd59f61e12a3d84ae393ef036150eb0467aadabfacf50dae917a48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.636432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7401b02-e2dd-42a9-a3a1-cb4c7e9e09b5", "created": "2026-01-27T05:13:00.637275Z", "modified": "2026-01-27T05:13:00.637275Z", "relationship_type": "indicates", "source_ref": "indicator--dd320c52-92e2-4a25-be1c-3b0b69e119d2", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912a7b1f-4132-4176-bd10-33d43f6534fa", "created": "2026-01-27T05:13:00.637458Z", "modified": "2026-01-27T05:13:00.637458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5a6411655cd5b06d8c961b7f86c109bc4897c50fcad8b569ec6bc43c1e450b4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.637458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--060c21f4-4932-432c-9cbd-3189fbe37632", "created": "2026-01-27T05:13:00.638293Z", "modified": "2026-01-27T05:13:00.638293Z", "relationship_type": "indicates", "source_ref": "indicator--912a7b1f-4132-4176-bd10-33d43f6534fa", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f551f889-f9ee-4b5e-b1db-b7297664c4f9", "created": "2026-01-27T05:13:00.638469Z", "modified": "2026-01-27T05:13:00.638469Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a370cb4a508251ad062d9bdc87f037f9e955c61dcd41a69f46c1fd93bb36b8a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.638469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcff5c5e-b9e3-4c22-b28b-dcae65e4d6bc", "created": "2026-01-27T05:13:00.639304Z", "modified": "2026-01-27T05:13:00.639304Z", "relationship_type": "indicates", "source_ref": "indicator--f551f889-f9ee-4b5e-b1db-b7297664c4f9", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a190c7f-8c9d-4332-bceb-8a1a2426a605", "created": "2026-01-27T05:13:00.63948Z", "modified": "2026-01-27T05:13:00.63948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7a54dbdbb9c7ea0e68625ddfc8cdc9c253fa149babb26c2f08bb8a7a91c6a452']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.63948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2b0a299-5fcb-40a9-9ae7-5c818da92577", "created": "2026-01-27T05:13:00.640318Z", "modified": "2026-01-27T05:13:00.640318Z", "relationship_type": "indicates", "source_ref": "indicator--4a190c7f-8c9d-4332-bceb-8a1a2426a605", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f7cdf5-c484-4857-bd61-14e3e966ee67", "created": "2026-01-27T05:13:00.6405Z", "modified": "2026-01-27T05:13:00.6405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94241c0144747f61440a6d7c540c8d0f4e9b833efab100b36526b4bde92aed5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.6405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--741489ae-2a05-4ce7-873f-e4e3b88a5f45", "created": "2026-01-27T05:13:00.641469Z", "modified": "2026-01-27T05:13:00.641469Z", "relationship_type": "indicates", "source_ref": "indicator--15f7cdf5-c484-4857-bd61-14e3e966ee67", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7f86a7-b297-4394-b2c5-1761d70d7dab", "created": "2026-01-27T05:13:00.641646Z", "modified": "2026-01-27T05:13:00.641646Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='719ecce6eac26cc407a00ddf4a4394d108fcc0dd45353bfd8ba9a123aba59ebd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.641646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b35289f9-8afa-46b7-a063-a2ac3986e14c", "created": "2026-01-27T05:13:00.642532Z", "modified": "2026-01-27T05:13:00.642532Z", "relationship_type": "indicates", "source_ref": "indicator--7a7f86a7-b297-4394-b2c5-1761d70d7dab", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc62238a-89b9-4440-bfd4-6ceb4f0f01cb", "created": "2026-01-27T05:13:00.642717Z", "modified": "2026-01-27T05:13:00.642717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='337d2ed78480e9ceb789e2e9dc7a6268b166ff1c5252ae77f3bf2b392df97354']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.642717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e03fae3-e775-4e55-ace9-571307c41ba9", "created": "2026-01-27T05:13:00.643601Z", "modified": "2026-01-27T05:13:00.643601Z", "relationship_type": "indicates", "source_ref": "indicator--dc62238a-89b9-4440-bfd4-6ceb4f0f01cb", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966599a0-ab22-4923-ba4b-53d88eeebbb6", "created": "2026-01-27T05:13:00.643815Z", "modified": "2026-01-27T05:13:00.643815Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8b233688b1c67f2909eee0ced113fac20a97734bbc10192d32d84318a94b1276']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.643815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e146720c-6815-4e67-a00b-6f1b2a42c3f2", "created": "2026-01-27T05:13:00.644645Z", "modified": "2026-01-27T05:13:00.644645Z", "relationship_type": "indicates", "source_ref": "indicator--966599a0-ab22-4923-ba4b-53d88eeebbb6", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba24e429-ab3b-4efe-b46d-e06dc67cbd57", "created": "2026-01-27T05:13:00.644839Z", "modified": "2026-01-27T05:13:00.644839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d444c7cfd6714ad070444b7ba0ea997c743cf9cecdc0adb7c5263505849b504a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.644839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9be9a26a-7498-4b02-aca8-92591f6a6ac7", "created": "2026-01-27T05:13:00.645667Z", "modified": "2026-01-27T05:13:00.645667Z", "relationship_type": "indicates", "source_ref": "indicator--ba24e429-ab3b-4efe-b46d-e06dc67cbd57", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786a80c9-a984-46dc-8609-82a41dc8b80a", "created": "2026-01-27T05:13:00.645861Z", "modified": "2026-01-27T05:13:00.645861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41b8f5707750a0524d0d4b7bd94b20beae73335de5bf4cfcb925821068a6b43c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.645861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36960c53-b07f-4a26-8186-759af71fbcd3", "created": "2026-01-27T05:13:00.646672Z", "modified": "2026-01-27T05:13:00.646672Z", "relationship_type": "indicates", "source_ref": "indicator--786a80c9-a984-46dc-8609-82a41dc8b80a", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a90456-133c-4917-ab58-304d5db3444f", "created": "2026-01-27T05:13:00.646861Z", "modified": "2026-01-27T05:13:00.646861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fcfc726360791fb1e2548d0ef5a467750a6dc515b31219616b83b9f956440169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.646861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e6c9040-63f6-47ab-b201-35f018a925f9", "created": "2026-01-27T05:13:00.647673Z", "modified": "2026-01-27T05:13:00.647673Z", "relationship_type": "indicates", "source_ref": "indicator--14a90456-133c-4917-ab58-304d5db3444f", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd28485-822f-4f2b-9c94-a2312bb7737b", "created": "2026-01-27T05:13:00.647863Z", "modified": "2026-01-27T05:13:00.647863Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de577c798f72a9ecef67fe1d7408fb92764f852df2e5914de8357e7200740619']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.647863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a70e32d3-1e3f-4ebc-903e-17eea3e9af10", "created": "2026-01-27T05:13:00.648669Z", "modified": "2026-01-27T05:13:00.648669Z", "relationship_type": "indicates", "source_ref": "indicator--0fd28485-822f-4f2b-9c94-a2312bb7737b", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc92ee6-9036-4d1d-a794-82cd98c87345", "created": "2026-01-27T05:13:00.648858Z", "modified": "2026-01-27T05:13:00.648858Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='078ed0071ab1121777a13570b05e3c0fafc40bf3e2ef625975888b7dd42b495d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.648858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f4b7732-c629-44df-bab3-3d7fb680f427", "created": "2026-01-27T05:13:00.649667Z", "modified": "2026-01-27T05:13:00.649667Z", "relationship_type": "indicates", "source_ref": "indicator--ccc92ee6-9036-4d1d-a794-82cd98c87345", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e32656-e3ab-4836-989b-b6b50f9076cc", "created": "2026-01-27T05:13:00.649858Z", "modified": "2026-01-27T05:13:00.649858Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6764aa0373ee0e54a05cc977cd9fcce2b8d364a7013d613b07ae0381b0e49feb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.649858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e57237e-9a38-4ab1-82f1-afe95eaa7840", "created": "2026-01-27T05:13:00.650814Z", "modified": "2026-01-27T05:13:00.650814Z", "relationship_type": "indicates", "source_ref": "indicator--93e32656-e3ab-4836-989b-b6b50f9076cc", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c17c11-f02b-4b05-aaa0-04ece2a2895e", "created": "2026-01-27T05:13:00.65099Z", "modified": "2026-01-27T05:13:00.65099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c228b408acf05f57efe581f8996530ced61d72fc4e1e0262e286fe8d52fc6c11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.65099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bf59091-bb94-42ac-9410-c12427ad04f5", "created": "2026-01-27T05:13:00.651816Z", "modified": "2026-01-27T05:13:00.651816Z", "relationship_type": "indicates", "source_ref": "indicator--45c17c11-f02b-4b05-aaa0-04ece2a2895e", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d8158f-636d-4fec-bb58-c46fd9937ed8", "created": "2026-01-27T05:13:00.651992Z", "modified": "2026-01-27T05:13:00.651992Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='282c7b2e46f72ce844bb26f8359e34b5256800e55550c52cd912131bd7b2e423']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.651992Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0137347e-d275-40d7-933d-bbbd9e38d0ea", "created": "2026-01-27T05:13:00.652817Z", "modified": "2026-01-27T05:13:00.652817Z", "relationship_type": "indicates", "source_ref": "indicator--d5d8158f-636d-4fec-bb58-c46fd9937ed8", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd52fa46-e9a8-4340-99d3-28383b099281", "created": "2026-01-27T05:13:00.652998Z", "modified": "2026-01-27T05:13:00.652998Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dabed7f7bd653c61e7cbfd49f2d3b4eb12080189269daf2001db860dbd9de9d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.652998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--823b271a-27a9-4ddb-87cd-45a287dd9048", "created": "2026-01-27T05:13:00.65383Z", "modified": "2026-01-27T05:13:00.65383Z", "relationship_type": "indicates", "source_ref": "indicator--dd52fa46-e9a8-4340-99d3-28383b099281", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de16c850-52e4-437d-843d-83bb8fbeedf4", "created": "2026-01-27T05:13:00.654004Z", "modified": "2026-01-27T05:13:00.654004Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='109987db1430dffd3ca2fe114ee5a5a743de43b428a5853641fc89ba4250235f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.654004Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--998a0610-7646-49a6-8fc6-71ddaadea489", "created": "2026-01-27T05:13:00.654842Z", "modified": "2026-01-27T05:13:00.654842Z", "relationship_type": "indicates", "source_ref": "indicator--de16c850-52e4-437d-843d-83bb8fbeedf4", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d299fbb8-ef46-4290-93db-ad3d2ca74d5e", "created": "2026-01-27T05:13:00.655025Z", "modified": "2026-01-27T05:13:00.655025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1d6bb84d938981a3bfcee8490b02672227428ff278cee66675892d560d2c4d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.655025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab5c6a1f-6d06-4287-8d68-c253ab05b56e", "created": "2026-01-27T05:13:00.65585Z", "modified": "2026-01-27T05:13:00.65585Z", "relationship_type": "indicates", "source_ref": "indicator--d299fbb8-ef46-4290-93db-ad3d2ca74d5e", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a19e53a-603c-46ac-bdec-d019180cc22e", "created": "2026-01-27T05:13:00.656026Z", "modified": "2026-01-27T05:13:00.656026Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1ac97df184e79dffa9b13e32fe0b32131a3fd1470247bb916a549358f8cde21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.656026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b565d9e-9f2c-4697-82c0-118976d2e169", "created": "2026-01-27T05:13:00.656872Z", "modified": "2026-01-27T05:13:00.656872Z", "relationship_type": "indicates", "source_ref": "indicator--4a19e53a-603c-46ac-bdec-d019180cc22e", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d99c53a-ff0a-43bb-af73-873fc5942939", "created": "2026-01-27T05:13:00.657046Z", "modified": "2026-01-27T05:13:00.657046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2a1fe6ae32e87d095f2cfbef6e7bfc54d05a6671729c19c5965389e7417607c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.657046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77cc411f-2680-4a45-b519-7d9208cd7eff", "created": "2026-01-27T05:13:00.657885Z", "modified": "2026-01-27T05:13:00.657885Z", "relationship_type": "indicates", "source_ref": "indicator--4d99c53a-ff0a-43bb-af73-873fc5942939", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720717f1-dfb3-4125-aeda-b8c956a706ba", "created": "2026-01-27T05:13:00.658063Z", "modified": "2026-01-27T05:13:00.658063Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f05760daf6cd5c2faa86fc1bded533401fc22871720b4fba63e9f787f94dc720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.658063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd3e1582-735e-469f-83a4-54e028366311", "created": "2026-01-27T05:13:00.658946Z", "modified": "2026-01-27T05:13:00.658946Z", "relationship_type": "indicates", "source_ref": "indicator--720717f1-dfb3-4125-aeda-b8c956a706ba", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd2a3d3-51ac-40f5-9f03-88fc0200604d", "created": "2026-01-27T05:13:00.659125Z", "modified": "2026-01-27T05:13:00.659125Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1a368c93dd5827b4c0ea9594f909428110617e2f4d95dc72108b9c64aeba43b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.659125Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73733fcf-fb92-4b1a-be61-c30546723a7d", "created": "2026-01-27T05:13:00.660114Z", "modified": "2026-01-27T05:13:00.660114Z", "relationship_type": "indicates", "source_ref": "indicator--6cd2a3d3-51ac-40f5-9f03-88fc0200604d", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78b3078-6a55-47ea-9a32-ba801bddf76c", "created": "2026-01-27T05:13:00.660291Z", "modified": "2026-01-27T05:13:00.660291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5d5b3f514583e4a269a5c296af2239bdb10058dea7a11abb1edd132bc4f562c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.660291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f0ec69b-b43e-4192-a46a-87185c3297a4", "created": "2026-01-27T05:13:00.661148Z", "modified": "2026-01-27T05:13:00.661148Z", "relationship_type": "indicates", "source_ref": "indicator--f78b3078-6a55-47ea-9a32-ba801bddf76c", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a80f46b-d17c-4680-98aa-70173e349e8d", "created": "2026-01-27T05:13:00.661339Z", "modified": "2026-01-27T05:13:00.661339Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc0c9112d1722f5597800c176ed49fa4603895dd294cedf8fdebe3ace1b65fb1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.661339Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2cc0562f-2115-42c6-a816-4481ba3bdd2c", "created": "2026-01-27T05:13:00.662197Z", "modified": "2026-01-27T05:13:00.662197Z", "relationship_type": "indicates", "source_ref": "indicator--4a80f46b-d17c-4680-98aa-70173e349e8d", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cf1840-ca2f-4c7b-b1dd-e51d3de83fa4", "created": "2026-01-27T05:13:00.662373Z", "modified": "2026-01-27T05:13:00.662373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54d53ff4baf1efd654a2e3463cf551d06337146db516142aab1bee8fa901489e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.662373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bc7a40f-628e-4326-85a4-4eae15d5b76f", "created": "2026-01-27T05:13:00.663203Z", "modified": "2026-01-27T05:13:00.663203Z", "relationship_type": "indicates", "source_ref": "indicator--e1cf1840-ca2f-4c7b-b1dd-e51d3de83fa4", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dbeb98-b406-42b9-92b3-398e3051151b", "created": "2026-01-27T05:13:00.663384Z", "modified": "2026-01-27T05:13:00.663384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='70dd3c4cff86c5b0dcfdca0cdc2270fd30bf2e364c9c21316d14600154815044']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.663384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b2d943-ef48-4e6e-8d1c-ca9a459f25f7", "created": "2026-01-27T05:13:00.664208Z", "modified": "2026-01-27T05:13:00.664208Z", "relationship_type": "indicates", "source_ref": "indicator--a8dbeb98-b406-42b9-92b3-398e3051151b", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde71425-d419-4d96-93dd-febfb0e58103", "created": "2026-01-27T05:13:00.664381Z", "modified": "2026-01-27T05:13:00.664381Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db8911d08712e906a6b038de5a5c23e4ced587621a881487acbc1216bdbecb8b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.664381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--534c375c-8cbb-4cdb-afda-593ed9f1fcd8", "created": "2026-01-27T05:13:00.665216Z", "modified": "2026-01-27T05:13:00.665216Z", "relationship_type": "indicates", "source_ref": "indicator--cde71425-d419-4d96-93dd-febfb0e58103", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c1ab63-f078-453a-a9f2-4d323051f64f", "created": "2026-01-27T05:13:00.665446Z", "modified": "2026-01-27T05:13:00.665446Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='18787bb139de7c434e54cc401b1a56fb984fa0c2d07dc5fa81469f92fa7b156f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.665446Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abbd8305-4a20-42b7-b4c9-c0d335d6da95", "created": "2026-01-27T05:13:00.666294Z", "modified": "2026-01-27T05:13:00.666294Z", "relationship_type": "indicates", "source_ref": "indicator--f6c1ab63-f078-453a-a9f2-4d323051f64f", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f707920f-c11d-4487-b7c7-d2e0e603b221", "created": "2026-01-27T05:13:00.666472Z", "modified": "2026-01-27T05:13:00.666472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eea25e003c15a23d73894c5e86e1599b35f14874a084bac21665c5aa906d89cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.666472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6b2daa2-da29-4ba4-901a-8728a65e3116", "created": "2026-01-27T05:13:00.667314Z", "modified": "2026-01-27T05:13:00.667314Z", "relationship_type": "indicates", "source_ref": "indicator--f707920f-c11d-4487-b7c7-d2e0e603b221", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22cbf7f-f831-45ad-83ef-ce6a6ec23d86", "created": "2026-01-27T05:13:00.66751Z", "modified": "2026-01-27T05:13:00.66751Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fdb676f418421ef66be57bbf7f6ebdfef49a58a9b649735c85dc314c48db8c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.66751Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3cb0eb8-4034-4949-b4ce-060f9f952264", "created": "2026-01-27T05:13:00.668462Z", "modified": "2026-01-27T05:13:00.668462Z", "relationship_type": "indicates", "source_ref": "indicator--d22cbf7f-f831-45ad-83ef-ce6a6ec23d86", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a867e59d-54e9-422e-b34f-7e4ee4daced0", "created": "2026-01-27T05:13:00.668637Z", "modified": "2026-01-27T05:13:00.668637Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='65bcc5dd6d2e4b5175e8f1110a327c685d081d1fec8b2d26c562407abe334528']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.668637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26484550-de59-4dc5-9da7-41753dd76112", "created": "2026-01-27T05:13:00.669461Z", "modified": "2026-01-27T05:13:00.669461Z", "relationship_type": "indicates", "source_ref": "indicator--a867e59d-54e9-422e-b34f-7e4ee4daced0", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bada42a8-92bf-43c9-99e0-c6d434e57aa9", "created": "2026-01-27T05:13:00.669635Z", "modified": "2026-01-27T05:13:00.669635Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.avi.scbase']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.669635Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c41ea605-c969-44bc-9fed-fc0af87afe93", "created": "2026-01-27T05:13:00.67029Z", "modified": "2026-01-27T05:13:00.67029Z", "relationship_type": "indicates", "source_ref": "indicator--bada42a8-92bf-43c9-99e0-c6d434e57aa9", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329bd8af-e38d-49c2-b652-d2bc587288f9", "created": "2026-01-27T05:13:00.670464Z", "modified": "2026-01-27T05:13:00.670464Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20F092BEC76C406223A7943371A1DBBB5BF66C13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.670464Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eca83fc2-d092-47ae-be8c-7ac895adfab1", "created": "2026-01-27T05:13:00.671241Z", "modified": "2026-01-27T05:13:00.671241Z", "relationship_type": "indicates", "source_ref": "indicator--329bd8af-e38d-49c2-b652-d2bc587288f9", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bcce04-605e-40e0-b198-4dc7252ae0f0", "created": "2026-01-27T05:13:00.671414Z", "modified": "2026-01-27T05:13:00.671414Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='934A3C0DC8912C4F2F8620F666FC7621BD7B97B8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.671414Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf3365c8-e8fb-4bce-82e5-e7a4aed66189", "created": "2026-01-27T05:13:00.672184Z", "modified": "2026-01-27T05:13:00.672184Z", "relationship_type": "indicates", "source_ref": "indicator--73bcce04-605e-40e0-b198-4dc7252ae0f0", "target_ref": "malware--63bf2de1-6720-4866-865d-773afe31b7d6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--766853b9-345a-4994-a18c-b876ed2c4648", "created": "2026-01-27T05:13:00.672354Z", "modified": "2026-01-27T05:13:00.672354Z", "name": "SpyEra", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc4858a6-5012-4f78-bff6-0370ce2d8b10", "created": "2026-01-27T05:13:00.672526Z", "modified": "2026-01-27T05:13:00.672526Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.672526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ea7c517-ff52-4c69-856c-a0ee8e1967ee", "created": "2026-01-27T05:13:00.673202Z", "modified": "2026-01-27T05:13:00.673202Z", "relationship_type": "indicates", "source_ref": "indicator--bc4858a6-5012-4f78-bff6-0370ce2d8b10", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3d2adf-4038-418f-9685-b6e5f797e722", "created": "2026-01-27T05:13:00.673379Z", "modified": "2026-01-27T05:13:00.673379Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyera.postaffiliatepro.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.673379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c138f38-d271-464c-ad8c-29d7232606e6", "created": "2026-01-27T05:13:00.674123Z", "modified": "2026-01-27T05:13:00.674123Z", "relationship_type": "indicates", "source_ref": "indicator--fc3d2adf-4038-418f-9685-b6e5f797e722", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c7e269-830d-4f65-852c-f4eaac931d98", "created": "2026-01-27T05:13:00.674301Z", "modified": "2026-01-27T05:13:00.674301Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyera.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.674301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3e46981-9dc0-4186-b38a-12b7709c0037", "created": "2026-01-27T05:13:00.674985Z", "modified": "2026-01-27T05:13:00.674985Z", "relationship_type": "indicates", "source_ref": "indicator--a1c7e269-830d-4f65-852c-f4eaac931d98", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a68920a-b863-4e2d-8618-3c23b5c9daed", "created": "2026-01-27T05:13:00.675158Z", "modified": "2026-01-27T05:13:00.675158Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.spylogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.675158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bed8171a-fc16-4ad2-afe4-780ca2ddc207", "created": "2026-01-27T05:13:00.67588Z", "modified": "2026-01-27T05:13:00.67588Z", "relationship_type": "indicates", "source_ref": "indicator--2a68920a-b863-4e2d-8618-3c23b5c9daed", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a168b42-ca14-4f84-83ca-cffa788d407f", "created": "2026-01-27T05:13:00.676064Z", "modified": "2026-01-27T05:13:00.676064Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='support.spyera.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.676064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c789f337-2498-48c1-9698-5ef8236aa7cf", "created": "2026-01-27T05:13:00.676884Z", "modified": "2026-01-27T05:13:00.676884Z", "relationship_type": "indicates", "source_ref": "indicator--6a168b42-ca14-4f84-83ca-cffa788d407f", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2ddad4-6cca-41e9-86fd-4b0ae574dfcc", "created": "2026-01-27T05:13:00.677064Z", "modified": "2026-01-27T05:13:00.677064Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='affiliate.spyera.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.677064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11b9edf3-e7d6-4b32-8da6-8309f8bb9500", "created": "2026-01-27T05:13:00.677735Z", "modified": "2026-01-27T05:13:00.677735Z", "relationship_type": "indicates", "source_ref": "indicator--ae2ddad4-6cca-41e9-86fd-4b0ae574dfcc", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2173714-d136-4285-a4a8-200903af4940", "created": "2026-01-27T05:13:00.677936Z", "modified": "2026-01-27T05:13:00.677936Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wSpyEra']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.677936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15a6bc10-b9e6-4cb3-94dd-762bc2faa1ef", "created": "2026-01-27T05:13:00.678701Z", "modified": "2026-01-27T05:13:00.678701Z", "relationship_type": "indicates", "source_ref": "indicator--f2173714-d136-4285-a4a8-200903af4940", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9f4b7a-8201-4a1d-ae8d-0aba651c6830", "created": "2026-01-27T05:13:00.678912Z", "modified": "2026-01-27T05:13:00.678912Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='813A3AD37D87AA36120DFEC64146C311DB5F4CA9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.678912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b03598fa-0533-466e-be55-03dcddea3130", "created": "2026-01-27T05:13:00.679691Z", "modified": "2026-01-27T05:13:00.679691Z", "relationship_type": "indicates", "source_ref": "indicator--cc9f4b7a-8201-4a1d-ae8d-0aba651c6830", "target_ref": "malware--766853b9-345a-4994-a18c-b876ed2c4648"}, {"type": "malware", "spec_version": "2.1", "id": "malware--2fccfee1-3dbc-4246-95f9-c7054aac46e5", "created": "2026-01-27T05:13:00.679888Z", "modified": "2026-01-27T05:13:00.679888Z", "name": "AntiFurtoDroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee60660-8fb4-47d2-bb8e-faf8e5e60981", "created": "2026-01-27T05:13:00.680063Z", "modified": "2026-01-27T05:13:00.680063Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.antifurtodroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.680063Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--239183c6-6555-445c-b244-27744617fe6d", "created": "2026-01-27T05:13:00.680757Z", "modified": "2026-01-27T05:13:00.680757Z", "relationship_type": "indicates", "source_ref": "indicator--9ee60660-8fb4-47d2-bb8e-faf8e5e60981", "target_ref": "malware--2fccfee1-3dbc-4246-95f9-c7054aac46e5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f626ccf-a784-4f49-8edf-9f30dc3faf89", "created": "2026-01-27T05:13:00.680936Z", "modified": "2026-01-27T05:13:00.680936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='antifurtodroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.680936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73955689-c465-4e50-8f26-da99be0fdcc2", "created": "2026-01-27T05:13:00.681618Z", "modified": "2026-01-27T05:13:00.681618Z", "relationship_type": "indicates", "source_ref": "indicator--6f626ccf-a784-4f49-8edf-9f30dc3faf89", "target_ref": "malware--2fccfee1-3dbc-4246-95f9-c7054aac46e5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725c7c3a-9086-40b8-8361-5e5f4766dc2c", "created": "2026-01-27T05:13:00.681812Z", "modified": "2026-01-27T05:13:00.681812Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.maceda.android.antifurtow']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.681812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a04d3a8-485e-4ac9-bb20-5d7faa2ab63f", "created": "2026-01-27T05:13:00.68248Z", "modified": "2026-01-27T05:13:00.68248Z", "relationship_type": "indicates", "source_ref": "indicator--725c7c3a-9086-40b8-8361-5e5f4766dc2c", "target_ref": "malware--2fccfee1-3dbc-4246-95f9-c7054aac46e5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd75e8b-980b-4c29-a425-e93aa6b797c4", "created": "2026-01-27T05:13:00.682652Z", "modified": "2026-01-27T05:13:00.682652Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CE94B8512390676F62F3EC61BECEDDDE9AB5519F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.682652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0f3d249-3b9d-4474-bb08-13f3e120437c", "created": "2026-01-27T05:13:00.683457Z", "modified": "2026-01-27T05:13:00.683457Z", "relationship_type": "indicates", "source_ref": "indicator--bbd75e8b-980b-4c29-a425-e93aa6b797c4", "target_ref": "malware--2fccfee1-3dbc-4246-95f9-c7054aac46e5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5", "created": "2026-01-27T05:13:00.68363Z", "modified": "2026-01-27T05:13:00.68363Z", "name": "CallSMSTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03a5f6a-a158-4989-b45a-46814e4ff485", "created": "2026-01-27T05:13:00.68382Z", "modified": "2026-01-27T05:13:00.68382Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.68382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad962b37-9417-454b-a476-a75ce728a28d", "created": "2026-01-27T05:13:00.68451Z", "modified": "2026-01-27T05:13:00.68451Z", "relationship_type": "indicates", "source_ref": "indicator--d03a5f6a-a158-4989-b45a-46814e4ff485", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c4eb0e-3af6-435f-949f-39fd2ac4a02f", "created": "2026-01-27T05:13:00.684685Z", "modified": "2026-01-27T05:13:00.684685Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='messages01.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.684685Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8275bcf-f941-4aa5-aa39-610f4fc3d5c9", "created": "2026-01-27T05:13:00.685529Z", "modified": "2026-01-27T05:13:00.685529Z", "relationship_type": "indicates", "source_ref": "indicator--a0c4eb0e-3af6-435f-949f-39fd2ac4a02f", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c41469-67af-44f1-9feb-6ff8e3558875", "created": "2026-01-27T05:13:00.685704Z", "modified": "2026-01-27T05:13:00.685704Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='messages02.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.685704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e31a1cee-0f3d-4b7f-bd42-8057f2a29376", "created": "2026-01-27T05:13:00.686416Z", "modified": "2026-01-27T05:13:00.686416Z", "relationship_type": "indicates", "source_ref": "indicator--74c41469-67af-44f1-9feb-6ff8e3558875", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f29e12-c9c7-4e16-92af-4beedeb2c395", "created": "2026-01-27T05:13:00.686596Z", "modified": "2026-01-27T05:13:00.686596Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='staging.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.686596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c03cf92-7f95-425f-b9b4-998fc8a63d2d", "created": "2026-01-27T05:13:00.687291Z", "modified": "2026-01-27T05:13:00.687291Z", "relationship_type": "indicates", "source_ref": "indicator--c8f29e12-c9c7-4e16-92af-4beedeb2c395", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b8b7ed-eff7-4236-b5c6-2a1fe7d3c702", "created": "2026-01-27T05:13:00.68748Z", "modified": "2026-01-27T05:13:00.68748Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='callsmstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.68748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96ea891b-6345-4b7e-92b4-5a2c27cd89f7", "created": "2026-01-27T05:13:00.688168Z", "modified": "2026-01-27T05:13:00.688168Z", "relationship_type": "indicates", "source_ref": "indicator--e4b8b7ed-eff7-4236-b5c6-2a1fe7d3c702", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83a780f-3bb9-413c-8de2-d62348c8eb9a", "created": "2026-01-27T05:13:00.688349Z", "modified": "2026-01-27T05:13:00.688349Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hiddensmstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.688349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f02021d0-0d18-4ee4-bc27-c092b1972c9e", "created": "2026-01-27T05:13:00.689046Z", "modified": "2026-01-27T05:13:00.689046Z", "relationship_type": "indicates", "source_ref": "indicator--e83a780f-3bb9-413c-8de2-d62348c8eb9a", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369e3d9a-e185-4dee-81e9-e5a77c7c2a9b", "created": "2026-01-27T05:13:00.689219Z", "modified": "2026-01-27T05:13:00.689219Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hiddensystemhealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.689219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--604926f2-522d-40f7-ae3e-755161e1cee1", "created": "2026-01-27T05:13:00.690059Z", "modified": "2026-01-27T05:13:00.690059Z", "relationship_type": "indicates", "source_ref": "indicator--369e3d9a-e185-4dee-81e9-e5a77c7c2a9b", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b1f0a5-f6d7-4c16-822c-f35352be40a0", "created": "2026-01-27T05:13:00.690277Z", "modified": "2026-01-27T05:13:00.690277Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='registrations.smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.690277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8f4298b-0bd6-4e13-a2bf-ceaec1dcd8d2", "created": "2026-01-27T05:13:00.691047Z", "modified": "2026-01-27T05:13:00.691047Z", "relationship_type": "indicates", "source_ref": "indicator--b6b1f0a5-f6d7-4c16-822c-f35352be40a0", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feda92c-18fc-4c82-b5b6-eeeece9720bb", "created": "2026-01-27T05:13:00.691224Z", "modified": "2026-01-27T05:13:00.691224Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.691224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--232eb75f-5e1a-4956-b30f-8d044c583d68", "created": "2026-01-27T05:13:00.69191Z", "modified": "2026-01-27T05:13:00.69191Z", "relationship_type": "indicates", "source_ref": "indicator--2feda92c-18fc-4c82-b5b6-eeeece9720bb", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d796117-66c3-4a70-9233-c2348273b659", "created": "2026-01-27T05:13:00.692085Z", "modified": "2026-01-27T05:13:00.692085Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smstrackerweb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.692085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56b701d9-b933-4453-bc97-999d697c89dd", "created": "2026-01-27T05:13:00.692767Z", "modified": "2026-01-27T05:13:00.692767Z", "relationship_type": "indicates", "source_ref": "indicator--6d796117-66c3-4a70-9233-c2348273b659", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7760c5-f083-4530-8902-5203f737f60c", "created": "2026-01-27T05:13:00.692943Z", "modified": "2026-01-27T05:13:00.692943Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.hiddensmstracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.692943Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18ed71a5-7469-4cb0-aaab-fe6fd20f9159", "created": "2026-01-27T05:13:00.69377Z", "modified": "2026-01-27T05:13:00.69377Z", "relationship_type": "indicates", "source_ref": "indicator--4a7760c5-f083-4530-8902-5203f737f60c", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9be386a-df4e-4023-b335-a6c0450b25aa", "created": "2026-01-27T05:13:00.693947Z", "modified": "2026-01-27T05:13:00.693947Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.hiddensystemhealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.693947Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b056ac1f-7233-4e07-8e16-b0f39b8fc303", "created": "2026-01-27T05:13:00.694622Z", "modified": "2026-01-27T05:13:00.694622Z", "relationship_type": "indicates", "source_ref": "indicator--b9be386a-df4e-4023-b335-a6c0450b25aa", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287ed6c2-5879-4bb3-889d-329ffe0e335b", "created": "2026-01-27T05:13:00.694813Z", "modified": "2026-01-27T05:13:00.694813Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.smstrackerweb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.694813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b5f1677-c1b0-41b3-88ab-b52c6ba524a8", "created": "2026-01-27T05:13:00.695484Z", "modified": "2026-01-27T05:13:00.695484Z", "relationship_type": "indicates", "source_ref": "indicator--287ed6c2-5879-4bb3-889d-329ffe0e335b", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0804a2-8da2-4bd6-a957-37e2dfce6c57", "created": "2026-01-27T05:13:00.69566Z", "modified": "2026-01-27T05:13:00.69566Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gcm_call_sms_tracker.updated']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.69566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c6f3681-66d3-4919-8b83-b37699259023", "created": "2026-01-27T05:13:00.696351Z", "modified": "2026-01-27T05:13:00.696351Z", "relationship_type": "indicates", "source_ref": "indicator--5e0804a2-8da2-4bd6-a957-37e2dfce6c57", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946595ca-131e-487e-80e1-e05b0764fa5d", "created": "2026-01-27T05:13:00.696524Z", "modified": "2026-01-27T05:13:00.696524Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gizmoquip.smstracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.696524Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94fbfb9e-39f7-4a32-bd3b-2ee99ef191b0", "created": "2026-01-27T05:13:00.697219Z", "modified": "2026-01-27T05:13:00.697219Z", "relationship_type": "indicates", "source_ref": "indicator--946595ca-131e-487e-80e1-e05b0764fa5d", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3509cf78-3dc7-423b-9fb3-c7df2c63fd4e", "created": "2026-01-27T05:13:00.697399Z", "modified": "2026-01-27T05:13:00.697399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0C01AEB7346C700D02613EBA513BD40E87A182F8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.697399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f41d732-16bc-4826-87ea-50034cd25770", "created": "2026-01-27T05:13:00.698193Z", "modified": "2026-01-27T05:13:00.698193Z", "relationship_type": "indicates", "source_ref": "indicator--3509cf78-3dc7-423b-9fb3-c7df2c63fd4e", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607e1a17-7ad1-4af4-a366-253c1a352632", "created": "2026-01-27T05:13:00.698369Z", "modified": "2026-01-27T05:13:00.698369Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8F576BEEB71EA74E5F27764917BFF5B508017B68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.698369Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--692c6310-7a39-48c4-b963-a36d7068bab5", "created": "2026-01-27T05:13:00.699159Z", "modified": "2026-01-27T05:13:00.699159Z", "relationship_type": "indicates", "source_ref": "indicator--607e1a17-7ad1-4af4-a366-253c1a352632", "target_ref": "malware--18c05aa3-28d0-4534-a5cd-b71c569625a5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324", "created": "2026-01-27T05:13:00.699334Z", "modified": "2026-01-27T05:13:00.699334Z", "name": "AiSpyer", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e60fe7d-8243-4ef5-a896-dbb3bde946aa", "created": "2026-01-27T05:13:00.699513Z", "modified": "2026-01-27T05:13:00.699513Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ioi.life']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.699513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b15f46c8-ebb2-4907-89ac-c875690ba389", "created": "2026-01-27T05:13:00.700199Z", "modified": "2026-01-27T05:13:00.700199Z", "relationship_type": "indicates", "source_ref": "indicator--8e60fe7d-8243-4ef5-a896-dbb3bde946aa", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf5ab58-6254-4db2-b732-96b1aa53a68c", "created": "2026-01-27T05:13:00.700373Z", "modified": "2026-01-27T05:13:00.700373Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.corn-cob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.700373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d37d9691-0bff-430e-9dad-9e81b489c1e0", "created": "2026-01-27T05:13:00.701068Z", "modified": "2026-01-27T05:13:00.701068Z", "relationship_type": "indicates", "source_ref": "indicator--acf5ab58-6254-4db2-b732-96b1aa53a68c", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bb306c-a944-4c4e-b6b3-7c9dbb4b7188", "created": "2026-01-27T05:13:00.701243Z", "modified": "2026-01-27T05:13:00.701243Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='corn-cob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.701243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42e9c739-184c-460b-9b26-3b60e958a823", "created": "2026-01-27T05:13:00.702044Z", "modified": "2026-01-27T05:13:00.702044Z", "relationship_type": "indicates", "source_ref": "indicator--15bb306c-a944-4c4e-b6b3-7c9dbb4b7188", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e73be0-5c88-4bc9-b187-f48b3822394c", "created": "2026-01-27T05:13:00.702221Z", "modified": "2026-01-27T05:13:00.702221Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.corn-cob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.702221Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e3f01ea-56a5-460b-81ee-0d3a1ef4bf2b", "created": "2026-01-27T05:13:00.702905Z", "modified": "2026-01-27T05:13:00.702905Z", "relationship_type": "indicates", "source_ref": "indicator--82e73be0-5c88-4bc9-b187-f48b3822394c", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21991714-363b-4c40-8b2a-a17b631b6243", "created": "2026-01-27T05:13:00.703083Z", "modified": "2026-01-27T05:13:00.703083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracksp.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.703083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e940ddec-a74f-4f12-9bb8-246956c2a825", "created": "2026-01-27T05:13:00.703763Z", "modified": "2026-01-27T05:13:00.703763Z", "relationship_type": "indicates", "source_ref": "indicator--21991714-363b-4c40-8b2a-a17b631b6243", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd6694a-1bcc-443f-9305-93a14cf428c7", "created": "2026-01-27T05:13:00.703941Z", "modified": "2026-01-27T05:13:00.703941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.aispyer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.703941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfeda94d-51e4-48aa-8b80-413408713d27", "created": "2026-01-27T05:13:00.704605Z", "modified": "2026-01-27T05:13:00.704605Z", "relationship_type": "indicates", "source_ref": "indicator--9cd6694a-1bcc-443f-9305-93a14cf428c7", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6634d54-97b9-4208-97aa-17de653c4121", "created": "2026-01-27T05:13:00.704794Z", "modified": "2026-01-27T05:13:00.704794Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracksp-7743c.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.704794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c57b0a50-d388-40d0-ac3c-67c4313ec636", "created": "2026-01-27T05:13:00.705486Z", "modified": "2026-01-27T05:13:00.705486Z", "relationship_type": "indicates", "source_ref": "indicator--f6634d54-97b9-4208-97aa-17de653c4121", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7256284c-6712-48c8-9791-78867f01f870", "created": "2026-01-27T05:13:00.705694Z", "modified": "2026-01-27T05:13:00.705694Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.ioi.life']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.705694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b210c54-5890-4cd7-9552-ba6a693b7c16", "created": "2026-01-27T05:13:00.706384Z", "modified": "2026-01-27T05:13:00.706384Z", "relationship_type": "indicates", "source_ref": "indicator--7256284c-6712-48c8-9791-78867f01f870", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41da1f49-aff8-4516-850c-4bf467bc9dcf", "created": "2026-01-27T05:13:00.706558Z", "modified": "2026-01-27T05:13:00.706558Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aivideoedit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.706558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb549711-d762-4625-add9-65d404b5cf1b", "created": "2026-01-27T05:13:00.707244Z", "modified": "2026-01-27T05:13:00.707244Z", "relationship_type": "indicates", "source_ref": "indicator--41da1f49-aff8-4516-850c-4bf467bc9dcf", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab67a553-3062-4229-9523-b3ccc6cb8f24", "created": "2026-01-27T05:13:00.707424Z", "modified": "2026-01-27T05:13:00.707424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aispyer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.707424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--582a3972-6720-4a7b-93b1-70b6ae42b227", "created": "2026-01-27T05:13:00.708109Z", "modified": "2026-01-27T05:13:00.708109Z", "relationship_type": "indicates", "source_ref": "indicator--ab67a553-3062-4229-9523-b3ccc6cb8f24", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a91c23-6f68-4b84-b804-41a3fb4b5519", "created": "2026-01-27T05:13:00.708288Z", "modified": "2026-01-27T05:13:00.708288Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.aispyer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.708288Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--693705ea-e486-4141-a3e8-27af63ec623b", "created": "2026-01-27T05:13:00.708969Z", "modified": "2026-01-27T05:13:00.708969Z", "relationship_type": "indicates", "source_ref": "indicator--f7a91c23-6f68-4b84-b804-41a3fb4b5519", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d937d0-e2f9-4fa8-820b-5fe0f8a5b304", "created": "2026-01-27T05:13:00.70915Z", "modified": "2026-01-27T05:13:00.70915Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aif.tracksp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.70915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6637806-34e8-470d-bbd8-cc7f5ccf57bb", "created": "2026-01-27T05:13:00.70994Z", "modified": "2026-01-27T05:13:00.70994Z", "relationship_type": "indicates", "source_ref": "indicator--68d937d0-e2f9-4fa8-820b-5fe0f8a5b304", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3b1d06-2fc1-4796-82d2-35f5d47a4d93", "created": "2026-01-27T05:13:00.710122Z", "modified": "2026-01-27T05:13:00.710122Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F038CD90AFEA9C037A801FFAE67DF55A870879C4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.710122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b076c06c-ca22-418e-a4ff-9bc9ff3964ff", "created": "2026-01-27T05:13:00.710919Z", "modified": "2026-01-27T05:13:00.710919Z", "relationship_type": "indicates", "source_ref": "indicator--1b3b1d06-2fc1-4796-82d2-35f5d47a4d93", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f64cc0-649e-4f17-b9ab-1a7d09337f00", "created": "2026-01-27T05:13:00.711098Z", "modified": "2026-01-27T05:13:00.711098Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BCA2BCB87F6E28FB403CED643311B135CA0DC0A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.711098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd62b8f8-359f-4fe2-a613-5dc16b0ea946", "created": "2026-01-27T05:13:00.711879Z", "modified": "2026-01-27T05:13:00.711879Z", "relationship_type": "indicates", "source_ref": "indicator--52f64cc0-649e-4f17-b9ab-1a7d09337f00", "target_ref": "malware--f5ccc4b8-6485-4faf-bf0c-298ec8167324"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb", "created": "2026-01-27T05:13:00.712053Z", "modified": "2026-01-27T05:13:00.712053Z", "name": "SpyToApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fb1154-834d-4911-bf55-7e44ec425b54", "created": "2026-01-27T05:13:00.71223Z", "modified": "2026-01-27T05:13:00.71223Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.71223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea432eff-4f34-4e39-9f48-6b02fd86383a", "created": "2026-01-27T05:13:00.712921Z", "modified": "2026-01-27T05:13:00.712921Z", "relationship_type": "indicates", "source_ref": "indicator--d3fb1154-834d-4911-bf55-7e44ec425b54", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decbc362-3228-476b-819c-81cb41d4f3d9", "created": "2026-01-27T05:13:00.713099Z", "modified": "2026-01-27T05:13:00.713099Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk01.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.713099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1219edf0-281d-4236-9be6-3dce6c99d148", "created": "2026-01-27T05:13:00.713783Z", "modified": "2026-01-27T05:13:00.713783Z", "relationship_type": "indicates", "source_ref": "indicator--decbc362-3228-476b-819c-81cb41d4f3d9", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d5e377-37e0-46da-8f74-eef5c145d80c", "created": "2026-01-27T05:13:00.713963Z", "modified": "2026-01-27T05:13:00.713963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk02.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.713963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35ec9be5-506e-42af-8482-d9b89040020f", "created": "2026-01-27T05:13:00.714629Z", "modified": "2026-01-27T05:13:00.714629Z", "relationship_type": "indicates", "source_ref": "indicator--27d5e377-37e0-46da-8f74-eef5c145d80c", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac6e710-6f4d-4927-877b-64ddf40618f4", "created": "2026-01-27T05:13:00.714822Z", "modified": "2026-01-27T05:13:00.714822Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk03.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.714822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d4856bf-21c8-44a9-9450-85cf33a11331", "created": "2026-01-27T05:13:00.715503Z", "modified": "2026-01-27T05:13:00.715503Z", "relationship_type": "indicates", "source_ref": "indicator--5ac6e710-6f4d-4927-877b-64ddf40618f4", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b75e6-ac6c-4899-a411-ba1333355ba7", "created": "2026-01-27T05:13:00.715676Z", "modified": "2026-01-27T05:13:00.715676Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk04.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.715676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0952e496-dbbd-4974-845a-5b93681dfb59", "created": "2026-01-27T05:13:00.716374Z", "modified": "2026-01-27T05:13:00.716374Z", "relationship_type": "indicates", "source_ref": "indicator--2b5b75e6-ac6c-4899-a411-ba1333355ba7", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b915e51-318b-419f-bd2f-2d0982fb97f2", "created": "2026-01-27T05:13:00.716549Z", "modified": "2026-01-27T05:13:00.716549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='downapk.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.716549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23c4ebf8-b80a-4cb2-aab2-abfccd8349ba", "created": "2026-01-27T05:13:00.717242Z", "modified": "2026-01-27T05:13:00.717242Z", "relationship_type": "indicates", "source_ref": "indicator--1b915e51-318b-419f-bd2f-2d0982fb97f2", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8fbd76-07fd-420c-b4bb-40d57f832ea5", "created": "2026-01-27T05:13:00.717417Z", "modified": "2026-01-27T05:13:00.717417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='services.spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.717417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e15a330f-98ea-4f9d-8f42-ba2762c85207", "created": "2026-01-27T05:13:00.71822Z", "modified": "2026-01-27T05:13:00.71822Z", "relationship_type": "indicates", "source_ref": "indicator--6c8fbd76-07fd-420c-b4bb-40d57f832ea5", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478909a6-38c4-45f5-934a-2376d5765c39", "created": "2026-01-27T05:13:00.718395Z", "modified": "2026-01-27T05:13:00.718395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytoapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.718395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--996c7b22-8bca-45db-bb7e-6291f069ea8f", "created": "2026-01-27T05:13:00.719077Z", "modified": "2026-01-27T05:13:00.719077Z", "relationship_type": "indicates", "source_ref": "indicator--478909a6-38c4-45f5-934a-2376d5765c39", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76742903-405c-43d4-8315-0447bc6818e6", "created": "2026-01-27T05:13:00.719252Z", "modified": "2026-01-27T05:13:00.719252Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spytoapp.system']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.719252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b34493f6-1003-403d-a936-eb1fef779eff", "created": "2026-01-27T05:13:00.719915Z", "modified": "2026-01-27T05:13:00.719915Z", "relationship_type": "indicates", "source_ref": "indicator--76742903-405c-43d4-8315-0447bc6818e6", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5c9ab8-a5ef-4e79-81dc-cf92358d4142", "created": "2026-01-27T05:13:00.720091Z", "modified": "2026-01-27T05:13:00.720091Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6F93929AB60AC760000E873CD7C56BA79A9E6CAD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.720091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbc5508c-cd11-4130-9522-61d4ceb3352d", "created": "2026-01-27T05:13:00.720861Z", "modified": "2026-01-27T05:13:00.720861Z", "relationship_type": "indicates", "source_ref": "indicator--1a5c9ab8-a5ef-4e79-81dc-cf92358d4142", "target_ref": "malware--e38df753-00fb-46ac-a04a-58a8332a5ecb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--08210ab7-5325-410f-8cb5-44603ede35eb", "created": "2026-01-27T05:13:00.721033Z", "modified": "2026-01-27T05:13:00.721033Z", "name": "BlurSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3862a38-f430-4535-be30-ef168c92bad9", "created": "2026-01-27T05:13:00.72121Z", "modified": "2026-01-27T05:13:00.72121Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp-8916f.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.72121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90b87a48-f738-46ff-baf5-8266a38c07f5", "created": "2026-01-27T05:13:00.721972Z", "modified": "2026-01-27T05:13:00.721972Z", "relationship_type": "indicates", "source_ref": "indicator--a3862a38-f430-4535-be30-ef168c92bad9", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fbe2bf-741f-45ef-99d5-d9703e2db68b", "created": "2026-01-27T05:13:00.722149Z", "modified": "2026-01-27T05:13:00.722149Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='blurspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.722149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49d45794-9a31-487c-971b-21397ed5ea75", "created": "2026-01-27T05:13:00.722823Z", "modified": "2026-01-27T05:13:00.722823Z", "relationship_type": "indicates", "source_ref": "indicator--02fbe2bf-741f-45ef-99d5-d9703e2db68b", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732d5374-ebb9-4153-949d-44907bd277d3", "created": "2026-01-27T05:13:00.723014Z", "modified": "2026-01-27T05:13:00.723014Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='8916f.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.723014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d462b34-5d0c-4677-86f4-ef95f60d53e7", "created": "2026-01-27T05:13:00.723716Z", "modified": "2026-01-27T05:13:00.723716Z", "relationship_type": "indicates", "source_ref": "indicator--732d5374-ebb9-4153-949d-44907bd277d3", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a32329-65b5-4f86-bc88-ad45204a2fa5", "created": "2026-01-27T05:13:00.723907Z", "modified": "2026-01-27T05:13:00.723907Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.blurspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.723907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4be98a7c-a8eb-49e9-b7e1-83ed9a160136", "created": "2026-01-27T05:13:00.724575Z", "modified": "2026-01-27T05:13:00.724575Z", "relationship_type": "indicates", "source_ref": "indicator--e4a32329-65b5-4f86-bc88-ad45204a2fa5", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba58a3a-026c-4f06-b78f-bc31929d8892", "created": "2026-01-27T05:13:00.724762Z", "modified": "2026-01-27T05:13:00.724762Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='blurspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.724762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c629adfc-f477-484b-bc8f-54aa49946305", "created": "2026-01-27T05:13:00.725436Z", "modified": "2026-01-27T05:13:00.725436Z", "relationship_type": "indicates", "source_ref": "indicator--fba58a3a-026c-4f06-b78f-bc31929d8892", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccad819c-393c-4c6f-a386-4d21e16cea24", "created": "2026-01-27T05:13:00.725608Z", "modified": "2026-01-27T05:13:00.725608Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xoxospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.725608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59da462e-e793-4443-b33e-a1e78921e281", "created": "2026-01-27T05:13:00.726782Z", "modified": "2026-01-27T05:13:00.726782Z", "relationship_type": "indicates", "source_ref": "indicator--ccad819c-393c-4c6f-a386-4d21e16cea24", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d1360d-fab3-49ce-990f-8f5a6372e542", "created": "2026-01-27T05:13:00.726967Z", "modified": "2026-01-27T05:13:00.726967Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.saloomughal.spyapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.726967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53b8c3f1-294d-4ed7-b27a-0d6f298e577d", "created": "2026-01-27T05:13:00.727632Z", "modified": "2026-01-27T05:13:00.727632Z", "relationship_type": "indicates", "source_ref": "indicator--46d1360d-fab3-49ce-990f-8f5a6372e542", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fdbdc3-42f1-409d-a81c-d33199566fe3", "created": "2026-01-27T05:13:00.727825Z", "modified": "2026-01-27T05:13:00.727825Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4CACA12EB37B7A7F07AE380C7E1741D2C36531DF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.727825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba2f5dbf-f776-4a34-adc8-e7ca90c911b9", "created": "2026-01-27T05:13:00.728586Z", "modified": "2026-01-27T05:13:00.728586Z", "relationship_type": "indicates", "source_ref": "indicator--94fdbdc3-42f1-409d-a81c-d33199566fe3", "target_ref": "malware--08210ab7-5325-410f-8cb5-44603ede35eb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d", "created": "2026-01-27T05:13:00.728774Z", "modified": "2026-01-27T05:13:00.728774Z", "name": "AppMia", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b965f55d-8e6f-49c3-a3e1-6bd0e95b5a04", "created": "2026-01-27T05:13:00.728948Z", "modified": "2026-01-27T05:13:00.728948Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tr.appmia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.728948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dff0175-a920-4d76-8f4e-d532253cc52b", "created": "2026-01-27T05:13:00.729618Z", "modified": "2026-01-27T05:13:00.729618Z", "relationship_type": "indicates", "source_ref": "indicator--b965f55d-8e6f-49c3-a3e1-6bd0e95b5a04", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660981af-8493-4e2d-82de-48ee6ae3a7e3", "created": "2026-01-27T05:13:00.72981Z", "modified": "2026-01-27T05:13:00.72981Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.72981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3ef8b6d-770f-4b8b-93cf-3e549560cb74", "created": "2026-01-27T05:13:00.730468Z", "modified": "2026-01-27T05:13:00.730468Z", "relationship_type": "indicates", "source_ref": "indicator--660981af-8493-4e2d-82de-48ee6ae3a7e3", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62fdd81-c6fe-45c9-bbda-2b6ee578025b", "created": "2026-01-27T05:13:00.730642Z", "modified": "2026-01-27T05:13:00.730642Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.com.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.730642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29985e85-1184-485f-ad88-70f987101b91", "created": "2026-01-27T05:13:00.731333Z", "modified": "2026-01-27T05:13:00.731333Z", "relationship_type": "indicates", "source_ref": "indicator--c62fdd81-c6fe-45c9-bbda-2b6ee578025b", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317d78df-5ec1-4505-a437-d4a1c6818c70", "created": "2026-01-27T05:13:00.731506Z", "modified": "2026-01-27T05:13:00.731506Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.731506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba3bf3bf-6e18-416b-8a11-1cc113e048d3", "created": "2026-01-27T05:13:00.732184Z", "modified": "2026-01-27T05:13:00.732184Z", "relationship_type": "indicates", "source_ref": "indicator--317d78df-5ec1-4505-a437-d4a1c6818c70", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9ed9ea8-d39e-4bf9-9e68-5c325ee8a6c4", "created": "2026-01-27T05:13:00.732358Z", "modified": "2026-01-27T05:13:00.732358Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='appmia.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.732358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1868154d-6d91-4969-a00b-51947c4a035d", "created": "2026-01-27T05:13:00.733021Z", "modified": "2026-01-27T05:13:00.733021Z", "relationship_type": "indicates", "source_ref": "indicator--c9ed9ea8-d39e-4bf9-9e68-5c325ee8a6c4", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ccedda-6d31-41cf-8791-c79d6bb638cc", "created": "2026-01-27T05:13:00.733193Z", "modified": "2026-01-27T05:13:00.733193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.appmia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.733193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--307506b3-dada-47b7-92ad-f88c06cd0ad7", "created": "2026-01-27T05:13:00.73389Z", "modified": "2026-01-27T05:13:00.73389Z", "relationship_type": "indicates", "source_ref": "indicator--f5ccedda-6d31-41cf-8791-c79d6bb638cc", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c39612-127a-47c7-ae15-ee78d0fcd32a", "created": "2026-01-27T05:13:00.734065Z", "modified": "2026-01-27T05:13:00.734065Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.system.devicelogs']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.734065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--262dc4bb-6aea-4aff-addc-5b771038a49d", "created": "2026-01-27T05:13:00.734863Z", "modified": "2026-01-27T05:13:00.734863Z", "relationship_type": "indicates", "source_ref": "indicator--b2c39612-127a-47c7-ae15-ee78d0fcd32a", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd6a913-1e4c-4625-b40c-d3db2e006459", "created": "2026-01-27T05:13:00.73504Z", "modified": "2026-01-27T05:13:00.73504Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C51C36FE4F1DFC0C5B8CD55F74773135C1C1E1E5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.73504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7c32e06-eeff-4a82-83c1-e587ff7c071d", "created": "2026-01-27T05:13:00.735826Z", "modified": "2026-01-27T05:13:00.735826Z", "relationship_type": "indicates", "source_ref": "indicator--2cd6a913-1e4c-4625-b40c-d3db2e006459", "target_ref": "malware--0ab7eeb2-a56e-428b-bf68-a9e50369817d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--63f179ff-28b3-4e93-a1d8-bd8ca8f1f853", "created": "2026-01-27T05:13:00.736004Z", "modified": "2026-01-27T05:13:00.736004Z", "name": "SecretCamRecorder", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b567ae-9aa4-40a9-b1e3-e764f52eda1b", "created": "2026-01-27T05:13:00.736174Z", "modified": "2026-01-27T05:13:00.736174Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tools.secretcamcorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.736174Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4afc6145-d735-4b99-8ceb-87cad0253579", "created": "2026-01-27T05:13:00.736845Z", "modified": "2026-01-27T05:13:00.736845Z", "relationship_type": "indicates", "source_ref": "indicator--17b567ae-9aa4-40a9-b1e3-e764f52eda1b", "target_ref": "malware--63f179ff-28b3-4e93-a1d8-bd8ca8f1f853"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024", "created": "2026-01-27T05:13:00.737023Z", "modified": "2026-01-27T05:13:00.737023Z", "name": "Unisafe", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ebc1a1c-eb60-4a65-8d0a-0bf4667c778a", "created": "2026-01-27T05:13:00.73719Z", "modified": "2026-01-27T05:13:00.73719Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a342f.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.73719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7728e520-92a3-4c02-b300-74e288e5e49a", "created": "2026-01-27T05:13:00.737878Z", "modified": "2026-01-27T05:13:00.737878Z", "relationship_type": "indicates", "source_ref": "indicator--1ebc1a1c-eb60-4a65-8d0a-0bf4667c778a", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc208bb2-a364-493a-9415-9b5cd9597b23", "created": "2026-01-27T05:13:00.738054Z", "modified": "2026-01-27T05:13:00.738054Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='unisafe-a342f.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.738054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fdb74d9-4e25-49b8-a25f-0ee97f25e824", "created": "2026-01-27T05:13:00.738768Z", "modified": "2026-01-27T05:13:00.738768Z", "relationship_type": "indicates", "source_ref": "indicator--bc208bb2-a364-493a-9415-9b5cd9597b23", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7402417b-459e-427d-a901-92413f21e28a", "created": "2026-01-27T05:13:00.738957Z", "modified": "2026-01-27T05:13:00.738957Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='usafe-ca594.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.738957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--148292f3-7345-4860-9e1b-0e4c332f5083", "created": "2026-01-27T05:13:00.739646Z", "modified": "2026-01-27T05:13:00.739646Z", "relationship_type": "indicates", "source_ref": "indicator--7402417b-459e-427d-a901-92413f21e28a", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b8b454-42f5-4276-bb02-3296b65a6e02", "created": "2026-01-27T05:13:00.739855Z", "modified": "2026-01-27T05:13:00.739855Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='usafe.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.739855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8325194e-3319-4b6e-9215-0342ff798690", "created": "2026-01-27T05:13:00.74052Z", "modified": "2026-01-27T05:13:00.74052Z", "relationship_type": "indicates", "source_ref": "indicator--03b8b454-42f5-4276-bb02-3296b65a6e02", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebdae72-6eb5-4369-bab3-3013cc771beb", "created": "2026-01-27T05:13:00.740698Z", "modified": "2026-01-27T05:13:00.740698Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='usafe.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.740698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba80a499-7b6b-44ce-be78-75b4a50d5761", "created": "2026-01-27T05:13:00.741378Z", "modified": "2026-01-27T05:13:00.741378Z", "relationship_type": "indicates", "source_ref": "indicator--aebdae72-6eb5-4369-bab3-3013cc771beb", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d484e6-47ad-458d-90e4-2738980181be", "created": "2026-01-27T05:13:00.741556Z", "modified": "2026-01-27T05:13:00.741556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='unisafe.su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.741556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ba1f601-b204-4ba1-9afd-a17766aab5e4", "created": "2026-01-27T05:13:00.742224Z", "modified": "2026-01-27T05:13:00.742224Z", "relationship_type": "indicates", "source_ref": "indicator--60d484e6-47ad-458d-90e4-2738980181be", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47c5267-4c1f-44ed-ba77-9a52b1e0c162", "created": "2026-01-27T05:13:00.742401Z", "modified": "2026-01-27T05:13:00.742401Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='unisafe.techmas.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.742401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e0a3325-7c8b-4c5c-a383-6659a07586e2", "created": "2026-01-27T05:13:00.743208Z", "modified": "2026-01-27T05:13:00.743208Z", "relationship_type": "indicates", "source_ref": "indicator--e47c5267-4c1f-44ed-ba77-9a52b1e0c162", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a8bc34-7463-427b-8ce4-0f03ea9b3eef", "created": "2026-01-27T05:13:00.743393Z", "modified": "2026-01-27T05:13:00.743393Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ru.usafe.u_safe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.743393Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6a907f5-6b29-4a62-89dd-5f4fd9805313", "created": "2026-01-27T05:13:00.744055Z", "modified": "2026-01-27T05:13:00.744055Z", "relationship_type": "indicates", "source_ref": "indicator--d0a8bc34-7463-427b-8ce4-0f03ea9b3eef", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64feb4c3-65c2-4c71-aafe-ef84ef0a32a3", "created": "2026-01-27T05:13:00.744231Z", "modified": "2026-01-27T05:13:00.744231Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ru.usafe.usafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.744231Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c2acf85-9c94-475c-aae2-03531cb0097c", "created": "2026-01-27T05:13:00.7449Z", "modified": "2026-01-27T05:13:00.7449Z", "relationship_type": "indicates", "source_ref": "indicator--64feb4c3-65c2-4c71-aafe-ef84ef0a32a3", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b6c948-c2d6-43df-8c77-43a9b1f70748", "created": "2026-01-27T05:13:00.745079Z", "modified": "2026-01-27T05:13:00.745079Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ru.usafe.kid.unisafekids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.745079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf821290-3c99-4e37-b2cf-c997414f803f", "created": "2026-01-27T05:13:00.74573Z", "modified": "2026-01-27T05:13:00.74573Z", "relationship_type": "indicates", "source_ref": "indicator--19b6c948-c2d6-43df-8c77-43a9b1f70748", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f74c665-bcfb-44b5-9a8c-6e421cffbbbe", "created": "2026-01-27T05:13:00.745922Z", "modified": "2026-01-27T05:13:00.745922Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='su.unisafe.unisafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.745922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--483251df-0763-42e4-9074-c09cb208a71f", "created": "2026-01-27T05:13:00.746574Z", "modified": "2026-01-27T05:13:00.746574Z", "relationship_type": "indicates", "source_ref": "indicator--9f74c665-bcfb-44b5-9a8c-6e421cffbbbe", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3149a8-713c-4708-a994-f96307a05eb0", "created": "2026-01-27T05:13:00.746761Z", "modified": "2026-01-27T05:13:00.746761Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20AB40ACC2822A34EC199622CDCA9D7A63BB302B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.746761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ddad972-0654-434d-bad7-d3a6dc20481e", "created": "2026-01-27T05:13:00.747533Z", "modified": "2026-01-27T05:13:00.747533Z", "relationship_type": "indicates", "source_ref": "indicator--5f3149a8-713c-4708-a994-f96307a05eb0", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87db01a1-5138-4ad0-b710-7949e6889261", "created": "2026-01-27T05:13:00.747703Z", "modified": "2026-01-27T05:13:00.747703Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='41862C48D4BBC2A83DB3CE6EBA0D0C53E3D882B6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.747703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e1216fd-1a9e-4786-80d5-9d9532eab97f", "created": "2026-01-27T05:13:00.748493Z", "modified": "2026-01-27T05:13:00.748493Z", "relationship_type": "indicates", "source_ref": "indicator--87db01a1-5138-4ad0-b710-7949e6889261", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffe5e2e-4b15-4922-9f5e-3e45571b60b0", "created": "2026-01-27T05:13:00.748665Z", "modified": "2026-01-27T05:13:00.748665Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A519EF2B8C4E73A097065B322687C9D38DED610C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.748665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f231cd3c-12b6-4262-8135-26b4481f0ff5", "created": "2026-01-27T05:13:00.749444Z", "modified": "2026-01-27T05:13:00.749444Z", "relationship_type": "indicates", "source_ref": "indicator--6ffe5e2e-4b15-4922-9f5e-3e45571b60b0", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fd0ee0-eb7c-4860-bb63-dfb1bcc8a607", "created": "2026-01-27T05:13:00.749626Z", "modified": "2026-01-27T05:13:00.749626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B5895930053256D408DE74B66BA132B73CB21527']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.749626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38074b3a-9b59-4d1c-8ad1-4a9d504e9921", "created": "2026-01-27T05:13:00.750403Z", "modified": "2026-01-27T05:13:00.750403Z", "relationship_type": "indicates", "source_ref": "indicator--e1fd0ee0-eb7c-4860-bb63-dfb1bcc8a607", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68608d8-6898-4603-9e1a-8f290301f50e", "created": "2026-01-27T05:13:00.750576Z", "modified": "2026-01-27T05:13:00.750576Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FCB6F780EA8F2FE7249F66C6348572BDBD54F576']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.750576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0f0d4db-aad1-4e06-acb3-758effb94cab", "created": "2026-01-27T05:13:00.751468Z", "modified": "2026-01-27T05:13:00.751468Z", "relationship_type": "indicates", "source_ref": "indicator--a68608d8-6898-4603-9e1a-8f290301f50e", "target_ref": "malware--ae58b48f-edd1-4fb1-ba3d-c643d7c67024"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee", "created": "2026-01-27T05:13:00.751641Z", "modified": "2026-01-27T05:13:00.751641Z", "name": "TrackView", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a34f5a-7e25-48f4-8e9b-d28ae3fb659a", "created": "2026-01-27T05:13:00.751825Z", "modified": "2026-01-27T05:13:00.751825Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='analytics.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.751825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d572b378-259c-4323-9c4d-134be7a535a0", "created": "2026-01-27T05:13:00.752501Z", "modified": "2026-01-27T05:13:00.752501Z", "relationship_type": "indicates", "source_ref": "indicator--20a34f5a-7e25-48f4-8e9b-d28ae3fb659a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf70b3e1-9273-4d32-b27a-40c2dad15d76", "created": "2026-01-27T05:13:00.752673Z", "modified": "2026-01-27T05:13:00.752673Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api-project-285519687053.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.752673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b675e184-d9df-4546-88d4-eb12be48ce29", "created": "2026-01-27T05:13:00.753426Z", "modified": "2026-01-27T05:13:00.753426Z", "relationship_type": "indicates", "source_ref": "indicator--bf70b3e1-9273-4d32-b27a-40c2dad15d76", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de4d201-7a07-400d-9941-ae5766afd989", "created": "2026-01-27T05:13:00.753607Z", "modified": "2026-01-27T05:13:00.753607Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.753607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30c7cf44-9227-451c-97f0-ea567850d5bc", "created": "2026-01-27T05:13:00.754299Z", "modified": "2026-01-27T05:13:00.754299Z", "relationship_type": "indicates", "source_ref": "indicator--2de4d201-7a07-400d-9941-ae5766afd989", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9425e53d-1aa8-47af-b08b-d3a18ca2dd2f", "created": "2026-01-27T05:13:00.754476Z", "modified": "2026-01-27T05:13:00.754476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.trackview.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.754476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13ce0e34-ee81-46ff-b89a-28e9096684d6", "created": "2026-01-27T05:13:00.7552Z", "modified": "2026-01-27T05:13:00.7552Z", "relationship_type": "indicates", "source_ref": "indicator--9425e53d-1aa8-47af-b08b-d3a18ca2dd2f", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dee22ee-2d86-402b-b6c1-a9e6a709467a", "created": "2026-01-27T05:13:00.755379Z", "modified": "2026-01-27T05:13:00.755379Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cnapi.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.755379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d110078e-ccd2-45b7-8e6d-8a94505726e5", "created": "2026-01-27T05:13:00.756092Z", "modified": "2026-01-27T05:13:00.756092Z", "relationship_type": "indicates", "source_ref": "indicator--7dee22ee-2d86-402b-b6c1-a9e6a709467a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afd398b-8469-48e2-b351-cb65de095d60", "created": "2026-01-27T05:13:00.756266Z", "modified": "2026-01-27T05:13:00.756266Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lifecircle-223805.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.756266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acabe8c5-7c49-4f15-9d51-ab0ac6e043b3", "created": "2026-01-27T05:13:00.756975Z", "modified": "2026-01-27T05:13:00.756975Z", "relationship_type": "indicates", "source_ref": "indicator--7afd398b-8469-48e2-b351-cb65de095d60", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29cd8d3-7668-4135-8c40-6db6d737731e", "created": "2026-01-27T05:13:00.757157Z", "modified": "2026-01-27T05:13:00.757157Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.757157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed9542fa-9168-4f91-8f72-f207f41916cc", "created": "2026-01-27T05:13:00.757848Z", "modified": "2026-01-27T05:13:00.757848Z", "relationship_type": "indicates", "source_ref": "indicator--c29cd8d3-7668-4135-8c40-6db6d737731e", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b7a78c-2329-4569-b3c5-ea5656da273d", "created": "2026-01-27T05:13:00.75802Z", "modified": "2026-01-27T05:13:00.75802Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rc-api.lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.75802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--347e7f54-c58f-42d9-b676-905becfd9993", "created": "2026-01-27T05:13:00.758699Z", "modified": "2026-01-27T05:13:00.758699Z", "relationship_type": "indicates", "source_ref": "indicator--07b7a78c-2329-4569-b3c5-ea5656da273d", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fc78f0-63b8-46a4-a811-f99f614771a5", "created": "2026-01-27T05:13:00.758889Z", "modified": "2026-01-27T05:13:00.758889Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.758889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26340117-7d14-461a-9515-d7e21397827e", "created": "2026-01-27T05:13:00.759678Z", "modified": "2026-01-27T05:13:00.759678Z", "relationship_type": "indicates", "source_ref": "indicator--b4fc78f0-63b8-46a4-a811-f99f614771a5", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d9d49b-9777-421f-a70f-c325d0ffd424", "created": "2026-01-27T05:13:00.759873Z", "modified": "2026-01-27T05:13:00.759873Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='us-central1-api-project-285519687053.cloudfunctions.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.759873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c3f5131-e1d5-47b9-b06e-9c7f812fad02", "created": "2026-01-27T05:13:00.760595Z", "modified": "2026-01-27T05:13:00.760595Z", "relationship_type": "indicates", "source_ref": "indicator--91d9d49b-9777-421f-a70f-c325d0ffd424", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d1a434-19de-4d29-8cbd-1312bcd89a56", "created": "2026-01-27T05:13:00.760782Z", "modified": "2026-01-27T05:13:00.760782Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.760782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3fcfc16-f430-433d-b87d-d7de31e840f0", "created": "2026-01-27T05:13:00.761453Z", "modified": "2026-01-27T05:13:00.761453Z", "relationship_type": "indicates", "source_ref": "indicator--f8d1a434-19de-4d29-8cbd-1312bcd89a56", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a55035-9bd1-4678-80d8-ec7cc6df2933", "created": "2026-01-27T05:13:00.761625Z", "modified": "2026-01-27T05:13:00.761625Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user2.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.761625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7e133f8-4f75-4f40-8249-2f480ff53e1d", "created": "2026-01-27T05:13:00.762321Z", "modified": "2026-01-27T05:13:00.762321Z", "relationship_type": "indicates", "source_ref": "indicator--08a55035-9bd1-4678-80d8-ec7cc6df2933", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c53cb9-e32d-4a9b-af8f-1ad453d8952a", "created": "2026-01-27T05:13:00.762497Z", "modified": "2026-01-27T05:13:00.762497Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='relay1.trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.762497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--598b1a05-0fdf-4b7e-aaa0-0c48073ef362", "created": "2026-01-27T05:13:00.763182Z", "modified": "2026-01-27T05:13:00.763182Z", "relationship_type": "indicates", "source_ref": "indicator--96c53cb9-e32d-4a9b-af8f-1ad453d8952a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f290b1-b1ec-46a0-97bb-494b6fa829f6", "created": "2026-01-27T05:13:00.76336Z", "modified": "2026-01-27T05:13:00.76336Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='chome.zstone.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.76336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87b4591c-949d-41df-b36d-717fc2c10310", "created": "2026-01-27T05:13:00.764036Z", "modified": "2026-01-27T05:13:00.764036Z", "relationship_type": "indicates", "source_ref": "indicator--d2f290b1-b1ec-46a0-97bb-494b6fa829f6", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37af6502-3706-4cae-8b96-eb31894c6ecb", "created": "2026-01-27T05:13:00.76421Z", "modified": "2026-01-27T05:13:00.76421Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lifecircle.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.76421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c1dac5e-28c5-4dc6-ba1b-0935c906d018", "created": "2026-01-27T05:13:00.764902Z", "modified": "2026-01-27T05:13:00.764902Z", "relationship_type": "indicates", "source_ref": "indicator--37af6502-3706-4cae-8b96-eb31894c6ecb", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bcfa8bb-b654-4a64-924d-02299d444865", "created": "2026-01-27T05:13:00.765081Z", "modified": "2026-01-27T05:13:00.765081Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackview.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.765081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be72fb41-5e15-4fab-9559-08bae7cb6412", "created": "2026-01-27T05:13:00.765758Z", "modified": "2026-01-27T05:13:00.765758Z", "relationship_type": "indicates", "source_ref": "indicator--2bcfa8bb-b654-4a64-924d-02299d444865", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--483ea9cb-ee5a-4e51-afa6-ae313d92b5c3", "created": "2026-01-27T05:13:00.765938Z", "modified": "2026-01-27T05:13:00.765938Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackview.recurly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.765938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc37e774-d5cf-43d0-acaf-5d1eadd53b11", "created": "2026-01-27T05:13:00.766613Z", "modified": "2026-01-27T05:13:00.766613Z", "relationship_type": "indicates", "source_ref": "indicator--483ea9cb-ee5a-4e51-afa6-ae313d92b5c3", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26a5372-fa45-4d44-804a-271183740473", "created": "2026-01-27T05:13:00.766803Z", "modified": "2026-01-27T05:13:00.766803Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b418fa0e2b1945c266876821c872e22dcceafd99370bbe9f4df398f0a4f4eaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.766803Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0a12280-9870-4f46-8ffb-aa94cdb19e37", "created": "2026-01-27T05:13:00.767737Z", "modified": "2026-01-27T05:13:00.767737Z", "relationship_type": "indicates", "source_ref": "indicator--a26a5372-fa45-4d44-804a-271183740473", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c90665-bccf-40d5-be61-cc40c35539d3", "created": "2026-01-27T05:13:00.767937Z", "modified": "2026-01-27T05:13:00.767937Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7fc24cd57718395ac45c0e529098cee1041e866c5504277f5ab9a02c2824e5b6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.767937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78fc208d-6082-439c-a2c8-06b87fcb6cf1", "created": "2026-01-27T05:13:00.76876Z", "modified": "2026-01-27T05:13:00.76876Z", "relationship_type": "indicates", "source_ref": "indicator--e3c90665-bccf-40d5-be61-cc40c35539d3", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea63aff9-0403-4aa3-9d64-a887967fdde2", "created": "2026-01-27T05:13:00.768981Z", "modified": "2026-01-27T05:13:00.768981Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eac441660df55c3eeed1b091edd8b4be54d1bef625646f92ae6228fcd6c5c5f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.768981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d143e1cf-71ed-44ea-9aa1-de19a9387bc0", "created": "2026-01-27T05:13:00.76985Z", "modified": "2026-01-27T05:13:00.76985Z", "relationship_type": "indicates", "source_ref": "indicator--ea63aff9-0403-4aa3-9d64-a887967fdde2", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae5b995-8744-4946-8eb5-9f4455b12820", "created": "2026-01-27T05:13:00.770029Z", "modified": "2026-01-27T05:13:00.770029Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2ff63d76dd3867b5b500331e32a5e5444ae4fa8578d690edfc24ab2b87708d86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.770029Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a214db13-7005-4244-a2d3-cae86eaebd00", "created": "2026-01-27T05:13:00.770876Z", "modified": "2026-01-27T05:13:00.770876Z", "relationship_type": "indicates", "source_ref": "indicator--eae5b995-8744-4946-8eb5-9f4455b12820", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91624372-5f8d-43e6-9ffb-29790467cbfe", "created": "2026-01-27T05:13:00.771053Z", "modified": "2026-01-27T05:13:00.771053Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7011276fac608fc992c53424155de6df6bb2be48fb5273d82bf3b6fe5f958231']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.771053Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a68accf-8935-4c05-acec-8d08d5c218c6", "created": "2026-01-27T05:13:00.7719Z", "modified": "2026-01-27T05:13:00.7719Z", "relationship_type": "indicates", "source_ref": "indicator--91624372-5f8d-43e6-9ffb-29790467cbfe", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28626a93-b85a-4b98-af67-301f4ff9aa98", "created": "2026-01-27T05:13:00.772095Z", "modified": "2026-01-27T05:13:00.772095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='163bfe0ede186459a3d2724aa061fb41eb7db8a2c10b0ccf24083a5d087a3a1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.772095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8facfd8c-90b3-40b2-9637-6cc3645b0f44", "created": "2026-01-27T05:13:00.772959Z", "modified": "2026-01-27T05:13:00.772959Z", "relationship_type": "indicates", "source_ref": "indicator--28626a93-b85a-4b98-af67-301f4ff9aa98", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209e2799-a818-47ef-8232-8f87fd007021", "created": "2026-01-27T05:13:00.773135Z", "modified": "2026-01-27T05:13:00.773135Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c2405e04fc52f07816c9795fd1a7cecf6596e765d3070bab1b33f3a84f2b115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.773135Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4567ebdb-e925-465f-9bcc-c175eb53fb02", "created": "2026-01-27T05:13:00.773978Z", "modified": "2026-01-27T05:13:00.773978Z", "relationship_type": "indicates", "source_ref": "indicator--209e2799-a818-47ef-8232-8f87fd007021", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bfcff9-cc14-4aaf-820c-ae967ad6b8cc", "created": "2026-01-27T05:13:00.774154Z", "modified": "2026-01-27T05:13:00.774154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='200cf6e828ceecf44add627d97c0a893a517d8e318047b760c339b1572a0b303']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.774154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a77de02-fde5-499a-a653-f473064938aa", "created": "2026-01-27T05:13:00.774985Z", "modified": "2026-01-27T05:13:00.774985Z", "relationship_type": "indicates", "source_ref": "indicator--33bfcff9-cc14-4aaf-820c-ae967ad6b8cc", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c5077f-92f2-4edb-9913-9542a57f3d6a", "created": "2026-01-27T05:13:00.775158Z", "modified": "2026-01-27T05:13:00.775158Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de9e773f9c03d53aab271188c5b317bec45d1049a06e0b8c167e5527a92ad7e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.775158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--551890db-3651-415c-82dc-709e905a678c", "created": "2026-01-27T05:13:00.776052Z", "modified": "2026-01-27T05:13:00.776052Z", "relationship_type": "indicates", "source_ref": "indicator--01c5077f-92f2-4edb-9913-9542a57f3d6a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a393854-d11c-4112-9dae-f4cf4df56163", "created": "2026-01-27T05:13:00.77624Z", "modified": "2026-01-27T05:13:00.77624Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='267db01a354384d06d3108c8c7122e1dab03bf2364a3493b3b2f1a92a1e7d9ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.77624Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71097902-cb0d-4245-b40d-4ed9feb2c785", "created": "2026-01-27T05:13:00.777207Z", "modified": "2026-01-27T05:13:00.777207Z", "relationship_type": "indicates", "source_ref": "indicator--9a393854-d11c-4112-9dae-f4cf4df56163", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14831fa2-8bb9-4e7c-b4a1-b3fcc078d26f", "created": "2026-01-27T05:13:00.777385Z", "modified": "2026-01-27T05:13:00.777385Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40fbff552a9f4eb15f780bc4a7eba5db8a5aa167b4ec07e82593ce4aa56dcc19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.777385Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c62652f2-4798-43a1-91c5-35b4fafcf57f", "created": "2026-01-27T05:13:00.77823Z", "modified": "2026-01-27T05:13:00.77823Z", "relationship_type": "indicates", "source_ref": "indicator--14831fa2-8bb9-4e7c-b4a1-b3fcc078d26f", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd442ce-e35b-46b1-89a9-89c041e3843e", "created": "2026-01-27T05:13:00.778416Z", "modified": "2026-01-27T05:13:00.778416Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53a15a6b11b22fddc10302414bbbf82eb66278c1801e359d25fc8778b4288dd8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.778416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6526f2a9-e7a5-4c79-9165-d03d271ad66e", "created": "2026-01-27T05:13:00.779254Z", "modified": "2026-01-27T05:13:00.779254Z", "relationship_type": "indicates", "source_ref": "indicator--1bd442ce-e35b-46b1-89a9-89c041e3843e", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4292a66d-1ff1-4b66-a134-f27e02a16441", "created": "2026-01-27T05:13:00.779433Z", "modified": "2026-01-27T05:13:00.779433Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74e9fc0b284376675e3646f7503c131802afcc1d70c245d1c668ed3b25c158fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.779433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d399509-6fdb-4c19-bc52-b870c07ba0e7", "created": "2026-01-27T05:13:00.78027Z", "modified": "2026-01-27T05:13:00.78027Z", "relationship_type": "indicates", "source_ref": "indicator--4292a66d-1ff1-4b66-a134-f27e02a16441", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a39b88d-2551-4b5b-8a70-4435ce343901", "created": "2026-01-27T05:13:00.780456Z", "modified": "2026-01-27T05:13:00.780456Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b5c0d9653e2335b4aaf7ec061cb496eb1334543afd01df032cb3cd751c41c73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.780456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb6567e7-cffd-4085-be00-e3213627d877", "created": "2026-01-27T05:13:00.781289Z", "modified": "2026-01-27T05:13:00.781289Z", "relationship_type": "indicates", "source_ref": "indicator--8a39b88d-2551-4b5b-8a70-4435ce343901", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5867ab31-075b-46b4-af8b-3ba464f2683a", "created": "2026-01-27T05:13:00.781463Z", "modified": "2026-01-27T05:13:00.781463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a5ffa547d183b28055e5a06436339a01917733675ebe838a1807ee6e71a038e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.781463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7475c787-8b10-4749-9b27-8910dbe1b77d", "created": "2026-01-27T05:13:00.782292Z", "modified": "2026-01-27T05:13:00.782292Z", "relationship_type": "indicates", "source_ref": "indicator--5867ab31-075b-46b4-af8b-3ba464f2683a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede1ef26-c794-4542-99c7-77e09fdd5b4e", "created": "2026-01-27T05:13:00.782466Z", "modified": "2026-01-27T05:13:00.782466Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvieo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.782466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8384253e-bdf9-4431-a897-98be41e23894", "created": "2026-01-27T05:13:00.783142Z", "modified": "2026-01-27T05:13:00.783142Z", "relationship_type": "indicates", "source_ref": "indicator--ede1ef26-c794-4542-99c7-77e09fdd5b4e", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1975887-d150-4b1f-bcc5-8949cc3cb325", "created": "2026-01-27T05:13:00.783319Z", "modified": "2026-01-27T05:13:00.783319Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviep']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.783319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9fadd224-91cb-4739-a487-fe1fa81741b8", "created": "2026-01-27T05:13:00.78399Z", "modified": "2026-01-27T05:13:00.78399Z", "relationship_type": "indicates", "source_ref": "indicator--a1975887-d150-4b1f-bcc5-8949cc3cb325", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9022a63-82db-4c31-bdc6-9d61050c6e72", "created": "2026-01-27T05:13:00.784162Z", "modified": "2026-01-27T05:13:00.784162Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvieq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.784162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d7be938-3b5b-4a39-85b4-d4d8c266b31c", "created": "2026-01-27T05:13:00.784897Z", "modified": "2026-01-27T05:13:00.784897Z", "relationship_type": "indicates", "source_ref": "indicator--d9022a63-82db-4c31-bdc6-9d61050c6e72", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1c6189-d012-42a6-a95f-0e5838a03acc", "created": "2026-01-27T05:13:00.78509Z", "modified": "2026-01-27T05:13:00.78509Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvier']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.78509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcc1b92e-14c0-4ac5-8a76-fb2cbc48fbb3", "created": "2026-01-27T05:13:00.785886Z", "modified": "2026-01-27T05:13:00.785886Z", "relationship_type": "indicates", "source_ref": "indicator--ec1c6189-d012-42a6-a95f-0e5838a03acc", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8808875a-356d-4b72-bb5f-ed3160136ec8", "created": "2026-01-27T05:13:00.786062Z", "modified": "2026-01-27T05:13:00.786062Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvies']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.786062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--55946b0c-cebb-41fd-a76e-b0eb255bddfa", "created": "2026-01-27T05:13:00.786709Z", "modified": "2026-01-27T05:13:00.786709Z", "relationship_type": "indicates", "source_ref": "indicator--8808875a-356d-4b72-bb5f-ed3160136ec8", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d020322d-9d3c-4fed-a7bd-0c1372e80770", "created": "2026-01-27T05:13:00.786902Z", "modified": "2026-01-27T05:13:00.786902Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviet']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.786902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4181e609-a249-4797-a01f-1a59dbe50535", "created": "2026-01-27T05:13:00.787547Z", "modified": "2026-01-27T05:13:00.787547Z", "relationship_type": "indicates", "source_ref": "indicator--d020322d-9d3c-4fed-a7bd-0c1372e80770", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5661ce80-8d66-4779-a3ea-dacf8a86b0ac", "created": "2026-01-27T05:13:00.787717Z", "modified": "2026-01-27T05:13:00.787717Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackvieu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.787717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d955e92a-4faf-4556-94f5-f76e9d09d139", "created": "2026-01-27T05:13:00.788381Z", "modified": "2026-01-27T05:13:00.788381Z", "relationship_type": "indicates", "source_ref": "indicator--5661ce80-8d66-4779-a3ea-dacf8a86b0ac", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efc8218-90ae-428f-a0a7-53e65c1ce997", "created": "2026-01-27T05:13:00.788553Z", "modified": "2026-01-27T05:13:00.788553Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.788553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32570415-e30f-41a6-b731-2dcd6f3717ea", "created": "2026-01-27T05:13:00.789222Z", "modified": "2026-01-27T05:13:00.789222Z", "relationship_type": "indicates", "source_ref": "indicator--8efc8218-90ae-428f-a0a7-53e65c1ce997", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001ab89-b369-4256-b969-452b5b2e9388", "created": "2026-01-27T05:13:00.789399Z", "modified": "2026-01-27T05:13:00.789399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.789399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfa764e8-fafb-495d-8301-5233e355df0c", "created": "2026-01-27T05:13:00.790069Z", "modified": "2026-01-27T05:13:00.790069Z", "relationship_type": "indicates", "source_ref": "indicator--f001ab89-b369-4256-b969-452b5b2e9388", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0f9d2c-f526-49fd-aa04-ed64c1b87ac0", "created": "2026-01-27T05:13:00.790253Z", "modified": "2026-01-27T05:13:00.790253Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviex']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.790253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29e535ab-587d-40aa-a8c7-3ea630e37eae", "created": "2026-01-27T05:13:00.790917Z", "modified": "2026-01-27T05:13:00.790917Z", "relationship_type": "indicates", "source_ref": "indicator--cc0f9d2c-f526-49fd-aa04-ed64c1b87ac0", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01494009-7d40-43ec-a9b3-7d6e45b6a29b", "created": "2026-01-27T05:13:00.7911Z", "modified": "2026-01-27T05:13:00.7911Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviey']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.7911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcac4135-3864-405c-8492-5804629d381b", "created": "2026-01-27T05:13:00.791764Z", "modified": "2026-01-27T05:13:00.791764Z", "relationship_type": "indicates", "source_ref": "indicator--01494009-7d40-43ec-a9b3-7d6e45b6a29b", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2715a1-31fc-4bee-8982-eafcbc68e574", "created": "2026-01-27T05:13:00.791939Z", "modified": "2026-01-27T05:13:00.791939Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trackviez']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.791939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--435cd17d-60cf-4209-8177-5b647ab222cb", "created": "2026-01-27T05:13:00.792588Z", "modified": "2026-01-27T05:13:00.792588Z", "relationship_type": "indicates", "source_ref": "indicator--ec2715a1-31fc-4bee-8982-eafcbc68e574", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef74dd8-d887-474f-9938-c7956ecf99b6", "created": "2026-01-27T05:13:00.792775Z", "modified": "2026-01-27T05:13:00.792775Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.cybrook.trustserv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.792775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08426e3d-bbad-4279-97b0-05b3ac8431b8", "created": "2026-01-27T05:13:00.793554Z", "modified": "2026-01-27T05:13:00.793554Z", "relationship_type": "indicates", "source_ref": "indicator--5ef74dd8-d887-474f-9938-c7956ecf99b6", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7de7e13-31b9-48be-b194-9dea3300495f", "created": "2026-01-27T05:13:00.793727Z", "modified": "2026-01-27T05:13:00.793727Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.lifecircle']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.793727Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84891da1-2af3-47cc-a742-945ba6926056", "created": "2026-01-27T05:13:00.794384Z", "modified": "2026-01-27T05:13:00.794384Z", "relationship_type": "indicates", "source_ref": "indicator--f7de7e13-31b9-48be-b194-9dea3300495f", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78a6d7c-2639-4f8c-9bec-e3c4e6fd9b70", "created": "2026-01-27T05:13:00.794558Z", "modified": "2026-01-27T05:13:00.794558Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.794558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fc47b9c-80e5-44b5-b641-f5f29572ed61", "created": "2026-01-27T05:13:00.795215Z", "modified": "2026-01-27T05:13:00.795215Z", "relationship_type": "indicates", "source_ref": "indicator--c78a6d7c-2639-4f8c-9bec-e3c4e6fd9b70", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b738164-4a32-4b1e-b386-d4ffa805dc2a", "created": "2026-01-27T05:13:00.795387Z", "modified": "2026-01-27T05:13:00.795387Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.trackview.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.795387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d5ade34-fae6-403d-854e-420b1a5b4785", "created": "2026-01-27T05:13:00.796132Z", "modified": "2026-01-27T05:13:00.796132Z", "relationship_type": "indicates", "source_ref": "indicator--7b738164-4a32-4b1e-b386-d4ffa805dc2a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c736db8-0a73-4e86-9f58-70c764319c9e", "created": "2026-01-27T05:13:00.79632Z", "modified": "2026-01-27T05:13:00.79632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='cn.trackview.shentan']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.79632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29b29ac1-78be-44fc-8797-3e44cad790ef", "created": "2026-01-27T05:13:00.797013Z", "modified": "2026-01-27T05:13:00.797013Z", "relationship_type": "indicates", "source_ref": "indicator--4c736db8-0a73-4e86-9f58-70c764319c9e", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df561534-d876-4884-b25b-e4e69f4d245c", "created": "2026-01-27T05:13:00.79719Z", "modified": "2026-01-27T05:13:00.79719Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.79719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8e4a5c8-c3f4-44cc-96a3-207bb81bef4b", "created": "2026-01-27T05:13:00.79786Z", "modified": "2026-01-27T05:13:00.79786Z", "relationship_type": "indicates", "source_ref": "indicator--df561534-d876-4884-b25b-e4e69f4d245c", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad509bc1-19f2-4af6-8f35-357ea7418503", "created": "2026-01-27T05:13:00.798036Z", "modified": "2026-01-27T05:13:00.798036Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='cybrook.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.798036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8500124-a5f1-4201-9c9b-33a4538a61bd", "created": "2026-01-27T05:13:00.798682Z", "modified": "2026-01-27T05:13:00.798682Z", "relationship_type": "indicates", "source_ref": "indicator--ad509bc1-19f2-4af6-8f35-357ea7418503", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce58672-4553-4ebe-b019-332dd7d1b18b", "created": "2026-01-27T05:13:00.798871Z", "modified": "2026-01-27T05:13:00.798871Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvieo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.798871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ecdad4e8-8678-44dd-b671-bd3e7db389ad", "created": "2026-01-27T05:13:00.79954Z", "modified": "2026-01-27T05:13:00.79954Z", "relationship_type": "indicates", "source_ref": "indicator--fce58672-4553-4ebe-b019-332dd7d1b18b", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047b1f70-7652-43b2-8637-75b0fb8c9c06", "created": "2026-01-27T05:13:00.799711Z", "modified": "2026-01-27T05:13:00.799711Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviep']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.799711Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6596cef6-e1df-4237-84b3-ba8734183bca", "created": "2026-01-27T05:13:00.800425Z", "modified": "2026-01-27T05:13:00.800425Z", "relationship_type": "indicates", "source_ref": "indicator--047b1f70-7652-43b2-8637-75b0fb8c9c06", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df0139d-74d8-4c8a-a023-85a9dfac99f3", "created": "2026-01-27T05:13:00.800616Z", "modified": "2026-01-27T05:13:00.800616Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvieq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.800616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cbf3f42-3688-4bfe-b7fd-54bfafe00583", "created": "2026-01-27T05:13:00.801508Z", "modified": "2026-01-27T05:13:00.801508Z", "relationship_type": "indicates", "source_ref": "indicator--4df0139d-74d8-4c8a-a023-85a9dfac99f3", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6f8357-a5e0-4b45-844f-3917c49f488e", "created": "2026-01-27T05:13:00.801714Z", "modified": "2026-01-27T05:13:00.801714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvier']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.801714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cceb01db-06d9-4be8-b0ef-9e65d39e652b", "created": "2026-01-27T05:13:00.802427Z", "modified": "2026-01-27T05:13:00.802427Z", "relationship_type": "indicates", "source_ref": "indicator--3f6f8357-a5e0-4b45-844f-3917c49f488e", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb5a5092-1f49-403f-a70d-6f70853d4898", "created": "2026-01-27T05:13:00.802602Z", "modified": "2026-01-27T05:13:00.802602Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvies']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.802602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a9fc3aa-8e73-4b36-8031-6abd87f3b5cf", "created": "2026-01-27T05:13:00.803278Z", "modified": "2026-01-27T05:13:00.803278Z", "relationship_type": "indicates", "source_ref": "indicator--bb5a5092-1f49-403f-a70d-6f70853d4898", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769a824c-94d0-4ef3-b93d-4e7e9f4215a6", "created": "2026-01-27T05:13:00.803455Z", "modified": "2026-01-27T05:13:00.803455Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviet']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.803455Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e91ce38f-46df-4f36-b5b5-699af4ab0e99", "created": "2026-01-27T05:13:00.804137Z", "modified": "2026-01-27T05:13:00.804137Z", "relationship_type": "indicates", "source_ref": "indicator--769a824c-94d0-4ef3-b93d-4e7e9f4215a6", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1649c943-6a0e-4edb-a2dc-9e22cfcf6c43", "created": "2026-01-27T05:13:00.804313Z", "modified": "2026-01-27T05:13:00.804313Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackvieu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.804313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cccdffed-e640-4cb4-87eb-f48b331fe9e7", "created": "2026-01-27T05:13:00.804987Z", "modified": "2026-01-27T05:13:00.804987Z", "relationship_type": "indicates", "source_ref": "indicator--1649c943-6a0e-4edb-a2dc-9e22cfcf6c43", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a7e3fd-04f2-4713-9886-bf34c165441b", "created": "2026-01-27T05:13:00.805162Z", "modified": "2026-01-27T05:13:00.805162Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.805162Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4063311b-52d8-4f7a-98f3-ec6ef4e188da", "created": "2026-01-27T05:13:00.805839Z", "modified": "2026-01-27T05:13:00.805839Z", "relationship_type": "indicates", "source_ref": "indicator--f6a7e3fd-04f2-4713-9886-bf34c165441b", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c88725-6cfc-4dd4-9f03-ea570f1fe887", "created": "2026-01-27T05:13:00.806014Z", "modified": "2026-01-27T05:13:00.806014Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.806014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cc28180-68e4-466e-adc4-88033f76d159", "created": "2026-01-27T05:13:00.806681Z", "modified": "2026-01-27T05:13:00.806681Z", "relationship_type": "indicates", "source_ref": "indicator--83c88725-6cfc-4dd4-9f03-ea570f1fe887", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3af734-a3f8-40aa-9ccb-076efac28b7a", "created": "2026-01-27T05:13:00.806873Z", "modified": "2026-01-27T05:13:00.806873Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviex']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.806873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d79bef77-3dfd-4670-baa6-63910ceddea2", "created": "2026-01-27T05:13:00.807523Z", "modified": "2026-01-27T05:13:00.807523Z", "relationship_type": "indicates", "source_ref": "indicator--8d3af734-a3f8-40aa-9ccb-076efac28b7a", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ece64c-3762-4716-9d91-85c4917d3561", "created": "2026-01-27T05:13:00.807695Z", "modified": "2026-01-27T05:13:00.807695Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviey']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.807695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f4a1bc0-98b2-401f-a2e3-6aa7a30a59fd", "created": "2026-01-27T05:13:00.808372Z", "modified": "2026-01-27T05:13:00.808372Z", "relationship_type": "indicates", "source_ref": "indicator--49ece64c-3762-4716-9d91-85c4917d3561", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb04ff7-b313-4660-aeda-5c4a1e978547", "created": "2026-01-27T05:13:00.808549Z", "modified": "2026-01-27T05:13:00.808549Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trackviez']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.808549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4699e2c8-3f6e-4005-90e4-1c8050f7b249", "created": "2026-01-27T05:13:00.809361Z", "modified": "2026-01-27T05:13:00.809361Z", "relationship_type": "indicates", "source_ref": "indicator--5eb04ff7-b313-4660-aeda-5c4a1e978547", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8573ed1b-40a5-4f0e-a65f-86fde6b1ba8f", "created": "2026-01-27T05:13:00.809539Z", "modified": "2026-01-27T05:13:00.809539Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.cybrook.trustserv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.809539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cfd220b-2db5-4712-bb36-7e85b5d5a2c8", "created": "2026-01-27T05:13:00.810216Z", "modified": "2026-01-27T05:13:00.810216Z", "relationship_type": "indicates", "source_ref": "indicator--8573ed1b-40a5-4f0e-a65f-86fde6b1ba8f", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4a382f-0599-4276-aa5f-6645d0cfa343", "created": "2026-01-27T05:13:00.810394Z", "modified": "2026-01-27T05:13:00.810394Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.homesafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.810394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdb703c3-0251-42d1-8ae7-08fc198f6a3b", "created": "2026-01-27T05:13:00.811052Z", "modified": "2026-01-27T05:13:00.811052Z", "relationship_type": "indicates", "source_ref": "indicator--dd4a382f-0599-4276-aa5f-6645d0cfa343", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5b7008-bc98-49d0-80a2-a00e221514b9", "created": "2026-01-27T05:13:00.811233Z", "modified": "2026-01-27T05:13:00.811233Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.811233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b01aacc-2915-4e72-893f-c8f841dafd02", "created": "2026-01-27T05:13:00.811898Z", "modified": "2026-01-27T05:13:00.811898Z", "relationship_type": "indicates", "source_ref": "indicator--9b5b7008-bc98-49d0-80a2-a00e221514b9", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215831d4-8f15-4b09-a713-77615c0cdc7e", "created": "2026-01-27T05:13:00.812071Z", "modified": "2026-01-27T05:13:00.812071Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.trackview.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.812071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3b6c715-7627-4bf6-bac5-3dabd3b30674", "created": "2026-01-27T05:13:00.812716Z", "modified": "2026-01-27T05:13:00.812716Z", "relationship_type": "indicates", "source_ref": "indicator--215831d4-8f15-4b09-a713-77615c0cdc7e", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc842c51-d8ab-440a-b7b6-7073d1660d74", "created": "2026-01-27T05:13:00.812905Z", "modified": "2026-01-27T05:13:00.812905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tv.familynk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.812905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fac663e1-bc5e-4c5f-adba-f5eae5cf3d29", "created": "2026-01-27T05:13:00.813576Z", "modified": "2026-01-27T05:13:00.813576Z", "relationship_type": "indicates", "source_ref": "indicator--bc842c51-d8ab-440a-b7b6-7073d1660d74", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02427b8-5417-4b81-bc0a-bb5a61fb6173", "created": "2026-01-27T05:13:00.813793Z", "modified": "2026-01-27T05:13:00.813793Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tv.familynl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.813793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d213f00-82bf-4c09-88ed-147a3a96cada", "created": "2026-01-27T05:13:00.814448Z", "modified": "2026-01-27T05:13:00.814448Z", "relationship_type": "indicates", "source_ref": "indicator--f02427b8-5417-4b81-bc0a-bb5a61fb6173", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a9fd46-3404-49b2-9858-95eba1e845c1", "created": "2026-01-27T05:13:00.81462Z", "modified": "2026-01-27T05:13:00.81462Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='us.trackview']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.81462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0c82702-7b59-45ed-a6f1-a1c222d783a1", "created": "2026-01-27T05:13:00.81528Z", "modified": "2026-01-27T05:13:00.81528Z", "relationship_type": "indicates", "source_ref": "indicator--06a9fd46-3404-49b2-9858-95eba1e845c1", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5244d9ad-b4c4-4611-8bb8-6afed2bc0126", "created": "2026-01-27T05:13:00.815456Z", "modified": "2026-01-27T05:13:00.815456Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CB97E71AFA4665D6D28697B9197046C81E5E5D6C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.815456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3fe34f2-d5c9-43c7-ae2e-b09492f58ce1", "created": "2026-01-27T05:13:00.816263Z", "modified": "2026-01-27T05:13:00.816263Z", "relationship_type": "indicates", "source_ref": "indicator--5244d9ad-b4c4-4611-8bb8-6afed2bc0126", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf93e6f-9b0d-41e7-88b0-222d7e89c648", "created": "2026-01-27T05:13:00.816474Z", "modified": "2026-01-27T05:13:00.816474Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B14E50E56D5D483031137FD247D4A5466D0E61B4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.816474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bdfcd8a-3d2d-4839-bc01-6ed8396be66e", "created": "2026-01-27T05:13:00.81749Z", "modified": "2026-01-27T05:13:00.81749Z", "relationship_type": "indicates", "source_ref": "indicator--caf93e6f-9b0d-41e7-88b0-222d7e89c648", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a7074b-170b-42cd-8363-d7e40acabafa", "created": "2026-01-27T05:13:00.81767Z", "modified": "2026-01-27T05:13:00.81767Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='96A1F635F940D8D154FD42D550B6201B60692744']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.81767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6c60fde-ed1a-41c5-9f04-93a5c74d6f65", "created": "2026-01-27T05:13:00.818461Z", "modified": "2026-01-27T05:13:00.818461Z", "relationship_type": "indicates", "source_ref": "indicator--71a7074b-170b-42cd-8363-d7e40acabafa", "target_ref": "malware--d4a03c69-c046-4a95-bee9-f2505bdf0aee"}, {"type": "malware", "spec_version": "2.1", "id": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec", "created": "2026-01-27T05:13:00.818637Z", "modified": "2026-01-27T05:13:00.818637Z", "name": "TrackingSmartphone", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3d74bf-49af-40f9-8ad3-2fb77876d426", "created": "2026-01-27T05:13:00.81883Z", "modified": "2026-01-27T05:13:00.81883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackingsmartphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.81883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa51ce73-5223-4580-98bc-292b1757aa17", "created": "2026-01-27T05:13:00.81951Z", "modified": "2026-01-27T05:13:00.81951Z", "relationship_type": "indicates", "source_ref": "indicator--7f3d74bf-49af-40f9-8ad3-2fb77876d426", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814d3d16-6e1e-4509-a848-0ca0991f1024", "created": "2026-01-27T05:13:00.819684Z", "modified": "2026-01-27T05:13:00.819684Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinefundb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.819684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25d949f1-7852-4909-9140-40af3f07d806", "created": "2026-01-27T05:13:00.820373Z", "modified": "2026-01-27T05:13:00.820373Z", "relationship_type": "indicates", "source_ref": "indicator--814d3d16-6e1e-4509-a848-0ca0991f1024", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4aa385-bd46-4238-bc52-a52d8e044036", "created": "2026-01-27T05:13:00.820546Z", "modified": "2026-01-27T05:13:00.820546Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracking-smartphone.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.820546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efea32b9-c899-4f0e-a646-2f77d48c8780", "created": "2026-01-27T05:13:00.821265Z", "modified": "2026-01-27T05:13:00.821265Z", "relationship_type": "indicates", "source_ref": "indicator--fc4aa385-bd46-4238-bc52-a52d8e044036", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb1269c-ba1e-4a4c-830f-f5ddcc8dcac5", "created": "2026-01-27T05:13:00.821439Z", "modified": "2026-01-27T05:13:00.821439Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackingsmartphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.821439Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35b03220-478d-42af-a1e2-58785f5f1f87", "created": "2026-01-27T05:13:00.822138Z", "modified": "2026-01-27T05:13:00.822138Z", "relationship_type": "indicates", "source_ref": "indicator--ecb1269c-ba1e-4a4c-830f-f5ddcc8dcac5", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdda4db-370e-4d37-b136-f951115c267a", "created": "2026-01-27T05:13:00.822312Z", "modified": "2026-01-27T05:13:00.822312Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.trackingsmartphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.822312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95fa78ce-1517-4e79-8eca-0454e9d2e828", "created": "2026-01-27T05:13:00.823019Z", "modified": "2026-01-27T05:13:00.823019Z", "relationship_type": "indicates", "source_ref": "indicator--ffdda4db-370e-4d37-b136-f951115c267a", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81644c08-e91d-4235-917b-a77b98485f6c", "created": "2026-01-27T05:13:00.823192Z", "modified": "2026-01-27T05:13:00.823192Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onlinefundb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.823192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5edba322-e975-41a0-b02b-00ca012886cf", "created": "2026-01-27T05:13:00.823876Z", "modified": "2026-01-27T05:13:00.823876Z", "relationship_type": "indicates", "source_ref": "indicator--81644c08-e91d-4235-917b-a77b98485f6c", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a3b3b1-e94b-4d9a-9bf8-4c449f5d5080", "created": "2026-01-27T05:13:00.824056Z", "modified": "2026-01-27T05:13:00.824056Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tracking_smartphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.824056Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13755f45-8711-42a3-b1cf-5c6dda84f231", "created": "2026-01-27T05:13:00.824713Z", "modified": "2026-01-27T05:13:00.824713Z", "relationship_type": "indicates", "source_ref": "indicator--77a3b3b1-e94b-4d9a-9bf8-4c449f5d5080", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02106296-91b3-45a2-b824-2372b3dd36d5", "created": "2026-01-27T05:13:00.824915Z", "modified": "2026-01-27T05:13:00.824915Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.app.remote_control']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.824915Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ff2ed63-6ffc-440e-a538-948f4d6326b2", "created": "2026-01-27T05:13:00.826088Z", "modified": "2026-01-27T05:13:00.826088Z", "relationship_type": "indicates", "source_ref": "indicator--02106296-91b3-45a2-b824-2372b3dd36d5", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd0dcf5-5bad-4a06-a0d1-64410b9ee10d", "created": "2026-01-27T05:13:00.826269Z", "modified": "2026-01-27T05:13:00.826269Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ts_settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.826269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d3048c9-9d6e-4128-9c29-5b1af9ec668e", "created": "2026-01-27T05:13:00.826932Z", "modified": "2026-01-27T05:13:00.826932Z", "relationship_type": "indicates", "source_ref": "indicator--3bd0dcf5-5bad-4a06-a0d1-64410b9ee10d", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a98ec6f-04ba-44ee-9f14-653911fc528b", "created": "2026-01-27T05:13:00.827109Z", "modified": "2026-01-27T05:13:00.827109Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1DB0D66C1D21DD4B185D03B13D6CF620E4FACBAA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.827109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a2deb01-0cac-4356-9198-d1a6d4b85c6a", "created": "2026-01-27T05:13:00.827893Z", "modified": "2026-01-27T05:13:00.827893Z", "relationship_type": "indicates", "source_ref": "indicator--4a98ec6f-04ba-44ee-9f14-653911fc528b", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e836a82-1daa-48b0-9c51-c7a8bd6bb652", "created": "2026-01-27T05:13:00.82807Z", "modified": "2026-01-27T05:13:00.82807Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='603881E46350999FF7A5CBD68FE6A5897C50CEDE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.82807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f298850-438a-44a2-b013-469b4aaab218", "created": "2026-01-27T05:13:00.828849Z", "modified": "2026-01-27T05:13:00.828849Z", "relationship_type": "indicates", "source_ref": "indicator--0e836a82-1daa-48b0-9c51-c7a8bd6bb652", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae57822-4d71-4077-bd92-433e1d75f2de", "created": "2026-01-27T05:13:00.829032Z", "modified": "2026-01-27T05:13:00.829032Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='665D624FD53E4D538DFE9F7A87087C513CB40506']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.829032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab9dce2e-af3c-4d2c-a65d-d12ca5756885", "created": "2026-01-27T05:13:00.829809Z", "modified": "2026-01-27T05:13:00.829809Z", "relationship_type": "indicates", "source_ref": "indicator--2ae57822-4d71-4077-bd92-433e1d75f2de", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a875aa0b-41e9-4edf-8178-d6f1ecfea698", "created": "2026-01-27T05:13:00.829986Z", "modified": "2026-01-27T05:13:00.829986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='86D94A8CE736F82D834FA588F34106AE7B69D325']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.829986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17d43a0c-13dc-4f5c-842f-c2a9e0b92efc", "created": "2026-01-27T05:13:00.830761Z", "modified": "2026-01-27T05:13:00.830761Z", "relationship_type": "indicates", "source_ref": "indicator--a875aa0b-41e9-4edf-8178-d6f1ecfea698", "target_ref": "malware--38cf29ad-e3a4-4e9a-bb01-4e6c5b9b9aec"}, {"type": "malware", "spec_version": "2.1", "id": "malware--577ca84c-42b4-4600-a144-5c8433c06396", "created": "2026-01-27T05:13:00.830939Z", "modified": "2026-01-27T05:13:00.830939Z", "name": "SpyphoneMobileTracker", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7477671-44e4-4bb0-a7f3-3383fbcb5c68", "created": "2026-01-27T05:13:00.83111Z", "modified": "2026-01-27T05:13:00.83111Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.83111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b048aed-203e-442a-8858-b3e810b76c55", "created": "2026-01-27T05:13:00.831786Z", "modified": "2026-01-27T05:13:00.831786Z", "relationship_type": "indicates", "source_ref": "indicator--b7477671-44e4-4bb0-a7f3-3383fbcb5c68", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c544d6e-4bfb-4b95-b486-f877d16a6a96", "created": "2026-01-27T05:13:00.831988Z", "modified": "2026-01-27T05:13:00.831988Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracker95gpsonly.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.831988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a616245-c8e7-4a74-b159-9abf5c5dd7ca", "created": "2026-01-27T05:13:00.83269Z", "modified": "2026-01-27T05:13:00.83269Z", "relationship_type": "indicates", "source_ref": "indicator--4c544d6e-4bfb-4b95-b486-f877d16a6a96", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5a73c0-6634-4e7d-b496-d8af75031fb5", "created": "2026-01-27T05:13:00.832883Z", "modified": "2026-01-27T05:13:00.832883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.832883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ece19e8f-18dd-4552-b9db-7a4753708b0f", "created": "2026-01-27T05:13:00.833566Z", "modified": "2026-01-27T05:13:00.833566Z", "relationship_type": "indicates", "source_ref": "indicator--8e5a73c0-6634-4e7d-b496-d8af75031fb5", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a770839-6d94-4e38-bd97-8407b1e98739", "created": "2026-01-27T05:13:00.833742Z", "modified": "2026-01-27T05:13:00.833742Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phonetracker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.833742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0134784-a503-494e-8f1e-f88c3e61f2eb", "created": "2026-01-27T05:13:00.834568Z", "modified": "2026-01-27T05:13:00.834568Z", "relationship_type": "indicates", "source_ref": "indicator--3a770839-6d94-4e38-bd97-8407b1e98739", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6ec107-f34e-4ff7-b104-1b101de07144", "created": "2026-01-27T05:13:00.834757Z", "modified": "2026-01-27T05:13:00.834757Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyfone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.834757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83dba957-a18b-46a1-b0f9-da38e3ae4063", "created": "2026-01-27T05:13:00.835417Z", "modified": "2026-01-27T05:13:00.835417Z", "relationship_type": "indicates", "source_ref": "indicator--2a6ec107-f34e-4ff7-b104-1b101de07144", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b25d0e-0bb5-48b2-8be9-a05975f80d3e", "created": "2026-01-27T05:13:00.835592Z", "modified": "2026-01-27T05:13:00.835592Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.835592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84b83b8d-0865-4642-a93b-537f52537112", "created": "2026-01-27T05:13:00.836263Z", "modified": "2026-01-27T05:13:00.836263Z", "relationship_type": "indicates", "source_ref": "indicator--12b25d0e-0bb5-48b2-8be9-a05975f80d3e", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a04cf99-b339-4bb4-8cb3-808708a882e0", "created": "2026-01-27T05:13:00.836438Z", "modified": "2026-01-27T05:13:00.836438Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.836438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a480ac09-fc3e-4f08-9654-fc0b1c1f825a", "created": "2026-01-27T05:13:00.837119Z", "modified": "2026-01-27T05:13:00.837119Z", "relationship_type": "indicates", "source_ref": "indicator--9a04cf99-b339-4bb4-8cb3-808708a882e0", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125109f1-f4c2-4705-b956-a4351f44531b", "created": "2026-01-27T05:13:00.837291Z", "modified": "2026-01-27T05:13:00.837291Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy-phone-app.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.837291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5965c2d5-f587-4fa1-bdbe-66febfbc0f58", "created": "2026-01-27T05:13:00.837968Z", "modified": "2026-01-27T05:13:00.837968Z", "relationship_type": "indicates", "source_ref": "indicator--125109f1-f4c2-4705-b956-a4351f44531b", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9bcb72-7d32-4808-ba35-f0cda51325f3", "created": "2026-01-27T05:13:00.838141Z", "modified": "2026-01-27T05:13:00.838141Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phonetrackerofficial']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.838141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58b5b6d2-5c8d-4f0c-b111-f687e6de355b", "created": "2026-01-27T05:13:00.838809Z", "modified": "2026-01-27T05:13:00.838809Z", "relationship_type": "indicates", "source_ref": "indicator--ec9bcb72-7d32-4808-ba35-f0cda51325f3", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c242c2a1-c215-4280-8126-4059f9fc0745", "created": "2026-01-27T05:13:00.838984Z", "modified": "2026-01-27T05:13:00.838984Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phonetrackerofficial1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.838984Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5f7d906-8acb-49fe-b87c-2b34536919b6", "created": "2026-01-27T05:13:00.839641Z", "modified": "2026-01-27T05:13:00.839641Z", "relationship_type": "indicates", "source_ref": "indicator--c242c2a1-c215-4280-8126-4059f9fc0745", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514655fc-9c9a-494f-9115-6e6325bad250", "created": "2026-01-27T05:13:00.839831Z", "modified": "2026-01-27T05:13:00.839831Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5F61BEB9591ADBDF9DA5B141A1EF35CDC0944C8C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.839831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c2dca3d-5d14-4321-bec2-dafd5a42102e", "created": "2026-01-27T05:13:00.840602Z", "modified": "2026-01-27T05:13:00.840602Z", "relationship_type": "indicates", "source_ref": "indicator--514655fc-9c9a-494f-9115-6e6325bad250", "target_ref": "malware--577ca84c-42b4-4600-a144-5c8433c06396"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d9d3a04c-7389-4518-bf5e-45ddf38def51", "created": "2026-01-27T05:13:00.840788Z", "modified": "2026-01-27T05:13:00.840788Z", "name": "OneLocator", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ceda65-fb2e-4b5c-b710-7944871bc952", "created": "2026-01-27T05:13:00.840963Z", "modified": "2026-01-27T05:13:00.840963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='locatorprivacy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.840963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6cef15e-0a4b-4489-b1bf-841429d81cbc", "created": "2026-01-27T05:13:00.841642Z", "modified": "2026-01-27T05:13:00.841642Z", "relationship_type": "indicates", "source_ref": "indicator--74ceda65-fb2e-4b5c-b710-7944871bc952", "target_ref": "malware--d9d3a04c-7389-4518-bf5e-45ddf38def51"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a12cef-73c9-4e70-bb10-0dc9cc3dd702", "created": "2026-01-27T05:13:00.841832Z", "modified": "2026-01-27T05:13:00.841832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='locatorprivacy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.841832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b01b269b-1e4b-42ae-8ef8-ae00755d4642", "created": "2026-01-27T05:13:00.842609Z", "modified": "2026-01-27T05:13:00.842609Z", "relationship_type": "indicates", "source_ref": "indicator--f5a12cef-73c9-4e70-bb10-0dc9cc3dd702", "target_ref": "malware--d9d3a04c-7389-4518-bf5e-45ddf38def51"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb2d937-10c1-4d87-82e2-cb16bd72bd29", "created": "2026-01-27T05:13:00.842801Z", "modified": "2026-01-27T05:13:00.842801Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onelocator.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.842801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42d3f44c-1159-4ab3-9009-0484e1cf3b80", "created": "2026-01-27T05:13:00.843476Z", "modified": "2026-01-27T05:13:00.843476Z", "relationship_type": "indicates", "source_ref": "indicator--5bb2d937-10c1-4d87-82e2-cb16bd72bd29", "target_ref": "malware--d9d3a04c-7389-4518-bf5e-45ddf38def51"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bde939b-6f7b-4963-bf41-45f74439e447", "created": "2026-01-27T05:13:00.843655Z", "modified": "2026-01-27T05:13:00.843655Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mg.locations.track5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.843655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcedf3f3-ea02-4d58-8303-765889fdad18", "created": "2026-01-27T05:13:00.844323Z", "modified": "2026-01-27T05:13:00.844323Z", "relationship_type": "indicates", "source_ref": "indicator--6bde939b-6f7b-4963-bf41-45f74439e447", "target_ref": "malware--d9d3a04c-7389-4518-bf5e-45ddf38def51"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f599e1c-e650-4a16-a2ef-61b7ec75efdd", "created": "2026-01-27T05:13:00.844497Z", "modified": "2026-01-27T05:13:00.844497Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E43B5671CBA3F48619BF00D6E380BBC2F02A5DCA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.844497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--274bfda6-0351-4095-ab66-f8e82f4f1e5c", "created": "2026-01-27T05:13:00.845281Z", "modified": "2026-01-27T05:13:00.845281Z", "relationship_type": "indicates", "source_ref": "indicator--0f599e1c-e650-4a16-a2ef-61b7ec75efdd", "target_ref": "malware--d9d3a04c-7389-4518-bf5e-45ddf38def51"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847", "created": "2026-01-27T05:13:00.845456Z", "modified": "2026-01-27T05:13:00.845456Z", "name": "EvaSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f02032-aec7-4f44-8b23-04001734a53d", "created": "2026-01-27T05:13:00.845628Z", "modified": "2026-01-27T05:13:00.845628Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.845628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b68d323e-061b-4ec7-b65e-d1a397c45d2c", "created": "2026-01-27T05:13:00.84631Z", "modified": "2026-01-27T05:13:00.84631Z", "relationship_type": "indicates", "source_ref": "indicator--47f02032-aec7-4f44-8b23-04001734a53d", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f016f33-21dc-45a1-b147-d936549e9ff4", "created": "2026-01-27T05:13:00.846484Z", "modified": "2026-01-27T05:13:00.846484Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ub.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.846484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bd48dab-81c5-4c05-9bfe-487d85bc4ede", "created": "2026-01-27T05:13:00.847162Z", "modified": "2026-01-27T05:13:00.847162Z", "relationship_type": "indicates", "source_ref": "indicator--6f016f33-21dc-45a1-b147-d936549e9ff4", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce27e58-8a2f-4762-9f78-005c1bd19305", "created": "2026-01-27T05:13:00.847335Z", "modified": "2026-01-27T05:13:00.847335Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uc.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.847335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fbb37bd-6ca2-4561-819b-c239e8efccce", "created": "2026-01-27T05:13:00.848024Z", "modified": "2026-01-27T05:13:00.848024Z", "relationship_type": "indicates", "source_ref": "indicator--7ce27e58-8a2f-4762-9f78-005c1bd19305", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec646de-fc3f-4874-96f2-e1fee05eca93", "created": "2026-01-27T05:13:00.848198Z", "modified": "2026-01-27T05:13:00.848198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ud.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.848198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f2fab89-59f0-4912-bbff-65a4e67fb698", "created": "2026-01-27T05:13:00.84888Z", "modified": "2026-01-27T05:13:00.84888Z", "relationship_type": "indicates", "source_ref": "indicator--0ec646de-fc3f-4874-96f2-e1fee05eca93", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c76acce-ccc8-4666-bdb8-8799da26b5b8", "created": "2026-01-27T05:13:00.84906Z", "modified": "2026-01-27T05:13:00.84906Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ue.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.84906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d586a6d-0765-45ea-8220-c14bd72d1707", "created": "2026-01-27T05:13:00.849759Z", "modified": "2026-01-27T05:13:00.849759Z", "relationship_type": "indicates", "source_ref": "indicator--4c76acce-ccc8-4666-bdb8-8799da26b5b8", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82377081-8167-4d72-80ea-d67a0fd04d56", "created": "2026-01-27T05:13:00.849936Z", "modified": "2026-01-27T05:13:00.849936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.849936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e523733d-4afd-464d-b168-00b69e81dc33", "created": "2026-01-27T05:13:00.85071Z", "modified": "2026-01-27T05:13:00.85071Z", "relationship_type": "indicates", "source_ref": "indicator--82377081-8167-4d72-80ea-d67a0fd04d56", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5322d8bb-eed3-4d83-ba85-901d11591b67", "created": "2026-01-27T05:13:00.850914Z", "modified": "2026-01-27T05:13:00.850914Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ug.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.850914Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a4a35ac-afc7-4265-9080-a02055954d4b", "created": "2026-01-27T05:13:00.851576Z", "modified": "2026-01-27T05:13:00.851576Z", "relationship_type": "indicates", "source_ref": "indicator--5322d8bb-eed3-4d83-ba85-901d11591b67", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcf94c5-c716-47e9-8e8c-37c405f7792f", "created": "2026-01-27T05:13:00.851766Z", "modified": "2026-01-27T05:13:00.851766Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uh.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.851766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--203ad6cb-6fad-4b36-b00f-e2c33e688a34", "created": "2026-01-27T05:13:00.852443Z", "modified": "2026-01-27T05:13:00.852443Z", "relationship_type": "indicates", "source_ref": "indicator--1fcf94c5-c716-47e9-8e8c-37c405f7792f", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36da6d35-d86e-4884-8f50-21ac790b739d", "created": "2026-01-27T05:13:00.852615Z", "modified": "2026-01-27T05:13:00.852615Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ui.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.852615Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b9eb4d6-739a-49d5-94d5-5ac7db37b802", "created": "2026-01-27T05:13:00.853291Z", "modified": "2026-01-27T05:13:00.853291Z", "relationship_type": "indicates", "source_ref": "indicator--36da6d35-d86e-4884-8f50-21ac790b739d", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9950075-876f-40ae-810e-8bfba06c420b", "created": "2026-01-27T05:13:00.853465Z", "modified": "2026-01-27T05:13:00.853465Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uj.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.853465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb7fc6a6-1546-41fa-a303-9ead3dc92adb", "created": "2026-01-27T05:13:00.854148Z", "modified": "2026-01-27T05:13:00.854148Z", "relationship_type": "indicates", "source_ref": "indicator--a9950075-876f-40ae-810e-8bfba06c420b", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d787dd6-ba75-4e25-8d43-728e2b470d91", "created": "2026-01-27T05:13:00.854323Z", "modified": "2026-01-27T05:13:00.854323Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uk.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.854323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec79a993-93d0-4de8-9910-bac46ccd651e", "created": "2026-01-27T05:13:00.854996Z", "modified": "2026-01-27T05:13:00.854996Z", "relationship_type": "indicates", "source_ref": "indicator--6d787dd6-ba75-4e25-8d43-728e2b470d91", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58041f65-0d3c-4a9c-b086-0686a133c604", "created": "2026-01-27T05:13:00.855169Z", "modified": "2026-01-27T05:13:00.855169Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ul.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.855169Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d4a318f-2e90-4e7d-84c7-684751351fbd", "created": "2026-01-27T05:13:00.855835Z", "modified": "2026-01-27T05:13:00.855835Z", "relationship_type": "indicates", "source_ref": "indicator--58041f65-0d3c-4a9c-b086-0686a133c604", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce861de-a0e5-4298-a168-caa82f3bdeb2", "created": "2026-01-27T05:13:00.856008Z", "modified": "2026-01-27T05:13:00.856008Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='um.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.856008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b5e347e-35b4-4b8e-9367-7dbe9f23d770", "created": "2026-01-27T05:13:00.856685Z", "modified": "2026-01-27T05:13:00.856685Z", "relationship_type": "indicates", "source_ref": "indicator--4ce861de-a0e5-4298-a168-caa82f3bdeb2", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62064862-9604-4d5b-a578-987dffdd2daf", "created": "2026-01-27T05:13:00.85688Z", "modified": "2026-01-27T05:13:00.85688Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='un.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.85688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2955fced-c8df-491d-9291-eda5703c2deb", "created": "2026-01-27T05:13:00.857553Z", "modified": "2026-01-27T05:13:00.857553Z", "relationship_type": "indicates", "source_ref": "indicator--62064862-9604-4d5b-a578-987dffdd2daf", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895eb5c3-78b9-42d7-84e7-08ade2f702da", "created": "2026-01-27T05:13:00.857732Z", "modified": "2026-01-27T05:13:00.857732Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uo.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.857732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9ef1d26-f032-4edb-b246-4d764f49fc9f", "created": "2026-01-27T05:13:00.858519Z", "modified": "2026-01-27T05:13:00.858519Z", "relationship_type": "indicates", "source_ref": "indicator--895eb5c3-78b9-42d7-84e7-08ade2f702da", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a403300-889a-4eba-b703-64becbb72497", "created": "2026-01-27T05:13:00.85869Z", "modified": "2026-01-27T05:13:00.85869Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='up.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.85869Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--941e2de5-d107-495b-8d68-47a3b50fcaff", "created": "2026-01-27T05:13:00.85936Z", "modified": "2026-01-27T05:13:00.85936Z", "relationship_type": "indicates", "source_ref": "indicator--8a403300-889a-4eba-b703-64becbb72497", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77af9a67-f3d1-43aa-8a68-c30932a0fb8d", "created": "2026-01-27T05:13:00.859533Z", "modified": "2026-01-27T05:13:00.859533Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uq.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.859533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--031d67d0-ff64-4bfc-96db-6be43502dd32", "created": "2026-01-27T05:13:00.860213Z", "modified": "2026-01-27T05:13:00.860213Z", "relationship_type": "indicates", "source_ref": "indicator--77af9a67-f3d1-43aa-8a68-c30932a0fb8d", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c8b208-8446-45da-b1dd-e397191c7a8b", "created": "2026-01-27T05:13:00.860395Z", "modified": "2026-01-27T05:13:00.860395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ur.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.860395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3615f1f-b6d1-4f4b-896d-9fab34f36333", "created": "2026-01-27T05:13:00.861078Z", "modified": "2026-01-27T05:13:00.861078Z", "relationship_type": "indicates", "source_ref": "indicator--24c8b208-8446-45da-b1dd-e397191c7a8b", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf21dda9-16bd-4876-9820-f68dd53fa3d1", "created": "2026-01-27T05:13:00.861253Z", "modified": "2026-01-27T05:13:00.861253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.861253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4db53a79-de03-488d-9b65-d2fe5321e385", "created": "2026-01-27T05:13:00.861924Z", "modified": "2026-01-27T05:13:00.861924Z", "relationship_type": "indicates", "source_ref": "indicator--cf21dda9-16bd-4876-9820-f68dd53fa3d1", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6155f71-9242-45b6-9c72-2d6358032f90", "created": "2026-01-27T05:13:00.862096Z", "modified": "2026-01-27T05:13:00.862096Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.evaspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.862096Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6566b137-e51d-43b6-9286-e62f4b00e12d", "created": "2026-01-27T05:13:00.862772Z", "modified": "2026-01-27T05:13:00.862772Z", "relationship_type": "indicates", "source_ref": "indicator--d6155f71-9242-45b6-9c72-2d6358032f90", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981eff1a-5073-4aed-b718-a5f7d4c8030f", "created": "2026-01-27T05:13:00.862946Z", "modified": "2026-01-27T05:13:00.862946Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyrix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.862946Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--260b7073-acc6-4ebb-8cb2-e8d937eb61ff", "created": "2026-01-27T05:13:00.863636Z", "modified": "2026-01-27T05:13:00.863636Z", "relationship_type": "indicates", "source_ref": "indicator--981eff1a-5073-4aed-b718-a5f7d4c8030f", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fbd915-ac36-4feb-aba6-4c40468e4386", "created": "2026-01-27T05:13:00.86383Z", "modified": "2026-01-27T05:13:00.86383Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyrix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.86383Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80c0d4c6-611d-4f68-b786-830d4e9ee426", "created": "2026-01-27T05:13:00.864493Z", "modified": "2026-01-27T05:13:00.864493Z", "relationship_type": "indicates", "source_ref": "indicator--67fbd915-ac36-4feb-aba6-4c40468e4386", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fac3281-9d8a-44e4-b72d-03a0eb51b723", "created": "2026-01-27T05:13:00.864671Z", "modified": "2026-01-27T05:13:00.864671Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shuch6ba0w.spyrixweb.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.864671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67fc4332-5d75-48e5-8a5a-f19c9fa84e3c", "created": "2026-01-27T05:13:00.865377Z", "modified": "2026-01-27T05:13:00.865377Z", "relationship_type": "indicates", "source_ref": "indicator--4fac3281-9d8a-44e4-b72d-03a0eb51b723", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e33c067-f37d-4d9d-9655-3ff73f937083", "created": "2026-01-27T05:13:00.865548Z", "modified": "2026-01-27T05:13:00.865548Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sxde-download.spyrix-sfk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.865548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73a053ef-01c6-44d9-a069-866d0e7541b8", "created": "2026-01-27T05:13:00.866366Z", "modified": "2026-01-27T05:13:00.866366Z", "relationship_type": "indicates", "source_ref": "indicator--8e33c067-f37d-4d9d-9655-3ff73f937083", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19eb8efa-bad4-4ce5-9fdd-025d1bbaba8c", "created": "2026-01-27T05:13:00.866542Z", "modified": "2026-01-27T05:13:00.866542Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyrix-sfk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.866542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4db9caf-dbce-47aa-89ab-90738f5b3288", "created": "2026-01-27T05:13:00.867218Z", "modified": "2026-01-27T05:13:00.867218Z", "relationship_type": "indicates", "source_ref": "indicator--19eb8efa-bad4-4ce5-9fdd-025d1bbaba8c", "target_ref": "malware--3e5423aa-c4fd-45b0-8d43-d848df118847"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899", "created": "2026-01-27T05:13:00.867393Z", "modified": "2026-01-27T05:13:00.867393Z", "name": "RealtimeSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef818b2-8ad9-417f-84fc-4c7169bbc260", "created": "2026-01-27T05:13:00.867561Z", "modified": "2026-01-27T05:13:00.867561Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='realtime-spy-mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.867561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f990219c-2a1d-47a9-bb27-2dfb535521f8", "created": "2026-01-27T05:13:00.868252Z", "modified": "2026-01-27T05:13:00.868252Z", "relationship_type": "indicates", "source_ref": "indicator--6ef818b2-8ad9-417f-84fc-4c7169bbc260", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f68935-794c-4935-957f-81ab9ccbadbe", "created": "2026-01-27T05:13:00.868427Z", "modified": "2026-01-27T05:13:00.868427Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spytech-web.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.868427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0688a7cf-6db0-4a2f-b0ff-a52ba394d25e", "created": "2026-01-27T05:13:00.869111Z", "modified": "2026-01-27T05:13:00.869111Z", "relationship_type": "indicates", "source_ref": "indicator--b9f68935-794c-4935-957f-81ab9ccbadbe", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a960cb12-0ead-4190-bdcb-425c0562e50d", "created": "2026-01-27T05:13:00.869285Z", "modified": "2026-01-27T05:13:00.869285Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytech-web.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.869285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--145d25c1-19c6-4fbc-8aca-e5dde4bdd193", "created": "2026-01-27T05:13:00.869979Z", "modified": "2026-01-27T05:13:00.869979Z", "relationship_type": "indicates", "source_ref": "indicator--a960cb12-0ead-4190-bdcb-425c0562e50d", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a5ef20-7ef3-474a-b1bf-c29ccd5e3570", "created": "2026-01-27T05:13:00.870154Z", "modified": "2026-01-27T05:13:00.870154Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='realtime-spy-mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.870154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c264772a-ee0b-4c3a-9dc6-b57d95c23534", "created": "2026-01-27T05:13:00.87087Z", "modified": "2026-01-27T05:13:00.87087Z", "relationship_type": "indicates", "source_ref": "indicator--13a5ef20-7ef3-474a-b1bf-c29ccd5e3570", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7b3bd9-51f5-4653-8c4e-b81954f9b608", "created": "2026-01-27T05:13:00.871051Z", "modified": "2026-01-27T05:13:00.871051Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.realtime-spy-mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.871051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b7511f4-522f-42fc-8e8f-1bdc8022efd2", "created": "2026-01-27T05:13:00.871768Z", "modified": "2026-01-27T05:13:00.871768Z", "relationship_type": "indicates", "source_ref": "indicator--cc7b3bd9-51f5-4653-8c4e-b81954f9b608", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a06f649-eeaa-4488-a8cc-0f92c5743b71", "created": "2026-01-27T05:13:00.872003Z", "modified": "2026-01-27T05:13:00.872003Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.realtime.spyapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.872003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--457e5b83-5dcc-4745-b58e-795964ff79da", "created": "2026-01-27T05:13:00.872675Z", "modified": "2026-01-27T05:13:00.872675Z", "relationship_type": "indicates", "source_ref": "indicator--7a06f649-eeaa-4488-a8cc-0f92c5743b71", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca61d1e-2d02-4c05-971a-fb80aaae394d", "created": "2026-01-27T05:13:00.87287Z", "modified": "2026-01-27T05:13:00.87287Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8CD8FB235EA7F9B0FC308C1A59AB561C3869878C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.87287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b782465-9a29-4227-99ab-d10431cc4624", "created": "2026-01-27T05:13:00.873649Z", "modified": "2026-01-27T05:13:00.873649Z", "relationship_type": "indicates", "source_ref": "indicator--eca61d1e-2d02-4c05-971a-fb80aaae394d", "target_ref": "malware--ff8cfd59-7d12-4bc3-b36e-b04564bfc899"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba", "created": "2026-01-27T05:13:00.873842Z", "modified": "2026-01-27T05:13:00.873842Z", "name": "jjspy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cbe2d3-bdd0-4ce5-adef-0453914b7a2c", "created": "2026-01-27T05:13:00.87401Z", "modified": "2026-01-27T05:13:00.87401Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.87401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbfc14dd-9815-4fc4-897f-461fb03b281c", "created": "2026-01-27T05:13:00.874813Z", "modified": "2026-01-27T05:13:00.874813Z", "relationship_type": "indicates", "source_ref": "indicator--56cbe2d3-bdd0-4ce5-adef-0453914b7a2c", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0892ca09-4dff-4a82-aa4c-7548a04ebe44", "created": "2026-01-27T05:13:00.874991Z", "modified": "2026-01-27T05:13:00.874991Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cloud.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.874991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14552df2-bab4-4310-9466-c02d599dbfed", "created": "2026-01-27T05:13:00.875655Z", "modified": "2026-01-27T05:13:00.875655Z", "relationship_type": "indicates", "source_ref": "indicator--0892ca09-4dff-4a82-aa4c-7548a04ebe44", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82e4afa-841e-4e10-9d46-b39e024d3925", "created": "2026-01-27T05:13:00.875868Z", "modified": "2026-01-27T05:13:00.875868Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='jjspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.875868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdfb9987-8b47-46c9-8599-525838c33684", "created": "2026-01-27T05:13:00.876537Z", "modified": "2026-01-27T05:13:00.876537Z", "relationship_type": "indicates", "source_ref": "indicator--b82e4afa-841e-4e10-9d46-b39e024d3925", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ed68bf-5e30-4203-ae01-767144ef53e6", "created": "2026-01-27T05:13:00.876716Z", "modified": "2026-01-27T05:13:00.876716Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='jjspy.ml']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.876716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ea6327e-36de-4980-b217-0a83dfd2100b", "created": "2026-01-27T05:13:00.877409Z", "modified": "2026-01-27T05:13:00.877409Z", "relationship_type": "indicates", "source_ref": "indicator--d3ed68bf-5e30-4203-ae01-767144ef53e6", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fda1eee-1589-4343-b205-d37f3e1539a5", "created": "2026-01-27T05:13:00.877583Z", "modified": "2026-01-27T05:13:00.877583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.jjspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.877583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--404b9640-2b70-4c07-99c5-069cd76c247d", "created": "2026-01-27T05:13:00.878302Z", "modified": "2026-01-27T05:13:00.878302Z", "relationship_type": "indicates", "source_ref": "indicator--8fda1eee-1589-4343-b205-d37f3e1539a5", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaea61f-4c98-42b1-90ad-bfeb15027b82", "created": "2026-01-27T05:13:00.878484Z", "modified": "2026-01-27T05:13:00.878484Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phone-backup-service.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.878484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2304c56f-9aec-41fa-998c-26f071711fd9", "created": "2026-01-27T05:13:00.879201Z", "modified": "2026-01-27T05:13:00.879201Z", "relationship_type": "indicates", "source_ref": "indicator--caaea61f-4c98-42b1-90ad-bfeb15027b82", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be961d4-95db-432e-8099-ceb65bddb85c", "created": "2026-01-27T05:13:00.879384Z", "modified": "2026-01-27T05:13:00.879384Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rrspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.879384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7bb3f46-62dd-43b5-8a03-fa64193e00e3", "created": "2026-01-27T05:13:00.880059Z", "modified": "2026-01-27T05:13:00.880059Z", "relationship_type": "indicates", "source_ref": "indicator--6be961d4-95db-432e-8099-ceb65bddb85c", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff843869-1a67-4ee1-b9f0-e1cdb61f5cc3", "created": "2026-01-27T05:13:00.880234Z", "modified": "2026-01-27T05:13:00.880234Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rtc.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.880234Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cc57cf2-7041-4745-8734-4377a6795545", "created": "2026-01-27T05:13:00.880921Z", "modified": "2026-01-27T05:13:00.880921Z", "relationship_type": "indicates", "source_ref": "indicator--ff843869-1a67-4ee1-b9f0-e1cdb61f5cc3", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048fba1c-91b2-434f-b3ae-58e17d66307d", "created": "2026-01-27T05:13:00.881098Z", "modified": "2026-01-27T05:13:00.881098Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='service.n.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.881098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5560c834-1fe4-443e-a55e-df44a058d739", "created": "2026-01-27T05:13:00.881789Z", "modified": "2026-01-27T05:13:00.881789Z", "relationship_type": "indicates", "source_ref": "indicator--048fba1c-91b2-434f-b3ae-58e17d66307d", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc91d00a-ce12-45e3-b365-1d7f9d0f1709", "created": "2026-01-27T05:13:00.881982Z", "modified": "2026-01-27T05:13:00.881982Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='service.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.881982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aaaf0ffe-48df-4c8e-a004-27ec8436b1ce", "created": "2026-01-27T05:13:00.882796Z", "modified": "2026-01-27T05:13:00.882796Z", "relationship_type": "indicates", "source_ref": "indicator--cc91d00a-ce12-45e3-b365-1d7f9d0f1709", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34079e74-08a4-49bd-92d6-b7833bc38863", "created": "2026-01-27T05:13:00.882973Z", "modified": "2026-01-27T05:13:00.882973Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttjj.ga']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.882973Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb73d38f-5848-43f3-9a30-14b789d348c6", "created": "2026-01-27T05:13:00.883633Z", "modified": "2026-01-27T05:13:00.883633Z", "relationship_type": "indicates", "source_ref": "indicator--34079e74-08a4-49bd-92d6-b7833bc38863", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed00f8ad-772c-4b3a-b781-4cd253312732", "created": "2026-01-27T05:13:00.883838Z", "modified": "2026-01-27T05:13:00.883838Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttjj.tk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.883838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--885a898d-e613-4eef-8ced-3558519aea8d", "created": "2026-01-27T05:13:00.884511Z", "modified": "2026-01-27T05:13:00.884511Z", "relationship_type": "indicates", "source_ref": "indicator--ed00f8ad-772c-4b3a-b781-4cd253312732", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dae397e-4a02-4fb4-9aaa-39c6398a7d60", "created": "2026-01-27T05:13:00.884686Z", "modified": "2026-01-27T05:13:00.884686Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttjj.ml']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.884686Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77cd185c-1047-49d6-94f6-923429dec969", "created": "2026-01-27T05:13:00.885361Z", "modified": "2026-01-27T05:13:00.885361Z", "relationship_type": "indicates", "source_ref": "indicator--3dae397e-4a02-4fb4-9aaa-39c6398a7d60", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc363ce-7b57-4661-82ae-dec78ad0e541", "created": "2026-01-27T05:13:00.885536Z", "modified": "2026-01-27T05:13:00.885536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.885536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72036d56-b212-407f-8908-782059a52391", "created": "2026-01-27T05:13:00.886227Z", "modified": "2026-01-27T05:13:00.886227Z", "relationship_type": "indicates", "source_ref": "indicator--4dc363ce-7b57-4661-82ae-dec78ad0e541", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ae2524-3715-41c1-a0f7-00b1db32d3fb", "created": "2026-01-27T05:13:00.886405Z", "modified": "2026-01-27T05:13:00.886405Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.886405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bca85659-d8c0-467a-a00a-2d0867d75340", "created": "2026-01-27T05:13:00.887087Z", "modified": "2026-01-27T05:13:00.887087Z", "relationship_type": "indicates", "source_ref": "indicator--61ae2524-3715-41c1-a0f7-00b1db32d3fb", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4581af-2f44-4ac6-8bcd-7c29d61e83b6", "created": "2026-01-27T05:13:00.887261Z", "modified": "2026-01-27T05:13:00.887261Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ttspy.top']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.887261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62475e7a-80b9-48fb-a18b-8f2605600bbb", "created": "2026-01-27T05:13:00.887946Z", "modified": "2026-01-27T05:13:00.887946Z", "relationship_type": "indicates", "source_ref": "indicator--7e4581af-2f44-4ac6-8bcd-7c29d61e83b6", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac6d670-d817-4804-a8e4-79a185fbe72e", "created": "2026-01-27T05:13:00.888123Z", "modified": "2026-01-27T05:13:00.888123Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='upload.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.888123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53900269-4c26-4e2d-b21d-860adc9b6d66", "created": "2026-01-27T05:13:00.888964Z", "modified": "2026-01-27T05:13:00.888964Z", "relationship_type": "indicates", "source_ref": "indicator--bac6d670-d817-4804-a8e4-79a185fbe72e", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee37994a-a933-4fa8-991f-c5ab65e9ec46", "created": "2026-01-27T05:13:00.889142Z", "modified": "2026-01-27T05:13:00.889142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ws.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.889142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d9b7e79-60e1-41a8-9f03-6818ddae1416", "created": "2026-01-27T05:13:00.889814Z", "modified": "2026-01-27T05:13:00.889814Z", "relationship_type": "indicates", "source_ref": "indicator--ee37994a-a933-4fa8-991f-c5ab65e9ec46", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913258ad-a618-460d-99fc-8b14e311d981", "created": "2026-01-27T05:13:00.889991Z", "modified": "2026-01-27T05:13:00.889991Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.ttjj.tk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.889991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a46dcce6-7390-44d5-b8fa-d5d3b92d3fda", "created": "2026-01-27T05:13:00.890768Z", "modified": "2026-01-27T05:13:00.890768Z", "relationship_type": "indicates", "source_ref": "indicator--913258ad-a618-460d-99fc-8b14e311d981", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187e9f8c-e55a-4f34-9c4a-510bdc12e1c0", "created": "2026-01-27T05:13:00.890944Z", "modified": "2026-01-27T05:13:00.890944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wx.weiguanai.cn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.890944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fc9de72-be5b-432e-9b3b-4e29b87fb5b7", "created": "2026-01-27T05:13:00.891604Z", "modified": "2026-01-27T05:13:00.891604Z", "relationship_type": "indicates", "source_ref": "indicator--187e9f8c-e55a-4f34-9c4a-510bdc12e1c0", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7166b6-08b6-4a7d-9417-3a4ee9bd8fcb", "created": "2026-01-27T05:13:00.891799Z", "modified": "2026-01-27T05:13:00.891799Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.jjspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.891799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c52d104-50fd-4cc1-a048-3916f5afbfb6", "created": "2026-01-27T05:13:00.892464Z", "modified": "2026-01-27T05:13:00.892464Z", "relationship_type": "indicates", "source_ref": "indicator--fe7166b6-08b6-4a7d-9417-3a4ee9bd8fcb", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c11c27e-b5e0-4690-8268-f5c0ac52ca02", "created": "2026-01-27T05:13:00.892637Z", "modified": "2026-01-27T05:13:00.892637Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.ttspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.892637Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c15a65f9-c414-49d5-b8a2-f6b166987550", "created": "2026-01-27T05:13:00.893315Z", "modified": "2026-01-27T05:13:00.893315Z", "relationship_type": "indicates", "source_ref": "indicator--6c11c27e-b5e0-4690-8268-f5c0ac52ca02", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db15bca-5144-4ad9-bfea-e29e496716ed", "created": "2026-01-27T05:13:00.893488Z", "modified": "2026-01-27T05:13:00.893488Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9067b08afe27a6e6afc939ed441e3c3575b7566698e59c647cd89ffc813169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.893488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ad2be7f-3e3b-4c24-94fe-68c3a80b5734", "created": "2026-01-27T05:13:00.894335Z", "modified": "2026-01-27T05:13:00.894335Z", "relationship_type": "indicates", "source_ref": "indicator--1db15bca-5144-4ad9-bfea-e29e496716ed", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce40bd3-72cd-4abf-bdd9-0400a9fe8cfa", "created": "2026-01-27T05:13:00.89451Z", "modified": "2026-01-27T05:13:00.89451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5668ce93a99eff4dea6366619e70904efb8d61082c3adf89020fc7582f14d9ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.89451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea644f23-1fda-4c62-ae11-9d5bbd39f852", "created": "2026-01-27T05:13:00.895369Z", "modified": "2026-01-27T05:13:00.895369Z", "relationship_type": "indicates", "source_ref": "indicator--4ce40bd3-72cd-4abf-bdd9-0400a9fe8cfa", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198ba28b-0a30-4ca4-9d19-becd3dd1d1e5", "created": "2026-01-27T05:13:00.895545Z", "modified": "2026-01-27T05:13:00.895545Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='011b3e70ea3bec4e59cc5f4acb6ad1a88b9b0feb856dc25b3eceaf39bbddb38a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.895545Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f16bd183-be78-4c89-808f-5cadd28b1009", "created": "2026-01-27T05:13:00.896401Z", "modified": "2026-01-27T05:13:00.896401Z", "relationship_type": "indicates", "source_ref": "indicator--198ba28b-0a30-4ca4-9d19-becd3dd1d1e5", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a883b121-847b-4ec4-80a4-322f3ee4729c", "created": "2026-01-27T05:13:00.896603Z", "modified": "2026-01-27T05:13:00.896603Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='66c01bf7ce0c8c90b4f63ece8c024876360ac50e5cf0c2bdb166e30d0b52cad2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.896603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e27bad08-4003-47ea-b059-c027b13f7f4b", "created": "2026-01-27T05:13:00.897471Z", "modified": "2026-01-27T05:13:00.897471Z", "relationship_type": "indicates", "source_ref": "indicator--a883b121-847b-4ec4-80a4-322f3ee4729c", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d914636-8146-49d1-842a-a527911f8f19", "created": "2026-01-27T05:13:00.897647Z", "modified": "2026-01-27T05:13:00.897647Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.backup.tt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.897647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--016b320e-5b55-4015-a70b-1349f2d55ecb", "created": "2026-01-27T05:13:00.898338Z", "modified": "2026-01-27T05:13:00.898338Z", "relationship_type": "indicates", "source_ref": "indicator--2d914636-8146-49d1-842a-a527911f8f19", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f62a376-da8b-495c-9d4f-6efd4152c028", "created": "2026-01-27T05:13:00.898514Z", "modified": "2026-01-27T05:13:00.898514Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='002DD372C94E80600C7C60192CBD701A3C3B87EE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.898514Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e7d9a5e-ad84-4dbe-8cdd-bd13d7152b76", "created": "2026-01-27T05:13:00.899415Z", "modified": "2026-01-27T05:13:00.899415Z", "relationship_type": "indicates", "source_ref": "indicator--0f62a376-da8b-495c-9d4f-6efd4152c028", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578294eb-886c-42f7-9c56-92cdab9be782", "created": "2026-01-27T05:13:00.899592Z", "modified": "2026-01-27T05:13:00.899592Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4AF16661FC885F7CC84358CCB8F272308436D5E3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.899592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0725c8c-19b8-443c-a506-fd5f658e01c6", "created": "2026-01-27T05:13:00.900371Z", "modified": "2026-01-27T05:13:00.900371Z", "relationship_type": "indicates", "source_ref": "indicator--578294eb-886c-42f7-9c56-92cdab9be782", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36638d4-3b0b-4f16-b38d-b4b977cb3347", "created": "2026-01-27T05:13:00.900546Z", "modified": "2026-01-27T05:13:00.900546Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6DFB725019C7784B400D940DAAEDAED18C5B898B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.900546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47c35fc1-e1c3-4d7d-813e-9172ca024260", "created": "2026-01-27T05:13:00.901324Z", "modified": "2026-01-27T05:13:00.901324Z", "relationship_type": "indicates", "source_ref": "indicator--d36638d4-3b0b-4f16-b38d-b4b977cb3347", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867cfa5a-fd23-479f-8f19-2151dc243f8f", "created": "2026-01-27T05:13:00.901501Z", "modified": "2026-01-27T05:13:00.901501Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D3E6A092741CBA59BE9308FBA72DF887EAB184FD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.901501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa9a2502-be29-4ee4-9cd5-62d77050a7b5", "created": "2026-01-27T05:13:00.902284Z", "modified": "2026-01-27T05:13:00.902284Z", "relationship_type": "indicates", "source_ref": "indicator--867cfa5a-fd23-479f-8f19-2151dc243f8f", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88211097-2f1b-4ccf-a03e-df61a0945035", "created": "2026-01-27T05:13:00.902465Z", "modified": "2026-01-27T05:13:00.902465Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D8418B279414687729D37B34E53AB75D502B9F73']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.902465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--902f67a6-c932-4b9f-be35-6d068e3715f6", "created": "2026-01-27T05:13:00.903254Z", "modified": "2026-01-27T05:13:00.903254Z", "relationship_type": "indicates", "source_ref": "indicator--88211097-2f1b-4ccf-a03e-df61a0945035", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f788192-d8d7-48ea-95a9-0310d667622f", "created": "2026-01-27T05:13:00.903435Z", "modified": "2026-01-27T05:13:00.903435Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EE35E2740576480486307C991C762A3FBA8DA46D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.903435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df786896-aa24-4e3f-a2f2-d82d21c8689b", "created": "2026-01-27T05:13:00.904223Z", "modified": "2026-01-27T05:13:00.904223Z", "relationship_type": "indicates", "source_ref": "indicator--7f788192-d8d7-48ea-95a9-0310d667622f", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e68cb9b-43f4-43a3-a1c9-0e6045345bc5", "created": "2026-01-27T05:13:00.904397Z", "modified": "2026-01-27T05:13:00.904397Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8FCBCA563B1CD0E79CAC595002422C2E54072B7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.904397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--541a033a-ba19-4537-b0ea-0337e7ddaff9", "created": "2026-01-27T05:13:00.905189Z", "modified": "2026-01-27T05:13:00.905189Z", "relationship_type": "indicates", "source_ref": "indicator--6e68cb9b-43f4-43a3-a1c9-0e6045345bc5", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3931231-54af-4608-9798-489c1c65dbed", "created": "2026-01-27T05:13:00.905372Z", "modified": "2026-01-27T05:13:00.905372Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CF627144481D3F1DCFBB6CF12291C540AE325FBE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.905372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7caba13d-0472-4d4c-8794-d43d4dbaa675", "created": "2026-01-27T05:13:00.906166Z", "modified": "2026-01-27T05:13:00.906166Z", "relationship_type": "indicates", "source_ref": "indicator--a3931231-54af-4608-9798-489c1c65dbed", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2548c2df-3190-4beb-a45b-4091a74fa673", "created": "2026-01-27T05:13:00.906342Z", "modified": "2026-01-27T05:13:00.906342Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='34B791B5D35A874D189202EEA1FA99188F58A4C1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.906342Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1dc1d7a7-a010-41c7-94ef-ce9aa0b2f464", "created": "2026-01-27T05:13:00.907129Z", "modified": "2026-01-27T05:13:00.907129Z", "relationship_type": "indicates", "source_ref": "indicator--2548c2df-3190-4beb-a45b-4091a74fa673", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468c0460-a145-4636-8558-34f3858ef42f", "created": "2026-01-27T05:13:00.907307Z", "modified": "2026-01-27T05:13:00.907307Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='933C19015525266982AC6D830CB6B3D25079777B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.907307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ad5177b0-85e1-4dd5-b0bf-b106fbf1abad", "created": "2026-01-27T05:13:00.908219Z", "modified": "2026-01-27T05:13:00.908219Z", "relationship_type": "indicates", "source_ref": "indicator--468c0460-a145-4636-8558-34f3858ef42f", "target_ref": "malware--0e004339-d4a9-4251-bb63-36e6321c62ba"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d877df6f-a1e6-436f-9494-2b290fde852a", "created": "2026-01-27T05:13:00.908397Z", "modified": "2026-01-27T05:13:00.908397Z", "name": "AndroidSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6d637d-7075-496e-b8e0-37d75e935f10", "created": "2026-01-27T05:13:00.908572Z", "modified": "2026-01-27T05:13:00.908572Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.908572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d02d72d-211d-4e98-9003-10cfc48a0017", "created": "2026-01-27T05:13:00.90925Z", "modified": "2026-01-27T05:13:00.90925Z", "relationship_type": "indicates", "source_ref": "indicator--8c6d637d-7075-496e-b8e0-37d75e935f10", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9508f7ec-deab-41d2-be64-a0f584f3b741", "created": "2026-01-27T05:13:00.909425Z", "modified": "2026-01-27T05:13:00.909425Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.909425Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08d0a496-112e-4c0b-b1bc-53674c25be8e", "created": "2026-01-27T05:13:00.91011Z", "modified": "2026-01-27T05:13:00.91011Z", "relationship_type": "indicates", "source_ref": "indicator--9508f7ec-deab-41d2-be64-a0f584f3b741", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7067ce55-9d8e-4a4b-8dab-cadd553c13f5", "created": "2026-01-27T05:13:00.910285Z", "modified": "2026-01-27T05:13:00.910285Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='klg.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.910285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cce6651a-9ba9-4862-8b7b-17811d8e04c7", "created": "2026-01-27T05:13:00.910994Z", "modified": "2026-01-27T05:13:00.910994Z", "relationship_type": "indicates", "source_ref": "indicator--7067ce55-9d8e-4a4b-8dab-cadd553c13f5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3fae4df-367b-4ff3-8fbd-a0344fc23ae3", "created": "2026-01-27T05:13:00.91117Z", "modified": "2026-01-27T05:13:00.91117Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.91117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e720b28-f4c6-4b75-a77b-5c862c7ab0fb", "created": "2026-01-27T05:13:00.911865Z", "modified": "2026-01-27T05:13:00.911865Z", "relationship_type": "indicates", "source_ref": "indicator--e3fae4df-367b-4ff3-8fbd-a0344fc23ae3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e3dc13-9f92-4bf4-b642-9f4557860783", "created": "2026-01-27T05:13:00.912085Z", "modified": "2026-01-27T05:13:00.912085Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.912085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7ac81e4-be8a-4289-a0a7-09812469902b", "created": "2026-01-27T05:13:00.91279Z", "modified": "2026-01-27T05:13:00.91279Z", "relationship_type": "indicates", "source_ref": "indicator--e3e3dc13-9f92-4bf4-b642-9f4557860783", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710afed7-4189-4136-ac60-c1d5e728b580", "created": "2026-01-27T05:13:00.912972Z", "modified": "2026-01-27T05:13:00.912972Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.a-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.912972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bea8490-6708-4b05-b179-6497923cf13c", "created": "2026-01-27T05:13:00.913635Z", "modified": "2026-01-27T05:13:00.913635Z", "relationship_type": "indicates", "source_ref": "indicator--710afed7-4189-4136-ac60-c1d5e728b580", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76309d1c-7028-4c2d-84a3-f3634eafd02f", "created": "2026-01-27T05:13:00.913832Z", "modified": "2026-01-27T05:13:00.913832Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b6e97ee5825ab74bdd97ea9b8d4422ee87393ad24ee2cff2e5f34dc7e458bd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.913832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4c25610-0b78-4390-b454-702b9992432f", "created": "2026-01-27T05:13:00.914678Z", "modified": "2026-01-27T05:13:00.914678Z", "relationship_type": "indicates", "source_ref": "indicator--76309d1c-7028-4c2d-84a3-f3634eafd02f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94aafa6d-b789-450d-a979-ab77d339c601", "created": "2026-01-27T05:13:00.914878Z", "modified": "2026-01-27T05:13:00.914878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f629f0cff6edb68ef94665e5a3f1d86c5f0fe1617f14b29ebd0cc4a6184b0cc7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.914878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c342e6b0-771e-4774-bb46-e0f5d5748f9e", "created": "2026-01-27T05:13:00.915708Z", "modified": "2026-01-27T05:13:00.915708Z", "relationship_type": "indicates", "source_ref": "indicator--94aafa6d-b789-450d-a979-ab77d339c601", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c21ca5-2fbf-4bc4-a90f-a221453be7f9", "created": "2026-01-27T05:13:00.915902Z", "modified": "2026-01-27T05:13:00.915902Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e146efe2256044dd9df7b9479c7144d1fb9f06ec59e7aa535bb506762deeeac6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.915902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a22d63f5-c058-4e17-81df-cf92ac2b52a5", "created": "2026-01-27T05:13:00.916864Z", "modified": "2026-01-27T05:13:00.916864Z", "relationship_type": "indicates", "source_ref": "indicator--35c21ca5-2fbf-4bc4-a90f-a221453be7f9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667d5c3a-2a2b-422a-aa33-b9378004c6ce", "created": "2026-01-27T05:13:00.917044Z", "modified": "2026-01-27T05:13:00.917044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8b47448bd29d8ca137cb613cc4735698a09a52c5955228bb4e5c3a52aea3075']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.917044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20343952-5de7-40ef-8b2e-3eb12ae62180", "created": "2026-01-27T05:13:00.917887Z", "modified": "2026-01-27T05:13:00.917887Z", "relationship_type": "indicates", "source_ref": "indicator--667d5c3a-2a2b-422a-aa33-b9378004c6ce", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b4a6b7-2a4c-421b-b133-357d97b2f2d8", "created": "2026-01-27T05:13:00.918066Z", "modified": "2026-01-27T05:13:00.918066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='840b9360055ae9fe25b916d424d625aa98bfe2aa4ddb5be0f51848683eff3d22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.918066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51fa7ef9-546d-4505-b0ce-f2894117b9de", "created": "2026-01-27T05:13:00.918915Z", "modified": "2026-01-27T05:13:00.918915Z", "relationship_type": "indicates", "source_ref": "indicator--16b4a6b7-2a4c-421b-b133-357d97b2f2d8", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a508935-5033-43e0-88cf-9abef57a2549", "created": "2026-01-27T05:13:00.919092Z", "modified": "2026-01-27T05:13:00.919092Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e966115b948f6747901270bce7a940e986ff9d0e0086e2bd9ae4d42873348d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.919092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--704b144b-9077-47f1-8d6c-8bf242663bcd", "created": "2026-01-27T05:13:00.919934Z", "modified": "2026-01-27T05:13:00.919934Z", "relationship_type": "indicates", "source_ref": "indicator--6a508935-5033-43e0-88cf-9abef57a2549", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71a534a-1f69-4a62-9109-1bd1ae98fa13", "created": "2026-01-27T05:13:00.920115Z", "modified": "2026-01-27T05:13:00.920115Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17ab53e2981edce20244659e13f5271801a4907c521b11b1252bdab20028bc61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.920115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be555e7d-94ad-4f9d-8545-f24bc7c1d8f8", "created": "2026-01-27T05:13:00.920955Z", "modified": "2026-01-27T05:13:00.920955Z", "relationship_type": "indicates", "source_ref": "indicator--a71a534a-1f69-4a62-9109-1bd1ae98fa13", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdc6de5-cf16-4665-b702-c9bf68f7741e", "created": "2026-01-27T05:13:00.921132Z", "modified": "2026-01-27T05:13:00.921132Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='43bc8191de7a878c793d494a11aadb48b6e52f01bb8db1321b9704ba3556aa01']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.921132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8fd3359-88e1-431a-ace4-58119449f8fb", "created": "2026-01-27T05:13:00.921982Z", "modified": "2026-01-27T05:13:00.921982Z", "relationship_type": "indicates", "source_ref": "indicator--ecdc6de5-cf16-4665-b702-c9bf68f7741e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d58318-557a-46c4-b1e9-d7db5a2f8e31", "created": "2026-01-27T05:13:00.922159Z", "modified": "2026-01-27T05:13:00.922159Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42c85edca79a0013f613342a45ebcb83a48943f4b95e5701405194c56c90f0d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.922159Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75d90c44-9a43-4b08-9f07-80ae05e629de", "created": "2026-01-27T05:13:00.922999Z", "modified": "2026-01-27T05:13:00.922999Z", "relationship_type": "indicates", "source_ref": "indicator--20d58318-557a-46c4-b1e9-d7db5a2f8e31", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d76dde-da05-4cc7-93a3-5b6abba1e4cc", "created": "2026-01-27T05:13:00.923177Z", "modified": "2026-01-27T05:13:00.923177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ade5e5f13a0ce10f979e6db973c0202330d0c2f5d4e9798ff18d8b89df83dc4c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.923177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85016952-8af1-41bd-acd2-eaae5cde4f3a", "created": "2026-01-27T05:13:00.924039Z", "modified": "2026-01-27T05:13:00.924039Z", "relationship_type": "indicates", "source_ref": "indicator--48d76dde-da05-4cc7-93a3-5b6abba1e4cc", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bba350-ce37-4f6e-a20c-5916a035f1a4", "created": "2026-01-27T05:13:00.924219Z", "modified": "2026-01-27T05:13:00.924219Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e63cb8b46a62d079b1bb986950006f1d91cb3f7bfc8dac432393208c00fa2a6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.924219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50ea59a1-6678-40ab-bddb-00e73f183cf7", "created": "2026-01-27T05:13:00.92508Z", "modified": "2026-01-27T05:13:00.92508Z", "relationship_type": "indicates", "source_ref": "indicator--99bba350-ce37-4f6e-a20c-5916a035f1a4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6154c838-2996-49ab-9310-1437070f5424", "created": "2026-01-27T05:13:00.925259Z", "modified": "2026-01-27T05:13:00.925259Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bccbca3e6d271a55f4d273ff007130c1e816e21be3b9acc78dad5a5ba711131f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.925259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e601f55-ca0e-4a86-9eba-4c283e59c6a9", "created": "2026-01-27T05:13:00.926618Z", "modified": "2026-01-27T05:13:00.926618Z", "relationship_type": "indicates", "source_ref": "indicator--6154c838-2996-49ab-9310-1437070f5424", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb9ab7f-f04f-4348-8152-a6707045eb02", "created": "2026-01-27T05:13:00.926829Z", "modified": "2026-01-27T05:13:00.926829Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34ca540ffec82f1a235e2b956f54e0db1a585acdbf3dce0bb862e0638513a8e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.926829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1306834-a9b6-430f-920d-7838981170f1", "created": "2026-01-27T05:13:00.927653Z", "modified": "2026-01-27T05:13:00.927653Z", "relationship_type": "indicates", "source_ref": "indicator--feb9ab7f-f04f-4348-8152-a6707045eb02", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa43991-e7b5-41d0-b86c-68e36fbe340a", "created": "2026-01-27T05:13:00.927851Z", "modified": "2026-01-27T05:13:00.927851Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01bb0c41dd056ddbcbcb213372af6622d8f7496a090372b683a7f0ac68426690']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.927851Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3bfbf29-f00d-4030-93d4-5261506bfa70", "created": "2026-01-27T05:13:00.92867Z", "modified": "2026-01-27T05:13:00.92867Z", "relationship_type": "indicates", "source_ref": "indicator--6fa43991-e7b5-41d0-b86c-68e36fbe340a", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be6810ae-d12e-44b9-99de-9de19c767c68", "created": "2026-01-27T05:13:00.928864Z", "modified": "2026-01-27T05:13:00.928864Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='61702c0d31768e152ccc03aad79b764534ccfa2ff5e8cddc19fd6e5518bc6aaa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.928864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35a29982-3970-4611-9e3a-2e3aa39ad7bd", "created": "2026-01-27T05:13:00.929675Z", "modified": "2026-01-27T05:13:00.929675Z", "relationship_type": "indicates", "source_ref": "indicator--be6810ae-d12e-44b9-99de-9de19c767c68", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d547206-4e2f-43fd-9e5c-e7242e005e6b", "created": "2026-01-27T05:13:00.92987Z", "modified": "2026-01-27T05:13:00.92987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a91aa4910eb7de49dcd247d040dcbc426d3b2bfcf5750cdae061fa67931b79fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.92987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d99a20f-3a5e-45bc-9a9a-f60138a8201e", "created": "2026-01-27T05:13:00.93069Z", "modified": "2026-01-27T05:13:00.93069Z", "relationship_type": "indicates", "source_ref": "indicator--2d547206-4e2f-43fd-9e5c-e7242e005e6b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40db12a-eb49-48ed-aa15-2656428efc51", "created": "2026-01-27T05:13:00.930884Z", "modified": "2026-01-27T05:13:00.930884Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b295dad44cac2843626d17cd8e49a587c4be154f8004254f947fdf6aeea19cc0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.930884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33826cfb-5378-4c0d-9270-f3f0f3c4d988", "created": "2026-01-27T05:13:00.9317Z", "modified": "2026-01-27T05:13:00.9317Z", "relationship_type": "indicates", "source_ref": "indicator--d40db12a-eb49-48ed-aa15-2656428efc51", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0959cd1a-f385-4cd7-b05a-1fdab355cef1", "created": "2026-01-27T05:13:00.931892Z", "modified": "2026-01-27T05:13:00.931892Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='17920bffb4cab77d4581a086d6ff1570cee179480e3d8c29048d7579cc261d49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.931892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b0e7646-b424-4dc2-ae98-6c6a58292c85", "created": "2026-01-27T05:13:00.932763Z", "modified": "2026-01-27T05:13:00.932763Z", "relationship_type": "indicates", "source_ref": "indicator--0959cd1a-f385-4cd7-b05a-1fdab355cef1", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4bdc6e-3810-4d1f-8ed4-1bab69bfed61", "created": "2026-01-27T05:13:00.93295Z", "modified": "2026-01-27T05:13:00.93295Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4821f568fb003c98425581686f79cbe92eb790f5c5696a9048e1caad56af070']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.93295Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce23eea5-e8f5-43bc-87d7-8871eff9eb10", "created": "2026-01-27T05:13:00.933874Z", "modified": "2026-01-27T05:13:00.933874Z", "relationship_type": "indicates", "source_ref": "indicator--9f4bdc6e-3810-4d1f-8ed4-1bab69bfed61", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9fed16-057e-471c-b21f-62b53b3f1340", "created": "2026-01-27T05:13:00.934061Z", "modified": "2026-01-27T05:13:00.934061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c12b1a8fa2f8e0413f144ec45ea9864c181849b9a6a8a79f10ee13d8e17c0db2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.934061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8800ee41-8c97-42e3-a81d-fe491396b4f3", "created": "2026-01-27T05:13:00.93496Z", "modified": "2026-01-27T05:13:00.93496Z", "relationship_type": "indicates", "source_ref": "indicator--af9fed16-057e-471c-b21f-62b53b3f1340", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38e679c-8227-452d-b216-2889d785b1d9", "created": "2026-01-27T05:13:00.935148Z", "modified": "2026-01-27T05:13:00.935148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb7aac7ddef18e8c4f324bf7b4f337a35ab342860b3b1b4a009a4b3b8e94a803']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.935148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97eee844-936a-40c2-8895-584b218436fc", "created": "2026-01-27T05:13:00.977622Z", "modified": "2026-01-27T05:13:00.977622Z", "relationship_type": "indicates", "source_ref": "indicator--d38e679c-8227-452d-b216-2889d785b1d9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4354cd1-25e5-41eb-907f-57505392f25d", "created": "2026-01-27T05:13:00.97793Z", "modified": "2026-01-27T05:13:00.97793Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='066a02b14ff5c1e29fafdafa649fd4358b6132de6850629172ef884cb6cda6ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.97793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1bea434-3770-4598-9a3e-13236e78de78", "created": "2026-01-27T05:13:00.978836Z", "modified": "2026-01-27T05:13:00.978836Z", "relationship_type": "indicates", "source_ref": "indicator--b4354cd1-25e5-41eb-907f-57505392f25d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce92929-b837-439d-b17e-a9bd2e7d4eee", "created": "2026-01-27T05:13:00.979024Z", "modified": "2026-01-27T05:13:00.979024Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10768d3d87dc6a19ee5d8b1cdb442e11ad422038fe9f8cd58dcc44818a961192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.979024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e68a595-60b2-41fd-9dcd-6a5c817990cb", "created": "2026-01-27T05:13:00.979871Z", "modified": "2026-01-27T05:13:00.979871Z", "relationship_type": "indicates", "source_ref": "indicator--8ce92929-b837-439d-b17e-a9bd2e7d4eee", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997ecf66-8f38-4d96-9d70-21f5ae1de148", "created": "2026-01-27T05:13:00.980055Z", "modified": "2026-01-27T05:13:00.980055Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='640559b7735553888d95c6cde030bc7c76c5db01d1cf7eab9b993c4b3e186498']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.980055Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8f2aec1-c58f-47dd-98ab-bb473ebacc9f", "created": "2026-01-27T05:13:00.980896Z", "modified": "2026-01-27T05:13:00.980896Z", "relationship_type": "indicates", "source_ref": "indicator--997ecf66-8f38-4d96-9d70-21f5ae1de148", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7adbc732-64b9-4fc9-8622-0003bfedacb4", "created": "2026-01-27T05:13:00.981078Z", "modified": "2026-01-27T05:13:00.981078Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='91eabce374745e5f906e5febe0ed805c9408c204ca97b4c49fd5f5f6ea1ed9b5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.981078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2abadbb8-cf74-4590-a11d-0266f70539a7", "created": "2026-01-27T05:13:00.981914Z", "modified": "2026-01-27T05:13:00.981914Z", "relationship_type": "indicates", "source_ref": "indicator--7adbc732-64b9-4fc9-8622-0003bfedacb4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a0ae6a-36cc-4292-97b2-369b65328155", "created": "2026-01-27T05:13:00.982094Z", "modified": "2026-01-27T05:13:00.982094Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ab810fd9cccd0639d3e67eec3b1604fe48d200dd3f03b6b8eebf42b227036d75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.982094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c09c46a8-a58d-4fcd-ae47-90ef31da4ffb", "created": "2026-01-27T05:13:00.982949Z", "modified": "2026-01-27T05:13:00.982949Z", "relationship_type": "indicates", "source_ref": "indicator--35a0ae6a-36cc-4292-97b2-369b65328155", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d05971-34cd-4e17-bbfc-0f3398a90b46", "created": "2026-01-27T05:13:00.983127Z", "modified": "2026-01-27T05:13:00.983127Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2261ed8337a781af5c06d5443958c0fde81cac8599537f9f8c1958ce251c31a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.983127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3884b03f-ad94-4ffa-bf4d-3468bfa97c0f", "created": "2026-01-27T05:13:00.983967Z", "modified": "2026-01-27T05:13:00.983967Z", "relationship_type": "indicates", "source_ref": "indicator--48d05971-34cd-4e17-bbfc-0f3398a90b46", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a72f25-7af2-498c-a607-582668547914", "created": "2026-01-27T05:13:00.984148Z", "modified": "2026-01-27T05:13:00.984148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c59ebe5512e018a458b9c04d7640cf938c6538806ca93092793e66e8eb012c4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.984148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--623e3345-8c4e-4838-9cf6-e056f9bd2e8e", "created": "2026-01-27T05:13:00.985093Z", "modified": "2026-01-27T05:13:00.985093Z", "relationship_type": "indicates", "source_ref": "indicator--91a72f25-7af2-498c-a607-582668547914", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0637e4-b621-49b5-a880-724b3bfca559", "created": "2026-01-27T05:13:00.985279Z", "modified": "2026-01-27T05:13:00.985279Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f6766a972d53e78eaff4939f3a0bbb7d5b5fe07c3779ff4a2cfa3bbd34d96de2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.985279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db8f17fd-29d3-4371-9c02-700655475a7e", "created": "2026-01-27T05:13:00.98612Z", "modified": "2026-01-27T05:13:00.98612Z", "relationship_type": "indicates", "source_ref": "indicator--4d0637e4-b621-49b5-a880-724b3bfca559", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5354e98-49b4-41f8-aef9-ef7d36633146", "created": "2026-01-27T05:13:00.986301Z", "modified": "2026-01-27T05:13:00.986301Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8cc566bcd658f03c8a778465e211066b7d62e795bdbd6d490ca4f0133bc2e358']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.986301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bb97660-f702-4567-8bc6-ff6a4566cbc6", "created": "2026-01-27T05:13:00.987144Z", "modified": "2026-01-27T05:13:00.987144Z", "relationship_type": "indicates", "source_ref": "indicator--c5354e98-49b4-41f8-aef9-ef7d36633146", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f89ea2-6a0c-4fa3-aeaa-93c779699eb2", "created": "2026-01-27T05:13:00.987331Z", "modified": "2026-01-27T05:13:00.987331Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aacf7b89b0fbc3ec2e46d621baef214610e9f39a74892430087d156c4394dc2c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.987331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c1721cf-4477-4345-8b1a-9cbcb8fefb79", "created": "2026-01-27T05:13:00.988195Z", "modified": "2026-01-27T05:13:00.988195Z", "relationship_type": "indicates", "source_ref": "indicator--21f89ea2-6a0c-4fa3-aeaa-93c779699eb2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881e8b35-c90b-4e3b-ab60-f63c92993f33", "created": "2026-01-27T05:13:00.988374Z", "modified": "2026-01-27T05:13:00.988374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2dfdb40fb8cdb40074f753c3d7821f7bd3a49351ee879861349b2d5f4379d981']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.988374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c521992c-1258-43b4-a71b-b659c6405411", "created": "2026-01-27T05:13:00.989214Z", "modified": "2026-01-27T05:13:00.989214Z", "relationship_type": "indicates", "source_ref": "indicator--881e8b35-c90b-4e3b-ab60-f63c92993f33", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd18edd-be15-41b1-a31c-84307da4df79", "created": "2026-01-27T05:13:00.989392Z", "modified": "2026-01-27T05:13:00.989392Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c47a89b804823af14c552664f04d2abc641831615c75707158874a40112400e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.989392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ac8c190-08a3-4b11-b98d-191fdad13a96", "created": "2026-01-27T05:13:00.990351Z", "modified": "2026-01-27T05:13:00.990351Z", "relationship_type": "indicates", "source_ref": "indicator--1fd18edd-be15-41b1-a31c-84307da4df79", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02da8cf7-694a-4a7d-af3b-11954350e031", "created": "2026-01-27T05:13:00.990536Z", "modified": "2026-01-27T05:13:00.990536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e805253f87ff9f48e7b0de6ec1bd02e6f27a19df8fcc2a02d9617816d0ed4f33']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.990536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44ad3d7a-cade-4371-9cf0-1e647f45dd3a", "created": "2026-01-27T05:13:00.991401Z", "modified": "2026-01-27T05:13:00.991401Z", "relationship_type": "indicates", "source_ref": "indicator--02da8cf7-694a-4a7d-af3b-11954350e031", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5dac81-bbde-4c0c-89ac-171f63c2f263", "created": "2026-01-27T05:13:00.991578Z", "modified": "2026-01-27T05:13:00.991578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='13f63dae6e0837ffc8996247c8aa837da260059a3694e6adf4b5f98df0246dcd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.991578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24d033f7-cbb8-4606-a239-df637cf8558f", "created": "2026-01-27T05:13:00.99241Z", "modified": "2026-01-27T05:13:00.99241Z", "relationship_type": "indicates", "source_ref": "indicator--eb5dac81-bbde-4c0c-89ac-171f63c2f263", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94ff962-31fe-461f-b0ba-953a296577d9", "created": "2026-01-27T05:13:00.992584Z", "modified": "2026-01-27T05:13:00.992584Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fe64fbc6132864a942f5d20a7980268f3a7829009ccc9dbe4f0e165a684c838']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.992584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--087631a9-9f9c-4e7a-9c57-558043c64fb2", "created": "2026-01-27T05:13:00.993556Z", "modified": "2026-01-27T05:13:00.993556Z", "relationship_type": "indicates", "source_ref": "indicator--d94ff962-31fe-461f-b0ba-953a296577d9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bd7365-6fd4-49a7-b254-d17f7a5e4a95", "created": "2026-01-27T05:13:00.993735Z", "modified": "2026-01-27T05:13:00.993735Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c9ab956e1bd535dfd126b08aaf625bc6385a0cb64086b643f4edc11a28e98e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.993735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9de1d48-7a1b-4f4c-bc8d-12292be56f60", "created": "2026-01-27T05:13:00.994585Z", "modified": "2026-01-27T05:13:00.994585Z", "relationship_type": "indicates", "source_ref": "indicator--e3bd7365-6fd4-49a7-b254-d17f7a5e4a95", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30effed2-6f38-4690-8b17-92d6e8cbe152", "created": "2026-01-27T05:13:00.994775Z", "modified": "2026-01-27T05:13:00.994775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62171632cd788f7f7a7ceaef01a10d33641fce5d8839d71f3fbe5100673d56e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.994775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb6acc81-fc33-4ea7-9f9a-057fa4d37b7e", "created": "2026-01-27T05:13:00.995594Z", "modified": "2026-01-27T05:13:00.995594Z", "relationship_type": "indicates", "source_ref": "indicator--30effed2-6f38-4690-8b17-92d6e8cbe152", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba26adf5-bf9e-4eb3-ab00-1708d7734500", "created": "2026-01-27T05:13:00.995786Z", "modified": "2026-01-27T05:13:00.995786Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='473ece1324d0560e668a3ffaf751b385043ff962c2a7553060bb2eee6b20cf46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.995786Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a095687-b083-4a5b-ac8a-4a4e10a23d65", "created": "2026-01-27T05:13:00.996604Z", "modified": "2026-01-27T05:13:00.996604Z", "relationship_type": "indicates", "source_ref": "indicator--ba26adf5-bf9e-4eb3-ab00-1708d7734500", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9874cbaf-2f4c-4fcb-88b9-b5a2c6fda6d5", "created": "2026-01-27T05:13:00.996796Z", "modified": "2026-01-27T05:13:00.996796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e6119e030430b55108b35adf221e2f13115515fff0521583cefcfe93328fb9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.996796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--732d5218-c48f-430a-b9df-925cfa3e2025", "created": "2026-01-27T05:13:00.99761Z", "modified": "2026-01-27T05:13:00.99761Z", "relationship_type": "indicates", "source_ref": "indicator--9874cbaf-2f4c-4fcb-88b9-b5a2c6fda6d5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ad8667-dd3c-4d13-94ae-35cbc4b6cf40", "created": "2026-01-27T05:13:00.997799Z", "modified": "2026-01-27T05:13:00.997799Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5cc13bfc9e59723327e7ba227ec4c34608822be3527c145a30a1017dd4d57ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.997799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d3ab273-448d-4bfb-b74c-bc6d0137d1b0", "created": "2026-01-27T05:13:00.998618Z", "modified": "2026-01-27T05:13:00.998618Z", "relationship_type": "indicates", "source_ref": "indicator--e6ad8667-dd3c-4d13-94ae-35cbc4b6cf40", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae6dde2-55dc-4334-bdd4-dcb64d9a8e4e", "created": "2026-01-27T05:13:00.998808Z", "modified": "2026-01-27T05:13:00.998808Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9005c6c48c36ac87466a12096fa80d52fa07cbe096bc2feff91154199d1485b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.998808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c738b4c7-7d4e-4c7d-834d-5a59e4cd20ca", "created": "2026-01-27T05:13:00.999628Z", "modified": "2026-01-27T05:13:00.999628Z", "relationship_type": "indicates", "source_ref": "indicator--5ae6dde2-55dc-4334-bdd4-dcb64d9a8e4e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d92dc2-3213-4e81-b0d1-26d4d8f72b14", "created": "2026-01-27T05:13:00.999827Z", "modified": "2026-01-27T05:13:00.999827Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8478b52b4112382277b40d8145ff028ae3e758f3bb953df7454ce00b83fd7863']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:00.999827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--005dbc66-31d8-403b-93c6-79d299316a29", "created": "2026-01-27T05:13:01.000667Z", "modified": "2026-01-27T05:13:01.000667Z", "relationship_type": "indicates", "source_ref": "indicator--b0d92dc2-3213-4e81-b0d1-26d4d8f72b14", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82beff5c-dbe1-47c9-b89c-44925b5bc885", "created": "2026-01-27T05:13:01.000863Z", "modified": "2026-01-27T05:13:01.000863Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28abe0e7369f04bef80e253542147d7e1ce2183b2809248359083900285f64ad']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.000863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--070246b7-b9bb-4f99-bbef-e70b07aed444", "created": "2026-01-27T05:13:01.001683Z", "modified": "2026-01-27T05:13:01.001683Z", "relationship_type": "indicates", "source_ref": "indicator--82beff5c-dbe1-47c9-b89c-44925b5bc885", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4214f02-55cc-49c6-a361-97701967b535", "created": "2026-01-27T05:13:01.001878Z", "modified": "2026-01-27T05:13:01.001878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b4c6f0e6a283acf4c9c56d063aa8892b02b758096abd7c0473d1e3cf233767d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.001878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48083727-f9db-48a5-8097-5dbbe3379248", "created": "2026-01-27T05:13:01.002856Z", "modified": "2026-01-27T05:13:01.002856Z", "relationship_type": "indicates", "source_ref": "indicator--f4214f02-55cc-49c6-a361-97701967b535", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50480ce-d357-4b78-a180-8e45a309db9b", "created": "2026-01-27T05:13:01.003035Z", "modified": "2026-01-27T05:13:01.003035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='905d877e1ceaaf1cfa1978c6271e831c23c6c07c771af458faa41da7153e3172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.003035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bb30138-fd57-4b22-bf0e-33db06e32e2e", "created": "2026-01-27T05:13:01.003873Z", "modified": "2026-01-27T05:13:01.003873Z", "relationship_type": "indicates", "source_ref": "indicator--e50480ce-d357-4b78-a180-8e45a309db9b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8adf824d-1bfc-4bcc-a1d1-6e7c52cf8281", "created": "2026-01-27T05:13:01.004051Z", "modified": "2026-01-27T05:13:01.004051Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b35fba576b4077be566f96678127e152bce19fbcac24b13bbf1b6a3c30a479ba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.004051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47c2f10b-e025-45e3-8776-68d9db88babc", "created": "2026-01-27T05:13:01.004883Z", "modified": "2026-01-27T05:13:01.004883Z", "relationship_type": "indicates", "source_ref": "indicator--8adf824d-1bfc-4bcc-a1d1-6e7c52cf8281", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df49f82-d4b7-47be-977c-2ab1641851d1", "created": "2026-01-27T05:13:01.005059Z", "modified": "2026-01-27T05:13:01.005059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b47f33b706c1fdb43169d2ae8c50782a44840032bc9037f075c737c39f2ae6b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.005059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--881dcc16-f7b8-461a-8580-3780cfbc3a6f", "created": "2026-01-27T05:13:01.005985Z", "modified": "2026-01-27T05:13:01.005985Z", "relationship_type": "indicates", "source_ref": "indicator--9df49f82-d4b7-47be-977c-2ab1641851d1", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45032ef7-3a31-4753-92d1-a344cbae7cc5", "created": "2026-01-27T05:13:01.006211Z", "modified": "2026-01-27T05:13:01.006211Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5237e7f8e8c867bfe71c8882590592bdf4dd9a9e25569b58988d074bc55df8b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.006211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0d21424-3851-4592-99fd-62e05bfeb615", "created": "2026-01-27T05:13:01.007067Z", "modified": "2026-01-27T05:13:01.007067Z", "relationship_type": "indicates", "source_ref": "indicator--45032ef7-3a31-4753-92d1-a344cbae7cc5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa52aace-ccd1-4804-b2b3-1673442d9352", "created": "2026-01-27T05:13:01.007247Z", "modified": "2026-01-27T05:13:01.007247Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c49209c1b7c693aceb31eb5dd8e9aef127e722f8c3c02dca1c55a488e7353f85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.007247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f55e93db-c2de-444a-b7f6-9f2211423729", "created": "2026-01-27T05:13:01.008093Z", "modified": "2026-01-27T05:13:01.008093Z", "relationship_type": "indicates", "source_ref": "indicator--fa52aace-ccd1-4804-b2b3-1673442d9352", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c9648b-2407-4a2a-9478-deed6b79f8e8", "created": "2026-01-27T05:13:01.008269Z", "modified": "2026-01-27T05:13:01.008269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01864a375f3086a7d061693a78ef0233fdff3c13131cd36f6cf84a104548e167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.008269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--961abe4f-d1d2-418f-bff7-32d42230273c", "created": "2026-01-27T05:13:01.009099Z", "modified": "2026-01-27T05:13:01.009099Z", "relationship_type": "indicates", "source_ref": "indicator--83c9648b-2407-4a2a-9478-deed6b79f8e8", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d6a303-d432-4076-80c6-3bb0ca6ca3c5", "created": "2026-01-27T05:13:01.009273Z", "modified": "2026-01-27T05:13:01.009273Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22e424e0b5c056e56ad6fd1109668be9233f06cff0a23aed5fdfa7cbda65e971']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.009273Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--071b0746-7591-498e-9e4e-7dd205a6bcee", "created": "2026-01-27T05:13:01.010103Z", "modified": "2026-01-27T05:13:01.010103Z", "relationship_type": "indicates", "source_ref": "indicator--a5d6a303-d432-4076-80c6-3bb0ca6ca3c5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91a4e53-b9e3-4c7c-bff6-56e7aa1be62a", "created": "2026-01-27T05:13:01.010285Z", "modified": "2026-01-27T05:13:01.010285Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4653d09650e00a3f44706788fc45f404f126d990b0dfcc56095333c9e8556eb0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.010285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2db2ed15-c8ba-4f6e-ae23-0b000c8aa140", "created": "2026-01-27T05:13:01.011134Z", "modified": "2026-01-27T05:13:01.011134Z", "relationship_type": "indicates", "source_ref": "indicator--f91a4e53-b9e3-4c7c-bff6-56e7aa1be62a", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358b3c62-1d15-4115-a528-3c1edaef46b3", "created": "2026-01-27T05:13:01.011312Z", "modified": "2026-01-27T05:13:01.011312Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='087f903099d2bf890efff80eb59062c0ae5e1c99c46ed35dbe6134d5cd5faef8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.011312Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f10abdea-a2ad-421a-8984-043631ddd1c8", "created": "2026-01-27T05:13:01.012289Z", "modified": "2026-01-27T05:13:01.012289Z", "relationship_type": "indicates", "source_ref": "indicator--358b3c62-1d15-4115-a528-3c1edaef46b3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc80f9b-84d7-4e46-b029-cab45bed5d04", "created": "2026-01-27T05:13:01.012466Z", "modified": "2026-01-27T05:13:01.012466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef432d6367dba74684bf4bc5d995df547203874bb7033eb65c6904929c747034']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.012466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d5bfa75-8ac9-4f6e-a55d-d96b7bafadba", "created": "2026-01-27T05:13:01.0133Z", "modified": "2026-01-27T05:13:01.0133Z", "relationship_type": "indicates", "source_ref": "indicator--3fc80f9b-84d7-4e46-b029-cab45bed5d04", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83bc29d-4342-45fd-af81-4e5303ee7779", "created": "2026-01-27T05:13:01.013481Z", "modified": "2026-01-27T05:13:01.013481Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c8ddf2d2207de01bcbc2eb2866164274567da9e1d959e3c495e08e716cab327']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.013481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39a974f2-7e4a-43c8-8ad3-23f031de6f69", "created": "2026-01-27T05:13:01.01432Z", "modified": "2026-01-27T05:13:01.01432Z", "relationship_type": "indicates", "source_ref": "indicator--c83bc29d-4342-45fd-af81-4e5303ee7779", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f70dcb7-1a8c-498e-b89f-4c9b5a482435", "created": "2026-01-27T05:13:01.014503Z", "modified": "2026-01-27T05:13:01.014503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='95e69e1cc740f15d1a293ec39a5c1cb46a195ef074b3d2a634ee681a3331ef1d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.014503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c727ddb8-d6ab-4651-bf04-d150e8ae68ad", "created": "2026-01-27T05:13:01.015337Z", "modified": "2026-01-27T05:13:01.015337Z", "relationship_type": "indicates", "source_ref": "indicator--2f70dcb7-1a8c-498e-b89f-4c9b5a482435", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fb286e-5d17-4149-8b26-e9ee41364e47", "created": "2026-01-27T05:13:01.015511Z", "modified": "2026-01-27T05:13:01.015511Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a2281c70dd162ca92f448139c2594efae21865a3ced2abde37970e58c648700']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.015511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf831481-986e-42d5-876a-b8c99963f60e", "created": "2026-01-27T05:13:01.016357Z", "modified": "2026-01-27T05:13:01.016357Z", "relationship_type": "indicates", "source_ref": "indicator--69fb286e-5d17-4149-8b26-e9ee41364e47", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c603019-f14f-46f2-a012-495e644861b2", "created": "2026-01-27T05:13:01.016537Z", "modified": "2026-01-27T05:13:01.016537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='85981ad1184bce0a92c675da03042a77ea942c0e5d08eca23908e9464979c8fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.016537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b431a7c3-7e0a-4e0b-9bb3-fbfcb5700393", "created": "2026-01-27T05:13:01.017376Z", "modified": "2026-01-27T05:13:01.017376Z", "relationship_type": "indicates", "source_ref": "indicator--5c603019-f14f-46f2-a012-495e644861b2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76af4c13-e9cc-46c3-b114-be1d8eb8724d", "created": "2026-01-27T05:13:01.017556Z", "modified": "2026-01-27T05:13:01.017556Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c524423f809a3acd9bd1d2343340bedfe6022e80b3d656c8cdd974254921801b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.017556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2748468e-60ab-4b4c-b050-974c6bb772b9", "created": "2026-01-27T05:13:01.018399Z", "modified": "2026-01-27T05:13:01.018399Z", "relationship_type": "indicates", "source_ref": "indicator--76af4c13-e9cc-46c3-b114-be1d8eb8724d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4a0e94-dff9-4a2c-b876-b9d13b2dbb6f", "created": "2026-01-27T05:13:01.018576Z", "modified": "2026-01-27T05:13:01.018576Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53b73b0a302c91120d53e4882e3d17c421b9e13694a8d22021d67bb08928c7d0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.018576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2afb44ef-c743-46b8-95c5-f4f934fb5385", "created": "2026-01-27T05:13:01.019409Z", "modified": "2026-01-27T05:13:01.019409Z", "relationship_type": "indicates", "source_ref": "indicator--1e4a0e94-dff9-4a2c-b876-b9d13b2dbb6f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf2a9e5-5206-4b8d-8075-e528d981b261", "created": "2026-01-27T05:13:01.019587Z", "modified": "2026-01-27T05:13:01.019587Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29eb9ff6230478614b0ce817413383cfc7810195d6f3e8adf33fa1a852dc0958']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.019587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab2ae045-99de-4af6-8318-a0c9144685a2", "created": "2026-01-27T05:13:01.020555Z", "modified": "2026-01-27T05:13:01.020555Z", "relationship_type": "indicates", "source_ref": "indicator--dbf2a9e5-5206-4b8d-8075-e528d981b261", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5383e413-18d9-4327-8ec5-e6540b12fa53", "created": "2026-01-27T05:13:01.020737Z", "modified": "2026-01-27T05:13:01.020737Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4186cbba5d231f55d142eeb66a9abfbb2bdbb41b0f01ac6dda0fcc29b34e5ad8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.020737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1228c479-a357-4452-b9db-5c47d4567f86", "created": "2026-01-27T05:13:01.021682Z", "modified": "2026-01-27T05:13:01.021682Z", "relationship_type": "indicates", "source_ref": "indicator--5383e413-18d9-4327-8ec5-e6540b12fa53", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2f8653-86d9-4193-a476-a902003f640e", "created": "2026-01-27T05:13:01.021928Z", "modified": "2026-01-27T05:13:01.021928Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d9ed4a56f234984c529eec821eb2ce42d93a2c11201c52a789da8a87ce81b21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.021928Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9d1d467-2a04-425f-89e6-b09ea800a775", "created": "2026-01-27T05:13:01.022802Z", "modified": "2026-01-27T05:13:01.022802Z", "relationship_type": "indicates", "source_ref": "indicator--df2f8653-86d9-4193-a476-a902003f640e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98eefa6f-5eda-4df2-9c39-6f762d02c3fc", "created": "2026-01-27T05:13:01.022983Z", "modified": "2026-01-27T05:13:01.022983Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b6cd48e3a79c4b9ddf366fdfa1217b885876daa2d74aca5c9d35b70c04ad44b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.022983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--172853e8-eab7-4e16-93c9-8aa114fdd54c", "created": "2026-01-27T05:13:01.023878Z", "modified": "2026-01-27T05:13:01.023878Z", "relationship_type": "indicates", "source_ref": "indicator--98eefa6f-5eda-4df2-9c39-6f762d02c3fc", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92944051-ded8-4b09-a3d0-4704089671ba", "created": "2026-01-27T05:13:01.024072Z", "modified": "2026-01-27T05:13:01.024072Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12809638d99a3c1f11b96d4f9d1fbe8c2592201b7534a70391246395a7508cba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.024072Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--450a6bf2-60e2-4589-9f38-c645257ecf35", "created": "2026-01-27T05:13:01.024915Z", "modified": "2026-01-27T05:13:01.024915Z", "relationship_type": "indicates", "source_ref": "indicator--92944051-ded8-4b09-a3d0-4704089671ba", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6479b64-b578-45f9-92e5-fbc2c9452a6f", "created": "2026-01-27T05:13:01.0251Z", "modified": "2026-01-27T05:13:01.0251Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='df50e21d0ce2d6f5cc861b3228991e13b8e2230ec8a3fd9a57921f29b4261069']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.0251Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74cd8fc7-4a61-417f-bcee-0444cabd60eb", "created": "2026-01-27T05:13:01.025937Z", "modified": "2026-01-27T05:13:01.025937Z", "relationship_type": "indicates", "source_ref": "indicator--d6479b64-b578-45f9-92e5-fbc2c9452a6f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086a4e9a-fea2-43de-94b4-9578d4728f49", "created": "2026-01-27T05:13:01.026113Z", "modified": "2026-01-27T05:13:01.026113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6300a115fe783279e0a0ff334c0128287efb09afcb3bd293488a3a3d4ffd5b18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.026113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35d1d519-0cc1-4fce-b1cd-b3036351623c", "created": "2026-01-27T05:13:01.027006Z", "modified": "2026-01-27T05:13:01.027006Z", "relationship_type": "indicates", "source_ref": "indicator--086a4e9a-fea2-43de-94b4-9578d4728f49", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f7b711-a368-41cf-9dc1-baf93134b85b", "created": "2026-01-27T05:13:01.027187Z", "modified": "2026-01-27T05:13:01.027187Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db8542cb5d70056f0f8f8c0c1f5d2f5a1a8f159c5364be544181850200873241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.027187Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffd0c498-a1eb-4948-9631-b3842b59c183", "created": "2026-01-27T05:13:01.028033Z", "modified": "2026-01-27T05:13:01.028033Z", "relationship_type": "indicates", "source_ref": "indicator--d3f7b711-a368-41cf-9dc1-baf93134b85b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3508edf-5d69-4d62-9f41-83a0167c0bf9", "created": "2026-01-27T05:13:01.028209Z", "modified": "2026-01-27T05:13:01.028209Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fded8fa103e1e6be7e771d223c68f87b6ee89f38bb5269b4b642d1a06d3ec0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.028209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afdf1283-ee68-48b6-b251-c57c2a4ca3b3", "created": "2026-01-27T05:13:01.029052Z", "modified": "2026-01-27T05:13:01.029052Z", "relationship_type": "indicates", "source_ref": "indicator--e3508edf-5d69-4d62-9f41-83a0167c0bf9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ea3c8e-0835-4887-81e1-5e30a21882e2", "created": "2026-01-27T05:13:01.029229Z", "modified": "2026-01-27T05:13:01.029229Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f3db9abf47363c5a2d9bc9eb573c411b814dfbfca370a84bf7a1c546a8fe0f5b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.029229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--602fb189-20d8-4d9b-82fd-ed394da76529", "created": "2026-01-27T05:13:01.0302Z", "modified": "2026-01-27T05:13:01.0302Z", "relationship_type": "indicates", "source_ref": "indicator--f8ea3c8e-0835-4887-81e1-5e30a21882e2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7334eb-9be0-44a2-97a0-63cb6873686b", "created": "2026-01-27T05:13:01.030379Z", "modified": "2026-01-27T05:13:01.030379Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cce9ade8e59c990a3071bf4c93e15cfe7c5398fdcdd850bc1b915b43c24cb7e6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.030379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ee9dbd8-e0c7-47dc-ad18-9287d6fdaee6", "created": "2026-01-27T05:13:01.03121Z", "modified": "2026-01-27T05:13:01.03121Z", "relationship_type": "indicates", "source_ref": "indicator--cd7334eb-9be0-44a2-97a0-63cb6873686b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a3e8d4-59d5-4421-ab85-3bc3069d37e9", "created": "2026-01-27T05:13:01.031389Z", "modified": "2026-01-27T05:13:01.031389Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee0e33551d7d03f33f616224381f00f8d04e32e41245c1f8594199e7af94a197']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.031389Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84e67d35-8da1-4698-84b9-74a35430eabe", "created": "2026-01-27T05:13:01.032223Z", "modified": "2026-01-27T05:13:01.032223Z", "relationship_type": "indicates", "source_ref": "indicator--f2a3e8d4-59d5-4421-ab85-3bc3069d37e9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab51936-245a-4fcf-8cc8-239f6e915db9", "created": "2026-01-27T05:13:01.0324Z", "modified": "2026-01-27T05:13:01.0324Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9de6edb6e605426b296c6342297fb16e797c662fc1af48f859177101b1d82500']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.0324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4be44c61-e0bd-4138-9eab-37155f2dcd61", "created": "2026-01-27T05:13:01.033231Z", "modified": "2026-01-27T05:13:01.033231Z", "relationship_type": "indicates", "source_ref": "indicator--fab51936-245a-4fcf-8cc8-239f6e915db9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4161fee6-621c-4e57-a8be-e85f844cbe62", "created": "2026-01-27T05:13:01.033413Z", "modified": "2026-01-27T05:13:01.033413Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ce852bbf9630cdb3f304a5ec70364a6e257b591751fa23ad49a63c7c2fbc4d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.033413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05057033-bef7-45db-a569-f48a9e2a0966", "created": "2026-01-27T05:13:01.034243Z", "modified": "2026-01-27T05:13:01.034243Z", "relationship_type": "indicates", "source_ref": "indicator--4161fee6-621c-4e57-a8be-e85f844cbe62", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da70f85-12e5-4aad-a857-58ffbb06f792", "created": "2026-01-27T05:13:01.03442Z", "modified": "2026-01-27T05:13:01.03442Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e8f2510cc7f842a4594431f3a16fbb3af15576190993484d55e7098b07f69ee']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.03442Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f0bba99-b58a-495d-930b-d21d4a55715e", "created": "2026-01-27T05:13:01.035256Z", "modified": "2026-01-27T05:13:01.035256Z", "relationship_type": "indicates", "source_ref": "indicator--9da70f85-12e5-4aad-a857-58ffbb06f792", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30a22a4-7a49-4961-8ec5-03e1e398167b", "created": "2026-01-27T05:13:01.035434Z", "modified": "2026-01-27T05:13:01.035434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ffea474b10345ae5c88476c4631002644fdc1f53acdb135273bd89dd2832d40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.035434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19edca28-9673-4154-b5df-f66f12a3aea3", "created": "2026-01-27T05:13:01.036277Z", "modified": "2026-01-27T05:13:01.036277Z", "relationship_type": "indicates", "source_ref": "indicator--e30a22a4-7a49-4961-8ec5-03e1e398167b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24812bf6-3f40-455b-8ccf-8f7d7c3f607f", "created": "2026-01-27T05:13:01.036451Z", "modified": "2026-01-27T05:13:01.036451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='192124ba11153a69f99ba4392eb56fc44ee907d068d5d6f3dd76066d21ac8eba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.036451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--275f3cb3-dc0d-40fa-af74-cebbc956124b", "created": "2026-01-27T05:13:01.037298Z", "modified": "2026-01-27T05:13:01.037298Z", "relationship_type": "indicates", "source_ref": "indicator--24812bf6-3f40-455b-8ccf-8f7d7c3f607f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd203f4-d769-47c4-a1c0-fbdeef5dd84c", "created": "2026-01-27T05:13:01.037474Z", "modified": "2026-01-27T05:13:01.037474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3fc0b1c21e56b4462be4613aa68bf2e480f89f93ef701aafeb87afd1fcbc6e47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.037474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab0b14fe-d0d1-4ada-a069-4efe627e128c", "created": "2026-01-27T05:13:01.03835Z", "modified": "2026-01-27T05:13:01.03835Z", "relationship_type": "indicates", "source_ref": "indicator--0fd203f4-d769-47c4-a1c0-fbdeef5dd84c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ef342c-4b2c-425a-b48c-f8f34b2a54d5", "created": "2026-01-27T05:13:01.038569Z", "modified": "2026-01-27T05:13:01.038569Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6f7de2fd40dc98775b89c9b3152d5423bf53cd560c0eb345830097420c51fd3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.038569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ca64392-89cc-4975-9d95-6b80a62b26d9", "created": "2026-01-27T05:13:01.039606Z", "modified": "2026-01-27T05:13:01.039606Z", "relationship_type": "indicates", "source_ref": "indicator--50ef342c-4b2c-425a-b48c-f8f34b2a54d5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d01394e-a0d6-4702-8b22-1ed806808b92", "created": "2026-01-27T05:13:01.039812Z", "modified": "2026-01-27T05:13:01.039812Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8ed0be8ba70335b34dd5c1ad5d88df618dba7974f98511ecaba7b3042e6e518c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.039812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e96d0a41-3670-44d0-8575-1a0c6b352a4e", "created": "2026-01-27T05:13:01.040646Z", "modified": "2026-01-27T05:13:01.040646Z", "relationship_type": "indicates", "source_ref": "indicator--1d01394e-a0d6-4702-8b22-1ed806808b92", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d5fe8e-2526-4bfc-9f07-373d81cb7451", "created": "2026-01-27T05:13:01.040845Z", "modified": "2026-01-27T05:13:01.040845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5e2deaf99e5e4d45ab36d69f1a36984e27d077918b864ae8f92e1c60e922a97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.040845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47ec01bc-fca9-4504-94b4-946605effcc1", "created": "2026-01-27T05:13:01.041664Z", "modified": "2026-01-27T05:13:01.041664Z", "relationship_type": "indicates", "source_ref": "indicator--a2d5fe8e-2526-4bfc-9f07-373d81cb7451", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49458a4-a38f-4590-9a21-c29823c24449", "created": "2026-01-27T05:13:01.041859Z", "modified": "2026-01-27T05:13:01.041859Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='189afde793754f6b6265bde54719ec83fe2b810387b1a8cb582ee4e2dd1a119f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.041859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--369d6e1b-72cb-40e2-ad0d-e861f67ce219", "created": "2026-01-27T05:13:01.042677Z", "modified": "2026-01-27T05:13:01.042677Z", "relationship_type": "indicates", "source_ref": "indicator--d49458a4-a38f-4590-9a21-c29823c24449", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa62d7f-b04a-4953-9722-9e19db19841a", "created": "2026-01-27T05:13:01.04287Z", "modified": "2026-01-27T05:13:01.04287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0d7856b7d7b2a56bab36ff9e1f477bba3d63a30e1c390ee07ad5c17553a3c87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.04287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--208efe86-66f5-46d0-8d75-3e25b6a247c5", "created": "2026-01-27T05:13:01.043701Z", "modified": "2026-01-27T05:13:01.043701Z", "relationship_type": "indicates", "source_ref": "indicator--6aa62d7f-b04a-4953-9722-9e19db19841a", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f00e3bb-acaf-4b0e-82d0-2cff34ad90e1", "created": "2026-01-27T05:13:01.043896Z", "modified": "2026-01-27T05:13:01.043896Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b569d9f9c1d4cdf68df8043a0d5b7c9ac66629bc146d04557027e9796fb862dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.043896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--790b60e7-05c5-4c38-8e60-0b073f878710", "created": "2026-01-27T05:13:01.044718Z", "modified": "2026-01-27T05:13:01.044718Z", "relationship_type": "indicates", "source_ref": "indicator--4f00e3bb-acaf-4b0e-82d0-2cff34ad90e1", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11edcebc-bf93-4381-92bb-7e2bb62dbd57", "created": "2026-01-27T05:13:01.044912Z", "modified": "2026-01-27T05:13:01.044912Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe2b7821aa93ea48b15f3c3e126809cf2c9440edbcc4040e5437595384f54e24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.044912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0309c36-b5c2-4112-997e-731d15facfd6", "created": "2026-01-27T05:13:01.045735Z", "modified": "2026-01-27T05:13:01.045735Z", "relationship_type": "indicates", "source_ref": "indicator--11edcebc-bf93-4381-92bb-7e2bb62dbd57", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93907e9-4c5d-4a8b-bc58-96fb63621723", "created": "2026-01-27T05:13:01.045929Z", "modified": "2026-01-27T05:13:01.045929Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60b4911d10ca74f7736624390450070ab0d3a29a496b779ccf8d67c43a074aa6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.045929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5bcd9fa6-c78b-41af-ae45-8ad590489dcc", "created": "2026-01-27T05:13:01.046845Z", "modified": "2026-01-27T05:13:01.046845Z", "relationship_type": "indicates", "source_ref": "indicator--e93907e9-4c5d-4a8b-bc58-96fb63621723", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727edd45-dbe9-4b5c-b961-82b57b996d2b", "created": "2026-01-27T05:13:01.047033Z", "modified": "2026-01-27T05:13:01.047033Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5761037870a1d7e41da7993f39d6b50567e2aae25efd014c9f14faf2c3493b5a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.047033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cd3cc4b-d7f9-490a-b3b6-f707130312d8", "created": "2026-01-27T05:13:01.047998Z", "modified": "2026-01-27T05:13:01.047998Z", "relationship_type": "indicates", "source_ref": "indicator--727edd45-dbe9-4b5c-b961-82b57b996d2b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5859de57-e7f5-44bd-b8e0-6608e85cd54c", "created": "2026-01-27T05:13:01.048179Z", "modified": "2026-01-27T05:13:01.048179Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='67dbf8bcae8f09742d2cb122889878fa16fa1dd3618d0a64f8bd0574bc10e732']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.048179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1d3538b-75bc-49fb-b04f-47aeeccfe955", "created": "2026-01-27T05:13:01.049031Z", "modified": "2026-01-27T05:13:01.049031Z", "relationship_type": "indicates", "source_ref": "indicator--5859de57-e7f5-44bd-b8e0-6608e85cd54c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7794ba01-a2e9-4b13-a7c9-120083e76d6d", "created": "2026-01-27T05:13:01.04921Z", "modified": "2026-01-27T05:13:01.04921Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0cbe89a91cc25e4acc4b06cc25150c7530639859c600113a64e9f3082f7dcf00']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.04921Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c6e796e-f499-4a8a-aebe-6d3feb4c03e8", "created": "2026-01-27T05:13:01.050043Z", "modified": "2026-01-27T05:13:01.050043Z", "relationship_type": "indicates", "source_ref": "indicator--7794ba01-a2e9-4b13-a7c9-120083e76d6d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3718e93d-10c0-498f-a71c-cc22d466940f", "created": "2026-01-27T05:13:01.05022Z", "modified": "2026-01-27T05:13:01.05022Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bdb1411e77d49e02dff33e724bfaa116241814e42ce11ffa25112dfce1d9cfc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.05022Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fe7394c-5ee9-47e3-924a-5451b5ce7c7b", "created": "2026-01-27T05:13:01.05106Z", "modified": "2026-01-27T05:13:01.05106Z", "relationship_type": "indicates", "source_ref": "indicator--3718e93d-10c0-498f-a71c-cc22d466940f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27832620-6a44-4a1c-8016-15ba914cea99", "created": "2026-01-27T05:13:01.051238Z", "modified": "2026-01-27T05:13:01.051238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='45b3a79222220d6e1756ad97859d3b77a9387e06cdf1fea4bfb396a18327ea3c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.051238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b41c701-0746-400a-b70c-567573259b0a", "created": "2026-01-27T05:13:01.052073Z", "modified": "2026-01-27T05:13:01.052073Z", "relationship_type": "indicates", "source_ref": "indicator--27832620-6a44-4a1c-8016-15ba914cea99", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f659499-f368-4e10-940b-8942eab2ed37", "created": "2026-01-27T05:13:01.05225Z", "modified": "2026-01-27T05:13:01.05225Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0e5488520e48355fa863180d160d08418cb6513778f8e72d2b7857e145348351']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.05225Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76ed132a-09a6-4455-a387-0d84d3aa54d3", "created": "2026-01-27T05:13:01.053086Z", "modified": "2026-01-27T05:13:01.053086Z", "relationship_type": "indicates", "source_ref": "indicator--4f659499-f368-4e10-940b-8942eab2ed37", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657f2f5e-950a-4de1-9c16-45d0bb3e9236", "created": "2026-01-27T05:13:01.053261Z", "modified": "2026-01-27T05:13:01.053261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3c146c49e3c5ea8e6e6699992c4566bf0867dda199a5667610db803beb85ed9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.053261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9efab35-2a3f-4869-b3a5-909419085f6c", "created": "2026-01-27T05:13:01.054139Z", "modified": "2026-01-27T05:13:01.054139Z", "relationship_type": "indicates", "source_ref": "indicator--657f2f5e-950a-4de1-9c16-45d0bb3e9236", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c75d633-577e-4fad-a6e1-8bc5bc735d70", "created": "2026-01-27T05:13:01.054315Z", "modified": "2026-01-27T05:13:01.054315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dddba184d877d8b35a85f17a707ce81af49d9a01bdd30dc33a0830f15e4669ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.054315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fe50664-c6b1-4018-a3c0-84c114b1b7ea", "created": "2026-01-27T05:13:01.055148Z", "modified": "2026-01-27T05:13:01.055148Z", "relationship_type": "indicates", "source_ref": "indicator--1c75d633-577e-4fad-a6e1-8bc5bc735d70", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd5d29b-a37a-480a-bc6b-1f780d76f4ba", "created": "2026-01-27T05:13:01.055323Z", "modified": "2026-01-27T05:13:01.055323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5db4c5203510ff94d687936eda80167738367ee870d9d9ccd819225b4b7dfd89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.055323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54fb2448-7c22-4dc4-8168-32db5690d977", "created": "2026-01-27T05:13:01.056157Z", "modified": "2026-01-27T05:13:01.056157Z", "relationship_type": "indicates", "source_ref": "indicator--bcd5d29b-a37a-480a-bc6b-1f780d76f4ba", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e80e18-cf31-4fd9-bfee-361f911c10fa", "created": "2026-01-27T05:13:01.056333Z", "modified": "2026-01-27T05:13:01.056333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c8e0c2ba01d8d1d8f0f69bb8e5d8c18d5b0c421eb9b235cd1caefdeddeb5c84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.056333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea7eceb4-cdbf-418a-b1de-c2a91a5538df", "created": "2026-01-27T05:13:01.0573Z", "modified": "2026-01-27T05:13:01.0573Z", "relationship_type": "indicates", "source_ref": "indicator--32e80e18-cf31-4fd9-bfee-361f911c10fa", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f856e8-2944-424c-9555-aebfd46228d3", "created": "2026-01-27T05:13:01.057476Z", "modified": "2026-01-27T05:13:01.057476Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7f9c1e865757d98a74c86eaab07996a2da22d911f6532e7868b7e533511a17f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.057476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--930bef9a-00f4-4302-8c2d-3445a9f241a6", "created": "2026-01-27T05:13:01.058311Z", "modified": "2026-01-27T05:13:01.058311Z", "relationship_type": "indicates", "source_ref": "indicator--38f856e8-2944-424c-9555-aebfd46228d3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d60ca18-6936-4a9b-a7a2-f1e8bf4a938f", "created": "2026-01-27T05:13:01.058489Z", "modified": "2026-01-27T05:13:01.058489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1017df8c9c8bd13b6256d46f7e43cd708a4fbd5f8074199e5ab19ad331eb812f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.058489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--114e359c-58b9-4d60-bc98-eaaa79096fc0", "created": "2026-01-27T05:13:01.059317Z", "modified": "2026-01-27T05:13:01.059317Z", "relationship_type": "indicates", "source_ref": "indicator--9d60ca18-6936-4a9b-a7a2-f1e8bf4a938f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e82fc84-48de-4d3b-a74c-b94433f2512f", "created": "2026-01-27T05:13:01.059493Z", "modified": "2026-01-27T05:13:01.059493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d83934d50bab05ec2ae753c39b7c95af4aeb8718368ff9b03f4d56d7457b94ff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.059493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--71e08d08-f516-4b26-864d-fde183a560fe", "created": "2026-01-27T05:13:01.060323Z", "modified": "2026-01-27T05:13:01.060323Z", "relationship_type": "indicates", "source_ref": "indicator--4e82fc84-48de-4d3b-a74c-b94433f2512f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2872beec-3e18-4a14-8c1d-3b6b46d26a78", "created": "2026-01-27T05:13:01.060498Z", "modified": "2026-01-27T05:13:01.060498Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5658fc9a0847a71aff4265b5ed54134926b800d136c296e58ab421b0228dcddf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.060498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7b3f64c-76c6-4dca-95c3-f0e8f3580cfc", "created": "2026-01-27T05:13:01.061334Z", "modified": "2026-01-27T05:13:01.061334Z", "relationship_type": "indicates", "source_ref": "indicator--2872beec-3e18-4a14-8c1d-3b6b46d26a78", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bafe4f-a30d-48bf-85cc-ec3f9ff14f74", "created": "2026-01-27T05:13:01.06151Z", "modified": "2026-01-27T05:13:01.06151Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fa0477c14b4fdfa8c358e202e107c0b68fa6b42c58c85c8ee507c25b81d41285']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.06151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d35894a-8758-4377-b68c-5be06e8b0c04", "created": "2026-01-27T05:13:01.062343Z", "modified": "2026-01-27T05:13:01.062343Z", "relationship_type": "indicates", "source_ref": "indicator--36bafe4f-a30d-48bf-85cc-ec3f9ff14f74", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04812059-99ba-439b-b6b2-fce40828c339", "created": "2026-01-27T05:13:01.06252Z", "modified": "2026-01-27T05:13:01.06252Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2620d09502d6509a4e6ad0d909de22401b97b5d540bb427af3a521d758a8518d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.06252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--340e7d6a-15d6-4b66-b07a-cce4e3d91bde", "created": "2026-01-27T05:13:01.063368Z", "modified": "2026-01-27T05:13:01.063368Z", "relationship_type": "indicates", "source_ref": "indicator--04812059-99ba-439b-b6b2-fce40828c339", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445a0a95-8f8c-4a09-a664-9ee0160fa66b", "created": "2026-01-27T05:13:01.063548Z", "modified": "2026-01-27T05:13:01.063548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8bc63b6d38cae0c22b280ced6af8e540c23bd6f6edd761ec501cc1af3ee62069']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.063548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--432ada98-c26d-4610-a233-2e886893c73d", "created": "2026-01-27T05:13:01.064423Z", "modified": "2026-01-27T05:13:01.064423Z", "relationship_type": "indicates", "source_ref": "indicator--445a0a95-8f8c-4a09-a664-9ee0160fa66b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4061b0bf-5b5d-488b-b494-4ce0ef60a7a5", "created": "2026-01-27T05:13:01.064607Z", "modified": "2026-01-27T05:13:01.064607Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15bc3c77c0858bbb3c0b7fe46103b0b8c87b98fa8a41c64dd80e5a3e60819eec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.064607Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e8ca105-ad32-41ea-869c-e4dfbdb66e2d", "created": "2026-01-27T05:13:01.065443Z", "modified": "2026-01-27T05:13:01.065443Z", "relationship_type": "indicates", "source_ref": "indicator--4061b0bf-5b5d-488b-b494-4ce0ef60a7a5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d648f3c-5558-4eae-8f3a-3fa1b1ed7e9c", "created": "2026-01-27T05:13:01.065628Z", "modified": "2026-01-27T05:13:01.065628Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='274a7a5ac2a554e664ab121dbfc9cb45bf15a1a1cc152ca739bfea3464cc82ce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.065628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fac54a2f-957a-4d4a-a8f5-17f684da42e4", "created": "2026-01-27T05:13:01.066592Z", "modified": "2026-01-27T05:13:01.066592Z", "relationship_type": "indicates", "source_ref": "indicator--4d648f3c-5558-4eae-8f3a-3fa1b1ed7e9c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa92c92-e42d-4886-8771-4d742e097ea4", "created": "2026-01-27T05:13:01.066785Z", "modified": "2026-01-27T05:13:01.066785Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d4b758e6b6e39f351ff7bdfef806e7c6d51c6f5734c1f4ae61e6d60939f50b62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.066785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--146e357d-8410-41cc-9035-ed51d43adee1", "created": "2026-01-27T05:13:01.067617Z", "modified": "2026-01-27T05:13:01.067617Z", "relationship_type": "indicates", "source_ref": "indicator--5aa92c92-e42d-4886-8771-4d742e097ea4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54fb7db-1bfe-432d-b0da-93bcff186e0f", "created": "2026-01-27T05:13:01.067811Z", "modified": "2026-01-27T05:13:01.067811Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a930038b58a345303dd55e1c4cc9e25b2e6da91bcf591b00c0a2c04aa7e5478']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.067811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b46d91d-62a9-4e29-adc9-8370c0613252", "created": "2026-01-27T05:13:01.068632Z", "modified": "2026-01-27T05:13:01.068632Z", "relationship_type": "indicates", "source_ref": "indicator--c54fb7db-1bfe-432d-b0da-93bcff186e0f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70e98c7-8fc8-4ab4-bea5-c8fc568b0a42", "created": "2026-01-27T05:13:01.068822Z", "modified": "2026-01-27T05:13:01.068822Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d7e6aacd444ed4c8ff685cc0cb0939a7125c5ba4db70acbc7576f35c90c9d49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.068822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ec06129-4c64-4bd0-8acd-cca58020327c", "created": "2026-01-27T05:13:01.069644Z", "modified": "2026-01-27T05:13:01.069644Z", "relationship_type": "indicates", "source_ref": "indicator--d70e98c7-8fc8-4ab4-bea5-c8fc568b0a42", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea6bf20-38cc-4c5a-b296-54be585df35a", "created": "2026-01-27T05:13:01.069838Z", "modified": "2026-01-27T05:13:01.069838Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8536ff99d831e67bf4defc9ae52253ca5d791b4ec95f260d61f4358e307f8de0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.069838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--29988608-c9db-40b8-b6b0-6f4fa24ad9ff", "created": "2026-01-27T05:13:01.070653Z", "modified": "2026-01-27T05:13:01.070653Z", "relationship_type": "indicates", "source_ref": "indicator--5ea6bf20-38cc-4c5a-b296-54be585df35a", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34be52af-20d5-4850-a6be-520d977bff38", "created": "2026-01-27T05:13:01.070845Z", "modified": "2026-01-27T05:13:01.070845Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53c3d374a7accc9ff3cbccacb96102aa0a4cb06d60a2658c7572075872d11355']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.070845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3352c7ee-547f-413c-aaa9-f9046fae59a7", "created": "2026-01-27T05:13:01.07168Z", "modified": "2026-01-27T05:13:01.07168Z", "relationship_type": "indicates", "source_ref": "indicator--34be52af-20d5-4850-a6be-520d977bff38", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513efaee-ed19-4130-8390-ccac97c4e52c", "created": "2026-01-27T05:13:01.071872Z", "modified": "2026-01-27T05:13:01.071872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='368b990d0d3eb4fe96e98dd6841bf927d42160d5f9f4d29666da836d761a0f82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.071872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02634114-4610-4815-9dc5-d05c2907078e", "created": "2026-01-27T05:13:01.072687Z", "modified": "2026-01-27T05:13:01.072687Z", "relationship_type": "indicates", "source_ref": "indicator--513efaee-ed19-4130-8390-ccac97c4e52c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb450f7-bdfe-41ea-8502-1983a01fbd4a", "created": "2026-01-27T05:13:01.072883Z", "modified": "2026-01-27T05:13:01.072883Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca8fe950fce88ba05f4b6d888f97c2e362e52bc0c37481106d00bfce92063263']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.072883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df08c5ef-ec08-43ba-8304-40ddfcc7387b", "created": "2026-01-27T05:13:01.073711Z", "modified": "2026-01-27T05:13:01.073711Z", "relationship_type": "indicates", "source_ref": "indicator--3eb450f7-bdfe-41ea-8502-1983a01fbd4a", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0415d53e-98b6-4e2e-b5e7-e37a0025eb35", "created": "2026-01-27T05:13:01.073901Z", "modified": "2026-01-27T05:13:01.073901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3907cabfb9f405210632c57e44acbaebf0196ad9e9ff6552ed2c741c016c470d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.073901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2c81267-0f5c-468f-9661-89c5fc62bcba", "created": "2026-01-27T05:13:01.07486Z", "modified": "2026-01-27T05:13:01.07486Z", "relationship_type": "indicates", "source_ref": "indicator--0415d53e-98b6-4e2e-b5e7-e37a0025eb35", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a261ed-75d1-4d02-b6c1-9bf41d51a715", "created": "2026-01-27T05:13:01.075038Z", "modified": "2026-01-27T05:13:01.075038Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a519370fd9fa8ed64a266e8aaddcd4feadcb85d8384e8c3c3c6db819bcd0bf4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.075038Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d985198-695a-46e6-bdbb-af32fc5d2169", "created": "2026-01-27T05:13:01.075874Z", "modified": "2026-01-27T05:13:01.075874Z", "relationship_type": "indicates", "source_ref": "indicator--01a261ed-75d1-4d02-b6c1-9bf41d51a715", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f5c958-8871-48c4-9092-e9f7c6b40ddc", "created": "2026-01-27T05:13:01.076051Z", "modified": "2026-01-27T05:13:01.076051Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='093a6a5b44ca478d4bb620948752357331cf54a7bd6de6f3f9a781c5fcbdaa2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.076051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73871796-9e0b-4b55-af11-8be77678afda", "created": "2026-01-27T05:13:01.076886Z", "modified": "2026-01-27T05:13:01.076886Z", "relationship_type": "indicates", "source_ref": "indicator--92f5c958-8871-48c4-9092-e9f7c6b40ddc", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542dec68-16b9-42a5-aaba-eb6a6a8d6282", "created": "2026-01-27T05:13:01.077061Z", "modified": "2026-01-27T05:13:01.077061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='175b3c427a7f9008a978ccae38336e5cc8af427bf84d9706a9957d2587fc249f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.077061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8e3712a-b5c9-40dd-9eef-513da77ab8c4", "created": "2026-01-27T05:13:01.077898Z", "modified": "2026-01-27T05:13:01.077898Z", "relationship_type": "indicates", "source_ref": "indicator--542dec68-16b9-42a5-aaba-eb6a6a8d6282", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48fb180f-6baa-44cf-a16b-58664878dbfe", "created": "2026-01-27T05:13:01.078079Z", "modified": "2026-01-27T05:13:01.078079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0a357beab5b4f8b5afb7a9de48dde2f2a4a278c72d64e96224a62fc391780ec1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.078079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc11493e-4883-4e15-99f9-0d8bc07c216d", "created": "2026-01-27T05:13:01.078916Z", "modified": "2026-01-27T05:13:01.078916Z", "relationship_type": "indicates", "source_ref": "indicator--48fb180f-6baa-44cf-a16b-58664878dbfe", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b701887e-1fb4-4488-adde-e5c065cac1e0", "created": "2026-01-27T05:13:01.079091Z", "modified": "2026-01-27T05:13:01.079091Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49cb8e6b951afb451a5843757623ab623bb34273d675cba648c41247899852d4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.079091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdacc4d0-a172-4fee-bf40-d7dbc37bc9fb", "created": "2026-01-27T05:13:01.079929Z", "modified": "2026-01-27T05:13:01.079929Z", "relationship_type": "indicates", "source_ref": "indicator--b701887e-1fb4-4488-adde-e5c065cac1e0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2a31ff-b1fa-47bd-8ddb-e9108631b0a8", "created": "2026-01-27T05:13:01.080102Z", "modified": "2026-01-27T05:13:01.080102Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5cc852269bf9cd1665b20a46a7e2847a709344c398fc8b4e876d85354c8310e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.080102Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2d1142f-c306-4695-b65d-5d9b9dea9a97", "created": "2026-01-27T05:13:01.080932Z", "modified": "2026-01-27T05:13:01.080932Z", "relationship_type": "indicates", "source_ref": "indicator--6b2a31ff-b1fa-47bd-8ddb-e9108631b0a8", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46ecadf-1bb5-49fa-b84a-a2e2f485bd2c", "created": "2026-01-27T05:13:01.081105Z", "modified": "2026-01-27T05:13:01.081105Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72b28f37e38c0fe6d3150c275c4edeb143600de4a7d5a2c8f8de53622a047a06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.081105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72143b30-fc79-4bca-851f-8f28810fcd4e", "created": "2026-01-27T05:13:01.081962Z", "modified": "2026-01-27T05:13:01.081962Z", "relationship_type": "indicates", "source_ref": "indicator--c46ecadf-1bb5-49fa-b84a-a2e2f485bd2c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a59d95-ab4f-4421-aef2-f28e21686733", "created": "2026-01-27T05:13:01.082138Z", "modified": "2026-01-27T05:13:01.082138Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c64ce16f2e668bb71d18048dd00316841c32fb78a4f9eb6623ebcecf847253d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.082138Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3dd6d606-90d5-4d0b-bd75-7ce79ee822ee", "created": "2026-01-27T05:13:01.082988Z", "modified": "2026-01-27T05:13:01.082988Z", "relationship_type": "indicates", "source_ref": "indicator--b5a59d95-ab4f-4421-aef2-f28e21686733", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d88ea04-d358-45dd-aac9-55856aff2276", "created": "2026-01-27T05:13:01.083163Z", "modified": "2026-01-27T05:13:01.083163Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2d69a446d4827b36ae5f34514428c9d73fc02107513e830df90c0bbdc1d0a0be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.083163Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c16dfee-1d18-4c43-9dd2-dc43665ee322", "created": "2026-01-27T05:13:01.084472Z", "modified": "2026-01-27T05:13:01.084472Z", "relationship_type": "indicates", "source_ref": "indicator--4d88ea04-d358-45dd-aac9-55856aff2276", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a17b02e-2200-4166-b01b-dd9fc8da30e1", "created": "2026-01-27T05:13:01.084653Z", "modified": "2026-01-27T05:13:01.084653Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84dae2b659d84f90d02530ed8c18fe2eea3520fcebdf38b9fbe7c239644e5cce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.084653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16a20077-9fb6-4d8d-b019-7255ea6ad9e9", "created": "2026-01-27T05:13:01.085491Z", "modified": "2026-01-27T05:13:01.085491Z", "relationship_type": "indicates", "source_ref": "indicator--1a17b02e-2200-4166-b01b-dd9fc8da30e1", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0af6da-414f-4f28-ab9a-9d1b12464d4b", "created": "2026-01-27T05:13:01.085669Z", "modified": "2026-01-27T05:13:01.085669Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c707f2e9b1e0db3729dfa912554d640654c4be6d5ec964ddc62fe5d7cf50bee7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.085669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--454a2d75-e970-4312-b420-92501a4595d1", "created": "2026-01-27T05:13:01.086503Z", "modified": "2026-01-27T05:13:01.086503Z", "relationship_type": "indicates", "source_ref": "indicator--4c0af6da-414f-4f28-ab9a-9d1b12464d4b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7050fc14-04bc-4752-b9cd-cbb453b9deed", "created": "2026-01-27T05:13:01.086679Z", "modified": "2026-01-27T05:13:01.086679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba88fa93ce34c2a84c635bc589825a86ab39efb1dd8fa125d2d1472d264f6bdb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.086679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1e98d48-d7a1-4757-8156-912788b0833e", "created": "2026-01-27T05:13:01.087514Z", "modified": "2026-01-27T05:13:01.087514Z", "relationship_type": "indicates", "source_ref": "indicator--7050fc14-04bc-4752-b9cd-cbb453b9deed", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bb92cf-457a-4b51-8c49-20c44b9db983", "created": "2026-01-27T05:13:01.087691Z", "modified": "2026-01-27T05:13:01.087691Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aabc9bcd301eca228afa4d3d246bc3e2a981392b24fe27fc2ac4237f1519bb82']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.087691Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8ec67ca-f946-4598-befc-691728e81f7b", "created": "2026-01-27T05:13:01.08852Z", "modified": "2026-01-27T05:13:01.08852Z", "relationship_type": "indicates", "source_ref": "indicator--13bb92cf-457a-4b51-8c49-20c44b9db983", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bcec75-d717-4ec7-8f5f-a74a96bdeaef", "created": "2026-01-27T05:13:01.088694Z", "modified": "2026-01-27T05:13:01.088694Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='337c939f39d206e8d3c6b24c6b7ac7de8783b65aa5ff9e8cab55f898db8b9dfd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.088694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc508978-80c8-4d40-8cd2-9338580e2414", "created": "2026-01-27T05:13:01.089528Z", "modified": "2026-01-27T05:13:01.089528Z", "relationship_type": "indicates", "source_ref": "indicator--04bcec75-d717-4ec7-8f5f-a74a96bdeaef", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f52aa1-6d96-42da-8bba-7224295b535d", "created": "2026-01-27T05:13:01.0897Z", "modified": "2026-01-27T05:13:01.0897Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='077c4808fb564c3365a25164a8d317ef291d92f260752a4864fd74926192b79c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.0897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c09ee2e1-f616-48a4-9c16-fc742912f5c5", "created": "2026-01-27T05:13:01.09053Z", "modified": "2026-01-27T05:13:01.09053Z", "relationship_type": "indicates", "source_ref": "indicator--d2f52aa1-6d96-42da-8bba-7224295b535d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13c0cb4-a979-43e4-9e41-7c8c62208824", "created": "2026-01-27T05:13:01.090703Z", "modified": "2026-01-27T05:13:01.090703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08087db4cd8d719f878f3d9e2f08d6e3f7c5cb84e8805bc522b1d0c5848b7fc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.090703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fda11df-23c4-414f-bc04-862645ab192a", "created": "2026-01-27T05:13:01.091524Z", "modified": "2026-01-27T05:13:01.091524Z", "relationship_type": "indicates", "source_ref": "indicator--c13c0cb4-a979-43e4-9e41-7c8c62208824", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d821cea9-de95-4c45-b6d7-e96ce786d4c4", "created": "2026-01-27T05:13:01.0917Z", "modified": "2026-01-27T05:13:01.0917Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ad17e68289fdaacb75de6f77fefd4838f142bbb61351314526be86bce61b7f25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.0917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3552451-5ca8-4d3d-8a16-aafce5893dab", "created": "2026-01-27T05:13:01.092524Z", "modified": "2026-01-27T05:13:01.092524Z", "relationship_type": "indicates", "source_ref": "indicator--d821cea9-de95-4c45-b6d7-e96ce786d4c4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a5cc98-bfbc-45f5-b613-067bfcd6b8aa", "created": "2026-01-27T05:13:01.092696Z", "modified": "2026-01-27T05:13:01.092696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2cb211022dea05b7f104255049e552fec0c762217887c1dc75681d99da2087c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.092696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ee12d7c-ef92-472c-9d86-28670f7e13f3", "created": "2026-01-27T05:13:01.093661Z", "modified": "2026-01-27T05:13:01.093661Z", "relationship_type": "indicates", "source_ref": "indicator--c0a5cc98-bfbc-45f5-b613-067bfcd6b8aa", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9827ada0-48ca-40fb-a705-0a3b28b1ab0f", "created": "2026-01-27T05:13:01.093856Z", "modified": "2026-01-27T05:13:01.093856Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8452292a6befb0537c30e42237feed44e876372411385aadfdd222c951de3a55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.093856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23cc96ae-9e53-4d96-bc62-a39aeb0b510a", "created": "2026-01-27T05:13:01.094686Z", "modified": "2026-01-27T05:13:01.094686Z", "relationship_type": "indicates", "source_ref": "indicator--9827ada0-48ca-40fb-a705-0a3b28b1ab0f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befcc2f4-f79c-42b6-ac0a-9567c4d2e7ee", "created": "2026-01-27T05:13:01.094882Z", "modified": "2026-01-27T05:13:01.094882Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8a703ebc1aca9f44c8876eb28e07b48ee31039676d1ff21ef15881ce3edd341']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.094882Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6f56b3f-780d-46bc-bd39-99568969ac06", "created": "2026-01-27T05:13:01.095694Z", "modified": "2026-01-27T05:13:01.095694Z", "relationship_type": "indicates", "source_ref": "indicator--befcc2f4-f79c-42b6-ac0a-9567c4d2e7ee", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ede6ab-a14c-4ac5-97a8-321c87f3f57e", "created": "2026-01-27T05:13:01.095886Z", "modified": "2026-01-27T05:13:01.095886Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba3b45b2f76e67aade080d02b8d64fe2137e3de5ed2b03687eaefd93665a3d1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.095886Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f54c69d-d58b-403a-bafb-297a45e46a85", "created": "2026-01-27T05:13:01.096708Z", "modified": "2026-01-27T05:13:01.096708Z", "relationship_type": "indicates", "source_ref": "indicator--d7ede6ab-a14c-4ac5-97a8-321c87f3f57e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7376ba0-4002-4a3a-b26d-b207d4def9bb", "created": "2026-01-27T05:13:01.096901Z", "modified": "2026-01-27T05:13:01.096901Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac7f5c78730fe12be6752dc3840ed0355359e545286b2472d41f5f6c29c0b1b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.096901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9905543-70d3-444e-97bb-7a6e1da2f910", "created": "2026-01-27T05:13:01.097718Z", "modified": "2026-01-27T05:13:01.097718Z", "relationship_type": "indicates", "source_ref": "indicator--d7376ba0-4002-4a3a-b26d-b207d4def9bb", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324f430e-3df3-4d21-833b-0be3ab450625", "created": "2026-01-27T05:13:01.09791Z", "modified": "2026-01-27T05:13:01.09791Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5bbfc637e153e5eb177c15d8949ef08eb903abc50d2662be8bab1357d70dc7d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.09791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f6ed7c3-fefb-47eb-a854-4dd614908755", "created": "2026-01-27T05:13:01.098721Z", "modified": "2026-01-27T05:13:01.098721Z", "relationship_type": "indicates", "source_ref": "indicator--324f430e-3df3-4d21-833b-0be3ab450625", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e51de2-ebc1-44be-a438-24b092c22d20", "created": "2026-01-27T05:13:01.09891Z", "modified": "2026-01-27T05:13:01.09891Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0927c8c306910d853ed973a86b461ccef9880645d201b8aa632577957a06a484']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.09891Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--036eaa8e-1381-43fe-8bf8-b9b926c28fbb", "created": "2026-01-27T05:13:01.099723Z", "modified": "2026-01-27T05:13:01.099723Z", "relationship_type": "indicates", "source_ref": "indicator--60e51de2-ebc1-44be-a438-24b092c22d20", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5bcc0b-fe61-4387-8832-e8dc88409195", "created": "2026-01-27T05:13:01.099916Z", "modified": "2026-01-27T05:13:01.099916Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ca004876a7fa62c24378102bcda638c68bb5a4005f27835005d669996f25f32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.099916Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be9fe644-f344-4eac-a1f0-b43a969045ef", "created": "2026-01-27T05:13:01.100732Z", "modified": "2026-01-27T05:13:01.100732Z", "relationship_type": "indicates", "source_ref": "indicator--9f5bcc0b-fe61-4387-8832-e8dc88409195", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109780d9-2f64-43a7-a27b-a448467d6347", "created": "2026-01-27T05:13:01.100922Z", "modified": "2026-01-27T05:13:01.100922Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='400cd0177031ff54f37f78be50f171dd40b303e59d4836b53ea4e20d0640e043']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.100922Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d45a625a-4bb9-4c97-8707-49e6ebd02a91", "created": "2026-01-27T05:13:01.101756Z", "modified": "2026-01-27T05:13:01.101756Z", "relationship_type": "indicates", "source_ref": "indicator--109780d9-2f64-43a7-a27b-a448467d6347", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89feba5-ceea-4d39-9f86-47615bbc03b7", "created": "2026-01-27T05:13:01.101934Z", "modified": "2026-01-27T05:13:01.101934Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51f32678cdbd55a312e1822d636eb9b3d6f5421988ff030de1c0c101a0a50638']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.101934Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0274bdd3-5951-4060-9ab6-f2e258bdc657", "created": "2026-01-27T05:13:01.102991Z", "modified": "2026-01-27T05:13:01.102991Z", "relationship_type": "indicates", "source_ref": "indicator--a89feba5-ceea-4d39-9f86-47615bbc03b7", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40695537-366b-4fcb-b686-6769c2d32449", "created": "2026-01-27T05:13:01.103204Z", "modified": "2026-01-27T05:13:01.103204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a612a93e9af50d44012814b71a92869b090a7a225132f2bb33cb780c6104d16']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.103204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d16e5dd-5e6d-418d-901f-cf65808a311f", "created": "2026-01-27T05:13:01.104071Z", "modified": "2026-01-27T05:13:01.104071Z", "relationship_type": "indicates", "source_ref": "indicator--40695537-366b-4fcb-b686-6769c2d32449", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8583c6-6cbc-470b-a4c5-bfd8ac3e89d7", "created": "2026-01-27T05:13:01.104253Z", "modified": "2026-01-27T05:13:01.104253Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff53566829a9f9feb723966d94954573d6d3dd5573592694ffcd06727d3eff93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.104253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95c64708-1888-47b6-9328-7d438e6b1ac6", "created": "2026-01-27T05:13:01.105093Z", "modified": "2026-01-27T05:13:01.105093Z", "relationship_type": "indicates", "source_ref": "indicator--3f8583c6-6cbc-470b-a4c5-bfd8ac3e89d7", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0339ca-5d8d-468e-b402-f12b68452091", "created": "2026-01-27T05:13:01.105277Z", "modified": "2026-01-27T05:13:01.105277Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='844f38fcd50de413c639bf007a3dc6531a47052a29b35f245f7515b53a4ddd30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.105277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4957c1bc-cead-40c6-a870-03197082c550", "created": "2026-01-27T05:13:01.106115Z", "modified": "2026-01-27T05:13:01.106115Z", "relationship_type": "indicates", "source_ref": "indicator--eb0339ca-5d8d-468e-b402-f12b68452091", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b327dfa-a566-4c72-ac50-a8a304b47aac", "created": "2026-01-27T05:13:01.106291Z", "modified": "2026-01-27T05:13:01.106291Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8954a8b4faea49ea62fddc4086d3a7d69392fdaa47626d4451b7423df812922e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.106291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--82e8fced-351e-4c8b-a1fa-0fe3fc813b77", "created": "2026-01-27T05:13:01.107124Z", "modified": "2026-01-27T05:13:01.107124Z", "relationship_type": "indicates", "source_ref": "indicator--2b327dfa-a566-4c72-ac50-a8a304b47aac", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c41fc8-381f-4a5d-8e6f-ad1c0c081c41", "created": "2026-01-27T05:13:01.107298Z", "modified": "2026-01-27T05:13:01.107298Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9574107d79c130b8084d17687d43b81130e1c72f9f3de2c17da0c63ec98ca4f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.107298Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db1679ad-a58e-4f6e-9a1f-929de5f8b605", "created": "2026-01-27T05:13:01.108126Z", "modified": "2026-01-27T05:13:01.108126Z", "relationship_type": "indicates", "source_ref": "indicator--50c41fc8-381f-4a5d-8e6f-ad1c0c081c41", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3bb175-6d0d-4353-af84-be8ea047356a", "created": "2026-01-27T05:13:01.108303Z", "modified": "2026-01-27T05:13:01.108303Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0158de2c831a778074d11c391eada93c772512f95af4c6cee6aded53bfa99c66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.108303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afa8ca18-4371-404d-92b5-ec427fdfa0d1", "created": "2026-01-27T05:13:01.109144Z", "modified": "2026-01-27T05:13:01.109144Z", "relationship_type": "indicates", "source_ref": "indicator--8c3bb175-6d0d-4353-af84-be8ea047356a", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9340df2-6618-4ae9-8ec6-715507471b7e", "created": "2026-01-27T05:13:01.10932Z", "modified": "2026-01-27T05:13:01.10932Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='27dca0a794ac5c9d901201022e105af630ae83278ea71a08d9620737cceba80b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.10932Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f951a51b-b5f2-4854-bb97-37f975d85715", "created": "2026-01-27T05:13:01.110155Z", "modified": "2026-01-27T05:13:01.110155Z", "relationship_type": "indicates", "source_ref": "indicator--a9340df2-6618-4ae9-8ec6-715507471b7e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86541a0b-8a49-481b-8088-764dd42834f2", "created": "2026-01-27T05:13:01.110328Z", "modified": "2026-01-27T05:13:01.110328Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbe6cdd6523789c3988435f3a3becd2a463321200fe79053c7b9670cc35093bb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.110328Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce753172-0ab6-486d-8a39-20cb8548c2cf", "created": "2026-01-27T05:13:01.111156Z", "modified": "2026-01-27T05:13:01.111156Z", "relationship_type": "indicates", "source_ref": "indicator--86541a0b-8a49-481b-8088-764dd42834f2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0482d4b3-bf07-4672-b73a-87bc2396c694", "created": "2026-01-27T05:13:01.111329Z", "modified": "2026-01-27T05:13:01.111329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5764941bf640711c4be21b92571b437b58bb7e7048cd571be0aba667e9f076e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.111329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4570183c-c47f-4868-bba7-de1136d820c2", "created": "2026-01-27T05:13:01.11229Z", "modified": "2026-01-27T05:13:01.11229Z", "relationship_type": "indicates", "source_ref": "indicator--0482d4b3-bf07-4672-b73a-87bc2396c694", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407d80f1-b93e-4cea-ad00-8a5cb1dab112", "created": "2026-01-27T05:13:01.112466Z", "modified": "2026-01-27T05:13:01.112466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f3878516a0df2404499e613b6c5cc05b5a7b1a2a802260d47e6b1fbb5784893']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.112466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--937ef8ff-953b-47c6-89b7-e2e6a8f81a26", "created": "2026-01-27T05:13:01.113292Z", "modified": "2026-01-27T05:13:01.113292Z", "relationship_type": "indicates", "source_ref": "indicator--407d80f1-b93e-4cea-ad00-8a5cb1dab112", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c321d0b5-9c95-4abf-92f1-0c1780fedf68", "created": "2026-01-27T05:13:01.113474Z", "modified": "2026-01-27T05:13:01.113474Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='10ab29b677caf0fdfeaa4410b87b603cf89425e7148147055183e1cabaacbf08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.113474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b20eac6-b403-43d1-9c69-e608392e2ea6", "created": "2026-01-27T05:13:01.114313Z", "modified": "2026-01-27T05:13:01.114313Z", "relationship_type": "indicates", "source_ref": "indicator--c321d0b5-9c95-4abf-92f1-0c1780fedf68", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f565565b-d129-4619-9304-803e5d8dcb64", "created": "2026-01-27T05:13:01.11449Z", "modified": "2026-01-27T05:13:01.11449Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f06b5825a0bf7672a65dd04c44fece642e5dce43a3e34d71c1009ebd1b8831ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.11449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7b1c463-fd3e-4975-9a75-cc50cac5c433", "created": "2026-01-27T05:13:01.115329Z", "modified": "2026-01-27T05:13:01.115329Z", "relationship_type": "indicates", "source_ref": "indicator--f565565b-d129-4619-9304-803e5d8dcb64", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe744ac-7b9a-40b9-a972-1af6442a122c", "created": "2026-01-27T05:13:01.115505Z", "modified": "2026-01-27T05:13:01.115505Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f826b735ba3bf4986734daf8947249f9108214936aee4512b86c09278a28f2a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.115505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4151d045-8742-41a6-a3cd-596b873d9249", "created": "2026-01-27T05:13:01.116336Z", "modified": "2026-01-27T05:13:01.116336Z", "relationship_type": "indicates", "source_ref": "indicator--cfe744ac-7b9a-40b9-a972-1af6442a122c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9e9c34-9755-4aba-a2c5-13d5c3ba259e", "created": "2026-01-27T05:13:01.116544Z", "modified": "2026-01-27T05:13:01.116544Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fada242bdadcf7eb96a21e9efb50c6bdcf5b4a3dd0069cb95877f8685ef53d66']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.116544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93231ee2-177d-4c7d-9041-8d8515eb138b", "created": "2026-01-27T05:13:01.1174Z", "modified": "2026-01-27T05:13:01.1174Z", "relationship_type": "indicates", "source_ref": "indicator--8b9e9c34-9755-4aba-a2c5-13d5c3ba259e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fe93a0-766c-421c-95f1-4df835c0a0f0", "created": "2026-01-27T05:13:01.117627Z", "modified": "2026-01-27T05:13:01.117627Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5560c003a01a4b1e02047171ef3c2dca68f4ce05fc6a31d29502e39df1c08043']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.117627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfbc9829-67d2-4692-abd1-38cf33ce7d37", "created": "2026-01-27T05:13:01.118488Z", "modified": "2026-01-27T05:13:01.118488Z", "relationship_type": "indicates", "source_ref": "indicator--79fe93a0-766c-421c-95f1-4df835c0a0f0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e74d6c-45cf-4179-9683-6964df984da4", "created": "2026-01-27T05:13:01.118668Z", "modified": "2026-01-27T05:13:01.118668Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7072e173dc3bb135e4ac78398c896d40407e291478539a116eeb812f30a581ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.118668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--369363ab-2cd9-48bb-8a7c-479d4eab22c9", "created": "2026-01-27T05:13:01.119512Z", "modified": "2026-01-27T05:13:01.119512Z", "relationship_type": "indicates", "source_ref": "indicator--35e74d6c-45cf-4179-9683-6964df984da4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c305f14-0810-4f72-b9b9-b57d28016465", "created": "2026-01-27T05:13:01.119689Z", "modified": "2026-01-27T05:13:01.119689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f894c31ba1c834d4aa43d58728d9b787f354237aab0f736568198028ca1db09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.119689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--183e4ec5-1d06-4788-abc2-f984ed30093e", "created": "2026-01-27T05:13:01.120643Z", "modified": "2026-01-27T05:13:01.120643Z", "relationship_type": "indicates", "source_ref": "indicator--4c305f14-0810-4f72-b9b9-b57d28016465", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464c133e-406b-402f-aaa9-d138dbf4e9eb", "created": "2026-01-27T05:13:01.120837Z", "modified": "2026-01-27T05:13:01.120837Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='84963d460700950f519e0331f14655fefd0f7041914a66449787c97f48df36ca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.120837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fb2be65-b96c-4d87-90a3-68c9739ebbb8", "created": "2026-01-27T05:13:01.121653Z", "modified": "2026-01-27T05:13:01.121653Z", "relationship_type": "indicates", "source_ref": "indicator--464c133e-406b-402f-aaa9-d138dbf4e9eb", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0f1a9f-39a2-4d31-b79d-9334afa6bda3", "created": "2026-01-27T05:13:01.121843Z", "modified": "2026-01-27T05:13:01.121843Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='828b26c467763ce3c7722bc635de26cc6829b2e0fb7bfe48e271e0620384343b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.121843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e86059e-88ef-4c73-a440-ea1dfb67b734", "created": "2026-01-27T05:13:01.122653Z", "modified": "2026-01-27T05:13:01.122653Z", "relationship_type": "indicates", "source_ref": "indicator--fb0f1a9f-39a2-4d31-b79d-9334afa6bda3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d73990b-ca1c-4a5f-a069-b185a0e9868b", "created": "2026-01-27T05:13:01.122846Z", "modified": "2026-01-27T05:13:01.122846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c56539b1787d799ddff879675cabe603cbe168ec9989d3cdfe15802efd33fb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.122846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--504a5c0a-f31e-445b-a42e-a58dd8870869", "created": "2026-01-27T05:13:01.123668Z", "modified": "2026-01-27T05:13:01.123668Z", "relationship_type": "indicates", "source_ref": "indicator--9d73990b-ca1c-4a5f-a069-b185a0e9868b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06cbbcd-a7df-44e8-a0c5-ad7189286906", "created": "2026-01-27T05:13:01.123861Z", "modified": "2026-01-27T05:13:01.123861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f6ca4c78de852036ad0ec8681e14faf93254655a6ac07b6091bf2c1fec45794f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.123861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e180b7-aa3b-4237-bdeb-872b715ef2df", "created": "2026-01-27T05:13:01.124671Z", "modified": "2026-01-27T05:13:01.124671Z", "relationship_type": "indicates", "source_ref": "indicator--a06cbbcd-a7df-44e8-a0c5-ad7189286906", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891de119-b0f0-494b-989c-669e5fe792db", "created": "2026-01-27T05:13:01.124862Z", "modified": "2026-01-27T05:13:01.124862Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6433856b6eca35b1011818ecf2f795e0055f17f7abc7ab4e9adbe53a9fcd9789']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.124862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87607ce1-289f-4980-9217-171026d85630", "created": "2026-01-27T05:13:01.125683Z", "modified": "2026-01-27T05:13:01.125683Z", "relationship_type": "indicates", "source_ref": "indicator--891de119-b0f0-494b-989c-669e5fe792db", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899a2f19-72c4-4e55-8b28-6f4a2eecbf29", "created": "2026-01-27T05:13:01.125878Z", "modified": "2026-01-27T05:13:01.125878Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='372678745c12a32231ccae60ba119a2a502c99e9b6dd276995b7346a4048845f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.125878Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65db2337-d5ca-4367-9767-4c3e366b554c", "created": "2026-01-27T05:13:01.126703Z", "modified": "2026-01-27T05:13:01.126703Z", "relationship_type": "indicates", "source_ref": "indicator--899a2f19-72c4-4e55-8b28-6f4a2eecbf29", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362e4bf2-92b1-4bf6-9140-7254d2fff63b", "created": "2026-01-27T05:13:01.126894Z", "modified": "2026-01-27T05:13:01.126894Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e32ea81855b5fafd6c715064d112a5be303bbf125e8174738178cc33950477b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.126894Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4aeb29f8-360f-4eff-97df-31c849aa6544", "created": "2026-01-27T05:13:01.127727Z", "modified": "2026-01-27T05:13:01.127727Z", "relationship_type": "indicates", "source_ref": "indicator--362e4bf2-92b1-4bf6-9140-7254d2fff63b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4a7875-c2e3-4193-8deb-d15b7de0cecf", "created": "2026-01-27T05:13:01.127925Z", "modified": "2026-01-27T05:13:01.127925Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8dc5ad6713e2a9cd1cffbc00d2f656f31c22c4c94a565e8fa920fc91bbef7661']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.127925Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--072e815e-b5c9-427f-adca-2424e3237813", "created": "2026-01-27T05:13:01.128759Z", "modified": "2026-01-27T05:13:01.128759Z", "relationship_type": "indicates", "source_ref": "indicator--ad4a7875-c2e3-4193-8deb-d15b7de0cecf", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3b637a-50f3-489b-a2fe-4476682fc53c", "created": "2026-01-27T05:13:01.128939Z", "modified": "2026-01-27T05:13:01.128939Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9679d816e0f42832ecedc2a3c9b197fa44c9d50150af660c702a205c4a27cdf4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.128939Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd504d2a-0929-4355-9cc7-4b4bdec97854", "created": "2026-01-27T05:13:01.129908Z", "modified": "2026-01-27T05:13:01.129908Z", "relationship_type": "indicates", "source_ref": "indicator--eb3b637a-50f3-489b-a2fe-4476682fc53c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d09f06-d725-40f9-98d5-970ac461bcc6", "created": "2026-01-27T05:13:01.130086Z", "modified": "2026-01-27T05:13:01.130086Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a31e9226b912923275c14d5e6f4e813b04b7985b348052de8f0e8c1e808ac5e3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.130086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3328d1c-34f4-41bd-acd9-a7977374235b", "created": "2026-01-27T05:13:01.130919Z", "modified": "2026-01-27T05:13:01.130919Z", "relationship_type": "indicates", "source_ref": "indicator--47d09f06-d725-40f9-98d5-970ac461bcc6", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf25c5d-e1df-40f9-b47a-b599fb0b6929", "created": "2026-01-27T05:13:01.131095Z", "modified": "2026-01-27T05:13:01.131095Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='754ad5cf8e430ebff8c3a0de85dd21b7407fef331c367ad42e7f32a38402b4e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.131095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4801ef55-bf3b-46e2-b1c3-183e295e8ef4", "created": "2026-01-27T05:13:01.131926Z", "modified": "2026-01-27T05:13:01.131926Z", "relationship_type": "indicates", "source_ref": "indicator--6cf25c5d-e1df-40f9-b47a-b599fb0b6929", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca91c5c-3a34-476c-af5d-f5ae3194acec", "created": "2026-01-27T05:13:01.132101Z", "modified": "2026-01-27T05:13:01.132101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a3113f84f6eaf1a3a48fa07f8d33cf47fb3507261493de75c412474fc946ab10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.132101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98e51dca-827e-4127-aeb4-1dc6ab83b624", "created": "2026-01-27T05:13:01.13296Z", "modified": "2026-01-27T05:13:01.13296Z", "relationship_type": "indicates", "source_ref": "indicator--3ca91c5c-3a34-476c-af5d-f5ae3194acec", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b528317-8a08-42b5-a19c-45010dac14ca", "created": "2026-01-27T05:13:01.133156Z", "modified": "2026-01-27T05:13:01.133156Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='575db15804d3b2f5bc3bb57aa040ec425ee97d9dcae75026f58ab6c89da37dba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.133156Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d9a6a8d-937c-495e-9cf1-3884176cd972", "created": "2026-01-27T05:13:01.134037Z", "modified": "2026-01-27T05:13:01.134037Z", "relationship_type": "indicates", "source_ref": "indicator--4b528317-8a08-42b5-a19c-45010dac14ca", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaaa810-9a7c-4b51-80f0-23d1b0227a78", "created": "2026-01-27T05:13:01.134214Z", "modified": "2026-01-27T05:13:01.134214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7749c9d7dfa4aa791f5a146ad4ac58d3ff66a3633bca96ad442f350118f45d7b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.134214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--842c87c8-690f-4c74-aae5-c38e8ecc0802", "created": "2026-01-27T05:13:01.135053Z", "modified": "2026-01-27T05:13:01.135053Z", "relationship_type": "indicates", "source_ref": "indicator--aaaaa810-9a7c-4b51-80f0-23d1b0227a78", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070d2abb-f96a-4d47-bd14-63d90ff2b017", "created": "2026-01-27T05:13:01.135228Z", "modified": "2026-01-27T05:13:01.135228Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e5f026a32a3c7b50dcef60e541c4638bcfdc37c6c51ddf73110dce7de179ec0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.135228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14c4247e-a36f-4562-982d-164cc4013989", "created": "2026-01-27T05:13:01.136077Z", "modified": "2026-01-27T05:13:01.136077Z", "relationship_type": "indicates", "source_ref": "indicator--070d2abb-f96a-4d47-bd14-63d90ff2b017", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b465a42b-68b6-4147-a806-7413cab217fb", "created": "2026-01-27T05:13:01.136302Z", "modified": "2026-01-27T05:13:01.136302Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8aa8b289de2b82b3f344d30a9d144c4e8773afc69027e83701eae7e46d0660c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.136302Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfb9426e-6767-4d9c-a377-99c668fad744", "created": "2026-01-27T05:13:01.137137Z", "modified": "2026-01-27T05:13:01.137137Z", "relationship_type": "indicates", "source_ref": "indicator--b465a42b-68b6-4147-a806-7413cab217fb", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2025d0-fce8-4823-9b7d-2c45c59db66c", "created": "2026-01-27T05:13:01.13731Z", "modified": "2026-01-27T05:13:01.13731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eda4895582042476d58bb96ae5179def40bed1c5daa08846ff3c1045ee04ec9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.13731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--899833d9-9732-4412-8c61-3b5b30b08ba9", "created": "2026-01-27T05:13:01.138147Z", "modified": "2026-01-27T05:13:01.138147Z", "relationship_type": "indicates", "source_ref": "indicator--ed2025d0-fce8-4823-9b7d-2c45c59db66c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fce3d21-8176-447b-a8bb-30969cd9b0b3", "created": "2026-01-27T05:13:01.138319Z", "modified": "2026-01-27T05:13:01.138319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a12bdec94ccba20eab7f0193c4964eb31e11ab0b71ca99baf7280d453a203bca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.138319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6eba1eae-355e-4429-9695-d17af794351c", "created": "2026-01-27T05:13:01.139279Z", "modified": "2026-01-27T05:13:01.139279Z", "relationship_type": "indicates", "source_ref": "indicator--2fce3d21-8176-447b-a8bb-30969cd9b0b3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8215118-1932-48b9-88ca-15a4ac71c172", "created": "2026-01-27T05:13:01.139458Z", "modified": "2026-01-27T05:13:01.139458Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f08a5c6bd8d82543e4e33e4e5a52d3be288d09ab56e2fe5531eb0575edaa4ac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.139458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1507da9-345f-4fa0-b515-eb7f1b6b0137", "created": "2026-01-27T05:13:01.140296Z", "modified": "2026-01-27T05:13:01.140296Z", "relationship_type": "indicates", "source_ref": "indicator--c8215118-1932-48b9-88ca-15a4ac71c172", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8b2cd1-8189-4239-ab0e-f7d6381d1716", "created": "2026-01-27T05:13:01.14047Z", "modified": "2026-01-27T05:13:01.14047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b1cba9a36a4d5a9945689f089aa37e9d1495f408c5426bce235a370c6005475e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.14047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e934bb22-eafa-4ee9-b736-ae2da286cc9c", "created": "2026-01-27T05:13:01.141305Z", "modified": "2026-01-27T05:13:01.141305Z", "relationship_type": "indicates", "source_ref": "indicator--0b8b2cd1-8189-4239-ab0e-f7d6381d1716", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce60b7a2-a0ff-41f3-8b51-969efce78977", "created": "2026-01-27T05:13:01.14148Z", "modified": "2026-01-27T05:13:01.14148Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6c59502bfc036d3c9c0c7cd63cbc4d62f8228d22df3cc737fc3f235d42e495a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.14148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e6ef7a-7bbc-44d2-ad5e-103ecaa3e77f", "created": "2026-01-27T05:13:01.142316Z", "modified": "2026-01-27T05:13:01.142316Z", "relationship_type": "indicates", "source_ref": "indicator--ce60b7a2-a0ff-41f3-8b51-969efce78977", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b126c61a-a7dd-41b8-9c24-a8baa3763fa0", "created": "2026-01-27T05:13:01.142491Z", "modified": "2026-01-27T05:13:01.142491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0c61114662418554f333b445c27740a101b36de5ff1f5bb075218e60dee9ffab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.142491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6a0ca4c-02ad-4d63-900f-8912e6379784", "created": "2026-01-27T05:13:01.143389Z", "modified": "2026-01-27T05:13:01.143389Z", "relationship_type": "indicates", "source_ref": "indicator--b126c61a-a7dd-41b8-9c24-a8baa3763fa0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786e320d-c7f1-4a3c-9f2d-d65b9f250665", "created": "2026-01-27T05:13:01.143574Z", "modified": "2026-01-27T05:13:01.143574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='684427d0f76883b8001837f9886257c495519e8bc5dca33e9018f0cf023add0d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.143574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--580a750b-1cbd-42dd-8cea-98cb3ccd3640", "created": "2026-01-27T05:13:01.144408Z", "modified": "2026-01-27T05:13:01.144408Z", "relationship_type": "indicates", "source_ref": "indicator--786e320d-c7f1-4a3c-9f2d-d65b9f250665", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b85860-1300-426b-8391-b6efceab6fec", "created": "2026-01-27T05:13:01.144588Z", "modified": "2026-01-27T05:13:01.144588Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='de9fb3c95cb41326f0461302deb541fdb2c9444d435b56f53457175e4927311b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.144588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85092a06-050c-42c2-a22e-35918154ae42", "created": "2026-01-27T05:13:01.145416Z", "modified": "2026-01-27T05:13:01.145416Z", "relationship_type": "indicates", "source_ref": "indicator--d3b85860-1300-426b-8391-b6efceab6fec", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40889ee-0288-4f01-bad3-ec48d3850a81", "created": "2026-01-27T05:13:01.145595Z", "modified": "2026-01-27T05:13:01.145595Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79eb6262f7f9d5a72b170614fe1c3e99a7a95d0e9dfa6b5586cb52c67c9d2406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.145595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab344769-7ca3-4801-bc30-54e36e1ec1ed", "created": "2026-01-27T05:13:01.14643Z", "modified": "2026-01-27T05:13:01.14643Z", "relationship_type": "indicates", "source_ref": "indicator--e40889ee-0288-4f01-bad3-ec48d3850a81", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38e9b7d-dbd8-4d26-bc61-1d242c162189", "created": "2026-01-27T05:13:01.146608Z", "modified": "2026-01-27T05:13:01.146608Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c9b15b6cf9984ab939cded0686ef8a126cacbc94a8ff358e5d3558b9cada017']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.146608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d05e092-2464-4faf-ac45-0722d352c7c4", "created": "2026-01-27T05:13:01.147566Z", "modified": "2026-01-27T05:13:01.147566Z", "relationship_type": "indicates", "source_ref": "indicator--a38e9b7d-dbd8-4d26-bc61-1d242c162189", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd226e89-debb-4303-8431-0cf120d97204", "created": "2026-01-27T05:13:01.147761Z", "modified": "2026-01-27T05:13:01.147761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6f17d27832bcf4a8c8a47a7a2a6ccf9c03f529b62b346878859957ed9a331b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.147761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31428a82-3b65-4544-9490-441de4540b46", "created": "2026-01-27T05:13:01.148587Z", "modified": "2026-01-27T05:13:01.148587Z", "relationship_type": "indicates", "source_ref": "indicator--cd226e89-debb-4303-8431-0cf120d97204", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8a19f8-55bd-4bf4-9d2d-dd297b54057c", "created": "2026-01-27T05:13:01.148775Z", "modified": "2026-01-27T05:13:01.148775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80e9af59197f256558807e0bcb5ea3ed592a9606883370bf291740e3bfd19306']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.148775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98e407f7-5733-4564-85d4-2348aaba6004", "created": "2026-01-27T05:13:01.149592Z", "modified": "2026-01-27T05:13:01.149592Z", "relationship_type": "indicates", "source_ref": "indicator--4e8a19f8-55bd-4bf4-9d2d-dd297b54057c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e591985-5022-40a5-97dc-a5db9ba7701f", "created": "2026-01-27T05:13:01.149779Z", "modified": "2026-01-27T05:13:01.149779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d7cdf97a118714ae41acae54e98e424d2437d3f92c0bc56e35e33d510b78966']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.149779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b65a4124-0e3d-46c8-955f-245cf1207aa6", "created": "2026-01-27T05:13:01.150594Z", "modified": "2026-01-27T05:13:01.150594Z", "relationship_type": "indicates", "source_ref": "indicator--2e591985-5022-40a5-97dc-a5db9ba7701f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716fbb26-84e2-4bab-ab83-6748f92caf32", "created": "2026-01-27T05:13:01.150781Z", "modified": "2026-01-27T05:13:01.150781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9f5c26b14a01a9bf33b305a94cb0fd9a0f48ebe5f8ea742b96962451bcbdb08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.150781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9347634-e99c-4bae-b05d-307ae9e90610", "created": "2026-01-27T05:13:01.151603Z", "modified": "2026-01-27T05:13:01.151603Z", "relationship_type": "indicates", "source_ref": "indicator--716fbb26-84e2-4bab-ab83-6748f92caf32", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d745f473-eca8-452c-a128-bed7514603c0", "created": "2026-01-27T05:13:01.151792Z", "modified": "2026-01-27T05:13:01.151792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26b7d2ce57163528bf6eb6dc6c60d3785e1891be10b2ce4532379e6d9e19b24e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.151792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99b8c6af-24a1-4093-a3ef-63c883e65997", "created": "2026-01-27T05:13:01.152604Z", "modified": "2026-01-27T05:13:01.152604Z", "relationship_type": "indicates", "source_ref": "indicator--d745f473-eca8-452c-a128-bed7514603c0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd62d71-0852-4aab-8f07-2eaa10151ed1", "created": "2026-01-27T05:13:01.152787Z", "modified": "2026-01-27T05:13:01.152787Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e7497b32718ce587d3a6e92a021b4d849232f2a96ea6a1af2fca8d76bd331db8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.152787Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09e27a5c-3d15-464d-ab8e-a1a75b41278c", "created": "2026-01-27T05:13:01.153613Z", "modified": "2026-01-27T05:13:01.153613Z", "relationship_type": "indicates", "source_ref": "indicator--bbd62d71-0852-4aab-8f07-2eaa10151ed1", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c15b3b3-893e-4701-8210-c54cc829f577", "created": "2026-01-27T05:13:01.153807Z", "modified": "2026-01-27T05:13:01.153807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2079ce214cae234ce01dc00d3a7b08c8e08886506fd150edf192931c6372b758']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.153807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d4f86b1-20ca-4770-a168-c4ee7a124e88", "created": "2026-01-27T05:13:01.154631Z", "modified": "2026-01-27T05:13:01.154631Z", "relationship_type": "indicates", "source_ref": "indicator--0c15b3b3-893e-4701-8210-c54cc829f577", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b65ac69-99e2-4ecf-87ec-3a27d00317fd", "created": "2026-01-27T05:13:01.15482Z", "modified": "2026-01-27T05:13:01.15482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='78bcd659fd5e86f043d514cdfdfefddf534f36b4c57da357998a74cfa3b6d922']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.15482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09912c30-6b1e-403f-84f3-1cf1686bec4e", "created": "2026-01-27T05:13:01.155638Z", "modified": "2026-01-27T05:13:01.155638Z", "relationship_type": "indicates", "source_ref": "indicator--0b65ac69-99e2-4ecf-87ec-3a27d00317fd", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62399c9b-6fef-42d6-95a3-2ac53ed630aa", "created": "2026-01-27T05:13:01.155826Z", "modified": "2026-01-27T05:13:01.155826Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7e9333aa7f8321307f384a67a602bea3fec89b8e41683264ce6076c73967675b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.155826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6cf4a1e-228b-47b0-acda-574c22b03430", "created": "2026-01-27T05:13:01.156781Z", "modified": "2026-01-27T05:13:01.156781Z", "relationship_type": "indicates", "source_ref": "indicator--62399c9b-6fef-42d6-95a3-2ac53ed630aa", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f272fa00-787c-4898-ab27-2788cd3681b4", "created": "2026-01-27T05:13:01.156959Z", "modified": "2026-01-27T05:13:01.156959Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9529b931208bc5cce2ea20c291f2f8e7c575eaa5b541d389fdaa5f69b4f06785']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.156959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44495635-8ea5-4fbe-b6e4-7a271300e9fd", "created": "2026-01-27T05:13:01.157782Z", "modified": "2026-01-27T05:13:01.157782Z", "relationship_type": "indicates", "source_ref": "indicator--f272fa00-787c-4898-ab27-2788cd3681b4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76be2cdb-3da9-44aa-be96-99de724b1d1f", "created": "2026-01-27T05:13:01.157958Z", "modified": "2026-01-27T05:13:01.157958Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f873aad766a4706bc1d3c2eb0cfa3b5e1efc9477d96e50a2571b133526109c6d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.157958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12596cf5-eb5d-4017-b48e-c03d9c59741d", "created": "2026-01-27T05:13:01.158779Z", "modified": "2026-01-27T05:13:01.158779Z", "relationship_type": "indicates", "source_ref": "indicator--76be2cdb-3da9-44aa-be96-99de724b1d1f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cff841-b67e-4c26-ad76-df3183442abe", "created": "2026-01-27T05:13:01.158954Z", "modified": "2026-01-27T05:13:01.158954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6dbc63cd15602bb616003142f9925984d39ef24feb894e4e47318946fbc8e8be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.158954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7949896c-42ea-4d7c-8769-9cfcbef5e718", "created": "2026-01-27T05:13:01.159781Z", "modified": "2026-01-27T05:13:01.159781Z", "relationship_type": "indicates", "source_ref": "indicator--85cff841-b67e-4c26-ad76-df3183442abe", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c965d2f4-5188-43dc-b012-70f63d6224e2", "created": "2026-01-27T05:13:01.159957Z", "modified": "2026-01-27T05:13:01.159957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b2c6dbe4b3c2a540375de69e1acc568f7d79f017fe7e3bd3b63203921aacdc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.159957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5bd8dfb-f132-4c3d-978a-1c1f7776325f", "created": "2026-01-27T05:13:01.160783Z", "modified": "2026-01-27T05:13:01.160783Z", "relationship_type": "indicates", "source_ref": "indicator--c965d2f4-5188-43dc-b012-70f63d6224e2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d37a05-8c0d-4daf-a629-ae4b18dbe777", "created": "2026-01-27T05:13:01.160964Z", "modified": "2026-01-27T05:13:01.160964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da5fe10fc93190cdf41700ff0381ee87133e87ea107403ba2f1e387e9ffb38a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.160964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b74637f-e0ff-4602-a916-33aad363ba31", "created": "2026-01-27T05:13:01.1618Z", "modified": "2026-01-27T05:13:01.1618Z", "relationship_type": "indicates", "source_ref": "indicator--15d37a05-8c0d-4daf-a629-ae4b18dbe777", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d306605a-182a-4cfd-9d6b-eb42fd914d9e", "created": "2026-01-27T05:13:01.16199Z", "modified": "2026-01-27T05:13:01.16199Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='59080f2b1ab53e72887ec930ba7bf40ba2b47fbb0b35ef14a620ca1b3380796f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.16199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ccdb50a-db5c-47a2-bb9f-8de712a7adbb", "created": "2026-01-27T05:13:01.162829Z", "modified": "2026-01-27T05:13:01.162829Z", "relationship_type": "indicates", "source_ref": "indicator--d306605a-182a-4cfd-9d6b-eb42fd914d9e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27217ee-88ea-4390-9927-163fd9a6a816", "created": "2026-01-27T05:13:01.163006Z", "modified": "2026-01-27T05:13:01.163006Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92f73fc7049cfa73b7a5886432a05cf506d9ff1f86435cd4f5ec17045a34fbfc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.163006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--570bbd33-c540-47a5-a5c6-2cf3305747a2", "created": "2026-01-27T05:13:01.163852Z", "modified": "2026-01-27T05:13:01.163852Z", "relationship_type": "indicates", "source_ref": "indicator--f27217ee-88ea-4390-9927-163fd9a6a816", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eab554d-2763-4755-a995-465d2977a960", "created": "2026-01-27T05:13:01.164028Z", "modified": "2026-01-27T05:13:01.164028Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6320f7ff139cdd2636e2a34810c83a95b2fe86173c0650c92e93fd0a5a5956f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.164028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b97b8872-16ea-4dc1-83f2-c4f62d2b315c", "created": "2026-01-27T05:13:01.164868Z", "modified": "2026-01-27T05:13:01.164868Z", "relationship_type": "indicates", "source_ref": "indicator--5eab554d-2763-4755-a995-465d2977a960", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4543b8b7-9811-4710-bcf1-626d2eee6769", "created": "2026-01-27T05:13:01.165044Z", "modified": "2026-01-27T05:13:01.165044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5efd520420774463339efb751fda0d0b201fe281d96dbb5dc07b994796637f68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.165044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c3b9676-ad80-4e3c-a969-1f95d5cce5a6", "created": "2026-01-27T05:13:01.166006Z", "modified": "2026-01-27T05:13:01.166006Z", "relationship_type": "indicates", "source_ref": "indicator--4543b8b7-9811-4710-bcf1-626d2eee6769", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4218931b-97c6-4bd0-a3be-96ec0d2c1187", "created": "2026-01-27T05:13:01.16618Z", "modified": "2026-01-27T05:13:01.16618Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fa167c6c1bc1f114960245b21c64358418790c6ecf74433e04163a10e900048']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.16618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--453e3d18-f23a-4221-9faa-a9b25f706432", "created": "2026-01-27T05:13:01.167038Z", "modified": "2026-01-27T05:13:01.167038Z", "relationship_type": "indicates", "source_ref": "indicator--4218931b-97c6-4bd0-a3be-96ec0d2c1187", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b53bb9-9f9d-48bb-a824-611dcd34dfb3", "created": "2026-01-27T05:13:01.167218Z", "modified": "2026-01-27T05:13:01.167218Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b253d01965e277f92f33504e05f41cde373fe0ee4030fa5dd4950e6dbca750e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.167218Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80886621-12fd-4379-9caa-582468ddb6b9", "created": "2026-01-27T05:13:01.168055Z", "modified": "2026-01-27T05:13:01.168055Z", "relationship_type": "indicates", "source_ref": "indicator--b3b53bb9-9f9d-48bb-a824-611dcd34dfb3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30912341-b16b-4660-992d-4f4af5f99dd3", "created": "2026-01-27T05:13:01.16823Z", "modified": "2026-01-27T05:13:01.16823Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29fa73875010aba30ec9b6ffb4ed58a373d907b2127771fd331ad28b5091a5ec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.16823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5958e9cf-e852-44ab-bf8f-f5b513d3ec98", "created": "2026-01-27T05:13:01.16907Z", "modified": "2026-01-27T05:13:01.16907Z", "relationship_type": "indicates", "source_ref": "indicator--30912341-b16b-4660-992d-4f4af5f99dd3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d1486b-00a3-4d59-a452-3b1ed8c3e2d5", "created": "2026-01-27T05:13:01.169244Z", "modified": "2026-01-27T05:13:01.169244Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dce19c019d3efc7de8179477a31456e2a1f3ec9af184e8c8cd85c0c4195b9aea']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.169244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c949da5-9b10-4d39-8f7e-1a41dc38560f", "created": "2026-01-27T05:13:01.170077Z", "modified": "2026-01-27T05:13:01.170077Z", "relationship_type": "indicates", "source_ref": "indicator--f9d1486b-00a3-4d59-a452-3b1ed8c3e2d5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b621efb6-5b10-4de9-93e8-3fa7c5a7fab0", "created": "2026-01-27T05:13:01.17025Z", "modified": "2026-01-27T05:13:01.17025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='26599627b6f25c78efb1e58601487b4feb0bb601169d25eb49cc329fc1cd8d20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.17025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--130c5ecf-4b66-4f69-9787-8a6675ce68c6", "created": "2026-01-27T05:13:01.171087Z", "modified": "2026-01-27T05:13:01.171087Z", "relationship_type": "indicates", "source_ref": "indicator--b621efb6-5b10-4de9-93e8-3fa7c5a7fab0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5025cfd-8f1b-44e1-8139-ba338fcc7735", "created": "2026-01-27T05:13:01.171271Z", "modified": "2026-01-27T05:13:01.171271Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9c9f66270fd165352394ce6182f9e4215f90477bca128e8c600025545ebf6e67']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.171271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfc3c060-f4e8-4e14-9c6e-bdc3b61d0aa4", "created": "2026-01-27T05:13:01.172111Z", "modified": "2026-01-27T05:13:01.172111Z", "relationship_type": "indicates", "source_ref": "indicator--f5025cfd-8f1b-44e1-8139-ba338fcc7735", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3328607b-728f-4f17-a6f6-56f730a4fc2d", "created": "2026-01-27T05:13:01.172289Z", "modified": "2026-01-27T05:13:01.172289Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f9476ca78ca10e5c221594599366e68c6c83a56f5755e4c5b4d61548f0ddda2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.172289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--091e6537-b67c-4462-af94-46ac32f761f6", "created": "2026-01-27T05:13:01.173114Z", "modified": "2026-01-27T05:13:01.173114Z", "relationship_type": "indicates", "source_ref": "indicator--3328607b-728f-4f17-a6f6-56f730a4fc2d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5d8552-a96f-419d-abe6-3a3fa682ad4e", "created": "2026-01-27T05:13:01.173293Z", "modified": "2026-01-27T05:13:01.173293Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0241d5311000dd4d6624be88c0366f37d0d1307979b583a4c4dd8f2929985860']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.173293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d834da93-3e45-4e48-8322-d208d13d422c", "created": "2026-01-27T05:13:01.174247Z", "modified": "2026-01-27T05:13:01.174247Z", "relationship_type": "indicates", "source_ref": "indicator--4b5d8552-a96f-419d-abe6-3a3fa682ad4e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3ec092-16b2-4e7d-ba95-af3331c630d7", "created": "2026-01-27T05:13:01.174422Z", "modified": "2026-01-27T05:13:01.174422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ff9cc0102e39440f9c765341236a644f490c6e6000713b1c5b522a39a9a36cd9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.174422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f53634c-e90a-4c99-9a94-820e7b2983aa", "created": "2026-01-27T05:13:01.175265Z", "modified": "2026-01-27T05:13:01.175265Z", "relationship_type": "indicates", "source_ref": "indicator--1d3ec092-16b2-4e7d-ba95-af3331c630d7", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68804b3e-d2c2-4e60-8bee-89ca4b40709c", "created": "2026-01-27T05:13:01.175443Z", "modified": "2026-01-27T05:13:01.175443Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5e2f44d463934b3bab71e39014c79d147064be9fdf08dd229c9960553baea2a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.175443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff12c7d4-42e6-46a7-a63c-bd52b56e8751", "created": "2026-01-27T05:13:01.176282Z", "modified": "2026-01-27T05:13:01.176282Z", "relationship_type": "indicates", "source_ref": "indicator--68804b3e-d2c2-4e60-8bee-89ca4b40709c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20d4e6c-a2e2-4a30-bfac-cc41c64f1583", "created": "2026-01-27T05:13:01.176459Z", "modified": "2026-01-27T05:13:01.176459Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a949825e0374aee319c68cb1d9cd0d022e04ebcb89af6993b6af6588be3e53af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.176459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c069c21-7e42-4b0f-9225-1573bdde896e", "created": "2026-01-27T05:13:01.177289Z", "modified": "2026-01-27T05:13:01.177289Z", "relationship_type": "indicates", "source_ref": "indicator--e20d4e6c-a2e2-4a30-bfac-cc41c64f1583", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31032e5c-40d0-492f-a0ef-2e57eda190fd", "created": "2026-01-27T05:13:01.177463Z", "modified": "2026-01-27T05:13:01.177463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b227b7be8dce591e4a9508857f953b860d3a5cfd8ae84074ad364e3b8b5afe9b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.177463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99f33fad-9437-4164-809b-e776cf9742b0", "created": "2026-01-27T05:13:01.17829Z", "modified": "2026-01-27T05:13:01.17829Z", "relationship_type": "indicates", "source_ref": "indicator--31032e5c-40d0-492f-a0ef-2e57eda190fd", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d29f06c-7794-4e02-a255-e01a820f4d2d", "created": "2026-01-27T05:13:01.178463Z", "modified": "2026-01-27T05:13:01.178463Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c8734e5c75f505d9d314f3a53b440461d3cad43addfa142493b17c86b24925f6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.178463Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--998aaaf2-91ba-4933-b3e3-bbebdc5fb3ec", "created": "2026-01-27T05:13:01.1793Z", "modified": "2026-01-27T05:13:01.1793Z", "relationship_type": "indicates", "source_ref": "indicator--9d29f06c-7794-4e02-a255-e01a820f4d2d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2612fdd-334f-40aa-8315-5589df3effee", "created": "2026-01-27T05:13:01.179472Z", "modified": "2026-01-27T05:13:01.179472Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3525f4164d2af5e52c9f343e34101710d1144d9904a57324deaa204feb695b85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.179472Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b28e381-13ca-409c-908b-66f5654b42f0", "created": "2026-01-27T05:13:01.180317Z", "modified": "2026-01-27T05:13:01.180317Z", "relationship_type": "indicates", "source_ref": "indicator--d2612fdd-334f-40aa-8315-5589df3effee", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e22bd9a-c577-436c-a7a0-12d59f881cc8", "created": "2026-01-27T05:13:01.18049Z", "modified": "2026-01-27T05:13:01.18049Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33a0c64c98a0fc2dc9856c78c11b01124b75667b876ca75c62dd90c4951e7e18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.18049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f57794b9-9914-4e28-87b4-fee74022c1dd", "created": "2026-01-27T05:13:01.181337Z", "modified": "2026-01-27T05:13:01.181337Z", "relationship_type": "indicates", "source_ref": "indicator--5e22bd9a-c577-436c-a7a0-12d59f881cc8", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788beced-ca1f-48e9-8090-9879eb886851", "created": "2026-01-27T05:13:01.181507Z", "modified": "2026-01-27T05:13:01.181507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='20806c9c454dab6e6b90872ee536cfec96d2d19b31b43f4ccd8ea2ea80c82bc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.181507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed9d0ad4-6894-4ee5-9452-e1ad576d582c", "created": "2026-01-27T05:13:01.182356Z", "modified": "2026-01-27T05:13:01.182356Z", "relationship_type": "indicates", "source_ref": "indicator--788beced-ca1f-48e9-8090-9879eb886851", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20eada78-894d-48d0-b107-be53019aff9d", "created": "2026-01-27T05:13:01.182529Z", "modified": "2026-01-27T05:13:01.182529Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64872ce12800db9ad84c383f2e7df4ca75f88baa202a8bc5831a8ef80fe39e02']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.182529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aab525cf-f9c0-410a-8a3c-f3939f7fd7bb", "created": "2026-01-27T05:13:01.183488Z", "modified": "2026-01-27T05:13:01.183488Z", "relationship_type": "indicates", "source_ref": "indicator--20eada78-894d-48d0-b107-be53019aff9d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca38221c-bfa3-4ae2-a220-20cac8615cac", "created": "2026-01-27T05:13:01.183664Z", "modified": "2026-01-27T05:13:01.183664Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='452fe4c7e587b6bf93562d34215b8996be51b6e652a85a5adee5a1c781c81669']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.183664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76d5b48a-4572-42f8-8d88-a9bd5eaca7c5", "created": "2026-01-27T05:13:01.184493Z", "modified": "2026-01-27T05:13:01.184493Z", "relationship_type": "indicates", "source_ref": "indicator--ca38221c-bfa3-4ae2-a220-20cac8615cac", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666ec4b1-e5cb-439f-85c0-776bcef1565e", "created": "2026-01-27T05:13:01.184667Z", "modified": "2026-01-27T05:13:01.184667Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9cc66c222cfe99fc92cb03f5cf91b6c37e027f1cf144779ea5cc3c385a41f358']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.184667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80bb87d8-df8a-45aa-b92d-678796eceff1", "created": "2026-01-27T05:13:01.1855Z", "modified": "2026-01-27T05:13:01.1855Z", "relationship_type": "indicates", "source_ref": "indicator--666ec4b1-e5cb-439f-85c0-776bcef1565e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e30fea1-e645-4d0d-8f03-40ea0812f95f", "created": "2026-01-27T05:13:01.185675Z", "modified": "2026-01-27T05:13:01.185675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e015afbb4504d581f3442351aeb44b9df2228ea6a0b0cbe6061363c58b13825c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.185675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf5a71ab-b31c-494c-8043-fcd034bad91a", "created": "2026-01-27T05:13:01.186511Z", "modified": "2026-01-27T05:13:01.186511Z", "relationship_type": "indicates", "source_ref": "indicator--6e30fea1-e645-4d0d-8f03-40ea0812f95f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e31261-29e2-4a33-9a6e-3be3e9feffa7", "created": "2026-01-27T05:13:01.186684Z", "modified": "2026-01-27T05:13:01.186684Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4a2ab6f7a88aa83100c965560b1c445f1cd2c5ba82535242316df150a3038b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.186684Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f33ffa8-b77b-41df-b5d2-b3f293454684", "created": "2026-01-27T05:13:01.187517Z", "modified": "2026-01-27T05:13:01.187517Z", "relationship_type": "indicates", "source_ref": "indicator--25e31261-29e2-4a33-9a6e-3be3e9feffa7", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1d9bc4-b2a3-4dd5-af4d-3cc7b6468816", "created": "2026-01-27T05:13:01.187692Z", "modified": "2026-01-27T05:13:01.187692Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53b19ac8f2422e7dc96c66bbad435a0ad7f661ce173d813896d47d5616ca2c11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.187692Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b2042f8-84b7-4a3d-9af2-08500b649785", "created": "2026-01-27T05:13:01.188523Z", "modified": "2026-01-27T05:13:01.188523Z", "relationship_type": "indicates", "source_ref": "indicator--eb1d9bc4-b2a3-4dd5-af4d-3cc7b6468816", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0eab876-481d-4ee6-a6b6-dbbbf5d2a9d6", "created": "2026-01-27T05:13:01.188702Z", "modified": "2026-01-27T05:13:01.188702Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94c18926233df8d3b525bbfa082579b2b7d9ff36c61fc71b37747231ed38c8d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.188702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df037d95-5599-445f-a407-52875a68a044", "created": "2026-01-27T05:13:01.189543Z", "modified": "2026-01-27T05:13:01.189543Z", "relationship_type": "indicates", "source_ref": "indicator--c0eab876-481d-4ee6-a6b6-dbbbf5d2a9d6", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b159b782-70a5-4be0-a046-065e24ac76c2", "created": "2026-01-27T05:13:01.189717Z", "modified": "2026-01-27T05:13:01.189717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5dae867d3ac8fd8fb8278ce81ff03334b8fb5480679d084673ca261b78bd6fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.189717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98a958b6-df7d-4463-be89-8e0fed6b2ee0", "created": "2026-01-27T05:13:01.190558Z", "modified": "2026-01-27T05:13:01.190558Z", "relationship_type": "indicates", "source_ref": "indicator--b159b782-70a5-4be0-a046-065e24ac76c2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31aad4b1-26b4-4297-a06b-b7ab01f76b2c", "created": "2026-01-27T05:13:01.190733Z", "modified": "2026-01-27T05:13:01.190733Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28f58ced78bf6b3c372dc4d296d691e3c2468666824af930b3ab38ee7f52ab18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.190733Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--78081421-be63-4cd7-ab35-42fa45d5a62a", "created": "2026-01-27T05:13:01.191586Z", "modified": "2026-01-27T05:13:01.191586Z", "relationship_type": "indicates", "source_ref": "indicator--31aad4b1-26b4-4297-a06b-b7ab01f76b2c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144caf7b-0536-4ced-942a-8b22efede36d", "created": "2026-01-27T05:13:01.191775Z", "modified": "2026-01-27T05:13:01.191775Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1dc5e68de9bc3bb7d44e3b377784eb53ec831bcc29be58f4adf5458ec29b264']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.191775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34140454-6ebc-43a7-8341-e757c095d463", "created": "2026-01-27T05:13:01.193005Z", "modified": "2026-01-27T05:13:01.193005Z", "relationship_type": "indicates", "source_ref": "indicator--144caf7b-0536-4ced-942a-8b22efede36d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a081af4-b7eb-4f55-a8eb-5c5b27243950", "created": "2026-01-27T05:13:01.193183Z", "modified": "2026-01-27T05:13:01.193183Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='476b3fc96057c6c236fedf64cfc456acd5d435c226eecc02433746bea458fa55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.193183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--393c19bb-3e88-443b-8a93-b543b3692470", "created": "2026-01-27T05:13:01.194017Z", "modified": "2026-01-27T05:13:01.194017Z", "relationship_type": "indicates", "source_ref": "indicator--6a081af4-b7eb-4f55-a8eb-5c5b27243950", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8088eca-913e-4c30-828e-0a366501176d", "created": "2026-01-27T05:13:01.194192Z", "modified": "2026-01-27T05:13:01.194192Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='15ecbcf4a1c0a4339178b393661f6a400478d2efc995a65029d620ec6d75ce8a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.194192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8c25b5c-1f40-462f-b417-5f5fa141baea", "created": "2026-01-27T05:13:01.19503Z", "modified": "2026-01-27T05:13:01.19503Z", "relationship_type": "indicates", "source_ref": "indicator--e8088eca-913e-4c30-828e-0a366501176d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ad4005-26ca-48a8-b6de-11a6c08111cf", "created": "2026-01-27T05:13:01.195204Z", "modified": "2026-01-27T05:13:01.195204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='789ce95dc74ab19b309dc0687a8b9883ed968370ab53d3394346690c151859e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.195204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3bcd5c0f-70e1-419a-b5f1-edd8f30ab05d", "created": "2026-01-27T05:13:01.196041Z", "modified": "2026-01-27T05:13:01.196041Z", "relationship_type": "indicates", "source_ref": "indicator--69ad4005-26ca-48a8-b6de-11a6c08111cf", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e419cc-3b56-487e-a3b7-9879ac726657", "created": "2026-01-27T05:13:01.196227Z", "modified": "2026-01-27T05:13:01.196227Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='22b70c63a7d874748a2b26c688e5f469bdcbba598d256fd53e8a7740c9d86836']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.196227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fcf558c-be29-4976-841e-74a29cb086fa", "created": "2026-01-27T05:13:01.19707Z", "modified": "2026-01-27T05:13:01.19707Z", "relationship_type": "indicates", "source_ref": "indicator--a5e419cc-3b56-487e-a3b7-9879ac726657", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9c948-146d-480e-a1b4-d7f4a2baa094", "created": "2026-01-27T05:13:01.197246Z", "modified": "2026-01-27T05:13:01.197246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c537e696a559c645ad3d195603f8bcd4d98862537a60f5884134ff4113c20139']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.197246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80ae27db-0d2c-4ece-8b3c-e828cb78efb2", "created": "2026-01-27T05:13:01.198092Z", "modified": "2026-01-27T05:13:01.198092Z", "relationship_type": "indicates", "source_ref": "indicator--6ad9c948-146d-480e-a1b4-d7f4a2baa094", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e68af7-1ee1-406d-b907-ce4ae6878832", "created": "2026-01-27T05:13:01.198269Z", "modified": "2026-01-27T05:13:01.198269Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8704cbafdf1bb0dda892f66e69ed22b5183dfbe309c361c6915758404004d35e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.198269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d5c5034-e367-4281-a887-608351a008ca", "created": "2026-01-27T05:13:01.199107Z", "modified": "2026-01-27T05:13:01.199107Z", "relationship_type": "indicates", "source_ref": "indicator--c7e68af7-1ee1-406d-b907-ce4ae6878832", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629ce58b-b05b-4f5b-a5ea-6788f694c865", "created": "2026-01-27T05:13:01.199293Z", "modified": "2026-01-27T05:13:01.199293Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40324bee3275ed7517abc1445dc96932bf7ac31483fead7911a2bce17b9254bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.199293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--136eb369-2ce4-4f3b-9e24-0519cb4d3583", "created": "2026-01-27T05:13:01.200131Z", "modified": "2026-01-27T05:13:01.200131Z", "relationship_type": "indicates", "source_ref": "indicator--629ce58b-b05b-4f5b-a5ea-6788f694c865", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a554533a-a4ad-4183-b4e1-ed4bef2f6f1d", "created": "2026-01-27T05:13:01.200307Z", "modified": "2026-01-27T05:13:01.200307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f758377416120831cd1c2be67441f89ea9f54a6335d43e12b64201b637b81d5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.200307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92a00e00-441a-4427-9bd2-b0d92baf8e9b", "created": "2026-01-27T05:13:01.20114Z", "modified": "2026-01-27T05:13:01.20114Z", "relationship_type": "indicates", "source_ref": "indicator--a554533a-a4ad-4183-b4e1-ed4bef2f6f1d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a786578-9360-47f8-83e5-0e423fc5b22d", "created": "2026-01-27T05:13:01.201315Z", "modified": "2026-01-27T05:13:01.201315Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fadbb63bfcc36772da2ed4aceeae7936b34421982d10c19c5e13464a19c8834c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.201315Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--934af201-b518-4125-b509-cc15926b9e8d", "created": "2026-01-27T05:13:01.202277Z", "modified": "2026-01-27T05:13:01.202277Z", "relationship_type": "indicates", "source_ref": "indicator--1a786578-9360-47f8-83e5-0e423fc5b22d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593812a2-01fb-4a4a-83c2-2e155d5640f0", "created": "2026-01-27T05:13:01.202457Z", "modified": "2026-01-27T05:13:01.202457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bc550b4ff4dedb3f3a408da36a4343da2f2ba33baec1e33ab495daf227007a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.202457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58dc529c-a06c-40eb-906a-96a0f779b793", "created": "2026-01-27T05:13:01.203291Z", "modified": "2026-01-27T05:13:01.203291Z", "relationship_type": "indicates", "source_ref": "indicator--593812a2-01fb-4a4a-83c2-2e155d5640f0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc951ec-9b31-4b59-ab71-6eecb2372848", "created": "2026-01-27T05:13:01.203471Z", "modified": "2026-01-27T05:13:01.203471Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09889746e01e3e3e59e7f693bb1c8ae525c101cb2e8b198f6705078cdbca3d5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.203471Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a273915-76c4-43df-90e0-d6a0233a807d", "created": "2026-01-27T05:13:01.204302Z", "modified": "2026-01-27T05:13:01.204302Z", "relationship_type": "indicates", "source_ref": "indicator--6bc951ec-9b31-4b59-ab71-6eecb2372848", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07a1fee-b760-4cab-8684-a03befb62396", "created": "2026-01-27T05:13:01.20448Z", "modified": "2026-01-27T05:13:01.20448Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4bb6849e044abe72d342360fdded96b70c694c74b5e19de15c0988f8891c264']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.20448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3bc5fef-5afe-4125-aa61-4abe4c8ee61d", "created": "2026-01-27T05:13:01.205315Z", "modified": "2026-01-27T05:13:01.205315Z", "relationship_type": "indicates", "source_ref": "indicator--d07a1fee-b760-4cab-8684-a03befb62396", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567fabf5-7134-42b1-ae63-e09b88aae6c2", "created": "2026-01-27T05:13:01.205491Z", "modified": "2026-01-27T05:13:01.205491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b7d8176b69663c747dab0cd64404e9071a623e8c4637d8f8222074854926dd0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.205491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b73a5bde-c05f-484a-873d-53a1c59d1937", "created": "2026-01-27T05:13:01.206323Z", "modified": "2026-01-27T05:13:01.206323Z", "relationship_type": "indicates", "source_ref": "indicator--567fabf5-7134-42b1-ae63-e09b88aae6c2", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da99640-dab3-4869-8a4c-10a9559eae80", "created": "2026-01-27T05:13:01.206499Z", "modified": "2026-01-27T05:13:01.206499Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3367e16d1dc62d7ffd71bbe32670d8dca3915db4a71a3f592fe66528e1123a46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.206499Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a12cfae-3ec2-4b42-bd49-50c528f327c1", "created": "2026-01-27T05:13:01.207343Z", "modified": "2026-01-27T05:13:01.207343Z", "relationship_type": "indicates", "source_ref": "indicator--8da99640-dab3-4869-8a4c-10a9559eae80", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9fa313-c4d1-42a7-bff1-c153c6dc2ec0", "created": "2026-01-27T05:13:01.207518Z", "modified": "2026-01-27T05:13:01.207518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce951fd243b73b11bec0fc11f674670ce860ef813af7a5ca1460cd3a8a0be3dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.207518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31c04dc6-1876-47e8-9f14-634243cef504", "created": "2026-01-27T05:13:01.208347Z", "modified": "2026-01-27T05:13:01.208347Z", "relationship_type": "indicates", "source_ref": "indicator--8a9fa313-c4d1-42a7-bff1-c153c6dc2ec0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaab3ca1-e7a2-42c2-9e9f-70c18c08a4fa", "created": "2026-01-27T05:13:01.208521Z", "modified": "2026-01-27T05:13:01.208521Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9148a33ed6e1da348108ba39b6bbb21c38a8152fe51fa4a2ce352956142c5f4b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.208521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0bb8b31-76e7-45b6-8294-8f2b38d7511c", "created": "2026-01-27T05:13:01.20935Z", "modified": "2026-01-27T05:13:01.20935Z", "relationship_type": "indicates", "source_ref": "indicator--eaab3ca1-e7a2-42c2-9e9f-70c18c08a4fa", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7961e05-1ba5-423b-be27-48da3a80e142", "created": "2026-01-27T05:13:01.209523Z", "modified": "2026-01-27T05:13:01.209523Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8c41bc25b5881b407e800f0c737e87656f92d53f50b7505a9013a45c15893ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.209523Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fff8e0ce-19c3-4e13-a4f8-996e15df8252", "created": "2026-01-27T05:13:01.210355Z", "modified": "2026-01-27T05:13:01.210355Z", "relationship_type": "indicates", "source_ref": "indicator--f7961e05-1ba5-423b-be27-48da3a80e142", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83cc06ff-ce67-4ae3-ae71-4c2a4704cd46", "created": "2026-01-27T05:13:01.210537Z", "modified": "2026-01-27T05:13:01.210537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='713b526526b8ffce849ca52334dbf212831f257216363bb2b77bd74497b7b85c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.210537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f618907-47a9-4f64-be8b-d93aecf63997", "created": "2026-01-27T05:13:01.2115Z", "modified": "2026-01-27T05:13:01.2115Z", "relationship_type": "indicates", "source_ref": "indicator--83cc06ff-ce67-4ae3-ae71-4c2a4704cd46", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13f35c7-4ba7-45cc-a0bb-1c8460b1ab49", "created": "2026-01-27T05:13:01.21168Z", "modified": "2026-01-27T05:13:01.21168Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f687492609ffb3d8311814fe532d00810897d7a8ad6069d7e267976210cd4862']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.21168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7880620e-1971-4683-8e22-caffa4fe116c", "created": "2026-01-27T05:13:01.212531Z", "modified": "2026-01-27T05:13:01.212531Z", "relationship_type": "indicates", "source_ref": "indicator--a13f35c7-4ba7-45cc-a0bb-1c8460b1ab49", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7391b020-be2b-4e67-b501-d39273be79b0", "created": "2026-01-27T05:13:01.212713Z", "modified": "2026-01-27T05:13:01.212713Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5bb14591c3f60e5ac11fd1587b9ef7c27622efe487d5d3a4791fdb6ad50c48a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.212713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7d96869-bc47-4951-b574-1b82dc7c10f0", "created": "2026-01-27T05:13:01.21355Z", "modified": "2026-01-27T05:13:01.21355Z", "relationship_type": "indicates", "source_ref": "indicator--7391b020-be2b-4e67-b501-d39273be79b0", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277b39fd-ce28-4f2d-a485-9586daa9b62d", "created": "2026-01-27T05:13:01.213726Z", "modified": "2026-01-27T05:13:01.213726Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='28f53ee1836d0197906ba0ab1834a5b45cc2611c1f0d1944ee225a9cc36873fd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.213726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f23c3b2-eb6a-455b-bce3-0ed68dd54bc5", "created": "2026-01-27T05:13:01.214588Z", "modified": "2026-01-27T05:13:01.214588Z", "relationship_type": "indicates", "source_ref": "indicator--277b39fd-ce28-4f2d-a485-9586daa9b62d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c45d29-f8ba-47ef-9425-faddd6371a90", "created": "2026-01-27T05:13:01.214779Z", "modified": "2026-01-27T05:13:01.214779Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1446cbce4ac3eb004bf347d524302b2672a5981a9365f2536e6376f5b5b41b26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.214779Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cf3e911-6453-4bf0-9034-0a7777d49764", "created": "2026-01-27T05:13:01.2156Z", "modified": "2026-01-27T05:13:01.2156Z", "relationship_type": "indicates", "source_ref": "indicator--38c45d29-f8ba-47ef-9425-faddd6371a90", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ec327e-4a6e-4c2b-94eb-76c65ea3773f", "created": "2026-01-27T05:13:01.21579Z", "modified": "2026-01-27T05:13:01.21579Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='881251350b631b924c8c165b191117eb7e3bcb679168419dca93b96fc7d085e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.21579Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3cc8623-4c93-4e01-b8db-4d08fddce0f1", "created": "2026-01-27T05:13:01.216619Z", "modified": "2026-01-27T05:13:01.216619Z", "relationship_type": "indicates", "source_ref": "indicator--f6ec327e-4a6e-4c2b-94eb-76c65ea3773f", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d8eac4-1d93-41fd-90af-1fc6ecb87e94", "created": "2026-01-27T05:13:01.216808Z", "modified": "2026-01-27T05:13:01.216808Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ed5c05fecb8157c2a3fea81b5e77cedf4ff8be303adc15beb8baae71dad4b8f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.216808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7ae94b7-df0f-42ff-9ecd-b9918892f8d5", "created": "2026-01-27T05:13:01.21763Z", "modified": "2026-01-27T05:13:01.21763Z", "relationship_type": "indicates", "source_ref": "indicator--a3d8eac4-1d93-41fd-90af-1fc6ecb87e94", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee43522-f509-432d-80ec-b9115c49c6bf", "created": "2026-01-27T05:13:01.217823Z", "modified": "2026-01-27T05:13:01.217823Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02c28a5b6fda3d54f213f7115b51f29e61d059046dcf6caedd418b5e83cc070c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.217823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e95485d-6f8f-456a-9297-16c4a87265d3", "created": "2026-01-27T05:13:01.218648Z", "modified": "2026-01-27T05:13:01.218648Z", "relationship_type": "indicates", "source_ref": "indicator--bee43522-f509-432d-80ec-b9115c49c6bf", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae66a0-c6e1-4297-abd4-68631fd64c4d", "created": "2026-01-27T05:13:01.218839Z", "modified": "2026-01-27T05:13:01.218839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8866993065527bdd6537ae9e8f6aac7d50f55a487125cedf675e784f25aa6e86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.218839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9621df2a-e3a4-4a40-8361-96c0b0df00b5", "created": "2026-01-27T05:13:01.219802Z", "modified": "2026-01-27T05:13:01.219802Z", "relationship_type": "indicates", "source_ref": "indicator--85ae66a0-c6e1-4297-abd4-68631fd64c4d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb93114-e6a5-4cea-923a-0aef7dd121b5", "created": "2026-01-27T05:13:01.219983Z", "modified": "2026-01-27T05:13:01.219983Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.screenshotrecorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.219983Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b29128a-abed-4eea-a8e6-d2a05c309996", "created": "2026-01-27T05:13:01.220637Z", "modified": "2026-01-27T05:13:01.220637Z", "relationship_type": "indicates", "source_ref": "indicator--7fb93114-e6a5-4cea-923a-0aef7dd121b5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcd042f-cc9d-4d47-8380-133c1d75dae9", "created": "2026-01-27T05:13:01.220824Z", "modified": "2026-01-27T05:13:01.220824Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.220824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--baf6fd7a-f828-49b4-b4ef-d09ae1c9fa22", "created": "2026-01-27T05:13:01.221466Z", "modified": "2026-01-27T05:13:01.221466Z", "relationship_type": "indicates", "source_ref": "indicator--fbcd042f-cc9d-4d47-8380-133c1d75dae9", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507255be-3b6d-4221-ab51-5d426023e0dc", "created": "2026-01-27T05:13:01.221659Z", "modified": "2026-01-27T05:13:01.221659Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.kgl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.221659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea09d8e0-e964-4b1b-9cb5-da31af607094", "created": "2026-01-27T05:13:01.2224Z", "modified": "2026-01-27T05:13:01.2224Z", "relationship_type": "indicates", "source_ref": "indicator--507255be-3b6d-4221-ab51-5d426023e0dc", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd4f409-2fb8-4302-a8a0-cbd418de64fc", "created": "2026-01-27T05:13:01.22258Z", "modified": "2026-01-27T05:13:01.22258Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='apk.kwoapsnde']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.22258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d03f596-7c22-452a-aaf3-65695d33b1fc", "created": "2026-01-27T05:13:01.223249Z", "modified": "2026-01-27T05:13:01.223249Z", "relationship_type": "indicates", "source_ref": "indicator--fcd4f409-2fb8-4302-a8a0-cbd418de64fc", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cb4f9e-b23b-4f1a-a389-65bc67c1bd6c", "created": "2026-01-27T05:13:01.223429Z", "modified": "2026-01-27T05:13:01.223429Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.clipboardmanager']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.223429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76f26074-84d7-472b-b836-818e5b156e39", "created": "2026-01-27T05:13:01.224104Z", "modified": "2026-01-27T05:13:01.224104Z", "relationship_type": "indicates", "source_ref": "indicator--b6cb4f9e-b23b-4f1a-a389-65bc67c1bd6c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a918355-b113-4cf0-a19b-170c4d5f8eb3", "created": "2026-01-27T05:13:01.224277Z", "modified": "2026-01-27T05:13:01.224277Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.facecapture']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.224277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f41828bb-d0c4-4529-8470-b35a72ae3967", "created": "2026-01-27T05:13:01.224937Z", "modified": "2026-01-27T05:13:01.224937Z", "relationship_type": "indicates", "source_ref": "indicator--1a918355-b113-4cf0-a19b-170c4d5f8eb3", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453337e6-65c8-4609-b945-1a7431e8adc5", "created": "2026-01-27T05:13:01.225115Z", "modified": "2026-01-27T05:13:01.225115Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.gpstracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.225115Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c20e2b43-44cf-4d0c-8509-8c9d88b7eb56", "created": "2026-01-27T05:13:01.225768Z", "modified": "2026-01-27T05:13:01.225768Z", "relationship_type": "indicates", "source_ref": "indicator--453337e6-65c8-4609-b945-1a7431e8adc5", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662f6c4c-4e2a-4b5b-90d2-d1b1a206f990", "created": "2026-01-27T05:13:01.225953Z", "modified": "2026-01-27T05:13:01.225953Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.keylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.225953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18333ca8-1d96-4a1a-933d-6ce06ccf1b47", "created": "2026-01-27T05:13:01.226604Z", "modified": "2026-01-27T05:13:01.226604Z", "relationship_type": "indicates", "source_ref": "indicator--662f6c4c-4e2a-4b5b-90d2-d1b1a206f990", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b292c32-249b-4da5-8747-a2efe78f1251", "created": "2026-01-27T05:13:01.226793Z", "modified": "2026-01-27T05:13:01.226793Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.keylogger2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.226793Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa87f8f5-1233-462f-9abb-99cf50892eae", "created": "2026-01-27T05:13:01.227553Z", "modified": "2026-01-27T05:13:01.227553Z", "relationship_type": "indicates", "source_ref": "indicator--8b292c32-249b-4da5-8747-a2efe78f1251", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20387de-f6a6-41c6-aef4-56e7fa9e262b", "created": "2026-01-27T05:13:01.227738Z", "modified": "2026-01-27T05:13:01.227738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.klogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.227738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5cfb100-f362-41f2-8178-d97f8b8c9b60", "created": "2026-01-27T05:13:01.228401Z", "modified": "2026-01-27T05:13:01.228401Z", "relationship_type": "indicates", "source_ref": "indicator--a20387de-f6a6-41c6-aef4-56e7fa9e262b", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96384b6-d9c7-45ee-ab15-3ac534d562d8", "created": "2026-01-27T05:13:01.228573Z", "modified": "2026-01-27T05:13:01.228573Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.screenrecorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.228573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75abd326-536e-407e-8351-81066895ccbe", "created": "2026-01-27T05:13:01.229238Z", "modified": "2026-01-27T05:13:01.229238Z", "relationship_type": "indicates", "source_ref": "indicator--b96384b6-d9c7-45ee-ab15-3ac534d562d8", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30338314-6b6a-4ba7-aa9f-f19d9db57ec4", "created": "2026-01-27T05:13:01.229413Z", "modified": "2026-01-27T05:13:01.229413Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.as.urllogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.229413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89a261ad-e702-462b-9e35-1a4cc5306771", "created": "2026-01-27T05:13:01.230071Z", "modified": "2026-01-27T05:13:01.230071Z", "relationship_type": "indicates", "source_ref": "indicator--30338314-6b6a-4ba7-aa9f-f19d9db57ec4", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060dad8c-9c2c-4989-89c3-918cb5325e7d", "created": "2026-01-27T05:13:01.230244Z", "modified": "2026-01-27T05:13:01.230244Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9F6F25AB4EB39CA27BBB22465E6FDC1FC3791C85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.230244Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--431161e8-2ed9-42fe-803f-70ca76cdb192", "created": "2026-01-27T05:13:01.231058Z", "modified": "2026-01-27T05:13:01.231058Z", "relationship_type": "indicates", "source_ref": "indicator--060dad8c-9c2c-4989-89c3-918cb5325e7d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbd7eb4-c2b3-44a5-b140-95960927557e", "created": "2026-01-27T05:13:01.231241Z", "modified": "2026-01-27T05:13:01.231241Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AA0458B6C035E767E61DB7456CBCA89CC4D42090']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.231241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--027f2c74-853d-468f-927d-2ad021a3806d", "created": "2026-01-27T05:13:01.232036Z", "modified": "2026-01-27T05:13:01.232036Z", "relationship_type": "indicates", "source_ref": "indicator--4fbd7eb4-c2b3-44a5-b140-95960927557e", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaa173c-b603-4a72-8ddd-68407bb16318", "created": "2026-01-27T05:13:01.232215Z", "modified": "2026-01-27T05:13:01.232215Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='56BD8EB8A20904E4766D99F6D38D87466C44B114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.232215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d4943fd-5e18-4952-b047-229338766b58", "created": "2026-01-27T05:13:01.233004Z", "modified": "2026-01-27T05:13:01.233004Z", "relationship_type": "indicates", "source_ref": "indicator--afaa173c-b603-4a72-8ddd-68407bb16318", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be10d66-6682-4e39-9ea3-823521a16717", "created": "2026-01-27T05:13:01.233178Z", "modified": "2026-01-27T05:13:01.233178Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='839FBBE6F3DF8153BB6582247DBBC2A42864A87D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.233178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--684bda19-39c2-48a9-b6f1-d75e1a978e03", "created": "2026-01-27T05:13:01.233974Z", "modified": "2026-01-27T05:13:01.233974Z", "relationship_type": "indicates", "source_ref": "indicator--7be10d66-6682-4e39-9ea3-823521a16717", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd82acb-dc82-4a98-930c-6e381123727c", "created": "2026-01-27T05:13:01.234149Z", "modified": "2026-01-27T05:13:01.234149Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7BB744C68FD6EB4C49298E7506BED53DC4773FF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.234149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--755cfa98-dd17-4317-9574-1b68b79db785", "created": "2026-01-27T05:13:01.234931Z", "modified": "2026-01-27T05:13:01.234931Z", "relationship_type": "indicates", "source_ref": "indicator--ebd82acb-dc82-4a98-930c-6e381123727c", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9c9e2c-7cd3-40f6-a9f3-44c7cd69116d", "created": "2026-01-27T05:13:01.235108Z", "modified": "2026-01-27T05:13:01.235108Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C863D800B89648724CD483911FBF756F36497CC9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.235108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1a029a32-3f0b-48d5-a671-21296a810d8f", "created": "2026-01-27T05:13:01.236019Z", "modified": "2026-01-27T05:13:01.236019Z", "relationship_type": "indicates", "source_ref": "indicator--ad9c9e2c-7cd3-40f6-a9f3-44c7cd69116d", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010615cc-c81a-4b31-8877-71821fc6df89", "created": "2026-01-27T05:13:01.236196Z", "modified": "2026-01-27T05:13:01.236196Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F57CACB890BE22907709DDE69ED3887F6943734E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.236196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--76db2c61-772a-4c9e-bd93-62279a5e39e9", "created": "2026-01-27T05:13:01.236975Z", "modified": "2026-01-27T05:13:01.236975Z", "relationship_type": "indicates", "source_ref": "indicator--010615cc-c81a-4b31-8877-71821fc6df89", "target_ref": "malware--d877df6f-a1e6-436f-9494-2b290fde852a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a", "created": "2026-01-27T05:13:01.237154Z", "modified": "2026-01-27T05:13:01.237154Z", "name": "AndroidPolice", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20555301-83df-4843-a0db-61a5bfff45b6", "created": "2026-01-27T05:13:01.237329Z", "modified": "2026-01-27T05:13:01.237329Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.237329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f60c1cb-ea04-4b80-bdf3-38cf4a2eee51", "created": "2026-01-27T05:13:01.238029Z", "modified": "2026-01-27T05:13:01.238029Z", "relationship_type": "indicates", "source_ref": "indicator--20555301-83df-4843-a0db-61a5bfff45b6", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acd34e3-b61f-4b75-9269-d258b62fff56", "created": "2026-01-27T05:13:01.238203Z", "modified": "2026-01-27T05:13:01.238203Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.238203Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5588b850-5ba1-4982-a16f-e05088d8b7d2", "created": "2026-01-27T05:13:01.23892Z", "modified": "2026-01-27T05:13:01.23892Z", "relationship_type": "indicates", "source_ref": "indicator--8acd34e3-b61f-4b75-9269-d258b62fff56", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f46562-7da7-4084-a44a-faab9bb541e1", "created": "2026-01-27T05:13:01.239097Z", "modified": "2026-01-27T05:13:01.239097Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='andmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.239097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67337079-c8d7-4bbf-9626-8e52104b830b", "created": "2026-01-27T05:13:01.239767Z", "modified": "2026-01-27T05:13:01.239767Z", "relationship_type": "indicates", "source_ref": "indicator--60f46562-7da7-4084-a44a-faab9bb541e1", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e659bb9-dee2-4e62-b622-012d665b2513", "created": "2026-01-27T05:13:01.239941Z", "modified": "2026-01-27T05:13:01.239941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-apk.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.239941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f2e18a4-1130-4873-940e-eb9e6c543e4a", "created": "2026-01-27T05:13:01.24064Z", "modified": "2026-01-27T05:13:01.24064Z", "relationship_type": "indicates", "source_ref": "indicator--7e659bb9-dee2-4e62-b622-012d665b2513", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95126960-cc71-42dc-9e48-6e76503a2b8b", "created": "2026-01-27T05:13:01.24083Z", "modified": "2026-01-27T05:13:01.24083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.24083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eff40f26-6a90-4e93-bd22-9ade585320c6", "created": "2026-01-27T05:13:01.241523Z", "modified": "2026-01-27T05:13:01.241523Z", "relationship_type": "indicates", "source_ref": "indicator--95126960-cc71-42dc-9e48-6e76503a2b8b", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a3364f-0d55-4339-afbc-eb0a326fb330", "created": "2026-01-27T05:13:01.241696Z", "modified": "2026-01-27T05:13:01.241696Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.241696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--398189c1-0d6c-400e-bd5c-126001cc8904", "created": "2026-01-27T05:13:01.242398Z", "modified": "2026-01-27T05:13:01.242398Z", "relationship_type": "indicates", "source_ref": "indicator--78a3364f-0d55-4339-afbc-eb0a326fb330", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef14a4fe-ea3f-4305-8974-da3c137af824", "created": "2026-01-27T05:13:01.242568Z", "modified": "2026-01-27T05:13:01.242568Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.242568Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d43dda83-198e-4ea3-a13e-fa5c7df4933e", "created": "2026-01-27T05:13:01.243254Z", "modified": "2026-01-27T05:13:01.243254Z", "relationship_type": "indicates", "source_ref": "indicator--ef14a4fe-ea3f-4305-8974-da3c137af824", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a95e041-fc31-4595-9340-440bb2d75fbf", "created": "2026-01-27T05:13:01.243433Z", "modified": "2026-01-27T05:13:01.243433Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.243433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44636f9c-82ab-4de3-8d00-aaa5d0aba363", "created": "2026-01-27T05:13:01.244253Z", "modified": "2026-01-27T05:13:01.244253Z", "relationship_type": "indicates", "source_ref": "indicator--7a95e041-fc31-4595-9340-440bb2d75fbf", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1d823a-de6e-45e3-aaa2-e09e1c646f2a", "created": "2026-01-27T05:13:01.24443Z", "modified": "2026-01-27T05:13:01.24443Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.24443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44e969ec-f580-4004-babd-a699831f3de3", "created": "2026-01-27T05:13:01.245104Z", "modified": "2026-01-27T05:13:01.245104Z", "relationship_type": "indicates", "source_ref": "indicator--0a1d823a-de6e-45e3-aaa2-e09e1c646f2a", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52923e03-1594-4a01-9c21-35c96b95b726", "created": "2026-01-27T05:13:01.245279Z", "modified": "2026-01-27T05:13:01.245279Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.245279Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1d4164e-29a9-46e4-abb0-aaa8faded224", "created": "2026-01-27T05:13:01.245944Z", "modified": "2026-01-27T05:13:01.245944Z", "relationship_type": "indicates", "source_ref": "indicator--52923e03-1594-4a01-9c21-35c96b95b726", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7089b05-445b-4758-bfb8-271ea9da7137", "created": "2026-01-27T05:13:01.246119Z", "modified": "2026-01-27T05:13:01.246119Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.246119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f3219dc-9d70-48b7-ac45-0aa0662bfbf9", "created": "2026-01-27T05:13:01.246783Z", "modified": "2026-01-27T05:13:01.246783Z", "relationship_type": "indicates", "source_ref": "indicator--e7089b05-445b-4758-bfb8-271ea9da7137", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab13ca6b-6503-474c-a540-2f73cf3138b5", "created": "2026-01-27T05:13:01.246963Z", "modified": "2026-01-27T05:13:01.246963Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.246963Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24c9e788-3a53-4de4-bc3b-29b2d7503cb8", "created": "2026-01-27T05:13:01.247644Z", "modified": "2026-01-27T05:13:01.247644Z", "relationship_type": "indicates", "source_ref": "indicator--ab13ca6b-6503-474c-a540-2f73cf3138b5", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c67e4492-f369-4017-a127-8ac519690c25", "created": "2026-01-27T05:13:01.247844Z", "modified": "2026-01-27T05:13:01.247844Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='droimon20.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.247844Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fed7147c-d05a-472d-b4dd-855714525da3", "created": "2026-01-27T05:13:01.248503Z", "modified": "2026-01-27T05:13:01.248503Z", "relationship_type": "indicates", "source_ref": "indicator--c67e4492-f369-4017-a127-8ac519690c25", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667d94e4-f1fd-40f0-8db2-a3a540035ab1", "created": "2026-01-27T05:13:01.248677Z", "modified": "2026-01-27T05:13:01.248677Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitor-android.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.248677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9464f09d-d88e-4dc0-9961-94dcfb56f8ed", "created": "2026-01-27T05:13:01.249387Z", "modified": "2026-01-27T05:13:01.249387Z", "relationship_type": "indicates", "source_ref": "indicator--667d94e4-f1fd-40f0-8db2-a3a540035ab1", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98ff452-0171-47a0-aea5-51e77e14f94d", "created": "2026-01-27T05:13:01.249559Z", "modified": "2026-01-27T05:13:01.249559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.249559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa69379c-232b-4370-ae67-28192ff22552", "created": "2026-01-27T05:13:01.250283Z", "modified": "2026-01-27T05:13:01.250283Z", "relationship_type": "indicates", "source_ref": "indicator--c98ff452-0171-47a0-aea5-51e77e14f94d", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e486491f-c031-42a6-ab58-6cb764a8f4c5", "created": "2026-01-27T05:13:01.250457Z", "modified": "2026-01-27T05:13:01.250457Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.250457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb383065-0fda-4937-b2fc-2947043353ec", "created": "2026-01-27T05:13:01.251132Z", "modified": "2026-01-27T05:13:01.251132Z", "relationship_type": "indicates", "source_ref": "indicator--e486491f-c031-42a6-ab58-6cb764a8f4c5", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19551c2-0d1f-4d14-b5ba-7db335c8f4a0", "created": "2026-01-27T05:13:01.251313Z", "modified": "2026-01-27T05:13:01.251313Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.251313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11766c63-2dc5-44d3-a98e-76184e02b04e", "created": "2026-01-27T05:13:01.252131Z", "modified": "2026-01-27T05:13:01.252131Z", "relationship_type": "indicates", "source_ref": "indicator--d19551c2-0d1f-4d14-b5ba-7db335c8f4a0", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733f339f-a964-4c4d-af8c-95c462d6b7d2", "created": "2026-01-27T05:13:01.252309Z", "modified": "2026-01-27T05:13:01.252309Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.252309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c53472d-da64-4cc2-ace7-127666cd109b", "created": "2026-01-27T05:13:01.253001Z", "modified": "2026-01-27T05:13:01.253001Z", "relationship_type": "indicates", "source_ref": "indicator--733f339f-a964-4c4d-af8c-95c462d6b7d2", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77a3f49-dde8-4e34-8409-78b2ce04223b", "created": "2026-01-27T05:13:01.253176Z", "modified": "2026-01-27T05:13:01.253176Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.253176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a52eddf-6225-42ed-b453-7b424424f816", "created": "2026-01-27T05:13:01.253869Z", "modified": "2026-01-27T05:13:01.253869Z", "relationship_type": "indicates", "source_ref": "indicator--b77a3f49-dde8-4e34-8409-78b2ce04223b", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce20d79-3eeb-41db-b9fe-58e9ea94d77b", "created": "2026-01-27T05:13:01.254045Z", "modified": "2026-01-27T05:13:01.254045Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='amon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.254045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a546272-a5c8-42c4-a616-bdc67b2be207", "created": "2026-01-27T05:13:01.25472Z", "modified": "2026-01-27T05:13:01.25472Z", "relationship_type": "indicates", "source_ref": "indicator--cce20d79-3eeb-41db-b9fe-58e9ea94d77b", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abde5178-f186-4c7e-af9a-a3f625616567", "created": "2026-01-27T05:13:01.254911Z", "modified": "2026-01-27T05:13:01.254911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='andmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.254911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01387218-4398-459b-8a18-d8ca32442749", "created": "2026-01-27T05:13:01.255571Z", "modified": "2026-01-27T05:13:01.255571Z", "relationship_type": "indicates", "source_ref": "indicator--abde5178-f186-4c7e-af9a-a3f625616567", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ce9d42-840d-4756-9670-af519c096804", "created": "2026-01-27T05:13:01.255756Z", "modified": "2026-01-27T05:13:01.255756Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-apk.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.255756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c557b58-fa9e-43e3-b320-d7b06b739e4e", "created": "2026-01-27T05:13:01.256462Z", "modified": "2026-01-27T05:13:01.256462Z", "relationship_type": "indicates", "source_ref": "indicator--87ce9d42-840d-4756-9670-af519c096804", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852ab36f-3533-4fd7-8e38-27e7cd9387c4", "created": "2026-01-27T05:13:01.256636Z", "modified": "2026-01-27T05:13:01.256636Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.256636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--535b5da1-af77-4dfd-a3b9-8c8900bf99e8", "created": "2026-01-27T05:13:01.257325Z", "modified": "2026-01-27T05:13:01.257325Z", "relationship_type": "indicates", "source_ref": "indicator--852ab36f-3533-4fd7-8e38-27e7cd9387c4", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326e5dbe-5273-44fe-b0a2-73e19f13df88", "created": "2026-01-27T05:13:01.2575Z", "modified": "2026-01-27T05:13:01.2575Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-monitor1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.2575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5744e521-e0a4-4257-9d05-1f8e2a4f729d", "created": "2026-01-27T05:13:01.258217Z", "modified": "2026-01-27T05:13:01.258217Z", "relationship_type": "indicates", "source_ref": "indicator--326e5dbe-5273-44fe-b0a2-73e19f13df88", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6beea39-69d8-4f9b-8524-fef4138b90a4", "created": "2026-01-27T05:13:01.25839Z", "modified": "2026-01-27T05:13:01.25839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.25839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38251e84-0662-4cd2-853f-887ea00fa001", "created": "2026-01-27T05:13:01.259112Z", "modified": "2026-01-27T05:13:01.259112Z", "relationship_type": "indicates", "source_ref": "indicator--f6beea39-69d8-4f9b-8524-fef4138b90a4", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743f8074-247f-460d-b640-db6c3eeafb86", "created": "2026-01-27T05:13:01.259293Z", "modified": "2026-01-27T05:13:01.259293Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-police.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.259293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d192eb4b-f8bc-4ff8-a017-bb8fabda74d7", "created": "2026-01-27T05:13:01.260094Z", "modified": "2026-01-27T05:13:01.260094Z", "relationship_type": "indicates", "source_ref": "indicator--743f8074-247f-460d-b640-db6c3eeafb86", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da05ff4f-0145-44cc-85f5-2cb441ed152d", "created": "2026-01-27T05:13:01.260277Z", "modified": "2026-01-27T05:13:01.260277Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.260277Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9727d24-5851-4785-87bf-5c7777699c81", "created": "2026-01-27T05:13:01.260972Z", "modified": "2026-01-27T05:13:01.260972Z", "relationship_type": "indicates", "source_ref": "indicator--da05ff4f-0145-44cc-85f5-2cb441ed152d", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238c56b6-fa2e-4cdd-b789-cca02c639278", "created": "2026-01-27T05:13:01.261147Z", "modified": "2026-01-27T05:13:01.261147Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.name']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.261147Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1033960-da09-4e90-b147-f4c1201a737e", "created": "2026-01-27T05:13:01.261819Z", "modified": "2026-01-27T05:13:01.261819Z", "relationship_type": "indicates", "source_ref": "indicator--238c56b6-fa2e-4cdd-b789-cca02c639278", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6553569f-974c-456b-b418-47cd80cac059", "created": "2026-01-27T05:13:01.261994Z", "modified": "2026-01-27T05:13:01.261994Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.261994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4acbd99d-52ca-4404-b031-e4f3f267bd68", "created": "2026-01-27T05:13:01.262641Z", "modified": "2026-01-27T05:13:01.262641Z", "relationship_type": "indicates", "source_ref": "indicator--6553569f-974c-456b-b418-47cd80cac059", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27772c02-8aed-4305-8db8-22ce501430cd", "created": "2026-01-27T05:13:01.262837Z", "modified": "2026-01-27T05:13:01.262837Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon.su']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.262837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5efd0c3-d4ad-46d0-a093-2c7048a634f5", "created": "2026-01-27T05:13:01.263495Z", "modified": "2026-01-27T05:13:01.263495Z", "relationship_type": "indicates", "source_ref": "indicator--27772c02-8aed-4305-8db8-22ce501430cd", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df86f43-33db-4e66-9511-7870857aef7f", "created": "2026-01-27T05:13:01.26367Z", "modified": "2026-01-27T05:13:01.26367Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='anmon1.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.26367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--729c1dde-e13f-4e23-8e88-f2be321b7224", "created": "2026-01-27T05:13:01.264362Z", "modified": "2026-01-27T05:13:01.264362Z", "relationship_type": "indicates", "source_ref": "indicator--8df86f43-33db-4e66-9511-7870857aef7f", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0cf90b-6af0-4515-a36f-c9e1b7cc2203", "created": "2026-01-27T05:13:01.264533Z", "modified": "2026-01-27T05:13:01.264533Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='droimon20.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.264533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e3c6ab1-4d59-4ba5-aea9-25cd04fa12d4", "created": "2026-01-27T05:13:01.265212Z", "modified": "2026-01-27T05:13:01.265212Z", "relationship_type": "indicates", "source_ref": "indicator--fe0cf90b-6af0-4515-a36f-c9e1b7cc2203", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eea8e57-e20d-47f2-ab54-08ff92350c0b", "created": "2026-01-27T05:13:01.265386Z", "modified": "2026-01-27T05:13:01.265386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitor-android.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.265386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ee120c3-b17e-4eba-83d6-a1c8ad6513ed", "created": "2026-01-27T05:13:01.266098Z", "modified": "2026-01-27T05:13:01.266098Z", "relationship_type": "indicates", "source_ref": "indicator--9eea8e57-e20d-47f2-ab54-08ff92350c0b", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769d8a77-cd86-4248-b43f-ef4001d174b6", "created": "2026-01-27T05:13:01.266274Z", "modified": "2026-01-27T05:13:01.266274Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.266274Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--811244fe-3b50-4001-af66-7344da1f8e04", "created": "2026-01-27T05:13:01.266992Z", "modified": "2026-01-27T05:13:01.266992Z", "relationship_type": "indicates", "source_ref": "indicator--769d8a77-cd86-4248-b43f-ef4001d174b6", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1134a40-7229-4d1d-a48d-9561246f80ee", "created": "2026-01-27T05:13:01.267172Z", "modified": "2026-01-27T05:13:01.267172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prog-money.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.267172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a3e5ffa-258f-44a3-a7f2-c5222c94ffac", "created": "2026-01-27T05:13:01.267965Z", "modified": "2026-01-27T05:13:01.267965Z", "relationship_type": "indicates", "source_ref": "indicator--b1134a40-7229-4d1d-a48d-9561246f80ee", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1102a51e-9da6-45f2-a5b1-2c09cf097162", "created": "2026-01-27T05:13:01.268142Z", "modified": "2026-01-27T05:13:01.268142Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.android-monitor.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.268142Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d928b0b-23cc-4a97-ae7e-e9a0661972bb", "created": "2026-01-27T05:13:01.26883Z", "modified": "2026-01-27T05:13:01.26883Z", "relationship_type": "indicates", "source_ref": "indicator--1102a51e-9da6-45f2-a5b1-2c09cf097162", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e5d63d-03c4-40ab-a6a5-75afeed9c2a9", "created": "2026-01-27T05:13:01.269008Z", "modified": "2026-01-27T05:13:01.269008Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e619e7596d747b075a50380ac7face47632ab0fa4d12cafb3fc8781f5bd396d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.269008Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57bcb5c0-3abb-490e-b3f2-4780b519012e", "created": "2026-01-27T05:13:01.269842Z", "modified": "2026-01-27T05:13:01.269842Z", "relationship_type": "indicates", "source_ref": "indicator--38e5d63d-03c4-40ab-a6a5-75afeed9c2a9", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b712482-da2d-46ea-bbdb-226c416b617f", "created": "2026-01-27T05:13:01.270019Z", "modified": "2026-01-27T05:13:01.270019Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='270d497ee41c6864c0a48dadc8e5552b236cb3caf75d963c23cc8a446de49464']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.270019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--271e3fb5-224f-4286-aebd-ee9eac159fff", "created": "2026-01-27T05:13:01.270849Z", "modified": "2026-01-27T05:13:01.270849Z", "relationship_type": "indicates", "source_ref": "indicator--4b712482-da2d-46ea-bbdb-226c416b617f", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a374c6e1-69b0-4136-b7f1-9a3a4ed68a48", "created": "2026-01-27T05:13:01.271025Z", "modified": "2026-01-27T05:13:01.271025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b40adeb96e1a73e51ff035ae28b26dfe9e4376f49bf57d3d19d44a8bbf91746']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.271025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dfe62a32-ea8d-4c1b-8260-c0641acdb00c", "created": "2026-01-27T05:13:01.27188Z", "modified": "2026-01-27T05:13:01.27188Z", "relationship_type": "indicates", "source_ref": "indicator--a374c6e1-69b0-4136-b7f1-9a3a4ed68a48", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8598d653-215f-45a4-8251-a72c05604618", "created": "2026-01-27T05:13:01.272054Z", "modified": "2026-01-27T05:13:01.272054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='69260764e600edd5fbcde910809edea7d4f3f07840464b357a38ddaf2b73922d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.272054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2113efc5-0824-4480-ab9a-fd1f25053d5a", "created": "2026-01-27T05:13:01.272892Z", "modified": "2026-01-27T05:13:01.272892Z", "relationship_type": "indicates", "source_ref": "indicator--8598d653-215f-45a4-8251-a72c05604618", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4abd4c9-3181-4a1e-8edf-2d31fc636839", "created": "2026-01-27T05:13:01.27307Z", "modified": "2026-01-27T05:13:01.27307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f830ca263271deb676bc8ba77d7ecc5cd3c0731f7e01b9050fbe6f20066c47b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.27307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3b53b0b-78a8-4bd5-bf22-5dc1a68fd053", "created": "2026-01-27T05:13:01.273917Z", "modified": "2026-01-27T05:13:01.273917Z", "relationship_type": "indicates", "source_ref": "indicator--e4abd4c9-3181-4a1e-8edf-2d31fc636839", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3062520b-ac85-4976-a036-92219a09b053", "created": "2026-01-27T05:13:01.274093Z", "modified": "2026-01-27T05:13:01.274093Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e17feb1ff96b3b2f5992f29e008b5581b44d3c16a1c742cd93d15971a587ff4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.274093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2962b981-4911-4c26-afa2-edf724c47f7d", "created": "2026-01-27T05:13:01.274931Z", "modified": "2026-01-27T05:13:01.274931Z", "relationship_type": "indicates", "source_ref": "indicator--3062520b-ac85-4976-a036-92219a09b053", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d991f2-a093-4fc3-b41f-2f7661c69b92", "created": "2026-01-27T05:13:01.275108Z", "modified": "2026-01-27T05:13:01.275108Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='265a0c96a6289c3273d24fec06d674ea07c7b729301b9ff3bbf2748c15777e4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.275108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6dd4b833-393d-4f53-a52e-86049b5793cb", "created": "2026-01-27T05:13:01.27595Z", "modified": "2026-01-27T05:13:01.27595Z", "relationship_type": "indicates", "source_ref": "indicator--c6d991f2-a093-4fc3-b41f-2f7661c69b92", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9920b206-f66d-4b5f-8b0e-4103f304b625", "created": "2026-01-27T05:13:01.276128Z", "modified": "2026-01-27T05:13:01.276128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a01ec2878fa433c773e0e27636b5ddf14793eb5b33be4abe2cd840281064d6cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.276128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c214cafb-992b-406c-918b-78393a288235", "created": "2026-01-27T05:13:01.277135Z", "modified": "2026-01-27T05:13:01.277135Z", "relationship_type": "indicates", "source_ref": "indicator--9920b206-f66d-4b5f-8b0e-4103f304b625", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca7aa7d-1cb7-4c14-984a-d6c93913ee41", "created": "2026-01-27T05:13:01.277323Z", "modified": "2026-01-27T05:13:01.277323Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9a177389a41397c1bdc0f772caf9da6ec201b0a8ec72a0314dd1c936093e708']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.277323Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a863f07c-72b3-4487-af4f-0cff2466fea5", "created": "2026-01-27T05:13:01.278169Z", "modified": "2026-01-27T05:13:01.278169Z", "relationship_type": "indicates", "source_ref": "indicator--fca7aa7d-1cb7-4c14-984a-d6c93913ee41", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba1ce1d-fa3b-41f7-a8bf-62941c049e5a", "created": "2026-01-27T05:13:01.278349Z", "modified": "2026-01-27T05:13:01.278349Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9e95e417b98d02bcb5544051d03e01e047c048cab9ee3c2241c820b36ba6772']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.278349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0359e875-cae0-4943-a69b-0f55218c88e5", "created": "2026-01-27T05:13:01.279187Z", "modified": "2026-01-27T05:13:01.279187Z", "relationship_type": "indicates", "source_ref": "indicator--2ba1ce1d-fa3b-41f7-a8bf-62941c049e5a", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecd24b6-d562-410c-98ad-07c2264ff41f", "created": "2026-01-27T05:13:01.279363Z", "modified": "2026-01-27T05:13:01.279363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='36c88f69c322dbd254d3bc450233c0cb4da2d9ad9e612d77aa11187020275129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.279363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--827dd60a-87e0-4e58-a986-d09e582272e5", "created": "2026-01-27T05:13:01.280201Z", "modified": "2026-01-27T05:13:01.280201Z", "relationship_type": "indicates", "source_ref": "indicator--4ecd24b6-d562-410c-98ad-07c2264ff41f", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b050f3-75a1-4a89-8f69-e72fbb8db0f6", "created": "2026-01-27T05:13:01.280376Z", "modified": "2026-01-27T05:13:01.280376Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a311e0267409c0a8035d8b030eb97ce6ec7d750f231ed394db595aeee528c2fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.280376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4454b06a-7b24-4707-8812-3242609ad1a0", "created": "2026-01-27T05:13:01.281223Z", "modified": "2026-01-27T05:13:01.281223Z", "relationship_type": "indicates", "source_ref": "indicator--80b050f3-75a1-4a89-8f69-e72fbb8db0f6", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32b38e8-42ab-4452-8211-ac2833a35618", "created": "2026-01-27T05:13:01.2814Z", "modified": "2026-01-27T05:13:01.2814Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34bf0057814bd39e2f4a2f1a7c5215753404e7268c28ea912278d0a144b68418']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.2814Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8bc8e86-2220-4fa1-9ec4-6e42ed55fd91", "created": "2026-01-27T05:13:01.282242Z", "modified": "2026-01-27T05:13:01.282242Z", "relationship_type": "indicates", "source_ref": "indicator--e32b38e8-42ab-4452-8211-ac2833a35618", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa7a254-8f9b-4aac-8f80-2e2f4827323d", "created": "2026-01-27T05:13:01.282418Z", "modified": "2026-01-27T05:13:01.282418Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2833508b73244a5c6be1d0f047037951edf3f50719bbdcc9e3fa593211061b7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.282418Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c66751dd-b0ff-4c63-a2ff-5f0e7943e26a", "created": "2026-01-27T05:13:01.283249Z", "modified": "2026-01-27T05:13:01.283249Z", "relationship_type": "indicates", "source_ref": "indicator--faa7a254-8f9b-4aac-8f80-2e2f4827323d", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b679b394-6729-460d-97b2-72ae85490c3e", "created": "2026-01-27T05:13:01.283434Z", "modified": "2026-01-27T05:13:01.283434Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7b9ce40a5db59d489387d2f0cf3ef0a058b5a7cccb1dfeca54e4d1f30e46dd1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.283434Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38bfc74b-e115-412b-8844-5086703352cd", "created": "2026-01-27T05:13:01.284273Z", "modified": "2026-01-27T05:13:01.284273Z", "relationship_type": "indicates", "source_ref": "indicator--b679b394-6729-460d-97b2-72ae85490c3e", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b16f4c-d1d6-48bc-a091-635048c13578", "created": "2026-01-27T05:13:01.284457Z", "modified": "2026-01-27T05:13:01.284457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='450173140bbdc6f8ba40d8e2c29b42a93c189c34c19829881097e8f0d56ac760']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.284457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4d229bf-f498-4c46-acaa-51a53bafe5b2", "created": "2026-01-27T05:13:01.285313Z", "modified": "2026-01-27T05:13:01.285313Z", "relationship_type": "indicates", "source_ref": "indicator--c1b16f4c-d1d6-48bc-a091-635048c13578", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94593328-cc0b-407e-9f1b-6a0f4fba37e1", "created": "2026-01-27T05:13:01.285489Z", "modified": "2026-01-27T05:13:01.285489Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='081b0b7663883932114e0007fcce08c1460375e38568149c5f635cf075af6a88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.285489Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a473f30-3b81-42a3-96d6-735edfcf5ad5", "created": "2026-01-27T05:13:01.286449Z", "modified": "2026-01-27T05:13:01.286449Z", "relationship_type": "indicates", "source_ref": "indicator--94593328-cc0b-407e-9f1b-6a0f4fba37e1", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7a11b2-381a-49bb-b616-17fdef1749b5", "created": "2026-01-27T05:13:01.286628Z", "modified": "2026-01-27T05:13:01.286628Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2f5c8ab957c6ff931c48b01a9615f1461b32c07885dfd6353947b7560300b162']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.286628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d968489-0f32-4517-a70a-147c127afc78", "created": "2026-01-27T05:13:01.287465Z", "modified": "2026-01-27T05:13:01.287465Z", "relationship_type": "indicates", "source_ref": "indicator--3b7a11b2-381a-49bb-b616-17fdef1749b5", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df0d56e8-e657-43a7-aae9-c83f90f02420", "created": "2026-01-27T05:13:01.287641Z", "modified": "2026-01-27T05:13:01.287641Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d8b5e70442a337f546e149aa4393ec8f561daa323fb17c3b9c3faa8071a6639']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.287641Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fc9b10f-a789-4aeb-84f5-152a25ee2d48", "created": "2026-01-27T05:13:01.288475Z", "modified": "2026-01-27T05:13:01.288475Z", "relationship_type": "indicates", "source_ref": "indicator--df0d56e8-e657-43a7-aae9-c83f90f02420", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b4f62f-e956-47cc-80dc-f433d5c5a108", "created": "2026-01-27T05:13:01.288648Z", "modified": "2026-01-27T05:13:01.288648Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4b38232db89ffc202f41fee493a84b056f1115339439efb6635d170e05bfa85b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.288648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89611b73-f3da-40b0-bbe8-97265c4fef47", "created": "2026-01-27T05:13:01.289482Z", "modified": "2026-01-27T05:13:01.289482Z", "relationship_type": "indicates", "source_ref": "indicator--33b4f62f-e956-47cc-80dc-f433d5c5a108", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a79b9f3-ce79-4f4c-a45c-086e36268c31", "created": "2026-01-27T05:13:01.289658Z", "modified": "2026-01-27T05:13:01.289658Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='afs.hbmoczc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.289658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e877beb6-0f93-43ae-aedc-ed72e93b2efc", "created": "2026-01-27T05:13:01.290319Z", "modified": "2026-01-27T05:13:01.290319Z", "relationship_type": "indicates", "source_ref": "indicator--1a79b9f3-ce79-4f4c-a45c-086e36268c31", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dedad1-6e7b-4923-877c-7be9cd00a2f9", "created": "2026-01-27T05:13:01.290493Z", "modified": "2026-01-27T05:13:01.290493Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='bv.vemzye']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.290493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a51ed865-c70e-490f-a56e-b21244687d44", "created": "2026-01-27T05:13:01.291142Z", "modified": "2026-01-27T05:13:01.291142Z", "relationship_type": "indicates", "source_ref": "indicator--45dedad1-6e7b-4923-877c-7be9cd00a2f9", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb8f4f8-08e3-4dd0-9745-e6c9664a82a3", "created": "2026-01-27T05:13:01.291325Z", "modified": "2026-01-27T05:13:01.291325Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.amon']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.291325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--819e5de9-33ad-4a77-a9e2-f2e08ac16785", "created": "2026-01-27T05:13:01.291976Z", "modified": "2026-01-27T05:13:01.291976Z", "relationship_type": "indicates", "source_ref": "indicator--fbb8f4f8-08e3-4dd0-9745-e6c9664a82a3", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9a9eb2-36b5-4f71-9db0-5c857f21fb10", "created": "2026-01-27T05:13:01.292148Z", "modified": "2026-01-27T05:13:01.292148Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.monitorchecker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.292148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc16c8fe-b367-4f33-9e22-e87eafa57d66", "created": "2026-01-27T05:13:01.292818Z", "modified": "2026-01-27T05:13:01.292818Z", "relationship_type": "indicates", "source_ref": "indicator--fd9a9eb2-36b5-4f71-9db0-5c857f21fb10", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b12c141-e2ec-40bc-be21-76d125bd896c", "created": "2026-01-27T05:13:01.292991Z", "modified": "2026-01-27T05:13:01.292991Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='fod.loqpf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.292991Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8189c86-7334-4257-b3fe-060c3370a852", "created": "2026-01-27T05:13:01.293628Z", "modified": "2026-01-27T05:13:01.293628Z", "relationship_type": "indicates", "source_ref": "indicator--0b12c141-e2ec-40bc-be21-76d125bd896c", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb6eb2-8df8-4310-aa9c-b0a1a530bc02", "created": "2026-01-27T05:13:01.293823Z", "modified": "2026-01-27T05:13:01.293823Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ifk.ghumlh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.293823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc2d1a1f-ee83-4558-8a52-295ee477d27b", "created": "2026-01-27T05:13:01.294869Z", "modified": "2026-01-27T05:13:01.294869Z", "relationship_type": "indicates", "source_ref": "indicator--4cbb6eb2-8df8-4310-aa9c-b0a1a530bc02", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e08990-0fd4-4bd8-88fb-8b095dfcbe27", "created": "2026-01-27T05:13:01.295046Z", "modified": "2026-01-27T05:13:01.295046Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='mhu.bylbcwc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.295046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3531198-190d-4b4d-ba83-e0182374e5ab", "created": "2026-01-27T05:13:01.295676Z", "modified": "2026-01-27T05:13:01.295676Z", "relationship_type": "indicates", "source_ref": "indicator--97e08990-0fd4-4bd8-88fb-8b095dfcbe27", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c225a757-4b6e-4b55-aa5f-9f945eb346d9", "created": "2026-01-27T05:13:01.295881Z", "modified": "2026-01-27T05:13:01.295881Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='oo.ptkqyawh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.295881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b85320fe-58bd-4bd5-bbf5-629a60aa5b74", "created": "2026-01-27T05:13:01.296582Z", "modified": "2026-01-27T05:13:01.296582Z", "relationship_type": "indicates", "source_ref": "indicator--c225a757-4b6e-4b55-aa5f-9f945eb346d9", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e224f07e-ee07-4b33-b496-cd92e42703f0", "created": "2026-01-27T05:13:01.296777Z", "modified": "2026-01-27T05:13:01.296777Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='sy.slvzccd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.296777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffed4032-7047-43d9-af75-5fb79b0c884f", "created": "2026-01-27T05:13:01.297415Z", "modified": "2026-01-27T05:13:01.297415Z", "relationship_type": "indicates", "source_ref": "indicator--e224f07e-ee07-4b33-b496-cd92e42703f0", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5a89fa-33c5-424c-a199-4208fa09ceae", "created": "2026-01-27T05:13:01.297589Z", "modified": "2026-01-27T05:13:01.297589Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='vmf.uxytqgrl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.297589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70638374-3300-4c0b-b80e-1e99e8fd567e", "created": "2026-01-27T05:13:01.298241Z", "modified": "2026-01-27T05:13:01.298241Z", "relationship_type": "indicates", "source_ref": "indicator--ad5a89fa-33c5-424c-a199-4208fa09ceae", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13800e4d-ceed-4edb-8cef-ddca941a34fc", "created": "2026-01-27T05:13:01.298416Z", "modified": "2026-01-27T05:13:01.298416Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='vn.ehkfqgvn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.298416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8181783e-a19d-4dd2-a149-dd7bf921698e", "created": "2026-01-27T05:13:01.299064Z", "modified": "2026-01-27T05:13:01.299064Z", "relationship_type": "indicates", "source_ref": "indicator--13800e4d-ceed-4edb-8cef-ddca941a34fc", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f4ed33-49a1-4972-84d4-1bc8fe1ae2d6", "created": "2026-01-27T05:13:01.299237Z", "modified": "2026-01-27T05:13:01.299237Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='yr.tubjypbl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.299237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--331f74bf-94aa-49cd-8526-bb9a50d7a7ae", "created": "2026-01-27T05:13:01.299883Z", "modified": "2026-01-27T05:13:01.299883Z", "relationship_type": "indicates", "source_ref": "indicator--b3f4ed33-49a1-4972-84d4-1bc8fe1ae2d6", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24f858a-7147-4586-ad74-e5cdbac14c48", "created": "2026-01-27T05:13:01.300058Z", "modified": "2026-01-27T05:13:01.300058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dromon']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.300058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27621ec2-f43e-423b-b3d7-9eb504c55b94", "created": "2026-01-27T05:13:01.300683Z", "modified": "2026-01-27T05:13:01.300683Z", "relationship_type": "indicates", "source_ref": "indicator--a24f858a-7147-4586-ad74-e5cdbac14c48", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab307961-f6d3-4e2a-9cf5-19c1e35e032e", "created": "2026-01-27T05:13:01.300885Z", "modified": "2026-01-27T05:13:01.300885Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='kenkbltcf.pwpwkvdwmjk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.300885Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f3d37b9-be30-4844-a61e-38befe6dc1fc", "created": "2026-01-27T05:13:01.301534Z", "modified": "2026-01-27T05:13:01.301534Z", "relationship_type": "indicates", "source_ref": "indicator--ab307961-f6d3-4e2a-9cf5-19c1e35e032e", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de2c3b4-febb-4dcf-beaa-ae2d74843425", "created": "2026-01-27T05:13:01.301702Z", "modified": "2026-01-27T05:13:01.301702Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='iiw.orqjtwbkx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.301702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fea996ec-fc78-47c2-a730-f59e022c5621", "created": "2026-01-27T05:13:01.302466Z", "modified": "2026-01-27T05:13:01.302466Z", "relationship_type": "indicates", "source_ref": "indicator--3de2c3b4-febb-4dcf-beaa-ae2d74843425", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b211ae-d46b-41b4-9dae-bd9d3c7939e7", "created": "2026-01-27T05:13:01.30264Z", "modified": "2026-01-27T05:13:01.30264Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='efexmsz.mzuooelftl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.30264Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--282b066f-22e8-4573-99da-2585028b9a57", "created": "2026-01-27T05:13:01.3033Z", "modified": "2026-01-27T05:13:01.3033Z", "relationship_type": "indicates", "source_ref": "indicator--93b211ae-d46b-41b4-9dae-bd9d3c7939e7", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4021c56f-d537-433a-ba0c-32fdc87c6b42", "created": "2026-01-27T05:13:01.303481Z", "modified": "2026-01-27T05:13:01.303481Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='fka.ugsonrqogw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.303481Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdc1f5b9-8454-4cd2-bd90-69f5905bbb7c", "created": "2026-01-27T05:13:01.304134Z", "modified": "2026-01-27T05:13:01.304134Z", "relationship_type": "indicates", "source_ref": "indicator--4021c56f-d537-433a-ba0c-32fdc87c6b42", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd6590f-31fe-4bf7-9971-e70824a0d54c", "created": "2026-01-27T05:13:01.30431Z", "modified": "2026-01-27T05:13:01.30431Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4591BD0E4CBE86FD7510F1427BA6538BB269AE4D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.30431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8adb8631-9328-4225-bd43-a3463b48c63d", "created": "2026-01-27T05:13:01.305087Z", "modified": "2026-01-27T05:13:01.305087Z", "relationship_type": "indicates", "source_ref": "indicator--ebd6590f-31fe-4bf7-9971-e70824a0d54c", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0b7f50-a737-43d3-80eb-6ff3493eef78", "created": "2026-01-27T05:13:01.305262Z", "modified": "2026-01-27T05:13:01.305262Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1CD94B411B5D4D2F5F525D775876FF0993B4B716']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.305262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81788950-24ad-4369-b1b4-aafe9662caec", "created": "2026-01-27T05:13:01.306033Z", "modified": "2026-01-27T05:13:01.306033Z", "relationship_type": "indicates", "source_ref": "indicator--3d0b7f50-a737-43d3-80eb-6ff3493eef78", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c0df5e-17a0-4a62-b383-2b7ec6e10910", "created": "2026-01-27T05:13:01.306207Z", "modified": "2026-01-27T05:13:01.306207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5C77395F77E17F293CC8C4E3E1FDD48296EE4B28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.306207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d68142b0-28ea-42b5-8e91-bdb4be27b766", "created": "2026-01-27T05:13:01.306987Z", "modified": "2026-01-27T05:13:01.306987Z", "relationship_type": "indicates", "source_ref": "indicator--b0c0df5e-17a0-4a62-b383-2b7ec6e10910", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7df6df-df20-4275-988f-329e6865d480", "created": "2026-01-27T05:13:01.307177Z", "modified": "2026-01-27T05:13:01.307177Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6A610D0211E543113EFE1A82CC4D270B6A45C526']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.307177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e9e3b32-2dbe-43c5-bc36-852343c33850", "created": "2026-01-27T05:13:01.307953Z", "modified": "2026-01-27T05:13:01.307953Z", "relationship_type": "indicates", "source_ref": "indicator--de7df6df-df20-4275-988f-329e6865d480", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac01c32b-b2e3-4996-a22c-bb0a45fa5303", "created": "2026-01-27T05:13:01.308127Z", "modified": "2026-01-27T05:13:01.308127Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6CC6FB667F4D178DF4E9111FE96BE9AEAEE485EF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.308127Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19fe5b99-6cea-4417-a7c9-07f49601aeea", "created": "2026-01-27T05:13:01.308899Z", "modified": "2026-01-27T05:13:01.308899Z", "relationship_type": "indicates", "source_ref": "indicator--ac01c32b-b2e3-4996-a22c-bb0a45fa5303", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33946d1c-5074-4007-9dc3-e033a5e10cde", "created": "2026-01-27T05:13:01.309075Z", "modified": "2026-01-27T05:13:01.309075Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='85A4C4F357A99888725862C351119FBB12C45695']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.309075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff7c0c87-4bac-45b2-9084-d973ad9e8e6f", "created": "2026-01-27T05:13:01.309847Z", "modified": "2026-01-27T05:13:01.309847Z", "relationship_type": "indicates", "source_ref": "indicator--33946d1c-5074-4007-9dc3-e033a5e10cde", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a1b8c8-1dc9-4b1c-a039-a3e8e1bbd063", "created": "2026-01-27T05:13:01.31002Z", "modified": "2026-01-27T05:13:01.31002Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='970B463F5103B36326AF8C8349A4106F6932835B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.31002Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a4c8287-be99-40b1-91cd-2b119470941c", "created": "2026-01-27T05:13:01.310921Z", "modified": "2026-01-27T05:13:01.310921Z", "relationship_type": "indicates", "source_ref": "indicator--56a1b8c8-1dc9-4b1c-a039-a3e8e1bbd063", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6b7f36-3743-4bc8-a4d9-087dbcbf24fc", "created": "2026-01-27T05:13:01.311095Z", "modified": "2026-01-27T05:13:01.311095Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B57FAAB701E26B4C92972442D3A428881E18441A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.311095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fd7cb81-d2cd-42e1-b6bd-abd1ee4d0f36", "created": "2026-01-27T05:13:01.311869Z", "modified": "2026-01-27T05:13:01.311869Z", "relationship_type": "indicates", "source_ref": "indicator--ec6b7f36-3743-4bc8-a4d9-087dbcbf24fc", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad85f5b9-a75b-4ad0-bf12-8f8e00384d93", "created": "2026-01-27T05:13:01.312044Z", "modified": "2026-01-27T05:13:01.312044Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E0FCD3E782FB859F7388E4F44A44A5D694114968']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.312044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fcb9d646-45ae-45c0-a42b-df8650f05b34", "created": "2026-01-27T05:13:01.312817Z", "modified": "2026-01-27T05:13:01.312817Z", "relationship_type": "indicates", "source_ref": "indicator--ad85f5b9-a75b-4ad0-bf12-8f8e00384d93", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d871815f-28ed-4018-8f83-f5dee9ef0cd4", "created": "2026-01-27T05:13:01.312999Z", "modified": "2026-01-27T05:13:01.312999Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EAD44242A3C0A73DEF7976C56AC10A4530E8F67A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.312999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d57d3f7-346b-4446-8a6f-b49e418fd579", "created": "2026-01-27T05:13:01.313778Z", "modified": "2026-01-27T05:13:01.313778Z", "relationship_type": "indicates", "source_ref": "indicator--d871815f-28ed-4018-8f83-f5dee9ef0cd4", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f51df8-d70a-42eb-a5ec-36c30c49eb25", "created": "2026-01-27T05:13:01.313957Z", "modified": "2026-01-27T05:13:01.313957Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='ED5BADBC20B1B027F5858D29DAFBF66535C46DB9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.313957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5aaedab6-023b-4c1d-a805-d1c4a48e57a6", "created": "2026-01-27T05:13:01.314714Z", "modified": "2026-01-27T05:13:01.314714Z", "relationship_type": "indicates", "source_ref": "indicator--e4f51df8-d70a-42eb-a5ec-36c30c49eb25", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edf9a37-a38c-4a9b-b900-c64bc195c085", "created": "2026-01-27T05:13:01.314909Z", "modified": "2026-01-27T05:13:01.314909Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='339B5C1746A1CDEA945D51BBE967C1320AE73CC4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.314909Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f25cc61-434b-47f0-806d-962277b179b1", "created": "2026-01-27T05:13:01.315674Z", "modified": "2026-01-27T05:13:01.315674Z", "relationship_type": "indicates", "source_ref": "indicator--0edf9a37-a38c-4a9b-b900-c64bc195c085", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7d182e-f831-4d5b-b00b-f69216fad849", "created": "2026-01-27T05:13:01.315866Z", "modified": "2026-01-27T05:13:01.315866Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BEF28CC19ADFBEADC95137A2BD5035B6046666E9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.315866Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b411d998-45de-4255-9955-f71fc5e1c203", "created": "2026-01-27T05:13:01.316627Z", "modified": "2026-01-27T05:13:01.316627Z", "relationship_type": "indicates", "source_ref": "indicator--cf7d182e-f831-4d5b-b00b-f69216fad849", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a58fce-928e-49d4-a704-04ff5b453e96", "created": "2026-01-27T05:13:01.316816Z", "modified": "2026-01-27T05:13:01.316816Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='16226330EBB138A5D47913151827A86567AD9CD4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.316816Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db37ba04-cfdb-4a9a-b8b8-8b414f769ebc", "created": "2026-01-27T05:13:01.317588Z", "modified": "2026-01-27T05:13:01.317588Z", "relationship_type": "indicates", "source_ref": "indicator--f9a58fce-928e-49d4-a704-04ff5b453e96", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcccc95-daef-407b-a8b1-46a1a2d07b83", "created": "2026-01-27T05:13:01.317788Z", "modified": "2026-01-27T05:13:01.317788Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3BA583488F36C708025C078D9EB4BEDC3918B098']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.317788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e473ed25-0ff8-40a6-990d-f58e3cd61973", "created": "2026-01-27T05:13:01.318565Z", "modified": "2026-01-27T05:13:01.318565Z", "relationship_type": "indicates", "source_ref": "indicator--1fcccc95-daef-407b-a8b1-46a1a2d07b83", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268a4211-55d0-4b0d-85a4-d4fc181fc800", "created": "2026-01-27T05:13:01.318738Z", "modified": "2026-01-27T05:13:01.318738Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DDE822BAF53EF55C49096E866A995464CECB8B1C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.318738Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a963c761-28fa-4a6c-8332-f27acdb8948c", "created": "2026-01-27T05:13:01.319638Z", "modified": "2026-01-27T05:13:01.319638Z", "relationship_type": "indicates", "source_ref": "indicator--268a4211-55d0-4b0d-85a4-d4fc181fc800", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0ccff4-1d15-47c8-8c20-2e0f0a09211d", "created": "2026-01-27T05:13:01.319828Z", "modified": "2026-01-27T05:13:01.319828Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E6F85CAB3903304DC16197B7EDA8F67ED6D65A1A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.319828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8673dd4f-4fec-488d-a045-0299fee4966c", "created": "2026-01-27T05:13:01.320589Z", "modified": "2026-01-27T05:13:01.320589Z", "relationship_type": "indicates", "source_ref": "indicator--2c0ccff4-1d15-47c8-8c20-2e0f0a09211d", "target_ref": "malware--a5c6f7d9-50a0-4122-8f04-7fcf3df50f0a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f030d1f4-54cb-4a20-94a8-67b757089212", "created": "2026-01-27T05:13:01.320782Z", "modified": "2026-01-27T05:13:01.320782Z", "name": "FindMyPhone", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b6df0f-f029-466b-b279-85deec3ec061", "created": "2026-01-27T05:13:01.320961Z", "modified": "2026-01-27T05:13:01.320961Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='find-my-phone-prod.herokuapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.320961Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f43e0ae6-b943-4036-8213-70540e61f261", "created": "2026-01-27T05:13:01.321657Z", "modified": "2026-01-27T05:13:01.321657Z", "relationship_type": "indicates", "source_ref": "indicator--b4b6df0f-f029-466b-b279-85deec3ec061", "target_ref": "malware--f030d1f4-54cb-4a20-94a8-67b757089212"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0976380-7d05-439c-8eba-3571222a9eee", "created": "2026-01-27T05:13:01.321852Z", "modified": "2026-01-27T05:13:01.321852Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='findmyphone.mangobird.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.321852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89a4efc1-1752-4b3d-9b85-51025712f096", "created": "2026-01-27T05:13:01.322544Z", "modified": "2026-01-27T05:13:01.322544Z", "relationship_type": "indicates", "source_ref": "indicator--c0976380-7d05-439c-8eba-3571222a9eee", "target_ref": "malware--f030d1f4-54cb-4a20-94a8-67b757089212"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e8d42d-447d-4985-a007-87b8bd597262", "created": "2026-01-27T05:13:01.322722Z", "modified": "2026-01-27T05:13:01.322722Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='find-myphone.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.322722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f483c81-b183-4cd1-b1dd-4c7cfc17194c", "created": "2026-01-27T05:13:01.323428Z", "modified": "2026-01-27T05:13:01.323428Z", "relationship_type": "indicates", "source_ref": "indicator--99e8d42d-447d-4985-a007-87b8bd597262", "target_ref": "malware--f030d1f4-54cb-4a20-94a8-67b757089212"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a433fe7-2935-4cac-9557-31df72d98c55", "created": "2026-01-27T05:13:01.323602Z", "modified": "2026-01-27T05:13:01.323602Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mango.findmyphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.323602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c68aee24-472a-4a37-a1bd-3cb0b9b23713", "created": "2026-01-27T05:13:01.32427Z", "modified": "2026-01-27T05:13:01.32427Z", "relationship_type": "indicates", "source_ref": "indicator--3a433fe7-2935-4cac-9557-31df72d98c55", "target_ref": "malware--f030d1f4-54cb-4a20-94a8-67b757089212"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7c0103-4c16-44c6-a261-54cec536bcef", "created": "2026-01-27T05:13:01.324444Z", "modified": "2026-01-27T05:13:01.324444Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mango.findmyphone2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.324444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d8009dd-8636-4b3b-830f-b80605ddf5b1", "created": "2026-01-27T05:13:01.325128Z", "modified": "2026-01-27T05:13:01.325128Z", "relationship_type": "indicates", "source_ref": "indicator--bd7c0103-4c16-44c6-a261-54cec536bcef", "target_ref": "malware--f030d1f4-54cb-4a20-94a8-67b757089212"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70444ca-1caf-48eb-89ec-1573601e1099", "created": "2026-01-27T05:13:01.325307Z", "modified": "2026-01-27T05:13:01.325307Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mango.findmyphone3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.325307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1819d3b-3498-4ff4-b978-fe569e17b1d4", "created": "2026-01-27T05:13:01.325979Z", "modified": "2026-01-27T05:13:01.325979Z", "relationship_type": "indicates", "source_ref": "indicator--d70444ca-1caf-48eb-89ec-1573601e1099", "target_ref": "malware--f030d1f4-54cb-4a20-94a8-67b757089212"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6", "created": "2026-01-27T05:13:01.326152Z", "modified": "2026-01-27T05:13:01.326152Z", "name": "Bulgok", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9dfe12-6e94-4dc7-b461-a038290bf92a", "created": "2026-01-27T05:13:01.326317Z", "modified": "2026-01-27T05:13:01.326317Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c-phone.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.326317Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38d2aae4-0b93-4bc9-adb4-dd1061de5499", "created": "2026-01-27T05:13:01.327003Z", "modified": "2026-01-27T05:13:01.327003Z", "relationship_type": "indicates", "source_ref": "indicator--3e9dfe12-6e94-4dc7-b461-a038290bf92a", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2b4c5f-0932-4e5b-bc5c-f29d05c0385f", "created": "2026-01-27T05:13:01.327179Z", "modified": "2026-01-27T05:13:01.327179Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='control-phone-a05a3.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.327179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1cb4a569-4941-47c9-a4ad-93846e14c742", "created": "2026-01-27T05:13:01.328015Z", "modified": "2026-01-27T05:13:01.328015Z", "relationship_type": "indicates", "source_ref": "indicator--7c2b4c5f-0932-4e5b-bc5c-f29d05c0385f", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bcd349-01d8-46c0-89cd-611c12b75394", "created": "2026-01-27T05:13:01.328194Z", "modified": "2026-01-27T05:13:01.328194Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='q95294fs.beget.tech']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.328194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b513d309-7b52-469a-b99b-a9cb5b19d938", "created": "2026-01-27T05:13:01.328884Z", "modified": "2026-01-27T05:13:01.328884Z", "relationship_type": "indicates", "source_ref": "indicator--15bcd349-01d8-46c0-89cd-611c12b75394", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726b5f2d-987a-488e-9b39-6c7abc171134", "created": "2026-01-27T05:13:01.329064Z", "modified": "2026-01-27T05:13:01.329064Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='c-phone.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.329064Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fcd9581-bd73-4ad4-91f7-0c43dc7accbe", "created": "2026-01-27T05:13:01.329719Z", "modified": "2026-01-27T05:13:01.329719Z", "relationship_type": "indicates", "source_ref": "indicator--726b5f2d-987a-488e-9b39-6c7abc171134", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e068412-bcf6-4477-b9ef-acae84bdcfe4", "created": "2026-01-27T05:13:01.329913Z", "modified": "2026-01-27T05:13:01.329913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db0e8d833e9c1f09e240df7add910e526ed7e32a48c4a3add8921bd90dbfbe77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.329913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0f5f97b-d684-435a-b958-f10de8c48db0", "created": "2026-01-27T05:13:01.330762Z", "modified": "2026-01-27T05:13:01.330762Z", "relationship_type": "indicates", "source_ref": "indicator--6e068412-bcf6-4477-b9ef-acae84bdcfe4", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34244219-f171-47d4-8c2f-dd0d65b4aeee", "created": "2026-01-27T05:13:01.330942Z", "modified": "2026-01-27T05:13:01.330942Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bulgakov.controlphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.330942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--460d41f0-5a4c-4097-9a26-9c8066218187", "created": "2026-01-27T05:13:01.331607Z", "modified": "2026-01-27T05:13:01.331607Z", "relationship_type": "indicates", "source_ref": "indicator--34244219-f171-47d4-8c2f-dd0d65b4aeee", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557596d8-6abb-4642-b1f2-4e86094c4b8e", "created": "2026-01-27T05:13:01.331805Z", "modified": "2026-01-27T05:13:01.331805Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bulgakov.bug']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.331805Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--416d78f7-194b-44cf-bd42-0ddcf0a95304", "created": "2026-01-27T05:13:01.332463Z", "modified": "2026-01-27T05:13:01.332463Z", "relationship_type": "indicates", "source_ref": "indicator--557596d8-6abb-4642-b1f2-4e86094c4b8e", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b07963-95fc-4746-9f15-bc19f13781d2", "created": "2026-01-27T05:13:01.332642Z", "modified": "2026-01-27T05:13:01.332642Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bul.b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.332642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7244a6a7-b0d3-4107-9c31-a4420882f72c", "created": "2026-01-27T05:13:01.333294Z", "modified": "2026-01-27T05:13:01.333294Z", "relationship_type": "indicates", "source_ref": "indicator--97b07963-95fc-4746-9f15-bc19f13781d2", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc47942-650f-49d4-b587-9e1a68e33292", "created": "2026-01-27T05:13:01.333475Z", "modified": "2026-01-27T05:13:01.333475Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='71AD1F579C3DCF32AA1E00E02245D359F80C260B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.333475Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b0bbd69-13a2-4fa7-9f81-ba05aab32a7a", "created": "2026-01-27T05:13:01.334258Z", "modified": "2026-01-27T05:13:01.334258Z", "relationship_type": "indicates", "source_ref": "indicator--acc47942-650f-49d4-b587-9e1a68e33292", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbfc6db-b084-46c3-b5e6-7d2ef96cbe6c", "created": "2026-01-27T05:13:01.334431Z", "modified": "2026-01-27T05:13:01.334431Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FD5E1BBC94E5609F366DD4816C975C1CF4003F40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.334431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9369ac5-5078-48d8-bdc8-99b950edebf1", "created": "2026-01-27T05:13:01.335213Z", "modified": "2026-01-27T05:13:01.335213Z", "relationship_type": "indicates", "source_ref": "indicator--9dbfc6db-b084-46c3-b5e6-7d2ef96cbe6c", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81c2f62-b9ed-4d62-b93a-4408e4b00b3b", "created": "2026-01-27T05:13:01.335387Z", "modified": "2026-01-27T05:13:01.335387Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DBC4B607C3B07C48F40F9D184DE443D651436CA5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.335387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57bbaa0e-c0de-4d60-b444-23e60db0bf89", "created": "2026-01-27T05:13:01.33631Z", "modified": "2026-01-27T05:13:01.33631Z", "relationship_type": "indicates", "source_ref": "indicator--d81c2f62-b9ed-4d62-b93a-4408e4b00b3b", "target_ref": "malware--e907c4d7-434d-4944-a113-3f4b9f8d6cf6"}, {"type": "malware", "spec_version": "2.1", "id": "malware--be2336a4-4c59-495f-9f12-ad48ea702061", "created": "2026-01-27T05:13:01.336488Z", "modified": "2026-01-27T05:13:01.336488Z", "name": "Tracku", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a527204-9678-4a3f-862b-fde4c1ab27c1", "created": "2026-01-27T05:13:01.336658Z", "modified": "2026-01-27T05:13:01.336658Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apk7.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.336658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73fb7ece-ff63-4049-b2d9-4fccf3947f00", "created": "2026-01-27T05:13:01.337332Z", "modified": "2026-01-27T05:13:01.337332Z", "relationship_type": "indicates", "source_ref": "indicator--9a527204-9678-4a3f-862b-fde4c1ab27c1", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bc3c74-62bb-4ef8-ad15-e5aaabe3672d", "created": "2026-01-27T05:13:01.337508Z", "modified": "2026-01-27T05:13:01.337508Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clues.link']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.337508Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c27081a-35a9-41b6-8dbe-c07545a5b722", "created": "2026-01-27T05:13:01.338172Z", "modified": "2026-01-27T05:13:01.338172Z", "relationship_type": "indicates", "source_ref": "indicator--65bc3c74-62bb-4ef8-ad15-e5aaabe3672d", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ab85e0-cef7-4569-aed0-45ca5a30d022", "created": "2026-01-27T05:13:01.338345Z", "modified": "2026-01-27T05:13:01.338345Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clues4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.338345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4055ec3-9d71-4cda-9e88-18c26700055a", "created": "2026-01-27T05:13:01.339047Z", "modified": "2026-01-27T05:13:01.339047Z", "relationship_type": "indicates", "source_ref": "indicator--e6ab85e0-cef7-4569-aed0-45ca5a30d022", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42322944-f8bd-464e-92be-c04f4aca35dc", "created": "2026-01-27T05:13:01.339222Z", "modified": "2026-01-27T05:13:01.339222Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cluestr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.339222Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1d362cb-0a53-4e38-b330-aa438bf48ef3", "created": "2026-01-27T05:13:01.3399Z", "modified": "2026-01-27T05:13:01.3399Z", "relationship_type": "indicates", "source_ref": "indicator--42322944-f8bd-464e-92be-c04f4aca35dc", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e198bea-d36b-4c85-af9e-a01ca8a3dff2", "created": "2026-01-27T05:13:01.340076Z", "modified": "2026-01-27T05:13:01.340076Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.340076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea1a417e-4035-464d-a3e6-57aaaee33482", "created": "2026-01-27T05:13:01.340723Z", "modified": "2026-01-27T05:13:01.340723Z", "relationship_type": "indicates", "source_ref": "indicator--2e198bea-d36b-4c85-af9e-a01ca8a3dff2", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fca2534-c560-4be5-9553-16f0befaf22f", "created": "2026-01-27T05:13:01.340912Z", "modified": "2026-01-27T05:13:01.340912Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.340912Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3f2efc3d-bd99-4bd4-8ce7-466717668128", "created": "2026-01-27T05:13:01.341572Z", "modified": "2026-01-27T05:13:01.341572Z", "relationship_type": "indicates", "source_ref": "indicator--9fca2534-c560-4be5-9553-16f0befaf22f", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b951fd-c973-4231-9f35-c24ea6bc9d68", "created": "2026-01-27T05:13:01.341767Z", "modified": "2026-01-27T05:13:01.341767Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='izapk.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.341767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7e0bb3b-a752-4dc2-8195-75e28da46897", "created": "2026-01-27T05:13:01.342438Z", "modified": "2026-01-27T05:13:01.342438Z", "relationship_type": "indicates", "source_ref": "indicator--85b951fd-c973-4231-9f35-c24ea6bc9d68", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bbea9b-7166-4fba-815b-60d75d1a5db5", "created": "2026-01-27T05:13:01.342614Z", "modified": "2026-01-27T05:13:01.342614Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='izspy-1313.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.342614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88f4883a-1c8e-43c9-b365-7286452f9566", "created": "2026-01-27T05:13:01.343323Z", "modified": "2026-01-27T05:13:01.343323Z", "relationship_type": "indicates", "source_ref": "indicator--d7bbea9b-7166-4fba-815b-60d75d1a5db5", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39a8b84-13da-4ecc-820e-787e7a44e6aa", "created": "2026-01-27T05:13:01.343506Z", "modified": "2026-01-27T05:13:01.343506Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='msafe.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.343506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45193f8c-cabf-41ff-9b28-d338a6439ed8", "created": "2026-01-27T05:13:01.344319Z", "modified": "2026-01-27T05:13:01.344319Z", "relationship_type": "indicates", "source_ref": "indicator--f39a8b84-13da-4ecc-820e-787e7a44e6aa", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b054dd3-4226-421b-8a9a-09fd50d6b3c8", "created": "2026-01-27T05:13:01.344497Z", "modified": "2026-01-27T05:13:01.344497Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.apk7.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.344497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2d6cd8b-23c2-4d15-acfb-494836ec2419", "created": "2026-01-27T05:13:01.34517Z", "modified": "2026-01-27T05:13:01.34517Z", "relationship_type": "indicates", "source_ref": "indicator--8b054dd3-4226-421b-8a9a-09fd50d6b3c8", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2170e973-1703-43dc-9ec0-24fd3c9f2d8a", "created": "2026-01-27T05:13:01.345344Z", "modified": "2026-01-27T05:13:01.345344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.345344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21c1a36c-9e86-4119-95dc-7d85b5242622", "created": "2026-01-27T05:13:01.346038Z", "modified": "2026-01-27T05:13:01.346038Z", "relationship_type": "indicates", "source_ref": "indicator--2170e973-1703-43dc-9ec0-24fd3c9f2d8a", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b5fb0d-9432-4429-9fa3-e5b90dd58701", "created": "2026-01-27T05:13:01.346216Z", "modified": "2026-01-27T05:13:01.346216Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.msafe.xyz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.346216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f08e2321-93bb-43dc-9c4d-b9bd43f19a80", "created": "2026-01-27T05:13:01.346903Z", "modified": "2026-01-27T05:13:01.346903Z", "relationship_type": "indicates", "source_ref": "indicator--56b5fb0d-9432-4429-9fa3-e5b90dd58701", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b356c1-bf0b-4832-959a-c5d977330979", "created": "2026-01-27T05:13:01.34708Z", "modified": "2026-01-27T05:13:01.34708Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='2mata.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.34708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a447e993-4c8d-4b1f-b14a-547cbc069811", "created": "2026-01-27T05:13:01.347728Z", "modified": "2026-01-27T05:13:01.347728Z", "relationship_type": "indicates", "source_ref": "indicator--28b356c1-bf0b-4832-959a-c5d977330979", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a96bda3-0ced-45e6-8f43-52fcc8737a97", "created": "2026-01-27T05:13:01.347917Z", "modified": "2026-01-27T05:13:01.347917Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clues4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.347917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4325cf31-10ae-4e37-8f0f-27571f0954fb", "created": "2026-01-27T05:13:01.348567Z", "modified": "2026-01-27T05:13:01.348567Z", "relationship_type": "indicates", "source_ref": "indicator--8a96bda3-0ced-45e6-8f43-52fcc8737a97", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbfa87d-c657-4c0e-a3e7-07f6df31642d", "created": "2026-01-27T05:13:01.348736Z", "modified": "2026-01-27T05:13:01.348736Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cluestr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.348736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37bc39d7-39a8-422b-b06f-b7249ff80392", "created": "2026-01-27T05:13:01.349416Z", "modified": "2026-01-27T05:13:01.349416Z", "relationship_type": "indicates", "source_ref": "indicator--3cbfa87d-c657-4c0e-a3e7-07f6df31642d", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6575c16-fe21-4286-a26c-e15e1dd04cc2", "created": "2026-01-27T05:13:01.349588Z", "modified": "2026-01-27T05:13:01.349588Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.349588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0238d5a6-fa37-4a75-8d1f-72db3564a840", "created": "2026-01-27T05:13:01.350267Z", "modified": "2026-01-27T05:13:01.350267Z", "relationship_type": "indicates", "source_ref": "indicator--f6575c16-fe21-4286-a26c-e15e1dd04cc2", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9f5d11-528f-46c7-8741-04fcbe1c6e4e", "created": "2026-01-27T05:13:01.350448Z", "modified": "2026-01-27T05:13:01.350448Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='hike.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.350448Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b276a681-4baf-4c2e-a76f-513afccbc304", "created": "2026-01-27T05:13:01.351181Z", "modified": "2026-01-27T05:13:01.351181Z", "relationship_type": "indicates", "source_ref": "indicator--bc9f5d11-528f-46c7-8741-04fcbe1c6e4e", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1cf853-ba12-4aef-b066-b30e83ca6c66", "created": "2026-01-27T05:13:01.351366Z", "modified": "2026-01-27T05:13:01.351366Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='izkid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.351366Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee5427ca-9ea1-4a28-89e9-c8a59ae9f65d", "created": "2026-01-27T05:13:01.352174Z", "modified": "2026-01-27T05:13:01.352174Z", "relationship_type": "indicates", "source_ref": "indicator--5e1cf853-ba12-4aef-b066-b30e83ca6c66", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f3623c-faa0-4778-b034-a5da43f1b9a5", "created": "2026-01-27T05:13:01.352352Z", "modified": "2026-01-27T05:13:01.352352Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.352352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--382a9864-7b5c-47d5-93e3-553fc4f10013", "created": "2026-01-27T05:13:01.353032Z", "modified": "2026-01-27T05:13:01.353032Z", "relationship_type": "indicates", "source_ref": "indicator--d6f3623c-faa0-4778-b034-a5da43f1b9a5", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f4adec-4f56-40cb-ba28-977cfd9107dc", "created": "2026-01-27T05:13:01.353216Z", "modified": "2026-01-27T05:13:01.353216Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.izkid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.353216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ecf3aac-49e1-40a4-97e6-7730c23bf1bc", "created": "2026-01-27T05:13:01.353906Z", "modified": "2026-01-27T05:13:01.353906Z", "relationship_type": "indicates", "source_ref": "indicator--c1f4adec-4f56-40cb-ba28-977cfd9107dc", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4cf636-b504-468a-88c3-94128f75ec5c", "created": "2026-01-27T05:13:01.354085Z", "modified": "2026-01-27T05:13:01.354085Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='e-spy.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.354085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3888bdf5-f49e-4a6c-b4b2-23399dc23d09", "created": "2026-01-27T05:13:01.354795Z", "modified": "2026-01-27T05:13:01.354795Z", "relationship_type": "indicates", "source_ref": "indicator--fc4cf636-b504-468a-88c3-94128f75ec5c", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d4effb9-7fab-4cee-a3e3-931d31794d84", "created": "2026-01-27T05:13:01.354972Z", "modified": "2026-01-27T05:13:01.354972Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0eb6c3e7fbc28493979d2d55b37b6f2246e48ba46cd990efd5fbdcb84c52e7b0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.354972Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57bed0bc-2c1f-4cb5-88f7-435c64f67d08", "created": "2026-01-27T05:13:01.355882Z", "modified": "2026-01-27T05:13:01.355882Z", "relationship_type": "indicates", "source_ref": "indicator--6d4effb9-7fab-4cee-a3e3-931d31794d84", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f67231-54e2-4a33-9fce-a99609eb1bbd", "created": "2026-01-27T05:13:01.356062Z", "modified": "2026-01-27T05:13:01.356062Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9bbaf4c8717e7dd0a034eeaa961b284d51667a5a85dfef8684a233097d5e441']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.356062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2bfdf76-cbb4-4ebc-a66c-15172bd06d5c", "created": "2026-01-27T05:13:01.356908Z", "modified": "2026-01-27T05:13:01.356908Z", "relationship_type": "indicates", "source_ref": "indicator--08f67231-54e2-4a33-9fce-a99609eb1bbd", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5875de0d-80c0-4d04-8858-97f437e8271c", "created": "2026-01-27T05:13:01.357097Z", "modified": "2026-01-27T05:13:01.357097Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd13bb71747ded1984563dd50e237ebb51f3887c83b748d1751e33e683d8b19f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.357097Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64e10b2a-c3de-4c1f-b173-63043105fef6", "created": "2026-01-27T05:13:01.358011Z", "modified": "2026-01-27T05:13:01.358011Z", "relationship_type": "indicates", "source_ref": "indicator--5875de0d-80c0-4d04-8858-97f437e8271c", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cf1863-2ff5-4d2d-8ecb-d662aefc629a", "created": "2026-01-27T05:13:01.358193Z", "modified": "2026-01-27T05:13:01.358193Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8c2ac89c53954caf0fe4f80d69e4459fb2b1fe5eebf5153aac74c62930b2aef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.358193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c33c64cb-e989-4554-80dc-23b712ee2e1a", "created": "2026-01-27T05:13:01.359059Z", "modified": "2026-01-27T05:13:01.359059Z", "relationship_type": "indicates", "source_ref": "indicator--04cf1863-2ff5-4d2d-8ecb-d662aefc629a", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ebef1d-6dcd-4204-91d2-556bb3f9e6b8", "created": "2026-01-27T05:13:01.359238Z", "modified": "2026-01-27T05:13:01.359238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7bdd2fbd0ee1ef1ae88db3bd540aa3fd4bfd3d091aedfb4b60a2aa330e88af2e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.359238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fae7a0fc-0ed6-4f2d-bf51-b6cc31d43d4c", "created": "2026-01-27T05:13:01.360082Z", "modified": "2026-01-27T05:13:01.360082Z", "relationship_type": "indicates", "source_ref": "indicator--63ebef1d-6dcd-4204-91d2-556bb3f9e6b8", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9709d4d1-35d7-4722-8222-9fc86e4a30f2", "created": "2026-01-27T05:13:01.360264Z", "modified": "2026-01-27T05:13:01.360264Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a9e7510882e75011edf12d6a3350fb679e84ff29774e767ac1721d92dd11954c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.360264Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f245defa-c3dd-4974-a44f-988869d57173", "created": "2026-01-27T05:13:01.361221Z", "modified": "2026-01-27T05:13:01.361221Z", "relationship_type": "indicates", "source_ref": "indicator--9709d4d1-35d7-4722-8222-9fc86e4a30f2", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ba63ec-1644-4a86-a80c-11dce63c76c8", "created": "2026-01-27T05:13:01.361398Z", "modified": "2026-01-27T05:13:01.361398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89611aecf4d3780526391bafa07cea6f3588f30ddd587e7e239075e832778e5d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.361398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a89b7dd8-073c-4305-920b-947cbaa5fb81", "created": "2026-01-27T05:13:01.362269Z", "modified": "2026-01-27T05:13:01.362269Z", "relationship_type": "indicates", "source_ref": "indicator--67ba63ec-1644-4a86-a80c-11dce63c76c8", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84901594-1869-401e-9d83-f1c94ee2ab41", "created": "2026-01-27T05:13:01.36245Z", "modified": "2026-01-27T05:13:01.36245Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0bf4bdb37d25bf92a1b76817e4f89c0b38c2146a116bdec836d588875cd36383']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.36245Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0c588cdd-18c0-41a1-a05d-7c84b8c7f437", "created": "2026-01-27T05:13:01.36333Z", "modified": "2026-01-27T05:13:01.36333Z", "relationship_type": "indicates", "source_ref": "indicator--84901594-1869-401e-9d83-f1c94ee2ab41", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff81f77a-4f7a-47f2-89b1-cce3a932c0ca", "created": "2026-01-27T05:13:01.363519Z", "modified": "2026-01-27T05:13:01.363519Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='582e49883ee6aed53f5a7f423ac910c1b1f18f9eb19d07507c7b32d303d32c24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.363519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f42254c6-94ea-47df-99ca-61672fde6f84", "created": "2026-01-27T05:13:01.364354Z", "modified": "2026-01-27T05:13:01.364354Z", "relationship_type": "indicates", "source_ref": "indicator--ff81f77a-4f7a-47f2-89b1-cce3a932c0ca", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a5e288-5d66-4bdc-8cda-5db8ae85efbe", "created": "2026-01-27T05:13:01.364528Z", "modified": "2026-01-27T05:13:01.364528Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c7345afb1644c57c16fa2a024a8e951c064ea194476e278e9fa6069720fe7e4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.364528Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5911245-364e-40e1-8f2c-3d24ccdd1894", "created": "2026-01-27T05:13:01.365372Z", "modified": "2026-01-27T05:13:01.365372Z", "relationship_type": "indicates", "source_ref": "indicator--66a5e288-5d66-4bdc-8cda-5db8ae85efbe", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24f05ce3-9098-4802-8b3f-6069076d1646", "created": "2026-01-27T05:13:01.365548Z", "modified": "2026-01-27T05:13:01.365548Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b41f6dfb115e0bdf3fd8e860036b4e04432f1af43ecb9cccea78539e701c03a1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.365548Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70c89969-5e1a-444e-9d4e-87fbdb927068", "created": "2026-01-27T05:13:01.366383Z", "modified": "2026-01-27T05:13:01.366383Z", "relationship_type": "indicates", "source_ref": "indicator--24f05ce3-9098-4802-8b3f-6069076d1646", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a559ce-997d-4edf-9604-dab13a3fe8c6", "created": "2026-01-27T05:13:01.366561Z", "modified": "2026-01-27T05:13:01.366561Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b95c23a70e9c71313db73af0d4b8a283cbd6575caae99c46d59da3a1d6695fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.366561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39c668fc-4b13-4ea2-84f9-358742d82274", "created": "2026-01-27T05:13:01.367388Z", "modified": "2026-01-27T05:13:01.367388Z", "relationship_type": "indicates", "source_ref": "indicator--18a559ce-997d-4edf-9604-dab13a3fe8c6", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eba2bff-df89-40bf-8d48-6022db5fbd7b", "created": "2026-01-27T05:13:01.367564Z", "modified": "2026-01-27T05:13:01.367564Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b3cce10706722566b937caddf515ca33092ab3ce30dbb57b15053ff11a884b14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.367564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9e833c3-d4d3-4e55-a0ad-b92f0cf01810", "created": "2026-01-27T05:13:01.368397Z", "modified": "2026-01-27T05:13:01.368397Z", "relationship_type": "indicates", "source_ref": "indicator--8eba2bff-df89-40bf-8d48-6022db5fbd7b", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a9f6c9-c1a2-4310-aa9e-9e1802ca375b", "created": "2026-01-27T05:13:01.368572Z", "modified": "2026-01-27T05:13:01.368572Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.fystem.maps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.368572Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7d8a20e-7d1f-48e8-9103-63c5e53927eb", "created": "2026-01-27T05:13:01.369246Z", "modified": "2026-01-27T05:13:01.369246Z", "relationship_type": "indicates", "source_ref": "indicator--35a9f6c9-c1a2-4310-aa9e-9e1802ca375b", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d130e0d-911d-4a66-80de-37ef9c0747b4", "created": "2026-01-27T05:13:01.369419Z", "modified": "2026-01-27T05:13:01.369419Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.system.maps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.369419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50d7d228-ae3b-4d8f-b18a-9b1c9369699f", "created": "2026-01-27T05:13:01.370221Z", "modified": "2026-01-27T05:13:01.370221Z", "relationship_type": "indicates", "source_ref": "indicator--6d130e0d-911d-4a66-80de-37ef9c0747b4", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--493e1818-49ff-48f2-ba31-3b94fd87b4aa", "created": "2026-01-27T05:13:01.370423Z", "modified": "2026-01-27T05:13:01.370423Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.google.android.bacfup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.370423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7686212d-7ae8-4f2c-b011-13037783981d", "created": "2026-01-27T05:13:01.371095Z", "modified": "2026-01-27T05:13:01.371095Z", "relationship_type": "indicates", "source_ref": "indicator--493e1818-49ff-48f2-ba31-3b94fd87b4aa", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8721774-dc46-4131-9fd1-6b2b8060dbef", "created": "2026-01-27T05:13:01.371269Z", "modified": "2026-01-27T05:13:01.371269Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.google.android.safe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.371269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c64f5a8-12c6-46ac-b4f8-de953701ff50", "created": "2026-01-27T05:13:01.371936Z", "modified": "2026-01-27T05:13:01.371936Z", "relationship_type": "indicates", "source_ref": "indicator--b8721774-dc46-4131-9fd1-6b2b8060dbef", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eebad69-9d63-4b2c-b913-e82aa9820355", "created": "2026-01-27T05:13:01.372112Z", "modified": "2026-01-27T05:13:01.372112Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wzogle.zndroid.yacfup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.372112Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c85f2f76-561b-44cb-977b-4f0a202849b8", "created": "2026-01-27T05:13:01.372782Z", "modified": "2026-01-27T05:13:01.372782Z", "relationship_type": "indicates", "source_ref": "indicator--0eebad69-9d63-4b2c-b913-e82aa9820355", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179d470a-0ea2-462d-9606-21c301efe92f", "created": "2026-01-27T05:13:01.372967Z", "modified": "2026-01-27T05:13:01.372967Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qzogle.xndroid.jacfup']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.372967Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97842099-4681-497d-8474-9128487913bc", "created": "2026-01-27T05:13:01.373629Z", "modified": "2026-01-27T05:13:01.373629Z", "relationship_type": "indicates", "source_ref": "indicator--179d470a-0ea2-462d-9606-21c301efe92f", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2439c1-71da-4637-8a78-ebfdf7ce170f", "created": "2026-01-27T05:13:01.373818Z", "modified": "2026-01-27T05:13:01.373818Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qzogle.xndroid.jacfut']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.373818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d3aa183-e69e-4e93-a0dd-793a9d4d2120", "created": "2026-01-27T05:13:01.374475Z", "modified": "2026-01-27T05:13:01.374475Z", "relationship_type": "indicates", "source_ref": "indicator--8b2439c1-71da-4637-8a78-ebfdf7ce170f", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134954d8-07a2-424c-a99f-df693951d086", "created": "2026-01-27T05:13:01.374646Z", "modified": "2026-01-27T05:13:01.374646Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qzogle.android.jacfut']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.374646Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ca34a09-85a0-46fd-ae91-6724d79e630a", "created": "2026-01-27T05:13:01.375319Z", "modified": "2026-01-27T05:13:01.375319Z", "relationship_type": "indicates", "source_ref": "indicator--134954d8-07a2-424c-a99f-df693951d086", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d549356-6663-48a8-b185-218d1435b46c", "created": "2026-01-27T05:13:01.375513Z", "modified": "2026-01-27T05:13:01.375513Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='01EFA0C8FAE43215125ACA78308EFB1768FB4049']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.375513Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21ab6ce5-a890-4cdc-b808-d035c6b5b89e", "created": "2026-01-27T05:13:01.376303Z", "modified": "2026-01-27T05:13:01.376303Z", "relationship_type": "indicates", "source_ref": "indicator--4d549356-6663-48a8-b185-218d1435b46c", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f7dfef-c9aa-46b2-93ea-6d33fb6fedf3", "created": "2026-01-27T05:13:01.376478Z", "modified": "2026-01-27T05:13:01.376478Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2A1C74FFFE33C7D867C7B284FFDBBA4DDD024450']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.376478Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--055f0e09-2e8f-4b5d-936b-9637bfc5ca9b", "created": "2026-01-27T05:13:01.377268Z", "modified": "2026-01-27T05:13:01.377268Z", "relationship_type": "indicates", "source_ref": "indicator--a1f7dfef-c9aa-46b2-93ea-6d33fb6fedf3", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b117be18-af2e-4554-ae62-3168c6ee6de4", "created": "2026-01-27T05:13:01.377445Z", "modified": "2026-01-27T05:13:01.377445Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5407E1CC26F28D6024E0384693045AEA2B24C5DA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.377445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e135aea3-4f94-4c9c-b3f5-d4e520896ec9", "created": "2026-01-27T05:13:01.378346Z", "modified": "2026-01-27T05:13:01.378346Z", "relationship_type": "indicates", "source_ref": "indicator--b117be18-af2e-4554-ae62-3168c6ee6de4", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df90bcd0-556f-4307-9ee7-6084b72d17fd", "created": "2026-01-27T05:13:01.378527Z", "modified": "2026-01-27T05:13:01.378527Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7D0F4308B87223AEEFFA65060F0F752E84D363BE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.378527Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49a29a9d-867f-4599-94e9-cdcacc0c00a4", "created": "2026-01-27T05:13:01.379314Z", "modified": "2026-01-27T05:13:01.379314Z", "relationship_type": "indicates", "source_ref": "indicator--df90bcd0-556f-4307-9ee7-6084b72d17fd", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a000ba2-4547-4056-b9d5-f63149ca626a", "created": "2026-01-27T05:13:01.37949Z", "modified": "2026-01-27T05:13:01.37949Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9427212B33E9D3636970EAB73E2845E0DC59B5AA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.37949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--535700e3-06db-4da1-9f86-737965b39758", "created": "2026-01-27T05:13:01.380293Z", "modified": "2026-01-27T05:13:01.380293Z", "relationship_type": "indicates", "source_ref": "indicator--3a000ba2-4547-4056-b9d5-f63149ca626a", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0d08b1-25be-4514-877e-c0c9a1d7a50c", "created": "2026-01-27T05:13:01.380469Z", "modified": "2026-01-27T05:13:01.380469Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A9A302C9606AF4BE4468A4FC74F7873DDADA2AB0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.380469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4c09292-b69e-4c97-a561-8411f0efb9a9", "created": "2026-01-27T05:13:01.381251Z", "modified": "2026-01-27T05:13:01.381251Z", "relationship_type": "indicates", "source_ref": "indicator--9e0d08b1-25be-4514-877e-c0c9a1d7a50c", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2349f910-fdd7-46e8-8c03-90416d808a59", "created": "2026-01-27T05:13:01.381442Z", "modified": "2026-01-27T05:13:01.381442Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BD3986483D9B962B029D65BF34BF4B7C568FF204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.381442Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--022b22b6-ebee-4705-acae-2546a60e867a", "created": "2026-01-27T05:13:01.382225Z", "modified": "2026-01-27T05:13:01.382225Z", "relationship_type": "indicates", "source_ref": "indicator--2349f910-fdd7-46e8-8c03-90416d808a59", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08501195-1dc6-41ec-9173-6e0c9d6e91ac", "created": "2026-01-27T05:13:01.382399Z", "modified": "2026-01-27T05:13:01.382399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4474D3395029E6C6744A470EE5F2107DBAEF16A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.382399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8025baf7-be07-44e2-a891-5c97a9caf211", "created": "2026-01-27T05:13:01.3832Z", "modified": "2026-01-27T05:13:01.3832Z", "relationship_type": "indicates", "source_ref": "indicator--08501195-1dc6-41ec-9173-6e0c9d6e91ac", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a0ebb6-f250-42b9-ab1f-e557b283deb4", "created": "2026-01-27T05:13:01.383381Z", "modified": "2026-01-27T05:13:01.383381Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6F1FDA1889463BFA646A950E49E121B7829A884D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.383381Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c757463-9a8e-4c5c-856f-3d5f6385909e", "created": "2026-01-27T05:13:01.384178Z", "modified": "2026-01-27T05:13:01.384178Z", "relationship_type": "indicates", "source_ref": "indicator--74a0ebb6-f250-42b9-ab1f-e557b283deb4", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c6ac58-dcea-4bbb-9383-350b9a64684b", "created": "2026-01-27T05:13:01.384354Z", "modified": "2026-01-27T05:13:01.384354Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5051413BB7C4931F5CD25260FFF173739CBE0F3A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.384354Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3390bd6-a2b1-458b-a6e1-aba6af60a72d", "created": "2026-01-27T05:13:01.385135Z", "modified": "2026-01-27T05:13:01.385135Z", "relationship_type": "indicates", "source_ref": "indicator--a1c6ac58-dcea-4bbb-9383-350b9a64684b", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a9939d-c1a2-4ba3-acf8-24975818501d", "created": "2026-01-27T05:13:01.385308Z", "modified": "2026-01-27T05:13:01.385308Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4140120093B5655CF559B2A786269CF3F82E3AE9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.385308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e228bd90-7a7d-4685-ac78-dd8b83458c29", "created": "2026-01-27T05:13:01.386129Z", "modified": "2026-01-27T05:13:01.386129Z", "relationship_type": "indicates", "source_ref": "indicator--23a9939d-c1a2-4ba3-acf8-24975818501d", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170ed131-382f-4470-b799-7fc14602e69b", "created": "2026-01-27T05:13:01.386305Z", "modified": "2026-01-27T05:13:01.386305Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7A55C057800823F710BF32A7D9865B300777E2D5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.386305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1da4f346-a7b7-42c3-ab21-0014f2450a26", "created": "2026-01-27T05:13:01.387218Z", "modified": "2026-01-27T05:13:01.387218Z", "relationship_type": "indicates", "source_ref": "indicator--170ed131-382f-4470-b799-7fc14602e69b", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83d8ed9-9e69-4cb1-9194-1d9b2611ce54", "created": "2026-01-27T05:13:01.387394Z", "modified": "2026-01-27T05:13:01.387394Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FEEF07EA18BA2EF7B75AD311F45A45AB4C1E8F0E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.387394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a84a3e9b-eae0-4462-97ed-3ebaa7eae5fe", "created": "2026-01-27T05:13:01.388177Z", "modified": "2026-01-27T05:13:01.388177Z", "relationship_type": "indicates", "source_ref": "indicator--f83d8ed9-9e69-4cb1-9194-1d9b2611ce54", "target_ref": "malware--be2336a4-4c59-495f-9f12-ad48ea702061"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010", "created": "2026-01-27T05:13:01.388352Z", "modified": "2026-01-27T05:13:01.388352Z", "name": "KidsShield", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7bcb10-0834-4245-baef-73e76f0f0b7d", "created": "2026-01-27T05:13:01.388526Z", "modified": "2026-01-27T05:13:01.388526Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apprtc.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.388526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14d44a8c-d598-4c01-b5a6-e592c38c6cc7", "created": "2026-01-27T05:13:01.389217Z", "modified": "2026-01-27T05:13:01.389217Z", "relationship_type": "indicates", "source_ref": "indicator--0a7bcb10-0834-4245-baef-73e76f0f0b7d", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a12760-7515-4fb1-bf43-1aebe70dca1e", "created": "2026-01-27T05:13:01.389392Z", "modified": "2026-01-27T05:13:01.389392Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d.tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.389392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3aaf88f-1855-43a0-b017-30a519678513", "created": "2026-01-27T05:13:01.390063Z", "modified": "2026-01-27T05:13:01.390063Z", "relationship_type": "indicates", "source_ref": "indicator--45a12760-7515-4fb1-bf43-1aebe70dca1e", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f62d52f-ba1b-4319-8079-779acb50b8dc", "created": "2026-01-27T05:13:01.390237Z", "modified": "2026-01-27T05:13:01.390237Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.390237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb68be4f-c960-4cd1-9f9c-c78e7e77c5b2", "created": "2026-01-27T05:13:01.390929Z", "modified": "2026-01-27T05:13:01.390929Z", "relationship_type": "indicates", "source_ref": "indicator--3f62d52f-ba1b-4319-8079-779acb50b8dc", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6598e3-9412-426c-ae8c-f099dc4311cd", "created": "2026-01-27T05:13:01.391103Z", "modified": "2026-01-27T05:13:01.391103Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsshield.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.391103Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23be3b04-3826-4b3c-b9da-1db791bf77f1", "created": "2026-01-27T05:13:01.391786Z", "modified": "2026-01-27T05:13:01.391786Z", "relationship_type": "indicates", "source_ref": "indicator--2b6598e3-9412-426c-ae8c-f099dc4311cd", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6108a2d-ff2e-4ebe-b973-2dedb441102e", "created": "2026-01-27T05:13:01.391959Z", "modified": "2026-01-27T05:13:01.391959Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.quanly24h.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.391959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b0a6d5aa-fd83-4880-b380-6d51e4f9c557", "created": "2026-01-27T05:13:01.392625Z", "modified": "2026-01-27T05:13:01.392625Z", "relationship_type": "indicates", "source_ref": "indicator--a6108a2d-ff2e-4ebe-b973-2dedb441102e", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c4650f-ac86-4ba0-91d7-bf63e11291ba", "created": "2026-01-27T05:13:01.392817Z", "modified": "2026-01-27T05:13:01.392817Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.backupsoft.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.392817Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11cac082-3f3c-45cb-9815-10508e1490e8", "created": "2026-01-27T05:13:01.393494Z", "modified": "2026-01-27T05:13:01.393494Z", "relationship_type": "indicates", "source_ref": "indicator--b2c4650f-ac86-4ba0-91d7-bf63e11291ba", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abcece8-3976-46eb-be83-ec6805005a1b", "created": "2026-01-27T05:13:01.393665Z", "modified": "2026-01-27T05:13:01.393665Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.393665Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066a6f79-5a03-438e-a972-03a4dabd720a", "created": "2026-01-27T05:13:01.39435Z", "modified": "2026-01-27T05:13:01.39435Z", "relationship_type": "indicates", "source_ref": "indicator--5abcece8-3976-46eb-be83-ec6805005a1b", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7f8dde-b7c0-4617-9a12-c31e29010c30", "created": "2026-01-27T05:13:01.394521Z", "modified": "2026-01-27T05:13:01.394521Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.394521Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e5d8a59-ee8f-4004-84c6-8c667d2fb9c8", "created": "2026-01-27T05:13:01.395557Z", "modified": "2026-01-27T05:13:01.395557Z", "relationship_type": "indicates", "source_ref": "indicator--2b7f8dde-b7c0-4617-9a12-c31e29010c30", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4ea27b-0d22-4cb7-8603-e0a994bbf551", "created": "2026-01-27T05:13:01.395736Z", "modified": "2026-01-27T05:13:01.395736Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.viptelefonprogrami.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.395736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aef2034e-2370-4602-b5c5-97b4c6ca7953", "created": "2026-01-27T05:13:01.396438Z", "modified": "2026-01-27T05:13:01.396438Z", "relationship_type": "indicates", "source_ref": "indicator--8b4ea27b-0d22-4cb7-8603-e0a994bbf551", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7418c118-f31d-48b3-9e04-b68e823190a9", "created": "2026-01-27T05:13:01.396611Z", "modified": "2026-01-27T05:13:01.396611Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='quanly24h.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.396611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ab75a99-e561-4186-9dbe-c1fd4086b11c", "created": "2026-01-27T05:13:01.397302Z", "modified": "2026-01-27T05:13:01.397302Z", "relationship_type": "indicates", "source_ref": "indicator--7418c118-f31d-48b3-9e04-b68e823190a9", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bbf69f-f418-4077-8d55-27c0b51231de", "created": "2026-01-27T05:13:01.397474Z", "modified": "2026-01-27T05:13:01.397474Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyt.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.397474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--160fc4b6-de3e-46b4-a227-0b71400e6383", "created": "2026-01-27T05:13:01.398144Z", "modified": "2026-01-27T05:13:01.398144Z", "relationship_type": "indicates", "source_ref": "indicator--35bbf69f-f418-4077-8d55-27c0b51231de", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536d9afd-ccb9-44c8-826c-e8eadfff7d3c", "created": "2026-01-27T05:13:01.398321Z", "modified": "2026-01-27T05:13:01.398321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytrac-app1.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.398321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6876134-d441-41c1-be94-f0272707581d", "created": "2026-01-27T05:13:01.399025Z", "modified": "2026-01-27T05:13:01.399025Z", "relationship_type": "indicates", "source_ref": "indicator--536d9afd-ccb9-44c8-826c-e8eadfff7d3c", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c06375-0d57-43e5-8fbf-4b382e9d3d2c", "created": "2026-01-27T05:13:01.399198Z", "modified": "2026-01-27T05:13:01.399198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='theodoi24h.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.399198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6208b1b-f46b-4717-98c7-2fe369d20749", "created": "2026-01-27T05:13:01.399876Z", "modified": "2026-01-27T05:13:01.399876Z", "relationship_type": "indicates", "source_ref": "indicator--a9c06375-0d57-43e5-8fbf-4b382e9d3d2c", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bf3296-129c-49e2-881d-e4159e4bc55a", "created": "2026-01-27T05:13:01.400051Z", "modified": "2026-01-27T05:13:01.400051Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.400051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d01ae03a-1d1a-419c-a71d-1602fac5e35f", "created": "2026-01-27T05:13:01.400707Z", "modified": "2026-01-27T05:13:01.400707Z", "relationship_type": "indicates", "source_ref": "indicator--61bf3296-129c-49e2-881d-e4159e4bc55a", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc014d-fa25-4fd8-9804-e8cd5795b799", "created": "2026-01-27T05:13:01.400897Z", "modified": "2026-01-27T05:13:01.400897Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.400897Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ffb5aea0-0da8-428a-ad02-7c49b062ba40", "created": "2026-01-27T05:13:01.40155Z", "modified": "2026-01-27T05:13:01.40155Z", "relationship_type": "indicates", "source_ref": "indicator--ddfc014d-fa25-4fd8-9804-e8cd5795b799", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90399d70-2f1f-4b82-8818-d30e13324a52", "created": "2026-01-27T05:13:01.40172Z", "modified": "2026-01-27T05:13:01.40172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptelefonprogrami.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.40172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbef6a8d-f11e-4926-b2d9-d9ed1e98cb29", "created": "2026-01-27T05:13:01.402427Z", "modified": "2026-01-27T05:13:01.402427Z", "relationship_type": "indicates", "source_ref": "indicator--90399d70-2f1f-4b82-8818-d30e13324a52", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9335977-1d21-4a3e-94c7-999a262e8829", "created": "2026-01-27T05:13:01.40263Z", "modified": "2026-01-27T05:13:01.40263Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='backupsoft.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.40263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8e60d3e-7589-4b37-afa1-c3289cd6aebe", "created": "2026-01-27T05:13:01.403311Z", "modified": "2026-01-27T05:13:01.403311Z", "relationship_type": "indicates", "source_ref": "indicator--b9335977-1d21-4a3e-94c7-999a262e8829", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8593274d-09a2-488c-b6da-0426cebbbc76", "created": "2026-01-27T05:13:01.403486Z", "modified": "2026-01-27T05:13:01.403486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.403486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92f6afe9-f9be-4ed2-b5b7-3d7a4bbcad8a", "created": "2026-01-27T05:13:01.40428Z", "modified": "2026-01-27T05:13:01.40428Z", "relationship_type": "indicates", "source_ref": "indicator--8593274d-09a2-488c-b6da-0426cebbbc76", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbdffa6-96a8-462f-ab70-df6144ad1286", "created": "2026-01-27T05:13:01.404458Z", "modified": "2026-01-27T05:13:01.404458Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidlogger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.404458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d497b79-5b90-4712-9977-9a765df9f373", "created": "2026-01-27T05:13:01.405143Z", "modified": "2026-01-27T05:13:01.405143Z", "relationship_type": "indicates", "source_ref": "indicator--bfbdffa6-96a8-462f-ab70-df6144ad1286", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5415d165-ce00-4b50-bd8e-809abb2f3abc", "created": "2026-01-27T05:13:01.405321Z", "modified": "2026-01-27T05:13:01.405321Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsshield.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.405321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e88f2bd-0c76-4b42-9548-66ab293b1d06", "created": "2026-01-27T05:13:01.406006Z", "modified": "2026-01-27T05:13:01.406006Z", "relationship_type": "indicates", "source_ref": "indicator--5415d165-ce00-4b50-bd8e-809abb2f3abc", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618b6212-5a2e-44f6-a983-6e743d696f09", "created": "2026-01-27T05:13:01.40618Z", "modified": "2026-01-27T05:13:01.40618Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitorminor.com.tr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.40618Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cd91cf3-5aa8-483f-ac92-3f1e1d628645", "created": "2026-01-27T05:13:01.406859Z", "modified": "2026-01-27T05:13:01.406859Z", "relationship_type": "indicates", "source_ref": "indicator--618b6212-5a2e-44f6-a983-6e743d696f09", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5015f933-b930-4d2e-8f5c-078c2a053af7", "created": "2026-01-27T05:13:01.407032Z", "modified": "2026-01-27T05:13:01.407032Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.freespyapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.407032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6ef45a-178f-41cd-86ff-894527653476", "created": "2026-01-27T05:13:01.40769Z", "modified": "2026-01-27T05:13:01.40769Z", "relationship_type": "indicates", "source_ref": "indicator--5015f933-b930-4d2e-8f5c-078c2a053af7", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468b7b75-585b-4526-b628-69546e704c88", "created": "2026-01-27T05:13:01.40788Z", "modified": "2026-01-27T05:13:01.40788Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.40788Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09b1a495-0471-4da4-b64a-c7f8d5a97abd", "created": "2026-01-27T05:13:01.408547Z", "modified": "2026-01-27T05:13:01.408547Z", "relationship_type": "indicates", "source_ref": "indicator--468b7b75-585b-4526-b628-69546e704c88", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169f05dd-bf2a-45ef-8b36-78bc07f161e8", "created": "2026-01-27T05:13:01.408721Z", "modified": "2026-01-27T05:13:01.408721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.408721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dee81fd2-2bab-4749-9388-0868318b752f", "created": "2026-01-27T05:13:01.409396Z", "modified": "2026-01-27T05:13:01.409396Z", "relationship_type": "indicates", "source_ref": "indicator--169f05dd-bf2a-45ef-8b36-78bc07f161e8", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f90fb8d-a8a7-4190-b529-9030a7b83780", "created": "2026-01-27T05:13:01.409567Z", "modified": "2026-01-27T05:13:01.409567Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytrac.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.409567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09c09f9a-a7a8-4d0a-a68f-b7ca0fc094f8", "created": "2026-01-27T05:13:01.410239Z", "modified": "2026-01-27T05:13:01.410239Z", "relationship_type": "indicates", "source_ref": "indicator--6f90fb8d-a8a7-4190-b529-9030a7b83780", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ee142-2240-4b76-9e7f-ca7c3b9a0c73", "created": "2026-01-27T05:13:01.410412Z", "modified": "2026-01-27T05:13:01.410412Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='techinnovative.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.410412Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9881d1e-39b4-4884-911a-63c2ce5e812b", "created": "2026-01-27T05:13:01.411109Z", "modified": "2026-01-27T05:13:01.411109Z", "relationship_type": "indicates", "source_ref": "indicator--862ee142-2240-4b76-9e7f-ca7c3b9a0c73", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8a0ee5-8fb2-4e5d-8b3e-9602c0feed76", "created": "2026-01-27T05:13:01.411283Z", "modified": "2026-01-27T05:13:01.411283Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tifamily.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.411283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8508708-5d93-48c3-9aaf-9a4e3640acc1", "created": "2026-01-27T05:13:01.4121Z", "modified": "2026-01-27T05:13:01.4121Z", "relationship_type": "indicates", "source_ref": "indicator--4e8a0ee5-8fb2-4e5d-8b3e-9602c0feed76", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa49d054-ee63-49a2-9387-74250b91a203", "created": "2026-01-27T05:13:01.412281Z", "modified": "2026-01-27T05:13:01.412281Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.412281Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe382c05-170d-4132-b0a9-9bb761ca5918", "created": "2026-01-27T05:13:01.412957Z", "modified": "2026-01-27T05:13:01.412957Z", "relationship_type": "indicates", "source_ref": "indicator--fa49d054-ee63-49a2-9387-74250b91a203", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cb1e1e-e4bf-4af0-8c23-af9438fd24fc", "created": "2026-01-27T05:13:01.413137Z", "modified": "2026-01-27T05:13:01.413137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tracerspy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.413137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--baee4b6f-dc51-4dd2-8f3c-39fb16d061bc", "created": "2026-01-27T05:13:01.413821Z", "modified": "2026-01-27T05:13:01.413821Z", "relationship_type": "indicates", "source_ref": "indicator--c5cb1e1e-e4bf-4af0-8c23-af9438fd24fc", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dadc2fc5-7bf3-4a66-980f-5a48a3384522", "created": "2026-01-27T05:13:01.413998Z", "modified": "2026-01-27T05:13:01.413998Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.tispy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.413998Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--868d9fd9-4feb-48a1-99a8-b8529d737658", "created": "2026-01-27T05:13:01.414661Z", "modified": "2026-01-27T05:13:01.414661Z", "relationship_type": "indicates", "source_ref": "indicator--dadc2fc5-7bf3-4a66-980f-5a48a3384522", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2327f2a-c2f7-4954-9950-5dc21d08c9d8", "created": "2026-01-27T05:13:01.414852Z", "modified": "2026-01-27T05:13:01.414852Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='viptelefonprogrami.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.414852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c94ba8ac-b84e-40d7-b743-7c677c8f8680", "created": "2026-01-27T05:13:01.415523Z", "modified": "2026-01-27T05:13:01.415523Z", "relationship_type": "indicates", "source_ref": "indicator--c2327f2a-c2f7-4954-9950-5dc21d08c9d8", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb20193-233a-4b30-8696-b68337880fc7", "created": "2026-01-27T05:13:01.415696Z", "modified": "2026-01-27T05:13:01.415696Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.kidlogger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.415696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89ec6b8a-4058-4e16-830d-3b66e19255d9", "created": "2026-01-27T05:13:01.416384Z", "modified": "2026-01-27T05:13:01.416384Z", "relationship_type": "indicates", "source_ref": "indicator--deb20193-233a-4b30-8696-b68337880fc7", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d70b4b-7f32-4ecb-9bd6-fb56f46bbc0e", "created": "2026-01-27T05:13:01.416557Z", "modified": "2026-01-27T05:13:01.416557Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.selfspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.416557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9451ca49-4dae-4e75-9275-324ae353598b", "created": "2026-01-27T05:13:01.417243Z", "modified": "2026-01-27T05:13:01.417243Z", "relationship_type": "indicates", "source_ref": "indicator--68d70b4b-7f32-4ecb-9bd6-fb56f46bbc0e", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b915e67a-5089-45eb-b73a-c576f9f721c2", "created": "2026-01-27T05:13:01.417417Z", "modified": "2026-01-27T05:13:01.417417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.tispy.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.417417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49fbd136-7774-4c5d-9679-b7aeb9ab10d6", "created": "2026-01-27T05:13:01.418092Z", "modified": "2026-01-27T05:13:01.418092Z", "relationship_type": "indicates", "source_ref": "indicator--b915e67a-5089-45eb-b73a-c576f9f721c2", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a616689-5396-4eb6-8997-095be38040f8", "created": "2026-01-27T05:13:01.418269Z", "modified": "2026-01-27T05:13:01.418269Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyt.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.418269Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ecc5f2a-1941-4048-ab8f-0c272f4aa169", "created": "2026-01-27T05:13:01.418979Z", "modified": "2026-01-27T05:13:01.418979Z", "relationship_type": "indicates", "source_ref": "indicator--4a616689-5396-4eb6-8997-095be38040f8", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d71f873-d093-4969-9081-f4f7bf8b5813", "created": "2026-01-27T05:13:01.419153Z", "modified": "2026-01-27T05:13:01.419153Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsshield.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.419153Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35456798-609e-4028-a5d7-3ff1743db76d", "created": "2026-01-27T05:13:01.419942Z", "modified": "2026-01-27T05:13:01.419942Z", "relationship_type": "indicates", "source_ref": "indicator--6d71f873-d093-4969-9081-f4f7bf8b5813", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fefeae1-925d-4c48-846c-fd7d85d59061", "created": "2026-01-27T05:13:01.420121Z", "modified": "2026-01-27T05:13:01.420121Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c77e0e7ebcc9ee4e2869de81b711fd1531f5c2e59ca63d5a31180d6b8867c83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.420121Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7a8cd50c-5133-48e6-973c-c8e6caf5e5ef", "created": "2026-01-27T05:13:01.420974Z", "modified": "2026-01-27T05:13:01.420974Z", "relationship_type": "indicates", "source_ref": "indicator--7fefeae1-925d-4c48-846c-fd7d85d59061", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dd1cac-6bb9-4764-8a33-1d5b47872eb6", "created": "2026-01-27T05:13:01.421154Z", "modified": "2026-01-27T05:13:01.421154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6036c7a66bfc662470d6cf33890a4b8921fa0cb373dedb398c11b7ebe4d35d46']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.421154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4dfe33a5-e809-4222-a515-43c497f7a240", "created": "2026-01-27T05:13:01.421995Z", "modified": "2026-01-27T05:13:01.421995Z", "relationship_type": "indicates", "source_ref": "indicator--21dd1cac-6bb9-4764-8a33-1d5b47872eb6", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97717597-afaa-47fd-8c79-6f4d422037a8", "created": "2026-01-27T05:13:01.422172Z", "modified": "2026-01-27T05:13:01.422172Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4329a83ac3ee06380b6e938561b66ec344aa7f2f10184732086324a60096de3f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.422172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07954cff-cff0-4c1f-afe2-56d0cad83e41", "created": "2026-01-27T05:13:01.423035Z", "modified": "2026-01-27T05:13:01.423035Z", "relationship_type": "indicates", "source_ref": "indicator--97717597-afaa-47fd-8c79-6f4d422037a8", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d86aeb5-85c1-456a-85c6-f39403cf1358", "created": "2026-01-27T05:13:01.423214Z", "modified": "2026-01-27T05:13:01.423214Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d8befa2d86f456dcaea8e14ed3d3d84fb3f523eb1168530660027be6bbc516f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.423214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d562c7e-0752-425c-8f43-4fbe04dbf513", "created": "2026-01-27T05:13:01.424079Z", "modified": "2026-01-27T05:13:01.424079Z", "relationship_type": "indicates", "source_ref": "indicator--6d86aeb5-85c1-456a-85c6-f39403cf1358", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabe67ad-59dd-4f38-91f6-78ab518ff686", "created": "2026-01-27T05:13:01.424257Z", "modified": "2026-01-27T05:13:01.424257Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42c8b1ecc6d2928cff2206c1a7d5ab6360767ea8d75aa5dc837f9c58cf81e38c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.424257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8891d325-c67a-4933-be3a-d0e4ce284697", "created": "2026-01-27T05:13:01.425096Z", "modified": "2026-01-27T05:13:01.425096Z", "relationship_type": "indicates", "source_ref": "indicator--aabe67ad-59dd-4f38-91f6-78ab518ff686", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b954a9b2-8749-4c54-be93-b809fc5071f8", "created": "2026-01-27T05:13:01.425287Z", "modified": "2026-01-27T05:13:01.425287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='020d95aff3bbdc311a4b7301aab866de1be4aed53b67bfd73c1dfed9503dbc3a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.425287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08887316-903c-4e86-801e-f4f83daafaa8", "created": "2026-01-27T05:13:01.426133Z", "modified": "2026-01-27T05:13:01.426133Z", "relationship_type": "indicates", "source_ref": "indicator--b954a9b2-8749-4c54-be93-b809fc5071f8", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e455a65-1389-46bd-886f-9879d341fdfe", "created": "2026-01-27T05:13:01.426307Z", "modified": "2026-01-27T05:13:01.426307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='21bd09751a26551ada2579be19ad3d935897a7496a61d2aa9a3e0d8f746e0bfb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.426307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--081bd6fb-fd40-482d-b52c-8b6e4bf7ed95", "created": "2026-01-27T05:13:01.427154Z", "modified": "2026-01-27T05:13:01.427154Z", "relationship_type": "indicates", "source_ref": "indicator--8e455a65-1389-46bd-886f-9879d341fdfe", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c389b0-494b-4afa-a67c-7baeddecedc2", "created": "2026-01-27T05:13:01.427345Z", "modified": "2026-01-27T05:13:01.427345Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='db0d35258209a923bdc690786d0833c1498723a87dab94ec2ba3e7147de073a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.427345Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8593af2e-7c4e-4064-9628-5b899b729494", "created": "2026-01-27T05:13:01.428187Z", "modified": "2026-01-27T05:13:01.428187Z", "relationship_type": "indicates", "source_ref": "indicator--05c389b0-494b-4afa-a67c-7baeddecedc2", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda28a1e-e33d-443d-bdbb-9f0365b94c48", "created": "2026-01-27T05:13:01.428363Z", "modified": "2026-01-27T05:13:01.428363Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f0d800da07e8fe628e28b428cf07910dfc4975e76d6120e7eab3ae0ca77d178e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.428363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e5ddd75-f52e-40fd-9394-5c3ec26cba8e", "created": "2026-01-27T05:13:01.429324Z", "modified": "2026-01-27T05:13:01.429324Z", "relationship_type": "indicates", "source_ref": "indicator--cda28a1e-e33d-443d-bdbb-9f0365b94c48", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95855a9a-9387-44cd-aaa1-be3eda35d3f0", "created": "2026-01-27T05:13:01.429518Z", "modified": "2026-01-27T05:13:01.429518Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7734bef11d2f3e168d5333671b6db69a8caea54eee2843a1b885f37b3aa80fe3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.429518Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d050f9ce-34e6-46d3-8d3a-b14195ba7ecc", "created": "2026-01-27T05:13:01.430357Z", "modified": "2026-01-27T05:13:01.430357Z", "relationship_type": "indicates", "source_ref": "indicator--95855a9a-9387-44cd-aaa1-be3eda35d3f0", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54987cb0-e623-48e5-934c-fbc15b4f2ee9", "created": "2026-01-27T05:13:01.430533Z", "modified": "2026-01-27T05:13:01.430533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3540915b4d51619ac361012d1dc9065da85d713adc14bd9ce82bf92a16921c83']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.430533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae1e94a1-6bbf-496b-9a81-3f1c11eff9fb", "created": "2026-01-27T05:13:01.431362Z", "modified": "2026-01-27T05:13:01.431362Z", "relationship_type": "indicates", "source_ref": "indicator--54987cb0-e623-48e5-934c-fbc15b4f2ee9", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61668e43-f5ad-4056-90b0-cbc7ae32ae72", "created": "2026-01-27T05:13:01.431543Z", "modified": "2026-01-27T05:13:01.431543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='260fd6458a4bef8c2a6075e70cedd745500cb08e249596f69499c6d8062d30fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.431543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fac2193-49f4-4c5d-83e4-5458905e70dc", "created": "2026-01-27T05:13:01.432378Z", "modified": "2026-01-27T05:13:01.432378Z", "relationship_type": "indicates", "source_ref": "indicator--61668e43-f5ad-4056-90b0-cbc7ae32ae72", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344522ba-7384-4a40-8058-0ddcdeac16b8", "created": "2026-01-27T05:13:01.432554Z", "modified": "2026-01-27T05:13:01.432554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='352070d3b4149fb4b28b030acfd60da0d143650eb643fd58ff12ddfc904f23c8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.432554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e26994d-769d-45b8-b5f8-c695139356e2", "created": "2026-01-27T05:13:01.433389Z", "modified": "2026-01-27T05:13:01.433389Z", "relationship_type": "indicates", "source_ref": "indicator--344522ba-7384-4a40-8058-0ddcdeac16b8", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d388aa6-d1f7-45b8-8cea-7a0e0999679a", "created": "2026-01-27T05:13:01.433567Z", "modified": "2026-01-27T05:13:01.433567Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.protect']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.433567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39f4477c-9b33-487b-a4f8-d11a1566c749", "created": "2026-01-27T05:13:01.434228Z", "modified": "2026-01-27T05:13:01.434228Z", "relationship_type": "indicates", "source_ref": "indicator--7d388aa6-d1f7-45b8-8cea-7a0e0999679a", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6044fb1-2d50-491a-89a9-5105cfe6c55e", "created": "2026-01-27T05:13:01.434407Z", "modified": "2026-01-27T05:13:01.434407Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.aixlunro.uqfhkagb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.434407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49a57f01-3ca5-4d19-92e2-435a0f034dfd", "created": "2026-01-27T05:13:01.435106Z", "modified": "2026-01-27T05:13:01.435106Z", "relationship_type": "indicates", "source_ref": "indicator--c6044fb1-2d50-491a-89a9-5105cfe6c55e", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85cdc3a-71a8-48ac-98de-3c76455ffd7c", "created": "2026-01-27T05:13:01.435285Z", "modified": "2026-01-27T05:13:01.435285Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bzbqbkya.hgozttiu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.435285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b51f40f-35e2-4a05-b72f-eb835708c916", "created": "2026-01-27T05:13:01.435977Z", "modified": "2026-01-27T05:13:01.435977Z", "relationship_type": "indicates", "source_ref": "indicator--f85cdc3a-71a8-48ac-98de-3c76455ffd7c", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca712d3-285d-48f0-b779-e8ea91b3eee5", "created": "2026-01-27T05:13:01.436158Z", "modified": "2026-01-27T05:13:01.436158Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gzomoyig.qwgawtaz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.436158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7c0d1449-3935-4f2b-881a-c2b1eb3e6478", "created": "2026-01-27T05:13:01.436837Z", "modified": "2026-01-27T05:13:01.436837Z", "relationship_type": "indicates", "source_ref": "indicator--3ca712d3-285d-48f0-b779-e8ea91b3eee5", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357e9c51-9340-48b8-bc2a-5e8913df9d41", "created": "2026-01-27T05:13:01.437023Z", "modified": "2026-01-27T05:13:01.437023Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.inputmethod.latinmy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.437023Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce9a8786-45f9-4054-b547-ed0cf38cbb53", "created": "2026-01-27T05:13:01.437837Z", "modified": "2026-01-27T05:13:01.437837Z", "relationship_type": "indicates", "source_ref": "indicator--357e9c51-9340-48b8-bc2a-5e8913df9d41", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedb4975-0908-4e00-a17a-9c398a570d44", "created": "2026-01-27T05:13:01.438015Z", "modified": "2026-01-27T05:13:01.438015Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ntckdlhc.oifhnjwp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.438015Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe1bda4b-9e4a-41ca-9d9b-b4894e8ee695", "created": "2026-01-27T05:13:01.438662Z", "modified": "2026-01-27T05:13:01.438662Z", "relationship_type": "indicates", "source_ref": "indicator--cedb4975-0908-4e00-a17a-9c398a570d44", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2ab8c6-578b-422f-971f-a82f0788a6a3", "created": "2026-01-27T05:13:01.438854Z", "modified": "2026-01-27T05:13:01.438854Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.selgdg.febgdsra']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.438854Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c00ffe9-6c8e-4db2-8f87-f7ba358d53e2", "created": "2026-01-27T05:13:01.439502Z", "modified": "2026-01-27T05:13:01.439502Z", "relationship_type": "indicates", "source_ref": "indicator--6d2ab8c6-578b-422f-971f-a82f0788a6a3", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36e93f0-5ba7-4c15-8135-a21af09f730f", "created": "2026-01-27T05:13:01.439674Z", "modified": "2026-01-27T05:13:01.439674Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.selgdg.mardsdaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.439674Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--005eab4d-84e5-4016-bda9-cfc028e06e7f", "created": "2026-01-27T05:13:01.440342Z", "modified": "2026-01-27T05:13:01.440342Z", "relationship_type": "indicates", "source_ref": "indicator--d36e93f0-5ba7-4c15-8135-a21af09f730f", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31276b4d-bb63-4a94-aae3-34ef19f7a4e0", "created": "2026-01-27T05:13:01.440515Z", "modified": "2026-01-27T05:13:01.440515Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sepfsp.jasend']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.440515Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80cc9736-b1dc-440f-998f-0f9138bb1713", "created": "2026-01-27T05:13:01.441182Z", "modified": "2026-01-27T05:13:01.441182Z", "relationship_type": "indicates", "source_ref": "indicator--31276b4d-bb63-4a94-aae3-34ef19f7a4e0", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d27be4-5e92-4b59-94bf-f669dde3adce", "created": "2026-01-27T05:13:01.441357Z", "modified": "2026-01-27T05:13:01.441357Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.bnahrrbc.kwexsnhl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.441357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--67725c70-bf08-4f73-9cc4-f9af75ee0134", "created": "2026-01-27T05:13:01.442023Z", "modified": "2026-01-27T05:13:01.442023Z", "relationship_type": "indicates", "source_ref": "indicator--85d27be4-5e92-4b59-94bf-f669dde3adce", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dfcb2e-c757-467c-9350-482bad6d386a", "created": "2026-01-27T05:13:01.442199Z", "modified": "2026-01-27T05:13:01.442199Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tbntxear.vfmkjxme']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.442199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e065d14a-c920-4422-b8b0-4cf942f2cc62", "created": "2026-01-27T05:13:01.442883Z", "modified": "2026-01-27T05:13:01.442883Z", "relationship_type": "indicates", "source_ref": "indicator--19dfcb2e-c757-467c-9350-482bad6d386a", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bc71c1-446e-460f-9f10-032a5726301a", "created": "2026-01-27T05:13:01.443058Z", "modified": "2026-01-27T05:13:01.443058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fbhpdsej.gnuebduy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.443058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9f64cba-a0de-4dfe-a037-b55606cc5220", "created": "2026-01-27T05:13:01.443736Z", "modified": "2026-01-27T05:13:01.443736Z", "relationship_type": "indicates", "source_ref": "indicator--a2bc71c1-446e-460f-9f10-032a5726301a", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb36538-ed18-4b89-9610-212dece76c32", "created": "2026-01-27T05:13:01.443927Z", "modified": "2026-01-27T05:13:01.443927Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.uxgbipup.pdtvcgzc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.443927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f832454-f099-4a97-bf81-6c2279e14c1f", "created": "2026-01-27T05:13:01.444582Z", "modified": "2026-01-27T05:13:01.444582Z", "relationship_type": "indicates", "source_ref": "indicator--ddb36538-ed18-4b89-9610-212dece76c32", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93333ba8-2ada-4e76-9e46-2f22da223810", "created": "2026-01-27T05:13:01.444772Z", "modified": "2026-01-27T05:13:01.444772Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.uzoifhzk.qmqnpwaf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.444772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--231b586b-dee0-425d-8e09-984082a36cee", "created": "2026-01-27T05:13:01.445542Z", "modified": "2026-01-27T05:13:01.445542Z", "relationship_type": "indicates", "source_ref": "indicator--93333ba8-2ada-4e76-9e46-2f22da223810", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70e86fa-0842-433c-a0c7-dc146095cc80", "created": "2026-01-27T05:13:01.445719Z", "modified": "2026-01-27T05:13:01.445719Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.zkftwsel.fqnoquuv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.445719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c403d94c-32aa-4d9d-a2f3-395f9b3363d0", "created": "2026-01-27T05:13:01.446391Z", "modified": "2026-01-27T05:13:01.446391Z", "relationship_type": "indicates", "source_ref": "indicator--e70e86fa-0842-433c-a0c7-dc146095cc80", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cf75ee-d864-4b0f-ba15-dc06b88d6a1c", "created": "2026-01-27T05:13:01.446569Z", "modified": "2026-01-27T05:13:01.446569Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mnwkvijy.wzyxgrft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.446569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f516aa0-bc10-471a-9a83-ce8d3ef8e710", "created": "2026-01-27T05:13:01.447234Z", "modified": "2026-01-27T05:13:01.447234Z", "relationship_type": "indicates", "source_ref": "indicator--24cf75ee-d864-4b0f-ba15-dc06b88d6a1c", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268b874a-26a8-45d5-8950-18deb7c35b4d", "created": "2026-01-27T05:13:01.447408Z", "modified": "2026-01-27T05:13:01.447408Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.kidlogger.kidlogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.447408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f89813dc-2309-4423-a893-e99edf12acda", "created": "2026-01-27T05:13:01.448079Z", "modified": "2026-01-27T05:13:01.448079Z", "relationship_type": "indicates", "source_ref": "indicator--268b874a-26a8-45d5-8950-18deb7c35b4d", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e4035c-f030-4e89-b66e-fbc6919e64b3", "created": "2026-01-27T05:13:01.448254Z", "modified": "2026-01-27T05:13:01.448254Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.teslineservice.kidl5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.448254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86809798-d033-49ea-95c5-02fe07e29030", "created": "2026-01-27T05:13:01.448937Z", "modified": "2026-01-27T05:13:01.448937Z", "relationship_type": "indicates", "source_ref": "indicator--10e4035c-f030-4e89-b66e-fbc6919e64b3", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd2e40d-18f8-4c98-9a81-d55612d563f9", "created": "2026-01-27T05:13:01.449117Z", "modified": "2026-01-27T05:13:01.449117Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.someapp1.somecorp2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.449117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--377d31c4-d2b6-4877-b6b2-e06a510b081e", "created": "2026-01-27T05:13:01.449786Z", "modified": "2026-01-27T05:13:01.449786Z", "relationship_type": "indicates", "source_ref": "indicator--2dd2e40d-18f8-4c98-9a81-d55612d563f9", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eae78b6-8484-4fd4-af84-c5989dada2e4", "created": "2026-01-27T05:13:01.449978Z", "modified": "2026-01-27T05:13:01.449978Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fhekpqbq.otlzonjx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.449978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11cdf31b-f66f-447c-adad-5067f68560d4", "created": "2026-01-27T05:13:01.450644Z", "modified": "2026-01-27T05:13:01.450644Z", "relationship_type": "indicates", "source_ref": "indicator--8eae78b6-8484-4fd4-af84-c5989dada2e4", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af16538-c3f9-4038-95c1-7abfa8787933", "created": "2026-01-27T05:13:01.45085Z", "modified": "2026-01-27T05:13:01.45085Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0D025A887A1546585D9BBA6F023F42B8BE0274E1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.45085Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--275e85e7-d878-4508-a73b-0eb7790ba004", "created": "2026-01-27T05:13:01.451639Z", "modified": "2026-01-27T05:13:01.451639Z", "relationship_type": "indicates", "source_ref": "indicator--1af16538-c3f9-4038-95c1-7abfa8787933", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1dc94d-0fb7-4357-9789-9995efdd2918", "created": "2026-01-27T05:13:01.451829Z", "modified": "2026-01-27T05:13:01.451829Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1A6D10E15280C6A938EED9BEF53A31DA0CEBA45A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.451829Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7e9252c-f86c-40df-b454-079112430ed3", "created": "2026-01-27T05:13:01.452593Z", "modified": "2026-01-27T05:13:01.452593Z", "relationship_type": "indicates", "source_ref": "indicator--5f1dc94d-0fb7-4357-9789-9995efdd2918", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efebb8b-f69c-45a8-a9e8-e181a96e0ec5", "created": "2026-01-27T05:13:01.452781Z", "modified": "2026-01-27T05:13:01.452781Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='272CD0BC357FA03AF87940644CB8FFDECD2FDDC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.452781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6823dd60-5f68-468f-81e3-1a0a3fbf70f1", "created": "2026-01-27T05:13:01.453674Z", "modified": "2026-01-27T05:13:01.453674Z", "relationship_type": "indicates", "source_ref": "indicator--7efebb8b-f69c-45a8-a9e8-e181a96e0ec5", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae48a0f4-fda8-4258-adc5-17fd2acb8db7", "created": "2026-01-27T05:13:01.453868Z", "modified": "2026-01-27T05:13:01.453868Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3397C095EAD93B13CC5B9979D1F3B4FAEF1D194C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.453868Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2088246-82e2-4aac-8f01-ff87e6e2e793", "created": "2026-01-27T05:13:01.454634Z", "modified": "2026-01-27T05:13:01.454634Z", "relationship_type": "indicates", "source_ref": "indicator--ae48a0f4-fda8-4258-adc5-17fd2acb8db7", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244931c2-7e6d-4bb6-8b13-ea74e632b76a", "created": "2026-01-27T05:13:01.454824Z", "modified": "2026-01-27T05:13:01.454824Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35D1DB3904A84793394FE5DF7B678E263B1B33A0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.454824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75220962-a148-4529-b494-2137a1afc2da", "created": "2026-01-27T05:13:01.455585Z", "modified": "2026-01-27T05:13:01.455585Z", "relationship_type": "indicates", "source_ref": "indicator--244931c2-7e6d-4bb6-8b13-ea74e632b76a", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f06163-8546-4049-bbd7-5a1d86cf9e94", "created": "2026-01-27T05:13:01.455771Z", "modified": "2026-01-27T05:13:01.455771Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5EF38D0143F601FD01AA39BFE9079E9927920208']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.455771Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc90257c-47ea-4537-a46a-99210265fab2", "created": "2026-01-27T05:13:01.456553Z", "modified": "2026-01-27T05:13:01.456553Z", "relationship_type": "indicates", "source_ref": "indicator--32f06163-8546-4049-bbd7-5a1d86cf9e94", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c7b812-0542-4ac6-ba97-7c5451fe223b", "created": "2026-01-27T05:13:01.456729Z", "modified": "2026-01-27T05:13:01.456729Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6CA8C06D7DAC5F5685E014AE5C4D2062F77B42D6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.456729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--769172ce-1e8f-45a5-b46e-86d4d1f21962", "created": "2026-01-27T05:13:01.457527Z", "modified": "2026-01-27T05:13:01.457527Z", "relationship_type": "indicates", "source_ref": "indicator--75c7b812-0542-4ac6-ba97-7c5451fe223b", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0ff83b-da13-4cfa-ab2b-a1cea83f7677", "created": "2026-01-27T05:13:01.457705Z", "modified": "2026-01-27T05:13:01.457705Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='789A24C1605F1BF2B6D64580C697BD38D9446A7E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.457705Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d60a2352-e214-44de-ab93-b07a2f18d5e1", "created": "2026-01-27T05:13:01.458497Z", "modified": "2026-01-27T05:13:01.458497Z", "relationship_type": "indicates", "source_ref": "indicator--fb0ff83b-da13-4cfa-ab2b-a1cea83f7677", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421d71d9-c53f-46cb-bb29-d03c522a1292", "created": "2026-01-27T05:13:01.458671Z", "modified": "2026-01-27T05:13:01.458671Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8AE2267AEEA0DBFF7D7CC1C82E54343B1B0CFA22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.458671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef520170-5d59-4980-943a-102df8beaefd", "created": "2026-01-27T05:13:01.459454Z", "modified": "2026-01-27T05:13:01.459454Z", "relationship_type": "indicates", "source_ref": "indicator--421d71d9-c53f-46cb-bb29-d03c522a1292", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678bfad5-4582-4dd9-b7e4-bfc5c119f5c1", "created": "2026-01-27T05:13:01.459625Z", "modified": "2026-01-27T05:13:01.459625Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8B187B3EBEF7D1BC8E32BEC78D36CBF95505A1C1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.459625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7b1cd92-ed90-4d81-b7b2-d68629e5b6b6", "created": "2026-01-27T05:13:01.460415Z", "modified": "2026-01-27T05:13:01.460415Z", "relationship_type": "indicates", "source_ref": "indicator--678bfad5-4582-4dd9-b7e4-bfc5c119f5c1", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fecd205-96bd-4176-95e2-7bfd911b5b35", "created": "2026-01-27T05:13:01.46059Z", "modified": "2026-01-27T05:13:01.46059Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='95D589A90971992A2038E5961B39C8B6BC77CF19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.46059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--560bd4b6-a465-4538-9f5b-ca17daaed22b", "created": "2026-01-27T05:13:01.461378Z", "modified": "2026-01-27T05:13:01.461378Z", "relationship_type": "indicates", "source_ref": "indicator--4fecd205-96bd-4176-95e2-7bfd911b5b35", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b485926-1075-4079-b697-07f2ab84845e", "created": "2026-01-27T05:13:01.461561Z", "modified": "2026-01-27T05:13:01.461561Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A2EBDD14E2AE17F52363BCB751CCBE15BE5A2F8D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.461561Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15e3162b-cb09-4eb3-b43e-51638f81748c", "created": "2026-01-27T05:13:01.462469Z", "modified": "2026-01-27T05:13:01.462469Z", "relationship_type": "indicates", "source_ref": "indicator--8b485926-1075-4079-b697-07f2ab84845e", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af13b5e3-b88f-40fd-b06f-e20df4d399b6", "created": "2026-01-27T05:13:01.462652Z", "modified": "2026-01-27T05:13:01.462652Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AA4F85CD7C24116BB51FA733BE59290B7BB8C204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.462652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81b6d5fa-097f-446b-8040-28f5787d3e60", "created": "2026-01-27T05:13:01.463448Z", "modified": "2026-01-27T05:13:01.463448Z", "relationship_type": "indicates", "source_ref": "indicator--af13b5e3-b88f-40fd-b06f-e20df4d399b6", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806f1017-08b9-4eb2-9568-90a3a8e4eb8d", "created": "2026-01-27T05:13:01.463625Z", "modified": "2026-01-27T05:13:01.463625Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F575CA9980D3075CF728F2081D9EC5F910CC17E8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.463625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--111f156e-8cc6-4da1-a52e-23866bb38bd4", "created": "2026-01-27T05:13:01.46442Z", "modified": "2026-01-27T05:13:01.46442Z", "relationship_type": "indicates", "source_ref": "indicator--806f1017-08b9-4eb2-9568-90a3a8e4eb8d", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9f6423-b3c6-4e5a-be5c-df4d586cebf5", "created": "2026-01-27T05:13:01.464596Z", "modified": "2026-01-27T05:13:01.464596Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FD84821C80C1499A2446F6F7E13BF8BDA6A66402']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.464596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8c426e7-615b-43f3-be4d-c599b777d11f", "created": "2026-01-27T05:13:01.465379Z", "modified": "2026-01-27T05:13:01.465379Z", "relationship_type": "indicates", "source_ref": "indicator--fc9f6423-b3c6-4e5a-be5c-df4d586cebf5", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f83204-288f-46a9-9de5-425e38b217bf", "created": "2026-01-27T05:13:01.465558Z", "modified": "2026-01-27T05:13:01.465558Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77C411957F307F6B971C7C07825CA5EA06F0E36D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.465558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e32f7c66-ca01-47a0-bb44-134abd763db5", "created": "2026-01-27T05:13:01.466381Z", "modified": "2026-01-27T05:13:01.466381Z", "relationship_type": "indicates", "source_ref": "indicator--43f83204-288f-46a9-9de5-425e38b217bf", "target_ref": "malware--ce192160-6bc3-40b1-9f31-bee1a4700010"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1fe3edad-36fb-4123-93d0-504848e3e812", "created": "2026-01-27T05:13:01.466556Z", "modified": "2026-01-27T05:13:01.466556Z", "name": "NemoSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ea2754-735e-449e-a257-46f2f779629a", "created": "2026-01-27T05:13:01.466728Z", "modified": "2026-01-27T05:13:01.466728Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.466728Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f86e9640-16c4-4837-8eed-89b1880f86f1", "created": "2026-01-27T05:13:01.467407Z", "modified": "2026-01-27T05:13:01.467407Z", "relationship_type": "indicates", "source_ref": "indicator--09ea2754-735e-449e-a257-46f2f779629a", "target_ref": "malware--1fe3edad-36fb-4123-93d0-504848e3e812"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61c56e9-d38a-41fa-b470-4027bcf32202", "created": "2026-01-27T05:13:01.467581Z", "modified": "2026-01-27T05:13:01.467581Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='setup.nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.467581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43985964-9a23-45ca-ba3c-4f596331cc4b", "created": "2026-01-27T05:13:01.468269Z", "modified": "2026-01-27T05:13:01.468269Z", "relationship_type": "indicates", "source_ref": "indicator--b61c56e9-d38a-41fa-b470-4027bcf32202", "target_ref": "malware--1fe3edad-36fb-4123-93d0-504848e3e812"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6e3528-1e6e-48d4-977a-19c38a9b8f9b", "created": "2026-01-27T05:13:01.468444Z", "modified": "2026-01-27T05:13:01.468444Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.468444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--abb58eaf-e79d-4b46-bb2a-4cc4720e84d9", "created": "2026-01-27T05:13:01.469131Z", "modified": "2026-01-27T05:13:01.469131Z", "relationship_type": "indicates", "source_ref": "indicator--8c6e3528-1e6e-48d4-977a-19c38a9b8f9b", "target_ref": "malware--1fe3edad-36fb-4123-93d0-504848e3e812"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4b5768-a09f-443e-95ab-dc10354cde93", "created": "2026-01-27T05:13:01.469305Z", "modified": "2026-01-27T05:13:01.469305Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.nemospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.469305Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84c81a02-6cd2-4d30-a846-7d2ea7bd2ebd", "created": "2026-01-27T05:13:01.470Z", "modified": "2026-01-27T05:13:01.470Z", "relationship_type": "indicates", "source_ref": "indicator--5e4b5768-a09f-443e-95ab-dc10354cde93", "target_ref": "malware--1fe3edad-36fb-4123-93d0-504848e3e812"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e3ac34-47df-43d7-88bb-0e0f8df98037", "created": "2026-01-27T05:13:01.470175Z", "modified": "2026-01-27T05:13:01.470175Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E871393054ED858ACB5854C0DB9F674C42160344']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.470175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9dcd96f-7239-48e7-819d-53da5be74cdc", "created": "2026-01-27T05:13:01.471082Z", "modified": "2026-01-27T05:13:01.471082Z", "relationship_type": "indicates", "source_ref": "indicator--a2e3ac34-47df-43d7-88bb-0e0f8df98037", "target_ref": "malware--1fe3edad-36fb-4123-93d0-504848e3e812"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bf8bca-eaea-4a87-af0f-d62036d76829", "created": "2026-01-27T05:13:01.47126Z", "modified": "2026-01-27T05:13:01.47126Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C7FBC97C3BD3949A6C19FF332E6CF2F2E5CEE561']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.47126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a730ce9-b8c4-435c-a406-d8a6866adabd", "created": "2026-01-27T05:13:01.472053Z", "modified": "2026-01-27T05:13:01.472053Z", "relationship_type": "indicates", "source_ref": "indicator--70bf8bca-eaea-4a87-af0f-d62036d76829", "target_ref": "malware--1fe3edad-36fb-4123-93d0-504848e3e812"}, {"type": "malware", "spec_version": "2.1", "id": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563", "created": "2026-01-27T05:13:01.472229Z", "modified": "2026-01-27T05:13:01.472229Z", "name": "SpyKontrol", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb26d31-e4ad-4e16-a352-c5bd4fb60f28", "created": "2026-01-27T05:13:01.472399Z", "modified": "2026-01-27T05:13:01.472399Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.spykontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.472399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53f14034-d9cc-4d6c-8a3d-9288146852a0", "created": "2026-01-27T05:13:01.473088Z", "modified": "2026-01-27T05:13:01.473088Z", "relationship_type": "indicates", "source_ref": "indicator--fcb26d31-e4ad-4e16-a352-c5bd4fb60f28", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462feb6e-7e6c-4f4b-9b7d-5a5da78debee", "created": "2026-01-27T05:13:01.473265Z", "modified": "2026-01-27T05:13:01.473265Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidapk.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.473265Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0dfadd8c-1207-475d-8fb7-7788f5d1219e", "created": "2026-01-27T05:13:01.47395Z", "modified": "2026-01-27T05:13:01.47395Z", "relationship_type": "indicates", "source_ref": "indicator--462feb6e-7e6c-4f4b-9b7d-5a5da78debee", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e16db35-c589-4484-8a07-b10ca3b3998a", "created": "2026-01-27T05:13:01.474126Z", "modified": "2026-01-27T05:13:01.474126Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spykontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.474126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5007e956-0357-41f5-89cb-430ade5d6f74", "created": "2026-01-27T05:13:01.474819Z", "modified": "2026-01-27T05:13:01.474819Z", "relationship_type": "indicates", "source_ref": "indicator--6e16db35-c589-4484-8a07-b10ca3b3998a", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843b7d8f-6c89-497e-9904-9f62128d2ecb", "created": "2026-01-27T05:13:01.474999Z", "modified": "2026-01-27T05:13:01.474999Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spykontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.474999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0310ebfd-8ab4-4f91-9f9d-b478d0649cf2", "created": "2026-01-27T05:13:01.475677Z", "modified": "2026-01-27T05:13:01.475677Z", "relationship_type": "indicates", "source_ref": "indicator--843b7d8f-6c89-497e-9904-9f62128d2ecb", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71731f2-684c-4ee8-b8f6-8b161612c9f9", "created": "2026-01-27T05:13:01.475873Z", "modified": "2026-01-27T05:13:01.475873Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidapk.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.475873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7ce3ef1-6607-4a48-be78-0fae575aeea1", "created": "2026-01-27T05:13:01.476545Z", "modified": "2026-01-27T05:13:01.476545Z", "relationship_type": "indicates", "source_ref": "indicator--f71731f2-684c-4ee8-b8f6-8b161612c9f9", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21785f85-275d-4f1d-a4bd-b70cdbfa3efb", "created": "2026-01-27T05:13:01.47672Z", "modified": "2026-01-27T05:13:01.47672Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ajygpxjy.bnthtjou']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.47672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53f068ce-99a3-4ddb-a7cc-d6e77a888bed", "created": "2026-01-27T05:13:01.477392Z", "modified": "2026-01-27T05:13:01.477392Z", "relationship_type": "indicates", "source_ref": "indicator--21785f85-275d-4f1d-a4bd-b70cdbfa3efb", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ec6040-1c11-4273-a6a0-57974d60d6d7", "created": "2026-01-27T05:13:01.477566Z", "modified": "2026-01-27T05:13:01.477566Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.udxlbuno.plwnnhop']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.477566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20bc2cb6-0137-4454-88b9-c22955ba4f01", "created": "2026-01-27T05:13:01.478241Z", "modified": "2026-01-27T05:13:01.478241Z", "relationship_type": "indicates", "source_ref": "indicator--06ec6040-1c11-4273-a6a0-57974d60d6d7", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5983f21-a6d0-4b51-97d3-57be79067b60", "created": "2026-01-27T05:13:01.478421Z", "modified": "2026-01-27T05:13:01.478421Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.igyluazm.iytdhsky']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.478421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50041a64-aee4-446a-9773-e24e28cfaf5e", "created": "2026-01-27T05:13:01.479209Z", "modified": "2026-01-27T05:13:01.479209Z", "relationship_type": "indicates", "source_ref": "indicator--a5983f21-a6d0-4b51-97d3-57be79067b60", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38f0a15-4e29-49b9-a2d7-86009c8c8f72", "created": "2026-01-27T05:13:01.479387Z", "modified": "2026-01-27T05:13:01.479387Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FB8F23C57D0AFD255FD255B290B2EF6DBB2EAFD8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.479387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--205acce4-e611-4885-a31c-bb0ab3e8dd3e", "created": "2026-01-27T05:13:01.480175Z", "modified": "2026-01-27T05:13:01.480175Z", "relationship_type": "indicates", "source_ref": "indicator--a38f0a15-4e29-49b9-a2d7-86009c8c8f72", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff3f0a3-d15c-425d-915f-37b61af06077", "created": "2026-01-27T05:13:01.480353Z", "modified": "2026-01-27T05:13:01.480353Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A36C70833A8A796F94CCD56B810D2A123F4F0485']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.480353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0962e203-db80-4006-b43d-2f0aa434e243", "created": "2026-01-27T05:13:01.481137Z", "modified": "2026-01-27T05:13:01.481137Z", "relationship_type": "indicates", "source_ref": "indicator--4ff3f0a3-d15c-425d-915f-37b61af06077", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7563efc-04dc-4978-8cb2-a0af60a2ced6", "created": "2026-01-27T05:13:01.481313Z", "modified": "2026-01-27T05:13:01.481313Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EA35FC50B3B0E0A9E5405BAC2D7E58D7F9559FD0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.481313Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63109ba6-56d9-4fca-9dca-27395b3f0069", "created": "2026-01-27T05:13:01.482139Z", "modified": "2026-01-27T05:13:01.482139Z", "relationship_type": "indicates", "source_ref": "indicator--f7563efc-04dc-4978-8cb2-a0af60a2ced6", "target_ref": "malware--29c0dd72-0a62-45ff-84a3-c665493c7563"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277", "created": "2026-01-27T05:13:01.482318Z", "modified": "2026-01-27T05:13:01.482318Z", "name": "Trackplus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2705cb6a-12c2-47f0-af60-8d4fb1fa61d1", "created": "2026-01-27T05:13:01.482487Z", "modified": "2026-01-27T05:13:01.482487Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='12d60.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.482487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f5acf55-3849-4f74-8fe4-4e491be2c9f1", "created": "2026-01-27T05:13:01.483185Z", "modified": "2026-01-27T05:13:01.483185Z", "relationship_type": "indicates", "source_ref": "indicator--2705cb6a-12c2-47f0-af60-8d4fb1fa61d1", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fd1607-b7ac-4735-b448-4adc6cc6aa13", "created": "2026-01-27T05:13:01.483368Z", "modified": "2026-01-27T05:13:01.483368Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='12d60.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.483368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8ecf866-51e2-4140-a6b0-430e1d9a0c26", "created": "2026-01-27T05:13:01.484072Z", "modified": "2026-01-27T05:13:01.484072Z", "relationship_type": "indicates", "source_ref": "indicator--10fd1607-b7ac-4735-b448-4adc6cc6aa13", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab693fa6-38af-415a-bd19-5cf97a719265", "created": "2026-01-27T05:13:01.484253Z", "modified": "2026-01-27T05:13:01.484253Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='13-5.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.484253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--984f8f34-2be4-4d81-a3af-8d4f402d55d2", "created": "2026-01-27T05:13:01.484938Z", "modified": "2026-01-27T05:13:01.484938Z", "relationship_type": "indicates", "source_ref": "indicator--ab693fa6-38af-415a-bd19-5cf97a719265", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0c0d9c-e136-4922-b0c0-080dac8fa22f", "created": "2026-01-27T05:13:01.485114Z", "modified": "2026-01-27T05:13:01.485114Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='13-5.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.485114Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88612df3-d6d6-4fc2-90d2-b4dce8ddd744", "created": "2026-01-27T05:13:01.4858Z", "modified": "2026-01-27T05:13:01.4858Z", "relationship_type": "indicates", "source_ref": "indicator--1a0c0d9c-e136-4922-b0c0-080dac8fa22f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d542086e-fc7a-4576-a600-e64f91419d75", "created": "2026-01-27T05:13:01.485986Z", "modified": "2026-01-27T05:13:01.485986Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='89685.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.485986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b736cc6-06a8-4aec-8e7d-a3c2e0c8259f", "created": "2026-01-27T05:13:01.486671Z", "modified": "2026-01-27T05:13:01.486671Z", "relationship_type": "indicates", "source_ref": "indicator--d542086e-fc7a-4576-a600-e64f91419d75", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760662e2-52bb-49fe-b8e9-aeab61f391e3", "created": "2026-01-27T05:13:01.486883Z", "modified": "2026-01-27T05:13:01.486883Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.trackerplus.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.486883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd10a259-7178-4e56-bdd7-213451efb535", "created": "2026-01-27T05:13:01.487686Z", "modified": "2026-01-27T05:13:01.487686Z", "relationship_type": "indicates", "source_ref": "indicator--760662e2-52bb-49fe-b8e9-aeab61f391e3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1788cd68-d847-4c0b-80ab-9140562c73fa", "created": "2026-01-27T05:13:01.487881Z", "modified": "2026-01-27T05:13:01.487881Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='and.info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.487881Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18f4aa5e-2030-4ef7-92eb-ec88f61ff2e0", "created": "2026-01-27T05:13:01.488555Z", "modified": "2026-01-27T05:13:01.488555Z", "relationship_type": "indicates", "source_ref": "indicator--1788cd68-d847-4c0b-80ab-9140562c73fa", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156ee4a8-e464-4bd0-8f36-0ea33d165e72", "created": "2026-01-27T05:13:01.488732Z", "modified": "2026-01-27T05:13:01.488732Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='best-spy-apps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.488732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c99e8aa7-1b19-40cc-ba60-a221cde18783", "created": "2026-01-27T05:13:01.489417Z", "modified": "2026-01-27T05:13:01.489417Z", "relationship_type": "indicates", "source_ref": "indicator--156ee4a8-e464-4bd0-8f36-0ea33d165e72", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc252f1-d26d-440f-9b1d-7a674ed2d5f1", "created": "2026-01-27T05:13:01.489591Z", "modified": "2026-01-27T05:13:01.489591Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='edlnc255s2q.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.489591Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e794579-8ba8-4947-8f2b-866564601c68", "created": "2026-01-27T05:13:01.490295Z", "modified": "2026-01-27T05:13:01.490295Z", "relationship_type": "indicates", "source_ref": "indicator--efc252f1-d26d-440f-9b1d-7a674ed2d5f1", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88acd2a3-47ab-4b89-9e85-efd03395d112", "created": "2026-01-27T05:13:01.490469Z", "modified": "2026-01-27T05:13:01.490469Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ftp.info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.490469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24d4d110-1378-47ca-ad1e-35aca9eb85bd", "created": "2026-01-27T05:13:01.491151Z", "modified": "2026-01-27T05:13:01.491151Z", "relationship_type": "indicates", "source_ref": "indicator--88acd2a3-47ab-4b89-9e85-efd03395d112", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5d755e-70ff-4129-b8aa-b1eab13b2e19", "created": "2026-01-27T05:13:01.491325Z", "modified": "2026-01-27T05:13:01.491325Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.491325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--27e3a24a-e876-4ad0-95bf-141bf3749877", "created": "2026-01-27T05:13:01.492004Z", "modified": "2026-01-27T05:13:01.492004Z", "relationship_type": "indicates", "source_ref": "indicator--8f5d755e-70ff-4129-b8aa-b1eab13b2e19", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a29835-631b-4121-9fa3-07a3cd46c2cd", "created": "2026-01-27T05:13:01.492177Z", "modified": "2026-01-27T05:13:01.492177Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kokum.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.492177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e318c1c-9eec-4d5b-9456-1c429173e295", "created": "2026-01-27T05:13:01.492852Z", "modified": "2026-01-27T05:13:01.492852Z", "relationship_type": "indicates", "source_ref": "indicator--b7a29835-631b-4121-9fa3-07a3cd46c2cd", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eadf1d4-22ca-400b-a743-78380cd3adfa", "created": "2026-01-27T05:13:01.493026Z", "modified": "2026-01-27T05:13:01.493026Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pi.info-taxi.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.493026Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcfc7d90-2500-43c1-93c2-54e459515718", "created": "2026-01-27T05:13:01.493707Z", "modified": "2026-01-27T05:13:01.493707Z", "relationship_type": "indicates", "source_ref": "indicator--0eadf1d4-22ca-400b-a743-78380cd3adfa", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8332ef80-0f9a-4911-a4ae-f034ff2a6681", "created": "2026-01-27T05:13:01.493902Z", "modified": "2026-01-27T05:13:01.493902Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sap4mobile-89685.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.493902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c952f40-343c-4faf-9e9d-8eecdd9beb7a", "created": "2026-01-27T05:13:01.494611Z", "modified": "2026-01-27T05:13:01.494611Z", "relationship_type": "indicates", "source_ref": "indicator--8332ef80-0f9a-4911-a4ae-f034ff2a6681", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ee30e7-d14d-4278-a1e4-94fe189e49d0", "created": "2026-01-27T05:13:01.494802Z", "modified": "2026-01-27T05:13:01.494802Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sap4mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.494802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0ea3209-5879-43af-9833-b7bfd9a59284", "created": "2026-01-27T05:13:01.495838Z", "modified": "2026-01-27T05:13:01.495838Z", "relationship_type": "indicates", "source_ref": "indicator--d6ee30e7-d14d-4278-a1e4-94fe189e49d0", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf91c629-c18d-497a-a22e-5086ab3b0879", "created": "2026-01-27T05:13:01.496019Z", "modified": "2026-01-27T05:13:01.496019Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smartback-12d60.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.496019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--35b34ee2-7394-4b24-826b-ba894d513754", "created": "2026-01-27T05:13:01.496706Z", "modified": "2026-01-27T05:13:01.496706Z", "relationship_type": "indicates", "source_ref": "indicator--bf91c629-c18d-497a-a22e-5086ab3b0879", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397f7c86-6c17-424d-89ad-453554d79ad9", "created": "2026-01-27T05:13:01.4969Z", "modified": "2026-01-27T05:13:01.4969Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smartback-12d60.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.4969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d89f47d1-421f-47b4-a746-967777970234", "created": "2026-01-27T05:13:01.497586Z", "modified": "2026-01-27T05:13:01.497586Z", "relationship_type": "indicates", "source_ref": "indicator--397f7c86-6c17-424d-89ad-453554d79ad9", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736ab4f0-9c03-401a-8455-a5973ca3d0c3", "created": "2026-01-27T05:13:01.497774Z", "modified": "2026-01-27T05:13:01.497774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy2mobile-bb441.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.497774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ba65d39-d10d-4bb1-b08c-debfcfc0f33c", "created": "2026-01-27T05:13:01.498472Z", "modified": "2026-01-27T05:13:01.498472Z", "relationship_type": "indicates", "source_ref": "indicator--736ab4f0-9c03-401a-8455-a5973ca3d0c3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619b44ae-fa86-4be7-98ed-5bbbc7c621dc", "created": "2026-01-27T05:13:01.498645Z", "modified": "2026-01-27T05:13:01.498645Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy2mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.498645Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87a75b05-690e-4fc9-9d81-377bce0ba4a3", "created": "2026-01-27T05:13:01.499324Z", "modified": "2026-01-27T05:13:01.499324Z", "relationship_type": "indicates", "source_ref": "indicator--619b44ae-fa86-4be7-98ed-5bbbc7c621dc", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7a7093-d84b-41a2-9e5b-dc446c89dd8e", "created": "2026-01-27T05:13:01.499498Z", "modified": "2026-01-27T05:13:01.499498Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.499498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6bebf50b-1af2-4ec8-ad3c-6fd4605196b9", "created": "2026-01-27T05:13:01.500182Z", "modified": "2026-01-27T05:13:01.500182Z", "relationship_type": "indicates", "source_ref": "indicator--7a7a7093-d84b-41a2-9e5b-dc446c89dd8e", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5a4161-7adf-4f76-a5dc-f5816f62f245", "created": "2026-01-27T05:13:01.500356Z", "modified": "2026-01-27T05:13:01.500356Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tagdps.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.500356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3a6175e-a4ee-4545-be67-6edc12bf1102", "created": "2026-01-27T05:13:01.501021Z", "modified": "2026-01-27T05:13:01.501021Z", "relationship_type": "indicates", "source_ref": "indicator--8f5a4161-7adf-4f76-a5dc-f5816f62f245", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2825a5fd-369d-4081-abba-7632c27bb4a6", "created": "2026-01-27T05:13:01.501198Z", "modified": "2026-01-27T05:13:01.501198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tfk7r22klf8vtd8g90jq8qno1tpqhmpe.apps.googleusercontent.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.501198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e46a91ca-6917-44ea-81f3-da03cadb7fc5", "created": "2026-01-27T05:13:01.501953Z", "modified": "2026-01-27T05:13:01.501953Z", "relationship_type": "indicates", "source_ref": "indicator--2825a5fd-369d-4081-abba-7632c27bb4a6", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70af787f-f49a-4f61-bfb7-dcf9b8c6d65d", "created": "2026-01-27T05:13:01.50213Z", "modified": "2026-01-27T05:13:01.50213Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='account.spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.50213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df005335-e582-4025-b46e-e75689a082d6", "created": "2026-01-27T05:13:01.502814Z", "modified": "2026-01-27T05:13:01.502814Z", "relationship_type": "indicates", "source_ref": "indicator--70af787f-f49a-4f61-bfb7-dcf9b8c6d65d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c91bc05-e209-4cc7-a4f3-8dff65ea31ae", "created": "2026-01-27T05:13:01.502987Z", "modified": "2026-01-27T05:13:01.502987Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='forum.spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.502987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb0e7b9d-5c57-4a97-bbf6-7457340eb1fa", "created": "2026-01-27T05:13:01.503658Z", "modified": "2026-01-27T05:13:01.503658Z", "relationship_type": "indicates", "source_ref": "indicator--7c91bc05-e209-4cc7-a4f3-8dff65ea31ae", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c84145b-8b87-4a7d-9a85-7987092a643c", "created": "2026-01-27T05:13:01.503852Z", "modified": "2026-01-27T05:13:01.503852Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spy2mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.503852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef5141b5-8066-4927-b838-6bcb1527a016", "created": "2026-01-27T05:13:01.504625Z", "modified": "2026-01-27T05:13:01.504625Z", "relationship_type": "indicates", "source_ref": "indicator--3c84145b-8b87-4a7d-9a85-7987092a643c", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5330a425-9fe6-46f3-8e57-0f6d9eb093f7", "created": "2026-01-27T05:13:01.504815Z", "modified": "2026-01-27T05:13:01.504815Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.504815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a74008f-f80f-4c2b-ba2c-b8ed6117d87a", "created": "2026-01-27T05:13:01.505478Z", "modified": "2026-01-27T05:13:01.505478Z", "relationship_type": "indicates", "source_ref": "indicator--5330a425-9fe6-46f3-8e57-0f6d9eb093f7", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01146e3e-59a4-4d41-b2a6-c9e33a3d2e2b", "created": "2026-01-27T05:13:01.505652Z", "modified": "2026-01-27T05:13:01.505652Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackerplus.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.505652Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9cc7c980-5f94-4278-a6d0-688c53ce3357", "created": "2026-01-27T05:13:01.50633Z", "modified": "2026-01-27T05:13:01.50633Z", "relationship_type": "indicates", "source_ref": "indicator--01146e3e-59a4-4d41-b2a6-c9e33a3d2e2b", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ef741e-f048-4825-8f87-8461f4d52293", "created": "2026-01-27T05:13:01.506505Z", "modified": "2026-01-27T05:13:01.506505Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spy2mobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.506505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eae53bde-3c2b-4ee1-86f0-08da57714471", "created": "2026-01-27T05:13:01.50719Z", "modified": "2026-01-27T05:13:01.50719Z", "relationship_type": "indicates", "source_ref": "indicator--b2ef741e-f048-4825-8f87-8461f4d52293", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc91b2f-6fef-4667-9b5e-5c37d59cadeb", "created": "2026-01-27T05:13:01.507362Z", "modified": "2026-01-27T05:13:01.507362Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spytomobile.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.507362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d03f6192-e849-4549-9fb2-47a291b9c49a", "created": "2026-01-27T05:13:01.508065Z", "modified": "2026-01-27T05:13:01.508065Z", "relationship_type": "indicates", "source_ref": "indicator--fcc91b2f-6fef-4667-9b5e-5c37d59cadeb", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f63e85e-54dd-4bd9-b1bc-a70cc49e0476", "created": "2026-01-27T05:13:01.508243Z", "modified": "2026-01-27T05:13:01.508243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fc63e8ccd84040059d0d81c7ed8dd94c4c2a9cf29160985fe80ba7aef9630ae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.508243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f63ed4b2-8970-41c6-b783-ec574b7a69a5", "created": "2026-01-27T05:13:01.50909Z", "modified": "2026-01-27T05:13:01.50909Z", "relationship_type": "indicates", "source_ref": "indicator--4f63e85e-54dd-4bd9-b1bc-a70cc49e0476", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7484544-5297-4c98-adc7-c004d338661d", "created": "2026-01-27T05:13:01.509278Z", "modified": "2026-01-27T05:13:01.509278Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='441e2c5b683c2daec6dea2a31a2340579ffe34918e6206359c8ff14c9bdf4653']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.509278Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b30b02e-39ba-48ae-bc1e-99e2843ccfac", "created": "2026-01-27T05:13:01.51012Z", "modified": "2026-01-27T05:13:01.51012Z", "relationship_type": "indicates", "source_ref": "indicator--c7484544-5297-4c98-adc7-c004d338661d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5380fcaa-1e17-4d2a-95c6-6cc704c35ded", "created": "2026-01-27T05:13:01.510294Z", "modified": "2026-01-27T05:13:01.510294Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='19a8d63918f5cee7676228f4aeb47784fb89773ef2544ab06e85041fd65b1fe7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.510294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f8f4ab5-a3d4-4895-82cb-3d83e00c7922", "created": "2026-01-27T05:13:01.511129Z", "modified": "2026-01-27T05:13:01.511129Z", "relationship_type": "indicates", "source_ref": "indicator--5380fcaa-1e17-4d2a-95c6-6cc704c35ded", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8499f9-212a-4132-8f58-04506dc268b9", "created": "2026-01-27T05:13:01.511303Z", "modified": "2026-01-27T05:13:01.511303Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cf52131706bc8d96cdb9fba28166b53b72c0510fd830f26efdb25150d26fa1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.511303Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--097cf683-6c4e-4ac5-850a-fe22e006278e", "created": "2026-01-27T05:13:01.512143Z", "modified": "2026-01-27T05:13:01.512143Z", "relationship_type": "indicates", "source_ref": "indicator--6f8499f9-212a-4132-8f58-04506dc268b9", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0151541f-0d91-4f07-a980-704bcbf563a6", "created": "2026-01-27T05:13:01.512322Z", "modified": "2026-01-27T05:13:01.512322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='29a7cf29dbfa027888996c9b1529eb867069e6e138e811a252258a241ea3d0c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.512322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f90344a0-5400-4af6-8ec1-436337156442", "created": "2026-01-27T05:13:01.513306Z", "modified": "2026-01-27T05:13:01.513306Z", "relationship_type": "indicates", "source_ref": "indicator--0151541f-0d91-4f07-a980-704bcbf563a6", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b95e2d-a8f3-4de5-850b-50113361e272", "created": "2026-01-27T05:13:01.513493Z", "modified": "2026-01-27T05:13:01.513493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5c8b36325f7f5f65d8eb481b26cd6f9eec79fbcf7711013344cdf496155d94dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.513493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--436e91bc-488a-4220-b528-61d59d156a5d", "created": "2026-01-27T05:13:01.514332Z", "modified": "2026-01-27T05:13:01.514332Z", "relationship_type": "indicates", "source_ref": "indicator--b3b95e2d-a8f3-4de5-850b-50113361e272", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89b4bd5-904b-4125-9547-91507c2ea78a", "created": "2026-01-27T05:13:01.51451Z", "modified": "2026-01-27T05:13:01.51451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b63afb0e1c375020bede72318c1c0f64084e88f9b2ab51893dfb3fd38ec19f50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.51451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0797f98c-789f-403c-9157-e198f1568665", "created": "2026-01-27T05:13:01.51536Z", "modified": "2026-01-27T05:13:01.51536Z", "relationship_type": "indicates", "source_ref": "indicator--c89b4bd5-904b-4125-9547-91507c2ea78a", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690dbf04-331c-456a-9c6d-e32877899d2b", "created": "2026-01-27T05:13:01.515537Z", "modified": "2026-01-27T05:13:01.515537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4ce1cc5dacb30ae008dbad544ee15ae000b68eb1aba20b84d3d0dcc2033ea833']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.515537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d08df48d-4871-4938-a999-50d6d86a6978", "created": "2026-01-27T05:13:01.516407Z", "modified": "2026-01-27T05:13:01.516407Z", "relationship_type": "indicates", "source_ref": "indicator--690dbf04-331c-456a-9c6d-e32877899d2b", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4aea330-6ad2-45a2-955d-8b35ee7ddcf0", "created": "2026-01-27T05:13:01.516586Z", "modified": "2026-01-27T05:13:01.516586Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3eee8942aededa9c890c654bdf18130c6c9655455ee5b4241bb1214f7df7ed4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.516586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45cfd427-03f9-4f66-b67f-7834807ed27e", "created": "2026-01-27T05:13:01.517433Z", "modified": "2026-01-27T05:13:01.517433Z", "relationship_type": "indicates", "source_ref": "indicator--e4aea330-6ad2-45a2-955d-8b35ee7ddcf0", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4f0b49-538b-4544-818d-19ceb48bc9a3", "created": "2026-01-27T05:13:01.517612Z", "modified": "2026-01-27T05:13:01.517612Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fe1828f81394c182abb15899e28b9ddfdde0e905fd9024e94fd777ebadb80c2a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.517612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd8b26a2-e1eb-41d0-9f25-70473f83d68b", "created": "2026-01-27T05:13:01.518496Z", "modified": "2026-01-27T05:13:01.518496Z", "relationship_type": "indicates", "source_ref": "indicator--6a4f0b49-538b-4544-818d-19ceb48bc9a3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00997117-7a24-4337-91ba-88708e1c0b66", "created": "2026-01-27T05:13:01.518675Z", "modified": "2026-01-27T05:13:01.518675Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a6219e3d10f203cb3e7c94fa7b97c2f4b1ede084b986610aeddf97868e2fe533']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.518675Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--385211fe-8c03-478b-8f2a-76463cb7f0a7", "created": "2026-01-27T05:13:01.519528Z", "modified": "2026-01-27T05:13:01.519528Z", "relationship_type": "indicates", "source_ref": "indicator--00997117-7a24-4337-91ba-88708e1c0b66", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb3011f-d99a-4079-bc03-b107e0fa5f88", "created": "2026-01-27T05:13:01.519708Z", "modified": "2026-01-27T05:13:01.519708Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='489e656495e74a3a5c031a2988613ed3de18ec9358083fe5fa7281a25fd35e6f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.519708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ea7be65-a49e-4604-839b-aef1443180b8", "created": "2026-01-27T05:13:01.520553Z", "modified": "2026-01-27T05:13:01.520553Z", "relationship_type": "indicates", "source_ref": "indicator--5bb3011f-d99a-4079-bc03-b107e0fa5f88", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20026ce1-31d3-407d-929a-59d1f2856ad0", "created": "2026-01-27T05:13:01.520731Z", "modified": "2026-01-27T05:13:01.520731Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='790190cc8d7382798ec6d3c298b0d24b461b61ee07dd106f7453db5010056928']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.520731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b50019f-5019-483d-aafb-68c84bcd5261", "created": "2026-01-27T05:13:01.521586Z", "modified": "2026-01-27T05:13:01.521586Z", "relationship_type": "indicates", "source_ref": "indicator--20026ce1-31d3-407d-929a-59d1f2856ad0", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99faf5f4-3e38-4ae6-b42e-cab716c9978c", "created": "2026-01-27T05:13:01.521782Z", "modified": "2026-01-27T05:13:01.521782Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='07bb94d0673e0e0902da383004c944c13a4aef71b82ed6c8f75a17c52eee9c9a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.521782Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc326866-f2b2-4ec5-80cc-5e51ca650e65", "created": "2026-01-27T05:13:01.522739Z", "modified": "2026-01-27T05:13:01.522739Z", "relationship_type": "indicates", "source_ref": "indicator--99faf5f4-3e38-4ae6-b42e-cab716c9978c", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4facf0-5b32-4c16-b2d3-8e5747fc0941", "created": "2026-01-27T05:13:01.522938Z", "modified": "2026-01-27T05:13:01.522938Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='708c1b154075b4c672864243fc04f508cd5c8b19df39359c1671591525db0b4d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.522938Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6686bc45-64e7-45ef-98d5-74f4e37a523d", "created": "2026-01-27T05:13:01.523935Z", "modified": "2026-01-27T05:13:01.523935Z", "relationship_type": "indicates", "source_ref": "indicator--8a4facf0-5b32-4c16-b2d3-8e5747fc0941", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8cd026-cb60-4022-8b40-16940a317811", "created": "2026-01-27T05:13:01.524128Z", "modified": "2026-01-27T05:13:01.524128Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d578d7215d9926610c794a73af486c44d3563a60c450f1c0c3921b43eb149fb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.524128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b054efb-6c90-49f2-a9bb-9ffa7300a735", "created": "2026-01-27T05:13:01.525087Z", "modified": "2026-01-27T05:13:01.525087Z", "relationship_type": "indicates", "source_ref": "indicator--dd8cd026-cb60-4022-8b40-16940a317811", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cd7e29-a6e4-4929-be42-6a217221db8f", "created": "2026-01-27T05:13:01.525321Z", "modified": "2026-01-27T05:13:01.525321Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a62800805372232c609893024d45f959589606873c5ca6c8ce866b2e837bdce']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.525321Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6585ac8b-eb10-4203-a4c3-8979a1e6df37", "created": "2026-01-27T05:13:01.526211Z", "modified": "2026-01-27T05:13:01.526211Z", "relationship_type": "indicates", "source_ref": "indicator--26cd7e29-a6e4-4929-be42-6a217221db8f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9bfcbe4-2aeb-4f49-8adf-ec0aa110863b", "created": "2026-01-27T05:13:01.526398Z", "modified": "2026-01-27T05:13:01.526398Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51ac0d9c23e16c1c70ded6b1f0325cfead5c44d18e4408ab5cccb942e6cb2c27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.526398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc5450af-ba9a-496c-9aeb-d091ffd3af87", "created": "2026-01-27T05:13:01.527305Z", "modified": "2026-01-27T05:13:01.527305Z", "relationship_type": "indicates", "source_ref": "indicator--f9bfcbe4-2aeb-4f49-8adf-ec0aa110863b", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d905c0-9c4e-4b7c-8f07-1e1710c714cb", "created": "2026-01-27T05:13:01.527496Z", "modified": "2026-01-27T05:13:01.527496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d49534ccec0fa5fb02e0d906135e5407927ad4cd1ce899d796b1e03b387f0bc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.527496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1628dc87-2960-4d10-8fc5-bc9035884b00", "created": "2026-01-27T05:13:01.528374Z", "modified": "2026-01-27T05:13:01.528374Z", "relationship_type": "indicates", "source_ref": "indicator--92d905c0-9c4e-4b7c-8f07-1e1710c714cb", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52b7b66-c382-4c3e-bcb3-cc414ac04168", "created": "2026-01-27T05:13:01.528557Z", "modified": "2026-01-27T05:13:01.528557Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35e1938d149db81c65e414f6c7754ff212e82f189cc0bb1c619b18e7c04cf8d2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.528557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--871eb6d8-4912-4016-8d3b-3ad7336a06fa", "created": "2026-01-27T05:13:01.529433Z", "modified": "2026-01-27T05:13:01.529433Z", "relationship_type": "indicates", "source_ref": "indicator--a52b7b66-c382-4c3e-bcb3-cc414ac04168", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44991cb9-6d4e-44a0-9fc8-28245068de82", "created": "2026-01-27T05:13:01.529623Z", "modified": "2026-01-27T05:13:01.529623Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cd6c5203e7b35467793567c8c994729248431081e01ed24f6bd3e5859f00182b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.529623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2dca5aab-055f-499a-91d2-66cdf80c8f3b", "created": "2026-01-27T05:13:01.530473Z", "modified": "2026-01-27T05:13:01.530473Z", "relationship_type": "indicates", "source_ref": "indicator--44991cb9-6d4e-44a0-9fc8-28245068de82", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbc9356-5084-4ffb-97ba-4108dccb98a6", "created": "2026-01-27T05:13:01.53065Z", "modified": "2026-01-27T05:13:01.53065Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.callhist.calltr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.53065Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6adc745-b14d-4e94-80ad-922f4ce904ae", "created": "2026-01-27T05:13:01.531325Z", "modified": "2026-01-27T05:13:01.531325Z", "relationship_type": "indicates", "source_ref": "indicator--2cbc9356-5084-4ffb-97ba-4108dccb98a6", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97916869-f520-406b-902e-f40d0883a823", "created": "2026-01-27T05:13:01.531504Z", "modified": "2026-01-27T05:13:01.531504Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.catrsy.jaluc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.531504Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01b85f2a-9ef9-475c-9649-e625b7fbf130", "created": "2026-01-27T05:13:01.532305Z", "modified": "2026-01-27T05:13:01.532305Z", "relationship_type": "indicates", "source_ref": "indicator--97916869-f520-406b-902e-f40d0883a823", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1ada0d-d711-4f8d-b783-c41c507cf9fa", "created": "2026-01-27T05:13:01.532486Z", "modified": "2026-01-27T05:13:01.532486Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cellph.montrb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.532486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dab7a0ed-0cb1-42ec-9956-e679b1907ab7", "created": "2026-01-27T05:13:01.533151Z", "modified": "2026-01-27T05:13:01.533151Z", "relationship_type": "indicates", "source_ref": "indicator--ad1ada0d-d711-4f8d-b783-c41c507cf9fa", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51756bff-f259-475f-afb2-b0accda112eb", "created": "2026-01-27T05:13:01.533333Z", "modified": "2026-01-27T05:13:01.533333Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.dbzbpr.skt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.533333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f92b759a-45f5-46fd-85a3-30c2fdbf2250", "created": "2026-01-27T05:13:01.534004Z", "modified": "2026-01-27T05:13:01.534004Z", "relationship_type": "indicates", "source_ref": "indicator--51756bff-f259-475f-afb2-b0accda112eb", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0736252c-7d55-45ef-9319-f104b799d62f", "created": "2026-01-27T05:13:01.534186Z", "modified": "2026-01-27T05:13:01.534186Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.elpatr.woac']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.534186Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ef14af7-e091-4620-924e-b2ef79613066", "created": "2026-01-27T05:13:01.534842Z", "modified": "2026-01-27T05:13:01.534842Z", "relationship_type": "indicates", "source_ref": "indicator--0736252c-7d55-45ef-9319-f104b799d62f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e851f474-ff98-4369-94a8-09979354418f", "created": "2026-01-27T05:13:01.535017Z", "modified": "2026-01-27T05:13:01.535017Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ernell.thht']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.535017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96b084f7-d207-4fe0-904a-c2699dc479dc", "created": "2026-01-27T05:13:01.535662Z", "modified": "2026-01-27T05:13:01.535662Z", "relationship_type": "indicates", "source_ref": "indicator--e851f474-ff98-4369-94a8-09979354418f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd0d18f-185d-4112-abc5-e7a293d91df3", "created": "2026-01-27T05:13:01.535865Z", "modified": "2026-01-27T05:13:01.535865Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gh.ob']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.535865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eb5e6f68-c9ff-48b8-889f-73ab4c447996", "created": "2026-01-27T05:13:01.536508Z", "modified": "2026-01-27T05:13:01.536508Z", "relationship_type": "indicates", "source_ref": "indicator--ebd0d18f-185d-4112-abc5-e7a293d91df3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48b23a2-63f6-41cc-9c75-bbcf53d6092f", "created": "2026-01-27T05:13:01.53668Z", "modified": "2026-01-27T05:13:01.53668Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.greatdata']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.53668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dbbf874e-976b-42a8-8d7d-ae03fbf2e0ca", "created": "2026-01-27T05:13:01.537359Z", "modified": "2026-01-27T05:13:01.537359Z", "relationship_type": "indicates", "source_ref": "indicator--d48b23a2-63f6-41cc-9c75-bbcf53d6092f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e88411-8c0c-419d-accb-eaefe7545e59", "created": "2026-01-27T05:13:01.537531Z", "modified": "2026-01-27T05:13:01.537531Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kidsmobmon']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.537531Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92c9ff37-63e9-4d25-8c86-478ddbd18953", "created": "2026-01-27T05:13:01.538188Z", "modified": "2026-01-27T05:13:01.538188Z", "relationship_type": "indicates", "source_ref": "indicator--c5e88411-8c0c-419d-accb-eaefe7545e59", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cffb93-fb12-4c62-927f-7255853988c4", "created": "2026-01-27T05:13:01.538377Z", "modified": "2026-01-27T05:13:01.538377Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobitra.todv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.538377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9b4d441-813f-4194-8e59-ca2fb0577b1f", "created": "2026-01-27T05:13:01.539106Z", "modified": "2026-01-27T05:13:01.539106Z", "relationship_type": "indicates", "source_ref": "indicator--c6cffb93-fb12-4c62-927f-7255853988c4", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4da576-3a50-414b-ba17-77f39a7db4fa", "created": "2026-01-27T05:13:01.539283Z", "modified": "2026-01-27T05:13:01.539283Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobphn.monit']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.539283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b6da2e7-3ba0-4b1e-8709-b18050d650f6", "created": "2026-01-27T05:13:01.54007Z", "modified": "2026-01-27T05:13:01.54007Z", "relationship_type": "indicates", "source_ref": "indicator--ef4da576-3a50-414b-ba17-77f39a7db4fa", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2962d0ba-2071-433c-aabc-7e9e59d8e484", "created": "2026-01-27T05:13:01.540259Z", "modified": "2026-01-27T05:13:01.540259Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobtr.danbel']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.540259Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--693cbc83-8a38-44aa-b3de-b82066098bcc", "created": "2026-01-27T05:13:01.540916Z", "modified": "2026-01-27T05:13:01.540916Z", "relationship_type": "indicates", "source_ref": "indicator--2962d0ba-2071-433c-aabc-7e9e59d8e484", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bbaeb2-5cab-42ee-8ba8-e1f8dcb517c2", "created": "2026-01-27T05:13:01.541093Z", "modified": "2026-01-27T05:13:01.541093Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mophtr.td']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.541093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2181be44-05ba-4eb9-9f48-11e645d8fa38", "created": "2026-01-27T05:13:01.541737Z", "modified": "2026-01-27T05:13:01.541737Z", "relationship_type": "indicates", "source_ref": "indicator--a1bbaeb2-5cab-42ee-8ba8-e1f8dcb517c2", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5873b7-6f63-4188-a477-f33c2e88bd6a", "created": "2026-01-27T05:13:01.541929Z", "modified": "2026-01-27T05:13:01.541929Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phone.tracker.smsb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.541929Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--04f240ee-918f-4eeb-9eea-448ad7b31a26", "created": "2026-01-27T05:13:01.542596Z", "modified": "2026-01-27T05:13:01.542596Z", "relationship_type": "indicates", "source_ref": "indicator--ab5873b7-6f63-4188-a477-f33c2e88bd6a", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a617df1d-b7b9-45d9-aa1e-70d7d42d59d7", "created": "2026-01-27T05:13:01.542783Z", "modified": "2026-01-27T05:13:01.542783Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.phtranlo.tifach']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.542783Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--312e0f32-b5fe-41c7-b05c-6ad4a34ccc12", "created": "2026-01-27T05:13:01.543438Z", "modified": "2026-01-27T05:13:01.543438Z", "relationship_type": "indicates", "source_ref": "indicator--a617df1d-b7b9-45d9-aa1e-70d7d42d59d7", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116870dd-e130-43a1-9043-8f0160f6bf60", "created": "2026-01-27T05:13:01.543614Z", "modified": "2026-01-27T05:13:01.543614Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rephko.stha']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.543614Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4721d6ec-2b00-45e9-abf8-f9e81ee3153d", "created": "2026-01-27T05:13:01.544272Z", "modified": "2026-01-27T05:13:01.544272Z", "relationship_type": "indicates", "source_ref": "indicator--116870dd-e130-43a1-9043-8f0160f6bf60", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc4e3e8-225b-423c-9885-81e5a63626a5", "created": "2026-01-27T05:13:01.544452Z", "modified": "2026-01-27T05:13:01.544452Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.s2m']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.544452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6998d04e-b9fb-42c5-9325-9da269dae880", "created": "2026-01-27T05:13:01.54511Z", "modified": "2026-01-27T05:13:01.54511Z", "relationship_type": "indicates", "source_ref": "indicator--ecc4e3e8-225b-423c-9885-81e5a63626a5", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc9a03c-130c-462b-9e68-882a70596864", "created": "2026-01-27T05:13:01.545284Z", "modified": "2026-01-27T05:13:01.545284Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.s2m.seas']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.545284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5a00af4-298e-41ea-8ba1-622c024150fe", "created": "2026-01-27T05:13:01.545945Z", "modified": "2026-01-27T05:13:01.545945Z", "relationship_type": "indicates", "source_ref": "indicator--afc9a03c-130c-462b-9e68-882a70596864", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0824ab2-aad3-4378-8dc9-81c097391ba0", "created": "2026-01-27T05:13:01.54612Z", "modified": "2026-01-27T05:13:01.54612Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sap4mobile']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.54612Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6417373-ba98-4e88-bc16-2c2dea7f239d", "created": "2026-01-27T05:13:01.546839Z", "modified": "2026-01-27T05:13:01.546839Z", "relationship_type": "indicates", "source_ref": "indicator--c0824ab2-aad3-4378-8dc9-81c097391ba0", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39db405-9f3e-411a-9ddf-f367354f045f", "created": "2026-01-27T05:13:01.547024Z", "modified": "2026-01-27T05:13:01.547024Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smart']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.547024Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84f78234-61eb-45ac-a2ac-0ea345c3eba8", "created": "2026-01-27T05:13:01.547783Z", "modified": "2026-01-27T05:13:01.547783Z", "relationship_type": "indicates", "source_ref": "indicator--d39db405-9f3e-411a-9ddf-f367354f045f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afafa7bf-675b-4145-8526-87bd5daaca6b", "created": "2026-01-27T05:13:01.547964Z", "modified": "2026-01-27T05:13:01.547964Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smartback']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.547964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a85ff09-2ce5-4ccf-b8f9-35bfb1b72602", "created": "2026-01-27T05:13:01.548609Z", "modified": "2026-01-27T05:13:01.548609Z", "relationship_type": "indicates", "source_ref": "indicator--afafa7bf-675b-4145-8526-87bd5daaca6b", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78016efc-c11d-43c7-9c42-f8ce11fa12ca", "created": "2026-01-27T05:13:01.548802Z", "modified": "2026-01-27T05:13:01.548802Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smstra.xanris']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.548802Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16bfd9e9-64af-4426-8ade-6bafc2717abe", "created": "2026-01-27T05:13:01.549452Z", "modified": "2026-01-27T05:13:01.549452Z", "relationship_type": "indicates", "source_ref": "indicator--78016efc-c11d-43c7-9c42-f8ce11fa12ca", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ea22c2-f6d9-40c6-8d98-504c8679f0dd", "created": "2026-01-27T05:13:01.549625Z", "modified": "2026-01-27T05:13:01.549625Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spy2mobile']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.549625Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d2ddf90-2572-4ae1-9188-8696d8332a9d", "created": "2026-01-27T05:13:01.550285Z", "modified": "2026-01-27T05:13:01.550285Z", "relationship_type": "indicates", "source_ref": "indicator--82ea22c2-f6d9-40c6-8d98-504c8679f0dd", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc49244a-3517-4d9b-808b-a51d9e4dd4c2", "created": "2026-01-27T05:13:01.550459Z", "modified": "2026-01-27T05:13:01.550459Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spy2mobile.light']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.550459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5593e66-0831-43fe-aa28-ba4fd11c4576", "created": "2026-01-27T05:13:01.551128Z", "modified": "2026-01-27T05:13:01.551128Z", "relationship_type": "indicates", "source_ref": "indicator--cc49244a-3517-4d9b-808b-a51d9e4dd4c2", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3316cdcb-11f3-4f7d-8e7b-7c626e2bcc8d", "created": "2026-01-27T05:13:01.551306Z", "modified": "2026-01-27T05:13:01.551306Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.stmrsa.htxt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.551306Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84060fc9-6a24-4529-9fab-c70b847e9d32", "created": "2026-01-27T05:13:01.551969Z", "modified": "2026-01-27T05:13:01.551969Z", "relationship_type": "indicates", "source_ref": "indicator--3316cdcb-11f3-4f7d-8e7b-7c626e2bcc8d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9346bb0f-86b5-49dc-8013-1f40f5b2aa79", "created": "2026-01-27T05:13:01.552144Z", "modified": "2026-01-27T05:13:01.552144Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tccplos.spth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.552144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a270cc42-40f8-4440-b901-e066c75b828d", "created": "2026-01-27T05:13:01.552799Z", "modified": "2026-01-27T05:13:01.552799Z", "relationship_type": "indicates", "source_ref": "indicator--9346bb0f-86b5-49dc-8013-1f40f5b2aa79", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99550ae1-8103-4b76-9271-d28ef1edcac6", "created": "2026-01-27T05:13:01.552974Z", "modified": "2026-01-27T05:13:01.552974Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tevi.walpi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.552974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b2e4c14-699d-4787-9122-5473a95fa53e", "created": "2026-01-27T05:13:01.553624Z", "modified": "2026-01-27T05:13:01.553624Z", "relationship_type": "indicates", "source_ref": "indicator--99550ae1-8103-4b76-9271-d28ef1edcac6", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ddeb64-4e07-4f23-bf75-681ee3f01d91", "created": "2026-01-27T05:13:01.553835Z", "modified": "2026-01-27T05:13:01.553835Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.tracker.sms.mobile']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.553835Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9910017b-eb17-4a14-826b-116c3d0f267d", "created": "2026-01-27T05:13:01.5545Z", "modified": "2026-01-27T05:13:01.5545Z", "relationship_type": "indicates", "source_ref": "indicator--55ddeb64-4e07-4f23-bf75-681ee3f01d91", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f16225-3340-44a2-827b-7f24ac66b6f2", "created": "2026-01-27T05:13:01.554672Z", "modified": "2026-01-27T05:13:01.554672Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trackzone.kids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.554672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2456836-3b3e-46f6-99ee-22a42fbb6a42", "created": "2026-01-27T05:13:01.555445Z", "modified": "2026-01-27T05:13:01.555445Z", "relationship_type": "indicates", "source_ref": "indicator--a4f16225-3340-44a2-827b-7f24ac66b6f2", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb761b7b-2ca7-4fbd-9a98-854d6ddcdf4e", "created": "2026-01-27T05:13:01.555626Z", "modified": "2026-01-27T05:13:01.555626Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trandmon.tool']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.555626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3888b3c9-dea0-4113-a984-31909f198e52", "created": "2026-01-27T05:13:01.556297Z", "modified": "2026-01-27T05:13:01.556297Z", "relationship_type": "indicates", "source_ref": "indicator--bb761b7b-2ca7-4fbd-9a98-854d6ddcdf4e", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab7e15f-2dbb-4248-8d20-fa085f12c3e3", "created": "2026-01-27T05:13:01.556473Z", "modified": "2026-01-27T05:13:01.556473Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.trphwhat.prob']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.556473Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d8b5f2d-b8e6-44c9-b648-a98ca0af4130", "created": "2026-01-27T05:13:01.557144Z", "modified": "2026-01-27T05:13:01.557144Z", "relationship_type": "indicates", "source_ref": "indicator--7ab7e15f-2dbb-4248-8d20-fa085f12c3e3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4439dfae-e690-4b1d-b96c-5ebecc9fd4ca", "created": "2026-01-27T05:13:01.55732Z", "modified": "2026-01-27T05:13:01.55732Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.viewcalls.rem']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.55732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43ce0cbb-fe7a-427f-a052-08b126074623", "created": "2026-01-27T05:13:01.557982Z", "modified": "2026-01-27T05:13:01.557982Z", "relationship_type": "indicates", "source_ref": "indicator--4439dfae-e690-4b1d-b96c-5ebecc9fd4ca", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61da5c45-1881-4d05-a62b-5f58e0a412f1", "created": "2026-01-27T05:13:01.558164Z", "modified": "2026-01-27T05:13:01.558164Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.viewsms.remb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.558164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bdc5a161-3e44-494b-ae72-896954d58ced", "created": "2026-01-27T05:13:01.558867Z", "modified": "2026-01-27T05:13:01.558867Z", "relationship_type": "indicates", "source_ref": "indicator--61da5c45-1881-4d05-a62b-5f58e0a412f1", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cc86ad-05f7-44eb-8d17-7b9a67e24180", "created": "2026-01-27T05:13:01.559054Z", "modified": "2026-01-27T05:13:01.559054Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.whtrack.monit']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.559054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e055593-2796-44cb-964d-a21f2a2f1294", "created": "2026-01-27T05:13:01.559706Z", "modified": "2026-01-27T05:13:01.559706Z", "relationship_type": "indicates", "source_ref": "indicator--54cc86ad-05f7-44eb-8d17-7b9a67e24180", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc448c49-c7d1-468e-b19c-3438b5da2a10", "created": "2026-01-27T05:13:01.559902Z", "modified": "2026-01-27T05:13:01.559902Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0387135D057AEAA0F8BCFCE2AFA84D9BD1FA6F30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.559902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60efb153-916f-440a-97f0-e17bcfbdaa63", "created": "2026-01-27T05:13:01.560694Z", "modified": "2026-01-27T05:13:01.560694Z", "relationship_type": "indicates", "source_ref": "indicator--bc448c49-c7d1-468e-b19c-3438b5da2a10", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab6f23b-f116-4dfe-940b-33ef3e9bd861", "created": "2026-01-27T05:13:01.560892Z", "modified": "2026-01-27T05:13:01.560892Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0C5AB4D05A2C804D3A4D0472CEAC50B89833E6E4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.560892Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--744fba63-9240-48b3-8630-80d12b795971", "created": "2026-01-27T05:13:01.561667Z", "modified": "2026-01-27T05:13:01.561667Z", "relationship_type": "indicates", "source_ref": "indicator--3ab6f23b-f116-4dfe-940b-33ef3e9bd861", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8c3878-331b-4041-86d4-734451fb0d3d", "created": "2026-01-27T05:13:01.561861Z", "modified": "2026-01-27T05:13:01.561861Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0F64B6EBB49849AC685FE5DF605908594623368E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.561861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f82e3bd-a89f-4a7e-b697-9976ca9e7237", "created": "2026-01-27T05:13:01.562634Z", "modified": "2026-01-27T05:13:01.562634Z", "relationship_type": "indicates", "source_ref": "indicator--ef8c3878-331b-4041-86d4-734451fb0d3d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e39f26-964b-40dd-b465-c89049605f2b", "created": "2026-01-27T05:13:01.562825Z", "modified": "2026-01-27T05:13:01.562825Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='14EE7779B2E84A0FF1309DEA72881670D78E98AB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.562825Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbb84eac-700d-437a-8579-eb113886028e", "created": "2026-01-27T05:13:01.563729Z", "modified": "2026-01-27T05:13:01.563729Z", "relationship_type": "indicates", "source_ref": "indicator--a0e39f26-964b-40dd-b465-c89049605f2b", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45515068-16fa-413f-9be0-0e4127ee4d87", "created": "2026-01-27T05:13:01.563924Z", "modified": "2026-01-27T05:13:01.563924Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1BB7F1E962C35F00BE2EF97A64C753CCA0993637']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.563924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--805b9a62-f094-4e54-beee-d85515f73322", "created": "2026-01-27T05:13:01.564688Z", "modified": "2026-01-27T05:13:01.564688Z", "relationship_type": "indicates", "source_ref": "indicator--45515068-16fa-413f-9be0-0e4127ee4d87", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f7076c-c44d-4ece-84e8-8bba8a09071d", "created": "2026-01-27T05:13:01.564884Z", "modified": "2026-01-27T05:13:01.564884Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='20948233C3EF1662E79850AE0AB959C4760114C2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.564884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--334e52a7-b7d6-4260-a606-41362ebabd9a", "created": "2026-01-27T05:13:01.565649Z", "modified": "2026-01-27T05:13:01.565649Z", "relationship_type": "indicates", "source_ref": "indicator--06f7076c-c44d-4ece-84e8-8bba8a09071d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddc0492-27dc-44f7-a7f5-a9a23a6f64b5", "created": "2026-01-27T05:13:01.565843Z", "modified": "2026-01-27T05:13:01.565843Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='26DDA9B261169FB0A63A6CEA5B682B7A190328B6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.565843Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b205fc2-585a-416d-bb1b-b1aa34be695a", "created": "2026-01-27T05:13:01.56661Z", "modified": "2026-01-27T05:13:01.56661Z", "relationship_type": "indicates", "source_ref": "indicator--6ddc0492-27dc-44f7-a7f5-a9a23a6f64b5", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f45f9b6-3165-49b7-a786-580afd694d16", "created": "2026-01-27T05:13:01.566804Z", "modified": "2026-01-27T05:13:01.566804Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='26FC20C25AF99E4B6C16ABAD8E8D76AFA55973BB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.566804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--052c328e-8032-4ed6-a215-55d159a7ad59", "created": "2026-01-27T05:13:01.567584Z", "modified": "2026-01-27T05:13:01.567584Z", "relationship_type": "indicates", "source_ref": "indicator--0f45f9b6-3165-49b7-a786-580afd694d16", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dec8275-3e1b-4763-8b02-2b8945485e2e", "created": "2026-01-27T05:13:01.567774Z", "modified": "2026-01-27T05:13:01.567774Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='271CA9A77AF56B94F942EDA8F517E4B0FD44206C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.567774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba9461a2-dd67-4f28-9bf3-0613cb8ea005", "created": "2026-01-27T05:13:01.568545Z", "modified": "2026-01-27T05:13:01.568545Z", "relationship_type": "indicates", "source_ref": "indicator--2dec8275-3e1b-4763-8b02-2b8945485e2e", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f564f1-f199-4acf-8dbf-615a467abaf7", "created": "2026-01-27T05:13:01.568726Z", "modified": "2026-01-27T05:13:01.568726Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2919FF38F04D757BA6FE344F1729275739F43E89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.568726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ccc5768-3439-4bc5-af48-881c6375868c", "created": "2026-01-27T05:13:01.569515Z", "modified": "2026-01-27T05:13:01.569515Z", "relationship_type": "indicates", "source_ref": "indicator--f9f564f1-f199-4acf-8dbf-615a467abaf7", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27863c7-d6d8-45bf-a77f-ad27482622ad", "created": "2026-01-27T05:13:01.569688Z", "modified": "2026-01-27T05:13:01.569688Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2B02F9708FAD9017D9F709AB2C5C8B5BD0D29394']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.569688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79d6b0b0-59be-45a0-a90c-c8a7978812d0", "created": "2026-01-27T05:13:01.570475Z", "modified": "2026-01-27T05:13:01.570475Z", "relationship_type": "indicates", "source_ref": "indicator--f27863c7-d6d8-45bf-a77f-ad27482622ad", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919df904-ff40-4202-b007-8653e4e9c426", "created": "2026-01-27T05:13:01.570647Z", "modified": "2026-01-27T05:13:01.570647Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='39DDEFD8261C1946E4F3160F6A9E200F59F06C11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.570647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5078526-b28f-4c87-8dff-95fc4f59e6e3", "created": "2026-01-27T05:13:01.571445Z", "modified": "2026-01-27T05:13:01.571445Z", "relationship_type": "indicates", "source_ref": "indicator--919df904-ff40-4202-b007-8653e4e9c426", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a989af4f-1fd8-4eab-a16e-acfcb0c6f675", "created": "2026-01-27T05:13:01.571616Z", "modified": "2026-01-27T05:13:01.571616Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3A041A8B1CF12E01AD4AA14779C1FCCA0701FE5C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.571616Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33c45e26-ee23-4d6a-8dc2-36d27c7b6dbe", "created": "2026-01-27T05:13:01.572512Z", "modified": "2026-01-27T05:13:01.572512Z", "relationship_type": "indicates", "source_ref": "indicator--a989af4f-1fd8-4eab-a16e-acfcb0c6f675", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a142dce2-3e67-4e8c-92e2-3bd0ba0ecd32", "created": "2026-01-27T05:13:01.572696Z", "modified": "2026-01-27T05:13:01.572696Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3E4E5813CA5B9D9BB50B70FAD3C201FAA54B4FD5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.572696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cbd96a4e-e4f6-4642-93b0-bd9a1ea344a7", "created": "2026-01-27T05:13:01.573479Z", "modified": "2026-01-27T05:13:01.573479Z", "relationship_type": "indicates", "source_ref": "indicator--a142dce2-3e67-4e8c-92e2-3bd0ba0ecd32", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153b8d94-4da4-4288-bfc9-c8d50c6a81c4", "created": "2026-01-27T05:13:01.573654Z", "modified": "2026-01-27T05:13:01.573654Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4569A62308FA134A33A5DDCC065D6FDAE5653435']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.573654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66222a0b-64cd-47ae-b6b2-2d7b51c74181", "created": "2026-01-27T05:13:01.574432Z", "modified": "2026-01-27T05:13:01.574432Z", "relationship_type": "indicates", "source_ref": "indicator--153b8d94-4da4-4288-bfc9-c8d50c6a81c4", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e136df8-5cc8-47b4-ac31-52c5e600d1ff", "created": "2026-01-27T05:13:01.574605Z", "modified": "2026-01-27T05:13:01.574605Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4579E9E02465DAC399B7A47682813F5104E5D914']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.574605Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d393b4e3-8bdd-4ea6-8478-7a0d053002dd", "created": "2026-01-27T05:13:01.575383Z", "modified": "2026-01-27T05:13:01.575383Z", "relationship_type": "indicates", "source_ref": "indicator--9e136df8-5cc8-47b4-ac31-52c5e600d1ff", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a811547-db69-483d-b3fd-353b319dc6bf", "created": "2026-01-27T05:13:01.575558Z", "modified": "2026-01-27T05:13:01.575558Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='54E4D1ACDA9E3071D27AA7B6470E23F75BF1380B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.575558Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--51e77eef-7ed2-4094-af85-bf9ba3d4dd5b", "created": "2026-01-27T05:13:01.57636Z", "modified": "2026-01-27T05:13:01.57636Z", "relationship_type": "indicates", "source_ref": "indicator--8a811547-db69-483d-b3fd-353b319dc6bf", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a1960b-1807-4276-b921-36451f96ebf3", "created": "2026-01-27T05:13:01.576543Z", "modified": "2026-01-27T05:13:01.576543Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5C9031E2340478521630198F3F90E5C8D38D3B64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.576543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acd7eb3c-2454-42a7-a175-a85b67e0f1d2", "created": "2026-01-27T05:13:01.577335Z", "modified": "2026-01-27T05:13:01.577335Z", "relationship_type": "indicates", "source_ref": "indicator--23a1960b-1807-4276-b921-36451f96ebf3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8fdac3-1184-45e4-8a8d-79629c38e83d", "created": "2026-01-27T05:13:01.577509Z", "modified": "2026-01-27T05:13:01.577509Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='76A90B5E41FA2AFE14478CDA24A0CA6B4F7FC5F3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.577509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8aca990-d494-44ea-a894-8710a51169bc", "created": "2026-01-27T05:13:01.578521Z", "modified": "2026-01-27T05:13:01.578521Z", "relationship_type": "indicates", "source_ref": "indicator--4d8fdac3-1184-45e4-8a8d-79629c38e83d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4418a675-eebd-401f-b816-90d393fe9165", "created": "2026-01-27T05:13:01.578716Z", "modified": "2026-01-27T05:13:01.578716Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7D9EDDE23B4D3D7AC459B06ECEBE8EA1350D4F8F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.578716Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8a1d175-ab4d-478c-96a0-182a811431a6", "created": "2026-01-27T05:13:01.579528Z", "modified": "2026-01-27T05:13:01.579528Z", "relationship_type": "indicates", "source_ref": "indicator--4418a675-eebd-401f-b816-90d393fe9165", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33338cd-044f-41cc-b068-fa996d968dd3", "created": "2026-01-27T05:13:01.579708Z", "modified": "2026-01-27T05:13:01.579708Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7DED7756C3DBE351A23BE061E989273888414FE6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.579708Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8544d2f8-fafb-45c0-aae2-e2e7e58f7462", "created": "2026-01-27T05:13:01.580517Z", "modified": "2026-01-27T05:13:01.580517Z", "relationship_type": "indicates", "source_ref": "indicator--f33338cd-044f-41cc-b068-fa996d968dd3", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07be80d4-26bf-4f75-93f8-ab7938ccf29d", "created": "2026-01-27T05:13:01.580695Z", "modified": "2026-01-27T05:13:01.580695Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8C76B4444DAE08ECF578AF51D295836F0D9BADC6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.580695Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30c47a21-c78d-44af-89c8-1a036fef9cbe", "created": "2026-01-27T05:13:01.581617Z", "modified": "2026-01-27T05:13:01.581617Z", "relationship_type": "indicates", "source_ref": "indicator--07be80d4-26bf-4f75-93f8-ab7938ccf29d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfda3278-57b7-4cf9-98bc-8e8b83656edd", "created": "2026-01-27T05:13:01.581815Z", "modified": "2026-01-27T05:13:01.581815Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8D7FEC36654F6B35FA89E079685D637CCEE27755']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.581815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6e74bce-1557-4fba-8b4d-d6f794548467", "created": "2026-01-27T05:13:01.582585Z", "modified": "2026-01-27T05:13:01.582585Z", "relationship_type": "indicates", "source_ref": "indicator--bfda3278-57b7-4cf9-98bc-8e8b83656edd", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63db70d-6d24-4918-82b7-6b9e49fc2e09", "created": "2026-01-27T05:13:01.582775Z", "modified": "2026-01-27T05:13:01.582775Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9329632A70D41158EBAB6EED27B12D8CB0D47579']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.582775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b299dd5e-f540-450b-97ae-18d515758d10", "created": "2026-01-27T05:13:01.583546Z", "modified": "2026-01-27T05:13:01.583546Z", "relationship_type": "indicates", "source_ref": "indicator--c63db70d-6d24-4918-82b7-6b9e49fc2e09", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d2ab03-fb95-492c-b4eb-46a8495b463d", "created": "2026-01-27T05:13:01.583721Z", "modified": "2026-01-27T05:13:01.583721Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='98140CAE57F4D4CA53EF81F6521E7A0FD601F6E9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.583721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0776dd3b-a167-43da-8cc7-4a44097ab401", "created": "2026-01-27T05:13:01.584502Z", "modified": "2026-01-27T05:13:01.584502Z", "relationship_type": "indicates", "source_ref": "indicator--83d2ab03-fb95-492c-b4eb-46a8495b463d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef59e29-6ee5-4971-a20b-959699db697e", "created": "2026-01-27T05:13:01.584676Z", "modified": "2026-01-27T05:13:01.584676Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='986E5892EFB97E807772698BAC701F49CE9CAEA8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.584676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e9e7c68-8d2d-4e4a-8ae0-aa5c3efce95b", "created": "2026-01-27T05:13:01.585458Z", "modified": "2026-01-27T05:13:01.585458Z", "relationship_type": "indicates", "source_ref": "indicator--7ef59e29-6ee5-4971-a20b-959699db697e", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fae548-801f-479f-9448-ee990115c946", "created": "2026-01-27T05:13:01.585632Z", "modified": "2026-01-27T05:13:01.585632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='98E76043B54DD7CB76E0E6E384A83646F1865BAE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.585632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a321250f-8bcb-4d39-a07f-c2ce90570f3c", "created": "2026-01-27T05:13:01.586412Z", "modified": "2026-01-27T05:13:01.586412Z", "relationship_type": "indicates", "source_ref": "indicator--87fae548-801f-479f-9448-ee990115c946", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d107b7-f8be-4911-bb8f-a92890a09ff2", "created": "2026-01-27T05:13:01.58659Z", "modified": "2026-01-27T05:13:01.58659Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A2CD01EE20E3C25575D2D9B9645A52A1FA8C36C6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.58659Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ddace66-404c-4701-a87f-12b53c96eba3", "created": "2026-01-27T05:13:01.587381Z", "modified": "2026-01-27T05:13:01.587381Z", "relationship_type": "indicates", "source_ref": "indicator--02d107b7-f8be-4911-bb8f-a92890a09ff2", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbd203d-2c6d-45f5-80b5-e0a2ab133bbf", "created": "2026-01-27T05:13:01.587556Z", "modified": "2026-01-27T05:13:01.587556Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A2CE290D98B66B577880F3D7807DC01EB7FCE01B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.587556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de8fee12-a4eb-4774-b383-1f54b7d45c00", "created": "2026-01-27T05:13:01.588365Z", "modified": "2026-01-27T05:13:01.588365Z", "relationship_type": "indicates", "source_ref": "indicator--edbd203d-2c6d-45f5-80b5-e0a2ab133bbf", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fef856-4fda-4857-b321-8b58df9edb76", "created": "2026-01-27T05:13:01.588544Z", "modified": "2026-01-27T05:13:01.588544Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='ADF393A6628366341BA488B85A5AE738793BFD17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.588544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf78cbc2-d9eb-4d72-a71b-01082648945c", "created": "2026-01-27T05:13:01.589475Z", "modified": "2026-01-27T05:13:01.589475Z", "relationship_type": "indicates", "source_ref": "indicator--25fef856-4fda-4857-b321-8b58df9edb76", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51560a5-1258-4100-98d9-89665cc4c9e8", "created": "2026-01-27T05:13:01.589653Z", "modified": "2026-01-27T05:13:01.589653Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B8C908630D7D1ED52FA4E5AEC2A2BDA0414F8B3F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.589653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--935129d8-37e8-429d-8576-99eecfaae016", "created": "2026-01-27T05:13:01.590428Z", "modified": "2026-01-27T05:13:01.590428Z", "relationship_type": "indicates", "source_ref": "indicator--f51560a5-1258-4100-98d9-89665cc4c9e8", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31baddd6-fb47-4a5b-9e94-507f25a0873d", "created": "2026-01-27T05:13:01.590602Z", "modified": "2026-01-27T05:13:01.590602Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BB59FC701EAC40C51C9274EA6A8EE623F5002802']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.590602Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf632838-1bfa-4a91-9c4e-1b40a2cacd06", "created": "2026-01-27T05:13:01.591387Z", "modified": "2026-01-27T05:13:01.591387Z", "relationship_type": "indicates", "source_ref": "indicator--31baddd6-fb47-4a5b-9e94-507f25a0873d", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889012fd-1194-47e3-bbd5-36286012cf30", "created": "2026-01-27T05:13:01.591564Z", "modified": "2026-01-27T05:13:01.591564Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BC682A41C2AA1EFFFD65CE42BBE3FA967A561EEC']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.591564Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e65ea9b5-990f-464e-a6c7-6a5b301cf0a2", "created": "2026-01-27T05:13:01.592353Z", "modified": "2026-01-27T05:13:01.592353Z", "relationship_type": "indicates", "source_ref": "indicator--889012fd-1194-47e3-bbd5-36286012cf30", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbebd526-b065-42cd-a7ef-dc8e33f61d65", "created": "2026-01-27T05:13:01.592532Z", "modified": "2026-01-27T05:13:01.592532Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CA6F27DDCBE5D7929C82F42F63FF24703A352756']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.592532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94d4c0e6-b41e-4fa8-b760-6192662afb78", "created": "2026-01-27T05:13:01.593317Z", "modified": "2026-01-27T05:13:01.593317Z", "relationship_type": "indicates", "source_ref": "indicator--bbebd526-b065-42cd-a7ef-dc8e33f61d65", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534f212a-b661-4c18-9e97-7f7ba0c7c195", "created": "2026-01-27T05:13:01.593497Z", "modified": "2026-01-27T05:13:01.593497Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E401C172FE10C4893A13B38B1FABAA43473E2900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.593497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--611e567d-eb01-425d-8269-ee018f7476d2", "created": "2026-01-27T05:13:01.594272Z", "modified": "2026-01-27T05:13:01.594272Z", "relationship_type": "indicates", "source_ref": "indicator--534f212a-b661-4c18-9e97-7f7ba0c7c195", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9983281d-2beb-4728-8a0a-338ffa01dc3f", "created": "2026-01-27T05:13:01.594445Z", "modified": "2026-01-27T05:13:01.594445Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EF8006163D09D176083936CFB068BB07A8918118']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.594445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3aadd0e-1f68-4591-9384-425fc0bdeb73", "created": "2026-01-27T05:13:01.595238Z", "modified": "2026-01-27T05:13:01.595238Z", "relationship_type": "indicates", "source_ref": "indicator--9983281d-2beb-4728-8a0a-338ffa01dc3f", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403e5424-60d2-4f19-8f6a-14a99d291ea4", "created": "2026-01-27T05:13:01.595417Z", "modified": "2026-01-27T05:13:01.595417Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F5EAEFDECAD39B93134E859BEDC7D3ED42FBE2B3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.595417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6affeecc-d1c4-4340-97d1-fcf69eafef83", "created": "2026-01-27T05:13:01.59621Z", "modified": "2026-01-27T05:13:01.59621Z", "relationship_type": "indicates", "source_ref": "indicator--403e5424-60d2-4f19-8f6a-14a99d291ea4", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd673dff-4d1a-4d00-a2d6-64fbc71f28fa", "created": "2026-01-27T05:13:01.596387Z", "modified": "2026-01-27T05:13:01.596387Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FD4C2144DF6E431378A46EAEACC696AF94DE9D56']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.596387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ef5cc1f-e187-440f-9dc8-62a9787fc368", "created": "2026-01-27T05:13:01.597163Z", "modified": "2026-01-27T05:13:01.597163Z", "relationship_type": "indicates", "source_ref": "indicator--dd673dff-4d1a-4d00-a2d6-64fbc71f28fa", "target_ref": "malware--e6fcaee0-af7e-45e0-8436-ab983c5cc277"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7", "created": "2026-01-27T05:13:01.597339Z", "modified": "2026-01-27T05:13:01.597339Z", "name": "MobileSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76be874f-51b4-4253-8a7f-dd83d47bf129", "created": "2026-01-27T05:13:01.597511Z", "modified": "2026-01-27T05:13:01.597511Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.597511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--803c5b70-d78b-4012-96ec-c37b318709be", "created": "2026-01-27T05:13:01.598552Z", "modified": "2026-01-27T05:13:01.598552Z", "relationship_type": "indicates", "source_ref": "indicator--76be874f-51b4-4253-8a7f-dd83d47bf129", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed472fb-e083-4a2e-9801-151f2580a02d", "created": "2026-01-27T05:13:01.598732Z", "modified": "2026-01-27T05:13:01.598732Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='de.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.598732Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9aa742d5-3083-4c5f-aa7e-5c2867e2e4f6", "created": "2026-01-27T05:13:01.599425Z", "modified": "2026-01-27T05:13:01.599425Z", "relationship_type": "indicates", "source_ref": "indicator--8ed472fb-e083-4a2e-9801-151f2580a02d", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1459a42-2a51-4a57-aed4-cb170d582452", "created": "2026-01-27T05:13:01.599599Z", "modified": "2026-01-27T05:13:01.599599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='es.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.599599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b747caab-1b10-4412-8b6c-d1502ac24ecb", "created": "2026-01-27T05:13:01.600282Z", "modified": "2026-01-27T05:13:01.600282Z", "relationship_type": "indicates", "source_ref": "indicator--d1459a42-2a51-4a57-aed4-cb170d582452", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3152f079-5ccb-4e98-8b62-b0e5bde36357", "created": "2026-01-27T05:13:01.600458Z", "modified": "2026-01-27T05:13:01.600458Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fr.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.600458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1edab5e0-d390-482b-9f96-af68ba3d91e5", "created": "2026-01-27T05:13:01.60114Z", "modified": "2026-01-27T05:13:01.60114Z", "relationship_type": "indicates", "source_ref": "indicator--3152f079-5ccb-4e98-8b62-b0e5bde36357", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6868a5d-5023-46df-b83f-05ea42032983", "created": "2026-01-27T05:13:01.601318Z", "modified": "2026-01-27T05:13:01.601318Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='it.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.601318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92620e4c-f9ba-4669-90a6-02dcc0359fa0", "created": "2026-01-27T05:13:01.602014Z", "modified": "2026-01-27T05:13:01.602014Z", "relationship_type": "indicates", "source_ref": "indicator--f6868a5d-5023-46df-b83f-05ea42032983", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84654ce2-8170-471e-bcc1-52a251ef8bdf", "created": "2026-01-27T05:13:01.602192Z", "modified": "2026-01-27T05:13:01.602192Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.602192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e39f2fa6-2350-4fd5-a91f-d38a4ebe5a9e", "created": "2026-01-27T05:13:01.602882Z", "modified": "2026-01-27T05:13:01.602882Z", "relationship_type": "indicates", "source_ref": "indicator--84654ce2-8170-471e-bcc1-52a251ef8bdf", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcb774f-1cdb-498e-9861-9f329d099a80", "created": "2026-01-27T05:13:01.603058Z", "modified": "2026-01-27T05:13:01.603058Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pt.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.603058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dcd806c5-b509-42f7-8950-564397407b89", "created": "2026-01-27T05:13:01.603722Z", "modified": "2026-01-27T05:13:01.603722Z", "relationship_type": "indicates", "source_ref": "indicator--edcb774f-1cdb-498e-9861-9f329d099a80", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f6b329-82b8-4391-9c43-c64be7505ea6", "created": "2026-01-27T05:13:01.603911Z", "modified": "2026-01-27T05:13:01.603911Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ro.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.603911Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1850c12-8cad-45f9-b61b-e072f20553bd", "created": "2026-01-27T05:13:01.604569Z", "modified": "2026-01-27T05:13:01.604569Z", "relationship_type": "indicates", "source_ref": "indicator--e9f6b329-82b8-4391-9c43-c64be7505ea6", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76dcb29-0298-411e-b0a0-b5c82b8869a7", "created": "2026-01-27T05:13:01.60474Z", "modified": "2026-01-27T05:13:01.60474Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilespy.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.60474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--192032c0-ecb0-4ea2-9984-a721593fedb2", "created": "2026-01-27T05:13:01.60542Z", "modified": "2026-01-27T05:13:01.60542Z", "relationship_type": "indicates", "source_ref": "indicator--c76dcb29-0298-411e-b0a0-b5c82b8869a7", "target_ref": "malware--9d1f90fb-8f0c-4d5c-85d1-8146581885c7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5367a927-8301-45ea-ba17-2c1945382c29", "created": "2026-01-27T05:13:01.605592Z", "modified": "2026-01-27T05:13:01.605592Z", "name": "WebWatcher", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ded777-3a8d-46f1-9b89-c1f474a309ab", "created": "2026-01-27T05:13:01.605772Z", "modified": "2026-01-27T05:13:01.605772Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.awarenesstechnologies.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.605772Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d6116b4-bd4d-4e00-8705-998887f7eaa9", "created": "2026-01-27T05:13:01.606582Z", "modified": "2026-01-27T05:13:01.606582Z", "relationship_type": "indicates", "source_ref": "indicator--23ded777-3a8d-46f1-9b89-c1f474a309ab", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3764df1-ac61-4440-9ece-97c72e8c7f71", "created": "2026-01-27T05:13:01.606792Z", "modified": "2026-01-27T05:13:01.606792Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apitest.awarenesstechnologies.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.606792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5961bc1-f328-4022-9ef1-1bfb4f837a0b", "created": "2026-01-27T05:13:01.60754Z", "modified": "2026-01-27T05:13:01.60754Z", "relationship_type": "indicates", "source_ref": "indicator--f3764df1-ac61-4440-9ece-97c72e8c7f71", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36d0406-0aae-4629-b7ed-f6d48326b185", "created": "2026-01-27T05:13:01.607735Z", "modified": "2026-01-27T05:13:01.607735Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-webwatcherdata-alb-1451089636.us-west-2.elb.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.607735Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2051754-e384-41d7-8e95-9d59243b5722", "created": "2026-01-27T05:13:01.608554Z", "modified": "2026-01-27T05:13:01.608554Z", "relationship_type": "indicates", "source_ref": "indicator--b36d0406-0aae-4629-b7ed-f6d48326b185", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4058446-3011-43a8-992f-256e1626a08b", "created": "2026-01-27T05:13:01.608739Z", "modified": "2026-01-27T05:13:01.608739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.qa.webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.608739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d76c3c21-cdff-4d1e-b0c0-b3bda8192eb0", "created": "2026-01-27T05:13:01.609451Z", "modified": "2026-01-27T05:13:01.609451Z", "relationship_type": "indicates", "source_ref": "indicator--c4058446-3011-43a8-992f-256e1626a08b", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54135851-815f-4474-8891-696457e789b0", "created": "2026-01-27T05:13:01.609627Z", "modified": "2026-01-27T05:13:01.609627Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data.webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.609627Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--293b4f02-364b-4935-a37f-3dc28d28973a", "created": "2026-01-27T05:13:01.610322Z", "modified": "2026-01-27T05:13:01.610322Z", "relationship_type": "indicates", "source_ref": "indicator--54135851-815f-4474-8891-696457e789b0", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de36a362-c973-4d83-9527-f28cf934e0ea", "created": "2026-01-27T05:13:01.610497Z", "modified": "2026-01-27T05:13:01.610497Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='download.webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.610497Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9f2ba00-9811-4d51-ba4d-f3cb41ac4851", "created": "2026-01-27T05:13:01.611207Z", "modified": "2026-01-27T05:13:01.611207Z", "relationship_type": "indicates", "source_ref": "indicator--de36a362-c973-4d83-9527-f28cf934e0ea", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa39f25e-8bcf-4190-b3ab-8fe98b3cd282", "created": "2026-01-27T05:13:01.611382Z", "modified": "2026-01-27T05:13:01.611382Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='login.webwatcher.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.611382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b5369d0-3f9f-4780-8026-eb7fc944261d", "created": "2026-01-27T05:13:01.612074Z", "modified": "2026-01-27T05:13:01.612074Z", "relationship_type": "indicates", "source_ref": "indicator--fa39f25e-8bcf-4190-b3ab-8fe98b3cd282", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d97b07e-2ba0-4869-8921-6a162a842fb2", "created": "2026-01-27T05:13:01.612247Z", "modified": "2026-01-27T05:13:01.612247Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rcomlogin.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.612247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58cd32d9-290b-4679-9086-e6e024c59a0d", "created": "2026-01-27T05:13:01.612928Z", "modified": "2026-01-27T05:13:01.612928Z", "relationship_type": "indicates", "source_ref": "indicator--2d97b07e-2ba0-4869-8921-6a162a842fb2", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180bcf5a-71cd-4e17-9ba0-5db0e0e682a6", "created": "2026-01-27T05:13:01.613104Z", "modified": "2026-01-27T05:13:01.613104Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='screentimelabs.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.613104Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8667ee70-0121-409f-97ee-a532640966b7", "created": "2026-01-27T05:13:01.613803Z", "modified": "2026-01-27T05:13:01.613803Z", "relationship_type": "indicates", "source_ref": "indicator--180bcf5a-71cd-4e17-9ba0-5db0e0e682a6", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc208ef5-a62b-4ff1-8b64-46be21771937", "created": "2026-01-27T05:13:01.613978Z", "modified": "2026-01-27T05:13:01.613978Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatcher-child-app.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.613978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea9aa025-ee2d-486b-82ac-3f2c92977996", "created": "2026-01-27T05:13:01.614673Z", "modified": "2026-01-27T05:13:01.614673Z", "relationship_type": "indicates", "source_ref": "indicator--dc208ef5-a62b-4ff1-8b64-46be21771937", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54af36e-da22-426b-88ca-c924af7636c9", "created": "2026-01-27T05:13:01.614862Z", "modified": "2026-01-27T05:13:01.614862Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatcherdata.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.614862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6fde024c-5249-41f6-92b3-a2007163f462", "created": "2026-01-27T05:13:01.615666Z", "modified": "2026-01-27T05:13:01.615666Z", "relationship_type": "indicates", "source_ref": "indicator--f54af36e-da22-426b-88ca-c924af7636c9", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df41032-afc5-4ca1-a2a7-a134b31b26f6", "created": "2026-01-27T05:13:01.615859Z", "modified": "2026-01-27T05:13:01.615859Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.webwatchernow.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.615859Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae13ef2e-d957-4c85-806e-8248f033f9d1", "created": "2026-01-27T05:13:01.616534Z", "modified": "2026-01-27T05:13:01.616534Z", "relationship_type": "indicates", "source_ref": "indicator--5df41032-afc5-4ca1-a2a7-a134b31b26f6", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bb15c1-62a7-4e7b-8778-87a2f2a20e4a", "created": "2026-01-27T05:13:01.61672Z", "modified": "2026-01-27T05:13:01.61672Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatchernow.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.61672Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e896c13-486d-4083-9c79-65f628a42f58", "created": "2026-01-27T05:13:01.617413Z", "modified": "2026-01-27T05:13:01.617413Z", "relationship_type": "indicates", "source_ref": "indicator--f5bb15c1-62a7-4e7b-8778-87a2f2a20e4a", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9fef9b7-13b7-4add-ad54-d4cf01da8acc", "created": "2026-01-27T05:13:01.617589Z", "modified": "2026-01-27T05:13:01.617589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awarenesstechnologies.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.617589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--134e1024-1b97-4256-95df-487ebcab4200", "created": "2026-01-27T05:13:01.618303Z", "modified": "2026-01-27T05:13:01.618303Z", "relationship_type": "indicates", "source_ref": "indicator--c9fef9b7-13b7-4add-ad54-d4cf01da8acc", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dec289-dc74-4586-9e83-c665dd57ce1e", "created": "2026-01-27T05:13:01.618486Z", "modified": "2026-01-27T05:13:01.618486Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='interguardsoftware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.618486Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4fc5a8bf-557f-46e8-ad6e-a078b8e80bca", "created": "2026-01-27T05:13:01.619183Z", "modified": "2026-01-27T05:13:01.619183Z", "relationship_type": "indicates", "source_ref": "indicator--f1dec289-dc74-4586-9e83-c665dd57ce1e", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb632907-ec0e-4d49-875a-d2acf5438cb3", "created": "2026-01-27T05:13:01.619359Z", "modified": "2026-01-27T05:13:01.619359Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='screentimelabs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.619359Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1fa0a87-6e7b-4822-a116-c7b9380522e2", "created": "2026-01-27T05:13:01.620048Z", "modified": "2026-01-27T05:13:01.620048Z", "relationship_type": "indicates", "source_ref": "indicator--fb632907-ec0e-4d49-875a-d2acf5438cb3", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db0c612-238c-467c-9c20-a007b10c912f", "created": "2026-01-27T05:13:01.620223Z", "modified": "2026-01-27T05:13:01.620223Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webwatcher.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.620223Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--08576233-a225-4948-8b6b-26691804b2b7", "created": "2026-01-27T05:13:01.620898Z", "modified": "2026-01-27T05:13:01.620898Z", "relationship_type": "indicates", "source_ref": "indicator--1db0c612-238c-467c-9c20-a007b10c912f", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b977a2-eeff-4e96-8059-6faf92e2b157", "created": "2026-01-27T05:13:01.621071Z", "modified": "2026-01-27T05:13:01.621071Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.webwatcher.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.621071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1f8b7a2-590b-438d-9803-4ca6bb9cbded", "created": "2026-01-27T05:13:01.62176Z", "modified": "2026-01-27T05:13:01.62176Z", "relationship_type": "indicates", "source_ref": "indicator--69b977a2-eeff-4e96-8059-6faf92e2b157", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2497f06e-9c8a-4c66-8e2c-a2dc513c1da7", "created": "2026-01-27T05:13:01.621937Z", "modified": "2026-01-27T05:13:01.621937Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.at.wwka']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.621937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50eeafa3-8680-444e-afb3-7bb97d0cb9e2", "created": "2026-01-27T05:13:01.622572Z", "modified": "2026-01-27T05:13:01.622572Z", "relationship_type": "indicates", "source_ref": "indicator--2497f06e-9c8a-4c66-8e2c-a2dc513c1da7", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd696447-8376-4e56-a6c6-5a1256d26603", "created": "2026-01-27T05:13:01.622759Z", "modified": "2026-01-27T05:13:01.622759Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ati.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.622759Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8927008-9ff6-4b03-8740-09f494322a62", "created": "2026-01-27T05:13:01.623556Z", "modified": "2026-01-27T05:13:01.623556Z", "relationship_type": "indicates", "source_ref": "indicator--bd696447-8376-4e56-a6c6-5a1256d26603", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97c8f7f-70c4-4f21-9352-fabbcfdb77e4", "created": "2026-01-27T05:13:01.62373Z", "modified": "2026-01-27T05:13:01.62373Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ati.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.62373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ea5cd5e-091b-4e0a-b6c6-c080a91e1541", "created": "2026-01-27T05:13:01.624389Z", "modified": "2026-01-27T05:13:01.624389Z", "relationship_type": "indicates", "source_ref": "indicator--f97c8f7f-70c4-4f21-9352-fabbcfdb77e4", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849aefa5-6bcb-4ec8-9aa5-678ec17f8638", "created": "2026-01-27T05:13:01.624566Z", "modified": "2026-01-27T05:13:01.624566Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ati.webwatcherconsole']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.624566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--650559c6-d7fa-4ee6-8d8a-09f84d011488", "created": "2026-01-27T05:13:01.625235Z", "modified": "2026-01-27T05:13:01.625235Z", "relationship_type": "indicates", "source_ref": "indicator--849aefa5-6bcb-4ec8-9aa5-678ec17f8638", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b5c8a3-57ad-45a2-b34a-87ec08053040", "created": "2026-01-27T05:13:01.625409Z", "modified": "2026-01-27T05:13:01.625409Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.atinc.slcompanion']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.625409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c58b2e53-55bc-4a77-ae5e-3995da2ff9ef", "created": "2026-01-27T05:13:01.626077Z", "modified": "2026-01-27T05:13:01.626077Z", "relationship_type": "indicates", "source_ref": "indicator--01b5c8a3-57ad-45a2-b34a-87ec08053040", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5181b17f-0ba1-4c38-922d-38c84ba4a514", "created": "2026-01-27T05:13:01.626252Z", "modified": "2026-01-27T05:13:01.626252Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.atiw.wc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.626252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--005fd766-54a8-4709-8818-bfde26b70fc9", "created": "2026-01-27T05:13:01.62691Z", "modified": "2026-01-27T05:13:01.62691Z", "relationship_type": "indicates", "source_ref": "indicator--5181b17f-0ba1-4c38-922d-38c84ba4a514", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cd5935-1d08-42ae-b033-1c8043e3ca41", "created": "2026-01-27T05:13:01.627086Z", "modified": "2026-01-27T05:13:01.627086Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awarenesstech.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.627086Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c5ecc36-c8a9-4581-8a81-87ef780e2dde", "created": "2026-01-27T05:13:01.62777Z", "modified": "2026-01-27T05:13:01.62777Z", "relationship_type": "indicates", "source_ref": "indicator--10cd5935-1d08-42ae-b033-1c8043e3ca41", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3108be0f-a04d-4ce2-8ad5-05e99680602c", "created": "2026-01-27T05:13:01.627945Z", "modified": "2026-01-27T05:13:01.627945Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awarenesstech.wwpapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.627945Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cfa11209-5090-4e44-889a-f5c837e6186c", "created": "2026-01-27T05:13:01.628603Z", "modified": "2026-01-27T05:13:01.628603Z", "relationship_type": "indicates", "source_ref": "indicator--3108be0f-a04d-4ce2-8ad5-05e99680602c", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48536f71-2702-4019-81e3-f6304608767b", "created": "2026-01-27T05:13:01.628792Z", "modified": "2026-01-27T05:13:01.628792Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awarenesstechnologies.sideloadedws']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.628792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--166fd3bc-2266-4678-86e4-b09d46325f70", "created": "2026-01-27T05:13:01.629484Z", "modified": "2026-01-27T05:13:01.629484Z", "relationship_type": "indicates", "source_ref": "indicator--48536f71-2702-4019-81e3-f6304608767b", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e41f24-4152-497c-afa3-6918ea60d09c", "created": "2026-01-27T05:13:01.629658Z", "modified": "2026-01-27T05:13:01.629658Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.awti.slc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.629658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdce22c9-09e5-40e4-84a1-a336648d121c", "created": "2026-01-27T05:13:01.630314Z", "modified": "2026-01-27T05:13:01.630314Z", "relationship_type": "indicates", "source_ref": "indicator--b5e41f24-4152-497c-afa3-6918ea60d09c", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6273fb33-f58f-4818-83fe-c25a2f0f7b7b", "created": "2026-01-27T05:13:01.630484Z", "modified": "2026-01-27T05:13:01.630484Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.screentime']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.630484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fd12870-98c2-4e4a-b896-00786ee468cc", "created": "2026-01-27T05:13:01.631267Z", "modified": "2026-01-27T05:13:01.631267Z", "relationship_type": "indicates", "source_ref": "indicator--6273fb33-f58f-4818-83fe-c25a2f0f7b7b", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1019f5-ea5a-4283-99dd-f81219bd0741", "created": "2026-01-27T05:13:01.631446Z", "modified": "2026-01-27T05:13:01.631446Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ww.companion']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.631446Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25ca635b-8818-4684-b213-962ae5591f56", "created": "2026-01-27T05:13:01.632108Z", "modified": "2026-01-27T05:13:01.632108Z", "relationship_type": "indicates", "source_ref": "indicator--6c1019f5-ea5a-4283-99dd-f81219bd0741", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7492c4a-9e96-4a77-9bd2-328d7f74ee71", "created": "2026-01-27T05:13:01.632283Z", "modified": "2026-01-27T05:13:01.632283Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='35E90A29262F1E6CC25B6E483DEC67161513DE30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.632283Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--819709aa-2d13-4a48-9447-a234c8b261ba", "created": "2026-01-27T05:13:01.633087Z", "modified": "2026-01-27T05:13:01.633087Z", "relationship_type": "indicates", "source_ref": "indicator--f7492c4a-9e96-4a77-9bd2-328d7f74ee71", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bde0a18-0736-4441-8f4d-ea79c7c52ba5", "created": "2026-01-27T05:13:01.633262Z", "modified": "2026-01-27T05:13:01.633262Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4E6B680EF3B588EF53097BC7CEFB778833B8A475']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.633262Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb1f6c00-40ed-4edc-b520-26953aa5913f", "created": "2026-01-27T05:13:01.634069Z", "modified": "2026-01-27T05:13:01.634069Z", "relationship_type": "indicates", "source_ref": "indicator--5bde0a18-0736-4441-8f4d-ea79c7c52ba5", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e9fa2c-e85d-479e-89f7-26af78f81fce", "created": "2026-01-27T05:13:01.634247Z", "modified": "2026-01-27T05:13:01.634247Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='60277E8CE202D8023F2ECC86F1726A50D9990576']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.634247Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--01c21e2c-9489-406a-a146-18c265482124", "created": "2026-01-27T05:13:01.635048Z", "modified": "2026-01-27T05:13:01.635048Z", "relationship_type": "indicates", "source_ref": "indicator--c8e9fa2c-e85d-479e-89f7-26af78f81fce", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0affd90-c0d0-4b90-bc46-2c6827f9cd22", "created": "2026-01-27T05:13:01.635226Z", "modified": "2026-01-27T05:13:01.635226Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AD62CBB4BD298CF69CDA40997C3E5D70112D7161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.635226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c448dde-790f-44f7-afe6-b4a067b3c05c", "created": "2026-01-27T05:13:01.636019Z", "modified": "2026-01-27T05:13:01.636019Z", "relationship_type": "indicates", "source_ref": "indicator--a0affd90-c0d0-4b90-bc46-2c6827f9cd22", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7321aea9-1ccd-4c84-bb52-d31c0c0b9fca", "created": "2026-01-27T05:13:01.636195Z", "modified": "2026-01-27T05:13:01.636195Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B9D5BAEDCF0C711317E8B6E54D60F0A5EDEE9517']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.636195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5fda3a4b-6bc8-4bc7-9461-a02a0f82700f", "created": "2026-01-27T05:13:01.636975Z", "modified": "2026-01-27T05:13:01.636975Z", "relationship_type": "indicates", "source_ref": "indicator--7321aea9-1ccd-4c84-bb52-d31c0c0b9fca", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2658b354-cf01-4517-b62d-be5684b65cbd", "created": "2026-01-27T05:13:01.637149Z", "modified": "2026-01-27T05:13:01.637149Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E689432F7C2A39379BD64CB0BD2A6028F3A666DD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.637149Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5f2478e-b446-4380-8b02-729e7d4163dd", "created": "2026-01-27T05:13:01.637952Z", "modified": "2026-01-27T05:13:01.637952Z", "relationship_type": "indicates", "source_ref": "indicator--2658b354-cf01-4517-b62d-be5684b65cbd", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deca0600-c82b-46d3-bb24-869a14a504e6", "created": "2026-01-27T05:13:01.638126Z", "modified": "2026-01-27T05:13:01.638126Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FC786B8F918655D45245C685A471BD57F02FB366']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.638126Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7634a47-cfee-4927-a4e3-793ea9c58f0c", "created": "2026-01-27T05:13:01.638916Z", "modified": "2026-01-27T05:13:01.638916Z", "relationship_type": "indicates", "source_ref": "indicator--deca0600-c82b-46d3-bb24-869a14a504e6", "target_ref": "malware--5367a927-8301-45ea-ba17-2c1945382c29"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f", "created": "2026-01-27T05:13:01.639101Z", "modified": "2026-01-27T05:13:01.639101Z", "name": "NexSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca709786-93ea-4bd0-af11-7feb802289ec", "created": "2026-01-27T05:13:01.639292Z", "modified": "2026-01-27T05:13:01.639292Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.nexspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.639292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac73f12b-ab65-4ec2-8cec-cb47cdd88778", "created": "2026-01-27T05:13:01.640128Z", "modified": "2026-01-27T05:13:01.640128Z", "relationship_type": "indicates", "source_ref": "indicator--ca709786-93ea-4bd0-af11-7feb802289ec", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61198e9-cf9e-4a87-af13-f5c6bd8cf824", "created": "2026-01-27T05:13:01.640307Z", "modified": "2026-01-27T05:13:01.640307Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.mobilebackup.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.640307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6da4a7f8-6e93-4377-b56c-3df036e78840", "created": "2026-01-27T05:13:01.641015Z", "modified": "2026-01-27T05:13:01.641015Z", "relationship_type": "indicates", "source_ref": "indicator--f61198e9-cf9e-4a87-af13-f5c6bd8cf824", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d66a400-dc38-4c17-bf34-edc60e6fe7db", "created": "2026-01-27T05:13:01.641193Z", "modified": "2026-01-27T05:13:01.641193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='topzaloha.cz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.641193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--182c3e22-d3dc-46d6-a137-0125512eb99c", "created": "2026-01-27T05:13:01.641873Z", "modified": "2026-01-27T05:13:01.641873Z", "relationship_type": "indicates", "source_ref": "indicator--9d66a400-dc38-4c17-bf34-edc60e6fe7db", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5fe247-4d2e-4ddd-9e74-7c907d941f3a", "created": "2026-01-27T05:13:01.642051Z", "modified": "2026-01-27T05:13:01.642051Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='nexspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.642051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d070433-51b8-44ed-9ac5-7576909b8d4c", "created": "2026-01-27T05:13:01.642716Z", "modified": "2026-01-27T05:13:01.642716Z", "relationship_type": "indicates", "source_ref": "indicator--7a5fe247-4d2e-4ddd-9e74-7c907d941f3a", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751d03ec-0b42-4b95-a298-addc90545c31", "created": "2026-01-27T05:13:01.64291Z", "modified": "2026-01-27T05:13:01.64291Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='oxy.nexspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.64291Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36340a10-a7a3-4aec-9dbb-9f94ff07e945", "created": "2026-01-27T05:13:01.643586Z", "modified": "2026-01-27T05:13:01.643586Z", "relationship_type": "indicates", "source_ref": "indicator--751d03ec-0b42-4b95-a298-addc90545c31", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0775025-0a71-46b4-8513-c2661d9ee5ce", "created": "2026-01-27T05:13:01.643774Z", "modified": "2026-01-27T05:13:01.643774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilebackup.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.643774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c4177ad-dbbf-4738-98ae-537cf30eadff", "created": "2026-01-27T05:13:01.644448Z", "modified": "2026-01-27T05:13:01.644448Z", "relationship_type": "indicates", "source_ref": "indicator--d0775025-0a71-46b4-8513-c2661d9ee5ce", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca4261f-5d1c-4987-aa0f-0b48dee3c3df", "created": "2026-01-27T05:13:01.644621Z", "modified": "2026-01-27T05:13:01.644621Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.mobilebackup.biz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.644621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9956d93e-b668-4aa3-abdd-5e443e382f06", "created": "2026-01-27T05:13:01.645337Z", "modified": "2026-01-27T05:13:01.645337Z", "relationship_type": "indicates", "source_ref": "indicator--8ca4261f-5d1c-4987-aa0f-0b48dee3c3df", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84a8774-1d2d-4dca-99ba-f7037fc2bf07", "created": "2026-01-27T05:13:01.645511Z", "modified": "2026-01-27T05:13:01.645511Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.topzaloha.cz']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.645511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--532b5126-3103-4055-a303-870813381ce3", "created": "2026-01-27T05:13:01.646204Z", "modified": "2026-01-27T05:13:01.646204Z", "relationship_type": "indicates", "source_ref": "indicator--e84a8774-1d2d-4dca-99ba-f7037fc2bf07", "target_ref": "malware--9dbf32dc-1233-4567-8476-db01c39f5f8f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--73e8e7a4-3883-4824-bf37-0ca6fbafb3f4", "created": "2026-01-27T05:13:01.646377Z", "modified": "2026-01-27T05:13:01.646377Z", "name": "juju", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191bc137-49e0-4fdb-83eb-ae9f4c05708d", "created": "2026-01-27T05:13:01.646555Z", "modified": "2026-01-27T05:13:01.646555Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.juju.co.ke']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.646555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--585187b8-0826-4412-bc0c-473ddf2f0b83", "created": "2026-01-27T05:13:01.647241Z", "modified": "2026-01-27T05:13:01.647241Z", "relationship_type": "indicates", "source_ref": "indicator--191bc137-49e0-4fdb-83eb-ae9f4c05708d", "target_ref": "malware--73e8e7a4-3883-4824-bf37-0ca6fbafb3f4"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b26e8b1-3a43-406e-afe2-34eaefe6b85f", "created": "2026-01-27T05:13:01.647417Z", "modified": "2026-01-27T05:13:01.647417Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='juju.co.ke']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.647417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26b77cb6-75e8-4370-b672-158228592ed8", "created": "2026-01-27T05:13:01.648213Z", "modified": "2026-01-27T05:13:01.648213Z", "relationship_type": "indicates", "source_ref": "indicator--4b26e8b1-3a43-406e-afe2-34eaefe6b85f", "target_ref": "malware--73e8e7a4-3883-4824-bf37-0ca6fbafb3f4"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5ea36cec-3466-42a8-af1d-6797ad203f99", "created": "2026-01-27T05:13:01.648391Z", "modified": "2026-01-27T05:13:01.648391Z", "name": "mSpyitaly", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b131ac2-1e87-48e0-849c-38eba3e50955", "created": "2026-01-27T05:13:01.648557Z", "modified": "2026-01-27T05:13:01.648557Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dc-407883c18502.mspyitaly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.648557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--038d8b95-5568-43b6-97a6-d7849f02c749", "created": "2026-01-27T05:13:01.649267Z", "modified": "2026-01-27T05:13:01.649267Z", "relationship_type": "indicates", "source_ref": "indicator--9b131ac2-1e87-48e0-849c-38eba3e50955", "target_ref": "malware--5ea36cec-3466-42a8-af1d-6797ad203f99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a15c4e-0b4f-4ea2-a90f-d0cc71984f7d", "created": "2026-01-27T05:13:01.649456Z", "modified": "2026-01-27T05:13:01.649456Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mspyitaly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.649456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ed497cd-a25a-4c26-abfc-b9fc052dd48c", "created": "2026-01-27T05:13:01.650154Z", "modified": "2026-01-27T05:13:01.650154Z", "relationship_type": "indicates", "source_ref": "indicator--28a15c4e-0b4f-4ea2-a90f-d0cc71984f7d", "target_ref": "malware--5ea36cec-3466-42a8-af1d-6797ad203f99"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ebc483-d654-4287-90e5-b4cd1d03a4ed", "created": "2026-01-27T05:13:01.65033Z", "modified": "2026-01-27T05:13:01.65033Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mspyitaly.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.65033Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96d2f79e-6687-49ea-a99e-c60ef86e67bc", "created": "2026-01-27T05:13:01.65102Z", "modified": "2026-01-27T05:13:01.65102Z", "relationship_type": "indicates", "source_ref": "indicator--b4ebc483-d654-4287-90e5-b4cd1d03a4ed", "target_ref": "malware--5ea36cec-3466-42a8-af1d-6797ad203f99"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e5003447-6100-4f88-8f5c-31b425aed137", "created": "2026-01-27T05:13:01.651196Z", "modified": "2026-01-27T05:13:01.651196Z", "name": "MyCellSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6230fa6-59bc-44e6-bfb7-a5af26ec0107", "created": "2026-01-27T05:13:01.651363Z", "modified": "2026-01-27T05:13:01.651363Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.mycellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.651363Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe96b965-dc4e-4b8b-b341-34a3f7b63af9", "created": "2026-01-27T05:13:01.65206Z", "modified": "2026-01-27T05:13:01.65206Z", "relationship_type": "indicates", "source_ref": "indicator--e6230fa6-59bc-44e6-bfb7-a5af26ec0107", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d219d39-50f0-4794-b31a-2275465f4776", "created": "2026-01-27T05:13:01.652237Z", "modified": "2026-01-27T05:13:01.652237Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.652237Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd708b57-245f-4aba-bd3c-260ed36fc81a", "created": "2026-01-27T05:13:01.652929Z", "modified": "2026-01-27T05:13:01.652929Z", "relationship_type": "indicates", "source_ref": "indicator--7d219d39-50f0-4794-b31a-2275465f4776", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b7bf4b-f323-4391-a4b8-570e20bb79c2", "created": "2026-01-27T05:13:01.653113Z", "modified": "2026-01-27T05:13:01.653113Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cezz.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.653113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4763600b-9f02-4e4b-9ba4-5d655822246e", "created": "2026-01-27T05:13:01.653799Z", "modified": "2026-01-27T05:13:01.653799Z", "relationship_type": "indicates", "source_ref": "indicator--a3b7bf4b-f323-4391-a4b8-570e20bb79c2", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4e1617-40a0-4644-be30-a4b69a0326c2", "created": "2026-01-27T05:13:01.653977Z", "modified": "2026-01-27T05:13:01.653977Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='user.mycellspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.653977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a7ea267-e148-488c-bf26-406d9539dcb6", "created": "2026-01-27T05:13:01.654653Z", "modified": "2026-01-27T05:13:01.654653Z", "relationship_type": "indicates", "source_ref": "indicator--3d4e1617-40a0-4644-be30-a4b69a0326c2", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ae134b-f830-4427-9652-1ac75f7305c2", "created": "2026-01-27T05:13:01.654848Z", "modified": "2026-01-27T05:13:01.654848Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f3156ccccf63487b34dc4e0e7916f47ed9be5783a6adefb57911df784fc412a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.654848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca196ca6-7d54-4c1e-b0f1-82fb969bdb41", "created": "2026-01-27T05:13:01.655715Z", "modified": "2026-01-27T05:13:01.655715Z", "relationship_type": "indicates", "source_ref": "indicator--18ae134b-f830-4427-9652-1ac75f7305c2", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd740188-9e45-469c-b2cb-7688e716b4ef", "created": "2026-01-27T05:13:01.655913Z", "modified": "2026-01-27T05:13:01.655913Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dbcd604e4f1899845f9cb82295bb43a8ac91b5a2d42f5611f72e9cef55575ece']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.655913Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2ad8dac-95fb-42c5-8d2c-bb083a1c2ce1", "created": "2026-01-27T05:13:01.656879Z", "modified": "2026-01-27T05:13:01.656879Z", "relationship_type": "indicates", "source_ref": "indicator--fd740188-9e45-469c-b2cb-7688e716b4ef", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2227c800-70e0-4fbe-8793-f2a7d83a51eb", "created": "2026-01-27T05:13:01.657059Z", "modified": "2026-01-27T05:13:01.657059Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='08c352c93f8b61905635b02c344538631636562a395e8394e6cb569015036847']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.657059Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c1628ff-95c5-462c-bcbf-be10a6a27251", "created": "2026-01-27T05:13:01.657893Z", "modified": "2026-01-27T05:13:01.657893Z", "relationship_type": "indicates", "source_ref": "indicator--2227c800-70e0-4fbe-8793-f2a7d83a51eb", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0543b2-8b29-4dbc-afbc-539056cf26c8", "created": "2026-01-27T05:13:01.658071Z", "modified": "2026-01-27T05:13:01.658071Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cryzp.leplluln']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.658071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddeae9d0-bcc5-46eb-8c59-f09ea0855919", "created": "2026-01-27T05:13:01.658726Z", "modified": "2026-01-27T05:13:01.658726Z", "relationship_type": "indicates", "source_ref": "indicator--2d0543b2-8b29-4dbc-afbc-539056cf26c8", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3fe301d-ce95-4245-84e5-bd177740b302", "created": "2026-01-27T05:13:01.658918Z", "modified": "2026-01-27T05:13:01.658918Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.pser.sysutils']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.658918Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87d6b602-2a02-445a-a336-3ebea932715e", "created": "2026-01-27T05:13:01.659567Z", "modified": "2026-01-27T05:13:01.659567Z", "relationship_type": "indicates", "source_ref": "indicator--c3fe301d-ce95-4245-84e5-bd177740b302", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f40b50-415b-453d-b875-42eef59616fc", "created": "2026-01-27T05:13:01.659762Z", "modified": "2026-01-27T05:13:01.659762Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sev.android.systemdev']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.659762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ace12a4b-7760-4958-8226-7fbcfa9756f1", "created": "2026-01-27T05:13:01.660434Z", "modified": "2026-01-27T05:13:01.660434Z", "relationship_type": "indicates", "source_ref": "indicator--82f40b50-415b-453d-b875-42eef59616fc", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cb5e28-6848-48bd-a484-6094620eaf74", "created": "2026-01-27T05:13:01.660609Z", "modified": "2026-01-27T05:13:01.660609Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D09EE9D79FF75E737429DDE34FD13EDFDDA34E78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.660609Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93dfc28f-a11c-4aab-b14e-893ce0b2039a", "created": "2026-01-27T05:13:01.661404Z", "modified": "2026-01-27T05:13:01.661404Z", "relationship_type": "indicates", "source_ref": "indicator--86cb5e28-6848-48bd-a484-6094620eaf74", "target_ref": "malware--e5003447-6100-4f88-8f5c-31b425aed137"}, {"type": "malware", "spec_version": "2.1", "id": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364", "created": "2026-01-27T05:13:01.66158Z", "modified": "2026-01-27T05:13:01.66158Z", "name": "Spylix", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e53f21-ad8c-4d80-a620-6d31262390f2", "created": "2026-01-27T05:13:01.661765Z", "modified": "2026-01-27T05:13:01.661765Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.661765Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e70e3fb0-65ca-4538-8ecd-bbf2c2244190", "created": "2026-01-27T05:13:01.662445Z", "modified": "2026-01-27T05:13:01.662445Z", "relationship_type": "indicates", "source_ref": "indicator--b8e53f21-ad8c-4d80-a620-6d31262390f2", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03e2a74-00be-470f-919a-1bef910d64b2", "created": "2026-01-27T05:13:01.662621Z", "modified": "2026-01-27T05:13:01.662621Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apidemo.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.662621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ca3556e-f6be-46a3-8722-9e78bb1c6e16", "created": "2026-01-27T05:13:01.66332Z", "modified": "2026-01-27T05:13:01.66332Z", "relationship_type": "indicates", "source_ref": "indicator--a03e2a74-00be-470f-919a-1bef910d64b2", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8cbee7-0495-4746-bb2f-9e3cc47a0b2a", "created": "2026-01-27T05:13:01.663501Z", "modified": "2026-01-27T05:13:01.663501Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d2nipadu1fr4ne.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.663501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19ca9522-5847-4483-8abc-630719eef6d8", "created": "2026-01-27T05:13:01.664246Z", "modified": "2026-01-27T05:13:01.664246Z", "relationship_type": "indicates", "source_ref": "indicator--3a8cbee7-0495-4746-bb2f-9e3cc47a0b2a", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7958b30-bf03-40b8-8232-5016862bec7b", "created": "2026-01-27T05:13:01.664424Z", "modified": "2026-01-27T05:13:01.664424Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='getspylix.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.664424Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--461241ff-54b6-4581-88dc-f2c44a2210ff", "created": "2026-01-27T05:13:01.665233Z", "modified": "2026-01-27T05:13:01.665233Z", "relationship_type": "indicates", "source_ref": "indicator--c7958b30-bf03-40b8-8232-5016862bec7b", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed55602-30e4-4888-9848-17079dfa295d", "created": "2026-01-27T05:13:01.665453Z", "modified": "2026-01-27T05:13:01.665453Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.665453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--efd07e47-24e7-4143-a0c3-0aeb1588d534", "created": "2026-01-27T05:13:01.666171Z", "modified": "2026-01-27T05:13:01.666171Z", "relationship_type": "indicates", "source_ref": "indicator--0ed55602-30e4-4888-9848-17079dfa295d", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec01b97e-1335-4421-a2c2-256e2fc7b6d7", "created": "2026-01-27T05:13:01.666349Z", "modified": "2026-01-27T05:13:01.666349Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.666349Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--586aaaa6-cddc-480d-9b43-04f80683026f", "created": "2026-01-27T05:13:01.667035Z", "modified": "2026-01-27T05:13:01.667035Z", "relationship_type": "indicates", "source_ref": "indicator--ec01b97e-1335-4421-a2c2-256e2fc7b6d7", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850168f5-adb8-4404-a793-ddd8bbf2e37b", "created": "2026-01-27T05:13:01.667211Z", "modified": "2026-01-27T05:13:01.667211Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spylix.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.667211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ff2a2a8-28a2-4cd2-a17e-65dabba56e1c", "created": "2026-01-27T05:13:01.667903Z", "modified": "2026-01-27T05:13:01.667903Z", "relationship_type": "indicates", "source_ref": "indicator--850168f5-adb8-4404-a793-ddd8bbf2e37b", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513f7cb7-c8c0-4b59-a5f6-c45b7dcf35d4", "created": "2026-01-27T05:13:01.668081Z", "modified": "2026-01-27T05:13:01.668081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='adb2effde122c5784f0ff57974f33d03c5f78f40a32e9e45f55017ff7b2600c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.668081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce850524-f068-4d80-970e-303237bf7621", "created": "2026-01-27T05:13:01.668918Z", "modified": "2026-01-27T05:13:01.668918Z", "relationship_type": "indicates", "source_ref": "indicator--513f7cb7-c8c0-4b59-a5f6-c45b7dcf35d4", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052943e9-5e94-4402-97e6-a06fdf05a589", "created": "2026-01-27T05:13:01.669095Z", "modified": "2026-01-27T05:13:01.669095Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.chaoqi.spyapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.669095Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18e4b5f9-c4e1-48d3-87ba-6aadfb750d9e", "created": "2026-01-27T05:13:01.669766Z", "modified": "2026-01-27T05:13:01.669766Z", "relationship_type": "indicates", "source_ref": "indicator--052943e9-5e94-4402-97e6-a06fdf05a589", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5119b68-e5c6-41ba-bc08-a1270db398fc", "created": "2026-01-27T05:13:01.669944Z", "modified": "2026-01-27T05:13:01.669944Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2CF347EA59967F7799AA2C1FDB5D711B2B93D586']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.669944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3df5f1c1-633a-4e91-bd46-9d5cc67a663b", "created": "2026-01-27T05:13:01.670717Z", "modified": "2026-01-27T05:13:01.670717Z", "relationship_type": "indicates", "source_ref": "indicator--b5119b68-e5c6-41ba-bc08-a1270db398fc", "target_ref": "malware--8d5915e2-f45d-4bfe-b48d-cf8c9f53d364"}, {"type": "malware", "spec_version": "2.1", "id": "malware--81ed8646-b54a-4c7b-b871-50758f754178", "created": "2026-01-27T05:13:01.670943Z", "modified": "2026-01-27T05:13:01.670943Z", "name": "MonitorUltra", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1164d84-0807-4f0b-8150-0985303473ce", "created": "2026-01-27T05:13:01.671123Z", "modified": "2026-01-27T05:13:01.671123Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x1panel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.671123Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0d3b6ae-ba05-40ca-84ce-a4bb0ee66769", "created": "2026-01-27T05:13:01.671806Z", "modified": "2026-01-27T05:13:01.671806Z", "relationship_type": "indicates", "source_ref": "indicator--d1164d84-0807-4f0b-8150-0985303473ce", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b26ab3e-d9d8-47ae-a7bf-172c0b087f4b", "created": "2026-01-27T05:13:01.671986Z", "modified": "2026-01-27T05:13:01.671986Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xpcpanel.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.671986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--353cf0d2-b024-4db1-81a8-a56d932f5b3d", "created": "2026-01-27T05:13:01.672653Z", "modified": "2026-01-27T05:13:01.672653Z", "relationship_type": "indicates", "source_ref": "indicator--4b26ab3e-d9d8-47ae-a7bf-172c0b087f4b", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4945d0d7-5be1-439e-ac3a-4dfd7ad04d33", "created": "2026-01-27T05:13:01.67286Z", "modified": "2026-01-27T05:13:01.67286Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='monitor-ultra.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.67286Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85897d53-6167-4311-a0d0-8e7bfa8e850d", "created": "2026-01-27T05:13:01.673652Z", "modified": "2026-01-27T05:13:01.673652Z", "relationship_type": "indicates", "source_ref": "indicator--4945d0d7-5be1-439e-ac3a-4dfd7ad04d33", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521c6eef-b70d-40f0-9cff-b36ceaef179a", "created": "2026-01-27T05:13:01.673848Z", "modified": "2026-01-27T05:13:01.673848Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyequipmentuk.co.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.673848Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2419910-3ac0-41ce-8050-0832967f3ed3", "created": "2026-01-27T05:13:01.674537Z", "modified": "2026-01-27T05:13:01.674537Z", "relationship_type": "indicates", "source_ref": "indicator--521c6eef-b70d-40f0-9cff-b36ceaef179a", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4836f6-a5c7-4b8f-a339-74f85a2bfccb", "created": "2026-01-27T05:13:01.674717Z", "modified": "2026-01-27T05:13:01.674717Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='307b23b32065b69dd2e7fd1ef1d74eb2923f717cff995c4884bde7c9b22b7c7d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.674717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dcf71bc-652f-424c-ab00-3d67078a28b4", "created": "2026-01-27T05:13:01.675561Z", "modified": "2026-01-27T05:13:01.675561Z", "relationship_type": "indicates", "source_ref": "indicator--df4836f6-a5c7-4b8f-a339-74f85a2bfccb", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09b8620-e008-4c19-9ec2-eac31e786bf4", "created": "2026-01-27T05:13:01.67574Z", "modified": "2026-01-27T05:13:01.67574Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f0ae7dd7c5b955493475ded4f3e9dc9c597504192596129601954a722153ee5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.67574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1288b5bd-9e70-4c20-ba90-79ca96492acf", "created": "2026-01-27T05:13:01.676586Z", "modified": "2026-01-27T05:13:01.676586Z", "relationship_type": "indicates", "source_ref": "indicator--c09b8620-e008-4c19-9ec2-eac31e786bf4", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ec1ec0-1980-49f6-8585-16aac76aae79", "created": "2026-01-27T05:13:01.676778Z", "modified": "2026-01-27T05:13:01.676778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='23087de9decec4839758a8877d352c9607a8191724703f21cde6e6b2cb4cd04c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.676778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--985699b3-12c2-409c-83fc-493ff3a555c1", "created": "2026-01-27T05:13:01.6776Z", "modified": "2026-01-27T05:13:01.6776Z", "relationship_type": "indicates", "source_ref": "indicator--85ec1ec0-1980-49f6-8585-16aac76aae79", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db06e653-f6bc-40e7-ae92-f116a9266ec9", "created": "2026-01-27T05:13:01.677789Z", "modified": "2026-01-27T05:13:01.677789Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e46d1e50ceebdc2675537167e9ee7a25d65c5667cd9c5edbfb9c01f721ca349c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.677789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0fc89d3-0058-433d-b77a-9ed4067048c5", "created": "2026-01-27T05:13:01.67862Z", "modified": "2026-01-27T05:13:01.67862Z", "relationship_type": "indicates", "source_ref": "indicator--db06e653-f6bc-40e7-ae92-f116a9266ec9", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c927923-87b5-4ff4-a0e6-6b4bf80c51e7", "created": "2026-01-27T05:13:01.678837Z", "modified": "2026-01-27T05:13:01.678837Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f7a056d30fb9b268ff71cc928cd240be77c173d2284187e792613ea146dc7307']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.678837Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dda4a0aa-e36c-4da5-9687-2b19d0111ed8", "created": "2026-01-27T05:13:01.679686Z", "modified": "2026-01-27T05:13:01.679686Z", "relationship_type": "indicates", "source_ref": "indicator--5c927923-87b5-4ff4-a0e6-6b4bf80c51e7", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace646f1-f29d-40a4-9952-75f6bbbef30f", "created": "2026-01-27T05:13:01.679884Z", "modified": "2026-01-27T05:13:01.679884Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='12cd18d1262a8260deaa3e71336c322b77d0ef62a79272210c952596ef7a889e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.679884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c12d8cb6-3607-41a2-af3d-367f9a03ce64", "created": "2026-01-27T05:13:01.680712Z", "modified": "2026-01-27T05:13:01.680712Z", "relationship_type": "indicates", "source_ref": "indicator--ace646f1-f29d-40a4-9952-75f6bbbef30f", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46799546-31e2-4db8-9a56-f0302620cb66", "created": "2026-01-27T05:13:01.680904Z", "modified": "2026-01-27T05:13:01.680904Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='909faeaebf4a55a8e4a6141c1f385f2f7d038188ada376f22feaa6a09dc9ed8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.680904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9681c42c-243d-4a68-8d7f-4ba5fe44d3c3", "created": "2026-01-27T05:13:01.681736Z", "modified": "2026-01-27T05:13:01.681736Z", "relationship_type": "indicates", "source_ref": "indicator--46799546-31e2-4db8-9a56-f0302620cb66", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989562b5-04ac-4826-834b-3daf2af3a196", "created": "2026-01-27T05:13:01.681937Z", "modified": "2026-01-27T05:13:01.681937Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6bff05743c62f03c1483e454afb1fbefe31b79d18834435d61644b4138de0c50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.681937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d648b9a6-7956-45ba-a4e1-34a3d3ba4a89", "created": "2026-01-27T05:13:01.6829Z", "modified": "2026-01-27T05:13:01.6829Z", "relationship_type": "indicates", "source_ref": "indicator--989562b5-04ac-4826-834b-3daf2af3a196", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a90cc1-f085-4f23-af59-40388009e02b", "created": "2026-01-27T05:13:01.68308Z", "modified": "2026-01-27T05:13:01.68308Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c48a5d50c826af0c118b31269e2ca2a945b8a9449336b509da1dc83e7506bcc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.68308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aaf83355-dfa4-47c6-b172-9eb5577ceeff", "created": "2026-01-27T05:13:01.683932Z", "modified": "2026-01-27T05:13:01.683932Z", "relationship_type": "indicates", "source_ref": "indicator--47a90cc1-f085-4f23-af59-40388009e02b", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1270d07a-e2cb-487f-96f2-9b344012a701", "created": "2026-01-27T05:13:01.684111Z", "modified": "2026-01-27T05:13:01.684111Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e1553112e4e158fdbb73bb698d222d49be9b13f98aeef543e9c5bee91f028fe6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.684111Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--31dcfb98-b168-49ec-b8db-afb4e951f3fc", "created": "2026-01-27T05:13:01.684967Z", "modified": "2026-01-27T05:13:01.684967Z", "relationship_type": "indicates", "source_ref": "indicator--1270d07a-e2cb-487f-96f2-9b344012a701", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2abb792-e001-43bd-93e1-fd929a82a1d9", "created": "2026-01-27T05:13:01.685146Z", "modified": "2026-01-27T05:13:01.685146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='763ef45d3cc1f7197c1ea6f2300b170ea7847de590b991e5944b4f9af4e770ab']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.685146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd7a16bd-2fcf-414e-b0e5-156fc230e784", "created": "2026-01-27T05:13:01.685999Z", "modified": "2026-01-27T05:13:01.685999Z", "relationship_type": "indicates", "source_ref": "indicator--e2abb792-e001-43bd-93e1-fd929a82a1d9", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470337ea-0f87-4f99-b1c9-d6a50c4c6047", "created": "2026-01-27T05:13:01.686176Z", "modified": "2026-01-27T05:13:01.686176Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d21b4957dae0be1341fa9ba8c8cff85fba31fe4e1af112e4b6c1befd6128e80d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.686176Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a77dd97b-760b-4a12-9d89-74fcae9e360e", "created": "2026-01-27T05:13:01.687066Z", "modified": "2026-01-27T05:13:01.687066Z", "relationship_type": "indicates", "source_ref": "indicator--470337ea-0f87-4f99-b1c9-d6a50c4c6047", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350154aa-83ce-4b83-b57d-95077dd05cda", "created": "2026-01-27T05:13:01.687243Z", "modified": "2026-01-27T05:13:01.687243Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='73a27b8b13e8ba34dd63f6e318fd37d6562a54a494591ad40e5ce3f72554ec22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.687243Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec57a060-300b-4eba-a18f-aaa11ddda8a1", "created": "2026-01-27T05:13:01.688086Z", "modified": "2026-01-27T05:13:01.688086Z", "relationship_type": "indicates", "source_ref": "indicator--350154aa-83ce-4b83-b57d-95077dd05cda", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b593a4-783c-48a9-8e55-57e27a5adfb7", "created": "2026-01-27T05:13:01.688261Z", "modified": "2026-01-27T05:13:01.688261Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f5eeace70bb735695e563191c85719782ae718f3699cd6c510ccb267def718da']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.688261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4adfb3fb-ea43-4acf-9d8b-3e20eae23591", "created": "2026-01-27T05:13:01.6891Z", "modified": "2026-01-27T05:13:01.6891Z", "relationship_type": "indicates", "source_ref": "indicator--b6b593a4-783c-48a9-8e55-57e27a5adfb7", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614c35c1-abfe-44a2-85d1-411a4254979b", "created": "2026-01-27T05:13:01.689282Z", "modified": "2026-01-27T05:13:01.689282Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba667c1adb22fdfed6b08584297adb677d5b937478e3052c4ea879ca01663f31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.689282Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e32bc46e-4b4d-47c6-ab88-f6cba88a740e", "created": "2026-01-27T05:13:01.690203Z", "modified": "2026-01-27T05:13:01.690203Z", "relationship_type": "indicates", "source_ref": "indicator--614c35c1-abfe-44a2-85d1-411a4254979b", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42aa621-deb6-4e81-a43d-801b17b8d47e", "created": "2026-01-27T05:13:01.690408Z", "modified": "2026-01-27T05:13:01.690408Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bc137981085a51fe1a1dcbb9e90a4d1595dfcaec5cf1afeb737ad009dd1d4178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.690408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5899d5a-60ff-4a70-a568-7458195a51ee", "created": "2026-01-27T05:13:01.691279Z", "modified": "2026-01-27T05:13:01.691279Z", "relationship_type": "indicates", "source_ref": "indicator--d42aa621-deb6-4e81-a43d-801b17b8d47e", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee97bb10-409f-4bff-8c0a-3a84ab52ac28", "created": "2026-01-27T05:13:01.69151Z", "modified": "2026-01-27T05:13:01.69151Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='677b8600adf2c4e1f17963eaaf18d57881a6a0c2ef5323c7f145b113480040df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.69151Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5dbf025-736c-4700-a03c-c5baa0c48a53", "created": "2026-01-27T05:13:01.692485Z", "modified": "2026-01-27T05:13:01.692485Z", "relationship_type": "indicates", "source_ref": "indicator--ee97bb10-409f-4bff-8c0a-3a84ab52ac28", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c50daa4-6d98-42e3-a039-a5240b6142f2", "created": "2026-01-27T05:13:01.692663Z", "modified": "2026-01-27T05:13:01.692663Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c6c3e7044725e55bf5a030b1331b10a48dd607d7223c74cf4bc41d25d0a74c07']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.692663Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d846920-ba8b-416b-b19a-6cb98a681192", "created": "2026-01-27T05:13:01.693533Z", "modified": "2026-01-27T05:13:01.693533Z", "relationship_type": "indicates", "source_ref": "indicator--0c50daa4-6d98-42e3-a039-a5240b6142f2", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1bee1e-b605-4fa7-a234-86fa4a2ff5b4", "created": "2026-01-27T05:13:01.69371Z", "modified": "2026-01-27T05:13:01.69371Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f23a8fe48ede5a405bddbeedd7bcc62ff899f05f509e771a4252dbf2a6d62bbf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.69371Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3124b914-b4e0-4c11-b7b7-34c59facd196", "created": "2026-01-27T05:13:01.694553Z", "modified": "2026-01-27T05:13:01.694553Z", "relationship_type": "indicates", "source_ref": "indicator--be1bee1e-b605-4fa7-a234-86fa4a2ff5b4", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbcca2a-0e23-44b3-a9c3-17f3e99f8a02", "created": "2026-01-27T05:13:01.69473Z", "modified": "2026-01-27T05:13:01.69473Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='166fd3bbfd9902d2e2a4f422a58faf24a457823930bcfe7bed24d9896a1c0225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.69473Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39a7aa41-4439-4513-a799-220e5f047e79", "created": "2026-01-27T05:13:01.695566Z", "modified": "2026-01-27T05:13:01.695566Z", "relationship_type": "indicates", "source_ref": "indicator--bcbcca2a-0e23-44b3-a9c3-17f3e99f8a02", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408de2eb-5742-4aa4-bdb7-4b47d3a8b500", "created": "2026-01-27T05:13:01.695755Z", "modified": "2026-01-27T05:13:01.695755Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d6d8eff1d75ef137a3375d2bee75e17a5a6a5903a243bb9d8739416ee35b4042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.695755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e7550e9-4f49-403d-a5b2-ed71dae26c8e", "created": "2026-01-27T05:13:01.696615Z", "modified": "2026-01-27T05:13:01.696615Z", "relationship_type": "indicates", "source_ref": "indicator--408de2eb-5742-4aa4-bdb7-4b47d3a8b500", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f479823-0619-41bb-9eef-5901a064e6dc", "created": "2026-01-27T05:13:01.696812Z", "modified": "2026-01-27T05:13:01.696812Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.sec.provider.mobile.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.696812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5cbf862e-763f-4b7a-9b17-c7a4ad444cc9", "created": "2026-01-27T05:13:01.697487Z", "modified": "2026-01-27T05:13:01.697487Z", "relationship_type": "indicates", "source_ref": "indicator--4f479823-0619-41bb-9eef-5901a064e6dc", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ba713b-0cea-4ea3-922b-084e491b332c", "created": "2026-01-27T05:13:01.697669Z", "modified": "2026-01-27T05:13:01.697669Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0DCD7C9CC6A76AD28D7D992C4EF3DF2F768EA473']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.697669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0e093ef-5988-4df0-94e4-993be60483de", "created": "2026-01-27T05:13:01.698474Z", "modified": "2026-01-27T05:13:01.698474Z", "relationship_type": "indicates", "source_ref": "indicator--b6ba713b-0cea-4ea3-922b-084e491b332c", "target_ref": "malware--81ed8646-b54a-4c7b-b871-50758f754178"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1b142555-09f2-4f92-9924-866beb2c806e", "created": "2026-01-27T05:13:01.698646Z", "modified": "2026-01-27T05:13:01.698646Z", "name": "SentryPC", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf6ad06-5309-4101-87c2-028eb57cd3d2", "created": "2026-01-27T05:13:01.698839Z", "modified": "2026-01-27T05:13:01.698839Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentrypc.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.698839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccae3d62-5705-4968-ae4c-57f2a3fc13e3", "created": "2026-01-27T05:13:01.699521Z", "modified": "2026-01-27T05:13:01.699521Z", "relationship_type": "indicates", "source_ref": "indicator--bdf6ad06-5309-4101-87c2-028eb57cd3d2", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19027b9-52b1-4300-ac57-cb29c1e09517", "created": "2026-01-27T05:13:01.699694Z", "modified": "2026-01-27T05:13:01.699694Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spc-runtimes.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.699694Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7618f3a6-3589-43e7-aa4a-da5ac18c0648", "created": "2026-01-27T05:13:01.70041Z", "modified": "2026-01-27T05:13:01.70041Z", "relationship_type": "indicates", "source_ref": "indicator--f19027b9-52b1-4300-ac57-cb29c1e09517", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cca456-20b3-4270-a2cf-975e0fd4c93c", "created": "2026-01-27T05:13:01.700585Z", "modified": "2026-01-27T05:13:01.700585Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypconline.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.700585Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8110bfd1-3d43-4c2a-9de2-e081fb14f6e8", "created": "2026-01-27T05:13:01.701646Z", "modified": "2026-01-27T05:13:01.701646Z", "relationship_type": "indicates", "source_ref": "indicator--77cca456-20b3-4270-a2cf-975e0fd4c93c", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428f816b-2f85-4a53-b2f7-61497a894047", "created": "2026-01-27T05:13:01.701846Z", "modified": "2026-01-27T05:13:01.701846Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypc.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.701846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9de455d-514e-4cc8-9294-4f5ca13fbedb", "created": "2026-01-27T05:13:01.702532Z", "modified": "2026-01-27T05:13:01.702532Z", "relationship_type": "indicates", "source_ref": "indicator--428f816b-2f85-4a53-b2f7-61497a894047", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cd8d8e-fa8d-4c72-bc28-ca695a63573b", "created": "2026-01-27T05:13:01.702707Z", "modified": "2026-01-27T05:13:01.702707Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spclogs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.702707Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea47d005-044f-4a75-bc05-176294aca765", "created": "2026-01-27T05:13:01.703402Z", "modified": "2026-01-27T05:13:01.703402Z", "relationship_type": "indicates", "source_ref": "indicator--66cd8d8e-fa8d-4c72-bc28-ca695a63573b", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9d6dec-db2c-40cc-904e-700c0d6f06d3", "created": "2026-01-27T05:13:01.703583Z", "modified": "2026-01-27T05:13:01.703583Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypc.download']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.703583Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6a125f1-1f88-406b-a2a6-5d8236a4bcd5", "created": "2026-01-27T05:13:01.704276Z", "modified": "2026-01-27T05:13:01.704276Z", "relationship_type": "indicates", "source_ref": "indicator--aa9d6dec-db2c-40cc-904e-700c0d6f06d3", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c80b684-ab3d-48fc-bab3-1ae3fb04e683", "created": "2026-01-27T05:13:01.704453Z", "modified": "2026-01-27T05:13:01.704453Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.sentrypc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.704453Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2f934570-5ba2-4a3d-a1c6-624f20b7fcfb", "created": "2026-01-27T05:13:01.705137Z", "modified": "2026-01-27T05:13:01.705137Z", "relationship_type": "indicates", "source_ref": "indicator--2c80b684-ab3d-48fc-bab3-1ae3fb04e683", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffabc6b-637c-4b4f-8a55-20bfa5679039", "created": "2026-01-27T05:13:01.705311Z", "modified": "2026-01-27T05:13:01.705311Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sentrypc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.705311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a79b9736-7622-4d35-bf59-6bdba2dba4f3", "created": "2026-01-27T05:13:01.705987Z", "modified": "2026-01-27T05:13:01.705987Z", "relationship_type": "indicates", "source_ref": "indicator--dffabc6b-637c-4b4f-8a55-20bfa5679039", "target_ref": "malware--1b142555-09f2-4f92-9924-866beb2c806e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071", "created": "2026-01-27T05:13:01.70616Z", "modified": "2026-01-27T05:13:01.70616Z", "name": "TheWiSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2605c7-dd89-4c04-b16d-a452c0054586", "created": "2026-01-27T05:13:01.706355Z", "modified": "2026-01-27T05:13:01.706355Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.thewispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.706355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7810475b-b3d3-45f5-8688-5ace2c41f34c", "created": "2026-01-27T05:13:01.707052Z", "modified": "2026-01-27T05:13:01.707052Z", "relationship_type": "indicates", "source_ref": "indicator--7e2605c7-dd89-4c04-b16d-a452c0054586", "target_ref": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad202989-9eea-4c16-aa94-6a11fbaaf51f", "created": "2026-01-27T05:13:01.70723Z", "modified": "2026-01-27T05:13:01.70723Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.thewispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.70723Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f32cb39-afcd-457c-9ada-cedd06d12fd6", "created": "2026-01-27T05:13:01.707917Z", "modified": "2026-01-27T05:13:01.707917Z", "relationship_type": "indicates", "source_ref": "indicator--ad202989-9eea-4c16-aa94-6a11fbaaf51f", "target_ref": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738176fc-295a-463a-ad50-93c3c5cf977f", "created": "2026-01-27T05:13:01.708092Z", "modified": "2026-01-27T05:13:01.708092Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='childmonitoringsystem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.708092Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5859fd90-cea1-4467-a118-9326130c9b94", "created": "2026-01-27T05:13:01.708786Z", "modified": "2026-01-27T05:13:01.708786Z", "relationship_type": "indicates", "source_ref": "indicator--738176fc-295a-463a-ad50-93c3c5cf977f", "target_ref": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feb8802-628e-48f8-8e1e-0792e0c17082", "created": "2026-01-27T05:13:01.708962Z", "modified": "2026-01-27T05:13:01.708962Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a1c210acafdae2b0ebbb4baf00d9ef523ed408c2fee782c91a0e3a63e7d3809d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.708962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4843a8e-aa7c-43e4-a54d-eecd2692f0fc", "created": "2026-01-27T05:13:01.709924Z", "modified": "2026-01-27T05:13:01.709924Z", "relationship_type": "indicates", "source_ref": "indicator--9feb8802-628e-48f8-8e1e-0792e0c17082", "target_ref": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f1411b-ea7d-4364-a4a4-73e4b50d7ecf", "created": "2026-01-27T05:13:01.710106Z", "modified": "2026-01-27T05:13:01.710106Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thewispy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.710106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8226523-b740-461d-8b30-d27addffe9b4", "created": "2026-01-27T05:13:01.710764Z", "modified": "2026-01-27T05:13:01.710764Z", "relationship_type": "indicates", "source_ref": "indicator--55f1411b-ea7d-4364-a4a4-73e4b50d7ecf", "target_ref": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2375cfe1-6e2a-4a28-83f5-6b98fad18912", "created": "2026-01-27T05:13:01.710954Z", "modified": "2026-01-27T05:13:01.710954Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='BFF94895A64AEB38B5278BC41B1DB242CD82DA62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.710954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9dd002f3-5381-4b40-b3c8-1c723844c395", "created": "2026-01-27T05:13:01.711732Z", "modified": "2026-01-27T05:13:01.711732Z", "relationship_type": "indicates", "source_ref": "indicator--2375cfe1-6e2a-4a28-83f5-6b98fad18912", "target_ref": "malware--bdf2ad9d-4c57-4106-b7c3-0910a8bf7071"}, {"type": "malware", "spec_version": "2.1", "id": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c", "created": "2026-01-27T05:13:01.711923Z", "modified": "2026-01-27T05:13:01.711923Z", "name": "Observer", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18600d8-5725-4ed9-9f7a-263ee47f6b25", "created": "2026-01-27T05:13:01.712093Z", "modified": "2026-01-27T05:13:01.712093Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='observer.back4app.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.712093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13aedd36-fe8a-4b5d-810f-62f78c1779e6", "created": "2026-01-27T05:13:01.712783Z", "modified": "2026-01-27T05:13:01.712783Z", "relationship_type": "indicates", "source_ref": "indicator--a18600d8-5725-4ed9-9f7a-263ee47f6b25", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc221c62-bbb1-4a6a-938f-a50287833fbe", "created": "2026-01-27T05:13:01.712962Z", "modified": "2026-01-27T05:13:01.712962Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.observer.pw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.712962Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e284755-187f-4a0b-8b46-5ad8703d2692", "created": "2026-01-27T05:13:01.71364Z", "modified": "2026-01-27T05:13:01.71364Z", "relationship_type": "indicates", "source_ref": "indicator--fc221c62-bbb1-4a6a-938f-a50287833fbe", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b245c1cc-ea17-475e-a678-904f0caae224", "created": "2026-01-27T05:13:01.713841Z", "modified": "2026-01-27T05:13:01.713841Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='YWZiZDFjZTg2NTZlOGI4NDkyYWJjZDJjZDE5ZTM0Mjk.MzkwMmNhZGFiZGZhMjMyZjQzNTJkYmQ1ODg1ZjI1NzA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.713841Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cabb099f-71f2-4cf5-b7d5-2bf584010a06", "created": "2026-01-27T05:13:01.715384Z", "modified": "2026-01-27T05:13:01.715384Z", "relationship_type": "indicates", "source_ref": "indicator--b245c1cc-ea17-475e-a678-904f0caae224", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cdc456-3dd6-42d8-972a-9671acc45d1c", "created": "2026-01-27T05:13:01.71557Z", "modified": "2026-01-27T05:13:01.71557Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.system.settings']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.71557Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af269bb8-690f-40cf-be3f-3bcb7246d502", "created": "2026-01-27T05:13:01.716251Z", "modified": "2026-01-27T05:13:01.716251Z", "relationship_type": "indicates", "source_ref": "indicator--45cdc456-3dd6-42d8-972a-9671acc45d1c", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d862cfd8-889c-401a-acaa-ee1eb3cde51a", "created": "2026-01-27T05:13:01.716429Z", "modified": "2026-01-27T05:13:01.716429Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='3D4D65F3584201E74B186A90C3333C468D3C6A09']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.716429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23a34162-0104-4799-8d2d-79e908442a30", "created": "2026-01-27T05:13:01.71722Z", "modified": "2026-01-27T05:13:01.71722Z", "relationship_type": "indicates", "source_ref": "indicator--d862cfd8-889c-401a-acaa-ee1eb3cde51a", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc2461d-b84e-4c1e-8294-fd472b665b31", "created": "2026-01-27T05:13:01.717398Z", "modified": "2026-01-27T05:13:01.717398Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='64AC17A447EB4BCAF556B57C5C66F232C489C7A7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.717398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88cfe36f-a800-44fe-a01d-2c549e7371ef", "created": "2026-01-27T05:13:01.718208Z", "modified": "2026-01-27T05:13:01.718208Z", "relationship_type": "indicates", "source_ref": "indicator--2dc2461d-b84e-4c1e-8294-fd472b665b31", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75060330-7efe-4989-9079-4a869b62bfdf", "created": "2026-01-27T05:13:01.718384Z", "modified": "2026-01-27T05:13:01.718384Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='85AF7A95F8A95541F6B6DE88A8EBC24FF1658E98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.718384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--161e7ce0-7ee5-446e-9696-892a86bde6ab", "created": "2026-01-27T05:13:01.719301Z", "modified": "2026-01-27T05:13:01.719301Z", "relationship_type": "indicates", "source_ref": "indicator--75060330-7efe-4989-9079-4a869b62bfdf", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56491a51-0ae6-4aaf-8cc7-61f88ace7614", "created": "2026-01-27T05:13:01.719479Z", "modified": "2026-01-27T05:13:01.719479Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D44524FA0D7866F1798C41C28953DA899B46BE65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.719479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99fdf6fc-452c-4c3c-9386-7c3d61cd3b12", "created": "2026-01-27T05:13:01.720266Z", "modified": "2026-01-27T05:13:01.720266Z", "relationship_type": "indicates", "source_ref": "indicator--56491a51-0ae6-4aaf-8cc7-61f88ace7614", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f949406-0004-4610-9dc6-1465c2990c3e", "created": "2026-01-27T05:13:01.720443Z", "modified": "2026-01-27T05:13:01.720443Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E906D462FA05007DE06423A10539C7E7EAB041CD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.720443Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f983d2ef-7ef8-4d5c-b444-983f8692d87e", "created": "2026-01-27T05:13:01.721235Z", "modified": "2026-01-27T05:13:01.721235Z", "relationship_type": "indicates", "source_ref": "indicator--6f949406-0004-4610-9dc6-1465c2990c3e", "target_ref": "malware--253981e2-a840-4d6a-9c06-1a966b64f40c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--39b29eee-78e3-4d41-9058-3a48c377db68", "created": "2026-01-27T05:13:01.721412Z", "modified": "2026-01-27T05:13:01.721412Z", "name": "Mrecorder", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a1f62a-ae54-48f9-ad8d-a50af279c393", "created": "2026-01-27T05:13:01.721584Z", "modified": "2026-01-27T05:13:01.721584Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d1gslyvqtipqvi.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.721584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e3e3fcf3-6377-4b08-b564-81955fba14e3", "created": "2026-01-27T05:13:01.722304Z", "modified": "2026-01-27T05:13:01.722304Z", "relationship_type": "indicates", "source_ref": "indicator--73a1f62a-ae54-48f9-ad8d-a50af279c393", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c91190-02cb-4644-a3e6-81d3d500685a", "created": "2026-01-27T05:13:01.722487Z", "modified": "2026-01-27T05:13:01.722487Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d24lo6rmha82nf.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.722487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cf89fe70-4e2d-42cd-ace6-e5407f5d1b04", "created": "2026-01-27T05:13:01.7232Z", "modified": "2026-01-27T05:13:01.7232Z", "relationship_type": "indicates", "source_ref": "indicator--45c91190-02cb-4644-a3e6-81d3d500685a", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b8e379-f4c4-445d-9273-6a8897b028aa", "created": "2026-01-27T05:13:01.723377Z", "modified": "2026-01-27T05:13:01.723377Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='d3g4zswpacwtfb.cloudfront.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.723377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3db9edf-4d89-4e27-98f8-bff251cfa092", "created": "2026-01-27T05:13:01.724089Z", "modified": "2026-01-27T05:13:01.724089Z", "relationship_type": "indicates", "source_ref": "indicator--10b8e379-f4c4-445d-9273-6a8897b028aa", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aba0198-2d1a-45d2-b0ba-7858ea3357b2", "created": "2026-01-27T05:13:01.724266Z", "modified": "2026-01-27T05:13:01.724266Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data240.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.724266Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98d7fdcb-72ab-4530-b182-b56ad713ba98", "created": "2026-01-27T05:13:01.724961Z", "modified": "2026-01-27T05:13:01.724961Z", "relationship_type": "indicates", "source_ref": "indicator--3aba0198-2d1a-45d2-b0ba-7858ea3357b2", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb29a94-e5a3-4e72-a67b-f044cc04260a", "created": "2026-01-27T05:13:01.725137Z", "modified": "2026-01-27T05:13:01.725137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data241.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.725137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c98d17d-b395-407b-96d3-0a0177883817", "created": "2026-01-27T05:13:01.725827Z", "modified": "2026-01-27T05:13:01.725827Z", "relationship_type": "indicates", "source_ref": "indicator--9eb29a94-e5a3-4e72-a67b-f044cc04260a", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85459bdf-e949-4ca7-9ffc-8f318712eed6", "created": "2026-01-27T05:13:01.726003Z", "modified": "2026-01-27T05:13:01.726003Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='disp2.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.726003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d029062-496d-4522-b582-559dd7e380fb", "created": "2026-01-27T05:13:01.726675Z", "modified": "2026-01-27T05:13:01.726675Z", "relationship_type": "indicates", "source_ref": "indicator--85459bdf-e949-4ca7-9ffc-8f318712eed6", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51637b62-a6c7-4dd4-87db-1fb775b43042", "created": "2026-01-27T05:13:01.726903Z", "modified": "2026-01-27T05:13:01.726903Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dispatcher.mrecorder.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.726903Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b6473f39-a86b-48bb-b163-f514cbd26165", "created": "2026-01-27T05:13:01.72772Z", "modified": "2026-01-27T05:13:01.72772Z", "relationship_type": "indicates", "source_ref": "indicator--51637b62-a6c7-4dd4-87db-1fb775b43042", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77ca74c-16a6-402e-95b0-d956b40388ca", "created": "2026-01-27T05:13:01.727917Z", "modified": "2026-01-27T05:13:01.727917Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobi22.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.727917Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--978f761b-e6c0-42dc-9e22-04e2da5999f8", "created": "2026-01-27T05:13:01.728577Z", "modified": "2026-01-27T05:13:01.728577Z", "relationship_type": "indicates", "source_ref": "indicator--c77ca74c-16a6-402e-95b0-d956b40388ca", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d617ab-e826-4b4b-9b76-50c1e59a44a5", "created": "2026-01-27T05:13:01.728767Z", "modified": "2026-01-27T05:13:01.728767Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilerecorder-1277.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.728767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34fe0030-a622-4dd6-ab59-9cc8987bcd5f", "created": "2026-01-27T05:13:01.729466Z", "modified": "2026-01-27T05:13:01.729466Z", "relationship_type": "indicates", "source_ref": "indicator--d4d617ab-e826-4b4b-9b76-50c1e59a44a5", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a5a527-f9e9-4692-a782-edc5d610fd6a", "created": "2026-01-27T05:13:01.729643Z", "modified": "2026-01-27T05:13:01.729643Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.729643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b91d9621-50e3-4742-87c1-5a89864f1dc4", "created": "2026-01-27T05:13:01.730382Z", "modified": "2026-01-27T05:13:01.730382Z", "relationship_type": "indicates", "source_ref": "indicator--17a5a527-f9e9-4692-a782-edc5d610fd6a", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eeb6e54-e86e-4532-968d-e373a13d8047", "created": "2026-01-27T05:13:01.730566Z", "modified": "2026-01-27T05:13:01.730566Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.730566Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b7e57ec-5c21-43b0-9b17-fafc924c35c9", "created": "2026-01-27T05:13:01.731254Z", "modified": "2026-01-27T05:13:01.731254Z", "relationship_type": "indicates", "source_ref": "indicator--4eeb6e54-e86e-4532-968d-e373a13d8047", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f7d1b2-0067-43ed-8179-46bcccc7cc44", "created": "2026-01-27T05:13:01.731431Z", "modified": "2026-01-27T05:13:01.731431Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='package.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.731431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a2374043-d6f7-4981-940b-640eec2d2f37", "created": "2026-01-27T05:13:01.732123Z", "modified": "2026-01-27T05:13:01.732123Z", "relationship_type": "indicates", "source_ref": "indicator--99f7d1b2-0067-43ed-8179-46bcccc7cc44", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504b1363-9ba6-4733-826d-0803982ad73d", "created": "2026-01-27T05:13:01.732299Z", "modified": "2026-01-27T05:13:01.732299Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='package2.mrec24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.732299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b54a26d-0cb8-4f3b-a99b-fd3a525cd656", "created": "2026-01-27T05:13:01.733018Z", "modified": "2026-01-27T05:13:01.733018Z", "relationship_type": "indicates", "source_ref": "indicator--504b1363-9ba6-4733-826d-0803982ad73d", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2f88be-afe7-4bd6-a0d1-0518e3210354", "created": "2026-01-27T05:13:01.733194Z", "modified": "2026-01-27T05:13:01.733194Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='project-7991479181228723357.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.733194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99b9721c-19ce-40ec-ae92-b19f58d235c4", "created": "2026-01-27T05:13:01.733973Z", "modified": "2026-01-27T05:13:01.733973Z", "relationship_type": "indicates", "source_ref": "indicator--cc2f88be-afe7-4bd6-a0d1-0518e3210354", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f641f51e-4f75-4f18-97a7-c9fbe76a4001", "created": "2026-01-27T05:13:01.734158Z", "modified": "2026-01-27T05:13:01.734158Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilerecorder24.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.734158Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0ca1b0b-fdb1-46e6-a1e4-0ae84851149a", "created": "2026-01-27T05:13:01.734871Z", "modified": "2026-01-27T05:13:01.734871Z", "relationship_type": "indicates", "source_ref": "indicator--f641f51e-4f75-4f18-97a7-c9fbe76a4001", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce76b92d-5799-411c-9584-279b7b44530f", "created": "2026-01-27T05:13:01.735045Z", "modified": "2026-01-27T05:13:01.735045Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mrecorder.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.735045Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d72454c-4aa1-4838-b142-8c886b29f2b7", "created": "2026-01-27T05:13:01.735857Z", "modified": "2026-01-27T05:13:01.735857Z", "relationship_type": "indicates", "source_ref": "indicator--ce76b92d-5799-411c-9584-279b7b44530f", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beec9367-18c9-46b4-a092-0c6ba1919826", "created": "2026-01-27T05:13:01.736036Z", "modified": "2026-01-27T05:13:01.736036Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobileservices2.synchronization']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.736036Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ccadf0c-a319-4551-9118-19462b2dd2fa", "created": "2026-01-27T05:13:01.736712Z", "modified": "2026-01-27T05:13:01.736712Z", "relationship_type": "indicates", "source_ref": "indicator--beec9367-18c9-46b4-a092-0c6ba1919826", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d575d7-a010-403c-8d2d-ee89095e44b8", "created": "2026-01-27T05:13:01.736905Z", "modified": "2026-01-27T05:13:01.736905Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mrecorder.callrecorder']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.736905Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f7abe5d-0bf9-413d-b1c8-c45c98491906", "created": "2026-01-27T05:13:01.737563Z", "modified": "2026-01-27T05:13:01.737563Z", "relationship_type": "indicates", "source_ref": "indicator--81d575d7-a010-403c-8d2d-ee89095e44b8", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c3f600-a40d-4717-8e46-34b69256d261", "created": "2026-01-27T05:13:01.737737Z", "modified": "2026-01-27T05:13:01.737737Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobileservice.sync']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.737737Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ece9779-ba26-4fb2-96f1-50a29659dc1d", "created": "2026-01-27T05:13:01.738408Z", "modified": "2026-01-27T05:13:01.738408Z", "relationship_type": "indicates", "source_ref": "indicator--e5c3f600-a40d-4717-8e46-34b69256d261", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f775326-d8ca-4967-b9c8-408f3bf64634", "created": "2026-01-27T05:13:01.73858Z", "modified": "2026-01-27T05:13:01.73858Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.connection.manager']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.73858Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e8b58b-00a8-4a4f-af92-c8b102859524", "created": "2026-01-27T05:13:01.739261Z", "modified": "2026-01-27T05:13:01.739261Z", "relationship_type": "indicates", "source_ref": "indicator--1f775326-d8ca-4967-b9c8-408f3bf64634", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4e7a9a-0457-4954-b95a-2df6d6dde03a", "created": "2026-01-27T05:13:01.73944Z", "modified": "2026-01-27T05:13:01.73944Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='718F3191938DA39D3A4EAC0EF0F44C70F32B0989']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.73944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6144acc-fcee-4d4e-a1aa-6316edbeac4d", "created": "2026-01-27T05:13:01.74023Z", "modified": "2026-01-27T05:13:01.74023Z", "relationship_type": "indicates", "source_ref": "indicator--7f4e7a9a-0457-4954-b95a-2df6d6dde03a", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f6d141-5c5d-4d56-8af9-20d05e2692c2", "created": "2026-01-27T05:13:01.740405Z", "modified": "2026-01-27T05:13:01.740405Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='77142DA3A865C256FCDD24E187FDCEBA1B4EC587']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.740405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec589ec9-2114-4272-a7c1-9570d3693591", "created": "2026-01-27T05:13:01.741191Z", "modified": "2026-01-27T05:13:01.741191Z", "relationship_type": "indicates", "source_ref": "indicator--d3f6d141-5c5d-4d56-8af9-20d05e2692c2", "target_ref": "malware--39b29eee-78e3-4d41-9058-3a48c377db68"}, {"type": "malware", "spec_version": "2.1", "id": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c", "created": "2026-01-27T05:13:01.741361Z", "modified": "2026-01-27T05:13:01.741361Z", "name": "PhoneSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96cd8b0-f40a-4ea2-a191-f415110544b9", "created": "2026-01-27T05:13:01.741534Z", "modified": "2026-01-27T05:13:01.741534Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.phone-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.741534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--23066e1b-93b1-4a13-b24a-5b5592daecb4", "created": "2026-01-27T05:13:01.74223Z", "modified": "2026-01-27T05:13:01.74223Z", "relationship_type": "indicates", "source_ref": "indicator--f96cd8b0-f40a-4ea2-a191-f415110544b9", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e0ec55-5003-4d0b-ac7d-e0979a260136", "created": "2026-01-27T05:13:01.74241Z", "modified": "2026-01-27T05:13:01.74241Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phone-spy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.74241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d658a861-759d-4146-9e05-6f658f8cb164", "created": "2026-01-27T05:13:01.74311Z", "modified": "2026-01-27T05:13:01.74311Z", "relationship_type": "indicates", "source_ref": "indicator--94e0ec55-5003-4d0b-ac7d-e0979a260136", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877a3e10-f1af-4870-96b1-3eca9b45c593", "created": "2026-01-27T05:13:01.743284Z", "modified": "2026-01-27T05:13:01.743284Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='aksoft.gq']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.743284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2614cf8-4655-4bb4-bf25-b34450f34cdf", "created": "2026-01-27T05:13:01.744083Z", "modified": "2026-01-27T05:13:01.744083Z", "relationship_type": "indicates", "source_ref": "indicator--877a3e10-f1af-4870-96b1-3eca9b45c593", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622b782b-90b1-4f8d-b8c4-6682f90dc3b9", "created": "2026-01-27T05:13:01.744261Z", "modified": "2026-01-27T05:13:01.744261Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.popo.analyse']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.744261Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb8b0150-2aff-4218-87ff-07fad2d946c2", "created": "2026-01-27T05:13:01.74492Z", "modified": "2026-01-27T05:13:01.74492Z", "relationship_type": "indicates", "source_ref": "indicator--622b782b-90b1-4f8d-b8c4-6682f90dc3b9", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66703cb9-7933-4d39-bf53-684095b54a51", "created": "2026-01-27T05:13:01.745093Z", "modified": "2026-01-27T05:13:01.745093Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wlset.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.745093Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6c9cd31-184f-44a2-a668-a8c05d4ca228", "created": "2026-01-27T05:13:01.745739Z", "modified": "2026-01-27T05:13:01.745739Z", "relationship_type": "indicates", "source_ref": "indicator--66703cb9-7933-4d39-bf53-684095b54a51", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bc71ca-fe2b-4240-b051-f2565d38bd82", "created": "2026-01-27T05:13:01.745931Z", "modified": "2026-01-27T05:13:01.745931Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5EC970BC602D0EBB2F3C7A5135E24C330B71DE59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.745931Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a27f12a5-0252-4542-b156-3a5cce99feda", "created": "2026-01-27T05:13:01.746713Z", "modified": "2026-01-27T05:13:01.746713Z", "relationship_type": "indicates", "source_ref": "indicator--b8bc71ca-fe2b-4240-b051-f2565d38bd82", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4d0702-65b3-491b-9215-b42d2a47beee", "created": "2026-01-27T05:13:01.746907Z", "modified": "2026-01-27T05:13:01.746907Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FBC83FD67E3B534B8B03D3B341249DB3186374E2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.746907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1c310496-2228-404b-be58-e340f5a2c331", "created": "2026-01-27T05:13:01.747673Z", "modified": "2026-01-27T05:13:01.747673Z", "relationship_type": "indicates", "source_ref": "indicator--3c4d0702-65b3-491b-9215-b42d2a47beee", "target_ref": "malware--bda1231b-2745-4bf5-9bac-e90889932c7c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf", "created": "2026-01-27T05:13:01.747862Z", "modified": "2026-01-27T05:13:01.747862Z", "name": "ShadySpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1956f6d6-0cbb-4d47-ac32-301be9802ec7", "created": "2026-01-27T05:13:01.748032Z", "modified": "2026-01-27T05:13:01.748032Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.748032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f253066-bc96-4000-bfa0-d2fd0f961c6d", "created": "2026-01-27T05:13:01.748698Z", "modified": "2026-01-27T05:13:01.748698Z", "relationship_type": "indicates", "source_ref": "indicator--1956f6d6-0cbb-4d47-ac32-301be9802ec7", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77049454-81e5-49e9-8e6d-d4a0253c4755", "created": "2026-01-27T05:13:01.748889Z", "modified": "2026-01-27T05:13:01.748889Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.748889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--101afc87-5a7b-404f-b3c8-87b913f6b5f2", "created": "2026-01-27T05:13:01.749559Z", "modified": "2026-01-27T05:13:01.749559Z", "relationship_type": "indicates", "source_ref": "indicator--77049454-81e5-49e9-8e6d-d4a0253c4755", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0fb25b-bef1-42f6-958b-e7c8af175a4b", "created": "2026-01-27T05:13:01.749731Z", "modified": "2026-01-27T05:13:01.749731Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.749731Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e83b7720-0e89-4acc-b1f1-557bff498824", "created": "2026-01-27T05:13:01.750454Z", "modified": "2026-01-27T05:13:01.750454Z", "relationship_type": "indicates", "source_ref": "indicator--ca0fb25b-bef1-42f6-958b-e7c8af175a4b", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16613584-49fd-4b98-8480-b32aa760764b", "created": "2026-01-27T05:13:01.750628Z", "modified": "2026-01-27T05:13:01.750628Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='shadyspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.750628Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d766bf34-1205-408a-807d-7f3475a5f414", "created": "2026-01-27T05:13:01.751319Z", "modified": "2026-01-27T05:13:01.751319Z", "relationship_type": "indicates", "source_ref": "indicator--16613584-49fd-4b98-8480-b32aa760764b", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d4549ab-e023-4748-9918-d80ce6c2d45c", "created": "2026-01-27T05:13:01.751493Z", "modified": "2026-01-27T05:13:01.751493Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c1e13d5848d621627dc6ca7b0194265cfc4e506860492747f08e853530443a54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.751493Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ae89e5d-ae4c-4002-b81d-52d9ae6e1865", "created": "2026-01-27T05:13:01.752463Z", "modified": "2026-01-27T05:13:01.752463Z", "relationship_type": "indicates", "source_ref": "indicator--7d4549ab-e023-4748-9918-d80ce6c2d45c", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68fbfae-c94c-4325-9ad4-45b3931efa33", "created": "2026-01-27T05:13:01.752643Z", "modified": "2026-01-27T05:13:01.752643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e65a703f4d43dcabbe902e991fbad02b3eb4cd0e741528b1b50cc47347305103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.752643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d74f410e-f60a-4b77-96b2-13e6ab2c7e44", "created": "2026-01-27T05:13:01.75349Z", "modified": "2026-01-27T05:13:01.75349Z", "relationship_type": "indicates", "source_ref": "indicator--a68fbfae-c94c-4325-9ad4-45b3931efa33", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6285788-72eb-4d8f-ae2a-b326b30847aa", "created": "2026-01-27T05:13:01.753668Z", "modified": "2026-01-27T05:13:01.753668Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d2e139facfd7a455a7ae23db67b47e694e42db21bd7a4538b5f44a0a919058d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.753668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b046d5ef-e08e-4e9a-bba7-085c17f2bd0e", "created": "2026-01-27T05:13:01.754504Z", "modified": "2026-01-27T05:13:01.754504Z", "relationship_type": "indicates", "source_ref": "indicator--b6285788-72eb-4d8f-ae2a-b326b30847aa", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e97ec9c-437f-4ef2-9760-62d60ee456f1", "created": "2026-01-27T05:13:01.75469Z", "modified": "2026-01-27T05:13:01.75469Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='144e86d35eb8d5f8d56dbb7a29d5d9c17726425bc639dec91c8ebaa80c15b120']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.75469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--205aeaf2-d00d-4701-aef3-72093468b117", "created": "2026-01-27T05:13:01.755527Z", "modified": "2026-01-27T05:13:01.755527Z", "relationship_type": "indicates", "source_ref": "indicator--2e97ec9c-437f-4ef2-9760-62d60ee456f1", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c406d63-89dd-4ffd-bb35-99a9b05e5b0f", "created": "2026-01-27T05:13:01.755701Z", "modified": "2026-01-27T05:13:01.755701Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.755701Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e419e4b-d2b7-4bbb-94de-bfefca958302", "created": "2026-01-27T05:13:01.756537Z", "modified": "2026-01-27T05:13:01.756537Z", "relationship_type": "indicates", "source_ref": "indicator--4c406d63-89dd-4ffd-bb35-99a9b05e5b0f", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82741592-45e8-42f4-a726-ecde3911fede", "created": "2026-01-27T05:13:01.756712Z", "modified": "2026-01-27T05:13:01.756712Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.shadyspy.monitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.756712Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b39549b1-72c6-494f-b913-461d44396a79", "created": "2026-01-27T05:13:01.757382Z", "modified": "2026-01-27T05:13:01.757382Z", "relationship_type": "indicates", "source_ref": "indicator--82741592-45e8-42f4-a726-ecde3911fede", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759178a8-bdf4-4666-9c82-c392eef9c1a6", "created": "2026-01-27T05:13:01.757555Z", "modified": "2026-01-27T05:13:01.757555Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='91ED4F75A763A63471E1D1D39BA012DF867550D4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.757555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf6b0160-e031-442c-9a6e-54a479a44a1d", "created": "2026-01-27T05:13:01.758349Z", "modified": "2026-01-27T05:13:01.758349Z", "relationship_type": "indicates", "source_ref": "indicator--759178a8-bdf4-4666-9c82-c392eef9c1a6", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7762e06-f20d-43a7-85d7-4d40b8523102", "created": "2026-01-27T05:13:01.75853Z", "modified": "2026-01-27T05:13:01.75853Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C44894EE63F2E861A6960834A21EB27169150722']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.75853Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57dbe33c-8c88-49e5-b9c1-29e8005e8e38", "created": "2026-01-27T05:13:01.759323Z", "modified": "2026-01-27T05:13:01.759323Z", "relationship_type": "indicates", "source_ref": "indicator--f7762e06-f20d-43a7-85d7-4d40b8523102", "target_ref": "malware--011c46d9-9bcf-4f6e-999f-7122187228cf"}, {"type": "malware", "spec_version": "2.1", "id": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390", "created": "2026-01-27T05:13:01.759496Z", "modified": "2026-01-27T05:13:01.759496Z", "name": "AbsoluTrack", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fff4ad7-f631-4f80-9ab0-d8141c73032f", "created": "2026-01-27T05:13:01.759662Z", "modified": "2026-01-27T05:13:01.759662Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.759662Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7cf1aa6-e167-46e8-aba0-08a627f14f57", "created": "2026-01-27T05:13:01.760364Z", "modified": "2026-01-27T05:13:01.760364Z", "relationship_type": "indicates", "source_ref": "indicator--6fff4ad7-f631-4f80-9ab0-d8141c73032f", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6572c2-8081-4bda-aae1-151f5432105f", "created": "2026-01-27T05:13:01.760535Z", "modified": "2026-01-27T05:13:01.760535Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ass.absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.760535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c25f8050-fd99-4ce7-8f7b-45a54b47aee2", "created": "2026-01-27T05:13:01.761363Z", "modified": "2026-01-27T05:13:01.761363Z", "relationship_type": "indicates", "source_ref": "indicator--0d6572c2-8081-4bda-aae1-151f5432105f", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddb03e0-7cc6-4c35-8f13-9ab59a0a7061", "created": "2026-01-27T05:13:01.76154Z", "modified": "2026-01-27T05:13:01.76154Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thiefguardbd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.76154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2f7ecd0-6979-4082-9492-30cb681cda0c", "created": "2026-01-27T05:13:01.762222Z", "modified": "2026-01-27T05:13:01.762222Z", "relationship_type": "indicates", "source_ref": "indicator--0ddb03e0-7cc6-4c35-8f13-9ab59a0a7061", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa388d6f-844d-4582-88fe-adbea79d6708", "created": "2026-01-27T05:13:01.762398Z", "modified": "2026-01-27T05:13:01.762398Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='antitheft-88554.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.762398Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af3f79bd-0344-4c9f-ad0c-1d758f2ab3f9", "created": "2026-01-27T05:13:01.763109Z", "modified": "2026-01-27T05:13:01.763109Z", "relationship_type": "indicates", "source_ref": "indicator--fa388d6f-844d-4582-88fe-adbea79d6708", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b37615-d3b2-4fdb-81d9-46894aa78ce6", "created": "2026-01-27T05:13:01.763293Z", "modified": "2026-01-27T05:13:01.763293Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotesecurity-629f2.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.763293Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5255cf4-aed2-44a1-9861-5ebe76be3d2d", "created": "2026-01-27T05:13:01.764005Z", "modified": "2026-01-27T05:13:01.764005Z", "relationship_type": "indicates", "source_ref": "indicator--c5b37615-d3b2-4fdb-81d9-46894aa78ce6", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d5abc6-3014-490c-a6cc-aeafa6d66c30", "created": "2026-01-27T05:13:01.764184Z", "modified": "2026-01-27T05:13:01.764184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.onetouchsecurities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.764184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aefb0059-7314-44fc-92d0-ad3045f3dfe3", "created": "2026-01-27T05:13:01.764895Z", "modified": "2026-01-27T05:13:01.764895Z", "relationship_type": "indicates", "source_ref": "indicator--d4d5abc6-3014-490c-a6cc-aeafa6d66c30", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--535d9ebd-55b5-4e11-9f2d-a1d9a6b774f8", "created": "2026-01-27T05:13:01.765077Z", "modified": "2026-01-27T05:13:01.765077Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='remotesecurityots.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.765077Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef3d1457-bbdf-4b81-b617-e22fab2927ce", "created": "2026-01-27T05:13:01.765795Z", "modified": "2026-01-27T05:13:01.765795Z", "relationship_type": "indicates", "source_ref": "indicator--535d9ebd-55b5-4e11-9f2d-a1d9a6b774f8", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3953365-4544-460a-9f66-99a29ebc83bb", "created": "2026-01-27T05:13:01.765994Z", "modified": "2026-01-27T05:13:01.765994Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.765994Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68d8464d-b4f0-49d2-b841-ee7daa0f8aab", "created": "2026-01-27T05:13:01.766679Z", "modified": "2026-01-27T05:13:01.766679Z", "relationship_type": "indicates", "source_ref": "indicator--d3953365-4544-460a-9f66-99a29ebc83bb", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5227d753-cfc6-4487-8769-8d2cb55b33a9", "created": "2026-01-27T05:13:01.766933Z", "modified": "2026-01-27T05:13:01.766933Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='absolutestoreindia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.766933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--72295c19-b3a3-4728-91b0-7de1eec1dd1e", "created": "2026-01-27T05:13:01.767637Z", "modified": "2026-01-27T05:13:01.767637Z", "relationship_type": "indicates", "source_ref": "indicator--5227d753-cfc6-4487-8769-8d2cb55b33a9", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8813f3-5389-4c1d-b709-fa67e7aadc0a", "created": "2026-01-27T05:13:01.767832Z", "modified": "2026-01-27T05:13:01.767832Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ass.absolutesoftsystem.in']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.767832Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80003612-d29b-4956-86d9-9b09f6918e7f", "created": "2026-01-27T05:13:01.76853Z", "modified": "2026-01-27T05:13:01.76853Z", "relationship_type": "indicates", "source_ref": "indicator--1d8813f3-5389-4c1d-b709-fa67e7aadc0a", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f09005-66cc-4436-b3bb-f8731bb95e92", "created": "2026-01-27T05:13:01.768704Z", "modified": "2026-01-27T05:13:01.768704Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geniesoftsystem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.768704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f8e141bf-c840-47f5-b3e7-0c929e011b55", "created": "2026-01-27T05:13:01.76952Z", "modified": "2026-01-27T05:13:01.76952Z", "relationship_type": "indicates", "source_ref": "indicator--34f09005-66cc-4436-b3bb-f8731bb95e92", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7bf12b-654f-4e40-ad21-18428b67b80b", "created": "2026-01-27T05:13:01.769697Z", "modified": "2026-01-27T05:13:01.769697Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onetouchsecurities.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.769697Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25c9bbd3-c9c0-4096-9a9f-167b51e39bc3", "created": "2026-01-27T05:13:01.770393Z", "modified": "2026-01-27T05:13:01.770393Z", "relationship_type": "indicates", "source_ref": "indicator--ca7bf12b-654f-4e40-ad21-18428b67b80b", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8c2955-2346-4336-85d8-c61103d60131", "created": "2026-01-27T05:13:01.770565Z", "modified": "2026-01-27T05:13:01.770565Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='smartguardapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.770565Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fec4aead-92ac-4df0-95f2-cbd555b6b005", "created": "2026-01-27T05:13:01.771255Z", "modified": "2026-01-27T05:13:01.771255Z", "relationship_type": "indicates", "source_ref": "indicator--de8c2955-2346-4336-85d8-c61103d60131", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb7f4d3-4269-48c0-8840-c2f12bfab525", "created": "2026-01-27T05:13:01.771438Z", "modified": "2026-01-27T05:13:01.771438Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='thiefguardbd.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.771438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b07a1a40-8c8a-4a3b-9196-b21c75ce8c92", "created": "2026-01-27T05:13:01.772132Z", "modified": "2026-01-27T05:13:01.772132Z", "relationship_type": "indicates", "source_ref": "indicator--3bb7f4d3-4269-48c0-8840-c2f12bfab525", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb945448-a759-4dfd-8146-d1ef16eee81e", "created": "2026-01-27T05:13:01.772309Z", "modified": "2026-01-27T05:13:01.772309Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.smartguardapp.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.772309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b26a37a5-5ac8-4359-a6e4-1c51f7fb12bd", "created": "2026-01-27T05:13:01.773006Z", "modified": "2026-01-27T05:13:01.773006Z", "relationship_type": "indicates", "source_ref": "indicator--cb945448-a759-4dfd-8146-d1ef16eee81e", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ffe104-4649-4455-8987-1abf24a51832", "created": "2026-01-27T05:13:01.773181Z", "modified": "2026-01-27T05:13:01.773181Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a8f53b99ff5159699e47ca6d4344866e249887326d5ee19360dfe9ee820a44c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.773181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2746fb5-8152-46e6-ae53-7c665e8e1f56", "created": "2026-01-27T05:13:01.77402Z", "modified": "2026-01-27T05:13:01.77402Z", "relationship_type": "indicates", "source_ref": "indicator--81ffe104-4649-4455-8987-1abf24a51832", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948d31ed-b596-413c-a898-10c2b1a3fb9e", "created": "2026-01-27T05:13:01.774196Z", "modified": "2026-01-27T05:13:01.774196Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='605964ddbaa59bf4953d7ae8b8ce247b0654694f12af99652fee824e21be8b76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.774196Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d935305-6196-4e48-b5ce-5113c1a0812e", "created": "2026-01-27T05:13:01.775041Z", "modified": "2026-01-27T05:13:01.775041Z", "relationship_type": "indicates", "source_ref": "indicator--948d31ed-b596-413c-a898-10c2b1a3fb9e", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb90c038-982b-4255-aa6a-4477e5a57280", "created": "2026-01-27T05:13:01.775216Z", "modified": "2026-01-27T05:13:01.775216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2cc4e9ceea8d398f051fbd2deb3fc2e7936b607ccb18cc940a526eb8cb5060e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.775216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20cc8e8b-db9d-4bdd-9af9-4cfacc5401d2", "created": "2026-01-27T05:13:01.776061Z", "modified": "2026-01-27T05:13:01.776061Z", "relationship_type": "indicates", "source_ref": "indicator--bb90c038-982b-4255-aa6a-4477e5a57280", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587db917-f54a-4571-8a84-cf8162e95e00", "created": "2026-01-27T05:13:01.776236Z", "modified": "2026-01-27T05:13:01.776236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1fd194b70894584bbb2d9f727663c29ab703a4dcb1eaff91e35af3817fe51dc4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.776236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6336b17d-76ff-43ef-8875-36f61f3f48c9", "created": "2026-01-27T05:13:01.777106Z", "modified": "2026-01-27T05:13:01.777106Z", "relationship_type": "indicates", "source_ref": "indicator--587db917-f54a-4571-8a84-cf8162e95e00", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b828182-ca67-468e-b499-66b4a5858571", "created": "2026-01-27T05:13:01.777319Z", "modified": "2026-01-27T05:13:01.777319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a36637a317d9d927ba6e784592d1da974a07d82d168b4cbc82d6c0b718278060']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.777319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1a4d6d5-bf6d-48ca-93c1-0aa3bbfda034", "created": "2026-01-27T05:13:01.778301Z", "modified": "2026-01-27T05:13:01.778301Z", "relationship_type": "indicates", "source_ref": "indicator--6b828182-ca67-468e-b499-66b4a5858571", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4785dd7-ea24-4b2d-ae7d-84c3c77d17a1", "created": "2026-01-27T05:13:01.778482Z", "modified": "2026-01-27T05:13:01.778482Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9c69ce4363f62b3255bffbd6872de9856d654994c10e5a75da517f68742561e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.778482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0193f5a9-242e-42ba-910a-0b45431e943f", "created": "2026-01-27T05:13:01.779329Z", "modified": "2026-01-27T05:13:01.779329Z", "relationship_type": "indicates", "source_ref": "indicator--e4785dd7-ea24-4b2d-ae7d-84c3c77d17a1", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23737f28-fcd9-4616-860c-3af4429462f1", "created": "2026-01-27T05:13:01.779507Z", "modified": "2026-01-27T05:13:01.779507Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f1256b972e981c110499005408a3c958f2dc384acc550ae41a4975e4ba845c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.779507Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1da8fa4f-5ba5-4c71-a236-68b0152e516b", "created": "2026-01-27T05:13:01.780361Z", "modified": "2026-01-27T05:13:01.780361Z", "relationship_type": "indicates", "source_ref": "indicator--23737f28-fcd9-4616-860c-3af4429462f1", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75af9b0c-7bdd-4de8-a5b7-696807e5e573", "created": "2026-01-27T05:13:01.780538Z", "modified": "2026-01-27T05:13:01.780538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e2833eff791982dbcd38cea8b68cb54f04b96a6842796727ad9f359cd86937e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.780538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77eabba4-6116-4bec-8609-92a831165292", "created": "2026-01-27T05:13:01.781413Z", "modified": "2026-01-27T05:13:01.781413Z", "relationship_type": "indicates", "source_ref": "indicator--75af9b0c-7bdd-4de8-a5b7-696807e5e573", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a84e693-93e9-4586-ab2c-56bdd9eee1d4", "created": "2026-01-27T05:13:01.781601Z", "modified": "2026-01-27T05:13:01.781601Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64a27fac8b598f6e7bc79eabdc960c29290db1872fdc04319e7947e9f5661af7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.781601Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce7c4788-6afa-41a3-985a-0772f6beb2db", "created": "2026-01-27T05:13:01.782494Z", "modified": "2026-01-27T05:13:01.782494Z", "relationship_type": "indicates", "source_ref": "indicator--2a84e693-93e9-4586-ab2c-56bdd9eee1d4", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de36476a-9dcc-47aa-80fa-dc165e3ede78", "created": "2026-01-27T05:13:01.782671Z", "modified": "2026-01-27T05:13:01.782671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce1632fe353d6e17e263378b4148308c5853e59813cd02a72c6eb54ab814a4c2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.782671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfc04683-2a47-4794-8993-511f1a586995", "created": "2026-01-27T05:13:01.783524Z", "modified": "2026-01-27T05:13:01.783524Z", "relationship_type": "indicates", "source_ref": "indicator--de36476a-9dcc-47aa-80fa-dc165e3ede78", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56117ae-27f0-4424-a25a-dd2f051aea07", "created": "2026-01-27T05:13:01.783702Z", "modified": "2026-01-27T05:13:01.783702Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ass.antitheft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.783702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--236ce1e0-8cc4-4f75-a386-4cbe747ef489", "created": "2026-01-27T05:13:01.784377Z", "modified": "2026-01-27T05:13:01.784377Z", "relationship_type": "indicates", "source_ref": "indicator--a56117ae-27f0-4424-a25a-dd2f051aea07", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667fb722-d05c-4185-81f4-cec9be27e152", "created": "2026-01-27T05:13:01.784553Z", "modified": "2026-01-27T05:13:01.784553Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ass.remotesecurity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.784553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2fb3279-3c68-4647-b030-2a6e8098633c", "created": "2026-01-27T05:13:01.785232Z", "modified": "2026-01-27T05:13:01.785232Z", "relationship_type": "indicates", "source_ref": "indicator--667fb722-d05c-4185-81f4-cec9be27e152", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55221895-3147-4550-9a20-f1c25fc2cd60", "created": "2026-01-27T05:13:01.785407Z", "modified": "2026-01-27T05:13:01.785407Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ass.ladieschildprotection']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.785407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6b1ec5-e633-404c-99d8-b8d458cbdf71", "created": "2026-01-27T05:13:01.786097Z", "modified": "2026-01-27T05:13:01.786097Z", "relationship_type": "indicates", "source_ref": "indicator--55221895-3147-4550-9a20-f1c25fc2cd60", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454736c6-167c-44f2-88ac-56ad85a8797f", "created": "2026-01-27T05:13:01.786276Z", "modified": "2026-01-27T05:13:01.786276Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.ladieschildprotection']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.786276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a9023ad-5ac4-484b-8ea2-6124ca99f462", "created": "2026-01-27T05:13:01.787086Z", "modified": "2026-01-27T05:13:01.787086Z", "relationship_type": "indicates", "source_ref": "indicator--454736c6-167c-44f2-88ac-56ad85a8797f", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87798a5-5942-46c8-b133-a69743fbbd8f", "created": "2026-01-27T05:13:01.787263Z", "modified": "2026-01-27T05:13:01.787263Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.remotesecurity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.787263Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b1922e0-64a8-4e5f-8d0b-8deda4225a14", "created": "2026-01-27T05:13:01.787933Z", "modified": "2026-01-27T05:13:01.787933Z", "relationship_type": "indicates", "source_ref": "indicator--e87798a5-5942-46c8-b133-a69743fbbd8f", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3035e921-64ad-412f-add2-41579c381c7d", "created": "2026-01-27T05:13:01.78811Z", "modified": "2026-01-27T05:13:01.78811Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.antitheft']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.78811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88876348-32eb-4364-8492-00883abdcf66", "created": "2026-01-27T05:13:01.788766Z", "modified": "2026-01-27T05:13:01.788766Z", "relationship_type": "indicates", "source_ref": "indicator--3035e921-64ad-412f-add2-41579c381c7d", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae14bc1-d7c5-46dd-b8a3-ba7290d4eff5", "created": "2026-01-27T05:13:01.788942Z", "modified": "2026-01-27T05:13:01.788942Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.softalogy.thiefguard']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.788942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--977701b9-07b6-4fe9-9934-dd7af1f1bf99", "created": "2026-01-27T05:13:01.789595Z", "modified": "2026-01-27T05:13:01.789595Z", "relationship_type": "indicates", "source_ref": "indicator--bae14bc1-d7c5-46dd-b8a3-ba7290d4eff5", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c566f2e-05f8-4ef2-ab04-f639ac847e57", "created": "2026-01-27T05:13:01.789784Z", "modified": "2026-01-27T05:13:01.789784Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.ots.womenchildsafety']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.789784Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ac43d93-4eee-477a-9628-a6b6e6316150", "created": "2026-01-27T05:13:01.790444Z", "modified": "2026-01-27T05:13:01.790444Z", "relationship_type": "indicates", "source_ref": "indicator--9c566f2e-05f8-4ef2-ab04-f639ac847e57", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628cdc36-4cf2-4f40-b810-2fb2e6ed268e", "created": "2026-01-27T05:13:01.79062Z", "modified": "2026-01-27T05:13:01.79062Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.gss.whereismyphone']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.79062Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0aab186c-7f23-4a7a-b12a-cc07e0ef80ac", "created": "2026-01-27T05:13:01.791291Z", "modified": "2026-01-27T05:13:01.791291Z", "relationship_type": "indicates", "source_ref": "indicator--628cdc36-4cf2-4f40-b810-2fb2e6ed268e", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924166c9-a8eb-48ee-9984-d97652519c10", "created": "2026-01-27T05:13:01.791474Z", "modified": "2026-01-27T05:13:01.791474Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.smart.guardoffline']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.791474Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8705278d-3c99-4833-9fa6-96653f538846", "created": "2026-01-27T05:13:01.792151Z", "modified": "2026-01-27T05:13:01.792151Z", "relationship_type": "indicates", "source_ref": "indicator--924166c9-a8eb-48ee-9984-d97652519c10", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aeded37-e048-4e24-b529-1ba9ee614278", "created": "2026-01-27T05:13:01.792333Z", "modified": "2026-01-27T05:13:01.792333Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8851279B5177EF52B0B8540EE1FCED4BABDFB318']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.792333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3c4575be-c596-4595-b2a9-05e5d43dedad", "created": "2026-01-27T05:13:01.793127Z", "modified": "2026-01-27T05:13:01.793127Z", "relationship_type": "indicates", "source_ref": "indicator--4aeded37-e048-4e24-b529-1ba9ee614278", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89ae7bb-5e6e-42d1-b5a1-1399d2265819", "created": "2026-01-27T05:13:01.793308Z", "modified": "2026-01-27T05:13:01.793308Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5D655F30DE8B8BDABCCDF660582C6369145E7A5A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.793308Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aff4bc65-c021-475c-945d-a7b7e634e70b", "created": "2026-01-27T05:13:01.794097Z", "modified": "2026-01-27T05:13:01.794097Z", "relationship_type": "indicates", "source_ref": "indicator--e89ae7bb-5e6e-42d1-b5a1-1399d2265819", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5637d4af-7efe-4440-8ecc-257b78473881", "created": "2026-01-27T05:13:01.794271Z", "modified": "2026-01-27T05:13:01.794271Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='28393DBA55F5B08294D1E54962BE1648C1EFB4A2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.794271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea1bd10a-3320-44b6-af44-28339ed1ed2a", "created": "2026-01-27T05:13:01.795186Z", "modified": "2026-01-27T05:13:01.795186Z", "relationship_type": "indicates", "source_ref": "indicator--5637d4af-7efe-4440-8ecc-257b78473881", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e429e3f-caf6-42cc-a94b-ea64efa79818", "created": "2026-01-27T05:13:01.795362Z", "modified": "2026-01-27T05:13:01.795362Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='40159690AF08A01670E3FA07A021F7B1C1437042']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.795362Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--14762bc7-6d97-4005-9f0a-fd849d87eb31", "created": "2026-01-27T05:13:01.796245Z", "modified": "2026-01-27T05:13:01.796245Z", "relationship_type": "indicates", "source_ref": "indicator--0e429e3f-caf6-42cc-a94b-ea64efa79818", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b480a12-2db3-4953-8029-bb943d592341", "created": "2026-01-27T05:13:01.796433Z", "modified": "2026-01-27T05:13:01.796433Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C9BE6C42B975258DEA10EB6946A7986E4FE955E2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.796433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d1e10fd9-1757-4e6c-85ce-fa51bbaca892", "created": "2026-01-27T05:13:01.797228Z", "modified": "2026-01-27T05:13:01.797228Z", "relationship_type": "indicates", "source_ref": "indicator--4b480a12-2db3-4953-8029-bb943d592341", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1666d76-813b-4243-95b5-7ff2dde61188", "created": "2026-01-27T05:13:01.797406Z", "modified": "2026-01-27T05:13:01.797406Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D1BB66A93F621A66094F28856988C7A2AE9972D0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.797406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--000451b1-8579-4840-8d0f-a1e891114a3d", "created": "2026-01-27T05:13:01.798221Z", "modified": "2026-01-27T05:13:01.798221Z", "relationship_type": "indicates", "source_ref": "indicator--e1666d76-813b-4243-95b5-7ff2dde61188", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2513cffc-8586-46b2-a3bf-9c761b9f87a7", "created": "2026-01-27T05:13:01.798399Z", "modified": "2026-01-27T05:13:01.798399Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1C6E171D3A6E51947DF9E83946BB115ED4A41C6A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.798399Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2148b6e9-8739-4a1a-a1e6-a66783037fca", "created": "2026-01-27T05:13:01.799201Z", "modified": "2026-01-27T05:13:01.799201Z", "relationship_type": "indicates", "source_ref": "indicator--2513cffc-8586-46b2-a3bf-9c761b9f87a7", "target_ref": "malware--094237ef-eccd-4f05-a396-f7b2f5e7a390"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7d6ccd29-5a63-40c2-afb1-fbcb362daacb", "created": "2026-01-27T05:13:01.79938Z", "modified": "2026-01-27T05:13:01.79938Z", "name": "SmartKeylogger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5924161f-3df9-4614-9d80-258d7f0f3a2e", "created": "2026-01-27T05:13:01.799549Z", "modified": "2026-01-27T05:13:01.799549Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awamisolution.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.799549Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ed86808-8977-420a-98ca-0c40bce9c2ef", "created": "2026-01-27T05:13:01.800252Z", "modified": "2026-01-27T05:13:01.800252Z", "relationship_type": "indicates", "source_ref": "indicator--5924161f-3df9-4614-9d80-258d7f0f3a2e", "target_ref": "malware--7d6ccd29-5a63-40c2-afb1-fbcb362daacb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5979f420-483c-4501-96ca-15a0c50d4300", "created": "2026-01-27T05:13:01.800429Z", "modified": "2026-01-27T05:13:01.800429Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='awamisolution.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.800429Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2975d39-9d00-4c5b-85bb-01fc38537e75", "created": "2026-01-27T05:13:01.801116Z", "modified": "2026-01-27T05:13:01.801116Z", "relationship_type": "indicates", "source_ref": "indicator--5979f420-483c-4501-96ca-15a0c50d4300", "target_ref": "malware--7d6ccd29-5a63-40c2-afb1-fbcb362daacb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ca11460-af44-4ceb-abbe-ff3b2c580f84", "created": "2026-01-27T05:13:01.8013Z", "modified": "2026-01-27T05:13:01.8013Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.AwamiSolution.smartkeylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.8013Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ce21645-5a56-4935-879c-bf40c85bcb17", "created": "2026-01-27T05:13:01.802002Z", "modified": "2026-01-27T05:13:01.802002Z", "relationship_type": "indicates", "source_ref": "indicator--2ca11460-af44-4ceb-abbe-ff3b2c580f84", "target_ref": "malware--7d6ccd29-5a63-40c2-afb1-fbcb362daacb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fb6d24-1885-4bd4-9dd0-11ded938ad73", "created": "2026-01-27T05:13:01.802175Z", "modified": "2026-01-27T05:13:01.802175Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='842676B67005E6561808B650152F598035D12800']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.802175Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4de6a9fe-29c4-4028-ae53-a2d998be5c39", "created": "2026-01-27T05:13:01.802974Z", "modified": "2026-01-27T05:13:01.802974Z", "relationship_type": "indicates", "source_ref": "indicator--d3fb6d24-1885-4bd4-9dd0-11ded938ad73", "target_ref": "malware--7d6ccd29-5a63-40c2-afb1-fbcb362daacb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af", "created": "2026-01-27T05:13:01.803148Z", "modified": "2026-01-27T05:13:01.803148Z", "name": "Traccar", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d3c5ad-c9b0-4524-9f09-47cdf3ec154c", "created": "2026-01-27T05:13:01.803317Z", "modified": "2026-01-27T05:13:01.803317Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='traccar-client-app.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.803317Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df344315-de5f-4083-88f9-b5d1c50bef2b", "created": "2026-01-27T05:13:01.804416Z", "modified": "2026-01-27T05:13:01.804416Z", "relationship_type": "indicates", "source_ref": "indicator--c7d3c5ad-c9b0-4524-9f09-47cdf3ec154c", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2975994d-13c9-4e34-b1f6-6682d974d7d7", "created": "2026-01-27T05:13:01.804599Z", "modified": "2026-01-27T05:13:01.804599Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.804599Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d686c935-cc4a-49fe-80b2-69bac276c2ae", "created": "2026-01-27T05:13:01.805285Z", "modified": "2026-01-27T05:13:01.805285Z", "relationship_type": "indicates", "source_ref": "indicator--2975994d-13c9-4e34-b1f6-6682d974d7d7", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f41dc4-be3b-4234-8201-e3cfc11c40aa", "created": "2026-01-27T05:13:01.805462Z", "modified": "2026-01-27T05:13:01.805462Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.805462Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7839dd79-4283-44bd-8a5b-9929044d1c4a", "created": "2026-01-27T05:13:01.806149Z", "modified": "2026-01-27T05:13:01.806149Z", "relationship_type": "indicates", "source_ref": "indicator--d5f41dc4-be3b-4234-8201-e3cfc11c40aa", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f0fd24-b046-42bd-b55f-d27e7ec3ea24", "created": "2026-01-27T05:13:01.806325Z", "modified": "2026-01-27T05:13:01.806325Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.806325Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d6a9e3c-71b9-454d-9e5e-6b5f5586b65c", "created": "2026-01-27T05:13:01.80702Z", "modified": "2026-01-27T05:13:01.80702Z", "relationship_type": "indicates", "source_ref": "indicator--a2f0fd24-b046-42bd-b55f-d27e7ec3ea24", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac97d8e-e173-4d4f-99b3-872859cebdd7", "created": "2026-01-27T05:13:01.807198Z", "modified": "2026-01-27T05:13:01.807198Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='traccar.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.807198Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2ef7eb96-4a57-4faa-ab7b-969436227948", "created": "2026-01-27T05:13:01.807879Z", "modified": "2026-01-27T05:13:01.807879Z", "relationship_type": "indicates", "source_ref": "indicator--0ac97d8e-e173-4d4f-99b3-872859cebdd7", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b82b05a-554e-44e0-8798-91f08c8a5355", "created": "2026-01-27T05:13:01.808054Z", "modified": "2026-01-27T05:13:01.808054Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f2ff3bd2f27a574f47962bfc94e0701dd96fb2e46003479f95ad3bc0b67d939']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.808054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7325a89c-3fbd-4944-9dd5-97d8d2e07700", "created": "2026-01-27T05:13:01.808891Z", "modified": "2026-01-27T05:13:01.808891Z", "relationship_type": "indicates", "source_ref": "indicator--5b82b05a-554e-44e0-8798-91f08c8a5355", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c13af04-486f-42a3-a34a-9e396624a30f", "created": "2026-01-27T05:13:01.80907Z", "modified": "2026-01-27T05:13:01.80907Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3ba1bb207697f68c1f2ed7a1ba689472e14252e39c963d8bde858dcf3c09aa86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.80907Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a76ae4c-6724-4c4f-9dec-fd23d5d787c4", "created": "2026-01-27T05:13:01.809916Z", "modified": "2026-01-27T05:13:01.809916Z", "relationship_type": "indicates", "source_ref": "indicator--8c13af04-486f-42a3-a34a-9e396624a30f", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9c3613-9085-4aca-a012-ec5f5aec48a4", "created": "2026-01-27T05:13:01.810094Z", "modified": "2026-01-27T05:13:01.810094Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='92494377b8e0d98530be32d58e35e8c0dd43b28a9774669adb852e84332a4aa9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.810094Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--097df2ce-1e68-4ca3-be3f-feb143bc7fa1", "created": "2026-01-27T05:13:01.81093Z", "modified": "2026-01-27T05:13:01.81093Z", "relationship_type": "indicates", "source_ref": "indicator--4c9c3613-9085-4aca-a012-ec5f5aec48a4", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fdb5ac-1b6d-47e7-857e-031a0c2b6184", "created": "2026-01-27T05:13:01.811109Z", "modified": "2026-01-27T05:13:01.811109Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b8a8cd0dc022ad8b36d2c474d12aa1fa07ded7e601ec0aaa38a2aba9c23c73e8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.811109Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--be100ae6-2bca-4ea6-a770-8df61f81d70d", "created": "2026-01-27T05:13:01.811949Z", "modified": "2026-01-27T05:13:01.811949Z", "relationship_type": "indicates", "source_ref": "indicator--f3fdb5ac-1b6d-47e7-857e-031a0c2b6184", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d409eea-77b2-44a7-b6eb-5422973de3ec", "created": "2026-01-27T05:13:01.812136Z", "modified": "2026-01-27T05:13:01.812136Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42ed66d273af5dc96b305f761ad51cfda62e97c1bbc2daee812d75d8379aef25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.812136Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f327774-a0c6-43c3-9ba4-39c5d5da20aa", "created": "2026-01-27T05:13:01.813107Z", "modified": "2026-01-27T05:13:01.813107Z", "relationship_type": "indicates", "source_ref": "indicator--0d409eea-77b2-44a7-b6eb-5422973de3ec", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197e864e-97d1-4eee-9a88-5062da8fcbcd", "created": "2026-01-27T05:13:01.81329Z", "modified": "2026-01-27T05:13:01.81329Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bd1b9499e29f0b7e0b902b8b197837c6a64aa14d63e194bceef6a1df23bfee0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.81329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16f11d72-8fee-4276-bad4-46d178868a7c", "created": "2026-01-27T05:13:01.814182Z", "modified": "2026-01-27T05:13:01.814182Z", "relationship_type": "indicates", "source_ref": "indicator--197e864e-97d1-4eee-9a88-5062da8fcbcd", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61503f2b-f3f3-4faf-bb83-8600697e3a1a", "created": "2026-01-27T05:13:01.814361Z", "modified": "2026-01-27T05:13:01.814361Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9d4d4b4b9ad189292154f5e6fd4b0760c44d7241d1bbd5a1e179431e8919755b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.814361Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3739331d-9e8a-4f9f-a2bf-5d0fd937c160", "created": "2026-01-27T05:13:01.815201Z", "modified": "2026-01-27T05:13:01.815201Z", "relationship_type": "indicates", "source_ref": "indicator--61503f2b-f3f3-4faf-bb83-8600697e3a1a", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746e42ef-6e91-4576-b481-678d7a41f039", "created": "2026-01-27T05:13:01.81538Z", "modified": "2026-01-27T05:13:01.81538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d669eb7929c344261a6cd33a9d7723eac167fd40b23379fb3372ffc75aced08e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.81538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d113e0fc-c833-45da-b0dc-57c5bfc3e4c5", "created": "2026-01-27T05:13:01.816228Z", "modified": "2026-01-27T05:13:01.816228Z", "relationship_type": "indicates", "source_ref": "indicator--746e42ef-6e91-4576-b481-678d7a41f039", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467b3248-a664-4765-8db7-f6faf273b701", "created": "2026-01-27T05:13:01.816405Z", "modified": "2026-01-27T05:13:01.816405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb0ba13b14dd83465e2be7355dcb46c3db0c3e9e19e946044abce507bb1509b9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.816405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5d69308-9b45-4d3b-aac8-a805ae5b5740", "created": "2026-01-27T05:13:01.817249Z", "modified": "2026-01-27T05:13:01.817249Z", "relationship_type": "indicates", "source_ref": "indicator--467b3248-a664-4765-8db7-f6faf273b701", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd32152-ae3d-4b3e-abd6-703761d29979", "created": "2026-01-27T05:13:01.817423Z", "modified": "2026-01-27T05:13:01.817423Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b83868f217dd72efbd7cc9695ccfdf78d079ef6acbff81b77cbeb8d52e66a82d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.817423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7989f7e5-c883-4063-bcca-0f947c7cc84d", "created": "2026-01-27T05:13:01.818275Z", "modified": "2026-01-27T05:13:01.818275Z", "relationship_type": "indicates", "source_ref": "indicator--1dd32152-ae3d-4b3e-abd6-703761d29979", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149e2c30-426a-4b79-9da2-63e8a2371b2c", "created": "2026-01-27T05:13:01.818451Z", "modified": "2026-01-27T05:13:01.818451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4c657112fd4ee0d790d3b0426612d595b3a37ceb969e3f0257d7dcf7681bf75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.818451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b578508-4b68-4b20-8376-250e1e62afb4", "created": "2026-01-27T05:13:01.819294Z", "modified": "2026-01-27T05:13:01.819294Z", "relationship_type": "indicates", "source_ref": "indicator--149e2c30-426a-4b79-9da2-63e8a2371b2c", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae2b7a7-d77a-4af7-9a25-20f7eeb1d58f", "created": "2026-01-27T05:13:01.819469Z", "modified": "2026-01-27T05:13:01.819469Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a99291ec9971ac2fdfc530962902d80e23f465c1c9cdf4eb8b7c419f1e204c94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.819469Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de0d4fc1-28d0-4291-86ad-aa85dfc8556e", "created": "2026-01-27T05:13:01.820316Z", "modified": "2026-01-27T05:13:01.820316Z", "relationship_type": "indicates", "source_ref": "indicator--7ae2b7a7-d77a-4af7-9a25-20f7eeb1d58f", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e6f1c6-187a-4734-82e8-de6c6f48ae18", "created": "2026-01-27T05:13:01.820491Z", "modified": "2026-01-27T05:13:01.820491Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c464086f6e97b76aba19703fafb6b97adb3aaff5663ce8b766c6951f8cd0d55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.820491Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed478cc8-f4d6-4b23-ad0b-1d3d109685a9", "created": "2026-01-27T05:13:01.821326Z", "modified": "2026-01-27T05:13:01.821326Z", "relationship_type": "indicates", "source_ref": "indicator--48e6f1c6-187a-4734-82e8-de6c6f48ae18", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d2b9e6-efe9-49ff-8eee-1bdd94357ef8", "created": "2026-01-27T05:13:01.821501Z", "modified": "2026-01-27T05:13:01.821501Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f61d4b4419b5de11961cbea1e52d5d54022d0b4f6c9c155b964b9a84f959e3e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.821501Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e54cc126-e621-4d48-99e4-4ef9edd682f7", "created": "2026-01-27T05:13:01.822526Z", "modified": "2026-01-27T05:13:01.822526Z", "relationship_type": "indicates", "source_ref": "indicator--a4d2b9e6-efe9-49ff-8eee-1bdd94357ef8", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e0b920-5d8e-4073-bb07-6998265fb368", "created": "2026-01-27T05:13:01.822713Z", "modified": "2026-01-27T05:13:01.822713Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='756dbfd952195b7ba03d25c354353358517c12d6fc0ec063e38f59327d489ad0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.822713Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64cbf385-8fd1-4039-ace0-6abb207ed761", "created": "2026-01-27T05:13:01.823576Z", "modified": "2026-01-27T05:13:01.823576Z", "relationship_type": "indicates", "source_ref": "indicator--19e0b920-5d8e-4073-bb07-6998265fb368", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c278cc-4d82-4176-8f66-e5bbb9792d4a", "created": "2026-01-27T05:13:01.82377Z", "modified": "2026-01-27T05:13:01.82377Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8c1a4c1f172d431368221bbf019fa4e1ee223d51dfb41a9e69e65bdded7a12dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.82377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9dba3cc-2e7c-4699-8ea3-a9500245a05e", "created": "2026-01-27T05:13:01.824607Z", "modified": "2026-01-27T05:13:01.824607Z", "relationship_type": "indicates", "source_ref": "indicator--53c278cc-4d82-4176-8f66-e5bbb9792d4a", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a70798-531f-4798-a118-c28d3d90febc", "created": "2026-01-27T05:13:01.824813Z", "modified": "2026-01-27T05:13:01.824813Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5f24c673cfefd9d4e6a3ff578b4d27ef5d0e61e200d70df178e5f1903bccdda9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.824813Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--454bc1e1-266f-4ef1-8d18-cef6aaac2609", "created": "2026-01-27T05:13:01.825639Z", "modified": "2026-01-27T05:13:01.825639Z", "relationship_type": "indicates", "source_ref": "indicator--c4a70798-531f-4798-a118-c28d3d90febc", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0115997-5b1f-4fe8-b9ad-6eaa72c1809f", "created": "2026-01-27T05:13:01.825836Z", "modified": "2026-01-27T05:13:01.825836Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fd6bde3e80d94323ac7c60479df16a2ffbc1a6d7ff0c4c9feeff670af9e26e20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.825836Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f4eff58-142a-4750-93da-4e9cb10d5ce4", "created": "2026-01-27T05:13:01.826658Z", "modified": "2026-01-27T05:13:01.826658Z", "relationship_type": "indicates", "source_ref": "indicator--e0115997-5b1f-4fe8-b9ad-6eaa72c1809f", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcc4e10-1067-4150-9849-141680c08577", "created": "2026-01-27T05:13:01.826855Z", "modified": "2026-01-27T05:13:01.826855Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='207f14e15709e1f00ee878014ffc9d601aa7638b48a5a5b1c9758eb8147dfcc6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.826855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9677896-8dca-4200-b388-045d64fd848e", "created": "2026-01-27T05:13:01.827679Z", "modified": "2026-01-27T05:13:01.827679Z", "relationship_type": "indicates", "source_ref": "indicator--9fcc4e10-1067-4150-9849-141680c08577", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4012f8c-80c5-4a30-96fa-3c196473f740", "created": "2026-01-27T05:13:01.827872Z", "modified": "2026-01-27T05:13:01.827872Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b03ccd61218fe12013836e7eea0363b33ba0436c3319f04afd92ec807fa2e390']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.827872Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae02a765-c471-4f4a-9ce1-0ee95fe3765e", "created": "2026-01-27T05:13:01.828697Z", "modified": "2026-01-27T05:13:01.828697Z", "relationship_type": "indicates", "source_ref": "indicator--b4012f8c-80c5-4a30-96fa-3c196473f740", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e4f8b8-21bc-4969-9cc6-da5b5c0a34da", "created": "2026-01-27T05:13:01.828889Z", "modified": "2026-01-27T05:13:01.828889Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a75a61944143efb0112e5a0c2f354919b203e33cec24819b9217bc3b429f76f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.828889Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90f38a1b-f349-4050-83d7-5b6055675a97", "created": "2026-01-27T05:13:01.829769Z", "modified": "2026-01-27T05:13:01.829769Z", "relationship_type": "indicates", "source_ref": "indicator--f0e4f8b8-21bc-4969-9cc6-da5b5c0a34da", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ea77bf-f340-4874-b583-73997ad8c6b2", "created": "2026-01-27T05:13:01.829948Z", "modified": "2026-01-27T05:13:01.829948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f04ec7fb59bb2ca18f99e717fb89ca9ca18d4c904e12e3a1bd7542cb89c1ab72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.829948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12b41f4e-431e-4732-b452-6f35fbfc0052", "created": "2026-01-27T05:13:01.830795Z", "modified": "2026-01-27T05:13:01.830795Z", "relationship_type": "indicates", "source_ref": "indicator--a4ea77bf-f340-4874-b583-73997ad8c6b2", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfb96ff-9e39-4c29-a7f1-f3453989eaf7", "created": "2026-01-27T05:13:01.830978Z", "modified": "2026-01-27T05:13:01.830978Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='79b7a5a83d12ec5f6ea5cd827b704496b6488212433c1ef0156b85ef1d90a80e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.830978Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f47bf5a-b177-4af1-8d3e-30da983b959f", "created": "2026-01-27T05:13:01.83194Z", "modified": "2026-01-27T05:13:01.83194Z", "relationship_type": "indicates", "source_ref": "indicator--adfb96ff-9e39-4c29-a7f1-f3453989eaf7", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbdbc754-00f8-4165-b905-60bac7eae3a3", "created": "2026-01-27T05:13:01.832118Z", "modified": "2026-01-27T05:13:01.832118Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7c23dbb945d27b2f60d1c68f51337fd3b155e97ff623dab884918866858403c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.832118Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c843bf9-96ac-4355-b043-9a2cffc138de", "created": "2026-01-27T05:13:01.832952Z", "modified": "2026-01-27T05:13:01.832952Z", "relationship_type": "indicates", "source_ref": "indicator--dbdbc754-00f8-4165-b905-60bac7eae3a3", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2396d70b-ad3f-4de5-8c70-6755d7789010", "created": "2026-01-27T05:13:01.833129Z", "modified": "2026-01-27T05:13:01.833129Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.traccar.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.833129Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e25f7609-4909-4fe2-9a9e-7b982809aca5", "created": "2026-01-27T05:13:01.833801Z", "modified": "2026-01-27T05:13:01.833801Z", "relationship_type": "indicates", "source_ref": "indicator--2396d70b-ad3f-4de5-8c70-6755d7789010", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4afd6c-2c4a-4c03-9ab2-945cf96639a1", "created": "2026-01-27T05:13:01.833981Z", "modified": "2026-01-27T05:13:01.833981Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.traccar.client.hidden']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.833981Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d8bfbb18-7607-4119-8f1b-7d792e0a93cc", "created": "2026-01-27T05:13:01.834647Z", "modified": "2026-01-27T05:13:01.834647Z", "relationship_type": "indicates", "source_ref": "indicator--dc4afd6c-2c4a-4c03-9ab2-945cf96639a1", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb5ae97-a5f3-4b51-9cb4-c252ae5a2689", "created": "2026-01-27T05:13:01.834845Z", "modified": "2026-01-27T05:13:01.834845Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='AA752803419B66BC6D5CFCD61A7C88935FFE5511']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.834845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22b57233-d4cf-4ab4-9dc9-376a9c44b13d", "created": "2026-01-27T05:13:01.835608Z", "modified": "2026-01-27T05:13:01.835608Z", "relationship_type": "indicates", "source_ref": "indicator--4cb5ae97-a5f3-4b51-9cb4-c252ae5a2689", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2964e83b-ec36-465f-a2fe-8277ad8a3ef7", "created": "2026-01-27T05:13:01.835801Z", "modified": "2026-01-27T05:13:01.835801Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F4F16BDEB31AED018276B47CAD9007063029FD22']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.835801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34197c9f-a539-49d1-9ea8-b2aec9932bb4", "created": "2026-01-27T05:13:01.836574Z", "modified": "2026-01-27T05:13:01.836574Z", "relationship_type": "indicates", "source_ref": "indicator--2964e83b-ec36-465f-a2fe-8277ad8a3ef7", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a85758-cff5-46fa-a9ef-aa5abcb49165", "created": "2026-01-27T05:13:01.836764Z", "modified": "2026-01-27T05:13:01.836764Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DAE17DA900E269741688CEA3DAF929A8D896536D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.836764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9096bbd-6c21-4d35-85e0-5d272af39b89", "created": "2026-01-27T05:13:01.837544Z", "modified": "2026-01-27T05:13:01.837544Z", "relationship_type": "indicates", "source_ref": "indicator--d4a85758-cff5-46fa-a9ef-aa5abcb49165", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c15e737-e444-45d0-a35b-15c9da0fd298", "created": "2026-01-27T05:13:01.837719Z", "modified": "2026-01-27T05:13:01.837719Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A759EC34A1144DC3443A9D4C3286F9F3A4F23FB1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.837719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c29f00ff-ab94-4654-8813-364d5364bc24", "created": "2026-01-27T05:13:01.838512Z", "modified": "2026-01-27T05:13:01.838512Z", "relationship_type": "indicates", "source_ref": "indicator--5c15e737-e444-45d0-a35b-15c9da0fd298", "target_ref": "malware--f40f02a7-6b31-4c41-b120-330a6b66c6af"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3", "created": "2026-01-27T05:13:01.838686Z", "modified": "2026-01-27T05:13:01.838686Z", "name": "SpyNote", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9112d03e-c0dc-4c36-aa3b-5206e932219c", "created": "2026-01-27T05:13:01.838884Z", "modified": "2026-01-27T05:13:01.838884Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynote.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.838884Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c35bab40-96f4-4392-bff5-13b410792d7f", "created": "2026-01-27T05:13:01.839547Z", "modified": "2026-01-27T05:13:01.839547Z", "relationship_type": "indicates", "source_ref": "indicator--9112d03e-c0dc-4c36-aa3b-5206e932219c", "target_ref": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30a74ac-7f8b-4659-905e-957d728db116", "created": "2026-01-27T05:13:01.839726Z", "modified": "2026-01-27T05:13:01.839726Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spynote.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.839726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2a19deea-88b3-4f77-ba25-0c23cd0289eb", "created": "2026-01-27T05:13:01.840533Z", "modified": "2026-01-27T05:13:01.840533Z", "relationship_type": "indicates", "source_ref": "indicator--b30a74ac-7f8b-4659-905e-957d728db116", "target_ref": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96aff75c-1564-443b-a929-109c0fabc222", "created": "2026-01-27T05:13:01.840709Z", "modified": "2026-01-27T05:13:01.840709Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynote.us']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.840709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--200a784c-a195-40fe-a67b-5e9e0512040a", "created": "2026-01-27T05:13:01.841398Z", "modified": "2026-01-27T05:13:01.841398Z", "relationship_type": "indicates", "source_ref": "indicator--96aff75c-1564-443b-a929-109c0fabc222", "target_ref": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392d51c8-c629-4a70-b57a-55547646191f", "created": "2026-01-27T05:13:01.841586Z", "modified": "2026-01-27T05:13:01.841586Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='dell.scream.application']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.841586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b69118f3-7971-4bfe-ac38-d2d63ac555ad", "created": "2026-01-27T05:13:01.842276Z", "modified": "2026-01-27T05:13:01.842276Z", "relationship_type": "indicates", "source_ref": "indicator--392d51c8-c629-4a70-b57a-55547646191f", "target_ref": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569c2190-ac1f-4312-bf35-956051f60c3b", "created": "2026-01-27T05:13:01.842452Z", "modified": "2026-01-27T05:13:01.842452Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.spynote.software.stubspynote']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.842452Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3790fe9c-92f6-4e41-9e36-83174638adeb", "created": "2026-01-27T05:13:01.843144Z", "modified": "2026-01-27T05:13:01.843144Z", "relationship_type": "indicates", "source_ref": "indicator--569c2190-ac1f-4312-bf35-956051f60c3b", "target_ref": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dee2ddb-817b-4475-bfd4-7f23246b5722", "created": "2026-01-27T05:13:01.843318Z", "modified": "2026-01-27T05:13:01.843318Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='219D542F901D8DB85C729B0F7AE32410096077CB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.843318Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ed6b702-3f2b-4855-8ba1-fc5f8e7f1637", "created": "2026-01-27T05:13:01.844107Z", "modified": "2026-01-27T05:13:01.844107Z", "relationship_type": "indicates", "source_ref": "indicator--6dee2ddb-817b-4475-bfd4-7f23246b5722", "target_ref": "malware--3f95b0d8-8c6f-444f-b279-ac7e4021a5d3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--962e5855-1351-4bc0-a9bb-688139102dc1", "created": "2026-01-27T05:13:01.844281Z", "modified": "2026-01-27T05:13:01.844281Z", "name": "FlashKeylogger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605cce69-b19c-48f9-b422-e98efb6c4793", "created": "2026-01-27T05:13:01.844449Z", "modified": "2026-01-27T05:13:01.844449Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='flashkeylogger.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.844449Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0339c4c-50b7-408c-979b-41326424fa97", "created": "2026-01-27T05:13:01.845142Z", "modified": "2026-01-27T05:13:01.845142Z", "relationship_type": "indicates", "source_ref": "indicator--605cce69-b19c-48f9-b422-e98efb6c4793", "target_ref": "malware--962e5855-1351-4bc0-a9bb-688139102dc1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6bd14c-ef4c-4fde-b4a3-adcb427eb5f6", "created": "2026-01-27T05:13:01.845331Z", "modified": "2026-01-27T05:13:01.845331Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tej.flashkeylogger']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.845331Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c8411abd-18eb-44b8-8f6b-4d3239dfc665", "created": "2026-01-27T05:13:01.846016Z", "modified": "2026-01-27T05:13:01.846016Z", "relationship_type": "indicates", "source_ref": "indicator--9f6bd14c-ef4c-4fde-b4a3-adcb427eb5f6", "target_ref": "malware--962e5855-1351-4bc0-a9bb-688139102dc1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db987ecf-576e-4f61-b6fe-eb1613afebc0", "created": "2026-01-27T05:13:01.846195Z", "modified": "2026-01-27T05:13:01.846195Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tej.flashkeyloggerpro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.846195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1507de6-0f21-4b92-a330-a0f181303a75", "created": "2026-01-27T05:13:01.846886Z", "modified": "2026-01-27T05:13:01.846886Z", "relationship_type": "indicates", "source_ref": "indicator--db987ecf-576e-4f61-b6fe-eb1613afebc0", "target_ref": "malware--962e5855-1351-4bc0-a9bb-688139102dc1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2344521-c727-4575-b991-d29ddb7b07a9", "created": "2026-01-27T05:13:01.847068Z", "modified": "2026-01-27T05:13:01.847068Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='tej.flashkeylogges']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.847068Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1c84aff-eeeb-461b-92b0-e8c77e76bd37", "created": "2026-01-27T05:13:01.847733Z", "modified": "2026-01-27T05:13:01.847733Z", "relationship_type": "indicates", "source_ref": "indicator--f2344521-c727-4575-b991-d29ddb7b07a9", "target_ref": "malware--962e5855-1351-4bc0-a9bb-688139102dc1"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bda6ec9-4c2c-4af6-972b-33bfa6341967", "created": "2026-01-27T05:13:01.847924Z", "modified": "2026-01-27T05:13:01.847924Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='340FE1F4AA4A401AD8E326907E35FB9E0C2486BD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.847924Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ff4e28-b065-446d-a921-a56b40a78e9f", "created": "2026-01-27T05:13:01.848836Z", "modified": "2026-01-27T05:13:01.848836Z", "relationship_type": "indicates", "source_ref": "indicator--1bda6ec9-4c2c-4af6-972b-33bfa6341967", "target_ref": "malware--962e5855-1351-4bc0-a9bb-688139102dc1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030", "created": "2026-01-27T05:13:01.849013Z", "modified": "2026-01-27T05:13:01.849013Z", "name": "MobiStealth", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7abc557-37ae-46b5-96f3-b324fa1099c3", "created": "2026-01-27T05:13:01.849181Z", "modified": "2026-01-27T05:13:01.849181Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='einformatiks.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.849181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--95af5d3b-00a6-422b-9041-ba191950c9bc", "created": "2026-01-27T05:13:01.84987Z", "modified": "2026-01-27T05:13:01.84987Z", "relationship_type": "indicates", "source_ref": "indicator--f7abc557-37ae-46b5-96f3-b324fa1099c3", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a80a08-dd44-4136-90b5-a24ee513eeed", "created": "2026-01-27T05:13:01.850049Z", "modified": "2026-01-27T05:13:01.850049Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.einformatiks.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.850049Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d6ae163-451b-45bb-83c2-2fde245b4348", "created": "2026-01-27T05:13:01.850756Z", "modified": "2026-01-27T05:13:01.850756Z", "relationship_type": "indicates", "source_ref": "indicator--95a80a08-dd44-4136-90b5-a24ee513eeed", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ebca88-8716-458b-acf0-677539b95e98", "created": "2026-01-27T05:13:01.850936Z", "modified": "2026-01-27T05:13:01.850936Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dwn.vys.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.850936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e33f4a72-c010-4a62-9ae5-3139a98436a4", "created": "2026-01-27T05:13:01.851603Z", "modified": "2026-01-27T05:13:01.851603Z", "relationship_type": "indicates", "source_ref": "indicator--81ebca88-8716-458b-acf0-677539b95e98", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc33b58a-8cb1-4478-a9b6-4543acf3b4ab", "created": "2026-01-27T05:13:01.851792Z", "modified": "2026-01-27T05:13:01.851792Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.vys.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.851792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--970708ca-bb71-46b7-88fb-eab6c0f3d2c0", "created": "2026-01-27T05:13:01.852451Z", "modified": "2026-01-27T05:13:01.852451Z", "relationship_type": "indicates", "source_ref": "indicator--bc33b58a-8cb1-4478-a9b6-4543acf3b4ab", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8504730-dad3-4602-8131-a15bd074e3c4", "created": "2026-01-27T05:13:01.852656Z", "modified": "2026-01-27T05:13:01.852656Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='vys.me']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.852656Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0d419dc-9c8b-4cd9-bcd4-1f119429edcb", "created": "2026-01-27T05:13:01.853357Z", "modified": "2026-01-27T05:13:01.853357Z", "relationship_type": "indicates", "source_ref": "indicator--b8504730-dad3-4602-8131-a15bd074e3c4", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaeb1d6e-ca48-49bd-801b-104789e0cb89", "created": "2026-01-27T05:13:01.853553Z", "modified": "2026-01-27T05:13:01.853553Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobistealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.853553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f61d388-1a77-47f3-b1a2-a96d29530a99", "created": "2026-01-27T05:13:01.854325Z", "modified": "2026-01-27T05:13:01.854325Z", "relationship_type": "indicates", "source_ref": "indicator--aaeb1d6e-ca48-49bd-801b-104789e0cb89", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61666a94-c9b9-4a0f-9727-6daaa0767cb8", "created": "2026-01-27T05:13:01.854511Z", "modified": "2026-01-27T05:13:01.854511Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobistealth.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.854511Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e13f8b0-efe4-4e41-89f5-9e59609312ed", "created": "2026-01-27T05:13:01.855231Z", "modified": "2026-01-27T05:13:01.855231Z", "relationship_type": "indicates", "source_ref": "indicator--61666a94-c9b9-4a0f-9727-6daaa0767cb8", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb9c704-7935-45a1-9788-c56e90d857c5", "created": "2026-01-27T05:13:01.85541Z", "modified": "2026-01-27T05:13:01.85541Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilestealthreview.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.85541Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ab3cf90-4811-4ace-a87f-1c74ee030d32", "created": "2026-01-27T05:13:01.85612Z", "modified": "2026-01-27T05:13:01.85612Z", "relationship_type": "indicates", "source_ref": "indicator--edb9c704-7935-45a1-9788-c56e90d857c5", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b9ba06-f88b-4a7c-abd8-3692bc0402cc", "created": "2026-01-27T05:13:01.856304Z", "modified": "2026-01-27T05:13:01.856304Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1294018fb376aa29456b6e5c9f0018719e16aafe9f665344e5aeecdb6703fdff']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.856304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da4bebce-1d94-4f36-8dde-af03f18fc901", "created": "2026-01-27T05:13:01.85726Z", "modified": "2026-01-27T05:13:01.85726Z", "relationship_type": "indicates", "source_ref": "indicator--76b9ba06-f88b-4a7c-abd8-3692bc0402cc", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ea4842-f617-4919-9c32-8b5996cdd0c0", "created": "2026-01-27T05:13:01.857438Z", "modified": "2026-01-27T05:13:01.857438Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f2b7535cdeaadb603ed040a097ae0f3dc339a8d9f12d7af9609b2dd51888174c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.857438Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7334e65-1c69-4b1e-b5b0-52c14773dd33", "created": "2026-01-27T05:13:01.85828Z", "modified": "2026-01-27T05:13:01.85828Z", "relationship_type": "indicates", "source_ref": "indicator--25ea4842-f617-4919-9c32-8b5996cdd0c0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--885edc97-28c1-4432-9cdc-f7a04ac83955", "created": "2026-01-27T05:13:01.858457Z", "modified": "2026-01-27T05:13:01.858457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cbd313516cbe2cd992a33569a0063bc4764ab774e03c3653e0be459682a5bce4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.858457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--223590bf-333b-4df7-a89a-f1eb8f8bdeb1", "created": "2026-01-27T05:13:01.859311Z", "modified": "2026-01-27T05:13:01.859311Z", "relationship_type": "indicates", "source_ref": "indicator--885edc97-28c1-4432-9cdc-f7a04ac83955", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78ac22d-c464-482a-a856-d8d9624be5ab", "created": "2026-01-27T05:13:01.859487Z", "modified": "2026-01-27T05:13:01.859487Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc7b2ce39505b94cc00362fbe98f41ed2726d84c29f6a06c6610878034d05115']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.859487Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58b7a422-0842-4e22-a98a-4a45cb618752", "created": "2026-01-27T05:13:01.860324Z", "modified": "2026-01-27T05:13:01.860324Z", "relationship_type": "indicates", "source_ref": "indicator--b78ac22d-c464-482a-a856-d8d9624be5ab", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699e430a-7e96-469a-8c7c-ad21c0c06e83", "created": "2026-01-27T05:13:01.860503Z", "modified": "2026-01-27T05:13:01.860503Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3e36a1f41f52bcf3b3c9e8f036ffc9498f3354e4e8746cf731a3d123f58d3575']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.860503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec6a7f7a-4940-4dec-88c6-adae48add3e8", "created": "2026-01-27T05:13:01.86135Z", "modified": "2026-01-27T05:13:01.86135Z", "relationship_type": "indicates", "source_ref": "indicator--699e430a-7e96-469a-8c7c-ad21c0c06e83", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca560fc-5d04-4c39-b995-52dac7a99eab", "created": "2026-01-27T05:13:01.861546Z", "modified": "2026-01-27T05:13:01.861546Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='803993173cd19c0db5915ea0b93fbe3ab7b28eb7434f62dca40333377254d4fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.861546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3dc00cc-e66d-4754-b7b0-20847b184c47", "created": "2026-01-27T05:13:01.86252Z", "modified": "2026-01-27T05:13:01.86252Z", "relationship_type": "indicates", "source_ref": "indicator--3ca560fc-5d04-4c39-b995-52dac7a99eab", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c22278-e8f1-47b3-9063-fc41d21a48d2", "created": "2026-01-27T05:13:01.862703Z", "modified": "2026-01-27T05:13:01.862703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e44c57d4e5ddf49d935931e5dd4eca065984280aa5ae263eb04bfcf2cb599a90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.862703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58545258-9482-479c-990c-471ce447b659", "created": "2026-01-27T05:13:01.863585Z", "modified": "2026-01-27T05:13:01.863585Z", "relationship_type": "indicates", "source_ref": "indicator--e6c22278-e8f1-47b3-9063-fc41d21a48d2", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac673b09-b051-4599-be9e-6e5763856887", "created": "2026-01-27T05:13:01.863781Z", "modified": "2026-01-27T05:13:01.863781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7d1a07e3b5d5411a8f949cab6038d49a07414c46a164e76fd3eaf0e25498fd7a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.863781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0415fedd-66c5-42fc-ade3-22133219e662", "created": "2026-01-27T05:13:01.864615Z", "modified": "2026-01-27T05:13:01.864615Z", "relationship_type": "indicates", "source_ref": "indicator--ac673b09-b051-4599-be9e-6e5763856887", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ff5d3d-c7ae-43f2-88fc-dc21a7060fbc", "created": "2026-01-27T05:13:01.864808Z", "modified": "2026-01-27T05:13:01.864808Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3c6b6c5dcd9586cb6cefd72ad5e1c54b2e2a65eb4b025a71430903b21c3795a4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.864808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a41c068-c777-477d-a8d6-7580ee1f3f50", "created": "2026-01-27T05:13:01.865651Z", "modified": "2026-01-27T05:13:01.865651Z", "relationship_type": "indicates", "source_ref": "indicator--80ff5d3d-c7ae-43f2-88fc-dc21a7060fbc", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a5d822-5183-4e7e-97e7-e8de4733d948", "created": "2026-01-27T05:13:01.865852Z", "modified": "2026-01-27T05:13:01.865852Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='41bc9910bed549cd9f34ea29ceffb26547af8b73cd10062ec5410817eb7f3976']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.865852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17ca158f-68f5-4dd8-a5a8-e4469ba72ca3", "created": "2026-01-27T05:13:01.866817Z", "modified": "2026-01-27T05:13:01.866817Z", "relationship_type": "indicates", "source_ref": "indicator--67a5d822-5183-4e7e-97e7-e8de4733d948", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99fba6eb-43b6-49c2-a259-565e98be6ff9", "created": "2026-01-27T05:13:01.867007Z", "modified": "2026-01-27T05:13:01.867007Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba01eb1290b81e921f8e438f40c5c7b11409789176d54c35ef8556bd5ba48484']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.867007Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85ced19c-b1cd-4b5f-92d7-a4becc071745", "created": "2026-01-27T05:13:01.867846Z", "modified": "2026-01-27T05:13:01.867846Z", "relationship_type": "indicates", "source_ref": "indicator--99fba6eb-43b6-49c2-a259-565e98be6ff9", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7ac8ec-f212-4479-a238-22acb24140d3", "created": "2026-01-27T05:13:01.868028Z", "modified": "2026-01-27T05:13:01.868028Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='01590736453758009daa16435db295b4f8115fef428eb72444e06920d1bd1216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.868028Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd6cc151-9032-437c-b0b0-f7da056366ed", "created": "2026-01-27T05:13:01.868867Z", "modified": "2026-01-27T05:13:01.868867Z", "relationship_type": "indicates", "source_ref": "indicator--bb7ac8ec-f212-4479-a238-22acb24140d3", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb2dde2-8cc5-4492-9566-cb1a8e48586b", "created": "2026-01-27T05:13:01.869044Z", "modified": "2026-01-27T05:13:01.869044Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='02d909650e87eeeff91218253b479b1022b7f97672010237b1f781d4590c3bf0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.869044Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--724bf4aa-970b-4995-aa1a-5a351989d970", "created": "2026-01-27T05:13:01.869877Z", "modified": "2026-01-27T05:13:01.869877Z", "relationship_type": "indicates", "source_ref": "indicator--6cb2dde2-8cc5-4492-9566-cb1a8e48586b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf27f75-9364-468a-a07a-bbd8a25fa85e", "created": "2026-01-27T05:13:01.870061Z", "modified": "2026-01-27T05:13:01.870061Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2c21a9c8b0bb3142e8251c9d43c36f5f47f2a3faef6419c76ee20240dcf9bda8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.870061Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94528107-4402-4cd7-a4ba-1c04f5aa69ee", "created": "2026-01-27T05:13:01.8709Z", "modified": "2026-01-27T05:13:01.8709Z", "relationship_type": "indicates", "source_ref": "indicator--dbf27f75-9364-468a-a07a-bbd8a25fa85e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c18b555-f10c-4453-8c07-76f27d92bbb0", "created": "2026-01-27T05:13:01.871079Z", "modified": "2026-01-27T05:13:01.871079Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1dc2be1a7cd625b14a7c727e0aec381d89fd8a2b95c98624b6ea666120a9a0be']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.871079Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--855dcd75-ce26-46c4-8d94-8106afb54a83", "created": "2026-01-27T05:13:01.87191Z", "modified": "2026-01-27T05:13:01.87191Z", "relationship_type": "indicates", "source_ref": "indicator--3c18b555-f10c-4453-8c07-76f27d92bbb0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e611b7-3d0c-4560-a7ac-dc2c07f3e56c", "created": "2026-01-27T05:13:01.872087Z", "modified": "2026-01-27T05:13:01.872087Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='732c5e573002949e44066a8eb683de447ed1d34420f42852bcd927d59066cc57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.872087Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a642b52-e337-4d07-8b8f-256945e24d6c", "created": "2026-01-27T05:13:01.872929Z", "modified": "2026-01-27T05:13:01.872929Z", "relationship_type": "indicates", "source_ref": "indicator--c7e611b7-3d0c-4560-a7ac-dc2c07f3e56c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870eec41-b1b8-40ae-a315-d5e99e08eb0b", "created": "2026-01-27T05:13:01.873106Z", "modified": "2026-01-27T05:13:01.873106Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62234915547a111afc76c6ddce5fa0e9c83a25ab1fea3fbf104fd9578de0c3f2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.873106Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--871ccf5c-20ea-4f58-9d5d-0925e5326347", "created": "2026-01-27T05:13:01.873957Z", "modified": "2026-01-27T05:13:01.873957Z", "relationship_type": "indicates", "source_ref": "indicator--870eec41-b1b8-40ae-a315-d5e99e08eb0b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70ee869-5314-4dd2-8016-2bdf8993ebc7", "created": "2026-01-27T05:13:01.874139Z", "modified": "2026-01-27T05:13:01.874139Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='351b5342415cc45ae78bac877da294600eb91338278fa05205c5cc300167a28f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.874139Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a386fb2d-2469-49d5-ac21-0be1234816dd", "created": "2026-01-27T05:13:01.874969Z", "modified": "2026-01-27T05:13:01.874969Z", "relationship_type": "indicates", "source_ref": "indicator--a70ee869-5314-4dd2-8016-2bdf8993ebc7", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2062bd8b-5443-489e-b33d-ff7763cc42a0", "created": "2026-01-27T05:13:01.875154Z", "modified": "2026-01-27T05:13:01.875154Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b9f4a4ca3595235960cd81b2947cb70377dfcd8a22e462b927681e14734b6e31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.875154Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--906eba6a-86c8-4464-83e8-ce9d4ee74ec3", "created": "2026-01-27T05:13:01.876117Z", "modified": "2026-01-27T05:13:01.876117Z", "relationship_type": "indicates", "source_ref": "indicator--2062bd8b-5443-489e-b33d-ff7763cc42a0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8c30bb-cd3b-4bc2-9659-3f7e2e47490e", "created": "2026-01-27T05:13:01.876294Z", "modified": "2026-01-27T05:13:01.876294Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1b8c17f8a4efc4a67197379e9b15a937e437bd21a6324e7e32f314646630a6fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.876294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84786245-f23f-4a9a-98c9-47a706f12bcc", "created": "2026-01-27T05:13:01.877144Z", "modified": "2026-01-27T05:13:01.877144Z", "relationship_type": "indicates", "source_ref": "indicator--ee8c30bb-cd3b-4bc2-9659-3f7e2e47490e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777fa240-a8a8-48a4-9588-353e30087b7e", "created": "2026-01-27T05:13:01.877333Z", "modified": "2026-01-27T05:13:01.877333Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e586ae1084da20562d7a336e1a292200d62db0b1c92d9db9eb2f2e15bb79de43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.877333Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eec543e2-32ee-47b1-bec2-10e345d5d2cd", "created": "2026-01-27T05:13:01.878176Z", "modified": "2026-01-27T05:13:01.878176Z", "relationship_type": "indicates", "source_ref": "indicator--777fa240-a8a8-48a4-9588-353e30087b7e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a58d62d-eb19-4282-b4b3-219c4658647d", "created": "2026-01-27T05:13:01.878353Z", "modified": "2026-01-27T05:13:01.878353Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b2009719145d8d9508f70327d52e58a7eb3905fe33068595aaf51f8df3ca35aa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.878353Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2bf5110-de36-4b50-8298-bd7e62c69c22", "created": "2026-01-27T05:13:01.879183Z", "modified": "2026-01-27T05:13:01.879183Z", "relationship_type": "indicates", "source_ref": "indicator--4a58d62d-eb19-4282-b4b3-219c4658647d", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9aeb207-91b3-4a62-973e-5d7210536634", "created": "2026-01-27T05:13:01.879358Z", "modified": "2026-01-27T05:13:01.879358Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='fb98d2afa9a4f08a0f96f1333208de14af5672cac958dffc784183b1c69e0c78']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.879358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33e75e6f-e9c6-4a0c-81f6-f1aa729b6511", "created": "2026-01-27T05:13:01.880185Z", "modified": "2026-01-27T05:13:01.880185Z", "relationship_type": "indicates", "source_ref": "indicator--e9aeb207-91b3-4a62-973e-5d7210536634", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4a3650-89d7-4d43-b880-7a8a9a531075", "created": "2026-01-27T05:13:01.880357Z", "modified": "2026-01-27T05:13:01.880357Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f92ad41e779cd16862f42b982d6f97a19e5ab4d3ca773c8c1a0b1fd895c2510']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.880357Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--43cfbd23-0722-4f4c-8025-66b88998e783", "created": "2026-01-27T05:13:01.881199Z", "modified": "2026-01-27T05:13:01.881199Z", "relationship_type": "indicates", "source_ref": "indicator--0e4a3650-89d7-4d43-b880-7a8a9a531075", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d938788a-d12c-4a67-9527-65aec8479321", "created": "2026-01-27T05:13:01.881372Z", "modified": "2026-01-27T05:13:01.881372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='212573c9d8dc7045861365ab4b4d9badd8161ced31e8ef7a3780e86783b80ac1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.881372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1dde80c-d6bb-41ef-92b9-c16f277c2f33", "created": "2026-01-27T05:13:01.88221Z", "modified": "2026-01-27T05:13:01.88221Z", "relationship_type": "indicates", "source_ref": "indicator--d938788a-d12c-4a67-9527-65aec8479321", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bd9d6c-013c-4f60-97b6-05f972e914f2", "created": "2026-01-27T05:13:01.882387Z", "modified": "2026-01-27T05:13:01.882387Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a4f7036d2dc15c98364836e9f45e5c7433242965b9562717a53f07c776c64e7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.882387Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9e46ff96-1aa2-48f8-a24b-10a04207a518", "created": "2026-01-27T05:13:01.883223Z", "modified": "2026-01-27T05:13:01.883223Z", "relationship_type": "indicates", "source_ref": "indicator--e9bd9d6c-013c-4f60-97b6-05f972e914f2", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6eb387-14b0-4b22-8af3-232589a3d02b", "created": "2026-01-27T05:13:01.883397Z", "modified": "2026-01-27T05:13:01.883397Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec7e8846a82b1d8f7837b20968ce5f5afa8cc84bf335ddbd73f7bb3469a85029']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.883397Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44861e67-46eb-4eb1-9338-cb4059365e60", "created": "2026-01-27T05:13:01.884356Z", "modified": "2026-01-27T05:13:01.884356Z", "relationship_type": "indicates", "source_ref": "indicator--ac6eb387-14b0-4b22-8af3-232589a3d02b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5c3b4d-ab40-4e76-892d-3e13d60d6ff7", "created": "2026-01-27T05:13:01.884534Z", "modified": "2026-01-27T05:13:01.884534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b469c26e1f03ea047376436cae5faed402cd0a0bc06272f6c7b738e60a7ea30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.884534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--504d1cc4-7070-467c-9dc3-01b5f98960ae", "created": "2026-01-27T05:13:01.885361Z", "modified": "2026-01-27T05:13:01.885361Z", "relationship_type": "indicates", "source_ref": "indicator--fd5c3b4d-ab40-4e76-892d-3e13d60d6ff7", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4529fe9-7576-40fb-9510-bdb6ff75edae", "created": "2026-01-27T05:13:01.885539Z", "modified": "2026-01-27T05:13:01.885539Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0fa2fddd99327d8d855e8bbece9a4bb617fbb9fa0f67bdd032fee95512011d32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.885539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b54bf85c-fecc-43e6-9fe9-358bf1f6e54e", "created": "2026-01-27T05:13:01.886359Z", "modified": "2026-01-27T05:13:01.886359Z", "relationship_type": "indicates", "source_ref": "indicator--e4529fe9-7576-40fb-9510-bdb6ff75edae", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b967dac5-9949-4a51-b53e-d467869ef9cf", "created": "2026-01-27T05:13:01.886534Z", "modified": "2026-01-27T05:13:01.886534Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='49ce0613500e7085083ed62504612d40f804aa38c22bd7b532e1ffead88af047']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.886534Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4061ffd-46b4-4f6b-80fd-54ae78b36e20", "created": "2026-01-27T05:13:01.887354Z", "modified": "2026-01-27T05:13:01.887354Z", "relationship_type": "indicates", "source_ref": "indicator--b967dac5-9949-4a51-b53e-d467869ef9cf", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c32e504-e283-4bd6-9155-3853f9197593", "created": "2026-01-27T05:13:01.887533Z", "modified": "2026-01-27T05:13:01.887533Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7ee4ad6ff547757ec6e4b7ce06aa6c916d2d8e9e3c657f609363b5582c80beb7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.887533Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2c579cdf-b0aa-415c-a216-d7f57d78667c", "created": "2026-01-27T05:13:01.888357Z", "modified": "2026-01-27T05:13:01.888357Z", "relationship_type": "indicates", "source_ref": "indicator--3c32e504-e283-4bd6-9155-3853f9197593", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2116ac-2afa-4432-b785-7abcffb86198", "created": "2026-01-27T05:13:01.888536Z", "modified": "2026-01-27T05:13:01.888536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72e02401bc6edadae314141dddd2612a1d1d05a8164796259e030d1a8dd52319']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.888536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6e71b0f-ac97-46f9-bcf4-08eb7a4123eb", "created": "2026-01-27T05:13:01.889363Z", "modified": "2026-01-27T05:13:01.889363Z", "relationship_type": "indicates", "source_ref": "indicator--5b2116ac-2afa-4432-b785-7abcffb86198", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907bf76d-3e40-4224-bbd3-144123ad95f6", "created": "2026-01-27T05:13:01.88954Z", "modified": "2026-01-27T05:13:01.88954Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f48d459154a87dd02f80ac88e9b7566aff34f57b307fb103113fff1e7576193c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.88954Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cdfd9eb-1a62-431e-872c-047d60380e1a", "created": "2026-01-27T05:13:01.890368Z", "modified": "2026-01-27T05:13:01.890368Z", "relationship_type": "indicates", "source_ref": "indicator--907bf76d-3e40-4224-bbd3-144123ad95f6", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3614427-55a8-4567-a92a-1bae20129841", "created": "2026-01-27T05:13:01.890543Z", "modified": "2026-01-27T05:13:01.890543Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='da839fa8a780941e5f82a1d0e7d4029507a459c7b29cf52c26131107683fce55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.890543Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5ba82aa-8030-478b-bfe2-c93f4b9c61a8", "created": "2026-01-27T05:13:01.891379Z", "modified": "2026-01-27T05:13:01.891379Z", "relationship_type": "indicates", "source_ref": "indicator--a3614427-55a8-4567-a92a-1bae20129841", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6769d3c9-34d5-4e9d-aae9-fc791f240a5e", "created": "2026-01-27T05:13:01.891554Z", "modified": "2026-01-27T05:13:01.891554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fe0720bd6cbddb84f7f059e120444f69aede18c30527a62c057e50d547f6b34']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.891554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97ed45cf-264f-441f-96b7-5d952d04c958", "created": "2026-01-27T05:13:01.892391Z", "modified": "2026-01-27T05:13:01.892391Z", "relationship_type": "indicates", "source_ref": "indicator--6769d3c9-34d5-4e9d-aae9-fc791f240a5e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87607b7-0aec-429e-af47-b65640fe6e01", "created": "2026-01-27T05:13:01.892595Z", "modified": "2026-01-27T05:13:01.892595Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1f805068b5b8535ff9357058425c8f6e0136bfddf772f138f52973b1b9b4db8c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.892595Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--775fb6a9-b5ec-4423-9dc7-907b8d0626cd", "created": "2026-01-27T05:13:01.893553Z", "modified": "2026-01-27T05:13:01.893553Z", "relationship_type": "indicates", "source_ref": "indicator--a87607b7-0aec-429e-af47-b65640fe6e01", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6be47a1-577e-40f5-989e-47090d1f6383", "created": "2026-01-27T05:13:01.893729Z", "modified": "2026-01-27T05:13:01.893729Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c5a35e2f0e9abc25ce043e5e28e70ef733b6434748198ddf6227adb2444b2540']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.893729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46939a69-ff27-44fc-bcae-0912cef811aa", "created": "2026-01-27T05:13:01.894561Z", "modified": "2026-01-27T05:13:01.894561Z", "relationship_type": "indicates", "source_ref": "indicator--c6be47a1-577e-40f5-989e-47090d1f6383", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e196914e-276c-4762-9071-92b09c299a0a", "created": "2026-01-27T05:13:01.894736Z", "modified": "2026-01-27T05:13:01.894736Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f1d73a257632805272c4dd03ff3386b8c1b15df20d82ca072e13340308d75ecb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.894736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b91f26ce-a623-4bf2-87e4-044773b77dd1", "created": "2026-01-27T05:13:01.895572Z", "modified": "2026-01-27T05:13:01.895572Z", "relationship_type": "indicates", "source_ref": "indicator--e196914e-276c-4762-9071-92b09c299a0a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6d78ec-35bc-49e2-af0d-6de2522074d8", "created": "2026-01-27T05:13:01.895767Z", "modified": "2026-01-27T05:13:01.895767Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='187a86891ecc9be14adf9ba88af53fa3dc84a2602f889faa5f01e92e55694c06']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.895767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d03f239-9886-4e51-88b7-2c625066fbde", "created": "2026-01-27T05:13:01.896588Z", "modified": "2026-01-27T05:13:01.896588Z", "relationship_type": "indicates", "source_ref": "indicator--0a6d78ec-35bc-49e2-af0d-6de2522074d8", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fd789e-815d-440d-ba1f-8e6a6b7369e5", "created": "2026-01-27T05:13:01.896778Z", "modified": "2026-01-27T05:13:01.896778Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1a8dad00bf7fdfca8f0782cb0290dc2843925771f6cffa9e139523607e46df99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.896778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a543fe78-e772-4d20-a359-ee6e86d8f8b0", "created": "2026-01-27T05:13:01.897601Z", "modified": "2026-01-27T05:13:01.897601Z", "relationship_type": "indicates", "source_ref": "indicator--69fd789e-815d-440d-ba1f-8e6a6b7369e5", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed17ec5d-6dbf-4358-9a67-0197837da791", "created": "2026-01-27T05:13:01.897789Z", "modified": "2026-01-27T05:13:01.897789Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca51f2cdc954f7c977e549c8c0263c75fd2313cd96dc951143181d35296213af']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.897789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--368c7157-d2e4-4527-93eb-80b4fe40b9ad", "created": "2026-01-27T05:13:01.898607Z", "modified": "2026-01-27T05:13:01.898607Z", "relationship_type": "indicates", "source_ref": "indicator--ed17ec5d-6dbf-4358-9a67-0197837da791", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81390602-609a-4691-a134-1669c9725902", "created": "2026-01-27T05:13:01.898796Z", "modified": "2026-01-27T05:13:01.898796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='439829b3aa52e3ef750a3981889db5dfc78ec3205b529e9154b013c11db19256']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.898796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46c69c24-9a7f-4fa5-b844-803450a43b99", "created": "2026-01-27T05:13:01.899616Z", "modified": "2026-01-27T05:13:01.899616Z", "relationship_type": "indicates", "source_ref": "indicator--81390602-609a-4691-a134-1669c9725902", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407eaafe-8b00-44cf-ad33-61214254f9bb", "created": "2026-01-27T05:13:01.899806Z", "modified": "2026-01-27T05:13:01.899806Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2fa65ae9da86e240782ceeb0abea6bd448f7eb58bbae2e2fc242d0ce62207bf2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.899806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--609f0a5c-e229-4f8d-b9c0-6752bca04d37", "created": "2026-01-27T05:13:01.900628Z", "modified": "2026-01-27T05:13:01.900628Z", "relationship_type": "indicates", "source_ref": "indicator--407eaafe-8b00-44cf-ad33-61214254f9bb", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2076ebf5-f6e5-4d6c-b77a-60e51a78db9a", "created": "2026-01-27T05:13:01.900823Z", "modified": "2026-01-27T05:13:01.900823Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3cefd61f2f26ff4c40baf00713a8d37d71fba6c75f5c92699d8c617a61a570c0']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.900823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9d0015e4-9518-40f6-be15-df82ced88000", "created": "2026-01-27T05:13:01.901644Z", "modified": "2026-01-27T05:13:01.901644Z", "relationship_type": "indicates", "source_ref": "indicator--2076ebf5-f6e5-4d6c-b77a-60e51a78db9a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3702cb8-0737-4888-a629-beaafbc307ef", "created": "2026-01-27T05:13:01.901846Z", "modified": "2026-01-27T05:13:01.901846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='53eca50f066c8895996681c8c22f7092f58b4d1f5416fe071fe5e743ea50ee75']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.901846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6dc9a10-2df5-4096-be99-430e6c3b89b3", "created": "2026-01-27T05:13:01.902806Z", "modified": "2026-01-27T05:13:01.902806Z", "relationship_type": "indicates", "source_ref": "indicator--a3702cb8-0737-4888-a629-beaafbc307ef", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5129d8-4876-46f4-b78e-038c432623ba", "created": "2026-01-27T05:13:01.902985Z", "modified": "2026-01-27T05:13:01.902985Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='60614ce4bad3438b5c3dcca29f436e8a1d9108145b3634ebc1b2cdb13fbe7342']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.902985Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--854384fa-86eb-4338-bd47-6b141e061167", "created": "2026-01-27T05:13:01.903825Z", "modified": "2026-01-27T05:13:01.903825Z", "relationship_type": "indicates", "source_ref": "indicator--0a5129d8-4876-46f4-b78e-038c432623ba", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d86b6db-6a83-40dd-ad78-26e4a4fb5b7e", "created": "2026-01-27T05:13:01.904021Z", "modified": "2026-01-27T05:13:01.904021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1070a2d2bb5c040ba77157efc79182bd5056ddc4ce3ffabebeaa1949d6981287']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.904021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8e82bd3-5ab7-45ee-a45b-4f8858e2c721", "created": "2026-01-27T05:13:01.904848Z", "modified": "2026-01-27T05:13:01.904848Z", "relationship_type": "indicates", "source_ref": "indicator--0d86b6db-6a83-40dd-ad78-26e4a4fb5b7e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e745c94d-5bff-44be-838e-7b57cb42cd19", "created": "2026-01-27T05:13:01.905025Z", "modified": "2026-01-27T05:13:01.905025Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='74ae41799b502ad76825176208eb159eff9a58370414b66b01cade92756b6cc9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.905025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5451b33e-866d-438b-a376-fb63e040df47", "created": "2026-01-27T05:13:01.905854Z", "modified": "2026-01-27T05:13:01.905854Z", "relationship_type": "indicates", "source_ref": "indicator--e745c94d-5bff-44be-838e-7b57cb42cd19", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119be5f7-e44e-46ea-82a0-7ca44ee43d53", "created": "2026-01-27T05:13:01.906035Z", "modified": "2026-01-27T05:13:01.906035Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='94488499541aeee1e3a84688ef9a6250e3bf9e70673b2a264f3bd45bfe7ed2f9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.906035Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7c3f4e1-3cd6-4cfb-96c5-5475c2ca4a54", "created": "2026-01-27T05:13:01.906871Z", "modified": "2026-01-27T05:13:01.906871Z", "relationship_type": "indicates", "source_ref": "indicator--119be5f7-e44e-46ea-82a0-7ca44ee43d53", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b6aeb3-7abb-495c-9ed5-17c735134875", "created": "2026-01-27T05:13:01.907047Z", "modified": "2026-01-27T05:13:01.907047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46450d286ca22d24c7496e67d457e6ee689a14461dc07bb503910c99f980f531']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.907047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b3bf94b-1766-4888-a8f3-82464473b84c", "created": "2026-01-27T05:13:01.907883Z", "modified": "2026-01-27T05:13:01.907883Z", "relationship_type": "indicates", "source_ref": "indicator--a4b6aeb3-7abb-495c-9ed5-17c735134875", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427e3e38-c3be-4620-b979-dba3832a7f08", "created": "2026-01-27T05:13:01.90806Z", "modified": "2026-01-27T05:13:01.90806Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6da467971701a943824456ce02f2bc1a8cce4db22bef1fc24982d62021467fdc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.90806Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b9dc29f-0f1c-4cb7-a985-420d9c2c02a1", "created": "2026-01-27T05:13:01.908919Z", "modified": "2026-01-27T05:13:01.908919Z", "relationship_type": "indicates", "source_ref": "indicator--427e3e38-c3be-4620-b979-dba3832a7f08", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d10777-ca61-443b-aae2-ff892835e8c5", "created": "2026-01-27T05:13:01.909101Z", "modified": "2026-01-27T05:13:01.909101Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a27af8aa0c9355f9c53f59999a1d1b55ad8eb478afafba8b0495746b292300c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.909101Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f20a9bef-3ece-4b26-ab75-009d1b5eaef9", "created": "2026-01-27T05:13:01.909937Z", "modified": "2026-01-27T05:13:01.909937Z", "relationship_type": "indicates", "source_ref": "indicator--59d10777-ca61-443b-aae2-ff892835e8c5", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7437c3e-66e9-429c-a25c-0ccfd41a2812", "created": "2026-01-27T05:13:01.910113Z", "modified": "2026-01-27T05:13:01.910113Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42a32d0735629c8864099c6113612b1fc939cce8f809ad20d9077e852f9dc008']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.910113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f738fc3-ef80-4c35-b755-08295490dbe4", "created": "2026-01-27T05:13:01.911315Z", "modified": "2026-01-27T05:13:01.911315Z", "relationship_type": "indicates", "source_ref": "indicator--f7437c3e-66e9-429c-a25c-0ccfd41a2812", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07259e3e-ac89-4086-af30-3bc054a71066", "created": "2026-01-27T05:13:01.911496Z", "modified": "2026-01-27T05:13:01.911496Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='487d068394836dffde78b7fec59f2e32d483cf00123e9af56b81e6d974b62bcc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.911496Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--583dead1-67a4-4b54-abe8-c93eaaf58e2b", "created": "2026-01-27T05:13:01.912329Z", "modified": "2026-01-27T05:13:01.912329Z", "relationship_type": "indicates", "source_ref": "indicator--07259e3e-ac89-4086-af30-3bc054a71066", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb9a052-ea01-4e18-9beb-5be483838e71", "created": "2026-01-27T05:13:01.912506Z", "modified": "2026-01-27T05:13:01.912506Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b9b304a81953330593d60b9bed61e9e3df574a4c9706ef15d92db97d47ad00b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.912506Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa82c9f6-b9cc-42c9-9927-ace64fcada7c", "created": "2026-01-27T05:13:01.913337Z", "modified": "2026-01-27T05:13:01.913337Z", "relationship_type": "indicates", "source_ref": "indicator--cbb9a052-ea01-4e18-9beb-5be483838e71", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a96679-bb22-44a3-9152-fb4a719f885a", "created": "2026-01-27T05:13:01.91352Z", "modified": "2026-01-27T05:13:01.91352Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5b8ee1bcd52e3be5e4832586be978f8e75389a6eb81f0311ca67ddeafb7acf1b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.91352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--984e7a2f-be0d-46cd-a4fc-93658ccea737", "created": "2026-01-27T05:13:01.914352Z", "modified": "2026-01-27T05:13:01.914352Z", "relationship_type": "indicates", "source_ref": "indicator--12a96679-bb22-44a3-9152-fb4a719f885a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a693a99f-644f-47be-9d51-f01f3312b6b5", "created": "2026-01-27T05:13:01.914537Z", "modified": "2026-01-27T05:13:01.914537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dd88169e73938238c4146b045ba6bd4b7121035acb602b11b3891957f6ae4dbe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.914537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2852abd7-9035-48bd-9d66-c69302c5778f", "created": "2026-01-27T05:13:01.915366Z", "modified": "2026-01-27T05:13:01.915366Z", "relationship_type": "indicates", "source_ref": "indicator--a693a99f-644f-47be-9d51-f01f3312b6b5", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2848267-5218-4811-8f7a-8d164c89da27", "created": "2026-01-27T05:13:01.915542Z", "modified": "2026-01-27T05:13:01.915542Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='82081d5f96d0ac7a3755cadb9d116fc5c857a0ed7aac78aed82ceeca1dbebde1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.915542Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3853df02-b42f-4b9c-87d9-0339039e71a5", "created": "2026-01-27T05:13:01.916374Z", "modified": "2026-01-27T05:13:01.916374Z", "relationship_type": "indicates", "source_ref": "indicator--d2848267-5218-4811-8f7a-8d164c89da27", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcba8bc4-cec6-448e-aed4-97879b87c262", "created": "2026-01-27T05:13:01.916553Z", "modified": "2026-01-27T05:13:01.916553Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8d66e89e09078b2db97292b0130b7bd54aca345a29f2eb0758c02198271b887e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.916553Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2aec508-2b03-4fb2-b2b9-b6adb0575d6b", "created": "2026-01-27T05:13:01.917379Z", "modified": "2026-01-27T05:13:01.917379Z", "relationship_type": "indicates", "source_ref": "indicator--fcba8bc4-cec6-448e-aed4-97879b87c262", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cda282bf-ebc9-4a52-89ec-a8dd07d9b418", "created": "2026-01-27T05:13:01.917554Z", "modified": "2026-01-27T05:13:01.917554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ee68df82caf9b45e8964f5ff5f4aab45a54f41b01a2d64644ccadfdf9ed05f36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.917554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f36d633e-a024-4a68-a852-67a865cf34f5", "created": "2026-01-27T05:13:01.918377Z", "modified": "2026-01-27T05:13:01.918377Z", "relationship_type": "indicates", "source_ref": "indicator--cda282bf-ebc9-4a52-89ec-a8dd07d9b418", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7bd2ed-f698-436e-ab9e-9c9cfc18a532", "created": "2026-01-27T05:13:01.918554Z", "modified": "2026-01-27T05:13:01.918554Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4f0ec11df70521de1fb4a963eddc6a5c4840a4282630c0a6244bd86e1fc27ee4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.918554Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8060a68e-7277-483d-baa0-c21807d20be7", "created": "2026-01-27T05:13:01.919402Z", "modified": "2026-01-27T05:13:01.919402Z", "relationship_type": "indicates", "source_ref": "indicator--2c7bd2ed-f698-436e-ab9e-9c9cfc18a532", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51898bea-0f82-437d-a4c6-f2e10b51cbcc", "created": "2026-01-27T05:13:01.919578Z", "modified": "2026-01-27T05:13:01.919578Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b6ed6b4a74716c16aef189990c273404df1a60500f865dfbd052c7141be0a972']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.919578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a7227f17-8c83-4d20-8750-e1635d6641dd", "created": "2026-01-27T05:13:01.920545Z", "modified": "2026-01-27T05:13:01.920545Z", "relationship_type": "indicates", "source_ref": "indicator--51898bea-0f82-437d-a4c6-f2e10b51cbcc", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50b822b-b1d6-4569-b2d7-80f3d64c934a", "created": "2026-01-27T05:13:01.920739Z", "modified": "2026-01-27T05:13:01.920739Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cc8049029b36b762334de8e6afb0c1a8cbcbed4d00cd6a77f23a005bea01e72d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.920739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ec8cd44-0ca9-4b8a-8ee8-ff2c1506db2e", "created": "2026-01-27T05:13:01.921576Z", "modified": "2026-01-27T05:13:01.921576Z", "relationship_type": "indicates", "source_ref": "indicator--a50b822b-b1d6-4569-b2d7-80f3d64c934a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd36d2c-ed90-4860-a95b-6487e9cd9436", "created": "2026-01-27T05:13:01.921768Z", "modified": "2026-01-27T05:13:01.921768Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f9806c4cb8644a45ab2c3a55458702a81323bc85cf2c1c8c09b87997fa8c7cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.921768Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6364277e-bd9f-491f-87ea-ef3b946efcd3", "created": "2026-01-27T05:13:01.922587Z", "modified": "2026-01-27T05:13:01.922587Z", "relationship_type": "indicates", "source_ref": "indicator--cfd36d2c-ed90-4860-a95b-6487e9cd9436", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6200ad44-d00d-40a6-8be2-50d98b2ae945", "created": "2026-01-27T05:13:01.922776Z", "modified": "2026-01-27T05:13:01.922776Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0b89ca1f7fb4dd05cd2715a521d580a1ec88869aa20365aaa652cc1cabdce077']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.922776Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afe695e7-2afc-4443-9981-64ec89953d35", "created": "2026-01-27T05:13:01.923595Z", "modified": "2026-01-27T05:13:01.923595Z", "relationship_type": "indicates", "source_ref": "indicator--6200ad44-d00d-40a6-8be2-50d98b2ae945", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c733e4d6-e4aa-439d-902e-598674023d92", "created": "2026-01-27T05:13:01.923796Z", "modified": "2026-01-27T05:13:01.923796Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1ca806078bcf4f2380bb65a81a27d0eec67a5a4cc789c1f3bf19129fc2ccb465']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.923796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--094aef64-7a9b-45d8-903a-ffa3b8e098d1", "created": "2026-01-27T05:13:01.924628Z", "modified": "2026-01-27T05:13:01.924628Z", "relationship_type": "indicates", "source_ref": "indicator--c733e4d6-e4aa-439d-902e-598674023d92", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17978a23-0037-4299-b18a-ba3dc7565cf8", "created": "2026-01-27T05:13:01.924824Z", "modified": "2026-01-27T05:13:01.924824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='86eab90fcdc1fa37a66bd6849153c38545f193fffac56c710d6177b8e8c948a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.924824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db01ea90-b5ab-4637-89ab-aa4de50a5429", "created": "2026-01-27T05:13:01.925645Z", "modified": "2026-01-27T05:13:01.925645Z", "relationship_type": "indicates", "source_ref": "indicator--17978a23-0037-4299-b18a-ba3dc7565cf8", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae41fedd-38e1-4bb5-93e6-92a588fb87f1", "created": "2026-01-27T05:13:01.925839Z", "modified": "2026-01-27T05:13:01.925839Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec846312963d9e8410cc341dc50fabe8aad278d4f46126a567e7da7a93469f7e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.925839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73609629-f26c-43c3-807d-e8b11c4ba609", "created": "2026-01-27T05:13:01.926664Z", "modified": "2026-01-27T05:13:01.926664Z", "relationship_type": "indicates", "source_ref": "indicator--ae41fedd-38e1-4bb5-93e6-92a588fb87f1", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681fdf64-57d8-4990-a06c-b6857db55f3e", "created": "2026-01-27T05:13:01.926857Z", "modified": "2026-01-27T05:13:01.926857Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='619b7b9d4f66ab57f0261169070ccd14241d38290661d8f19fe1822b7f7ae49f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.926857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59450ff3-6abc-46c8-8313-8d0a6fd4f71f", "created": "2026-01-27T05:13:01.927671Z", "modified": "2026-01-27T05:13:01.927671Z", "relationship_type": "indicates", "source_ref": "indicator--681fdf64-57d8-4990-a06c-b6857db55f3e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9e010f-6610-4beb-b8ba-d3a731938db2", "created": "2026-01-27T05:13:01.927899Z", "modified": "2026-01-27T05:13:01.927899Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ef7d83ff850c592de5f1ef893a0cbcc9bce856abcb6ae0afc3e05b679e64a2d8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.927899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebcd7a34-f06f-4ea5-bf7a-5884bf6d7840", "created": "2026-01-27T05:13:01.928732Z", "modified": "2026-01-27T05:13:01.928732Z", "relationship_type": "indicates", "source_ref": "indicator--ee9e010f-6610-4beb-b8ba-d3a731938db2", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185da4e8-4cd2-4c54-8318-39fa2cffdba7", "created": "2026-01-27T05:13:01.928936Z", "modified": "2026-01-27T05:13:01.928936Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='508a7276c8dbe45f8c6849172cc722bcf23efb4d222a18e36bf4cddf389c8a23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.928936Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6e48afd0-9ad9-4820-b194-9fe092174124", "created": "2026-01-27T05:13:01.92998Z", "modified": "2026-01-27T05:13:01.92998Z", "relationship_type": "indicates", "source_ref": "indicator--185da4e8-4cd2-4c54-8318-39fa2cffdba7", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514832bf-2acb-40a0-bb27-0ec5f411efe9", "created": "2026-01-27T05:13:01.930164Z", "modified": "2026-01-27T05:13:01.930164Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb3bdf1fd4bafbfdf8addb575e79e464013ce5d68e897015a08877a6a1e1639a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.930164Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e8aa2a0-1ff7-4f05-8415-df7899fdbaec", "created": "2026-01-27T05:13:01.931011Z", "modified": "2026-01-27T05:13:01.931011Z", "relationship_type": "indicates", "source_ref": "indicator--514832bf-2acb-40a0-bb27-0ec5f411efe9", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b84863-bce9-416e-a923-0dfd054133ee", "created": "2026-01-27T05:13:01.931194Z", "modified": "2026-01-27T05:13:01.931194Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9b97f36f2b1df735022edf5053750ea5410536d6cf4b752820134378cf7115e1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.931194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b04ea31-d21f-4d04-9cc8-de97abe4ff6f", "created": "2026-01-27T05:13:01.932029Z", "modified": "2026-01-27T05:13:01.932029Z", "relationship_type": "indicates", "source_ref": "indicator--c3b84863-bce9-416e-a923-0dfd054133ee", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cce508f-b3c6-4d3f-97c1-84b4c05ac92b", "created": "2026-01-27T05:13:01.932236Z", "modified": "2026-01-27T05:13:01.932236Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='39ff0f6c144f05c7fcfc590580e20597d7d9cc1eff35e2be0aad425c22e8cc38']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.932236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--868f3b31-c11b-4fca-bd6d-c7d1694a655e", "created": "2026-01-27T05:13:01.933081Z", "modified": "2026-01-27T05:13:01.933081Z", "relationship_type": "indicates", "source_ref": "indicator--8cce508f-b3c6-4d3f-97c1-84b4c05ac92b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561b9815-e8d6-414f-803d-ea38179b4e1a", "created": "2026-01-27T05:13:01.933294Z", "modified": "2026-01-27T05:13:01.933294Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8962633bb862732c8a0ab5ea9c2f0ca03732c949d278087cc1362954e7ecb5c7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.933294Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e5856b3-4138-4308-9ac9-b840b6b60c0e", "created": "2026-01-27T05:13:01.934159Z", "modified": "2026-01-27T05:13:01.934159Z", "relationship_type": "indicates", "source_ref": "indicator--561b9815-e8d6-414f-803d-ea38179b4e1a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3981be-977c-4918-813c-064f0cda9fda", "created": "2026-01-27T05:13:01.934338Z", "modified": "2026-01-27T05:13:01.934338Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c59c633e5af9131192935b9c6fdcb106ccec85b6cb6a85bef3193f70a467ae2d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.934338Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--989f9024-5b7e-4311-87c4-92ce7fa0ddef", "created": "2026-01-27T05:13:01.935194Z", "modified": "2026-01-27T05:13:01.935194Z", "relationship_type": "indicates", "source_ref": "indicator--de3981be-977c-4918-813c-064f0cda9fda", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20947eb-682e-4d89-814f-88f77837587e", "created": "2026-01-27T05:13:01.935374Z", "modified": "2026-01-27T05:13:01.935374Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d2d94e063f50cbc0424fdadfb268e42173e3b7d3aca3cc5f35c0829526858f9e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.935374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e22e7b17-6363-4991-bad6-a597aea1cea4", "created": "2026-01-27T05:13:01.936214Z", "modified": "2026-01-27T05:13:01.936214Z", "relationship_type": "indicates", "source_ref": "indicator--e20947eb-682e-4d89-814f-88f77837587e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2731a159-68ef-4451-9bbe-d5d6c2387a82", "created": "2026-01-27T05:13:01.936392Z", "modified": "2026-01-27T05:13:01.936392Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9376ce2ecba8a4686f495460af029bb3f26f5146c275a7608269bc4ffbe25f08']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.936392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe40d56d-2205-4296-9dfa-fc5bb569e778", "created": "2026-01-27T05:13:01.937238Z", "modified": "2026-01-27T05:13:01.937238Z", "relationship_type": "indicates", "source_ref": "indicator--2731a159-68ef-4451-9bbe-d5d6c2387a82", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd34473-e554-45ba-a23b-f15c1956f34c", "created": "2026-01-27T05:13:01.937415Z", "modified": "2026-01-27T05:13:01.937415Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b4924da1b4bfd715a903741fb2c944c77a1eda8399185ab85097b50bdf880229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.937415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8e551f0-11ad-40d2-9d27-cf4df1362147", "created": "2026-01-27T05:13:01.938272Z", "modified": "2026-01-27T05:13:01.938272Z", "relationship_type": "indicates", "source_ref": "indicator--7dd34473-e554-45ba-a23b-f15c1956f34c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bf7df3-e604-4ace-bc80-94c109a4c082", "created": "2026-01-27T05:13:01.938457Z", "modified": "2026-01-27T05:13:01.938457Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d5cc9f127b01ee15ebb980d96008133ddfbdeaebd3d67bd35f0d4ba9c53d17dc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.938457Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26b1d4e4-01c9-41eb-b413-68d9255f4fed", "created": "2026-01-27T05:13:01.939441Z", "modified": "2026-01-27T05:13:01.939441Z", "relationship_type": "indicates", "source_ref": "indicator--c3bf7df3-e604-4ace-bc80-94c109a4c082", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdb7022-4c40-4c87-a239-d77e7d0d94bc", "created": "2026-01-27T05:13:01.939621Z", "modified": "2026-01-27T05:13:01.939621Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2082d20db8c967d692aa0abb53ee3a7a65ae5ae542eebd3ac9648dc0699aa547']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.939621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1e9bc898-f08f-4d3f-86cd-e0c18a08b7d2", "created": "2026-01-27T05:13:01.940467Z", "modified": "2026-01-27T05:13:01.940467Z", "relationship_type": "indicates", "source_ref": "indicator--2cdb7022-4c40-4c87-a239-d77e7d0d94bc", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed0bb68-d479-4946-89b2-ae8e218f890f", "created": "2026-01-27T05:13:01.940642Z", "modified": "2026-01-27T05:13:01.940642Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='bcb3e8db1ac94aa2894515b9b6c235cdff1e81356e0b58407a90f15321b5443f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.940642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21c9acbb-a1e5-4646-85a3-873b274fc738", "created": "2026-01-27T05:13:01.941486Z", "modified": "2026-01-27T05:13:01.941486Z", "relationship_type": "indicates", "source_ref": "indicator--9ed0bb68-d479-4946-89b2-ae8e218f890f", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e087ba-5f53-49e1-a39b-9a0081182d08", "created": "2026-01-27T05:13:01.941671Z", "modified": "2026-01-27T05:13:01.941671Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e0ef82d4a5e712a7464826569980b21179a3ff9b309ea5f40d085bb9ff33510c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.941671Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48064266-3a91-4f0f-a2bc-7ac5f6f0bfcb", "created": "2026-01-27T05:13:01.942522Z", "modified": "2026-01-27T05:13:01.942522Z", "relationship_type": "indicates", "source_ref": "indicator--a5e087ba-5f53-49e1-a39b-9a0081182d08", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92fbcb6-4a54-4f68-98fe-96f0097b0273", "created": "2026-01-27T05:13:01.942703Z", "modified": "2026-01-27T05:13:01.942703Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b0d27661442767811bb5a12166fd192b2015efc74bfae1a933fc9d2396ac843f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.942703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--11aa0dfb-bf6e-478f-9256-b9da924da1b7", "created": "2026-01-27T05:13:01.943553Z", "modified": "2026-01-27T05:13:01.943553Z", "relationship_type": "indicates", "source_ref": "indicator--d92fbcb6-4a54-4f68-98fe-96f0097b0273", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c83693b-7111-4adb-af4d-5cd2133fdf40", "created": "2026-01-27T05:13:01.94373Z", "modified": "2026-01-27T05:13:01.94373Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b5803d4bd7e01794ca825879290bcbaf80666740e87291492488323103dd4a8d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.94373Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58d826ac-6497-4f67-938d-504fdbf694ba", "created": "2026-01-27T05:13:01.944561Z", "modified": "2026-01-27T05:13:01.944561Z", "relationship_type": "indicates", "source_ref": "indicator--8c83693b-7111-4adb-af4d-5cd2133fdf40", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1b46aa-e4f0-420e-b9b1-35ec6eb73ec7", "created": "2026-01-27T05:13:01.944739Z", "modified": "2026-01-27T05:13:01.944739Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='89183614a06829b441d1cc67584fc9016610e99ee583770dd3b17c4a2ed3163d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.944739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee114981-e2d2-4c81-810d-367001b23bda", "created": "2026-01-27T05:13:01.945575Z", "modified": "2026-01-27T05:13:01.945575Z", "relationship_type": "indicates", "source_ref": "indicator--2a1b46aa-e4f0-420e-b9b1-35ec6eb73ec7", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00110074-c67f-42e8-a95c-30c464008958", "created": "2026-01-27T05:13:01.945766Z", "modified": "2026-01-27T05:13:01.945766Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='97723b6f8726a267bf50c13975407bf5efa3317d10d375591de3277956810107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.945766Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--977ccfdd-8750-428a-bf73-171e364ee538", "created": "2026-01-27T05:13:01.946601Z", "modified": "2026-01-27T05:13:01.946601Z", "relationship_type": "indicates", "source_ref": "indicator--00110074-c67f-42e8-a95c-30c464008958", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f31c59c-7730-43f3-bee2-c7d59863323a", "created": "2026-01-27T05:13:01.94679Z", "modified": "2026-01-27T05:13:01.94679Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5726e65dad1d88a3cd4401bb379ae3a6fcaef342f7cabcd639be5f04d6521693']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.94679Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db37689e-a402-4898-86df-d494a7f4e070", "created": "2026-01-27T05:13:01.947772Z", "modified": "2026-01-27T05:13:01.947772Z", "relationship_type": "indicates", "source_ref": "indicator--2f31c59c-7730-43f3-bee2-c7d59863323a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214aefe4-f14f-4455-8922-7e91ba3b80ee", "created": "2026-01-27T05:13:01.947953Z", "modified": "2026-01-27T05:13:01.947953Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba4bbe3d6b3aad516bb6b1acea8b7d39dc62a2a78f571edf3c0a00b2d1cff44d']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.947953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a09103f7-0c5d-47a9-8e65-926072e20689", "created": "2026-01-27T05:13:01.948784Z", "modified": "2026-01-27T05:13:01.948784Z", "relationship_type": "indicates", "source_ref": "indicator--214aefe4-f14f-4455-8922-7e91ba3b80ee", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab82926e-0927-4433-b9f7-8c3e060bac7f", "created": "2026-01-27T05:13:01.948964Z", "modified": "2026-01-27T05:13:01.948964Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='065c32cf3486b599a6b99ef4dae4526189fff45c5ae65b3b5114777c2eec91d1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.948964Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50f426b1-7e3c-4d0b-b222-a555b07124bc", "created": "2026-01-27T05:13:01.949808Z", "modified": "2026-01-27T05:13:01.949808Z", "relationship_type": "indicates", "source_ref": "indicator--ab82926e-0927-4433-b9f7-8c3e060bac7f", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbb4a0b-66c9-47e0-8825-6c8391525742", "created": "2026-01-27T05:13:01.949987Z", "modified": "2026-01-27T05:13:01.949987Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='55197138654e103b332aae809eee71dc862572b627a06a7082e24653046106fe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.949987Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed226138-70cd-418c-aacc-be84fac86530", "created": "2026-01-27T05:13:01.950819Z", "modified": "2026-01-27T05:13:01.950819Z", "relationship_type": "indicates", "source_ref": "indicator--edbb4a0b-66c9-47e0-8825-6c8391525742", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5cd597-286f-420c-ba2a-687a84440d0c", "created": "2026-01-27T05:13:01.950999Z", "modified": "2026-01-27T05:13:01.950999Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb8860d45dc4e47247bac1adf123d825f873e8ce89b0480fdf0b1da69fe21d99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.950999Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63719db2-a796-4afc-94aa-7491bd9fcecd", "created": "2026-01-27T05:13:01.951839Z", "modified": "2026-01-27T05:13:01.951839Z", "relationship_type": "indicates", "source_ref": "indicator--6d5cd597-286f-420c-ba2a-687a84440d0c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4de1f4-be91-47ab-a609-6cace2ed027d", "created": "2026-01-27T05:13:01.952017Z", "modified": "2026-01-27T05:13:01.952017Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ca508ee54a8eaaf20e615472816f7b74e9a0a7cfe59f403f33afd34c5a58cda6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.952017Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0e0f3480-d2ad-429c-b39b-b7bbc2f72323", "created": "2026-01-27T05:13:01.952846Z", "modified": "2026-01-27T05:13:01.952846Z", "relationship_type": "indicates", "source_ref": "indicator--0b4de1f4-be91-47ab-a609-6cace2ed027d", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed5654f-646e-4351-b32f-140bff17fb51", "created": "2026-01-27T05:13:01.953021Z", "modified": "2026-01-27T05:13:01.953021Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1c9e37bf7ad20b65368ad366c635185fc77ad39af7214b7f21615c1d429f7b9c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.953021Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c0e92d12-3531-4562-921e-83d733057001", "created": "2026-01-27T05:13:01.95386Z", "modified": "2026-01-27T05:13:01.95386Z", "relationship_type": "indicates", "source_ref": "indicator--1ed5654f-646e-4351-b32f-140bff17fb51", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c450cafe-4855-4750-8980-9be86aff4ca4", "created": "2026-01-27T05:13:01.954047Z", "modified": "2026-01-27T05:13:01.954047Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a2f253726ccb1efa7141111d18b20aebbda7b3236a376d91ecb21b75f45c5205']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.954047Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--896df244-7c1e-4ef7-b1e7-d85d8358e28d", "created": "2026-01-27T05:13:01.95489Z", "modified": "2026-01-27T05:13:01.95489Z", "relationship_type": "indicates", "source_ref": "indicator--c450cafe-4855-4750-8980-9be86aff4ca4", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f95b1b6-facb-4d84-b6df-8652f3e745ca", "created": "2026-01-27T05:13:01.955071Z", "modified": "2026-01-27T05:13:01.955071Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='9573484507fb9a7954ef776dcd3b2639745c796a0a6f348d57b6833fa2b8e720']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.955071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53b74edb-aa19-4f99-b80e-92e4e3e1fed6", "created": "2026-01-27T05:13:01.955901Z", "modified": "2026-01-27T05:13:01.955901Z", "relationship_type": "indicates", "source_ref": "indicator--2f95b1b6-facb-4d84-b6df-8652f3e745ca", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeab11a-1f53-420c-9d3f-03cebe01996b", "created": "2026-01-27T05:13:01.956082Z", "modified": "2026-01-27T05:13:01.956082Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c2e0e707697b9c66d7b1d633588cf5e3d30adbb09d33bc93315be0e296c82900']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.956082Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb4c42c1-b5d8-4c2a-8caa-c22c05db6e76", "created": "2026-01-27T05:13:01.957068Z", "modified": "2026-01-27T05:13:01.957068Z", "relationship_type": "indicates", "source_ref": "indicator--bfeab11a-1f53-420c-9d3f-03cebe01996b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4502d4-db4a-43af-9c90-158e4f848756", "created": "2026-01-27T05:13:01.957246Z", "modified": "2026-01-27T05:13:01.957246Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8fae40c8221cf47b6f276bef1da30954ea9032d3d6e1afd421ac3561860e92cf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.957246Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d5acc59-7e88-40b3-9fb4-4902be9bd8f6", "created": "2026-01-27T05:13:01.958096Z", "modified": "2026-01-27T05:13:01.958096Z", "relationship_type": "indicates", "source_ref": "indicator--de4502d4-db4a-43af-9c90-158e4f848756", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c624cc46-7c23-4c56-ab62-2e0a4bc413d7", "created": "2026-01-27T05:13:01.958275Z", "modified": "2026-01-27T05:13:01.958275Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='eb490b114b1c961768c7da892830e9387ac2b921587d6af6c3ecb509049bb4dd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.958275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--514dfc2a-77fb-4ccb-b3bd-57dfc57b0bc2", "created": "2026-01-27T05:13:01.959111Z", "modified": "2026-01-27T05:13:01.959111Z", "relationship_type": "indicates", "source_ref": "indicator--c624cc46-7c23-4c56-ab62-2e0a4bc413d7", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5f74ad-22ca-4a7a-84d1-eeed7d79bf92", "created": "2026-01-27T05:13:01.959287Z", "modified": "2026-01-27T05:13:01.959287Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0f7165f25d25e31b86c4dcea75b3bf36fcf8661427ba388e2818352338ec1c21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.959287Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3de5497f-d0d6-4c18-a846-1167a2013fde", "created": "2026-01-27T05:13:01.960117Z", "modified": "2026-01-27T05:13:01.960117Z", "relationship_type": "indicates", "source_ref": "indicator--1d5f74ad-22ca-4a7a-84d1-eeed7d79bf92", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426e1507-1ee2-4875-b705-c5d5b229d287", "created": "2026-01-27T05:13:01.960292Z", "modified": "2026-01-27T05:13:01.960292Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ed3bc485f3466b3fadf62ec1e933d89239864bd72f005ebaa333e501a550bcb8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.960292Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c0dbcf5-6e16-49d6-8218-8a17bf6c62f8", "created": "2026-01-27T05:13:01.961132Z", "modified": "2026-01-27T05:13:01.961132Z", "relationship_type": "indicates", "source_ref": "indicator--426e1507-1ee2-4875-b705-c5d5b229d287", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb74e86-d079-45ef-8859-930c8e96566a", "created": "2026-01-27T05:13:01.961307Z", "modified": "2026-01-27T05:13:01.961307Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e42ced33b8cc44e94d1c77b6c24dae1909add8b7d81b5112d1934f79ec648492']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.961307Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63039acd-6717-40aa-8ba2-ecc0046b7811", "created": "2026-01-27T05:13:01.962142Z", "modified": "2026-01-27T05:13:01.962142Z", "relationship_type": "indicates", "source_ref": "indicator--ceb74e86-d079-45ef-8859-930c8e96566a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e477f0-1624-4da6-85cc-98767f06b99d", "created": "2026-01-27T05:13:01.962322Z", "modified": "2026-01-27T05:13:01.962322Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='05e1e81aee6529fca4d5f51ab1e8cb0789c797e23edc51ee6fe14136830ee56f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.962322Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--202aff77-323d-43ae-8c4f-9078cd533480", "created": "2026-01-27T05:13:01.963164Z", "modified": "2026-01-27T05:13:01.963164Z", "relationship_type": "indicates", "source_ref": "indicator--70e477f0-1624-4da6-85cc-98767f06b99d", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4409f6a6-7d7f-454f-a38a-b24a54940192", "created": "2026-01-27T05:13:01.963341Z", "modified": "2026-01-27T05:13:01.963341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='64a30423d87c49392fa89bd9b5663fec266c7308bc1fefc0d9ffc245cb2aa905']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.963341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--44fdb5c9-f750-49ca-acf2-cf6559b5912f", "created": "2026-01-27T05:13:01.964195Z", "modified": "2026-01-27T05:13:01.964195Z", "relationship_type": "indicates", "source_ref": "indicator--4409f6a6-7d7f-454f-a38a-b24a54940192", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6713df1-3a06-466f-b97d-724a04d84d23", "created": "2026-01-27T05:13:01.964372Z", "modified": "2026-01-27T05:13:01.964372Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f9af386acac64a16445a43fb00eba535f95fc84fd39cec02fea64664dc50e645']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.964372Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--807108ef-511e-4bd9-967a-2d640a8a976e", "created": "2026-01-27T05:13:01.965225Z", "modified": "2026-01-27T05:13:01.965225Z", "relationship_type": "indicates", "source_ref": "indicator--b6713df1-3a06-466f-b97d-724a04d84d23", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490a42b2-9032-4644-8418-fb8f26c557f3", "created": "2026-01-27T05:13:01.965401Z", "modified": "2026-01-27T05:13:01.965401Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c4931f82fdc668e11301d47092a83570606d7f32f24218241303a9adc6eb6eb6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.965401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c7a406a-5eb2-4c5c-8752-3bc6436169dc", "created": "2026-01-27T05:13:01.966359Z", "modified": "2026-01-27T05:13:01.966359Z", "relationship_type": "indicates", "source_ref": "indicator--490a42b2-9032-4644-8418-fb8f26c557f3", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f6c486-99ca-4d61-82a3-fc5074d305c3", "created": "2026-01-27T05:13:01.966536Z", "modified": "2026-01-27T05:13:01.966536Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a1fd731cce7447ec58bb3c1e40a5a00175216937af204b1bcdfe91303401dae']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.966536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ea45a3-6b65-44e6-831a-63b5bfef0689", "created": "2026-01-27T05:13:01.967383Z", "modified": "2026-01-27T05:13:01.967383Z", "relationship_type": "indicates", "source_ref": "indicator--58f6c486-99ca-4d61-82a3-fc5074d305c3", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882cf1d3-c284-451f-9a8a-bc425410062b", "created": "2026-01-27T05:13:01.967559Z", "modified": "2026-01-27T05:13:01.967559Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3f695a0034456be78f6389dd7d9927852d1e1153dec1acfc874719fa6ecf4325']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.967559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--842fb2eb-38e1-4a35-ae7c-a6a283a060d7", "created": "2026-01-27T05:13:01.968424Z", "modified": "2026-01-27T05:13:01.968424Z", "relationship_type": "indicates", "source_ref": "indicator--882cf1d3-c284-451f-9a8a-bc425410062b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad49e68-1c4b-401d-80a6-69186d0eb7fe", "created": "2026-01-27T05:13:01.96861Z", "modified": "2026-01-27T05:13:01.96861Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ba0dd886275dacdcb1d937776b7e52818f02a809d5150f4b91762c813cde4b65']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.96861Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afceb8a3-fefa-436d-b8f7-7f4bf5d4802a", "created": "2026-01-27T05:13:01.969511Z", "modified": "2026-01-27T05:13:01.969511Z", "relationship_type": "indicates", "source_ref": "indicator--9ad49e68-1c4b-401d-80a6-69186d0eb7fe", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfaa39d-122f-4bc7-922e-9b6ee63ada5c", "created": "2026-01-27T05:13:01.969704Z", "modified": "2026-01-27T05:13:01.969704Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='35b95246b1b65d1c0d883575dda84ba72e7f639085866e9f912e3c104ddf9958']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.969704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e015113c-8fce-48d6-a9f3-5cbd0ec1af5e", "created": "2026-01-27T05:13:01.970569Z", "modified": "2026-01-27T05:13:01.970569Z", "relationship_type": "indicates", "source_ref": "indicator--5dfaa39d-122f-4bc7-922e-9b6ee63ada5c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0408669-6604-4f0c-aa8c-aa0e910c3f89", "created": "2026-01-27T05:13:01.970761Z", "modified": "2026-01-27T05:13:01.970761Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f57f85a76d1128fbbc00c8b62cd2ea0529b52f38ae044ce5d425666766b5fffc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.970761Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dd62f8c9-0bd8-4eb0-86c6-07384f9c191a", "created": "2026-01-27T05:13:01.971605Z", "modified": "2026-01-27T05:13:01.971605Z", "relationship_type": "indicates", "source_ref": "indicator--b0408669-6604-4f0c-aa8c-aa0e910c3f89", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500dc2f8-e141-4597-95d3-b216f727eef5", "created": "2026-01-27T05:13:01.9718Z", "modified": "2026-01-27T05:13:01.9718Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='33dc2bac3daaff1c39d2392167dd6d9992f2c2baa7bf0dd9df6d2cf245e743a2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.9718Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--00378cbc-a362-4ab2-9f99-91fc287b3d93", "created": "2026-01-27T05:13:01.972631Z", "modified": "2026-01-27T05:13:01.972631Z", "relationship_type": "indicates", "source_ref": "indicator--500dc2f8-e141-4597-95d3-b216f727eef5", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8398ffd7-ad0f-4c6d-a2d3-7a8c7b64aeae", "created": "2026-01-27T05:13:01.972824Z", "modified": "2026-01-27T05:13:01.972824Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='80f2bd63dd65dddfeec879ae566d45ba9226f4b8c866a2f0667398616899dbe2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.972824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10b630b3-27db-4be8-b5ad-4eb285bc963d", "created": "2026-01-27T05:13:01.973654Z", "modified": "2026-01-27T05:13:01.973654Z", "relationship_type": "indicates", "source_ref": "indicator--8398ffd7-ad0f-4c6d-a2d3-7a8c7b64aeae", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc4ecb4-787d-44e4-bf00-f0d521fd0027", "created": "2026-01-27T05:13:01.973856Z", "modified": "2026-01-27T05:13:01.973856Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='aebc540710c552acc164e9d541a7501aca52288e6c899b177740e8443175f225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.973856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16f13a39-8431-42b2-966e-142e3ec927b5", "created": "2026-01-27T05:13:01.974847Z", "modified": "2026-01-27T05:13:01.974847Z", "relationship_type": "indicates", "source_ref": "indicator--cdc4ecb4-787d-44e4-bf00-f0d521fd0027", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065bff93-bf60-497d-8b34-fe073a8954bb", "created": "2026-01-27T05:13:01.975046Z", "modified": "2026-01-27T05:13:01.975046Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cb6a4f3623ecbbc455fe2f1ceea164e51a21fddc5769f58a9947306117d8c8b3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.975046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ad78530-be40-4fe9-8a73-cf1f65ee079a", "created": "2026-01-27T05:13:01.975903Z", "modified": "2026-01-27T05:13:01.975903Z", "relationship_type": "indicates", "source_ref": "indicator--065bff93-bf60-497d-8b34-fe073a8954bb", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd809c2c-203c-4749-b0ba-7023739ba5b0", "created": "2026-01-27T05:13:01.976083Z", "modified": "2026-01-27T05:13:01.976083Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ac6aa0c781092fc4bb21b71de52085c3cb55a273be648635c0c676a9252b8919']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.976083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4b451cb1-937b-4680-8426-5dfe5b2e4fe7", "created": "2026-01-27T05:13:01.976921Z", "modified": "2026-01-27T05:13:01.976921Z", "relationship_type": "indicates", "source_ref": "indicator--cd809c2c-203c-4749-b0ba-7023739ba5b0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5ebdec-8216-486e-97b4-b6845571259f", "created": "2026-01-27T05:13:01.977099Z", "modified": "2026-01-27T05:13:01.977099Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6ac39bde3df354194d4b7bed69e3854daf849eec06cea34d6eb2e857a42e6259']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.977099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ea6edfa-2d5a-46e8-9a42-28d9b8257af6", "created": "2026-01-27T05:13:01.97794Z", "modified": "2026-01-27T05:13:01.97794Z", "relationship_type": "indicates", "source_ref": "indicator--8c5ebdec-8216-486e-97b4-b6845571259f", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173af865-e76a-4550-ad60-8dd4ba432107", "created": "2026-01-27T05:13:01.978119Z", "modified": "2026-01-27T05:13:01.978119Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='280cc93c36c7ddc4e7974753d244b8ac29af79991610159839f1d42470360efd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.978119Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7d5b98a-ebdf-4872-a8d2-c2a2c0db9c43", "created": "2026-01-27T05:13:01.978964Z", "modified": "2026-01-27T05:13:01.978964Z", "relationship_type": "indicates", "source_ref": "indicator--173af865-e76a-4550-ad60-8dd4ba432107", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2210e2-0603-4ffa-ba98-54696bda1ca0", "created": "2026-01-27T05:13:01.979144Z", "modified": "2026-01-27T05:13:01.979144Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3a23587c909211bca255285d3dd5047a37b4745293751ec38ac026d78f71c6f1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.979144Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db874633-744e-4ecc-9b07-5b3af760b487", "created": "2026-01-27T05:13:01.979993Z", "modified": "2026-01-27T05:13:01.979993Z", "relationship_type": "indicates", "source_ref": "indicator--2c2210e2-0603-4ffa-ba98-54696bda1ca0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e4501-3807-46a6-be49-d6bfcc99a10c", "created": "2026-01-27T05:13:01.980178Z", "modified": "2026-01-27T05:13:01.980178Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2718ef39c28304d0b5e5373bf5a1d64128fe009419b12b313fd28af6c5439db9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.980178Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7ef3392-ae26-4970-add3-a6e077e68320", "created": "2026-01-27T05:13:01.981026Z", "modified": "2026-01-27T05:13:01.981026Z", "relationship_type": "indicates", "source_ref": "indicator--712e4501-3807-46a6-be49-d6bfcc99a10c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a1cfc3-5364-4797-8bb1-813fcfe9343a", "created": "2026-01-27T05:13:01.981204Z", "modified": "2026-01-27T05:13:01.981204Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f01d7c39506e79979bece4274d37d2eea57d1e7f069cce03ee622b91225ce581']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.981204Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--042e1035-c79a-423e-8e78-b63e7b43c720", "created": "2026-01-27T05:13:01.982034Z", "modified": "2026-01-27T05:13:01.982034Z", "relationship_type": "indicates", "source_ref": "indicator--83a1cfc3-5364-4797-8bb1-813fcfe9343a", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10c8e43-5035-40e6-8001-fd8688b0f3f5", "created": "2026-01-27T05:13:01.982216Z", "modified": "2026-01-27T05:13:01.982216Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6a1e0c7e5e2c4fc14532403f54d2dbbbdf3ce09a6a052105206f65fb1d8cafca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.982216Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b18efd48-438e-4408-84c8-27bc1bd81358", "created": "2026-01-27T05:13:01.983083Z", "modified": "2026-01-27T05:13:01.983083Z", "relationship_type": "indicates", "source_ref": "indicator--a10c8e43-5035-40e6-8001-fd8688b0f3f5", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fc575e-5456-448b-a8b3-43f5e5077e59", "created": "2026-01-27T05:13:01.983271Z", "modified": "2026-01-27T05:13:01.983271Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3aa4c92b3a1c75813662cbc9a58f03d0b430567a27a0b3d159850e809f3fa21e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.983271Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e533b0f5-0cb3-4a18-bea9-141810c65b6e", "created": "2026-01-27T05:13:01.984247Z", "modified": "2026-01-27T05:13:01.984247Z", "relationship_type": "indicates", "source_ref": "indicator--51fc575e-5456-448b-a8b3-43f5e5077e59", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76780821-9bd7-4178-aecc-aa9fec578f03", "created": "2026-01-27T05:13:01.984426Z", "modified": "2026-01-27T05:13:01.984426Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='93025b26b98a19cc2a48c75c04d6473c02a4cb5328a27c6cbc3ec6ef340036e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.984426Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--390cdef6-0ec5-46d9-b267-0db1335c100e", "created": "2026-01-27T05:13:01.985264Z", "modified": "2026-01-27T05:13:01.985264Z", "relationship_type": "indicates", "source_ref": "indicator--76780821-9bd7-4178-aecc-aa9fec578f03", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d567fe-856a-4898-a89a-5c9378e62986", "created": "2026-01-27T05:13:01.985441Z", "modified": "2026-01-27T05:13:01.985441Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d13053401242406612abbac3d435581b977d909c9079570c487e2fe5a31ffbe5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.985441Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86422055-2c10-4b6e-857d-6243e357951b", "created": "2026-01-27T05:13:01.986288Z", "modified": "2026-01-27T05:13:01.986288Z", "relationship_type": "indicates", "source_ref": "indicator--71d567fe-856a-4898-a89a-5c9378e62986", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1156cab0-f866-4881-a376-971107edd331", "created": "2026-01-27T05:13:01.986466Z", "modified": "2026-01-27T05:13:01.986466Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c41581a7ba551478330d8e02bf9ca20a36dec11a873d7152f75cbf00d3969445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.986466Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--98180f76-5459-4f3d-9463-7574fffc2324", "created": "2026-01-27T05:13:01.987363Z", "modified": "2026-01-27T05:13:01.987363Z", "relationship_type": "indicates", "source_ref": "indicator--1156cab0-f866-4881-a376-971107edd331", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b487890-7b2a-48c9-bc19-186438108f01", "created": "2026-01-27T05:13:01.987552Z", "modified": "2026-01-27T05:13:01.987552Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='09ea0d11b737db47d05235fedc2a2abed82a283f8102f99774267fee58cb2ecb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.987552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59ce8795-2bb4-467c-81e8-2411233f441c", "created": "2026-01-27T05:13:01.98841Z", "modified": "2026-01-27T05:13:01.98841Z", "relationship_type": "indicates", "source_ref": "indicator--8b487890-7b2a-48c9-bc19-186438108f01", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423706d7-97b8-487b-951f-2057c007392c", "created": "2026-01-27T05:13:01.988597Z", "modified": "2026-01-27T05:13:01.988597Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='62e0a8bff4cb66473024c798b3a9b184b4e58a54e554762134512f1c3582133c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.988597Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aadebcb3-b2d2-4336-87b2-8ea61fcc062f", "created": "2026-01-27T05:13:01.989433Z", "modified": "2026-01-27T05:13:01.989433Z", "relationship_type": "indicates", "source_ref": "indicator--423706d7-97b8-487b-951f-2057c007392c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ec3431-958a-4737-825d-dca259abd6fd", "created": "2026-01-27T05:13:01.989608Z", "modified": "2026-01-27T05:13:01.989608Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='cdd24731bdc47f6796269f5d81c97e8f3102f44186c0e171150c4d7c652de0df']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.989608Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--18a24664-1c7f-4030-8aa6-c858e3c5f683", "created": "2026-01-27T05:13:01.990451Z", "modified": "2026-01-27T05:13:01.990451Z", "relationship_type": "indicates", "source_ref": "indicator--d9ec3431-958a-4737-825d-dca259abd6fd", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de19f63c-b0f1-40fc-9df9-21c05d05ae14", "created": "2026-01-27T05:13:01.990636Z", "modified": "2026-01-27T05:13:01.990636Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='310dd7c5ca5dcbc51dd33b20d451d26834aca8d0cddf9e94bb667bb3fff54882']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.990636Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6f44a2a-be4c-48f8-92c1-72c3f96a393b", "created": "2026-01-27T05:13:01.991495Z", "modified": "2026-01-27T05:13:01.991495Z", "relationship_type": "indicates", "source_ref": "indicator--de19f63c-b0f1-40fc-9df9-21c05d05ae14", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ba5689-b2cf-46ec-84d7-bf495284d7e8", "created": "2026-01-27T05:13:01.991673Z", "modified": "2026-01-27T05:13:01.991673Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8133bdea6358a7bcbb4a47e051597ad7c1e445df6622a8ffbb7b19333bccfd21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.991673Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f421ea6f-74c7-45fb-b5c7-4d11cc19d970", "created": "2026-01-27T05:13:01.992513Z", "modified": "2026-01-27T05:13:01.992513Z", "relationship_type": "indicates", "source_ref": "indicator--80ba5689-b2cf-46ec-84d7-bf495284d7e8", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f1ccea-30d4-4090-bf72-44e964d20bd3", "created": "2026-01-27T05:13:01.992689Z", "modified": "2026-01-27T05:13:01.992689Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='87c6cbf2f06305f484a46393aacaaf77e28e7f7f4e65d559f0f0eaf540582370']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.992689Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f379073c-fc2d-418c-a658-e1afadbf21e0", "created": "2026-01-27T05:13:01.993653Z", "modified": "2026-01-27T05:13:01.993653Z", "relationship_type": "indicates", "source_ref": "indicator--a2f1ccea-30d4-4090-bf72-44e964d20bd3", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6c1fae-d7cb-443f-b425-fb6f12a04e4e", "created": "2026-01-27T05:13:01.993846Z", "modified": "2026-01-27T05:13:01.993846Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d87c82f013ac77ad1a1b87e9d850f9ba148c4f486bad33bcacd80c3a3b661357']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.993846Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a1890a3f-934c-48b4-8220-edefade535c4", "created": "2026-01-27T05:13:01.994668Z", "modified": "2026-01-27T05:13:01.994668Z", "relationship_type": "indicates", "source_ref": "indicator--ae6c1fae-d7cb-443f-b425-fb6f12a04e4e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0afbc67-7d72-41d3-8008-6169ce6702b0", "created": "2026-01-27T05:13:01.994865Z", "modified": "2026-01-27T05:13:01.994865Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ec3b03c349309ce281df25f733ad565271fbbdc6b61ae857a4f5cb482c75a423']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.994865Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1adca111-c775-4b2c-b753-d7bf7a148331", "created": "2026-01-27T05:13:01.995682Z", "modified": "2026-01-27T05:13:01.995682Z", "relationship_type": "indicates", "source_ref": "indicator--e0afbc67-7d72-41d3-8008-6169ce6702b0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844209d9-fe71-4a9b-b6ee-622930dc8455", "created": "2026-01-27T05:13:01.995883Z", "modified": "2026-01-27T05:13:01.995883Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8f8a004013dc2ba44a1a55c2636147d4d856650eb0a0416a72d13070624b7114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.995883Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8888fbb2-5352-49f5-bb9d-eaa36a799912", "created": "2026-01-27T05:13:01.996707Z", "modified": "2026-01-27T05:13:01.996707Z", "relationship_type": "indicates", "source_ref": "indicator--844209d9-fe71-4a9b-b6ee-622930dc8455", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16040d42-abc7-4e80-8a08-c2655bec0aad", "created": "2026-01-27T05:13:01.996902Z", "modified": "2026-01-27T05:13:01.996902Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ba6660fbbb34ed4458503cb52e351293a9e085385bd2fb513d734b0e37b3206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.996902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36ec37b5-07c2-4485-a7a7-9d463b945d76", "created": "2026-01-27T05:13:01.997727Z", "modified": "2026-01-27T05:13:01.997727Z", "relationship_type": "indicates", "source_ref": "indicator--16040d42-abc7-4e80-8a08-c2655bec0aad", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0752c080-d81c-4a2d-bf05-12967d24fc2d", "created": "2026-01-27T05:13:01.99792Z", "modified": "2026-01-27T05:13:01.99792Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c06bde5dca392176a7e6c346e5f6b9f0e42c61aefb1990ca51a3b7ca61f8c3a3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.99792Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46ec0037-686d-47e0-b3db-9daed283eeb5", "created": "2026-01-27T05:13:01.998739Z", "modified": "2026-01-27T05:13:01.998739Z", "relationship_type": "indicates", "source_ref": "indicator--0752c080-d81c-4a2d-bf05-12967d24fc2d", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb6066f-886d-4604-8954-96742a85cfcb", "created": "2026-01-27T05:13:01.998942Z", "modified": "2026-01-27T05:13:01.998942Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='40b56c303f4553df549795ebd8f814b433eaa50db65cc0dc37a192e8a4157cec']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.998942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3131113d-cce1-45d2-bac0-b37316da98b4", "created": "2026-01-27T05:13:01.999791Z", "modified": "2026-01-27T05:13:01.999791Z", "relationship_type": "indicates", "source_ref": "indicator--3fb6066f-886d-4604-8954-96742a85cfcb", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99b2007-5df4-4134-86e9-86854eae0ee7", "created": "2026-01-27T05:13:01.99997Z", "modified": "2026-01-27T05:13:01.99997Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='46fe30db0adf5870e4b2e1432bd6d04214cd31e972a81bc08b8f237243c44243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:01.99997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--018f6c58-c7e7-4432-980f-132df8788f97", "created": "2026-01-27T05:13:02.000882Z", "modified": "2026-01-27T05:13:02.000882Z", "relationship_type": "indicates", "source_ref": "indicator--b99b2007-5df4-4134-86e9-86854eae0ee7", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c64cc1b-a31f-4704-a6a3-bd3a8bbb7450", "created": "2026-01-27T05:13:02.001081Z", "modified": "2026-01-27T05:13:02.001081Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0359ccebed22d1592223667d182ad4330aaf45c12b87e168a9caac702bd3f04e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.001081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd4586a6-dd9d-48da-85ae-40d39bb99be9", "created": "2026-01-27T05:13:02.002059Z", "modified": "2026-01-27T05:13:02.002059Z", "relationship_type": "indicates", "source_ref": "indicator--7c64cc1b-a31f-4704-a6a3-bd3a8bbb7450", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a6160d-8f3d-4d25-b2a8-f689e8a7ecac", "created": "2026-01-27T05:13:02.002238Z", "modified": "2026-01-27T05:13:02.002238Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4fec4804ff1d4500c0429c0fa827246bce09582bbf4a6cf2bd8a89f545a1214c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.002238Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c4365c9-d77f-48fd-b89a-b5bf522bc3df", "created": "2026-01-27T05:13:02.003175Z", "modified": "2026-01-27T05:13:02.003175Z", "relationship_type": "indicates", "source_ref": "indicator--e9a6160d-8f3d-4d25-b2a8-f689e8a7ecac", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b621c12-6998-4a61-afa9-b6ffd6df02ef", "created": "2026-01-27T05:13:02.003367Z", "modified": "2026-01-27T05:13:02.003367Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='ce0dc4ccfa15a2e2a1ddccf5d2148ef660431be975a46378e0123f435ec4f92e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.003367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4813bd5e-5282-46fa-8f86-25256af7d900", "created": "2026-01-27T05:13:02.004258Z", "modified": "2026-01-27T05:13:02.004258Z", "relationship_type": "indicates", "source_ref": "indicator--0b621c12-6998-4a61-afa9-b6ffd6df02ef", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab0080e-a181-4fb2-94b8-d8d7567e9be3", "created": "2026-01-27T05:13:02.004445Z", "modified": "2026-01-27T05:13:02.004445Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e29b1bcc2109ddae31bc4e5ccbd36b706ab8765c077bdfd3c72c9c6be750d9e2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.004445Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--550ecf94-99ea-43ee-a2d1-7be3026e2caf", "created": "2026-01-27T05:13:02.00531Z", "modified": "2026-01-27T05:13:02.00531Z", "relationship_type": "indicates", "source_ref": "indicator--cab0080e-a181-4fb2-94b8-d8d7567e9be3", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9792eaf7-0959-4bb9-9d35-27aec66c9b48", "created": "2026-01-27T05:13:02.005484Z", "modified": "2026-01-27T05:13:02.005484Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='d128f084615f874cfd5a70176ad22d960d92b0a44b5e32a27f89d0e23fc313ef']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.005484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d20e836-e9e8-4058-8c41-a32c251eb8d9", "created": "2026-01-27T05:13:02.006326Z", "modified": "2026-01-27T05:13:02.006326Z", "relationship_type": "indicates", "source_ref": "indicator--9792eaf7-0959-4bb9-9d35-27aec66c9b48", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e4cdb7-5d93-40ef-9d84-49d0503a92a4", "created": "2026-01-27T05:13:02.006502Z", "modified": "2026-01-27T05:13:02.006502Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='51883046b0984c9e9831dfc885fc2e8db0c42c101c154991ca09b1bb72913e36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.006502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d5d8371-cfc5-4450-9364-a4ed05142b8b", "created": "2026-01-27T05:13:02.007359Z", "modified": "2026-01-27T05:13:02.007359Z", "relationship_type": "indicates", "source_ref": "indicator--84e4cdb7-5d93-40ef-9d84-49d0503a92a4", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff7f6bb-6168-47f2-81ae-3dcfaf4a0b6c", "created": "2026-01-27T05:13:02.007538Z", "modified": "2026-01-27T05:13:02.007538Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c4f4418545221991831859fbe9a43ac39902de8678a5d85e423568c7ecad41a6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.007538Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fee4b56a-e79b-4a86-b14d-48d89daae262", "created": "2026-01-27T05:13:02.008384Z", "modified": "2026-01-27T05:13:02.008384Z", "relationship_type": "indicates", "source_ref": "indicator--0ff7f6bb-6168-47f2-81ae-3dcfaf4a0b6c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d362a6-578a-45bf-bd7b-d8e34fb78e8f", "created": "2026-01-27T05:13:02.008563Z", "modified": "2026-01-27T05:13:02.008563Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='42f8d5e4af0003abf615ec37eb1134eaa71fb3c2876e705caaf29d58d5ea7143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.008563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc2cb189-d8ec-4f24-9b88-e3724981b233", "created": "2026-01-27T05:13:02.009411Z", "modified": "2026-01-27T05:13:02.009411Z", "relationship_type": "indicates", "source_ref": "indicator--24d362a6-578a-45bf-bd7b-d8e34fb78e8f", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3254470e-f293-45d3-911c-8828a839fd7c", "created": "2026-01-27T05:13:02.009592Z", "modified": "2026-01-27T05:13:02.009592Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5a51e1feacc6460b235b8ccfc66a882c91ee18d42f7b422a0bd8fdc6357e95fa']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.009592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1eb70c05-6252-49f3-b2de-511c4a7fe198", "created": "2026-01-27T05:13:02.010431Z", "modified": "2026-01-27T05:13:02.010431Z", "relationship_type": "indicates", "source_ref": "indicator--3254470e-f293-45d3-911c-8828a839fd7c", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5830a8d8-0b31-482e-8ab3-34504aac152f", "created": "2026-01-27T05:13:02.010611Z", "modified": "2026-01-27T05:13:02.010611Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c023db8aa4bb4e96eb268f6e99f4afb99c2e132b8ec4558bd6e5748322d4424a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.010611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41fdbd8d-f2ba-4e56-a5ca-0877048ce21e", "created": "2026-01-27T05:13:02.011553Z", "modified": "2026-01-27T05:13:02.011553Z", "relationship_type": "indicates", "source_ref": "indicator--5830a8d8-0b31-482e-8ab3-34504aac152f", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533fcbcb-b1a0-4ac1-81ab-9425098f4ff9", "created": "2026-01-27T05:13:02.01173Z", "modified": "2026-01-27T05:13:02.01173Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4e04821934d23308447b119152457aae9b9aa2cfeb4f1f9f9bec41a649397ae9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.01173Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0547eed5-4539-446e-a9f4-4c7a070ae7a3", "created": "2026-01-27T05:13:02.012566Z", "modified": "2026-01-27T05:13:02.012566Z", "relationship_type": "indicates", "source_ref": "indicator--533fcbcb-b1a0-4ac1-81ab-9425098f4ff9", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdea5bfa-b6f5-42a9-8836-485e315cbaad", "created": "2026-01-27T05:13:02.012755Z", "modified": "2026-01-27T05:13:02.012755Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='71b2d78b5ffed6c7f45d254acc3f06c7a56b8f84862610387fc26b881f4a88c6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.012755Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3cb0fe24-4215-4e17-86d0-b1b8efaa49a7", "created": "2026-01-27T05:13:02.013576Z", "modified": "2026-01-27T05:13:02.013576Z", "relationship_type": "indicates", "source_ref": "indicator--fdea5bfa-b6f5-42a9-8836-485e315cbaad", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335871ba-d931-4e2a-ba11-952018295fff", "created": "2026-01-27T05:13:02.013762Z", "modified": "2026-01-27T05:13:02.013762Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f498c98a0b886fb1c9d995348703e3a94acc9e41c6bfb226d98a0708929cde6c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.013762Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--155af70f-838b-4ff2-b09d-d8be95984e2a", "created": "2026-01-27T05:13:02.01459Z", "modified": "2026-01-27T05:13:02.01459Z", "relationship_type": "indicates", "source_ref": "indicator--335871ba-d931-4e2a-ba11-952018295fff", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8611e6a6-6844-4124-ba51-729739a62af6", "created": "2026-01-27T05:13:02.014781Z", "modified": "2026-01-27T05:13:02.014781Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='2a3839006ca1fc37002e7b6c81d578ce793d00dedae5d5c9b1259daed5591d0b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.014781Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9370ed84-e960-428e-a2be-e16fd16bae7d", "created": "2026-01-27T05:13:02.015614Z", "modified": "2026-01-27T05:13:02.015614Z", "relationship_type": "indicates", "source_ref": "indicator--8611e6a6-6844-4124-ba51-729739a62af6", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d282108-dc17-4297-8317-653b083285c0", "created": "2026-01-27T05:13:02.015807Z", "modified": "2026-01-27T05:13:02.015807Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a5b2a137f57d30eef11c7ea58103227cd4d7bc8be0efb09319533de474e5e690']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.015807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0eb942bc-0597-4259-b316-3264a7998a2b", "created": "2026-01-27T05:13:02.016619Z", "modified": "2026-01-27T05:13:02.016619Z", "relationship_type": "indicates", "source_ref": "indicator--8d282108-dc17-4297-8317-653b083285c0", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9d36d8-d207-4d95-8b2e-4f04cc67f70b", "created": "2026-01-27T05:13:02.016808Z", "modified": "2026-01-27T05:13:02.016808Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='8e746c7d526ecabd08bbf448fa49890a6bbb054d04b669723159de819a11ed43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.016808Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6ae4305-0da1-446f-8146-afc38954e160", "created": "2026-01-27T05:13:02.017627Z", "modified": "2026-01-27T05:13:02.017627Z", "relationship_type": "indicates", "source_ref": "indicator--6f9d36d8-d207-4d95-8b2e-4f04cc67f70b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c5f391-12e1-461a-a6db-e5e1a5546faf", "created": "2026-01-27T05:13:02.017818Z", "modified": "2026-01-27T05:13:02.017818Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c9220a673e0103f208337ba2aa0c5b49f86d45834c37c5922921a67a980e6c35']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.017818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46844a7c-3ec5-4e7a-acd6-bde7b11006fd", "created": "2026-01-27T05:13:02.018734Z", "modified": "2026-01-27T05:13:02.018734Z", "relationship_type": "indicates", "source_ref": "indicator--64c5f391-12e1-461a-a6db-e5e1a5546faf", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ab574b-c3f1-426b-8040-1ddcc59adc20", "created": "2026-01-27T05:13:02.018948Z", "modified": "2026-01-27T05:13:02.018948Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b7cbace36a42308b403cc7f10e1e9b12c645a3e4532d002c4c28f0ea1ed7baca']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.018948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--014c9f58-7425-415e-b0db-da96f2d3775d", "created": "2026-01-27T05:13:02.019943Z", "modified": "2026-01-27T05:13:02.019943Z", "relationship_type": "indicates", "source_ref": "indicator--f8ab574b-c3f1-426b-8040-1ddcc59adc20", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f215b1f0-0943-4a05-812b-cd7929090e96", "created": "2026-01-27T05:13:02.020146Z", "modified": "2026-01-27T05:13:02.020146Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b1c19ea4074276c96331f0af1d409b4bd3feb31b740f70541554f8f9c5daf37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.020146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--410712a6-c55c-45bd-b442-37d22357b2e8", "created": "2026-01-27T05:13:02.021559Z", "modified": "2026-01-27T05:13:02.021559Z", "relationship_type": "indicates", "source_ref": "indicator--f215b1f0-0943-4a05-812b-cd7929090e96", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb856924-9245-4ce9-8447-8323a03b8091", "created": "2026-01-27T05:13:02.02177Z", "modified": "2026-01-27T05:13:02.02177Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='f8eb011d34209f016937309e1fe557fd38a0626f3b836063eba8049a6559059b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.02177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--deffc6db-1c6d-4aeb-8e4c-a33a1019c89b", "created": "2026-01-27T05:13:02.022603Z", "modified": "2026-01-27T05:13:02.022603Z", "relationship_type": "indicates", "source_ref": "indicator--fb856924-9245-4ce9-8447-8323a03b8091", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8889f7f0-d90b-4ca1-894b-825e6abccaee", "created": "2026-01-27T05:13:02.022804Z", "modified": "2026-01-27T05:13:02.022804Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='96aa75912e8c91d54cb97cba3035ee488df30794f4a49d71db20120a833eacfe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.022804Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a73822d-4fe2-4d5e-a384-4868404eec79", "created": "2026-01-27T05:13:02.023708Z", "modified": "2026-01-27T05:13:02.023708Z", "relationship_type": "indicates", "source_ref": "indicator--8889f7f0-d90b-4ca1-894b-825e6abccaee", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66483f31-9b6f-40f4-9c7f-bcc188c8305b", "created": "2026-01-27T05:13:02.023923Z", "modified": "2026-01-27T05:13:02.023923Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6e70e1418d27d53424a72f0d464eb264378d4f345668e81beca03cb05514e7b2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.023923Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5aa597af-2c19-42ed-bd98-d77e522821cd", "created": "2026-01-27T05:13:02.024773Z", "modified": "2026-01-27T05:13:02.024773Z", "relationship_type": "indicates", "source_ref": "indicator--66483f31-9b6f-40f4-9c7f-bcc188c8305b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7aa50a-5b7b-4167-a22d-b6f80b18c742", "created": "2026-01-27T05:13:02.024957Z", "modified": "2026-01-27T05:13:02.024957Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0d76df89b110fd71b292b20a833c1baef5621d80f6ae6196bca8f1d89b70412b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.024957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afb882f6-95c7-4a61-9c60-fd8198751157", "created": "2026-01-27T05:13:02.025789Z", "modified": "2026-01-27T05:13:02.025789Z", "relationship_type": "indicates", "source_ref": "indicator--7d7aa50a-5b7b-4167-a22d-b6f80b18c742", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fc9c63-0bbc-408c-95c2-ab785d604dc1", "created": "2026-01-27T05:13:02.025969Z", "modified": "2026-01-27T05:13:02.025969Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='6b2f13281356f9ef1173c7e2bace68b631506bde63aa7e9c485ac89f6e0cc560']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.025969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93da997b-dbda-400a-9d4a-134e91b12ece", "created": "2026-01-27T05:13:02.026801Z", "modified": "2026-01-27T05:13:02.026801Z", "relationship_type": "indicates", "source_ref": "indicator--92fc9c63-0bbc-408c-95c2-ab785d604dc1", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ab0587-e026-4093-aafc-5217e238b58f", "created": "2026-01-27T05:13:02.02698Z", "modified": "2026-01-27T05:13:02.02698Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5fcf3f41a0e83494af7288d8669ea951bdeb1eaf78abf835f89c4d067cf6af1c']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.02698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--68e79db8-0854-45b0-b0fa-71e2e94f0c3a", "created": "2026-01-27T05:13:02.027863Z", "modified": "2026-01-27T05:13:02.027863Z", "relationship_type": "indicates", "source_ref": "indicator--a2ab0587-e026-4093-aafc-5217e238b58f", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b679e42-9f12-4e13-a52c-6421b0f297bc", "created": "2026-01-27T05:13:02.028048Z", "modified": "2026-01-27T05:13:02.028048Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='1d1e83dce0a7f285f0205183771def06d61a7e0015e6c7af77ed640cff2e7887']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.028048Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d2f8b411-b7d7-461c-a8b4-cc056c23d427", "created": "2026-01-27T05:13:02.028887Z", "modified": "2026-01-27T05:13:02.028887Z", "relationship_type": "indicates", "source_ref": "indicator--0b679e42-9f12-4e13-a52c-6421b0f297bc", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04c9357-78ea-47b8-9c15-45a16c8f97b2", "created": "2026-01-27T05:13:02.029066Z", "modified": "2026-01-27T05:13:02.029066Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5eef7743b2a7db2e593d179d2aaeb0f5a695186141797895c96eaa52c96fdeb4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.029066Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--de75989f-be58-4c35-a1e8-26f8071fe96c", "created": "2026-01-27T05:13:02.030039Z", "modified": "2026-01-27T05:13:02.030039Z", "relationship_type": "indicates", "source_ref": "indicator--f04c9357-78ea-47b8-9c15-45a16c8f97b2", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac2181e-c840-4701-872e-68f71d483061", "created": "2026-01-27T05:13:02.030224Z", "modified": "2026-01-27T05:13:02.030224Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='dab6ff78a8c7783c5bf283bce6e151a25fdd518913d2756401b0808edbf8de47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.030224Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--50f062fa-3c4d-4573-a90b-3da68c309ff5", "created": "2026-01-27T05:13:02.03108Z", "modified": "2026-01-27T05:13:02.03108Z", "relationship_type": "indicates", "source_ref": "indicator--2ac2181e-c840-4701-872e-68f71d483061", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09472414-595f-46e0-8187-33e679a71dab", "created": "2026-01-27T05:13:02.031267Z", "modified": "2026-01-27T05:13:02.031267Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='stealthLight.sys']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.031267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0bc20c58-3b59-41ea-8ece-2e5260d2db1a", "created": "2026-01-27T05:13:02.031932Z", "modified": "2026-01-27T05:13:02.031932Z", "relationship_type": "indicates", "source_ref": "indicator--09472414-595f-46e0-8187-33e679a71dab", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e96f62-dbdf-400e-8359-0db377f5999b", "created": "2026-01-27T05:13:02.032108Z", "modified": "2026-01-27T05:13:02.032108Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='phone.Secure']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.032108Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cd408d63-87e1-4f37-8cf8-81f8e3c41909", "created": "2026-01-27T05:13:02.032771Z", "modified": "2026-01-27T05:13:02.032771Z", "relationship_type": "indicates", "source_ref": "indicator--c0e96f62-dbdf-400e-8359-0db377f5999b", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a951cba0-4b8e-4093-b5c8-fb7d42c54ca4", "created": "2026-01-27T05:13:02.032948Z", "modified": "2026-01-27T05:13:02.032948Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='and.LocatorTrial']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.032948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f1d795e0-f320-4cb8-a2cc-95ef9f909144", "created": "2026-01-27T05:13:02.033593Z", "modified": "2026-01-27T05:13:02.033593Z", "relationship_type": "indicates", "source_ref": "indicator--a951cba0-4b8e-4093-b5c8-fb7d42c54ca4", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e211b622-3c9a-4c83-802e-5f9f1fa365c6", "created": "2026-01-27T05:13:02.033789Z", "modified": "2026-01-27T05:13:02.033789Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='and.GuardTrial']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.033789Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3818133-9c66-4d59-a0cd-c1cd0dd9ee86", "created": "2026-01-27T05:13:02.034466Z", "modified": "2026-01-27T05:13:02.034466Z", "relationship_type": "indicates", "source_ref": "indicator--e211b622-3c9a-4c83-802e-5f9f1fa365c6", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3c37fd-8926-40ad-96de-cbad69044524", "created": "2026-01-27T05:13:02.034642Z", "modified": "2026-01-27T05:13:02.034642Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='lookOut.Secure']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.034642Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--786de1c1-b94e-4bdd-a259-017cc8a0e773", "created": "2026-01-27T05:13:02.035331Z", "modified": "2026-01-27T05:13:02.035331Z", "relationship_type": "indicates", "source_ref": "indicator--5a3c37fd-8926-40ad-96de-cbad69044524", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93c7c89-c367-4d52-b4c6-ddb88775514e", "created": "2026-01-27T05:13:02.03551Z", "modified": "2026-01-27T05:13:02.03551Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5AD2ACB089F8BE5112FF5125D94036983DE3E8D5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.03551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cddcde96-ee85-4f0f-986b-2023886591cc", "created": "2026-01-27T05:13:02.036341Z", "modified": "2026-01-27T05:13:02.036341Z", "relationship_type": "indicates", "source_ref": "indicator--c93c7c89-c367-4d52-b4c6-ddb88775514e", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20257f0-e968-4b83-9ca7-e2e4a96580e9", "created": "2026-01-27T05:13:02.036526Z", "modified": "2026-01-27T05:13:02.036526Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='FED69D6F09AE8C98DD4053C1934CCAF57D31824D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.036526Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24c88ebf-77c5-48fc-a7c4-3d7334d0ec26", "created": "2026-01-27T05:13:02.037339Z", "modified": "2026-01-27T05:13:02.037339Z", "relationship_type": "indicates", "source_ref": "indicator--b20257f0-e968-4b83-9ca7-e2e4a96580e9", "target_ref": "malware--394a2d70-26f2-4f23-995c-32b9c66e1030"}, {"type": "malware", "spec_version": "2.1", "id": "malware--dbdbcf82-4fb8-4fae-b407-7b3397f49377", "created": "2026-01-27T05:13:02.037516Z", "modified": "2026-01-27T05:13:02.037516Z", "name": "SMSForward", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fcdb7c-305b-4647-a19d-ca6b129f9b3d", "created": "2026-01-27T05:13:02.037702Z", "modified": "2026-01-27T05:13:02.037702Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='one.enix.smsforward']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.037702Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--926f653e-c549-4d3a-828b-c3beb682674a", "created": "2026-01-27T05:13:02.03858Z", "modified": "2026-01-27T05:13:02.03858Z", "relationship_type": "indicates", "source_ref": "indicator--f1fcdb7c-305b-4647-a19d-ca6b129f9b3d", "target_ref": "malware--dbdbcf82-4fb8-4fae-b407-7b3397f49377"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2720bebe-b070-40b2-8919-1a09ac433c4b", "created": "2026-01-27T05:13:02.038794Z", "modified": "2026-01-27T05:13:02.038794Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='1E15B0D27C0551061885340A3990D52A93F646B8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.038794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e0a5032e-1b0b-48cc-9bae-01bbb9e1b29b", "created": "2026-01-27T05:13:02.03958Z", "modified": "2026-01-27T05:13:02.03958Z", "relationship_type": "indicates", "source_ref": "indicator--2720bebe-b070-40b2-8919-1a09ac433c4b", "target_ref": "malware--dbdbcf82-4fb8-4fae-b407-7b3397f49377"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4cc9a53a-aac3-4808-a804-e7a08feb6261", "created": "2026-01-27T05:13:02.039775Z", "modified": "2026-01-27T05:13:02.039775Z", "name": "Ahmyth", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cd5b04-c153-4ac2-a32a-a45042bca2cc", "created": "2026-01-27T05:13:02.03995Z", "modified": "2026-01-27T05:13:02.03995Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.droid.talk218']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.03995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5c2f4492-e712-474e-b9fc-7427899f034b", "created": "2026-01-27T05:13:02.04061Z", "modified": "2026-01-27T05:13:02.04061Z", "relationship_type": "indicates", "source_ref": "indicator--04cd5b04-c153-4ac2-a32a-a45042bca2cc", "target_ref": "malware--4cc9a53a-aac3-4808-a804-e7a08feb6261"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35af95fa-6848-4745-8281-d7f7d563fb23", "created": "2026-01-27T05:13:02.040807Z", "modified": "2026-01-27T05:13:02.040807Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='ahmyth.mine.king.ahmyth']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.040807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0fb26cf4-0164-4ab0-b3e8-1c53d5623ba3", "created": "2026-01-27T05:13:02.041471Z", "modified": "2026-01-27T05:13:02.041471Z", "relationship_type": "indicates", "source_ref": "indicator--35af95fa-6848-4745-8281-d7f7d563fb23", "target_ref": "malware--4cc9a53a-aac3-4808-a804-e7a08feb6261"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c5ae39-ab02-4a95-98db-090790d2a76d", "created": "2026-01-27T05:13:02.041647Z", "modified": "2026-01-27T05:13:02.041647Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0ECD5FD80682776D804715AB5B8504DAF59A4B54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.041647Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e52d1d99-8949-4446-ab09-277910fde72a", "created": "2026-01-27T05:13:02.042439Z", "modified": "2026-01-27T05:13:02.042439Z", "relationship_type": "indicates", "source_ref": "indicator--44c5ae39-ab02-4a95-98db-090790d2a76d", "target_ref": "malware--4cc9a53a-aac3-4808-a804-e7a08feb6261"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a2c148d1-78e6-409f-bd49-b7693b2e4e06", "created": "2026-01-27T05:13:02.042614Z", "modified": "2026-01-27T05:13:02.042614Z", "name": "xHunter", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ac2a5b-4c41-457b-b310-f5211911d375", "created": "2026-01-27T05:13:02.042799Z", "modified": "2026-01-27T05:13:02.042799Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.xhunter.client']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.042799Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e10cd79-81c2-4f16-92fa-fa399f5d09f3", "created": "2026-01-27T05:13:02.043464Z", "modified": "2026-01-27T05:13:02.043464Z", "relationship_type": "indicates", "source_ref": "indicator--20ac2a5b-4c41-457b-b310-f5211911d375", "target_ref": "malware--a2c148d1-78e6-409f-bd49-b7693b2e4e06"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a7c2e8c5-5b8e-402b-a8b8-7bdd69b8cf2a", "created": "2026-01-27T05:13:02.043643Z", "modified": "2026-01-27T05:13:02.043643Z", "name": "SpyTec", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe1b7cd-7cb7-47d1-b9cc-2789c859ff9f", "created": "2026-01-27T05:13:02.043828Z", "modified": "2026-01-27T05:13:02.043828Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytecgps.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.043828Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7f92340-8923-4827-b98b-3d9737151f14", "created": "2026-01-27T05:13:02.044495Z", "modified": "2026-01-27T05:13:02.044495Z", "relationship_type": "indicates", "source_ref": "indicator--afe1b7cd-7cb7-47d1-b9cc-2789c859ff9f", "target_ref": "malware--a7c2e8c5-5b8e-402b-a8b8-7bdd69b8cf2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54082c3b-5bb3-4ebd-ba39-fbff7f951dc9", "created": "2026-01-27T05:13:02.044669Z", "modified": "2026-01-27T05:13:02.044669Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytecgl300.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.044669Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--02ff2a2b-10bf-4077-a1c8-7b2f01a9783a", "created": "2026-01-27T05:13:02.04536Z", "modified": "2026-01-27T05:13:02.04536Z", "relationship_type": "indicates", "source_ref": "indicator--54082c3b-5bb3-4ebd-ba39-fbff7f951dc9", "target_ref": "malware--a7c2e8c5-5b8e-402b-a8b8-7bdd69b8cf2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf09e56-797e-4f63-a0a0-277795fdd627", "created": "2026-01-27T05:13:02.045544Z", "modified": "2026-01-27T05:13:02.045544Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spytec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.045544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9ac215ee-7af6-41e7-9990-6d23ed311d2b", "created": "2026-01-27T05:13:02.046253Z", "modified": "2026-01-27T05:13:02.046253Z", "relationship_type": "indicates", "source_ref": "indicator--6cf09e56-797e-4f63-a0a0-277795fdd627", "target_ref": "malware--a7c2e8c5-5b8e-402b-a8b8-7bdd69b8cf2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--782f94bc-52d7-4dea-a7df-44ea4080b315", "created": "2026-01-27T05:13:02.046433Z", "modified": "2026-01-27T05:13:02.046433Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.046433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0102a8df-cc7a-4bc0-a8c4-e8d59b6f9e7c", "created": "2026-01-27T05:13:02.047274Z", "modified": "2026-01-27T05:13:02.047274Z", "relationship_type": "indicates", "source_ref": "indicator--782f94bc-52d7-4dea-a7df-44ea4080b315", "target_ref": "malware--a7c2e8c5-5b8e-402b-a8b8-7bdd69b8cf2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67403f04-ad3a-4089-a290-8a718ef6fe32", "created": "2026-01-27T05:13:02.047456Z", "modified": "2026-01-27T05:13:02.047456Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='activation.spytec.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.047456Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b9dff8d-8822-4d4b-99ac-2befbf2fc468", "created": "2026-01-27T05:13:02.048148Z", "modified": "2026-01-27T05:13:02.048148Z", "relationship_type": "indicates", "source_ref": "indicator--67403f04-ad3a-4089-a290-8a718ef6fe32", "target_ref": "malware--a7c2e8c5-5b8e-402b-a8b8-7bdd69b8cf2a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--2c2bc7b7-7c00-42ae-ad26-e05e02912fba", "created": "2026-01-27T05:13:02.048325Z", "modified": "2026-01-27T05:13:02.048325Z", "name": "SpyTek", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc17f04-5f14-4b4e-9b36-d0d3f88f6362", "created": "2026-01-27T05:13:02.048495Z", "modified": "2026-01-27T05:13:02.048495Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytekonline.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.048495Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9457dcc6-6fc6-4392-8a96-1b02424eba0b", "created": "2026-01-27T05:13:02.049187Z", "modified": "2026-01-27T05:13:02.049187Z", "relationship_type": "indicates", "source_ref": "indicator--1dc17f04-5f14-4b4e-9b36-d0d3f88f6362", "target_ref": "malware--2c2bc7b7-7c00-42ae-ad26-e05e02912fba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0aebfa-be3c-4694-990d-be41d1cfe17d", "created": "2026-01-27T05:13:02.049374Z", "modified": "2026-01-27T05:13:02.049374Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spytek.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.049374Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f91316be-71bf-4fa3-a5a8-774b00b4ad87", "created": "2026-01-27T05:13:02.050129Z", "modified": "2026-01-27T05:13:02.050129Z", "relationship_type": "indicates", "source_ref": "indicator--ca0aebfa-be3c-4694-990d-be41d1cfe17d", "target_ref": "malware--2c2bc7b7-7c00-42ae-ad26-e05e02912fba"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c42a33-e325-4959-bf7c-e4bc92b5f4bd", "created": "2026-01-27T05:13:02.050327Z", "modified": "2026-01-27T05:13:02.050327Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.spytek.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.050327Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e415cc9a-ad4b-4624-9f65-3cd12c5d4624", "created": "2026-01-27T05:13:02.051073Z", "modified": "2026-01-27T05:13:02.051073Z", "relationship_type": "indicates", "source_ref": "indicator--22c42a33-e325-4959-bf7c-e4bc92b5f4bd", "target_ref": "malware--2c2bc7b7-7c00-42ae-ad26-e05e02912fba"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5f0ad5c5-cd55-4a83-8647-159813972c26", "created": "2026-01-27T05:13:02.051254Z", "modified": "2026-01-27T05:13:02.051254Z", "name": "BosSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c512f67a-b347-4ef9-8261-fa26be21753a", "created": "2026-01-27T05:13:02.051432Z", "modified": "2026-01-27T05:13:02.051432Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='bosspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.051432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d90268c-ef3b-4d01-97ea-528e5d6cde19", "created": "2026-01-27T05:13:02.052133Z", "modified": "2026-01-27T05:13:02.052133Z", "relationship_type": "indicates", "source_ref": "indicator--c512f67a-b347-4ef9-8261-fa26be21753a", "target_ref": "malware--5f0ad5c5-cd55-4a83-8647-159813972c26"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d38f2f-a9f2-4979-97df-ba7c0b88f64e", "created": "2026-01-27T05:13:02.052311Z", "modified": "2026-01-27T05:13:02.052311Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.preference.help.mole']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.052311Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a921e3d4-fa75-4b63-a394-d4d3f64e769e", "created": "2026-01-27T05:13:02.053018Z", "modified": "2026-01-27T05:13:02.053018Z", "relationship_type": "indicates", "source_ref": "indicator--75d38f2f-a9f2-4979-97df-ba7c0b88f64e", "target_ref": "malware--5f0ad5c5-cd55-4a83-8647-159813972c26"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3231e2c-345d-4949-8f41-81f82546d227", "created": "2026-01-27T05:13:02.053195Z", "modified": "2026-01-27T05:13:02.053195Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='32570AD62B2DF951A67251ACB49E39E96B8A43BA']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.053195Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24cca7bb-ec64-4044-bd7b-56a61f60a2b0", "created": "2026-01-27T05:13:02.053999Z", "modified": "2026-01-27T05:13:02.053999Z", "relationship_type": "indicates", "source_ref": "indicator--d3231e2c-345d-4949-8f41-81f82546d227", "target_ref": "malware--5f0ad5c5-cd55-4a83-8647-159813972c26"}, {"type": "malware", "spec_version": "2.1", "id": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265", "created": "2026-01-27T05:13:02.054173Z", "modified": "2026-01-27T05:13:02.054173Z", "name": "Fenced", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb435f0-a219-41e6-9a24-1f04f67c78c7", "created": "2026-01-27T05:13:02.054351Z", "modified": "2026-01-27T05:13:02.054351Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilespy.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.054351Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4ae1014-2d20-4e92-8cf4-47fc79f912d2", "created": "2026-01-27T05:13:02.055034Z", "modified": "2026-01-27T05:13:02.055034Z", "relationship_type": "indicates", "source_ref": "indicator--cfb435f0-a219-41e6-9a24-1f04f67c78c7", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ad86f2-68fe-4a1a-aedb-d610c8a65921", "created": "2026-01-27T05:13:02.055214Z", "modified": "2026-01-27T05:13:02.055214Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.055214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e3b3c5a-10ba-4ebb-83e2-ed3d9d39b0f4", "created": "2026-01-27T05:13:02.056016Z", "modified": "2026-01-27T05:13:02.056016Z", "relationship_type": "indicates", "source_ref": "indicator--90ad86f2-68fe-4a1a-aedb-d610c8a65921", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8519fd56-a27b-4026-8a51-f53edae1b1f3", "created": "2026-01-27T05:13:02.056193Z", "modified": "2026-01-27T05:13:02.056193Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='web.mobilespy.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.056193Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea8f5509-1fb7-45fe-a102-b4ec51ee71fc", "created": "2026-01-27T05:13:02.056878Z", "modified": "2026-01-27T05:13:02.056878Z", "relationship_type": "indicates", "source_ref": "indicator--8519fd56-a27b-4026-8a51-f53edae1b1f3", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cf4fab-5544-471b-a69e-2fa931751205", "created": "2026-01-27T05:13:02.057054Z", "modified": "2026-01-27T05:13:02.057054Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='demo.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.057054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a616c3e-31bd-42bf-b6db-e21dff2fd504", "created": "2026-01-27T05:13:02.057718Z", "modified": "2026-01-27T05:13:02.057718Z", "relationship_type": "indicates", "source_ref": "indicator--32cf4fab-5544-471b-a69e-2fa931751205", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bb433a-19fa-4b18-b69d-407aecc53947", "created": "2026-01-27T05:13:02.05791Z", "modified": "2026-01-27T05:13:02.05791Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='web.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.05791Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3632d5de-ea35-42f7-b173-21b995a80d9c", "created": "2026-01-27T05:13:02.058575Z", "modified": "2026-01-27T05:13:02.058575Z", "relationship_type": "indicates", "source_ref": "indicator--f2bb433a-19fa-4b18-b69d-407aecc53947", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d420aa-24c0-4e92-9959-594fea1fd684", "created": "2026-01-27T05:13:02.058763Z", "modified": "2026-01-27T05:13:02.058763Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.058763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5141f77f-5e37-464c-ae94-df9865ec87c5", "created": "2026-01-27T05:13:02.059435Z", "modified": "2026-01-27T05:13:02.059435Z", "relationship_type": "indicates", "source_ref": "indicator--c7d420aa-24c0-4e92-9959-594fea1fd684", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ea5e39-33bd-41a8-8c7a-f7ad538492f6", "created": "2026-01-27T05:13:02.059611Z", "modified": "2026-01-27T05:13:02.059611Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobilespy.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.059611Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2f31612-793b-423e-a271-ffb7356170e0", "created": "2026-01-27T05:13:02.060283Z", "modified": "2026-01-27T05:13:02.060283Z", "relationship_type": "indicates", "source_ref": "indicator--47ea5e39-33bd-41a8-8c7a-f7ad538492f6", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b48d4b-84bb-46cb-a3c7-cce6e1a50ba6", "created": "2026-01-27T05:13:02.06046Z", "modified": "2026-01-27T05:13:02.06046Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fenced.ai']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.06046Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e9c34d4-662a-4118-9137-938c9cf25551", "created": "2026-01-27T05:13:02.061156Z", "modified": "2026-01-27T05:13:02.061156Z", "relationship_type": "indicates", "source_ref": "indicator--13b48d4b-84bb-46cb-a3c7-cce6e1a50ba6", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24350df-09b5-4407-8028-12ed3c85d477", "created": "2026-01-27T05:13:02.061335Z", "modified": "2026-01-27T05:13:02.061335Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='5F2DCC133AF3E19D3935A85A3E2871856602A21D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.061335Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ec8a1215-cac5-4b7d-8d8e-398ac6b91aa8", "created": "2026-01-27T05:13:02.062133Z", "modified": "2026-01-27T05:13:02.062133Z", "relationship_type": "indicates", "source_ref": "indicator--b24350df-09b5-4407-8028-12ed3c85d477", "target_ref": "malware--58bae99d-bb16-4fcc-803e-38dcd4080265"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4db15205-0b9e-46ab-b77e-6232e002b899", "created": "2026-01-27T05:13:02.062308Z", "modified": "2026-01-27T05:13:02.062308Z", "name": "RastreadorDeNamorado", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ee8904-e48b-44b0-9f1c-f53bed751472", "created": "2026-01-27T05:13:02.062476Z", "modified": "2026-01-27T05:13:02.062476Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='rastreadordenamorado.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.062476Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--15a0b985-0055-491c-b440-1a19afc60cf3", "created": "2026-01-27T05:13:02.063224Z", "modified": "2026-01-27T05:13:02.063224Z", "relationship_type": "indicates", "source_ref": "indicator--96ee8904-e48b-44b0-9f1c-f53bed751472", "target_ref": "malware--4db15205-0b9e-46ab-b77e-6232e002b899"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--238864ac-b76f-4678-aa27-d70538303682", "created": "2026-01-27T05:13:02.063403Z", "modified": "2026-01-27T05:13:02.063403Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.rastreadordenamorado']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.063403Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77563f2f-ce26-4152-a5a5-fcc8fb2f1a76", "created": "2026-01-27T05:13:02.064222Z", "modified": "2026-01-27T05:13:02.064222Z", "relationship_type": "indicates", "source_ref": "indicator--238864ac-b76f-4678-aa27-d70538303682", "target_ref": "malware--4db15205-0b9e-46ab-b77e-6232e002b899"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0e056751-48b7-4fff-a9cc-cf4bd26fc993", "created": "2026-01-27T05:13:02.0644Z", "modified": "2026-01-27T05:13:02.0644Z", "name": "Intertel", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2159645a-9925-4e43-b3b7-3995e10fa950", "created": "2026-01-27T05:13:02.064573Z", "modified": "2026-01-27T05:13:02.064573Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobile-spy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.064573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75b0c742-7d42-4fc7-9011-9c75bf3ec8cd", "created": "2026-01-27T05:13:02.065276Z", "modified": "2026-01-27T05:13:02.065276Z", "relationship_type": "indicates", "source_ref": "indicator--2159645a-9925-4e43-b3b7-3995e10fa950", "target_ref": "malware--0e056751-48b7-4fff-a9cc-cf4bd26fc993"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9519c4bf-03e7-4602-bc74-e2bebe016089", "created": "2026-01-27T05:13:02.065455Z", "modified": "2026-01-27T05:13:02.065455Z", "name": "SpyFly", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd84abd-2656-449a-ac70-ff048dac40a7", "created": "2026-01-27T05:13:02.065634Z", "modified": "2026-01-27T05:13:02.065634Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyfly.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.065634Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88162292-383b-4f29-ad96-2b20f988deac", "created": "2026-01-27T05:13:02.066426Z", "modified": "2026-01-27T05:13:02.066426Z", "relationship_type": "indicates", "source_ref": "indicator--3bd84abd-2656-449a-ac70-ff048dac40a7", "target_ref": "malware--9519c4bf-03e7-4602-bc74-e2bebe016089"}, {"type": "malware", "spec_version": "2.1", "id": "malware--84879fcb-0bda-43c6-85ce-21fb47a44bd3", "created": "2026-01-27T05:13:02.066622Z", "modified": "2026-01-27T05:13:02.066622Z", "name": "MocoSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77c9d77-de6f-4ba7-8971-cdd1237bb239", "created": "2026-01-27T05:13:02.066823Z", "modified": "2026-01-27T05:13:02.066823Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mocospy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.066823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85c83fbf-9f7a-4842-b052-ca9ccdb41cb6", "created": "2026-01-27T05:13:02.067524Z", "modified": "2026-01-27T05:13:02.067524Z", "relationship_type": "indicates", "source_ref": "indicator--a77c9d77-de6f-4ba7-8971-cdd1237bb239", "target_ref": "malware--84879fcb-0bda-43c6-85ce-21fb47a44bd3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--46464b17-8e65-45c0-a46c-2f89c1a8cb57", "created": "2026-01-27T05:13:02.067706Z", "modified": "2026-01-27T05:13:02.067706Z", "name": "MzanziSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a3a54a-3f96-4d58-bc9d-518edf720e2f", "created": "2026-01-27T05:13:02.067896Z", "modified": "2026-01-27T05:13:02.067896Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mzanzispy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.067896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13646802-e05d-4d58-b743-011600d21b16", "created": "2026-01-27T05:13:02.068578Z", "modified": "2026-01-27T05:13:02.068578Z", "relationship_type": "indicates", "source_ref": "indicator--a8a3a54a-3f96-4d58-bc9d-518edf720e2f", "target_ref": "malware--46464b17-8e65-45c0-a46c-2f89c1a8cb57"}, {"type": "malware", "spec_version": "2.1", "id": "malware--17090210-8c2a-477a-a99c-9a019ec945ee", "created": "2026-01-27T05:13:02.06877Z", "modified": "2026-01-27T05:13:02.06877Z", "name": "RecomSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e31273-c5e0-45f2-9896-341c02e50f05", "created": "2026-01-27T05:13:02.068941Z", "modified": "2026-01-27T05:13:02.068941Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='recomspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.068941Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8cb64c51-0915-4f25-81b0-04abed14f092", "created": "2026-01-27T05:13:02.069616Z", "modified": "2026-01-27T05:13:02.069616Z", "relationship_type": "indicates", "source_ref": "indicator--21e31273-c5e0-45f2-9896-341c02e50f05", "target_ref": "malware--17090210-8c2a-477a-a99c-9a019ec945ee"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4023cd03-0651-4285-895c-8986d62d4c4f", "created": "2026-01-27T05:13:02.069808Z", "modified": "2026-01-27T05:13:02.069808Z", "name": "SwiftMobileSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9afff79-cb97-48c3-9bfd-71ffdb95b0ac", "created": "2026-01-27T05:13:02.069977Z", "modified": "2026-01-27T05:13:02.069977Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.myswiftmobilespy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.069977Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f14c321a-b5f6-4262-89f1-892219f6d35b", "created": "2026-01-27T05:13:02.070655Z", "modified": "2026-01-27T05:13:02.070655Z", "relationship_type": "indicates", "source_ref": "indicator--a9afff79-cb97-48c3-9bfd-71ffdb95b0ac", "target_ref": "malware--4023cd03-0651-4285-895c-8986d62d4c4f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35666400-09a6-440e-bc19-99b1d7670bdb", "created": "2026-01-27T05:13:02.070862Z", "modified": "2026-01-27T05:13:02.070862Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='swiftmobilespy.co.za']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.070862Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9af928e-f789-4cff-913f-6a55ecc8bb86", "created": "2026-01-27T05:13:02.071568Z", "modified": "2026-01-27T05:13:02.071568Z", "relationship_type": "indicates", "source_ref": "indicator--35666400-09a6-440e-bc19-99b1d7670bdb", "target_ref": "malware--4023cd03-0651-4285-895c-8986d62d4c4f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e67b6c4-e435-4552-8ff7-9b9689d07bfc", "created": "2026-01-27T05:13:02.071757Z", "modified": "2026-01-27T05:13:02.071757Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='795C30FAD432EE48EDF52B0748BA2749F0915CA3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.071757Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49f2d817-d89f-4c07-a2f8-7b1d2bf05e30", "created": "2026-01-27T05:13:02.072567Z", "modified": "2026-01-27T05:13:02.072567Z", "relationship_type": "indicates", "source_ref": "indicator--9e67b6c4-e435-4552-8ff7-9b9689d07bfc", "target_ref": "malware--4023cd03-0651-4285-895c-8986d62d4c4f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--3e3081f1-dee2-4e70-9f17-b8de9c8c61dd", "created": "2026-01-27T05:13:02.07274Z", "modified": "2026-01-27T05:13:02.07274Z", "name": "Trackji", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a79f6d-a114-4b51-97bb-a427ba438d71", "created": "2026-01-27T05:13:02.072933Z", "modified": "2026-01-27T05:13:02.072933Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackji.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.072933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--594f233d-a5eb-44dc-9f84-838425884bb0", "created": "2026-01-27T05:13:02.073725Z", "modified": "2026-01-27T05:13:02.073725Z", "relationship_type": "indicates", "source_ref": "indicator--b9a79f6d-a114-4b51-97bb-a427ba438d71", "target_ref": "malware--3e3081f1-dee2-4e70-9f17-b8de9c8c61dd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e8018c-e252-4e7c-80f6-cc78b4593afe", "created": "2026-01-27T05:13:02.07392Z", "modified": "2026-01-27T05:13:02.07392Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='trackji.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.07392Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e4b086-7a4e-48d1-a26a-fa654dd18cbf", "created": "2026-01-27T05:13:02.074586Z", "modified": "2026-01-27T05:13:02.074586Z", "relationship_type": "indicates", "source_ref": "indicator--87e8018c-e252-4e7c-80f6-cc78b4593afe", "target_ref": "malware--3e3081f1-dee2-4e70-9f17-b8de9c8c61dd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc50fd1-cb61-4c69-9859-56b83541044b", "created": "2026-01-27T05:13:02.074777Z", "modified": "2026-01-27T05:13:02.074777Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='366b60fcbd0288e279b35f2a8c67a3cde5c5bdaa1ebfc17fd07b3dab3c03132a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.074777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5309106e-d983-44b6-9ee3-0355b20dbfa0", "created": "2026-01-27T05:13:02.075613Z", "modified": "2026-01-27T05:13:02.075613Z", "relationship_type": "indicates", "source_ref": "indicator--9dc50fd1-cb61-4c69-9859-56b83541044b", "target_ref": "malware--3e3081f1-dee2-4e70-9f17-b8de9c8c61dd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d328559f-ab67-4055-8c7f-e23c1692b80f", "created": "2026-01-27T05:13:02.075807Z", "modified": "2026-01-27T05:13:02.075807Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.wifi.tracker']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.075807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b7b8dd33-dc24-415a-816a-00e51d7ad98b", "created": "2026-01-27T05:13:02.076473Z", "modified": "2026-01-27T05:13:02.076473Z", "relationship_type": "indicates", "source_ref": "indicator--d328559f-ab67-4055-8c7f-e23c1692b80f", "target_ref": "malware--3e3081f1-dee2-4e70-9f17-b8de9c8c61dd"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01335590-4628-45e6-af69-d4f8d5572362", "created": "2026-01-27T05:13:02.076648Z", "modified": "2026-01-27T05:13:02.076648Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DBA6211533A354E4BBF685A2EA458AC372C4ECE4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.076648Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f295938-5cb7-4f0d-95a5-6c5913a42262", "created": "2026-01-27T05:13:02.077437Z", "modified": "2026-01-27T05:13:02.077437Z", "relationship_type": "indicates", "source_ref": "indicator--01335590-4628-45e6-af69-d4f8d5572362", "target_ref": "malware--3e3081f1-dee2-4e70-9f17-b8de9c8c61dd"}, {"type": "malware", "spec_version": "2.1", "id": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85", "created": "2026-01-27T05:13:02.077613Z", "modified": "2026-01-27T05:13:02.077613Z", "name": "XDSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a314983-7b58-41a3-80d0-3a29812697b2", "created": "2026-01-27T05:13:02.077815Z", "modified": "2026-01-27T05:13:02.077815Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.xdspy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.077815Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f46cade7-8d46-4d2d-b773-55644e650fe8", "created": "2026-01-27T05:13:02.078489Z", "modified": "2026-01-27T05:13:02.078489Z", "relationship_type": "indicates", "source_ref": "indicator--0a314983-7b58-41a3-80d0-3a29812697b2", "target_ref": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9098ad8-2740-46f8-8128-72f1a5b11184", "created": "2026-01-27T05:13:02.078667Z", "modified": "2026-01-27T05:13:02.078667Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xdspy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.078667Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa623d1b-2784-4c88-92a2-906ebcd71510", "created": "2026-01-27T05:13:02.079371Z", "modified": "2026-01-27T05:13:02.079371Z", "relationship_type": "indicates", "source_ref": "indicator--b9098ad8-2740-46f8-8128-72f1a5b11184", "target_ref": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f98e19-a401-4f6d-9ce6-36cc44a2f6d7", "created": "2026-01-27T05:13:02.079546Z", "modified": "2026-01-27T05:13:02.079546Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='androidspy.info']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.079546Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07c279e9-2e98-484d-83e0-0c76d0191b3c", "created": "2026-01-27T05:13:02.080239Z", "modified": "2026-01-27T05:13:02.080239Z", "relationship_type": "indicates", "source_ref": "indicator--74f98e19-a401-4f6d-9ce6-36cc44a2f6d7", "target_ref": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edad620c-3885-4289-a302-fd9c8a6773e1", "created": "2026-01-27T05:13:02.080421Z", "modified": "2026-01-27T05:13:02.080421Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='xd.spy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.080421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--37b1c111-850e-4344-ad5d-424ff829c0ec", "created": "2026-01-27T05:13:02.081084Z", "modified": "2026-01-27T05:13:02.081084Z", "relationship_type": "indicates", "source_ref": "indicator--edad620c-3885-4289-a302-fd9c8a6773e1", "target_ref": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32bbb28-5455-4437-96f8-3af57757ebed", "created": "2026-01-27T05:13:02.081258Z", "modified": "2026-01-27T05:13:02.081258Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='06A49FE1347C7D2E596DF2F08B8C235C00975AF8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.081258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21417782-6c81-40a9-8340-373bfb095961", "created": "2026-01-27T05:13:02.082233Z", "modified": "2026-01-27T05:13:02.082233Z", "relationship_type": "indicates", "source_ref": "indicator--f32bbb28-5455-4437-96f8-3af57757ebed", "target_ref": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de83e3a3-5651-4db9-b843-0148a2fe0717", "created": "2026-01-27T05:13:02.082427Z", "modified": "2026-01-27T05:13:02.082427Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7A22EB86FD8D817ED7BFAA03E7A280A03AF20779']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.082427Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5393860e-c0ab-413c-86bd-447138b560c5", "created": "2026-01-27T05:13:02.083226Z", "modified": "2026-01-27T05:13:02.083226Z", "relationship_type": "indicates", "source_ref": "indicator--de83e3a3-5651-4db9-b843-0148a2fe0717", "target_ref": "malware--f81bd153-b183-4ef3-a1ae-ad874fb29c85"}, {"type": "malware", "spec_version": "2.1", "id": "malware--db6c6148-6930-4486-9a92-686b413d882d", "created": "2026-01-27T05:13:02.083404Z", "modified": "2026-01-27T05:13:02.083404Z", "name": "XploitSPY", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c6492b-6bc1-4fc3-8402-9229227e9259", "created": "2026-01-27T05:13:02.083593Z", "modified": "2026-01-27T05:13:02.083593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='xploitwizer.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.083593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ce05758-c5d2-42a0-93d9-56d46c26b67b", "created": "2026-01-27T05:13:02.08428Z", "modified": "2026-01-27T05:13:02.08428Z", "relationship_type": "indicates", "source_ref": "indicator--28c6492b-6bc1-4fc3-8402-9229227e9259", "target_ref": "malware--db6c6148-6930-4486-9a92-686b413d882d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346ed7a6-2b7f-4ded-8fa6-f562f61e8b1a", "created": "2026-01-27T05:13:02.084459Z", "modified": "2026-01-27T05:13:02.084459Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.remote.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.084459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d80019f6-1cec-4479-b5dd-591d42377eb1", "created": "2026-01-27T05:13:02.085133Z", "modified": "2026-01-27T05:13:02.085133Z", "relationship_type": "indicates", "source_ref": "indicator--346ed7a6-2b7f-4ded-8fa6-f562f61e8b1a", "target_ref": "malware--db6c6148-6930-4486-9a92-686b413d882d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--523d4223-f46f-4017-8e7d-e4c436fb7f9c", "created": "2026-01-27T05:13:02.085309Z", "modified": "2026-01-27T05:13:02.085309Z", "name": "SpySMS", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35a3b01-9591-4b6f-83fb-d36d8432b37f", "created": "2026-01-27T05:13:02.085483Z", "modified": "2026-01-27T05:13:02.085483Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.devspark.securityotp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.085483Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--677c6cde-f1e6-4a18-8825-108af6d9ced2", "created": "2026-01-27T05:13:02.086176Z", "modified": "2026-01-27T05:13:02.086176Z", "relationship_type": "indicates", "source_ref": "indicator--e35a3b01-9591-4b6f-83fb-d36d8432b37f", "target_ref": "malware--523d4223-f46f-4017-8e7d-e4c436fb7f9c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7522f030-f701-4577-9157-bf9f5d4e58a0", "created": "2026-01-27T05:13:02.086353Z", "modified": "2026-01-27T05:13:02.086353Z", "name": "DroidWatcher", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f0fae7-5112-41c8-84b3-c21f2227f264", "created": "2026-01-27T05:13:02.086522Z", "modified": "2026-01-27T05:13:02.086522Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.droidwatcher']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.086522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12aa6e14-b48e-4400-8c13-b66a3168677b", "created": "2026-01-27T05:13:02.087189Z", "modified": "2026-01-27T05:13:02.087189Z", "relationship_type": "indicates", "source_ref": "indicator--26f0fae7-5112-41c8-84b3-c21f2227f264", "target_ref": "malware--7522f030-f701-4577-9157-bf9f5d4e58a0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1c286018-2416-4d1f-a489-9d96a2119cfe", "created": "2026-01-27T05:13:02.087363Z", "modified": "2026-01-27T05:13:02.087363Z", "name": "Spyzier", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461a5761-8360-4319-b318-8dd673e8e27f", "created": "2026-01-27T05:13:02.087529Z", "modified": "2026-01-27T05:13:02.087529Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.rana_aditya.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.087529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe0c3cbd-bf42-4894-94e6-1e0f1581f286", "created": "2026-01-27T05:13:02.088198Z", "modified": "2026-01-27T05:13:02.088198Z", "relationship_type": "indicates", "source_ref": "indicator--461a5761-8360-4319-b318-8dd673e8e27f", "target_ref": "malware--1c286018-2416-4d1f-a489-9d96a2119cfe"}, {"type": "malware", "spec_version": "2.1", "id": "malware--ce964753-963d-49b3-be9e-7dda4bc055e2", "created": "2026-01-27T05:13:02.088373Z", "modified": "2026-01-27T05:13:02.088373Z", "name": "AndroidSpyApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51895a72-c445-4853-8cd7-eaa54604ed1d", "created": "2026-01-27T05:13:02.088539Z", "modified": "2026-01-27T05:13:02.088539Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='me.hawkshaw']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.088539Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--855804a7-e1a6-4fc4-ab8e-80746cf00225", "created": "2026-01-27T05:13:02.089208Z", "modified": "2026-01-27T05:13:02.089208Z", "relationship_type": "indicates", "source_ref": "indicator--51895a72-c445-4853-8cd7-eaa54604ed1d", "target_ref": "malware--ce964753-963d-49b3-be9e-7dda4bc055e2"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9b322923-d7dd-41cc-8bdf-3cc70170c433", "created": "2026-01-27T05:13:02.089387Z", "modified": "2026-01-27T05:13:02.089387Z", "name": "SpyDroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2ca4de-c3ec-40eb-b5da-9058e19944aa", "created": "2026-01-27T05:13:02.089555Z", "modified": "2026-01-27T05:13:02.089555Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='net.majorkernelpanic.spydroid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.089555Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bdca374-31a5-4e88-b1a7-65677340817e", "created": "2026-01-27T05:13:02.090359Z", "modified": "2026-01-27T05:13:02.090359Z", "relationship_type": "indicates", "source_ref": "indicator--cf2ca4de-c3ec-40eb-b5da-9058e19944aa", "target_ref": "malware--9b322923-d7dd-41cc-8bdf-3cc70170c433"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6c0a6057-f667-49eb-beb1-c28df5b2ea3a", "created": "2026-01-27T05:13:02.090537Z", "modified": "2026-01-27T05:13:02.090537Z", "name": "SpyAppGhazi", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb8fec3-11b1-49b5-8a58-25c8668a1c7f", "created": "2026-01-27T05:13:02.090722Z", "modified": "2026-01-27T05:13:02.090722Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.ghazi.sms']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.090722Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8634093-786c-42e3-aa95-139ce9493d3b", "created": "2026-01-27T05:13:02.091414Z", "modified": "2026-01-27T05:13:02.091414Z", "relationship_type": "indicates", "source_ref": "indicator--ccb8fec3-11b1-49b5-8a58-25c8668a1c7f", "target_ref": "malware--6c0a6057-f667-49eb-beb1-c28df5b2ea3a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--196f00f8-e623-4f5c-933b-c1ae320354e1", "created": "2026-01-27T05:13:02.091594Z", "modified": "2026-01-27T05:13:02.091594Z", "name": "Curiosus", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffcc329-773e-4147-9982-eda08c409b76", "created": "2026-01-27T05:13:02.091785Z", "modified": "2026-01-27T05:13:02.091785Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.hyadesinc.curiosus']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.091785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b7b7373-37e1-40b3-b1be-85a49a8344da", "created": "2026-01-27T05:13:02.09245Z", "modified": "2026-01-27T05:13:02.09245Z", "relationship_type": "indicates", "source_ref": "indicator--2ffcc329-773e-4147-9982-eda08c409b76", "target_ref": "malware--196f00f8-e623-4f5c-933b-c1ae320354e1"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d49122f7-663e-4ada-8bd6-e4e96b992297", "created": "2026-01-27T05:13:02.092628Z", "modified": "2026-01-27T05:13:02.092628Z", "name": "LoveSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4e2c90-c1d6-4869-bc8b-a263501ac7d4", "created": "2026-01-27T05:13:02.092827Z", "modified": "2026-01-27T05:13:02.092827Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.lovespy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.092827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88ad76d7-3ea6-405e-a089-8f2dfbd6eb90", "created": "2026-01-27T05:13:02.093486Z", "modified": "2026-01-27T05:13:02.093486Z", "relationship_type": "indicates", "source_ref": "indicator--bf4e2c90-c1d6-4869-bc8b-a263501ac7d4", "target_ref": "malware--d49122f7-663e-4ada-8bd6-e4e96b992297"}, {"type": "malware", "spec_version": "2.1", "id": "malware--50b6e2c6-5594-4653-9db9-7b8def3f1189", "created": "2026-01-27T05:13:02.093667Z", "modified": "2026-01-27T05:13:02.093667Z", "name": "ISpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8887e948-a00d-4fa6-bc74-8296b8ec646f", "created": "2026-01-27T05:13:02.093855Z", "modified": "2026-01-27T05:13:02.093855Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='edu.virginia.cs.cs4720.ispy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.093855Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26d79f00-30d7-45ad-9613-f512bf31d88a", "created": "2026-01-27T05:13:02.094533Z", "modified": "2026-01-27T05:13:02.094533Z", "relationship_type": "indicates", "source_ref": "indicator--8887e948-a00d-4fa6-bc74-8296b8ec646f", "target_ref": "malware--50b6e2c6-5594-4653-9db9-7b8def3f1189"}, {"type": "malware", "spec_version": "2.1", "id": "malware--eedfe91e-c280-452e-8215-20a2a98d8c7b", "created": "2026-01-27T05:13:02.094711Z", "modified": "2026-01-27T05:13:02.094711Z", "name": "PatanSpyApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3032def1-8022-4c02-8a20-9ad62a6b365c", "created": "2026-01-27T05:13:02.094896Z", "modified": "2026-01-27T05:13:02.094896Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='in.spyapp.patanjali.android']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.094896Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a76619da-8f65-4644-b416-3d6b029e543b", "created": "2026-01-27T05:13:02.095565Z", "modified": "2026-01-27T05:13:02.095565Z", "relationship_type": "indicates", "source_ref": "indicator--3032def1-8022-4c02-8a20-9ad62a6b365c", "target_ref": "malware--eedfe91e-c280-452e-8215-20a2a98d8c7b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--33f9427c-8ce5-4bc7-b469-0ff898ead38e", "created": "2026-01-27T05:13:02.095738Z", "modified": "2026-01-27T05:13:02.095738Z", "name": "Dash", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c0845a-d08d-4e09-bafc-b94bd412d127", "created": "2026-01-27T05:13:02.09593Z", "modified": "2026-01-27T05:13:02.09593Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.github.muneebwanee.dash']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.09593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f12ffbc-ddea-41b0-92c0-f366f2c73e1e", "created": "2026-01-27T05:13:02.096596Z", "modified": "2026-01-27T05:13:02.096596Z", "relationship_type": "indicates", "source_ref": "indicator--30c0845a-d08d-4e09-bafc-b94bd412d127", "target_ref": "malware--33f9427c-8ce5-4bc7-b469-0ff898ead38e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5", "created": "2026-01-27T05:13:02.096783Z", "modified": "2026-01-27T05:13:02.096783Z", "name": "SpyApp", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6e8ae9-2ad2-460a-a7a3-4d76cefe95a0", "created": "2026-01-27T05:13:02.096953Z", "modified": "2026-01-27T05:13:02.096953Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.096953Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f33c83bc-5d8a-43d8-b440-eded1021d701", "created": "2026-01-27T05:13:02.097674Z", "modified": "2026-01-27T05:13:02.097674Z", "relationship_type": "indicates", "source_ref": "indicator--6a6e8ae9-2ad2-460a-a7a3-4d76cefe95a0", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c37c15-ebdf-444b-81e2-8db42f608c00", "created": "2026-01-27T05:13:02.097902Z", "modified": "2026-01-27T05:13:02.097902Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.097902Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a581bd05-b6fa-4173-a584-d0c46b3f2619", "created": "2026-01-27T05:13:02.098572Z", "modified": "2026-01-27T05:13:02.098572Z", "relationship_type": "indicates", "source_ref": "indicator--66c37c15-ebdf-444b-81e2-8db42f608c00", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1a96a3-239d-47b4-b63e-a402ab3f4856", "created": "2026-01-27T05:13:02.098767Z", "modified": "2026-01-27T05:13:02.098767Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.098767Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae960703-c4db-4e91-b499-05a10478671f", "created": "2026-01-27T05:13:02.099566Z", "modified": "2026-01-27T05:13:02.099566Z", "relationship_type": "indicates", "source_ref": "indicator--1f1a96a3-239d-47b4-b63e-a402ab3f4856", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01d853b-9281-4ac0-b569-c08aa17e674b", "created": "2026-01-27T05:13:02.099741Z", "modified": "2026-01-27T05:13:02.099741Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accounts.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.099741Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--69b90160-bb6a-4ab4-8faa-a8b484cb9638", "created": "2026-01-27T05:13:02.100444Z", "modified": "2026-01-27T05:13:02.100444Z", "relationship_type": "indicates", "source_ref": "indicator--c01d853b-9281-4ac0-b569-c08aa17e674b", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3821760e-75b3-4a52-9c14-a51dbeb91ec0", "created": "2026-01-27T05:13:02.100619Z", "modified": "2026-01-27T05:13:02.100619Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accounts.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.100619Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2f21565-9779-4e42-a789-fddad2cf973b", "created": "2026-01-27T05:13:02.101304Z", "modified": "2026-01-27T05:13:02.101304Z", "relationship_type": "indicates", "source_ref": "indicator--3821760e-75b3-4a52-9c14-a51dbeb91ec0", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b392bad-33fd-4784-b6cd-d2d01deee2bd", "created": "2026-01-27T05:13:02.10148Z", "modified": "2026-01-27T05:13:02.10148Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='applispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.10148Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ccdbb3d-9124-4543-a987-cf989d99a828", "created": "2026-01-27T05:13:02.102163Z", "modified": "2026-01-27T05:13:02.102163Z", "relationship_type": "indicates", "source_ref": "indicator--9b392bad-33fd-4784-b6cd-d2d01deee2bd", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606dfd41-7164-4588-95aa-f3ae7c637b86", "created": "2026-01-27T05:13:02.102343Z", "modified": "2026-01-27T05:13:02.102343Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='area.spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.102343Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ecea8d9-5ec9-4951-b801-f8a1c24f4268", "created": "2026-01-27T05:13:02.103038Z", "modified": "2026-01-27T05:13:02.103038Z", "relationship_type": "indicates", "source_ref": "indicator--606dfd41-7164-4588-95aa-f3ae7c637b86", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21293f7-3e10-4f20-90fb-2e3f65341974", "created": "2026-01-27T05:13:02.103215Z", "modified": "2026-01-27T05:13:02.103215Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.103215Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a4b240d-743f-4afb-8ee0-9904c9a39afa", "created": "2026-01-27T05:13:02.103898Z", "modified": "2026-01-27T05:13:02.103898Z", "relationship_type": "indicates", "source_ref": "indicator--e21293f7-3e10-4f20-90fb-2e3f65341974", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd51cca9-6cf7-44ca-9e51-88b7dd4edea1", "created": "2026-01-27T05:13:02.104073Z", "modified": "2026-01-27T05:13:02.104073Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='br.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.104073Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cc94667a-4ba3-4f8d-90ef-2d6ef7b95076", "created": "2026-01-27T05:13:02.104741Z", "modified": "2026-01-27T05:13:02.104741Z", "relationship_type": "indicates", "source_ref": "indicator--fd51cca9-6cf7-44ca-9e51-88b7dd4edea1", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32404f6-52ca-4bed-8bc7-63380275c23b", "created": "2026-01-27T05:13:02.104933Z", "modified": "2026-01-27T05:13:02.104933Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='clienti.securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.104933Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a090058b-62bb-4ddc-b9a9-c96dd330e54f", "created": "2026-01-27T05:13:02.105618Z", "modified": "2026-01-27T05:13:02.105618Z", "relationship_type": "indicates", "source_ref": "indicator--c32404f6-52ca-4bed-8bc7-63380275c23b", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b04c8ae-f414-431d-9ad7-c041328642e2", "created": "2026-01-27T05:13:02.105807Z", "modified": "2026-01-27T05:13:02.105807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='compte.applispy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.105807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--61e40471-112b-42d3-9f6d-01f153d03954", "created": "2026-01-27T05:13:02.106487Z", "modified": "2026-01-27T05:13:02.106487Z", "relationship_type": "indicates", "source_ref": "indicator--7b04c8ae-f414-431d-9ad7-c041328642e2", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d36b35-5e5c-4870-8272-d514a4835d11", "created": "2026-01-27T05:13:02.106661Z", "modified": "2026-01-27T05:13:02.106661Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='controllo.spystoreitalia.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.106661Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c9e623ee-f8ce-42b0-8d83-07d285b35747", "created": "2026-01-27T05:13:02.10749Z", "modified": "2026-01-27T05:13:02.10749Z", "relationship_type": "indicates", "source_ref": "indicator--e8d36b35-5e5c-4870-8272-d514a4835d11", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7c9c0e-b726-4054-ad27-e0f0360f1db3", "created": "2026-01-27T05:13:02.107666Z", "modified": "2026-01-27T05:13:02.107666Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tel.forensis-lab.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.107666Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bfa9d16-13b7-4769-a4e6-d5cbbbeeba86", "created": "2026-01-27T05:13:02.10835Z", "modified": "2026-01-27T05:13:02.10835Z", "relationship_type": "indicates", "source_ref": "indicator--dc7c9c0e-b726-4054-ad27-e0f0360f1db3", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d44c9f3-e49b-47df-9af5-2a1bb0e6e876", "created": "2026-01-27T05:13:02.108522Z", "modified": "2026-01-27T05:13:02.108522Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.108522Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90b3335d-a141-4f26-b708-99d91500ba4a", "created": "2026-01-27T05:13:02.109207Z", "modified": "2026-01-27T05:13:02.109207Z", "relationship_type": "indicates", "source_ref": "indicator--7d44c9f3-e49b-47df-9af5-2a1bb0e6e876", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ba92b5-1fb6-4764-84a5-1b4815f04dc8", "created": "2026-01-27T05:13:02.109382Z", "modified": "2026-01-27T05:13:02.109382Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='partner.securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.109382Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a502d1d5-ff03-4e07-9efe-481127af89c2", "created": "2026-01-27T05:13:02.11007Z", "modified": "2026-01-27T05:13:02.11007Z", "relationship_type": "indicates", "source_ref": "indicator--60ba92b5-1fb6-4764-84a5-1b4815f04dc8", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7cb0031-cf54-47c4-b366-9a472c9709ce", "created": "2026-01-27T05:13:02.110254Z", "modified": "2026-01-27T05:13:02.110254Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.110254Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66a24c33-9df9-4e66-a3f9-6853b13bd99a", "created": "2026-01-27T05:13:02.110963Z", "modified": "2026-01-27T05:13:02.110963Z", "relationship_type": "indicates", "source_ref": "indicator--f7cb0031-cf54-47c4-b366-9a472c9709ce", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56142c76-298d-4eef-a0b2-d50dfb4a6d36", "created": "2026-01-27T05:13:02.111146Z", "modified": "2026-01-27T05:13:02.111146Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pin.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.111146Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--783a19cb-843b-4297-86bd-d89df03edef4", "created": "2026-01-27T05:13:02.111841Z", "modified": "2026-01-27T05:13:02.111841Z", "relationship_type": "indicates", "source_ref": "indicator--56142c76-298d-4eef-a0b2-d50dfb4a6d36", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddacb6de-6cb9-41a8-8da6-86690440a3dc", "created": "2026-01-27T05:13:02.112019Z", "modified": "2026-01-27T05:13:02.112019Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pin.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.112019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3fa09a54-5544-44ca-af57-b6593f208de8", "created": "2026-01-27T05:13:02.112674Z", "modified": "2026-01-27T05:13:02.112674Z", "relationship_type": "indicates", "source_ref": "indicator--ddacb6de-6cb9-41a8-8da6-86690440a3dc", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defb3362-816e-45ce-8fec-cf0b890ceed7", "created": "2026-01-27T05:13:02.112864Z", "modified": "2026-01-27T05:13:02.112864Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ro.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.112864Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7e5260a-2087-4a1d-80c9-418ca1218972", "created": "2026-01-27T05:13:02.113586Z", "modified": "2026-01-27T05:13:02.113586Z", "relationship_type": "indicates", "source_ref": "indicator--defb3362-816e-45ce-8fec-cf0b890ceed7", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bc20e7-ebfc-4222-9f8d-706b255e1180", "created": "2026-01-27T05:13:02.113785Z", "modified": "2026-01-27T05:13:02.113785Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='roaccount.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.113785Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--284c548c-f6a9-4a6d-8b76-e1d975cac158", "created": "2026-01-27T05:13:02.114523Z", "modified": "2026-01-27T05:13:02.114523Z", "relationship_type": "indicates", "source_ref": "indicator--69bc20e7-ebfc-4222-9f8d-706b255e1180", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c09bb2-67da-4afa-b3a4-d4a4d93d5714", "created": "2026-01-27T05:13:02.114704Z", "modified": "2026-01-27T05:13:02.114704Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.114704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cb3e11dd-9e02-43bb-98bb-3a772b181d1a", "created": "2026-01-27T05:13:02.115521Z", "modified": "2026-01-27T05:13:02.115521Z", "relationship_type": "indicates", "source_ref": "indicator--f9c09bb2-67da-4afa-b3a4-d4a4d93d5714", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b1beca-8228-4b59-b57a-becfe209402a", "created": "2026-01-27T05:13:02.1157Z", "modified": "2026-01-27T05:13:02.1157Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='server.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.1157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ddd0dc35-b2b5-45df-8bac-de82b606946f", "created": "2026-01-27T05:13:02.116389Z", "modified": "2026-01-27T05:13:02.116389Z", "relationship_type": "indicates", "source_ref": "indicator--28b1beca-8228-4b59-b57a-becfe209402a", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb402380-4113-4249-923a-377119928a8f", "created": "2026-01-27T05:13:02.116563Z", "modified": "2026-01-27T05:13:02.116563Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.at']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.116563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e28d8a9-d8b6-47d8-b49d-5f44177e777f", "created": "2026-01-27T05:13:02.117242Z", "modified": "2026-01-27T05:13:02.117242Z", "relationship_type": "indicates", "source_ref": "indicator--fb402380-4113-4249-923a-377119928a8f", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148b9add-0bb8-46dc-b7c8-f55d2c25c55a", "created": "2026-01-27T05:13:02.117421Z", "modified": "2026-01-27T05:13:02.117421Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.117421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c860156e-97db-43af-85af-1dab6a445abf", "created": "2026-01-27T05:13:02.118112Z", "modified": "2026-01-27T05:13:02.118112Z", "relationship_type": "indicates", "source_ref": "indicator--148b9add-0bb8-46dc-b7c8-f55d2c25c55a", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93e0dea-b7a0-46bc-b87c-c5724bd568b4", "created": "2026-01-27T05:13:02.118289Z", "modified": "2026-01-27T05:13:02.118289Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.es']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.118289Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9b7e6ef3-7a82-4ed4-8d56-ae5c8350b821", "created": "2026-01-27T05:13:02.118966Z", "modified": "2026-01-27T05:13:02.118966Z", "relationship_type": "indicates", "source_ref": "indicator--b93e0dea-b7a0-46bc-b87c-c5724bd568b4", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad81585-6b90-4eaa-bed9-e304878255f0", "created": "2026-01-27T05:13:02.119141Z", "modified": "2026-01-27T05:13:02.119141Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.fr']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.119141Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--002618a9-76e1-4928-a2a6-7e3f8562e94c", "created": "2026-01-27T05:13:02.119821Z", "modified": "2026-01-27T05:13:02.119821Z", "relationship_type": "indicates", "source_ref": "indicator--5ad81585-6b90-4eaa-bed9-e304878255f0", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d5555c-7d1b-4016-a9da-b56573bdc3bd", "created": "2026-01-27T05:13:02.119997Z", "modified": "2026-01-27T05:13:02.119997Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.uk']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.119997Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a9271e2-5891-4228-afd6-53029f561e40", "created": "2026-01-27T05:13:02.12066Z", "modified": "2026-01-27T05:13:02.12066Z", "relationship_type": "indicates", "source_ref": "indicator--58d5555c-7d1b-4016-a9da-b56573bdc3bd", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffe5647-cb81-4ac3-83dc-e61fcd7ab3a7", "created": "2026-01-27T05:13:02.120856Z", "modified": "2026-01-27T05:13:02.120856Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.120856Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--13ce7986-408f-4655-9f28-abe72b5a2a4f", "created": "2026-01-27T05:13:02.121517Z", "modified": "2026-01-27T05:13:02.121517Z", "relationship_type": "indicates", "source_ref": "indicator--2ffe5647-cb81-4ac3-83dc-e61fcd7ab3a7", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778124da-49f4-4bba-88db-541d8907c3bc", "created": "2026-01-27T05:13:02.121693Z", "modified": "2026-01-27T05:13:02.121693Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spybrother.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.121693Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--888afd20-6c6d-44f1-8c3a-db8b5565f309", "created": "2026-01-27T05:13:02.122376Z", "modified": "2026-01-27T05:13:02.122376Z", "relationship_type": "indicates", "source_ref": "indicator--778124da-49f4-4bba-88db-541d8907c3bc", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c09eb7d-e67a-4575-9d71-be5032b4eff1", "created": "2026-01-27T05:13:02.122556Z", "modified": "2026-01-27T05:13:02.122556Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sys.spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.122556Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7151223d-6d65-439f-9ed0-3d0c3f71a76b", "created": "2026-01-27T05:13:02.123703Z", "modified": "2026-01-27T05:13:02.123703Z", "relationship_type": "indicates", "source_ref": "indicator--5c09eb7d-e67a-4575-9d71-be5032b4eff1", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c794b3d-e2b6-4d10-b8cc-1bcad1cc9e78", "created": "2026-01-27T05:13:02.123901Z", "modified": "2026-01-27T05:13:02.123901Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyapp.ch']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.123901Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--419f0c0b-6fc2-453a-bd59-e5e9ddbf4a2b", "created": "2026-01-27T05:13:02.12457Z", "modified": "2026-01-27T05:13:02.12457Z", "relationship_type": "indicates", "source_ref": "indicator--0c794b3d-e2b6-4d10-b8cc-1bcad1cc9e78", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f91ab9-56c2-40b0-acff-845b860289b3", "created": "2026-01-27T05:13:02.124756Z", "modified": "2026-01-27T05:13:02.124756Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.124756Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89aefa1a-baa0-4cc4-8ba5-a3d3c96a937a", "created": "2026-01-27T05:13:02.125437Z", "modified": "2026-01-27T05:13:02.125437Z", "relationship_type": "indicates", "source_ref": "indicator--89f91ab9-56c2-40b0-acff-845b860289b3", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce62bfc-721b-449b-ba8a-06c46ecd9721", "created": "2026-01-27T05:13:02.125617Z", "modified": "2026-01-27T05:13:02.125617Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x.securspy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.125617Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a8e4407-0318-42e1-b2c8-8358ce2ebd3f", "created": "2026-01-27T05:13:02.126308Z", "modified": "2026-01-27T05:13:02.126308Z", "relationship_type": "indicates", "source_ref": "indicator--3ce62bfc-721b-449b-ba8a-06c46ecd9721", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48678a3a-eed7-4fa9-85cf-39a07d9d8e9b", "created": "2026-01-27T05:13:02.126482Z", "modified": "2026-01-27T05:13:02.126482Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='x.spyapp.ro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.126482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f7c7353-abca-477a-9556-a09b336f1e85", "created": "2026-01-27T05:13:02.127292Z", "modified": "2026-01-27T05:13:02.127292Z", "relationship_type": "indicates", "source_ref": "indicator--48678a3a-eed7-4fa9-85cf-39a07d9d8e9b", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8378252-3b50-4bbe-a313-b7ab8b71acd7", "created": "2026-01-27T05:13:02.12748Z", "modified": "2026-01-27T05:13:02.12748Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='m.pgv4.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.12748Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef00d624-7ad7-4d89-90d1-7271df7ee443", "created": "2026-01-27T05:13:02.128175Z", "modified": "2026-01-27T05:13:02.128175Z", "relationship_type": "indicates", "source_ref": "indicator--e8378252-3b50-4bbe-a313-b7ab8b71acd7", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd0b80a-6309-494e-a8ac-227aabd6a321", "created": "2026-01-27T05:13:02.128356Z", "modified": "2026-01-27T05:13:02.128356Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='0973b9ac9f3f5623a946581f9ec930b2d238572b46bf1281692fff7d088ba930']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.128356Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce64f0e5-5f7a-402e-bcd5-34e419771170", "created": "2026-01-27T05:13:02.129247Z", "modified": "2026-01-27T05:13:02.129247Z", "relationship_type": "indicates", "source_ref": "indicator--2cd0b80a-6309-494e-a8ac-227aabd6a321", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367296aa-6f50-4116-b8e8-cfe1359cb598", "created": "2026-01-27T05:13:02.129444Z", "modified": "2026-01-27T05:13:02.129444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5ab4ff9f8028c02cbb0886922142227732cfe3aaec99af1a5af2ddb43b0fb5a8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.129444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4ab43f1-b632-4f09-844e-c9770d494e7f", "created": "2026-01-27T05:13:02.130329Z", "modified": "2026-01-27T05:13:02.130329Z", "relationship_type": "indicates", "source_ref": "indicator--367296aa-6f50-4116-b8e8-cfe1359cb598", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b73bc1-ee09-4d4b-97c8-acc90a60fa57", "created": "2026-01-27T05:13:02.130529Z", "modified": "2026-01-27T05:13:02.130529Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='989b759d28ac1243048475fecd2df3d2736fb5f2eab4387c4602be9acb55b877']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.130529Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06676721-738b-40bc-bae0-ad515d857690", "created": "2026-01-27T05:13:02.131397Z", "modified": "2026-01-27T05:13:02.131397Z", "relationship_type": "indicates", "source_ref": "indicator--32b73bc1-ee09-4d4b-97c8-acc90a60fa57", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79666863-637a-4be8-963b-db0cad9da4da", "created": "2026-01-27T05:13:02.131575Z", "modified": "2026-01-27T05:13:02.131575Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4d9a085fed94b853da3d5431144021fc7d602641472518c7e17d5cb9be03b64b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.131575Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db46742c-64ca-4543-b83d-28e2860728e0", "created": "2026-01-27T05:13:02.132535Z", "modified": "2026-01-27T05:13:02.132535Z", "relationship_type": "indicates", "source_ref": "indicator--79666863-637a-4be8-963b-db0cad9da4da", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b557e2df-13f1-48b3-b5f4-13f55d01ecb0", "created": "2026-01-27T05:13:02.132714Z", "modified": "2026-01-27T05:13:02.132714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.femimesusu.libapasopi']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.132714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39e08e79-bd63-4959-a741-0b7c26e09f53", "created": "2026-01-27T05:13:02.133395Z", "modified": "2026-01-27T05:13:02.133395Z", "relationship_type": "indicates", "source_ref": "indicator--b557e2df-13f1-48b3-b5f4-13f55d01ecb0", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e32954-a95d-4628-a14f-d8cbe1ac2aa0", "created": "2026-01-27T05:13:02.133578Z", "modified": "2026-01-27T05:13:02.133578Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='38819265668EEAE6AC3C6C80D1A6530EAE99AD0E']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.133578Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f2f70e91-8b87-490e-9ffd-271a108c50a2", "created": "2026-01-27T05:13:02.13437Z", "modified": "2026-01-27T05:13:02.13437Z", "relationship_type": "indicates", "source_ref": "indicator--54e32954-a95d-4628-a14f-d8cbe1ac2aa0", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35bf8097-f376-49d8-b655-a83a88fa557a", "created": "2026-01-27T05:13:02.134551Z", "modified": "2026-01-27T05:13:02.134551Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E3620714FB24A45614A456DF1176D482BCD1B032']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.134551Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5af2f472-6eca-4dc4-8feb-f2e984bd749d", "created": "2026-01-27T05:13:02.135343Z", "modified": "2026-01-27T05:13:02.135343Z", "relationship_type": "indicates", "source_ref": "indicator--35bf8097-f376-49d8-b655-a83a88fa557a", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffdddbc-4bf9-4cb6-9c4d-c03e02e7ad9e", "created": "2026-01-27T05:13:02.13552Z", "modified": "2026-01-27T05:13:02.13552Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F3E17DFDB98B1F7774A16967FD1D84D3D9D59389']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.13552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3ca2404e-867f-454f-abcd-527b65cac361", "created": "2026-01-27T05:13:02.136301Z", "modified": "2026-01-27T05:13:02.136301Z", "relationship_type": "indicates", "source_ref": "indicator--8ffdddbc-4bf9-4cb6-9c4d-c03e02e7ad9e", "target_ref": "malware--cbec21f1-de3b-429a-9fe5-93df9b85fdd5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f", "created": "2026-01-27T05:13:02.136478Z", "modified": "2026-01-27T05:13:02.136478Z", "name": "MySpyApps", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cda7a7-1ede-4c31-b4a4-1a295f4a3693", "created": "2026-01-27T05:13:02.136657Z", "modified": "2026-01-27T05:13:02.136657Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my-spy-a9c92.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.136657Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d3b7666-59a8-4432-96b8-5d4260da304b", "created": "2026-01-27T05:13:02.137359Z", "modified": "2026-01-27T05:13:02.137359Z", "relationship_type": "indicates", "source_ref": "indicator--36cda7a7-1ede-4c31-b4a4-1a295f4a3693", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dab80aa-bb3a-402e-9650-5f75a088c27c", "created": "2026-01-27T05:13:02.137535Z", "modified": "2026-01-27T05:13:02.137535Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='myspyapps.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.137535Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53876905-12c3-4aee-8c7d-0040336d6ad0", "created": "2026-01-27T05:13:02.138217Z", "modified": "2026-01-27T05:13:02.138217Z", "relationship_type": "indicates", "source_ref": "indicator--7dab80aa-bb3a-402e-9650-5f75a088c27c", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e2aa0f-ce4e-4d10-9762-3b8fb2f2e516", "created": "2026-01-27T05:13:02.138394Z", "modified": "2026-01-27T05:13:02.138394Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5809066a109718683fa1ffe3abcd0e6c9bd5f613279e081e31bc17e628d9bfba']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.138394Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bed365d0-73e7-4fc3-90e5-360f200a5afe", "created": "2026-01-27T05:13:02.13924Z", "modified": "2026-01-27T05:13:02.13924Z", "relationship_type": "indicates", "source_ref": "indicator--25e2aa0f-ce4e-4d10-9762-3b8fb2f2e516", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e436a199-a489-47a2-a051-f503cd626810", "created": "2026-01-27T05:13:02.139417Z", "modified": "2026-01-27T05:13:02.139417Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='7efa674b2a18fb7a62dea72b133a3f8892b419205852122be3b13f5a9b90f33e']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.139417Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcdc749c-1907-40d5-a090-dc71c08d283b", "created": "2026-01-27T05:13:02.140265Z", "modified": "2026-01-27T05:13:02.140265Z", "relationship_type": "indicates", "source_ref": "indicator--e436a199-a489-47a2-a051-f503cd626810", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2baa6ff-3909-42de-aef3-dc79b9c3d878", "created": "2026-01-27T05:13:02.140444Z", "modified": "2026-01-27T05:13:02.140444Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='63141fd14148ff8e6bf8f9bde95a84af28f1bec69c94c4d9442972bdffad6c92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.140444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--96c15894-9db2-419a-a696-dd2ad067076d", "created": "2026-01-27T05:13:02.141424Z", "modified": "2026-01-27T05:13:02.141424Z", "relationship_type": "indicates", "source_ref": "indicator--f2baa6ff-3909-42de-aef3-dc79b9c3d878", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0076a90a-04ae-4710-b238-930a52006556", "created": "2026-01-27T05:13:02.141604Z", "modified": "2026-01-27T05:13:02.141604Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.my.spy.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.141604Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4cf81f9f-e89c-4373-91f6-6a65a6469e09", "created": "2026-01-27T05:13:02.142281Z", "modified": "2026-01-27T05:13:02.142281Z", "relationship_type": "indicates", "source_ref": "indicator--0076a90a-04ae-4710-b238-930a52006556", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373f1893-a570-485e-930c-b654090ca47b", "created": "2026-01-27T05:13:02.142461Z", "modified": "2026-01-27T05:13:02.142461Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='CCCD74B31E53685BFA5A23AD0AE020AF74689085']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.142461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36ca5e18-57d8-46cf-bb6e-c4a9d9bb6b4b", "created": "2026-01-27T05:13:02.143263Z", "modified": "2026-01-27T05:13:02.143263Z", "relationship_type": "indicates", "source_ref": "indicator--373f1893-a570-485e-930c-b654090ca47b", "target_ref": "malware--6c6ff496-cff1-49fc-b0c0-4bb6cff4b33f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--fb206d97-d996-478d-8739-dc9f9d103165", "created": "2026-01-27T05:13:02.143448Z", "modified": "2026-01-27T05:13:02.143448Z", "name": "OneSpy", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b0ab50-f96a-45eb-b525-a4a23d57cd08", "created": "2026-01-27T05:13:02.143626Z", "modified": "2026-01-27T05:13:02.143626Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.cp.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.143626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83cbd7af-1575-41f4-8f60-e26d2e2999bf", "created": "2026-01-27T05:13:02.144325Z", "modified": "2026-01-27T05:13:02.144325Z", "relationship_type": "indicates", "source_ref": "indicator--93b0ab50-f96a-45eb-b525-a4a23d57cd08", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276e07fb-b493-4f28-a7d5-ad7b268e5a46", "created": "2026-01-27T05:13:02.144502Z", "modified": "2026-01-27T05:13:02.144502Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onespy-in-196211.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.144502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e6bf570-76f3-46ea-b8d5-610b6fe3c34f", "created": "2026-01-27T05:13:02.145283Z", "modified": "2026-01-27T05:13:02.145283Z", "relationship_type": "indicates", "source_ref": "indicator--276e07fb-b493-4f28-a7d5-ad7b268e5a46", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131f15ce-5f11-486a-b3c5-dd8fc4cb5c78", "created": "2026-01-27T05:13:02.145461Z", "modified": "2026-01-27T05:13:02.145461Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.145461Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c26183ff-4d4c-4272-b346-d2a308870ad6", "created": "2026-01-27T05:13:02.146252Z", "modified": "2026-01-27T05:13:02.146252Z", "relationship_type": "indicates", "source_ref": "indicator--131f15ce-5f11-486a-b3c5-dd8fc4cb5c78", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d0499a-d877-4721-893f-dfbb0803e79e", "created": "2026-01-27T05:13:02.146433Z", "modified": "2026-01-27T05:13:02.146433Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='web.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.146433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fd5bd925-1d6b-41d3-8190-59c65917b39f", "created": "2026-01-27T05:13:02.147148Z", "modified": "2026-01-27T05:13:02.147148Z", "relationship_type": "indicates", "source_ref": "indicator--b0d0499a-d877-4721-893f-dfbb0803e79e", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48e41a3-c059-405f-9e73-b6d98d01873e", "created": "2026-01-27T05:13:02.147326Z", "modified": "2026-01-27T05:13:02.147326Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sse.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.147326Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b7f0263-0034-44e2-9ff6-4c1139042586", "created": "2026-01-27T05:13:02.148029Z", "modified": "2026-01-27T05:13:02.148029Z", "relationship_type": "indicates", "source_ref": "indicator--d48e41a3-c059-405f-9e73-b6d98d01873e", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec273b6-91a8-4b15-ad62-ce1544043857", "created": "2026-01-27T05:13:02.148208Z", "modified": "2026-01-27T05:13:02.148208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.148208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5ff9fb49-d8a2-43d0-bd87-7fe6002bc6e0", "created": "2026-01-27T05:13:02.148905Z", "modified": "2026-01-27T05:13:02.148905Z", "relationship_type": "indicates", "source_ref": "indicator--7ec273b6-91a8-4b15-ad62-ce1544043857", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b95aae-1ced-4c04-b455-cb12868513db", "created": "2026-01-27T05:13:02.14908Z", "modified": "2026-01-27T05:13:02.14908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ap.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.14908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a6d5a3f-0653-4683-b9a6-359021dadbfe", "created": "2026-01-27T05:13:02.149897Z", "modified": "2026-01-27T05:13:02.149897Z", "relationship_type": "indicates", "source_ref": "indicator--b8b95aae-1ced-4c04-b455-cb12868513db", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124999c6-b3fb-47cf-8644-b9bea3641644", "created": "2026-01-27T05:13:02.150075Z", "modified": "2026-01-27T05:13:02.150075Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cockpit.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.150075Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a7fbb04-d55b-4b21-85bd-1ab625ca2ee0", "created": "2026-01-27T05:13:02.150775Z", "modified": "2026-01-27T05:13:02.150775Z", "relationship_type": "indicates", "source_ref": "indicator--124999c6-b3fb-47cf-8644-b9bea3641644", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c64585-a61a-4a0e-8fd5-2bce508859d3", "created": "2026-01-27T05:13:02.150956Z", "modified": "2026-01-27T05:13:02.150956Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.150956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--653c4776-7130-4d1e-ac8f-8e92c3f38ac8", "created": "2026-01-27T05:13:02.15163Z", "modified": "2026-01-27T05:13:02.15163Z", "relationship_type": "indicates", "source_ref": "indicator--c9c64585-a61a-4a0e-8fd5-2bce508859d3", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f484da1c-258e-41e4-a451-d6856fd03406", "created": "2026-01-27T05:13:02.151822Z", "modified": "2026-01-27T05:13:02.151822Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cloud.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.151822Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b633c8d8-6779-4d60-b65b-8ce2ac4032d8", "created": "2026-01-27T05:13:02.152504Z", "modified": "2026-01-27T05:13:02.152504Z", "relationship_type": "indicates", "source_ref": "indicator--f484da1c-258e-41e4-a451-d6856fd03406", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c314a40a-43f5-4d6c-a493-266fce2edd6a", "created": "2026-01-27T05:13:02.152677Z", "modified": "2026-01-27T05:13:02.152677Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cp.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.152677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7f565e0-d1e3-49df-8911-ccee77c5c397", "created": "2026-01-27T05:13:02.153368Z", "modified": "2026-01-27T05:13:02.153368Z", "relationship_type": "indicates", "source_ref": "indicator--c314a40a-43f5-4d6c-a493-266fce2edd6a", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c0ceec-5378-45e7-9590-9512829e8c67", "created": "2026-01-27T05:13:02.153552Z", "modified": "2026-01-27T05:13:02.153552Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.153552Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--798af276-bcf3-4806-b170-19c6817e1a9a", "created": "2026-01-27T05:13:02.154239Z", "modified": "2026-01-27T05:13:02.154239Z", "relationship_type": "indicates", "source_ref": "indicator--03c0ceec-5378-45e7-9590-9512829e8c67", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba7706a-9827-4e01-9f30-2c194d52f67b", "created": "2026-01-27T05:13:02.154415Z", "modified": "2026-01-27T05:13:02.154415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.154415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a958303e-22d7-470b-88df-7fcff2d0018e", "created": "2026-01-27T05:13:02.155101Z", "modified": "2026-01-27T05:13:02.155101Z", "relationship_type": "indicates", "source_ref": "indicator--6ba7706a-9827-4e01-9f30-2c194d52f67b", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151f5ec0-8e1f-46a3-a462-5512ef4a0dc3", "created": "2026-01-27T05:13:02.155275Z", "modified": "2026-01-27T05:13:02.155275Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pma-234fsfsddfsdfds09.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.155275Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1c5d613-b991-4e7f-9bf0-97544b5a8e89", "created": "2026-01-27T05:13:02.156001Z", "modified": "2026-01-27T05:13:02.156001Z", "relationship_type": "indicates", "source_ref": "indicator--151f5ec0-8e1f-46a3-a462-5512ef4a0dc3", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616e4b05-5cf4-4b9c-93a2-97c06d3f808c", "created": "2026-01-27T05:13:02.156181Z", "modified": "2026-01-27T05:13:02.156181Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='send.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.156181Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9eaee5f8-0e18-4e99-97de-8d3abf24168b", "created": "2026-01-27T05:13:02.156867Z", "modified": "2026-01-27T05:13:02.156867Z", "relationship_type": "indicates", "source_ref": "indicator--616e4b05-5cf4-4b9c-93a2-97c06d3f808c", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e97816-9be6-4390-9f3f-fc0d2ae61fbd", "created": "2026-01-27T05:13:02.157051Z", "modified": "2026-01-27T05:13:02.157051Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='send.onespy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.157051Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d26e679-b14e-44ff-ad4e-cb72d41448ce", "created": "2026-01-27T05:13:02.15786Z", "modified": "2026-01-27T05:13:02.15786Z", "relationship_type": "indicates", "source_ref": "indicator--f0e97816-9be6-4390-9f3f-fc0d2ae61fbd", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51724601-0d0c-456c-9faa-96445f78dcdf", "created": "2026-01-27T05:13:02.158041Z", "modified": "2026-01-27T05:13:02.158041Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='su.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.158041Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--159091fd-7e14-4d8f-8696-7edd4d73df84", "created": "2026-01-27T05:13:02.158716Z", "modified": "2026-01-27T05:13:02.158716Z", "relationship_type": "indicates", "source_ref": "indicator--51724601-0d0c-456c-9faa-96445f78dcdf", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6165ac-1d5a-4a8e-a324-0a1a6cd105ab", "created": "2026-01-27T05:13:02.158908Z", "modified": "2026-01-27T05:13:02.158908Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='superuser.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.158908Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42bc3b55-88a6-42d2-aa42-af76b72653ce", "created": "2026-01-27T05:13:02.159589Z", "modified": "2026-01-27T05:13:02.159589Z", "relationship_type": "indicates", "source_ref": "indicator--aa6165ac-1d5a-4a8e-a324-0a1a6cd105ab", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14114ee3-7f2c-4318-852d-acacdab27415", "created": "2026-01-27T05:13:02.159778Z", "modified": "2026-01-27T05:13:02.159778Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='test.send.onemonitar.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.159778Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c1b6aaf2-5d8a-4222-9b56-ddf0749832a9", "created": "2026-01-27T05:13:02.160523Z", "modified": "2026-01-27T05:13:02.160523Z", "relationship_type": "indicates", "source_ref": "indicator--14114ee3-7f2c-4318-852d-acacdab27415", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3f1ab9-601c-4811-894e-746b7ad2b4d0", "created": "2026-01-27T05:13:02.16071Z", "modified": "2026-01-27T05:13:02.16071Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='billing.chyldmonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.16071Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--821c096e-62f7-4893-8838-c3164c9e96a5", "created": "2026-01-27T05:13:02.161479Z", "modified": "2026-01-27T05:13:02.161479Z", "relationship_type": "indicates", "source_ref": "indicator--4d3f1ab9-601c-4811-894e-746b7ad2b4d0", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7818437e-072c-47ec-a84e-242d8eb1ee12", "created": "2026-01-27T05:13:02.16167Z", "modified": "2026-01-27T05:13:02.16167Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='onespy-in-d.s3.eu-central-1.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.16167Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ebb3b1c6-c171-4014-bbd4-bc73157c1b65", "created": "2026-01-27T05:13:02.162399Z", "modified": "2026-01-27T05:13:02.162399Z", "relationship_type": "indicates", "source_ref": "indicator--7818437e-072c-47ec-a84e-242d8eb1ee12", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6946e5fe-0ead-440b-a027-3d09614f13fd", "created": "2026-01-27T05:13:02.162574Z", "modified": "2026-01-27T05:13:02.162574Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android-apps.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.162574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8e650ef-d838-47e4-9e53-a5210642ec62", "created": "2026-01-27T05:13:02.163275Z", "modified": "2026-01-27T05:13:02.163275Z", "relationship_type": "indicates", "source_ref": "indicator--6946e5fe-0ead-440b-a027-3d09614f13fd", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f12ee1-8781-4ef9-b97d-8d63f60bc80f", "created": "2026-01-27T05:13:02.163451Z", "modified": "2026-01-27T05:13:02.163451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='34a5ac46eb4168e04ea8c831c0ca9767242f0a4c1e95f9b33424a84b3492e1fc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.163451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--888e4e70-2414-4347-ae19-0ef7993ab155", "created": "2026-01-27T05:13:02.164331Z", "modified": "2026-01-27T05:13:02.164331Z", "relationship_type": "indicates", "source_ref": "indicator--31f12ee1-8781-4ef9-b97d-8d63f60bc80f", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24884939-6b8a-41f5-8848-5d0a337ea581", "created": "2026-01-27T05:13:02.16451Z", "modified": "2026-01-27T05:13:02.16451Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='a4208ab96617742bde0a508cfe53ee6ebaa68ea6c68153c73dd4b58bc7d10d4a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.16451Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cec2eb2d-4e6a-4381-a8e7-c96a4b17ba9c", "created": "2026-01-27T05:13:02.165359Z", "modified": "2026-01-27T05:13:02.165359Z", "relationship_type": "indicates", "source_ref": "indicator--24884939-6b8a-41f5-8848-5d0a337ea581", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ba50a7-2603-4ac2-89e2-f9de1e302c3b", "created": "2026-01-27T05:13:02.165537Z", "modified": "2026-01-27T05:13:02.165537Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='266eb1ee254175bc2b1f50f0e2d5d15fb5cd91502dcfc8a44f85c5d7a72a17e5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.165537Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--730388dd-cb89-4129-89d5-0fd39c2ba2db", "created": "2026-01-27T05:13:02.1665Z", "modified": "2026-01-27T05:13:02.1665Z", "relationship_type": "indicates", "source_ref": "indicator--28ba50a7-2603-4ac2-89e2-f9de1e302c3b", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d0f2b4-d56a-41a4-af7a-0d8658d47ca9", "created": "2026-01-27T05:13:02.166677Z", "modified": "2026-01-27T05:13:02.166677Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='b236ec0502fc570bbba386c8f6f19632ccf2d30164c030fd3d86fa230ecef316']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.166677Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4785f614-ca1c-4fa9-a4bb-922236f69e66", "created": "2026-01-27T05:13:02.16752Z", "modified": "2026-01-27T05:13:02.16752Z", "relationship_type": "indicates", "source_ref": "indicator--12d0f2b4-d56a-41a4-af7a-0d8658d47ca9", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f4c8dc-201e-4f12-a13d-a84834827dd0", "created": "2026-01-27T05:13:02.167696Z", "modified": "2026-01-27T05:13:02.167696Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='917e29ff91324a6c3630f0eb392a6d1a5c394d7112b35ef29e7cc0269e4c1445']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.167696Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--390a5fbb-ca68-4eca-bf2c-5ae9241879cf", "created": "2026-01-27T05:13:02.168534Z", "modified": "2026-01-27T05:13:02.168534Z", "relationship_type": "indicates", "source_ref": "indicator--64f4c8dc-201e-4f12-a13d-a84834827dd0", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd418e1f-f3b3-43c1-a2ad-3ad9e5e45d51", "created": "2026-01-27T05:13:02.168719Z", "modified": "2026-01-27T05:13:02.168719Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='72590b59664bf215bd407f46b5296cdd33db7721a77f5e80d23f61b73ce984d3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.168719Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--395eb53e-89c9-429b-9197-89d441593005", "created": "2026-01-27T05:13:02.16956Z", "modified": "2026-01-27T05:13:02.16956Z", "relationship_type": "indicates", "source_ref": "indicator--dd418e1f-f3b3-43c1-a2ad-3ad9e5e45d51", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71980255-48bf-49c9-9eab-ff10d5b3936f", "created": "2026-01-27T05:13:02.169742Z", "modified": "2026-01-27T05:13:02.169742Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.system.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.169742Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f25cc64-8dac-4295-a90a-dfb30a258cd3", "created": "2026-01-27T05:13:02.170422Z", "modified": "2026-01-27T05:13:02.170422Z", "relationship_type": "indicates", "source_ref": "indicator--71980255-48bf-49c9-9eab-ff10d5b3936f", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a320c81-cf15-450f-935c-4b9d139a3c56", "created": "2026-01-27T05:13:02.170596Z", "modified": "2026-01-27T05:13:02.170596Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.android.settings.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.170596Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--afe8ae90-a2da-4ec3-aacb-14ab5e3f9ea5", "created": "2026-01-27T05:13:02.171267Z", "modified": "2026-01-27T05:13:02.171267Z", "relationship_type": "indicates", "source_ref": "indicator--3a320c81-cf15-450f-935c-4b9d139a3c56", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b5dbb3-d34d-41b5-9923-509b0dc0e783", "created": "2026-01-27T05:13:02.17145Z", "modified": "2026-01-27T05:13:02.17145Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='seC.fqjx.sqBB']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.17145Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f357d0a8-58e4-438e-9b23-bee1c0397f0b", "created": "2026-01-27T05:13:02.172124Z", "modified": "2026-01-27T05:13:02.172124Z", "relationship_type": "indicates", "source_ref": "indicator--a8b5dbb3-d34d-41b5-9923-509b0dc0e783", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d939bc37-4bcc-4bc7-bdf3-de13ce4aa249", "created": "2026-01-27T05:13:02.172299Z", "modified": "2026-01-27T05:13:02.172299Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qwertyuiop.asdfghjkl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.172299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--74316217-0668-4033-bec5-918eac14f014", "created": "2026-01-27T05:13:02.17298Z", "modified": "2026-01-27T05:13:02.17298Z", "relationship_type": "indicates", "source_ref": "indicator--d939bc37-4bcc-4bc7-bdf3-de13ce4aa249", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3448466-848d-4108-81ef-ca4d3786dbc7", "created": "2026-01-27T05:13:02.173157Z", "modified": "2026-01-27T05:13:02.173157Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E458DC7CD8928A41865F502A884F0D51309E0BEF']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.173157Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6365d28e-1735-45fe-b530-bae2c3a02f14", "created": "2026-01-27T05:13:02.173955Z", "modified": "2026-01-27T05:13:02.173955Z", "relationship_type": "indicates", "source_ref": "indicator--e3448466-848d-4108-81ef-ca4d3786dbc7", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890d52ed-b42c-4911-9597-85a5d0543c35", "created": "2026-01-27T05:13:02.17413Z", "modified": "2026-01-27T05:13:02.17413Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E7D395DF3B8077C733D9BE67D841FDF271F49406']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.17413Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--64d1d345-ba32-42ff-9347-03221f4a91e2", "created": "2026-01-27T05:13:02.175034Z", "modified": "2026-01-27T05:13:02.175034Z", "relationship_type": "indicates", "source_ref": "indicator--890d52ed-b42c-4911-9597-85a5d0543c35", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524945f5-f5f8-49b3-8bcc-c8713a967f69", "created": "2026-01-27T05:13:02.175217Z", "modified": "2026-01-27T05:13:02.175217Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='0FB6643902E891C230F6E6662083442EEA1F16CE']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.175217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1810eebc-e14b-4351-8d60-00959e740714", "created": "2026-01-27T05:13:02.176006Z", "modified": "2026-01-27T05:13:02.176006Z", "relationship_type": "indicates", "source_ref": "indicator--524945f5-f5f8-49b3-8bcc-c8713a967f69", "target_ref": "malware--fb206d97-d996-478d-8739-dc9f9d103165"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e9776d27-2783-4f27-aaf2-d7729add75ff", "created": "2026-01-27T05:13:02.176215Z", "modified": "2026-01-27T05:13:02.176215Z", "name": "Android007", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187be4c1-1853-4a4e-bedc-a558dbe42af4", "created": "2026-01-27T05:13:02.176407Z", "modified": "2026-01-27T05:13:02.176407Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='android007.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.176407Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--069f60ca-1cd0-4162-bfe7-a9a5fdddb4e8", "created": "2026-01-27T05:13:02.177145Z", "modified": "2026-01-27T05:13:02.177145Z", "relationship_type": "indicates", "source_ref": "indicator--187be4c1-1853-4a4e-bedc-a558dbe42af4", "target_ref": "malware--e9776d27-2783-4f27-aaf2-d7729add75ff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fad528a-91ca-4e64-9b41-15a65581012e", "created": "2026-01-27T05:13:02.177344Z", "modified": "2026-01-27T05:13:02.177344Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.android007.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.177344Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--58653335-2fb4-4f89-af27-eaa948cf15bd", "created": "2026-01-27T05:13:02.178056Z", "modified": "2026-01-27T05:13:02.178056Z", "relationship_type": "indicates", "source_ref": "indicator--7fad528a-91ca-4e64-9b41-15a65581012e", "target_ref": "malware--e9776d27-2783-4f27-aaf2-d7729add75ff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7aca63-20c7-4abe-b1ae-8b6e03d6afa2", "created": "2026-01-27T05:13:02.17824Z", "modified": "2026-01-27T05:13:02.17824Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='portal.android007.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.17824Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c113b5fd-2705-4d8a-a499-6ce55a5d6ed4", "created": "2026-01-27T05:13:02.178938Z", "modified": "2026-01-27T05:13:02.178938Z", "relationship_type": "indicates", "source_ref": "indicator--ea7aca63-20c7-4abe-b1ae-8b6e03d6afa2", "target_ref": "malware--e9776d27-2783-4f27-aaf2-d7729add75ff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f2eedb-4177-4af2-acb0-054cc24f7c3d", "created": "2026-01-27T05:13:02.179117Z", "modified": "2026-01-27T05:13:02.179117Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spybunker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.179117Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3a36f701-6c19-4a60-a012-4d03ef46b58b", "created": "2026-01-27T05:13:02.179793Z", "modified": "2026-01-27T05:13:02.179793Z", "relationship_type": "indicates", "source_ref": "indicator--18f2eedb-4177-4af2-acb0-054cc24f7c3d", "target_ref": "malware--e9776d27-2783-4f27-aaf2-d7729add75ff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aa20ee-84a4-425c-b83b-6fb96e0408b7", "created": "2026-01-27T05:13:02.179974Z", "modified": "2026-01-27T05:13:02.179974Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.spybunker.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.179974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f6947839-2399-4d45-afd7-d81e8648f1ad", "created": "2026-01-27T05:13:02.180638Z", "modified": "2026-01-27T05:13:02.180638Z", "relationship_type": "indicates", "source_ref": "indicator--c5aa20ee-84a4-425c-b83b-6fb96e0408b7", "target_ref": "malware--e9776d27-2783-4f27-aaf2-d7729add75ff"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a22eb2a4-77b2-475f-a00a-421dd2471803", "created": "2026-01-27T05:13:02.180832Z", "modified": "2026-01-27T05:13:02.180832Z", "name": "RioSPY", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f58fae3-6449-4017-b865-fffa8d23c841", "created": "2026-01-27T05:13:02.181006Z", "modified": "2026-01-27T05:13:02.181006Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.riospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.181006Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eab40b6e-e85d-4700-8dfd-db8f8086c09b", "created": "2026-01-27T05:13:02.181675Z", "modified": "2026-01-27T05:13:02.181675Z", "relationship_type": "indicates", "source_ref": "indicator--8f58fae3-6449-4017-b865-fffa8d23c841", "target_ref": "malware--a22eb2a4-77b2-475f-a00a-421dd2471803"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c8990b-7461-4a9b-9e00-7626b1889c39", "created": "2026-01-27T05:13:02.181875Z", "modified": "2026-01-27T05:13:02.181875Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='riospy.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.181875Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bae25e3f-5889-485b-994a-c69e0db5139e", "created": "2026-01-27T05:13:02.182538Z", "modified": "2026-01-27T05:13:02.182538Z", "relationship_type": "indicates", "source_ref": "indicator--b2c8990b-7461-4a9b-9e00-7626b1889c39", "target_ref": "malware--a22eb2a4-77b2-475f-a00a-421dd2471803"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80", "created": "2026-01-27T05:13:02.182717Z", "modified": "2026-01-27T05:13:02.182717Z", "name": "WheresMyDroid", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8538ef2-00be-4c3f-a2f4-c65adfbcc7f1", "created": "2026-01-27T05:13:02.182974Z", "modified": "2026-01-27T05:13:02.182974Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wmdcommander.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.182974Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--af5aa20f-4f2f-4861-ac8e-8af4acb917b2", "created": "2026-01-27T05:13:02.183826Z", "modified": "2026-01-27T05:13:02.183826Z", "relationship_type": "indicates", "source_ref": "indicator--b8538ef2-00be-4c3f-a2f4-c65adfbcc7f1", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c381d959-940b-43ff-8b87-80f339e882e3", "created": "2026-01-27T05:13:02.18401Z", "modified": "2026-01-27T05:13:02.18401Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wheresmydroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.18401Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c495199e-1fd3-4556-8d67-ead97de30239", "created": "2026-01-27T05:13:02.184681Z", "modified": "2026-01-27T05:13:02.184681Z", "relationship_type": "indicates", "source_ref": "indicator--c381d959-940b-43ff-8b87-80f339e882e3", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8b3a1f-b1de-4155-a3ce-d797b7e3dea4", "created": "2026-01-27T05:13:02.184876Z", "modified": "2026-01-27T05:13:02.184876Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.wheresmydroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.184876Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa1b77cd-410e-4ecf-a72b-78db50a20139", "created": "2026-01-27T05:13:02.18556Z", "modified": "2026-01-27T05:13:02.18556Z", "relationship_type": "indicates", "source_ref": "indicator--9b8b3a1f-b1de-4155-a3ce-d797b7e3dea4", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6722db-1310-4419-b304-e33bf009805e", "created": "2026-01-27T05:13:02.185736Z", "modified": "2026-01-27T05:13:02.185736Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wmdcommander.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.185736Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42ef391e-0f88-4db1-844b-683479aa69d4", "created": "2026-01-27T05:13:02.186436Z", "modified": "2026-01-27T05:13:02.186436Z", "relationship_type": "indicates", "source_ref": "indicator--3d6722db-1310-4419-b304-e33bf009805e", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed42335-8d6b-4e60-8ca4-0d021effed43", "created": "2026-01-27T05:13:02.186621Z", "modified": "2026-01-27T05:13:02.186621Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.186621Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6670ce41-a6fb-4ec2-87b3-7107e804cc91", "created": "2026-01-27T05:13:02.187468Z", "modified": "2026-01-27T05:13:02.187468Z", "relationship_type": "indicates", "source_ref": "indicator--2ed42335-8d6b-4e60-8ca4-0d021effed43", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5678f48-215b-4c6b-a5fb-21d1d6dd9872", "created": "2026-01-27T05:13:02.187643Z", "modified": "2026-01-27T05:13:02.187643Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='784d9b9a88a2ce953b5bf25873af3bf3758198dd4cbfa3f51b06e5ab98a9b2f7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.187643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bf94f651-bd5f-4daa-8aeb-4bb350b44be5", "created": "2026-01-27T05:13:02.188483Z", "modified": "2026-01-27T05:13:02.188483Z", "relationship_type": "indicates", "source_ref": "indicator--c5678f48-215b-4c6b-a5fb-21d1d6dd9872", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49edd1b1-7a70-4f70-8321-1a0c1515f089", "created": "2026-01-27T05:13:02.188658Z", "modified": "2026-01-27T05:13:02.188658Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.188658Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30ed915c-eb7e-43dd-8b7f-75f3463e1245", "created": "2026-01-27T05:13:02.18951Z", "modified": "2026-01-27T05:13:02.18951Z", "relationship_type": "indicates", "source_ref": "indicator--49edd1b1-7a70-4f70-8321-1a0c1515f089", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e596f937-b60e-4ed5-9eaa-ae2b6e86df9e", "created": "2026-01-27T05:13:02.189688Z", "modified": "2026-01-27T05:13:02.189688Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.alienmanfc6.wheresmyandroid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.189688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba45e961-ae20-4472-b505-871c8ae5532f", "created": "2026-01-27T05:13:02.190391Z", "modified": "2026-01-27T05:13:02.190391Z", "relationship_type": "indicates", "source_ref": "indicator--e596f937-b60e-4ed5-9eaa-ae2b6e86df9e", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da79943-1c55-484a-b64d-2dc2cb5a7bd1", "created": "2026-01-27T05:13:02.19058Z", "modified": "2026-01-27T05:13:02.19058Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F8FC21D0709C3C0A3E4FBA81D24AB50979F25C19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.19058Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ea1f4eb-ca16-47f8-a012-bec874248a38", "created": "2026-01-27T05:13:02.191368Z", "modified": "2026-01-27T05:13:02.191368Z", "relationship_type": "indicates", "source_ref": "indicator--9da79943-1c55-484a-b64d-2dc2cb5a7bd1", "target_ref": "malware--d5c1b613-1822-4762-b66a-e3dc52680b80"}, {"type": "malware", "spec_version": "2.1", "id": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b", "created": "2026-01-27T05:13:02.191549Z", "modified": "2026-01-27T05:13:02.191549Z", "name": "WiseMo", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8357493a-c394-4ae9-b06a-4e77abe8e2be", "created": "2026-01-27T05:13:02.19172Z", "modified": "2026-01-27T05:13:02.19172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.19172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1f88fd43-8c18-46f1-bc2b-d7cf0fee853f", "created": "2026-01-27T05:13:02.192579Z", "modified": "2026-01-27T05:13:02.192579Z", "relationship_type": "indicates", "source_ref": "indicator--8357493a-c394-4ae9-b06a-4e77abe8e2be", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28690da-2e9b-43b7-bb7b-3b9c22333605", "created": "2026-01-27T05:13:02.192775Z", "modified": "2026-01-27T05:13:02.192775Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud1.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.192775Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc6f33ae-6554-440d-983f-60353fecbb63", "created": "2026-01-27T05:13:02.193498Z", "modified": "2026-01-27T05:13:02.193498Z", "relationship_type": "indicates", "source_ref": "indicator--c28690da-2e9b-43b7-bb7b-3b9c22333605", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ca44b3-894d-4bed-8fda-2128e2546dce", "created": "2026-01-27T05:13:02.193687Z", "modified": "2026-01-27T05:13:02.193687Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtracker.fortess.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.193687Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab9a1ee1-bfd1-425a-9c0a-5849f11ecc7a", "created": "2026-01-27T05:13:02.19439Z", "modified": "2026-01-27T05:13:02.19439Z", "relationship_type": "indicates", "source_ref": "indicator--92ca44b3-894d-4bed-8fda-2128e2546dce", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbbda25-49be-4c71-8069-31a9bff10855", "created": "2026-01-27T05:13:02.194569Z", "modified": "2026-01-27T05:13:02.194569Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.194569Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d5dec319-920e-4e77-99a9-b88133340a59", "created": "2026-01-27T05:13:02.195254Z", "modified": "2026-01-27T05:13:02.195254Z", "relationship_type": "indicates", "source_ref": "indicator--4fbbda25-49be-4c71-8069-31a9bff10855", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe25b48-c047-471b-b7ab-cf13895a5f47", "created": "2026-01-27T05:13:02.195432Z", "modified": "2026-01-27T05:13:02.195432Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.195432Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7755ed74-4803-4000-91c4-fb6947856262", "created": "2026-01-27T05:13:02.196121Z", "modified": "2026-01-27T05:13:02.196121Z", "relationship_type": "indicates", "source_ref": "indicator--abe25b48-c047-471b-b7ab-cf13895a5f47", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc26d662-4a3a-4316-bf65-cd21b4bd45fd", "created": "2026-01-27T05:13:02.196301Z", "modified": "2026-01-27T05:13:02.196301Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wisemo.wsmguest.v18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.196301Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--138be31b-0e59-49ef-a90a-05acd207110a", "created": "2026-01-27T05:13:02.197Z", "modified": "2026-01-27T05:13:02.197Z", "relationship_type": "indicates", "source_ref": "indicator--fc26d662-4a3a-4316-bf65-cd21b4bd45fd", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7036216-8faa-46ba-b135-e67532a518cd", "created": "2026-01-27T05:13:02.197177Z", "modified": "2026-01-27T05:13:02.197177Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wisemo.host.v10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.197177Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0111e89-a230-4fa8-a936-1e6e3b8a99b9", "created": "2026-01-27T05:13:02.19786Z", "modified": "2026-01-27T05:13:02.19786Z", "relationship_type": "indicates", "source_ref": "indicator--c7036216-8faa-46ba-b135-e67532a518cd", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53baf447-794e-462c-8447-4894c82b7646", "created": "2026-01-27T05:13:02.198039Z", "modified": "2026-01-27T05:13:02.198039Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B48840CBF93379410172B4B85989624D2B33D59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.198039Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c3ade536-8120-4ee0-a5d0-3901f70cfcb4", "created": "2026-01-27T05:13:02.198836Z", "modified": "2026-01-27T05:13:02.198836Z", "relationship_type": "indicates", "source_ref": "indicator--53baf447-794e-462c-8447-4894c82b7646", "target_ref": "malware--e7ff3a9b-ce28-43ea-a6dd-945aae06fb8b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985", "created": "2026-01-27T05:13:02.199012Z", "modified": "2026-01-27T05:13:02.199012Z", "name": "FindMyKids", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6846b06f-df25-40d9-bf18-90626c1d9a9a", "created": "2026-01-27T05:13:02.199184Z", "modified": "2026-01-27T05:13:02.199184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.199184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30e4167c-9d98-4e6a-ab48-220797a29831", "created": "2026-01-27T05:13:02.199909Z", "modified": "2026-01-27T05:13:02.199909Z", "relationship_type": "indicates", "source_ref": "indicator--6846b06f-df25-40d9-bf18-90626c1d9a9a", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f873244-a308-42a1-aea4-2b3a9c323e6b", "created": "2026-01-27T05:13:02.200088Z", "modified": "2026-01-27T05:13:02.200088Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='r.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.200088Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfe06f05-a44d-48a7-92fb-90146516434b", "created": "2026-01-27T05:13:02.200898Z", "modified": "2026-01-27T05:13:02.200898Z", "relationship_type": "indicates", "source_ref": "indicator--6f873244-a308-42a1-aea4-2b3a9c323e6b", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a459ea0-bc67-450d-abbe-30c641abcedf", "created": "2026-01-27T05:13:02.201078Z", "modified": "2026-01-27T05:13:02.201078Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wss.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.201078Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--def5ee38-aedd-4280-a5bc-744e847ae27e", "created": "2026-01-27T05:13:02.201769Z", "modified": "2026-01-27T05:13:02.201769Z", "relationship_type": "indicates", "source_ref": "indicator--2a459ea0-bc67-450d-abbe-30c641abcedf", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e4db9e-7a4d-437a-87b8-06f00ab4d1c9", "created": "2026-01-27T05:13:02.201949Z", "modified": "2026-01-27T05:13:02.201949Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='where-is-my-children.firebase.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.201949Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bcdcb152-5a35-4d52-aafa-3a01eb4e82cc", "created": "2026-01-27T05:13:02.202658Z", "modified": "2026-01-27T05:13:02.202658Z", "relationship_type": "indicates", "source_ref": "indicator--37e4db9e-7a4d-437a-87b8-06f00ab4d1c9", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb108e93-d78a-4373-be6d-f46dc117d605", "created": "2026-01-27T05:13:02.202857Z", "modified": "2026-01-27T05:13:02.202857Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.202857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db844051-4e7c-46c8-bdf2-e91d09d8a3ef", "created": "2026-01-27T05:13:02.203524Z", "modified": "2026-01-27T05:13:02.203524Z", "relationship_type": "indicates", "source_ref": "indicator--fb108e93-d78a-4373-be6d-f46dc117d605", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90c413e-554c-406c-8e78-4a4a6ddd3e06", "created": "2026-01-27T05:13:02.203709Z", "modified": "2026-01-27T05:13:02.203709Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='fmk.god-xc.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.203709Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2af6203e-cff7-45a5-b7b1-b5045064a83b", "created": "2026-01-27T05:13:02.204415Z", "modified": "2026-01-27T05:13:02.204415Z", "relationship_type": "indicates", "source_ref": "indicator--f90c413e-554c-406c-8e78-4a4a6ddd3e06", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1279ea-23b1-4955-b816-ab5454aada3f", "created": "2026-01-27T05:13:02.204592Z", "modified": "2026-01-27T05:13:02.204592Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.findmykids.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.204592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--236a896f-93a3-4965-be00-b03bff9150ed", "created": "2026-01-27T05:13:02.205285Z", "modified": "2026-01-27T05:13:02.205285Z", "relationship_type": "indicates", "source_ref": "indicator--cf1279ea-23b1-4955-b816-ab5454aada3f", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3db6bca-4c6b-40c0-be45-e1031dc74532", "created": "2026-01-27T05:13:02.205459Z", "modified": "2026-01-27T05:13:02.205459Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.findmykids.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.205459Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c81713d-7d4f-4932-b444-a0bc39b6447b", "created": "2026-01-27T05:13:02.206143Z", "modified": "2026-01-27T05:13:02.206143Z", "relationship_type": "indicates", "source_ref": "indicator--f3db6bca-4c6b-40c0-be45-e1031dc74532", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdec940-0c5c-4518-b1c5-9652dbc15f21", "created": "2026-01-27T05:13:02.20632Z", "modified": "2026-01-27T05:13:02.20632Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B48840CBF93379410172B4B85989624D2B33D59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.20632Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a42c362d-6ddf-40fa-94f5-7e9a53763b4f", "created": "2026-01-27T05:13:02.207116Z", "modified": "2026-01-27T05:13:02.207116Z", "relationship_type": "indicates", "source_ref": "indicator--2bdec940-0c5c-4518-b1c5-9652dbc15f21", "target_ref": "malware--0c211bc8-246d-4364-ad3b-e818dcd82985"}, {"type": "malware", "spec_version": "2.1", "id": "malware--50255211-ed09-4c02-b7db-2e8699948fb3", "created": "2026-01-27T05:13:02.207295Z", "modified": "2026-01-27T05:13:02.207295Z", "name": "MagMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7f2934-9fb5-489e-bdc1-f397e1281e2e", "created": "2026-01-27T05:13:02.207468Z", "modified": "2026-01-27T05:13:02.207468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.207468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9f937f6-8369-4d40-aaa1-81f2f5f75182", "created": "2026-01-27T05:13:02.208202Z", "modified": "2026-01-27T05:13:02.208202Z", "relationship_type": "indicates", "source_ref": "indicator--fc7f2934-9fb5-489e-bdc1-f397e1281e2e", "target_ref": "malware--50255211-ed09-4c02-b7db-2e8699948fb3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede4b13b-3893-4d10-af35-75f62419c310", "created": "2026-01-27T05:13:02.208406Z", "modified": "2026-01-27T05:13:02.208406Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.208406Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bc0c18dc-70d7-4325-896b-b8fc8e848e9b", "created": "2026-01-27T05:13:02.209235Z", "modified": "2026-01-27T05:13:02.209235Z", "relationship_type": "indicates", "source_ref": "indicator--ede4b13b-3893-4d10-af35-75f62419c310", "target_ref": "malware--50255211-ed09-4c02-b7db-2e8699948fb3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5593fb-f485-4f90-93d1-c08a1cd14992", "created": "2026-01-27T05:13:02.209415Z", "modified": "2026-01-27T05:13:02.209415Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ue.maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.209415Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70917b14-6fba-4d82-96b9-c701dfc004c2", "created": "2026-01-27T05:13:02.210126Z", "modified": "2026-01-27T05:13:02.210126Z", "relationship_type": "indicates", "source_ref": "indicator--5c5593fb-f485-4f90-93d1-c08a1cd14992", "target_ref": "malware--50255211-ed09-4c02-b7db-2e8699948fb3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c4dbe9-6e04-4d71-8048-e42979fbf1fa", "created": "2026-01-27T05:13:02.210304Z", "modified": "2026-01-27T05:13:02.210304Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf.maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.210304Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--563228b7-0b37-49d6-b18e-d1210ecb34d3", "created": "2026-01-27T05:13:02.210996Z", "modified": "2026-01-27T05:13:02.210996Z", "relationship_type": "indicates", "source_ref": "indicator--a8c4dbe9-6e04-4d71-8048-e42979fbf1fa", "target_ref": "malware--50255211-ed09-4c02-b7db-2e8699948fb3"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b67a79-6db2-47df-afca-dd061e59776c", "created": "2026-01-27T05:13:02.211172Z", "modified": "2026-01-27T05:13:02.211172Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='maglook.eu']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.211172Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b4b2584-0826-48f8-bd72-0ea52b303b16", "created": "2026-01-27T05:13:02.211845Z", "modified": "2026-01-27T05:13:02.211845Z", "relationship_type": "indicates", "source_ref": "indicator--f1b67a79-6db2-47df-afca-dd061e59776c", "target_ref": "malware--50255211-ed09-4c02-b7db-2e8699948fb3"}, {"type": "malware", "spec_version": "2.1", "id": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9", "created": "2026-01-27T05:13:02.212022Z", "modified": "2026-01-27T05:13:02.212022Z", "name": "BrunoEspiao", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db94c769-d183-40a0-9b85-90b90d1711e9", "created": "2026-01-27T05:13:02.212199Z", "modified": "2026-01-27T05:13:02.212199Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='back.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.212199Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34b513f3-d86b-4eaa-b840-8a146a2f9158", "created": "2026-01-27T05:13:02.212903Z", "modified": "2026-01-27T05:13:02.212903Z", "relationship_type": "indicates", "source_ref": "indicator--db94c769-d183-40a0-9b85-90b90d1711e9", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d6dc33-13ce-4838-9cb5-a9ac77072f5f", "created": "2026-01-27T05:13:02.213081Z", "modified": "2026-01-27T05:13:02.213081Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.213081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41da0aaa-99ae-4766-ac07-e8ef437e8a0a", "created": "2026-01-27T05:13:02.213774Z", "modified": "2026-01-27T05:13:02.213774Z", "relationship_type": "indicates", "source_ref": "indicator--c2d6dc33-13ce-4838-9cb5-a9ac77072f5f", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17947af0-5741-40fe-8425-5e19bcac42d9", "created": "2026-01-27T05:13:02.213956Z", "modified": "2026-01-27T05:13:02.213956Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.213956Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d5395d2-e1f0-44dd-b7a5-5909036ecab1", "created": "2026-01-27T05:13:02.214639Z", "modified": "2026-01-27T05:13:02.214639Z", "relationship_type": "indicates", "source_ref": "indicator--17947af0-5741-40fe-8425-5e19bcac42d9", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee49f0a9-f8c3-4482-9e85-7774ae5de412", "created": "2026-01-27T05:13:02.214831Z", "modified": "2026-01-27T05:13:02.214831Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='im.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.214831Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed0e8fa1-c3f7-4bdf-9e84-f353ceff3ab9", "created": "2026-01-27T05:13:02.215514Z", "modified": "2026-01-27T05:13:02.215514Z", "relationship_type": "indicates", "source_ref": "indicator--ee49f0a9-f8c3-4482-9e85-7774ae5de412", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ab6ef3-0a90-46fe-b3b0-b0e2f2072d34", "created": "2026-01-27T05:13:02.215688Z", "modified": "2026-01-27T05:13:02.215688Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.215688Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63d313cd-82f4-46d2-beb9-421d1fe2588d", "created": "2026-01-27T05:13:02.216403Z", "modified": "2026-01-27T05:13:02.216403Z", "relationship_type": "indicates", "source_ref": "indicator--08ab6ef3-0a90-46fe-b3b0-b0e2f2072d34", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d338ebfc-a7f8-4bf4-8e06-c9643771ae35", "created": "2026-01-27T05:13:02.216581Z", "modified": "2026-01-27T05:13:02.216581Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc1.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.216581Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d023ff23-cdea-41ce-80fa-66e2343a7b2c", "created": "2026-01-27T05:13:02.217405Z", "modified": "2026-01-27T05:13:02.217405Z", "relationship_type": "indicates", "source_ref": "indicator--d338ebfc-a7f8-4bf4-8e06-c9643771ae35", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42721681-8814-427f-be03-c8dea3de02c4", "created": "2026-01-27T05:13:02.217592Z", "modified": "2026-01-27T05:13:02.217592Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ua.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.217592Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6baf395f-434d-4666-99ca-7150b417af52", "created": "2026-01-27T05:13:02.218301Z", "modified": "2026-01-27T05:13:02.218301Z", "relationship_type": "indicates", "source_ref": "indicator--42721681-8814-427f-be03-c8dea3de02c4", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d6a175-b01a-47c2-9d91-ebffc16c2406", "created": "2026-01-27T05:13:02.218478Z", "modified": "2026-01-27T05:13:02.218478Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ue.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.218478Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a91c5f6-90d5-460d-9e5b-5fd018622b8c", "created": "2026-01-27T05:13:02.219189Z", "modified": "2026-01-27T05:13:02.219189Z", "relationship_type": "indicates", "source_ref": "indicator--66d6a175-b01a-47c2-9d91-ebffc16c2406", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6340154-e0a1-4f6c-ac8a-c2e8fa35f8fc", "created": "2026-01-27T05:13:02.219368Z", "modified": "2026-01-27T05:13:02.219368Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.219368Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fdd44a78-b4b2-416f-b352-6dbcccefc311", "created": "2026-01-27T05:13:02.22007Z", "modified": "2026-01-27T05:13:02.22007Z", "relationship_type": "indicates", "source_ref": "indicator--b6340154-e0a1-4f6c-ac8a-c2e8fa35f8fc", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc02c020-7cd1-4d1f-8490-b70638b8d722", "created": "2026-01-27T05:13:02.220252Z", "modified": "2026-01-27T05:13:02.220252Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='uf1.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.220252Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1addb21-a274-448e-9062-d1c1498d7cbc", "created": "2026-01-27T05:13:02.220953Z", "modified": "2026-01-27T05:13:02.220953Z", "relationship_type": "indicates", "source_ref": "indicator--bc02c020-7cd1-4d1f-8490-b70638b8d722", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11abfcd8-5f06-477e-baa9-27a05a517514", "created": "2026-01-27T05:13:02.221132Z", "modified": "2026-01-27T05:13:02.221132Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ur.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.221132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a9d7cfe4-c255-41bc-b39f-9eceaad07b52", "created": "2026-01-27T05:13:02.221837Z", "modified": "2026-01-27T05:13:02.221837Z", "relationship_type": "indicates", "source_ref": "indicator--11abfcd8-5f06-477e-baa9-27a05a517514", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767f5c2d-7127-4a8c-ade2-9bc15b1496a9", "created": "2026-01-27T05:13:02.222025Z", "modified": "2026-01-27T05:13:02.222025Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.222025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--530d228c-2448-4684-ae8e-900ad19308c7", "created": "2026-01-27T05:13:02.222762Z", "modified": "2026-01-27T05:13:02.222762Z", "relationship_type": "indicates", "source_ref": "indicator--767f5c2d-7127-4a8c-ade2-9bc15b1496a9", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1220d48-f74f-447b-b993-312a71238bd3", "created": "2026-01-27T05:13:02.222952Z", "modified": "2026-01-27T05:13:02.222952Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao2.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.222952Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--94ed69eb-4c84-49dc-976e-007320678274", "created": "2026-01-27T05:13:02.223693Z", "modified": "2026-01-27T05:13:02.223693Z", "relationship_type": "indicates", "source_ref": "indicator--c1220d48-f74f-447b-b993-312a71238bd3", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0c9abe-f5f4-44ac-8608-75d586d7266d", "created": "2026-01-27T05:13:02.224003Z", "modified": "2026-01-27T05:13:02.224003Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='brunoespiao.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.224003Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ae546d8a-57f9-4abe-b40d-8727ffe9c301", "created": "2026-01-27T05:13:02.224729Z", "modified": "2026-01-27T05:13:02.224729Z", "relationship_type": "indicates", "source_ref": "indicator--ab0c9abe-f5f4-44ac-8608-75d586d7266d", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b996ec5f-fc64-4ecd-bb0c-46620bab1c7c", "created": "2026-01-27T05:13:02.224935Z", "modified": "2026-01-27T05:13:02.224935Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sbt.tv']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.224935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05207c9b-9bd4-4243-be49-360f95985669", "created": "2026-01-27T05:13:02.226198Z", "modified": "2026-01-27T05:13:02.226198Z", "relationship_type": "indicates", "source_ref": "indicator--b996ec5f-fc64-4ecd-bb0c-46620bab1c7c", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e82286c-55c7-4599-842a-95eb1d0e159d", "created": "2026-01-27T05:13:02.226384Z", "modified": "2026-01-27T05:13:02.226384Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3b2749bfd91ab0a27ef988b84aeafbca81d4d9f3d63ab7e594655b266f27a30f']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.226384Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d48af23a-b792-4b04-b24f-c2b1e33e9757", "created": "2026-01-27T05:13:02.22725Z", "modified": "2026-01-27T05:13:02.22725Z", "relationship_type": "indicates", "source_ref": "indicator--9e82286c-55c7-4599-842a-95eb1d0e159d", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168724bb-2e7e-4b8c-9525-e6895d5a13fa", "created": "2026-01-27T05:13:02.227431Z", "modified": "2026-01-27T05:13:02.227431Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='551d61685f69372204f69da1394b4155a4f732d5a4ff5bdb67f11ae7a8e7ee50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.227431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--855c1284-42ff-4f84-8ce6-cd652c4d4ae7", "created": "2026-01-27T05:13:02.228283Z", "modified": "2026-01-27T05:13:02.228283Z", "relationship_type": "indicates", "source_ref": "indicator--168724bb-2e7e-4b8c-9525-e6895d5a13fa", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dafc0b7-7201-45cc-abbd-8abfd28b1bf2", "created": "2026-01-27T05:13:02.228465Z", "modified": "2026-01-27T05:13:02.228465Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.moxlndmp.uhzhgzjh']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.228465Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75c1d566-1ba1-46c1-8376-064fd962a1b8", "created": "2026-01-27T05:13:02.229147Z", "modified": "2026-01-27T05:13:02.229147Z", "relationship_type": "indicates", "source_ref": "indicator--9dafc0b7-7201-45cc-abbd-8abfd28b1bf2", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851fbb94-1b9f-4e4b-b4f2-7401b8d4fda2", "created": "2026-01-27T05:13:02.229329Z", "modified": "2026-01-27T05:13:02.229329Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.fzvsdrtb.qamlhxri']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.229329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--62fb1fd4-3863-43c3-a621-35ffb5b5915a", "created": "2026-01-27T05:13:02.230006Z", "modified": "2026-01-27T05:13:02.230006Z", "relationship_type": "indicates", "source_ref": "indicator--851fbb94-1b9f-4e4b-b4f2-7401b8d4fda2", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4145a182-e9aa-4609-a44b-50c1cf0b056a", "created": "2026-01-27T05:13:02.230183Z", "modified": "2026-01-27T05:13:02.230183Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.thaxygpc.xjsjobpn']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.230183Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eca64c84-02a6-40ad-a48a-b551ea667134", "created": "2026-01-27T05:13:02.230848Z", "modified": "2026-01-27T05:13:02.230848Z", "relationship_type": "indicates", "source_ref": "indicator--4145a182-e9aa-4609-a44b-50c1cf0b056a", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcdbb56-5f9a-46d6-ad5c-c344c77ebc65", "created": "2026-01-27T05:13:02.231025Z", "modified": "2026-01-27T05:13:02.231025Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.nhevvtmt.thinkquo']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.231025Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c36a8a78-98fa-4893-9f9b-6964851e0584", "created": "2026-01-27T05:13:02.23168Z", "modified": "2026-01-27T05:13:02.23168Z", "relationship_type": "indicates", "source_ref": "indicator--bdcdbb56-5f9a-46d6-ad5c-c344c77ebc65", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4287d889-7994-4823-af49-7f363debd2b8", "created": "2026-01-27T05:13:02.231874Z", "modified": "2026-01-27T05:13:02.231874Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='159B64B29BC8842ACDF8022B70730B13E288044B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.231874Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e5f7ac88-41f3-40d8-b0ec-e412a2f1b7bc", "created": "2026-01-27T05:13:02.232633Z", "modified": "2026-01-27T05:13:02.232633Z", "relationship_type": "indicates", "source_ref": "indicator--4287d889-7994-4823-af49-7f363debd2b8", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afaf97ef-f03b-40b9-a160-29610a6c6d33", "created": "2026-01-27T05:13:02.232821Z", "modified": "2026-01-27T05:13:02.232821Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='8E38D577187544D4E0F747CAEF32B47FD15B07E5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.232821Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3847f263-faec-4e2e-92cf-82d71b551b7f", "created": "2026-01-27T05:13:02.233588Z", "modified": "2026-01-27T05:13:02.233588Z", "relationship_type": "indicates", "source_ref": "indicator--afaf97ef-f03b-40b9-a160-29610a6c6d33", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2beaa894-60d9-496e-a1e5-a2e4bc4e0b03", "created": "2026-01-27T05:13:02.233777Z", "modified": "2026-01-27T05:13:02.233777Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='6041F01561EC43309CCC8452719C4F515C32F3C2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.233777Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bfcbb68e-7b86-40da-9094-6bb6cdc7d93d", "created": "2026-01-27T05:13:02.234659Z", "modified": "2026-01-27T05:13:02.234659Z", "relationship_type": "indicates", "source_ref": "indicator--2beaa894-60d9-496e-a1e5-a2e4bc4e0b03", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1548f47-41a9-4e52-ab19-5b95cb58f1a5", "created": "2026-01-27T05:13:02.234857Z", "modified": "2026-01-27T05:13:02.234857Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='A1AA4CD5B6CDBD906E3B27A7D1FA42EA2416ADC3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.234857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--17d89a82-7c4a-4eb4-8af5-810848ce71cf", "created": "2026-01-27T05:13:02.235625Z", "modified": "2026-01-27T05:13:02.235625Z", "relationship_type": "indicates", "source_ref": "indicator--b1548f47-41a9-4e52-ab19-5b95cb58f1a5", "target_ref": "malware--b6bda28f-057d-49a5-8f0d-2e6c46a3a8e9"}, {"type": "malware", "spec_version": "2.1", "id": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8", "created": "2026-01-27T05:13:02.235819Z", "modified": "2026-01-27T05:13:02.235819Z", "name": "Spyone", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9daa9ac8-8f05-40ef-93ee-86a501e60991", "created": "2026-01-27T05:13:02.235995Z", "modified": "2026-01-27T05:13:02.235995Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='pc.spyone.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.235995Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccd44f8f-ab78-4515-95b7-3d6ac71d2c06", "created": "2026-01-27T05:13:02.236662Z", "modified": "2026-01-27T05:13:02.236662Z", "relationship_type": "indicates", "source_ref": "indicator--9daa9ac8-8f05-40ef-93ee-86a501e60991", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360ec74d-0d40-4ab4-ad27-a4d1f9809fb7", "created": "2026-01-27T05:13:02.236863Z", "modified": "2026-01-27T05:13:02.236863Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ur.spyone.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.236863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ed67a52f-838b-4143-aec8-017623c23872", "created": "2026-01-27T05:13:02.237535Z", "modified": "2026-01-27T05:13:02.237535Z", "relationship_type": "indicates", "source_ref": "indicator--360ec74d-0d40-4ab4-ad27-a4d1f9809fb7", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0236f83c-3577-4fd1-a9aa-27e150662747", "created": "2026-01-27T05:13:02.237717Z", "modified": "2026-01-27T05:13:02.237717Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='laucass.forumactif.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.237717Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d76831a-4f28-4440-9cf5-3d319760be25", "created": "2026-01-27T05:13:02.238413Z", "modified": "2026-01-27T05:13:02.238413Z", "relationship_type": "indicates", "source_ref": "indicator--0236f83c-3577-4fd1-a9aa-27e150662747", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90c1db8-c65e-4631-9729-4a1f8edf16f9", "created": "2026-01-27T05:13:02.238588Z", "modified": "2026-01-27T05:13:02.238588Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spyone.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.238588Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db198b7d-af01-4758-8b27-f67cea740eba", "created": "2026-01-27T05:13:02.239258Z", "modified": "2026-01-27T05:13:02.239258Z", "relationship_type": "indicates", "source_ref": "indicator--a90c1db8-c65e-4631-9729-4a1f8edf16f9", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d8d266-0dc7-4fe7-8770-9f30703604ba", "created": "2026-01-27T05:13:02.239433Z", "modified": "2026-01-27T05:13:02.239433Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='11111.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.239433Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36086989-557d-4e84-9ca6-bc7efcc5236a", "created": "2026-01-27T05:13:02.240208Z", "modified": "2026-01-27T05:13:02.240208Z", "relationship_type": "indicates", "source_ref": "indicator--26d8d266-0dc7-4fe7-8770-9f30703604ba", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca14dff3-336e-4029-a9e1-40a02c645cc4", "created": "2026-01-27T05:13:02.240386Z", "modified": "2026-01-27T05:13:02.240386Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.11111.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.240386Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e26c6751-3b4d-4183-b369-ff6f8b110fe1", "created": "2026-01-27T05:13:02.241082Z", "modified": "2026-01-27T05:13:02.241082Z", "relationship_type": "indicates", "source_ref": "indicator--ca14dff3-336e-4029-a9e1-40a02c645cc4", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc779568-6d37-4bd5-b82e-38a34d1fc0e5", "created": "2026-01-27T05:13:02.241267Z", "modified": "2026-01-27T05:13:02.241267Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='4jslg.11111.pl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.241267Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e36bea65-7acc-4dea-b0ca-6e5a559701cb", "created": "2026-01-27T05:13:02.24199Z", "modified": "2026-01-27T05:13:02.24199Z", "relationship_type": "indicates", "source_ref": "indicator--dc779568-6d37-4bd5-b82e-38a34d1fc0e5", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd0bf9a-6e70-4e95-b34a-28adc3897997", "created": "2026-01-27T05:13:02.242171Z", "modified": "2026-01-27T05:13:02.242171Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='e4d7484b888deceefeb17ee346821a0c9d3112dffd5ad57c71f4df7d304580b8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.242171Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f3ac82e7-7970-4a92-9823-72d3ca1d3d08", "created": "2026-01-27T05:13:02.243141Z", "modified": "2026-01-27T05:13:02.243141Z", "relationship_type": "indicates", "source_ref": "indicator--9fd0bf9a-6e70-4e95-b34a-28adc3897997", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14f26da-002c-4d00-9853-5c069c95ddad", "created": "2026-01-27T05:13:02.243319Z", "modified": "2026-01-27T05:13:02.243319Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='137153826c66a28b21ed23a7be8857da69af45fba8a7cd126937674069f03336']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.243319Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85a4ea3f-abed-431c-9fb8-1c2118683077", "created": "2026-01-27T05:13:02.244163Z", "modified": "2026-01-27T05:13:02.244163Z", "relationship_type": "indicates", "source_ref": "indicator--a14f26da-002c-4d00-9853-5c069c95ddad", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c88e77-35c2-4178-986d-9cf2ae1393e8", "created": "2026-01-27T05:13:02.244341Z", "modified": "2026-01-27T05:13:02.244341Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='c816d7513cb36becac080698ee3937bccfc5f8f3b2b0a436c8b46f7f0635197b']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.244341Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21439dfb-7620-4eb1-b940-a2d8a9ad5aba", "created": "2026-01-27T05:13:02.24519Z", "modified": "2026-01-27T05:13:02.24519Z", "relationship_type": "indicates", "source_ref": "indicator--a5c88e77-35c2-4178-986d-9cf2ae1393e8", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272ac64c-bc48-44fb-9e3a-8d0c9cdd5323", "created": "2026-01-27T05:13:02.245367Z", "modified": "2026-01-27T05:13:02.245367Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='54583791e1d906c2f77b10feec1d842ddb8afebc14f4ceec0483e89fccd194e9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.245367Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fba11216-0b4a-4f27-9e57-598343e52579", "created": "2026-01-27T05:13:02.246226Z", "modified": "2026-01-27T05:13:02.246226Z", "relationship_type": "indicates", "source_ref": "indicator--272ac64c-bc48-44fb-9e3a-8d0c9cdd5323", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537f5849-81b6-47fa-8977-dc4931a33cea", "created": "2026-01-27T05:13:02.246405Z", "modified": "2026-01-27T05:13:02.246405Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='3d37aa0d8937c4c2e3b1d65afb5be94cf901c4255750c98b4b44489e5455367a']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.246405Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d0be582-cdc8-45a0-bea7-69204cb18ae0", "created": "2026-01-27T05:13:02.247244Z", "modified": "2026-01-27T05:13:02.247244Z", "relationship_type": "indicates", "source_ref": "indicator--537f5849-81b6-47fa-8977-dc4931a33cea", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9978d535-d248-40bd-b658-bcbfa3f1b119", "created": "2026-01-27T05:13:02.247422Z", "modified": "2026-01-27T05:13:02.247422Z", "indicator_types": ["malicious-activity"], "pattern": "[file:hashes.sha256='4bcb6951c5f78c646c19771ff58c2ea749e734ae3fa916f130aeee8e083ca2e4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.247422Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--70395862-c849-4c6d-ab44-7bb400cbf51a", "created": "2026-01-27T05:13:02.248262Z", "modified": "2026-01-27T05:13:02.248262Z", "relationship_type": "indicates", "source_ref": "indicator--9978d535-d248-40bd-b658-bcbfa3f1b119", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a126234-ddce-4db9-97fd-b286e09bf3f0", "created": "2026-01-27T05:13:02.248437Z", "modified": "2026-01-27T05:13:02.248437Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.jgeuhcex.ejcxndak']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.248437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8ff2dde1-5148-434a-9b30-9391f049299f", "created": "2026-01-27T05:13:02.249109Z", "modified": "2026-01-27T05:13:02.249109Z", "relationship_type": "indicates", "source_ref": "indicator--7a126234-ddce-4db9-97fd-b286e09bf3f0", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670dc991-3688-44ca-9640-3661b92f5fcb", "created": "2026-01-27T05:13:02.249284Z", "modified": "2026-01-27T05:13:02.249284Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.eytewqrm.wvdkgmrl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.249284Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--80c94e5d-9c5a-4f5d-bfa0-569b4b16e81e", "created": "2026-01-27T05:13:02.249963Z", "modified": "2026-01-27T05:13:02.249963Z", "relationship_type": "indicates", "source_ref": "indicator--670dc991-3688-44ca-9640-3661b92f5fcb", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f9b39a-159b-45df-ab4b-af66a3fea1ee", "created": "2026-01-27T05:13:02.25014Z", "modified": "2026-01-27T05:13:02.25014Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.epbzrqcg.syzzkuqx']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.25014Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8c71f2a-5f3d-48ce-b26c-1bbe04b94440", "created": "2026-01-27T05:13:02.250812Z", "modified": "2026-01-27T05:13:02.250812Z", "relationship_type": "indicates", "source_ref": "indicator--29f9b39a-159b-45df-ab4b-af66a3fea1ee", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e15bdc1-53d7-4ce3-a975-1a325784b60d", "created": "2026-01-27T05:13:02.250988Z", "modified": "2026-01-27T05:13:02.250988Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.laucass.phonecontrolenabler']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.250988Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ce004bab-1cdf-41db-b162-de8976a3e576", "created": "2026-01-27T05:13:02.251797Z", "modified": "2026-01-27T05:13:02.251797Z", "relationship_type": "indicates", "source_ref": "indicator--4e15bdc1-53d7-4ce3-a975-1a325784b60d", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbe78b0-5344-4896-a1e7-b414a624559f", "created": "2026-01-27T05:13:02.251976Z", "modified": "2026-01-27T05:13:02.251976Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.laucass.phonecontroltarget']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.251976Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0ec0c445-a449-41f6-9a32-fe1fe18bad7c", "created": "2026-01-27T05:13:02.252644Z", "modified": "2026-01-27T05:13:02.252644Z", "relationship_type": "indicates", "source_ref": "indicator--ecbe78b0-5344-4896-a1e7-b414a624559f", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248a7bbb-d095-413f-83a4-00d960728300", "created": "2026-01-27T05:13:02.252839Z", "modified": "2026-01-27T05:13:02.252839Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.laucass.androsmscontrol']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.252839Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56bdf493-ddb4-4a85-a120-e4d10d0ef1aa", "created": "2026-01-27T05:13:02.253518Z", "modified": "2026-01-27T05:13:02.253518Z", "relationship_type": "indicates", "source_ref": "indicator--248a7bbb-d095-413f-83a4-00d960728300", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffb410d-cf82-43ae-9e27-3d080b2bb97a", "created": "2026-01-27T05:13:02.253704Z", "modified": "2026-01-27T05:13:02.253704Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.juzyuwqt.thxxnjvf']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.253704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--99904ee3-07ab-4383-98ae-37ae355f5cd2", "created": "2026-01-27T05:13:02.254388Z", "modified": "2026-01-27T05:13:02.254388Z", "relationship_type": "indicates", "source_ref": "indicator--bffb410d-cf82-43ae-9e27-3d080b2bb97a", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9356a0fb-8c87-4db0-a9af-fd42b96fed9c", "created": "2026-01-27T05:13:02.254567Z", "modified": "2026-01-27T05:13:02.254567Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.epasufob.kybavfgt']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.254567Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f1903f9-78b7-4840-ad9e-813dfa5407c3", "created": "2026-01-27T05:13:02.25525Z", "modified": "2026-01-27T05:13:02.25525Z", "relationship_type": "indicates", "source_ref": "indicator--9356a0fb-8c87-4db0-a9af-fd42b96fed9c", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068507db-bf7d-437a-8ebd-5be68a67d228", "created": "2026-01-27T05:13:02.255435Z", "modified": "2026-01-27T05:13:02.255435Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='pl.spyone.agent2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.255435Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e1eb9196-fb6b-4cbb-8ce8-31f9c4316001", "created": "2026-01-27T05:13:02.256173Z", "modified": "2026-01-27T05:13:02.256173Z", "relationship_type": "indicates", "source_ref": "indicator--068507db-bf7d-437a-8ebd-5be68a67d228", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c7dc53-c6d2-4834-869f-3b6629912713", "created": "2026-01-27T05:13:02.256358Z", "modified": "2026-01-27T05:13:02.256358Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='Aktualizacja.apps']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.256358Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3b17191-fb19-47ab-a3c6-8518349bc66c", "created": "2026-01-27T05:13:02.257052Z", "modified": "2026-01-27T05:13:02.257052Z", "relationship_type": "indicates", "source_ref": "indicator--b7c7dc53-c6d2-4834-869f-3b6629912713", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f390c3a2-9710-4aad-89ac-664cff417219", "created": "2026-01-27T05:13:02.257229Z", "modified": "2026-01-27T05:13:02.257229Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='C4B56E3768543190FDBE0AA01DD628E579F5514C']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.257229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2d9c5c75-49e1-415b-8c5b-88d0cd466f74", "created": "2026-01-27T05:13:02.258009Z", "modified": "2026-01-27T05:13:02.258009Z", "relationship_type": "indicates", "source_ref": "indicator--f390c3a2-9710-4aad-89ac-664cff417219", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be929bb-b0ac-4d40-8b89-14bcebbc2585", "created": "2026-01-27T05:13:02.25819Z", "modified": "2026-01-27T05:13:02.25819Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='28AFF3C41C0D42ACBB6B73C6C08868C442088640']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.25819Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b4f423f1-f494-4ae1-a6de-d742f1c32f16", "created": "2026-01-27T05:13:02.258986Z", "modified": "2026-01-27T05:13:02.258986Z", "relationship_type": "indicates", "source_ref": "indicator--6be929bb-b0ac-4d40-8b89-14bcebbc2585", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2a1fe6-3f91-449e-8b78-dd7f94ea80a4", "created": "2026-01-27T05:13:02.259168Z", "modified": "2026-01-27T05:13:02.259168Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2441F6D331D6CFD8624346ED4B1987EAE6534FA3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.259168Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9c29843-f689-44df-a6b1-392360cbb669", "created": "2026-01-27T05:13:02.260078Z", "modified": "2026-01-27T05:13:02.260078Z", "relationship_type": "indicates", "source_ref": "indicator--0b2a1fe6-3f91-449e-8b78-dd7f94ea80a4", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c41bd5c-2d77-4615-bbfc-fa0cc6948514", "created": "2026-01-27T05:13:02.260257Z", "modified": "2026-01-27T05:13:02.260257Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='123C09B261DFA0F67D817E9BA079942830C31D54']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.260257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f4cc77e1-b789-4654-af51-8d7d0523fa49", "created": "2026-01-27T05:13:02.261057Z", "modified": "2026-01-27T05:13:02.261057Z", "relationship_type": "indicates", "source_ref": "indicator--8c41bd5c-2d77-4615-bbfc-fa0cc6948514", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d968acb6-98cb-4247-9b22-acd550978668", "created": "2026-01-27T05:13:02.26124Z", "modified": "2026-01-27T05:13:02.26124Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='32F6E28DD3E2E61ED94446591E31F89AEE3A9BD2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.26124Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6feed3c-5244-4a0d-a996-a259c414e011", "created": "2026-01-27T05:13:02.262028Z", "modified": "2026-01-27T05:13:02.262028Z", "relationship_type": "indicates", "source_ref": "indicator--d968acb6-98cb-4247-9b22-acd550978668", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7523ab-fa4c-4696-94c2-4cfa4f05984b", "created": "2026-01-27T05:13:02.262207Z", "modified": "2026-01-27T05:13:02.262207Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='317A9577A5B2D0930D06E0D8D7427E2F8FCAD29D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.262207Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07e084fc-5af1-4e3c-af70-7b62b9334de9", "created": "2026-01-27T05:13:02.263013Z", "modified": "2026-01-27T05:13:02.263013Z", "relationship_type": "indicates", "source_ref": "indicator--3d7523ab-fa4c-4696-94c2-4cfa4f05984b", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75388961-ca6e-4d8d-88c5-eec5a10726d2", "created": "2026-01-27T05:13:02.263192Z", "modified": "2026-01-27T05:13:02.263192Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='D2A84922F8F747FD7582EFEF4189E06897FA8839']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.263192Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5b1ac9aa-35d3-4275-ba18-36c374114ca8", "created": "2026-01-27T05:13:02.263987Z", "modified": "2026-01-27T05:13:02.263987Z", "relationship_type": "indicates", "source_ref": "indicator--75388961-ca6e-4d8d-88c5-eec5a10726d2", "target_ref": "malware--86d5f786-8ee0-4f67-8e29-a9cb20725ff8"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0e38ac06-6123-4c4e-8686-909a0e630f14", "created": "2026-01-27T05:13:02.264161Z", "modified": "2026-01-27T05:13:02.264161Z", "name": "eagleSPY", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a5db8b-b9b1-4d23-a9cf-4fe490bdf22f", "created": "2026-01-27T05:13:02.264337Z", "modified": "2026-01-27T05:13:02.264337Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='eaglespy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.264337Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b12c8e1b-005d-4aef-94a9-a6b5ba31b7e2", "created": "2026-01-27T05:13:02.265032Z", "modified": "2026-01-27T05:13:02.265032Z", "relationship_type": "indicates", "source_ref": "indicator--05a5db8b-b9b1-4d23-a9cf-4fe490bdf22f", "target_ref": "malware--0e38ac06-6123-4c4e-8686-909a0e630f14"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59938532-9845-489b-ba6e-05131037753c", "created": "2026-01-27T05:13:02.265209Z", "modified": "2026-01-27T05:13:02.265209Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='prontodigital.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.265209Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3d943281-72d1-4a1f-b7e6-ebdbe2a1a549", "created": "2026-01-27T05:13:02.265918Z", "modified": "2026-01-27T05:13:02.265918Z", "relationship_type": "indicates", "source_ref": "indicator--59938532-9845-489b-ba6e-05131037753c", "target_ref": "malware--0e38ac06-6123-4c4e-8686-909a0e630f14"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e31ab8-a30b-4737-a7a3-7e0f4555636a", "created": "2026-01-27T05:13:02.266098Z", "modified": "2026-01-27T05:13:02.266098Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='eaglespy.com.br']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.266098Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--33ded7e2-8f30-4d7a-bad7-777bbe3b1043", "created": "2026-01-27T05:13:02.266779Z", "modified": "2026-01-27T05:13:02.266779Z", "relationship_type": "indicates", "source_ref": "indicator--46e31ab8-a30b-4737-a7a3-7e0f4555636a", "target_ref": "malware--0e38ac06-6123-4c4e-8686-909a0e630f14"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a4ad51-2715-4122-8e12-08d81a358afe", "created": "2026-01-27T05:13:02.266965Z", "modified": "2026-01-27T05:13:02.266965Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='br.com.eaglespy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.266965Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--88cf6d69-c846-42ae-a739-b4dd7d0a7474", "created": "2026-01-27T05:13:02.267609Z", "modified": "2026-01-27T05:13:02.267609Z", "relationship_type": "indicates", "source_ref": "indicator--c8a4ad51-2715-4122-8e12-08d81a358afe", "target_ref": "malware--0e38ac06-6123-4c4e-8686-909a0e630f14"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc2e4c9-9c20-4596-9021-6e2dc5852973", "created": "2026-01-27T05:13:02.267801Z", "modified": "2026-01-27T05:13:02.267801Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='B7B561250288C8BB44932B591B5451D852A95109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.267801Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5dab773-d03b-446e-a39e-26d3dca32d6f", "created": "2026-01-27T05:13:02.268704Z", "modified": "2026-01-27T05:13:02.268704Z", "relationship_type": "indicates", "source_ref": "indicator--6dc2e4c9-9c20-4596-9021-6e2dc5852973", "target_ref": "malware--0e38ac06-6123-4c4e-8686-909a0e630f14"}, {"type": "malware", "spec_version": "2.1", "id": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a", "created": "2026-01-27T05:13:02.268898Z", "modified": "2026-01-27T05:13:02.268898Z", "name": "PhoneMonitor", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75d7647-9799-4ce1-a003-cb01e9238b90", "created": "2026-01-27T05:13:02.269069Z", "modified": "2026-01-27T05:13:02.269069Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.thephonem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.269069Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea28d5cd-a967-4a33-875d-c2c5080d1965", "created": "2026-01-27T05:13:02.269742Z", "modified": "2026-01-27T05:13:02.269742Z", "relationship_type": "indicates", "source_ref": "indicator--b75d7647-9799-4ce1-a003-cb01e9238b90", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa1c260-69f8-4b24-b110-cd8302475e90", "created": "2026-01-27T05:13:02.269944Z", "modified": "2026-01-27T05:13:02.269944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='phonemonitor.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.269944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fed0d40c-9e1e-49cb-94c7-9aff00966a7c", "created": "2026-01-27T05:13:02.270617Z", "modified": "2026-01-27T05:13:02.270617Z", "relationship_type": "indicates", "source_ref": "indicator--bfa1c260-69f8-4b24-b110-cd8302475e90", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e710d63-093f-43ba-aa05-c1e8712bd986", "created": "2026-01-27T05:13:02.270811Z", "modified": "2026-01-27T05:13:02.270811Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='users.thephonem.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.270811Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c25ea9b6-6948-4820-ba74-a581ff23062d", "created": "2026-01-27T05:13:02.271486Z", "modified": "2026-01-27T05:13:02.271486Z", "relationship_type": "indicates", "source_ref": "indicator--0e710d63-093f-43ba-aa05-c1e8712bd986", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a203f0a0-6e34-494a-8da7-04335f53c5e8", "created": "2026-01-27T05:13:02.271664Z", "modified": "2026-01-27T05:13:02.271664Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='tphmr.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.271664Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c35d7861-9261-46ad-8c5e-9c7613368199", "created": "2026-01-27T05:13:02.272375Z", "modified": "2026-01-27T05:13:02.272375Z", "relationship_type": "indicates", "source_ref": "indicator--a203f0a0-6e34-494a-8da7-04335f53c5e8", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea967835-92e3-4d87-a71a-8cdf8bbe885c", "created": "2026-01-27T05:13:02.272563Z", "modified": "2026-01-27T05:13:02.272563Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gurley.s3.ap-southeast-1.wasabisys.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.272563Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--12dce936-f186-48bd-b5d5-140de5ea026a", "created": "2026-01-27T05:13:02.273311Z", "modified": "2026-01-27T05:13:02.273311Z", "relationship_type": "indicates", "source_ref": "indicator--ea967835-92e3-4d87-a71a-8cdf8bbe885c", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f7528b-3239-4e69-a3d8-c2a2b7104129", "created": "2026-01-27T05:13:02.273488Z", "modified": "2026-01-27T05:13:02.273488Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.pvojpamt.tzzyqjyb']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.273488Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b54fbfe6-2110-42c8-887d-ea908c27a2b3", "created": "2026-01-27T05:13:02.274172Z", "modified": "2026-01-27T05:13:02.274172Z", "relationship_type": "indicates", "source_ref": "indicator--55f7528b-3239-4e69-a3d8-c2a2b7104129", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383f82ca-1aa4-4d9e-b598-1b026511c601", "created": "2026-01-27T05:13:02.274348Z", "modified": "2026-01-27T05:13:02.274348Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.monitor.phone.s0ft.phonemonitor']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.274348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8d2ed115-0bea-40b0-8bca-0f549caad20e", "created": "2026-01-27T05:13:02.275053Z", "modified": "2026-01-27T05:13:02.275053Z", "relationship_type": "indicates", "source_ref": "indicator--383f82ca-1aa4-4d9e-b598-1b026511c601", "target_ref": "malware--71437a44-dfb7-4cd2-9f00-66071d251c2a"}, {"type": "malware", "spec_version": "2.1", "id": "malware--49f21720-16be-420a-958b-f4db08c2bee7", "created": "2026-01-27T05:13:02.275228Z", "modified": "2026-01-27T05:13:02.275228Z", "name": "Buhsam", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e00a51-f314-4346-9926-74e8ec463e5b", "created": "2026-01-27T05:13:02.275409Z", "modified": "2026-01-27T05:13:02.275409Z", "indicator_types": ["malicious-activity"], "pattern": "[url:value='https://github.com/earthshakira/android_hack']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.275409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e47fd24b-30b3-4942-bbc6-15a75ba0b2e1", "created": "2026-01-27T05:13:02.27653Z", "modified": "2026-01-27T05:13:02.27653Z", "relationship_type": "indicates", "source_ref": "indicator--b3e00a51-f314-4346-9926-74e8ec463e5b", "target_ref": "malware--49f21720-16be-420a-958b-f4db08c2bee7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c91cca-7188-419f-b55a-4458156e1b21", "created": "2026-01-27T05:13:02.276714Z", "modified": "2026-01-27T05:13:02.276714Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.google.android.network']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.276714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--60e65173-9c8a-49b5-92f5-88cf382735a8", "created": "2026-01-27T05:13:02.277524Z", "modified": "2026-01-27T05:13:02.277524Z", "relationship_type": "indicates", "source_ref": "indicator--53c91cca-7188-419f-b55a-4458156e1b21", "target_ref": "malware--49f21720-16be-420a-958b-f4db08c2bee7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d947b9-3ba3-41d3-85a1-f81dcabcf4eb", "created": "2026-01-27T05:13:02.277703Z", "modified": "2026-01-27T05:13:02.277703Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='00F618C4C43C28B107DAB8F5641AD00D3A774AFD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.277703Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e58a1b4e-dd0d-4722-a76a-dedf39e3b66e", "created": "2026-01-27T05:13:02.278541Z", "modified": "2026-01-27T05:13:02.278541Z", "relationship_type": "indicates", "source_ref": "indicator--f4d947b9-3ba3-41d3-85a1-f81dcabcf4eb", "target_ref": "malware--49f21720-16be-420a-958b-f4db08c2bee7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--332ae7c5-4fa8-44bd-a77d-f6fca23d9b4c", "created": "2026-01-27T05:13:02.278722Z", "modified": "2026-01-27T05:13:02.278722Z", "name": "AndroRat", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b896e183-01c1-4021-aac4-c0232828237c", "created": "2026-01-27T05:13:02.278937Z", "modified": "2026-01-27T05:13:02.278937Z", "indicator_types": ["malicious-activity"], "pattern": "[url:value='https://github.com/karma9874/AndroRAT']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.278937Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--47c664a7-ec5e-4760-88e2-dd2f5a0c3286", "created": "2026-01-27T05:13:02.279727Z", "modified": "2026-01-27T05:13:02.279727Z", "relationship_type": "indicates", "source_ref": "indicator--b896e183-01c1-4021-aac4-c0232828237c", "target_ref": "malware--332ae7c5-4fa8-44bd-a77d-f6fca23d9b4c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0579cb7b-df31-46e4-89f9-306fdd631f7b", "created": "2026-01-27T05:13:02.279927Z", "modified": "2026-01-27T05:13:02.279927Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.example.reverseshell2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.279927Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--92538133-1475-45d1-9bb7-4858504216d7", "created": "2026-01-27T05:13:02.280613Z", "modified": "2026-01-27T05:13:02.280613Z", "relationship_type": "indicates", "source_ref": "indicator--0579cb7b-df31-46e4-89f9-306fdd631f7b", "target_ref": "malware--332ae7c5-4fa8-44bd-a77d-f6fca23d9b4c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--39f63d9c-0d8c-4e1c-89cc-c8dacabc62aa", "created": "2026-01-27T05:13:02.280811Z", "modified": "2026-01-27T05:13:02.280811Z", "name": "Spynger", "description": "Stalkerware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0d2c36-fdba-45f4-b357-ed2a344ee8ca", "created": "2026-01-27T05:13:02.280982Z", "modified": "2026-01-27T05:13:02.280982Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='my.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.280982Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--90d5ee66-817c-45e8-9ab9-6fcf7d334acc", "created": "2026-01-27T05:13:02.281648Z", "modified": "2026-01-27T05:13:02.281648Z", "relationship_type": "indicates", "source_ref": "indicator--eb0d2c36-fdba-45f4-b357-ed2a344ee8ca", "target_ref": "malware--39f63d9c-0d8c-4e1c-89cc-c8dacabc62aa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255927e4-b4f2-4fbc-81e1-15c3a2358a5f", "created": "2026-01-27T05:13:02.281842Z", "modified": "2026-01-27T05:13:02.281842Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ios-gw.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.281842Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--25026956-8f84-4317-85dc-f05f3a2f99e5", "created": "2026-01-27T05:13:02.282522Z", "modified": "2026-01-27T05:13:02.282522Z", "relationship_type": "indicates", "source_ref": "indicator--255927e4-b4f2-4fbc-81e1-15c3a2358a5f", "target_ref": "malware--39f63d9c-0d8c-4e1c-89cc-c8dacabc62aa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6386659a-1aa5-441c-8386-a0b45833e89a", "created": "2026-01-27T05:13:02.2827Z", "modified": "2026-01-27T05:13:02.2827Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.2827Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--902c5875-7749-4f5d-abbb-dc5880aea779", "created": "2026-01-27T05:13:02.283384Z", "modified": "2026-01-27T05:13:02.283384Z", "relationship_type": "indicates", "source_ref": "indicator--6386659a-1aa5-441c-8386-a0b45833e89a", "target_ref": "malware--39f63d9c-0d8c-4e1c-89cc-c8dacabc62aa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8cf679-bb00-4841-9325-9ea624e239bd", "created": "2026-01-27T05:13:02.283559Z", "modified": "2026-01-27T05:13:02.283559Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='cart.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.283559Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--961ddd54-61da-4342-8f9b-15f09b0d9bb3", "created": "2026-01-27T05:13:02.284269Z", "modified": "2026-01-27T05:13:02.284269Z", "relationship_type": "indicates", "source_ref": "indicator--2f8cf679-bb00-4841-9325-9ea624e239bd", "target_ref": "malware--39f63d9c-0d8c-4e1c-89cc-c8dacabc62aa"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44820c0f-1de4-4013-9243-7d66c572c198", "created": "2026-01-27T05:13:02.284444Z", "modified": "2026-01-27T05:13:02.284444Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='win.spynger.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.284444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3aa2e674-2a03-45dc-9642-6ca7a52576d3", "created": "2026-01-27T05:13:02.285129Z", "modified": "2026-01-27T05:13:02.285129Z", "relationship_type": "indicates", "source_ref": "indicator--44820c0f-1de4-4013-9243-7d66c572c198", "target_ref": "malware--39f63d9c-0d8c-4e1c-89cc-c8dacabc62aa"}, {"type": "malware", "spec_version": "2.1", "id": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff", "created": "2026-01-27T05:13:02.285309Z", "modified": "2026-01-27T05:13:02.285309Z", "name": "WiseMo", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd36ec9-3d53-474d-9be8-d24f78afc9d5", "created": "2026-01-27T05:13:02.285477Z", "modified": "2026-01-27T05:13:02.285477Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud1.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.285477Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3d05a4e-20f0-4efe-bafd-fbf93c7769f6", "created": "2026-01-27T05:13:02.286305Z", "modified": "2026-01-27T05:13:02.286305Z", "relationship_type": "indicates", "source_ref": "indicator--2bd36ec9-3d53-474d-9be8-d24f78afc9d5", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a288a9db-71b1-406a-9b91-441856243b2b", "created": "2026-01-27T05:13:02.286484Z", "modified": "2026-01-27T05:13:02.286484Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.286484Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b4695bd-322c-444f-b95f-de7608a70861", "created": "2026-01-27T05:13:02.287225Z", "modified": "2026-01-27T05:13:02.287225Z", "relationship_type": "indicates", "source_ref": "indicator--a288a9db-71b1-406a-9b91-441856243b2b", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25eb7d88-5bf6-433d-b0b3-dd342d088b2e", "created": "2026-01-27T05:13:02.287444Z", "modified": "2026-01-27T05:13:02.287444Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mtracker.fortess.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.287444Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b716f49-d955-46d6-9e47-bd3ef9b91477", "created": "2026-01-27T05:13:02.288147Z", "modified": "2026-01-27T05:13:02.288147Z", "relationship_type": "indicates", "source_ref": "indicator--25eb7d88-5bf6-433d-b0b3-dd342d088b2e", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0243528-e519-4ec2-a532-1d924ddd72e6", "created": "2026-01-27T05:13:02.288324Z", "modified": "2026-01-27T05:13:02.288324Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs10.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.288324Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6c013f7-0230-4e73-884a-448453f9d249", "created": "2026-01-27T05:13:02.289029Z", "modified": "2026-01-27T05:13:02.289029Z", "relationship_type": "indicates", "source_ref": "indicator--f0243528-e519-4ec2-a532-1d924ddd72e6", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82ec22d-69e1-4b2b-8458-3878a85faced", "created": "2026-01-27T05:13:02.289206Z", "modified": "2026-01-27T05:13:02.289206Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs17.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.289206Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4bccab5d-c9aa-4ea4-ba55-f2ba3448f9d1", "created": "2026-01-27T05:13:02.289904Z", "modified": "2026-01-27T05:13:02.289904Z", "relationship_type": "indicates", "source_ref": "indicator--b82ec22d-69e1-4b2b-8458-3878a85faced", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7a72b2-1bd6-4d2d-9320-1b25e70bdc45", "created": "2026-01-27T05:13:02.290081Z", "modified": "2026-01-27T05:13:02.290081Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs17a.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.290081Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9297c9d3-342f-4f1e-8e58-8dc61162f939", "created": "2026-01-27T05:13:02.290773Z", "modified": "2026-01-27T05:13:02.290773Z", "relationship_type": "indicates", "source_ref": "indicator--0a7a72b2-1bd6-4d2d-9320-1b25e70bdc45", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6ba096-1646-4e90-b442-86c42e9b23fe", "created": "2026-01-27T05:13:02.290957Z", "modified": "2026-01-27T05:13:02.290957Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs5a.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.290957Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cbcd2e9-9cea-4375-9122-8c752313ef1e", "created": "2026-01-27T05:13:02.291641Z", "modified": "2026-01-27T05:13:02.291641Z", "relationship_type": "indicates", "source_ref": "indicator--3f6ba096-1646-4e90-b442-86c42e9b23fe", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a6380b-2334-4ba6-9867-32c95a4f3915", "created": "2026-01-27T05:13:02.291838Z", "modified": "2026-01-27T05:13:02.291838Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mycloud-cs9.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.291838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19fe73ff-b20c-4f8a-b04d-7e2f56c08bf4", "created": "2026-01-27T05:13:02.292531Z", "modified": "2026-01-27T05:13:02.292531Z", "relationship_type": "indicates", "source_ref": "indicator--68a6380b-2334-4ba6-9867-32c95a4f3915", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54b661b-7184-4c11-9d57-58f29c3ff31a", "created": "2026-01-27T05:13:02.292714Z", "modified": "2026-01-27T05:13:02.292714Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.292714Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a465232-6319-47fa-9abf-e6e413ed4ac7", "created": "2026-01-27T05:13:02.293406Z", "modified": "2026-01-27T05:13:02.293406Z", "relationship_type": "indicates", "source_ref": "indicator--a54b661b-7184-4c11-9d57-58f29c3ff31a", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097fe503-6666-4dc4-a14d-d12168a4c121", "created": "2026-01-27T05:13:02.293586Z", "modified": "2026-01-27T05:13:02.293586Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.wisemo.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.293586Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09356cb3-ad5a-4717-a0ca-e9675fc5557d", "created": "2026-01-27T05:13:02.294392Z", "modified": "2026-01-27T05:13:02.294392Z", "relationship_type": "indicates", "source_ref": "indicator--097fe503-6666-4dc4-a14d-d12168a4c121", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6684348-6983-4780-8d7e-568b2528dca5", "created": "2026-01-27T05:13:02.294573Z", "modified": "2026-01-27T05:13:02.294573Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wisemo.host.v10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.294573Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0f478b0a-e4ff-4f89-9705-fb84f238b17b", "created": "2026-01-27T05:13:02.295254Z", "modified": "2026-01-27T05:13:02.295254Z", "relationship_type": "indicates", "source_ref": "indicator--d6684348-6983-4780-8d7e-568b2528dca5", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bb71a7-a3b1-42ec-92b1-018267597370", "created": "2026-01-27T05:13:02.295431Z", "modified": "2026-01-27T05:13:02.295431Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='9B48840CBF93379410172B4B85989624D2B33D59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.295431Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ef8bff4b-0c62-47ed-a35c-326d4be850fe", "created": "2026-01-27T05:13:02.296228Z", "modified": "2026-01-27T05:13:02.296228Z", "relationship_type": "indicates", "source_ref": "indicator--68bb71a7-a3b1-42ec-92b1-018267597370", "target_ref": "malware--bc28c65e-f667-4a57-89ca-d0313e414cff"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4647fc80-43f3-4eca-b043-03b8df123be7", "created": "2026-01-27T05:13:02.296404Z", "modified": "2026-01-27T05:13:02.296404Z", "name": "FamiSafe", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e39fcaa-c45e-4bdc-9f63-ca0ac3a2ad50", "created": "2026-01-27T05:13:02.296574Z", "modified": "2026-01-27T05:13:02.296574Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='300624.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.296574Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5f2482c4-d630-4e38-b10d-dafbaa9ae740", "created": "2026-01-27T05:13:02.297318Z", "modified": "2026-01-27T05:13:02.297318Z", "relationship_type": "indicates", "source_ref": "indicator--3e39fcaa-c45e-4bdc-9f63-ca0ac3a2ad50", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ade5962-ddd9-4db0-8873-1f77b3b165b4", "created": "2026-01-27T05:13:02.297502Z", "modified": "2026-01-27T05:13:02.297502Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='analytics.300624.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.297502Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8107f151-9fb9-4f08-8ec5-f76c8472030a", "created": "2026-01-27T05:13:02.298213Z", "modified": "2026-01-27T05:13:02.298213Z", "relationship_type": "indicates", "source_ref": "indicator--3ade5962-ddd9-4db0-8873-1f77b3b165b4", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1338f460-d70d-4138-96b1-756e6e71e9e2", "created": "2026-01-27T05:13:02.298391Z", "modified": "2026-01-27T05:13:02.298391Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.wondershare.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.298391Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5e56c8c4-8306-4ed4-871f-1c31f471e11d", "created": "2026-01-27T05:13:02.299082Z", "modified": "2026-01-27T05:13:02.299082Z", "relationship_type": "indicates", "source_ref": "indicator--1338f460-d70d-4138-96b1-756e6e71e9e2", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b250e21-6660-4bdd-93ce-a32ae52fa4be", "created": "2026-01-27T05:13:02.299257Z", "modified": "2026-01-27T05:13:02.299257Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app-api-pro.wondershare.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.299257Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4d68f8e1-c5b7-4df6-ab0f-690341f7bb68", "created": "2026-01-27T05:13:02.299961Z", "modified": "2026-01-27T05:13:02.299961Z", "relationship_type": "indicates", "source_ref": "indicator--7b250e21-6660-4bdd-93ce-a32ae52fa4be", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862d47f8-7919-4ea0-82f9-cb486a6a7e90", "created": "2026-01-27T05:13:02.300137Z", "modified": "2026-01-27T05:13:02.300137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='data-api.famisafe.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.300137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19a59ac4-1702-4364-8649-42501313efff", "created": "2026-01-27T05:13:02.300835Z", "modified": "2026-01-27T05:13:02.300835Z", "relationship_type": "indicates", "source_ref": "indicator--862d47f8-7919-4ea0-82f9-cb486a6a7e90", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9d1c22-80a8-460a-956c-3c900c2e76ab", "created": "2026-01-27T05:13:02.301012Z", "modified": "2026-01-27T05:13:02.301012Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='dc.wondershare.cc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.301012Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bbd56832-3930-42a4-9502-067580f0e46f", "created": "2026-01-27T05:13:02.3017Z", "modified": "2026-01-27T05:13:02.3017Z", "relationship_type": "indicates", "source_ref": "indicator--2f9d1c22-80a8-460a-956c-3c900c2e76ab", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55931979-0e52-430b-b0f7-2c82bbbf74b0", "created": "2026-01-27T05:13:02.3019Z", "modified": "2026-01-27T05:13:02.3019Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famisafe-b6807.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.3019Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06cff637-3b32-4ff7-b236-b80db4a4aab2", "created": "2026-01-27T05:13:02.30271Z", "modified": "2026-01-27T05:13:02.30271Z", "relationship_type": "indicates", "source_ref": "indicator--55931979-0e52-430b-b0f7-2c82bbbf74b0", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56db4f8-de2f-47f0-a663-207696f5fd67", "created": "2026-01-27T05:13:02.302904Z", "modified": "2026-01-27T05:13:02.302904Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='sparrow.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.302904Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca5f2bd4-a6a0-418f-80c1-09339c345b55", "created": "2026-01-27T05:13:02.303623Z", "modified": "2026-01-27T05:13:02.303623Z", "relationship_type": "indicates", "source_ref": "indicator--b56db4f8-de2f-47f0-a663-207696f5fd67", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5402ba2-2eb6-4176-8027-7a4a0d36b998", "created": "2026-01-27T05:13:02.303852Z", "modified": "2026-01-27T05:13:02.303852Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famisafe.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.303852Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c4423c4-96ba-44c2-b73b-abb5a2c9fc26", "created": "2026-01-27T05:13:02.304551Z", "modified": "2026-01-27T05:13:02.304551Z", "relationship_type": "indicates", "source_ref": "indicator--a5402ba2-2eb6-4176-8027-7a4a0d36b998", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd9ac75-07ff-4261-84a7-db2ffec91daa", "created": "2026-01-27T05:13:02.304763Z", "modified": "2026-01-27T05:13:02.304763Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famisafeapp.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.304763Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--406c39d4-70c4-469d-9572-411b2014cf67", "created": "2026-01-27T05:13:02.30546Z", "modified": "2026-01-27T05:13:02.30546Z", "relationship_type": "indicates", "source_ref": "indicator--afd9ac75-07ff-4261-84a7-db2ffec91daa", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779fee07-0d9b-4e7e-94fe-d569ea96958a", "created": "2026-01-27T05:13:02.305633Z", "modified": "2026-01-27T05:13:02.305633Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accounts.wondershare.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.305633Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f96cf649-0a5e-4df7-b2d0-ed863488e5f9", "created": "2026-01-27T05:13:02.30633Z", "modified": "2026-01-27T05:13:02.30633Z", "relationship_type": "indicates", "source_ref": "indicator--779fee07-0d9b-4e7e-94fe-d569ea96958a", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f73967-d9d1-4ae3-9d7f-eb4d50dd0ac8", "created": "2026-01-27T05:13:02.306505Z", "modified": "2026-01-27T05:13:02.306505Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wondershare.famisafe']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.306505Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b98bbe1-b5dd-44bd-b14b-1c3bd2c7172f", "created": "2026-01-27T05:13:02.30718Z", "modified": "2026-01-27T05:13:02.30718Z", "relationship_type": "indicates", "source_ref": "indicator--50f73967-d9d1-4ae3-9d7f-eb4d50dd0ac8", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61bb558-7f6f-42c8-9f36-9e71751e4040", "created": "2026-01-27T05:13:02.307355Z", "modified": "2026-01-27T05:13:02.307355Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wondershare.famisafe.kids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.307355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee96c387-1641-4ae8-8144-fd6ebc94dde7", "created": "2026-01-27T05:13:02.308036Z", "modified": "2026-01-27T05:13:02.308036Z", "relationship_type": "indicates", "source_ref": "indicator--a61bb558-7f6f-42c8-9f36-9e71751e4040", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a626c2-8793-4812-9dbb-590e1454d59f", "created": "2026-01-27T05:13:02.308211Z", "modified": "2026-01-27T05:13:02.308211Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='61B90229F79F730043D06FEE46BB8FD9E3A0E70B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.308211Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b69c7b7e-f9a6-4911-8dc8-3bb3bae9759c", "created": "2026-01-27T05:13:02.309005Z", "modified": "2026-01-27T05:13:02.309005Z", "relationship_type": "indicates", "source_ref": "indicator--a4a626c2-8793-4812-9dbb-590e1454d59f", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4891b505-6b9c-4ed1-82f3-9d9c9362dc97", "created": "2026-01-27T05:13:02.309179Z", "modified": "2026-01-27T05:13:02.309179Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='095514BA4F28DBE521C74ABF77972BE3C86A50A5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.309179Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c2d2a0e4-9408-45d4-bb92-4608ec9c134b", "created": "2026-01-27T05:13:02.309964Z", "modified": "2026-01-27T05:13:02.309964Z", "relationship_type": "indicates", "source_ref": "indicator--4891b505-6b9c-4ed1-82f3-9d9c9362dc97", "target_ref": "malware--4647fc80-43f3-4eca-b043-03b8df123be7"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c4d7109e-3b98-43aa-b8c1-6a1cdf07bd4b", "created": "2026-01-27T05:13:02.310142Z", "modified": "2026-01-27T05:13:02.310142Z", "name": "KasperskySafeKids", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd80b82-9474-44a9-ae4e-a2dbeca561d1", "created": "2026-01-27T05:13:02.31031Z", "modified": "2026-01-27T05:13:02.31031Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kaspersky-safe-kids.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.31031Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5ec572d-ad0e-46ac-8cfa-670b7920b0c6", "created": "2026-01-27T05:13:02.311143Z", "modified": "2026-01-27T05:13:02.311143Z", "relationship_type": "indicates", "source_ref": "indicator--bfd80b82-9474-44a9-ae4e-a2dbeca561d1", "target_ref": "malware--c4d7109e-3b98-43aa-b8c1-6a1cdf07bd4b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae44dfd-a871-417f-949b-fc6a57fd2ce5", "created": "2026-01-27T05:13:02.31132Z", "modified": "2026-01-27T05:13:02.31132Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kaspersky.safekids']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.31132Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ff82263-01ce-43fb-b17a-103cc9910f5b", "created": "2026-01-27T05:13:02.311991Z", "modified": "2026-01-27T05:13:02.311991Z", "relationship_type": "indicates", "source_ref": "indicator--0ae44dfd-a871-417f-949b-fc6a57fd2ce5", "target_ref": "malware--c4d7109e-3b98-43aa-b8c1-6a1cdf07bd4b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0", "created": "2026-01-27T05:13:02.312168Z", "modified": "2026-01-27T05:13:02.312168Z", "name": "KidsControl", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b49c40-f21a-4abc-9034-8f1e372fc7d5", "created": "2026-01-27T05:13:02.312348Z", "modified": "2026-01-27T05:13:02.312348Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.312348Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--acb19537-ea80-466e-ac8b-c2e21436362e", "created": "2026-01-27T05:13:02.313039Z", "modified": "2026-01-27T05:13:02.313039Z", "relationship_type": "indicates", "source_ref": "indicator--35b49c40-f21a-4abc-9034-8f1e372fc7d5", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e05b18-55e6-41ff-87e1-2f1e5b763d17", "created": "2026-01-27T05:13:02.313214Z", "modified": "2026-01-27T05:13:02.313214Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='beta.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.313214Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32e5a6dd-4abe-4fd1-a8c7-82f897b11699", "created": "2026-01-27T05:13:02.313912Z", "modified": "2026-01-27T05:13:02.313912Z", "relationship_type": "indicates", "source_ref": "indicator--82e05b18-55e6-41ff-87e1-2f1e5b763d17", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2e36f5-1edf-4c34-9914-1e4077170272", "created": "2026-01-27T05:13:02.314089Z", "modified": "2026-01-27T05:13:02.314089Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='ios.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.314089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6d295f-e72d-4a61-9676-036f15d76e28", "created": "2026-01-27T05:13:02.314781Z", "modified": "2026-01-27T05:13:02.314781Z", "relationship_type": "indicates", "source_ref": "indicator--ab2e36f5-1edf-4c34-9914-1e4077170272", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4ac883-0fb6-4b95-ae47-6c9e3dd53978", "created": "2026-01-27T05:13:02.314958Z", "modified": "2026-01-27T05:13:02.314958Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='go.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.314958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39b620f4-b15a-4d5c-af5b-fed4e3191802", "created": "2026-01-27T05:13:02.315623Z", "modified": "2026-01-27T05:13:02.315623Z", "relationship_type": "indicates", "source_ref": "indicator--ae4ac883-0fb6-4b95-ae47-6c9e3dd53978", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83d89c4-a873-452b-ac24-577294c9efa8", "created": "2026-01-27T05:13:02.315873Z", "modified": "2026-01-27T05:13:02.315873Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='go2.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.315873Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--34a623e7-78bf-48f6-9dd2-3b2fc613168c", "created": "2026-01-27T05:13:02.316565Z", "modified": "2026-01-27T05:13:02.316565Z", "relationship_type": "indicates", "source_ref": "indicator--d83d89c4-a873-452b-ac24-577294c9efa8", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22c2b52-e0c3-42e6-b96d-36f01a9ac7cf", "created": "2026-01-27T05:13:02.316739Z", "modified": "2026-01-27T05:13:02.316739Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpsme1.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.316739Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87edf798-d144-4842-b886-291bbd292a82", "created": "2026-01-27T05:13:02.317427Z", "modified": "2026-01-27T05:13:02.317427Z", "relationship_type": "indicates", "source_ref": "indicator--d22c2b52-e0c3-42e6-b96d-36f01a9ac7cf", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c39ba449-4826-4d6e-bc9d-56e67f5df281", "created": "2026-01-27T05:13:02.317603Z", "modified": "2026-01-27T05:13:02.317603Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.317603Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fb588825-4410-4271-9a11-31e5b1cce7d4", "created": "2026-01-27T05:13:02.318294Z", "modified": "2026-01-27T05:13:02.318294Z", "relationship_type": "indicates", "source_ref": "indicator--c39ba449-4826-4d6e-bc9d-56e67f5df281", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ed8fc7-bd8d-40ef-b05c-3231f4f54479", "created": "2026-01-27T05:13:02.318468Z", "modified": "2026-01-27T05:13:02.318468Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s4.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.318468Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4a093dfc-7467-45f9-80f2-585573370cc0", "created": "2026-01-27T05:13:02.319328Z", "modified": "2026-01-27T05:13:02.319328Z", "relationship_type": "indicates", "source_ref": "indicator--e1ed8fc7-bd8d-40ef-b05c-3231f4f54479", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ff7124-c75e-4b08-97ab-21b29451f40b", "created": "2026-01-27T05:13:02.319509Z", "modified": "2026-01-27T05:13:02.319509Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s5.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.319509Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d93351ef-73dc-4afb-bd0d-d8625b02c11a", "created": "2026-01-27T05:13:02.3202Z", "modified": "2026-01-27T05:13:02.3202Z", "relationship_type": "indicates", "source_ref": "indicator--87ff7124-c75e-4b08-97ab-21b29451f40b", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39cc823b-b6c8-46d1-8631-ffcc18f93087", "created": "2026-01-27T05:13:02.320376Z", "modified": "2026-01-27T05:13:02.320376Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s6.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.320376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--da2c25fc-9d1d-4dec-b146-e7c02dc7b1e0", "created": "2026-01-27T05:13:02.321066Z", "modified": "2026-01-27T05:13:02.321066Z", "relationship_type": "indicates", "source_ref": "indicator--39cc823b-b6c8-46d1-8631-ffcc18f93087", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dfd03f-19e5-4d5d-b4c2-8f767a1c228e", "created": "2026-01-27T05:13:02.321241Z", "modified": "2026-01-27T05:13:02.321241Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s7.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.321241Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa0c7da7-744a-4878-aab4-e6291ff68fd6", "created": "2026-01-27T05:13:02.32193Z", "modified": "2026-01-27T05:13:02.32193Z", "relationship_type": "indicates", "source_ref": "indicator--85dfd03f-19e5-4d5d-b4c2-8f767a1c228e", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e5dd2a-dff8-4a34-b9fc-e9c7d458d8ff", "created": "2026-01-27T05:13:02.322105Z", "modified": "2026-01-27T05:13:02.322105Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s8.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.322105Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a43d4373-b895-44c2-a3be-0fd34c919ec2", "created": "2026-01-27T05:13:02.322808Z", "modified": "2026-01-27T05:13:02.322808Z", "relationship_type": "indicates", "source_ref": "indicator--02e5dd2a-dff8-4a34-b9fc-e9c7d458d8ff", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c915bc-aef8-420f-9489-228daf844f31", "created": "2026-01-27T05:13:02.322986Z", "modified": "2026-01-27T05:13:02.322986Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s9.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.322986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b0380dd-0825-4ed9-983a-aefa2bec5a5a", "created": "2026-01-27T05:13:02.323668Z", "modified": "2026-01-27T05:13:02.323668Z", "relationship_type": "indicates", "source_ref": "indicator--10c915bc-aef8-420f-9489-228daf844f31", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9beefd58-7c34-426d-876d-a1cef9e4b01a", "created": "2026-01-27T05:13:02.323863Z", "modified": "2026-01-27T05:13:02.323863Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='s10.kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.323863Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b028715-1b04-492e-b29f-89afe3c6e347", "created": "2026-01-27T05:13:02.324533Z", "modified": "2026-01-27T05:13:02.324533Z", "relationship_type": "indicates", "source_ref": "indicator--9beefd58-7c34-426d-876d-a1cef9e4b01a", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea8ca3b-9a31-459b-84d4-c96cfc319a68", "created": "2026-01-27T05:13:02.324706Z", "modified": "2026-01-27T05:13:02.324706Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kid-control.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.324706Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c4a27e04-5bfc-48f5-bedc-fe240a88fe13", "created": "2026-01-27T05:13:02.325396Z", "modified": "2026-01-27T05:13:02.325396Z", "relationship_type": "indicates", "source_ref": "indicator--cea8ca3b-9a31-459b-84d4-c96cfc319a68", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c85750-d668-4a8e-8085-337ede7f0786", "created": "2026-01-27T05:13:02.325576Z", "modified": "2026-01-27T05:13:02.325576Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kid-control.ru']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.325576Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9bac0e7f-73d4-4f36-90f2-0310eddc41c3", "created": "2026-01-27T05:13:02.326259Z", "modified": "2026-01-27T05:13:02.326259Z", "relationship_type": "indicates", "source_ref": "indicator--94c85750-d668-4a8e-8085-337ede7f0786", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078e5138-0240-49c7-9b52-ec2642c6db06", "created": "2026-01-27T05:13:02.326447Z", "modified": "2026-01-27T05:13:02.326447Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='app.gpsme']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.326447Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--327fa6c1-7287-4c41-a350-f4c789360215", "created": "2026-01-27T05:13:02.32758Z", "modified": "2026-01-27T05:13:02.32758Z", "relationship_type": "indicates", "source_ref": "indicator--078e5138-0240-49c7-9b52-ec2642c6db06", "target_ref": "malware--b922debc-b39c-45b9-a7d1-fd6bca1a74f0"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e", "created": "2026-01-27T05:13:02.327783Z", "modified": "2026-01-27T05:13:02.327783Z", "name": "FindMyKids", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35407da1-3c82-4f58-9b85-c1b553646010", "created": "2026-01-27T05:13:02.32796Z", "modified": "2026-01-27T05:13:02.32796Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='r.findmychilds.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.32796Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--245face6-5cc7-4541-a261-b2b77e507d5d", "created": "2026-01-27T05:13:02.328647Z", "modified": "2026-01-27T05:13:02.328647Z", "relationship_type": "indicates", "source_ref": "indicator--35407da1-3c82-4f58-9b85-c1b553646010", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e133ab3d-cae3-4fcf-8a6c-a55c5607c532", "created": "2026-01-27T05:13:02.328845Z", "modified": "2026-01-27T05:13:02.328845Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='wss.findmychilds.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.328845Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9f1d548c-e187-4713-89bc-d537070b3b3b", "created": "2026-01-27T05:13:02.329544Z", "modified": "2026-01-27T05:13:02.329544Z", "relationship_type": "indicates", "source_ref": "indicator--e133ab3d-cae3-4fcf-8a6c-a55c5607c532", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4ba60a-20a8-46d8-9ab4-6d097b98fcfb", "created": "2026-01-27T05:13:02.329721Z", "modified": "2026-01-27T05:13:02.329721Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='where-is-my-children.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.329721Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df22bff2-e0a7-49e7-ada8-f8c6a2479e39", "created": "2026-01-27T05:13:02.330463Z", "modified": "2026-01-27T05:13:02.330463Z", "relationship_type": "indicates", "source_ref": "indicator--5f4ba60a-20a8-46d8-9ab4-6d097b98fcfb", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7120ef0e-c61a-4856-a291-e6bec4851584", "created": "2026-01-27T05:13:02.330643Z", "modified": "2026-01-27T05:13:02.330643Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.330643Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--df0cba5d-ffc7-49dc-8263-002b1773972b", "created": "2026-01-27T05:13:02.331324Z", "modified": "2026-01-27T05:13:02.331324Z", "relationship_type": "indicates", "source_ref": "indicator--7120ef0e-c61a-4856-a291-e6bec4851584", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91599e6-fa52-4181-9883-bf6722a83368", "created": "2026-01-27T05:13:02.331498Z", "modified": "2026-01-27T05:13:02.331498Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='discount.findmykids.org']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.331498Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--280bbd40-a486-449d-9dc4-e73fadfe0d55", "created": "2026-01-27T05:13:02.332198Z", "modified": "2026-01-27T05:13:02.332198Z", "relationship_type": "indicates", "source_ref": "indicator--a91599e6-fa52-4181-9883-bf6722a83368", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c9abbf-cb58-4ffb-b911-9b7ab782cd88", "created": "2026-01-27T05:13:02.332379Z", "modified": "2026-01-27T05:13:02.332379Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.findmykids.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.332379Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42b70c5c-4faa-4794-99ae-49f5185b3b33", "created": "2026-01-27T05:13:02.333053Z", "modified": "2026-01-27T05:13:02.333053Z", "relationship_type": "indicates", "source_ref": "indicator--78c9abbf-cb58-4ffb-b911-9b7ab782cd88", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bf11d2-facc-4fa6-aad8-40c3413e6026", "created": "2026-01-27T05:13:02.333229Z", "modified": "2026-01-27T05:13:02.333229Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.wheremychildren.ios']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.333229Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36b06dc6-db45-4ab4-ab3d-bc8b39d970f8", "created": "2026-01-27T05:13:02.333898Z", "modified": "2026-01-27T05:13:02.333898Z", "relationship_type": "indicates", "source_ref": "indicator--36bf11d2-facc-4fa6-aad8-40c3413e6026", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b58a390-c2b3-4b45-a028-b9c43ac07e66", "created": "2026-01-27T05:13:02.33408Z", "modified": "2026-01-27T05:13:02.33408Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='2A57777E3B9491A37392AFCE2E69D030DBF95037']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.33408Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63aae3d3-a926-4267-8293-c0c1c24a2f1e", "created": "2026-01-27T05:13:02.334869Z", "modified": "2026-01-27T05:13:02.334869Z", "relationship_type": "indicates", "source_ref": "indicator--0b58a390-c2b3-4b45-a028-b9c43ac07e66", "target_ref": "malware--a41dc5bd-4593-4a6e-9cb8-ffdf98ca797e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d807b87a-08c8-4b83-9f13-054b802ed737", "created": "2026-01-27T05:13:02.335057Z", "modified": "2026-01-27T05:13:02.335057Z", "name": "Accountable2you", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ee9fe8-7acf-4852-856e-ea50e61f5b62", "created": "2026-01-27T05:13:02.335236Z", "modified": "2026-01-27T05:13:02.335236Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.335236Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--66f76312-0e8f-412d-9b9b-90d3e8ec5e22", "created": "2026-01-27T05:13:02.336103Z", "modified": "2026-01-27T05:13:02.336103Z", "relationship_type": "indicates", "source_ref": "indicator--c3ee9fe8-7acf-4852-856e-ea50e61f5b62", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52607da0-fe4d-4720-a253-5709845a4539", "created": "2026-01-27T05:13:02.336285Z", "modified": "2026-01-27T05:13:02.336285Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='webservice.accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.336285Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a41c2363-cdbc-40b9-91c1-0c6b35baf9a2", "created": "2026-01-27T05:13:02.33701Z", "modified": "2026-01-27T05:13:02.33701Z", "relationship_type": "indicates", "source_ref": "indicator--52607da0-fe4d-4720-a253-5709845a4539", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a16df6-d5bd-419a-8228-61bef852c778", "created": "2026-01-27T05:13:02.337188Z", "modified": "2026-01-27T05:13:02.337188Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accountable2you-android.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.337188Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9670a9b5-f031-40a0-86d1-1772eca7b6cb", "created": "2026-01-27T05:13:02.337907Z", "modified": "2026-01-27T05:13:02.337907Z", "relationship_type": "indicates", "source_ref": "indicator--44a16df6-d5bd-419a-8228-61bef852c778", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e29ace1-861d-4a55-b22e-2626dea4701f", "created": "2026-01-27T05:13:02.338083Z", "modified": "2026-01-27T05:13:02.338083Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.338083Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--45032f2c-8879-447f-a20d-ec54e5ce0bfe", "created": "2026-01-27T05:13:02.338772Z", "modified": "2026-01-27T05:13:02.338772Z", "relationship_type": "indicates", "source_ref": "indicator--2e29ace1-861d-4a55-b22e-2626dea4701f", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75414423-d6f1-4fa0-bb77-8840d4a59056", "created": "2026-01-27T05:13:02.33895Z", "modified": "2026-01-27T05:13:02.33895Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='accountable2you.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.33895Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9c84c4c4-128a-43df-aae9-7b9f3a54d89b", "created": "2026-01-27T05:13:02.339629Z", "modified": "2026-01-27T05:13:02.339629Z", "relationship_type": "indicates", "source_ref": "indicator--75414423-d6f1-4fa0-bb77-8840d4a59056", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e432e92-4297-4a60-9c13-5e33f66daa25", "created": "2026-01-27T05:13:02.339833Z", "modified": "2026-01-27T05:13:02.339833Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.accountable2you.ap1']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.339833Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--39834de2-7c39-49cf-a1af-b89042a95bf6", "created": "2026-01-27T05:13:02.340511Z", "modified": "2026-01-27T05:13:02.340511Z", "relationship_type": "indicates", "source_ref": "indicator--6e432e92-4297-4a60-9c13-5e33f66daa25", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b50096-9812-40e1-abc2-c20a2a84db38", "created": "2026-01-27T05:13:02.340704Z", "modified": "2026-01-27T05:13:02.340704Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='78CFFA689DD23FDD7E84DDFBF28F86D4843C6129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.340704Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ba5d5ce5-97ad-4f8f-b060-92af61f9c9a5", "created": "2026-01-27T05:13:02.341519Z", "modified": "2026-01-27T05:13:02.341519Z", "relationship_type": "indicates", "source_ref": "indicator--a4b50096-9812-40e1-abc2-c20a2a84db38", "target_ref": "malware--d807b87a-08c8-4b83-9f13-054b802ed737"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be", "created": "2026-01-27T05:13:02.341706Z", "modified": "2026-01-27T05:13:02.341706Z", "name": "ZoeMob", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9648f574-c7ea-4248-9ce0-9b1df39e9a66", "created": "2026-01-27T05:13:02.3419Z", "modified": "2026-01-27T05:13:02.3419Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='apis.zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.3419Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b9d5486-bf8a-4381-80a2-9052eea389e0", "created": "2026-01-27T05:13:02.342585Z", "modified": "2026-01-27T05:13:02.342585Z", "relationship_type": "indicates", "source_ref": "indicator--9648f574-c7ea-4248-9ce0-9b1df39e9a66", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4056e2-11e6-468f-bf2f-d72c504a4b81", "created": "2026-01-27T05:13:02.342797Z", "modified": "2026-01-27T05:13:02.342797Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='zoemob.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.342797Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fee2e1ea-0632-4149-9ad9-979141ee29bb", "created": "2026-01-27T05:13:02.343488Z", "modified": "2026-01-27T05:13:02.343488Z", "relationship_type": "indicates", "source_ref": "indicator--bb4056e2-11e6-468f-bf2f-d72c504a4b81", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b50fa75-f7b6-4697-ae83-cd3383472c86", "created": "2026-01-27T05:13:02.343676Z", "modified": "2026-01-27T05:13:02.343676Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.343676Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--81a18f30-ce92-4fed-8b91-63e33488d0cb", "created": "2026-01-27T05:13:02.344491Z", "modified": "2026-01-27T05:13:02.344491Z", "relationship_type": "indicates", "source_ref": "indicator--9b50fa75-f7b6-4697-ae83-cd3383472c86", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e20d2-0827-4a83-8fa4-56221e50f4f9", "created": "2026-01-27T05:13:02.344668Z", "modified": "2026-01-27T05:13:02.344668Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.344668Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--89a2203f-91c3-49ac-b80f-ce27d7d59879", "created": "2026-01-27T05:13:02.345361Z", "modified": "2026-01-27T05:13:02.345361Z", "relationship_type": "indicates", "source_ref": "indicator--2e7e20d2-0827-4a83-8fa4-56221e50f4f9", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f957a9cd-b882-4c67-b524-df681898af40", "created": "2026-01-27T05:13:02.345544Z", "modified": "2026-01-27T05:13:02.345544Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='panel.zoemob.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.345544Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ab482461-1c38-48c0-a955-4cf69826385e", "created": "2026-01-27T05:13:02.346233Z", "modified": "2026-01-27T05:13:02.346233Z", "relationship_type": "indicates", "source_ref": "indicator--f957a9cd-b882-4c67-b524-df681898af40", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfad7385-2478-4173-8a36-38953c352b95", "created": "2026-01-27T05:13:02.346423Z", "modified": "2026-01-27T05:13:02.346423Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.zoemob.gpstracking']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.346423Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6378dcf4-44b2-4110-bb11-9ff3dda00620", "created": "2026-01-27T05:13:02.347111Z", "modified": "2026-01-27T05:13:02.347111Z", "relationship_type": "indicates", "source_ref": "indicator--dfad7385-2478-4173-8a36-38953c352b95", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48bfde7-df0e-4bab-8817-9369a0425ff8", "created": "2026-01-27T05:13:02.34729Z", "modified": "2026-01-27T05:13:02.34729Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='F9761F7C7AA6317B667671CB8F66479970630EAD']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.34729Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4445aec5-1958-4bc5-a281-3b3106be7bd7", "created": "2026-01-27T05:13:02.348085Z", "modified": "2026-01-27T05:13:02.348085Z", "relationship_type": "indicates", "source_ref": "indicator--c48bfde7-df0e-4bab-8817-9369a0425ff8", "target_ref": "malware--1baf46b2-8c65-4765-9034-7b8e6e3c67be"}, {"type": "malware", "spec_version": "2.1", "id": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2", "created": "2026-01-27T05:13:02.348269Z", "modified": "2026-01-27T05:13:02.348269Z", "name": "Life360", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6641148f-bae6-479c-a9a1-f102f6d065a4", "created": "2026-01-27T05:13:02.348437Z", "modified": "2026-01-27T05:13:02.348437Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpi4.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.348437Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75be8ce5-b485-42d6-b5f8-f9d614a004c3", "created": "2026-01-27T05:13:02.349123Z", "modified": "2026-01-27T05:13:02.349123Z", "relationship_type": "indicates", "source_ref": "indicator--6641148f-bae6-479c-a9a1-f102f6d065a4", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e1716b-6edf-4b29-96b2-14601e7d391f", "created": "2026-01-27T05:13:02.349299Z", "modified": "2026-01-27T05:13:02.349299Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-dev.tile-api.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.349299Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65365da6-7894-40de-8d53-bbc27a83d363", "created": "2026-01-27T05:13:02.350006Z", "modified": "2026-01-27T05:13:02.350006Z", "relationship_type": "indicates", "source_ref": "indicator--d7e1716b-6edf-4b29-96b2-14601e7d391f", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016bfd54-eedf-4108-9db2-5f21264a8865", "created": "2026-01-27T05:13:02.350184Z", "modified": "2026-01-27T05:13:02.350184Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360.atlassian.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.350184Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cb5374a-ee54-4c3d-8b9f-c65bdb54ee3c", "created": "2026-01-27T05:13:02.35095Z", "modified": "2026-01-27T05:13:02.35095Z", "relationship_type": "indicates", "source_ref": "indicator--016bfd54-eedf-4108-9db2-5f21264a8865", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73188878-d976-4c9a-a2cd-e2045ac90f8c", "created": "2026-01-27T05:13:02.351137Z", "modified": "2026-01-27T05:13:02.351137Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-location-dev.tile-api.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.351137Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8e94938e-db0e-470f-af80-dbcb77147de2", "created": "2026-01-27T05:13:02.351901Z", "modified": "2026-01-27T05:13:02.351901Z", "relationship_type": "indicates", "source_ref": "indicator--73188878-d976-4c9a-a2cd-e2045ac90f8c", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa08df83-986d-4936-a6f1-1c9bc6aab3bd", "created": "2026-01-27T05:13:02.35208Z", "modified": "2026-01-27T05:13:02.35208Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpi3.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.35208Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--664c04c1-cfbf-40b5-95f7-1a1812c3a123", "created": "2026-01-27T05:13:02.352913Z", "modified": "2026-01-27T05:13:02.352913Z", "relationship_type": "indicates", "source_ref": "indicator--aa08df83-986d-4936-a6f1-1c9bc6aab3bd", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359f4cea-c9aa-4a5a-b33e-a5035acb22df", "created": "2026-01-27T05:13:02.353091Z", "modified": "2026-01-27T05:13:02.353091Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='i.lf360.co']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.353091Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0740a00e-ab67-4825-8e87-50290f1ba5a0", "created": "2026-01-27T05:13:02.35377Z", "modified": "2026-01-27T05:13:02.35377Z", "relationship_type": "indicates", "source_ref": "indicator--359f4cea-c9aa-4a5a-b33e-a5035acb22df", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bfb615-ea83-4956-af25-1f9456175146", "created": "2026-01-27T05:13:02.35395Z", "modified": "2026-01-27T05:13:02.35395Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='gpi4.dev.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.35395Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d43b940-8f66-4a6e-b71b-9cc8b38ba838", "created": "2026-01-27T05:13:02.354626Z", "modified": "2026-01-27T05:13:02.354626Z", "relationship_type": "indicates", "source_ref": "indicator--55bfb615-ea83-4956-af25-1f9456175146", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb95078-47cf-470f-8f19-570cca15e2d0", "created": "2026-01-27T05:13:02.354823Z", "modified": "2026-01-27T05:13:02.354823Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360feedback.typeform.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.354823Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--603c3681-19c2-4664-9c06-2dade97de503", "created": "2026-01-27T05:13:02.355523Z", "modified": "2026-01-27T05:13:02.355523Z", "relationship_type": "indicates", "source_ref": "indicator--cfb95078-47cf-470f-8f19-570cca15e2d0", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b362b8b-5027-4f1e-9ec3-fd6a9e3d2855", "created": "2026-01-27T05:13:02.355698Z", "modified": "2026-01-27T05:13:02.355698Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api-cloudfront.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.355698Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d2d343b-92af-4824-a96a-dea023efa4b3", "created": "2026-01-27T05:13:02.356414Z", "modified": "2026-01-27T05:13:02.356414Z", "relationship_type": "indicates", "source_ref": "indicator--6b362b8b-5027-4f1e-9ec3-fd6a9e3d2855", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9d04e2-c7af-4af7-8e4e-f48b9ff28ff4", "created": "2026-01-27T05:13:02.356587Z", "modified": "2026-01-27T05:13:02.356587Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-com-l360safetycenter.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.356587Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4486b341-b1b6-44ac-8a73-dc0cae7620e8", "created": "2026-01-27T05:13:02.357402Z", "modified": "2026-01-27T05:13:02.357402Z", "relationship_type": "indicates", "source_ref": "indicator--bc9d04e2-c7af-4af7-8e4e-f48b9ff28ff4", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26361da1-6ae6-46c3-a230-f29aa7beb608", "created": "2026-01-27T05:13:02.357589Z", "modified": "2026-01-27T05:13:02.357589Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.357589Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6a4a7353-148b-401c-ab39-41921f5f80f1", "created": "2026-01-27T05:13:02.358301Z", "modified": "2026-01-27T05:13:02.358301Z", "relationship_type": "indicates", "source_ref": "indicator--26361da1-6ae6-46c3-a230-f29aa7beb608", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc536057-5643-4dc8-bac6-bdbd9f2abd92", "created": "2026-01-27T05:13:02.358479Z", "modified": "2026-01-27T05:13:02.358479Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.358479Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f9145304-f8a0-4e71-9911-4bfb0a109a3e", "created": "2026-01-27T05:13:02.35916Z", "modified": "2026-01-27T05:13:02.35916Z", "relationship_type": "indicates", "source_ref": "indicator--bc536057-5643-4dc8-bac6-bdbd9f2abd92", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e30258-a35f-44e2-9c35-87b8e9804bb6", "created": "2026-01-27T05:13:02.359336Z", "modified": "2026-01-27T05:13:02.359336Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360-wordpress.s3.amazonaws.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.359336Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa55407f-c838-4409-8a1f-0dd38c43b298", "created": "2026-01-27T05:13:02.360053Z", "modified": "2026-01-27T05:13:02.360053Z", "relationship_type": "indicates", "source_ref": "indicator--57e30258-a35f-44e2-9c35-87b8e9804bb6", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e94624-ab0f-4202-8415-3d87ce7e7eb3", "created": "2026-01-27T05:13:02.360233Z", "modified": "2026-01-27T05:13:02.360233Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='life360.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.360233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b8ea7c4f-e5cc-4c02-a712-5fb0b4bc279f", "created": "2026-01-27T05:13:02.361044Z", "modified": "2026-01-27T05:13:02.361044Z", "relationship_type": "indicates", "source_ref": "indicator--97e94624-ab0f-4202-8415-3d87ce7e7eb3", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55298e7-d235-444e-9eb7-02072e3295f0", "created": "2026-01-27T05:13:02.361226Z", "modified": "2026-01-27T05:13:02.361226Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.life360.android.safetymapd']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.361226Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--09123d20-84b1-4bda-8818-8d260e0626a5", "created": "2026-01-27T05:13:02.361918Z", "modified": "2026-01-27T05:13:02.361918Z", "relationship_type": "indicates", "source_ref": "indicator--d55298e7-d235-444e-9eb7-02072e3295f0", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08652f4e-2092-48f0-9adb-818e3f8a1c24", "created": "2026-01-27T05:13:02.362107Z", "modified": "2026-01-27T05:13:02.362107Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.life360.safetymap']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.362107Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e2fa2b1b-b7d9-4479-a2ba-60719fac7d8d", "created": "2026-01-27T05:13:02.362781Z", "modified": "2026-01-27T05:13:02.362781Z", "relationship_type": "indicates", "source_ref": "indicator--08652f4e-2092-48f0-9adb-818e3f8a1c24", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa0fbfa-4908-4005-abdd-9579c6ff995c", "created": "2026-01-27T05:13:02.362959Z", "modified": "2026-01-27T05:13:02.362959Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='19C0868F028757F49FD8F7BDF39FF70C771D622B']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.362959Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a8fe4dd6-0898-42f9-ae71-2df46b2f53ce", "created": "2026-01-27T05:13:02.363757Z", "modified": "2026-01-27T05:13:02.363757Z", "relationship_type": "indicates", "source_ref": "indicator--5aa0fbfa-4908-4005-abdd-9579c6ff995c", "target_ref": "malware--222cbd4a-f66c-42c5-a04a-acb48a9937d2"}, {"type": "malware", "spec_version": "2.1", "id": "malware--c84d7079-82da-4426-a917-ecec0d961210", "created": "2026-01-27T05:13:02.363936Z", "modified": "2026-01-27T05:13:02.363936Z", "name": "MicrosoftFamilySafe", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f89499-465e-4632-8b3b-950d39daf63a", "created": "2026-01-27T05:13:02.364113Z", "modified": "2026-01-27T05:13:02.364113Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='location.family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.364113Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c03b3c3b-540d-414b-849e-f972e0066baa", "created": "2026-01-27T05:13:02.364824Z", "modified": "2026-01-27T05:13:02.364824Z", "relationship_type": "indicates", "source_ref": "indicator--35f89499-465e-4632-8b3b-950d39daf63a", "target_ref": "malware--c84d7079-82da-4426-a917-ecec0d961210"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2702e11-f3b8-4836-b907-9728d38bdf4f", "created": "2026-01-27T05:13:02.365005Z", "modified": "2026-01-27T05:13:02.365005Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobileaggregator.family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.365005Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e8d161fc-4762-4dfe-a83a-6d52f30c8f3b", "created": "2026-01-27T05:13:02.36571Z", "modified": "2026-01-27T05:13:02.36571Z", "relationship_type": "indicates", "source_ref": "indicator--b2702e11-f3b8-4836-b907-9728d38bdf4f", "target_ref": "malware--c84d7079-82da-4426-a917-ecec0d961210"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cfc7f1-6390-4ef4-8955-0c644aebdef1", "created": "2026-01-27T05:13:02.365906Z", "modified": "2026-01-27T05:13:02.365906Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safedriving.family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.365906Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--16f52e7e-7ad8-4e77-8c34-9674e8ca22c2", "created": "2026-01-27T05:13:02.366643Z", "modified": "2026-01-27T05:13:02.366643Z", "relationship_type": "indicates", "source_ref": "indicator--a3cfc7f1-6390-4ef4-8955-0c644aebdef1", "target_ref": "malware--c84d7079-82da-4426-a917-ecec0d961210"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac6c824-9f2e-40a3-8e9e-8130e0c0e51d", "created": "2026-01-27T05:13:02.366867Z", "modified": "2026-01-27T05:13:02.366867Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='family.microsoft.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.366867Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e4829370-2d05-414c-ae0c-e9b4956f9ac4", "created": "2026-01-27T05:13:02.367611Z", "modified": "2026-01-27T05:13:02.367611Z", "relationship_type": "indicates", "source_ref": "indicator--7ac6c824-9f2e-40a3-8e9e-8130e0c0e51d", "target_ref": "malware--c84d7079-82da-4426-a917-ecec0d961210"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1965cfc1-31b2-40a6-a483-4c0c869b7b50", "created": "2026-01-27T05:13:02.367818Z", "modified": "2026-01-27T05:13:02.367818Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.microsoft.familysafety']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.367818Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--75cffd95-edf9-4e3c-a894-9692797086d2", "created": "2026-01-27T05:13:02.368488Z", "modified": "2026-01-27T05:13:02.368488Z", "relationship_type": "indicates", "source_ref": "indicator--1965cfc1-31b2-40a6-a483-4c0c869b7b50", "target_ref": "malware--c84d7079-82da-4426-a917-ecec0d961210"}, {"type": "malware", "spec_version": "2.1", "id": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22", "created": "2026-01-27T05:13:02.368672Z", "modified": "2026-01-27T05:13:02.368672Z", "name": "GeoZilla", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea560fdd-923c-4c6f-af87-05e74584f745", "created": "2026-01-27T05:13:02.368871Z", "modified": "2026-01-27T05:13:02.368871Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='api.geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.368871Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7afe4409-78d3-405a-abc7-0bca8a6bb502", "created": "2026-01-27T05:13:02.3697Z", "modified": "2026-01-27T05:13:02.3697Z", "relationship_type": "indicates", "source_ref": "indicator--ea560fdd-923c-4c6f-af87-05e74584f745", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14d3231-ade1-4e5e-a84e-23541e382341", "created": "2026-01-27T05:13:02.369898Z", "modified": "2026-01-27T05:13:02.369898Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='files.geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.369898Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e9dd8c6a-b685-41e3-af4c-8f06cd796fe7", "created": "2026-01-27T05:13:02.370573Z", "modified": "2026-01-27T05:13:02.370573Z", "relationship_type": "indicates", "source_ref": "indicator--d14d3231-ade1-4e5e-a84e-23541e382341", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abcdaa9-c980-4136-8dcf-7417d7c08e62", "created": "2026-01-27T05:13:02.370764Z", "modified": "2026-01-27T05:13:02.370764Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozilla.autosmartins.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.370764Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb345778-1ffd-46f0-83b0-c2133ac5dac5", "created": "2026-01-27T05:13:02.371449Z", "modified": "2026-01-27T05:13:02.371449Z", "relationship_type": "indicates", "source_ref": "indicator--1abcdaa9-c980-4136-8dcf-7417d7c08e62", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc9b488-86d2-4fd6-8358-dd685c3c450a", "created": "2026-01-27T05:13:02.371623Z", "modified": "2026-01-27T05:13:02.371623Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozillafamily-c92d0.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.371623Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e353aaa-7e25-4972-91ca-c6a93362301b", "created": "2026-01-27T05:13:02.372342Z", "modified": "2026-01-27T05:13:02.372342Z", "relationship_type": "indicates", "source_ref": "indicator--fbc9b488-86d2-4fd6-8358-dd685c3c450a", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2a0151-28a9-45ba-b828-b94433025723", "created": "2026-01-27T05:13:02.372519Z", "modified": "2026-01-27T05:13:02.372519Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozillafamily.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.372519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c7cdbadc-0e68-4269-ae53-ec9f88b3a9f2", "created": "2026-01-27T05:13:02.373225Z", "modified": "2026-01-27T05:13:02.373225Z", "relationship_type": "indicates", "source_ref": "indicator--9d2a0151-28a9-45ba-b828-b94433025723", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461d897c-78bc-4f4c-9f98-92ac0c719c90", "created": "2026-01-27T05:13:02.373402Z", "modified": "2026-01-27T05:13:02.373402Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='iot.geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.373402Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5a1cdd0a-fc67-4751-a253-8b5f127e2c7a", "created": "2026-01-27T05:13:02.3741Z", "modified": "2026-01-27T05:13:02.3741Z", "relationship_type": "indicates", "source_ref": "indicator--461d897c-78bc-4f4c-9f98-92ac0c719c90", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040ee08d-20fd-4cd0-bcfa-b513924ca7b0", "created": "2026-01-27T05:13:02.374276Z", "modified": "2026-01-27T05:13:02.374276Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozilla.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.374276Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db94e267-475a-419e-aeca-9813c892bd88", "created": "2026-01-27T05:13:02.374984Z", "modified": "2026-01-27T05:13:02.374984Z", "relationship_type": "indicates", "source_ref": "indicator--040ee08d-20fd-4cd0-bcfa-b513924ca7b0", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85916f06-0d98-4a39-a86c-e04d2d51ff8e", "created": "2026-01-27T05:13:02.37516Z", "modified": "2026-01-27T05:13:02.37516Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='geozillahelp.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.37516Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73e845fb-e18d-48c7-9d0d-16e7601d2efa", "created": "2026-01-27T05:13:02.375853Z", "modified": "2026-01-27T05:13:02.375853Z", "relationship_type": "indicates", "source_ref": "indicator--85916f06-0d98-4a39-a86c-e04d2d51ff8e", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909a90aa-53fa-4a34-a7a1-71bebb2545be", "created": "2026-01-27T05:13:02.376032Z", "modified": "2026-01-27T05:13:02.376032Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.geozilla.family']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.376032Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22c4f4b0-6208-4d78-bb65-fd5659e5568e", "created": "2026-01-27T05:13:02.376685Z", "modified": "2026-01-27T05:13:02.376685Z", "relationship_type": "indicates", "source_ref": "indicator--909a90aa-53fa-4a34-a7a1-71bebb2545be", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e121ee6a-d044-4177-bfe4-2b4e476d5819", "created": "2026-01-27T05:13:02.376877Z", "modified": "2026-01-27T05:13:02.376877Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='EE74E09E40A324B806AE5ED68A4543E50C3B6FC2']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.376877Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e3bb852-75f2-43d4-8bc7-31390b21d686", "created": "2026-01-27T05:13:02.377781Z", "modified": "2026-01-27T05:13:02.377781Z", "relationship_type": "indicates", "source_ref": "indicator--e121ee6a-d044-4177-bfe4-2b4e476d5819", "target_ref": "malware--4af2af42-94b2-45ac-b37d-443c4264ff22"}, {"type": "malware", "spec_version": "2.1", "id": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f", "created": "2026-01-27T05:13:02.377958Z", "modified": "2026-01-27T05:13:02.377958Z", "name": "KidsLox", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697aac6c-3021-4b86-8d4f-c20004c880be", "created": "2026-01-27T05:13:02.378128Z", "modified": "2026-01-27T05:13:02.378128Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidslox.page.link']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.378128Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3117ac0c-75c6-47ef-8e72-d489d425b955", "created": "2026-01-27T05:13:02.378812Z", "modified": "2026-01-27T05:13:02.378812Z", "relationship_type": "indicates", "source_ref": "indicator--697aac6c-3021-4b86-8d4f-c20004c880be", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6761b1f4-9db4-4277-a522-bdba2382da40", "created": "2026-01-27T05:13:02.37899Z", "modified": "2026-01-27T05:13:02.37899Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidslox.firebaseio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.37899Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--83d38333-c9b5-41b7-8e52-792ba328e32a", "created": "2026-01-27T05:13:02.379663Z", "modified": "2026-01-27T05:13:02.379663Z", "relationship_type": "indicates", "source_ref": "indicator--6761b1f4-9db4-4277-a522-bdba2382da40", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a84f31c-f5e3-4339-8ab9-26733b132aaf", "created": "2026-01-27T05:13:02.379857Z", "modified": "2026-01-27T05:13:02.379857Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='activity.kdlparentalcontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.379857Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d7797f4a-43a9-4520-90cc-81046e298425", "created": "2026-01-27T05:13:02.38055Z", "modified": "2026-01-27T05:13:02.38055Z", "relationship_type": "indicates", "source_ref": "indicator--5a84f31c-f5e3-4339-8ab9-26733b132aaf", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac84bd77-a8f6-4dfa-bc1b-77a53651b14f", "created": "2026-01-27T05:13:02.380724Z", "modified": "2026-01-27T05:13:02.380724Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='admin.kdlparentalcontrol.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.380724Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c5a3fcca-63b5-4b76-a06a-3637e38f521b", "created": "2026-01-27T05:13:02.381421Z", "modified": "2026-01-27T05:13:02.381421Z", "relationship_type": "indicates", "source_ref": "indicator--ac84bd77-a8f6-4dfa-bc1b-77a53651b14f", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9938a482-c83a-4698-8995-b10f70024453", "created": "2026-01-27T05:13:02.381593Z", "modified": "2026-01-27T05:13:02.381593Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidslox.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.381593Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b9806156-0467-4d29-aa29-58841318873e", "created": "2026-01-27T05:13:02.382267Z", "modified": "2026-01-27T05:13:02.382267Z", "relationship_type": "indicates", "source_ref": "indicator--9938a482-c83a-4698-8995-b10f70024453", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31a0d5c-2aa0-4e6d-aee3-3876a9344f6e", "created": "2026-01-27T05:13:02.382482Z", "modified": "2026-01-27T05:13:02.382482Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidsloxsupport.zendesk.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.382482Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e209a04d-fadd-40b2-9ae6-135b8ae5a79a", "created": "2026-01-27T05:13:02.383222Z", "modified": "2026-01-27T05:13:02.383222Z", "relationship_type": "indicates", "source_ref": "indicator--c31a0d5c-2aa0-4e6d-aee3-3876a9344f6e", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84210d0-65ad-4b60-85a1-16b88dc1295c", "created": "2026-01-27T05:13:02.383416Z", "modified": "2026-01-27T05:13:02.383416Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.advanced.kidslox.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.383416Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22ed1a92-2bd9-43c1-996c-f9818cdf0ebb", "created": "2026-01-27T05:13:02.38413Z", "modified": "2026-01-27T05:13:02.38413Z", "relationship_type": "indicates", "source_ref": "indicator--b84210d0-65ad-4b60-85a1-16b88dc1295c", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004689ab-b298-41e2-9bfa-885632c5a113", "created": "2026-01-27T05:13:02.384309Z", "modified": "2026-01-27T05:13:02.384309Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kidslox.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.384309Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--63ddb65f-5d84-4bef-9ade-d406aa1a9c4b", "created": "2026-01-27T05:13:02.384977Z", "modified": "2026-01-27T05:13:02.384977Z", "relationship_type": "indicates", "source_ref": "indicator--004689ab-b298-41e2-9bfa-885632c5a113", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6ec3dc-dfe4-425a-bc02-c05eb1b6b3c4", "created": "2026-01-27T05:13:02.385155Z", "modified": "2026-01-27T05:13:02.385155Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4BBD8F7E244B86B6B82F2A343EE8EDB5E797FEF8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.385155Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3318c9f-d808-4630-ba04-91b4de3aad87", "created": "2026-01-27T05:13:02.386075Z", "modified": "2026-01-27T05:13:02.386075Z", "relationship_type": "indicates", "source_ref": "indicator--7e6ec3dc-dfe4-425a-bc02-c05eb1b6b3c4", "target_ref": "malware--1bac7a65-3c7f-47b0-abd8-d1cdb6a16e3f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--6a389330-a407-48f0-9e28-05c9c0c92cb5", "created": "2026-01-27T05:13:02.386252Z", "modified": "2026-01-27T05:13:02.386252Z", "name": "FamiShield", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976ee09f-f288-42c8-b888-615abb62c054", "created": "2026-01-27T05:13:02.386421Z", "modified": "2026-01-27T05:13:02.386421Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='parental-control-d4a98-default-rtdb.asia-southeast1.firebasedatabase.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.386421Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--db1c42f2-3169-420a-9d7f-0dd7f3156bbd", "created": "2026-01-27T05:13:02.387199Z", "modified": "2026-01-27T05:13:02.387199Z", "relationship_type": "indicates", "source_ref": "indicator--976ee09f-f288-42c8-b888-615abb62c054", "target_ref": "malware--6a389330-a407-48f0-9e28-05c9c0c92cb5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aedb375-16b8-4ecc-a584-03ac6ed2b0a9", "created": "2026-01-27T05:13:02.387376Z", "modified": "2026-01-27T05:13:02.387376Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='famishield.usibtheteam.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.387376Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4875c57b-0225-404b-9112-a13170edeb54", "created": "2026-01-27T05:13:02.388074Z", "modified": "2026-01-27T05:13:02.388074Z", "relationship_type": "indicates", "source_ref": "indicator--4aedb375-16b8-4ecc-a584-03ac6ed2b0a9", "target_ref": "malware--6a389330-a407-48f0-9e28-05c9c0c92cb5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe44bd7-b77e-4d35-a155-a6188a134481", "created": "2026-01-27T05:13:02.388249Z", "modified": "2026-01-27T05:13:02.388249Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.USIB.Child.ChildControl']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.388249Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e6aca6c0-9b5b-4e0f-85ad-0727dfe6eca7", "created": "2026-01-27T05:13:02.389047Z", "modified": "2026-01-27T05:13:02.389047Z", "relationship_type": "indicates", "source_ref": "indicator--3fe44bd7-b77e-4d35-a155-a6188a134481", "target_ref": "malware--6a389330-a407-48f0-9e28-05c9c0c92cb5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46531120-a807-42f9-ab28-7ebf596b65d8", "created": "2026-01-27T05:13:02.389233Z", "modified": "2026-01-27T05:13:02.389233Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='4598FFB867E28560BC1198D61EC83A1CCA0F1612']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.389233Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--97e74b38-21a6-4d29-91e1-f53e84a87e37", "created": "2026-01-27T05:13:02.390022Z", "modified": "2026-01-27T05:13:02.390022Z", "relationship_type": "indicates", "source_ref": "indicator--46531120-a807-42f9-ab28-7ebf596b65d8", "target_ref": "malware--6a389330-a407-48f0-9e28-05c9c0c92cb5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--7525f2dd-e6bc-46f1-a670-46b60b7b134e", "created": "2026-01-27T05:13:02.390202Z", "modified": "2026-01-27T05:13:02.390202Z", "name": "Qustodio", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ccbc18-ca51-4718-892a-061ea3d812d7", "created": "2026-01-27T05:13:02.390375Z", "modified": "2026-01-27T05:13:02.390375Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='qustodio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.390375Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--77db140d-199a-4469-a23b-30c6d990bb24", "created": "2026-01-27T05:13:02.391127Z", "modified": "2026-01-27T05:13:02.391127Z", "relationship_type": "indicates", "source_ref": "indicator--49ccbc18-ca51-4718-892a-061ea3d812d7", "target_ref": "malware--7525f2dd-e6bc-46f1-a670-46b60b7b134e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02cf0fe-f7bc-4085-80b1-8530944e6bfd", "created": "2026-01-27T05:13:02.391316Z", "modified": "2026-01-27T05:13:02.391316Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.qustodio.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.391316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2e1b4949-8463-4fd7-aef7-865b5e7e6de3", "created": "2026-01-27T05:13:02.392015Z", "modified": "2026-01-27T05:13:02.392015Z", "relationship_type": "indicates", "source_ref": "indicator--a02cf0fe-f7bc-4085-80b1-8530944e6bfd", "target_ref": "malware--7525f2dd-e6bc-46f1-a670-46b60b7b134e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c24e358-2ed7-45b3-a110-8966682d380d", "created": "2026-01-27T05:13:02.392194Z", "modified": "2026-01-27T05:13:02.392194Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qustodio.qustodioapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.392194Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bb6553f-09c9-4b3a-9cc0-b6cad0a43e71", "created": "2026-01-27T05:13:02.392877Z", "modified": "2026-01-27T05:13:02.392877Z", "relationship_type": "indicates", "source_ref": "indicator--7c24e358-2ed7-45b3-a110-8966682d380d", "target_ref": "malware--7525f2dd-e6bc-46f1-a670-46b60b7b134e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2adec5c-8364-4531-8b9b-a79638d7d7d7", "created": "2026-01-27T05:13:02.393054Z", "modified": "2026-01-27T05:13:02.393054Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qustodio.par.qustodio-family-parental-control-app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.393054Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b3b5b6b2-8f7a-4bcc-9941-ef0d2a1dc90f", "created": "2026-01-27T05:13:02.393792Z", "modified": "2026-01-27T05:13:02.393792Z", "relationship_type": "indicates", "source_ref": "indicator--c2adec5c-8364-4531-8b9b-a79638d7d7d7", "target_ref": "malware--7525f2dd-e6bc-46f1-a670-46b60b7b134e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c6aded-d4d2-4257-9aa4-89688bd70b70", "created": "2026-01-27T05:13:02.393969Z", "modified": "2026-01-27T05:13:02.393969Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.qustodio.mdm.app.family.pro']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.393969Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10ed2a54-60cd-4b6c-9333-581485e568c9", "created": "2026-01-27T05:13:02.394771Z", "modified": "2026-01-27T05:13:02.394771Z", "relationship_type": "indicates", "source_ref": "indicator--76c6aded-d4d2-4257-9aa4-89688bd70b70", "target_ref": "malware--7525f2dd-e6bc-46f1-a670-46b60b7b134e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--98f90881-e0cf-46b1-bcda-984669f8af8e", "created": "2026-01-27T05:13:02.394954Z", "modified": "2026-01-27T05:13:02.394954Z", "name": "ScreenTime", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192f1784-9f97-4dfc-b0f9-7f0e5b64bf94", "created": "2026-01-27T05:13:02.395122Z", "modified": "2026-01-27T05:13:02.395122Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='screentimelabs.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.395122Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b256e1ee-47b8-4e48-925e-d54bb1bd09c9", "created": "2026-01-27T05:13:02.395806Z", "modified": "2026-01-27T05:13:02.395806Z", "relationship_type": "indicates", "source_ref": "indicator--192f1784-9f97-4dfc-b0f9-7f0e5b64bf94", "target_ref": "malware--98f90881-e0cf-46b1-bcda-984669f8af8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c1f62e-550c-4bfd-b87a-559c50de4ccf", "created": "2026-01-27T05:13:02.395986Z", "modified": "2026-01-27T05:13:02.395986Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.screentime.rc']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.395986Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c77b613d-0c70-4a4c-8693-94a0223f2f16", "created": "2026-01-27T05:13:02.396631Z", "modified": "2026-01-27T05:13:02.396631Z", "relationship_type": "indicates", "source_ref": "indicator--32c1f62e-550c-4bfd-b87a-559c50de4ccf", "target_ref": "malware--98f90881-e0cf-46b1-bcda-984669f8af8e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc95277-21ad-45b8-93f1-a9880bc02c2f", "created": "2026-01-27T05:13:02.39682Z", "modified": "2026-01-27T05:13:02.39682Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.screentime']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.39682Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9a0529d7-a5a6-4350-b29f-96a6431aa61a", "created": "2026-01-27T05:13:02.397468Z", "modified": "2026-01-27T05:13:02.397468Z", "relationship_type": "indicates", "source_ref": "indicator--fdc95277-21ad-45b8-93f1-a9880bc02c2f", "target_ref": "malware--98f90881-e0cf-46b1-bcda-984669f8af8e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--afab6467-b147-4038-97dc-41011ed3014e", "created": "2026-01-27T05:13:02.397641Z", "modified": "2026-01-27T05:13:02.397641Z", "name": "MMGuardian", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376bd64d-8e4d-4f5b-9803-3c8ad898ef05", "created": "2026-01-27T05:13:02.397826Z", "modified": "2026-01-27T05:13:02.397826Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mmguardian.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.397826Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4eabaea0-0a4e-42d0-bae4-22b100eb5476", "created": "2026-01-27T05:13:02.398539Z", "modified": "2026-01-27T05:13:02.398539Z", "relationship_type": "indicates", "source_ref": "indicator--376bd64d-8e4d-4f5b-9803-3c8ad898ef05", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d7e5ca-b3df-4751-8fdf-ad716c61f06f", "created": "2026-01-27T05:13:02.398726Z", "modified": "2026-01-27T05:13:02.398726Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mmguardian.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.398726Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--56bfdc92-150d-44b8-932f-62a9799a7fd7", "created": "2026-01-27T05:13:02.399436Z", "modified": "2026-01-27T05:13:02.399436Z", "relationship_type": "indicates", "source_ref": "indicator--50d7e5ca-b3df-4751-8fdf-ad716c61f06f", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ab9015-5bd5-4446-ba08-007bedd8af4d", "created": "2026-01-27T05:13:02.399626Z", "modified": "2026-01-27T05:13:02.399626Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='family.mmguardian.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.399626Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--334fd696-0bc6-448f-820e-1ce223296a8e", "created": "2026-01-27T05:13:02.400344Z", "modified": "2026-01-27T05:13:02.400344Z", "relationship_type": "indicates", "source_ref": "indicator--22ab9015-5bd5-4446-ba08-007bedd8af4d", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f06f0b08-4b10-4bf3-a73b-42dfe3c4ead1", "created": "2026-01-27T05:13:02.400519Z", "modified": "2026-01-27T05:13:02.400519Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mmguardian.parentapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.400519Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--860fc336-4457-4832-8f3a-dee92c196708", "created": "2026-01-27T05:13:02.401202Z", "modified": "2026-01-27T05:13:02.401202Z", "relationship_type": "indicates", "source_ref": "indicator--f06f0b08-4b10-4bf3-a73b-42dfe3c4ead1", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d58389-d854-4295-8272-80a9f3a43cd4", "created": "2026-01-27T05:13:02.401377Z", "modified": "2026-01-27T05:13:02.401377Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mmguardian.tabletsecurity']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.401377Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--73a91a6b-3d51-4a6b-af7a-e7378f4aba6f", "created": "2026-01-27T05:13:02.402076Z", "modified": "2026-01-27T05:13:02.402076Z", "relationship_type": "indicates", "source_ref": "indicator--28d58389-d854-4295-8272-80a9f3a43cd4", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4769f35d-e2fc-4d9d-8ef1-4b3689861692", "created": "2026-01-27T05:13:02.402253Z", "modified": "2026-01-27T05:13:02.402253Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mmguardian.childapp']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.402253Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8485332b-655f-459b-8efb-869c1c566950", "created": "2026-01-27T05:13:02.403041Z", "modified": "2026-01-27T05:13:02.403041Z", "relationship_type": "indicates", "source_ref": "indicator--4769f35d-e2fc-4d9d-8ef1-4b3689861692", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff101e21-9c87-43d1-9627-7a3cec89983b", "created": "2026-01-27T05:13:02.403217Z", "modified": "2026-01-27T05:13:02.403217Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='842933609E604063B55C04BBB47763AC7C0FC327']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.403217Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e569ecc4-f3cb-4812-9a1e-f727000c6ddd", "created": "2026-01-27T05:13:02.404011Z", "modified": "2026-01-27T05:13:02.404011Z", "relationship_type": "indicates", "source_ref": "indicator--ff101e21-9c87-43d1-9627-7a3cec89983b", "target_ref": "malware--afab6467-b147-4038-97dc-41011ed3014e"}, {"type": "malware", "spec_version": "2.1", "id": "malware--669807d1-5e49-41f9-ae14-31bb429c0022", "created": "2026-01-27T05:13:02.404185Z", "modified": "2026-01-27T05:13:02.404185Z", "name": "FlareFamilyLocator", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2895de2-5ba2-4321-a640-3af99f0fe897", "created": "2026-01-27T05:13:02.404355Z", "modified": "2026-01-27T05:13:02.404355Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.probit.flare']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.404355Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--eba61220-4dc5-466d-a13d-baa1b0172e11", "created": "2026-01-27T05:13:02.405023Z", "modified": "2026-01-27T05:13:02.405023Z", "relationship_type": "indicates", "source_ref": "indicator--e2895de2-5ba2-4321-a640-3af99f0fe897", "target_ref": "malware--669807d1-5e49-41f9-ae14-31bb429c0022"}, {"type": "malware", "spec_version": "2.1", "id": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37", "created": "2026-01-27T05:13:02.405196Z", "modified": "2026-01-27T05:13:02.405196Z", "name": "FamilyOrbit", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b621ec1a-66c2-4dd1-996f-6eb42e4f3f01", "created": "2026-01-27T05:13:02.40536Z", "modified": "2026-01-27T05:13:02.40536Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.familyorbit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.40536Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f7c9412c-609a-4d8e-ad74-c8f6c90a4de0", "created": "2026-01-27T05:13:02.406052Z", "modified": "2026-01-27T05:13:02.406052Z", "relationship_type": "indicates", "source_ref": "indicator--b621ec1a-66c2-4dd1-996f-6eb42e4f3f01", "target_ref": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039daca4-b4cc-44b1-9b4e-a6a402390a9f", "created": "2026-01-27T05:13:02.406227Z", "modified": "2026-01-27T05:13:02.406227Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.familyorbit.net']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.406227Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b5e58f4-1180-439a-b83a-5feee9cbf610", "created": "2026-01-27T05:13:02.406915Z", "modified": "2026-01-27T05:13:02.406915Z", "relationship_type": "indicates", "source_ref": "indicator--039daca4-b4cc-44b1-9b4e-a6a402390a9f", "target_ref": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e03e37-5d5b-4a04-be01-49e412a9fc65", "created": "2026-01-27T05:13:02.407089Z", "modified": "2026-01-27T05:13:02.407089Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='familyorbit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.407089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8fbbd199-1392-48a4-b9ec-6be639d51e67", "created": "2026-01-27T05:13:02.407766Z", "modified": "2026-01-27T05:13:02.407766Z", "relationship_type": "indicates", "source_ref": "indicator--92e03e37-5d5b-4a04-be01-49e412a9fc65", "target_ref": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b28bd29-82bd-4838-87e5-3f075b12ee61", "created": "2026-01-27T05:13:02.407942Z", "modified": "2026-01-27T05:13:02.407942Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.familyorbit.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.407942Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6cf7b34-30eb-4814-8941-ef61463ce5eb", "created": "2026-01-27T05:13:02.408614Z", "modified": "2026-01-27T05:13:02.408614Z", "relationship_type": "indicates", "source_ref": "indicator--6b28bd29-82bd-4838-87e5-3f075b12ee61", "target_ref": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd93051f-a64b-4590-b8cb-fd23a9ce0699", "created": "2026-01-27T05:13:02.408812Z", "modified": "2026-01-27T05:13:02.408812Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.familyorbit.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.408812Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--36ae3d8f-67c8-4792-80d0-873422f0ee1d", "created": "2026-01-27T05:13:02.409478Z", "modified": "2026-01-27T05:13:02.409478Z", "relationship_type": "indicates", "source_ref": "indicator--fd93051f-a64b-4590-b8cb-fd23a9ce0699", "target_ref": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815d2eed-c2b6-4bb8-9cf9-afbaa719bfea", "created": "2026-01-27T05:13:02.409653Z", "modified": "2026-01-27T05:13:02.409653Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='DB8DF9C3D6524B298F3EAD22E6A77D7FB2F1003A']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.409653Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--920224e7-75d0-4238-a57d-16d923315226", "created": "2026-01-27T05:13:02.410445Z", "modified": "2026-01-27T05:13:02.410445Z", "relationship_type": "indicates", "source_ref": "indicator--815d2eed-c2b6-4bb8-9cf9-afbaa719bfea", "target_ref": "malware--dcf8fb36-5a0a-4e0e-bf7b-8024ce780f37"}, {"type": "malware", "spec_version": "2.1", "id": "malware--5848e039-0c02-4c1d-b54c-6b9cea368e92", "created": "2026-01-27T05:13:02.410623Z", "modified": "2026-01-27T05:13:02.410623Z", "name": "Trulpe", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258adcf3-ab57-44f4-bf42-2a7cee1939f8", "created": "2026-01-27T05:13:02.410807Z", "modified": "2026-01-27T05:13:02.410807Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='truple.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.410807Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--38f51edf-2642-4daa-b9f0-c65fd7184c89", "created": "2026-01-27T05:13:02.411583Z", "modified": "2026-01-27T05:13:02.411583Z", "relationship_type": "indicates", "source_ref": "indicator--258adcf3-ab57-44f4-bf42-2a7cee1939f8", "target_ref": "malware--5848e039-0c02-4c1d-b54c-6b9cea368e92"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab12ea75-0c4c-421a-8832-3e9e215ed84b", "created": "2026-01-27T05:13:02.411774Z", "modified": "2026-01-27T05:13:02.411774Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='app.truple.io']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.411774Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--372fb533-1986-4326-a1eb-aa8daadf332a", "created": "2026-01-27T05:13:02.412451Z", "modified": "2026-01-27T05:13:02.412451Z", "relationship_type": "indicates", "source_ref": "indicator--ab12ea75-0c4c-421a-8832-3e9e215ed84b", "target_ref": "malware--5848e039-0c02-4c1d-b54c-6b9cea368e92"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20180746-e65f-470a-9c40-4567a1cf2e9a", "created": "2026-01-27T05:13:02.412629Z", "modified": "2026-01-27T05:13:02.412629Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.camhart.netcountable']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.412629Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--553ab41f-f0c6-4727-8910-cf4e372bf40f", "created": "2026-01-27T05:13:02.413306Z", "modified": "2026-01-27T05:13:02.413306Z", "relationship_type": "indicates", "source_ref": "indicator--20180746-e65f-470a-9c40-4567a1cf2e9a", "target_ref": "malware--5848e039-0c02-4c1d-b54c-6b9cea368e92"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a9edb316-7c43-41e1-b33b-c5c604a6b531", "created": "2026-01-27T05:13:02.413481Z", "modified": "2026-01-27T05:13:02.413481Z", "name": "Boomrang", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73355f27-02fd-438c-85c3-a5649e4f9e82", "created": "2026-01-27T05:13:02.413655Z", "modified": "2026-01-27T05:13:02.413655Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='useboomerang.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.413655Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0624e6eb-b62a-477e-a1e5-11c6b3373fc7", "created": "2026-01-27T05:13:02.414396Z", "modified": "2026-01-27T05:13:02.414396Z", "relationship_type": "indicates", "source_ref": "indicator--73355f27-02fd-438c-85c3-a5649e4f9e82", "target_ref": "malware--a9edb316-7c43-41e1-b33b-c5c604a6b531"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c66197-3ed5-4bf5-a8a6-84390352722b", "created": "2026-01-27T05:13:02.414584Z", "modified": "2026-01-27T05:13:02.414584Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.nationaledtech.Boomerang']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.414584Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6f352621-1ac6-4f6e-a587-78cae5f3e012", "created": "2026-01-27T05:13:02.415299Z", "modified": "2026-01-27T05:13:02.415299Z", "relationship_type": "indicates", "source_ref": "indicator--52c66197-3ed5-4bf5-a8a6-84390352722b", "target_ref": "malware--a9edb316-7c43-41e1-b33b-c5c604a6b531"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ecee33-a6dd-4235-973d-19ae5bb48002", "created": "2026-01-27T05:13:02.415503Z", "modified": "2026-01-27T05:13:02.415503Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='E6157A76E1DCF43159529212009A0AA335499B7D']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.415503Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--86d22f60-46d0-4158-aede-a724243c752d", "created": "2026-01-27T05:13:02.416309Z", "modified": "2026-01-27T05:13:02.416309Z", "relationship_type": "indicates", "source_ref": "indicator--e8ecee33-a6dd-4235-973d-19ae5bb48002", "target_ref": "malware--a9edb316-7c43-41e1-b33b-c5c604a6b531"}, {"type": "malware", "spec_version": "2.1", "id": "malware--a04ed541-790f-4978-885d-d67901618a0d", "created": "2026-01-27T05:13:02.416485Z", "modified": "2026-01-27T05:13:02.416485Z", "name": "MobileFence", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f896035-1e38-4d9a-8678-1f105bc75609", "created": "2026-01-27T05:13:02.416654Z", "modified": "2026-01-27T05:13:02.416654Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.mobilefence.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.416654Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee723364-7934-4f8e-98e7-bc55a1016a8d", "created": "2026-01-27T05:13:02.417358Z", "modified": "2026-01-27T05:13:02.417358Z", "relationship_type": "indicates", "source_ref": "indicator--7f896035-1e38-4d9a-8678-1f105bc75609", "target_ref": "malware--a04ed541-790f-4978-885d-d67901618a0d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017762d1-e134-44bc-9032-e76a1297afc1", "created": "2026-01-27T05:13:02.417532Z", "modified": "2026-01-27T05:13:02.417532Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='mobilefence.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.417532Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bec98116-82ba-4136-bba7-911e3296ddae", "created": "2026-01-27T05:13:02.418226Z", "modified": "2026-01-27T05:13:02.418226Z", "relationship_type": "indicates", "source_ref": "indicator--017762d1-e134-44bc-9032-e76a1297afc1", "target_ref": "malware--a04ed541-790f-4978-885d-d67901618a0d"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb95c2a-225f-4ff9-adce-a91a2c43f49e", "created": "2026-01-27T05:13:02.418409Z", "modified": "2026-01-27T05:13:02.418409Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.mobilefence.family']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.418409Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--48a51c24-0e91-4f3f-8105-630eb5171ec8", "created": "2026-01-27T05:13:02.419096Z", "modified": "2026-01-27T05:13:02.419096Z", "relationship_type": "indicates", "source_ref": "indicator--3fb95c2a-225f-4ff9-adce-a91a2c43f49e", "target_ref": "malware--a04ed541-790f-4978-885d-d67901618a0d"}, {"type": "malware", "spec_version": "2.1", "id": "malware--610cf65d-1822-4f4d-88be-2880fdf48fac", "created": "2026-01-27T05:13:02.419271Z", "modified": "2026-01-27T05:13:02.419271Z", "name": "Kidgy", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012c2afb-00f4-4f67-8190-e7440626f09a", "created": "2026-01-27T05:13:02.41944Z", "modified": "2026-01-27T05:13:02.41944Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kidgy.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.41944Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7d6eb494-4af0-466e-92ac-42a9ec413a62", "created": "2026-01-27T05:13:02.420251Z", "modified": "2026-01-27T05:13:02.420251Z", "relationship_type": "indicates", "source_ref": "indicator--012c2afb-00f4-4f67-8190-e7440626f09a", "target_ref": "malware--610cf65d-1822-4f4d-88be-2880fdf48fac"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b487558-7851-48dc-857a-0f20f18098c8", "created": "2026-01-27T05:13:02.42043Z", "modified": "2026-01-27T05:13:02.42043Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.parental.control.kidgy']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.42043Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--307947dd-cb2a-441d-b3cf-fc44a2e9d1f0", "created": "2026-01-27T05:13:02.421112Z", "modified": "2026-01-27T05:13:02.421112Z", "relationship_type": "indicates", "source_ref": "indicator--2b487558-7851-48dc-857a-0f20f18098c8", "target_ref": "malware--610cf65d-1822-4f4d-88be-2880fdf48fac"}, {"type": "malware", "spec_version": "2.1", "id": "malware--0ff67e53-4cbe-4819-8ab0-396c2754ed7f", "created": "2026-01-27T05:13:02.421289Z", "modified": "2026-01-27T05:13:02.421289Z", "name": "Kiddoware", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--536790c7-0315-42a7-9e3c-30d943fb5c75", "created": "2026-01-27T05:13:02.421458Z", "modified": "2026-01-27T05:13:02.421458Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='kiddoware.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.421458Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb2b91a5-3229-45e6-808e-a5fa9a85b724", "created": "2026-01-27T05:13:02.422149Z", "modified": "2026-01-27T05:13:02.422149Z", "relationship_type": "indicates", "source_ref": "indicator--536790c7-0315-42a7-9e3c-30d943fb5c75", "target_ref": "malware--0ff67e53-4cbe-4819-8ab0-396c2754ed7f"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330bcb37-ea08-44ed-a050-0290185f6894", "created": "2026-01-27T05:13:02.422329Z", "modified": "2026-01-27T05:13:02.422329Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.kiddoware.kidsplace']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.422329Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ea1b7010-3b55-44e0-9497-d3c3451a9637", "created": "2026-01-27T05:13:02.423005Z", "modified": "2026-01-27T05:13:02.423005Z", "relationship_type": "indicates", "source_ref": "indicator--330bcb37-ea08-44ed-a050-0290185f6894", "target_ref": "malware--0ff67e53-4cbe-4819-8ab0-396c2754ed7f"}, {"type": "malware", "spec_version": "2.1", "id": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b", "created": "2026-01-27T05:13:02.423186Z", "modified": "2026-01-27T05:13:02.423186Z", "name": "Netnanny", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fe24ac-f902-42c2-9ff3-034eaa008338", "created": "2026-01-27T05:13:02.423352Z", "modified": "2026-01-27T05:13:02.423352Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='parent.netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.423352Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--85a45ae7-4c1e-4590-8b33-a694c444cb90", "created": "2026-01-27T05:13:02.42405Z", "modified": "2026-01-27T05:13:02.42405Z", "relationship_type": "indicates", "source_ref": "indicator--77fe24ac-f902-42c2-9ff3-034eaa008338", "target_ref": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1a65d6-34b0-4ff2-a133-24086eaaab20", "created": "2026-01-27T05:13:02.424228Z", "modified": "2026-01-27T05:13:02.424228Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.424228Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc32c56b-21b3-4a24-b0b0-e64a37119d35", "created": "2026-01-27T05:13:02.424922Z", "modified": "2026-01-27T05:13:02.424922Z", "relationship_type": "indicates", "source_ref": "indicator--6b1a65d6-34b0-4ff2-a133-24086eaaab20", "target_ref": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0ce264-0f25-474f-8de6-4e744b9a3050", "created": "2026-01-27T05:13:02.425099Z", "modified": "2026-01-27T05:13:02.425099Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.425099Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--53ead66f-095e-4cd5-a675-7f8485049459", "created": "2026-01-27T05:13:02.425778Z", "modified": "2026-01-27T05:13:02.425778Z", "relationship_type": "indicates", "source_ref": "indicator--ad0ce264-0f25-474f-8de6-4e744b9a3050", "target_ref": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea437d26-f958-40b0-aab7-6e6921badbcb", "created": "2026-01-27T05:13:02.425958Z", "modified": "2026-01-27T05:13:02.425958Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='install.netnanny.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.425958Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--034f7ad7-dbd0-4ad5-a6c2-4e420c403bde", "created": "2026-01-27T05:13:02.426642Z", "modified": "2026-01-27T05:13:02.426642Z", "relationship_type": "indicates", "source_ref": "indicator--ea437d26-f958-40b0-aab7-6e6921badbcb", "target_ref": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158f8759-f898-4373-b952-3a3da92c80e2", "created": "2026-01-27T05:13:02.426838Z", "modified": "2026-01-27T05:13:02.426838Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.contentwatch.ghoti.cp2.child']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.426838Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--338bce02-ab29-462f-9869-0e0c1cef6fb6", "created": "2026-01-27T05:13:02.427519Z", "modified": "2026-01-27T05:13:02.427519Z", "relationship_type": "indicates", "source_ref": "indicator--158f8759-f898-4373-b952-3a3da92c80e2", "target_ref": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec567d0-bb4b-48d6-a05a-ab2926ff5c48", "created": "2026-01-27T05:13:02.427699Z", "modified": "2026-01-27T05:13:02.427699Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.contentwatch.ghoti.cp2.parent']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.427699Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3725445-46e5-40ff-8638-636e7f7ff655", "created": "2026-01-27T05:13:02.428903Z", "modified": "2026-01-27T05:13:02.428903Z", "relationship_type": "indicates", "source_ref": "indicator--bec567d0-bb4b-48d6-a05a-ab2926ff5c48", "target_ref": "malware--78917d3c-7a85-4913-8e39-d1d006848b0b"}, {"type": "malware", "spec_version": "2.1", "id": "malware--611ea33c-e65c-486f-98d0-a5eb96f8607c", "created": "2026-01-27T05:13:02.429085Z", "modified": "2026-01-27T05:13:02.429085Z", "name": "SeekDroid", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25b00d3-6b77-44e1-bca1-402255a5f269", "created": "2026-01-27T05:13:02.429258Z", "modified": "2026-01-27T05:13:02.429258Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='seekdroid.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.429258Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--907fcf59-036d-41cf-b618-3040e137bfea", "created": "2026-01-27T05:13:02.429979Z", "modified": "2026-01-27T05:13:02.429979Z", "relationship_type": "indicates", "source_ref": "indicator--b25b00d3-6b77-44e1-bca1-402255a5f269", "target_ref": "malware--611ea33c-e65c-486f-98d0-a5eb96f8607c"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d66851-1e68-418b-a42a-8cb4d8ad3262", "created": "2026-01-27T05:13:02.430213Z", "modified": "2026-01-27T05:13:02.430213Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='org.gtmedia.seekdroid']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.430213Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b2e6e44e-8bce-4712-91b2-82eb31d5ba9a", "created": "2026-01-27T05:13:02.430949Z", "modified": "2026-01-27T05:13:02.430949Z", "relationship_type": "indicates", "source_ref": "indicator--35d66851-1e68-418b-a42a-8cb4d8ad3262", "target_ref": "malware--611ea33c-e65c-486f-98d0-a5eb96f8607c"}, {"type": "malware", "spec_version": "2.1", "id": "malware--d1cd85fd-8c90-47e9-aacc-ee69490b4adb", "created": "2026-01-27T05:13:02.43114Z", "modified": "2026-01-27T05:13:02.43114Z", "name": "LockItTight", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fccc949-8336-4545-9231-38e7b349c577", "created": "2026-01-27T05:13:02.431316Z", "modified": "2026-01-27T05:13:02.431316Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='www.lockittight.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.431316Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--79a2a890-1c0c-4823-827f-928354642619", "created": "2026-01-27T05:13:02.432042Z", "modified": "2026-01-27T05:13:02.432042Z", "relationship_type": "indicates", "source_ref": "indicator--4fccc949-8336-4545-9231-38e7b349c577", "target_ref": "malware--d1cd85fd-8c90-47e9-aacc-ee69490b4adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a3c5f2-3be5-4454-9025-6dfd3f899fe5", "created": "2026-01-27T05:13:02.432219Z", "modified": "2026-01-27T05:13:02.432219Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='lockittight.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.432219Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8c8b05c8-9f24-45fc-911d-281234ad072d", "created": "2026-01-27T05:13:02.4329Z", "modified": "2026-01-27T05:13:02.4329Z", "relationship_type": "indicates", "source_ref": "indicator--77a3c5f2-3be5-4454-9025-6dfd3f899fe5", "target_ref": "malware--d1cd85fd-8c90-47e9-aacc-ee69490b4adb"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b27ac95-8b1e-41e3-b060-e3222f0bc95d", "created": "2026-01-27T05:13:02.433076Z", "modified": "2026-01-27T05:13:02.433076Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.timeon.litclient']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.433076Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4c6544a2-fbd7-48c3-a6dc-f4a8e20431d4", "created": "2026-01-27T05:13:02.433731Z", "modified": "2026-01-27T05:13:02.433731Z", "relationship_type": "indicates", "source_ref": "indicator--0b27ac95-8b1e-41e3-b060-e3222f0bc95d", "target_ref": "malware--d1cd85fd-8c90-47e9-aacc-ee69490b4adb"}, {"type": "malware", "spec_version": "2.1", "id": "malware--599e9022-d82b-438b-a929-c6eb41a00ac5", "created": "2026-01-27T05:13:02.43392Z", "modified": "2026-01-27T05:13:02.43392Z", "name": "SafeNet", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3edbb262-481c-49d2-9696-8f96367d8aa0", "created": "2026-01-27T05:13:02.434089Z", "modified": "2026-01-27T05:13:02.434089Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='safenet.family']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.434089Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ff21640-1635-4ac8-b446-6637060b783a", "created": "2026-01-27T05:13:02.434761Z", "modified": "2026-01-27T05:13:02.434761Z", "relationship_type": "indicates", "source_ref": "indicator--3edbb262-481c-49d2-9696-8f96367d8aa0", "target_ref": "malware--599e9022-d82b-438b-a929-c6eb41a00ac5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee8535f-593e-4e0c-90b7-c67548698b72", "created": "2026-01-27T05:13:02.434948Z", "modified": "2026-01-27T05:13:02.434948Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.cisai.safenetchild']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.434948Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2b3a7bc1-8ab2-4bd1-adad-786a1973ec71", "created": "2026-01-27T05:13:02.435602Z", "modified": "2026-01-27T05:13:02.435602Z", "relationship_type": "indicates", "source_ref": "indicator--0ee8535f-593e-4e0c-90b7-c67548698b72", "target_ref": "malware--599e9022-d82b-438b-a929-c6eb41a00ac5"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ec3906-c2f8-4f2e-a1b6-468185cd9dae", "created": "2026-01-27T05:13:02.435794Z", "modified": "2026-01-27T05:13:02.435794Z", "indicator_types": ["malicious-activity"], "pattern": "[app:cert.sha1='7F0D7ED5D614B03962014483E654A215A40F029F']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.435794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0846db57-2683-4e51-94fb-3c9944f282ee", "created": "2026-01-27T05:13:02.436572Z", "modified": "2026-01-27T05:13:02.436572Z", "relationship_type": "indicates", "source_ref": "indicator--f9ec3906-c2f8-4f2e-a1b6-468185cd9dae", "target_ref": "malware--599e9022-d82b-438b-a929-c6eb41a00ac5"}, {"type": "malware", "spec_version": "2.1", "id": "malware--9255047c-1ae5-44dd-b6c8-5d90c1830842", "created": "2026-01-27T05:13:02.436756Z", "modified": "2026-01-27T05:13:02.436756Z", "name": "Discovenger", "description": "Watchware application", "is_family": false}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7fbbc5-b13f-4de9-a95e-72a8880dc947", "created": "2026-01-27T05:13:02.436935Z", "modified": "2026-01-27T05:13:02.436935Z", "indicator_types": ["malicious-activity"], "pattern": "[domain-name:value='discovenger.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.436935Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d024d81f-748b-41b9-9ca9-1d5773a27605", "created": "2026-01-27T05:13:02.437731Z", "modified": "2026-01-27T05:13:02.437731Z", "relationship_type": "indicates", "source_ref": "indicator--dc7fbbc5-b13f-4de9-a95e-72a8880dc947", "target_ref": "malware--9255047c-1ae5-44dd-b6c8-5d90c1830842"}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a70baac-75c7-4d53-b04e-9c8ffdba4af2", "created": "2026-01-27T05:13:02.43794Z", "modified": "2026-01-27T05:13:02.43794Z", "indicator_types": ["malicious-activity"], "pattern": "[app:id='com.discovenger.app']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-01-27T05:13:02.43794Z"}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3eb597b-522d-405b-bab8-f94bb519a5d3", "created": "2026-01-27T05:13:02.438595Z", "modified": "2026-01-27T05:13:02.438595Z", "relationship_type": "indicates", "source_ref": "indicator--3a70baac-75c7-4d53-b04e-9c8ffdba4af2", "target_ref": "malware--9255047c-1ae5-44dd-b6c8-5d90c1830842"}]}