{ "type": "bundle", "id": "bundle--f6c0aca7-b88f-582b-be95-a3ba8629c2d7", "objects": [ { "type": "malware", "spec_version": "2.1", "id": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "name": "Morpheus", "description": "IOCs for Morpheus", "is_family": false }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a08fae01-cd78-57dd-bed1-e1847580f89a", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='assistenza-sim.it']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--0c1fc62c-5c96-5579-ab90-f21b4e5f45a1", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--a08fae01-cd78-57dd-bed1-e1847580f89a", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cf18ef96-fc56-5096-b0eb-c740a9a0fe1c", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[domain-name:value='gamehosts-621ba.appspot.com']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--8da7190c-5985-50da-9b52-d0a650ba88f8", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--cf18ef96-fc56-5096-b0eb-c740a9a0fe1c", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c76c18f0-62e5-5ae8-bd46-400640ca963a", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value='109.239.245.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--a8f8546a-d375-55d2-b459-9c3388d55c55", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--c76c18f0-62e5-5ae8-bd46-400640ca963a", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7671572a-99e0-5606-b299-6a198a5f93ef", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value='195.120.31.91']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ff3d9218-fb3b-59f6-b59b-55b9dd226e1c", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7671572a-99e0-5606-b299-6a198a5f93ef", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7b812eef-4489-5c1a-baf9-5ccd38bbc49b", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[ipv4-addr:value='212.210.1.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--c4b69cb6-1564-576e-8ec6-a809b14a1b1a", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--7b812eef-4489-5c1a-baf9-5ccd38bbc49b", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8dce706c-8ab3-55e7-9f9d-2969e35f79d8", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[app:id='com.android.core']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d9de5377-bae2-5a44-8767-7ca182a9e8d8", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--8dce706c-8ab3-55e7-9f9d-2969e35f79d8", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--70c8b8a6-9ddf-5c32-bacb-6f93fe1933aa", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[app:id='com.android.cored']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--ee0bf1ff-046c-58bf-9d82-af89cf457e83", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--70c8b8a6-9ddf-5c32-bacb-6f93fe1933aa", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ba260158-225b-54b6-8e9c-f7301f4a7642", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "indicator_types": [ "malicious-activity" ], "pattern": "[app:id='com.android.corew']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-04-23T00:00:00.000Z" }, { "type": "relationship", "spec_version": "2.1", "id": "relationship--d4dfd01c-eab4-5aff-a0b1-a6c658c8c64e", "created": "2026-04-23T00:00:00.000Z", "modified": "2026-04-23T00:00:00.000Z", "relationship_type": "indicates", "source_ref": "indicator--ba260158-225b-54b6-8e9c-f7301f4a7642", "target_ref": "malware--a0364bed-4229-521e-bd00-c2b9b6e4e94c" } ] }