Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- iption>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-fe4c42c3-6777-4be9-b378-83aae41800cd" timestamp="2016-12-09T16:58:47.006162Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ff0580e6-a0bd-48fa-8ae1-c29522384531">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-617d5400-1229-4fbb-8101-3315f1429129">\n <cybox:Object id="example:Address-9bf39062-25a4-4dcd-ae12-82d099f6e503">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.37.128.71</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-e9993f3b-2738-48f2-9ffd-e0bc4d1001d8">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-563cddde-ea2f-4acc-bbac-c9acc465ad5a" timestamp="2016-12-09T16:58:47.006693Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-53f029d2-6d48-4f50-8211-e00b1e40cb89">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-4dc49d13-484f-4e07-8d2c-ac3f919bb786">\n <cybox:Object id="example:Address-a382b5a8-4045-4bd8-b761-b5759048b906">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.37.102.13</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-80dbae46-c96b-4789-a812-e00743421276">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-14260e63-e705-4a28-bb1c-a247aeb3cf25" timestamp="2016-12-09T16:58:47.007253Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-93125b9b-58fe-4109-90c9-1be3a5d8042c">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-1ac91088-65bb-40f5-9c15-a3329401bfa8">\n <cybox:Object id="example:Address-257db7e3-1be0-4eb8-8f05-e6ff79e5e584">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.36.82.254</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-661e1432-66d4-421e-a263-6dcbe8d4bfd7">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-d691c680-8010-4297-83a2-2779ec7eafc0" timestamp="2016-12-09T16:58:47.007808Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-fd797835-e30b-4703-8071-8fe8bb6a1025">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-fc82ddfc-0d3c-4b95-934c-bce1c4b3a632">\n <cybox:Object id="example:Address-8ba1b0c3-cf31-46e6-9e78-a45bd80e9691">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.36.44.107</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-f8259752-3e3f-47b3-86d9-680ef35f1798">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-fb2d94c5-bb5a-4c86-b73a-a33945765fb2" timestamp="2016-12-09T16:58:47.008392Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-2308a31b-15ec-4b07-b4b7-a64fe952b9a8">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-10484d22-8fb2-4247-8c8e-fef9cef2ddb3">\n <cybox:Object id="example:Address-e8d27bba-5122-4e33-97b7-05558f2a78b3">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.36.34.58</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-994c7f94-eaf8-4727-b08c-9751b3268b26">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-fbb65177-267d-4583-816c-adb0890c9a75" timestamp="2016-12-09T16:58:47.008939Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-a54b6238-0c09-4f2d-b726-838bc0d01dbe">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-987533a5-606a-448d-8e6e-f1c19db1136e">\n <cybox:Object id="example:Address-1b7e2930-e6a5-4635-bbe9-0037bc92d2ca">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.35.45.46</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-d81d5912-4684-4d54-aa34-fb12c0f2ccfa">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-dfa2bf4b-d6b0-4cb9-bb90-f05f1fab945e" timestamp="2016-12-09T16:58:47.009465Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-bc7ecf8d-acbe-471a-88e0-4c6c5a30201a">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-dfb2ba03-29a1-4ae5-92dc-f8850f940870">\n <cybox:Object id="example:Address-8b910fd6-053a-4f0f-a30f-7a1e9cff0824">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.35.225.162</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-e7e2f96a-3fde-4448-9abb-767c0b823df1">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-a4968145-a937-43a6-92a5-58f53227a893" timestamp="2016-12-09T16:58:47.010092Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ca912a7a-2928-4e24-91b6-35d2a0b399e5">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-2f6d457d-f6fe-4c0e-a8a0-9bee047834d0">\n <cybox:Object id="example:Address-29a6210e-4bba-43c5-a7a5-f26bd5106357">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.35.103.47</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-59ff1ba1-5b0e-4a6b-9303-71938c912cd7">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-6239a181-928e-4920-bd82-f1ec3d85ac42" timestamp="2016-12-09T16:58:47.010625Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ecdf5454-b097-4ee1-8d97-c1fb29ae845b">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-e86721bf-c92f-4598-b0c6-19e8b6af67c2">\n <cybox:Object id="example:Address-879ee400-8c83-400b-b805-fc91646e6f35">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.34.75.163</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-bd7474e3-012a-4c60-b2fd-5657303f7221">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-9ab084bd-6c24-461a-87a9-cab36a352dcc" timestamp="2016-12-09T16:58:47.011194Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-a17e3f85-0cab-4391-bbc8-3d6eb5ce4541">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-22caddc3-40d4-4b27-aaf1-6ffe4df0aa2f">\n <cybox:Object id="example:Address-44776ffb-5c50-4d0a-a316-531f5d552b36">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.34.43.83</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-343e19fe-7306-43f9-bbe1-56d62459f9f6">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-13304ce8-018b-407d-af4f-708ba09bde3d" timestamp="2016-12-09T16:58:47.011726Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-a3a4cdf8-0afc-47be-ae92-3aa6fe620719">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-d3e7c721-1a9f-4439-855f-98ee2ada9c8b">\n <cybox:Object id="example:Address-b4d27f8a-9749-4c72-8543-0836c7f93daf">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.34.237.128</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-fc4ecdf6-e077-48c4-9e88-f9eb2cd6f562">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-f27906bf-d6bf-4838-8c9f-760c42bfa838" timestamp="2016-12-09T16:58:47.012455Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-48e3af8c-d6f0-46d2-8827-5d11329233bd">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-35a5537c-1e8b-4561-86c1-e03a009afe95">\n <cybox:Object id="example:Address-32a7e0fd-d283-4578-a08a-df658fed6cd5">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.34.200.189</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-261786a9-dd6a-46b4-bbae-82bd1974d561">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-898370d6-b209-49b7-ac75-5b8023a4fbc9" timestamp="2016-12-09T16:58:47.013655Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-f4d31cdb-bd21-47cc-b69a-9d960ea8bc21">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-010c21f1-bc65-43f1-94a7-10e3291ef5c0">\n <cybox:Object id="example:Address-b136d8da-e395-4991-a740-9b603e0abaff">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.92.221</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-5ef53ef3-a455-4f8d-8519-d4bed6a7970c">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-295051eb-da76-4e3b-b1cb-2936bb3b470b" timestamp="2016-12-09T16:58:47.014852Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-23f17ccc-63f6-4dc7-a1dc-641ac2651584">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-0dc2ef15-ec91-4e2b-85a6-567fa4b59212">\n <cybox:Object id="example:Address-e3b7cd4e-7ab1-45be-9f46-cb2b5e5a9e2d">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.70.61</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-0a67b797-b3ef-4ec7-9ec7-524b1d62b977">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-501604f2-2f63-4d6f-b365-0bac13c608a0" timestamp="2016-12-09T16:58:47.015957Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-496794ef-1018-4436-b975-95ddf3847566">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-9c97eaeb-a25c-4c3d-9bd6-4a645b4fc291">\n <cybox:Object id="example:Address-c2228deb-505f-47bd-b7c9-58ba9a5de187">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.4.144</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-249a73b1-14c7-4e01-8b15-b33c2d13e65e">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-bebdf2d0-22ad-4d4b-9a60-c822b9e81d4d" timestamp="2016-12-09T16:58:47.016869Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-e749916b-5aa6-48ab-88ac-d27858e7e536">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-23caa9e6-fdb3-4594-bd5d-f44313b7e63b">\n <cybox:Object id="example:Address-2028fba3-6279-4282-a3f2-9a352013afc9">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.3.74</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-4b5535f7-0747-4c8f-86cd-b40853908b0c">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-a30b641e-1c2d-47a2-ba1f-f893efbaf504" timestamp="2016-12-09T16:58:47.017888Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-3ef2653b-cffa-43dd-960e-17e8707b1b9b">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-20d4bd21-f278-47ae-b806-cece85cad897">\n <cybox:Object id="example:Address-35abef21-929f-47b3-8e9b-280400aeec18">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.157.113</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-47c0d05b-4633-43ca-9848-378aba1f87ce">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-0881475f-4ed2-4e09-9340-b11bd9c09164" timestamp="2016-12-09T16:58:47.018800Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-2e8a76af-dfb7-4485-99e3-d87daf240a21">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-b08be20e-081f-4011-9863-aafc83be0e56">\n <cybox:Object id="example:Address-183b6659-562e-45b8-9de5-3c5f9f4921b8">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.149.163</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-908e9bf8-2c04-40c8-9ab9-0024b67847b6">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-3aea38f1-ac3f-409b-8976-779c269bbb5d" timestamp="2016-12-09T16:58:47.019726Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ada6d706-559c-4244-9faa-b5e6d0140ced">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-9f67c447-ae97-4cb0-be37-bd42ed9293f7">\n <cybox:Object id="example:Address-047b6928-f0a1-4a71-8cc5-771ed75ab784">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.33.135.219</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-8eb3c39b-ff22-4495-b31b-7528cd661e45">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-7df964ae-de4a-4d9d-9e7a-12acfdb5cdff" timestamp="2016-12-09T16:58:47.020499Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-0cb1407d-420e-4fa0-8c48-370ad4695c93">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-04a96c78-b567-450d-a668-5098dcb8e80d">\n <cybox:Object id="example:Address-9b454515-5b57-4bd2-bf38-5fd82015117a">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.32.29.204</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-d7090527-5b93-44b8-9811-d30fc58b7a3b">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-4d96f8dc-2ddd-42cc-9fbe-7e00e7ce85f7" timestamp="2016-12-09T16:58:47.021311Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-bf338d82-d21d-4222-bc3a-5ca78222b9e9">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-01be4d18-edda-4fea-ba97-3824fecdc326">\n <cybox:Object id="example:Address-e9ac34a6-d471-421c-aa3d-307f565836ea">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.32.27.4</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-06ce1f8b-1e2f-4b81-9bf1-0c084765ff9c">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-88a32091-402c-430c-a4ab-8cbff09cb376" timestamp="2016-12-09T16:58:47.022071Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-7db46d8b-f2fb-4895-8cf7-eccf19400fd9">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-cf9fd147-b0ca-4bb1-b43f-d0ba6a93078d">\n <cybox:Object id="example:Address-b4f7049c-7dff-4fa2-93a7-340a425547ab">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.32.176.43</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-70ebb1e7-cce6-4828-9cd8-910da2d6ade1">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-ae42ea24-7905-4848-b25c-155a54db257f" timestamp="2016-12-09T16:58:47.022714Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-0339f745-89b7-4621-a4da-818bf4074476">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-702be5ff-2ba7-4031-b6db-45b238cb7232">\n <cybox:Object id="example:Address-d38da225-7ba0-4bc3-9f0e-c7061f207817">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.3.101.192</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-de9c29f8-f818-48c7-a625-0dda63671e32">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-484608dd-6cca-4f51-8df2-a2572c448f03" timestamp="2016-12-09T16:58:47.023320Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-4022ff3d-2e2a-44bd-ba2b-04dd530e6449">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-5d83316f-9a0c-42dd-9368-a550b8fe20be">\n <cybox:Object id="example:Address-8b6d77dc-c4fe-483e-9fea-63fc349cb972">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.8.247</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-3c33a1ff-0732-4a97-badc-51c4857b676e">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-8c6f1758-42c9-4ec0-986f-944bbd5d1b8b" timestamp="2016-12-09T16:58:47.023935Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-61ce27ad-61c1-4ed2-98e7-9b4401b720d8">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-22b0ef87-3d33-407e-8cd3-f44c4b4154ca">\n <cybox:Object id="example:Address-da265caf-2878-49e0-9ccd-d9b1d6e37219">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.62.143</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-07ea7e65-ffac-4e53-9bac-f3991b5c0a3e">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-80006e23-5fbc-4237-8883-89d16e6291f8" timestamp="2016-12-09T16:58:47.024578Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-dfe4c18c-ac38-4a33-ae51-c4668bc84c70">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-85858a87-bf54-420b-b2ad-0adbf4dee0fd">\n <cybox:Object id="example:Address-e4c5f49f-d587-41fa-be4b-e5892a3f513d">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.250.8</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-70d2f422-b436-486c-9949-9ef369ea35dd">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-36de896b-66e0-477c-906b-be57cf2a956c" timestamp="2016-12-09T16:58:47.025140Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-82519841-9181-4eac-8c1a-0e418c32eb98">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-0ae7bd8a-5aa5-4acb-ba15-2d12999a9ee1">\n <cybox:Object id="example:Address-21636581-4ec6-4cd4-b146-9f2fb41061fb">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.239.219</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-f16403df-3564-4f1e-aa39-9a0530467d3c">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-a200382e-1e5a-4ecd-88a0-f28a4f3b600c" timestamp="2016-12-09T16:58:47.025707Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-000ce858-d77f-46f1-ab8e-0fbe9d67a82d">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-f9df8931-44c0-4a11-b26e-fe2007d0a30f">\n <cybox:Object id="example:Address-0925c42c-5005-4633-a242-0b242d420991">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.234.124</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-c4b73423-d63a-4349-8e21-1dfb89fac2e1">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-edf78aa1-f91e-4041-809e-99b6a0988616" timestamp="2016-12-09T16:58:47.026268Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ad9d6ba3-d421-4853-bab1-1d36d6571caa">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-a8192dbc-8bd2-49d7-b98c-8a08446d7cad">\n <cybox:Object id="example:Address-61a269c7-50f2-451b-a66f-1f8105397097">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.159.34</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-383118eb-8e7a-4134-89b0-38e1014c9dd3">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-a4570633-37b6-47f9-8203-017383168f5d" timestamp="2016-12-09T16:58:47.026858Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ceeb26c1-3761-4575-9383-be40dc0e8639">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-68e71082-c73b-41cb-a36c-c551cae143b1">\n <cybox:Object id="example:Address-7abafe9d-dbfd-43ee-9548-5917987f1fb2">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.146.129</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-2104b10c-68c9-4bb7-bfe2-ad6671d09e82">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-1ea11ea8-d2c5-43b8-805c-085ca294d6ae" timestamp="2016-12-09T16:58:47.027431Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-dfda0161-7419-444c-a0f6-b347ffe0cfae">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-862e7694-20b9-41c7-b582-a5c97169865e">\n <cybox:Object id="example:Address-4590aba4-fbae-4426-b337-c4b63e8beb60">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.132.126</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-3c45cd9a-3898-424a-9b3b-a4294f8fa825">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-e8a1e99a-2ca6-486c-8591-fe3e3335d56a" timestamp="2016-12-09T16:58:47.028012Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-a030f173-0e91-437d-9964-7d6f77d7025c">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-89d2a6ee-3864-4d95-8309-08adef2f5759">\n <cybox:Object id="example:Address-ea4ddd44-e3c7-4789-b842-3afb3117f2a4">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.2.124.22</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-72cf7173-355a-45d6-80e5-0543ef269e4b">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-9540cfbe-302a-485d-a342-2e56530d0234" timestamp="2016-12-09T16:58:47.028579Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-e9f338a9-6c17-499e-bb9f-984a734b2ce2">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-f2537650-448e-460d-9625-b2a977f550ea">\n <cybox:Object id="example:Address-76ecee9f-aaa4-440d-909f-64896e3425f5">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.16.93.246</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-79b14c9d-221e-4cfd-90fc-6186b6c26dd8">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-71702482-ed45-448f-8ad6-de7ecf2bd4e2" timestamp="2016-12-09T16:58:47.029140Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-1363af46-4f93-45a4-8596-b922e788d5d9">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-81a0155a-d051-4ee5-be74-f7feb3fb31d3">\n <cybox:Object id="example:Address-a2cc198f-0ee7-4438-a10b-3a12c2bd21e1">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.16.222.124</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-30ffc7eb-b6e6-4466-89ad-03c98b0b74c2">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-ef7a6080-a748-489a-aee6-3821629c911e" timestamp="2016-12-09T16:58:47.029774Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-47ac8822-99aa-4da4-b7e5-b2eb6854c536">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-44304723-a59f-4bf6-ba56-c67e75cc4afe">\n <cybox:Object id="example:Address-e0372d52-b58f-42b0-b380-dc74c1d498f9">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.16.208.92</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-0b67bcf9-dec7-4e98-a566-be2e2ef5a30f">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-ff14c021-5c37-4af6-b4c7-2df30d25009a" timestamp="2016-12-09T16:58:47.030338Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-dbe86812-781f-4cda-98fc-7453e9ac4bc4">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-85a7add7-68b8-4552-a2a0-a84b63665b0d">\n <cybox:Object id="example:Address-c2697c15-e636-4114-8d36-dfa4d90b2b94">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.13.92.246</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-11b98879-92f6-4651-b408-47533eed807d">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-5f246349-b106-4934-b08d-f0818ea2ca5e" timestamp="2016-12-09T16:58:47.030899Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-f465b5c9-df10-438f-b8e0-c36939f488f9">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-96d447c5-eb8b-4947-bd41-670ccddadc3a">\n <cybox:Object id="example:Address-939b2590-3d8b-4003-b861-dfa08028fa26">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.53.243</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-fc2d4c59-c70c-4170-8f93-9543f8743c5e">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-efa7a222-ac2c-43e1-ab25-cfb9d58fc4b8" timestamp="2016-12-09T16:58:47.031465Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-c08e0f37-c526-4f82-8b71-7089774221bb">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-1264a47e-ef88-461e-ba59-2edc1967d4ac">\n <cybox:Object id="example:Address-5a83ce59-f8a4-49f1-9dec-adde1e36d102">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.47.25</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-da6db040-491a-4861-b549-9fcae60a6a9f">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-c7ca8f20-bcf1-4f90-81e9-a9107d562e15" timestamp="2016-12-09T16:58:47.032027Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-f6bfbb5c-bad0-4c14-b678-7b8b899e482e">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-d2055bfb-284c-4bde-8ec3-28917024f88b">\n <cybox:Object id="example:Address-82ab4fc5-7f97-4b73-a8f3-f019082be07f">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.247.14</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-bb11d6a8-656b-4888-bc4c-1936c32b4f23">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-6b10e02e-2876-4de4-ba81-4dfd3ed1845e" timestamp="2016-12-09T16:58:47.032636Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-d617eef7-934a-4e73-bb72-fa597cc907ea">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-4679c667-e333-466f-b6cc-a9c96107813e">\n <cybox:Object id="example:Address-924c05f6-3cb7-4a94-b886-971cfec7f765">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.213.26</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-77904741-444d-486c-8dc1-8b2c4c668688">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-edcb3ddc-c642-4dbf-ae69-d866ee53e696" timestamp="2016-12-09T16:58:47.033343Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-35bc5794-e619-4a9e-b876-369e20094d03">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-c0cda58a-6d91-416c-a414-c728281e608c">\n <cybox:Object id="example:Address-9609c6c3-37c4-4841-b512-906aaed0f849">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.207.131</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-ac14ecb4-a863-44b6-b997-300a08029c43">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-7444c224-b4c1-4acb-8b9d-05c1f6d934d2" timestamp="2016-12-09T16:58:47.033949Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-356502fe-9466-48b3-a8ca-b72fba08cb4c">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-8fdabaae-eefb-4e63-a9bf-f3172c57728c">\n <cybox:Object id="example:Address-0da72680-473e-482b-b40f-24c423f5dff7">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.204.108</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-732fffb6-b32b-4800-bdad-b24806ec209b">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-edcdc276-bd36-42a2-acc5-250a64eb6f87" timestamp="2016-12-09T16:58:47.034528Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-0b214ff8-f0e3-47a4-b6d4-91859cc61ca4">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-e5696c40-2145-40c8-ab9a-b49ae5c5842f">\n <cybox:Object id="example:Address-5b99f99e-29f0-40a6-8bb4-502344abdb62">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.184.234</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-9ed1ab05-f16b-4f63-8ee2-1739ead19097">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-380d4f24-9e2c-498d-901a-18255e70696c" timestamp="2016-12-09T16:58:47.035172Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-dc4a8acc-69fe-4cd8-a737-85b15962f009">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-9431910c-ceab-41cf-80fa-677d93327421">\n <cybox:Object id="example:Address-f75b9842-fe21-424f-a2b2-f260caf0c7c3">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.178.222</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-ea518f90-a9ff-456b-9950-4d415445b648">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-335bd41c-c85c-40b4-8202-6693cb0875e7" timestamp="2016-12-09T16:58:47.035741Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ad8be5a0-15c8-42fd-80a8-c3c9efd2b0e2">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-9d4a2007-f327-4a11-ab43-ecdba1143016">\n <cybox:Object id="example:Address-f7bf15de-99e8-43ba-9e9e-b3282b5f8555">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.12.102.52</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-d90f49bd-e401-4f05-ac7a-7cda09ab0a85">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-b266db1b-ea31-41f6-8687-4f4a945d0a6d" timestamp="2016-12-09T16:58:47.036304Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-d74ec822-1400-4f23-b804-c2ee0a791618">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-370a9594-589c-46d4-86aa-915eab5509ed">\n <cybox:Object id="example:Address-5816ce1a-5b73-4aef-85f0-1b45e07892f2">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.11.184.169</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-7bab78a7-bba8-4a6e-b090-293835136eac">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-636f6875-ce62-4f5b-a827-c2b133bee1f8" timestamp="2016-12-09T16:58:47.036932Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-98c88ae7-645a-4a00-ac90-8e06860db541">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-11a5e75a-dbc6-419d-a5cd-1cde140da041">\n <cybox:Object id="example:Address-620b8afa-3b01-4394-bf49-35b39458e036">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.10.48.68</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-31c1887a-322b-4703-b05f-8b3199b24174">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-a9969325-b4f7-4ccd-99f0-a7f8216d3533" timestamp="2016-12-09T16:58:47.037493Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-18795a4c-f7de-4b97-bb50-a879f512fd28">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-01a5588b-8ebe-4636-abea-c4fb50a55b92">\n <cybox:Object id="example:Address-ae94c408-efef-4439-b5bc-f990d4fdc7e2">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.1.50.74</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-f57d74ef-59ae-4e4f-b997-9e36842333e2">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-6bf86209-4093-44a9-932c-e3f5d46c0cf1" timestamp="2016-12-09T16:58:47.038028Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ad3503b3-fb20-46ce-9b88-64c70e72e0e7">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-a4c2e4e3-9429-4f34-9b1f-e37d782086b9">\n <cybox:Object id="example:Address-98699dc3-5815-432b-957a-3246aa00e504">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.1.5.118</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-4ee41640-4fb3-4ead-8288-752bfb2f9599">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-13799bda-a5bb-4b8f-9659-a00fa9f3a05d" timestamp="2016-12-09T16:58:47.038586Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-a6f30080-2ec7-4546-9476-94f3a82420d3">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-4c75e59f-6a3a-4ee0-ae1c-1619da48b09d">\n <cybox:Object id="example:Address-59bafb2f-0440-45c3-813f-6bec326232f8">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.1.224.159</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-68cb096c-00ff-4e59-8314-655c2c5a4dd8">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-03a8894b-e3c9-4bc0-a326-8b62b6fec098" timestamp="2016-12-09T16:58:47.039184Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ef97c901-55fc-4503-ae4f-4cf0b27697bd">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-154d4861-c97d-4c48-a58a-e01e85b3e082">\n <cybox:Object id="example:Address-671abc98-7186-45b1-8177-61772344045d">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.1.129.58</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-a6bebf20-15af-4830-bb2c-9d6832a40a8e">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-32ecaff8-9e3a-4836-86d0-2a710b822286" timestamp="2016-12-09T16:58:47.039778Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-3527e7f0-19ec-4e5c-9da4-e613bb7d7e57">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-32456072-a158-44ad-b5bd-6225095a8312">\n <cybox:Object id="example:Address-6fcfc040-0d6a-4ab1-bcee-c27ba4dc21aa">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.1.117.41</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-28cf02a7-5a56-487b-863c-0bdcf6d38359">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-b9af6169-c192-4aae-8401-18a6be38e27a" timestamp="2016-12-09T16:58:47.040379Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">IP Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-59fe6d0b-6845-4db3-b71b-80608c00ba35">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-17e5d900-b298-4d68-a8b6-c2a9b5f27834">\n <cybox:Object id="example:Address-54561b1c-617e-4c43-af6e-83e06aa0fa0c">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType">\n <AddressObj:Address_Value>100.0.108.128</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-c10e9a12-f78c-4d8f-a752-cd586e4b3771">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-60cff3d1-0cc1-4bd6-b8ef-65d1bfde25c0" timestamp="2016-12-09T16:58:47.346979Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-4f56d045-614d-4521-b2bd-3dab9d642fc3">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-602c353e-96ce-4a0d-a0a0-7590b71ee035">\n <cybox:Object id="example:URI-f4620d6d-76f3-4d1c-8721-50575c2add34">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>aisSubmissionSample.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-299e6534-d4d0-473c-b0bb-6689da3295ea">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>My Tag</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-5c835d4e-4397-4a8b-b3da-c336349ac91b" timestamp="2016-12-09T16:58:47.626643Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-f6162646-1850-401a-94c2-e04806a81bf3">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-5d6f7d91-c5a7-4a2a-8ce8-33893f6befeb">\n <cybox:Object id="example:URI-a906830b-5508-4fb2-bb72-bc07e0edd10e">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-249-12-59.hsd1.pa.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-0d10fb18-b512-4ef1-b223-1b7cbf784d88">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-a9c92096-c6a2-48a6-a6c2-bcad152471c9" timestamp="2016-12-09T16:58:47.628011Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-99a3da53-3eb2-4611-bfa1-6ce8d625c160">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-57b84167-490f-46cd-a281-d62157f35f6f">\n <cybox:Object id="example:URI-aaddce48-d48e-428d-8733-bd9aaf4dec46">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-248-81-67.hsd1.nj.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-5f11b9a3-819a-4ee8-aeb0-20cd466ced27">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-4a3394fa-a940-40cc-a7e4-4b6491f80348" timestamp="2016-12-09T16:58:47.629186Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-e8f16c3c-d452-40b5-a543-5d02556041ba">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-df71c59f-efe9-416b-b91a-3a600bc0bcad">\n <cybox:Object id="example:URI-286e8f7e-9566-42da-ab7d-207baa62ff84">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-248-70-186.hsd1.nj.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-67ad1751-954f-455b-ba14-a2a1a5c74c2d">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-cbf40d79-55f7-4b47-ace3-77363f55a53f" timestamp="2016-12-09T16:58:47.630334Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-7a72fca9-1573-42f8-81cb-259993e5b031">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-a289ddd7-e562-4141-975b-189876ca8165">\n <cybox:Object id="example:URI-0fe60d25-f0cf-42be-b347-714f078df11a">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-247-47-84.hsd1.fl.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-3c35bd85-e204-44fa-ba53-c2b70d5ceb87">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-69d770ac-5631-4d55-8e4c-4352cb57e1ac" timestamp="2016-12-09T16:58:47.631244Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-61b19bb6-2615-4384-9137-740ff2fbf719">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-56b1671e-0284-4723-92e4-20f9299e9e72">\n <cybox:Object id="example:URI-90846f0c-a700-4f5e-a23d-0680fc536cc4">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-247-138-95.hsd1.tn.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-47d0cedc-1baf-4df9-861b-99a8d02dac2f">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-8104babe-bf79-4ba2-9748-0a466aa296c7" timestamp="2016-12-09T16:58:47.632143Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-150d9582-719a-4cf9-869e-edc37347c96d">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-490bef13-7029-4857-b0b1-820722fed0d3">\n <cybox:Object id="example:URI-6045603c-a63b-40f1-a797-e856f288e1ad">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-246-116-44.hsd1.la.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-52fb518c-7cb0-4749-98e1-cf0e083d24f1">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-370da991-5e91-48d8-8f02-dc9b14836403" timestamp="2016-12-09T16:58:47.633046Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-13c39755-9060-4de5-8b89-9a3fd398f164">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-2498dddb-ca06-440d-902a-81bb026b400d">\n <cybox:Object id="example:URI-24eeb526-4d9d-42ee-8108-d6506fd927ba">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-245-248-243.hsd1.in.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-cb5145ca-2b5f-461f-bd00-d11adc01a9d0">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-dc76d970-fe2d-4ec4-be9c-3c49517468e8" timestamp="2016-12-09T16:58:47.634056Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-c16426c5-8ac3-48de-bc2b-ed8493a2c2ad">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-9257dfdf-dfe5-4800-8667-d99c60446009">\n <cybox:Object id="example:URI-5b598933-fe27-4796-afef-245343741a43">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-245-178-38.hsd1.il.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-be640489-34de-4dbe-876a-56a30c638939">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-29abf44b-613a-4149-b9ab-83fa755907ea" timestamp="2016-12-09T16:58:47.634860Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-1e7809c7-1e8b-401c-aeda-e585cc254c5b">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-92bcf02d-5974-4794-a6ee-eb1fc747cc13">\n <cybox:Object id="example:URI-66fb3429-db18-41b1-a322-56e15b1f13a1">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-245-160-179.hsd1.in.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-2cabe374-1af2-4df9-a00b-df06e5555027">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-eb7566cd-5b3c-4b7f-b2ce-00afa5dde969" timestamp="2016-12-09T16:58:47.635615Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-c350d4e4-4c1e-425a-81c8-4a747eebe4cb">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-3bb29bb0-70bc-49c7-970b-e80d88652420">\n <cybox:Object id="example:URI-73371941-f93d-4e6b-8737-80ba0fb4d2a3">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-244-98-236.hsd1.pa.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-fe9052c2-5a96-4221-bc22-7c8fc309c637">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-15e7e6e2-2359-49be-98cd-515cc1d8f3b4" timestamp="2016-12-09T16:58:47.636370Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-a72d1abd-07c6-44dc-8b91-373fa3be2f6a">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-6363f707-f7a7-4fa1-a26a-43526a7c5531">\n <cybox:Object id="example:URI-02d2a94f-721c-4acf-a9d7-4d53c1db4ce1">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-244-86-90.hsd1.md.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-1427e16f-ef81-4206-b378-03dadb6543de">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-e66b3558-ec88-4768-91b6-09ae13f4f920" timestamp="2016-12-09T16:58:47.637014Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-48dc0d23-6d06-4dd4-b41c-3dd69b29e384">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-c3234bc9-fdac-47f9-9048-739d36ef5b14">\n <cybox:Object id="example:URI-733b18de-7d7a-44cc-af58-c682302a2f6a">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-244-235-85.hsd1.va.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-2f6f89b7-9d17-4707-8e4e-2507e1e24e83">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-e9ce41c3-3272-4c9e-a82a-23899085fec3" timestamp="2016-12-09T16:58:47.637704Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-7ceebe9c-3d9f-4f12-8d8a-ff2fdd3a7a9b">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-eef7fc96-38f2-4a78-8291-42b1b6d7ef49">\n <cybox:Object id="example:URI-6788554d-50d9-4949-8078-b72de4bf8e4f">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-243-96-19.hsd1.md.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-579fb8c5-da3c-4842-ae8f-30912ec0dee6">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-f587285e-7809-4100-b674-bd3ceed8688b" timestamp="2016-12-09T16:58:47.638273Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-091455dc-22f2-45ec-800a-8109de82554f">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-b9b2e454-747e-4082-8341-37caa6b7f612">\n <cybox:Object id="example:URI-e1f30295-4f03-430a-acd0-71daa69c3327">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-243-35-121.hsd1.md.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-ff41e110-de98-47a0-b567-64422a57aa0a">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-bbfefd44-ae5f-4a4a-890e-3592b3369892" timestamp="2016-12-09T16:58:47.638834Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-ae7dccea-f159-4600-8b36-e0899837c75b">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-a5424d16-5d61-46c5-a762-631f56d39c17">\n <cybox:Object id="example:URI-9e6dc029-9892-4dd9-8f1d-5c5e99109990">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-243-202-233.hsd1.tn.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-79307c06-376e-404a-8b9e-64ea83ad00a4">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-abb0be92-045e-4982-834d-7a2b47edb6c5" timestamp="2016-12-09T16:58:47.639380Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-c3e03613-8cde-4fea-bc5d-6de0b00bf78f">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-b8a5cbf0-a1b1-47b8-be4e-10495274c9ed">\n <cybox:Object id="example:URI-38990a63-a54f-4e4f-80ca-396dfb360916">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-243-159-12.hsd1.in.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-9ae88e4d-8b02-488a-a7d3-c62c67e1abd1">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-724af778-eb29-4844-8ec3-e3eb5ca778e4" timestamp="2016-12-09T16:58:47.639912Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-05884f43-2a49-430a-bbfd-f5f12469a2c4">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-fbffd06a-1f7b-4beb-82f7-202169e7f1a3">\n <cybox:Object id="example:URI-e03be511-2165-4df4-b067-f3553e7ba1e5">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-242-75-161.hsd1.pa.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-ddddfc45-cd2f-4601-a07f-101ae30d9244">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-ad04ee2d-a5bc-4c0f-ae01-30b3d87481b2" timestamp="2016-12-09T16:58:47.640508Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-b3f32b81-120b-47a2-98df-18fe0387c481">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-aa4a5dd5-89e7-46e6-bd19-bd2a3a5fca6d">\n <cybox:Object id="example:URI-932dc7a7-6ae1-4383-bf06-271cf51a0a48">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-242-248-109.hsd1.fl.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-1663e21e-a8af-467a-84cb-41bc432e26ff">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-3bc2ed0d-e06e-44c5-96b2-22c70910459b" timestamp="2016-12-09T16:58:47.641039Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-f393c60b-0348-4d82-a341-aaa6922774f9">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-9751688b-e863-412b-b98d-89dfe9588de6">\n <cybox:Object id="example:URI-2242fc89-d29b-4e03-a0e6-73b747819c07">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-242-240-182.hsd1.fl.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-ed93cbaf-674e-4dc1-a41b-644eddb89b65">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-e584826a-9ce8-4e31-8755-2c9e393f9ecc" timestamp="2016-12-09T16:58:47.641571Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-3e791372-5396-4607-aae6-57b2b9349542">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-8fd97720-20c8-4262-88cc-0cae02fde8ca">\n <cybox:Object id="example:URI-4d91b8d7-80d8-4162-941f-61a725045e6d">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-181-4-186.hsd1.ca.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-f80a15c2-8e7b-47d9-bc6e-04ed867fbaa8">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-94b0e82c-4f51-4c65-adf6-9635a6f4a204" timestamp="2016-12-09T16:58:47.642104Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-e3cd9791-a3c1-45e2-980a-8535f5b6e1cf">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-274a00c4-26d8-4467-b5f0-2879be57806f">\n <cybox:Object id="example:URI-1820e3a5-0dcb-4f63-9cb1-1ae9a52ad064">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-181-26-173.hsd1.ca.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-2029b692-d636-433f-9217-e6a7c818d703">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-10887191-3c58-4bd2-a3bd-883228ee0e37" timestamp="2016-12-09T16:58:47.642646Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-497d2b51-49f5-4c4e-874a-6267a2b99d6d">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-d74d166a-636f-46d7-b504-d5cb31b22863">\n <cybox:Object id="example:URI-536d49e4-95fa-4df7-bdc7-bb05e350e381">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-180-62-253.hsd1.ga.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-1d7dd19e-a70a-4f93-a867-5f15a43041ed">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-c083d764-da43-49e9-ac16-6addcdc172c9" timestamp="2016-12-09T16:58:47.643155Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-7293258a-880d-4825-b423-90cccb8b4b83">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-13893c0a-ff5b-4086-99f5-aace20953268">\n <cybox:Object id="example:URI-7430b6c4-e82f-44bf-952c-4f03a9ed3d8f">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-180-184-150.hsd1.mn.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-f806f7b8-6795-405d-ad02-c297e94caa40">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-22ca3895-0b31-4030-a6fc-a07f470e094b" timestamp="2016-12-09T16:58:47.643692Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-59558f68-aa75-4926-93c9-fa7112554662">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-6f685503-c0b8-453f-ba37-1b85a3a4d23b">\n <cybox:Object id="example:URI-d8643adc-930a-47f6-84b3-d310877bd8ce">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-143-229-243.hsd1.de.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-fe04ec29-6689-4642-9f1e-7c15313474bc">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-01237add-2f93-470e-801b-0a01fbe83ff8" timestamp="2016-12-09T16:58:47.644208Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-35f2a301-a4b6-4d1e-bd6e-0120cd4db353">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-303b5610-4d97-4ca3-866b-501405d3351c">\n <cybox:Object id="example:URI-67cba634-c956-4c03-955b-ffbebad1d073">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-142-30-215.hsd1.nj.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-82ec3f86-d473-4dd7-95bd-46f49a1da483">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-bd89b852-eafe-4d3b-9aeb-a62208dac1ae" timestamp="2016-12-09T16:58:47.644735Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-9306456a-2e73-4ce7-bf64-14c37a74fbeb">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-49e5498e-41c2-47b1-8845-2b897583e5f1">\n <cybox:Object id="example:URI-e4c91458-eb27-46e9-b049-75bb1f4eb5b8">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-142-254-179.hsd1.nj.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-eb4d4803-afe5-4406-8cb3-1f42b474e533">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-ad9dcb38-b33a-45da-9484-2c29763a5e11" timestamp="2016-12-09T16:58:47.646230Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-8c2d1b13-0587-4e18-a073-9d81ade1f34b">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-30214cdc-5758-4727-aa71-3a8823cd8c15">\n <cybox:Object id="example:URI-4d774f4a-1575-4856-a0a5-1207cfe8f0c1">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-142-159-51.hsd1.nj.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-e050bb1c-851f-4f71-b8a2-f85e08db98fe">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-fe3b217f-5283-4171-8cb2-81fa0b738257" timestamp="2016-12-09T16:58:47.646753Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-60eddfc4-d0a2-4973-b9b1-96e19a2eb057">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-46819eca-28da-47f3-9b3d-1d872c9c5adf">\n <cybox:Object id="example:URI-83729829-c26b-4249-bad8-15e522a7ca95">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-141-26-193.hsd1.nj.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-27fe2563-30c4-435b-aa2b-7e7f7e21b4d4">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-e096882f-b3f0-4266-a1f2-3d4aed588f3b" timestamp="2016-12-09T16:58:47.647274Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-0c60fb6c-f4f0-4af9-9745-75c5f49a21ee">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-c6ba657f-7fa2-43a5-87a7-568d1abc3b9b">\n <cybox:Object id="example:URI-5608e08a-7721-4389-9315-198b802ba3f9">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-140-0-176.hsd1.va.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-0341dce6-33e3-4ee4-a455-3f7508ef6c2e">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-59d415c6-c40f-4c5b-89e6-caa89c66960c" timestamp="2016-12-09T16:58:47.647796Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-8e9677bf-3b3b-4ec4-a886-d2039139ee10">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-64ff1525-48ce-4ccd-92ae-da4340ba5530">\n <cybox:Object id="example:URI-350cf17a-a8c2-4dee-a468-734924daebcf">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-139-63-154.hsd1.fl.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-4025c622-e8ac-47e0-8100-bd91a2153cdb">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-aaef5794-538f-417b-be4f-75c3a79ab4b4" timestamp="2016-12-09T16:58:47.648321Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-5376419f-018e-47a6-ada9-278b4e663b72">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-67771e31-34a3-45b5-bf1d-0181bbb0b133">\n <cybox:Object id="example:URI-734072d5-9ff3-47ac-ad3a-b67912a2fca4">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-139-24-248.hsd1.pa.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-198c2e48-9336-4e91-9382-8d1731b693e0">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-e493ad47-646e-4d25-b82f-c3189ef6971a" timestamp="2016-12-09T16:58:47.648873Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-3f56910c-19fc-419b-be8b-ec358873b66d">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-e1b1a94f-019a-41ac-86ac-d94c7cd25d16">\n <cybox:Object id="example:URI-362f76e8-15f0-4f94-aac1-821d180aef0a">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-138-8-87.hsd1.md.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-6aa37f0e-ab20-4c6e-a1d1-30f5cd88a4d6">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="example:indicator-09a0d09f-8056-4804-9549-ee25388d8aa4" timestamp="2016-12-09T16:58:47.649405Z" xsi:type="indicator:IndicatorType">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.1">Domain Watchlist</indicator:Type>\n <indicator:Observable id="example:Observable-9e919d02-3ba8-4e5f-927a-e2d2e8e2e636">\n <cybox:Observable_Composition operator="OR">\n <cybox:Observable id="example:Observable-8544cb72-4d94-43e9-be9e-7d566132a5a2">\n <cybox:Object id="example:URI-347523fd-8b98-45bc-a049-1db11231bf30">\n <cybox:Properties xsi:type="URIObj:URIObjectType">\n <URIObj:Value>c-69-138-5-21.hsd1.md.comcast.net</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </cybox:Observable>\n <cybox:Observable id="example:Observable-a8f3ca62-8263-4383-af8d-d18edfc405e8">\n <cybox:Title>Project Tag</cybox:Title>\n <cybox:Description>[JJIndustries] Mirai</cybox:Description>\n </cybox:Observable>\n </cybox:Observable_Composition>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX11_t2016_12_09T16_58_54_867574_00_00.xml
- b'<stix:STIX_Package xmlns:AddressObj="http://cybox.mitre.org/objects#AddressObject-2" xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1" xmlns:EmailMessageObj="http://cybox.mitre.org/objects#EmailMessageObject-2" xmlns:INTINC-Dev="http://intinc-dev.specere.org" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:incident="http://stix.mitre.org/Incident-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:stixCommon="http://stix.mitre.org/common-1" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" id="INTINC-Dev:Package-c8df8091-8c8d-4d7d-b0a5-d07ea26d2c5a" version="1.2">\n <stix:STIX_Header>\n <stix:Title>CRITs Generated STIX Package</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Collective Threat Intelligence</stix:Package_Intent>\n <stix:Description>This STIX package was generated by the TAXII service of CRITs, the open source threat repository. You can learn more about CRITs at https://crits.github.io</stix:Description>\n <stix:Information_Source>\n <stixCommon:Identity>\n <stixCommon:Name>Wapack Labs</stixCommon:Name>\n </stixCommon:Identity>\n <stixCommon:Time>\n <cyboxCommon:Produced_Time>2017-01-17T11:38:49.724038</cyboxCommon:Produced_Time>\n </stixCommon:Time>\n <stixCommon:Tools>\n <cyboxCommon:Tool>\n <cyboxCommon:Name>CRITs</cyboxCommon:Name>\n <cyboxCommon:Vendor>MITRE</cyboxCommon:Vendor>\n <cyboxCommon:Version>4-master</cyboxCommon:Version>\n </cyboxCommon:Tool>\n </stixCommon:Tools>\n </stix:Information_Source>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator id="INTINC-Dev:indicator-f4f192b1-7dba-49d5-b790-ad00dd63b2a2" timestamp="2017-01-17T16:38:49.709584+00:00" xsi:type="indicator:IndicatorType">\n <indicator:Title>CRITs Email Top-Level Object</indicator:Title>\n <indicator:Description>This is simply a CRITs Email top-level object, not actually an Indicator. The Observable is wrapped in an Indicator to facilitate documentation of the relationship.</indicator:Description>\n <indicator:Observable id="INTINC-Dev:Observable-4fc69698-fed9-4ffa-a754-cd91f652fb83">\n <cybox:Object id="INTINC-Dev:EmailMessage-f84aa267-e0d2-4e3e-b3d9-95658718287d">\n <cybox:Properties xsi:type="EmailMessageObj:EmailMessageObjectType">\n <EmailMessageObj:Header>\n <EmailMessageObj:From xsi:type="AddressObj:AddressObjectType" category="e-mail">\n <AddressObj:Address_Value>jessantt@gmail.com</AddressObj:Address_Value>\n </EmailMessageObj:From>\n <EmailMessageObj:Subject>The Silent Treatment - 10/10/2014</EmailMessageObj:Subject>\n <EmailMessageObj:Date>2014-10-10T11:45:06</EmailMessageObj:Date>\n <EmailMessageObj:Message_ID><148fa110f20.16ee.91bee@ismtpd-022.iad1.sendgrid.net></EmailMessageObj:Message_ID>\n <EmailMessageObj:Sender xsi:type="AddressObj:AddressObjectType" category="e-mail">\n <AddressObj:Address_Value>badguy@badguys.com</AddressObj:Address_Value>\n </EmailMessageObj:Sender>\n <EmailMessageObj:Reply_To xsi:type="AddressObj:AddressObjectType" category="e-mail">\n <AddressObj:Address_Value>no-reply@gmail.com</AddressObj:Address_Value>\n </EmailMessageObj:Reply_To>\n <EmailMessageObj:Boundary>None</EmailMessageObj:Boundary>\n <EmailMessageObj:X_Mailer>MIME::Lite 3.029 (F2.74; T1.35; A2.09; B3.14; Q3.13)</EmailMessageObj:X_Mailer>\n <EmailMessageObj:X_Originating_IP xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>1.2.3.4</AddressObj:Address_Value>\n </EmailMessageObj:X_Originating_IP>\n </EmailMessageObj:Header>\n <EmailMessageObj:Email_Server>o3.grid1.badguys.com</EmailMessageObj:Email_Server>\n <EmailMessageObj:Raw_Body>*************************************************\n ZACKS.COM PROFIT from the PROS\n** Tactics that Work in Good and Bad Markets **\n*************************************************\n\nThe Silent Treatment\n\nAs Mama always said...\n\n"If you have nothing nice to say, then best not say anything at\nall".\n\nGiven my fundamental disagreement with market direction of late,\nthen I am going to take Mamas advice today. Hopefully this\nchange of pace will induce a better outcome for stocks. If not,\nthen I will end my silent treatment and get back to the usual\nmarket commentary.\n\nIn the meantime just scroll down and enjoy the latest\ncommentary and recommendations from Zacks.com.\n\n*************************************************\n\n\n************************Sponsor*******************************\n\nStock Surprises End Tomorrow\n\nAs earnings season begins, certain companies are coiled to rock\nWall Street and pop in price. What if you could buy the best of\nthese surprise stocks BEFORE their reports are released?\n\nNow a Zacks research breakthrough predicts positive earnings\nsurprises with once impossible 77.32% accuracy. In fact, it just\nlocked onto a stock in a flaming hot industry, and you can get\nin before the earnings report is released on Tuesday. See this\nticker and other rare gems for the next 30 exciting days at a\ntotal cost of only $1.\n\nImportant: This portfolio is restricted and closes to entry\nmidnight tomorrow,Saturday, October 11.\n\nGet details right now &gt;&gt;\nhttp://badguys.com/portfolio.pdf\n\n**************************************************************\n\n\nSteve\'s Featured Commentaries on Zacks.com\n\nChina Stock Roundup\nhttp://badguys.com/china.pdf\n\nBuying Puts to Protect Profits &amp; Hedge Risk\nhttp://badguys.com/buying_puts.pdf\n\nIncrease Your Odds of Success this Earnings Season\nhttp://badguys.com/sucess_odds.pdf\n\nGold ETFs Benefiting from Fed Minutes\nhttp://badguys.com/etfs.pdf\n\n</EmailMessageObj:Raw_Body>\n <EmailMessageObj:Raw_Header>Return-path: &lt;bounces+893866-18e3-employee.one=aviation_one.com@grid1.badguys.com&gt;\nReceived: from st11p00mm-smtpin004.aviation_one.com ([17.172.83.253]) by ms03581.aviation_one.com (Oracle Communications Messaging Server 7u4-27.08 (7.0.4.27.7) 64bit (built Aug 22 2013)) with ESMTP id &lt;0ND800HNBB3WHSE0@ms03581.aviation_one.com&gt; for employee.1@aviation_one.com; Fri, 10 Oct 2014 12:38:21 +0000 (GMT)\nOriginal-recipient: rfc822;employee.one@aviation_one.com\nReceived: from o3.grid1.badguys.com ([1.2.3.4]) by st11p00mm-smtpin004.aviation_one.com (Oracle Communications Messaging Server 7u4-27.10(7.0.4.27.9) 64bit (built Jun 6 2014)) with SMTPS id &lt;0ND800KNQB3THE60@st11p00mm-smtpin004.aviation_one.com&gt; for employee.one@aviation_one.com (ORCPT employee.1@aviation_one.com); Fri, 10 Oct 2014 12:38:20 +0000 (GMT)\nReceived-SPF: pass (st11p00mm-smtpin004.aviation_one.com: domain of bounces+893866-18e3-employee.one=aviation_one.com@grid1.badguys.com designates 1.2.3.4 as permitted sender) receiver=st11p00mm-smtpin004.aviation_one.com; client-ip=1.2.3.4; helo=o3.grid1.badguys.com; envelope-from=bounces+893866-18e3-employee.one=aviation_one.com@grid1.badguys.com;\nAuthentication-results: st11p00mm-smtpin004.aviation_one.com; spf=pass (st11p00mm-smtpin004.aviation_one.com: domain of bounces+893866-18e3-employee.one=aviation_one.com@grid1.badguys.com designates 1.2.3.4 as permitted sender) smtp.mailfrom=bounces+893866-18e3-employee.one=aviation_one.com@grid1.badguys.com;\nDKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=grid1.badguys.com; h=content-transfer-encoding:content-type:mime-version:from:to:reply-to:subject:list-unsubscribe; s=smtpapi; bh=Ij9CU3sP0yPRI1HFBfltpNDIFbU=; b=EoQ3eRTPY4Sk0j+T2S eKeDjjp4DPU4V8uBl4U7QKuMXeaybdzI1kcxX4KcIKheUBBvQ2N2pnxdozhpfS01 ekzfEowb222X3s55BMSMSniKUx132wob+tspER7OqNYigoskocmN2nYOuVauZ7Us BOyGqWPWNMlUdQYn7qPTukHBc=\nReceived: by filter0234p1mdw1.sendgrid.net with SMTP id filter0234p1mdw1.14820.5437D3315 2014-10-10 12:38:15.388393178 +0000 UTC\nReceived: from mail-1.badguys.com (unknown [208.65.119.10]) by ismtpd-022.iad1.sendgrid.net (SG) with ESMTP id 148fa110f20.16ee.91beefor &lt;employee.one@aviation_one.com&gt;; Fri, 10 Oct 2014 12:38:15 +0000 (GMT)\nContent-transfer-encoding: 7bit\nContent-type: multipart/alternative; boundary="_----------=_1412926096183070"\nMIME-version: 1.0\nX-Mailer: MIME::Lite 3.029 (F2.74; T1.35; A2.09; B3.14; Q3.13)\nFrom: "Profit from the Pros" &lt;profit4u@zacks.com&gt;\nTo: employee.one@aviation_one.com\nReply-to: no-reply@badguys.com\nSubject: The Silent Treatment - 10/10/2014\nDate: Fri, 10 Oct 2014 05:45:06 -0600\nList-Unsubscribe: &lt;mailto:support@badguys.com?subject=Unsubscribe&gt;\nMessage-id: &lt;148fa110f20.16ee.91bee@ismtpd-022.iad1.sendgrid.net&gt;\nAuthentication-results: st11p00mm-smtpin004.aviation_one.com;dkim=pass (1024-bit key) header.d=grid1.badguys.com header.i=@grid1.badguys.com header.b=EoQ3eRTP;dkim-adsp=none\nx-icloud-spam-score: 33002220 f=badguys.com;e=grid1.badguys.com;is=yes;ir=no;pp=ham;spf=pass;dkim=?;dmarc=?;wl=absent;pwl=absent;clxs=spam;clxl=absent\nx-dmarc-info: pass=?; dmarc-policy=(noPolicy); s=; d=\nX-MANTSH: 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\nX-CLX-Spam: true\nX-CLX-Score: -148\nX-CLX-Shades: Grey\nX-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.12.52,1.0.28,0.0.0000 definitions=2014-10-10_05:2014-10-10,2014-10-10,1970-01-01 signatures=0\nX-Proofpoint-Spam-Details: rule=notspam policy=default score=0 spamscore=0 suspectscore=80 phishscore=0 adultscore=0 bulkscore=100 classifier=spam adjust=0 reason=mlx scancount=1 engine=7.0.1-1408290000 definitions=main-1410100108\nX-Campaignid: grid1-pfp-1010\nX-Recipient: ufywnhp=rfwtsj~8rfh=htr\nX-SG-EID: 8/POtnJXO8j9WFgV0i04A4sM0t6j+UIoqMomwVU1fMxcGEG+99fjK28SNzVkBGfBb6NUHny3iIwS4PnjX0y3b5jaZJSJO1ZOYkczxI9vofHBRrZO9raPEREUAB1t6CY0xbEzjB5tjc9KJlemdYlDopf4eGo8d2iz/X3k6Ug/tpv8QSuPyiId09d5gK92dmBH\nX-SG-ID: fHu4GW5f4v+XlOOv31VwBOccrRH+LtdEM1IPVqQPQf0=\n</EmailMessageObj:Raw_Header>\n <EmailMessageObj:Attachments/>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n <indicator:Confidence timestamp="2017-01-17T16:38:49.709807+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">None</stixCommon:Value>\n </indicator:Confidence>\n </stix:Indicator>\n <stix:Indicator id="INTINC-Dev:indicator-2831a42f-eca1-46fe-acd9-41d59b792e05" timestamp="2017-01-17T16:38:49.710160+00:00" xsi:type="indicator:IndicatorType">\n <indicator:Observable id="INTINC-Dev:Observable-8bbedf36-bcef-4fc5-8e5a-87512e86cb7b">\n <cybox:Object id="INTINC-Dev:Address-245f7da0-172a-439b-80c0-ef5df7351a44">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>1.2.3.5</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n <indicator:Likely_Impact timestamp="2017-01-17T16:38:49.710679+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Likely_Impact>\n <indicator:Confidence timestamp="2017-01-17T16:38:49.710627+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Confidence>\n <indicator:Producer>\n <stixCommon:Identity>\n <stixCommon:Name>Wapack Labs</stixCommon:Name>\n </stixCommon:Identity>\n </indicator:Producer>\n </stix:Indicator>\n <stix:Indicator id="INTINC-Dev:indicator-4966858b-29f1-4613-b6d9-72ba60075a7c" timestamp="2017-01-17T16:38:49.711312+00:00" xsi:type="indicator:IndicatorType">\n <indicator:Observable id="INTINC-Dev:Observable-7b2f61c1-9b40-4347-a258-9ec1cb53bb62">\n <cybox:Object id="INTINC-Dev:Address-c94afc5f-c0be-4831-839c-583f88558976">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>97.74.42.79</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n <indicator:Likely_Impact timestamp="2017-01-17T16:38:49.711768+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Likely_Impact>\n <indicator:Confidence timestamp="2017-01-17T16:38:49.711721+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Confidence>\n <indicator:Producer>\n <stixCommon:Identity>\n <stixCommon:Name>Wapack Labs</stixCommon:Name>\n </stixCommon:Identity>\n </indicator:Producer>\n </stix:Indicator>\n <stix:Indicator id="INTINC-Dev:indicator-2fb30672-6eba-4825-a5bf-0513060977e5" timestamp="2017-01-17T16:38:49.720513+00:00" xsi:type="indicator:IndicatorType">\n <indicator:Observable id="INTINC-Dev:Observable-c7d8e46c-834e-4358-800b-a8605496bea8">\n <cybox:Object id="INTINC-Dev:DomainName-96bf3e77-fec9-4fcb-a9f7-54e2e083346d">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType">\n <DomainNameObj:Value>really.badguys.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n <indicator:Likely_Impact timestamp="2017-01-17T16:38:49.720997+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Likely_Impact>\n <indicator:Confidence timestamp="2017-01-17T16:38:49.720949+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Confidence>\n <indicator:Producer>\n <stixCommon:Identity>\n <stixCommon:Name>Wapack Labs</stixCommon:Name>\n </stixCommon:Identity>\n </indicator:Producer>\n </stix:Indicator>\n <stix:Indicator id="INTINC-Dev:indicator-588769f3-2bfd-4835-b64a-e26d1e15a154" timestamp="2017-01-17T16:38:49.721587+00:00" xsi:type="indicator:IndicatorType">\n <indicator:Observable id="INTINC-Dev:Observable-28fecb4c-c70b-4d98-95de-8ebadf49cadd">\n <cybox:Object id="INTINC-Dev:Address-cbb997fa-a141-4498-ab8c-e86926eac878">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>1.2.3.4</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n <indicator:Likely_Impact timestamp="2017-01-17T16:38:49.722064+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Likely_Impact>\n <indicator:Confidence timestamp="2017-01-17T16:38:49.722017+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </indicator:Confidence>\n <indicator:Producer>\n <stixCommon:Identity>\n <stixCommon:Name>Wapack Labs</stixCommon:Name>\n </stixCommon:Identity>\n </indicator:Producer>\n </stix:Indicator>\n </stix:Indicators>\n <stix:Incidents>\n <stix:Incident id="INTINC-Dev:incident-7db51424-5eba-421a-8106-0d04c1fcb142" timestamp="2017-01-17T16:38:49.722855+00:00" xsi:type="incident:IncidentType">\n <incident:Title>Aviation One Spear-phising Attack</incident:Title>\n <incident:Description>Three Aviation One employees received an email from what appeared to be expected daily emails from the Zacks Stock Trading service to which these employees subscribe. The content of the message looked identical to prior messages.\n\nAll three employees clicked on different links in the emails which downloaded weaponized versions of PDF Files which displayed legitimate content taken rom the original website. The weaponized files contained 0Day exploit code for CVE-2011-2462 (Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote attackers to execute arbitrary code).\n\nUpon opening the PDF files all three systems began communicating with Command Control server @ http[:]//www.mysundayparty.com. Firewall logs show this resolved to ip address 97.74.42.79. \n\nTraffic contained "/asp/kys_allow_get.asp?name=getkys.kys" which provides strong attribution to getkys campaign.</incident:Description>\n <incident:Short_Description>Intel Sharing</incident:Short_Description>\n <incident:Related_Indicators>\n <incident:Related_Indicator>\n <stixCommon:Confidence timestamp="2017-01-17T16:38:49.723732+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </stixCommon:Confidence>\n <stixCommon:Relationship>Related To</stixCommon:Relationship>\n <stixCommon:Indicator idref="INTINC-Dev:indicator-2831a42f-eca1-46fe-acd9-41d59b792e05" xsi:type="indicator:IndicatorType"/>\n </incident:Related_Indicator>\n <incident:Related_Indicator>\n <stixCommon:Confidence timestamp="2017-01-17T16:38:49.723804+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </stixCommon:Confidence>\n <stixCommon:Relationship>Related To</stixCommon:Relationship>\n <stixCommon:Indicator idref="INTINC-Dev:indicator-f4f192b1-7dba-49d5-b790-ad00dd63b2a2" xsi:type="indicator:IndicatorType"/>\n </incident:Related_Indicator>\n <incident:Related_Indicator>\n <stixCommon:Confidence timestamp="2017-01-17T16:38:49.723868+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </stixCommon:Confidence>\n <stixCommon:Relationship>Related To</stixCommon:Relationship>\n <stixCommon:Indicator idref="INTINC-Dev:indicator-4966858b-29f1-4613-b6d9-72ba60075a7c" xsi:type="indicator:IndicatorType"/>\n </incident:Related_Indicator>\n <incident:Related_Indicator>\n <stixCommon:Confidence timestamp="2017-01-17T16:38:49.723928+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </stixCommon:Confidence>\n <stixCommon:Relationship>Related To</stixCommon:Relationship>\n <stixCommon:Indicator idref="INTINC-Dev:indicator-2fb30672-6eba-4825-a5bf-0513060977e5" xsi:type="indicator:IndicatorType"/>\n </incident:Related_Indicator>\n <incident:Related_Indicator>\n <stixCommon:Confidence timestamp="2017-01-17T16:38:49.723990+00:00">\n <stixCommon:Value xsi:type="stixVocabs:HighMediumLowVocab-1.0">Unknown</stixCommon:Value>\n </stixCommon:Confidence>\n <stixCommon:Relationship>Related To</stixCommon:Relationship>\n <stixCommon:Indicator idref="INTINC-Dev:indicator-588769f3-2bfd-4835-b64a-e26d1e15a154" xsi:type="indicator:IndicatorType"/>\n </incident:Related_Indicator>\n </incident:Related_Indicators>\n </stix:Incident>\n </stix:Incidents>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_01_17T16_40_13_417911_00_00.xml
- b'<stix:STIX_Package xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:URIObject="http://cybox.mitre.org/objects#URIObject-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:example="http://example.com/" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://stix.mitre.org/stix-1 ../stix_core.xsd http://stix.mitre.org/Indicator-2 ../indicator.xsd http://cybox.mitre.org/default_vocabularies-2 ../cybox/cybox_default_vocabularies.xsd http://stix.mitre.org/default_vocabularies-1 ../stix_default_vocabularies.xsd http://cybox.mitre.org/objects#URIObject-2 ../cybox/objects/URI_Object.xsd" version="1.0.1">\n <stix:STIX_Header>\n <stix:Title>Example watchlist that contains URL information.</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators - Watchlist</stix:Package_Intent>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator xsi:type="indicator:IndicatorType" id="example:Indicator-db4a6ffe-61f0-488d-85a1-20bd5e360f37">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.0">URL Watchlist</indicator:Type>\n <indicator:Description>Sample URL Indicator for this watchlist</indicator:Description>\n <indicator:Observable id="example:Observable-Pattern-cc5c00ce-98a6-4cbe-8474-59eaecdb018f">\n <cybox:Object>\n <cybox:Properties xsi:type="URIObject:URIObjectType">\n <URIObject:Value condition="Equals" apply_condition="ANY">http://example.com/foo/malicious1.html##comma##http://example.com/foo/malicious2.html##comma##http://example.com/foo/malicious3.html</URIObject:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T12_40_06_520298_00_00.xml
- b'<stix:STIX_Package xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:URIObject="http://cybox.mitre.org/objects#URIObject-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:example="http://example.com/" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://stix.mitre.org/stix-1 ../stix_core.xsd http://stix.mitre.org/Indicator-2 ../indicator.xsd http://cybox.mitre.org/default_vocabularies-2 ../cybox/cybox_default_vocabularies.xsd http://stix.mitre.org/default_vocabularies-1 ../stix_default_vocabularies.xsd http://cybox.mitre.org/objects#URIObject-2 ../cybox/objects/URI_Object.xsd" version="1.0.1">\n <stix:STIX_Header>\n <stix:Title>Example watchlist that contains URL information.</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators - Watchlist</stix:Package_Intent>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator xsi:type="indicator:IndicatorType" id="example:Indicator-db4a6ffe-61f0-488d-85a1-20bd5e360f37">\n <indicator:Type xsi:type="stixVocabs:IndicatorTypeVocab-1.0">URL Watchlist</indicator:Type>\n <indicator:Description>Sample URL Indicator for this watchlist</indicator:Description>\n <indicator:Observable id="example:Observable-Pattern-cc5c00ce-98a6-4cbe-8474-59eaecdb018f">\n <cybox:Object>\n <cybox:Properties xsi:type="URIObject:URIObjectType">\n <URIObject:Value condition="Equals" apply_condition="ANY">http://example.com/foo/malicious1.html##comma##http://example.com/foo/malicious2.html##comma##http://example.com/foo/malicious3.html</URIObject:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T12_56_09_111000_00_00.xml
- b'<stix:STIX_Package xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1" xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2" xmlns:incident="http://stix.mitre.org/Incident-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:stixCommon="http://stix.mitre.org/common-1" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:alienvault-otx="https://otx.alienvault.com" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://cybox.mitre.org/common-2 http://cybox.mitre.org/XMLSchema/common/2.1/cybox_common.xsd http://cybox.mitre.org/cybox-2 http://cybox.mitre.org/XMLSchema/core/2.1/cybox_core.xsd http://cybox.mitre.org/default_vocabularies-2 http://cybox.mitre.org/XMLSchema/default_vocabularies/2.1/cybox_default_vocabularies.xsd http://cybox.mitre.org/objects#DomainNameObject-1 http://cybox.mitre.org/XMLSchema/objects/Domain_Name/1.0/Domain_Name_Object.xsd http://cybox.mitre.org/objects#FileObject-2 http://cybox.mitre.org/XMLSchema/objects/File/2.1/File_Object.xsd http://stix.mitre.org/Incident-1 http://stix.mitre.org/XMLSchema/incident/1.1.1/incident.xsd http://stix.mitre.org/Indicator-2 http://stix.mitre.org/XMLSchema/indicator/2.1.1/indicator.xsd http://stix.mitre.org/common-1 http://stix.mitre.org/XMLSchema/common/1.1.1/stix_common.xsd http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.1.1/stix_core.xsd" id="alienvault-otx:Package-13587d54-7a5f-43e5-a8e0-3c0e02d061ae" version="1.1.1" timestamp="2017-02-06T14:52:17.425000+00:00">\n <stix:STIX_Header>\n <stix:Title>Oops, they did it again: APT Targets Russia and Belarus with ZeroT and PlugX</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators</stix:Package_Intent>\n <stix:Description>Although state-sponsored attacks against the United States by Chinese threat actors have decreased dramatically since the signing of the US-China Cyber Agreement in 2016, Proofpoint researchers have continued to observe advanced persistent threat (APT) activity associated with Chinese actors targeting other regions. We have previously written about related activity in which a particular China-based attack group used PlugX and NetTraveler Trojans for espionage in Europe, Russia, Mongolia, Belarus, and other neighboring countries. Most recently, we have observed the same group targeting military and aerospace interests in Russia and Belarus. Since the summer of 2016, this group began using a new downloader known as ZeroT to install the PlugX remote access Trojan (RAT) and added Microsoft Compiled HTML Help (.chm) as one of the initial droppers delivered in spear-phishing emails.</stix:Description>\n <stix:Information_Source>\n <stixCommon:Description>Alienvault OTX - https://otx.alienvault.com/</stixCommon:Description>\n <stixCommon:Identity id="alienvault-otx:Identity-7e5bdd1c-e1f2-4e98-b758-abbd352a21bc">\n <stixCommon:Name>Alienvault OTX</stixCommon:Name>\n </stixCommon:Identity>\n <stixCommon:Time>\n <cyboxCommon:Produced_Time>2017-02-03T15:40:00.002000</cyboxCommon:Produced_Time>\n </stixCommon:Time>\n </stix:Information_Source>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator id="alienvault-otx:indicator-a861cc8a-cccd-4a31-b0b1-9d596a982627" timestamp="2017-02-06T14:52:17.426000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.dicemention.com from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-cfa6c528-8049-4e0a-9942-436af9da6637">\n <cybox:Title>hostname - www.dicemention.com</cybox:Title>\n <cybox:Object id="example:DomainName-fe9aa0aa-daf0-41e8-84db-8087866d1b39">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.dicemention.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-58164980-f311-4a11-8829-2e3723a294cf" timestamp="2017-02-06T14:52:17.427000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.riaru.net from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-f6597b90-f28b-4ef9-8f3e-b84c122e3033">\n <cybox:Title>hostname - www.riaru.net</cybox:Title>\n <cybox:Object id="example:DomainName-c6f9a5f7-09e8-4289-a91f-3b6d77e55fe1">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.riaru.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-de6254a4-2cb3-4776-8905-3b32b8b0444d" timestamp="2017-02-06T14:52:17.427000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.tassnews.net from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-7e566feb-b9e5-4358-9d27-9c9cf4cf1391">\n <cybox:Title>hostname - www.tassnews.net</cybox:Title>\n <cybox:Object id="example:DomainName-22b59865-8b31-4f70-b714-fa2d9153a1c5">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.tassnews.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-51aafc9e-8a6c-461a-bb76-5470cf35689f" timestamp="2017-02-06T14:52:17.427000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.micrnet.net from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-52635a3a-ea9e-4927-9818-c5c532297fe4">\n <cybox:Title>hostname - www.micrnet.net</cybox:Title>\n <cybox:Object id="example:DomainName-8d8c6f7e-17a5-4ab0-a446-f5daa9bacc74">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.micrnet.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-98c1052c-6e14-4b5f-8758-c393ac646ab0" timestamp="2017-02-06T14:52:17.428000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.versig.net from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-fa850835-8954-4168-b65f-6fb78aad3eb0">\n <cybox:Title>hostname - www.versig.net</cybox:Title>\n <cybox:Object id="example:DomainName-c51507cf-67b4-47ab-9d27-dcfe22103534">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.versig.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-28989a43-80dc-4e1a-a320-1493274ec802" timestamp="2017-02-06T14:52:17.428000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a685cf4dca6a58213e67d041bba637dca9cb3ea6bb9ad3eae3ba85229118bce0 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-12c0a69b-8ff1-4556-8d54-4da00a94afe0">\n <cybox:Title>FileHash-SHA256 - a685cf4dca6a58213e67d041bba637dca9cb3ea6bb9ad3eae3ba85229118bce0</cybox:Title>\n <cybox:Object id="example:File-5df28adc-8417-460a-9ba0-905663df0abe">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a685cf4dca6a58213e67d041bba637dca9cb3ea6bb9ad3eae3ba85229118bce0</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9271235b-226a-431c-9ed2-261fd5cbaf11" timestamp="2017-02-06T14:52:17.428000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3be2e226cd477138d03428f6046a216103ba9fa5597ec407e542ab2f86c37425 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-b20e6472-9e79-453b-8749-9d8fe7d236b5">\n <cybox:Title>FileHash-SHA256 - 3be2e226cd477138d03428f6046a216103ba9fa5597ec407e542ab2f86c37425</cybox:Title>\n <cybox:Object id="example:File-78ca744e-6ff4-4725-904d-27efcf1d0696">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3be2e226cd477138d03428f6046a216103ba9fa5597ec407e542ab2f86c37425</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2ae72868-1082-49ee-b79d-190eb679da52" timestamp="2017-02-06T14:52:17.429000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>fc2d47d91ad8517a4a974c4570b346b41646fac333d219d2f1282c96b4571478 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-4b3040d9-caf9-4956-9c9a-d14b7bef48e4">\n <cybox:Title>FileHash-SHA256 - fc2d47d91ad8517a4a974c4570b346b41646fac333d219d2f1282c96b4571478</cybox:Title>\n <cybox:Object id="example:File-0522e7cd-3f9c-42af-b746-b0cf024b59a5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>fc2d47d91ad8517a4a974c4570b346b41646fac333d219d2f1282c96b4571478</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c7228e90-0add-4038-8930-3817efe4b2df" timestamp="2017-02-06T14:52:17.429000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>4ef91c17b1415609a2394d2c6c353318a2503900e400aab25ab96c9fe7dc92ff from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-95707ced-1f1e-4689-a829-573c15748228">\n <cybox:Title>FileHash-SHA256 - 4ef91c17b1415609a2394d2c6c353318a2503900e400aab25ab96c9fe7dc92ff</cybox:Title>\n <cybox:Object id="example:File-201d0c25-c49d-4448-a401-42dec172a638">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>4ef91c17b1415609a2394d2c6c353318a2503900e400aab25ab96c9fe7dc92ff</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b9904412-03e3-4ba2-8ffb-f8229e8ec069" timestamp="2017-02-06T14:52:17.429000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ee81c939eec30bf9351c9246ecfdc39a2fed78be08cc9923d48781f6c9bd7097 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-169b9478-92c8-4f4f-bd4f-d58a72480abc">\n <cybox:Title>FileHash-SHA256 - ee81c939eec30bf9351c9246ecfdc39a2fed78be08cc9923d48781f6c9bd7097</cybox:Title>\n <cybox:Object id="example:File-41398897-72b9-4123-bd39-389a758d84df">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>ee81c939eec30bf9351c9246ecfdc39a2fed78be08cc9923d48781f6c9bd7097</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-ffd14253-6891-408c-ab10-52f1407c9781" timestamp="2017-02-06T14:52:17.429000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>09061c603a32ac99b664f7434febfc8c1f9fd7b6469be289bb130a635a6c47c0 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-9de73985-73b0-4f46-87b3-c1645a4cbfe8">\n <cybox:Title>FileHash-SHA256 - 09061c603a32ac99b664f7434febfc8c1f9fd7b6469be289bb130a635a6c47c0</cybox:Title>\n <cybox:Object id="example:File-df372087-c9c3-43da-8f61-fcfa17e3203f">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>09061c603a32ac99b664f7434febfc8c1f9fd7b6469be289bb130a635a6c47c0</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4a9cdbd5-4676-4483-b302-71c35c054b06" timestamp="2017-02-06T14:52:17.430000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>74dd52aeac83cc01c348528a9bcb20bbc34622b156f40654153e41817083ba1d from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-a7a38642-fd32-4a55-ac72-54364e81afeb">\n <cybox:Title>FileHash-SHA256 - 74dd52aeac83cc01c348528a9bcb20bbc34622b156f40654153e41817083ba1d</cybox:Title>\n <cybox:Object id="example:File-199e3c3a-e6d7-41e5-b281-47d1b011cd1e">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>74dd52aeac83cc01c348528a9bcb20bbc34622b156f40654153e41817083ba1d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-266b4c22-48a7-417a-9a6d-ec2425e9804b" timestamp="2017-02-06T14:52:17.430000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>399693f48a457d77530ab88d4763cbd9d3f73606bd860adc0638f36b811bf343 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-a3bfb137-3456-4fd0-b288-d448824454b4">\n <cybox:Title>FileHash-SHA256 - 399693f48a457d77530ab88d4763cbd9d3f73606bd860adc0638f36b811bf343</cybox:Title>\n <cybox:Object id="example:File-38ab175f-06a9-4f7c-bb2b-e2275cf44e29">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>399693f48a457d77530ab88d4763cbd9d3f73606bd860adc0638f36b811bf343</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-10b91be5-891c-46ea-adf0-a798b2ce174c" timestamp="2017-02-06T14:52:17.430000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a16078c6d09fcfc9d6ff7a91e39e6d72e2d6d6ab6080930e1e2169ec002b37d3 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-1f911016-30d1-4b3e-96ee-f306886db5db">\n <cybox:Title>FileHash-SHA256 - a16078c6d09fcfc9d6ff7a91e39e6d72e2d6d6ab6080930e1e2169ec002b37d3</cybox:Title>\n <cybox:Object id="example:File-233fd11a-3c77-4374-9b13-fd9e9b6e3933">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a16078c6d09fcfc9d6ff7a91e39e6d72e2d6d6ab6080930e1e2169ec002b37d3</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-036141ba-9092-4677-bf0f-cda0b8f508ca" timestamp="2017-02-06T14:52:17.430000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ee2e2937128dac91a11e9bf55babc1a8387eb16cebe676142c885b2fc18669b2 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-4910dcdd-3a86-4b3e-a67a-136cca60e46b">\n <cybox:Title>FileHash-SHA256 - ee2e2937128dac91a11e9bf55babc1a8387eb16cebe676142c885b2fc18669b2</cybox:Title>\n <cybox:Object id="example:File-81d5a3f9-0f40-4eaa-b97e-8a1768c17cb9">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>ee2e2937128dac91a11e9bf55babc1a8387eb16cebe676142c885b2fc18669b2</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-70422a56-a1a0-4e66-9078-0653d7346fc2" timestamp="2017-02-06T14:52:17.431000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>07343a069dd2340a63bc04ba2e5c6fad4f9e3cf8a6226eb2a82eb4edc4926f67 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-e2c7af27-2572-4155-a1e3-4b28f6251335">\n <cybox:Title>FileHash-SHA256 - 07343a069dd2340a63bc04ba2e5c6fad4f9e3cf8a6226eb2a82eb4edc4926f67</cybox:Title>\n <cybox:Object id="example:File-58f3d7cd-dafc-4f3e-ba36-2c29920edc82">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>07343a069dd2340a63bc04ba2e5c6fad4f9e3cf8a6226eb2a82eb4edc4926f67</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-e46b56d9-bb9c-4119-a664-0ab26be07368" timestamp="2017-02-06T14:52:17.431000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>67693ddb6236d3ef790059409ae240212c47acfd8c1c76d65c3ef19096fdf43b from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-b501309f-6ee5-49ba-9b19-5c2ea8bc562c">\n <cybox:Title>FileHash-SHA256 - 67693ddb6236d3ef790059409ae240212c47acfd8c1c76d65c3ef19096fdf43b</cybox:Title>\n <cybox:Object id="example:File-6e7b9ec5-b9ad-4ef8-8a2a-d4f0314b99a3">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>67693ddb6236d3ef790059409ae240212c47acfd8c1c76d65c3ef19096fdf43b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-19acd897-29d2-4bd2-b806-9443bbaf7ef8" timestamp="2017-02-06T14:52:17.431000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>38566230e5f19d2fd151eaf1744ef2aef946e17873924b91bbeaede0fbfb38cf from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-6a148d9a-250d-47b5-a53c-4f92d8bb35c5">\n <cybox:Title>FileHash-SHA256 - 38566230e5f19d2fd151eaf1744ef2aef946e17873924b91bbeaede0fbfb38cf</cybox:Title>\n <cybox:Object id="example:File-fbbb96ef-0f3a-4171-85f4-6df53deac55c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>38566230e5f19d2fd151eaf1744ef2aef946e17873924b91bbeaede0fbfb38cf</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8cdec681-4ab3-43e6-810b-ef4767452b8d" timestamp="2017-02-06T14:52:17.431000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>9dd730f615824a7992a67400fce754df6eaa770f643ad7e425ff252324671b58 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-b3addabc-0312-4ec5-b0ca-e2b121f96788">\n <cybox:Title>FileHash-SHA256 - 9dd730f615824a7992a67400fce754df6eaa770f643ad7e425ff252324671b58</cybox:Title>\n <cybox:Object id="example:File-a8a7434e-3399-4378-9688-afdb0d6f7de2">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>9dd730f615824a7992a67400fce754df6eaa770f643ad7e425ff252324671b58</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4aa89785-0a46-49ac-bf67-1a078dd0ffc1" timestamp="2017-02-06T14:52:17.432000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f2b6f7e0fcf4611cb25f9a24f002ba104ee5cf84528769b2ab82c63ba4476168 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-81a78ca8-5975-4fb0-bc36-21552a6dc958">\n <cybox:Title>FileHash-SHA256 - f2b6f7e0fcf4611cb25f9a24f002ba104ee5cf84528769b2ab82c63ba4476168</cybox:Title>\n <cybox:Object id="example:File-97e33c67-7167-4b2a-9b60-f97b12bd7d83">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f2b6f7e0fcf4611cb25f9a24f002ba104ee5cf84528769b2ab82c63ba4476168</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-05b823a8-63be-45e7-bc8d-3ba017489509" timestamp="2017-02-06T14:52:17.432000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ec3405e058b3be958a1d3db410dd438fba7b8a8c28355939c2319e2e2a338462 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-226f4a1c-2986-4fb9-9100-2ffd4fed36a5">\n <cybox:Title>FileHash-SHA256 - ec3405e058b3be958a1d3db410dd438fba7b8a8c28355939c2319e2e2a338462</cybox:Title>\n <cybox:Object id="example:File-b218ff6c-c377-4ef1-8055-5e55d51ded64">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>ec3405e058b3be958a1d3db410dd438fba7b8a8c28355939c2319e2e2a338462</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7414d523-241e-4d51-a83c-0f50a9e40a6d" timestamp="2017-02-06T14:52:17.432000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>74eb592ef7f5967b14794acdc916686e061a43169f06e5be4dca70811b9815df from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-6be749f4-3cb3-4040-ba9a-3ae9a8dce548">\n <cybox:Title>FileHash-SHA256 - 74eb592ef7f5967b14794acdc916686e061a43169f06e5be4dca70811b9815df</cybox:Title>\n <cybox:Object id="example:File-17f8cc2d-a84e-4390-bcc4-2987243f8990">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>74eb592ef7f5967b14794acdc916686e061a43169f06e5be4dca70811b9815df</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2d1c5499-597f-4ffd-88f7-832d90ad3fe0" timestamp="2017-02-06T14:52:17.432000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>b7ee556d1d1b83c5ce6b0c903244c1d3b79654cb950105b2c03996cdd4a70be8 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-060f633f-757f-4d61-a9c5-0519cf72b2d1">\n <cybox:Title>FileHash-SHA256 - b7ee556d1d1b83c5ce6b0c903244c1d3b79654cb950105b2c03996cdd4a70be8</cybox:Title>\n <cybox:Object id="example:File-3413ee3d-231f-4bb6-b5ff-cb1d25c01af5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>b7ee556d1d1b83c5ce6b0c903244c1d3b79654cb950105b2c03996cdd4a70be8</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-aa31e6e6-1acc-4ba0-a0b2-d8f796f96082" timestamp="2017-02-06T14:52:17.433000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3149fb0ddd89b77ecfb797c4ab4676c63d157a6b22ba4c8f98e8478c24104dfa from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-758be76c-dd89-4e8d-b816-a056bc9a585b">\n <cybox:Title>FileHash-SHA256 - 3149fb0ddd89b77ecfb797c4ab4676c63d157a6b22ba4c8f98e8478c24104dfa</cybox:Title>\n <cybox:Object id="example:File-c401c564-8119-40d6-a740-337a614084bb">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3149fb0ddd89b77ecfb797c4ab4676c63d157a6b22ba4c8f98e8478c24104dfa</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b462faf8-1a77-4b47-bb43-fab4bd4a35be" timestamp="2017-02-06T14:52:17.433000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>97016593c53c7eeecd9d3a2788199f6473899ca8f07fafcd4173464f38ee0ab4 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-c5d58391-d32c-404c-936b-3200c22a66a0">\n <cybox:Title>FileHash-SHA256 - 97016593c53c7eeecd9d3a2788199f6473899ca8f07fafcd4173464f38ee0ab4</cybox:Title>\n <cybox:Object id="example:File-c484ab18-7c1d-452d-8cfb-6e023061c22c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>97016593c53c7eeecd9d3a2788199f6473899ca8f07fafcd4173464f38ee0ab4</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1fd68ca7-7ddb-4904-8365-405233c2e12f" timestamp="2017-02-06T14:52:17.433000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>c5d022f0815aeaa27afb8f1efbce2771d95914be881d288b0841713dbbbeda1a from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-e3177c02-693e-4c9a-869e-d54889ea0703">\n <cybox:Title>FileHash-SHA256 - c5d022f0815aeaa27afb8f1efbce2771d95914be881d288b0841713dbbbeda1a</cybox:Title>\n <cybox:Object id="example:File-8914b551-baf4-43ca-b712-bbd2302a807c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>c5d022f0815aeaa27afb8f1efbce2771d95914be881d288b0841713dbbbeda1a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4aff584d-ff09-455a-af11-8a205b94e2fa" timestamp="2017-02-06T14:52:17.433000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>1e25a8bd1ac2df82d4f6d280af0ecd57d5e4aef88298a2f14414df76db54bcc4 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-9a9167f8-6b77-4d96-8c6b-3400aa538c0e">\n <cybox:Title>FileHash-SHA256 - 1e25a8bd1ac2df82d4f6d280af0ecd57d5e4aef88298a2f14414df76db54bcc4</cybox:Title>\n <cybox:Object id="example:File-4d99b895-a7d6-45e4-a665-14b2e614ac62">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>1e25a8bd1ac2df82d4f6d280af0ecd57d5e4aef88298a2f14414df76db54bcc4</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-86a6afc2-1231-4558-8069-883cf9ca2ad7" timestamp="2017-02-06T14:52:17.434000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a9519d2624a842d2c9060b64bb78ee1c400fea9e43d4436371a67cbf90e611b8 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-bd8abc39-18d4-47e1-a2af-31b97cdd16ae">\n <cybox:Title>FileHash-SHA256 - a9519d2624a842d2c9060b64bb78ee1c400fea9e43d4436371a67cbf90e611b8</cybox:Title>\n <cybox:Object id="example:File-5c97be04-02b1-4752-8429-2f2f52d053e5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a9519d2624a842d2c9060b64bb78ee1c400fea9e43d4436371a67cbf90e611b8</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-75a5e0a1-8820-4781-ab00-83395177e980" timestamp="2017-02-06T14:52:17.434000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>aa7810862ef43d4ef6bec463266b7eb169dbf3f7f953ef955e380e4269137267 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-982a23af-f5be-418a-869a-4a0829d27466">\n <cybox:Title>FileHash-SHA256 - aa7810862ef43d4ef6bec463266b7eb169dbf3f7f953ef955e380e4269137267</cybox:Title>\n <cybox:Object id="example:File-c9aa102f-9552-4096-b0ae-223bcb65375b">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>aa7810862ef43d4ef6bec463266b7eb169dbf3f7f953ef955e380e4269137267</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-ab77f329-e5ec-481c-bd9a-b844a1fd6f48" timestamp="2017-02-06T14:52:17.434000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d1c4a51064aeec4c11a8f90f80a3b60a36c07cce2dde0756c114e477d63ce375 from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-2f0d3362-6b74-4530-8b64-b4a2802be2af">\n <cybox:Title>FileHash-SHA256 - d1c4a51064aeec4c11a8f90f80a3b60a36c07cce2dde0756c114e477d63ce375</cybox:Title>\n <cybox:Object id="example:File-2da9d39e-4b77-4cac-b4e3-4d5053b95ec1">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d1c4a51064aeec4c11a8f90f80a3b60a36c07cce2dde0756c114e477d63ce375</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-276b7384-63f7-4cd3-9213-455e1d9368a7" timestamp="2017-02-06T14:52:17.434000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>c15255b9a55e7a025cf36aca85eb6cc48571d0b997a93d4dfa4eacb49001cc8d from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-73266a5e-e648-4399-8cfc-4a4d8486a67f">\n <cybox:Title>FileHash-SHA256 - c15255b9a55e7a025cf36aca85eb6cc48571d0b997a93d4dfa4eacb49001cc8d</cybox:Title>\n <cybox:Object id="example:File-dc329731-c056-4b76-8d45-293eef002662">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>c15255b9a55e7a025cf36aca85eb6cc48571d0b997a93d4dfa4eacb49001cc8d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-818e13a5-6ed0-4095-b531-fe6a0dc4e5eb" timestamp="2017-02-06T14:52:17.435000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>b185401a8562614ef42a84bc29f6c21aca31b7811c2c0e680f455b061229a77f from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-e19c78ab-f5b8-4728-95a3-78e4242f7b7a">\n <cybox:Title>FileHash-SHA256 - b185401a8562614ef42a84bc29f6c21aca31b7811c2c0e680f455b061229a77f</cybox:Title>\n <cybox:Object id="example:File-4ac9f02d-d484-45ed-a8d9-fdc7438cc8d5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>b185401a8562614ef42a84bc29f6c21aca31b7811c2c0e680f455b061229a77f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-6e190c4d-053b-400a-b013-64e20a625fb5" timestamp="2017-02-06T14:52:17.435000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.rumiany.com from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-e2f8e9d9-696c-468e-8909-700c3bb94b65">\n <cybox:Title>hostname - www.rumiany.com</cybox:Title>\n <cybox:Object id="example:DomainName-904035e4-a3fe-42dc-99b7-6098c34c57aa">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.rumiany.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-be54f664-dc0a-4c81-8ded-7cc9e9d1471a" timestamp="2017-02-06T14:52:17.435000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>www.yandcx.com from https://otx.alienvault.com/pulse/5894a4504886cb2fa46cc735</indicator:Title>\n <indicator:Observable id="example:Observable-723fee60-784b-4769-9f0d-f8056a65e408">\n <cybox:Title>hostname - www.yandcx.com</cybox:Title>\n <cybox:Object id="example:DomainName-ed14120f-6391-4e99-973b-f0ad1f062dcd">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>www.yandcx.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T14_52_17_787000_00_00.xml
- b'<stix:STIX_Package xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1" xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2" xmlns:incident="http://stix.mitre.org/Incident-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:stixCommon="http://stix.mitre.org/common-1" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:alienvault-otx="https://otx.alienvault.com" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://cybox.mitre.org/common-2 http://cybox.mitre.org/XMLSchema/common/2.1/cybox_common.xsd http://cybox.mitre.org/cybox-2 http://cybox.mitre.org/XMLSchema/core/2.1/cybox_core.xsd http://cybox.mitre.org/default_vocabularies-2 http://cybox.mitre.org/XMLSchema/default_vocabularies/2.1/cybox_default_vocabularies.xsd http://cybox.mitre.org/objects#DomainNameObject-1 http://cybox.mitre.org/XMLSchema/objects/Domain_Name/1.0/Domain_Name_Object.xsd http://cybox.mitre.org/objects#FileObject-2 http://cybox.mitre.org/XMLSchema/objects/File/2.1/File_Object.xsd http://stix.mitre.org/Incident-1 http://stix.mitre.org/XMLSchema/incident/1.1.1/incident.xsd http://stix.mitre.org/Indicator-2 http://stix.mitre.org/XMLSchema/indicator/2.1.1/indicator.xsd http://stix.mitre.org/common-1 http://stix.mitre.org/XMLSchema/common/1.1.1/stix_common.xsd http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.1.1/stix_core.xsd" id="alienvault-otx:Package-986b5aed-27cf-4ff9-a6ba-b99ebc78074c" version="1.1.1" timestamp="2017-02-06T14:52:18.589000+00:00">\n <stix:STIX_Header>\n <stix:Title>Flokibot Invades PoS: Trouble in Brazil</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators</stix:Package_Intent>\n <stix:Description>Threat actors salivate at the thought of an increased volume of credit and debit card transactions flowing through endpoints they have compromised with card-stealing malware. While there are many distinct malware families that scrape unencrypted process memory to obtain cards, some of these malware capabilities overlap with generic information stealing trojans such as Flokibot that obtain and exfiltrate HTTPS GET and POST data and other materials from compromised machines.</stix:Description>\n <stix:Information_Source>\n <stixCommon:Description>Alienvault OTX - https://otx.alienvault.com/</stixCommon:Description>\n <stixCommon:Identity id="alienvault-otx:Identity-903072f3-e384-4e14-8d8d-3e0bf8d07a7b">\n <stixCommon:Name>Alienvault OTX</stixCommon:Name>\n </stixCommon:Identity>\n <stixCommon:Time>\n <cyboxCommon:Produced_Time>2017-01-31T10:23:15.261000</cyboxCommon:Produced_Time>\n </stixCommon:Time>\n </stix:Information_Source>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator id="alienvault-otx:indicator-b90fb9aa-82d7-4b13-b5d1-7b512fd6bd32" timestamp="2017-02-06T14:52:18.592000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>feed.networksupdates.com from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-6474471a-3131-49e4-8030-c6734f726fea">\n <cybox:Title>hostname - feed.networksupdates.com</cybox:Title>\n <cybox:Object id="example:DomainName-153c02dc-bf4d-40ec-8445-f31b8e2469bd">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>feed.networksupdates.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c82dc44e-c1a3-4820-b722-a9efacfb05cf" timestamp="2017-02-06T14:52:18.593000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d4c5384da41fd391d16eff60abc21405 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-6f149c17-9746-4fd6-ad5b-c30bb80882b6">\n <cybox:Title>FileHash-MD5 - d4c5384da41fd391d16eff60abc21405</cybox:Title>\n <cybox:Object id="example:File-709d2995-b09a-41b7-99a3-4ce4ef99c816">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d4c5384da41fd391d16eff60abc21405</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-a5d686e0-59f9-461b-a41d-d43334083f0e" timestamp="2017-02-06T14:52:18.593000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e54d28a24c976348c438f45281d68c54 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-774c5efe-4943-4f47-9c5a-77c7613d10e1">\n <cybox:Title>FileHash-MD5 - e54d28a24c976348c438f45281d68c54</cybox:Title>\n <cybox:Object id="example:File-3d3aa087-f2ba-421b-94a2-e21d7a24fb18">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e54d28a24c976348c438f45281d68c54</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4daa112b-fbd6-423b-9816-3e1ee4e5d201" timestamp="2017-02-06T14:52:18.594000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5649e7a200df2fb85ad1fb5a723bef22 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-428aa30c-c7e3-4041-99f0-c3eb6203f0a3">\n <cybox:Title>FileHash-MD5 - 5649e7a200df2fb85ad1fb5a723bef22</cybox:Title>\n <cybox:Object id="example:File-dd83c4ca-e6dc-4706-aa96-6502310aadb6">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5649e7a200df2fb85ad1fb5a723bef22</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0f069e05-2a1f-42c8-964c-96394144f4bb" timestamp="2017-02-06T14:52:18.595000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>duparseled.com from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-0f41f01b-b8d2-47d6-8f8c-bcfe2e29f37b">\n <cybox:Title>domain - duparseled.com</cybox:Title>\n <cybox:Object id="example:DomainName-79b9771e-50c8-4732-8d25-ebf2329b0ab6">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>duparseled.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-69f87b42-57ac-4084-9d3b-30c40592764e" timestamp="2017-02-06T14:52:18.596000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>shhtunnel.at from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-59443a46-27b5-4a1e-bd97-c8b06788c910">\n <cybox:Title>domain - shhtunnel.at</cybox:Title>\n <cybox:Object id="example:DomainName-a4ceaeee-9f2d-4728-9280-df4b456d303f">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>shhtunnel.at</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d540fdb8-abd8-4bd6-a7dc-3b77cba20774" timestamp="2017-02-06T14:52:18.597000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>adultgirlmail.com from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-279e5ee2-9977-472e-a400-083d0fd08ce5">\n <cybox:Title>domain - adultgirlmail.com</cybox:Title>\n <cybox:Object id="example:DomainName-8877379f-54e0-469b-a7c4-3c7f8b393f8e">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>adultgirlmail.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8f6ba49c-5995-427b-a667-8cca39e3e622" timestamp="2017-02-06T14:52:18.598000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>extensivee.bid from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-32ba858f-d57a-4ca4-98b4-3e881516215b">\n <cybox:Title>domain - extensivee.bid</cybox:Title>\n <cybox:Object id="example:DomainName-e671d9ca-53a5-4087-ab0f-8162fa93b77f">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>extensivee.bid</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1b64f227-0d06-447e-a9af-3ea32adf3919" timestamp="2017-02-06T14:52:18.599000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>vtraffic.su from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-32280d1d-8bed-45af-a16c-4f0d9e662ea0">\n <cybox:Title>domain - vtraffic.su</cybox:Title>\n <cybox:Object id="example:DomainName-276e349e-2879-4e3c-99b9-b999a0aada24">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>vtraffic.su</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-32ed116d-3383-45d6-b313-2ca02f068461" timestamp="2017-02-06T14:52:18.600000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>uspal.cf from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-19f30b85-2d8f-4aaa-8c49-674e035527f6">\n <cybox:Title>domain - uspal.cf</cybox:Title>\n <cybox:Object id="example:DomainName-4e099ade-018b-467e-9b46-3c7c66117836">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>uspal.cf</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-f298aa93-0512-48d7-80fe-84c59f661e37" timestamp="2017-02-06T14:52:18.600000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>springlovee.at from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-4d113a40-aaa6-442c-ad05-15f5a640d19c">\n <cybox:Title>domain - springlovee.at</cybox:Title>\n <cybox:Object id="example:DomainName-7bf8cc6a-a554-4adf-8bec-8e9995608ce9">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>springlovee.at</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-79e3770f-ea9e-49cb-95bb-ed6b4ee1e427" timestamp="2017-02-06T14:52:18.601000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>wowsupplier.ga from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-59973959-9f40-4b23-8968-715688f2cbf9">\n <cybox:Title>domain - wowsupplier.ga</cybox:Title>\n <cybox:Object id="example:DomainName-c8688ed7-0a37-49a5-90c3-c57dd6610978">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>wowsupplier.ga</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-be8eff97-cb0a-4681-a38b-c64656b752cb" timestamp="2017-02-06T14:52:18.602000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>blackircd.net from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-6aa98b80-02a1-4973-a36d-5438c30624d1">\n <cybox:Title>domain - blackircd.net</cybox:Title>\n <cybox:Object id="example:DomainName-5d9e6ae5-c653-44d2-8c5e-a60c86425d9f">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>blackircd.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-04d23493-af6a-42be-9d1e-0fa9c76baa73" timestamp="2017-02-06T14:52:18.603000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>treasurehunter.at from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-d49fc2d9-f8e2-4cb0-b367-7eb99e6a0385">\n <cybox:Title>domain - treasurehunter.at</cybox:Title>\n <cybox:Object id="example:DomainName-d8bc164a-47b0-4692-a8ff-1ca01962d2a1">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>treasurehunter.at</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-f3a13e11-dd9a-480e-bb07-f595081b0769" timestamp="2017-02-06T14:52:18.604000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>4haters.ga from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-40b402e2-07cb-4cc8-a592-8936577d3a2d">\n <cybox:Title>domain - 4haters.ga</cybox:Title>\n <cybox:Object id="example:DomainName-875a8b25-e478-4634-b89d-c227a839a1f4">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>4haters.ga</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9b9ade84-d38c-4bfa-a14f-6f462d472753" timestamp="2017-02-06T14:52:18.605000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>web.netsworkupdates.com from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-360e3b1c-3c5d-4127-bd74-c2fecfb2ad6e">\n <cybox:Title>hostname - web.netsworkupdates.com</cybox:Title>\n <cybox:Object id="example:DomainName-0c5d7022-538d-4d18-8633-9af46d41a069">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>web.netsworkupdates.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-a810b4fb-a701-43cb-ada8-01e9022e6756" timestamp="2017-02-06T14:52:18.606000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>slalsaxxa1ma.cma.beehoney.co.nz from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-8fcdae94-0461-46a1-9e5b-c1f5ef0b3ade">\n <cybox:Title>hostname - slalsaxxa1ma.cma.beehoney.co.nz</cybox:Title>\n <cybox:Object id="example:DomainName-2214ed42-0ea4-4c0e-b1cb-01242e55f70f">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>slalsaxxa1ma.cma.beehoney.co.nz</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-cf478c49-ea07-4712-b0ed-9a28d3a0f2b4" timestamp="2017-02-06T14:52:18.607000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>70f6abfb433327a7b3c394246cc37ea2 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-34c2946b-0073-4fa7-8c93-d8c47c081d81">\n <cybox:Title>FileHash-MD5 - 70f6abfb433327a7b3c394246cc37ea2</cybox:Title>\n <cybox:Object id="example:File-e9c2645b-db01-46bd-9c81-36d0de16d23c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>70f6abfb433327a7b3c394246cc37ea2</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c0806400-e113-4dd8-b6fe-db28e274a86f" timestamp="2017-02-06T14:52:18.609000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>c149ef34c57e6f7e970063679de01342 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-16da8c52-1397-417f-ba1d-68b6c86d6639">\n <cybox:Title>FileHash-MD5 - c149ef34c57e6f7e970063679de01342</cybox:Title>\n <cybox:Object id="example:File-6b310e44-05b8-43fb-a051-a9cbb0ed1e49">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>c149ef34c57e6f7e970063679de01342</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2de4e7cb-6afd-48e2-83ec-23286d9288fe" timestamp="2017-02-06T14:52:18.610000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ebbf3f2385157240e8a45a9dd00ddaef from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-c6525f38-babc-4a0c-b07c-1da057498361">\n <cybox:Title>FileHash-MD5 - ebbf3f2385157240e8a45a9dd00ddaef</cybox:Title>\n <cybox:Object id="example:File-aefc9d31-d260-49f8-87fb-9ae3282d390c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>ebbf3f2385157240e8a45a9dd00ddaef</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-3d14aed0-46bb-4827-842f-d113a2226b0e" timestamp="2017-02-06T14:52:18.611000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5d817395b4e6a828850e0010edeccc93 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-a1c0ecd7-d707-465b-a6e0-4d0b67f1f98d">\n <cybox:Title>FileHash-MD5 - 5d817395b4e6a828850e0010edeccc93</cybox:Title>\n <cybox:Object id="example:File-c73cd812-fee9-4498-b96d-005b296d8469">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5d817395b4e6a828850e0010edeccc93</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-23ddfc06-b086-4c37-93e0-f9523e565570" timestamp="2017-02-06T14:52:18.611000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6db1f428becc2870517ae50fd892fc67 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-497ef7af-148f-471f-88c1-8bfb5ec97993">\n <cybox:Title>FileHash-MD5 - 6db1f428becc2870517ae50fd892fc67</cybox:Title>\n <cybox:Object id="example:File-61d4225e-706d-4b6a-8118-b947bbe21dcb">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6db1f428becc2870517ae50fd892fc67</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-e726cd3d-37d5-42a8-a3b3-c0ba1de120f4" timestamp="2017-02-06T14:52:18.612000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>64a23908ade4bbf2a7c4aa31be3cff24 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-fdf3564a-3721-4b99-8a30-363861e8e2a1">\n <cybox:Title>FileHash-MD5 - 64a23908ade4bbf2a7c4aa31be3cff24</cybox:Title>\n <cybox:Object id="example:File-c9af5901-dd2b-4122-bdcd-ebfaa4b93688">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>64a23908ade4bbf2a7c4aa31be3cff24</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-36824ae0-3cd2-4ae9-8702-99f68871b116" timestamp="2017-02-06T14:52:18.612000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>7b7675705908d34432e2309880f5538e from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-f52b4a17-c6b6-420a-a7fc-ef9505fd1c7d">\n <cybox:Title>FileHash-MD5 - 7b7675705908d34432e2309880f5538e</cybox:Title>\n <cybox:Object id="example:File-86a0ec23-4bc9-45d8-9383-f43e5b7d2735">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>7b7675705908d34432e2309880f5538e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-f46e9d0b-5b62-47cc-9bc5-359c84abea55" timestamp="2017-02-06T14:52:18.613000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>cc38fd598cbef1a3816bb64f2990e9b6 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-108efa74-5a58-4064-984b-426b9e88ebcf">\n <cybox:Title>FileHash-MD5 - cc38fd598cbef1a3816bb64f2990e9b6</cybox:Title>\n <cybox:Object id="example:File-da17d572-3e1f-4398-a0b3-fdbcf804a27f">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>cc38fd598cbef1a3816bb64f2990e9b6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-5baccce7-c796-48a7-b9ca-f8a54f635ed1" timestamp="2017-02-06T14:52:18.613000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5fa30772b1f7a1f6dd33b84180f17add from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-ed407b79-fe2e-499f-b9ea-b859154f70ea">\n <cybox:Title>FileHash-MD5 - 5fa30772b1f7a1f6dd33b84180f17add</cybox:Title>\n <cybox:Object id="example:File-f717da71-04d0-4a45-b36f-5f318a6e43fe">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5fa30772b1f7a1f6dd33b84180f17add</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-6d7b403d-26ea-45e6-a9cd-ed8dc50df88f" timestamp="2017-02-06T14:52:18.614000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6dcc9ef9258dea343e1fdb1aaa5c7e56 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-b0c094be-aba8-4443-b59e-63ea1d922a14">\n <cybox:Title>FileHash-MD5 - 6dcc9ef9258dea343e1fdb1aaa5c7e56</cybox:Title>\n <cybox:Object id="example:File-e8103542-b4f7-4e08-b769-60c12a816682">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6dcc9ef9258dea343e1fdb1aaa5c7e56</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c1cff767-6dee-4a94-a784-23a7961973f1" timestamp="2017-02-06T14:52:18.614000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>20816af7c443180cccc6aa962151af67 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-678b902a-b2cf-45cb-aeef-198117b25dec">\n <cybox:Title>FileHash-MD5 - 20816af7c443180cccc6aa962151af67</cybox:Title>\n <cybox:Object id="example:File-ccacf76d-fc50-40dd-b1e1-c6adfb36c980">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>20816af7c443180cccc6aa962151af67</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-294ab695-0c18-450a-840c-84aa376ffdb0" timestamp="2017-02-06T14:52:18.615000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3bf85b3bf7393ec22426919d341715e7 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-32f3ade9-e31d-4e84-916d-a8bafe43cbe0">\n <cybox:Title>FileHash-MD5 - 3bf85b3bf7393ec22426919d341715e7</cybox:Title>\n <cybox:Object id="example:File-e1c382e5-6afa-4dd7-b684-255ecbd4281b">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3bf85b3bf7393ec22426919d341715e7</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-821c5b39-b6e3-4a15-88d5-ce8cf3d767aa" timestamp="2017-02-06T14:52:18.615000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a53d38e93698ccf1843f15ebbd89a380 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-0360d41f-e455-4527-9955-298daadbcc85">\n <cybox:Title>FileHash-MD5 - a53d38e93698ccf1843f15ebbd89a380</cybox:Title>\n <cybox:Object id="example:File-14c2a609-2e97-4326-9915-539c64e81dba">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a53d38e93698ccf1843f15ebbd89a380</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-56c5ef5d-e82e-4fc9-b0d0-5d2171ff8913" timestamp="2017-02-06T14:52:18.616000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6255a9d71494381b8a4319fd139e9242 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-26486e84-a104-4906-959a-8c153027694c">\n <cybox:Title>FileHash-MD5 - 6255a9d71494381b8a4319fd139e9242</cybox:Title>\n <cybox:Object id="example:File-fcb4abb4-f9d9-4401-9e72-4e3211665afe">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6255a9d71494381b8a4319fd139e9242</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-cc0cfaf0-a28c-4556-b79c-1695f9774edc" timestamp="2017-02-06T14:52:18.617000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>cb8d57c149330e7bd1798d62e5da5404 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-07f2a874-889c-473a-ba8b-08036e75a941">\n <cybox:Title>FileHash-MD5 - cb8d57c149330e7bd1798d62e5da5404</cybox:Title>\n <cybox:Object id="example:File-44a7924f-7c11-42ef-8ab2-df30b292ac42">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>cb8d57c149330e7bd1798d62e5da5404</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b0eac2a1-af86-43d1-914c-4488250a98e1" timestamp="2017-02-06T14:52:18.617000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f5f698c6c0660d14ce19fd36a4e94b9c from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-ec2a1e65-d60f-4d5c-8529-4ad5b6d80572">\n <cybox:Title>FileHash-MD5 - f5f698c6c0660d14ce19fd36a4e94b9c</cybox:Title>\n <cybox:Object id="example:File-961cad7e-b60a-4ab0-9d5c-fa5146477526">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f5f698c6c0660d14ce19fd36a4e94b9c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8f097bbe-e3fe-43e2-8ff6-eda1c06b5a4c" timestamp="2017-02-06T14:52:18.618000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>33252b2c9e054617ecb7172837ce7775 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-0dfe1e5d-5f38-429a-b903-460a3c8624be">\n <cybox:Title>FileHash-MD5 - 33252b2c9e054617ecb7172837ce7775</cybox:Title>\n <cybox:Object id="example:File-ad0bd9fb-7fcb-4004-96ce-321f445b121a">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>33252b2c9e054617ecb7172837ce7775</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-17d6ed72-bd44-4b2c-893c-ede37f0fbd19" timestamp="2017-02-06T14:52:18.619000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3ddf657800e60a57b884b87e1e8a987c from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-038142d8-cbfe-46b4-8d86-9e7fa296ad35">\n <cybox:Title>FileHash-MD5 - 3ddf657800e60a57b884b87e1e8a987c</cybox:Title>\n <cybox:Object id="example:File-eb65305a-1339-45e0-b423-99f2f77808fc">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3ddf657800e60a57b884b87e1e8a987c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7311d3ae-e69c-4e5c-a01d-28c17ef10489" timestamp="2017-02-06T14:52:18.619000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>cdb0762becd67b893d73cda594cd1c3e from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-91d091d3-529e-4437-be04-015199db4c0a">\n <cybox:Title>FileHash-MD5 - cdb0762becd67b893d73cda594cd1c3e</cybox:Title>\n <cybox:Object id="example:File-d8235d22-9aa7-4854-a983-1b08eb985741">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>cdb0762becd67b893d73cda594cd1c3e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b73f6293-d6c0-4def-8559-e2a964374ff5" timestamp="2017-02-06T14:52:18.619000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f79035227cace85f01ee4ae63ad7c511 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-3beeda30-4a76-435b-ada4-e038d113254c">\n <cybox:Title>FileHash-MD5 - f79035227cace85f01ee4ae63ad7c511</cybox:Title>\n <cybox:Object id="example:File-1d2b89f1-e3cc-4a85-b6bf-bf6b5c2c5bc2">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f79035227cace85f01ee4ae63ad7c511</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-42e64df3-e32b-4a7b-a75f-750737c2d6a2" timestamp="2017-02-06T14:52:18.620000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>23de0ef14737b0398af94d9d9ec5d5b7 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-051e6b25-a311-4cfa-af3a-e4867b208ca3">\n <cybox:Title>FileHash-MD5 - 23de0ef14737b0398af94d9d9ec5d5b7</cybox:Title>\n <cybox:Object id="example:File-114248f1-ffb9-4e7f-bd1a-8d6873dfabbd">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>23de0ef14737b0398af94d9d9ec5d5b7</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-216ccf84-1773-4b0e-9f20-27fa466424ac" timestamp="2017-02-06T14:52:18.620000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>92316769af9e7cc204a81789c0dab9c0 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-38a77b3d-93e5-4eb3-896b-7ec33d022f9b">\n <cybox:Title>FileHash-MD5 - 92316769af9e7cc204a81789c0dab9c0</cybox:Title>\n <cybox:Object id="example:File-a7e26181-4715-4eaf-8fb0-928322e9e496">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>92316769af9e7cc204a81789c0dab9c0</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7cc9ce53-f5c4-448e-8799-b5a789207b2d" timestamp="2017-02-06T14:52:18.621000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>7b8f8a999367f28b3ac42fc4d2b9439d from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-a069bd66-34ac-402e-ba61-69f4a1fa80e7">\n <cybox:Title>FileHash-MD5 - 7b8f8a999367f28b3ac42fc4d2b9439d</cybox:Title>\n <cybox:Object id="example:File-8ec79ec2-1b1d-4e7c-8545-2a4dd5f73944">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>7b8f8a999367f28b3ac42fc4d2b9439d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d3dde752-c3ab-45d6-83dc-6293c1ea5e5e" timestamp="2017-02-06T14:52:18.621000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>fdca6464b694739178b5a46d3d9b0f5c from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-627748f2-a069-4ba5-b6d1-06b0b4193441">\n <cybox:Title>FileHash-MD5 - fdca6464b694739178b5a46d3d9b0f5c</cybox:Title>\n <cybox:Object id="example:File-68cbe9fa-c7e3-45cb-a825-fe0fbd772fad">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>fdca6464b694739178b5a46d3d9b0f5c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-5fb7a4f2-66c8-4c3d-8cb4-5dfe7cae5832" timestamp="2017-02-06T14:52:18.621000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5e5289bb2b5bb89bddbc2ec0a38a6c9b from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-fb7becfd-6822-493c-b404-05ab3ca49e12">\n <cybox:Title>FileHash-MD5 - 5e5289bb2b5bb89bddbc2ec0a38a6c9b</cybox:Title>\n <cybox:Object id="example:File-819167c3-320e-4e87-b118-9a4d0eb60b47">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5e5289bb2b5bb89bddbc2ec0a38a6c9b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-afc4fb3a-4b66-4873-a723-7e2f1def478f" timestamp="2017-02-06T14:52:18.621000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>93c07b57a51e3eee44134caa39057e8d from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-dbe94ca1-527c-436a-b365-3d1d704a687c">\n <cybox:Title>FileHash-MD5 - 93c07b57a51e3eee44134caa39057e8d</cybox:Title>\n <cybox:Object id="example:File-9bc9a757-d481-4694-a480-5e5a7ac2fe02">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>93c07b57a51e3eee44134caa39057e8d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-738e6b9e-648d-432c-aa98-8b3291954500" timestamp="2017-02-06T14:52:18.622000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>52645badc17613f95a7962b07e2f063e from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-4be613ef-86ea-4b42-9703-fd8133e34692">\n <cybox:Title>FileHash-MD5 - 52645badc17613f95a7962b07e2f063e</cybox:Title>\n <cybox:Object id="example:File-ef429ffc-4a13-4cf1-aaa8-5de56914667d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>52645badc17613f95a7962b07e2f063e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7caa6a3e-64ec-48ef-9e0b-ed939d2bd0b7" timestamp="2017-02-06T14:52:18.622000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>2510953f05dcd2c758ad29160bbc3911 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-e23aeaa1-dda4-4459-b45d-89667ec8e94a">\n <cybox:Title>FileHash-MD5 - 2510953f05dcd2c758ad29160bbc3911</cybox:Title>\n <cybox:Object id="example:File-9c572edf-8d5d-4628-a711-558369593233">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>2510953f05dcd2c758ad29160bbc3911</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-525e86d2-b7c1-450e-b2f0-7943778e3fe4" timestamp="2017-02-06T14:52:18.622000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a1bd290317b03ade7941dedd4a4e903b from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-691176f5-f5c7-4229-9b17-035b3885e596">\n <cybox:Title>FileHash-MD5 - a1bd290317b03ade7941dedd4a4e903b</cybox:Title>\n <cybox:Object id="example:File-f7670375-f9a3-45db-b439-f76586cbfb79">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a1bd290317b03ade7941dedd4a4e903b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9ae122bc-efef-4b86-8d81-8565979cd466" timestamp="2017-02-06T14:52:18.623000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>99e9f5a4563f56e61f3806be39efce62 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-9671605e-a5cc-4088-972a-2487c4ba3fb6">\n <cybox:Title>FileHash-MD5 - 99e9f5a4563f56e61f3806be39efce62</cybox:Title>\n <cybox:Object id="example:File-c6937461-5a89-47f6-8e79-8d7dfe52d68d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>99e9f5a4563f56e61f3806be39efce62</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-574702c5-99e8-48a0-969a-dea1c08e6141" timestamp="2017-02-06T14:52:18.624000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>624f84a9d8979789c630327a6b08c7c6 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-c1b3162d-1941-4ac9-9036-5c31c731967e">\n <cybox:Title>FileHash-MD5 - 624f84a9d8979789c630327a6b08c7c6</cybox:Title>\n <cybox:Object id="example:File-b28ec3db-fff1-40ae-bbd8-1ffd2517e25d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>624f84a9d8979789c630327a6b08c7c6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-403efae8-fb61-4ce9-a557-ce556acad406" timestamp="2017-02-06T14:52:18.624000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>c6faf2a51122cad086370674a3c9ad1a from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-dab9f98e-ff8a-4c6f-8089-9a8d689a1ca5">\n <cybox:Title>FileHash-MD5 - c6faf2a51122cad086370674a3c9ad1a</cybox:Title>\n <cybox:Object id="example:File-943ceaa5-6abf-41c0-8462-a26ab3e6bc69">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>c6faf2a51122cad086370674a3c9ad1a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-39cecd99-355f-481c-875e-9563dff5be42" timestamp="2017-02-06T14:52:18.625000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f33808ea5100648108c7d0d6a0d5eb61 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-b2dc00f5-59ae-4fdc-ae2e-1536ba20653c">\n <cybox:Title>FileHash-MD5 - f33808ea5100648108c7d0d6a0d5eb61</cybox:Title>\n <cybox:Object id="example:File-64990059-7fac-476e-903b-1c4e5eccf555">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f33808ea5100648108c7d0d6a0d5eb61</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8587473a-caca-4779-b8d9-36243b730ed8" timestamp="2017-02-06T14:52:18.625000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>37768af89b093b96ab7671456de894bc from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-daa6bf7f-d95d-45eb-94b8-309dbfa83d14">\n <cybox:Title>FileHash-MD5 - 37768af89b093b96ab7671456de894bc</cybox:Title>\n <cybox:Object id="example:File-3555a5e8-6d46-451f-86cd-96a0d2e329fc">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>37768af89b093b96ab7671456de894bc</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-779a5d8f-b578-4ad2-8c47-e4d01cafdf2c" timestamp="2017-02-06T14:52:18.625000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d840ecdd9c8b32af83131dab66ec0f44 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-bd7e4151-469c-473b-8822-bd8491871d0f">\n <cybox:Title>FileHash-MD5 - d840ecdd9c8b32af83131dab66ec0f44</cybox:Title>\n <cybox:Object id="example:File-bd0e29b2-74f5-4f7d-9670-a6d7906d0662">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d840ecdd9c8b32af83131dab66ec0f44</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-fc2132b3-348c-4a58-8880-69463c92b541" timestamp="2017-02-06T14:52:18.625000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>4ada3fabb0e2cd0c90b16ec79e8147d8 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-68a7a151-c7ec-472c-8193-6d397a5ce685">\n <cybox:Title>FileHash-MD5 - 4ada3fabb0e2cd0c90b16ec79e8147d8</cybox:Title>\n <cybox:Object id="example:File-84052825-1d32-4c66-a18f-9f69df58741d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>4ada3fabb0e2cd0c90b16ec79e8147d8</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-ed60618f-ae81-4b1e-a8b7-c4c239a1872f" timestamp="2017-02-06T14:52:18.626000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a50e2d3419a9de9be87eb04f52f2245f from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-0eb3992c-1a9e-4943-99bb-9152fcb74db4">\n <cybox:Title>FileHash-MD5 - a50e2d3419a9de9be87eb04f52f2245f</cybox:Title>\n <cybox:Object id="example:File-552c4777-9d7c-4fa4-8e4a-387f54b231d3">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a50e2d3419a9de9be87eb04f52f2245f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-f866cdb6-54b7-4362-bfd6-204d350052ff" timestamp="2017-02-06T14:52:18.626000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a11b982bde341475e28d3a2fa96f982a from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-7d6b9dc4-f166-4b62-b594-72cd43f69a78">\n <cybox:Title>FileHash-MD5 - a11b982bde341475e28d3a2fa96f982a</cybox:Title>\n <cybox:Object id="example:File-07f266a1-8e4b-4aac-a09c-ad99b5e8fb27">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a11b982bde341475e28d3a2fa96f982a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2629a786-20ad-43e0-bd62-e87e5008b2b5" timestamp="2017-02-06T14:52:18.626000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e83d79fb671cf2335025022bebbb0bdd from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-350830cf-6a36-4079-8552-cc831fe2d8c3">\n <cybox:Title>FileHash-MD5 - e83d79fb671cf2335025022bebbb0bdd</cybox:Title>\n <cybox:Object id="example:File-3feb599c-115b-47c7-a048-94fdc1255ea3">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e83d79fb671cf2335025022bebbb0bdd</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c78622a6-91d1-40be-8e85-eb352328cab8" timestamp="2017-02-06T14:52:18.626000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5d513187fc3357bc58d49c33f1c3e9c7 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-7c5d25b0-9bff-460a-8cd4-e3646338edde">\n <cybox:Title>FileHash-MD5 - 5d513187fc3357bc58d49c33f1c3e9c7</cybox:Title>\n <cybox:Object id="example:File-57be32a6-727b-4f95-a0a5-153e2908e9ef">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5d513187fc3357bc58d49c33f1c3e9c7</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8c0221f8-aa9f-423b-93cf-0491e4916176" timestamp="2017-02-06T14:52:18.627000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>2bbd8aa8be75537bd60e68b124eafbff from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-2e30ae66-9b2b-4a34-8e16-fac749c909fc">\n <cybox:Title>FileHash-MD5 - 2bbd8aa8be75537bd60e68b124eafbff</cybox:Title>\n <cybox:Object id="example:File-51bca433-3093-46c4-8303-5c66f50187c7">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>2bbd8aa8be75537bd60e68b124eafbff</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-29e6a065-dc28-4417-932d-980b15b7390f" timestamp="2017-02-06T14:52:18.627000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>7d17de98ce24a0c3e156efcc0e1ca565 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-61c3f953-dd2d-4aa6-ae8c-3820fd0e2c16">\n <cybox:Title>FileHash-MD5 - 7d17de98ce24a0c3e156efcc0e1ca565</cybox:Title>\n <cybox:Object id="example:File-e6b525be-013c-4bb7-96cb-a29204044185">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>7d17de98ce24a0c3e156efcc0e1ca565</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-36f36345-ecc8-4537-85cf-c9b253f40727" timestamp="2017-02-06T14:52:18.627000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>4725f4b5eec09bdb29433cbea6e360b3 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-5bf7de98-135b-47d5-98e5-cbd03f59f62e">\n <cybox:Title>FileHash-MD5 - 4725f4b5eec09bdb29433cbea6e360b3</cybox:Title>\n <cybox:Object id="example:File-059ff835-6c75-4ccf-8963-a1c70173780e">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>4725f4b5eec09bdb29433cbea6e360b3</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d7dea0ac-57f2-4f5b-8ffa-afbfbd985080" timestamp="2017-02-06T14:52:18.628000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>992e9518d69039c3ebae4191e1f8b8b6 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-fcb53338-c6b9-4d59-ac02-3d7fc743f8e5">\n <cybox:Title>FileHash-MD5 - 992e9518d69039c3ebae4191e1f8b8b6</cybox:Title>\n <cybox:Object id="example:File-5e701d5f-9874-4214-9153-89bcd8a0ffaa">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>992e9518d69039c3ebae4191e1f8b8b6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9595cbdd-9704-43df-8d49-95fcefc80654" timestamp="2017-02-06T14:52:18.628000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>53203a1b05c0e039d8e690bad4808b97 from https://otx.alienvault.com/pulse/5890659323a3c41d9fe20966</indicator:Title>\n <indicator:Observable id="example:Observable-736b3ad8-8f69-4875-bf50-a4296349c298">\n <cybox:Title>FileHash-MD5 - 53203a1b05c0e039d8e690bad4808b97</cybox:Title>\n <cybox:Object id="example:File-5cb67735-ebac-411b-8f7d-bf362f5bfd5d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>53203a1b05c0e039d8e690bad4808b97</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T14_52_19_225000_00_00.xml
- b'<stix:STIX_Package xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1" xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2" xmlns:incident="http://stix.mitre.org/Incident-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:stixCommon="http://stix.mitre.org/common-1" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:alienvault-otx="https://otx.alienvault.com" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://cybox.mitre.org/common-2 http://cybox.mitre.org/XMLSchema/common/2.1/cybox_common.xsd http://cybox.mitre.org/cybox-2 http://cybox.mitre.org/XMLSchema/core/2.1/cybox_core.xsd http://cybox.mitre.org/default_vocabularies-2 http://cybox.mitre.org/XMLSchema/default_vocabularies/2.1/cybox_default_vocabularies.xsd http://cybox.mitre.org/objects#DomainNameObject-1 http://cybox.mitre.org/XMLSchema/objects/Domain_Name/1.0/Domain_Name_Object.xsd http://cybox.mitre.org/objects#FileObject-2 http://cybox.mitre.org/XMLSchema/objects/File/2.1/File_Object.xsd http://stix.mitre.org/Incident-1 http://stix.mitre.org/XMLSchema/incident/1.1.1/incident.xsd http://stix.mitre.org/Indicator-2 http://stix.mitre.org/XMLSchema/indicator/2.1.1/indicator.xsd http://stix.mitre.org/common-1 http://stix.mitre.org/XMLSchema/common/1.1.1/stix_common.xsd http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.1.1/stix_core.xsd" id="alienvault-otx:Package-00d93e94-eed7-41c6-a323-7d54b44e47ee" version="1.1.1" timestamp="2017-02-06T14:52:20.074000+00:00">\n <stix:STIX_Header>\n <stix:Title>Downeks and Quasar RAT Used in Recent Targeted Attacks Against Governments</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators</stix:Package_Intent>\n <stix:Description>DustySky is a campaign which others have attributed to the Gaza Cybergang group, a group that targets government interests in the region.\nThe initial infection vector in this attack is not clear, but it results in installing the “Downeks” downloader, which in turn infects the victim computer with the “Quasar” RAT.\n\nDowneks uses third party websites to determine the external IP of the victim machine, possibly to determine victim location with GeoIP. It also drops decoy documents in an attempt to camouflage the attack.\n\nQuasar is a .NET Framework-based open-source RAT. The attackers invested significant effort in attempting to hide the tool by changing the source code of the RAT and the RAT server, and by using an obfuscator and packer.</stix:Description>\n <stix:Information_Source>\n <stixCommon:Description>Alienvault OTX - https://otx.alienvault.com/</stixCommon:Description>\n <stixCommon:Identity id="alienvault-otx:Identity-62763e04-5c39-4a86-94c3-db89c2646648">\n <stixCommon:Name>Alienvault OTX</stixCommon:Name>\n </stixCommon:Identity>\n <stixCommon:Time>\n <cyboxCommon:Produced_Time>2017-01-31T10:16:33.856000</cyboxCommon:Produced_Time>\n </stixCommon:Time>\n </stix:Information_Source>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator id="alienvault-otx:indicator-63ba1736-7f4b-41c7-bd86-fc88f27aa7c7" timestamp="2017-02-06T14:52:20.077000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>2eb7aa306551d693691d14558c5dc4f6d80ef8f69cf466149fbba23953c08f7f from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-843c5de3-24a8-4c8a-b310-4a563d3af1f5">\n <cybox:Title>FileHash-SHA256 - 2eb7aa306551d693691d14558c5dc4f6d80ef8f69cf466149fbba23953c08f7f</cybox:Title>\n <cybox:Object id="example:File-3e83477b-283e-456b-bea6-b534785f7c7c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>2eb7aa306551d693691d14558c5dc4f6d80ef8f69cf466149fbba23953c08f7f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-10e92661-619f-4daa-9a4f-25ae9ba1ece3" timestamp="2017-02-06T14:52:20.077000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>25e6bf67410dffb95c527c19dcff5223dbc3bf4c987650e45fbea1267072e8ff from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-38a9cb18-2f61-4258-953e-f0a80f3f1c4c">\n <cybox:Title>FileHash-SHA256 - 25e6bf67410dffb95c527c19dcff5223dbc3bf4c987650e45fbea1267072e8ff</cybox:Title>\n <cybox:Object id="example:File-8cbb820f-5f60-467d-b976-bef39e2be173">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>25e6bf67410dffb95c527c19dcff5223dbc3bf4c987650e45fbea1267072e8ff</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-720dc799-6d80-471e-8d51-c9d4308ed824" timestamp="2017-02-06T14:52:20.078000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a7aeeead233fcdfe1c7475db982497a82d8ae745ec1c58bd87215e8869c3f9e4 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6f345cd7-296e-4beb-84e3-165c3a2ed91a">\n <cybox:Title>FileHash-SHA256 - a7aeeead233fcdfe1c7475db982497a82d8ae745ec1c58bd87215e8869c3f9e4</cybox:Title>\n <cybox:Object id="example:File-9fc14539-206e-41e8-b6e8-bdb3d8f0968e">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a7aeeead233fcdfe1c7475db982497a82d8ae745ec1c58bd87215e8869c3f9e4</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-745f1dc5-9478-4315-a606-849d00981490" timestamp="2017-02-06T14:52:20.079000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>488ba22d6cb8c9b0310c58fa4c4739692cdf45676c3164b357314322542f9dff from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-172e0755-5d52-4bbe-8096-e440f63771b0">\n <cybox:Title>FileHash-SHA256 - 488ba22d6cb8c9b0310c58fa4c4739692cdf45676c3164b357314322542f9dff</cybox:Title>\n <cybox:Object id="example:File-5f7fd3bb-cd26-4ea5-a1bf-109a936b6800">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>488ba22d6cb8c9b0310c58fa4c4739692cdf45676c3164b357314322542f9dff</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-447c51b8-4441-4d28-b0e7-5e935773b78d" timestamp="2017-02-06T14:52:20.079000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>de3e25a69ba43b9f236e544ece7f2da82a4fafb4489ad2e263754d9b9d88bc5c from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-785392ce-1192-4930-95a6-47b3d1a49610">\n <cybox:Title>FileHash-SHA256 - de3e25a69ba43b9f236e544ece7f2da82a4fafb4489ad2e263754d9b9d88bc5c</cybox:Title>\n <cybox:Object id="example:File-490697db-8238-4e50-8e54-1b600b426ee7">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>de3e25a69ba43b9f236e544ece7f2da82a4fafb4489ad2e263754d9b9d88bc5c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-aa91b134-e65f-47cd-95e7-b7936f2c26cd" timestamp="2017-02-06T14:52:20.080000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f53fd5389b09c6ad289736720e72392dd5f30a1f7822dbc8c7c2e2b655b4dad9 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-48eaf46b-e4d5-487a-8003-26abc853889e">\n <cybox:Title>FileHash-SHA256 - f53fd5389b09c6ad289736720e72392dd5f30a1f7822dbc8c7c2e2b655b4dad9</cybox:Title>\n <cybox:Object id="example:File-dff13dc8-c960-4eab-a6ee-25060b64f852">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f53fd5389b09c6ad289736720e72392dd5f30a1f7822dbc8c7c2e2b655b4dad9</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-a2ead153-5e74-4435-a967-9f391cdcca9e" timestamp="2017-02-06T14:52:20.080000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>1d533ddaefc7859a3f6c6751114e895b7aa5935eb0ed68b01ec61aa8560ae3d9 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-ae5023ed-0a29-4e7f-8288-f9853e778014">\n <cybox:Title>FileHash-SHA256 - 1d533ddaefc7859a3f6c6751114e895b7aa5935eb0ed68b01ec61aa8560ae3d9</cybox:Title>\n <cybox:Object id="example:File-123379e4-ca41-423d-affe-1a0be240a87a">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>1d533ddaefc7859a3f6c6751114e895b7aa5935eb0ed68b01ec61aa8560ae3d9</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-6db4f04a-211b-44df-9901-5a98851f7132" timestamp="2017-02-06T14:52:20.081000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>bc846caa05939b085837057bc4b9303357602ece83dc1380191bddd1402d4a2b from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-b594ff13-cecd-4abe-bd5f-124b383543bd">\n <cybox:Title>FileHash-SHA256 - bc846caa05939b085837057bc4b9303357602ece83dc1380191bddd1402d4a2b</cybox:Title>\n <cybox:Object id="example:File-d0c89f81-1b11-49c8-a62c-01852ea1f7f6">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>bc846caa05939b085837057bc4b9303357602ece83dc1380191bddd1402d4a2b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-891ae908-154d-4a97-b294-e0808a45ce92" timestamp="2017-02-06T14:52:20.082000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>webfile.myq-see.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-9678c591-ce00-442b-a2c5-a0fbbae067bf">\n <cybox:Title>hostname - webfile.myq-see.com</cybox:Title>\n <cybox:Object id="example:DomainName-d2a5b27b-9ce7-4616-a7c3-ea13bdfb485b">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>webfile.myq-see.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0bf4628d-7136-4bbe-af8f-87568e4eec4c" timestamp="2017-02-06T14:52:20.083000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>downloadmyhost.zapto.org from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-9975d5ab-1e4c-4003-8bc3-2df063085721">\n <cybox:Title>hostname - downloadmyhost.zapto.org</cybox:Title>\n <cybox:Object id="example:DomainName-eb7866cd-8d68-4b7d-ba35-8b4982498b59">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>downloadmyhost.zapto.org</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-175d274e-c116-4dca-85c4-74226b8b22bd" timestamp="2017-02-06T14:52:20.084000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>wallanews.sytes.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-f949c2dc-82e9-43c4-aa16-326d7718471b">\n <cybox:Title>hostname - wallanews.sytes.net</cybox:Title>\n <cybox:Object id="example:DomainName-352fed21-4b1c-4490-acca-89c3616b1bef">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>wallanews.sytes.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-fa151ae8-268b-474b-8bbe-35b4f5cb2df0" timestamp="2017-02-06T14:52:20.085000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>noredirecto.redirectme.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-0880f411-3901-4276-9a68-f2a48a24c83e">\n <cybox:Title>hostname - noredirecto.redirectme.net</cybox:Title>\n <cybox:Object id="example:DomainName-48f45b69-e1aa-43f6-98fc-17ed88f5ea28">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>noredirecto.redirectme.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9386da15-1506-4f75-9fc4-22a4a71b6d1e" timestamp="2017-02-06T14:52:20.086000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>safara.sytes.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-9d99bd0b-239b-4e7f-95c2-c7d294076a4c">\n <cybox:Title>hostname - safara.sytes.net</cybox:Title>\n <cybox:Object id="example:DomainName-6cc0f64f-1075-410d-a0a3-6a8c99670f85">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>safara.sytes.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8e2850d1-1d01-4a66-8c54-ee08f3d19b43" timestamp="2017-02-06T14:52:20.087000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>help2014.linkpc.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-a8d7941b-1af6-46fd-bb7d-4e9661a8f13f">\n <cybox:Title>hostname - help2014.linkpc.net</cybox:Title>\n <cybox:Object id="example:DomainName-419a39ac-a5c0-4c27-b5f0-c696b2728975">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>help2014.linkpc.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8116aec2-9216-4589-afb1-562783568bbb" timestamp="2017-02-06T14:52:20.088000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>kolabdown.sytes.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-5b195fce-cead-4826-a9e3-43718404076a">\n <cybox:Title>hostname - kolabdown.sytes.net</cybox:Title>\n <cybox:Object id="example:DomainName-03b89e96-6258-48d6-89fa-6292d1b6909c">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>kolabdown.sytes.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7ea4ae1d-460f-468a-b435-427c2f865b52" timestamp="2017-02-06T14:52:20.089000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>wallanews.publicvm.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-272786a3-63c6-4518-8ec8-a38c84ecf716">\n <cybox:Title>hostname - wallanews.publicvm.com</cybox:Title>\n <cybox:Object id="example:DomainName-e2f7b6f6-01ee-488d-8e55-756fe0a77dfd">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>wallanews.publicvm.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-065a26a6-f86f-495b-8525-c08a74773707" timestamp="2017-02-06T14:52:20.090000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>downloadlog.linkpc.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-acb6e519-c609-4d01-ae27-5487173680b5">\n <cybox:Title>hostname - downloadlog.linkpc.net</cybox:Title>\n <cybox:Object id="example:DomainName-e8c075b7-b0d8-44e8-bdda-af307c5d3238">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>downloadlog.linkpc.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-70b44f06-0471-4de4-b441-c99f58a6eb4e" timestamp="2017-02-06T14:52:20.090000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>rotter2.publicvm.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-3326d2d2-157e-4e47-9247-7c3afde94ed6">\n <cybox:Title>hostname - rotter2.publicvm.com</cybox:Title>\n <cybox:Object id="example:DomainName-2a155af0-5eed-4777-9c4c-de9d00e3bd57">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>rotter2.publicvm.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-257fbe6b-c16f-499b-8b70-2899465137a4" timestamp="2017-02-06T14:52:20.091000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>7eeeae1f2fc62653593c7ce254e9cf855905035c2e8f8c0588887cb8e99dd770 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-44511d01-fd9a-43b5-bdca-28c6750a9e6c">\n <cybox:Title>FileHash-SHA256 - 7eeeae1f2fc62653593c7ce254e9cf855905035c2e8f8c0588887cb8e99dd770</cybox:Title>\n <cybox:Object id="example:File-889fbb9b-49f9-4b24-8b45-b85c86db1a52">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>7eeeae1f2fc62653593c7ce254e9cf855905035c2e8f8c0588887cb8e99dd770</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0b85633b-0bab-4320-be5f-73196e3802b0" timestamp="2017-02-06T14:52:20.091000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>11b1088ad962984f6df89ccc6bbc98bf220af952dec0b4622f8453a0a164cb65 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e8ac74ab-cf0f-4908-9524-1ef16041d21e">\n <cybox:Title>FileHash-SHA256 - 11b1088ad962984f6df89ccc6bbc98bf220af952dec0b4622f8453a0a164cb65</cybox:Title>\n <cybox:Object id="example:File-e0b03801-e7a8-4a3b-aec3-6c12ccf4f25e">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>11b1088ad962984f6df89ccc6bbc98bf220af952dec0b4622f8453a0a164cb65</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7c43f4df-9af9-4d40-a544-dc5b5b289822" timestamp="2017-02-06T14:52:20.092000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>182c82100069834ad4a8dadee6874cfb612f0b9babc7cd3ee5d69f16440ad6d7 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e2efb67e-8c78-4868-8af5-fc2cc24eedcc">\n <cybox:Title>FileHash-SHA256 - 182c82100069834ad4a8dadee6874cfb612f0b9babc7cd3ee5d69f16440ad6d7</cybox:Title>\n <cybox:Object id="example:File-e08ca03f-8918-4428-b882-2237e67a3355">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>182c82100069834ad4a8dadee6874cfb612f0b9babc7cd3ee5d69f16440ad6d7</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-96829526-02ed-4697-8450-d740b69bf464" timestamp="2017-02-06T14:52:20.092000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f19bc664558177b7269f52edcec74ecdb38ed2ab9e706b68d9cbb3a53c243dec from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-63fc926a-3d3a-410d-a022-99c1c3bb5750">\n <cybox:Title>FileHash-SHA256 - f19bc664558177b7269f52edcec74ecdb38ed2ab9e706b68d9cbb3a53c243dec</cybox:Title>\n <cybox:Object id="example:File-f3c2c7f5-dc7e-4fb6-a10c-e76bf840f0b3">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f19bc664558177b7269f52edcec74ecdb38ed2ab9e706b68d9cbb3a53c243dec</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-46223565-598e-409b-9cba-c136965fcefa" timestamp="2017-02-06T14:52:20.092000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>91a4e395d57a52a85a2bda653a0ed796865e8af01c1345dff63469759448daf0 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-8701acc9-84ae-4e2f-8668-922bb5a61f32">\n <cybox:Title>FileHash-SHA256 - 91a4e395d57a52a85a2bda653a0ed796865e8af01c1345dff63469759448daf0</cybox:Title>\n <cybox:Object id="example:File-761dbda4-3048-404e-8cb1-3fee3c976085">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>91a4e395d57a52a85a2bda653a0ed796865e8af01c1345dff63469759448daf0</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-869bf770-f678-400e-a8fe-a7b0e1a26ab3" timestamp="2017-02-06T14:52:20.093000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>78aaed20914d3895708985aee089a464b31e11eb3b3e90b530dcebbe10e915ec from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-ba0fb6f2-de76-4f85-bf42-e57360b4e06e">\n <cybox:Title>FileHash-SHA256 - 78aaed20914d3895708985aee089a464b31e11eb3b3e90b530dcebbe10e915ec</cybox:Title>\n <cybox:Object id="example:File-2c55b1a3-5091-4996-b5b6-93ee00ccceed">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>78aaed20914d3895708985aee089a464b31e11eb3b3e90b530dcebbe10e915ec</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7d5786cd-18c3-4e21-9cbd-0a412be544bd" timestamp="2017-02-06T14:52:20.093000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>575708d3eb23f8111b7174408f05caf6574c5d6782c750562bfb9abe48cb219e from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e871687b-15e7-4b68-859a-0cdd2459aa17">\n <cybox:Title>FileHash-SHA256 - 575708d3eb23f8111b7174408f05caf6574c5d6782c750562bfb9abe48cb219e</cybox:Title>\n <cybox:Object id="example:File-b59e94c6-8c53-438c-8c9e-2e517c7220f7">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>575708d3eb23f8111b7174408f05caf6574c5d6782c750562bfb9abe48cb219e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4bfb3c0a-9e95-440b-a566-1986552fe911" timestamp="2017-02-06T14:52:20.093000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>95d9a2b664e3e5c1206d94241ded115643aa0452dd3fe3338363ff826260f40c from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-3f4eb5e7-b41c-46a1-b840-e0cf058d14c8">\n <cybox:Title>FileHash-SHA256 - 95d9a2b664e3e5c1206d94241ded115643aa0452dd3fe3338363ff826260f40c</cybox:Title>\n <cybox:Object id="example:File-a08b2943-7e2b-4df3-82a7-838ecf0f032b">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>95d9a2b664e3e5c1206d94241ded115643aa0452dd3fe3338363ff826260f40c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-5e93c070-c6ef-4f73-8813-d362361570ab" timestamp="2017-02-06T14:52:20.094000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>c885f09b10feb88d7d176fe1a01ed8b480deb42324d2bb825e96fe1408e2a35f from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-63af2d87-d326-4c4d-b609-f388657afa1c">\n <cybox:Title>FileHash-SHA256 - c885f09b10feb88d7d176fe1a01ed8b480deb42324d2bb825e96fe1408e2a35f</cybox:Title>\n <cybox:Object id="example:File-89414889-0b67-4da1-9a66-ef359867efb4">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>c885f09b10feb88d7d176fe1a01ed8b480deb42324d2bb825e96fe1408e2a35f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-95407519-760b-4412-bf42-9a696129fc81" timestamp="2017-02-06T14:52:20.094000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>0d235478ae9cc87b7b907181ccd151b618d74955716ba2dbc40a74dc1cdfc4aa from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-901e4827-5663-4fe3-bcb6-56427024419e">\n <cybox:Title>FileHash-SHA256 - 0d235478ae9cc87b7b907181ccd151b618d74955716ba2dbc40a74dc1cdfc4aa</cybox:Title>\n <cybox:Object id="example:File-030e0043-f306-499f-bf34-dcba79824381">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>0d235478ae9cc87b7b907181ccd151b618d74955716ba2dbc40a74dc1cdfc4aa</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7c68629a-6b6c-41e7-bcdb-4f8c06370ef2" timestamp="2017-02-06T14:52:20.094000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>8cdbea2aea51f73c68adc517eed533802e1f3b2a9ec0b0560b6bb8fc03ac3e4f from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-f5a4021f-b7ee-46c8-843c-5558627bc318">\n <cybox:Title>FileHash-SHA256 - 8cdbea2aea51f73c68adc517eed533802e1f3b2a9ec0b0560b6bb8fc03ac3e4f</cybox:Title>\n <cybox:Object id="example:File-4ebce0dd-1fd2-48be-9066-60d03203089a">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>8cdbea2aea51f73c68adc517eed533802e1f3b2a9ec0b0560b6bb8fc03ac3e4f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-bee946b2-8560-4424-943a-7ca15f4a656b" timestamp="2017-02-06T14:52:20.095000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>2ddce8b010f011a04cf24dc8e5932ae13b463dd6a3cb9bf02ae835b04a70d042 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-725e1fa8-7a5c-4214-a76c-231fbf0b8e21">\n <cybox:Title>FileHash-SHA256 - 2ddce8b010f011a04cf24dc8e5932ae13b463dd6a3cb9bf02ae835b04a70d042</cybox:Title>\n <cybox:Object id="example:File-049694d9-e582-4bb9-b75f-e71d2f46c765">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>2ddce8b010f011a04cf24dc8e5932ae13b463dd6a3cb9bf02ae835b04a70d042</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4f4e153d-f163-40ab-ac91-56dda5579677" timestamp="2017-02-06T14:52:20.095000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>1ac624aaf6bbc2e3b966182888411f92797bd30b6fcce9f8a97648e64f13506f from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-a2c8bf3e-9020-4be6-a49e-fdbcc0ea1baf">\n <cybox:Title>FileHash-SHA256 - 1ac624aaf6bbc2e3b966182888411f92797bd30b6fcce9f8a97648e64f13506f</cybox:Title>\n <cybox:Object id="example:File-19939a4a-2eec-44d4-b223-8d5fbf2a3283">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>1ac624aaf6bbc2e3b966182888411f92797bd30b6fcce9f8a97648e64f13506f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7f73a383-1403-40f9-aed7-a0a88925059e" timestamp="2017-02-06T14:52:20.095000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5668470c92408f4b9f3a659005c2acca9da8df750cc491bffc88ef640474fa4a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-c370d2ed-b845-43aa-8b22-b6ff05f50eec">\n <cybox:Title>FileHash-SHA256 - 5668470c92408f4b9f3a659005c2acca9da8df750cc491bffc88ef640474fa4a</cybox:Title>\n <cybox:Object id="example:File-df9a884e-6675-455f-8f56-56ac0fabec70">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5668470c92408f4b9f3a659005c2acca9da8df750cc491bffc88ef640474fa4a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-5b025053-78f5-4047-8ef1-0227c00d1cb9" timestamp="2017-02-06T14:52:20.096000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d735c19fc9223e1bc4e625c1f47801d758426fbae89e5086bc56a8d6b1df2011 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e4ef64b8-0bfc-48d9-b5d8-5605aa33b8f7">\n <cybox:Title>FileHash-SHA256 - d735c19fc9223e1bc4e625c1f47801d758426fbae89e5086bc56a8d6b1df2011</cybox:Title>\n <cybox:Object id="example:File-9872a6d7-0f97-4511-8505-78815f10e02c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d735c19fc9223e1bc4e625c1f47801d758426fbae89e5086bc56a8d6b1df2011</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1c21b5f6-9e7b-479c-b052-08c4b11fe70c" timestamp="2017-02-06T14:52:20.096000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>dbdc72a7cfbf03599b95d8f1c47e157da34ea5d2f951cf5f49715e8caab58cd4 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-61178e3c-6263-4b9c-b64c-93e488afa136">\n <cybox:Title>FileHash-SHA256 - dbdc72a7cfbf03599b95d8f1c47e157da34ea5d2f951cf5f49715e8caab58cd4</cybox:Title>\n <cybox:Object id="example:File-567aa41b-7a58-4eb9-8102-a1e90861d372">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>dbdc72a7cfbf03599b95d8f1c47e157da34ea5d2f951cf5f49715e8caab58cd4</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7970e71a-7bda-40f1-b52c-d29c8ee0e8ed" timestamp="2017-02-06T14:52:20.097000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>8ac7138215b2500d0737b483b9194419c0e0248014147e84f43b1e2b409184cf from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-7f655f4b-799f-4c5b-b2ee-c4307b64cb18">\n <cybox:Title>FileHash-SHA256 - 8ac7138215b2500d0737b483b9194419c0e0248014147e84f43b1e2b409184cf</cybox:Title>\n <cybox:Object id="example:File-d46fee59-b4cf-4d34-9d5c-3179faa5110b">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>8ac7138215b2500d0737b483b9194419c0e0248014147e84f43b1e2b409184cf</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-a5bf0f46-bbf9-4762-8c72-b5ab0d9d9cd8" timestamp="2017-02-06T14:52:20.097000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3243292e46a198bd83e0dce58258312852c99217187e6d5399066189feb2677b from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-d43dac1f-ed09-4b15-80a3-a68141a3c0d0">\n <cybox:Title>FileHash-SHA256 - 3243292e46a198bd83e0dce58258312852c99217187e6d5399066189feb2677b</cybox:Title>\n <cybox:Object id="example:File-e5596eae-14da-4774-a381-8d1c907c7c45">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3243292e46a198bd83e0dce58258312852c99217187e6d5399066189feb2677b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-6e84ba06-b947-4bf7-8892-f11337d4c4c8" timestamp="2017-02-06T14:52:20.097000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>5e7d68c53212f6d467533f105d4a067682e28da47304a53c17b056d2b4404f0a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6e215cea-3650-4d60-826d-1f089b5e61bc">\n <cybox:Title>FileHash-SHA256 - 5e7d68c53212f6d467533f105d4a067682e28da47304a53c17b056d2b4404f0a</cybox:Title>\n <cybox:Object id="example:File-8b03f04b-e452-4070-9dfe-0609666f3e45">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>5e7d68c53212f6d467533f105d4a067682e28da47304a53c17b056d2b4404f0a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-013f0580-91b4-4448-81cb-f87b20b155b3" timestamp="2017-02-06T14:52:20.098000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>2c2ae3f482d9db2541de0d855b5b12cd18028a94887f0c28acf1e2d6a4f3d4ac from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-17384c1e-669d-42b4-b327-9a422099e62b">\n <cybox:Title>FileHash-SHA256 - 2c2ae3f482d9db2541de0d855b5b12cd18028a94887f0c28acf1e2d6a4f3d4ac</cybox:Title>\n <cybox:Object id="example:File-75a365ab-eeaf-4d85-8722-4cc3c2137df5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>2c2ae3f482d9db2541de0d855b5b12cd18028a94887f0c28acf1e2d6a4f3d4ac</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-decca52d-7978-45c8-98b5-df75979916f6" timestamp="2017-02-06T14:52:20.098000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f5413c785770400215c3191ea887517b4380ec81be4e5bdc5aea12bf82f9105d from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-8730aee0-6451-4953-b2ea-f848645dbd2a">\n <cybox:Title>FileHash-SHA256 - f5413c785770400215c3191ea887517b4380ec81be4e5bdc5aea12bf82f9105d</cybox:Title>\n <cybox:Object id="example:File-4e9d8ac1-0d42-46bb-9f39-eb84644ad0da">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f5413c785770400215c3191ea887517b4380ec81be4e5bdc5aea12bf82f9105d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-17fe7bf6-96bc-4999-af38-9b61f3e44112" timestamp="2017-02-06T14:52:20.098000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>aacf24e288388431b30f8da765b4696975adc9cc0303d285abb05077eda21da2 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6f47c63d-a93a-4625-8643-0be0bb075f83">\n <cybox:Title>FileHash-SHA256 - aacf24e288388431b30f8da765b4696975adc9cc0303d285abb05077eda21da2</cybox:Title>\n <cybox:Object id="example:File-1a520b87-25f1-4bcd-8544-148b946ef763">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>aacf24e288388431b30f8da765b4696975adc9cc0303d285abb05077eda21da2</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-79884c0e-e607-4d30-9c59-652fdb19fcb8" timestamp="2017-02-06T14:52:20.099000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>118d0bd8ec35b925167c67217d2fe06ac021ce253f72d17f1093423b8f9b4a2b from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-f765e2a0-df95-47ec-9d9c-4756329a2483">\n <cybox:Title>FileHash-SHA256 - 118d0bd8ec35b925167c67217d2fe06ac021ce253f72d17f1093423b8f9b4a2b</cybox:Title>\n <cybox:Object id="example:File-02202b5b-daae-4c04-83cd-7a4744873b0a">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>118d0bd8ec35b925167c67217d2fe06ac021ce253f72d17f1093423b8f9b4a2b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-78e19f48-3971-4565-b700-c7cc9ac7bd60" timestamp="2017-02-06T14:52:20.099000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>0c4aa50c95c990d5c5c55345626155b87625986881a2c066ce032af6871c426a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-fa9f0e71-d383-4cb1-98c2-c5812f44526a">\n <cybox:Title>FileHash-SHA256 - 0c4aa50c95c990d5c5c55345626155b87625986881a2c066ce032af6871c426a</cybox:Title>\n <cybox:Object id="example:File-7506252c-8b77-43a8-a863-80e40b7ed6c0">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>0c4aa50c95c990d5c5c55345626155b87625986881a2c066ce032af6871c426a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4e3d03b6-a62a-4f7a-a07d-af1e9caf936e" timestamp="2017-02-06T14:52:20.099000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>15abd32342e87455b73f1e2ecf9ab10331600eb4eae54e1dfc25ba2f9d8c2e8a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-1b70df5b-9cd4-4d0b-b5ad-ba9956b4d9e6">\n <cybox:Title>FileHash-SHA256 - 15abd32342e87455b73f1e2ecf9ab10331600eb4eae54e1dfc25ba2f9d8c2e8a</cybox:Title>\n <cybox:Object id="example:File-8e989df6-67ec-4877-bfb6-b54f9f8c9747">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>15abd32342e87455b73f1e2ecf9ab10331600eb4eae54e1dfc25ba2f9d8c2e8a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-18ec17d7-07e1-4429-a3bf-9cdc28328252" timestamp="2017-02-06T14:52:20.100000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>9b8d8780454708b950459d43161097ac72f62ff349bc8f379b5b2216bc9ae935 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-0e0354fb-1343-4fad-ad60-a9570c1250c8">\n <cybox:Title>FileHash-SHA256 - 9b8d8780454708b950459d43161097ac72f62ff349bc8f379b5b2216bc9ae935</cybox:Title>\n <cybox:Object id="example:File-8da69ab0-086e-4cf0-ace3-0b555521d305">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>9b8d8780454708b950459d43161097ac72f62ff349bc8f379b5b2216bc9ae935</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-721690e5-6dc5-41e3-8154-b035576b8728" timestamp="2017-02-06T14:52:20.100000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>55a7ca1e5ed2d74c7eb6ab6a985c1d369157a91275f575967aefb7ddb3388e0c from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-40ce11b4-f075-4691-b3c2-ccc3427aa43d">\n <cybox:Title>FileHash-SHA256 - 55a7ca1e5ed2d74c7eb6ab6a985c1d369157a91275f575967aefb7ddb3388e0c</cybox:Title>\n <cybox:Object id="example:File-5cdd6e99-4041-4c6a-a841-6e1fee9838ee">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>55a7ca1e5ed2d74c7eb6ab6a985c1d369157a91275f575967aefb7ddb3388e0c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-bc88b8f5-64ae-4480-8d63-30dc68984129" timestamp="2017-02-06T14:52:20.100000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>65986f6f919e9152176a10ae3964fac130ae6195e189453d17306a225022774d from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-8cf8ea43-41d8-4320-a9f7-b55ea565475c">\n <cybox:Title>FileHash-SHA256 - 65986f6f919e9152176a10ae3964fac130ae6195e189453d17306a225022774d</cybox:Title>\n <cybox:Object id="example:File-dcda6ce2-99f7-42e6-b5f0-468d9ace3316">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>65986f6f919e9152176a10ae3964fac130ae6195e189453d17306a225022774d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-10caabdd-f5a8-4266-bdd0-52db8742d8f2" timestamp="2017-02-06T14:52:20.101000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>704b19e0460a0fa7d952ba6feb5eadb9054895d1d753df72faf6f470446a0519 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-7de7f909-b72c-4eba-bcf4-287ba987f076">\n <cybox:Title>FileHash-SHA256 - 704b19e0460a0fa7d952ba6feb5eadb9054895d1d753df72faf6f470446a0519</cybox:Title>\n <cybox:Object id="example:File-489b85b7-7790-4e18-8258-f5876318d2e3">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>704b19e0460a0fa7d952ba6feb5eadb9054895d1d753df72faf6f470446a0519</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-a315e8b1-c62c-4912-851d-5db39af48167" timestamp="2017-02-06T14:52:20.101000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>0d1aa670df8ae1379d6997c9dc8b40c893ee395c3d45b84c2ad1732e86973143 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-31532db1-7d1d-49be-9e17-2cf9daf2df05">\n <cybox:Title>FileHash-SHA256 - 0d1aa670df8ae1379d6997c9dc8b40c893ee395c3d45b84c2ad1732e86973143</cybox:Title>\n <cybox:Object id="example:File-f93cafed-9267-40bf-841d-f5043153973d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>0d1aa670df8ae1379d6997c9dc8b40c893ee395c3d45b84c2ad1732e86973143</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-69ff7fe5-5c0a-4cfa-b6b5-f0153ae9ed78" timestamp="2017-02-06T14:52:20.101000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>8814fec28ccac77456be73305b32ad5a266a4929203b2acf431759c90fe579bd from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-8cc0ea72-d33d-4eba-90aa-ea001ab01cff">\n <cybox:Title>FileHash-SHA256 - 8814fec28ccac77456be73305b32ad5a266a4929203b2acf431759c90fe579bd</cybox:Title>\n <cybox:Object id="example:File-106fc28b-6d48-457a-b9f6-f60201921328">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>8814fec28ccac77456be73305b32ad5a266a4929203b2acf431759c90fe579bd</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-3ef5c429-221d-497c-b69b-950abfb70e1a" timestamp="2017-02-06T14:52:20.102000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a35e2b21f7f770debcffc79eb4834ec8881465df06cee41af705b6ea5d899978 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-33312985-f13a-4348-940c-1cffe4865805">\n <cybox:Title>FileHash-SHA256 - a35e2b21f7f770debcffc79eb4834ec8881465df06cee41af705b6ea5d899978</cybox:Title>\n <cybox:Object id="example:File-554b7104-6168-4387-8114-e1666d14e821">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a35e2b21f7f770debcffc79eb4834ec8881465df06cee41af705b6ea5d899978</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-81b6f38d-062b-445f-97cd-2c9ad801a462" timestamp="2017-02-06T14:52:20.102000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>44b99603dde822b6b86577e64622e9a2f5b76b6d8bd23a3fe1b4d91b73d0230a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-2e75f6f1-9a28-4002-96c3-d8305de582c4">\n <cybox:Title>FileHash-SHA256 - 44b99603dde822b6b86577e64622e9a2f5b76b6d8bd23a3fe1b4d91b73d0230a</cybox:Title>\n <cybox:Object id="example:File-2ee44a29-bb01-4165-a1f7-2dea6a8f8f8b">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>44b99603dde822b6b86577e64622e9a2f5b76b6d8bd23a3fe1b4d91b73d0230a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8c1b36a4-98e8-4c1a-ac62-1538626cae83" timestamp="2017-02-06T14:52:20.102000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e874deabb7953c2b9b5e67fc08297019bb0171c2fbdbe136b822cee4d43b72e5 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-d8f08bf4-5e41-4b48-9ea7-74678613fa8f">\n <cybox:Title>FileHash-SHA256 - e874deabb7953c2b9b5e67fc08297019bb0171c2fbdbe136b822cee4d43b72e5</cybox:Title>\n <cybox:Object id="example:File-1665d138-043a-40da-9439-46790a16bfa4">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e874deabb7953c2b9b5e67fc08297019bb0171c2fbdbe136b822cee4d43b72e5</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-aa0139d9-18f7-4876-9afc-6035fbb9733b" timestamp="2017-02-06T14:52:20.103000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>fea74bf9eed7363f97a09756b4652409cfcd7bbe023383805aec5da7de6310bd from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-128c1e8d-b89c-4148-9c01-7aeeef0789d4">\n <cybox:Title>FileHash-SHA256 - fea74bf9eed7363f97a09756b4652409cfcd7bbe023383805aec5da7de6310bd</cybox:Title>\n <cybox:Object id="example:File-1f44fc89-aab9-42c5-9392-bc86d6f6f9c5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>fea74bf9eed7363f97a09756b4652409cfcd7bbe023383805aec5da7de6310bd</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-582dfbed-828a-48ee-8aca-369dc61bd651" timestamp="2017-02-06T14:52:20.103000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>7c578dcdcefe78fb1dd51ac611f6450d9eb5be6c5f1e3363f460321a46be4a39 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-44d02e33-8945-474f-86c2-cdbc6490f04d">\n <cybox:Title>FileHash-SHA256 - 7c578dcdcefe78fb1dd51ac611f6450d9eb5be6c5f1e3363f460321a46be4a39</cybox:Title>\n <cybox:Object id="example:File-91f6669e-8ef9-4d1f-a452-7473b472ad05">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>7c578dcdcefe78fb1dd51ac611f6450d9eb5be6c5f1e3363f460321a46be4a39</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8a9bdbc1-41f4-4600-a540-101a931d72c8" timestamp="2017-02-06T14:52:20.103000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>75336b05443b94474434982fc53778d5e6e9e7fabaddae596af42a15fceb04e9 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-62d057ee-ddaa-4f5b-9476-c92b0b6d7963">\n <cybox:Title>FileHash-SHA256 - 75336b05443b94474434982fc53778d5e6e9e7fabaddae596af42a15fceb04e9</cybox:Title>\n <cybox:Object id="example:File-379740a1-bf86-4e1a-bbdb-1e0fd541c57c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>75336b05443b94474434982fc53778d5e6e9e7fabaddae596af42a15fceb04e9</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2306bf9e-5004-4872-858e-ba1891e2c96e" timestamp="2017-02-06T14:52:20.104000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>fefa0781e88fa215419b2a1294c8b952b192f8360aeab2f97bbd9cea15fc7338 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-5a998d98-e58a-4ab2-be2e-6e333743063e">\n <cybox:Title>FileHash-SHA256 - fefa0781e88fa215419b2a1294c8b952b192f8360aeab2f97bbd9cea15fc7338</cybox:Title>\n <cybox:Object id="example:File-c916535b-6566-45d3-af26-996061a1b516">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>fefa0781e88fa215419b2a1294c8b952b192f8360aeab2f97bbd9cea15fc7338</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-dcc42c50-5cdd-4cd3-8e80-dad79dc11a1e" timestamp="2017-02-06T14:52:20.104000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>759ae70b035c3bbb6699520db3a55f3947e6ba1b5ce639ec036e3096ee10b26d from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-1cdd7cf3-7ee4-47f0-ba5a-3b41fbcd55a3">\n <cybox:Title>FileHash-SHA256 - 759ae70b035c3bbb6699520db3a55f3947e6ba1b5ce639ec036e3096ee10b26d</cybox:Title>\n <cybox:Object id="example:File-0ff5ad63-089e-4779-80a4-2101c576b576">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>759ae70b035c3bbb6699520db3a55f3947e6ba1b5ce639ec036e3096ee10b26d</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-65fb6256-454e-4cf2-84c4-995cec256961" timestamp="2017-02-06T14:52:20.104000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>21f09c93325c03940c24d8bd6f33a1a4876bfd5feb8c8bac05b0a359255c0b42 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-d5b5a11e-166e-4faa-93b7-e57588353773">\n <cybox:Title>FileHash-SHA256 - 21f09c93325c03940c24d8bd6f33a1a4876bfd5feb8c8bac05b0a359255c0b42</cybox:Title>\n <cybox:Object id="example:File-34c00b82-b1f2-4201-9233-59542db3f496">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>21f09c93325c03940c24d8bd6f33a1a4876bfd5feb8c8bac05b0a359255c0b42</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b5ffdd41-fae7-4ce1-aed5-e653d75b4e90" timestamp="2017-02-06T14:52:20.105000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f772463bafef5f45f675658eee43b6f56911a4f449afb0cc68ac068002a2f875 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-1e2901d3-2dce-4ea3-8aa9-f07faa5ae4db">\n <cybox:Title>FileHash-SHA256 - f772463bafef5f45f675658eee43b6f56911a4f449afb0cc68ac068002a2f875</cybox:Title>\n <cybox:Object id="example:File-96432345-828c-49fa-83df-284b3fc9e7be">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f772463bafef5f45f675658eee43b6f56911a4f449afb0cc68ac068002a2f875</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-70dd74c3-ed9d-42b9-8570-14b07b3cc761" timestamp="2017-02-06T14:52:20.105000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a66a27d801891e39d3819355366399fabbf2f05327ddb7c7b5d304fabeac7118 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-3d3a115b-7a83-4d0b-8935-aee46a4485d9">\n <cybox:Title>FileHash-SHA256 - a66a27d801891e39d3819355366399fabbf2f05327ddb7c7b5d304fabeac7118</cybox:Title>\n <cybox:Object id="example:File-7ed30962-e05e-4bba-ab97-429cbb25ae20">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a66a27d801891e39d3819355366399fabbf2f05327ddb7c7b5d304fabeac7118</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b91064eb-20d1-401d-b21f-f1bdbf075f80" timestamp="2017-02-06T14:52:20.105000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d30dbf17078a11c32dd23acea42335860e739c9f18bf0ed611132eef4d5cfcb6 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-304f7f2e-f633-49ff-9652-478e3a5a098f">\n <cybox:Title>FileHash-SHA256 - d30dbf17078a11c32dd23acea42335860e739c9f18bf0ed611132eef4d5cfcb6</cybox:Title>\n <cybox:Object id="example:File-aaeccf75-bb8e-464b-bbca-28c193a9aa64">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d30dbf17078a11c32dd23acea42335860e739c9f18bf0ed611132eef4d5cfcb6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-ab3e6533-abed-47f3-90f9-838fa242d282" timestamp="2017-02-06T14:52:20.106000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>86bd78b4c8c94c046d927fb29ae0b944bf2a8513a378b51b3977b77e59a52806 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-34e1ae80-87fd-495b-b69d-3091568496cf">\n <cybox:Title>FileHash-SHA256 - 86bd78b4c8c94c046d927fb29ae0b944bf2a8513a378b51b3977b77e59a52806</cybox:Title>\n <cybox:Object id="example:File-61c9515d-7e07-40ae-975f-bc9394fef5c0">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>86bd78b4c8c94c046d927fb29ae0b944bf2a8513a378b51b3977b77e59a52806</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-58ffe78a-70a5-45be-99dc-73a72114e834" timestamp="2017-02-06T14:52:20.106000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>b8a3096a396c28462c0d168d97e28573e0e6d272bbc1dd2432e7effe098bd979 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-bb1e97b5-4658-491f-87ff-74a636f68af7">\n <cybox:Title>FileHash-SHA256 - b8a3096a396c28462c0d168d97e28573e0e6d272bbc1dd2432e7effe098bd979</cybox:Title>\n <cybox:Object id="example:File-9a9f43bf-ea72-4584-8ce6-5d5dd14c498a">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>b8a3096a396c28462c0d168d97e28573e0e6d272bbc1dd2432e7effe098bd979</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0cc770a3-8d0e-43e9-9dc3-91afddc7a81f" timestamp="2017-02-06T14:52:20.106000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3619b12b11cda6e87644d3316355d99ee5fa5407aa8a8f107aa1058e33b19bf6 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-81405a72-0605-40d5-9348-17a23a40f204">\n <cybox:Title>FileHash-SHA256 - 3619b12b11cda6e87644d3316355d99ee5fa5407aa8a8f107aa1058e33b19bf6</cybox:Title>\n <cybox:Object id="example:File-1d0d184c-e4e9-47b5-9c20-7a2e7db7b140">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3619b12b11cda6e87644d3316355d99ee5fa5407aa8a8f107aa1058e33b19bf6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-a0ea0767-622e-48c6-9c1b-94a9da4dc28e" timestamp="2017-02-06T14:52:20.107000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>b6adae77a975058720e525a7f6d2451a01fedd3c6cab1515570d8490a8eb4f67 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-2e8b5038-a724-4ad0-bb74-48373770ada9">\n <cybox:Title>FileHash-SHA256 - b6adae77a975058720e525a7f6d2451a01fedd3c6cab1515570d8490a8eb4f67</cybox:Title>\n <cybox:Object id="example:File-8e1e6738-1b65-4193-a1f2-00cb24c84c49">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>b6adae77a975058720e525a7f6d2451a01fedd3c6cab1515570d8490a8eb4f67</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-f18f3bd4-50ab-4988-a9ff-5bc6eb97c535" timestamp="2017-02-06T14:52:20.107000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>0f8378603e269db16eb7eaca933b587c7de3e914c1d9afaaae688c410befb895 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-f191bb8f-2546-4c93-bfaa-f8faea19e558">\n <cybox:Title>FileHash-SHA256 - 0f8378603e269db16eb7eaca933b587c7de3e914c1d9afaaae688c410befb895</cybox:Title>\n <cybox:Object id="example:File-76c7fcdb-ba35-40b2-bbcc-4b6773748d86">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>0f8378603e269db16eb7eaca933b587c7de3e914c1d9afaaae688c410befb895</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-73eeac23-55b9-4266-9814-32a0a39217a9" timestamp="2017-02-06T14:52:20.107000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>bc7c3f687d0589a4db53475bc65056a628b52aa27f84c1d76b9fe686d495df27 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-71a12de7-9001-46bd-b386-0001b2e88e42">\n <cybox:Title>FileHash-SHA256 - bc7c3f687d0589a4db53475bc65056a628b52aa27f84c1d76b9fe686d495df27</cybox:Title>\n <cybox:Object id="example:File-7758188e-e6c1-4ee5-9192-0f55fe6153ff">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>bc7c3f687d0589a4db53475bc65056a628b52aa27f84c1d76b9fe686d495df27</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-76b5af7b-ef02-460b-a9e2-467285fbb949" timestamp="2017-02-06T14:52:20.108000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>02bd710d3055076f86116d28427322c9cb623291c6c5a66c1932181fc6558586 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e9aac825-228b-4c88-8455-660e3b89b201">\n <cybox:Title>FileHash-SHA256 - 02bd710d3055076f86116d28427322c9cb623291c6c5a66c1932181fc6558586</cybox:Title>\n <cybox:Object id="example:File-c1b0e667-46ea-44a5-b8d8-c48ce7d0604c">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>02bd710d3055076f86116d28427322c9cb623291c6c5a66c1932181fc6558586</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-71b22538-e3dc-40c9-bb4f-3ae43cd761ae" timestamp="2017-02-06T14:52:20.108000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>53e82d01dd2502416ad49329e1224a7c4519182186e60f690ecd0cf266f5af5e from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-c78a8da8-45d2-46a3-9417-c13aac8c8477">\n <cybox:Title>FileHash-SHA256 - 53e82d01dd2502416ad49329e1224a7c4519182186e60f690ecd0cf266f5af5e</cybox:Title>\n <cybox:Object id="example:File-fd277f5b-713b-49f9-b021-1214701ba1fb">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>53e82d01dd2502416ad49329e1224a7c4519182186e60f690ecd0cf266f5af5e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d5608a26-54a9-4416-a783-84b06b81f676" timestamp="2017-02-06T14:52:20.109000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>b66e5af52fd4d802f64788692b3eafe6b5ff61cea09c06a237a96b6cdb90b41a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-85d34675-6284-4aa6-bd91-c96817ebcda3">\n <cybox:Title>FileHash-SHA256 - b66e5af52fd4d802f64788692b3eafe6b5ff61cea09c06a237a96b6cdb90b41a</cybox:Title>\n <cybox:Object id="example:File-89fb4ca1-d9b6-4886-8804-c54d8d3a330f">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>b66e5af52fd4d802f64788692b3eafe6b5ff61cea09c06a237a96b6cdb90b41a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d845fde3-9339-47ed-bf02-c14c665ee488" timestamp="2017-02-06T14:52:20.109000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>723108103ccb4c166ad9cdff350de6a898489f1dac7eeab23c52cd48b9256a42 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6bec78a8-3d3c-479f-a616-7718fdb121ad">\n <cybox:Title>FileHash-SHA256 - 723108103ccb4c166ad9cdff350de6a898489f1dac7eeab23c52cd48b9256a42</cybox:Title>\n <cybox:Object id="example:File-9c8a37b1-2da5-42bb-8f3d-21deac988b60">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>723108103ccb4c166ad9cdff350de6a898489f1dac7eeab23c52cd48b9256a42</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-adffd697-d2ab-493c-9898-31dd9d06887c" timestamp="2017-02-06T14:52:20.109000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6f6414c8f8a800c769da1f6994cad25757a2928375803a498171db3395183b98 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-79892a9e-8dc2-42e3-b08d-fb9dd6941af2">\n <cybox:Title>FileHash-SHA256 - 6f6414c8f8a800c769da1f6994cad25757a2928375803a498171db3395183b98</cybox:Title>\n <cybox:Object id="example:File-012686b7-8fe5-4493-9238-d5c1bbbcf2fd">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6f6414c8f8a800c769da1f6994cad25757a2928375803a498171db3395183b98</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-630eedaa-8c83-427d-bc07-6f3bc3e7d637" timestamp="2017-02-06T14:52:20.110000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>575b84c2d3bceebfabb2deb289a230f52aca2c504aa854251c1e9057f3f0cf5a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-76146467-b1a0-44e2-ac5b-ca277f2536d2">\n <cybox:Title>FileHash-SHA256 - 575b84c2d3bceebfabb2deb289a230f52aca2c504aa854251c1e9057f3f0cf5a</cybox:Title>\n <cybox:Object id="example:File-d7d10f98-3d92-4c29-b84f-6ae9d2dd11da">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>575b84c2d3bceebfabb2deb289a230f52aca2c504aa854251c1e9057f3f0cf5a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-97b9a116-b78e-4ba5-85a7-7182d1509cef" timestamp="2017-02-06T14:52:20.110000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>bb24105295588d14c4509ec7374fbe6f7a4821cf4e9d9282754dd666ad7a7ea1 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-7a7eb755-38f9-46a8-b303-d0e516292fe0">\n <cybox:Title>FileHash-SHA256 - bb24105295588d14c4509ec7374fbe6f7a4821cf4e9d9282754dd666ad7a7ea1</cybox:Title>\n <cybox:Object id="example:File-800fba1e-9796-42cc-b38e-897a061134f1">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>bb24105295588d14c4509ec7374fbe6f7a4821cf4e9d9282754dd666ad7a7ea1</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-cf98719a-02e6-40ba-a7a0-b53bce4b8ccd" timestamp="2017-02-06T14:52:20.111000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6050d4c1efcf8242382293842313f3a93309f1e449197d98c60cec29090c6bff from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6e0700cb-7c54-4ef3-a3e0-8f4286c4cf28">\n <cybox:Title>FileHash-SHA256 - 6050d4c1efcf8242382293842313f3a93309f1e449197d98c60cec29090c6bff</cybox:Title>\n <cybox:Object id="example:File-cdfe0772-0908-4970-8a00-4ed2130852bf">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6050d4c1efcf8242382293842313f3a93309f1e449197d98c60cec29090c6bff</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-dbcc5afb-89ba-4b20-855e-dc62a6ef06fb" timestamp="2017-02-06T14:52:20.111000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>68ec3588735341566e9736b897aac06affb4a4808b05ceffb72384e77ea04b2c from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-b18005ff-5d1d-4a68-bf63-78ca97db69e3">\n <cybox:Title>FileHash-SHA256 - 68ec3588735341566e9736b897aac06affb4a4808b05ceffb72384e77ea04b2c</cybox:Title>\n <cybox:Object id="example:File-66ad8d83-bd09-4793-be56-e14094393fa5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>68ec3588735341566e9736b897aac06affb4a4808b05ceffb72384e77ea04b2c</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-03b080b7-bd13-4dbc-8741-aeb5b8f02718" timestamp="2017-02-06T14:52:20.111000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>39b991838653739eef482af6336fcf03922d7e9d88d17946b688a513dd2bfc34 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-b336a15b-40f4-4676-99de-4fe73c90de0a">\n <cybox:Title>FileHash-SHA256 - 39b991838653739eef482af6336fcf03922d7e9d88d17946b688a513dd2bfc34</cybox:Title>\n <cybox:Object id="example:File-f72a395a-a08a-437f-93ea-38dc5d3b6ca8">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>39b991838653739eef482af6336fcf03922d7e9d88d17946b688a513dd2bfc34</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d9c4fa9e-bab6-421d-9cf7-4f015879cb17" timestamp="2017-02-06T14:52:20.112000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6a700aea23f7cb6907e464981a136b0fbfb5a48b910af2f9a44baf98d25f1722 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-8bc7cbcb-cc7e-4392-a2b2-33bf003666b0">\n <cybox:Title>FileHash-SHA256 - 6a700aea23f7cb6907e464981a136b0fbfb5a48b910af2f9a44baf98d25f1722</cybox:Title>\n <cybox:Object id="example:File-1c99a822-0ce5-49e0-b8c7-187c49160449">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6a700aea23f7cb6907e464981a136b0fbfb5a48b910af2f9a44baf98d25f1722</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b390eb93-20c5-46da-b1af-d76744189cbc" timestamp="2017-02-06T14:52:20.112000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>17942d9d76dafb64aa0d3ab53c9ee56e5d8bd4477440f06780b70dd4c02af8b8 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-5693d7c2-0962-4feb-9e0c-e88b5d438089">\n <cybox:Title>FileHash-SHA256 - 17942d9d76dafb64aa0d3ab53c9ee56e5d8bd4477440f06780b70dd4c02af8b8</cybox:Title>\n <cybox:Object id="example:File-42de31fa-60e4-45b3-9143-8830842ed809">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>17942d9d76dafb64aa0d3ab53c9ee56e5d8bd4477440f06780b70dd4c02af8b8</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-3922be5f-36d7-482b-bb1b-ba03343af05a" timestamp="2017-02-06T14:52:20.113000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d3066fa4a7a1ef38c753796479768b765c6903ef50c35352e29e79dcd49e4348 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-f75606a1-4d4e-4ee7-9a07-7bcca41c285b">\n <cybox:Title>FileHash-SHA256 - d3066fa4a7a1ef38c753796479768b765c6903ef50c35352e29e79dcd49e4348</cybox:Title>\n <cybox:Object id="example:File-5d8ee0aa-b25b-4202-b424-8400fd306b34">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d3066fa4a7a1ef38c753796479768b765c6903ef50c35352e29e79dcd49e4348</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-83385085-84d5-4b14-a3f3-5258a629108a" timestamp="2017-02-06T14:52:20.113000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>29049e2c7671a7c4fc953cb76e539150cc7c80e1b83c19d0894dfa446ce5276e from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-44db3c66-cbcc-4d1a-a8fa-19eefba03483">\n <cybox:Title>FileHash-SHA256 - 29049e2c7671a7c4fc953cb76e539150cc7c80e1b83c19d0894dfa446ce5276e</cybox:Title>\n <cybox:Object id="example:File-45696384-27cb-4489-a468-804f46c2fa26">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>29049e2c7671a7c4fc953cb76e539150cc7c80e1b83c19d0894dfa446ce5276e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-444a9de7-710e-47d0-904a-06a0e06b2225" timestamp="2017-02-06T14:52:20.113000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a40627acae6917787e92f9efa85739136c1670dcc5fe66695e105ddd72d7b80a from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-a4cea449-4026-43f8-88a4-e6f84cafc95d">\n <cybox:Title>FileHash-SHA256 - a40627acae6917787e92f9efa85739136c1670dcc5fe66695e105ddd72d7b80a</cybox:Title>\n <cybox:Object id="example:File-f2fd6f6d-3b4a-42c0-9fe2-52963bdc90ad">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a40627acae6917787e92f9efa85739136c1670dcc5fe66695e105ddd72d7b80a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-eb97653f-b887-4ca3-9398-5d52761caf85" timestamp="2017-02-06T14:52:20.114000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>0e41c3611da6e3a2b0dd0d43b9ce0b3f3405472efa5760767719cc82692afb7b from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-972bea25-f769-41b7-b30d-5abb49639a24">\n <cybox:Title>FileHash-SHA256 - 0e41c3611da6e3a2b0dd0d43b9ce0b3f3405472efa5760767719cc82692afb7b</cybox:Title>\n <cybox:Object id="example:File-00e09c1f-def8-4ad1-a6e0-c58dc2b7ee0f">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>0e41c3611da6e3a2b0dd0d43b9ce0b3f3405472efa5760767719cc82692afb7b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8fc4fe09-2aec-444e-9acc-07f6c26de78e" timestamp="2017-02-06T14:52:20.114000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>9a8d73cb7069832b9523c55224ae4153ea529ecc50392fef59da5b5d1db1c740 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-1346d3a0-9c03-4642-bbfe-73f9fd2cd12e">\n <cybox:Title>FileHash-SHA256 - 9a8d73cb7069832b9523c55224ae4153ea529ecc50392fef59da5b5d1db1c740</cybox:Title>\n <cybox:Object id="example:File-8fa21df6-aea6-4173-a948-ed82355c5863">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>9a8d73cb7069832b9523c55224ae4153ea529ecc50392fef59da5b5d1db1c740</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d4e7974b-cf75-4d84-afb3-6d5a805d47b1" timestamp="2017-02-06T14:52:20.114000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f1b682808f1819f0e3d030fce1fd6b1ca95ad052b069e028cd9ed4afd81cd4d6 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-24a2d797-6d12-498f-b26e-1adff7574a60">\n <cybox:Title>FileHash-SHA256 - f1b682808f1819f0e3d030fce1fd6b1ca95ad052b069e028cd9ed4afd81cd4d6</cybox:Title>\n <cybox:Object id="example:File-46ae93e2-0c6f-47e4-b139-0b9c5862588d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f1b682808f1819f0e3d030fce1fd6b1ca95ad052b069e028cd9ed4afd81cd4d6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-f2fade7e-ce78-4c68-89e6-ee11ae51e28e" timestamp="2017-02-06T14:52:20.115000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e5e4895d2195e14a3a105f3ed73fd49493e9dbdd7dfc6f6616023473fa8f86c6 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-a96ab543-ff05-4845-9155-b7d34a135a36">\n <cybox:Title>FileHash-SHA256 - e5e4895d2195e14a3a105f3ed73fd49493e9dbdd7dfc6f6616023473fa8f86c6</cybox:Title>\n <cybox:Object id="example:File-bc0d41a8-459e-41de-8192-9360e31875c9">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e5e4895d2195e14a3a105f3ed73fd49493e9dbdd7dfc6f6616023473fa8f86c6</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7f9d0582-45e0-42ea-9e71-93d3d6cb2167" timestamp="2017-02-06T14:52:20.115000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d2d08bb2707b635617e5bab0fcd033b6f68a753dd2b3897adca1c627758e686b from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-4e9a8cc4-5a87-4b39-92ee-6812c552a374">\n <cybox:Title>FileHash-SHA256 - d2d08bb2707b635617e5bab0fcd033b6f68a753dd2b3897adca1c627758e686b</cybox:Title>\n <cybox:Object id="example:File-53ce3510-41b6-410a-bca1-9dfc701745cb">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d2d08bb2707b635617e5bab0fcd033b6f68a753dd2b3897adca1c627758e686b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-28860344-7ebd-4ad3-ae31-f582746862ab" timestamp="2017-02-06T14:52:20.115000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>1acffe68fcdc301b8ab7640eda75ff82788b2f93d869e421e28bacbba93b76d1 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-5aea6ec8-d7c3-4da1-a2b9-bae4d3151243">\n <cybox:Title>FileHash-SHA256 - 1acffe68fcdc301b8ab7640eda75ff82788b2f93d869e421e28bacbba93b76d1</cybox:Title>\n <cybox:Object id="example:File-5bedd3e0-d922-4879-a587-d354c0afa81f">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>1acffe68fcdc301b8ab7640eda75ff82788b2f93d869e421e28bacbba93b76d1</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-e465d896-629d-4313-b0e2-d22171c6a66d" timestamp="2017-02-06T14:52:20.116000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>d3c710eaaf849598fa486823da42bdce03ea3c9421c3936e3330e98b34e4ef47 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-7197e6a8-ba26-4de7-9dc7-1c47716bb483">\n <cybox:Title>FileHash-SHA256 - d3c710eaaf849598fa486823da42bdce03ea3c9421c3936e3330e98b34e4ef47</cybox:Title>\n <cybox:Object id="example:File-283969f6-41bd-4b8e-882f-dddf088ee075">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>d3c710eaaf849598fa486823da42bdce03ea3c9421c3936e3330e98b34e4ef47</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-ef46666f-26a2-4aae-a493-eb2cb4262ea6" timestamp="2017-02-06T14:52:20.116000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>99a7cb43fb2898810956b6137d803c8f97651e23f9f13e91887f188749bd5e8f from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-9659f258-d4ca-4864-a2d8-fa5f99d56def">\n <cybox:Title>FileHash-SHA256 - 99a7cb43fb2898810956b6137d803c8f97651e23f9f13e91887f188749bd5e8f</cybox:Title>\n <cybox:Object id="example:File-4140ea25-3bb8-425d-a935-59fb06bcbfc0">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>99a7cb43fb2898810956b6137d803c8f97651e23f9f13e91887f188749bd5e8f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-3a8fca2d-38c8-4850-9968-26fc9e65321b" timestamp="2017-02-06T14:52:20.117000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>cdf4ec8beb3f15d04b54165b53475aa03949a67f9cb1847a749b2fb44a3fe0a4 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-ed6e1e50-e13e-4c26-a426-a3dd6c9907fc">\n <cybox:Title>FileHash-SHA256 - cdf4ec8beb3f15d04b54165b53475aa03949a67f9cb1847a749b2fb44a3fe0a4</cybox:Title>\n <cybox:Object id="example:File-481050a2-bd31-4e8a-b959-4a73a155bcca">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>cdf4ec8beb3f15d04b54165b53475aa03949a67f9cb1847a749b2fb44a3fe0a4</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1d739945-b103-4972-8e26-5392d0505032" timestamp="2017-02-06T14:52:20.117000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>39bdeaded0f919caa6697ae1ae4953de1c7afa79905939dbbd8c647a84f6cd07 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-57271f57-0772-48d5-a138-aea4ef2d5c42">\n <cybox:Title>FileHash-SHA256 - 39bdeaded0f919caa6697ae1ae4953de1c7afa79905939dbbd8c647a84f6cd07</cybox:Title>\n <cybox:Object id="example:File-286d91e8-5a10-435b-b671-ba6fc0651be0">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>39bdeaded0f919caa6697ae1ae4953de1c7afa79905939dbbd8c647a84f6cd07</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8eb86813-3632-4003-a6c1-e06b361f1078" timestamp="2017-02-06T14:52:20.117000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>905f6a62749ca6f0fd33345d6a8b1831d87e9fd1f81a59cd3add82643b367693 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-3d284a27-bc1f-4bcc-a31a-230f0ce85065">\n <cybox:Title>FileHash-SHA256 - 905f6a62749ca6f0fd33345d6a8b1831d87e9fd1f81a59cd3add82643b367693</cybox:Title>\n <cybox:Object id="example:File-ec18f50f-ed20-4bdc-8c0c-9f14b4178aaf">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>905f6a62749ca6f0fd33345d6a8b1831d87e9fd1f81a59cd3add82643b367693</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-8795dee7-e353-4a6b-aa87-5bf4d30270b4" timestamp="2017-02-06T14:52:20.118000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>4dcf5bd2c7a5822831d9f22f46bd2369c4c9df17cc99eb29975b5e8ae7e88606 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-d35f214b-3c7c-4fb5-b459-d4f030db0781">\n <cybox:Title>FileHash-SHA256 - 4dcf5bd2c7a5822831d9f22f46bd2369c4c9df17cc99eb29975b5e8ae7e88606</cybox:Title>\n <cybox:Object id="example:File-f7113562-96b1-43da-bc75-2a0f63a79990">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>4dcf5bd2c7a5822831d9f22f46bd2369c4c9df17cc99eb29975b5e8ae7e88606</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2d0bdcf0-3669-46de-a84a-968c5c413b3f" timestamp="2017-02-06T14:52:20.118000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>4393ff391396cdfd229517dd98aa7faecad04da479fe8ca322f035ceee363273 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-a3b16ebe-1c56-4615-bcb9-2eaa889a45d7">\n <cybox:Title>FileHash-SHA256 - 4393ff391396cdfd229517dd98aa7faecad04da479fe8ca322f035ceee363273</cybox:Title>\n <cybox:Object id="example:File-944e2ac6-49a7-4ea2-818a-a5715cda5e71">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>4393ff391396cdfd229517dd98aa7faecad04da479fe8ca322f035ceee363273</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-48dfe0d8-94cc-4417-9953-b20f3083a024" timestamp="2017-02-06T14:52:20.118000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3053e1e8df7e525ef98a77190cefce258aea365e2998425ecc8e139230680156 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-bd6e20fd-dbb9-4afd-a4fd-53f8c79e13fe">\n <cybox:Title>FileHash-SHA256 - 3053e1e8df7e525ef98a77190cefce258aea365e2998425ecc8e139230680156</cybox:Title>\n <cybox:Object id="example:File-d6a6d748-561a-4e4f-bd36-fcd4464dbdf5">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3053e1e8df7e525ef98a77190cefce258aea365e2998425ecc8e139230680156</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-578e19f5-4dbc-4bb7-a60e-38b51bc108e8" timestamp="2017-02-06T14:52:20.119000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ea16f0d55918752ad432d0da03a7e39ab9a8442b74ae0bbe724900605a9ba71f from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-60a0007f-7860-4509-a3c1-049a2d272866">\n <cybox:Title>FileHash-SHA256 - ea16f0d55918752ad432d0da03a7e39ab9a8442b74ae0bbe724900605a9ba71f</cybox:Title>\n <cybox:Object id="example:File-1fedde10-3b03-4c53-8c2c-bd431ed23cc0">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>ea16f0d55918752ad432d0da03a7e39ab9a8442b74ae0bbe724900605a9ba71f</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1033eb2b-7e00-48d4-9d84-86b879bc2c65" timestamp="2017-02-06T14:52:20.119000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>dbeb3c262cc6eefea93846f817e8333ee541ec23d19ffef56a94585e519e6ff1 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-91426c74-494c-4737-8959-ab404f4638a6">\n <cybox:Title>FileHash-SHA256 - dbeb3c262cc6eefea93846f817e8333ee541ec23d19ffef56a94585e519e6ff1</cybox:Title>\n <cybox:Object id="example:File-72b1933f-07e5-44cd-91f0-8c76d68676a1">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>dbeb3c262cc6eefea93846f817e8333ee541ec23d19ffef56a94585e519e6ff1</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b7736a75-8411-47ec-994c-6bdc85bb1e59" timestamp="2017-02-06T14:52:20.119000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>b30e3dc47848666e71c1f13050a6502b2c2a7a542ee867d152ffb2dd186d7114 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-4a43c08b-6095-481e-965f-261599fa0e6d">\n <cybox:Title>FileHash-SHA256 - b30e3dc47848666e71c1f13050a6502b2c2a7a542ee867d152ffb2dd186d7114</cybox:Title>\n <cybox:Object id="example:File-ed640814-2135-49ad-9504-1d500f490851">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>b30e3dc47848666e71c1f13050a6502b2c2a7a542ee867d152ffb2dd186d7114</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-adeee19a-5f7b-4de3-b3b6-2f457cade6ed" timestamp="2017-02-06T14:52:20.120000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f0e3562d0438695c7f3af0c280968cfc7134b484010d9ba2aceab944b441b127 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-613927c4-5574-4474-950a-807ebcb6820f">\n <cybox:Title>FileHash-SHA256 - f0e3562d0438695c7f3af0c280968cfc7134b484010d9ba2aceab944b441b127</cybox:Title>\n <cybox:Object id="example:File-28aa46c6-7f3e-45e4-8126-c40157e62886">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f0e3562d0438695c7f3af0c280968cfc7134b484010d9ba2aceab944b441b127</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-b94f28d9-b3af-4f0e-b404-10e029d7fdc0" timestamp="2017-02-06T14:52:20.120000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f4eda40b3f1c77f8f9e02674d93214dd31c13080b034e37b26cc66d744500b1e from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-10a8b8d9-b409-46a6-8d1d-8a18909b67b9">\n <cybox:Title>FileHash-SHA256 - f4eda40b3f1c77f8f9e02674d93214dd31c13080b034e37b26cc66d744500b1e</cybox:Title>\n <cybox:Object id="example:File-fad30dc6-7d13-43ee-b8a4-adaf853cfd11">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f4eda40b3f1c77f8f9e02674d93214dd31c13080b034e37b26cc66d744500b1e</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c8b737f6-1d27-4149-9e7c-7908e44b06d0" timestamp="2017-02-06T14:52:20.120000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>dcc04adf96045e7227a0e1f1d092919276b21035bcb3c5ed462650ef8d2e7aa3 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-3f3ade8f-7900-408c-b824-a2afc714f7d3">\n <cybox:Title>FileHash-SHA256 - dcc04adf96045e7227a0e1f1d092919276b21035bcb3c5ed462650ef8d2e7aa3</cybox:Title>\n <cybox:Object id="example:File-8c0c9e94-9c1f-4d60-a311-f62bba7d095d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>dcc04adf96045e7227a0e1f1d092919276b21035bcb3c5ed462650ef8d2e7aa3</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-57240f33-8785-48fa-b826-99dd62e66468" timestamp="2017-02-06T14:52:20.120000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>0045c28ed2a9d98efb798ec59f34b6a3058838f933af7c0dae6482a0e86e37bf from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-eb9526af-0fca-4817-93d2-970f7d2778e2">\n <cybox:Title>FileHash-SHA256 - 0045c28ed2a9d98efb798ec59f34b6a3058838f933af7c0dae6482a0e86e37bf</cybox:Title>\n <cybox:Object id="example:File-ca6b0749-4345-4660-ace8-0e46b18e3f3d">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>0045c28ed2a9d98efb798ec59f34b6a3058838f933af7c0dae6482a0e86e37bf</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9b90a078-a8db-4a33-b3c9-8189f2e6fd1e" timestamp="2017-02-06T14:52:20.120000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>3ff059a53e38f9fcd24e8d6bf008b4e14733db317857764cfcef736119ff26c9 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-975f7e3f-0270-409f-8abc-b97c33b14ff1">\n <cybox:Title>FileHash-SHA256 - 3ff059a53e38f9fcd24e8d6bf008b4e14733db317857764cfcef736119ff26c9</cybox:Title>\n <cybox:Object id="example:File-12d3090a-0f57-4d49-ae11-83b000eed947">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>3ff059a53e38f9fcd24e8d6bf008b4e14733db317857764cfcef736119ff26c9</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-09a465be-0b06-42c3-ba03-88fdff46fed3" timestamp="2017-02-06T14:52:20.121000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e6e9f7b0449976537d9276192e5767c9909cd34df028a8bf1cac3dbe490f0e73 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6704740b-35c3-464b-86ef-19bca78f5313">\n <cybox:Title>FileHash-SHA256 - e6e9f7b0449976537d9276192e5767c9909cd34df028a8bf1cac3dbe490f0e73</cybox:Title>\n <cybox:Object id="example:File-57cfb6a3-5523-4566-95c6-27d06eb2b432">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e6e9f7b0449976537d9276192e5767c9909cd34df028a8bf1cac3dbe490f0e73</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-17de4093-42b4-4850-975a-d4a15f31b01d" timestamp="2017-02-06T14:52:20.121000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>f361974e6fd6a6d7cfbfafb28159c4f8e514fe6f399788be4daa2449767d5904 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e1fa2abe-029b-48a7-b671-8546030fa23d">\n <cybox:Title>FileHash-SHA256 - f361974e6fd6a6d7cfbfafb28159c4f8e514fe6f399788be4daa2449767d5904</cybox:Title>\n <cybox:Object id="example:File-9ed76bbc-24ee-4d0d-b014-3ceaf0cf5523">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>f361974e6fd6a6d7cfbfafb28159c4f8e514fe6f399788be4daa2449767d5904</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-83cbf72d-db35-4096-ae00-c25f599efd99" timestamp="2017-02-06T14:52:20.121000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>96c1346351a53c865afef5e087a8cbcf8e28d652fbc083a93399a8b94328d456 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-e042f513-484f-4f5f-9c78-e5c827ddbc56">\n <cybox:Title>FileHash-SHA256 - 96c1346351a53c865afef5e087a8cbcf8e28d652fbc083a93399a8b94328d456</cybox:Title>\n <cybox:Object id="example:File-000966a8-39ea-49c4-9957-29d1c8d2774e">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>96c1346351a53c865afef5e087a8cbcf8e28d652fbc083a93399a8b94328d456</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-36288409-52d8-4d27-8dc6-fb1716b04a1b" timestamp="2017-02-06T14:52:20.121000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>20e3d4c9223955495d00e72e2fedfe825e9fcda57696a255215895cfba490876 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-67f51d01-7358-44f7-b265-cb8afd697ce1">\n <cybox:Title>FileHash-SHA256 - 20e3d4c9223955495d00e72e2fedfe825e9fcda57696a255215895cfba490876</cybox:Title>\n <cybox:Object id="example:File-892e6761-5b5f-4892-8087-923298998d2a">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>20e3d4c9223955495d00e72e2fedfe825e9fcda57696a255215895cfba490876</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7edffb30-e596-491b-a80c-25133c384be8" timestamp="2017-02-06T14:52:20.122000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>695821451be582d85cd8e42ce4446f131bd474e6c715bdf13fe8bac6de34b2e3 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-f5a046bc-4095-4b3c-8551-a0f4760f099a">\n <cybox:Title>FileHash-SHA256 - 695821451be582d85cd8e42ce4446f131bd474e6c715bdf13fe8bac6de34b2e3</cybox:Title>\n <cybox:Object id="example:File-085dad6b-a94d-4f93-a231-ae13ab61313b">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>695821451be582d85cd8e42ce4446f131bd474e6c715bdf13fe8bac6de34b2e3</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-324d8345-d68c-48a8-9dbc-4cc2a89a0f01" timestamp="2017-02-06T14:52:20.122000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>a149340f920888256902e28e4c5d8587fed3037682e875ed1fdf6a3213c50e92 from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-fc5dad0e-16ca-4375-a8ca-866b0b76003c">\n <cybox:Title>FileHash-SHA256 - a149340f920888256902e28e4c5d8587fed3037682e875ed1fdf6a3213c50e92</cybox:Title>\n <cybox:Object id="example:File-77e991f2-1377-4cfc-bda2-3847a495e05e">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>a149340f920888256902e28e4c5d8587fed3037682e875ed1fdf6a3213c50e92</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-3d77e5c1-bda2-463f-8e41-376da11a83e0" timestamp="2017-02-06T14:52:20.122000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>8ca99455d244fab2701beb5127f94745154e03ac1231a58f8bd2cd01732a341b from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-52c00efe-a7c4-42a2-9348-c7246bd4c4a6">\n <cybox:Title>FileHash-SHA256 - 8ca99455d244fab2701beb5127f94745154e03ac1231a58f8bd2cd01732a341b</cybox:Title>\n <cybox:Object id="example:File-32f54d06-7ff0-4eb0-ab1e-5354e1f58f80">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>8ca99455d244fab2701beb5127f94745154e03ac1231a58f8bd2cd01732a341b</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-fcd12cb6-16b2-4d25-ad13-404772539044" timestamp="2017-02-06T14:52:20.122000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>gameoolines.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-db5337ce-e724-467b-8dd6-6114934388e5">\n <cybox:Title>domain - gameoolines.com</cybox:Title>\n <cybox:Object id="example:DomainName-17ad010d-6790-4cb8-919f-10149d59db56">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>gameoolines.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-11c5e5fd-8ad8-48b8-9792-ea4b74c2dafd" timestamp="2017-02-06T14:52:20.122000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>onlinesoft.space from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6a64ddda-b4bd-4fd9-979b-179fa13e9c4a">\n <cybox:Title>domain - onlinesoft.space</cybox:Title>\n <cybox:Object id="example:DomainName-c9352f7d-3c95-42d0-8c40-a267a7e01afa">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>onlinesoft.space</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0a6c3b90-b937-4f2e-aa6f-a277035aeb49" timestamp="2017-02-06T14:52:20.123000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>smartsftp.pw from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-7c0f858d-596f-44e7-95d9-024134206038">\n <cybox:Title>domain - smartsftp.pw</cybox:Title>\n <cybox:Object id="example:DomainName-4ca6d2aa-bafd-441f-a301-e0e3ecb63c3e">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>smartsftp.pw</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-3f2056c3-4ac8-4788-ae6b-fff050996401" timestamp="2017-02-06T14:52:20.123000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>topgamse.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-cac5a796-9b7c-4ac2-9905-9cf58715f573">\n <cybox:Title>domain - topgamse.com</cybox:Title>\n <cybox:Object id="example:DomainName-e6af53b8-01cc-4bce-b4d5-d5d238a8294b">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>topgamse.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-18c13fb0-b932-4063-9c31-a4b7cb754802" timestamp="2017-02-06T14:52:20.123000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>speedbind.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-5614e293-dc65-4d35-a90b-39f4f14ded46">\n <cybox:Title>domain - speedbind.com</cybox:Title>\n <cybox:Object id="example:DomainName-bd925f90-0c70-4c28-94e2-7140a3c605a0">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>speedbind.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-de7055a9-1a12-4337-9ac1-94339a787472" timestamp="2017-02-06T14:52:20.124000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ukgames.tech from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-9bcd5ba5-44da-44ba-a566-5485b2446863">\n <cybox:Title>domain - ukgames.tech</cybox:Title>\n <cybox:Object id="example:DomainName-81f89199-832f-45e4-a889-423cdfcdbecc">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>ukgames.tech</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1fa2a888-dce0-4b80-a898-87d28f887d6e" timestamp="2017-02-06T14:52:20.124000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>galaxysupdates.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-03cc956d-c3a8-4583-aa9e-3e1b1bbf7648">\n <cybox:Title>domain - galaxysupdates.com</cybox:Title>\n <cybox:Object id="example:DomainName-6905cf7d-f5b1-4c8f-ba80-e74248ac060d">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>galaxysupdates.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-6ea7cab2-aae6-4ea8-9768-6ef9017f9615" timestamp="2017-02-06T14:52:20.124000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>datasamsung.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-0c9e6682-e7f4-45d2-b126-5b6b7fba7400">\n <cybox:Title>domain - datasamsung.com</cybox:Title>\n <cybox:Object id="example:DomainName-e06937e4-cfcd-4c14-a138-c9ffddfb1cb0">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>datasamsung.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9731b717-342c-48e8-a910-e47be28a4224" timestamp="2017-02-06T14:52:20.125000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>bandtester.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-9b1c3101-8185-49ab-9fee-3bbe5099e440">\n <cybox:Title>domain - bandtester.com</cybox:Title>\n <cybox:Object id="example:DomainName-cc86002d-4011-4d6f-a25f-33cbdfb0597d">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>bandtester.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2336356d-2909-4e73-9f17-2ce51df2dd39" timestamp="2017-02-06T14:52:20.125000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>gamestoplay.bid from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-7bc6ef03-3e10-42cb-aa57-20808d103a26">\n <cybox:Title>domain - gamestoplay.bid</cybox:Title>\n <cybox:Object id="example:DomainName-b69ae19b-159b-496c-8d46-6e9247d9f380">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>gamestoplay.bid</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-dccaf3c9-43b3-450e-9ec4-ca834f9131bd" timestamp="2017-02-06T14:52:20.125000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>galaxy-s.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-91c0b32b-954e-46ed-a7cb-1d4afe9061db">\n <cybox:Title>domain - galaxy-s.com</cybox:Title>\n <cybox:Object id="example:DomainName-df1a99ca-2d5a-46a9-808b-40ef923da30a">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>galaxy-s.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-5611a493-5415-4562-a7da-5b83ff458ddb" timestamp="2017-02-06T14:52:20.126000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>subsidiaryohio.linkpc.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6c372e99-e6e2-4791-ad59-c3f85a66715c">\n <cybox:Title>hostname - subsidiaryohio.linkpc.net</cybox:Title>\n <cybox:Object id="example:DomainName-a099c49c-d0ad-48c8-bca3-d19e03c51f13">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>subsidiaryohio.linkpc.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-66bb1d5b-c371-4326-afd3-cd57bda57091" timestamp="2017-02-06T14:52:20.126000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>viewnet.better-than.tv from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-25c23ba2-9bae-4283-9c96-3cd7bc5cda2d">\n <cybox:Title>hostname - viewnet.better-than.tv</cybox:Title>\n <cybox:Object id="example:DomainName-a4079c3b-aa2e-4ec6-adb8-acc2d54dedf1">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>viewnet.better-than.tv</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-6a754591-9e1f-45a0-abaa-bcc34562c995" timestamp="2017-02-06T14:52:20.126000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>ftpserverit.otzo.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-746140ab-3b0c-45bf-97ab-ebd7c534d700">\n <cybox:Title>hostname - ftpserverit.otzo.com</cybox:Title>\n <cybox:Object id="example:DomainName-72a0bbe2-2c81-43f8-b31f-c10a62f92895">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>ftpserverit.otzo.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-40deb796-0481-4b4a-812f-d813f24cc03d" timestamp="2017-02-06T14:52:20.127000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>dynamicipaddress.linkpc.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-20eb4c82-60b0-4036-9474-ec87206fca35">\n <cybox:Title>hostname - dynamicipaddress.linkpc.net</cybox:Title>\n <cybox:Object id="example:DomainName-19bc0069-07fc-4cd5-8a18-e4a021b57248">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>dynamicipaddress.linkpc.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1eb87bca-fd14-4422-9e55-e745b7bc28b5" timestamp="2017-02-06T14:52:20.127000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>netstreamag.publicvm.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-575c1f86-0953-4736-bd9c-128cf5297a53">\n <cybox:Title>hostname - netstreamag.publicvm.com</cybox:Title>\n <cybox:Object id="example:DomainName-d610c4ad-9446-474f-8552-117d7bfde6b3">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>netstreamag.publicvm.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-84fe5f88-e49c-41cb-b045-4e591dbea82c" timestamp="2017-02-06T14:52:20.127000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>havan.qhigh.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-999eb70f-3d1b-4700-8f35-ddc26dc52692">\n <cybox:Title>hostname - havan.qhigh.com</cybox:Title>\n <cybox:Object id="example:DomainName-d607d2ae-f9d1-4383-bc22-8a9daffb7046">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>havan.qhigh.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-7d3cd767-95c7-4cbd-a952-4b9923f8fb69" timestamp="2017-02-06T14:52:20.128000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>hostgatero.ddns.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-1eca73eb-fcba-46ca-a14a-3f209b754f2d">\n <cybox:Title>hostname - hostgatero.ddns.net</cybox:Title>\n <cybox:Object id="example:DomainName-1f924336-c482-4ece-8639-092dcfd0d053">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>hostgatero.ddns.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-51d323d1-d015-407e-aee8-be050ae99e97" timestamp="2017-02-06T14:52:20.128000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>down.downloadoneyoutube.co.vu from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-499b2c28-432c-4c27-916c-c652c1a2b8a4">\n <cybox:Title>hostname - down.downloadoneyoutube.co.vu</cybox:Title>\n <cybox:Object id="example:DomainName-24a4627b-823c-407f-8f0b-c52e5d926c34">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>down.downloadoneyoutube.co.vu</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0581f90a-03b5-43d5-80bf-39f4f640f9a8" timestamp="2017-02-06T14:52:20.128000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>helpyoume.linkpc.net from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-1eb5eeac-eb55-442e-ba07-7a7e8c6900a3">\n <cybox:Title>hostname - helpyoume.linkpc.net</cybox:Title>\n <cybox:Object id="example:DomainName-fc2d6051-887c-457b-a040-c6a93738bd99">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>helpyoume.linkpc.net</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-84c78495-8297-444e-ac25-e9dc3d62722a" timestamp="2017-02-06T14:52:20.129000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>exportball.servegame.org from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-a606d662-928e-422d-b671-8c66d7624121">\n <cybox:Title>hostname - exportball.servegame.org</cybox:Title>\n <cybox:Object id="example:DomainName-01de8f2a-e98c-4c34-8313-780a776d7356">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>exportball.servegame.org</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-68353188-a312-4f9f-9159-2d7d96df9ca0" timestamp="2017-02-06T14:52:20.129000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>newphoneapp.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-52c4cec7-e368-4190-9d50-6a9130f44c3e">\n <cybox:Title>domain - newphoneapp.com</cybox:Title>\n <cybox:Object id="example:DomainName-5385bc1c-8e0b-422c-966b-1b1342274602">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>newphoneapp.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-d5d3c9e0-041d-4b6f-b556-9709d7c26800" timestamp="2017-02-06T14:52:20.129000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>progsupdate.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-6d4b1881-8c95-4b07-b2ac-81cd677586e4">\n <cybox:Title>domain - progsupdate.com</cybox:Title>\n <cybox:Object id="example:DomainName-6634f733-c174-492d-aa18-cedb431ceb2a">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>progsupdate.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-81c150e8-6c32-46aa-8a78-123a65e44eb1" timestamp="2017-02-06T14:52:20.131000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>downloadtesting.com from https://otx.alienvault.com/pulse/58906402c435af366d5e8835</indicator:Title>\n <indicator:Observable id="example:Observable-112a3dc4-3db7-4b20-bef5-510045ffb8e3">\n <cybox:Title>domain - downloadtesting.com</cybox:Title>\n <cybox:Object id="example:DomainName-0172ad4c-2a7e-4d68-acd3-7328cd8f392b">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>downloadtesting.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T14_52_21_362000_00_00.xml
- b'<stix:STIX_Package xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1" xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2" xmlns:incident="http://stix.mitre.org/Incident-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:stixCommon="http://stix.mitre.org/common-1" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:alienvault-otx="https://otx.alienvault.com" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://cybox.mitre.org/common-2 http://cybox.mitre.org/XMLSchema/common/2.1/cybox_common.xsd http://cybox.mitre.org/cybox-2 http://cybox.mitre.org/XMLSchema/core/2.1/cybox_core.xsd http://cybox.mitre.org/default_vocabularies-2 http://cybox.mitre.org/XMLSchema/default_vocabularies/2.1/cybox_default_vocabularies.xsd http://cybox.mitre.org/objects#DomainNameObject-1 http://cybox.mitre.org/XMLSchema/objects/Domain_Name/1.0/Domain_Name_Object.xsd http://cybox.mitre.org/objects#FileObject-2 http://cybox.mitre.org/XMLSchema/objects/File/2.1/File_Object.xsd http://stix.mitre.org/Incident-1 http://stix.mitre.org/XMLSchema/incident/1.1.1/incident.xsd http://stix.mitre.org/Indicator-2 http://stix.mitre.org/XMLSchema/indicator/2.1.1/indicator.xsd http://stix.mitre.org/common-1 http://stix.mitre.org/XMLSchema/common/1.1.1/stix_common.xsd http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.1.1/stix_core.xsd" id="alienvault-otx:Package-18ba4921-3bb4-4221-8fb4-752bcd503f8e" version="1.1.1" timestamp="2017-02-06T14:52:22.498000+00:00">\n <stix:STIX_Header>\n <stix:Title>Android Rootnik Malware</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators</stix:Package_Intent>\n <stix:Description>The Android rootnik malware uses open-sourced Android root exploit tools and the MTK root scheme from the dashi root tool to gain root access on an Android device. The malware disguises itself as a file helper app and then uses very advanced anti-debug and anti-hook techniques to prevent it from being reverse engineered.</stix:Description>\n <stix:Information_Source>\n <stixCommon:Description>Alienvault OTX - https://otx.alienvault.com/</stixCommon:Description>\n <stixCommon:Identity id="alienvault-otx:Identity-96cc1125-d637-466c-812a-5aaf41e0ea01">\n <stixCommon:Name>Alienvault OTX</stixCommon:Name>\n </stixCommon:Identity>\n <stixCommon:Time>\n <cyboxCommon:Produced_Time>2017-01-27T19:25:40.111000</cyboxCommon:Produced_Time>\n </stixCommon:Time>\n </stix:Information_Source>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator id="alienvault-otx:indicator-424c4d1b-18d4-4f4b-a1e6-9bd830d4e691" timestamp="2017-02-06T14:52:22.501000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>cee6584cd2e01fab5f075f94af2a0ce024ed5e4f2d52e3dc39f7655c736a7232 from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-7456d012-f8e2-42e2-9e76-0270977a356e">\n <cybox:Title>FileHash-SHA256 - cee6584cd2e01fab5f075f94af2a0ce024ed5e4f2d52e3dc39f7655c736a7232</cybox:Title>\n <cybox:Object id="example:File-d8a9d2c7-a8ff-4eba-89fd-f56a5e810ea6">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>cee6584cd2e01fab5f075f94af2a0ce024ed5e4f2d52e3dc39f7655c736a7232</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c32c053a-aa39-4df3-ae5c-7e65b525285f" timestamp="2017-02-06T14:52:22.501000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e5e22b357893bc15a50dc35b702dd5fcdfeafc6ffec7daa0d313c724d72ec854 from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-f3edabd7-f6d4-46ac-9bcc-01ccfd26c9f0">\n <cybox:Title>FileHash-SHA256 - e5e22b357893bc15a50dc35b702dd5fcdfeafc6ffec7daa0d313c724d72ec854</cybox:Title>\n <cybox:Object id="example:File-f7dff888-51f1-4c3c-b575-4d08893d0373">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e5e22b357893bc15a50dc35b702dd5fcdfeafc6ffec7daa0d313c724d72ec854</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-e78c7eed-7c24-4b70-992b-bb090f3a843d" timestamp="2017-02-06T14:52:22.502000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>e2bdcfe5796cd377d41f3da3838865ab062ea7af9e1e4424b1e34eb084abec4a from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-dee00b59-a844-4971-84b2-c7745edc37fa">\n <cybox:Title>FileHash-SHA256 - e2bdcfe5796cd377d41f3da3838865ab062ea7af9e1e4424b1e34eb084abec4a</cybox:Title>\n <cybox:Object id="example:File-f69904a4-2076-4727-8f5e-2e2052e32862">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA256</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>e2bdcfe5796cd377d41f3da3838865ab062ea7af9e1e4424b1e34eb084abec4a</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-33fbe0d1-a964-4dce-b3a9-b449b0d08860" timestamp="2017-02-06T14:52:22.504000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>grs.gowdsy.com from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-c385cd6b-7c74-4b96-b3aa-bf39497c591b">\n <cybox:Title>hostname - grs.gowdsy.com</cybox:Title>\n <cybox:Object id="example:DomainName-941b27bf-a56e-4675-93b0-13322d15efb9">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>grs.gowdsy.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-62a97e84-a977-4861-b942-8ac77906c12d" timestamp="2017-02-06T14:52:22.505000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>gt.yepodjr.com from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-083ddc6c-3aff-42e8-9f04-7cfe0d8d134b">\n <cybox:Title>hostname - gt.yepodjr.com</cybox:Title>\n <cybox:Object id="example:DomainName-f49cc6c2-21e2-47a7-984b-4851b4c31192">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>gt.yepodjr.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-837c3b20-7ae0-4a0d-8279-843f6e0805d9" timestamp="2017-02-06T14:52:22.506000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>gt.rogsob.com from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-6030d7eb-e358-4204-b36f-002af6bb71cb">\n <cybox:Title>hostname - gt.rogsob.com</cybox:Title>\n <cybox:Object id="example:DomainName-2689e790-7c6a-474f-b82f-ee8b51ff00ec">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>gt.rogsob.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-95114385-1885-4b51-9459-aa2ba8961e88" timestamp="2017-02-06T14:52:22.507000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>grs.rogsob.com from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-46b45c48-9117-4e6f-abf0-439009eeee0c">\n <cybox:Title>hostname - grs.rogsob.com</cybox:Title>\n <cybox:Object id="example:DomainName-a8223f18-266b-48c2-bb82-3a69c88ba790">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>grs.rogsob.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-c45fb38f-1503-4349-ba3f-6e196f35b28d" timestamp="2017-02-06T14:52:22.508000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>qj.hoyow.com from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-c0d3c18f-784f-44f4-b126-401c88932c6a">\n <cybox:Title>hostname - qj.hoyow.com</cybox:Title>\n <cybox:Object id="example:DomainName-2e8d5a0d-8f18-4396-8b79-a2eea162e90a">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>qj.hoyow.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-2d1b73e0-77a4-4be3-a01f-beb514681845" timestamp="2017-02-06T14:52:22.509000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>qj.hoyebs.com from https://otx.alienvault.com/pulse/588b9eb47de8ff1614a84c28</indicator:Title>\n <indicator:Observable id="example:Observable-6d1d6b41-bf18-4473-8042-976a94419167">\n <cybox:Title>hostname - qj.hoyebs.com</cybox:Title>\n <cybox:Object id="example:DomainName-b40c26c4-cc5e-46c0-8266-4e2ad8b5276f">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>qj.hoyebs.com</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T14_52_22_638000_00_00.xml
- b'<stix:STIX_Package xmlns:cyboxCommon="http://cybox.mitre.org/common-2" xmlns:cybox="http://cybox.mitre.org/cybox-2" xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2" xmlns:AddressObj="http://cybox.mitre.org/objects#AddressObject-2" xmlns:DomainNameObj="http://cybox.mitre.org/objects#DomainNameObject-1" xmlns:FileObj="http://cybox.mitre.org/objects#FileObject-2" xmlns:URIObj="http://cybox.mitre.org/objects#URIObject-2" xmlns:incident="http://stix.mitre.org/Incident-1" xmlns:indicator="http://stix.mitre.org/Indicator-2" xmlns:stixCommon="http://stix.mitre.org/common-1" xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1" xmlns:stix="http://stix.mitre.org/stix-1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:alienvault-otx="https://otx.alienvault.com" xmlns:taxii="http://taxii.mitre.org/messages/taxii_xml_binding-1" xmlns:taxii_11="http://taxii.mitre.org/messages/taxii_xml_binding-1.1" xmlns:tdq="http://taxii.mitre.org/query/taxii_default_query-1" xsi:schemaLocation=" http://cybox.mitre.org/common-2 http://cybox.mitre.org/XMLSchema/common/2.1/cybox_common.xsd http://cybox.mitre.org/cybox-2 http://cybox.mitre.org/XMLSchema/core/2.1/cybox_core.xsd http://cybox.mitre.org/default_vocabularies-2 http://cybox.mitre.org/XMLSchema/default_vocabularies/2.1/cybox_default_vocabularies.xsd http://cybox.mitre.org/objects#AddressObject-2 http://cybox.mitre.org/XMLSchema/objects/Address/2.1/Address_Object.xsd http://cybox.mitre.org/objects#DomainNameObject-1 http://cybox.mitre.org/XMLSchema/objects/Domain_Name/1.0/Domain_Name_Object.xsd http://cybox.mitre.org/objects#FileObject-2 http://cybox.mitre.org/XMLSchema/objects/File/2.1/File_Object.xsd http://cybox.mitre.org/objects#URIObject-2 http://cybox.mitre.org/XMLSchema/objects/URI/2.1/URI_Object.xsd http://stix.mitre.org/Incident-1 http://stix.mitre.org/XMLSchema/incident/1.1.1/incident.xsd http://stix.mitre.org/Indicator-2 http://stix.mitre.org/XMLSchema/indicator/2.1.1/indicator.xsd http://stix.mitre.org/common-1 http://stix.mitre.org/XMLSchema/common/1.1.1/stix_common.xsd http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1/stix_default_vocabularies.xsd http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.1.1/stix_core.xsd" id="alienvault-otx:Package-577165bb-f345-47ee-920f-d8cdf2ed9564" version="1.1.1" timestamp="2017-02-06T14:52:23.304000+00:00">\n <stix:STIX_Header>\n <stix:Title>Dridex Banking Trojan Returns, Leverages New UAC Bypass Method</stix:Title>\n <stix:Package_Intent xsi:type="stixVocabs:PackageIntentVocab-1.0">Indicators</stix:Package_Intent>\n <stix:Description>First observed in July 2014, “Dridex,” a financial banking Trojan, is considered the successor to the “GameOver ZeuS” (GoZ) malware. Dridex utilizes an improved version of GoZ’s peer-to-peer architecture to protect its command-and-control (C2) servers against detection by security researchers and law enforcement.\n\nDridex was most active between 2014 and 2015, and smaller campaigns were observed throughout 2016. On January 25, 2017, the criminal syndicate behind Dridex launched another small campaign targeting UK financial institutions.</stix:Description>\n <stix:Information_Source>\n <stixCommon:Description>Alienvault OTX - https://otx.alienvault.com/</stixCommon:Description>\n <stixCommon:Identity id="alienvault-otx:Identity-be5579fa-3413-44d1-9a64-20dcc102c8da">\n <stixCommon:Name>Alienvault OTX</stixCommon:Name>\n </stixCommon:Identity>\n <stixCommon:Time>\n <cyboxCommon:Produced_Time>2017-01-26T23:04:33.205000</cyboxCommon:Produced_Time>\n </stixCommon:Time>\n </stix:Information_Source>\n </stix:STIX_Header>\n <stix:Indicators>\n <stix:Indicator id="alienvault-otx:indicator-d74f9414-74b6-468b-9bae-d4a9aa9722b3" timestamp="2017-02-06T14:52:23.307000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>1fevh.top from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-922ae38b-dcfb-488c-b157-e05108ae84fb">\n <cybox:Title>domain - 1fevh.top</cybox:Title>\n <cybox:Object id="example:DomainName-efcf6d1f-0b7c-4c2b-bf40-021ea1b51673">\n <cybox:Properties xsi:type="DomainNameObj:DomainNameObjectType" type="FQDN">\n <DomainNameObj:Value>1fevh.top</DomainNameObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-9dc92fc0-9d7e-484c-996b-7dd7e4cc3c5d" timestamp="2017-02-06T14:52:23.308000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>http://1fevh.top/fiscal/ from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-dcadc88a-a797-41a8-aec7-2d22351fc30a">\n <cybox:Title>URL - http://1fevh.top/fiscal/</cybox:Title>\n <cybox:Object id="example:URI-c7d59f34-fa6f-435c-b7a8-241569695064">\n <cybox:Properties xsi:type="URIObj:URIObjectType" type="URL">\n <URIObj:Value>http://1fevh.top/fiscal/</URIObj:Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-aa8a9792-caba-49ce-98bb-d01ca03b11fd" timestamp="2017-02-06T14:52:23.309000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>6233778c733daa00ce5b9b25aae0a3cb from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-34cbd99a-d2f4-4c94-85bb-dfe2093caf1c">\n <cybox:Title>FileHash-MD5 - 6233778c733daa00ce5b9b25aae0a3cb</cybox:Title>\n <cybox:Object id="example:File-8bfca99c-9dbc-4ee2-bd0c-16039f7193bc">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>6233778c733daa00ce5b9b25aae0a3cb</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-68a6422e-4181-484c-a803-b1d2baef1f26" timestamp="2017-02-06T14:52:23.310000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>30bfdcbc94be82c2c3c0553cfa62aa50 from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-c7529862-ca15-4a67-a8ce-2ccfb272aa94">\n <cybox:Title>FileHash-MD5 - 30bfdcbc94be82c2c3c0553cfa62aa50</cybox:Title>\n <cybox:Object id="example:File-b11d1f03-15eb-4e84-8414-27be2ae6f655">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">MD5</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>30bfdcbc94be82c2c3c0553cfa62aa50</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-4f73e433-c6be-4237-8ba2-c94a55b11215" timestamp="2017-02-06T14:52:23.311000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>1bfd0ac86f1bf52a5e8814dafb4a9bc4d3628384 from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-c89d1aeb-09c1-4fda-895c-26e3cb50b6aa">\n <cybox:Title>FileHash-SHA1 - 1bfd0ac86f1bf52a5e8814dafb4a9bc4d3628384</cybox:Title>\n <cybox:Object id="example:File-a3de953b-0e88-4ffe-a4ad-2b8f42426fbf">\n <cybox:Properties xsi:type="FileObj:FileObjectType">\n <FileObj:Hashes>\n <cyboxCommon:Hash>\n <cyboxCommon:Type xsi:type="cyboxVocabs:HashNameVocab-1.0">SHA1</cyboxCommon:Type>\n <cyboxCommon:Simple_Hash_Value>1bfd0ac86f1bf52a5e8814dafb4a9bc4d3628384</cyboxCommon:Simple_Hash_Value>\n </cyboxCommon:Hash>\n </FileObj:Hashes>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-0c0a0831-ec1a-4284-804c-df2b613cc5f7" timestamp="2017-02-06T14:52:23.313000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>81.130.131.55 from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-56c73c82-03ae-48da-bf50-26e40a160930">\n <cybox:Title>IPv4 - 81.130.131.55</cybox:Title>\n <cybox:Object id="example:Address-9fd8708e-5665-4f5d-ab5e-f34c9b420def">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>81.130.131.55</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-1acb8d70-3557-4273-b1dd-160fab17c34f" timestamp="2017-02-06T14:52:23.314000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>179.177.114.30 from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-1ea2d75f-c42c-4e85-8478-c03aa6bcdd00">\n <cybox:Title>IPv4 - 179.177.114.30</cybox:Title>\n <cybox:Object id="example:Address-ed1a5b59-cbdd-4940-84b6-30b3763b53c6">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>179.177.114.30</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n <stix:Indicator id="alienvault-otx:indicator-ef70f98a-a376-496b-815f-ad1ad68fbe57" timestamp="2017-02-06T14:52:23.315000+00:00" xsi:type="indicator:IndicatorType" negate="false" version="2.1.1">\n <indicator:Title>84.234.75.108 from https://otx.alienvault.com/pulse/588a6c07e4166d154a244b9a</indicator:Title>\n <indicator:Observable id="example:Observable-a33388d4-7c77-4f1d-bf6b-7dcf35f9fb9e">\n <cybox:Title>IPv4 - 84.234.75.108</cybox:Title>\n <cybox:Object id="example:Address-676bdd23-91d3-4990-a533-8d2df86c1969">\n <cybox:Properties xsi:type="AddressObj:AddressObjectType" category="ipv4-addr">\n <AddressObj:Address_Value>84.234.75.108</AddressObj:Address_Value>\n </cybox:Properties>\n </cybox:Object>\n </indicator:Observable>\n </stix:Indicator>\n </stix:Indicators>\n</stix:STIX_Package>\n '
- File overwritten: stix-data_STIX111_t2017_02_06T14_52_23_434000_00_00.xml
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement