2016-11-19 16:42:54 +01:00
|
|
|
<?xml version="1.0" ?>
|
2016-11-18 14:51:01 +01:00
|
|
|
<stix:STIX_Package
|
|
|
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
|
|
|
xmlns:stix="http://stix.mitre.org/stix-1"
|
|
|
|
|
xmlns:stixCommon="http://stix.mitre.org/common-1"
|
|
|
|
|
xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1"
|
|
|
|
|
xmlns:ttp="http://stix.mitre.org/TTP-1"
|
|
|
|
|
xmlns:stix-maec="http://stix.mitre.org/extensions/Malware#MAEC4.1-1"
|
|
|
|
|
xmlns:maecPackage="http://maec.mitre.org/XMLSchema/maec-package-2"
|
|
|
|
|
xmlns:example="http://example.com"
|
|
|
|
|
xsi:schemaLocation="
|
|
|
|
|
http://stix.mitre.org/TTP-1 http://stix.mitre.org/XMLSchema/ttp/1.2/ttp.xsd
|
|
|
|
|
http://stix.mitre.org/common-1 http://stix.mitre.org/XMLSchema/common/1.2/stix_common.xsd
|
|
|
|
|
http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.2.0/stix_default_vocabularies.xsd
|
|
|
|
|
http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.2/stix_core.xsd
|
|
|
|
|
http://stix.mitre.org/extensions/Malware#MAEC4.1-1 http://stix.mitre.org/XMLSchema/extensions/malware/maec_4.1/1.0/maec_4.1_malware.xsd
|
|
|
|
|
http://maec.mitre.org/XMLSchema/maec-package-2 http://maec.mitre.org/language/version4.1/maec_package_schema.xsd"
|
|
|
|
|
id="example:Package-2b8fb66f-b6b3-4d40-865a-33e4a5ee1246"
|
|
|
|
|
version="1.2"
|
|
|
|
|
timestamp="2014-05-08T09:00:00.000000Z"
|
|
|
|
|
>
|
|
|
|
|
<stix:TTPs>
|
|
|
|
|
<stix:TTP xsi:type="ttp:TTPType" id="example:ttp-7d9fe1f7-429d-077e-db51-92c70b8da45a">
|
|
|
|
|
<ttp:Title>Poison Ivy Variant v4392-acc</ttp:Title>
|
|
|
|
|
<ttp:Behavior>
|
|
|
|
|
<ttp:Malware>
|
|
|
|
|
<ttp:Malware_Instance xsi:type="stix-maec:MAEC4.1InstanceType">
|
|
|
|
|
<ttp:Type xsi:type="stixVocabs:MalwareTypeVocab-1.0">Remote Access Trojan</ttp:Type>
|
|
|
|
|
<ttp:Name>Poison Ivy Variant v4392-acc</ttp:Name>
|
|
|
|
|
<stix-maec:MAEC id="example:package-2fb96bef-1b11-436e-af4a-15588ac3198b" schema_version="2.1">
|
|
|
|
|
<!-- MAEC Content Here -->
|
|
|
|
|
<maecPackage:Malware_Subjects>
|
|
|
|
|
<maecPackage:Malware_Subject id="example:Subject-57cd4839-436e-1b11-af4a-15588ac3198b">
|
|
|
|
|
<maecPackage:Malware_Instance_Object_Attributes>
|
|
|
|
|
</maecPackage:Malware_Instance_Object_Attributes>
|
|
|
|
|
</maecPackage:Malware_Subject>
|
|
|
|
|
</maecPackage:Malware_Subjects>
|
|
|
|
|
</stix-maec:MAEC>
|
|
|
|
|
</ttp:Malware_Instance>
|
|
|
|
|
</ttp:Malware>
|
|
|
|
|
</ttp:Behavior>
|
|
|
|
|
</stix:TTP>
|
|
|
|
|
</stix:TTPs>
|
|
|
|
|
</stix:STIX_Package>
|
