62 lines
3.6 KiB
XML
62 lines
3.6 KiB
XML
<?xml version="1.0" ?>
|
|
<stix:STIX_Package
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xmlns:stix="http://stix.mitre.org/stix-1"
|
|
xmlns:stixCommon="http://stix.mitre.org/common-1"
|
|
xmlns:ttp="http://stix.mitre.org/TTP-1"
|
|
xmlns:cybox="http://cybox.mitre.org/cybox-2"
|
|
xmlns:AddressObject="http://cybox.mitre.org/objects#AddressObject-2"
|
|
xmlns:cyboxVocabs="http://cybox.mitre.org/default_vocabularies-2"
|
|
xmlns:stixVocabs="http://stix.mitre.org/default_vocabularies-1"
|
|
xmlns:example="http://example.com/"
|
|
xsi:schemaLocation="
|
|
http://stix.mitre.org/stix-1 http://stix.mitre.org/XMLSchema/core/1.1.1/stix_core.xsd
|
|
http://stix.mitre.org/Campaign-1 http://stix.mitre.org/XMLSchema/campaign/1.1.1/campaign.xsd
|
|
http://stix.mitre.org/Indicator-2 http://stix.mitre.org/XMLSchema/indicator/2.2/indicator.xsd
|
|
http://stix.mitre.org/TTP-2 http://stix.mitre.org/XMLSchema/ttp/1.1.1/ttp.xsd
|
|
http://stix.mitre.org/default_vocabularies-1 http://stix.mitre.org/XMLSchema/default_vocabularies/1.1.1.0/stix_default_vocabularies.xsd
|
|
http://cybox.mitre.org/objects#AddressObject-2 http://cybox.mitre.org/XMLSchema/objects/Address/2.1/Address_Object.xsd"
|
|
id="example:STIXPackage-cc0ca596-70e6-4dac-9bef-603166d17db8"
|
|
version="1.1.1"
|
|
|
|
>
|
|
<stix:Observables cybox_major_version="1" cybox_minor_version="1">
|
|
<cybox:Observable id="example:observable-c8c32b6e-2ea8-51c4-6446-7f5218072f27">
|
|
<cybox:Object id="example:object-d7fcce87-0e98-4537-81bf-1e7ca9ad3734">
|
|
<cybox:Properties xsi:type="AddressObject:AddressObjectType" category="ipv4-addr">
|
|
<AddressObject:Address_Value>198.51.100.2</AddressObject:Address_Value>
|
|
</cybox:Properties>
|
|
</cybox:Object>
|
|
</cybox:Observable>
|
|
<cybox:Observable id="example:observable-b57aa65f-9598-04fb-a9d1-5094c36d5dc4">
|
|
<cybox:Object id="example:object-f4fac80a-1239-47cc-b0e6-771b1a73f817">
|
|
<cybox:Properties xsi:type="AddressObject:AddressObjectType" category="ipv4-addr">
|
|
<AddressObject:Address_Value>198.51.100.17</AddressObject:Address_Value>
|
|
</cybox:Properties>
|
|
</cybox:Object>
|
|
</cybox:Observable>
|
|
<cybox:Observable id="example:observable-19c16346-0eb4-99e2-00bb-4ec3ed174cac">
|
|
<cybox:Object id="example:object-174bf9a3-f163-4919-9119-b52598f97ce3">
|
|
<cybox:Properties xsi:type="AddressObject:AddressObjectType" category="ipv4-addr">
|
|
<AddressObject:Address_Value>203.0.113.19</AddressObject:Address_Value>
|
|
</cybox:Properties>
|
|
</cybox:Object>
|
|
</cybox:Observable>
|
|
</stix:Observables>
|
|
<stix:TTPs>
|
|
<stix:TTP xsi:type="ttp:TTPType" id="example:ttp-dd955e08-16d0-6f08-5064-50d9e7a3104d" timestamp="2014-05-08T09:00:00.000000Z">
|
|
<ttp:Title>Malware C2 Channel</ttp:Title>
|
|
<ttp:Resources>
|
|
<ttp:Infrastructure>
|
|
<ttp:Type>Malware C2</ttp:Type>
|
|
<ttp:Observable_Characterization cybox_major_version="2" cybox_minor_version="1">
|
|
<cybox:Observable idref="example:observable-c8c32b6e-2ea8-51c4-6446-7f5218072f27"/>
|
|
<cybox:Observable idref="example:observable-b57aa65f-9598-04fb-a9d1-5094c36d5dc4"/>
|
|
<cybox:Observable idref="example:observable-19c16346-0eb4-99e2-00bb-4ec3ed174cac"/>
|
|
</ttp:Observable_Characterization>
|
|
</ttp:Infrastructure>
|
|
</ttp:Resources>
|
|
</stix:TTP>
|
|
</stix:TTPs>
|
|
</stix:STIX_Package>
|