{
  "Event": {
    "analysis": "1",
    "date": "2026-04-21",
    "extends_uuid": "b7096c88-3e38-4881-852e-758e35bfd750",
    "info": "[Threat Intel] GhostCargo, a 5-years campaign",
    "protected": false,
    "publish_timestamp": "1779545681",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1777630162",
    "uuid": "9c16b2b8-dd25-4533-958e-97d8d1c92cca",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#120044",
        "local": false,
        "name": "rectifyq:sub-category=\"intrusion-analysis\"",
        "relationship_type": ""
      },
      {
        "colour": "#f1dfed",
        "local": false,
        "name": "rectifyq:TA-category=\"Cybercrime\"",
        "relationship_type": ""
      },
      {
        "colour": "#d92121",
        "local": false,
        "name": "rectifyq:target=\"targeted\"",
        "relationship_type": ""
      },
      {
        "colour": "#dd2e44",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Phishing\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Fake Website\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Distraction\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Scam\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Merchant Fraud\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:financial-fraud=\"Compromised Personally Identifiable Information (PII)\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:target-information=\"Malaysia\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:country=\"indonesia\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:country=\"venezuela\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:country=\"australia\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:online-service=\"b0c71d51-34fd-47b5-9eb4-dd406ffc607f\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:online-service=\"01031d3f-c9c9-4288-bb58-234c38e4246e\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Financial Theft - T1657\"",
        "relationship_type": ""
      },
      {
        "colour": "#2e58ce",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Input Capture - T1056\"",
        "relationship_type": ""
      },
      {
        "colour": "#5884a7",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Malicious Link - T1204.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#75ec20",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Masquerading - T1036\"",
        "relationship_type": ""
      },
      {
        "colour": "#b07a0b",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Search Open Websites/Domains - T1593\"",
        "relationship_type": ""
      },
      {
        "colour": "#c202a1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Spearphishing Link - T1566.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777198527",
        "to_ids": false,
        "type": "link",
        "uuid": "389ee9e6-bdc4-4c90-9e51-b40ce544a902",
        "value": "https://www.syntx.com.my/blog/ghostcargo-a-5-years-campaign"
      },
      {
        "category": "Network activity",
        "comment": "Active fake Barclays portal",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201632",
        "to_ids": true,
        "type": "hostname",
        "uuid": "ce44bc21-6abd-4f9c-878a-755247f5062a",
        "value": "bnk.ing-boa.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Parent domain; wildcard cert *.ing-boa[.]pro issued Feb 2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201653",
        "to_ids": true,
        "type": "domain",
        "uuid": "00a2b7f2-dcc7-42b2-9b5c-8a32293bcaae",
        "value": "ing-boa.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake logistics front (Drupal + transpix theme)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201674",
        "to_ids": true,
        "type": "domain",
        "uuid": "a4cfd28a-93fb-4284-b350-1e6785f599f8",
        "value": "jetexpressdeliveries.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Predecessor Barclays portal (Jun 2024 to May 2025, now NXDOMAIN)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201695",
        "to_ids": true,
        "type": "hostname",
        "uuid": "1a3e17ea-fd26-4986-861b-3118101b313b",
        "value": "barcl.ays-uk.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Parent of predecessor; same Hostinger IP",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201716",
        "to_ids": true,
        "type": "domain",
        "uuid": "6e7ecaa6-4c25-495c-b9b5-4fd23b4abf84",
        "value": "ays-uk.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Predecessor bank portal (Feb 2023, now NXDOMAIN)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201738",
        "to_ids": true,
        "type": "hostname",
        "uuid": "745c7aea-bf6f-4490-8197-cd38bd12b5f5",
        "value": "ban.king-en.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Parent domain; wildcard cert from Dec 2020",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201759",
        "to_ids": true,
        "type": "domain",
        "uuid": "699442ce-027c-42ee-bc27-63ba9b567913",
        "value": "king-en.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Predecessor delivery domain (Sep 2020, HTTrack source)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201780",
        "to_ids": true,
        "type": "domain",
        "uuid": "4a3d1e7b-5715-4874-9301-479ad56c1260",
        "value": "topexpresdelivery.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Predecessor tracking page template (Feb 2023)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201801",
        "to_ids": true,
        "type": "domain",
        "uuid": "5dc8da78-1030-46c2-b530-4c405ddecd76",
        "value": "doorcargoexpress.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Same-Actor Domain - Fake delivery; same NS, IP, registrar",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777206581",
        "to_ids": true,
        "type": "domain",
        "uuid": "4fdea12c-7c27-4d7f-bd1c-5ac647645f82",
        "value": "ermontexpressdelivery.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Same-Actor Domain - Fake delivery; same NS, IP, registrar",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201843",
        "to_ids": true,
        "type": "domain",
        "uuid": "28b7a03a-0039-46fb-9a43-51bab110fdcd",
        "value": "fastlinkquickdelivery.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Same-Actor Domain - Fake bank; confirmed Bankpro default deployment, .pro TLD match",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201865",
        "to_ids": true,
        "type": "domain",
        "uuid": "5d52aaa5-146a-4794-88c1-ba064165863d",
        "value": "firstcredituni.pro",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake credit union",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201886",
        "to_ids": true,
        "type": "domain",
        "uuid": "a8d07b98-9d85-4c84-999c-227948cc526b",
        "value": "suntrustcomunityfcu.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake credit institution",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201907",
        "to_ids": true,
        "type": "domain",
        "uuid": "2f0a6646-31a7-435b-a476-f7f1fe55328c",
        "value": "cresttcredit.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake bank",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201928",
        "to_ids": true,
        "type": "domain",
        "uuid": "756d6f9c-8359-4744-b70c-8dcb040fca2d",
        "value": "trusteqbank.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake credit",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201949",
        "to_ids": true,
        "type": "domain",
        "uuid": "88d001a0-d934-406a-9cb8-bfa87738a5ec",
        "value": "metropolis-credit.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake financial institution",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201970",
        "to_ids": true,
        "type": "domain",
        "uuid": "b5994efa-2eef-433a-9922-0d8a366e68be",
        "value": "finestostandard.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake trading platform",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777201992",
        "to_ids": true,
        "type": "domain",
        "uuid": "97a8e0ce-8dce-4135-b567-1e5aa4b4ba65",
        "value": "digitaltradechainpro.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake trading",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202013",
        "to_ids": true,
        "type": "domain",
        "uuid": "04128a7d-db01-43bc-a681-e6f606e5e76f",
        "value": "expert-traders.net",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Coinbase impersonation / crypto scam",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202034",
        "to_ids": true,
        "type": "domain",
        "uuid": "2b224a83-cbcf-4fa9-913c-abaf2c6fdf41",
        "value": "coinbaseminingfarm.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake charity / investment",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202056",
        "to_ids": true,
        "type": "domain",
        "uuid": "ffad6ae5-f203-4734-8712-8a4817cc4077",
        "value": "greenfund.live",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake charity",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202077",
        "to_ids": true,
        "type": "domain",
        "uuid": "8a83fe9e-1d73-4b60-ac27-f9934303081e",
        "value": "futurezioncharity.org",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake transaction service",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202098",
        "to_ids": true,
        "type": "domain",
        "uuid": "0a874790-2850-4f83-8a47-c4f462b95bd1",
        "value": "daltevintransact.online",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake transaction service",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202120",
        "to_ids": true,
        "type": "domain",
        "uuid": "eb802dbc-878b-4777-a2a4-46fac923cf40",
        "value": "zeltextransact.click",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake Hilton access / global services",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202141",
        "to_ids": true,
        "type": "domain",
        "uuid": "654eba0c-779c-4e40-817a-42283c000f3f",
        "value": "hiltonacessglobal.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake transit / logistics",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202162",
        "to_ids": true,
        "type": "domain",
        "uuid": "faf0bed5-5c0c-42f6-a8e4-ee57f1d530f2",
        "value": "zenixtransit.online",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake school with finance admin portal",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202183",
        "to_ids": true,
        "type": "domain",
        "uuid": "562567f8-573c-4d91-b484-43b7d236ea1c",
        "value": "royalgatesschools.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Fake banking (Cloudflare NS, same IP)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202204",
        "to_ids": true,
        "type": "domain",
        "uuid": "855fc700-8c56-4450-87d9-4e3928bdb931",
        "value": "credixrise.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Primary hosting IP (FranTech AS53667, Cheyenne WY)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202226",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "8d66a8e9-c069-4228-9a51-87162dce2d69",
        "value": "198.251.89.82",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "barcl.ays-uk[.]com hosting IP (Hostinger, Paris)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202247",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "93e43711-7752-47a0-9e4f-12b55a81db9d",
        "value": "91.108.101.78",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "jetexpressdeliveries[.]com hosting IP (Hostinger)",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202268",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "cc00272a-144c-4514-84eb-c2bdc6707a39",
        "value": "46.202.172.167",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Hosted on same IP as scam domains",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202289",
        "to_ids": true,
        "type": "hostname",
        "uuid": "9eeb1289-f9ea-4b7f-a34f-04237baae9c5",
        "value": "ns115.my-control-panel.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "Hosted on same IP as scam domains",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202310",
        "to_ids": true,
        "type": "hostname",
        "uuid": "1faa9f51-f86b-441a-98ca-d63d16fa249f",
        "value": "ns116.my-control-panel.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "unrelated sites",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202331",
        "to_ids": true,
        "type": "domain",
        "uuid": "0565074e-001c-47e0-9c1c-8f5474944347",
        "value": "zentroid.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "unrelated sites",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777202353",
        "to_ids": true,
        "type": "domain",
        "uuid": "55478ef2-1800-4ba8-98d9-ed64e8160b7a",
        "value": "ultraviewvault.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Payload delivery",
        "comment": "Operator contact",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777198771",
        "to_ids": true,
        "type": "email-src",
        "uuid": "a32e1b8c-3483-4506-a25d-bdd66bb5b4ef",
        "value": "admin@ing-boa.pro"
      },
      {
        "category": "Payload delivery",
        "comment": "Contact email on firstcredituni[.]pro",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777198771",
        "to_ids": true,
        "type": "email-src",
        "uuid": "720d7144-e85d-4d4f-8c30-f88f33bdba2a",
        "value": "support@indigenousservice.com"
      },
      {
        "category": "Payload delivery",
        "comment": "Bankpro kit default admin login",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777198788",
        "to_ids": true,
        "type": "email-src",
        "uuid": "7aaab8ef-1163-4698-8874-531776bcf75c",
        "value": "support@dirtyscripts.shop"
      },
      {
        "category": "Network activity",
        "comment": "FranTech (PONYNET) AS53667, \u201cbulletproof hosting\u201d",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1777603855",
        "to_ids": false,
        "type": "AS",
        "uuid": "e19d8970-0283-4089-bd9d-9eb51618a8f0",
        "value": "53667"
      }
    ],
    "Object": [
      {
        "comment": "",
        "deleted": false,
        "description": "Monetary Impact object as described in STIX 2.1 Incident object extension.",
        "meta-category": "misc",
        "name": "monetary-impact",
        "template_uuid": "3376296c-c1ef-4847-979f-2bfc49aa983e",
        "template_version": "1",
        "timestamp": "1777201022",
        "uuid": "09c84cb8-5812-4144-886b-771128abc9b0",
        "Attribute": [
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "currency",
            "timestamp": "1777201022",
            "to_ids": false,
            "type": "text",
            "uuid": "9e5d18f9-d694-4ba0-87c2-2e65433febb0",
            "value": "MYR"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": false,
            "object_relation": "min_amount",
            "timestamp": "1777201022",
            "to_ids": false,
            "type": "float",
            "uuid": "6a33ac46-7d0b-49b2-9c80-9356b53d9987",
            "value": "50000"
          },
          {
            "category": "Other",
            "comment": "",
            "deleted": false,
            "disable_correlation": true,
            "object_relation": "variety",
            "timestamp": "1777201022",
            "to_ids": false,
            "type": "text",
            "uuid": "c9622fed-b74f-408f-bb7d-c03251170a25",
            "value": "asset-and-fraud"
          }
        ]
      }
    ]
  }
}