RE: [cti-stix] RE: [Non-DoD Source] Re: [cti-stix] Re: [EXT] Re: [cti-stix] Feedback on Malware Object

{
    {
        "type": "malware",
        "id": "malware--1f2b5b88-8ff7-4a4d-aa9d-feb398cd01dc",
        "created": "2016-05-12T08:17:27.000000Z",
        "modified": "2016-05-12T08:17:27.000000Z",
        "version": "1",
        "name": "Sample Malware",
        "description": "...",
        "labels": ["rat"]
    },
    {
        "type": "observed-data",
        "labels":["dynamic-analysis", "windows-10", "word-2016"]
        "id": "observed-data--5211d302-02ac-498a-92f9-518492f123c44",
        "created_by_ref": "identity--f431f809-377b-45e0-aa1c-6a4751cae5ff",
        "created": "2016-04-06T19:58:16Z",
        "modified": "2016-04-06T19:58:16Z",
        "version": 1,
        "first_observed": "2015-12-21T19:00:00Z",
        "last_observed": "2015-12-21T19:00:00Z",
        "number_observed": 1,
        "cybox": {
            "spec_version": "3.0",
            "objects": {
                "0": {
                    "type": "file-object",
                    "hashes": {
                        "SHA-256": "ceafbfd424be2ca4a5f0402cae090dda2fb0526cf521b60b60077c0f622b285a"
                    }
                },
                "1": {
                    "type": "process",
                    "binary_ref": "0",
                    "opened_connection_refs": ["2"],
                    "extensions": {
                        "actions": [
                            {
                                "order": "0",
                                "name": "downloaded",
                                "reference": "4",
                                "using": ["2"]
                            },
                            {
                                "order": "3",
                                "name": "deleted",
                                "reference": "4"
                            }
                        ]
                    }
                },
                "2": {
                    "type": "network-traffic",
                    "dst_ref": "3",
                    "protocols":["tcp"],
                    "extensions": {
                        "http-request-ext": {
                            "request_method": "post",
                            "request_value": "/command",
                            "request_version": "http/1.1",
                            "request_header": {
                                "Accept-Encoding": "gzip,deflate",
                                "User-Agent": "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.6) Gecko/20040113"
                            }
                        }
                    }
                },
                "3": {
                    "type": "ipv4-addr",
                    "value": "1.2.3.4"
                },
                "4": {
                    "type": "file-object",
                    "hashes": {
                        "SHA-256": "0dda2fb052622b285ac6cf521b60b60077c0feafbfd424be2ca4a5f0402cae09"
                    }
                },
                "5": {
                    "type": "process",
                    "binary_ref": "4",
                    "parent_ref": "1",
                    "extensions": {
                        "actions": [
                            {
                                "order": "1",
                                "name": "created",
                                "reference": "4"
                            },
                            {
                                "order": "2",
                                "name": "executed",
                                "reference": "4"
                            }
                        ]
                    }
                },
                "6": {
                    "type": "file-object",
                    "hashes": {
                        "SHA-256": "b60b600770df521c0feafbfd42dae2ca4a5f02fb052622b285ac6cb402cae09"
                    }
                },
                "7": {
                    "type": "windows-registry-key",
                    "key": "HKEY_LOCAL_MACHINE\Software\MalwarePath",
                    "value": "badstuff"
                },
                "8": {
                    "type": "process",
                    "binary_ref": "6",
                    "parent_ref": "1",
                    "extensions": {
                        "actions": [
                            {
                                "order": "4",
                                "name": "used",
                                "reference": "7"
                            }
                        ]
                    }
                }
            }
        }
    },
    {
        "type": "relationship",
        "id": "relationship--a4321b56-b8b0-4cba-9deb-aed34e3e1fa2",
        "created": "2016-05-12T08:17:27.000000Z",
        "modified": "2016-05-12T08:17:27.000000Z",
        "version": 1,
        "relationship_type": "built-from",
        "source_ref": "malware--1f2b5b88-8ff7-4a4d-aa9d-feb398cd01dc",
        "target_ref": "observed-data--5211d302-02ac-498a-92f9-518492f123c44"
    }
}