Malware Characterization w/ MAEC - TLO

example.json

{
    "type": "package",
    "spec_version": "stix-2.0",
    "objects": [
        {
            "id": "object--1",
            "type": "file-object",
            "hashes": {"md5": "C37D819D0C4C16865E9519478897D5D4"}
        },
        {
            "id": "object--2",
            "type": "file-object",
            "hashes": {"md5": "B4D33B0C7306351B9ED96578465C5579"}
        }
    ],
    "ttps": [{
        "id": "malware--1",
        "type": "malware",
        "maec": {
            "spec_version": "maec-5.0",
            "malware_subjects": [{
                "id": "subject--1",
                "type": "malware-subject",
                "instance_object_ref": "object--1"
            }],
            "actions": [{
                "id": "action--1",
                "type": "malware-action",
                "name": "create file",
                "associated_objects": [{
                    "object_ref": "object--2",
                    "assocation_type": "output"
                }]
            }]
        }
    }]
}