From 88bf99bdb138616833ce3e57ec7bbe0039873bc2 Mon Sep 17 00:00:00 2001
From: Rich Piazza <rpiazza@mitre.org>
Date: Fri, 6 Dec 2024 12:09:29 -0500
Subject: [PATCH] really fix malware behavior

---
 .../malware-behavior-8e9/malware-behavior.json                | 4 ++--
 .../malware-behavior-8e9/malware-extension.json               | 2 +-
 .../malware-behavior-8e9/malware-method.json                  | 2 +-
 .../malware-behavior-8e9/malware-objective.json               | 2 +-
 .../malware-behavior-8e9/object-definition.json               | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/extension-definition-specifications/malware-behavior-8e9/malware-behavior.json b/extension-definition-specifications/malware-behavior-8e9/malware-behavior.json
index 2940ec81091..e147a943681 100644
--- a/extension-definition-specifications/malware-behavior-8e9/malware-behavior.json
+++ b/extension-definition-specifications/malware-behavior-8e9/malware-behavior.json
@@ -1,6 +1,6 @@
 {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
-    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/malware-behavior.json",
+    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior-8e9/malware-behavior.json",
     "title": "malware-behavior",
     "description": "malware-behavior SDO",
     "type": "object",
@@ -26,7 +26,7 @@
 		    "description": "The name of the behavior (e.g., Request Email Address List)."
 		},
 		"obj_defn": {
-		    "$ref": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/object-definition.json"
+		    "$ref": "object-definition.json"
 		},
 		"obj_version": {
 		    "type": "string",
diff --git a/extension-definition-specifications/malware-behavior-8e9/malware-extension.json b/extension-definition-specifications/malware-behavior-8e9/malware-extension.json
index c16049743c9..df9f3b97b52 100644
--- a/extension-definition-specifications/malware-behavior-8e9/malware-extension.json
+++ b/extension-definition-specifications/malware-behavior-8e9/malware-extension.json
@@ -1,6 +1,6 @@
 {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
-    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/malware-extension.json",
+    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior-8e9/malware-extension.json",
     "title": "Malware extension for Malware Behavior",
     "description": "Extension to the malware object to support Malware Behavior",
     "allOf:": [
diff --git a/extension-definition-specifications/malware-behavior-8e9/malware-method.json b/extension-definition-specifications/malware-behavior-8e9/malware-method.json
index b8153b081a2..9f7e0b6164b 100644
--- a/extension-definition-specifications/malware-behavior-8e9/malware-method.json
+++ b/extension-definition-specifications/malware-behavior-8e9/malware-method.json
@@ -1,6 +1,6 @@
 {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
-    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/malware-method.json",
+    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior-8e9/malware-method.json",
     "title": "malware-method",
     "description": "malware-method SDO",
     "allOf": [
diff --git a/extension-definition-specifications/malware-behavior-8e9/malware-objective.json b/extension-definition-specifications/malware-behavior-8e9/malware-objective.json
index 70f0131a3b7..921e1296ade 100644
--- a/extension-definition-specifications/malware-behavior-8e9/malware-objective.json
+++ b/extension-definition-specifications/malware-behavior-8e9/malware-objective.json
@@ -1,6 +1,6 @@
 {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
-    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/malware-objective.json",
+    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior-8e9/malware-objective.json",
     "title": "malware-objective",
     "description": "malware-objective SDO",
     "allOf": [
diff --git a/extension-definition-specifications/malware-behavior-8e9/object-definition.json b/extension-definition-specifications/malware-behavior-8e9/object-definition.json
index 0583307c834..f8b9876a2e4 100644
--- a/extension-definition-specifications/malware-behavior-8e9/object-definition.json
+++ b/extension-definition-specifications/malware-behavior-8e9/object-definition.json
@@ -1,6 +1,6 @@
 {
     "$schema": "https://json-schema.org/draft/2020-12/schema",
-    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior/object-definition.json",
+    "$id": "https://raw.githubusercontent.com/oasis-open/cti-stix-common-objects/main/extension-definition-specifications/malware-behavior-8e9/object-definition.json",
     "title": "object-definition",
     "properties": {
 	"source_name": {