Description

When a user manually ingests a STIX bundle containing a file SCO and a Malware SDO with a sample_refs property containing the STIX ID of the file SCO, a "sample" relationship is not created between the file SCO and Malware SDO.

Environment

1. OS version: CENTOS 7.9
2. OpenCTI version: 5.12.32
3. OpenCTI client: frontend

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. Manually ingests a STIX bundle containing a file SCO and a Malware SDO with a sample_refs property containing the STIX ID of the file SCO.

Expected Output

A "sample" relationship should be created between the file SCO and Malware SDO.

Actual Output

No relationship is created

Workaround

No work around.