{
    "type": "bundle",
    "id": "bundle--233af93f-f7f1-4467-bd1f-657de3dd582e",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2023-03-08T12:51:56.363175Z",
            "modified": "2024-08-19T10:06:03.021098Z",
            "name": "Qianxin",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--01607fe7-17f7-48f8-be54-20a5fec7cba1",
            "hashes": {
                "MD5": "fe5520783f715549cc3c4df9deaf89bf",
                "SHA-1": "1808a204ea62b52df9c67f5c665cf34d38783b54",
                "SHA-256": "6a9019404330dc40ab945ec2006b9ff7e8e1b6773faae44a2c6dafdb810cc55b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--dce9fbad-21c7-4e09-863a-3b9c4590dba1",
            "hashes": {
                "MD5": "5776368e1a8483d11f3ee1c383f193c4",
                "SHA-1": "9e6eb6b01f2debd678d97fb22cd8027430680e70",
                "SHA-256": "b9baaae1a3bcdc9c8414a2d78ff53f1125a2ee31e742f3fd45bb6ea67ef71558"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba4f45d7-30ad-47b8-94c7-d6cf8d0ac099",
            "hashes": {
                "MD5": "71dbebb8a31ea3de0115851bb15fd2bc",
                "SHA-1": "914f112d719a7446dab5b009bab47b2203c70e68",
                "SHA-256": "6d3cfa5898cb94f5eab676b1429063d14c3e563e0f2ae6e1ca05e7c4b5d9eb4b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5de57e5c-94ee-418e-b74b-dc32f4f1651d",
            "hashes": {
                "MD5": "c14a66e1a039d2e51cb70adb609df872",
                "SHA-1": "a093b575c29e6c550b9e1cf485a915f4ff746659",
                "SHA-256": "5fa7c84550438bf4d3e4ef8f9098ba03fd80e3c68c5cece084bf7de003eeb18d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7fcdd8a3-8a81-4746-a189-dbfd435cb9cd",
            "hashes": {
                "MD5": "44ba46dfff78bc62a3b2619d308ca40c",
                "SHA-1": "aca1d9bc89897c2f1c3e0b389a8c9e9c8a5ab396",
                "SHA-256": "57c573d19e2b67e78982023a05730982de74a75183f397a79a316a7a9c54c0dc"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2edf02e5-75d0-48af-a713-18319750f0e3",
            "hashes": {
                "MD5": "7504a626993179e5819246234ca6c4c9",
                "SHA-1": "c39f4fd32e88620512ce4b41924dbe3889f5a2d3",
                "SHA-256": "1351b19a424b6a294ac1b7c29034067f73a703962a0bd3d715a0f302bfe66dc9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ca105ae8-0cb1-4140-ae1b-0a1c49023fcb",
            "hashes": {
                "MD5": "1da701990560b8b0db2c4441145a3ee3",
                "SHA-1": "7c0dd220b23d7c0ccee82b5b5ec65771d0320779",
                "SHA-256": "bcd61fa714cac8b38b0264fbcf8299753c854e5e20408504f2afaeb5a7769429"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6f376f09-b528-4c03-9cd0-8c7f11a5df12",
            "hashes": {
                "MD5": "61f4946837d7cd1701eedb3c372121c6",
                "SHA-1": "0a3aaa7e405f120d372acd6fbb37e9cffc1d9055",
                "SHA-256": "3c06e27de64a0e1e1f278ab1e28bba88afb73ad89217dfed01301b5d595e0ee5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--99edc608-cfc4-4e6f-94ea-b759a89f7589",
            "hashes": {
                "MD5": "484bcb44845946e444f05295cf19e98e",
                "SHA-1": "bf011db35d063869796d11ddf79c8d7b07cc1a67",
                "SHA-256": "e6c579edf5ee66dcf16fabc93c41394d226932fc859f74e2525db4fd126d0a82"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--39f0981c-3de1-40c7-a4c3-299d5777e628",
            "hashes": {
                "MD5": "487769a19f032e981f33023b2cb7fe10",
                "SHA-1": "6919dab68dddfeae1d7a247d9938b9aee0846268",
                "SHA-256": "df89db0ec339a5e5109ecced0199c371a859aa0c721275e7556a2f34b33d7b01"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b0670e94-ad5a-43cd-b2cc-33f59ee621b4",
            "hashes": {
                "MD5": "7095811df4cb1ee4135ce605af7f163f",
                "SHA-1": "f7bc384f9de0cd44e6601d84ad15a78193a4d098",
                "SHA-256": "4056772ab9ec106046cc2dfbeed71df92d629e5b612f12775f942c0d3255552d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6813088d-d40f-48dc-bef5-83ec6e1ac5ef",
            "hashes": {
                "MD5": "f93754e660802d7cc70924cceb4738ef"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--07e90446-aef6-45b9-8f89-0bed3ff108d6",
            "hashes": {
                "MD5": "72b3765580c8c8588feccf06f98c090b",
                "SHA-1": "05ef7419387295e08867f0e130c55753adb6464c",
                "SHA-256": "0f0952cba356f9528527599edef4afbd329f2a73eb5e17e0568df05ecb16282c"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c2bf3d7b-b9b4-4e16-9c68-fabc5341df13",
            "value": "https://1drv.ms/i/s!AgK8WVCyy__Je4j8BTLYh4nhY"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--bd4008be-9929-449e-bf50-59d4d2cd7c30",
            "value": "https://1drv.ms/u/s!AtzyIIRGrnBxanU9QmCejeSTM"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--05f0c267-bbdf-482f-a437-cf783f80efab",
            "value": "http://vmi810830.contaboserver.net/local/cache-js/f93754e660802d7cc70924cceb4738ef.gz"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a37845fd-2686-439c-bcd7-e8cd8ad4bc53",
            "value": "https://api.onedrive.com/v1.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL2kvcyFBbURRNTNEY0xNVUVmRjBjTG5uckhOMGVJcmc_ZT14U083alE/root/content"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5b97a7fb-1b90-4537-87ef-5f90719e6846",
            "value": "https://1drv.ms/i/s!AmDQ53DcLMUEfF0cLnnrHN0eI"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--14bc189a-ecde-4cf0-a3f3-22b60998d511",
            "value": "https://api.onedrive.com/v1.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL3UvcyFBdHp5SUlSR3JuQnhhblU5UW1DZWplU1RNZ1U_ZT14SDY0dks/root/content"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f4126c50-d53a-42b8-961f-98c1004641de",
            "value": "https://api.onedrive.com/v1.0/shares/u!aHR0cHM6Ly8xZHJ2Lm1zL2kvcyFBZ0s4V1ZDeXlfX0plNGo4QlRMWWg0bmhZazA_ZT1vMHI1QmQ/root/content"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3f74a426-3ede-4781-8d2e-df786c535362",
            "value": "vmi810830.contaboserver.net"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--50e193fd-17c0-4861-879b-3c11023611b1",
            "hashes": {
                "MD5": "74e3d84492845067a0da6cfa00c064eb",
                "SHA-1": "4cab47f6624b46269585517f80705dda2455cf36",
                "SHA-256": "f17ade8c0251c018ab291aa79c9837799ce654418088466933d45cd216fa8948"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--af0df018-b500-4190-acaa-b08de381fe62",
            "hashes": {
                "MD5": "02685c2ffc30c55667076cfb01033060",
                "SHA-1": "b62f2cac76ed5c2f4022835213b9529b33fe0fdb",
                "SHA-256": "bcfb79ae18a05f190bb0805dd39502f227aa23aed698f3bba7216a564980e537"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--68198b2b-402e-4509-bdcd-2dde9dd44d29",
            "hashes": {
                "MD5": "445e7fd6bb684420d6b8523fe0c55228",
                "SHA-1": "cc617514c27405250b17aeeef3cdea4a2fe80cac",
                "SHA-256": "2d381a0156d8b0468d10dfd347b32cf10f97026e248ccd95edbcd28030ade4d4"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--d140508f-2dbe-5e4a-b332-91b47b0bfa48",
            "created": "2026-10-11T03:26:26.240842Z",
            "modified": "2026-10-11T03:26:26.240842Z",
            "name": "Group123"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--c7b331c8-51b8-5035-9958-b437a5cebff9",
            "created": "2026-10-11T03:26:26.241957Z",
            "modified": "2026-10-11T03:26:26.241957Z",
            "name": "APT-Q-3"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a46168a1-7af7-4e8f-80b3-9409253ef741",
            "created_by_ref": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2026-10-11T03:26:26.242234Z",
            "modified": "2026-10-11T03:26:26.242234Z",
            "name": "\u4e91\u4e2d\u8c0d\u5f71\uff1aGroup123\u7ec4\u7ec7\u8fd1\u671f\u653b\u51fb\u6d3b\u52a8\u5206\u6790",
            "published": "2023-07-11T00:00:00Z",
            "object_refs": [
                "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
                "file--01607fe7-17f7-48f8-be54-20a5fec7cba1",
                "file--dce9fbad-21c7-4e09-863a-3b9c4590dba1",
                "file--ba4f45d7-30ad-47b8-94c7-d6cf8d0ac099",
                "file--5de57e5c-94ee-418e-b74b-dc32f4f1651d",
                "file--7fcdd8a3-8a81-4746-a189-dbfd435cb9cd",
                "file--2edf02e5-75d0-48af-a713-18319750f0e3",
                "file--ca105ae8-0cb1-4140-ae1b-0a1c49023fcb",
                "file--6f376f09-b528-4c03-9cd0-8c7f11a5df12",
                "file--99edc608-cfc4-4e6f-94ea-b759a89f7589",
                "file--39f0981c-3de1-40c7-a4c3-299d5777e628",
                "file--b0670e94-ad5a-43cd-b2cc-33f59ee621b4",
                "file--6813088d-d40f-48dc-bef5-83ec6e1ac5ef",
                "file--07e90446-aef6-45b9-8f89-0bed3ff108d6",
                "url--c2bf3d7b-b9b4-4e16-9c68-fabc5341df13",
                "url--bd4008be-9929-449e-bf50-59d4d2cd7c30",
                "url--05f0c267-bbdf-482f-a437-cf783f80efab",
                "url--a37845fd-2686-439c-bcd7-e8cd8ad4bc53",
                "url--5b97a7fb-1b90-4537-87ef-5f90719e6846",
                "url--14bc189a-ecde-4cf0-a3f3-22b60998d511",
                "url--f4126c50-d53a-42b8-961f-98c1004641de",
                "domain-name--3f74a426-3ede-4781-8d2e-df786c535362",
                "file--50e193fd-17c0-4861-879b-3c11023611b1",
                "file--af0df018-b500-4190-acaa-b08de381fe62",
                "file--68198b2b-402e-4509-bdcd-2dde9dd44d29",
                "threat-actor--d140508f-2dbe-5e4a-b332-91b47b0bfa48",
                "threat-actor--c7b331c8-51b8-5035-9958-b437a5cebff9"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://ti.qianxin.com/blog/articles/Cloud-Spy-Analysis-of-Recent-Attack-Activities-by-Group123-CN/"
                }
            ]
        }
    ]
}