{
    "type": "bundle",
    "id": "bundle--a6621e31-6943-4c86-a79e-af8b2bfa1f19",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2023-03-08T12:51:56.363175Z",
            "modified": "2024-08-19T10:06:03.021098Z",
            "name": "Qianxin",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--017a7dce-37d7-472f-80cc-d64713722748",
            "hashes": {
                "MD5": "a8096ddf8758a79fdf68753190c6216a",
                "SHA-1": "5955837b6f888a733e05cbb444279d24f5313ac5",
                "SHA-256": "d91c233b2f1177357387c29d92bd3f29fab7b90760e59a893a0f447ef2cb4715"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--efce9994-e4dc-490f-a888-7f9dcafc8358",
            "hashes": {
                "MD5": "bac54e7199bd85afa5493e36d3f193d2",
                "SHA-1": "428f1ef151ef6b60e345a5cb72204f32c34745b4",
                "SHA-256": "6f7a5f1d52d3bfc6f175bf2bbb665e4bd99b0453e2d2e27712fe9b71c55962dc"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--806125ea-c892-444f-9e89-ef783ab67d5e",
            "value": "https://craypot.live/board.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--21a92486-678d-46d8-958f-343003ab3756",
            "value": "https://crabbedly.club/board.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--22a5f25f-6b7b-4386-949b-99499b0f1021",
            "value": "indagator.club"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a2219f90-f918-4f70-8699-eb2ecde705d9",
            "value": "craypot.live"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--be74511d-602a-4726-a237-29272e98ba1c",
            "value": "crabbedly.club"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e2695e79-81c1-4056-8318-288f3707ebb3",
            "hashes": {
                "MD5": "6850189bbf5191a76761ab20f7c630ef",
                "SHA-1": "b512698ecc9bd603d02e9b6a7e1b7b67ba642a42",
                "SHA-256": "a7ff0dfc2456baa80e6291619e0ca480cc8f071f42845eb8316483e077947339"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b15c0e94-a31d-4ac8-b645-4361a168d923",
            "value": "http://indagator.club/board.php"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-10T12:20:29.51995Z",
            "modified": "2026-10-10T12:20:29.51995Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--ae828c6e-ee32-4d2d-8052-454028c00d72",
            "created_by_ref": "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
            "created": "2026-10-10T12:20:29.520234Z",
            "modified": "2026-10-10T12:20:29.520234Z",
            "name": "\u7591\u4f3cLazarus\u9488\u5bf9\u53cc\u5e73\u53f0\u7684\u653b\u51fb\u6d3b\u52a8\u62ab\u9732",
            "published": "2019-11-04T00:00:00Z",
            "object_refs": [
                "identity--a8d58fde-d21c-496d-a3ff-84409afef5b4",
                "file--017a7dce-37d7-472f-80cc-d64713722748",
                "file--efce9994-e4dc-490f-a888-7f9dcafc8358",
                "url--806125ea-c892-444f-9e89-ef783ab67d5e",
                "url--21a92486-678d-46d8-958f-343003ab3756",
                "domain-name--22a5f25f-6b7b-4386-949b-99499b0f1021",
                "domain-name--a2219f90-f918-4f70-8699-eb2ecde705d9",
                "domain-name--be74511d-602a-4726-a237-29272e98ba1c",
                "file--e2695e79-81c1-4056-8318-288f3707ebb3",
                "url--b15c0e94-a31d-4ac8-b645-4361a168d923",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://ti.qianxin.com/blog/articles/suspected-lazarus-disclosure-of-attacks-on-dual-platforms/"
                }
            ]
        }
    ]
}