{
    "type": "bundle",
    "id": "bundle--c2dbd32e-c8d0-4453-ab8f-2b1290ac36f2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2023-05-23T01:10:41.336415Z",
            "modified": "2024-09-11T13:26:42.312985Z",
            "name": "Genians",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
            "value": "n-e.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0da43df7-263b-4f2b-81bc-836437b6387a",
            "value": "185.27.134.140"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
            "value": "p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
            "value": "o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--48e8c148-35bc-46c5-a48d-02ed372051e0",
            "value": "internet.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d917f629-53d4-421c-83fb-b743e1c5d6bc",
            "value": "inbox.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
            "value": "r-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d29d61e3-cc95-46c4-ad4b-a0fd890cf961",
            "hashes": {
                "MD5": "d8249f33e07479ce9c0e44be73d3deac",
                "SHA-1": "44b072d3948f06cdc0be573aa62ce3ca0b80da1e",
                "SHA-256": "23c18fe6675b4dad5e1354718fa9bbb096ded4293948d318d0057b51642c4cbb"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d886facc-9741-4bc9-be00-86baa2eb422c",
            "hashes": {
                "MD5": "6ead104743be6575e767986a71cf4bd9",
                "SHA-1": "aabaea027236e8605f4b89e3d9e2206993398af2",
                "SHA-256": "d1b5d606c866c304c3eb28fc52ed700c6b292e6e4387e0dac1a895e231bfe5b3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6fc9e59e-fbea-49a1-af53-309ae52550a3",
            "hashes": {
                "MD5": "a75196b7629e3af03056c75af37f37cf",
                "SHA-1": "9837e850f9800cff7d4fd26a2d9ccbaa1960d50b",
                "SHA-256": "327426b389a87fb41c5150f18c8a3b1b5c671eb08107a3a6917baea3db686555"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0fb605fb-6583-4bb3-adf0-f001a890dddd",
            "hashes": {
                "MD5": "b591cbd3f585dbb1b55f243d5a5982bc",
                "SHA-1": "41bff8875d1f83b3af52b65cb7ce8ebca0e30bfd",
                "SHA-256": "0dc17133b9d54b8d38f5a4f4c49eb0cee7ff2c80b1ea614fb59ca49c3721440b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e775d678-8bbe-4694-9135-e3d8f9541f56",
            "hashes": {
                "MD5": "3cd67d99bcc8f3b959c255c9e8702e9f",
                "SHA-1": "7bb3e2671b8ad6e2e1ffb9e8b022dfd677fdd31a",
                "SHA-256": "9255280904f85d01545d295a31038678d697325385be6c7c01435d541f16b043"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d937900c-4276-47a9-a054-7c3d80e92f0f",
            "hashes": {
                "MD5": "0def51118a28987a929ba26c7413da29",
                "SHA-1": "76ed57d6451f634255c664a89f7a64a062923c05",
                "SHA-256": "63c45dd760256bb2bee1eeb9e7d61601c90a752ff46832df39ca1a8d2376b281"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3c7126d4-eb47-48ba-890a-2a0016de70b8",
            "hashes": {
                "MD5": "adb30d4dd9e1bbe82392b4c01f561e46",
                "SHA-1": "84c2e2d5d61ed9148a0057e951fdea641901874d",
                "SHA-256": "f408dee7fa76179d826885c5c6f38acbcc11f3e3abba1f1f58068cdf833b4317"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a9216809-c777-40aa-9f01-0cecb515adc4",
            "hashes": {
                "MD5": "a6588c10d9c4c2b3837cd7ce6c43f72e",
                "SHA-1": "598b8a9b7bb134bdbf34503e109ec66a18dbbfa9",
                "SHA-256": "aead266f97c936799f4d5f526482d41f74daf86f8fcf49976eecbc6260b59274"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3cdef208-c57d-471b-8f25-0e57c3dd189b",
            "hashes": {
                "MD5": "ab75a54c3d6ed01ba9478d9fecd443af",
                "SHA-1": "dd6bbd76378fce03e2b72c904832e576d4576354",
                "SHA-256": "bf838c2e46696f79964709e29880604d7172f2a3ab0f3f41d7ff8216f053c557"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5a1e550-8fcc-404c-a614-2bf2b8707167",
            "hashes": {
                "MD5": "658a8856d48aabc0ecfeb685d836621b",
                "SHA-1": "f8542e5567741c95a966cd1508c6d11ad0763440",
                "SHA-256": "3b2701a7d49a8d6002a2a202bac9b18b4bc917009da01591ab5b66f183f9c8e9"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--75edc7d5-cea0-401f-ab33-cb44f51dd442",
            "hashes": {
                "MD5": "aa41e4883a9c5c91cdab225a0e82d86a",
                "SHA-1": "9534d277d796890affadb3d3861d22a61bfdbbdd",
                "SHA-256": "ac4f6bdd6d4ef009f1108c4c8a3d58e0a19d4f73b239202dd601b0aeba5ceb54"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--53e1b4de-7b78-4440-9cfb-4d44d2290e40",
            "hashes": {
                "MD5": "2ff911b042e5d94dd78f744109851326",
                "SHA-1": "08620755dabc0983eaf1320ac4c71d90b56ff1bb",
                "SHA-256": "82286cf6369eddd2e79d005a435623abe2db642c216d38550411865acf84210e"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bdf10757-1772-4c1a-90cc-2383b8677a4f",
            "value": "ncloud.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ea366899-2622-4c26-ae70-790fb4eba9d3",
            "value": "mmbox.ru"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2a8b622b-a771-4a88-b322-09a1169a0bcf",
            "value": "185.27.134.144"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--62b1e399-8504-40c1-99d0-ce0a350c21f2",
            "value": "185.27.134.201"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6f2c42e7-7fdb-4687-b510-14fc012d25d1",
            "value": "185.27.134.93"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b1c83147-4e7e-4d11-8648-b7a065e21d48",
            "value": "185.105.33.106"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a6e118b3-6f0e-4840-a29b-11aa1f3912cb",
            "value": "185.27.134.120"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--427e0f4b-3180-4dac-99e8-e27537b03da0",
            "value": "https://evangelia.edu/image/bin/Rjboi0.hta"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7018c39f-69ab-4e3b-9984-8c2b1e3dba27",
            "value": "wud.wuaze.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0f18763c-49bc-4f13-aa01-af9557b5ad3b",
            "value": "biglobe.ne.jp"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--07e5b7bb-50f4-4da2-adeb-efe1e5c349b9",
            "value": "covd.2kool4u.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--16e3b93d-19fd-4cfa-92d4-e1fff7a2e733",
            "value": "owna.loveslife.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3df94875-9d8a-48b0-baf1-d9b776ea9aab",
            "value": "ned.kesug.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ee39a63c-818d-4bcf-b74d-662bcda6383c",
            "value": "nidiogln.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--66a78cdb-33da-4522-89be-b6666c5ded5a",
            "value": "cookiemanager.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9b4ff457-4217-406f-b0ec-768f41eb2615",
            "value": "naverbox.p-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f306aa69-f25a-4ab1-b712-69efb9e50889",
            "hashes": {
                "MD5": "7ca1a603a7440f1031c666afbe44afc8",
                "SHA-1": "e12d0655cc09cddb4fb836c641f73179d4bc1121",
                "SHA-256": "9c6f6db86b5ccdda884369c9c52dd8568733e126e6fe9c2350707bb6d59744a1"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-19T09:11:35.542185Z",
            "modified": "2026-09-19T09:11:35.542185Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f7a80e0d-25e6-4c4b-ad02-1cc87a478894",
            "created_by_ref": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2026-09-19T09:11:35.543059Z",
            "modified": "2026-09-19T09:11:35.543059Z",
            "name": "\uc704\ud611 \ud589\uc704\uc790 \uae40\uc218\ud0a4\uc758 \uc774\uba54\uc77c \ud53c\uc2f1 \ucea0\ud398\uc778 \ubd84\uc11d",
            "published": "2024-12-02T00:00:00Z",
            "object_refs": [
                "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
                "domain-name--2f68aa74-9e4f-458c-9fa4-ebb70c088a23",
                "ipv4-addr--0da43df7-263b-4f2b-81bc-836437b6387a",
                "domain-name--a73a3f63-5466-45e4-a6e4-aaf33f968e95",
                "domain-name--017fa299-6c80-47b9-aee0-2964427a8c43",
                "domain-name--48e8c148-35bc-46c5-a48d-02ed372051e0",
                "domain-name--d917f629-53d4-421c-83fb-b743e1c5d6bc",
                "domain-name--cb709de6-361c-440f-b1ce-ab4d788f910e",
                "file--d29d61e3-cc95-46c4-ad4b-a0fd890cf961",
                "file--d886facc-9741-4bc9-be00-86baa2eb422c",
                "file--6fc9e59e-fbea-49a1-af53-309ae52550a3",
                "file--0fb605fb-6583-4bb3-adf0-f001a890dddd",
                "file--e775d678-8bbe-4694-9135-e3d8f9541f56",
                "file--d937900c-4276-47a9-a054-7c3d80e92f0f",
                "file--3c7126d4-eb47-48ba-890a-2a0016de70b8",
                "file--a9216809-c777-40aa-9f01-0cecb515adc4",
                "file--3cdef208-c57d-471b-8f25-0e57c3dd189b",
                "file--a5a1e550-8fcc-404c-a614-2bf2b8707167",
                "file--75edc7d5-cea0-401f-ab33-cb44f51dd442",
                "file--53e1b4de-7b78-4440-9cfb-4d44d2290e40",
                "domain-name--bdf10757-1772-4c1a-90cc-2383b8677a4f",
                "domain-name--ea366899-2622-4c26-ae70-790fb4eba9d3",
                "ipv4-addr--2a8b622b-a771-4a88-b322-09a1169a0bcf",
                "ipv4-addr--62b1e399-8504-40c1-99d0-ce0a350c21f2",
                "ipv4-addr--6f2c42e7-7fdb-4687-b510-14fc012d25d1",
                "ipv4-addr--b1c83147-4e7e-4d11-8648-b7a065e21d48",
                "ipv4-addr--a6e118b3-6f0e-4840-a29b-11aa1f3912cb",
                "url--427e0f4b-3180-4dac-99e8-e27537b03da0",
                "domain-name--7018c39f-69ab-4e3b-9984-8c2b1e3dba27",
                "domain-name--0f18763c-49bc-4f13-aa01-af9557b5ad3b",
                "domain-name--07e5b7bb-50f4-4da2-adeb-efe1e5c349b9",
                "domain-name--16e3b93d-19fd-4cfa-92d4-e1fff7a2e733",
                "domain-name--3df94875-9d8a-48b0-baf1-d9b776ea9aab",
                "domain-name--ee39a63c-818d-4bcf-b74d-662bcda6383c",
                "domain-name--66a78cdb-33da-4522-89be-b6666c5ded5a",
                "domain-name--9b4ff457-4217-406f-b0ec-768f41eb2615",
                "file--f306aa69-f25a-4ab1-b712-69efb9e50889",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.genians.co.kr/blog/threat_intelligence/kimsuky-cases"
                }
            ]
        }
    ]
}