{
    "type": "bundle",
    "id": "bundle--4d79c5ce-9a19-434c-bfd1-23a6336f09e5",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2023-03-08T12:51:41.953788Z",
            "modified": "2023-03-08T13:24:48.498141Z",
            "name": "ESTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5a526275-4903-4a91-88df-cbb024c0ec46",
            "hashes": {
                "MD5": "a7c804b62ae93d708478949f498342f9",
                "SHA-1": "09db826a7b6dbb16e2d7b3046e0da9fe7342f00f",
                "SHA-256": "3ff4ebae6c255d4ae6b747a77f2821f2b619825c7789c7ee5338da5ecb375395"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--96884720-f7ec-41e9-b437-f38da6fa21e5",
            "hashes": {
                "MD5": "e904bf93403c0fb08b9683a9e858c73e",
                "SHA-1": "8397c1e1f0b9d53a114850f6b3ae8c1f2b2d1590",
                "SHA-256": "4c2efe2f1253b94f16a1cab032f36c7883e4f6c8d9fc17d0ee553b5afb16330c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a3f87cca-8bfa-43e3-aebe-832bb2f3a0f0",
            "hashes": {
                "MD5": "7706d38718707a73dce032f79eea43ef",
                "SHA-1": "b6e4f9f7a9dd522a5744dfe8d7a60246be8c73bd",
                "SHA-256": "0060119ae5803a7fbdc8f246d8955ac3e11e8fc19f6a5e57bb4e921bb3635ac7"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--273ae2a4-34b5-4d45-a308-32196b5fdee5",
            "hashes": {
                "MD5": "5c35360d28082e6e32d3e8ee347843fb",
                "SHA-1": "e93734b3c4a7f62ec5f7ba72f00637377979f549",
                "SHA-256": "4a9429b35daa56d58988c300f8be63959b159ce894a3615b42bc4068d63448f6"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e386e6dc-1cb1-4ed9-bb1e-e0a88dc8245e",
            "hashes": {
                "MD5": "a7328fb36af985bcae0ed4ec7fa75659",
                "SHA-1": "8c5ff740903d6a92b9fc663525d97137c116a649",
                "SHA-256": "f416f695895f37b598a487cf247295d3d95d6f5bb9f86b7c5884a6abbcaa8c7f"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--71ab0469-fa3a-4397-a302-ee727da2d354",
            "value": "bizforms.co.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--98cac380-b259-4e27-a2ce-67a0d4395795",
            "value": "104.221.134.28"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--21ce8143-db3e-42fc-b3ab-c97ccff02f2e",
            "value": "104.195.1.39"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--76ab0e07-0828-4643-841d-aad1c48a9adb",
            "value": "104.31.74.89"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--70c3fbda-02b4-4a01-80c1-335ff130bd8f",
            "value": "https://tpddata.com/flash/gcoin2.swf"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--688023f8-3b6a-44f8-ad63-c2b00c7aa513",
            "value": "https://tpddata.com/flash/gcoin4.swf"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--afd6508d-7c62-4bac-911e-079363eb6ecb",
            "value": "tpddata.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fdda567d-8712-443e-bcdb-64b8b59d3afb",
            "hashes": {
                "MD5": "fa6ee9e969df5ca4524daa77c172a1a7",
                "SHA-1": "af633f81e3b251395799077283252045a3e0fc80",
                "SHA-256": "5831e614d79f3259fd48cfd5cd3c7e8e2c00491107d2c7d327970945afcb577d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e940af9e-c6f2-4a62-b39a-6c4aeb3ed62f",
            "hashes": {
                "MD5": "78e8c150481107d7a5ed99e7e420fd24",
                "SHA-1": "1bd667fe6578bd26c82cc14067361af7b603f751",
                "SHA-256": "0cb8ec97795066ecf77d92a5dbce7d396147adc6e8cd5a794a50632200cdc11d"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-10-09T10:46:44.116527Z",
            "modified": "2026-10-09T10:46:44.116527Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d940ecd1-de9b-40c0-a7f7-f1986f7f0cff",
            "created_by_ref": "identity--16fdc541-545e-40c4-9896-0b4354ada896",
            "created": "2026-10-09T10:46:44.118157Z",
            "modified": "2026-10-09T10:46:44.118157Z",
            "name": "\ucd5c\uc2e0 APT \ucea0\ud398\uc778, \uc791\uc804\uba85 \uc720\ub839 \uaf2d\ub450\uac01\uc2dc(Operation Ghost Puppet)",
            "published": "2018-09-24T00:00:00Z",
            "object_refs": [
                "identity--16fdc541-545e-40c4-9896-0b4354ada896",
                "file--5a526275-4903-4a91-88df-cbb024c0ec46",
                "file--96884720-f7ec-41e9-b437-f38da6fa21e5",
                "file--a3f87cca-8bfa-43e3-aebe-832bb2f3a0f0",
                "file--273ae2a4-34b5-4d45-a308-32196b5fdee5",
                "file--e386e6dc-1cb1-4ed9-bb1e-e0a88dc8245e",
                "domain-name--71ab0469-fa3a-4397-a302-ee727da2d354",
                "ipv4-addr--98cac380-b259-4e27-a2ce-67a0d4395795",
                "ipv4-addr--21ce8143-db3e-42fc-b3ab-c97ccff02f2e",
                "ipv4-addr--76ab0e07-0828-4643-841d-aad1c48a9adb",
                "url--70c3fbda-02b4-4a01-80c1-335ff130bd8f",
                "url--688023f8-3b6a-44f8-ad63-c2b00c7aa513",
                "domain-name--afd6508d-7c62-4bac-911e-079363eb6ecb",
                "file--fdda567d-8712-443e-bcdb-64b8b59d3afb",
                "file--e940af9e-c6f2-4a62-b39a-6c4aeb3ed62f",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "http://blog.alyac.co.kr/1901"
                }
            ]
        }
    ]
}