{
    "type": "bundle",
    "id": "bundle--98eda0c2-82d9-4437-a0d5-3f87542d7d9a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2023-03-08T12:51:44.657627Z",
            "modified": "2024-09-04T07:23:22.792387Z",
            "name": "Mandiant",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fcc06304-3f3e-4f2b-9907-2c7d3ca08331",
            "hashes": {
                "MD5": "19dbffec4e359a198daf4ffca1ab9165",
                "SHA-1": "d7ba13662fbfb254acaad7ae10ad51e0bd631933",
                "SHA-256": "24d5dd3006c63d0f46fb33cbc1f576325d4e7e03e3201ff4a3c1ffa604f1b74a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f1aea897-7811-4835-80fc-c4b0348418bb",
            "hashes": {
                "MD5": "451c23709ecd5a8461ad060f6346930c",
                "SHA-1": "58b0516d28bd7218b1908fb266b8fe7582e22a5f",
                "SHA-256": "5e40d106977017b1ed235419b1e59ff090e1f43ac57da1bb5d80d66ae53b1df8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1be35da8-464c-447a-ae18-4279595e5b6f",
            "hashes": {
                "MD5": "c6441c961dcad0fe127514a918eaabd4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--99b1a727-3d68-4d3b-823f-8443b213f6a5",
            "hashes": {
                "MD5": "ef4ab22e565684424b4142b1294f1f4d"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--cff8908d-57a1-512f-bd0b-ed3caeeb6f2a",
            "created": "2026-09-20T07:24:03.051093Z",
            "modified": "2026-09-20T07:24:03.051093Z",
            "name": "UNC4736"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3d9dcb59-3b15-5b41-84dc-b0c75d0e31d0",
            "created": "2026-09-20T07:24:03.052178Z",
            "modified": "2026-09-20T07:24:03.052178Z",
            "name": "UNC4469"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a0d04ae8-b2be-5383-8f1f-66de4ce741d1",
            "created": "2026-09-20T07:24:03.052822Z",
            "modified": "2026-09-20T07:24:03.052822Z",
            "name": "UNC3782"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--82593d24-5d4f-4df2-bbd2-16471a287548",
            "created_by_ref": "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
            "created": "2026-09-20T07:24:03.066035Z",
            "modified": "2026-09-20T07:24:03.066035Z",
            "name": "3CX Software Supply Chain Compromise Initiated by a Prior Software Supply Chain Compromise; Suspected North Korean Actor Responsible",
            "published": "2023-04-20T00:00:00Z",
            "object_refs": [
                "identity--2b96b5d7-2075-4d96-9706-4b67d615e67c",
                "file--fcc06304-3f3e-4f2b-9907-2c7d3ca08331",
                "file--f1aea897-7811-4835-80fc-c4b0348418bb",
                "file--1be35da8-464c-447a-ae18-4279595e5b6f",
                "file--99b1a727-3d68-4d3b-823f-8443b213f6a5",
                "threat-actor--cff8908d-57a1-512f-bd0b-ed3caeeb6f2a",
                "threat-actor--3d9dcb59-3b15-5b41-84dc-b0c75d0e31d0",
                "threat-actor--a0d04ae8-b2be-5383-8f1f-66de4ce741d1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise"
                }
            ]
        }
    ]
}