{
    "type": "bundle",
    "id": "bundle--fc515393-d2d1-40fa-ac0a-20e08fd32b38",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c28b8777-db68-444a-8463-48d657aaf02e",
            "created": "2025-02-16T23:05:00.781643Z",
            "modified": "2025-02-16T23:05:00.781679Z",
            "name": "BlueEye",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--68959cec-8748-46e4-814e-00f44f22314c",
            "hashes": {
                "SHA-256": "fcb687685f71615c83e9af26087e6036d7dd52a91339ef5c58d3150fd402a586"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7ad8bfc7-fde9-46a9-97e2-1691e660e219",
            "hashes": {
                "MD5": "cf1947c7af6581f4a66460ae6d14dc2f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--daff386e-afce-4689-a37b-c4413480304c",
            "hashes": {
                "MD5": "1d5ad4a60ec9be32c11ad99f234bfe8f",
                "SHA-1": "be6909ba6e0b4d228da5b9daccc83f7082c06cf2",
                "SHA-256": "f59035192098e44b86c4648a0de4078edbe80352260276f4755d15d354f5fc58"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--10830d75-1653-4fd7-8223-311c4d1428f4",
            "hashes": {
                "MD5": "183a514a151388d8348689922cc62929",
                "SHA-1": "a5d8058842a864f0ca571afae08ddc27f90bf107",
                "SHA-256": "d65e05c961107c787310c4f369034b096f9484c328b43140d0eb90820c833f9f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--acda07f0-835c-4194-8cab-ef9ce0f78e52",
            "hashes": {
                "MD5": "4745f0dbe50ba732cffb72c3cb62e51a",
                "SHA-1": "44295938e2cf01cdce8dacf1d54965b192a30c03",
                "SHA-256": "63fb47c3b4693409ebadf8a5179141af5cf45a46d1e98e5f763ca0d7d64fb17c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--86f6ca3e-b943-4b5d-b808-83606b6fc75e",
            "hashes": {
                "MD5": "420a13202d271babc32bf8259cdaddf3",
                "SHA-1": "7221445c823d67f03b438a3c83583f9364a7f0b4",
                "SHA-256": "00433ebf3b21c1c055d4ab8a599d3e84f03b328496236b54e56042cef2146b1c"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
            "created": "2026-09-19T08:49:59.296924Z",
            "modified": "2026-09-19T08:49:59.296924Z",
            "name": "MoonstoneSleet"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--558f1b7d-44ea-45f3-acd7-d143d7fddd68",
            "created_by_ref": "identity--c28b8777-db68-444a-8463-48d657aaf02e",
            "created": "2026-09-19T08:49:59.297209Z",
            "modified": "2026-09-19T08:49:59.297209Z",
            "name": "Analysis of attack activities of Moonstone sleet a division of APT-C-26 (Lazarus) group",
            "published": "2025-02-16T00:00:00Z",
            "object_refs": [
                "identity--c28b8777-db68-444a-8463-48d657aaf02e",
                "file--68959cec-8748-46e4-814e-00f44f22314c",
                "file--7ad8bfc7-fde9-46a9-97e2-1691e660e219",
                "file--daff386e-afce-4689-a37b-c4413480304c",
                "file--10830d75-1653-4fd7-8223-311c4d1428f4",
                "file--acda07f0-835c-4194-8cab-ef9ce0f78e52",
                "file--86f6ca3e-b943-4b5d-b808-83606b6fc75e",
                "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blu3eye.gitbook.io/malware-insight/moonstone-sleet-trojaned-putty"
                }
            ]
        }
    ]
}