{
    "type": "bundle",
    "id": "bundle--f9644f3f-9251-4c03-b3ae-e5e76d3d96d6",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--ab151e2a-8dd2-4da0-b46e-9f46411468fd",
            "created": "2023-04-19T12:05:43.224207Z",
            "modified": "2023-04-19T12:05:43.224255Z",
            "name": "Plainbit",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--63d7aa5d-03b3-49ed-9292-f0eeddd4f0a0",
            "value": "niscarea.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6b704352-e42e-482c-a157-05ab10f566fb",
            "value": "https://niscarea.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9eb072b3-b9ac-4930-8300-f7d32e9aa62d",
            "hashes": {
                "MD5": "e585226bcbec086b268528489103a6d5",
                "SHA-1": "808c6cdeed900ac6826577164b6e976cbf1dad4c",
                "SHA-256": "7c16d8376d4f6810b34fe304ad09c78ba761ec8a3df475b2b06aaaf1b9890185"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a151da12-fe92-47e3-8728-56139ed608f6",
            "hashes": {
                "MD5": "be0a4914e662724b7e924f35dce751c5",
                "SHA-1": "2eaf3e7a4a09328a18485d77f4f9e311d8391b99",
                "SHA-256": "fe6ab250b21d0e7a004b7d7c04fe941df1544ad42ac6fe6a7780d3b86ca8ef9f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95264b35-1208-4ed9-94c1-ca8693168448",
            "hashes": {
                "MD5": "24f6323110ac1e57eee2b2dc74886460",
                "SHA-1": "3e5e05cd544855062dbf42883bc925cd8f69f433",
                "SHA-256": "44ac75701e00a6eb9944820511c0d6741eff10992a0c8e8585a0c6c50b9ac013"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--33520c14-e8ce-48ca-87fc-e4eae54d0bb4",
            "hashes": {
                "MD5": "0a8ce62791c48d70f5d31b290cfbeb32",
                "SHA-1": "4bb62078ce695c11b6f5c92a4a3a4db5f57a5063",
                "SHA-256": "0fedef704651a14057de23729b8d6e6b9ff66e9df2de3c44b00ea6438467eb83"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2993c380-80e6-4a70-b785-86483296fd21",
            "hashes": {
                "MD5": "859700ae5a1a3302dc17063a6c9ee61b",
                "SHA-1": "d248d1522785f6b884e002f05ecb2a52a221b9a8",
                "SHA-256": "4ec01233ea91b3c33f1e7b0bfb1650692133225d27c0c73c3fbd6b753f76c917"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d56b7dc4-af68-4037-8792-66c2485356d7",
            "hashes": {
                "MD5": "b72cb01d8650a0a98bc8e62a86127ca0",
                "SHA-1": "896c5177e9e99f178764fcefd142796d95935441",
                "SHA-256": "64d0a194445f19184d3051572be9cdee9a997eef262f3217bf3b97e0030e602c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--eb66c65f-3520-45ee-aa40-37d4ca019c35",
            "hashes": {
                "MD5": "f070a3bd5efcced27baeae32ad25de36"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8878ef9d-3bc8-4d01-9a1b-1498e9e167a9",
            "hashes": {
                "MD5": "d8eb9c484c9d5e1dd3c60cdd41323433",
                "SHA-1": "79a7a0a51238da23be84094c41b8e857d4cfd751",
                "SHA-256": "e7578a381f0b25b05b987e94275a4b5bdbf6e6371fb59e69da25420273afdc07"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c35845dc-6f30-4238-b142-08803bbaa595",
            "hashes": {
                "MD5": "07f1c2d7f5877dea5bd8225533b3d19e",
                "SHA-1": "808559df18d05fffb931869b7927bef2c0596e4a",
                "SHA-256": "4fe21ab7d063ae6ed68f941d243bfffcbbb3f9360d608b7189355da16f684485"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cc9b864f-5f13-4e65-b793-c6ee2282643a",
            "value": "https://niscarea.com/out.php?cn="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--22932df6-8915-4656-b0c8-2b848b66d342",
            "value": "https://niscarea.com/in.php?cn="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0bfd086e-a2d6-46f4-bae4-b31e459d0871",
            "value": "https://niscarea.com/?cn="
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0dad4bc8-1c96-4d95-9231-62b2b81d368d",
            "hashes": {
                "MD5": "2548d0e05c47c506cf9fd668dace5497",
                "SHA-1": "8ac21a35158ba9ebf80493bdb8cf8eb81386a02b",
                "SHA-256": "fd47c8418d9f8ed39f2f746042c982ac53a788cace370ae8906aecc8c228deeb"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--132f3710-6fbe-47d8-878a-8591427209fc",
            "value": "https://niscarea.com/"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8f403dec-00b4-4fcc-89af-7ef22d018052",
            "created_by_ref": "identity--ab151e2a-8dd2-4da0-b46e-9f46411468fd",
            "created": "2026-10-09T11:53:51.513378Z",
            "modified": "2026-10-09T11:53:51.513378Z",
            "name": "Analysis of *.chm malware",
            "published": "2024-04-05T00:00:00Z",
            "object_refs": [
                "identity--ab151e2a-8dd2-4da0-b46e-9f46411468fd",
                "domain-name--63d7aa5d-03b3-49ed-9292-f0eeddd4f0a0",
                "url--6b704352-e42e-482c-a157-05ab10f566fb",
                "file--9eb072b3-b9ac-4930-8300-f7d32e9aa62d",
                "file--a151da12-fe92-47e3-8728-56139ed608f6",
                "file--95264b35-1208-4ed9-94c1-ca8693168448",
                "file--33520c14-e8ce-48ca-87fc-e4eae54d0bb4",
                "file--2993c380-80e6-4a70-b785-86483296fd21",
                "file--d56b7dc4-af68-4037-8792-66c2485356d7",
                "file--eb66c65f-3520-45ee-aa40-37d4ca019c35",
                "file--8878ef9d-3bc8-4d01-9a1b-1498e9e167a9",
                "file--c35845dc-6f30-4238-b142-08803bbaa595",
                "url--cc9b864f-5f13-4e65-b793-c6ee2282643a",
                "url--22932df6-8915-4656-b0c8-2b848b66d342",
                "url--0bfd086e-a2d6-46f4-bae4-b31e459d0871",
                "file--0dad4bc8-1c96-4d95-9231-62b2b81d368d",
                "url--132f3710-6fbe-47d8-878a-8591427209fc"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.plainbit.co.kr/chm-malware-analysis/"
                }
            ]
        }
    ]
}