{
    "type": "bundle",
    "id": "bundle--41b00f6f-5639-4d81-ab86-23b07e0f518b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2023-05-23T01:10:41.336415Z",
            "modified": "2024-09-11T13:26:42.312985Z",
            "name": "Genians",
            "identity_class": "organization"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--4e099493-3ff1-40fd-b4b9-bfc94eceb54c",
            "value": "c0653159@gmail.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--98aebded-ab79-4eca-9e36-904da117f9df",
            "value": "inmain.22web.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ecf54ea0-d932-43c5-9ab6-b451c248fe4f",
            "value": "nid.weffm.p-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9485d3a8-30d2-40c0-a939-df44328132d9",
            "value": "oppsite.dothome.co.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--645c0af6-9c3e-4c47-abc2-5188b947b0ef",
            "value": "185.27.134.207"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f5b5d217-5b7b-4284-ba35-70dbf86ee9da",
            "value": "207.148.112.166"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b8be4f01-c799-4451-9be4-92630590cbde",
            "value": "211.223.14.75"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--45d38a27-b422-492a-9bc1-5603624c7aa0",
            "hashes": {
                "MD5": "a15df586bf29e7c1a5db64d603cee382"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--28cb7d69-d99b-4215-946b-6df41fee5678",
            "hashes": {
                "MD5": "a151531b792b1df1eec8d3a6a8e1ded5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d51c9829-438f-4ac3-8bcb-521ed15d8e11",
            "hashes": {
                "MD5": "6985f297c03520a5852734a385322d8d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bbf34695-237c-45a4-ba0c-dff40cd04c76",
            "hashes": {
                "MD5": "ef317291bf88651666133abe84f115f0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6581a557-0577-4830-84a0-a6c51c63e491",
            "hashes": {
                "MD5": "cbcb66b530fb4f03d7dc9d55271b2ce4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--1d902443-8a00-4e18-89a5-0cd2331ffc25",
            "hashes": {
                "MD5": "7575d230350299cfde0c4f993d761333"
            }
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c37d3b01-b739-4947-b12d-3f067b6d7bbc",
            "value": "103.81.116.10"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--31367856-cfae-4a4b-96c6-0e035bea13c7",
            "value": "epaper.dothome.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--16e3b93d-19fd-4cfa-92d4-e1fff7a2e733",
            "value": "owna.loveslife.biz"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a6e118b3-6f0e-4840-a29b-11aa1f3912cb",
            "value": "185.27.134.120"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-11-15T13:52:24.009167Z",
            "modified": "2026-11-15T13:52:24.009167Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--aad91845-3f24-4254-93d6-713ba2bc13c1",
            "created_by_ref": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2026-11-15T13:52:24.012753Z",
            "modified": "2026-11-15T13:52:24.012753Z",
            "name": "Analysis of NodeLinkRAT, a New North Korea-Linked RAT Abusing Public Note Services as C2",
            "published": "2026-11-15T00:00:00Z",
            "object_refs": [
                "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
                "email-addr--4e099493-3ff1-40fd-b4b9-bfc94eceb54c",
                "domain-name--98aebded-ab79-4eca-9e36-904da117f9df",
                "domain-name--ecf54ea0-d932-43c5-9ab6-b451c248fe4f",
                "domain-name--9485d3a8-30d2-40c0-a939-df44328132d9",
                "ipv4-addr--645c0af6-9c3e-4c47-abc2-5188b947b0ef",
                "ipv4-addr--f5b5d217-5b7b-4284-ba35-70dbf86ee9da",
                "ipv4-addr--b8be4f01-c799-4451-9be4-92630590cbde",
                "file--45d38a27-b422-492a-9bc1-5603624c7aa0",
                "file--28cb7d69-d99b-4215-946b-6df41fee5678",
                "file--d51c9829-438f-4ac3-8bcb-521ed15d8e11",
                "file--bbf34695-237c-45a4-ba0c-dff40cd04c76",
                "file--6581a557-0577-4830-84a0-a6c51c63e491",
                "file--1d902443-8a00-4e18-89a5-0cd2331ffc25",
                "ipv4-addr--c37d3b01-b739-4947-b12d-3f067b6d7bbc",
                "domain-name--31367856-cfae-4a4b-96c6-0e035bea13c7",
                "domain-name--16e3b93d-19fd-4cfa-92d4-e1fff7a2e733",
                "ipv4-addr--a6e118b3-6f0e-4840-a29b-11aa1f3912cb",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.genians.co.kr/en/blog/threat_intelligence/nodelinkrat"
                }
            ]
        }
    ]
}