{
    "type": "bundle",
    "id": "bundle--17d69ed5-9a3a-4287-8ffe-ba8d5e524d4a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2023-03-08T12:51:41.544512Z",
            "modified": "2025-02-04T10:54:04.972936Z",
            "name": "Ahnlab",
            "identity_class": "organization"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--156546c1-8827-4e91-8bf8-e707648ed13d",
            "value": "hansompay2008@yandex.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--51ac4d1a-7302-4e8a-b3ca-e435585762b2",
            "value": "hansom2008@protonmail.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2c8c3f94-dcca-4e32-9ae7-f4728a2d9a30",
            "value": "ntsgo.name"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e28f220f-2941-43f2-ac70-c37dcf7950e8",
            "value": "ntsgo-corp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--456138bc-8ef2-4f00-af5a-cf0a6c6a3cbb",
            "value": "koramate.fun"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d9e7e23c-06cd-49c6-9d18-358c3e5e1bf8",
            "value": "casinolegit.fun"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fcf73438-ed59-445b-9cd0-a3cece8a6487",
            "value": "http://desk-azureft.info/wp-include/wpmain.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e18056f5-a395-4cc5-a31e-91d5037e5f9a",
            "value": "http://casinosec.info/ms/beeLogo.webp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--06d8b6cd-7aee-4af4-a347-b30cf14c849b",
            "value": "http://casinolegit.info/ms/beeLogo.webp"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d51bca13-1a52-41ae-9b4d-719fac79122e",
            "hashes": {
                "MD5": "08e19a0d516d14e564359ee111ed2586"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--485b5737-9099-4de5-bd69-285f5549e4b9",
            "hashes": {
                "MD5": "07766e6e9d9f86775ad564a65af292c1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5c6060a4-b711-49a3-92dd-5a3ae1fa3b5e",
            "hashes": {
                "MD5": "01b58f2ff2c14feed46a0768ea46686d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5f29191-7256-4e64-8de8-99c3c6229f9d",
            "hashes": {
                "MD5": "12391f66ee33d379108fd649a999e1a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba6077b9-f7a1-4467-9cdb-ab3e262226fc",
            "hashes": {
                "MD5": "0d2e61c8a5e6280e065b61e75b848c68"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c3004426-0644-4a65-9eb5-1c92abd2c648",
            "value": "hesenorm.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3e48f327-3b06-4df6-904e-15ef991b5b55",
            "value": "www.fabioluciani.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f15722fc-7417-465f-8a84-bcaf9f23b397",
            "value": "http://hesenorm.info/download/pxt2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--cde42cad-0b50-408e-aa86-e7801ad1e37f",
            "value": "http://hesenorm.info/download/lcpy"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a64a26d6-6607-4843-8ab2-d8018ba4dc2d",
            "value": "http://hesenorm.info/download/xtps"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--be949199-89ca-5d89-9fb0-78bb61276214",
            "created": "2026-08-06T16:42:35.999777Z",
            "modified": "2026-08-06T16:42:35.999777Z",
            "name": "Larva-26005"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--293d7707-b13e-4e96-ac08-325306617a9f",
            "created_by_ref": "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
            "created": "2026-08-06T16:42:36.000511Z",
            "modified": "2026-08-06T16:42:36.000511Z",
            "name": "Analysis of the Connection Between Xctdoor and Past CRAT Attack Cases (Larva-26005)",
            "published": "2026-08-04T00:00:00Z",
            "object_refs": [
                "identity--eafdd258-8d1a-438d-bbef-6ca0d4a35852",
                "email-addr--156546c1-8827-4e91-8bf8-e707648ed13d",
                "email-addr--51ac4d1a-7302-4e8a-b3ca-e435585762b2",
                "domain-name--2c8c3f94-dcca-4e32-9ae7-f4728a2d9a30",
                "domain-name--e28f220f-2941-43f2-ac70-c37dcf7950e8",
                "domain-name--456138bc-8ef2-4f00-af5a-cf0a6c6a3cbb",
                "domain-name--d9e7e23c-06cd-49c6-9d18-358c3e5e1bf8",
                "url--fcf73438-ed59-445b-9cd0-a3cece8a6487",
                "url--e18056f5-a395-4cc5-a31e-91d5037e5f9a",
                "url--06d8b6cd-7aee-4af4-a347-b30cf14c849b",
                "file--d51bca13-1a52-41ae-9b4d-719fac79122e",
                "file--485b5737-9099-4de5-bd69-285f5549e4b9",
                "file--5c6060a4-b711-49a3-92dd-5a3ae1fa3b5e",
                "file--a5f29191-7256-4e64-8de8-99c3c6229f9d",
                "file--ba6077b9-f7a1-4467-9cdb-ab3e262226fc",
                "domain-name--c3004426-0644-4a65-9eb5-1c92abd2c648",
                "domain-name--3e48f327-3b06-4df6-904e-15ef991b5b55",
                "url--f15722fc-7417-465f-8a84-bcaf9f23b397",
                "url--cde42cad-0b50-408e-aa86-e7801ad1e37f",
                "url--a64a26d6-6607-4843-8ab2-d8018ba4dc2d",
                "threat-actor--be949199-89ca-5d89-9fb0-78bb61276214"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://asec.ahnlab.com/en/94847"
                }
            ]
        }
    ]
}