{
    "type": "bundle",
    "id": "bundle--225b895c-e6d1-4648-88bf-825eff228d35",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2023-05-23T01:10:41.336415Z",
            "modified": "2024-09-11T13:26:42.312985Z",
            "name": "Genians",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ee951174-0e7d-4d00-89be-7c0dc9cf6683",
            "hashes": {
                "MD5": "f960ce07c519d1e64a46c7f573eac39b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9317272c-b118-4cb7-873b-edbc6f08d227",
            "hashes": {
                "MD5": "2a388f3428a6d44a66f5cb0b210379a0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ff7ff6b8-08dd-46d5-9fc5-aa2cb53b0b30",
            "hashes": {
                "MD5": "b9c2111c753b09e4cc9d497f8fd314fc",
                "SHA-1": "f28e3aff6df8bc8badcee45af5cc431285894fbe",
                "SHA-256": "cb5a57021b10d281720cc353697518e181688f1a1f70808a59f6a4832432eac4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--76221f8e-334f-49e4-bd8a-63f3b898fa47",
            "hashes": {
                "MD5": "07015af18cf8561866bc5b07e6f70d9a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--44f5f7c9-3bed-440c-abaa-72624181c0e1",
            "hashes": {
                "MD5": "5a223c70b65c4d74fea98ba39bf5d127"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5228ba1e-9f02-4f24-954c-0711dc335a19",
            "hashes": {
                "MD5": "fb3c652e795f08cc2529ed33ec1dc114"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2f5bfd0f-bd0d-480a-9140-45644707e910",
            "hashes": {
                "MD5": "afadab22f770956712e9c47460911dad"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--76aaa9e8-194a-41c2-981b-2da3aeca28c7",
            "hashes": {
                "MD5": "7a0c0a4c550a95809e93ab7e6bdcc290",
                "SHA-1": "a9d3519f65889f411ec00dd9fd22e94403bf37e5",
                "SHA-256": "c1958894129800843f627bc791ae046f9f4c5b26a4cb7bd7b6d684b110be690a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9eb969b0-de8e-4261-bc33-f92106c3afc7",
            "hashes": {
                "MD5": "bfb02dee62c38c3385df92b308499b31"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2783f3fc-6986-48aa-b2bb-b394b1c59473",
            "hashes": {
                "MD5": "b128c5db5d973be60f39862ba8bfb152"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--83a973c5-cd69-4461-b5b8-cba763737e97",
            "hashes": {
                "MD5": "f14f332d4273de04ba77e38fd3dcff90",
                "SHA-1": "ff10fff72e3c5c65692d7b1efbb61096057a75f1",
                "SHA-256": "84f4f2e77b6e59c1fe54360842821fbfc6cdab039f197147b30876ed7da3647c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--3fa2d6bd-3dc4-4ba2-924f-a23a1a109d6e",
            "hashes": {
                "MD5": "ca3926dc6c4b2a71832a03fba366cbcd",
                "SHA-1": "a81f4b43ecf32c7824dfa7caa603a799104c4fd4",
                "SHA-256": "5b8f6d76e9f63920654266814daa12e80ad13cf07e87c29a9a8e167a7bf4ea4a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2360e517-c96d-4aca-9f13-fc550e792f09",
            "hashes": {
                "MD5": "f4d59b1246e861a2a626cb56c55651f0"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f839ba4e-6dba-4500-87b6-73954c216b4d",
            "hashes": {
                "MD5": "779f2f4839b9be4f0b8c96f117181334"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--61abc4f3-fce5-4a0f-b4d9-08e9fc2ec3c7",
            "hashes": {
                "MD5": "568f7628e6b7bb7106a1a82aebfd348d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed463733-9af3-4c85-a1cc-c09425d0defb",
            "hashes": {
                "MD5": "fe8626e7c3f47a048c9f6c13c88a9463",
                "SHA-1": "f112802f75f53017a46396bf2b78879bf4e73b86",
                "SHA-256": "bb633f41f4ed17f4ea163aebbfcff1bbff2378ec26415f464ab4e53d568ac406"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ae982fb3-bf79-4e19-a368-d0eb22455151",
            "hashes": {
                "MD5": "46fd22acea614407bf11d92eb6736dc7"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--440b0276-0258-4f57-9d8b-fd5bfc2d4b50",
            "value": "onsungtong.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0c2e67a9-e547-42d3-80ba-f2e9d607724c",
            "value": "nauji.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--664652b0-e810-444e-b40e-a38434ba1e99",
            "value": "jieun.dothome.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bf4005d9-f0fc-48d5-b1a0-a6ece0e76218",
            "value": "afcafe.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--062bf31f-7f23-4953-90bd-55d4a07d682a",
            "value": "nomera.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7c0feeee-2c00-4ba4-89ba-1e85075f3dad",
            "value": "nocamoto.o-r.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--78f8b790-4791-434a-98cc-5f6af72cf73d",
            "value": "woana.n-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--bad33279-df62-4e14-89d2-0040f0d3b4a6",
            "hashes": {
                "MD5": "30741e7e4cdd8ba9d3d074c42deac9b1",
                "SHA-1": "7ffd3f157f4a58e8253560676baa9efcf157cd25",
                "SHA-256": "d66c69b99e978727d5ffdf75ab0c969b80c297dd41a648f97bf241264e62afc5"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8d477b2e-749f-405d-bf55-f2e567f4d88d",
            "value": "vamboo.n-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06be3c38-60ae-4f79-a95e-d2829e29f446",
            "hashes": {
                "MD5": "2f6fe22be1ed2a6ba42689747c9e18a0",
                "SHA-1": "44ac07c6f2daf0c1b2778e216ece44e8708bd009",
                "SHA-256": "de60612226ea59961e655ad83d23fb501be0e5ea4f0ba4aab4e30495abfaf742"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c92758cb-8914-47aa-843e-9715e839861a",
            "hashes": {
                "MD5": "8346d90508b5d41d151b7098c7a3e868",
                "SHA-1": "20ea6517f4490dc504756299263a06b1cc8e87e0",
                "SHA-256": "24a42a912c6ad98ab3910cb1e031edbdf9ed6f452371d5696006c9cf24319147"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--914e53de-847b-46dd-b169-e239caabaa03",
            "hashes": {
                "MD5": "537806c02659a12c5b21efa51b2322c1",
                "SHA-1": "c90a00b80670da65da968e0503f41b433888b9d2",
                "SHA-256": "3314b6ea393e180c20db52448ab6980343bc3ed623f7af91df60189fec637744"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--55234dcf-76e5-4b83-aec5-a23a3c9bd50e",
            "value": "download.uberlingen.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--decec006-31be-4ec4-ab65-255873c0c60b",
            "hashes": {
                "MD5": "7756b4230adfa16e18142d1dbe6934af",
                "SHA-1": "9e05b7b0cf99b9b12333d24b3e93348f8f7c0295",
                "SHA-256": "6a38c84efe52d8e7298d62809ef59a28b74575f09e7199a6b7f6bf3762a2de44"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fe03547f-d5a1-44a3-b3d1-701e57a6aed5",
            "value": "peras1.n-e.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--99e0c619-87ff-4ede-a056-56f04e7e9563",
            "value": "hyper.cadorg.p-e.kr"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7f564c4a-1a24-4b47-9294-7c6719735476",
            "hashes": {
                "MD5": "ec9dcef04c5c89d6107d23b0668cc1c1",
                "SHA-1": "43d43312ebf9123e805e7e56e719d9a72f4ce70e",
                "SHA-256": "ddd13d9ddcef9c3e96be9280a756907be0b7a014451e07e0857ce7738f67045f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8a1497dc-f0e7-41be-8245-7eb90e7a5639",
            "hashes": {
                "MD5": "1ae2e46aac55e7f92c72b56b387bc945",
                "SHA-1": "b8dca661d0ce76e5a8b447de6fc1a864768289fa",
                "SHA-256": "6d8c5194c7e728b394c5f419d666ed8f178e696c707fd6071f7bf33a2e6e8b79"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b0237f4a-6d44-41eb-a6eb-278292526099",
            "value": "dirwear.000webhostapp.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-19T09:25:55.339001Z",
            "modified": "2026-09-19T09:25:55.339001Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--f1f865a5-1da8-437d-b25a-8fa4912cbdd6",
            "created_by_ref": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2026-09-19T09:25:55.339771Z",
            "modified": "2026-09-19T09:25:55.339771Z",
            "name": "Analysis of the Triple Combo Threat of the Kimsuky Group",
            "published": "2025-06-09T00:00:00Z",
            "object_refs": [
                "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
                "file--ee951174-0e7d-4d00-89be-7c0dc9cf6683",
                "file--9317272c-b118-4cb7-873b-edbc6f08d227",
                "file--ff7ff6b8-08dd-46d5-9fc5-aa2cb53b0b30",
                "file--76221f8e-334f-49e4-bd8a-63f3b898fa47",
                "file--44f5f7c9-3bed-440c-abaa-72624181c0e1",
                "file--5228ba1e-9f02-4f24-954c-0711dc335a19",
                "file--2f5bfd0f-bd0d-480a-9140-45644707e910",
                "file--76aaa9e8-194a-41c2-981b-2da3aeca28c7",
                "file--9eb969b0-de8e-4261-bc33-f92106c3afc7",
                "file--2783f3fc-6986-48aa-b2bb-b394b1c59473",
                "file--83a973c5-cd69-4461-b5b8-cba763737e97",
                "file--3fa2d6bd-3dc4-4ba2-924f-a23a1a109d6e",
                "file--2360e517-c96d-4aca-9f13-fc550e792f09",
                "file--f839ba4e-6dba-4500-87b6-73954c216b4d",
                "file--61abc4f3-fce5-4a0f-b4d9-08e9fc2ec3c7",
                "file--ed463733-9af3-4c85-a1cc-c09425d0defb",
                "file--ae982fb3-bf79-4e19-a368-d0eb22455151",
                "domain-name--440b0276-0258-4f57-9d8b-fd5bfc2d4b50",
                "domain-name--0c2e67a9-e547-42d3-80ba-f2e9d607724c",
                "domain-name--664652b0-e810-444e-b40e-a38434ba1e99",
                "domain-name--bf4005d9-f0fc-48d5-b1a0-a6ece0e76218",
                "domain-name--062bf31f-7f23-4953-90bd-55d4a07d682a",
                "domain-name--7c0feeee-2c00-4ba4-89ba-1e85075f3dad",
                "domain-name--78f8b790-4791-434a-98cc-5f6af72cf73d",
                "file--bad33279-df62-4e14-89d2-0040f0d3b4a6",
                "domain-name--8d477b2e-749f-405d-bf55-f2e567f4d88d",
                "file--06be3c38-60ae-4f79-a95e-d2829e29f446",
                "file--c92758cb-8914-47aa-843e-9715e839861a",
                "file--914e53de-847b-46dd-b169-e239caabaa03",
                "domain-name--55234dcf-76e5-4b83-aec5-a23a3c9bd50e",
                "file--decec006-31be-4ec4-ab65-255873c0c60b",
                "domain-name--fe03547f-d5a1-44a3-b3d1-701e57a6aed5",
                "domain-name--99e0c619-87ff-4ede-a056-56f04e7e9563",
                "file--7f564c4a-1a24-4b47-9294-7c6719735476",
                "file--8a1497dc-f0e7-41be-8245-7eb90e7a5639",
                "domain-name--b0237f4a-6d44-41eb-a6eb-278292526099",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.genians.co.kr/en/blog/threat_intelligence/triple-combo"
                }
            ]
        }
    ]
}