{
    "type": "bundle",
    "id": "bundle--5148eff1-b4d8-4b86-baca-89b092e9e2c2",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--745668c5-3886-4b79-bbba-b48f3d17c9c5",
            "created": "2024-01-19T09:10:16.769103Z",
            "modified": "2025-08-05T13:31:51.975478Z",
            "name": "Whoisxmlapi",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8667e3a8-57a0-4e99-b4e1-87ae4236a12d",
            "value": "218.150.78.231"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4c873cf0-1914-437f-b2d1-8a2097a8489a",
            "value": "121.254.222.10"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b8cd57e2-7652-4781-88ea-17c48e57e42b",
            "value": "webhostingkorea.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4b9f4de4-662f-4101-96ba-f4e893788ff7",
            "value": "61.100.9.206"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e90b136e-2715-42a7-9dd7-08b39af6d3ec",
            "value": "novel21.co.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dccf2f6e-2f39-4852-918e-5209c745e8c6",
            "value": "daehoat.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7483bf67-c827-4676-b858-c0d3fb225282",
            "value": "121.254.222.80"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--13f065d5-b058-479e-91fb-f61c6a271340",
            "value": "crwellfood.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bcaa992a-2519-405c-83dd-f5f1d88f6636",
            "value": "211.239.157.126"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8ececab2-faa6-4f21-993f-b14f5c672895",
            "value": "fe01.co.kr"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--83c78600-2bf3-49e4-b515-68ffb390d491",
            "value": "218.150.78.198"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-08-12T18:47:10.136818Z",
            "modified": "2026-08-12T18:47:10.136818Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--bd27ef88-c7d4-41c4-a803-5df5bc9070f2",
            "created_by_ref": "identity--745668c5-3886-4b79-bbba-b48f3d17c9c5",
            "created": "2026-08-12T18:47:10.138004Z",
            "modified": "2026-08-12T18:47:10.138004Z",
            "name": "APT37 Strikes Again, This Time with NarwhalRAT",
            "published": "2026-07-28T00:00:00Z",
            "object_refs": [
                "identity--745668c5-3886-4b79-bbba-b48f3d17c9c5",
                "ipv4-addr--8667e3a8-57a0-4e99-b4e1-87ae4236a12d",
                "ipv4-addr--4c873cf0-1914-437f-b2d1-8a2097a8489a",
                "domain-name--b8cd57e2-7652-4781-88ea-17c48e57e42b",
                "ipv4-addr--4b9f4de4-662f-4101-96ba-f4e893788ff7",
                "domain-name--e90b136e-2715-42a7-9dd7-08b39af6d3ec",
                "domain-name--dccf2f6e-2f39-4852-918e-5209c745e8c6",
                "ipv4-addr--7483bf67-c827-4676-b858-c0d3fb225282",
                "domain-name--13f065d5-b058-479e-91fb-f61c6a271340",
                "ipv4-addr--bcaa992a-2519-405c-83dd-f5f1d88f6636",
                "domain-name--8ececab2-faa6-4f21-993f-b14f5c672895",
                "ipv4-addr--83c78600-2bf3-49e4-b515-68ffb390d491",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://main.whoisxmlapi.com/threat-reports/apt37-strikes-again-this-time-with-narwhalrat"
                }
            ]
        }
    ]
}